Merge master into staging-nixos

- `cargo-codspeed` has been updated from `3.0.5` to `4.2.0`. Version `4.0.0` includes breaking changes. For more information read the [changelog for 4.0.0](https://github.com/CodSpeedHQ/codspeed-rust/releases/tag/v4.0.0).

- `commafeed` has been updated to version 7.0.0, which includes changes impacting its security. Please see [upstream's release notes](https://github.com/Athou/commafeed/releases/tag/7.0.0) for details.

- `corepack_latest` has been removed, as Corepack is no longer distributed with Node.js.

- `nodePackages.browser-sync` has been removed, as it was unmaintained within nixpkgs.

    githubId = 6375609;

    name = "Bob van der Linden";

  };

  bodier123 = {

    email = "brubacher.1@gmail.com";

    github = "bodier123";

    githubId = 71633864;

    name = "Bodie";

  };

  bodil = {

    email = "nix@bodil.org";

    github = "bodil";

      }

    ];

  };

  cameroncuttingedge = {

    email = "buckets-taxiway5l@icloud.com";

    github = "cameroncuttingedge";

    githubId = 109548666;

    name = "Cameron Byte";

  };

  camerondugan = {

    email = "cameron.dugan@protonmail.com";

    github = "camerondugan";

- [QGroundControl], a ground station support and configuration manager for the PX4 and APM Flight Stacks. Available as [programs.qgroundcontrol](options.html#opt-programs.qgroundcontrol.enable).

- [Eintopf](https://eintopf.info), a community event and calendar web application. Available as [services.eintopf](options.html#opt-services.eintopf.enable).

- [Eintopf](https://eintopf.info), a community event and calendar web application. Available as `services.eintopf`.

- [`pay-respects`](https://codeberg.org/iff/pay-respects), a terminal command correction program, alternative to `thefuck`, written in Rust. Available as [programs.pay-respects](options.html#opt-programs.pay-respects).

- [Shoko](https://shokoanime.com), an anime management system. Available as [services.shoko](#opt-services.shoko.enable).

- [perses](https://perses.dev/), the open dashboard tool for Prometheus and other data sources. Available as [services.perses](#opt-services.perses.enable).

- [Drasl](https://github.com/unmojang/drasl), an alternative authentication server for Minecraft. Available as [services.drasl](#opt-services.drasl.enable).

## Backward Incompatibilities {#sec-release-26.05-incompatibilities}

- `sing-box` has been updated to 1.13.0, which has removed some deprecated options.  See [upstream documentation](https://sing-box.sagernet.org/configuration/) for details and migration options.

- `services.statsd` has been removed because the packages it relies on do not exist anymore in nixpkgs.

- `services.tandoor-recipes` now uses a sub-directory for media files by default starting with `26.05`. Existing setups should move media files out of the data directory and adjust `services.tandoor-recipes.extraConfig.MEDIA_ROOT` accordingly. See [Migrating media files for pre 26.05 installations](#module-services-tandoor-recipes-migrating-media).

- `rustic` was upgraded to `0.11.x`, which contains breaking [changes to command-line parameters and configuration file](https://rustic.cli.rs/docs/breaking_changes.html#0110).

- The packages `iw` and `wirelesstools` (`iwconfig`, `iwlist`, etc.) are no longer installed implicitly if wireless networking has been enabled.

- `services.uptime` has been removed because the package it relies on does not exist anymore in nixpkgs.

- `services.kubernetes.addons.dns.coredns` has been renamed to `services.kubernetes.addons.dns.corednsImage` and now expects a

package instead of attrs. Now, by default, nixpkgs.coredns in conjunction with dockerTools.buildImage is used, instead

of pulling the upstream container image from Docker Hub. If you want the old behavior, you can set:

  - `systemd.services.stalwart` owned by `stalwart:stalwart`. The `user` and `group` are configurable via `services.stalwart.user` and `services.stalwart.group`, respectively. By default, if `stateVersion` is older than `26.05`, will fallback to legacy value of `stalwart-mail` for both `user` and `group`.

  - Default value for `services.stalwart.dataDir` has changed to `/var/lib/stalwart`. If `stateVersion` is older than `26.05`, will fallback to legacy value of `/var/lib/stalwart-mail`.

- `services.eintopf` has been renamed to `services.lauti` to align with upstream re-brand as a community online calendar.

- `services.oauth2-proxy.clientSecret` and `services.oauth2-proxy.cookie.secret` have been replaced with `services.oauth2-proxy.clientSecretFile` and `services.oauth2-proxy.cookie.secretFile` respectively. This was done to ensure secrets don't get made world-readable.

- [`services.grafana.settings.security.secret_key`](#opt-services.grafana.settings.security.secret_key) doesn't have a

- [services.resolved](#opt-services.resolved.enable) module was converted to RFC42-style settings. The moved options have also been renamed to match the upstream names. Aliases mean current configs will continue to function, but users should move to the new options as convenient.

- `systemd.sleep.extraConfig` was replaced by [RFC 0042](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md)-compliant `systemd.sleep.settings.Sleep`, which is used to generate the `sleep.conf` configuration file. See {manpage}`sleep.conf.d(5)` for available options.

- Support for Bluetooth audio based on `bluez-alsa` has been added to the `hardware.alsa` module. It can be enabled with the new [enableBluetooth](#opt-hardware.alsa.enableBluetooth) option.

- `services.openssh` now supports generating host SSH keys by setting `services.openssh.generateHostKeys = true` while leaving `services.openssh.enable` disabled.  This is particularly useful for systems that have no need of an SSH daemon but want SSH host keys for other purposes such as using agenix or sops-nix.

  ./services/monitoring/opentelemetry-collector.nix

  ./services/monitoring/osquery.nix

  ./services/monitoring/parsedmarc.nix

  ./services/monitoring/perses.nix

  ./services/monitoring/pgscv.nix

  ./services/monitoring/prometheus/alertmanager-gotify-bridge.nix

  ./services/monitoring/prometheus/alertmanager-irc-relay.nix

  ./services/monitoring/scrutiny.nix

  ./services/monitoring/smartd.nix

  ./services/monitoring/snmpd.nix

  ./services/monitoring/statsd.nix

  ./services/monitoring/sysstat.nix

  ./services/monitoring/teamviewer.nix

  ./services/monitoring/telegraf.nix

  ./services/monitoring/unpoller.nix

  ./services/monitoring/ups.nix

  ./services/monitoring/uptime-kuma.nix

  ./services/monitoring/uptime.nix

  ./services/monitoring/vlagent.nix

  ./services/monitoring/vmagent.nix

  ./services/monitoring/vmalert.nix

  ./services/web-apps/drasl.nix

  ./services/web-apps/drupal.nix

  ./services/web-apps/echoip.nix

  ./services/web-apps/eintopf.nix

  ./services/web-apps/engelsystem.nix

  ./services/web-apps/ente.nix

  ./services/web-apps/fediwall.nix

  ./services/web-apps/lanraragi.nix

  ./services/web-apps/lasuite-docs.nix

  ./services/web-apps/lasuite-meet.nix

  ./services/web-apps/lauti.nix

  ./services/web-apps/lemmy.nix

  ./services/web-apps/librechat.nix

  ./services/web-apps/librespeed.nix