Merge master into staging-next

    name = "Robert Walter";

  };

  roconnor = {

    email = "roconnor@theorem.ca";

    email = "roconnor@r6.ca";

    github = "roconnor";

    githubId = 852967;

    name = "Russell O'Connor";

  release notes of [v19](https://github.com/systemd/mkosi/releases/tag/v19) and

  [v20](https://github.com/systemd/mkosi/releases/tag/v20) for a list of changes.

- The `woodpecker-*` packages have been updated to v2 which includes [breaking changes](https://woodpecker-ci.org/docs/next/migrations#200).

- `services.nginx` will no longer advertise HTTP/3 availability automatically. This must now be manually added, preferably to each location block.

  Example:

        fi

      '' + optionalString (cfg.database.passwordFile != null) ''

        # create a copy of the supplied password file in a format zabbix can consume

        touch ${passwordFile}

        chmod 0600 ${passwordFile}

        echo -n "DBPassword = " > ${passwordFile}

        cat ${cfg.database.passwordFile} >> ${passwordFile}

        install -m 0600 <(echo "DBPassword = $(cat ${cfg.database.passwordFile})") ${passwordFile}

      '';

      serviceConfig = {

        fi

      '' + optionalString (cfg.database.passwordFile != null) ''

        # create a copy of the supplied password file in a format zabbix can consume

        touch ${passwordFile}

        chmod 0600 ${passwordFile}

        echo -n "DBPassword = " > ${passwordFile}

        cat ${cfg.database.passwordFile} >> ${passwordFile}

        install -m 0600 <(echo "DBPassword = $(cat ${cfg.database.passwordFile})") ${passwordFile}

      '';

      serviceConfig = {

          };

          "/" = {

            # mixed frontend and backend requests, based on the request headers

            proxyPass = "$proxpass";

            recommendedProxySettings = true;

            extraConfig = ''

              set $proxpass "${ui}";

              # Cuts off the trailing slash on URLs to make them valid

              rewrite ^(.+)/+$ $1 permanent;

              proxy_pass $proxpass;

            '';

          };

        };