Merge master into staging-next

- [RustDesk](https://rustdesk.com), a full-featured open source remote control alternative for self-hosting and security with minimal configuration. Alternative to TeamViewer.

- [systemd-lock-handler](https://git.sr.ht/~whynothugo/systemd-lock-handler/), a bridge between logind D-Bus events and systemd targets. Available as [services.systemd-lock-handler.enable](#opt-services.systemd-lock-handler.enable).

## Backward Incompatibilities {#sec-release-24.05-incompatibilities}

<!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

- [Lilypond](https://lilypond.org/index.html) and [Denemo](https://www.denemo.org) are now compiled with Guile 3.0.

- The following options of the Nextcloud module were moved into [`services.nextcloud.extraOptions`](#opt-services.nextcloud.extraOptions) and renamed to match the name from Nextcloud's `config.php`:

  - `logLevel` -> [`loglevel`](#opt-services.nextcloud.extraOptions.loglevel),

  - `logType` -> [`log_type`](#opt-services.nextcloud.extraOptions.log_type),

  - `defaultPhoneRegion` -> [`default_phone_region`](#opt-services.nextcloud.extraOptions.default_phone_region),

  - `overwriteProtocol` -> [`overwriteprotocol`](#opt-services.nextcloud.extraOptions.overwriteprotocol),

  - `skeletonDirectory` -> [`skeletondirectory`](#opt-services.nextcloud.extraOptions.skeletondirectory),

  - `globalProfiles` -> [`profile.enabled`](#opt-services.nextcloud.extraOptions._profile.enabled_),

  - `extraTrustedDomains` -> [`trusted_domains`](#opt-services.nextcloud.extraOptions.trusted_domains) and

  - `trustedProxies` -> [`trusted_proxies`](#opt-services.nextcloud.extraOptions.trusted_proxies).

- The following options of the Nextcloud module were moved into [`services.nextcloud.settings`](#opt-services.nextcloud.settings) and renamed to match the name from Nextcloud's `config.php`:

  - `logLevel` -> [`loglevel`](#opt-services.nextcloud.settings.loglevel),

  - `logType` -> [`log_type`](#opt-services.nextcloud.settings.log_type),

  - `defaultPhoneRegion` -> [`default_phone_region`](#opt-services.nextcloud.settings.default_phone_region),

  - `overwriteProtocol` -> [`overwriteprotocol`](#opt-services.nextcloud.settings.overwriteprotocol),

  - `skeletonDirectory` -> [`skeletondirectory`](#opt-services.nextcloud.settings.skeletondirectory),

  - `globalProfiles` -> [`profile.enabled`](#opt-services.nextcloud.settings._profile.enabled_),

  - `extraTrustedDomains` -> [`trusted_domains`](#opt-services.nextcloud.settings.trusted_domains) and

  - `trustedProxies` -> [`trusted_proxies`](#opt-services.nextcloud.settings.trusted_proxies).

- The option [`services.nextcloud.config.dbport`] of the Nextcloud module was removed to match upstream.

  The port can be specified in [`services.nextcloud.config.dbhost`](#opt-services.nextcloud.config.dbhost).

  ./services/system/saslauthd.nix

  ./services/system/self-deploy.nix

  ./services/system/systembus-notify.nix

  ./services/system/systemd-lock-handler.nix

  ./services/system/uptimed.nix

  ./services/system/zram-generator.nix

  ./services/torrent/deluge.nix

# systemd-lock-handler {#module-services-systemd-lock-handler}

The `systemd-lock-handler` module provides a service that bridges

D-Bus events from `logind` to user-level systemd targets:

  - `lock.target` started by `loginctl lock-session`,

  - `unlock.target` started by `loginctl unlock-session` and

  - `sleep.target` started by `systemctl suspend`.

You can create a user service that starts with any of these targets.

For example, to create a service for `swaylock`:

```nix

{

  services.systemd-lock-handler.enable = true;

  systemd.user.services.swaylock = {

    description = "Screen locker for Wayland";

    documentation = ["man:swaylock(1)"];

    # If swaylock exits cleanly, unlock the session:

    onSuccess = ["unlock.target"];

    # When lock.target is stopped, stops this too:

    partOf = ["lock.target"];

    # Delay lock.target until this service is ready:

    before = ["lock.target"];

    wantedBy = ["lock.target"];

    serviceConfig = {

      # systemd will consider this service started when swaylock forks...

      Type = "forking";

      # ... and swaylock will fork only after it has locked the screen.

      ExecStart = "${lib.getExe pkgs.swaylock} -f";

      # If swaylock crashes, always restart it immediately:

      Restart = "on-failure";

      RestartSec = 0;

    };

  };

}

```

See [upstream documentation](https://sr.ht/~whynothugo/systemd-lock-handler) for more information.

{ config

, pkgs

, lib

, ...

}:

let

  cfg = config.services.systemd-lock-handler;

  inherit (lib) mkIf mkEnableOption mkPackageOption;

in

{

  options.services.systemd-lock-handler = {

    enable = mkEnableOption (lib.mdDoc "systemd-lock-handler");

    package = mkPackageOption pkgs "systemd-lock-handler" { };

  };

  config = mkIf cfg.enable {

    systemd.packages = [ cfg.package ];

    # https://github.com/NixOS/nixpkgs/issues/81138

    systemd.user.services.systemd-lock-handler.wantedBy = [ "default.target" ];

  };

  meta = {

    maintainers = with lib.maintainers; [ liff ];

    doc = ./systemd-lock-handler.md;

  };

}

      }

      (lib.mkIf cfg.bendDomainToLocalhost {

        nextcloud.extraOptions.trusted_proxies = [ "127.0.0.1" "::1" ];

        nextcloud.settings.trusted_proxies = [ "127.0.0.1" "::1" ];

      })

    ];

  };