Merge master into staging-next

  pbsds = {

    name = "Peder Bergebakken Sundt";

    email = "pbsds@hotmail.com";

    matrix = "@pederbs:pvv.ntnu.no";

    github = "pbsds";

    githubId = 140964;

  };

- [Rosenpass](https://rosenpass.eu/), a service for post-quantum-secure VPNs with WireGuard. Available as [services.rosenpass](#opt-services.rosenpass.enable).

- [c2FmZQ](https://github.com/c2FmZQ/c2FmZQ/), an application that can securely encrypt, store, and share files, including but not limited to pictures and videos. Available as [services.c2fmzq-server](#opt-services.c2fmzq-server.enable).

## Backward Incompatibilities {#sec-release-23.11-incompatibilities}

- `network-online.target` has been fixed to no longer time out for systems with `networking.useDHCP = true` and `networking.useNetworkd = true`.

  };

  config = mkIf cfg.enable {

    environment.etc."iproute2/bpf_pinning" = { mode = "0644"; text = fileContents "${pkgs.iproute2}/etc/iproute2/bpf_pinning"; };

    environment.etc."iproute2/ematch_map"  = { mode = "0644"; text = fileContents "${pkgs.iproute2}/etc/iproute2/ematch_map";  };

    environment.etc."iproute2/group"       = { mode = "0644"; text = fileContents "${pkgs.iproute2}/etc/iproute2/group";       };

    environment.etc."iproute2/nl_protos"   = { mode = "0644"; text = fileContents "${pkgs.iproute2}/etc/iproute2/nl_protos";   };

    environment.etc."iproute2/rt_dsfield"  = { mode = "0644"; text = fileContents "${pkgs.iproute2}/etc/iproute2/rt_dsfield";  };

    environment.etc."iproute2/rt_protos"   = { mode = "0644"; text = fileContents "${pkgs.iproute2}/etc/iproute2/rt_protos";   };

    environment.etc."iproute2/rt_realms"   = { mode = "0644"; text = fileContents "${pkgs.iproute2}/etc/iproute2/rt_realms";   };

    environment.etc."iproute2/rt_scopes"   = { mode = "0644"; text = fileContents "${pkgs.iproute2}/etc/iproute2/rt_scopes";   };

    environment.etc."iproute2/rt_tables"   = { mode = "0644"; text = (fileContents "${pkgs.iproute2}/etc/iproute2/rt_tables")

                                                                   + (optionalString (cfg.rttablesExtraConfig != "") "\n\n${cfg.rttablesExtraConfig}"); };

    environment.etc."iproute2/rt_tables" = {

      mode = "0644";

      text = (fileContents "${pkgs.iproute2}/lib/iproute2/rt_tables")

        + (optionalString (cfg.rttablesExtraConfig != "") "\n\n${cfg.rttablesExtraConfig}");

    };

  };

}

  ./services/web-apps/atlassian/jira.nix

  ./services/web-apps/audiobookshelf.nix

  ./services/web-apps/bookstack.nix

  ./services/web-apps/c2fmzq-server.nix

  ./services/web-apps/calibre-web.nix

  ./services/web-apps/coder.nix

  ./services/web-apps/changedetection-io.nix

# c2FmZQ {#module-services-c2fmzq}

c2FmZQ is an application that can securely encrypt, store, and share files,

including but not limited to pictures and videos.

The service `c2fmzq-server` can be enabled by setting

```

{

  services.c2fmzq-server.enable = true;

}

```

This will spin up an instance of the server which is API-compatible with

[Stingle Photos](https://stingle.org) and an experimental Progressive Web App

(PWA) to interact with the storage via the browser.

In principle the server can be exposed directly on a public interface and there

are command line options to manage HTTPS certificates directly, but the module

is designed to be served behind a reverse proxy or only accessed via localhost.

```

{

  services.c2fmzq-server = {

    enable = true;

    bindIP = "127.0.0.1"; # default

    port = 8080; # default

  };

  services.nginx = {

    enable = true;

    recommendedProxySettings = true;

    virtualHosts."example.com" = {

      enableACME = true;

      forceSSL = true;

      locations."/" = {

        proxyPass = "http://127.0.0.1:8080";

      };

    };

  };

}

```

For more information, see <https://github.com/c2FmZQ/c2FmZQ/>.