Merge master into staging-next

- The [services.wordpress.sites.<name>.plugins](#opt-services.wordpress.sites._name_.plugins) and [services.wordpress.sites.<name>.themes](#opt-services.wordpress.sites._name_.themes) options have been converted from sets to attribute sets to allow for consumers to specify explicit install paths via attribute name.

- `protonmail-bridge` package has been updated to v3.0 and the CLI executable is now named bridge instead of protonmail-bridge to be more in line with upstream.

- `protonmail-bridge` package has been updated to major version 3.

- Nebula now runs as a system user and group created for each nebula network, using the `CAP_NET_ADMIN` ambient capability on launch rather than starting as root. Ensure that any files each Nebula instance needs to access are owned by the correct user and group, by default `nebula-${networkName}`.

- The `unifi-poller` package and corresponding NixOS module have been renamed to `unpoller` to match upstream.

- `protonmail-bridge` package has been updated to v3.0 and the CLI executable is now named bridge instead of protonmail-bridge to be more in line with upstream.

- The new option `services.tailscale.useRoutingFeatures` controls various settings for using Tailscale features like exit nodes and subnet routers. If you wish to use your machine as an exit node, you can set this setting to `server`, otherwise if you wish to use an exit node you can set this setting to `client`. The strict RPF warning has been removed as the RPF will be loosened automatically based on the value of this setting.

- `openjdk` from version 11 and above is not build with `openjfx` (i.e.: JavaFX) support by default anymore. You can re-enable it by overriding, e.g.: `openjdk11.override { enableJavaFX = true; };`.

    package = mkOption {

      type = types.package;

      default     = pkgs.steam.override {

        extraLibraries = pkgs: with config.hardware.opengl;

          if pkgs.stdenv.hostPlatform.is64bit

          then [ package ] ++ extraPackages

          else [ package32 ] ++ extraPackages32;

      default = pkgs.steam;

      defaultText = literalExpression "pkgs.steam";

      example = literalExpression ''

        pkgs.steam-small.override {

          extraEnv = {

            MANGOHUD = true;

            OBS_VKCAPTURE = true;

            RADV_TEX_ANISO = 16;

          };

      defaultText = literalExpression ''

        pkgs.steam.override {

          extraLibraries = pkgs: with config.hardware.opengl;

          extraLibraries = p: with p; [

            atk

          ];

        }

      '';

      apply = steam: steam.override (prev: {

        extraLibraries = pkgs: let

          prevLibs = if prev ? extraLibraries then prev.extraLibraries pkgs else [ ];

          additionalLibs = with config.hardware.opengl;

            if pkgs.stdenv.hostPlatform.is64bit

            then [ package ] ++ extraPackages

            else [ package32 ] ++ extraPackages32;

        }

      '';

        in prevLibs ++ additionalLibs;

      });

      description = lib.mdDoc ''

        steam package to use.

        The Steam package to use. Additional libraries are added from the system

        configuration to ensure graphics work properly.

        Use this option to customise the Steam package rather than adding your

        custom Steam to {option}`environment.systemPackages` yourself.

      '';

    };

  '' + lib.optionalString stdenv.isLinux ''

    substituteInPlace libraries/lib-files/FileNames.cpp \

      --replace /usr/include/linux/magic.h ${linuxHeaders}/include/linux/magic.h

  '' + lib.optionalString (stdenv.isDarwin && lib.versionOlder stdenv.targetPlatform.darwinMinVersion "11.0") ''

    sed -z -i "s/NSAppearanceName.*systemAppearance//" src/AudacityApp.mm

  '';

  nativeBuildInputs = [

    ffmpeg_4

    file

    flac

  ] ++ lib.optionals stdenv.isDarwin [

    AppKit

  ] ++ [

    gtk3

    lame

    libid3tag

    libuuid

    util-linux

  ] ++ lib.optionals stdenv.isDarwin [

    AppKit

    CoreAudioKit # for portaudio

    libpng

    libjpeg

# gcc only supports objc on darwin

buildGoModule.override { stdenv = clangStdenv; } rec {

  pname = "go-musicfox";

  version = "3.7.5";

  version = "3.7.7";

  src = fetchFromGitHub {

    owner = "anhoder";

    repo = pname;

    rev = "v${version}";

    hash = "sha256-+0s+MCFLw527gFj7pfiYGfKYihthFjRLPeto2SbALw0=";

    hash = "sha256-gQPr+mCZ7tnASs/ibow1b0Qj3ppZhdgP4U1Vxo+FfE4=";

  };

  deleteVendor = true;

stdenv.mkDerivation rec {

  pname = "exodus";

  version = "22.8.12";

  version = "23.3.13";

  src = fetchzip {

    url = "https://downloads.exodus.com/releases/${pname}-linux-x64-${version}.zip";

    sha256 = "sha256-jNzHh4zYhFzpFZAC9rHmwjTdFkbpROSEN3qpL7geiOU=";

    sha256 = "sha256-/xCDtR3V++LaZZWTaNpeD3YuP5ZM5BChB1CUBH/xNcU=";

  };

  installPhase = ''