chore: update flake & niri blur

system/dev/dn-server/services/homepage.nix

@@ -13,7 +13,7 @@ in
     enable = true;
     openFirewall = true;
     listenPort = 8044;
-    environmentFile = config.sops.secrets."homepage".path;
+    environmentFiles = [ config.sops.secrets."homepage".path ];
     allowedHosts = "www.${domain},${domain},localhost:${toString cfg.listenPort}";
     docker = {
       docker = {
@@ -64,6 +64,17 @@ in
           }
         ];
       }
+      {
+        "Development" = [
+          {
+            "Forgejo" = {
+              icon = "forgejo.svg";
+              description = "Git repository";
+              href = config.services.forgejo.settings.server.ROOT_URL;
+            };
+          }
+        ];
+      }
       {
         "VPN & IDP" = [
           {
@@ -121,6 +132,31 @@ in
               icon = "powerdns.svg";
               description = "DNS record management";
               href = "https://powerdns.${domain}";
+              widgets =
+                let
+                  queryProp = ''job="powerdns_recursor"'';
+                in
+                [
+                  {
+                    type = "prometheusmetric";
+                    url = "https://metrics.dnywe.com";
+                    refreshInterval = 10000;
+                    metrics = [
+                      {
+                        label = "Up";
+                        query = "up{${queryProp}}";
+                      }
+                      {
+                        label = "Query Rate";
+                        query = "sum(rate(pdns_recursor_questions{${queryProp}}[1h]))";
+                        format = {
+                          type = "number";
+                          suffix = " req/s";
+                        };
+                      }
+                    ];
+                  }
+                ];
             };
           }
           {

system/dev/dn-server/services/mail-server.nix

@@ -21,6 +21,8 @@ in
     "sa-update.surbl.org"
   ];
 
+  services.opendkim.enable = mkForce false;
+
   mail-server =
     let
       domain = "net.dn";

system/dev/dn-server/services/metrics.nix

@@ -143,7 +143,7 @@ in
             {
               uid = "prometheus-dn-server";
               name = "Prometheus";
-              url = "https://metrics.net.dn";
+              url = "https://${prometheusHostname}";
               type = "prometheus";
             }
           ];

system/dev/dn-server/services/minecraft-server.nix

@@ -119,7 +119,7 @@ in
         serverVersion = lib.replaceStrings [ "." ] [ "_" ] "fabric-${mcVersion}";
       in
       {
-        enable = true;
+        enable = false;
         autoStart = true;
         enableReload = true;
         jvmOpts = "-Xms2144M -Xmx8240M";

system/dev/dn-server/services/nextcloud.nix

@@ -48,7 +48,10 @@ in
     (import ../../../modules/nextcloud.nix {
       hostname = "nextcloud.${domain}";
       adminpassFile = secrets."nextcloud/adminPassword".path;
-      trusted-proxies = [ "10.0.0.0/24" ];
+      trusted-proxies = [
+        "10.0.0.0/24"
+        "10.10.0.0/24"
+      ];
       whiteboardSecrets = [
         secrets."nextcloud/whiteboard".path
       ];