chore: Flake update

homepage-dashboard parses the widget url with JS's URL() and reads
.hostname/.port off the result. Without a "scheme://" prefix,
"rechberg.online:25565" parses "rechberg.online" as the scheme and
leaves hostname empty, which the minecraftstatuspinger lookup()
rejects with "No hostname was provided!" (confirmed via
journalctl -u homepage-dashboard). The scheme itself is discarded by
the widget code, so any scheme works; tcp:// documents intent since
this widget always does a plain TCP server-list ping.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HCHg6BFAjZGUZer7RW5faD

flake.lock

@@ -63,11 +63,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1788450739,
+        "lastModified": 1790898470,
-        "narHash": "sha256-glZLQlzIn1fXH6PazR2iUmTo7kzzyYSshrWhLS9TqCU=",
+        "narHash": "sha256-zTwuwezD0w3hpga6a6P8emidzAZFyWqlNeRBlpWOOl8=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "31729ca8cbdb4fa927b34e5f4353e6a83f39e993",
+        "rev": "024633cd702b10285db5cb19b40ad48d2399ba60",
         "type": "github"
       },
       "original": {
@@ -87,11 +87,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1788267358,
+        "lastModified": 1790500375,
-        "narHash": "sha256-nt+lUqYVpc9Y6JeMd2WmXzCDojasdadKo0mWcluvY2Y=",
+        "narHash": "sha256-XN3sDtn8TU9hAc9xqZ+SqRB/HHm2wjxM6aSWYLJU+oo=",
         "owner": "cachix",
         "repo": "git-hooks.nix",
-        "rev": "27555e2624241fb116b49095df4caaee85a25691",
+        "rev": "a0e4241b51206fbcbf52fd322eb5f0cd80f153c4",
         "type": "github"
       },
       "original": {
@@ -113,11 +113,11 @@
         "uv2nix": "uv2nix"
       },
       "locked": {
-        "lastModified": 1791121781,
+        "lastModified": 1792650380,
-        "narHash": "sha256-39vzOiYTAwECDMfJAv/b+OxpHPXHfJle0Gx5x+WjPW0=",
+        "narHash": "sha256-4l8C4z7K4VQDq2ExP6v9NUdCpSFagB1hbt4gh/Y6YSw=",
         "owner": "NousResearch",
         "repo": "hermes-agent",
-        "rev": "af90026aa09949579bd423d24def3d38f743cde0",
+        "rev": "81a55437f3f31a9f12a30c53b6c5d49d420898aa",
         "type": "github"
       },
       "original": {
@@ -157,11 +157,11 @@
         "nixpkgs-regression": "nixpkgs-regression"
       },
       "locked": {
-        "lastModified": 1791067591,
+        "lastModified": 1792618091,
-        "narHash": "sha256-SGcfVVSS3DLO+ES4J+SrLxKGP11yvTWXgiAqku1L+Sk=",
+        "narHash": "sha256-sDmJ6tgPjlSk9P2jCXXjV2l0Ewe7K9CwclMcAvpEyR0=",
         "owner": "NixOS",
         "repo": "nix",
-        "rev": "e8280775f307a94ca82cea193cfcc14c0d56232a",
+        "rev": "42d96171bbef8a8073106dd93ca68878d7339abd",
         "type": "github"
       },
       "original": {
@@ -211,11 +211,11 @@
         "nixpkgs": "nixpkgs_2"
       },
       "locked": {
-        "lastModified": 1791128201,
+        "lastModified": 1792491056,
-        "narHash": "sha256-rlsYY/Dg/LhbIj51Aa6TLvRpZeb3KZgUTd7llQ5XcJE=",
+        "narHash": "sha256-6n1Dn+WYtD8lprnSi+0k4FjbKfIVNG8lblpJ5MiiqXs=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "31cc5f4d9b9ba601071e8b8504601b9b176e2756",
+        "rev": "efb6d0d5e2394c3c5416a18652808aba206c0988",
         "type": "github"
       },
       "original": {
@@ -286,11 +286,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1791048980,
+        "lastModified": 1792502884,
-        "narHash": "sha256-u3KCLxsnf1622GdFccg8hmkEIutOZ1h4pvia5ERjIuI=",
+        "narHash": "sha256-ij8QUxzTOHovLrNOxVRx+RAhGQFOMsJbji0veiatH5k=",
-        "rev": "a7868a727837f3c09cee2ce0ca671c76b1589fed",
+        "rev": "02c087f3fe673c9e317f206a627cb6b910336dbe",
         "type": "tarball",
-        "url": "https://releases.nixos.org/nixos/unstable/nixos-26.11pre1084968.a7868a727837/nixexprs.tar.zst"
+        "url": "https://releases.nixos.org/nixos/unstable/nixos-26.11pre1097682.02c087f3fe67/nixexprs.tar.zst"
       },
       "original": {
         "id": "nixpkgs",
@@ -313,11 +313,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1791031588,
+        "lastModified": 1792615934,
-        "narHash": "sha256-4XF6NXFWmQPM0xHuxTw+iQEA6mUtmDQNJoVd4u9GkLw=",
+        "narHash": "sha256-q1ku4ygV7tdmv5Q9QYwhVDsNMZRJcRYjVczoX5+XWBo=",
-        "rev": "825e2028c29b702a4a5f085f08095d12099784f2",
+        "rev": "da6dc0e7b26060f2f71ce3ef7088fb56ee44fa36",
         "type": "tarball",
-        "url": "https://releases.nixos.org/nixos/26.05/nixos-26.05.11150.825e2028c29b/nixexprs.tar.zst"
+        "url": "https://releases.nixos.org/nixos/26.05/nixos-26.05.12400.da6dc0e7b260/nixexprs.tar.zst"
       },
       "original": {
         "id": "nixpkgs",
@@ -415,11 +415,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1791103873,
+        "lastModified": 1792056300,
-        "narHash": "sha256-nFxM+pKoZ8LJAEnUXARyCaOAloWgaW9kZQOSjWzKcTE=",
+        "narHash": "sha256-YU1LjDe1o2Ymg5zEiCHbmMXLkDCtxHQRiVqZ3nC5GGk=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "dcd241ba97088c22569d1573286e1b9daad340c0",
+        "rev": "44931708c62937c2b1bf7953902989fa5bb9ee1b",
         "type": "github"
       },
       "original": {

machines/core/nix.nix

@@ -12,6 +12,13 @@
 
     settings = {
       auto-optimise-store = true;
+      # Without these, gc sweeps away eval-time-only sources (flake inputs,
+      # their build deps) since they're not part of the runtime closure.
+      # The next evaluation then cold-refetches everything from GitHub,
+      # which is enough on its own to trip GitHub's unauthenticated rate
+      # limit for large dependency trees (e.g. hermes-agent's).
+      keep-outputs = true;
+      keep-derivations = true;
     };
 
     gc = {

machines/jupiter/configuration.nix

@@ -72,6 +72,9 @@
 
   system = {
     stateVersion = "23.05";
-    autoUpgrade.enable = true;
+    # Was silently failing daily (legacy channel path, no --flake set) without
+    # ever reaching the network. Disabled rather than fixed: rebuilds should
+    # only happen when triggered manually.
+    autoUpgrade.enable = false;
   };
 }

machines/mibook/configuration.nix

@@ -61,6 +61,9 @@
 
   system = {
     stateVersion = "23.05";
-    autoUpgrade.enable = true;
+    # Was silently failing daily (legacy channel path, no --flake set) without
+    # ever reaching the network. Disabled rather than fixed: rebuilds should
+    # only happen when triggered manually.
+    autoUpgrade.enable = false;
   };
 }

machines/mibook/environments.nix

@@ -4,8 +4,8 @@ _: {
     kde-desktop.enable = true;
     zsh.enable = true;
     apps = {
-      desktop_apps = true;
+      desktop_apps = false;
-      dev_apps = true;
+      dev_apps = false;
     };
     development.enable = true;
     docker.enable = true;
@@ -19,7 +19,7 @@ _: {
     nvidia.enable = false;
   };
   my.services = {
-    vpn.enable = true;
+    vpn.enable = false;
   };
 
 }

modules/environments/apps/default.nix

@@ -25,11 +25,13 @@ in
       spotify
       keepassxc
       moonlight-qt
+      # jetbrains.idea-ultimate
       nextcloud-client
       pipewire
       wireplumber
       vlc
       ghostty
+      zed-editor
     ];
   };
 }

modules/environments/development/default.nix

@@ -15,11 +15,7 @@ in
 
   config = lib.mkIf cfg.enable {
     users.users.finn.packages = with pkgs; [
-      google-chrome
-      vscode
-      zed-editor
       neovim
-      # jetbrains.idea-ultimate
       go
       nodejs # bundles npm
       (python3.withPackages (

modules/environments/hermes-agent/default.nix

@@ -19,7 +19,7 @@ in
     services.hermes-agent = {
       enable = true;
       # Deliberate pin, matches the approved design — bump on purpose, not by drift.
-      settings.model.default = "anthropic/claude-sonnet-4-5";
+      settings.model.default = "anthropic/claude-sonnet-5-5";
       # The Nix flake input is the source of truth for hermes's version here; its
       # built-in self-updater polling GitHub independently just burns API quota.
       settings.updates.check = false;

modules/environments/homepage/manual-services.nix

@@ -55,6 +55,17 @@
           icon = "foundry-vtt.png";
         };
       }
+      {
+        "Minecraft" = {
+          href = "https://rechberg.online";
+          description = "Java Minecraft Server";
+          icon = "minecraft.png";
+          widget = {
+            type = "minecraft";
+            url = "tcp://rechberg.online:25565";
+          };
+        };
+      }
     ];
   }
 ]

modules/environments/homepage/manual-widgets.nix

@@ -3,5 +3,4 @@
   { resources = { cpu = true; memory = true; disk = "/"; }; }
   { datetime = { text_size = "xl"; format = { timeStyle = "short"; }; }; }
   { search = {provider = "google";  focus = true; target = "_blank"; }; }
-  { minecraft = { url = "udp://rechberg.online:25565" }; }
 ]