deps: update to NixOS 26.05

For all:

  tailscale: 1.90.9 -> 1.98.2
  zsh: 5.9 -> 5.9.1

hamac:

  android-studio 2025.2.1.8 -> 2025.3.4.7
  anki: 25.09.3 -> 25.09.4
  chromium: 148.0.7778.167 -> 149.0.7827.53
  firefox: 150.0.3 -> 151.0.3
  foot: 1.25.0 -> 1.27.0
  gimp: 3.0.4 -> 3.0.8
  i3status-rust: 0.34.0 -> 0.36.1
  inkscape: 1.4.2 -> 1.4.4
  krita: 5.2.15 -> 6.0.1
  mako: 1.10.0 -> 1.11.0
  thunderbird: 150.0.2 -> 151.0.1
  vscodium: 1.106.27818 -> 1.116.02821
  wireshark-qt: 4.6.5 -> 4.6.6
  zathura: 0.5.13 -> 2026.05.20
  zed-editor: 1.1.7 -> 1.5.4

  docker-compose: 2.40.3 -> 5.1.4
  go: 1.25.9 -> 1.26.3
  hugo: 0.161.1 -> 0.162.1
  jujutsu: 0.41.0 -> 0.42.0
  just: 1.43.1 -> 1.51.0
  scc: 3.5.0 -> 3.7.0
  skim: 0.20.5 -> 4.0.0

  coreutils-full: 9.8 -> 9.11
  curl: 8.19.0 -> 8.20.0
  file: 5.45 -> 5.47
  gawk: 5.3.2 -> 5.4.0
  git: 2.51.2 -> 2.54.0
  htop: 3.4.1 -> 3.5.1
  bluez: 5.84, 5.86 -> 5.86
  iproute2: 6.17.0 -> 7.0.0
  iptables: 1.8.11 -> 1.8.13
  less: 679 -> 692
  nix: 2.31.5 -> 2.34.7
  nixfmt: 1.2.0 -> 1.3.1
  npins: 0.3.1 -> 0.4.1
  podman: 5.7.0 -> 5.8.2
  networkmanager: 1.54.3 -> 1.56.0
  openssl(bin): 3.6.1, 3.6.2 -> 3.6.2
  shadow: 4.18.0 -> 4.19.4

  swaylock: 1.8.4 -> 1.8.5
  systemd: 258.7, 260.1 -> 260.1
  time: 1.9 -> 1.10
  tree: 2.2.1 -> 2.3.2
  vim: 9.2.0340 -> 9.2.0389
  wireguard-tools: 1.0.20250521 -> 1.0.20260223
  xwayland: 24.1.10 -> 24.1.12

For ev:

  kodi-peripheral.joystick: 20.1.9 -> 21.1.23
  miniflux: 2.2.19 -> 2.3.1
  navidrome: 0.61.1 -> 0.61.2
  qbittorrent-nox: 5.1.4 -> 5.2.1

  grafana-alloy: 1.12.2 -> 1.16.0
  grafana-loki: 3.6.3 -> 3.7.2
  linux: 6.12.89 -> 6.18.35
  mosquitto: 2.0.22 -> 2.1.2
  node_exporter: 1.10.2 -> 1.11.1
  prometheus: 3.7.2 -> 3.11.3
  zigbee2mqtt: 2.6.3 -> 2.12.0

For tente:

  cgit: 1.2.3 -> 1.3.1
  grafana-alloy: 1.12.2 -> 1.16.0
  grafana-loki: 3.6.3 -> 3.7.2
  grafana: 12.3.6+security-01 -> 13.0.2
  headscale: 0.27.1 -> 0.28.0
  lego: 4.31.0 -> 4.35.2
  nginx: 1.28.3 -> 1.30.2
  node_exporter: 1.10.2 -> 1.11.1
  prometheus: 3.7.2 -> 3.11.3

4 files changed, 11 insertions, 6 deletions

diff --git a/nixos/hosts/ev/default.nix b/nixos/hosts/ev/default.nix
index 29e0ffd..7fcc724 100644
--- a/nixos/hosts/ev/default.nix
+++ b/nixos/hosts/ev/default.nix
@@ -43,10 +43,13 @@ in
         enable = true;
         port = 2222;
         hostKeys = ["/etc/secrets/initrd/ssh_host_ed25519_key"];
-        authorizedKeys = [
-          "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDo/Y7w3hQgUIOQi63e8+L7eTMsVWl1vqY+Bd4tvwShdAj8ECU6JnD6gkCVzqXfUNdpA0Csd9PZlGAbXU+0kxudryFV6mxbXvYf+z70vcF02L5lDJ1tzCV7t7SwXnoenSNBIra/M2zDFgGM4oUkl9iZ2wxn/X/mvFzopJsM3xe2YNtJhXzCyaQTakKRDdHMyj9E867Ko03H6ZD2PI+9G+S39tk5ZLIcG9qhLTfDPziiZj7AIeTYVoxQycajwSlvp8BLzxxCKH8Mq7qW86jfT4lYvUuL5ItQ1cdFbmvJNKpgGXBzgBU+6kWf5c7P2aajhE3otgpfBXWBZRA3hKk+E+xX martin@hamac"
-        ];
-        shell = "/bin/cryptsetup-askpass";
+        authorizedKeys =
+          let
+            key = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDo/Y7w3hQgUIOQi63e8+L7eTMsVWl1vqY+Bd4tvwShdAj8ECU6JnD6gkCVzqXfUNdpA0Csd9PZlGAbXU+0kxudryFV6mxbXvYf+z70vcF02L5lDJ1tzCV7t7SwXnoenSNBIra/M2zDFgGM4oUkl9iZ2wxn/X/mvFzopJsM3xe2YNtJhXzCyaQTakKRDdHMyj9E867Ko03H6ZD2PI+9G+S39tk5ZLIcG9qhLTfDPziiZj7AIeTYVoxQycajwSlvp8BLzxxCKH8Mq7qW86jfT4lYvUuL5ItQ1cdFbmvJNKpgGXBzgBU+6kWf5c7P2aajhE3otgpfBXWBZRA3hKk+E+xX martin@hamac";
+          in
+          [
+            ''command="systemctl default" ${key}''
+          ];
       };
     };
   };
diff --git a/nixos/hosts/ev/hardware-configuration.nix b/nixos/hosts/ev/hardware-configuration.nix
index 65300c8..20e2906 100644
--- a/nixos/hosts/ev/hardware-configuration.nix
+++ b/nixos/hosts/ev/hardware-configuration.nix
@@ -14,7 +14,7 @@
   boot.extraModulePackages = [ ];
 
   fileSystems."/" =
-    { device = "/dev/disk/by-uuid/2c273b8a-7f40-41dd-ab63-2194d4bfd328";
+    { device = "/dev/mapper/luks-d9d95f9b-5f7d-4193-859f-d36dae4ed814";
       fsType = "ext4";
     };
 
diff --git a/nixos/hosts/hamac/hardware-configuration.nix b/nixos/hosts/hamac/hardware-configuration.nix
index 54b9d60..0de35e8 100644
--- a/nixos/hosts/hamac/hardware-configuration.nix
+++ b/nixos/hosts/hamac/hardware-configuration.nix
@@ -14,7 +14,7 @@
   boot.extraModulePackages = [ ];
 
   fileSystems."/" =
-    { device = "/dev/disk/by-uuid/7b33d046-ffd6-4baf-8bd8-a88e3c04d538";
+    { device = "/dev/mapper/luks-cf2639e7-1f9c-4c2d-989a-ef2d9950f751";
       fsType = "ext4";
     };
 
diff --git a/nixos/hosts/tente/grafana.nix b/nixos/hosts/tente/grafana.nix
index f6db5ca..44d1815 100644
--- a/nixos/hosts/tente/grafana.nix
+++ b/nixos/hosts/tente/grafana.nix
@@ -31,6 +31,8 @@ in
           from_address = user;
           password = "$__file{${config.age.secrets.alerts-smtp.path}}";
         };
+        # TODO: rotate this secret and use an encrypted secret (this was the default value before NixOS 26.05)
+        security.secret_key = "SW2YcwTIb9zpOOhoPsMm";
       };
 
       provision = {