chore: flake update

hosts/AZ-CLD-1/services/default.nix

@@ -12,7 +12,6 @@
     ./postgres.nix
     ./traefik.nix
     ./vaultwarden.nix
-    ./zugferd.nix
     # ./zammad.nix
   ];
 }

hosts/AZ-PRM-1/configuration.nix

@@ -75,5 +75,39 @@
     ];
   };
 
+  fileSystems."/mnt/DMS-ALT-INBOX" = {
+    device = "//192.168.152.104/01-E-RECHNUNG-DMS-ALT";
+    fsType = "cifs";
+    options = [
+      "credentials=${config.age.secrets.smb-autoablage.path}"
+      "domain=az-group.local"
+      "uid=0"
+      "gid=0"
+      "file_mode=0777"
+      "dir_mode=0777"
+      "iocharset=utf8"
+      "nofail"
+      "x-systemd.automount"
+      "x-systemd.idle-timeout=60"
+    ];
+  };
+
+  fileSystems."/mnt/DMS-INBOX" = {
+    device = "//192.168.152.97/01-E-RECHNUNG-DMS";
+    fsType = "cifs";
+    options = [
+      "credentials=${config.age.secrets.smb-autoablage.path}"
+      "domain=az-group.local"
+      "uid=0"
+      "gid=0"
+      "file_mode=0777"
+      "dir_mode=0777"
+      "iocharset=utf8"
+      "nofail"
+      "x-systemd.automount"
+      "x-systemd.idle-timeout=60"
+    ];
+  };
+
   system.stateVersion = "25.05";
 }

hosts/AZ-PRM-1/default.nix

@@ -5,6 +5,7 @@
     ./secrets.nix
     ./services
   ];
+
   extraServices = {
     podman.enable = true;
   };

hosts/AZ-PRM-1/services/default.nix

@@ -10,5 +10,6 @@
     ./printing.nix
     ./traefik.nix
     ./traefik-routing.nix
+    ./zugferd.nix
   ];
 }

hosts/AZ-PRM-1/services/n8n.nix

@@ -1,4 +1,8 @@
-{config, ...}: let
+{
+  config,
+  lib,
+  ...
+}: let
   serviceName = "n8n";
   servicePort = config.m3ta.ports.get serviceName;
 in {
@@ -7,8 +11,11 @@ in {
     environment = {
       WEBHOOK_URL = "https://wf.l.az-gruppe.com";
       NODES_EXCLUDE = "[]";
+      N8N_RESTRICT_FILE_ACCESS_TO = "/mnt/DMS-INBOX;/mnt/DMS-ALT-INBOX";
+      N8N_RUNNERS_ENABLED = lib.mkForce "false";
     };
   };
+
   systemd.services.n8n.serviceConfig = {
     EnvironmentFile = ["${config.age.secrets.n8n-env.path}"];
   };

hosts/common/users/sascha.koenig.nix

@@ -62,11 +62,10 @@
           nitch.enable = true;
           television.enable = true;
         };
-        secrets.enable = true;
+        secrets.enable = false;
       };
     }
     else {
-      # m3-helios, m3-hermes, m3-aether — minimal server
       base = {
         shell = {
           fish.enable = true;