flake.lock: Update

Flake lock file updates:

• Updated input 'home-manager':
    'github:nix-community/home-manager/f463902a3f03e15af658e48bcc60b39188ddf734?narHash=sha256-g3mHJLB8ShKuMaBBZxiGuoftJ22f7Boegiw5xBUnS8E%3D' (2025-04-07)
  → 'github:nix-community/home-manager/d5cdf55bd9f19a3debd55b6cb5d38f7831426265?narHash=sha256-a6QGaZMDM1miK8VWzAITsEPOdmLk%2BxTPyJSTjVs3WhI%3D' (2025-04-14)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/42a1c966be226125b48c384171c44c651c236c22?narHash=sha256-rpqepOZ8Eo1zg%2BKJeWoq1HAOgoMCDloqv5r2EAa9TSA%3D' (2025-04-05)
  → 'github:nixos/nixpkgs/2631b0b7abcea6e640ce31cd78ea58910d31e650?narHash=sha256-LWqduOgLHCFxiTNYi3Uj5Lgz0SR%2BXhw3kr/3Xd0GPTM%3D' (2025-04-12)

configuration.nix

@@ -59,6 +59,17 @@
     ./programm_configs/wayland.nix
   ]);
 
+  # systemdresolved config
+  networking.nameservers = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];
+
+  services.resolved = {
+    enable = true;
+    dnssec = "true";
+    domains = [ "~." ];
+    fallbackDns = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];
+    dnsovertls = "true";
+  };
+
 
   services.gvfs.enable = true;
 
@@ -122,7 +133,7 @@
     isNormalUser = true;
     description = "clara";
     initialPassword = "123456";
-    extraGroups = [ "networkmanager" "wheel" "scanner" "lp" "docker" ];
+    extraGroups = [ "networkmanager" "wheel" "scanner" "lp" "docker" "adbusers kvm" ];
     shell = pkgs.zsh;
   };
 
@@ -321,6 +332,11 @@
     '';
   };
 
+  # Fix for CVE-2022-27470 keeping package from building
+  nixpkgs.config.permittedInsecurePackages = [
+    "SDL_ttf-2.0.11"
+  ];
+
   # backlight
   programs.light.enable = true;
 

flake.lock

@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1735979091,
-        "narHash": "sha256-WpFjt6+8UD81EP386c269ZTqpEmlGJgcPw+OB4b7EBs=",
+        "lastModified": 1744663884,
+        "narHash": "sha256-a6QGaZMDM1miK8VWzAITsEPOdmLk+xTPyJSTjVs3WhI=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "11ab08541e61ac3bbf2ab27229f68622629401df",
+        "rev": "d5cdf55bd9f19a3debd55b6cb5d38f7831426265",
         "type": "github"
       },
       "original": {
@@ -22,11 +22,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1735834308,
-        "narHash": "sha256-dklw3AXr3OGO4/XT1Tu3Xz9n/we8GctZZ75ZWVqAVhk=",
+        "lastModified": 1744463964,
+        "narHash": "sha256-LWqduOgLHCFxiTNYi3Uj5Lgz0SR+Xhw3kr/3Xd0GPTM=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "6df24922a1400241dae323af55f30e4318a6ca65",
+        "rev": "2631b0b7abcea6e640ce31cd78ea58910d31e650",
         "type": "github"
       },
       "original": {

home.nix

@@ -96,8 +96,13 @@ in
     gvfs
     vdhcoapp
     inkscape
+    inkscape-extensions.inkstitch
     prusa-slicer
     mathematikapkg
+    jameica
+    android-tools
+    wireguard-tools
+    sops
   ] ++ (if x11mode then [
     arandr
     flameshot

programm_configs/vscode.nix

@@ -30,7 +30,7 @@
 	name = "platformio-ide";
 	publisher = "platformio";
 	version = "3.3.3";
-	sha256 = "pcWKBqtpU7DVpiT7UF6Zi+YUKknyjtXFEf5nL9+xuSo=";
+	sha256 = "cVYnFhdeClHhuVaTWRU2IDIA1mFq1iLveZUIhEhMSck=";
       }
     ];
   };