Release v0.10.0 · ibizaman/selfhostblocks

Breaking Changes

Jellyfin now uses the nixpkgs package (12.1) instead of the custom 10.11.6 CLI fork.
Initial setup uses Jellyfin's HTTP API, and the LDAP plugin is updated to version 24.
Take a full backup before upgrading, as recommended in the
upstream release notes.
Nextcloud 33 and 34 are now supported, replacing versions 32 and 33. The default is now 33.
Deploy version 33 before selecting version 34 because Nextcloud does not support skipping major versions.
Remove the ignored shb.zfs.pools.<pool>.datasets.<dataset>.enable option.
Remove the option from existing configurations and conditionally omit the dataset attribute instead.
Update NixOS Mailserver to the 26.11 development branch. The
shb.mailserver.impermanence.sieve output is removed because user-managed
Sieve scripts now live under mailserver.storage.path. Users with
mailserver.enableManageSieve = true must complete the
upstream Sieve migration
before setting shb.mailserver.stateVersion = 5.

davfs2 module now accept a file for a password.
Backup script for restic and borgbackup accept any command allowing to run any
specific restic and borgbackup command with the env vars and secrets configured
automatically.
Add new package-versions module that prints package version on activation (and dry-run too). @jameysharp @snale @localcat
Add full support, including tests, for Immich SSO login flow.

Rename shb.nginx.accessLog to shb.nginx.insecureAccessLogWithRequestBody.
The old option remains available as a deprecated alias.

Allow Jellyfin LDAP and SSO administrators to log in without also belonging to the regular user group.
Fix Nextcloud preview generation service permissions.
Fix Open WebUI backups omitting state stored in systemd's private DynamicUser directory
(issue #721).
Fix SSO login inconsistencies in Jellyfin.

Add hooks in backup contract before and after a restore command.
Print ZFS snapshots on activation
Add default_config to Home Assistant config so the default dashboards cam be displayed.
Test LDAP login with Home Assistant.
Much more robust test overall thanks to @dniku.
Add user consistency test for Home Assistant making sure logging in through basic or LDAP flow
ends up creating the same user.
Add user consistency test for Jellyfin making sure logging in through basic, LDAP and SSO flow
ends up creating the same user.
Switch to using systemd.tmpfile.settings by @yottanami.