From ebdc6debe41b5eaa0134745323de3a17b1b1b304 Mon Sep 17 00:00:00 2001
From: Lucy Hochkamp <git@xyno.systems>
Date: Sat, 23 Aug 2025 19:41:01 +0200
Subject: [PATCH] update authentik

---
 hosts/ds9/authentik.nix  |  2 +-
 hosts/picard/default.nix | 36 ++++--------------------------------
 2 files changed, 5 insertions(+), 33 deletions(-)

diff --git a/hosts/ds9/authentik.nix b/hosts/ds9/authentik.nix
index d613cda3..735df8a1 100644
--- a/hosts/ds9/authentik.nix
+++ b/hosts/ds9/authentik.nix
@@ -5,7 +5,7 @@
   inputs,
   ...
 }:
-  let version = "2025.6.3"; in 
+  let version = "2025.8.1"; in 
 {
   imports = [
     inputs.quadlet-nix.nixosModules.quadlet
diff --git a/hosts/picard/default.nix b/hosts/picard/default.nix
index de921a04..d897d219 100644
--- a/hosts/picard/default.nix
+++ b/hosts/picard/default.nix
@@ -73,38 +73,10 @@
   users.mutableUsers = false;
 
   services.postgresql.package = pkgs.postgresql_17_jit;
-  environment.systemPackages = [
-    (
-      let
-        # XXX specify the postgresql package you'd like to upgrade to.
-        # Do not forget to list the extensions you need.
-        newPostgres = pkgs.postgresql_17_jit.withPackages (pp: [
-          # pp.plv8
-        ]);
-        cfg = config.services.postgresql;
-      in
-      pkgs.writeScriptBin "upgrade-pg-cluster" ''
-        set -eux
-        # XXX it's perhaps advisable to stop all services that depend on postgresql
-        systemctl stop postgresql
-
-        export NEWDATA="/var/lib/postgresql/${newPostgres.psqlSchema}"
-        export NEWBIN="${newPostgres}/bin"
-
-        export OLDDATA="${cfg.dataDir}"
-        export OLDBIN="${cfg.finalPackage}/bin"
-
-        install -d -m 0700 -o postgres -g postgres "$NEWDATA"
-        cd "$NEWDATA"
-        sudo -u postgres "$NEWBIN/initdb" -D "$NEWDATA" ${lib.escapeShellArgs cfg.initdbArgs}
-
-        sudo -u postgres "$NEWBIN/pg_upgrade" \
-          --old-datadir "$OLDDATA" --new-datadir "$NEWDATA" \
-          --old-bindir "$OLDBIN" --new-bindir "$NEWBIN" \
-          "$@"
-      ''
-    )
-  ];
+  services.postgresql.settings = {
+    shared_buffers = "4GB";
+    work_mem = "64MB";
+  };
 
   systemd.services.caddy.serviceConfig.EnvironmentFile = config.age.secrets.desec.path;
   networking.firewall.allowedTCPPorts = [