From 69c11cf17db448dbcf5ccd4516a018a01e92b8ff Mon Sep 17 00:00:00 2001
From: Renovate Bot <renovate@jfreudenberger.de>
Date: Mon, 20 Jul 2026 14:40:16 +0200
Subject: [PATCH 1/5] Update netbird

---
 modules/netbird-client.nix | 2 +-
 modules/netbird-docker.nix | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/modules/netbird-client.nix b/modules/netbird-client.nix
index a07e283..1c827e4 100644
--- a/modules/netbird-client.nix
+++ b/modules/netbird-client.nix
@@ -62,7 +62,7 @@ in {
 
     virtualisation.oci-containers.containers = lib.mkIf (cfg.docker.setupKey != null) {
       netbird = {
-        image = "netbirdio/netbird:v0.74.6-rootless@sha256:21516faecb7ddd9d6207ebcb1196da57bfe6a6fb8cd4fc9693482bf5a4917bcf";
+        image = "netbirdio/netbird:v0.74.7-rootless@sha256:dd545478026df785ce44e4b512fa11e5b0d1e7d94463c96a50675d72655050a0";
         autoStart = true;
         hostname = "${config.networking.hostName}-docker";
         networks = [
diff --git a/modules/netbird-docker.nix b/modules/netbird-docker.nix
index 3b44a86..e524f62 100644
--- a/modules/netbird-docker.nix
+++ b/modules/netbird-docker.nix
@@ -57,7 +57,7 @@ in {
     services.netbird.useRoutingFeatures = lib.mkDefault "server";
     virtualisation.oci-containers.containers = {
       netbird-dashboard = {
-        image = "netbirdio/dashboard:v2.90.4";
+        image = "netbirdio/dashboard:v2.90.5";
         autoStart = true;
         networks = [
           "traefik"
@@ -91,7 +91,7 @@ in {
         ];
       };
       netbird-server = {
-        image = "netbirdio/netbird-server:0.74.6@sha256:049873c3d498b0cc1fbb4b87873b6388e23a768f45f056ec04dc0751e505610c";
+        image = "netbirdio/netbird-server:0.74.7@sha256:ec97e2fcdf9666af849c293eeaaf0f4ff742f4f6e886d8873f129de8f4f6b7ef";
         autoStart = true;
         networks = [
           "traefik"
@@ -169,7 +169,7 @@ in {
         ];
       };
       netbird-proxy = {
-        image = "netbirdio/reverse-proxy:0.74.6@sha256:05900cefab7928580a94274a8c8fecd8f4b62e447b618f6e43a45328201c5ee7";
+        image = "netbirdio/reverse-proxy:0.74.7@sha256:302d9e38a8ee2425102c680cdb62f6b552cdf645505e825f753b0b751018cbf8";
         autoStart = true;
         ports = [
           "51820:51820/udp"

From 327207978900527327a5ce7f521e99ef449c14d6 Mon Sep 17 00:00:00 2001
From: JuliusFreudenberger <julius+git@jfreudenberger.de>
Date: Mon, 20 Jul 2026 19:58:29 +0200
Subject: [PATCH 2/5] Add node related language servers to gram

---
 home/gram.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/home/gram.nix b/home/gram.nix
index 42a47b5..1c76bfa 100644
--- a/home/gram.nix
+++ b/home/gram.nix
@@ -21,6 +21,10 @@
       pkgs.tinymist
       pkgs.tofu-ls
       pkgs.ltex-ls-plus
+      pkgs.vtsls
+      pkgs.vscode-langservers-extracted
+      pkgs.vscode-json-languageserver
+      pkgs.package-version-server
     ];
     userSettings = {
       theme = {

From c8aba7db14ea1dbe06d738905a5145cbb5b06871 Mon Sep 17 00:00:00 2001
From: JuliusFreudenberger <julius+git@jfreudenberger.de>
Date: Mon, 20 Jul 2026 19:59:07 +0200
Subject: [PATCH 3/5] Add port 222 for forgejo routing to srv03

---
 hosts/srv03/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hosts/srv03/default.nix b/hosts/srv03/default.nix
index d2cacb1..fef7d76 100644
--- a/hosts/srv03/default.nix
+++ b/hosts/srv03/default.nix
@@ -63,6 +63,9 @@
       proxy = {
         domain = "netbird.jfreudenberger.de";
         token-secret = config.age.secrets.netbird-proxy;
+        extraPorts = [
+          "222:222/tcp" # Forgejo SSH routing
+        ];
       };
     };
     netbird.server = let

From fd4b10de15dd0cdd4582143f6a22f3c70e85103c Mon Sep 17 00:00:00 2001
From: JuliusFreudenberger <julius+git@jfreudenberger.de>
Date: Tue, 21 Jul 2026 22:54:40 +0200
Subject: [PATCH 4/5] Adapt renovate matcher for secrets repo

---
 renovate.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/renovate.json b/renovate.json
index efb4b22..c426941 100644
--- a/renovate.json
+++ b/renovate.json
@@ -8,7 +8,7 @@
       "groupName": "netbird"
     },
     {
-      "matchSourceUrls": "git+ssh://git@git.jfreudenberger.de/JuliusFreudenberger/nix-private.git",
+      "matchPackageNames": "ssh://git@git.jfreudenberger.de/JuliusFreudenberger/nix-private.git",
       "enabled": false
     }
   ],

From 0b4bfda814d89e0a1e7cdfc7fa48955b882840df Mon Sep 17 00:00:00 2001
From: JuliusFreudenberger <julius+git@jfreudenberger.de>
Date: Tue, 21 Jul 2026 22:56:57 +0200
Subject: [PATCH 5/5] Pin docker-socket-proxy image

---
 modules/traefik.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/traefik.nix b/modules/traefik.nix
index 971d14b..98a997e 100644
--- a/modules/traefik.nix
+++ b/modules/traefik.nix
@@ -93,7 +93,7 @@ in {
         ];
       };
       docker-socket-proxy = {
-        image = "tecnativa/docker-socket-proxy:v0.4.2";
+        image = "tecnativa/docker-socket-proxy:v0.4.2@sha256:1f3a6f303320723d199d2316a3e82b2e2685d86c275d5e3deeaf182573b47476";
         autoStart = true;
         networks = [
           "docker-socket"