flake.lock: Update

Flake lock file updates: • Updated input 'home-manager': 'github:nix-community/home-manager/e1aec543f5caf643ca0d94b6a633101942fd065f' (2024-10-14) → 'github:nix-community/home-manager/2a4fd1cfd8ed5648583dadef86966a8231024221' (2024-10-15) • Updated input 'lanzaboote': 'github:nix-community/lanzaboote/a71d589ce0bce98ac8f7cbaf7d88b0badfbb6dd0' (2024-10-14) → 'github:nix-community/lanzaboote/2fa1368f938b50e35ca87334b5aeba38a3402165' (2024-10-16) • Updated input 'lanzaboote/crane': 'github:ipetkov/crane/529c1a0b1f29f0d78fa3086b8f6a134c71ef3aaf' (2024-07-24) → 'github:ipetkov/crane/f876e3d905b922502f031aeec1a84490122254b7' (2024-10-12) • Removed input 'lanzaboote/crane/nixpkgs' • Updated input 'lanzaboote/flake-parts': 'github:hercules-ci/flake-parts/9227223f6d922fee3c7b190b2cc238a99527bbb7' (2024-07-03) → 'github:hercules-ci/flake-parts/3d04084d54bedc3d6b8b736c70ef449225c361b1' (2024-10-01) • Updated input 'lanzaboote/pre-commit-hooks-nix': 'github:cachix/pre-commit-hooks.nix/f451c19376071a90d8c58ab1a953c6e9840527fd' (2024-07-15) → 'github:cachix/pre-commit-hooks.nix/ff68f91754be6f3427e4986d7949e6273659be1d' (2024-10-13) • Updated input 'niri': 'github:sodiboo/niri-flake/079211d08139c0c2863b90f4fc8ea6ee2c488569' (2024-10-14) → 'github:sodiboo/niri-flake/94d6a2bd871cfa16e84921d56bbd4e457796f9fb' (2024-10-16) • Updated input 'niri/niri-unstable': 'github:YaLTeR/niri/be7fbd418fcee2d2ff9f80aa15f1eb8ff0d83afb' (2024-10-14) → 'github:YaLTeR/niri/40843cbda100489186a3c2737e29cf1346cb4d93' (2024-10-16) • Updated input 'niri/nixpkgs-stable': 'github:NixOS/nixpkgs/a3f9ad65a0bf298ed5847629a57808b97e6e8077' (2024-10-12) → 'github:NixOS/nixpkgs/c0b1da36f7c34a7146501f684e9ebdf15d2bebf8' (2024-10-14) • Updated input 'nur': 'github:nix-community/NUR/96670f5e62fc211ff06be5ed7654c44318ddf7e2' (2024-10-14) → 'github:nix-community/NUR/0fb85cae559957a989166e8cb80a82f316959f8f' (2024-10-16) • Updated input 'rust-overlay': 'github:oxalica/rust-overlay/bdbe1611c2029de90bca372ce0b1e3b4fa65f55a' (2024-10-14) → 'github:oxalica/rust-overlay/9de3cea452d2401d6f93c06ad985178a4e11d1fc' (2024-10-16)
nixos/solitary: Widen cross‐origin policies
2024-10-16 14:35:10 +02:00 · 2024-10-16 13:56:24 +02:00
2 changed files with 32 additions and 38 deletions
--- a/flake.lock
+++ b/flake.lock
@ -71,18 +71,12 @@
      }
    },
    "crane": {
-      "inputs": {
-        "nixpkgs": [
-          "lanzaboote",
-          "nixpkgs"
-        ]
-      },
      "locked": {
-        "lastModified": 1721842668,
-        "narHash": "sha256-k3oiD2z2AAwBFLa4+xfU+7G5fisRXfkvrMTCJrjZzXo=",
+        "lastModified": 1728776144,
+        "narHash": "sha256-fROVjMcKRoGHofDm8dY3uDUtCMwUICh/KjBFQnuBzfg=",
        "owner": "ipetkov",
        "repo": "crane",
-        "rev": "529c1a0b1f29f0d78fa3086b8f6a134c71ef3aaf",
+        "rev": "f876e3d905b922502f031aeec1a84490122254b7",
        "type": "github"
      },
      "original": {
@ -162,11 +156,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1719994518,
-        "narHash": "sha256-pQMhCCHyQGRzdfAkdJ4cIWiw+JNuWsTX7f0ZYSyz0VY=",
+        "lastModified": 1727826117,
+        "narHash": "sha256-K5ZLCyfO/Zj9mPFldf3iwS6oZStJcU4tSpiXTMYaaL0=",
        "owner": "hercules-ci",
        "repo": "flake-parts",
-        "rev": "9227223f6d922fee3c7b190b2cc238a99527bbb7",
+        "rev": "3d04084d54bedc3d6b8b736c70ef449225c361b1",
        "type": "github"
      },
      "original": {
@ -310,11 +304,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1728903686,
-        "narHash": "sha256-ZHFrGNWDDriZ4m8CA/5kDa250SG1LiiLPApv1p/JF0o=",
+        "lastModified": 1729027341,
+        "narHash": "sha256-IqWD7bA9iJVifvJlB4vs2KUXVhN+d9lECWdNB4jJ0tE=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "e1aec543f5caf643ca0d94b6a633101942fd065f",
+        "rev": "2a4fd1cfd8ed5648583dadef86966a8231024221",
        "type": "github"
      },
      "original": {
@ -337,11 +331,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1728931061,
-        "narHash": "sha256-VTb2wsZ19j4RLdxSifQTMxojchaqLXe7wuBXRIPRpnw=",
+        "lastModified": 1729064530,
+        "narHash": "sha256-oSr/w/5dvf/8ll6NvQlL7+rrK8wzjIcEMP1LvI4Ag08=",
        "owner": "nix-community",
        "repo": "lanzaboote",
-        "rev": "a71d589ce0bce98ac8f7cbaf7d88b0badfbb6dd0",
+        "rev": "2fa1368f938b50e35ca87334b5aeba38a3402165",
        "type": "github"
      },
      "original": {
@ -398,11 +392,11 @@
        "xwayland-satellite-unstable": "xwayland-satellite-unstable"
      },
      "locked": {
-        "lastModified": 1728920876,
-        "narHash": "sha256-jWECuAJAwjNjfcrKnb3ILevPB1vuTpmIfNrYiJPTdkA=",
+        "lastModified": 1729065021,
+        "narHash": "sha256-pbRqlhNtLXIMYaBP0j5VHSA1YvC/lpRQWG+2bsGz36U=",
        "owner": "sodiboo",
        "repo": "niri-flake",
-        "rev": "079211d08139c0c2863b90f4fc8ea6ee2c488569",
+        "rev": "94d6a2bd871cfa16e84921d56bbd4e457796f9fb",
        "type": "github"
      },
      "original": {
@ -431,11 +425,11 @@
    "niri-unstable": {
      "flake": false,
      "locked": {
-        "lastModified": 1728918524,
-        "narHash": "sha256-zDFgW/8+hPDgKuovkK69Yek4ZZZZzY3nuso0Dh/OIa8=",
+        "lastModified": 1729060774,
+        "narHash": "sha256-mzuJnw3YnbF1k2KxGIcdqEgRbEVNFtUJYjCOdFCMxl4=",
        "owner": "YaLTeR",
        "repo": "niri",
-        "rev": "be7fbd418fcee2d2ff9f80aa15f1eb8ff0d83afb",
+        "rev": "40843cbda100489186a3c2737e29cf1346cb4d93",
        "type": "github"
      },
      "original": {
@ -525,11 +519,11 @@
    },
    "nixpkgs-stable_2": {
      "locked": {
-        "lastModified": 1728740863,
-        "narHash": "sha256-u+rxA79a0lyhG+u+oPBRtTDtzz8kvkc9a6SWSt9ekVc=",
+        "lastModified": 1728909085,
+        "narHash": "sha256-WLxED18lodtQiayIPDE5zwAfkPJSjHJ35UhZ8h3cJUg=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "a3f9ad65a0bf298ed5847629a57808b97e6e8077",
+        "rev": "c0b1da36f7c34a7146501f684e9ebdf15d2bebf8",
        "type": "github"
      },
      "original": {
@ -557,11 +551,11 @@
    },
    "nur": {
      "locked": {
-        "lastModified": 1728930569,
-        "narHash": "sha256-OvKCDKpI8sHA07Ct+f5uotGr9ATrIJ/fUfwZZnD8Tmk=",
+        "lastModified": 1729077813,
+        "narHash": "sha256-61tT+dRuJ9kGfrKgDRE/ReNw9mgIL/0uep56gehEg5Y=",
        "owner": "nix-community",
        "repo": "NUR",
-        "rev": "96670f5e62fc211ff06be5ed7654c44318ddf7e2",
+        "rev": "0fb85cae559957a989166e8cb80a82f316959f8f",
        "type": "github"
      },
      "original": {
@ -608,11 +602,11 @@
        "nixpkgs-stable": "nixpkgs-stable"
      },
      "locked": {
-        "lastModified": 1721042469,
-        "narHash": "sha256-6FPUl7HVtvRHCCBQne7Ylp4p+dpP3P/OYuzjztZ4s70=",
+        "lastModified": 1728778939,
+        "narHash": "sha256-WybK5E3hpGxtCYtBwpRj1E9JoiVxe+8kX83snTNaFHE=",
        "owner": "cachix",
        "repo": "pre-commit-hooks.nix",
-        "rev": "f451c19376071a90d8c58ab1a953c6e9840527fd",
+        "rev": "ff68f91754be6f3427e4986d7949e6273659be1d",
        "type": "github"
      },
      "original": {
@ -672,11 +666,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1728873041,
-        "narHash": "sha256-e4jz7yFADiZjMhv+iQwYtAN8AOUlOpbNQYnbwUFLjeM=",
+        "lastModified": 1729045942,
+        "narHash": "sha256-HjmK0x5Zm2TK2vFpC7XBM2e3EDNVnAIuEoU2FkeN8xw=",
        "owner": "oxalica",
        "repo": "rust-overlay",
-        "rev": "bdbe1611c2029de90bca372ce0b1e3b4fa65f55a",
+        "rev": "9de3cea452d2401d6f93c06ad985178a4e11d1fc",
        "type": "github"
      },
      "original": {
--- a/nixos/config/solitary/configuration.nix
+++ b/nixos/config/solitary/configuration.nix
@ -378,8 +378,8 @@ in {

      http-response set-header Alt-Svc "h3=\":443\""
      http-response set-header Cross-Origin-Embedder-Policy require-corp if no-coep
-      http-response set-header Cross-Origin-Opener-Policy same-origin if no-coop
-      http-response set-header Cross-Origin-Resource-Policy same-origin if no-corp
+      http-response set-header Cross-Origin-Opener-Policy same-site if no-coop
+      http-response set-header Cross-Origin-Resource-Policy same-site if no-corp
      http-response set-header Content-Security-Policy "default-src 'self'; frame-ancestors 'none'" if no-csp
      http-response set-header Referrer-Policy same-origin if no-rp
      http-response set-header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"