chore(ci): minor updates

.terraformignore

@@ -0,0 +1,9 @@
+/**
+!tf/
+tf/.terraform*
+tf/*.tfvars*
+!systems/
+#systems/*/*.nix
+systems/*/secrets.yaml
+!ci/
+/**.nix

flake.lock

@@ -41,11 +41,11 @@
     "ci": {
       "flake": false,
       "locked": {
-        "lastModified": 1752719221,
-        "narHash": "sha256-jUmXg9P/2dVGjrKxhVJ/3dzFJZ969QrfpHDPe+f6cLU=",
+        "lastModified": 1756937251,
+        "narHash": "sha256-VIqMPRwLI2eCJFi8f3CqUk7jrTJ2AcWlI9z4d/H9+Do=",
         "owner": "arcnmx",
         "repo": "ci",
-        "rev": "ada9995f7539a7d22d71b6f04227fd34a54d2ac0",
+        "rev": "6ea24db22eb6735ed616d69de6dc435fce60d322",
         "type": "github"
       },
       "original": {

overlays/krb5.nix

@@ -18,7 +18,7 @@ in {
         rust189warning
       ];
     });
-  in if _389-ds-base.version == "3.1.3"
+  in if _389-ds-base.version == "3.1.3" && _389-ds-base.patches or [] == []
     then drv
     else lib.warn "389-ds-base patch probably no longer needed" _389-ds-base;
 }

systems/logistics/default.nix

@@ -4,6 +4,10 @@ _: {
   modules = [
     ./nixos.nix
   ];
+  access.online = {
+    # temporarily offline for server migration
+    available = false;
+  };
   exports = {
     services = {
       nginx.enable = true;

tf/terraform.tf

@@ -8,7 +8,8 @@ terraform {
     }
     cloudflare = {
       source  = "cloudflare/cloudflare"
-      version = ">= 4.22.0"
+      # XXX: 5.0 requires manual migration
+      version = "~> 4.22"
     }
     proxmox = {
       source  = "bpg/proxmox"