chore(main): release 2.3.0

[github-actions]

🤖 I have created a release beep boop

2.3.0 (2026-08-09)

Features

• Add agenix-rekey flake schema (5e8416b)
• Add basic default mime type sources (1dc259c)
• Add default NetworkManager priorities for ethernet and wifi (905f490)
• Add freesmlauncher (e6c94df)
• Add gui.imageEditors home module (df1cc19)
• Add headless, server profiles, more granular profiles (5b91bba)
• Add hyprland bindings for play/previous/next media keys (0af2ef1)
• Add my.deprecated nixos/home option (361482e)
• Add nixtests to flake checks (6b5500a)
• Add vars.networking, advertise routes on tailscale for servers (ab7701e)
• Add zen browser (0e65f04)
• Better standalone home config detection (2a3324d)
• Change OCI backend to podman, enable on desktop and laptop (fec835d)
• ci: Only run Build CI action after Check if it succeeds (7326a3b)
• cli.editors.neovim: Misc plugin tweaks (c2bb94b)
• cli.editors: Revive neovim config, enable by default (3e09872)
• cli.extras: Add freeze for cli screenshot generation (e4dd0fa)
• Dedicated keymaps module for nvim, WIP helix-like bindings (3e74a46)
• Disable fish/man completions and scripts for servers (1b3feda)
• Enable experimental CanvasBio CB2000 libfprint patches (0a123fe)
• Enable syncthing on raspberrypi, misc improvements (6b85730)
• Experimental native docker-lock (50cc370)
• Initial colmena implementation (29adf00)
• Initial OCI virtualization options (02bc2e1)
• IP info on var.hosts, better known hosts file (faab682)
• just: Better just secrets module (1d57096)
• More solid substituters, expose nix settings on flake (0c2f00e)
• neovim: Add custom animotion plugin (adc69ea)
• neovim: Tweak indent-blankline, treesitter settings (ca891af)
• Networking module revamp (847f501)
• NixOS services module refactor, WIP home assistant service (51ce29f)
• nixos: Add storage module (1efccb3)
• obsidian: Use home manager program for obsidian (5997464)
• Overlay patched termshot to support custom fonts (2081b78)
• Prettier just test output (b86d546)
• Refactor lib.config to vars (7b160f5)
• Remove unnecessary podman user definition (314cec9)
• Server features (9d94aba)
• Set sans-serif and serif fonts (050e285)
• Split gnome and gdm profiles (3d43e99)
• SSH keypair generator, yubikey secrets + pubkey (980adad)
• ssh: Use setEnv to fix TERM env var issues (3a4f873)
• Syncthing GUI user + password, defaults, add steamdeck-standalone (6e17eab)
• syncthing: Migrate syncthing to home configuration (020f617)
• tests: Add age pubkey snapshot, ensure servers have authorized keys (2b217b7)
• tests: Implement nixtest, initial snapshot tests (8a7e0f6)
• Update inputs, fix custom nushell writers, init hyfetch (518c597)

Bug Fixes

• Atuin secrets (e117172)
• Authorized keys (c22f30c)
• Bar enabled on non graphical config, nixd always enabled (30f5b2b)
• ci: Remove workflow_run trigger on build, quieter matrix generation (e68e2dd)
• Disable more undesired non-graphical packages (314b128)
• Disable syncthing tray by default, misc small fixes (3b0693e)
• Enable acpid, upower by default (5c36017)
• GHA nix commands (c321532)
• Lix nix-direnv infrec (af62025)
• Lix overlay infinite recursion (f00c9da)
• New tailscale key with permission to assign all existing tags (10fa2c9)
• Raspberry pi config, update inputs (789d50b)
• Remove dangling flakeModule (7911c86)
• Set users.podman.isSystemUser (971dacc)
• ssh: Add id_ed25519 identity (b4351ba)
• ssh: Add new tangled domain (8699c6b)
• ssh: Clean up identities, fix host-specific matchers (9301739)
• ssh: Fix tangled's domain (4869b98)
• tailscale: Misc tailscale fixes (58eef73)
• u2f auth file actually works again, now only requires pin for sudo (f5c0a14)
• u2f: Disable u2f auth on login (a1f36a6)
• Update deprecated documentation.man.generateCaches (b20ddb8)
• Update desktop pubkey snapshot (ce43537)
• Wrong reference in lib.storage, build CI action ref (a22071c)

---

This PR was generated with Release Please. See documentation.