fix(ci): fix flake evaluation, pure modulesPath, user attrset, and add Gitea Packages upload

modules/core/users.nix

@@ -58,22 +58,21 @@ in {
   config = mkIf cfg.enable {
     users.mutableUsers = true;
 
-    # Admin user creation
-    users.users.${cfg.adminUser} = {
-      isNormalUser = true;
-      description = "NaxOS Primary Administrator";
-      extraGroups = [ "wheel" "docker" "video" "render" "users" ];
-      openssh.authorizedKeys.keys = cfg.adminSshKeys;
-      shell = pkgs.bashInteractive;
-    };
-
-    # Additional users
-    users.users = mapAttrs (name: ucfg: {
+    # Admin and additional user creation
+    users.users = {
+      ${cfg.adminUser} = {
+        isNormalUser = true;
+        description = "NaxOS Primary Administrator";
+        extraGroups = [ "wheel" "docker" "video" "render" "users" ];
+        openssh.authorizedKeys.keys = cfg.adminSshKeys;
+        shell = pkgs.bashInteractive;
+      };
+    } // (mapAttrs (name: ucfg: {
       isNormalUser = true;
       description = ucfg.description;
       extraGroups = (if ucfg.isAdmin then [ "wheel" ] else []) ++ ucfg.extraGroups ++ [ "users" ];
       openssh.authorizedKeys.keys = ucfg.sshKeys;
-    }) cfg.users;
+    }) cfg.users);
 
     security.sudo.wheelNeedsPassword = false;
   };

modules/services/apps/immich.nix

@@ -59,7 +59,15 @@ in {
       port = cfg.port;
       mediaLocation = cfg.mediaLocation;
       openFirewall = cfg.openFirewall;
-      accelerationDevices = cfg.accelerationDevices;
+    };
+
+    hardware.graphics = mkIf (cfg.runtime == "systemd") {
+      enable = true;
+      extraPackages = with pkgs; [
+        intel-media-driver
+        intel-compute-runtime
+        vpl-gpu-rt
+      ];
     };
 
     services.redis.servers.immich = mkIf (cfg.runtime == "systemd") {

modules/storage/zfs.nix

@@ -193,8 +193,7 @@ in {
       gptfdisk
       iotop
       ncdu
-      sanoid
-      syncoid
+      sanoid # Includes sanoid and syncoid
     ];
 
     # Generate systemd.tmpfiles rules for configured datasets with custom owners/modes