Update aqua (#252)

* fix: Grafana's secret key doesn't have a default value anymore

flake.lock: Update

Flake lock file updates:

• Updated input 'mysecrets':
    'git+ssh://git@github.com/ryan4yin/nix-secrets.git?ref=refs/heads/main&rev=cfe34c222cf7ee4290438c97e6cc734aa7792346&shallow=1' (2025-12-18)
  → 'git+ssh://git@github.com/ryan4yin/nix-secrets.git?ref=refs/heads/main&rev=86de5313787257806723f03dccabd52bb7501ff3&shallow=1' (2026-03-18)

* fix: gitea sendmail path

* fix: transmission_4

hosts/idols-aquamarine/gitea.nix

@@ -49,7 +49,7 @@
         ENABLED = true;
         MAILER_TYPE = "sendmail";
         FROM = "do-not-reply@writefor.fun";
-        SENDMAIL_PATH = "${pkgs.stdenv.hostPlatform.system-sendmail}/bin/sendmail";
+        SENDMAIL_PATH = "${pkgs.system-sendmail}/bin/sendmail";
       };
       other = {
         SHOW_FOOTER_VERSION = false;

hosts/idols-aquamarine/grafana/default.nix

@@ -39,6 +39,7 @@
         # Use file provider to read the admin password from a file.
         # https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#file-provider
         admin_password = "$__file{${config.age.secrets."grafana-admin-password".path}}";
+        secret_key = "$__file{${config.age.secrets."grafana-secret-key".path}}";
       };
       users = {
         allow_sign_up = false;

hosts/idols-aquamarine/transmission.nix

@@ -1,6 +1,7 @@
 {
   config,
   myvars,
+  pkgs,
   ...
 }:
 let
@@ -13,6 +14,7 @@ in
   # https://wiki.archlinux.org/title/transmission
   services.transmission = {
     enable = true;
+    package = pkgs.transmission_4;
     user = name;
     group = name;
     home = dataDir;