Release 18.09 New Services and Backward Incompatibilities

`services.strongswan-swanctl` uses the [swanctl](https://wiki.strongswan.org/projects/strongswan/wiki/swanctl) command which uses the modern [vici](https://github.com/strongswan/strongswan/blob/master/src/libcharon/plugins/vici/README.md) _Versatile IKE Configuration Interface_. The deprecated `ipsec` command used in `services.strongswan` is using the legacy [stroke configuration interface](https://github.com/strongswan/strongswan/blob/master/README_LEGACY.md). - The new `services.elasticsearch-curator` service periodically curates or manages, your Elasticsearch indices and snapshots. Every new services: - `./config/xdg/autostart.nix` - `./config/xdg/icons.nix` - `./config/xdg/menus.nix` - `./config/xdg/mime.nix` - `./hardware/brightnessctl.nix` - `./hardware/onlykey.nix` - `./hardware/video/uvcvideo/default.nix` - `./misc/documentation.nix` - `./programs/firejail.nix` - `./programs/iftop.nix` - `./programs/sedutil.nix` - `./programs/singularity.nix` - `./programs/xss-lock.nix` - `./programs/zsh/zsh-autosuggestions.nix` - `./services/admin/oxidized.nix` - `./services/backup/duplicati.nix` - `./services/backup/restic.nix` - `./services/backup/restic-rest-server.nix` - `./services/cluster/hadoop/default.nix` - `./services/databases/aerospike.nix` - `./services/databases/monetdb.nix` - `./services/desktops/bamf.nix` - `./services/desktops/flatpak.nix` - `./services/desktops/zeitgeist.nix` - `./services/development/bloop.nix` - `./services/development/jupyter/default.nix` - `./services/hardware/lcd.nix` - `./services/hardware/undervolt.nix` - `./services/misc/clipmenu.nix` - `./services/misc/gitweb.nix` - `./services/misc/serviio.nix` - `./services/misc/safeeyes.nix` - `./services/misc/sysprof.nix` - `./services/misc/weechat.nix` - `./services/monitoring/datadog-agent.nix` - `./services/monitoring/incron.nix` - `./services/networking/dnsdist.nix` - `./services/networking/freeradius.nix` - `./services/networking/hans.nix` - `./services/networking/morty.nix` - `./services/networking/ndppd.nix` - `./services/networking/ocserv.nix` - `./services/networking/owamp.nix` - `./services/networking/quagga.nix` - `./services/networking/shadowsocks.nix` - `./services/networking/stubby.nix` - `./services/networking/zeronet.nix` - `./services/security/certmgr.nix` - `./services/security/cfssl.nix` - `./services/security/oauth2_proxy_nginx.nix` - `./services/web-apps/virtlyst.nix` - `./services/web-apps/youtrack.nix` - `./services/web-servers/hitch/default.nix` - `./services/web-servers/hydron.nix` - `./services/web-servers/meguca.nix` - `./services/web-servers/nginx/gitweb.nix` - `./virtualisation/kvmgt.nix` - `./virtualisation/qemu-guest-agent.nix` ## Backward Incompatibilities {#sec-release-18.09-incompatibilities} When upgrading from a previous release, please be aware of the following incompatible changes: - Some licenses that were incorrectly not marked as unfree now are. This is the case for: - cc-by-nc-sa-20: Creative Commons Attribution Non Commercial Share Alike 2.0 - cc-by-nc-sa-25: Creative Commons Attribution Non Commercial Share Alike 2.5 - cc-by-nc-sa-30: Creative Commons Attribution Non Commercial Share Alike 3.0 - cc-by-nc-sa-40: Creative Commons Attribution Non Commercial Share Alike 4.0 - cc-by-nd-30: Creative Commons Attribution-No Derivative Works v3.00 - msrla: Microsoft Research License Agreement - The deprecated `services.cassandra` module has seen a complete rewrite. (See above.) - `lib.strict` is removed. Use `builtins.seq` instead. - The `clementine` package points now to the free derivation. `clementineFree` is removed now and `clementineUnfree` points to the package which is bundled with the unfree `libspotify` package. - The `netcat` package is now taken directly from OpenBSD's `libressl`, instead of relying on Debian's fork. The new version should be very close to the old version, but there are some minor differences. Importantly, flags like -b, -q, -C, and -Z are no longer accepted by the nc command.

This chunk details further new services and backward incompatible changes introduced in Release 18.09. Specific new services highlighted include `services.strongswan-swanctl`, a modern replacement for `services.strongswan` that uses `swanctl` and the `vici` interface, and `services.elasticsearch-curator` for managing Elasticsearch indices. A comprehensive list of new service modules, configurations, and programs across various categories (e.g., hardware, backup, databases, networking, security) is also provided. Backward incompatible changes include the reclassification of several licenses as unfree, a complete rewrite of `services.cassandra`, the removal of `lib.strict` (suggesting `builtins.seq`), a change in the default `clementine` package to its free version, and an update to `netcat` from OpenBSD's `libressl`, which removes certain command flags.