`services.strongswan-swanctl` uses the [swanctl](https://wiki.strongswan.org/projects/strongswan/wiki/swanctl) command which uses the modern [vici](https://github.com/strongswan/strongswan/blob/master/src/libcharon/plugins/vici/README.md) _Versatile IKE Configuration Interface_. The deprecated `ipsec` command used in `services.strongswan` is using the legacy [stroke configuration interface](https://github.com/strongswan/strongswan/blob/master/README_LEGACY.md).
- The new `services.elasticsearch-curator` service periodically curates or manages, your Elasticsearch indices and snapshots.
Every new services:
- `./config/xdg/autostart.nix`
- `./config/xdg/icons.nix`
- `./config/xdg/menus.nix`
- `./config/xdg/mime.nix`
- `./hardware/brightnessctl.nix`
- `./hardware/onlykey.nix`
- `./hardware/video/uvcvideo/default.nix`
- `./misc/documentation.nix`
- `./programs/firejail.nix`
- `./programs/iftop.nix`
- `./programs/sedutil.nix`
- `./programs/singularity.nix`
- `./programs/xss-lock.nix`
- `./programs/zsh/zsh-autosuggestions.nix`
- `./services/admin/oxidized.nix`
- `./services/backup/duplicati.nix`
- `./services/backup/restic.nix`
- `./services/backup/restic-rest-server.nix`
- `./services/cluster/hadoop/default.nix`
- `./services/databases/aerospike.nix`
- `./services/databases/monetdb.nix`
- `./services/desktops/bamf.nix`
- `./services/desktops/flatpak.nix`
- `./services/desktops/zeitgeist.nix`
- `./services/development/bloop.nix`
- `./services/development/jupyter/default.nix`
- `./services/hardware/lcd.nix`
- `./services/hardware/undervolt.nix`
- `./services/misc/clipmenu.nix`
- `./services/misc/gitweb.nix`
- `./services/misc/serviio.nix`
- `./services/misc/safeeyes.nix`
- `./services/misc/sysprof.nix`
- `./services/misc/weechat.nix`
- `./services/monitoring/datadog-agent.nix`
- `./services/monitoring/incron.nix`
- `./services/networking/dnsdist.nix`
- `./services/networking/freeradius.nix`
- `./services/networking/hans.nix`
- `./services/networking/morty.nix`
- `./services/networking/ndppd.nix`
- `./services/networking/ocserv.nix`
- `./services/networking/owamp.nix`
- `./services/networking/quagga.nix`
- `./services/networking/shadowsocks.nix`
- `./services/networking/stubby.nix`
- `./services/networking/zeronet.nix`
- `./services/security/certmgr.nix`
- `./services/security/cfssl.nix`
- `./services/security/oauth2_proxy_nginx.nix`
- `./services/web-apps/virtlyst.nix`
- `./services/web-apps/youtrack.nix`
- `./services/web-servers/hitch/default.nix`
- `./services/web-servers/hydron.nix`
- `./services/web-servers/meguca.nix`
- `./services/web-servers/nginx/gitweb.nix`
- `./virtualisation/kvmgt.nix`
- `./virtualisation/qemu-guest-agent.nix`
## Backward Incompatibilities {#sec-release-18.09-incompatibilities}
When upgrading from a previous release, please be aware of the following incompatible changes:
- Some licenses that were incorrectly not marked as unfree now are. This is the case for:
- cc-by-nc-sa-20: Creative Commons Attribution Non Commercial Share Alike 2.0
- cc-by-nc-sa-25: Creative Commons Attribution Non Commercial Share Alike 2.5
- cc-by-nc-sa-30: Creative Commons Attribution Non Commercial Share Alike 3.0
- cc-by-nc-sa-40: Creative Commons Attribution Non Commercial Share Alike 4.0
- cc-by-nd-30: Creative Commons Attribution-No Derivative Works v3.00
- msrla: Microsoft Research License Agreement
- The deprecated `services.cassandra` module has seen a complete rewrite. (See above.)
- `lib.strict` is removed. Use `builtins.seq` instead.
- The `clementine` package points now to the free derivation. `clementineFree` is removed now and `clementineUnfree` points to the package which is bundled with the unfree `libspotify` package.
- The `netcat` package is now taken directly from OpenBSD's `libressl`, instead of relying on Debian's fork. The new version should be very close to the old version, but there are some minor differences. Importantly, flags like -b, -q, -C, and -Z are no longer accepted by the nc command.