From 8d03b05ffbae430fe69f80bea7c5977036cb8f7e Mon Sep 17 00:00:00 2001
From: Harald Hoyer <harald@subzero.xyz>
Date: Wed, 17 Sep 2025 15:57:18 +0200
Subject: [PATCH] feat(sgx): add cratedocs-mcp service and update flakes

- Enabled `services.cratedocs-mcp` with firewall access in the SGX module for enhanced functionality.
- Updated multiple Flake lockfile entries to the latest revisions, ensuring access to updated upstream changes.
---
 flake.lock                           | 26 +++++++++++++-------------
 systems/x86_64-linux/sgx/default.nix |  4 ++++
 2 files changed, 17 insertions(+), 13 deletions(-)

diff --git a/flake.lock b/flake.lock
index 0a82b5a..27814c8 100644
--- a/flake.lock
+++ b/flake.lock
@@ -78,11 +78,11 @@
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1748369672,
-        "narHash": "sha256-Mq3JW8ku2TU7WFjynIDmYnUXD1uC3t203gxRWKPSEl4=",
+        "lastModified": 1758116508,
+        "narHash": "sha256-OrfpnwXE9jIHJRC6lDln4QlDGkFhU6+zd17CzFlrCP4=",
         "ref": "refs/heads/main",
-        "rev": "8fe3cda271173d7dfb30c34a2c7da869af5b2e4a",
-        "revCount": 32,
+        "rev": "abc74ceb94c5749fc719991380d2fb3a34c30f64",
+        "revCount": 33,
         "type": "git",
         "url": "https://git.hoyer.xyz/harald/cratedocs-mcp.git"
       },
@@ -370,11 +370,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756679287,
-        "narHash": "sha256-Xd1vOeY9ccDf5VtVK12yM0FS6qqvfUop8UQlxEB+gTQ=",
+        "lastModified": 1757808926,
+        "narHash": "sha256-K6PEI5PYY94TVMH0mX3MbZNYFme7oNRKml/85BpRRAo=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "07fc025fe10487dd80f2ec694f1cd790e752d0e8",
+        "rev": "f21d9167782c086a33ad53e2311854a8f13c281e",
         "type": "github"
       },
       "original": {
@@ -585,11 +585,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1757408970,
-        "narHash": "sha256-aSgK4BLNFFGvDTNKPeB28lVXYqVn8RdyXDNAvgGq+k0=",
+        "lastModified": 1757941119,
+        "narHash": "sha256-TssJZFzMRYdWgpHySzKv4YQg6DUv5SDENiWbVgNTo0M=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "d179d77c139e0a3f5c416477f7747e9d6b7ec315",
+        "rev": "7ff837017c3b82bd3671932599a119d7bc672ff0",
         "type": "github"
       },
       "original": {
@@ -801,11 +801,11 @@
     },
     "unstable": {
       "locked": {
-        "lastModified": 1757487488,
-        "narHash": "sha256-zwE/e7CuPJUWKdvvTCB7iunV4E/+G0lKfv4kk/5Izdg=",
+        "lastModified": 1757745802,
+        "narHash": "sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "ab0f3607a6c7486ea22229b92ed2d355f1482ee0",
+        "rev": "c23193b943c6c689d70ee98ce3128239ed9e32d1",
         "type": "github"
       },
       "original": {
diff --git a/systems/x86_64-linux/sgx/default.nix b/systems/x86_64-linux/sgx/default.nix
index 71c746b..53b66df 100644
--- a/systems/x86_64-linux/sgx/default.nix
+++ b/systems/x86_64-linux/sgx/default.nix
@@ -34,6 +34,10 @@
   };
 
   #systemd.services.libvirt-guests.after = [ "network-online.target" ];
+  services.cratedocs-mcp = {
+    enable = true;
+    openFirewall = true;
+  };
 
   system.autoUpgrade = {
     enable = true;