unison over vpn

desktop/services.nix

@@ -37,11 +37,11 @@ in
       pairs = {
         "docs".roots = [
           "/home/hd/Documents"
-          "ssh://roam//home/hd/Documents"
+          "ssh://roam.lan//home/hd/Documents"
         ];
         "desktop".roots = [
           "/home/hd/Desktop"
-          "ssh://roam//home/hd/Desktop"
+          "ssh://roam.lan//home/hd/Desktop"
         ];
       };
     };

flake.lock

@@ -198,6 +198,22 @@
         "type": "github"
       }
     },
+    "nixpkgs-stable": {
+      "locked": {
+        "lastModified": 1759994382,
+        "narHash": "sha256-wSK+3UkalDZRVHGCRikZ//CyZUJWDJkBDTQX1+G77Ow=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "5da4a26309e796daa7ffca72df93dbe53b8164c7",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-25.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "root": {
       "inputs": {
         "agenix": "agenix",
@@ -207,6 +223,7 @@
         "home-manager": "home-manager_2",
         "nixos-hardware": "nixos-hardware",
         "nixpkgs": "nixpkgs",
+        "nixpkgs-stable": "nixpkgs-stable",
         "vscode-extensions": "vscode-extensions"
       }
     },

flake.nix

@@ -1,6 +1,7 @@
 {
   inputs = {
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    nixpkgs-stable.url = "github:NixOS/nixpkgs/nixos-25.05";
     nixos-hardware.url = "github:NixOS/nixos-hardware/master";
     colmena = {
       url = "github:zhaofengli/colmena";
@@ -38,14 +39,16 @@
       home-manager,
       nixos-hardware,
       nixpkgs,
+      nixpkgs-stable,
       vscode-extensions,
     }@inputs:
     let
       inherit (nixpkgs) lib;
       lib' = import ./lib.nix { inherit lib; };
+      pkgs-stable = import nixpkgs-stable { system = "x86_64-linux"; };
 
       specialArgs = rec {
-        inherit inputs lib';
+        inherit inputs lib' pkgs-stable;
         var = import ./var { inherit lib; };
         secrets = lib'.walk-dir ./secrets;
       };

host/roam/firefox-sync.nix

@@ -1,5 +1,6 @@
 {
   pkgs,
+  pkgs-stable,
   config,
   secrets,
   ...
@@ -17,6 +18,7 @@
 
   services.firefox-syncserver = {
     enable = true;
+    package = pkgs-stable.syncstorage-rs;
     secrets = config.age.secrets.roam-firefox-sync-secret.path;
     singleNode = {
       enable = true;