Bump flake inputs nixpkgs rust-overlay lanzaboote

Bump nixpkgs and rust-overlay in flake.lock. Add a wud container
(ghcr.io/getwud/wud) on port 8186 and enable paperless on port 8187
with OCR settings and public consumption. Switch homepage theme to
light and set a background image. Comment out onnxruntime CUDA overlay.

flake.lock

@@ -65,11 +65,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1769417433,
-        "narHash": "sha256-0WZ7I/N9InaBHL96/qdiJxg8mqFW3vRla8Z062JmQFE=",
+        "lastModified": 1769949118,
+        "narHash": "sha256-Ue9kYZenqMw9yHGFnBpoWxQqhs2tlH/el4AxKVicXBE=",
         "owner": "nix-community",
         "repo": "lanzaboote",
-        "rev": "1902463415745b992dbaf301b2a35a1277be1584",
+        "rev": "0be0641613a13323a61a6406c46b6f28b8894395",
         "type": "github"
       },
       "original": {
@@ -95,11 +95,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1769170682,
-        "narHash": "sha256-oMmN1lVQU0F0W2k6OI3bgdzp2YOHWYUAw79qzDSjenU=",
+        "lastModified": 1769789167,
+        "narHash": "sha256-kKB3bqYJU5nzYeIROI82Ef9VtTbu4uA3YydSk/Bioa8=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "c5296fdd05cfa2c187990dd909864da9658df755",
+        "rev": "62c8382960464ceb98ea593cb8321a2cf8f9e3e5",
         "type": "github"
       },
       "original": {
@@ -147,11 +147,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1769482338,
-        "narHash": "sha256-SVwjMqR981PEdEdRvYj5Mefnd61GLinWmIr7GMu7LW8=",
+        "lastModified": 1769915446,
+        "narHash": "sha256-f1F/umtX3ZD7fF9DHSloVHc0mnAT0ry0YK2jI/6E0aI=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "dc9c76a75a6d382613cdcb1a3f95640e9cedcdea",
+        "rev": "bc00300f010275e46feb3c3974df6587ff7b7808",
         "type": "github"
       },
       "original": {

heimserver/configuration.nix

@@ -81,6 +81,8 @@
       8182 # ntopng frontend
       8183 # adguardhome frontend
       8185 # scrutiny frontend
+      8186 # wud frontend
+      8187 # paperless frontend
       8080 # homepage
     ];
     firewall.allowedUDPPorts = [
@@ -431,6 +433,20 @@
         "--network=host"
       ];
     };
+    containers.wud = {
+      # Note: The image will not be updated on rebuilds, unless the version label changes
+      image = "ghcr.io/getwud/wud";
+      volumes = [
+        "/var/run/podman/podman.sock:/var/run/docker.sock"
+      ];
+      environment = {
+        WUD_SERVER_PORT = "8186";
+        WUD_TRIGGER_COMMAND_LOCAL_CMD="echo \${display_name} can be updated to \${update_kind_remote_value}";
+      };
+      extraOptions = [
+        "--network=host"
+      ];
+    };
   };
 
   services.ntopng = {
@@ -491,6 +507,25 @@
     port = 8183;
   };
   
+  services.paperless = {
+    enable = true;
+    consumptionDirIsPublic = true;
+    address = "0.0.0.0";
+    port = 8187;
+    settings = {
+      PAPERLESS_CONSUMER_IGNORE_PATTERN = [
+        ".DS_STORE/*"
+        "desktop.ini"
+      ];
+      PAPERLESS_OCR_LANGUAGE = "deu+eng";
+      PAPERLESS_OCR_USER_ARGS = {
+        optimize = 1;
+        pdfa_image_compression = "lossless";
+      };
+    };
+  };
+
+
   services.homepage-dashboard = {
     enable = true;
     listenPort = 8080;
@@ -498,8 +533,9 @@
 
     settings = {
       title = "Heimserver";
-      theme = "dark";
+      theme = "light";
       color = "slate";
+      background = "https://images.unsplash.com/photo-1768326943626-a80f242a7970";
       layout = {
         "Home Automation" = {
           style = "row";
@@ -598,13 +634,6 @@
               };
             };
           }
-          {
-            "Github" = {
-              href = "https://github.com/CrazyChaoz";
-              description = "Github";
-              icon = "github.png";
-            };
-          }
         ];
       }
       {
@@ -647,6 +676,17 @@
               };
             };
           }
+          {
+            "Whats Up Docker" = {
+              href = "http://192.168.69.69:8186";
+              description = "Docker Image Updates";
+              icon = "whats-up-docker.png";
+              widget = {
+                type = "whatsupdocker";
+                url = "http://192.168.69.69:8186";
+              };
+            };
+          }
           {
             "ntopng" = {
               href = "http://192.168.69.69:8182";
@@ -702,6 +742,15 @@
               }
             ];
           }
+          {
+            "Github" = [
+              {
+                abbr = "GH";
+                href = "https://github.com/CrazyChaoz";
+                icon = "github.png";
+              }
+            ];
+          }
         ];
       }
       {
@@ -740,11 +789,11 @@
 
   nixpkgs.config.allowUnfree = true;
 
-  nixpkgs.overlays = [
-    (final: prev: {
-      onnxruntime = prev.onnxruntime.override { cudaSupport = true; };
-    })
-  ];
+  # nixpkgs.overlays = [
+  #   (final: prev: {
+  #     onnxruntime = prev.onnxruntime.override { cudaSupport = true; };
+  #   })
+  # ];
 
   # Nix settings
   nix.settings.experimental-features = [