use `lastModifiedDate` for build info
nixos module: make config file read-only
fix nondeterminism
due to build info being overridden
nixos module: disable video transcoder by default
nixos module: fix video thumbnails
update nixpkgs and flake-parts
use long flags for readability
use binary wrapper
nixpkgs docs say to prefer this
update filestash, drop npmlock2nix, update nixpkgs, add update script for package-lock.json
nixos module: add missing tmp and cert directories
build libtranscode and libresize
pull filestash source via flake input