upgrade to NixOS 22.11

- switch nix config to generator
- temporarily disable subsurface due to insecure qtwebkit dependency
- disable tlp (but keep config) to try out power-profile daemon instead
- bump nixos-hardware revision

nixos/configuration.nix

@@ -45,7 +45,7 @@ in
   # powermanagement
   services.tlp =
     {
-      enable = true;
+      enable = false;
       settings = {
         "SATA_LINKPWR_ON_BAT" = "medium_power";
         "SATA_LINKPWR_ON_AC" = "max_performance";
@@ -245,14 +245,15 @@ in
   boot.kernel.sysctl."kernel.sysrq" = 1; # NixOS default: 16 (only the sync command)
 
   # keep build-time deps around for offline-rebuilding
-  nix.extraOptions = ''
-    keep-outputs = true
-    keep-derivations = true
-    trusted-users = spiollinux
-    experimental-features = nix-command
-  '';
-  # use all cores for building
-  nix.buildCores = 0;
+  nix.settings = {
+    # keep around all inputs necessary for offline-rebuilding the system
+    keep-outputs = true;
+    keep-derivations = true;
+    trusted-users = [ "spiollinux" ];
+    experimental-features = [ "nix-command" "flakes" ];
+    # use all cores for building
+    cores = 0;
+  };
   # override tmpdir for daemon
   #systemd.services.nix-daemon.environment.TMPDIR = "/var/tmp";