# Release 20.09 (“Nightingale”, 2020.09/??)

## Highlights

In addition to numerous new and upgraded packages, this release has the following highlights:

- Support is planned until the end of April 2021, handing over to 21.03.

- PHP now defaults to PHP 7.4, updated from 7.3.

- Two new options, authorizedKeysCommand and authorizedKeysCommandUser, have been added to the `openssh` module. If you have `AuthorizedKeysCommand` in your services.openssh.extraConfig you should make use of these new options instead.

## New Services

The following new services were added since the last release:

## Backward Incompatibilities

When upgrading from a previous release, please be aware of the following incompatible changes:

- Grafana is now built without support for phantomjs by default. Phantomjs support has been deprecated in Grafana and the `phantomjs` project is currently unmaintained. It can still be enabled by providing `phantomJsSupport = true` to the package instanciation:

      {
        services.grafana.package = pkgs.grafana.overrideAttrs (oldAttrs: rec {
          phantomJsSupport = false;
        });
      }

- The supybot module now uses `/var/lib/supybot` as its default stateDir path if `stateVersion` is 20.09 or higher. It also enables number of systemd sandboxing options which may possibly interfere with some plugins. If this is the case you can disable the options through attributes in `systemd.services.supybot.serviceConfig`.

- The `security.duosec.skey` option, which stored a secret in the nix store, has been replaced by a new security.duosec.secretKeyFile option for better security.

  `security.duosec.ikey` has been renamed to security.duosec.integrationKey.

## Other Notable Changes