based on https://www.ec2instances.info/

… version

As suggested by @edolstra

As suggested by @Profpatsch

As suggested by @Profpatsch

By default rspamd will look for multiple files in /etc/rspamd/local.d
and /etc/rspamd/override.d to be included in subsections of the merged
final config for rspamd. Most of the config snippets in the official
rspamd documentation are made to these files and so it makes sense for
NixOS to support them and this is what this commit does.

As part of rspamd 1.8.1 support was added for having custom Lua
rules stored in $LOCAL_CONFDIR/rspamd.local.lua which means that it is
now possible for NixOS to support such rules and so this commit also
adds support for this to the rspamd module.

https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.3.4.9

Please confirm the sha256 is correct for a verified tarball,
I'm not setup (or know how offhand but docs look promising)
to do this myself.

We keep the latest minor release of each one of the last 3 major releases,
which currently are GHC versions 8.2.2, 8.4.4, and 8.6.1. We also have
ghc-HEAD, but this doesn't count.

Dropping these compilers implied that we have to drop the corresponding
versions of ghcjs, too. We can also drop a shitload of obsolete compiler
patches that newer versions no longer need.

At some point, we can probably simplify the generic builder, too.

Just use whatever is the current default.

Folly disabled autotools-based builds in favor of CMake.

SSRF in Kubernetes integration
The GitLab Kubernetes integration was vulnerable to a SSRF issue which could allow an attacker to make requests to access any internal URLs. The issue is now mitigated in the latest release and is assigned CVE-2018-18843.

Building cargo-asm on Mojave fails with

ld: framework not found Security

Add Security as a build input.

cargo-asm: fix build on macOS Mojave

haskellPackages.sdl2: test-suite needs x server, so deactivate it

r-ps: patchShebangs in ./configure to fix build

cmusfm: init at 2018-10-11

* jq: 1.5 -> 1.6 (!!)

(last release was in 2015! :))

* jq: drop darwin patch, appears resolved by upgrade

commit history isn't that long, and has a few addressing
behavior on osx re:strptime-- and since this patch
doesn't apply it seems likely it's been resolved
but probably can be checked by any interested folks w/darwin.

nix-du: 0.2.0 -> 0.3.0

libid3tag: patch CVE-2017-11550 and CVE-2017-11551

gitlab: 11.4.3 -> 11.4.4

Critical security fixes.

tor: 0.3.4.8 -> 0.3.4.9

yices: 2.6.0 -> 2.6.1

maxx: fix urls

linuxPackages.bpftrace: init at unstable-2018-10-27

bump version librepcb-unstable: 2018-06-28 -> 2018-10-31

 pythonPackages.broadlink: init at 0.9