Commit Graph

18543 Commits

Author SHA1 Message Date
networkException
644eac31e6
nixos/matrix-sliding-sync: document unix socket support in SYNCV3_BINDADDR 2024-02-29 11:03:01 +01:00
Leona Maroni
3302864e6e
Merge pull request #292030 from Flakebi/paperless
paperless: fix uploading files via local folder
2024-02-29 08:10:28 +01:00
Robert Schütz
3330e3c9c3 nixos/searx: use lib.getExe 2024-02-28 17:51:24 -08:00
abysssol
8720397720 nixos/ollama: replace incorrect use of overrideAttrs
The bug prevents nixos from compiling
if the ollama service is built with cuda enabled.
2024-02-28 17:15:30 -05:00
K900
2614e40893 sddm: add Wayland to the wrapper if enabled 2024-02-28 18:49:33 +03:00
K900
7b74d9a4ac sddm: 0.20.0-unstable -> 0.21.0 2024-02-28 18:49:33 +03:00
K900
3f650b567f nixos/plasma6: init 2024-02-28 18:49:33 +03:00
K900
8be79e54c5 nixos/pam/kwallet: rename option, allow setting package 2024-02-28 18:49:33 +03:00
K900
2248bdfbbc nixos/sddm: add extraPackages option 2024-02-28 18:49:12 +03:00
André Vitor de Lima Matos
675ad00f22
pipewire: fix wireplumber config paths
Quickfix for systemWide pipewire after #282377
2024-02-28 10:46:52 -03:00
Pol Dellaiera
200390b3ed
Merge pull request #291748 from abysssol/update-ollama-0.1.27
ollama: 0.1.26 -> 0.1.27
2024-02-28 10:15:42 +01:00
Flakebi
9db96ee839
paperless: fix uploading files via local folder
The consumer service needs to be in the same namespace as the
task-queue, otherwise they cannot see each others temporary files.
Same as for web uploading.

See also the discussion here:
https://github.com/paperless-ngx/paperless-ngx/discussions/5606
2024-02-28 09:14:48 +01:00
K900
a64a75a7ca
Merge pull request #291946 from hcsch/pipewire-wireplumber-config-packages-migration
nixos/pipewire: add assertions for migration to `extraConfig`/`configPackages`
2024-02-28 09:17:34 +03:00
Morgan Jones
a5c305d170
nixos/armagetronad: address code review feedback 2024-02-27 18:59:37 -08:00
pennae
b71ca1c90a
Merge pull request #291922 from NixOS/mosquitto-2
nixos/mosquitto: remove stutter in acl file name
2024-02-28 02:06:01 +01:00
Hans Christian Schmitz
5f6dca8403
nixos/pipewire: add assertions for migration to extraConfig/configPackages
The PR #282377 made files/directories specified in
`environment.etc."pipewire<...>"` and `environment.etc."wireplumber<...>"`
conflict with existing configuration of the PipeWire NixOS module due to how
the `configPackages` options were implemented. This sadly wasn't easily
avoidable. As this can cause breakage for users moving from 23.11 to 24.05
though, assertions can help guide them to use `services.pipewire.extraConfig`
or `services.pipewire.configPackages` / `services.wireplumber.configPackages`
instead, fixing the breakage.
2024-02-28 01:22:28 +01:00
abysssol
5c143f0366 nixos/ollama: override kernelPackages with nvidia driver
Instead of setting linuxPackages to a singleton set with nvidia_x11,
override the system's kernelPackages with the nvidia driver.
This is more semantically correct, though doesn't change any behavior.
2024-02-27 18:51:54 -05:00
e1mo
43fee5401d
nixos/bird-lg: Update option description to indicate new features
In release v1.3.3[0] support for CIDRs was added, thus updated the
option description to indicate the new support for that.

[0]: https://github.com/xddxdd/bird-lg-go/releases/tag/v1.3.3
2024-02-27 23:54:21 +01:00
Sandro
f9477e3a75
Merge pull request #209506 from Izorkin/update-dhcpcd-exit-hook
nixos/dhcpcd: optimize exitHook
2024-02-27 23:01:22 +01:00
Sandro
4c88c797b8
nixos/mosquitto: remove stutter in acl file name 2024-02-27 22:15:43 +01:00
Atemu
97f445e8f1
Merge pull request #245005 from Scrumplex/nixos-monado
nixos/monado: init
2024-02-27 20:11:04 +00:00
Sandro Jäckel
6753857664
nixos/tailscale: add option to pass flags to tailscaled 2024-02-27 20:08:08 +01:00
Sandro Jäckel
6cd7477733
nixos/hydra: add option for starman workers
This is useful for small deployments which do not need 5 spare starman
workers taking 160 MB of RAM each.
2024-02-27 15:45:20 +01:00
Someone Serge
2a63db4e6f
nixos/virtualisation.containers.cdi.dynamic.nvidia: expose driverLink
..shallowly
2024-02-27 12:50:59 +00:00
Someone Serge
65dbac7215
nixos/virtualisation.containers.cdi.dynamic.nvidia: refactor w/ callPackage 2024-02-27 11:59:57 +00:00
Jon Seager
d0b85d47c6
Merge pull request #289863 from mjm/nut-exporter-variables
nixos/prometheus-nut-exporter: use extraFlags, add nutVariables option
2024-02-27 11:11:30 +00:00
pennae
13aff9b34c
Merge pull request #259937 from charmoniumQ/patch-1
nixos/mosquitto: fix ACL permissions
2024-02-26 22:58:40 +01:00
Atemu
f53c775852
Merge pull request #278454 from litchipi/mealie
mealie: init at 1.2.0
2024-02-26 21:01:49 +00:00
Luflosi
a982176a71
nixos/memcached: clarify behaviour of enableUnixSocket
Let's make it clear that enabling this option will disable listening on an IP address and port.
2024-02-26 15:29:55 +01:00
Pol Dellaiera
033a375a23
Merge pull request #290363 from abysssol/update-ollama-0.1.26
ollama: 0.1.24 -> 0.1.26
2024-02-26 15:00:57 +01:00
K900
eb74747f38 nixos/pipewire: add LV2 plugins option
Follow-up #282377.

Some packages may want to load LV2 plugins directly from PipeWire config instead, so add another option to accomodate those.
2024-02-26 10:04:45 +03:00
K900
92b9d11129
Merge pull request #282377 from hcsch/pipewire-wireplumber-config-packages
nixos/pipewire: add configPackages options
2024-02-26 09:12:06 +03:00
abysssol
b8d8c1f207 nixos/ollama: add option for hardware acceleration 2024-02-25 15:57:58 -05:00
0x4A6F
97bca14e41
Merge pull request #290719 from martinetd/atuin
atuin: small fixes
2024-02-24 23:05:25 +01:00
RatCornu
2f460b3f53
nixos/suwayomi-server: add option settings.server.extensionRepos
This option is now a key feature of Suwayomi-Server, so it is
interesting to have it directly available in a quick search.
2024-02-24 19:43:03 +01:00
Sandro
7fab1e2013
Merge pull request #275024 from jerith666/lorri-less-protected 2024-02-24 16:07:13 +01:00
Sandro
806772b178
Merge pull request #274662 from StarGate01/pcscd-debug 2024-02-24 01:23:10 +01:00
Sandro
f6b46c1f59
Merge pull request #290119 from cafkafk/kublet-config 2024-02-24 00:34:46 +01:00
Michele Guerini Rocco
ed9121e5d7
Merge pull request #282758 from rht/hardware_no_network
hddfancontrol & thinkfan: disable network access.
2024-02-24 00:15:24 +01:00
Pol Dellaiera
f9ef0053c5
Merge pull request #288401 from katexochen/bees/refactor
bee: refactor & update; bee{-unstable,-clef}: remove; maintainers: remove attila-lendvai
2024-02-23 20:12:41 +01:00
Christoph Honal
6c5bcf43f1 nixos/pcscd: Add extraArgs option 2024-02-23 16:52:36 +01:00
Sefa Eyeoglu
3f7e9baeeb
nixos/monado: prevent Monado from restarting quickly
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:16 +01:00
Sefa Eyeoglu
0e585a63e2
nixos/monado: make CAP_SYS_NICE wrapper configurable
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:16 +01:00
Sefa Eyeoglu
2d2493b23d
nixos/monado: add option to make Monado the default OpenXR runtime
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:15 +01:00
Sefa Eyeoglu
ce36e73fdb
nixos/monado: link OpenXR runtimes
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:15 +01:00
Sefa Eyeoglu
9003167522
xr-hardware: init at unstable-2023-11-08
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:15 +01:00
Sefa Eyeoglu
5d57df8a80
nixos/monado: init
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:15 +01:00
Hans Christian Schmitz
e722c56160
nixos/wireplumber: add required lv2 plugins to service path 2024-02-23 08:58:16 +01:00
Hans Christian Schmitz
5bf2637b48
nixos/wireplumber: add config packages option 2024-02-23 08:58:15 +01:00
Hans Christian Schmitz
054bba560a
nixos/pipewire: add config packages option 2024-02-23 08:57:16 +01:00
Hans Christian Schmitz
992582fdf8
nixos/pipewire: Fix capitalization
In docs PipeWire and WirePlumber should be capitalized as in this
sentence.
2024-02-23 08:57:12 +01:00
Christina Sørensen
26036ecf31
kubelet: Set Kubelet Parameters Via A intermediate Configuration File
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-02-23 08:55:02 +01:00
Litchi Pi
4ebf2b54b0 nixos/mealie: init module
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-02-23 07:15:24 +01:00
Sandro
80e6bb31d5
Merge pull request #289956 from SuperSandro2000/archisteamfarm 2024-02-23 02:06:03 +01:00
Sandro
78745f4652
Merge pull request #289934 from jnsgruk/scrutiny 2024-02-23 00:43:55 +01:00
Dominique Martinet
85ee3198c7 atuin: Allow setting database.uri to null
When a password is required to connect to postgres using
services.atuin.database.uri directly would make the password be written
in the nix store, which is suboptimal.
Instead we can have the password in a file accessible only to root by
having systemd read an EnvironmentFile directly, but we must ensure that
this file has priority over the environment set.
Not setting the variable in this case is more straightforward.
2024-02-23 07:35:21 +09:00
Jon Seager
88d637c6dd
nixos/scrutiny: init 2024-02-22 21:20:10 +00:00
Maxine Aubrey
e1863b4f79
nixos/networkmanager: support stable-ssid for cloned MAC addresses 2024-02-22 18:37:13 +01:00
Martin Weinelt
878609256b
Merge pull request #287348 from mweinelt/fastly-exporter-module
nixos/prometheus-fastly-exporter: fix runtime environment, refactor, make things prettier
2024-02-22 16:37:51 +01:00
Someone
ee3923ed7d
Merge pull request #284507 from ereslibre/containers-cdi
NixOS: Add support for CDI
2024-02-22 13:03:18 +00:00
Rafael Fernández López
8ba61ebb8a services/hardware: add nvidia-container-toolkit 2024-02-21 22:17:07 +01:00
Adam C. Stephens
d1e2847664
Merge pull request #281000 from cablespaghetti/master
sabnzbd: Add configurability of state directory owner and firewall
2024-02-21 08:37:46 -05:00
adisbladis
e4e474fbcf
Merge pull request #273670 from adisbladis/zope2-removal
nixos/zope2: Remove module
2024-02-21 17:19:07 +13:00
Leona Maroni
47b7eb8fd9
nixos/vikunja: remove setupNginx option
The required nginx configuration is now really simple, and e.g. SSL/ACME
already required the user to interact with `services.nginx.virtualHosts`.
Therefore, and to reduce complexity, we now leave the web server
configuration to the user.
2024-02-20 22:43:53 +01:00
Leona Maroni
8817f080cc
nixos/vikunja: adapt for vikunja 0.23.0
This version removes dedicated api and frontend packages.
2024-02-20 22:43:53 +01:00
Rick van Schijndel
e5e1de76b7
Merge pull request #281058 from wineee/fi
deepin: don't install packages using freeimage by default
2024-02-20 20:27:47 +01:00
Sandro
d9bc710130
Merge pull request #289754 from chewblacka/nixos/atuin-add-package-option 2024-02-20 14:11:14 +01:00
Bobby Rong
931e2b8adc
Merge pull request #289788 from FedericoSchonborn/budgie-control-center-1.4.0
budgie.budgie-control-center: 1.3.0 -> 1.4.0
2024-02-20 12:43:23 +08:00
Federico Damián Schonborn
b9c8b27f89
nixos/budgie: Enable SSH socket support in BCC when needed
Signed-off-by: Federico Damián Schonborn <federicoschonborn@disroot.org>
2024-02-19 18:06:33 -03:00
Nick Cao
2da4adbd10
Merge pull request #289862 from maxbrunet/feat/automatic-timezoned/v2
automatic-timezoned: 1.0.148 -> 2.0.0
2024-02-19 09:42:42 -05:00
Sandro
30f71249a8
Merge pull request #285866 from 999eagle/feat/pgbouncer-systemd 2024-02-19 14:42:01 +01:00
Sandro Jäckel
69f51e028a
ArchiSteamFarm,nixos/ArchiSteamFarm: take maintainership
this is effectively already the case and I most updates in the last
months
2024-02-19 13:25:57 +01:00
Sandro
a332040396
Merge pull request #247668 from jtbx/nixos-teeworlds
nixos/teeworlds: add more configuration options
2024-02-19 02:51:04 +01:00
Maxime Brunet
5c1c4c75f7 automatic-timezoned: 1.0.148 -> 2.0.0 2024-02-18 15:01:25 -08:00
Matt Moriarity
bbad81f937 nixos/prometheus-nut-exporter: use extraFlags, add nutVariables option 2024-02-18 15:55:09 -07:00
John Garcia
7427bec3a7 nixos/atuin: add services.atuin.package option 2024-02-18 22:19:41 +00:00
Artturi
dab023d0cc
Merge pull request #287257 from 999eagle/fix/hydra-pg-application-name
nixos/hydra: use set-default in hydra-env wrapper package
2024-02-18 17:21:53 +02:00
Aaron Andersen
0276bd7269
Merge pull request #288166 from Princemachiavelli/jhoffer/remove_fixed_mysql_timeout
nixos/mysql: remove fixed timeout and use notify service type
2024-02-18 09:13:46 -05:00
rasmus-kirk
9f2d51a4e7 nixos/transmission: fix log level bounds to match the transmission wiki 2024-02-18 23:45:10 +11:00
adisbladis
3209343527 nixos/zope2: Remove module
`zope2` is unmaintained and the module is relying on Python2.
2024-02-18 17:48:24 +13:00
Morgan Jones
32f56d7266
nixos/nebula: fix port resolution for firewall rules 2024-02-17 15:07:27 -08:00
Sandro
8f13ee7049
Merge pull request #179034 from viraptor/go-camo-service
nixos/go-camo: init
2024-02-17 22:12:13 +01:00
Sandro
cf59adeb8c
Merge pull request #271324 from nessdoor/sourcehut/tests
nixosTests.sourcehut: implement proper integration testing
2024-02-17 20:58:22 +01:00
Stanisław Pitucha
2eed715fbf
nixos/go-camo: init 2024-02-17 20:45:49 +01:00
Izorkin
c1a97e1f49
nixos/mastodon: add option redis.passwordFile 2024-02-17 15:52:58 +03:00
Someone
5dec53ad28
Merge pull request #289401 from philiptaron/bolt
nixos/bolt: add a services.hardware.bolt.package option
2024-02-17 12:17:18 +00:00
jacekpoz
86abdfdf87 nixos/asusctl: add package option 2024-02-17 21:34:35 +11:00
K900
b7efb1e376
Merge pull request #289331 from K900/greetd-restart-on-success
nixos/greetd: only restart on success
2024-02-17 08:39:45 +03:00
Philip Taron
ad029745ce
nixos/bolt: add a services.hardware.bolt.package option
It just seems like good manners.
2024-02-16 14:56:20 -08:00
Sarah Brofeldt
c267e823b7
Merge pull request #289227 from JorisBolsens/patch-3
nixos/kubernetes: set k8 home permissions correctly
2024-02-16 19:34:14 +01:00
K900
56eb2542da nixos/greetd: only restart on success
Otherwise, if the greeter/session crashes on startup, greetd enters a restart loop
that requires very precise timing to kill.
2024-02-16 19:42:31 +03:00
Izorkin
cf62e3257f
nixos/mastodon: redis now uses unix socket by default 2024-02-16 16:39:31 +03:00
Izorkin
1293f046b5
nixos/dhcpcd: optimize exitHook 2024-02-16 10:12:52 +03:00
Joris Bolsens
81391bd22f nixos/kubernetes: set k8 home permissions correctly 2024-02-15 23:11:59 -08:00
Izorkin
937220442c
nixos/peertube: update nginx configuration 2024-02-16 09:31:27 +03:00
Izorkin
6e61227199
peertube: split peertube-cli utility 2024-02-16 09:31:26 +03:00
Izorkin
00e4bf4d02
peertube: 5.2.1 -> 6.0.3 2024-02-16 09:31:26 +03:00
Sophie Tauchert
f6278d4f6a
nixos/pgbouncer: fix openFirewall option 2024-02-15 21:42:27 +01:00
Sophie Tauchert
b89cd583ae
nixos/pgbouncer: only depend on postgresql.service when enabled and use notify
See also the upstream service file: e6ce619785/etc/pgbouncer.service
2024-02-15 21:42:27 +01:00
Felix Bühler
60abd7c1f9
Merge pull request #288138 from ambroisie/tandoor-recipes-manage-script
nixos/tandoor-recipes: improve manage script
2024-02-15 20:26:03 +01:00
Felix Bühler
27f19c1efd
Merge pull request #288622 from Stunkymonkey/photoprism-manage-script
nixos/photoprism: improve manage script
2024-02-15 20:18:42 +01:00
Sarah Brofeldt
ed0bc642b7
Merge pull request #288466 from JorisBolsens/patch-2
nixos/kubernetes: don't delete the apitoken after its created
2024-02-15 18:20:24 +01:00
Thomas
149fb601dd
nixos/tinyproxy: add quotes around the filter path
Using already existing function
2024-02-15 16:25:04 +01:00
Vladimír Čunát
aaca7a186f
Merge #286596: nixos/knot: add support for XDP setups 2024-02-15 09:19:59 +01:00
Yt
f13f90978a
Merge pull request #288638 from ThyMYthOS/update-stalwart
stalwart-mail: fix default configuration and test
2024-02-14 21:42:46 +00:00
Michele Guerini Rocco
f74d88a6f1
Merge pull request #281162 from kennycallado/master
nixos/icewm: Update icewm start command
2024-02-14 18:17:27 +01:00
maxine
8c8cc53769
Merge pull request #288531 from chewblacka/update-undervolt
undervolt: 0.3.0 -> 0.4.0
2024-02-14 17:30:53 +01:00
Michele Guerini Rocco
cd02351ae0
Merge pull request #233017 from koenw/libreswan-StateDirectory
nixos/libreswan: Use StateDirectory to setup ipsec/nss
2024-02-14 14:36:43 +01:00
Michele Guerini Rocco
bac2597d26
Merge pull request #270737 from bramd/brltty-6.6
Update BRLTTY to 6.6
2024-02-14 14:10:32 +01:00
Michele Guerini Rocco
dc91f91987
Merge pull request #286393 from oddlama/fix-hostapd-utf8-ssid
nixos/hostapd: fix utf8Ssid setting not properly honored
2024-02-14 14:08:46 +01:00
Matt Leon
c0846f900a
matter-server: add nixos service module
New module to run the python-matter-server executable as a sandboxed
system service.
2024-02-13 19:17:53 -05:00
Jeremy
e01eda6edd nixos/teeworlds: add more configuration options, revise
- add 'package' option
- add 'game' and 'server' attrset
- reduce repetition by using functions bool and optionalSetting
- add default value for cfg.name
- revise some option descriptions
2024-02-14 10:57:08 +13:00
Manuel Stahl
cd8aad903c stalwart-mail: fix default configuration and test 2024-02-13 20:34:22 +01:00
emilylange
993083f0ab
nixos/garage: allow all available log levels in cfg.logLevel
`error` and `warn` have always been valid log levels.
But because the upstream docs never mentioned those, we simply didn't
add them to the enum of our module option.

The upstream docs have been updated and now mention `error` and `warn`
as well.

Upstream PR: https://git.deuxfleurs.fr/Deuxfleurs/garage/pulls/716
2024-02-13 20:26:29 +01:00
Peder Bergebakken Sundt
bf7c95ce73
Merge pull request #285314 from pbsds/ttyd-1706718068
nixos/ttyd: add `entrypoint` and `writable` option
2024-02-13 19:41:11 +01:00
Felix Buehler
9db5906a6f nixos/photoprism: improve manage script 2024-02-13 18:51:30 +01:00
John Garcia
eaa1034a80 nixos/undervolt: add turbo option 2024-02-13 13:38:22 +00:00
Martin Weinelt
ec89463a61
nixos/knot: refactor
- Stop using `with lib`
- Drop `lib.mdDoc`
- Use `escaepSystemdExecArgs` for escaping
2024-02-13 13:44:32 +01:00
Martin Weinelt
d1d8dd3e55
nixos/knot: add support for XDP setups
The Express Data Path (XDP) is a way to circumvent the traditional Linux
networking stack and instead run an eBPF program on your NIC, that makes
the decision to provide Knot with certain packets. This is way faster
and more scalable but comes at the cost of reduced introspection.

Unfortunately the `knotc conf-check` command fails hard with missing
interfaces or IP addresses configured in `xdp.listen`, so we disable it
for now, once the `xdp` config section is set. We also promote the config
check condition to a proper option, so our conditions become public
documentation, and we allow users to deal with corner cases, that we have
not thought of yet.

We follow the pre-requisites documented in the Knot 3.3 manual, and set
up the required capabilities and allow the AF_XDP address family.

But on top of that, due to our strict hardening, we found two more
requirements, that were communicated upstream while debugging this.

- There is a requirement on AF_NETLINK, likely to query for and configure
  the relevant network interface
- Running eBPF programs requires access to the `bpf` syscall, which we
  deny through the `~@privileged` configuration.

In summary We now conditionally loosen the hardening of the unit once we
detect that an XDP configuration is wanted. And since we cannot
introspect arbitrary files from the `settingsFiles` option, we expose XDP
support through the `enableXDP` toggle option on the module.
2024-02-13 13:44:31 +01:00
Yt
971fbfd00a
Merge pull request #276468 from onny/opensnitch-update4
opensnitch: 1.6.4 -> 1.6.5, opensnitch-ui: 1.6.4 -> 1.6.5
2024-02-13 10:46:01 +00:00
Joris Bolsens
6a11b7a777
nixos/kubernetes: don't delete the apitoken after its created
This was breaking the nixos-kubernetes-node-join script
the token gets copied, and then immediately overridden with /dev/null when certmgr restarts.
2024-02-12 22:50:27 -08:00
Paul Meyer
ce0a47cd2c maintainers: remove attila-lendvai 2024-02-12 23:10:03 +01:00
Paul Meyer
11eef97f3c bee-clef: remove 2024-02-12 23:10:03 +01:00
Sandro Jäckel
80e79ded15
nixos/unbound: check validity of config file 2024-02-12 22:49:03 +01:00
Maximilian Bosch
d363f52625
nixos/postgresql: drop ensurePermissions option
...effectively what was planned already in #266270, but it was too late
because the branches were restricted and didn't allow any breaking
changes anymore.

It also suffers from the same issue that we already had when discussing
this the last time[1] when `ensureDBOwnership` was ultimately introduced
as band-aid fix: newly created users don't get CREATE permission on
the `public` schema anymore (since psql 15), even with `ALL PRIVILEGES`.

If one's use-case is more sophisticated than having a single owner, it's
questionable anyways if this module is the correct tool since
permissions aren't dropped on a change to this option or a removal which
is pretty surprising in the context of NixOS.

[1] https://github.com/NixOS/nixpkgs/pull/266270
2024-02-12 21:10:33 +01:00
Janik
29f575d7e6
Merge pull request #288284 from NetaliDev/rustdesk-extra-args
nixos/rustdesk-server: add extra args options for hbbr and hbbs
2024-02-12 16:52:01 +01:00
Pol Dellaiera
2d627a2a70
Merge pull request #277220 from nu-nu-ko/nixos-jellyfin-dirs
nixos/jellyfin: add directory options
2024-02-12 14:06:46 +01:00
Jennifer Graul
c412263319
nixos/rustdesk-server: add extra args options for hbbr and hbbs 2024-02-12 13:41:08 +01:00
Jonas Heinrich
31b9a9d18c opensnitch: 1.6.4 -> 1.6.5, opensnitch-ui: 1.6.4 -> 1.6.5.1 2024-02-12 11:58:44 +01:00
Sophie Tauchert
b670443f42
nixos/hydra: use set-default in hydra-env wrapper package 2024-02-12 11:16:32 +01:00
Josh Hoffer
b445085c22 nixos/mysql: Use notify service type for MySQL >= 8.0 2024-02-11 15:41:25 -08:00
Josh Hoffer
e553e37abf nixos/mysql: remove MySQL fixed 30 second timeout
Removed hard coded timeout in postScript, allow using
more general systemd TimeoutStartSec instead.
2024-02-11 15:41:25 -08:00
Bruno BELANYI
5e43c70867 nixos/tandoor-recipes: improve manage script
This is mirroring the way the manage script is created in the paperless
module, which is more robust to special characters.
2024-02-11 21:21:02 +00:00
maxine
9b52568c86
Merge pull request #288122 from amaxine/fwupd-internal-tests 2024-02-11 21:15:52 +01:00
Maxine Aubrey
4a4904c2b2
nixos/fwupd: make test option internal, be explicit about removal 2024-02-11 20:27:02 +01:00
kirillrdy
76d14d166c
Merge pull request #287708 from JorisBolsens/patch-1
nixos/kubernetes: use correct -o option with bash install when copying certs in cfssl prestart script
2024-02-12 06:14:44 +11:00
Maximilian Bosch
417fdb06d7
Merge pull request #287856 from emilylange/nixos-gitea-package-forgejo-warning
nixos/gitea: warn when using `services.gitea` with forgejo
2024-02-11 18:06:05 +01:00
Sam Weston
c49e6bf8b8 nixos/sabnzbd: use stateDirectory and mkIf-ify user/group creation 2024-02-11 16:49:08 +00:00
Sam Weston
d3d5b72c65 nixos/sabnzbd: add openFirewall 2024-02-11 16:48:05 +00:00
Aaron Andersen
e163373592
Merge pull request #284814 from yaxitech/github-runner-module-update
nixos/github-runners: remove single runner module, rework default name, add `noDefaultLabels`
2024-02-11 06:10:56 -08:00
Martin Weinelt
18899b0c58
Merge pull request #287926 from mweinelt/home-assistant-2024.2.0-fixes
home-assistant: fixes for 2024.2.0
2024-02-11 04:35:53 +01:00
Martin Weinelt
055a8f709a
nixos/home-assistant: always add dependencies for default integrations
These are loaded unconditionally during bootstrap, and home-assistant
will now fail to start, if these aren't provided.
2024-02-11 04:09:52 +01:00
Lin Jian
f3a93440fb
Merge pull request #285813 from jerrita/nft-precheck-flatten
nixos/nftables: add option for flattening rulesetFile
2024-02-11 10:41:17 +08:00
Martin Weinelt
aeea37e779
Merge pull request #287480 from NixOS/home-assistant
home-assistant: 2024.1.6 -> 2024.2.1
2024-02-11 01:18:04 +01:00
emilylange
ca3cfc841a
nixos/gitea: warn when using services.gitea with forgejo
since this is no longer supported and we have a dedicated module for
forgejo for quite some time now.

Such warning is, however, becoming more and more important, since
forgejo is no longer a soft-fork of gitea, but rather a hard-fork.

And as such, it will slowly but surely no longer be a drop-in
replacement.

Additionally, I hope that this warning will prevent users from
reporting issues with forgejo to nixos/gitea maintainers.

The accompanying forgejo.md, from which the manual section is created,
will be updated over the next few weeks when forgejo officially
publishes their blog post about all this and the way forward, so we can
link to it.
2024-02-10 20:47:04 +01:00
tomberek
6e60c8526b
Merge pull request #286993 from christoph-heiss/srht-updates-next-round
sourcehut: update all components
2024-02-10 11:52:53 -05:00
Sandro
756e574ebd
Merge pull request #282971 from wegank/restya-board-drop
restya-board: drop
2024-02-10 17:28:05 +01:00
Peder Bergebakken Sundt
40cb108adf
Merge pull request #232528 from SuperSandro2000/chromium-kde
nixos/chromium: add enablePlasmaBrowserIntegration option
2024-02-10 17:15:14 +01:00
Peder Bergebakken Sundt
6f55f021df
Merge pull request #287304 from ambroisie/pyload-user-group
nixos/pyload: add user/group options
2024-02-10 14:59:23 +01:00
Maximilian Bosch
66a0b77a78
Merge pull request #286394 from SuperSandro2000/nextcloud-timer
nixos/nextcloud: don't execute cron when in maintenace/upgrade, don't kill cgroup
2024-02-10 12:48:05 +01:00
Peder Bergebakken Sundt
5caded32fe
Merge pull request #277189 from anpin/fix/cloudflared-service
cloudflared: fixed missing configuration options
2024-02-10 12:45:08 +01:00
maxine
53f6fedd04
Merge pull request #287512 from r-vdp/fwupd_1_9_13
fwupd: 1.9.12 -> 1.9.13
2024-02-10 11:05:51 +01:00
Joris Bolsens
1856e7e4b1 nixos/kubernetes: use correct -o option with bash install when copying certs in cfssl prestart script 2024-02-10 01:46:00 -08:00
Martin Weinelt
3d67816966
home-assistant: 2024.1.6 -> 2024.2.1
https://www.home-assistant.io/blog/2024/02/07/release-20242/
https://github.com/home-assistant/core/releases/tag/2024.2.1
2024-02-10 04:15:41 +01:00
Silvan Mosberger
11cd405226
Merge pull request #280322 from h7x4/add-hocon-format-generator
pkgs.formats: Add HOCON format generator
2024-02-10 03:07:51 +01:00
Silvan Mosberger
5de4385620
Merge pull request #285833 from 360ied/murmur-hardened
nixos/murmur: systemd service hardening
2024-02-10 02:48:46 +01:00
github-actions[bot]
b64b4f2d6a
Merge master into staging-next 2024-02-09 18:01:06 +00:00
Will Fancher
0cf1e24f32
Merge pull request #284627 from Trundle/nftables-ordering
nixos/nftables: remove default systemd dependencies
2024-02-09 12:29:24 -05:00
Vincent Haupert
6d8391a3ce nixos/github-runners: add a group option to set the executing group
Similar to the `user` option, the added `group` option sets the group of
the executing process. If not `null`, it also sets `DynamicUser=false`.
In case `user` is set to `null` (the default), systemd would run the
service as root implicitly. As this is dangerous and most certainly not
what users want, we force them to set `user = "root"` explicitly if
that's really their intention. That's achieved through an assertion.
2024-02-09 16:58:09 +01:00
r-vdp
12de1b3a38
fwupd: 1.9.12 -> 1.9.13
Changelog: https://github.com/fwupd/fwupd/releases/tag/1.9.13
2024-02-09 16:45:09 +01:00
h7x4
39a779e269
treewide: use formats.hocon 2024-02-09 16:40:22 +01:00
Vincent Haupert
35df23c07d nixos/github-runners: set DynamicUser=false if user not null 2024-02-09 16:19:23 +01:00
Vincent Haupert
3f13f8d85e nixos/github-runners: align nodeRuntimes option with package
The `github-runner` package only supports `nodejs_20` since `nodejs_16`
was removed in a2976db919.

It still makes sense to keep the `nodeRuntimes` option as this is
probably not the last Node.js we'll deprecate with at least some grace
period.
2024-02-09 16:19:23 +01:00
Vincent Haupert
782b164523 nixos/github-runners: rework name default 2024-02-09 16:19:19 +01:00
Martin Weinelt
91d9c159da
nixos/matrix-synapse: fix recursive filtering of null values
Using `filterAttrsRecursive` is not sufficient to account for a nested
attribute set with list values, like used for listeners.
2024-02-09 16:05:05 +01:00
Martin Weinelt
143d266f0d
nixos/matrix-synapse: add UNIX domain socket listener support
Exposes two options, `path` and `mode`, to configure the location and
permissions on the socket file.

The `mode` needs to be specified as string in octal and will be converted
into a decimal integer, so it correctly passes through the YAML parser
and arrives at the `os.chmod` call in the Twisted codebase. What a fun
detour.

Adds an assertion, that either `path` or `bind_addresses` and `port` are
configured on every listener.

Migrates the default replication listener of the main instance to a UNIX
domain socket, because it is more efficient.

Introduces the `enableRegistrationScript` option, to gracefully disable
the user registration script, when the client listener listens on a UNIX
domain socket, which is something the script does not support.
2024-02-09 16:05:05 +01:00
Vincent Haupert
9ad02c831a nixos/github-runner: deprecate module in favor of github-runners.* 2024-02-09 15:14:32 +01:00
Vincent Haupert
ab57ba24cf nixos/github-runners: document new runner registrations
Make the documentation of the options `workDir` and `ephemeral` reflect
that changing these options will trigger a new runner registration.
2024-02-09 15:14:32 +01:00
Vincent Haupert
a9c807496f nixos/github-runners: add noDefaultLabels option
Add option `noDefaultLabels` which controls the `--no-default-labels`
switch passed to the configure script.
2024-02-09 15:14:32 +01:00
Vincent Haupert
ae140cd468 nixos/github-runners: remove superfluous usages of lib 2024-02-09 15:14:31 +01:00
github-actions[bot]
a7f4ae0644
Merge master into staging-next 2024-02-09 12:01:11 +00:00
Valentin Gagarin
b1f6e08177 doc: add link to Nix manual 2024-02-09 10:47:08 +01:00
Martin Weinelt
a43d9cd69a
nixos/prometheus-fastly-exporter: fix runtime environment
- Make the token a required option
- Drop the proto from the listen parameter
- Use systemd credentials to pass the token file
- Drop debug flag, use extraArgs instead
- Actually hook up extraArgs
- Escape shell arguments
- Drop overly broad `with lib` statement
2024-02-09 02:24:48 +01:00
Bruno BELANYI
c14f029dae nixos/pyload: add user/group options 2024-02-08 20:27:14 +00:00
github-actions[bot]
13d222c591
Merge master into staging-next 2024-02-08 18:01:04 +00:00
Aaron Andersen
2d8bd81554
Merge pull request #286063 from yaxitech/github-runner-node-runtimes-286059
nixos/github-runners: only override pkg if it has a `nodeRuntimes` arg
2024-02-08 07:20:13 -08:00
github-actions[bot]
8cb642cb14
Merge master into staging-next 2024-02-08 00:02:08 +00:00
Jörg Thalheim
ded6a6cb80
Merge pull request #277137 from ajs124/fix/tt-rss-phpPackage
nixos/tt-rss: add phpPackage option
2024-02-07 23:19:57 +01:00
Kim Lindberger
debe2ca258
Merge pull request #286532 from flyingcircusio/PL-131811-gitlab-loose-coupling-upstream
nixos.gitlab: loosen the coupling of gitlab services to postgresql and redis
2024-02-07 19:29:01 +01:00
github-actions[bot]
296d2f6991
Merge master into staging-next 2024-02-07 18:00:58 +00:00
Sarah Brofeldt
cd5c10f696
Merge pull request #275896 from hoppla20/master
nixos/kubernetes: fix pki's mkSpec function
2024-02-07 18:44:35 +01:00
Oliver Schmidt
13ba002dd0 nixos/services.gitlab: loosen the coupling between gitlab and postgres/ redis to avoid restarts and races
Gitlab stays running at redis and postgresql restarts as if these
components were on a different host anyways. Handling reconnetctions is
part of the application logic.

Co-authored-by: Kim Lindberger <kim.lindberger@gmail.com>
for formatting fixes and test failure debugging.
2024-02-07 18:19:18 +01:00
Sandro
f7654894a3
Merge pull request #285298 from SuperSandro2000/govee2mqtt
govee2mqtt: init at 2024.01.21-088d4ca8, nixos/govee2mqtt: init
2024-02-07 18:14:05 +01:00
ajs124
106626b8d7 nixos/tt-rss: add phpPackage option
right now, we have php81 and php (which points to php82), which means that:
- php-fpm uses php81
- the update preStart uses php81
- the actual updater uses php82
2024-02-07 17:41:27 +01:00
ajs124
33ca948d6a
Merge pull request #259604 from sefidel/tt-rss-force-update-schema
nixos/tt-rss: supply --force-yes to update-schema
2024-02-07 17:39:03 +01:00
Robert Schütz
743b095b5e
Merge pull request #286454 from dotlambda/nginx-acme-auth_request-off
nixos/nginx: turn auth_request off for ACME challenge
2024-02-07 15:08:08 +00:00
Sandro Jäckel
42b58f2c73
nixos/plasma5: enable programs.chromium.enablePlasmaBrowserIntegration 2024-02-07 16:04:25 +01:00
Kerstin
a3ed4692b7
Merge pull request #286943 from Tom-Hubrecht/kanidm
kanidm: 1.1.0-rc.15 -> 1.1.0-rc.16
2024-02-07 15:07:13 +01:00
Christoph Heiss
62854c0103
sourcehut: add myself as maintainer
I worked already a lot on this stuff, esp. modules - so it just makes
sense.

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-07 14:58:12 +01:00
Tom Hubrecht
ad67485526 kanidm: 1.1.0-rc.15 -> 1.1.0-rc.16
Release notes: https://github.com/kanidm/kanidm/releases/tag/v1.1.0-rc.16
2024-02-07 14:14:39 +01:00
Martin Weinelt
02324756dd
nixos/zigbee2mqtt: revert systemd unit to simple type
A recent release added systemd notify support, so I migrated our unit
towards that. The NixOS test did not reveal that the unit would not fully
activate.

Reverts: 165326d2c (partially)
Closes: #286977
2024-02-07 13:51:11 +01:00
github-actions[bot]
03dd2b9470
Merge master into staging-next 2024-02-07 12:01:11 +00:00
Franz Pletz
5ef42fcd84
Merge pull request #286832 from trofi/crda-removal-and-wireless-regdb-update
crda: remove package, wireless-regdb: 2023.09.01 -> 2024.01.23
2024-02-07 11:52:55 +01:00
Sandro Jäckel
1b3f92087b
nixos/govee2mqtt: init 2024-02-07 10:39:23 +01:00
Rodney Lorrimar
8513f69b24 nixos/phosh: Ensure that desktop session is identified as Phosh 2024-02-07 20:10:15 +11:00
Weijia Wang
29b534a3d4 restya-board: drop 2024-02-07 01:33:05 +01:00
github-actions[bot]
9824e51195
Merge master into staging-next 2024-02-07 00:02:01 +00:00
Martin Weinelt
7317fb9f77
Merge pull request #286287 from fleaz/frigate-update
frigate: 0.12.1 -> 0.13.1
2024-02-07 00:09:42 +01:00
Sergei Trofimovich
275855d632 nixos: hostapd: drop unused crda package import 2024-02-06 22:45:01 +00:00
fleaz
250078ceba
frigate: 0.12.1 -> 0.13.1
Changelog:
https://github.com/blakeblackshear/frigate/releases/tag/v0.13.0
https://github.com/blakeblackshear/frigate/releases/tag/v0.13.1

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2024-02-06 22:54:22 +01:00
Sandro Jäckel
e91a7b7a4e
hedgedoc: move files to share/hedeodc in the package 2024-02-06 19:26:21 +01:00
Felix Bühler
9e23c379c7
Merge pull request #286032 from Stunkymonkey/k8s-pki-remove-chown
kubernetes: prefer 'install' over 'mkdir/chmod/chown'
2024-02-06 19:21:08 +01:00
Sandro Jäckel
26316368cb
hedgedoc: fix executing any of the management clis, remove heroku bin
as we don't need that
2024-02-06 19:13:51 +01:00
Felix Bühler
5dac2ab264
Merge pull request #286577 from Pablo1107/photoprism-module/fix-manage-script-typo
nixos/photoprism: fix typo with duplicated exec call
2024-02-06 19:09:53 +01:00
github-actions[bot]
33b366b63f
Merge master into staging-next 2024-02-06 18:01:02 +00:00
Sandro
ed742ab4fc
Merge pull request #275621 from Yarny0/tsm-client-update
tsm-client: 8.1.20.0 -> 8.1.21.0
2024-02-06 17:17:40 +01:00
github-actions[bot]
8e7913be95
Merge master into staging-next 2024-02-06 00:02:21 +00:00
Pablo Andres Dealbera
14a1f86791 nixos/photoprism: fix typo 2024-02-05 19:34:43 -03:00
nu-nu-ko
ccf92aad9b nixos/jellyfin: add directory options 2024-02-06 11:07:33 +13:00
Robert Hensing
274ae6a454
Merge pull request #284117 from Stunkymonkey/amqp-write-secret
nixos/rabbitmq: prefer 'install' over 'mkdir/chmod/chown'
2024-02-05 19:29:19 +01:00
github-actions[bot]
2579984b85
Merge master into staging-next 2024-02-05 18:01:13 +00:00
Peder Bergebakken Sundt
a8880f1647 nixos/ttyd: add entrypoint option 2024-02-05 17:38:00 +01:00
Leona Maroni
2b7e1ddb4a
nixos/youtrack: fix warnings (#285775)
* nixos/youtrack: fix extraParams warning

* nixos/youtrack: use new option for port in nginx config
2024-02-05 17:17:45 +01:00
Robert Schütz
1dd5f2b1f9 nixos/nginx: turn auth_request off for ACME challenge
This is e.g. necessary when using tailscale-nginx-auth.
2024-02-05 00:33:33 -08:00
github-actions[bot]
0f22335f7d
Merge master into staging-next 2024-02-05 06:01:04 +00:00
jerrita
e686847d20
nixos/nftables: add option for flattening rulesetFile
Co-authored-by: Lin Jian <me@linj.tech>
2024-02-05 11:27:16 +08:00
360ied
11cf6ab0dd nixos/murmur: systemd service hardening
Murmur provides an official systemd service file in their repo,
which contains various service hardening settings:

c4b5858d14/auxiliary_files/config_files/mumble-server.service.in (L7)

The service configuration in nixpkgs does not include these hardening settings.

This commit adds the hardening settings to the murmur service in nixpkgs.
This drops the `systemd-analyze security` score of murmur.service from 9.2 (UNSAFE) to 2.1 (OK).
2024-02-04 21:23:34 -05:00
Sandro Jäckel
c64c45da9c
nixos/nextcloud: don't execute cron when in maintenace/upgrade, don't kill cgroup
Those are upstream recommendations taken from
22d2472b8f/admin_manual/configuration_server/background_jobs_configuration.rst (systemd)
2024-02-05 01:29:13 +01:00
Sandro Jäckel
42daa00928
nixos/nextcloud: little formatting 2024-02-05 01:29:13 +01:00
LRFLEW
8b0d333f54
nixos/archisteamfarm: allow bots.*.passwordFile to be null (#284978)
* Make services.archisteamfarm.bots.*.passwordFile Nullable

This adds support for alternate password specification methods, such as through the web-ui.

* Update description for services.archisteamfarm.bots.*.passwordFile

Adds note about omitting or setting to null to provide the password through the web-ui.
2024-02-05 01:18:23 +01:00
github-actions[bot]
42e44c0583
Merge master into staging-next 2024-02-05 00:02:17 +00:00
oddlama
b7f29692c0
nixos/hostapd: fix utf8Ssid setting not properly honored 2024-02-05 00:52:08 +01:00
Weijia Wang
7ece427021
Merge pull request #279268 from superherointj/etcd-fix-firewall-startup
nixos/etcd: fixes etcd failing to start at boot and add openFirewall option
2024-02-05 00:37:09 +01:00
Weijia Wang
e2fb30fabc
Merge pull request #239785 from milibopp/neo4j-5.9.0
neo4j: 4.4.11 -> 5.9.0
2024-02-05 00:21:21 +01:00
Robert Hensing
6761394083 nixos/rabbitmq: Rename cookie -> unsafeCookie
Not a mkRenamedOptionModule, because user intervention is required
to determine whether they have a problem. mkRenamed* does not let
us explain anything to the user.
2024-02-04 21:41:29 +01:00
github-actions[bot]
145a9cb679
Merge master into staging-next 2024-02-04 18:01:14 +00:00
Artturi
8f893ff1da
Merge pull request #221628 from rhysmdnz/intune
Microsoft Intune
2024-02-04 17:31:58 +02:00
github-actions[bot]
5a036cc96a
Merge master into staging-next 2024-02-03 18:00:51 +00:00
Linus Heckemann
9f571cb4ef
Merge pull request #284508 from nikstur/etc-overlay-leading-slash
nixos/etc: remove leading slash from paths
2024-02-03 18:01:01 +01:00
Vincent Haupert
e6854b295b nixos/github-runners: only override pkg if it has a nodeRuntimes arg
Older versions of the github-runner package might not have the
`nodeRuntimes` argument yet causing an error as the NixOS module always
tries to override the argument.

The commit makes sure we only override `nodeRuntimes` if the configured
package has a `nodeRuntimes` argument.
2024-02-03 14:33:39 +01:00
Felix Buehler
ffadbb6788 kubernetes: prefer 'install' over 'mkdir/chmod/chown' 2024-02-03 11:16:23 +01:00
github-actions[bot]
95ffc37024
Merge staging-next into staging 2024-02-03 06:01:25 +00:00
Martin Weinelt
e1ee205a99
Merge pull request #285931 from mweinelt/zigbee2mqtt-1.35.2
zigbee2mqtt: 1.35.1 -> 1.35.2
2024-02-03 03:44:36 +01:00
Martin Weinelt
165326d2ca
zigbee2mqtt: 1.35.1 -> 1.35.2
https://github.com/Koenkk/zigbee2mqtt/releases/tag/1.35.2
2024-02-03 02:21:15 +01:00
MinerSebas
de306fb3d6 nixos/prometheus-restic-exporter: Use LoadCredential for password file 2024-02-02 14:47:46 +01:00
MinerSebas
e7a2d8aa18 prometheus-restic-exporter: 1.4.0 -> 1.5.0 2024-02-02 14:47:43 +01:00
github-actions[bot]
6b866c8f85
Merge staging-next into staging 2024-02-02 00:02:44 +00:00
Rhys Davies
295a32a6b1
nixos/intune: init 2024-02-02 10:00:33 +13:00
h7x4
932344b54a
Merge pull request #270475 from MinerSebas/prometheus-restic-exporter
prometheus-restic-exporter: init at 1.4.0
2024-02-01 20:05:11 +01:00
github-actions[bot]
381e01e471
Merge staging-next into staging 2024-02-01 18:01:21 +00:00
Atemu
f38bca1ca5
Merge pull request #279677 from leona-ya/paperless-nltk
nixos/paperless: use nltk_data package as NLTK data source
2024-02-01 16:59:28 +01:00
Leona Maroni
6300f478e9
nixos/paperless: use nltk_data package as NLTK data source
nixos
2024-02-01 16:53:34 +01:00
MinerSebas
d1f031cbbd nixos/prometheus-restic-exporter: init module 2024-02-01 14:48:56 +01:00
Leona Maroni
0f2df9ff19 nixos/youtrack: rebuild module for 2023.x support 2024-02-01 13:36:13 +01:00
Martin Weinelt
27fa02d0f1
Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
-	pkgs/development/compilers/llvm/10/clang/default.nix
- pkgs/development/compilers/llvm/8/clang/default.nix
2024-02-01 12:25:11 +01:00
Andreas Stührk
fc6c92faf3 nixos/nftables: remove default systemd dependencies
With DefaultDependencies enabled, systemd adds "After=basic.target" to
service units. `basic.target` has a dependency on `sockets.target`, so
the `nftables` has (amongst others) the following order constraints:

* Before=network-pre.target
* After=sockets.target

Those constraints are often unsatisfiable. For example, `systemd-networkd`
has a dependency `After=network-pre.target`. When a socket unit now uses
`BindToDevice=` on a device managed by `networkd`, a timeout occurs
because `networkd` waits for `network-pre.target`, but
`network-pre.target` depends (through nftables) on `sockets.target`, but
the device to bind the socket to is never brought up, as this would
happen through `networkd`.

This is fixed by removing the implicit dependency on `basic.target`.
2024-01-31 23:26:05 +01:00
Felix Bühler
6c22593ad4
Merge pull request #284799 from Pablo1107/photoprism-module/fix-manage-script
nixos/photoprism: use nsenter to call photoprism bin with correct UID and PID
2024-01-31 20:52:11 +01:00
Franz Pletz
9e485b2169
Merge pull request #284326 from WilliButz/snmp-exporter-module/fix-logPrefix
nixos/prometheus-snmp-exporter: fix undefined logPrefix
2024-01-31 19:55:40 +01:00
Peder Bergebakken Sundt
0d13d2a90f nixos/ttyd: remove with lib; 2024-01-31 17:58:59 +01:00
Peder Bergebakken Sundt
4c70703931 nixos/ttyd: add writable option
Co-authored-by: Carsten Rodin <19612711+carstoid@users.noreply.github.com>
2024-01-31 17:57:42 +01:00
Peder Bergebakken Sundt
19159ced3e
Merge pull request #249523 from greizgh/seafile-10
Seafile 10
2024-01-31 17:13:54 +01:00
Peder Bergebakken Sundt
d5d752af43
Merge pull request #280821 from SuperSandro2000/pretalx
pretalx: init 2023.1.3
2024-01-31 17:11:38 +01:00
Peder Bergebakken Sundt
9118823ed3
Merge pull request #226532 from SuperSandro2000/dhcpcd
dhcpcd: change files after patching; nixos/dhcpcd: link dhcpcd.conf to /etc/ to fix dhcpcd -k
2024-01-31 16:43:54 +01:00
Nick Cao
2c4eca2c07
Merge pull request #285100 from Tungsten842/revert-281529-acpid
Revert "acpid: Disable network access"
2024-01-31 08:25:37 -05:00
Mario Rodas
4006079f95
Merge pull request #276177 from aaronjheng/prometheus-openvpn-exporter
prometheus-openvpn-exporter: remove
2024-01-30 19:32:50 -05:00
Thomas Gerbet
898c3061fe
Merge pull request #279253 from risicle/ris-packagekit-1.2.8
packagekit: 1.2.5.1pre -> 1.2.8
2024-01-30 23:37:46 +01:00
Tungsten842
c1afcd1c8c
Revert "acpid: Disable network access" 2024-01-30 22:49:43 +01:00
Robert Scott
19b3ab3fe4 packagekit: use test_nop backend by default
nix backend is broken and this is causing the nixos test to
fail
2024-01-30 20:41:15 +00:00
Martin Weinelt
8f03632997
nixos/pretalx: init 2024-01-30 17:41:34 +01:00
K900
3176d495ff nixos/plasma5: enable qt stuff
Otherwise things like themes only work due to lucky wrapper leakage.
2024-01-30 17:36:06 +03:00
Weijia Wang
5116ea824d
Merge pull request #280549 from wineee/deepin-icon
deepin: move distribution.info back to deepin-desktop-base
2024-01-30 14:50:13 +01:00
Luke Granger-Brown
23310f467a
Merge pull request #284980 from patka-123/update-paperless-service-example-doc
nixos/paperless: update extraConfig to settings in service docs.
2024-01-30 12:53:31 +00:00
Yureka
a6c64fbd39
nixos/strongswan-swanctl: add includes option for secrets (#284742) 2024-01-30 12:47:33 +01:00
h7x4
ba5f81a6b6
Merge pull request #276547 from ambroisie/pyload-module
nixos/pyload: init module
2024-01-30 12:29:46 +01:00
Patka
3d028d17c9
nixos/paperless: update extraConfig to settings in service docs
Signed-off-by: Patka <patka@patka.dev>
2024-01-30 11:26:04 +01:00
K900
0f34032f5a nixos/plasma5: install missing style plugins 2024-01-30 11:38:10 +03:00
github-actions[bot]
2f68b418f1
Merge staging-next into staging 2024-01-30 06:01:22 +00:00
Luke Granger-Brown
a12b828a26
Merge pull request #277661 from appsforartists/handheld-daemon
handheld-daemon: init at 1.1.0
2024-01-30 04:01:11 +00:00
Brenton Simpson
b960a217bd handheld-daemon: touchup code style to better match nixpkgs
Co-authored-by: h7x4 <h7x4@nani.wtf>
Co-authored-by: Luke Granger-Brown <git@lukegb.com>
Co-authored-by: Bruno BELANYI <bruno@belanyi.fr>
2024-01-29 17:20:30 -08:00
github-actions[bot]
93a73aa6cf
Merge staging-next into staging 2024-01-30 00:02:29 +00:00
Franz Pletz
3432be07e4
Merge pull request #278555 from leona-ya/kresd-port-only-regex 2024-01-30 00:41:53 +01:00
Bernardo Meurer
429a3accd9
Merge pull request #284800 from lovesegfault/fix-moonraker-warn
nixos/moonraker: fix update_manager.enable_system_updates being [bool] and not bool
2024-01-29 18:23:33 -05:00
Franz Pletz
da226d14bf
Merge pull request #284749 from 2xsaiko/outgoing/dovecot-fix-1 2024-01-30 00:17:12 +01:00
Marco Rebhan
522d660f25
nixos/dovecot: fix sieve script config generation 2024-01-29 19:42:55 +01:00
github-actions[bot]
6a27b0be74
Merge staging-next into staging 2024-01-29 18:01:37 +00:00
Bernardo Meurer
392b32b2af
nixos/moonraker: fix update_manager.enable_system_updates being [bool] and not bool 2024-01-29 11:31:12 -05:00
Pablo Andres Dealbera
bb40443e77 nixos/photoprism: use nsenter to call photoprism bin with correct UID and PID 2024-01-29 13:26:35 -03:00
Bobby Rong
850bac2305
Merge pull request #284633 from FedericoSchonborn/budgie-desktop-10.9
Budgie Desktop 10.9
2024-01-29 21:58:15 +08:00
Marco Rebhan
26e71b5a5b
nixos/dovecot: remove unused imports 2024-01-29 12:21:58 +01:00
Nick Cao
519ebe37e2
Merge pull request #283452 from SuperSandro2000/pcsclite-outputs
pcsclite: move binaries, polkit, systemd files to out, move libraries to lib
2024-01-28 21:19:51 -05:00
Felix Bühler
da47763cb8
Merge pull request #279384 from Stunkymonkey/recursive-pth-loader-normalize
python311Packages.recursive-pth-loader: rename from recursivePthLoader
2024-01-29 00:40:42 +01:00
Federico Damián Schonborn
0d209c6641
nixos/budgie: Replace gnome-session with budgie-session
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2024-01-28 20:08:59 -03:00
Morgan Jones
1dc5eb13b0
nixos/armagetronad: add module with tests 2024-01-28 13:58:05 -08:00
Sandro Jäckel
3da096a5c3
pcsclite: move binaries, polkit, systemd files to out, move libraries to lib
This should make the things related to the udev rules and binaries a lot
simpler and more expected.
2024-01-28 19:31:54 +01:00
Sandro
263af58884
Merge pull request #284488 from Silver-Golden/master
Bitwarden directory connector: fix bad preStart
2024-01-28 19:18:10 +01:00
K900
499b9a5de0
Merge pull request #284562 from K900/lemmy-nginx-fix
lemmy: fix nginx config generation
2024-01-28 20:48:51 +03:00
Kerstin
45b1d68c35
Merge pull request #283981 from f2k1de/mastodon-too-many-open-files-fix
mastodon: set LimitNOFILE
2024-01-28 18:47:53 +01:00
ocfox
01e674ba90
nixos/transfer-sh: init
Co-authored-by: Pablo Ovelleiro Corral <mail@pablo.tools>
2024-01-29 00:44:35 +08:00
K900
c34a1d5135 lemmy: fix nginx config generation 2024-01-28 19:15:02 +03:00
Aaron Andersen
0ed21f3b09
Merge pull request #284122 from Stunkymonkey/zabbix-write-secret
nixos/{zabbixServer,zabbixProxy}: prefer 'install' over 'mkdir/chmod/chown'
2024-01-28 06:24:11 -08:00
nikstur
dff64f549e nixos/x11: remove leading slash from environment.etc path
Even if the tools that assemble /etc can handle leading slashes, this
still is not correct. For example, you could have both /X11 and X11 in
environment.etc which makes overriding hard.
2024-01-28 13:38:09 +01:00
Brendan Golden
fe59b6d24b
Bitwarden directory connector: fix bad preStart 2024-01-28 10:52:43 +00:00
Martin Weinelt
0deb00012d
Merge pull request #255707 from micahsoftdotexe/update-navidrome
nixos/navidrome: accept DataFolder option
2024-01-28 00:08:18 +01:00
Micah Tanner
7d9e3e510b nixos/navidrome: accept DataFolder option 2024-01-27 17:54:50 -05:00
WilliButz
3a00809390
nixos/prometheus-snmp-exporter: fix undefined logPrefix
When I added `coerceConfigFile` based on the blackbox exporter module, I
did not notice the missing attribute definition.
2024-01-27 20:59:41 +01:00
Sandro Jäckel
1af95a24c1
nixos/dhcpcd: link dhcpcd.conf to /etc/ to fix dhcpcd -k 2024-01-27 18:12:55 +01:00
Nick Cao
8138e47046
Merge pull request #284115 from jacekpoz/ratbagd-module
nixos/ratbagd: add package option
2024-01-27 11:12:55 -05:00
Sandro
8219e2c1bc
Merge pull request #279050 from SuperSandro2000/portunus-seedsettings
nixos/portunus: add seedSettings option
2024-01-27 16:08:41 +01:00
Will Fancher
2af1ee5bba
Merge pull request #259196 from liff/mod/systemd-lock-handler
nixos/systemd-lock-handler: init with corresponding package at 2.4.2
2024-01-27 06:13:38 -05:00
Maximilian Bosch
abd098fce8
Merge pull request #283972 from onny/nextcloud-settings
nixos/nextcloud: Rename extraOptions to settings
2024-01-27 11:01:23 +01:00
Olli Helenius
e103c5cfcf
nixos/systemd-lock-handler: init 2024-01-27 11:55:46 +02:00
K900
b5dc67dd94
Merge pull request #284130 from xNaxdy/fix-plasma5-mobilegear
nixos/plasma5: fix plasmaMobileGear path
2024-01-27 07:07:52 +03:00
Thomas Gerbet
117fd19a77
Merge pull request #276306 from ambroisie/aria2-rpc-secret-file
nixos/aria2: implement 'rpcSecretFile'
2024-01-27 00:46:56 +01:00
Naxdy
edc49b2e83
nixos/plasma5: fix plasmaMobileGear path 2024-01-26 23:52:49 +01:00
Yt
a759a579fb
Merge pull request #283447 from Munksgaard/livebook-fixes
livebook: Use `mix release` to build instead of escript
2024-01-26 22:14:08 +00:00
Felix Buehler
bdce5312c9 nixos/{zabbixServer,zabbixProxy}: prefer 'install' over 'mkdir/chmod/chown' 2024-01-26 23:10:57 +01:00
jacekpoz
49130d8bf7
nixos/ratbagd: add package option 2024-01-26 22:58:44 +01:00
Felix Buehler
4c9b5cb310 nixos/rabbitmq: prefer 'install' over 'mkdir/chmod/chown' 2024-01-26 22:56:28 +01:00
maxine
642317d03f
Merge pull request #283618 from SuperSandro2000/tailscale-resoleconf
nixos/tailscale: make resolvconf package depending on enablement of module
2024-01-26 22:41:14 +01:00
superherointj
cbe8e0c980 nixos/etcd: fix etcd category from misc to databases 2024-01-26 16:40:11 -03:00
superherointj
29d18e8f6f nixos/etcd: fixes etcd failing to start at boot and add openFirewall option
Fixes etcd failing to start at boot for network and firewall not being ready and etcd peers being unavailable because of network/firewall

* configure etcd systemd unit to:

  - delay etcd start-up until network and firewall are ready
  - restart on failure and be always on

* add openFirewall option

  The official etcd ports are 2379 for client requests and 2380 for peer communication:
  https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.txt
  https://etcd.io/docs/v3.4/op-guide/configuration/
2024-01-26 16:40:11 -03:00
Philip Munksgaard
1ee8e72834
livebook: Set KillMode=mixed
This will gracefully shut down the service instead of resulting in errors like
this:

```
Jan 24 10:11:11 foo livebook[981676]: 10:11:11.922 [error] GenServer :disksup terminating
Jan 24 10:11:11 foo livebook[981676]: ** (stop) {:port_died, :normal}
Jan 24 10:11:11 foo livebook[981676]: Last message: {:EXIT, #Port<0.8>, :normal}
Jan 24 10:11:11 foo livebook[981676]: 10:11:11.922 [error] GenServer :memsup terminating
Jan 24 10:11:11 foo livebook[981676]: ** (stop) {:port_died, :normal}
```
2024-01-26 20:19:49 +01:00
Philip Munksgaard
897d5670a3
livebook: Use mix release to build instead of escript
The current build of livebook does not work with the new [Livebook
Teams](https://livebook.dev/teams/) features. The problem can be observed by
running the current version of livebook, adding a new team and going to the team
page. The process will crash and the team page will show a 500 error.

The base of the problem is that the escript build method is not officially
supported. This commit changes the livebook package to use the `mix release`
workflow, which is also the one used to build the official Docker container.

Unfortunately, the binary built with `mix release` does not support command line
arguments like the `escript` binary does. Instead, users need to pass in most of
the configuration as environment variables, as documented
[here](https://hexdocs.pm/livebook/readme.html#environment-variables). As a
result, this commit also changes the Livebook service to reflect this new way of
configuring Livebook.

Finally, the Livebook release configuration specifically excludes the
ERTS (Erlang Runtime System), which means that the resulting release cannot run
without Erlang installed.

I have tested the results (both of the package and the service) locally.
2024-01-26 20:19:46 +01:00
Ryan Horiguchi
17243e6a84 nixos/esphome: add option to use ping to check online status of devices 2024-01-26 19:39:49 +01:00
Jonas Heinrich
e1c0d281b2 nixos/nextcloud: Rename extraOptions to settings 2024-01-26 14:22:49 +01:00
Isa
24930dadca mastodon: set LimitNOFILE 2024-01-26 12:30:57 +01:00
Lassulus
da25b2382d
Merge pull request #280373 from h7x4/treewide-use-new-tmpfiles-api
treewide: use new tmpfiles API
2024-01-26 10:47:18 +01:00
Aaron Jheng
096f6d6c00
prometheus-openvpn-exporter: remove 2024-01-26 14:37:05 +08:00
Robert Schütz
8433938f9b
Merge pull request #283617 from SuperSandro2000/headscale
nixos/headscale: install package system wide
2024-01-25 13:40:29 -08:00
Bruno BELANYI
d3a1465196 nixos/aria2: implement 'rpcSecretFile'
Since this is supposed to be a secret, use a file path as an input
instead of making it part of the expression, which would expose it in
the nix store.
2024-01-25 21:36:21 +00:00
Felix Buehler
d35003e302 python311Packages.recursive-pth-loader: rename from recursivePthLoader 2024-01-25 22:13:17 +01:00
maxine
066ccb996b
Merge pull request #282963 from NukaDuka/prometheus-pve-exporter-update
prometheus-pve-exporter: 2.3.0 -> 3.2.1
2024-01-25 21:17:19 +01:00
Ryan Lahfa
8cc42008aa
Merge pull request #274281 from RaitoBezarius/hebbot-module
nixos/hebbot: init
2024-01-25 20:33:02 +01:00
Ryan Lahfa
ae910a15e6
Merge pull request #281001 from RaitoBezarius/new-sieve-dovecot-api
nixos/mail/dovecot2: re-introduce extra settings and rename `sieveScripts`
2024-01-25 20:32:35 +01:00
Ryan Lahfa
6fe2736c6f
Merge pull request #246055 from Tom-Hubrecht/netbird
nixos/netbird: Allow running multiple netbird networks in parallel
2024-01-25 20:08:58 +01:00
Raito Bezarius
78bc60b8a4 nixos/hebbot: init
This is a NixOS module to support TWIM-style Matrix bots.
2024-01-25 18:27:33 +01:00
rnhmjoj
1a1b91b3b9
nixos/dnsdist: add options for dnscrypt 2024-01-25 18:25:40 +01:00
Tom Hubrecht
c2d822e6b0 nixos/netbird: Allow running multiple netbird networks in parallel 2024-01-25 17:25:59 +01:00
Raito Bezarius
3cb7823738 nixos/mail/dovecot2: warn about potential collision due to structured configuration
Plugin configuration is pesky in dovecot2, let's warn about potential conflicts
in the module system by using a fancy regex.

This is only band-aid, this should be removed ASAP.

We clean up also a 21.05-era warning.
2024-01-25 17:18:58 +01:00
Sandro Jäckel
922351ec86
nixos/tailscale: make resolvconf package depending on enablement of module
If resolvconf is not enabled, trying to use it always fails because
/etc/resolvconf.conf contains an `exit 1`.
2024-01-25 15:50:36 +01:00
Sandro Jäckel
9f395dae71
nixos/headscale: install package system wide
this is required to confirm nodes and generally manage everything
2024-01-24 23:00:54 +01:00
r-vdp
28ea07d4e3
fwupd: 1.9.11 -> 1.9.12
The fwupd daemon refuses to start when there is an uefi_capsule key without any
values in the config file, so I modified the module to only include this
key when there are actually values that go inside.
2024-01-24 20:29:01 +01:00
Vladimír Čunát
7f979aeb86
nixos/knot: allow specifying the clear section
It was added in 3.3.4.  I'm not sure if it will be useful with NixOS
services, but I added it in the usual way anyway.
2024-01-24 10:33:55 +01:00
a-n-n-a-l-e-e
18cc181b9b
Merge pull request #279511 from DanielSidhion/tigerbeetle-service
nixos/tigerbeetle: init module
2024-01-23 23:13:54 -08:00
h7x4
f5d513c573
treewide: use new tmpfiles api 2024-01-24 05:13:17 +01:00
ppom
65544c693b
rustdesk-server: init module 2024-01-23 18:01:54 +01:00
Bruno BELANYI
70d0a6e547 nixos/pyload: init 2024-01-23 15:04:44 +00:00
Raito Bezarius
72e23635e6 nixos/mail/dovecot2: imapsieve.mailbox.*.causes is a list
Otherwise, it's not possible to pass `COPY,APPEND` properly.
2024-01-23 14:04:08 +01:00
Raito Bezarius
caf9e51e0f nixos/mail/dovecot2: re-introduce extra settings and rename sieveScripts
https://github.com/NixOS/nixpkgs/pull/275031 introduced structured configuration
for the dovecot2 sieve plugin, by doing so, it broke SNM configuration doing Sieve configurations.

This attempts to fix up the public API to make it possible for SNM to pick up the pieces.
2024-01-23 14:04:08 +01:00
Kartik Gokte
dde72e969e nixos/prometheus-pve-exporter: updated schema and options to v3.2.1 2024-01-23 11:19:37 +05:30
Brenton Simpson
f571033ce0 handheld-daemon: use kebab-case instead of camelCase for service name 2024-01-22 19:26:43 -08:00
Brenton Simpson
bcf9a24332 handheld-daemon: init at 0.2.7 2024-01-22 19:26:42 -08:00
Peder Bergebakken Sundt
76e9a3eafc
Merge pull request #272147 from SuperSandro2000/archisteamfarm
nixos/archisteamfarm: don't use asf abbreviation for more clarity
2024-01-22 22:57:04 +01:00
Ryan Lahfa
5b14fea3d6
Merge pull request #280405 from RaitoBezarius/keepalived-unicast
nixos/networking/keepalived: do not emit `unicastPeers` when there are none
2024-01-22 22:43:29 +01:00
Raito Bezarius
08c9562995 keepalived: add myself as a maintainer
I will use this for a while, so… let's keep it tidy.
2024-01-22 21:56:04 +01:00
Ryan Lahfa
32a6e224ae
Merge pull request #282929 from minijackson/netbox-3.7.1
Netbox 3.7.1
2024-01-22 20:52:54 +01:00
Robert Schütz
6de0d9293e
Revert "Dovecot: Do not include empty sieve_extensions and sieve_global_extensions" 2024-01-22 10:02:51 -08:00
nikstur
3ea482163b
Merge pull request #282320 from helsinki-systems/fix/nix-gc-unit-type
nixos/nix-gc: Minor module fixups
2024-01-22 17:49:18 +01:00
Minijackson
5d2370f800
netbox_3_5: remove 2024-01-22 16:31:45 +01:00
Minijackson
163fed297e
netbox: 3.6.9 -> 3.7.1
Or another way to see it:

netbox_3_7: init at 3.7.1

Make NetBox 3.7 the default version if stateVersion >= 24.05,
switch upgrade test to test upgrade from 3.6 to 3.7,
remove clearcache command for >=3.7.0,
make reindex command mandatory
2024-01-22 16:31:45 +01:00