Commit Graph

40539 Commits

Author SHA1 Message Date
Tom Hubrecht
5ad0ea1aaf nixos/netbird: Fix configuration of coturn server 2024-04-24 20:35:32 +02:00
Maciej Krüger
657e5c43be
Merge pull request #283298 from mkg20001/rustdesk-dynamic
rustdesk-server: use DynamicUser
2024-04-24 20:03:44 +02:00
Maciej Krüger
9c565e0e69
rustdesk-server: use DynamicUser
this was a suggestion on #272501
2024-04-24 19:00:37 +02:00
Pyrox
11255ef03c
maintainers: thehedgeh0g -> pyrox0
Also updates my information and contact info.

I no longer use The Hedgehog as my github username or online presence
username, so this fixes that. It also matches my github username, so it
should be easier for others to mention me if needed.
2024-04-24 12:53:58 -04:00
Rafael Fernández López
eb59699fbb hardware/nvidia-container-toolkit: enable CDI on virtualisation.docker.daemon.settings 2024-04-24 18:08:04 +02:00
Austin Horstman
91322305eb
wshowkeys: add cfg.package option 2024-04-24 08:47:38 -05:00
Peder Bergebakken Sundt
340d601e84 appimage: avoid setting name 2024-04-24 15:26:52 +02:00
Peder Bergebakken Sundt
90622c10bd appimageTools.wrapAppImage: passthru pname and version 2024-04-24 15:26:52 +02:00
networkException
3dd970f993
nixos/vaultwarden: drop outdated ownership requirements for environmentFile (#304825)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-04-24 15:19:33 +02:00
Sandro
212e6522de
Merge pull request #305563 from birkb/drbd-kernel-module 2024-04-24 14:25:12 +02:00
Martin Weinelt
cfa475854a
nixos/evcc: restart on failure 2024-04-24 12:36:21 +02:00
Thomas Gerbet
ecd2d35be0
Merge pull request #305742 from tomfitzhenry/ssh-no-pam
nixos/ssh: expose UsePAM and PrintMotd as options
2024-04-24 09:40:24 +02:00
Marie Ramlow
86913e049d gauge: add wrapper
Adds a wrapper to the gauge package, which allows installing plugins declaratively with nix.
2024-04-24 09:22:38 +02:00
nat-418
d24376448b
docs(conduit): update link to config docs 2024-04-24 09:11:03 +02:00
Lin Jian
8c6ccd9a8f
Merge pull request #305370 from stuebinm/docs-remove-emacs-docbook-section
nixos/emacs: remove docbook section in the documentation
2024-04-24 08:48:42 +08:00
Adam Stephens
6c359d6488
forgejo: 1.21.11-1 -> 7.0.0 2024-04-23 19:04:25 -04:00
stuebinm
5996290676 nixos/emacs: remove docbook section in emacs documentation
Since with the completion of the docbook migration) it seems unclear
what relevance editing xml in generall and docbook in particular with
Emacs still has to NixOS at all, and people interested in the topic
will presumably look to other resources elsewhere (e.g. to the nXML
mode's actual documenation).
2024-04-23 23:18:33 +02:00
Someone
7035968845
Merge pull request #290979 from ereslibre/cdi-add-nvidia-docker-1-directories
CDI: Add `mount-nvidia-binaries` and `mount-nvidia-docker-1-directories` options
2024-04-23 19:55:41 +00:00
Adam C. Stephens
d274696071
Merge pull request #306239 from mweinelt/incus-vtpm
nixos/incus: add support for software TPMs
2024-04-23 09:24:21 -04:00
Tom Fitzhenry
3fd9ef4b40 nixos/ssh: allow PrintMotd to be enabled 2024-04-23 22:53:09 +10:00
Tom Fitzhenry
2e51a2fd03 nixos/ssh: allow UsePAM to be disabled 2024-04-23 22:40:58 +10:00
Tom Fitzhenry
41911ed9d2 tests/openssh: tidy up tests
This test renames server_allowedusers to server-allowed-users.

As a side-effect, since IPs are allocated to machines in alphabetical order,
the IP assigned to server-lazy-socket changed, so the corresponding test had
its IP updated.
2024-04-23 22:39:02 +10:00
Rafael Fernández López
de3ce5ffa7 nixos/nvidia-container-toolkit: add mount-nvidia-executables and mount-nvidia-docker-1-directories options
- `mount-nvidia-binaries`: this option allows users to avoid mounting
nvidia binaries on the container.

- `mount-nvidia-docker-1-directories`: this option allows users to
avoid mounting `/usr/local/nvidia/lib{,64}` on containers.
2024-04-23 12:31:45 +02:00
Rafael Fernández López
471ff2c33c nixos/nvidia-container-toolkit: rename from virtualisation.containers.cdi.dynamic.nvidia.enable
Add the NixOS option `hardware.nvidia-container-toolkit-cdi-generator.enable`.

This enables the ability to expose GPU's in containers for container
runtimes that support the Container Device Interface (CDI)

Remove `cdi.static` and `cdi.dynamic.nvidia.enable` attributes.
2024-04-23 12:26:00 +02:00
Jörg Thalheim
0b4cb020ff
Merge pull request #306076 from mrgiles/mediawiki_explicit_admin_username
mediawiki: update passwordfile description field
2024-04-23 12:16:29 +02:00
Martin Weinelt
8541ec6d85
nixos/incus: add support for software TPMs
Was previously broken due to a missing runtime dependency.

> Error: Failed to start device "vtpm": Failed to validate environment: Required tool 'swtpm' is missing
2024-04-23 12:04:14 +02:00
Florian Klink
5a2d4496d3
Merge pull request #297726 from r-vdp/systemd-unit-names
systemd: add a name option to all systemd units
2024-04-23 12:58:51 +03:00
Kyle Carberry
68a917dc64
nixos/coder: fix broken service by referencing proper env (#305993) 2024-04-23 06:06:25 -03:00
Paul Meyer
ceead2d7e4 azure-cli: document extensions in description, fix release notes
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-04-22 16:03:54 -07:00
Jacek Generowicz
e683bf0c60
First update to release notes (#305965)
* Change spelling: freeform -> free-form

* Rejoin nginx message split by bacula

* Fix typos and trivial rewording

* Move package/service names to start of notes

* Switch package/service names to code font

* Reword some release notes

* Update nixos/doc/manual/release-notes/rl-2405.section.md

Co-authored-by: Jonathan Ringer <jonringer@users.noreply.github.com>

---------

Co-authored-by: Jonathan Ringer <jonringer@users.noreply.github.com>
2024-04-22 11:50:31 -07:00
Marcelo Giles
ac259c3a59
mediawiki: update passwordfile description field 2024-04-22 11:02:52 -07:00
Sigmanificient
1cdb19472c qtile: add passthru tests 2024-04-22 19:00:41 +02:00
misuzu
1c99cea684 castopod: remove misuzu from maintainers 2024-04-22 19:19:48 +03:00
misuzu
4146e6ea38 gotosocial: remove misuzu from maintainers 2024-04-22 19:19:01 +03:00
Maximilian Bosch
e8e9c5c3b1
Merge pull request #305837 from Ma27/roundcube-php83
nixos/roundcube: use php 8.3
2024-04-22 13:43:17 +00:00
Sandro Jäckel
8db512dae8 nixos/nginx: update ciphers list 2024-04-22 23:08:14 +10:00
Adam Stephens
f171f4ffd4
nixos/lxc: add package option and use for incus/lxd 2024-04-22 08:31:05 -04:00
Sergei Trofimovich
57d31b8c54 redlib.tests: fix eval
Without the change the eval fails as:

    $ nix build --no-link -f. redlib.tests
    error: attribute 'redlib' missing
       at pkgs/by-name/re/redlib/package.nix:50:26:
           49|   passthru.tests = {
           50|     inherit (nixosTests) redlib;
             |                          ^
           51|   };
       Did you mean redis?
2024-04-22 07:32:22 +01:00
Vir Chaudhury
4a0a12efc2 nixos/isolate: add tests 2024-04-22 10:19:42 +08:00
Vir Chaudhury
4ca92fb6ec nixos/isolate: init module 2024-04-22 10:19:09 +08:00
Weijia Wang
5cb9d83fb8
Merge pull request #305826 from KamilaBorowska/maintainers-remove-kamilaborowska
maintainers: remove KamilaBorowska
2024-04-22 04:02:28 +02:00
Robert Schütz
926d688d04
Merge pull request #300556 from dotlambda/python3Packages.recurring-ical-events
python312Packages.recurring-ical-events: 2.1.3 -> 2.2.0
2024-04-22 01:48:51 +00:00
Emily
d5b37040b5
Merge pull request #305842 from Ma27/fix-manual-build
nixos: fix manual build
2024-04-22 00:43:17 +02:00
Ryan Hendrickson
61153af068
Merge pull request #298983 from illustris/mysql
nixos/systemd-lib: fix restart/reloadTriggers when passing paths
2024-04-21 17:45:16 -04:00
Maximilian Bosch
2ee96a1738
nixos: fix manual build
`mdDoc` is deprecated!
2024-04-21 23:28:46 +02:00
Maximilian Bosch
7bb471b3e8
nixos/roundcube: use php 8.3
Upstream claims that 1.6 works fine with PHP 8.3[1]. Also PHP 8.1 is in
the security-only phase already, so we'll need to change sooner or later
anyways.

[1] https://github.com/roundcube/roundcubemail/issues/9339
2024-04-21 23:18:41 +02:00
Pol Dellaiera
95d8be4d3c
Merge pull request #301514 from r-vdp/nftables-rpfilter-extra-rules
nixos/firewall-nftables: allow adding additional rules to the rpfilter chain
2024-04-21 23:02:01 +02:00
Sandro
9edb990e0e
Merge pull request #295261 from SuperSandro2000/pretalx-media
nixos/pretalx: fix /media/ nginx location block
2024-04-21 22:45:17 +02:00
Kamila Borowska
0d3b34f45a maintainers: remove KamilaBorowska 2024-04-21 22:26:12 +02:00
Jörg Thalheim
d285a49ffa
Merge pull request #305637 from schra/fix-grub-device
digital-ocean: revert "make it easier to use disko"
2024-04-21 22:22:58 +02:00
birkb
e475ed648e
drbd driver: 9.2.7 -> 9.2.8
- xz compression added for module files
- no support for kernel 6.8 or newer
- sri format used for hash
- release notes for 24.05 updated

Signed-off-by: birkb <birk@batchworks.de>
2024-04-21 21:50:16 +02:00
Sandro
04a3a2a8fe
Merge pull request #260962 from lunik1/inadyn-module
nixos/inadyn: init
2024-04-21 21:38:22 +02:00
Basti
19081514c2
Merge pull request #304608 from tmuehlbacher/fix-fzf-bash-completions
nixos/fzf: fix bash with `fuzzyCompletion`
2024-04-21 18:37:01 +00:00
Hans Christian Schmitz
72ed33777c
nixos/wireplumber: add extraConfig/extraScripts options
Follow-up to #282377. #282377 broke `environment.etc."wireplumber<...>"`,
however WirePlumber did not yet have `extraConfig` style options for
configuring it ergonomically outside of `environment.etc`. This has
caused issues for people who had custom config files for WirePlumber, as
having to create a config package just to edit some settings is not as
ergonomic or discoverable as with a proper `extraConfig` style option.

This commit fixes this issue by adding the `extraConfig` option for
additional config file and the `extraScripts` option for additional
scripts to be used by config files.

With WirePlumber 0.5 it is possible to supply config files and scripts
via the `XDG_DATA_DIRS` variable to the WirePlumber daemon. This is how
the new options and with this change also the `configPackages` option
expose their files to the daemon. This way
`environment.etc."wireplumber"` works again for user configuration and
breakage of old configs from 23.11 to 24.05 should be limited to those
caused by the change in the config format from WirePlumber 0.4 to 0.5.
2024-04-21 20:34:37 +02:00
Thomas Mühlbacher
dd64d62858 nixos/fzf: fix bash with fuzzyCompletion
put all of fzf initialization after the bash-completions initialization
in bashrc, as the upstream project suggests in
https://github.com/junegunn/fzf/issues/72

Fixes: #303195
2024-04-21 20:33:03 +02:00
Sandro
a3739c2563
Merge pull request #303224 from 0z13/oauth2_proxy-add-issuer-url
nixos/oauth2_proxy: add oidc-issuer-url flag
2024-04-21 19:49:59 +02:00
pennae
67dfd15302
Merge pull request #305767 from emilylange/nixos-manual-abort-on-warn
nixos/manual: apply `documentation.nixos.options.warningsAreErrors` to nix eval as well
2024-04-21 18:56:54 +02:00
Julien Malka
7a85b7bc35
Merge pull request #304334 from JulienMalka/limesurvey-package
nixos/limesurvey: allow package to be customized
2024-04-21 18:53:26 +02:00
emilylange
2872e10333
nixos/manual: apply cfg.warningsAreErrors to nix eval as well
This change makes `baseOptionsJSON` (`lazy-option.json`) take
our existing `documentation.nixos.options.warningsAreErrors` option into
account to then set the `NIX_ABORT_ON_WARN` environment variable within
its build sandbox accordingly.

Given `documentation.nixos.options.warningsAreErrors` default to true,
our nixpkgs CI check that builds the NixOS manual for each PR, will now
fail when something raises a warning, e.g. as part of the `lib.mdDoc`
deprecation.

This should prevent new PRs with lib.mdDoc from getting merged.

Previously, the manual would build successfully, even if an eval warning
was raised.
2024-04-21 18:01:26 +02:00
Victor Engmark
c11815167f nixos/duosec: Split mkdir mode into chmod command for clarity
As recommended by ShellCheck
<https://github.com/koalaman/shellcheck/wiki/SC2174>.
2024-04-22 01:40:55 +10:00
Weijia Wang
d9ad2e5a1a
Merge pull request #305379 from stuebinm/fcast-receiver-mdDoc
nixos/fcast-receiver: remove uses of lib.mdDoc
2024-04-21 17:19:33 +02:00
Tom Fitzhenry
00ad4eba21 nixos/tests/phosh: check phosh-mobile-settings starts 2024-04-22 00:56:03 +10:00
Michele Guerini Rocco
8b93a430dc
Merge pull request #305689 from rnhmjoj/pr-fix-wpa-secrets
nixos/wireless: correctly handle secrets containing &
2024-04-21 16:07:42 +02:00
Michele Guerini Rocco
23fc571cc3
Merge pull request #305649 from rnhmjoj/pr-fix-wpa-aux
nixos/wireless: create empty config for imperative setup
2024-04-21 16:06:57 +02:00
Preston Hunt
b87790536d nixos/greenclip: restart daemon if it exits 2024-04-21 23:58:10 +10:00
André Schröder
168793f151 digital-ocean: revert "make it easier to use disko"
This reverts parts of commit d87c4e1a72 from @Mic92

After switching from nixos-23.11 to nixos-unstable, I got the following error:

```
$ nixos-rebuild switch --flake nixos/#digitalocean
...
error:
Failed assertions:
- You must set the option ‘boot.loader.grub.devices’ or 'boot.loader.grub.mirroredBoots' to make the system bootable.
```

In my nixos config I don't set boot.loader.grub.devices or boot.loader.grub.mirroredBoots explicitly.

It seems like the values are not really defaulted via mkDefault? I am still relatively new to Nix, not sure how to fix this properly, so I am proposing to revert this change.
2024-04-21 11:36:17 +02:00
rnhmjoj
89a1bde018
nixos/wireless: correctly handle secrets containing &
In the replacement arg of gsub() the & symbol is a special character
that need to be escaped. To avoid this, and further issues due to the
variable name possibly being interpreted as a regex, we do a normal
substring replacement.

This fixes issues #279803.
2024-04-21 09:58:26 +02:00
rnhmjoj
4d2f457f6e
nixos/tests/wpa_supplicant: test allowAuxiliaryImperativeNetworks 2024-04-21 09:53:59 +02:00
illustris
7862480ab0
Update nixos/doc/manual/release-notes/rl-2405.section.md
Co-authored-by: Ryan Hendrickson <ryan.hendrickson@alum.mit.edu>
2024-04-21 10:27:33 +05:30
illustris
4a9c962aca
nixos/systemd-lib: fix restart/reloadTriggers when passing paths
When passing a path to restartTriggers or reloadTriggers, X-Restart/Reload-Triggers
will get populated by the absolute path of the file on the machine where the
config is evaluated. This patch corrects this behavior.
2024-04-21 09:40:17 +05:30
rnhmjoj
4fa107f1c9
nixos/wireless: create empty config for imperative setup
If allowAuxiliaryImperativeNetworks is enabled, the wpa_supplicant
daemon complains fails to start if /etc/wpa_supplicant.conf does not
exist. As this can be created using wpa_cli (or similar) later, it
shouldn't matter, so let's create an empty one.

This fixes issues #157537, #299466.
2024-04-21 02:10:32 +02:00
Weijia Wang
20e0c45c7a
Merge pull request #304527 from atorres1985-contrib/earlyoom
earlyoom: 1.7 -> 1.8
2024-04-20 23:06:06 +02:00
Martin Weinelt
d68481224a
nixos/release-small: fix eval
Provide nixpkgs.release-checks, which has been extracted out of the
tarball job into a dedicated one.
2024-04-20 22:51:19 +02:00
Sandro
5bfe2b6964
Merge pull request #294641 from devusb/sunshine-module
nixos/sunshine: init
2024-04-20 21:32:50 +02:00
Sandro
decb1678b6
Merge pull request #197193 from onny/manticore-service
nixos/manticore: init module
2024-04-20 20:31:03 +02:00
Bjørn Forsman
c7ab550bbc nixos/deconz: fix curl redirect option in postStart
It should be curl -L (follow redirects), not curl -l (FTP directory
listing option). I know because it's my mistake.

Fixes: d4b989cafc ("nixos/deconz: delay signalling service readiness until it's actually up")
2024-04-20 20:24:39 +02:00
Wolfgang Walther
945a3bbb8b
postgresqlPackages.promscale_extension: remove deprecated and broken package
postgresql14Packages.promscale_extension breaks with:

  Error:
    0: `pgx-0.6.1` shouldn't be used with `cargo-pgx-0.7.4`,
    please use `pgx = "~0.7.4"` in your `Cargo.toml`.

However, pinning cargo-pgx to 0_6_1 via the following

  buildPgxExtension.override { cargo-pgx = cargo-pgx_0_6_1; }

does not work either, because the build then fails with:

  thread 'main' panicked at /build/promscale_extension-0.8.0-vendor.tar.gz/proc-macro2/src/fallback.rs:756:9:
  "__mbstate_t_union_(unnamed_at_/nix/store/ij144ma6vs8acil8r9hgr8xkb1dp9azg-glibc-2_39-5-dev/include/bits/types/__mbstate_t_h_16_3)" is not a valid Ident

This seems to be related to [1], which indicates that this is a
problem with newer LLVM / clang toolchains.

At the same time th upstream package is deprecated / archived since
the 2nd of April 2024 [2]. Additionally this package is unfree and
thus very unlikely to be forked. Since we can't expect this to be
fixed, the only sensible thing to do is to remove the package.

[1]: https://github.com/rust-lang/rust-bindgen/issues/2312
[2]: https://github.com/timescale/promscale/issues/1836
2024-04-20 20:10:13 +02:00
Pol Dellaiera
e540698524
Merge pull request #302136 from savyajha/firefly-iii
firefly-iii: init at 6.1.13, nixos/firefly-iii: init
2024-04-20 13:56:08 +02:00
K900
8f9e7071ff
Merge pull request #304730 from K900/bigger-paralleler
pkgs/top-level: split release-checks into a separate job
2024-04-20 12:47:13 +03:00
Ryan Lahfa
21bd30ea2f
Merge pull request #247118 from Tom-Hubrecht/netbird-server
nixos/netbird-server: init module
2024-04-20 11:21:10 +02:00
Pol Dellaiera
31805d0367
Merge pull request #305076 from abysssol/ollama-sandbox
nixos/ollama: add options to bypass sandboxing
2024-04-20 10:49:28 +02:00
José Romildo Malaquias
f0c15cd749
Merge pull request #305107 from romildo/upd.lxqt
LXQt: update to version 2.0.0
2024-04-19 17:22:32 -03:00
stuebinm
5cbfb939e5 nixos/fcast-receiver: remove uses of lib.mdDoc 2024-04-19 21:39:02 +02:00
Maxine Aubrey
bc41aa7225
Merge pull request #305359 from Janik-Haag/drop-piegames-from-gnome-plugins
gnomeExtensions: drop piegames from maintainers
2024-04-19 20:05:39 +02:00
Janik H.
c8d5a4ca24
gnomeExtensions: drop piegames from maintainers
upon request of @piegamesde
2024-04-19 20:04:32 +02:00
José Romildo
9b7f278b92 nixos/lxqt: use mkDefault to enable the lxqt xdg portal 2024-04-19 14:39:01 -03:00
Martin Weinelt
666b73468d
Merge pull request #304373 from SuperSandro2000/knot-settings
nixos/knot: use module system to combine settings option
2024-04-19 17:26:53 +02:00
Valentin Gagarin
9b76c3bff5
doc: move note on configuring Nixpkgs in NixOS to the NixOS manual (#304307)
that NixOS manual section talks a lot about Nixpkgs package
configuration, which really should not be there but rather in the
Nixpkgs manual itself. but this is a rabbit hole for another time.

Co-authored-by: Dominic Mills <dominic.millz27@gmail.com>
2024-04-19 16:06:32 +02:00
Anderson Torres
cef01a232d services.earlyoom: set package option
Also add AndersonTorres as maintainer.
2024-04-19 09:58:27 -03:00
Anderson Torres
7b7ccd525c nixosTests.earlyoom: add AndersonTorres as maintainer 2024-04-19 09:50:56 -03:00
Mario Rodas
4237fee22d
Revert "icu: refactor to avoid runtime dependency on bash" 2024-04-19 06:35:58 -05:00
Leona Maroni
3905a63bdc
Merge pull request #305267 from e1mo/paperless-always-eng
nixos/paperless: Always buidl tesseract with english
2024-04-19 12:07:02 +02:00
Bruno BELANYI
5d8f1c0172
Merge pull request #297805 from ambroisie/podgrab-user
nixos/podgrab: add user/group/dataDirectory options
2024-04-19 10:08:04 +01:00
e1mo
7067c4b0bb
nixosTests.paperless: Test tesseract compiles when english is not staged
Tests for the regression introduced in #303388 and fixed in
f0721f3779.
2024-04-19 10:48:08 +02:00
e1mo
f0721f3779
nixos/paperless: Always buidl tesseract with english
With the changes introduced in #303388 tesseract would only be compiled
with the languages defined in `PAPERLESS_OCR_LANGUAGE`. However, english
is always required, making tesseract fail to build when only non-english
languages are defined in tesseract:

```
eng.traineddata must be present in tessdata for Tesseract to work
```
2024-04-19 10:47:54 +02:00
7c6f434c
763178063e
Merge pull request #304784 from zlepper/remove-bash-runtime-dep-from-libicu
icu: refactor to avoid runtime dependency on bash
2024-04-19 07:59:14 +00:00
Rick van Schijndel
e00a40a257
Merge pull request #298680 from gvolpe/lib/transposeMap
lib/attrsets: add mapCartesianProduct function
2024-04-19 08:26:09 +02:00
Peder Bergebakken Sundt
271381db77
Merge pull request #302369 from nevivurn/feat/kavita-0.7.14
kavita: 0.7.13 -> 0.8.0
2024-04-19 01:42:47 +02:00
Mynacol
774cd77f2b nixos/akkoma: Fix media proxy URLs after upgrade
The upgrade of akkoma to 3.12.1 required to specify media upload and
media proxy URLs by default. The default value for media proxy was
wrong, leading to broken `example.com/media/proxy/[...]` URLs.

As descried in the [upgrade guide](https://meta.akkoma.dev/t/akkoma-stable-2024-03-securer-i-barely-know-her/681#explicit-upload-and-media-proxy-domains-5),
the media proxy `base_url` should be set to `https://example.com`
(without a path component). The suffix already contains `proxy/[...]`,
which gives the expected URLs.
2024-04-19 00:06:59 +02:00
nat
af65b87b23
nixos/malloc: add graphene-hardened-light 2024-04-18 23:19:46 +02:00