Commit Graph

16807 Commits

Author SHA1 Message Date
Artturi
22e61b1402
nixos/fail2ban: also inherit bantime (#244688)
nixos/fail2ban: also inherit bantime
2023-10-17 09:40:39 +03:00
Bjørn Forsman
4164383dd4 nixos/deconz: init
Add a NixOS module for the deCONZ Zigbee gateway service.
2023-10-16 20:49:41 +02:00
Maximilian Bosch
3357e6df46
Merge pull request #260008 from Ma27/synapse-log-config
nixos/matrix-synapse: mergeable log configuration
2023-10-16 18:01:44 +00:00
lelgenio
218bef9116 nixos/writefreely: fix admin user creation on sqlite 2023-10-16 10:41:47 -03:00
Jennifer Graul
e94820dfb2 nixos/librenms: init 2023-10-16 13:28:22 +02:00
Jean-François Roche
fb3723fe52
nixos/tang: create module for tang server (#247037)
This commit adds a module for the tang server and the related nixos test.
2023-10-16 13:10:15 +02:00
Julien Malka
c54ab7d643 nixos/ferretdb: init 2023-10-16 10:15:30 +02:00
Yureka
3488f86baf nixos/peering-manager: add scheduled tasks 2023-10-15 22:01:04 +02:00
Maximilian Bosch
e5928d9a73
nixos/synapse: mkDefault each value of the log config
That way it's not even needed to specify an `mkForce` when changing
existing attributes, e.g. root's log level.
2023-10-15 16:16:28 +02:00
Vojtěch Káně
b8624bd312 nixos/firefox-syncserver: fix and update the docs and options descriptions 2023-10-15 13:33:40 +02:00
Lassulus
a3dacf1dc8
Merge pull request #260306 from doronbehar/nixos/syncthing-many-devices 2023-10-15 10:24:40 +01:00
Weijia Wang
53dc4745a8
Merge pull request #261074 from erdnaxe/prom-fixes
nixos/prometheus: fix cross-compilation
2023-10-15 01:34:13 +02:00
Doron Behar
79c78d68c6 nixos/syncthing: get API key for every curl request
Fixes #260262.
2023-10-15 02:04:52 +03:00
Alexandre Iooss
925a8806dc nixos/prometheus: fix cross-compilation 2023-10-14 16:45:18 +02:00
Artturin
d891f369ee nixos/x11: don't use a submodule for xkb options
A submodule is unnecessary

Improved a few descriptions
2023-10-14 04:15:53 +03:00
Maximilian Bosch
35f6dbe7fc
Merge pull request #259967 from Ma27/nextcloud-cleanups
nextcloud: 27.1.0 -> 27.1.2, update nginx, drop nextcloud25
2023-10-13 16:40:40 +02:00
Artturin
d470944859 nixos/x11: create xkb option by default
without this
```
nix-repl> nixosTests.xfce.nodes.machine.services.xserver.xkb
error: The option 'nodes.machine.services.xserver.xkb' is used but not defined.
```

with this
```
nix-repl> nixosTests.xfce.nodes.machine.services.xserver.xkb
{ dir = "/nix/store/096yg7fc67py86w0bm6g7a32npgyh5ic-xkeyboard-config-2.39/etc/X11/xkb"; layout = "us"; model = "pc104"; options = "terminate:ctrl_alt_bksp"; variant = ""; }
```
2023-10-13 01:16:14 +03:00
Fabián Heredia Montiel
f96d8113b3
Merge pull request #259745 from Luflosi/update/kubo
kubo: 0.22.0 -> 0.23.0
2023-10-12 15:42:59 -06:00
Weijia Wang
c3a3b38cb9
Merge pull request #258813 from SuperSandro2000/drop-searx
searx: drop
2023-10-12 19:55:39 +02:00
Aaron Andersen
bae7820f02
Merge pull request #259425 from aanderse/nixos/openssh-authorized-principals
nixos/openssh: add support for authorized principals
2023-10-12 10:30:52 -04:00
Molly Miller
1a794a3e4b nixos/mailman: store locks in ephemeral runtime directory
nixosTests.mailman: test mailman master lock handling
2023-10-12 10:39:18 +00:00
Artturi
520e363e82
Merge pull request #259891 from l0b0/refactor/xkb-attrset 2023-10-12 08:43:28 +03:00
Sandro Jäckel
e793d18455 nixos/searx: little makeover 2023-10-11 23:48:29 +02:00
Sandro Jäckel
ad1f57095f searx: drop
searx has been removed as it is unmaintained. Please switch to searxng.
2023-10-11 23:48:28 +02:00
Arnout Engelen
6071292b2a
Merge pull request #243338 from raboof/prometheus-imap-mailstat-exporter-init-at-2023-06-20
prometheus-imap-mailstat-exporter: init at 0.0.1
2023-10-11 17:33:25 -03:00
Bobby Rong
4cf896a425
Merge pull request #260080 from r-ryantm/auto-update/cinnamon.mint-artwork
cinnamon.mint-artwork: 1.7.5 -> 1.7.6
2023-10-11 21:08:19 +08:00
Atemu
16fb0b365d
Merge pull request #259056 from leona-ya/nixos-paperless-systemd-254
nixos/paperless: fix start with latest systemd
2023-10-11 13:15:24 +02:00
Victor Engmark
3a6c79cff6 nixos/x11: refactor XKB options into a single attrset
[Motivation](https://github.com/NixOS/nixpkgs/issues/257817#issuecomment-1741705042):

- Having all the XKB options in the same attribute set clarifies their
  relation better than using a common option name prefix ("xkb").
- `services.xserver.layout` is an XKB option, but this is not obvious
  from its name. Putting it with the other XKB options clarifies this.

Co-authored-by: Michele Guerini Rocco <rnhmjoj@users.noreply.github.com>
2023-10-11 09:46:37 +03:00
Arnout Engelen
aae49a5cc7
Merge pull request #247540 from imlonghao/borgmatic/1.8.1
borgmatic: 1.7.15 -> 1.8.1
2023-10-10 22:46:24 -03:00
Izorkin
cfd837442f nixos/samba: start service after network activation 2023-10-10 20:13:52 +02:00
R. Ryantm
051963b199
cinnamon.mint-artwork: 1.7.5 -> 1.7.6
This sets the mono font to DejaVu Sans Mono 10.
2023-10-10 22:06:50 +08:00
imlonghao
4a519fa142
borgmatic: 1.7.15 -> 1.8.1 2023-10-10 21:48:13 +08:00
Maximilian Bosch
3d3b99ad20
Merge pull request #259980 from Ma27/synapse-db-assertion
nixos/matrix-synapse: drop old DB check assertion, actually require DB to be up
2023-10-10 11:41:05 +02:00
Maximilian Bosch
791fe98a0d
Merge pull request #259888 from julianschacher/matrix-synapse-fix-media-store-access
nixos/matrix-synapse: add `media_store_path` to services `ReadWritePaths`
2023-10-10 11:40:45 +02:00
Doron Behar
6843abd5fb
Merge pull request #231152 from tcheronneau/nixos.tinyproxy
Adding tinyproxy service to NixOS
2023-10-09 23:53:58 +03:00
Anderson Torres
52058530ce nixos/connman: refactor 2023-10-09 17:49:02 -03:00
Maximilian Bosch
9f1d4b79e3
nixos/postgresql: fix identMap example
This was causing the following warning before when building the manual:

    warning: literalExample is deprecated, use literalExpression instead, or use literalMD for a non-Nix description.

Rather than using `literalExpression`, nothing is used. This option
expects a string and the example is a string, no special handling
required. Both `literalExample` from the docbook ages and
`literalExpression` now are only required if the example is
a Nix expression rather than a value of the option's type.
2023-10-09 17:41:44 +02:00
Maximilian Bosch
cb67bb0335
nixos/matrix-synapse: mergeable log configuration
Right now there's no trivial way to override parts of synapse's log
config such as the log-level because the only thing that's changeable is
the path to the log-file used by synapse and its workers.

Now, there's a new option called `services.matrix-synapse.log`
which contains the default log config as Nix attribute-set (except
`handlers.journal.SYSLOG_IDENTIFIER`). It has default priority, so new
things can be added like

    services.matrix-synapse.log = {
      my.extra.field = 23;
    }

without discarding the rest. If desired, this can still be done via
`lib.mkForce`.

If the log configuration for a single worker or synapse, but not all
workers should be changed, `services.matrix-synapse.settings.log_config`
or `services.matrix-synapse.workers._name_.worker_log_config`
can be used.
2023-10-09 17:34:15 +02:00
Vladimír Zahradník
9053490648 nixos/netclient: init 2023-10-09 15:58:05 +02:00
Maximilian Bosch
7f08d0ebd8
nixos/matrix-synapse: drop old DB check assertion, actually require DB to be up
Closes #236062

The PR #236062 was submitted because of the following problem: a synapse
instance was running in a NixOS container attached to the host network
and a postgresql instance on the host as database. In this setup,
synapse connected to its DB via 127.0.0.1, but the DB wasn't locally set
up and thus not configured in NixOS (i.e.
`config.services.postgresql.enable` was `false`). This caused the
assertion removed in this patch to fail.

Over three years ago this assertion was introduced when this module
stopped doing autoconfiguration of postgresql entirely[1] because a
breaking change in synapse couldn't be managed via an auto-upgrade on
our side. To make sure people don't deploy their DB away by accident,
this assertion was introduced.

Nowadays this doesn't serve any value anymore because people with
existing instances should've upgraded by now (otherwise it's their job
to carefully read the release notes when missing upgrades for
several years) and people deploying fresh instances are instructed by
the docs to also configure postgresql[2].

Instead, it only causes issues in corner cases like #236062, so after
some discussion in that PR I think it's time to remove the assertion
altogether.

Also, there's no `Requires=` for `postgresql.service` in the systemd
units which means that it's not strictly guaranteed that the DB is up
when synapse starts up. This is fixed now by adding `requires`. To avoid
being bitten by above mentioned cases again, this only happens if
`config.services.postgresql.enable` is `true`.

If somebody uses a non-local postgresql, but has also deployed a local
postgresql instance on the synapse server (rather unlikely IMHO), it's
their job to opt out of this behavior with `mkForce` (this is precisely one
of the use-cases `mkForce` and friends were built for IMHO).

[1] https://github.com/NixOS/nixpkgs/pull/80447
[2] https://nixos.org/manual/nixos/stable/#module-services-matrix-synapse
2023-10-09 14:06:50 +02:00
Maximilian Bosch
ad57ad1ff5
nixos/nextcloud: update / clean up the nginx configuration
First of all, a few cleanups were made to make it more readable:

* Reordered the sections by their priority so what you're reading in Nix
  is also what you get in the final nginx.conf.
* Unified media/asset locations

Most notably, this fixes the

    Your web server is not properly set up to resolve "/ocm-provider/".

warning since 27.1.2 where `ocm-provider` was moved from a static
directory in the source tarball to a dynamic HTTP route[1].

Additionally, the following things were fixed:

* The 404 checks for build/tests/etc. are now guaranteed to be before
  the `.php` location match and it's not implicitly relied upon Nix's
  internal attribute sorting anymore.

* `.wasm` files are supported properly and a correct `Content-Type` is
  set.

* For "legacy" routes (e.g. `ocs-provider`/`cron`/etc) a `rewrite` rule
  inside the location for fastcgi is used as recommended by upstream[2].
  This also makes it easier to understand the purpose of the location
  itself (i.e. use fastcgi for PHP code).

[1] https://github.com/nextcloud/documentation/pull/11179
[2] https://docs.nextcloud.com/server/27/admin_manual/installation/nginx.html
2023-10-09 12:40:57 +02:00
Maximilian Bosch
8702ae0110
nixos/nextcloud: drop enableBrokenCiphersForSSE
🎉
2023-10-09 12:40:57 +02:00
Julian Schacher
722e9df2fb
nixos/matrix-synapse: add media_store_path to services ReadWritePaths
Currently, when setting a custom media_store_path, which lies outside of
cfg.dataDir, the current ReadWritePaths make it so that Synapse can't
access the media_store_path. So add the media_store_path to
ReadWritePaths to fix that.
2023-10-09 02:27:05 +02:00
Maximilian Bosch
669da9ccdb
Merge pull request #246117 from Ralith/fix-synapse-well-known-example
nixos/matrix-synapse: fix duplicate Content-Type header in example
2023-10-08 19:53:26 +02:00
Doron Behar
50a077328a
Merge pull request #259259 from Lassulus/syncthing_stale
nixos/syncthing: match stale ids by subtracting in jq
2023-10-08 12:53:34 +03:00
Vladimír Čunát
2ec92384d7
Merge #258361: nixos/knot: compatibility with 23.05 config 2023-10-08 10:16:06 +02:00
Vladimír Čunát
6b66e2fc9c
nixos/knot: compatibility with 23.05 config
- run conf-check iff keyFiles == [] (like in 23.05; this was my bug)
- support extraConfig + keyFiles

- but warning will still be shown if extraConfig is used,
  and it might be slightly confusing
2023-10-08 10:14:54 +02:00
Sarah Brofeldt
9b73af9b27
Merge pull request #259498 from TLATER/tlater/gitea-metrics
gitea: Add option to supply the metrics token via file
2023-10-08 07:53:33 +02:00
Luflosi
70c8adce8d
kubo: 0.22.0 -> 0.23.0
https://github.com/ipfs/kubo/releases/tag/v0.23.0

Support for /quic (Draft 29) was removed, so remove it from `services.kubo.settings.Addresses.Swarm`.

The changelog says that there have been some fixes to the FUSE mountpoint functionality but the test still requires the workaround, so leave that unchanged.
2023-10-08 02:04:02 +02:00
Tristan Daniël Maat
b59e5a34e7
nixos/gitea: Add option to supply the metrics token via file 2023-10-07 21:53:02 +02:00