colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
360,934 Commits 124 Branches 0 Tags 3.3 GiB
25113740a5
Commit Graph

12691 Commits

Author SHA1 Message Date
Luflosi
3c63da7cf8
nixos/tor: allow tor to read resolv.conf when using resolved 
When `services.resolved.enable` is set to true, the file /etc/resolv.conf becomes a symlink to /etc/static/resolv.conf, which is a symlink to /run/systemd/resolve/stub-resolv.conf. Without this commit, tor does not have access to this file thanks to systemd confinement. This results in the following warning when tor starts:
```
[warn] Unable to stat resolver configuration in '/etc/resolv.conf': No such file or directory
[warn] Could not read your DNS config from '/etc/resolv.conf' - please investigate your DNS configuration. This is possibly a problem. Meanwhile, falling back to local DNS at 127.0.0.1.
```
To fix this, simply allow read-only access to the file when resolved is in use.
According to https://github.com/NixOS/nixpkgs/pull/161818#discussion_r824820462, the symlink may also point to /run/systemd/resolve/resolv.conf, so allow that as well.
 2022-03-15 15:16:14 +01:00
Luke Granger-Brown
247a1809a4
Merge pull request #163431 from nazarewk/update-plantuml-server 
plantuml-server 1.2021.12 -> 1.2022.2
 2022-03-14 13:37:49 +00:00
Alexander Bantyev
8eb9d6c0d4
Merge pull request #163622 from ilya-fedin/mate-allow-remove-any-package 
nixos/mate: allow remove any added package
 2022-03-14 15:26:58 +03:00
Maximilian Bosch
0c5586c2f2
Merge pull request #162254 from Ma27/init-dmarc-exporter 
prometheus-dmarc-exporter: init at 0.5.1
 2022-03-14 09:02:08 +01:00
Bobby Rong
f6a48cd9fc
Merge pull request #163960 from bobby285271/pantheon 
nixos/pantheon: enable xdg desktop integration
 2022-03-14 09:23:42 +08:00
Sander van der Burg
43543a6bbc
Merge pull request #163716 from svanderburg/fixtomcat 
nixos/tomcat: configure default group and fix broken default package …
 2022-03-13 21:43:45 +01:00
Giulio De Pasquale
b77494badb nixos/jellyfin: Disable PrivateDevices from hardening to allow GPU endpoints to be accessed 2022-03-13 17:01:10 +00:00
Peter Hoeg
d853dc52d8 nixos/squeezelite: add support for PulseAudio version 2022-03-13 21:08:52 +08:00
Sander van der Burg
d12186a601 nixos/tomcat: configure default group and fix broken default package reference 
Without this fix, evaluating a NixOS configuration with Tomcat enabled and the
default settings results in the following evaluation error:

Failed assertions:
- users.users.tomcat.group is unset. This used to default to
nogroup, but this is unsafe. For example you can create a group
for this user with:
users.users.tomcat.group = "tomcat";
users.groups.tomcat = {};
 2022-03-13 14:00:09 +01:00
Peter Hoeg
895090bf89 nixos/earlyoom: use the newly introduced systembus-notify option 
Also some cleanups.
 2022-03-13 20:21:21 +08:00
Peter Hoeg
27e32bbfde nixos/systembus-notify: add support for system services notifying users 2022-03-13 20:21:21 +08:00
Bobby Rong
65f9112d6b
nixos/pantheon: enable xdg desktop integration 
This prevents the embarrassing situation in https://github.com/NixOS/nixpkgs/pull/163828 from happening again.
 2022-03-13 12:50:17 +08:00
Luke Granger-Brown
8035c513e3
Merge pull request #163673 from lukegb/pomerium 
pomerium: 0.15.7 -> 0.17.0
 2022-03-13 02:20:38 +00:00
Kevin Cox
3222d8665d
Merge pull request #159865 from midchildan/update/epgstation 
epgstation: 1.7.5 -> 2.6.20
 2022-03-12 13:42:49 -05:00
Artturi
1389c15b77
Merge pull request #163304 from gravndal/amule-daemon 2022-03-12 16:18:29 +02:00
midchildan
697ea7c69c
epgstation: make updateScript create EditorConfig-compliant files 2022-03-12 15:10:39 +09:00
midchildan
561c0c2851
nixos/rl-2205: add entries for EPGStation v2 2022-03-12 15:10:38 +09:00
midchildan
5e7be6b480
nixos/epgstation: changes for EPGStation v2 2022-03-12 15:10:37 +09:00
Luke Granger-Brown
3004e58f6a nixos/pomerium: avoid blocking when renewing ACME certificates 2022-03-11 14:09:19 +00:00
Ilya Fedin
dd510b9053 nixos/mate: allow remove any added package 
Only extra packages removable currently, but it's possible to run MATE without packages like caja or yelp
 2022-03-11 17:25:24 +04:00
Bobby Rong
8a56a49cc7
Merge pull request #162411 from kurnevsky/tox-node-service-fix 
tox-node: fix config hash and url
 2022-03-11 18:09:35 +08:00
Profpatsch
75b08e3624 modules/github-runner: Improve description of url 
We spent a whole afternoon debugging this, because upstream has very
bad software quality and the error messages were incredibly
misleading.

So let’s document it for the sanity of other people.

Btw, I think the implementation of our module is pretty brittle,
especially the part about diffing tokens to check whether they
changed. We should rather just request a new builder registration
every time, it’s not that much overhead, and always set `replace` so
it is idempotent.
 2022-03-11 10:26:39 +01:00
Krzysztof Nazarewski
4ea5398d20
plantuml-server 1.2021.12 -> 1.2022.2 
- changed JDK version to 17 (11+ required)
- added maven build reproducibility
 2022-03-11 09:05:35 +01:00
pennae
af0f3944bd
Merge pull request #163009 from scvalex/nbd-service 
nbd: add nbd service and test
 2022-03-11 01:02:10 +00:00
Martin Weinelt
76721f5e5e
Merge pull request #159986 from NukaDuka/pve_exporter 2022-03-10 22:41:45 +01:00
Giulio De Pasquale
81781c338d
Jellyfin: Disable ProtectClock to allow NVENC, NVDEC acceleration 2022-03-10 00:19:57 +00:00
Evgeny Kurnevsky
d94be44526
tox-node: fix config 2022-03-09 23:27:34 +03:00
Giulio De Pasquale
3b944f4c0c
Jellyfin: Fix NVENC, NVDEC usage by allowing AF_UNIX 
Fix NVENC, NVDEC usage when transcoding with hardware capabilities
 2022-03-09 19:44:06 +00:00
Lassulus
155c02837b
Merge pull request #163383 from Lassulus/tor_newlines 
nixos/tor: admit newlines in secret key
 2022-03-09 19:19:39 +01:00
pennae
06c57317c2
Merge pull request #146653 from DarkDNA/nixos/fix-systemd-exporter/extraFlags 
nixos/prometheus/systemd: Implement the extraFlags config option.
 2022-03-09 16:12:32 +00:00
lassulus
236a731da0 nixos/tor: admit newlines in secret key 2022-03-09 15:11:01 +01:00
Alexandru Scvortov
252f20aaa2 nbd: add programs.nbd, services.nbd, and test 
Changes:

nbd: Update nixos/modules/services/networking/nbd.nix

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

nbd: Update nixos/modules/services/networking/nbd.nix

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

nbd: Update nixos/tests/nbd.nix

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

nbd: generalize options in nbd service

nbd: harden service

nbd: Update nixos/modules/services/networking/nbd.nix

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

nbd: Update nixos/modules/services/networking/nbd.nix

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

nbd: refactor code a bit and BindPaths automatically
 2022-03-09 12:00:47 +00:00
Sandro
a879922e62
Merge pull request #163208 from Izorkin/fix-modsecurity-nginx 2022-03-08 13:11:42 +01:00
Sandro
e9183df241
Merge pull request #157923 from tim-tx/update/dendrite-0.6.0 2022-03-08 12:51:04 +01:00
Sandro
1a0b804799
Merge pull request #162866 from euank/k3s-unified-cgroups 2022-03-08 12:39:37 +01:00
Sandro
0ffade9012
Merge pull request #162214 from ncfavier/redis-bind-localhost 2022-03-08 12:38:39 +01:00
Izorkin
b672e4dd2c
nginxModules: add option disableIPC 
The disableIPC option is required to checking enabled nginxModules
and disable the SystemCallFilter IPC filter.
 2022-03-08 14:37:11 +03:00
Gaute Ravndal
fe6f628343 nixos/amuled: fix package reference in service definition 
The amuleDaemon package was renamed to kebab-case in 81ef57d6.
 2022-03-08 12:14:25 +01:00
Kim Lindberger
b71a8e2383
Merge pull request #162095 from midchildan/fix/keycloak-mysql 
nixos/keycloak: fix database provisioning issues
 2022-03-07 20:13:01 +01:00
Timo Kaufmann
94ea3a8899
Merge pull request #160777 from LunNova/improve-input-remapper-module 
nixos/input-remapper: Fix missing [], add more options, add test
 2022-03-07 18:51:08 +01:00
Maciej Krüger
75ea3ea9b8
Merge pull request #157438 from sbruder/nitter-package-option 2022-03-07 18:50:27 +01:00
Luna Nova
865e0df2fc
nixos/input-remapper: add nixos test for input-remapper 2022-03-07 08:31:40 -08:00
Luna Nova
d8cb494765
nixos/input-remapper: Fix missing [] for package, add enableUdevRules and serviceWantedBy options, add meta.maintainers 2022-03-07 08:31:40 -08:00
Euan Kemp
e6d1c597f1 nixos/k3s: use the systemd driver for docker + unified cgroups 
This is necessary for it to work at all. The single-node-docker test
will fail without this change.

Also add a release note for it.
 2022-03-05 11:30:53 -08:00
tim-tx
5a6b36e498 dendrite: 0.5.1 -> 0.6.5 2022-03-05 11:41:31 -05:00
Martin Weinelt
5556fc8f8f
Merge pull request #162407 from mweinelt/zigbee2mqtt 2022-03-05 15:33:57 +01:00
piegames
be4a0e6e40
Merge pull request #158605 from mweinelt/synapse-rfc42 
nixos/matrix-synapse: migrate to rfc42 settings and formatter
 2022-03-05 15:23:52 +01:00
piegames
cd7e516b26
Merge pull request #156858: nixos/polkit: don't enable by default 2022-03-05 14:48:35 +01:00
Martin Weinelt
8a95d9fede
nixos/flatpak: enable polkit 
via https://github.com/NixOS/nixpkgs/pull/156858#issuecomment-1022254342
 2022-03-05 13:57:30 +01:00
ngerstle
8aaa0699db k3s: enable enableUnifiedCgroupHierarchy 2022-03-05 00:18:17 -08:00