Commit Graph

38591 Commits

Author SHA1 Message Date
Luke Granger-Brown
a12b828a26
Merge pull request #277661 from appsforartists/handheld-daemon
handheld-daemon: init at 1.1.0
2024-01-30 04:01:11 +00:00
Franz Pletz
540cdedf5d
Merge pull request #284676 from r-ryantm/auto-update/exportarr 2024-01-30 03:08:25 +01:00
Brenton Simpson
b960a217bd handheld-daemon: touchup code style to better match nixpkgs
Co-authored-by: h7x4 <h7x4@nani.wtf>
Co-authored-by: Luke Granger-Brown <git@lukegb.com>
Co-authored-by: Bruno BELANYI <bruno@belanyi.fr>
2024-01-29 17:20:30 -08:00
Franz Pletz
f77e7dbd31
nixos/tests/prometheus-exporters: remove exportarr_sonarr
This test has never worked. Not sure why it was merged in the first
place.
2024-01-30 01:00:22 +01:00
Franz Pletz
3432be07e4
Merge pull request #278555 from leona-ya/kresd-port-only-regex 2024-01-30 00:41:53 +01:00
Bernardo Meurer
429a3accd9
Merge pull request #284800 from lovesegfault/fix-moonraker-warn
nixos/moonraker: fix update_manager.enable_system_updates being [bool] and not bool
2024-01-29 18:23:33 -05:00
Franz Pletz
da226d14bf
Merge pull request #284749 from 2xsaiko/outgoing/dovecot-fix-1 2024-01-30 00:17:12 +01:00
Felix Bühler
b6e25194a4
Merge pull request #283778 from linsui/noat
nixos/nautilus-open-any-terminal: init
2024-01-29 22:07:23 +01:00
Marco Rebhan
522d660f25
nixos/dovecot: fix sieve script config generation 2024-01-29 19:42:55 +01:00
Bernardo Meurer
392b32b2af
nixos/moonraker: fix update_manager.enable_system_updates being [bool] and not bool 2024-01-29 11:31:12 -05:00
Bobby Rong
850bac2305
Merge pull request #284633 from FedericoSchonborn/budgie-desktop-10.9
Budgie Desktop 10.9
2024-01-29 21:58:15 +08:00
Bobby Rong
6b5dd0640b
nixosTests.budgie: Fix login subtest
After budgie-session is used.
2024-01-29 10:13:31 -03:00
Weijia Wang
273b8ebd64
Merge pull request #284711 from misuzu/netbird-test
nixosTests.netbird: fix after module update
2024-01-29 13:25:52 +01:00
Marco Rebhan
26e71b5a5b
nixos/dovecot: remove unused imports 2024-01-29 12:21:58 +01:00
Fabián Heredia Montiel
45fad8902f linux/hardened/patches/6.7: init at 6.7.2-hardened1 2024-01-29 09:44:08 +01:00
misuzu
83591dbbe5 nixosTests.netbird: fix after module update 2024-01-29 09:46:02 +02:00
Felix Bühler
da47763cb8
Merge pull request #279384 from Stunkymonkey/recursive-pth-loader-normalize
python311Packages.recursive-pth-loader: rename from recursivePthLoader
2024-01-29 00:40:42 +01:00
Federico Damián Schonborn
0d209c6641
nixos/budgie: Replace gnome-session with budgie-session
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2024-01-28 20:08:59 -03:00
Joachim F
6dd56e1483
Merge pull request #275579 from tamara-schmitz/master
update hardened profile to new recommendations
2024-01-28 20:25:27 +01:00
Sandro
263af58884
Merge pull request #284488 from Silver-Golden/master
Bitwarden directory connector: fix bad preStart
2024-01-28 19:18:10 +01:00
K900
499b9a5de0
Merge pull request #284562 from K900/lemmy-nginx-fix
lemmy: fix nginx config generation
2024-01-28 20:48:51 +03:00
Kerstin
45b1d68c35
Merge pull request #283981 from f2k1de/mastodon-too-many-open-files-fix
mastodon: set LimitNOFILE
2024-01-28 18:47:53 +01:00
Nick Cao
2389ab15b4
Merge pull request #284496 from ElvishJerricco/systemd-255-hibernate-resume
systemd-stage-1: Fix hibernate-resume with systemd v255
2024-01-28 11:20:04 -05:00
K900
c34a1d5135 lemmy: fix nginx config generation 2024-01-28 19:15:02 +03:00
Adam C. Stephens
382935bf7a
Merge pull request #284109 from ambroisie/update-woodpecker
woodpecker-*: 1.0.5 -> 2.2.2
2024-01-28 10:19:02 -05:00
Aaron Andersen
0ed21f3b09
Merge pull request #284122 from Stunkymonkey/zabbix-write-secret
nixos/{zabbixServer,zabbixProxy}: prefer 'install' over 'mkdir/chmod/chown'
2024-01-28 06:24:11 -08:00
Will Fancher
6f1b17d4b8 systemd-stage-1: Fix hibernate-resume with systemd v255 2024-01-28 06:52:21 -05:00
Brendan Golden
fe59b6d24b
Bitwarden directory connector: fix bad preStart 2024-01-28 10:52:43 +00:00
Martin Weinelt
0deb00012d
Merge pull request #255707 from micahsoftdotexe/update-navidrome
nixos/navidrome: accept DataFolder option
2024-01-28 00:08:18 +01:00
Micah Tanner
7d9e3e510b nixos/navidrome: accept DataFolder option 2024-01-27 17:54:50 -05:00
Tamara Schmitz
b80c3284d5
nixos/hardened: update hardened profile to new recommendations
Borrowing from here to match hardened profile with more recent kernels:
* https://madaidans-insecurities.github.io/guides/linux-hardening.html?#boot-parameters
* https://github.com/a13xp0p0v/kernel-hardening-checker/

Removed "slub_debug" as that option disables kernel memory address
hashing. You also see a big warning about this in the dmesg:
"This system shows unhashed kernel memory addresses via the console, logs, and other interfaces."

"init_on_alloc=1" and "init_on_free=1" zeroes all SLAB and SLUB allocations. Introduced in 6471384af2a6530696fc0203bafe4de41a23c9ef. Also the default for the Android Google kernel btw. It is on by default through the KConfig.

"slab_nomerge" prevents the merging of slab/slub caches. These are
effectively slab/slub pools.

"LEGACY_VSYSCALL_NONE" disables the older vsyscall mechanic that relies on
static address. It got superseeded by vdsos a decade ago. Read some
LWN.net to learn more ;)

"debugfs=off" I'm sure there are some few userspace programs that rely on
debugfs, but they shouldn't.

Most other things mentioned on the blog where already the default on a
running machine or may not be applicable.

Most other Kconfigs changes come from the kernel hardening checker and
were added, when they were not applied to the kernel already.

Unsure about CONFIG_STATIC_USERMODEHELPER. Would need testing.
2024-01-27 20:43:58 +00:00
Luke Granger-Brown
0f8804e6a5
Merge pull request #283916 from devusb/fix-pomerium-test
nixos/pomerium: fix UI test
2024-01-27 17:02:35 +00:00
Nick Cao
8138e47046
Merge pull request #284115 from jacekpoz/ratbagd-module
nixos/ratbagd: add package option
2024-01-27 11:12:55 -05:00
Sandro
8219e2c1bc
Merge pull request #279050 from SuperSandro2000/portunus-seedsettings
nixos/portunus: add seedSettings option
2024-01-27 16:08:41 +01:00
Will Fancher
2af1ee5bba
Merge pull request #259196 from liff/mod/systemd-lock-handler
nixos/systemd-lock-handler: init with corresponding package at 2.4.2
2024-01-27 06:13:38 -05:00
Maximilian Bosch
abd098fce8
Merge pull request #283972 from onny/nextcloud-settings
nixos/nextcloud: Rename extraOptions to settings
2024-01-27 11:01:23 +01:00
Olli Helenius
e103c5cfcf
nixos/systemd-lock-handler: init 2024-01-27 11:55:46 +02:00
Pierre Bourdon
b0051767f1
Merge pull request #284153 from JulienMalka/systemd-boot-builder-folder
nixos/systemd-boot: move builder script in bin folder
2024-01-27 06:58:18 +01:00
K900
b5dc67dd94
Merge pull request #284130 from xNaxdy/fix-plasma5-mobilegear
nixos/plasma5: fix plasmaMobileGear path
2024-01-27 07:07:52 +03:00
Weijia Wang
7d021ca26b
Merge pull request #265056 from rgri/init-mouse-actions
mouse-actions: init at 0.4.4
2024-01-27 03:47:42 +01:00
Julien Malka
ceeddc5b15 nixos/systemd-boot: move builder script in bin folder 2024-01-27 01:29:40 +00:00
Thomas Gerbet
117fd19a77
Merge pull request #276306 from ambroisie/aria2-rpc-secret-file
nixos/aria2: implement 'rpcSecretFile'
2024-01-27 00:46:56 +01:00
Bruno BELANYI
44792c6df4 nixos: release notes for woodpecker update 2024-01-26 22:54:32 +00:00
Naxdy
edc49b2e83
nixos/plasma5: fix plasmaMobileGear path 2024-01-26 23:52:49 +01:00
Yt
a759a579fb
Merge pull request #283447 from Munksgaard/livebook-fixes
livebook: Use `mix release` to build instead of escript
2024-01-26 22:14:08 +00:00
Felix Buehler
bdce5312c9 nixos/{zabbixServer,zabbixProxy}: prefer 'install' over 'mkdir/chmod/chown' 2024-01-26 23:10:57 +01:00
jacekpoz
49130d8bf7
nixos/ratbagd: add package option 2024-01-26 22:58:44 +01:00
maxine
642317d03f
Merge pull request #283618 from SuperSandro2000/tailscale-resoleconf
nixos/tailscale: make resolvconf package depending on enablement of module
2024-01-26 22:41:14 +01:00
Felix Bühler
d9de6dd272
Merge pull request #284075 from rhoriguchi/nixos/esphome
nixos/esphome: add option to use ping to check online status of devices
2024-01-26 22:13:11 +01:00
Kira Bruneau
473b20c3d7
Merge pull request #281909 from kira-bruneau/gamemode
nixos/gamemode: add gamemode group
2024-01-26 15:25:56 -05:00