K900
d85147ead0
nixos/oauth2_proxy_nginx: fix URL escaping
2024-04-27 15:00:42 +03:00
K900
ea525d3d11
nixos/oauth2_proxy_nginx: allow passing parameters to auth endpoint
2024-04-26 15:48:40 +03:00
networkException
3dd970f993
nixos/vaultwarden: drop outdated ownership requirements for environmentFile ( #304825 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-04-24 15:19:33 +02:00
Sandro
a3739c2563
Merge pull request #303224 from 0z13/oauth2_proxy-add-issuer-url
...
nixos/oauth2_proxy: add oidc-issuer-url flag
2024-04-21 19:49:59 +02:00
Jonathan Zielinski
87bbc5fbbe
nixos/oauth2_proxy: add oidc-issuer-url flag
2024-04-18 15:20:53 +00:00
Sandro Jäckel
a911604762
nixos/oauth2-proxy-nginx: lift auth_request to http block
...
With this change now all location blocks are protected by oauth2-proxy
and not only /
2024-04-17 23:11:49 +02:00
stuebinm
6afb255d97
nixos: remove all uses of lib.mdDoc
...
these changes were generated with nixq 0.0.2, by running
nixq ">> lib.mdDoc[remove] Argument[keep]" --batchmode nixos/**.nix
nixq ">> mdDoc[remove] Argument[keep]" --batchmode nixos/**.nix
nixq ">> Inherit >> mdDoc[remove]" --batchmode nixos/**.nix
two mentions of the mdDoc function remain in nixos/, both of which
are inside of comments.
Since lib.mdDoc is already defined as just id, this commit is a no-op as
far as Nix (and the built manual) is concerned.
2024-04-13 10:07:35 -07:00
Sandro
550f705f42
Merge pull request #301392 from McSinyx/yubi-pinentry-doc
2024-04-09 10:54:22 +02:00
Nguyễn Gia Phong
69c4563551
nixos/yubikey-agent: update doc ref to pinentry
...
References: b437b19f54
2024-04-04 09:26:58 +09:00
Sandro
8052832ca3
Merge pull request #295016 from SuperSandro2000/vaultwarden-cleanup
...
nixos/vaultwarden: drop with lib over entire file, drop lib.mdDoc
2024-04-03 21:57:53 +02:00
Sandro
d6411ed8c6
Merge pull request #297346 from codingCoffee/usbguard-fix
...
usbguard: fix policy enums
2024-03-27 18:52:43 +01:00
Sandro
76e86c46b2
Merge pull request #273234 from SuperSandro2000/oauth2-proxy-nginx
...
nixos/oauth2_proxy_nginx: allow placing the login page itself under a separate domain
2024-03-24 22:03:10 +01:00
Ameya Shenoy
99c0c32a49
usbguard: fix policy enums
...
The available policies for `InsertedDevicePolicy` and
`ImplicitPolicyTarget` differ from the defined policy enum. This change
is to prevent users from configuring incorrect policies for `usbguard`
Related `usbguard` documentation
https://usbguard.github.io/documentation/configuration.html
Signed-off-by: Ameya Shenoy <shenoy.ameya@gmail.com>
2024-03-20 08:41:21 +05:30
Sandro Jäckel
4799ffc61d
nixos/vaultwarden: drop lib.mdDoc
2024-03-11 16:32:53 +01:00
Sandro Jäckel
d5ae85691a
nixos/vaultwarden: drop with lib over entire file
2024-03-11 16:32:49 +01:00
Markus Theil
36f1c0c2b3
nixos/esdm: simplify module
...
ESDM 1.0.1 fixed bugs related to Linux compatibility layer with CUSE.
During these fixes, the compatibility layer was simplified behind a
target in order to start the necessary services together or none of
them (services.esdm.linuxCompatServices).
Furthermore, a small helper was added to ESDM 1.0.1 in order to deal
with resume/suspend/hibernate (FUSE needs to be unblocked).
Removed options are marked.
Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-03-11 14:28:26 +01:00
Florian Klink
b437b19f54
nixos/yubikey-agent: fix eval error
...
This has been refactored in https://github.com/NixOS/nixpkgs/
pull/133542, but this reference wasn't updated.
2024-03-10 19:08:23 +02:00
Sandro
c86e8fd7a0
Merge pull request #133542 from fpletz/refactor/pinentry-remove-multiple-outputs
...
pinentry: remove multiple outputs
2024-03-09 23:57:27 +01:00
Sandro Jäckel
06a6371247
nixos/vaultwarden: set meta.maintainers to package maintainer
2024-03-04 00:41:56 +01:00
Sandro Jäckel
75c7e61601
nixos/oauth2_proxy_nginx: allow placing the login page itself under a separate domain
...
OIDC provider usually requires a callback URL which can now be set to
one domain when securing multiple virtualHosts under different (sub)domains
2024-03-02 23:07:48 +01:00
Sandro Jäckel
4264ded76e
nixos/vaultwarden: drop aliases
2024-03-02 20:18:55 +01:00
Franz Pletz
764d15f59f
pinentry: remove multiple outputs package
...
fixes #133156 #124753
2024-03-02 17:16:53 +01:00
Kerstin
51363e5c0d
Merge pull request #280628 from h7x4/nixos-module-update-kanidm-add-backup-dir-to-bindpaths
...
nixos/kanidm: declare `online_backup` options
2024-02-29 15:19:34 +01:00
Jonas Heinrich
31b9a9d18c
opensnitch: 1.6.4 -> 1.6.5, opensnitch-ui: 1.6.4 -> 1.6.5.1
2024-02-12 11:58:44 +01:00
Tom Hubrecht
ad67485526
kanidm: 1.1.0-rc.15 -> 1.1.0-rc.16
...
Release notes: https://github.com/kanidm/kanidm/releases/tag/v1.1.0-rc.16
2024-02-07 14:14:39 +01:00
Rhys Davies
295a32a6b1
nixos/intune: init
2024-02-02 10:00:33 +13:00
Brendan Golden
fe59b6d24b
Bitwarden directory connector: fix bad preStart
2024-01-28 10:52:43 +00:00
happysalada
f3b08ca5a6
nixos/clamav: fix network-online requires assert
2024-01-21 11:37:54 -05:00
Jade Lovelace
6c5ab28fce
nixos: fix a bunch of services missing dep on network-online.target
...
This was done by generating a truly hilarious configuration:
rg 'services\.[^.]+\.enable\t' opts-tags | cut -f1 > allonconfig.nix
The following were not tested due to other evaluation errors. They
should probably be manually audited.
services.amule
services.castopod
services.ceph
services.chatgpt-retrieval-plugin
services.clamsmtp
services.clight
services.dante
services.dex
services.discourse
services.dwm-status
services.engelsystem
services.foundationdb
services.frigate
services.frp
services.grocy
services.guacamole-client
services.hedgedoc
services.home-assistant
services.honk
services.imaginary
services.jitsi-meet
services.kerberos_server
services.limesurvey
services.mastodon
services.mediawiki
services.mobilizon
services.moodle
services.mosquitto
services.nextcloud
services.nullmailer
services.patroni
services.pfix-srsd
services.pgpkeyserver-lite
services.postfixadmin
services.roundcube
services.schleuder
services.self-deploy
services.slskd
services.spacecookie
services.statsd
services.step-ca
services.sympa
services.tsmBackup
services.vdirsyncer
services.vikunja
services.yandex-disk
services.zabbixWeb
2024-01-19 00:11:34 -08:00
h7x4
d167743c72
nixos/kanidm: declare online_backup options
2024-01-12 10:19:14 +01:00
Nick Cao
c360b49704
Merge pull request #259849 from Scrumplex/nixos/vaultwarden/backupDirCreate
...
nixos/vaultwarden: create backupDir using tmpfiles.d
2024-01-08 12:30:03 -05:00
Nick Cao
0b88c3d297
Merge pull request #265783 from Silver-Golden/bitwarden-directory-connector_pkgs
...
Bitwarden directory connector: init
2024-01-07 10:28:04 -05:00
Brendan Golden
f7c25138ea
nixos/bitwarden-directory-connector: init at version
...
Added the module to use bitwarden-directory-connector.
2024-01-07 11:22:31 +00:00
Sefa Eyeoglu
4f70c901dc
nixos/vaultwarden: add example value for backupDir
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-01-03 17:37:37 +01:00
Sefa Eyeoglu
80ea6a21fb
nixos/vaultwarden: create backupDir using tmpfiles.d
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-01-03 17:37:35 +01:00
Nick Cao
66ea36d4d3
Merge pull request #276159 from AtaraxiaSjel/fix/tor-obfs4proxy
...
nixos/tor: fix transport plugin exe name
2024-01-01 15:55:04 -05:00
markuskowa
15b39c2238
Merge pull request #275080 from SomeoneSerge/feat/munge-systemd
...
nixos/munge: update the systemd service
2023-12-30 00:11:12 +01:00
Dmitriy Kholkin
0929716b02
nixos/tor: fix transport plugin exe name
2023-12-29 23:20:15 +03:00
Someone Serge
b27c3e8252
nixos/munge: restart "on-failure" (the default was "no")
2023-12-17 22:18:06 +00:00
Someone Serge
515a26d997
nixos/munge: run in foreground instead of using pidfile
...
Confuse systemd less
2023-12-17 22:16:09 +00:00
Someone Serge
b29d689e3a
nixos/munge: ask for the optional time-sync.target
2023-12-17 22:16:06 +00:00
Someone Serge
8fe8a22578
nixos/munge: ask for network-online instead of network.target
2023-12-17 22:16:01 +00:00
Anderson Torres
d7605f18a9
nixos.shibboleth-sp: remove jammerful from meta.maintainers
2023-12-09 22:39:10 -03:00
happysalada
93c790aef3
nixos/clamav: add scanner service
2023-12-05 22:53:35 +00:00
happysalada
6b014e92de
nixos/clamav: fix /run/clamav being removed
2023-12-05 22:53:35 +00:00
h7x4
79d3d59f58
treewide: replace mkPackageOptionMD with mkPackageOption
2023-11-30 19:03:14 +01:00
Weijia Wang
feeae486de
Merge pull request #261702 from h7x4/replace-mkoption-with-mkpackageoption
...
treewide: use `mkPackageOption`
2023-11-30 02:49:30 +01:00
fasheng
52c81e882b
nixos/fail2ban: fix default value for banaction-allports
...
It's iptables-allports instead of iptables-allport.
https://github.com/fail2ban/fail2ban/tree/master/config/action.d
2023-11-29 16:17:53 +01:00
Someone Serge
d97d2fb271
nixos/clamav: ensure freshclam starts before clamav (if enabled)
2023-11-28 14:21:30 +00:00
h7x4
0a37316d6c
treewide: use mkPackageOption
...
This commit replaces a lot of usages of `mkOption` with the package
type, to be `mkPackageOption`, in order to reduce the amount of code.
2023-11-27 01:28:36 +01:00
