colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
618,322 Commits 124 Branches 0 Tags 3.3 GiB
a89c4f5411
Commit Graph

18832 Commits

Author SHA1 Message Date
Tobias Poschwatta
ee2b899ff7 nixos/nfsd: settings for /etc/nfs.conf 
services.nfs.settings is added for options that go into /etc/nfs.conf.

There are services.nfs.server.extraNfsdConfig and
services.nfs.extraConfig, but they have drawbacks.  They overlap in
scope (nfs.extraConfig can also add nfsd options). They require that one
writes INI syntax. They often produce nfs.conf files with duplicate
section names, which is confusing.

This deprecates services.nfs.server.extraNfsdConfig and
services.nfs.extraConfig.

services.nfs.settings cannot be used together with
services.nfs.server.extraNfsdConfig or services.nfs.extraConfig.
 2024-03-25 12:22:48 +01:00
Melvyn
4da76cc6f4
nixos/slskd: refactor and add config file options 2024-03-24 18:26:56 -07:00
Sandro
0e1cac923d
Merge pull request #286685 from max-niederman/photonvision 
photonvision: init at 2024.2.3
 2024-03-24 22:05:36 +01:00
Sandro
76e86c46b2
Merge pull request #273234 from SuperSandro2000/oauth2-proxy-nginx 
nixos/oauth2_proxy_nginx: allow placing the login page itself under a separate domain
 2024-03-24 22:03:10 +01:00
Sandro
dabaa7ac65
Merge pull request #288033 from diogotcorreia/module-dnsproxy 
nixos/dnsproxy: init module
 2024-03-24 21:52:09 +01:00
Felix Bühler
63078e3468
Merge pull request #298168 from ambroisie/improve-tandoor-recipes-manage 
nixos/tandoor-recipes: improve manage script
 2024-03-24 17:06:01 +01:00
Martin Weinelt
3bc33ba58d
nixos/wyoming-faster-whisper: update model option 2024-03-23 23:29:06 +01:00
K900
1b59f54864
Merge pull request #298363 from K900/greetd-alias 
nixos/greetd: create display-manager.service alias
 2024-03-24 01:04:40 +03:00
Maciej Krüger
94d6d4e93a
nixos/docuum: add module for docuum package 
Co-Authored-By: Martin Weinelt <mweinelt@users.noreply.github.com>
 2024-03-23 18:25:55 +01:00
Sandro
9ae4475cff
Merge pull request #291214 from RatCornu/suwayomi-server 
suwayomi-server: 0.7.0 -> 1.0.0
 2024-03-23 17:56:19 +01:00
Marie Ramlow
88daab5195 nixos/prometheus-fritz-exporter: init module 2024-03-23 16:32:25 +01:00
K900
c0949a240a nixos/greetd: create display-manager.service alias 2024-03-23 16:33:16 +03:00
Florian Klink
21721e4196 nixos/mycelium: description updates 
- Slight rewordings and typo fixes.
 - Use documentation prefixes for addresses, rather than 1.2.3.4, and
   add IPv6 examples.
 - Fix description for `keyFile` (`/var/lib/mycelium/key{,.bin}`).
 - Some formatting by my editor
 2024-03-23 12:36:49 +01:00
Bruno BELANYI
af6e257878 nixos/tandoor-recipes: improve manage script 
This is shamelessly stolen from Photoprism's module, and should allow
executing the manage script without resorting to various tricks due to
relying on transient users.
 2024-03-22 20:54:36 +00:00
Bruno BELANYI
6b1e9f77f9 nixos/tandoor-recipes: set service 'Group' 2024-03-22 20:47:55 +00:00
Maximilian Bosch
e7533df80f
nixos/mastodon: stop mastodon-init-db.service if check for seeded DB fails 
The postgresql runs on a different node than my mastodon itself. Sometimes when
rebooting the entire host it can happen that mastodon gets started
before the DB[1] is up. In that case `mastodon-init-db.service` ran
through with the following log output:

    2024-03-07 15:30:56.856
    Migrating database (this might be a noop)
    2024-03-07 15:30:56.856
    /nix/store/xzm7www0qb7jg5zrgg7knynckx5yhki9-unit-script-mastodon-init-db-start/bin/mastodon-init-db-start: line 9: [: -eq: unary operator expected

It seems wrong to me to have this unit pass if the DB isn't even up,
especially with such an error.

This patch now checks if the exit code of the psql check was non-zero
and fails the entire unit. A retry can be implemented e.g. with
Restart/RestartSec then (which is more elegant than adding a while/sleep
loop anyways) like this:

    systemd.services.mastodon-init-db = {
      serviceConfig = {
        Restart = "on-failure";
        RestartSec = "5s";
        RestartMode = "direct";
        RemainAfterExit = true;
      };
      unitConfig = {
        StartLimitBurst = 5;
        StartLimitIntervalSec = "60";
      };
    };

Also using `-t --csv` now to not render the column name and to not
render a table so we don't need to rely on the format of psql (and parse
it with `sed(1)`).

[1] I added a script that blocks until postgres is there in the meantime
    though.
 2024-03-22 17:51:20 +01:00
Yarny0
961584c3dc tsm-client: 8.1.21.0 -> 8.1.22.0 
"Update History" (release notes):
https://www.ibm.com/support/pages/node/6998343

...does not list any security-relevant changes
(mostly trademark name changes).

Also, all URLs in package and module comments are updated.
 2024-03-22 17:25:25 +01:00
Jonathan Davies
50fcbfbe26 nixos/thanos: Added query.grpc-compression and receive.grpc-compression option. 2024-03-22 12:21:15 +00:00
K900
176ee51929
Merge pull request #297806 from andrevmatos/nixos/wireplumber/fix_systemwide_bluetooth 
nixos/wireplumber: fix systemwide bluetooth integration
 2024-03-22 09:47:46 +03:00
Bobby Rong
5cf5dd0fb0
Merge pull request #297727 from bobby285271/upd/budgie-nemo-terminal 
nixos/budgie: Use gnome-terminal by default
 2024-03-22 13:20:40 +08:00
Bobby Rong
414628b4a0
nixos/budgie: Don't enable fprintd by default 
This is optional for {budgie,gnome}-control-center and is not
enabled in the GNOME module.

To re-enable this fprintd should be unbreak first.
 2024-03-22 12:28:17 +08:00
e1mo
bc25c4bd7d
nixos/pretix: raise TimeoutStartSec 
On some slower systems or ones with a slower database (connection) the
initial migrations can exceed the default 90s timeout.
 2024-03-21 21:49:40 +01:00
e1mo
6d5a6cab71
nixos/pretix: Fix pdf generation 
Previously, pdftk (part of the ticket, badge, ... generation pipeline)
would fail with:

```
Error occurred during initialization of VM
Failed to mark memory page as executable - check if grsecurity/PaX is enabled
```
Thise caused pdf generation to fail.

Since pdftk is a java application and, according to systemd.exec(5),

 > Note that [MemoryDenyWriteExecute=] is incompatible with programs and
 > libraries that generate program code dynamically at runtime, including
 > JIT execution engines, executable stacks, and code "trampoline" featu
 > re of various C compilers.

Disabling `MemoryDenyWriteExecute=` fixes it.
 2024-03-21 21:49:39 +01:00
K900
ff3d03a15f
Merge pull request #297697 from K900/plasma6-install-kio5 
plasma6: also install base kio5
 2024-03-21 23:05:33 +03:00
André Vitor de Lima Matos
bdc6b3abe0
nixos/wireplumber: fix systemwide bluetooth integration 
From https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/3828#note_2270701
Broken/removed in #278760
 2024-03-21 16:21:59 -03:00
Bruno BELANYI
21a59137a6 nixos/podgrab: add user/group options 2024-03-21 19:16:20 +00:00
K900
d23f4b140f
Merge pull request #297479 from cab404/raop-firewall 
nixos/pipewire: raopOpenFirewall option
 2024-03-21 18:05:20 +03:00
Bobby Rong
b79ac84d84
nixos/budgie: Use gnome-terminal by default 
- Both budgie-desktop-view and cinnamon-desktop defaults to gnome-terminal, there
  are no clear reason why we don't use the defaults here.
  The cinnamon-desktop org.cinnamon.desktop.default-applications.terminal schema
  is used in nemo for default emulator, since we use nemo by default this fixes nemo
  open in terminal entry without introducing another override.
- There are theming issues with Qogir when opening right-click menu in a second tab.
- Transparency is broken when hovering on other windows, showing only the wallpaper.

This also ensures a stable default for budgie-desktop-view, by using only the
executable name and not a nix store path.

ref: https://github.com/BuddiesOfBudgie/budgie-desktop-view/blob/v1.3/data/org.buddiesofbudgie.budgie-desktop-view.gschema.xml#L60
ref: https://github.com/linuxmint/cinnamon-desktop/blob/6.0.0/schemas/org.cinnamon.desktop.default-applications.gschema.xml.in#L46
ref: https://github.com/linuxmint/nemo/blob/6.0.0/src/nemo-view.c#L7193
 2024-03-21 22:16:25 +08:00
Martin Weinelt
3b7d9c77b3
Merge pull request #297622 from mweinelt/kea-exporter-0.7.0 
kea-exporter: 0.6.1 -> 0.7.0
 2024-03-21 14:29:42 +01:00
K900
4e5b7fe664 plasma6: also install base kio5 
Fixes #295814
 2024-03-21 15:19:44 +03:00
Stig
468417b7f3
Merge pull request #296479 from marcusramberg/marcus/nimdow 
nixos/nimdow: module updates
 2024-03-21 12:14:56 +01:00
Doron Behar
2897be360b
Merge pull request #287966 from Guanran928/clash-meta 
nixos/mihomo: init
 2024-03-21 10:40:10 +02:00
Martin Weinelt
c77d192eb4
prometheus-kea-exporter: 0.6.1 -> 0.7.0 
https://github.com/mweinelt/kea-exporter/blob/v0.7.0/HISTORY

Updates the module to use the target name, because it now supports both
UDS as well as HTTP URLs.
 2024-03-21 06:17:59 +01:00
Martin Weinelt
d702c91302
nixos/prometheus/exporters: pass utils into exporter modules 
This is useful, because it provides escapeSystemdShellArgs.
 2024-03-21 05:27:21 +01:00
github-actions[bot]
36232fff71
Merge master into staging-next 2024-03-20 18:01:02 +00:00
Dmitry Bogatov
5bb92281f5 nixos/dnscache: Provide explicit group for "dnscache" user 
Without this patch the module refuses to evaluate, complaining that
default "nogroup" is no longer supported.
 2024-03-20 16:45:50 +01:00
Cabia Rangris
eaf6b74366
nixos/pipewire: raopOpenFirewall option 
RAOP requires UDP/6001-6002 for timing
information, and won't work with apple devices if
firewall is enabled.
 2024-03-20 18:32:01 +03:00
Sandro
50b2e2a029
Merge pull request #296866 from SuperSandro2000/xserver-pinentry 2024-03-20 14:32:44 +01:00
github-actions[bot]
90461ffe37
Merge master into staging-next 2024-03-20 12:01:15 +00:00
Florian Klink
40e49b40ab
Merge pull request #296949 from NixOS/mycelium_service 
nixos/mycelium: init
 2024-03-20 11:50:46 +02:00
Pol Dellaiera
15541288f3
Merge pull request #297133 from trofi/etebase-server-fix-test 
etebase-server: fix the eval on `null` `cfg.unixSocket`
 2024-03-20 07:38:15 +01:00
K900
e240f8bde9 Merge remote-tracking branch 'origin/master' into staging-next 2024-03-20 09:27:30 +03:00
K900
e382906174
Merge pull request #295839 from peterhoeg/m/sddm_kwin 
nixos/sddm: add support for kwin_wayland
 2024-03-20 09:02:52 +03:00
Ameya Shenoy
99c0c32a49
usbguard: fix policy enums 
The available policies for `InsertedDevicePolicy` and
`ImplicitPolicyTarget` differ from the defined policy enum. This change
is to prevent users from configuring incorrect policies for `usbguard`

Related `usbguard` documentation
https://usbguard.github.io/documentation/configuration.html

Signed-off-by: Ameya Shenoy <shenoy.ameya@gmail.com>
 2024-03-20 08:41:21 +05:30
lassulus
b82a5ef764 nixos/mycelium: init 2024-03-20 03:56:58 +01:00
Peter Hoeg
404a2363d1 nixos/plasma6: use kwin with sddm 2024-03-19 21:14:46 +01:00
Peter Hoeg
8c642cd40a nixos/sddm: add support for kwin_wayland 2024-03-19 20:55:23 +01:00
Martin Weinelt
7762462405
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
- pkgs/development/python-modules/flask-security-too/default.nix
 2024-03-19 17:30:16 +01:00
Bobby Rong
2dcadb7087
Merge pull request #297072 from FedericoSchonborn/add-federicoschonborn 
maintainers: Add federicoschonborn back again
 2024-03-19 23:12:06 +08:00
ajs124
bdabdf0c16 nixos/gitlab: use workhorse package from option in path 2024-03-19 13:47:55 +01:00
ajs124
1bada61543 nixos/gitlab: switch from sidekiq to sidekiq-cluster 2024-03-19 13:47:55 +01:00
Sandro
4a9a5fab1c
Merge pull request #283501 from SuperSandro2000/hedgedoc-fix-tools-exec 2024-03-19 13:37:46 +01:00
Sergei Trofimovich
5a3bd05394 etebase-server: fix the eval on null cfg.unixSocket 
Without the change the test eval fails as:

    $ nix build --no-link -f. etebase-server.tests
       error: cannot coerce null to a string: null
 2024-03-19 08:59:57 +00:00
Federico Damián Schonborn
455b915be0
maintainers: Add federicoschonborn back again 
Signed-off-by: Federico Damián Schonborn <federicoschonborn@disroot.org>
 2024-03-18 21:51:28 -03:00
github-actions[bot]
7c0bd382c7
Merge master into staging-next 2024-03-19 00:02:09 +00:00
Lily Foster
e3c0bb4255
Merge pull request #294542 from Janik-Haag/garage 
nixos/garage: add env-var wrapper for admin cli
 2024-03-18 16:10:15 -07:00
Janik H.
9ec0e31f79
nixos/garage: add env-var wrapper for admin cli 2024-03-18 22:53:21 +01:00
maralorn
b6668ded0e
Merge pull request #296977 from slotThe/maintainer 
Add slotThe as a maintainer
 2024-03-18 22:43:38 +01:00
Tony Zorman
240c39ef2e nixos/xmonad: add slotThe as a maintainer 2024-03-18 20:27:15 +01:00
Martin Weinelt
00e2713c5b
Merge remote-tracking branch 'origin/master' into staging-next 2024-03-18 19:59:23 +01:00
Jon Seager
ffc736695c
Merge pull request #296937 from MinerSebas/scrutiny-collector-ordering 2024-03-18 17:16:40 +00:00
Martin Weinelt
03fcd060ff
Merge pull request #296921 from patka-123/engelsystem-cleanup 
engelsystem: cleanup
 2024-03-18 17:14:59 +01:00
Patka
93aba53a08
engelsystem: cleanup 
The custom php with extensions is not needed. The default already has all the needed extensions enabled by default.
 2024-03-18 17:08:01 +01:00
K900
823897dde8 wireplumber: 0.4.17 -> 0.5.0 2024-03-18 18:57:05 +03:00
MinerSebas
9d384c350b nixos/scrutiny: Order scrutiny-collector after scrutiny 2024-03-18 16:30:51 +01:00
Sandro
124ec2d9d6
nixos/xserver: don't conflict pinentry package with DEs 2024-03-18 11:22:48 +01:00
github-actions[bot]
819a14ad05
Merge master into staging-next 2024-03-18 06:01:21 +00:00
github-actions[bot]
ac91cf83c1
Merge master into staging-next 2024-03-18 00:02:20 +00:00
Alex Martens
bdb6849a32 nixos/llama-cpp: fix binary path 2024-03-17 16:48:51 -07:00
Sandro
1f212fd6e6
Merge pull request #289025 from tcheronneau/issue-288907 
nixos/tinyproxy: fix the quotes around the filter path
 2024-03-17 23:33:42 +01:00
github-actions[bot]
100b3bb178
Merge master into staging-next 2024-03-17 18:00:54 +00:00
github-actions[bot]
c222aba0b8
Merge master into staging-next 2024-03-17 12:01:55 +00:00
Patka
c4e1ffb96b
engelsystem: 3.4.1 -> 3.5.0 
Release notes: https://github.com/engelsystem/engelsystem/releases/tag/v3.5.0
 2024-03-17 12:24:29 +01:00
Maximilian Bosch
6af7e814af
Merge pull request #292993 from wolfgangwalther/postgresql-refactor 
postgresql: refactor and cleanup
 2024-03-17 10:00:07 +00:00
Sandro
62748bdf42
Merge pull request #295891 from Stzx/pinentry-conflict 
pinentry: fix DM option and user conflict
 2024-03-17 08:50:13 +01:00
Bobby Rong
a4bca9aaef
nixos/pantheon: Add missing gala-daemon systemd services 
Otherwise it doesn't autostart after user session managed by systemd.
 2024-03-17 13:42:33 +08:00
Bobby Rong
0b41a85c95
nixos/display-managers: Don't force graphical-session.target activation for Pantheon 
See Nixpkgs pull request 233981.
 2024-03-17 13:42:33 +08:00
Bobby Rong
7522f97cbe
pantheon: Manage user session with systemd 
This is now needed as gnome-session 46 drops `--builtin` option.
 2024-03-17 13:41:51 +08:00
github-actions[bot]
2178d8d857
Merge master into staging-next 2024-03-17 00:02:17 +00:00
Martin Weinelt
2b003c0269
nixos/pretix: make state directory world-readable 
Pretix creates static files in its state directory, that nginx needs to
serve, so locking down the permissions that hard is not going to work.
 2024-03-16 23:44:37 +01:00
Jon Seager
bfa0fb2dbe
Merge pull request #296463 from MinerSebas/scrutiny-split 2024-03-16 19:41:40 +00:00
Marcus Ramberg
20eec34036 nixos/nimdow: Make package configurable, ensure nimdow can start a terminal in it's default config 2024-03-16 19:32:34 +01:00
github-actions[bot]
60fbf92c10
Merge master into staging-next 2024-03-16 18:01:00 +00:00
Pol Dellaiera
5ebdb3eda7
Merge pull request #296465 from Janik-Haag/networkmanager-ensure-profiles 
nixos/networkmanager: ensure-profiles, make sure networkmanager is running
 2024-03-16 18:46:12 +01:00
Janik H.
847a53742c
nixos/networkmanager: ensure-profiles, make sure networkmanager is running 2024-03-16 18:11:58 +01:00
MinerSebas
2210ac7764 nixos/scrutiny: Order scrutiny.service after influxdb2.service 2024-03-16 18:02:17 +01:00
MinerSebas
7d6917088c nixos/scrutiny: Dont enable influxdb when only using scrutiny-collector 2024-03-16 18:02:10 +01:00
Guillaume Girol
119099506c
Merge pull request #292477 from nu-nu-ko/nixos-komga-hardening 
nixos/komga: add service hardening and misc format changes.
 2024-03-16 17:34:45 +01:00
Martin Weinelt
fe8d02e2bc
Merge pull request #296180 from mweinelt/pretix 
pretix: init at 2024.2.0
 2024-03-16 17:28:20 +01:00
Manuel Sanchez Pinar
a1301766eb
nixos/silverbullet: init module 2024-03-16 17:11:59 +01:00
MinerSebas
9e1fe5cddd nixos/restic-rest-server: Make the service socket activated 2024-03-16 17:07:55 +01:00
Martin Weinelt
b05a529fd6
nixos/pretix: init 2024-03-16 14:50:56 +01:00
Bobby Rong
3b48b3aaa9
Merge pull request #289062 from bobby285271/upd/mate 
MATE 1.28
 2024-03-16 21:38:24 +08:00
github-actions[bot]
9db4d84312
Merge master into staging-next 2024-03-16 12:01:19 +00:00
MinerSebas
7762c2233c nixos/restic-rest-server: Add additional service hardening 2024-03-16 08:18:50 +01:00
Pol Dellaiera
4285a30496
Merge pull request #295837 from abysssol/ollama-env-vars 
nixos/ollama: add option to set environment variables
 2024-03-16 08:02:55 +01:00
github-actions[bot]
7006358e6a
Merge master into staging-next 2024-03-16 00:02:02 +00:00
Pol Dellaiera
21456ee2a7
Merge pull request #296183 from laalsaas/etebase-server-fix 
etebase-server: create required tmpdir
 2024-03-15 22:08:15 +01:00
Wolfgang Walther
4b6bce5c31
postgresql: refactor to remove "this" argument 
This was proposed by abbradar in #150801, but left out of the follow up PR
#221851 by Ma27 to reduce the size of the diff. Compared to the initial
proposal this includes the callPackage call in the recursion, which avoids
breaking the withJIT/withoutJIT helpers.

In terms of nixpkgs, this is a pure refactor, no derivations change. However,
this makes downstream expressions like the following possible:

  (postgresql.override { jitSupport = true; }).pkgs.postgis

This would have not worked before without passing another "this" argument,
which is error prone as can be seen in this example:

  https://github.com/PostgREST/postgrest/pull/3222/files
 2024-03-15 21:11:09 +01:00
Wolfgang Walther
14b3ea2789
postgresql: refactor to pass jitSupport/llvm via scope instead of passthru 
This makes it less error-prone to use the llvm package in extensions, because
it will always match the package used by the postgresql derivation itself.

Previously, you could've accidentally used llvm instead of postgresql.llvm
with a different result.
 2024-03-15 21:11:09 +01:00
Maximilian Bosch
0d17fd9524
Merge pull request #292473 from networkException/fix-synapse-unix-socket-permissions 
nixos/matrix-synapse: allow synapse to write to directories of unix socket paths
 2024-03-15 18:53:04 +00:00
github-actions[bot]
00729a3d21
Merge master into staging-next 2024-03-15 18:01:19 +00:00
laalsaas
1d4c8cb0ff etebase-server: create required tmpdir 2024-03-15 16:52:21 +01:00
Peder Bergebakken Sundt
3399de5396
Merge pull request #295342 from pbsds/spotifyd-url-1710255988 
nixos/spotifyd: update configuration documentation url
 2024-03-15 13:03:01 +01:00
github-actions[bot]
4aac48ff7f
Merge master into staging-next 2024-03-15 06:01:09 +00:00
Bobby Rong
9254f99be6
Merge pull request #296019 from bobby285271/upd/budgie 
nixos/budgie: Fix default fonts
 2024-03-15 08:35:12 +08:00
github-actions[bot]
2bffd64e73
Merge master into staging-next 2024-03-15 00:01:59 +00:00
Bobby Rong
f7f3a3ec53
nixos/budgie: Fix default fonts 
Always install noto fonts and hack font.
 2024-03-15 07:56:02 +08:00
Ilan Joselevich
09078fd022
Merge pull request #295932 from Kranzes/nextcloud 
nixos/nextcloud: remove opcache.enable_cli=1
 2024-03-14 21:36:09 +02:00
Ilan Joselevich
9353fb2309
nixos/nextcloud: remove opcache.enable_cli=1 
Upstream no longer recommends enabling the opcache cli.
See the following:
 - https://github.com/nextcloud/documentation/issues/1439
 - https://github.com/nextcloud/server/pull/15468
 2024-03-14 18:36:11 +02:00
Bobby Rong
398cce395c
nixos/mate: Add enableWaylandSession option 
Make this an opt-in for now since the session is in early stage
and introduces a new set of wayfire closure.
 2024-03-14 23:34:11 +08:00
Bobby Rong
b45faa9834
nixos/mate: Add extraPanelApplets, extraCajaExtensions option 
Hopefully this is more user-friendly.
 2024-03-14 23:34:10 +08:00
Bobby Rong
a323f4f828
mate: Install mate-panel-with-applets by default 2024-03-14 23:34:06 +08:00
Bobby Rong
c87f6b5591
mate: Install caja-with-extensions by default 2024-03-14 23:34:05 +08:00
Stzx
8bf5cc2666
pinentry: fix DM option and user conflict 2024-03-14 21:54:35 +08:00
abysssol
b5e7a05bb7 nixos/ollama: add option to set environment variables 2024-03-14 04:21:36 -04:00
github-actions[bot]
f4c4bfc9fc
Merge master into staging-next 2024-03-13 18:00:53 +00:00
Sandro
db55012fa3
Merge pull request #291455 from SuperSandro2000/hydra-starman-worker 2024-03-13 13:57:12 +01:00
github-actions[bot]
cecf050e96
Merge master into staging-next 2024-03-13 12:01:25 +00:00
Pol Dellaiera
55251f1ffc
Merge pull request #295547 from Janik-Haag/unbound 
nixos/unbound: drop networkmanager since it doesn't support unbound anymore
 2024-03-13 10:33:52 +01:00
Janik H.
4147e50f18
nixos/unbound: drop networkmanager since it doesn't support unbound anymore 2024-03-13 09:50:56 +01:00
Pol Dellaiera
c35c016e5d
Merge pull request #295529 from Janik-Haag/networkmanager-drop-unbound 
nixos/networkmanager: drop unbound form dns servers
 2024-03-13 09:04:58 +01:00
Pol Dellaiera
6710011819
Merge pull request #295199 from blakesmith/gotosocial_14_2 
gotosocial 0.14.1 -> 0.14.2
 2024-03-13 08:53:37 +01:00
Janik H.
a97e56ae28
nixos/networkmanager: drop unbound form dns servers 
upstream dropped unbound in 5da17c689b
 2024-03-13 08:31:52 +01:00
éclairevoyant
e7db1f299c
nixos/scrutiny: fix timer not auto-starting 2024-03-12 22:25:54 -04:00
Blake Smith
b0529146b9 nixos/gotosocial: add blakesmith as a maintainer 2024-03-12 21:13:22 -05:00
annalee
8e038835fe
Merge remote-tracking branch 'upstream/master' into staging-next 2024-03-13 00:38:07 +00:00
Jörg Thalheim
721c6579d2
Merge pull request #295407 from Stunkymonkey/nixos-murmur-registerPassword-fix 
nixos/murmur: fix writing registerPassword to config
 2024-03-12 22:47:26 +01:00
Fabián Heredia Montiel
da8768347e
Merge pull request #293950 from DCsunset/nixos-hoogle 
nixos/hoogle: add extraOptions
 2024-03-12 14:57:30 -06:00
Felix Buehler
1e22e7d75e nixos/murmur: fix writing registerPassword to config 2024-03-12 21:19:24 +01:00
github-actions[bot]
6b78f024b2
Merge staging-next into staging 2024-03-12 18:01:46 +00:00
Peder Bergebakken Sundt
285d2dcf3c nixos/spotifyd: update configuration documentation url 2024-03-12 16:07:48 +01:00
Sandro Jäckel
b07cdeb1b3
nixos/plasma6: move out of x11 
This release focuses on wayland, lets give that justice
 2024-03-12 10:49:42 +01:00
Sandro Jäckel
8f86f82b1a
nixos/pretalx: fix /media/ nginx location block 
Fix the alias for displaying media.
Also the more_set_headers for Content-Disposition was invalid and broke
browsers. While I was at it, I also quoted the other more_set_headers
directives.
 2024-03-12 10:07:55 +01:00
github-actions[bot]
06e5eb63d3
Merge staging-next into staging 2024-03-11 18:01:53 +00:00
emilylange
08c37ba899 nixos/lldap: set service UMask=0027 and StateDirectoryMode=0750 
While `/var/lib/lldap` isn't technically accessible by unprivileged
users thanks to `DynamicUser=true`, a user might prefer and change it to
`DynamicUser=false`.

There is currently also a PR open that intends to make `DynamicUser`
configurable via module option.

As such, `jwt_secret_file`, if bootstrapped by the service start
procedure, might be rendered world-readable due to its permissions
(`0644/-rw-r--r--`) defaulting to the service's umask (`022`) and
`/var/lib/lldap` to `0755/drwxr-xr-x` due to `StateDirectoryMode=0755`.

This would usually be fixed by using `(umask 027; openssl ...)` instead
of just `openssl ...`.

However, it was found that another file (`users.db`), this time
bootstrapped by `lldap` itself, also had insufficient permissions
(`0644/-rw-r--r--`) inherited by the global umask and would be left
world-readable as well.

Due to this, we instead change the service's to `027`.

And to lower the impact for already bootstrapped files on existing
instances like `users.db`, set `StateDirectoryMode=0750`.
 2024-03-11 17:34:29 +01:00
emilylange
61a651e362 nixos/lldap: bootstrap jwt_secret if not provided 
If not provided, lldap defaults to `secretjwtsecret` as value which is
hardcoded in the code base.

See https://github.com/lldap/lldap/blob/v0.5.0/server/src/infra/configuration.rs#L76-L77

This is really bad, because it is trivially easy to generate an admin
access token/cookie as attacker, if a `jwt_secret` is known.
 2024-03-11 17:34:29 +01:00
Sandro Jäckel
4799ffc61d
nixos/vaultwarden: drop lib.mdDoc 2024-03-11 16:32:53 +01:00
Sandro Jäckel
d5ae85691a
nixos/vaultwarden: drop with lib over entire file 2024-03-11 16:32:49 +01:00
Sandro
869ec01e56
Merge pull request #294286 from SuperSandro2000/unbound-remote-config-check 2024-03-11 16:06:31 +01:00
WilliButz
a2c0efbf5e
Merge pull request #274307 from thillux/esdm-1.0.1 
esdm: update module after 1.0.1 changes
 2024-03-11 15:11:05 +01:00
Markus Theil
36f1c0c2b3 nixos/esdm: simplify module 
ESDM 1.0.1 fixed bugs related to Linux compatibility layer with CUSE.

During these fixes, the compatibility layer was simplified behind a
target in order to start the necessary services together or none of
them (services.esdm.linuxCompatServices).

Furthermore, a small helper was added to ESDM 1.0.1 in order to deal
with resume/suspend/hibernate (FUSE needs to be unblocked).

Removed options are marked.

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2024-03-11 14:28:26 +01:00
github-actions[bot]
339816cfdf
Merge staging-next into staging 2024-03-11 12:01:42 +00:00
Pierre Allix
cf625fe5f0 nixos/networkmanager: add doc about nm profiles interaction with resolvconf 2024-03-11 12:55:27 +01:00
Sandro
80ec88edec
Merge pull request #292025 from RaHoni/baculaTls 2024-03-11 12:01:19 +01:00
Guanran Wang
a6857b00fe
nixos/mihomo: init 2024-03-11 09:51:36 +08:00
github-actions[bot]
e5f37c0e88
Merge staging-next into staging 2024-03-11 00:02:46 +00:00
github-actions[bot]
43d40d2ee7
Merge staging-next into staging 2024-03-10 18:01:43 +00:00
Florian Klink
b437b19f54 nixos/yubikey-agent: fix eval error 
This has been refactored in https://github.com/NixOS/nixpkgs/
pull/133542, but this reference wasn't updated.
 2024-03-10 19:08:23 +02:00
Pol Dellaiera
2bd0c18d98
Merge pull request #282160 from gaykitty/stargazer-debug-mode 
nixos/stargazer: add missing debugMode setting
 2024-03-10 14:31:06 +01:00
github-actions[bot]
973ef4b818
Merge staging-next into staging 2024-03-10 06:01:30 +00:00
Peder Bergebakken Sundt
4a4a70ca31
Merge pull request #280836 from numinit/nebula-port-zero 
nixos/nebula: default to port 0 for hosts other than lighthouse/relay
 2024-03-10 05:01:04 +01:00
github-actions[bot]
3ce29d4386
Merge staging-next into staging 2024-03-10 00:02:48 +00:00
éclairevoyant
6b80044d9d
Merge pull request #294584 from MinerSebas/plasma-samba 
nixos/plasma6: Dont add samba a second time to environment.systemPackages
 2024-03-09 23:40:45 +00:00
Sandro
c86e8fd7a0
Merge pull request #133542 from fpletz/refactor/pinentry-remove-multiple-outputs 
pinentry: remove multiple outputs
 2024-03-09 23:57:27 +01:00
Bernardo Meurer
6bb56dc681
Merge pull request #294544 from lilyinstarlight/fix/fwupd-uefi-capsule-settings 2024-03-09 16:31:44 -05:00
Emily
8b7eef367c
Merge pull request #292304 from networkException/unix-socket-sliding-sync-bindaddr 
nixos/matrix-sliding-sync: improve unix socket support
 2024-03-09 20:12:48 +01:00
Lily Foster
1801583855
nixos/fwupd: fix silent failure for uefiCapsuleSettings to ever be added 
Bug was introduced in 28ea07d4e3.
 2024-03-09 12:44:46 -05:00
MinerSebas
cf3a468eee nixos/plasma6: Dont add samba a second time to environment.systemPackages 2024-03-09 17:06:25 +01:00
gaykitty
366147b86d nixos/stargazer: add missing debugMode setting 2024-03-09 11:04:27 -05:00
networkException
f0097cf1d9
nixos/matrix-sliding-sync: create runtime directory in /run/matrix-sliding-sync 
this patch enables the creation of a runtime directory with the default
mode 0755 in /run/matrix-sliding-sync to offer a simple option for
SYNCV3_BINDADDR when using unix sockets.
 2024-03-08 23:16:05 +01:00
Franz Pletz
a270c43ea1
treewide: use sensible pinentry flavor 2024-03-08 23:09:02 +01:00
Sandro Jäckel
67c1193fab
nixos/unbound: disable checkconf when remote-control is used 
Closes #293001
 2024-03-08 15:34:00 +01:00
github-actions[bot]
1d176721c2
Merge staging-next into staging 2024-03-08 12:01:49 +00:00
maxine
d231374084
Merge pull request #288873 from amaxine/networkmanager_1.46 
networkmanager: 1.44.2 → 1.46.0
 2024-03-08 09:52:14 +00:00
Weijia Wang
4acc19b18c
Merge pull request #291581 from Luflosi/nixos/memcached/clarify-setting 
nixos/memcached: clarify behaviour of `enableUnixSocket`
 2024-03-08 10:25:10 +01:00
éclairevoyant
2319821137
nixos/scrutiny: default collector api endpoint port to point at web app port 2024-03-07 23:21:53 -05:00
éclairevoyant
fc5116d75c
nixos/scrutiny: clean up mkEnableOption definitions 2024-03-07 23:21:53 -05:00
éclairevoyant
ce5dbf1b7b
nixos/scrutiny: inherit lib bindings 2024-03-07 23:21:52 -05:00
éclairevoyant
4e710d5221
nixos/scrutiny: remove redundant lib.mdDoc 2024-03-07 23:21:52 -05:00
Diogo Correia
9b7e02dd4b
nixos/dnsproxy: init module 2024-03-07 23:26:59 +00:00
Peder Bergebakken Sundt
5f9689332a
Merge pull request #278537 from wfdewith/syncoid-permissions 
nixos/syncoid: add missing ZFS mount permission
 2024-03-08 00:11:39 +01:00
Max Niederman
3609e216a4
nixos/photonvision: init module 2024-03-07 14:59:20 -08:00
Yt
0340f82b24
Merge pull request #292873 from ghthor/tabby 
Tabby: bump 0.7.0 -> 0.8.3 and add systemd service
 2024-03-07 21:51:06 +00:00
Maximilian Bosch
3c8f4e06e6
Merge pull request #287602 from Ma27/drop-postgres-ensurePermissions 
nixos/postgresql: drop ensurePermissions option
 2024-03-07 19:50:44 +00:00
Will Owens
d9188fc882
nixos/tabby: init module 
- Enable tabby to run as a systemd service
- Document standard tabby configuration
 2024-03-07 06:29:12 -05:00
DCsunset
38261d9556 nixos/hoogle: add extraOptions 2024-03-06 22:12:41 -05:00
Sandro
e656679228
Merge pull request #286523 from MarcelCoding/listmonk 
listmonk: 2.5.1 -> 3.0.0
 2024-03-06 18:49:20 +01:00
Franz Pletz
f05e5f3a51
Merge pull request #285807 from MinerSebas/prometheus-restic-exporter 
prometheus-restic-exporter: 1.4.0 -> 1.5.0
 2024-03-06 14:35:24 +01:00
Leona Maroni
182053a2cf
Merge pull request #293595 from SuperSandro2000/git-io-remove 
treewide: stop using deprecated git.io shortlink service
 2024-03-06 11:14:14 +01:00
Sandro Jäckel
04d33b98e1
treewide: stop using deprecated git.io shortlink service 2024-03-05 22:58:29 +01:00
Sandro
911b4015d2
Merge pull request #283319 from phaer/etebase-server 
etebase: fix runtime crash due to wrong pydantic..
 2024-03-05 21:37:21 +01:00
Adam C. Stephens
a51a27a78b
Merge pull request #291554 from jnsgruk/homepage-config 
nixos/homepage-dashboard: support structured config
 2024-03-05 09:48:19 -05:00
Jon Seager
c0330351a0
nixos/homepage-dashboard: support structured config 2024-03-05 14:38:52 +00:00
Someone
46b75bf589
Merge pull request #291828 from SomeoneSerge/refactor/cdi-nvidia 
nixos/cdi.dynamic.nvidia: expose driverLink
 2024-03-04 18:32:34 +00:00
Nick Cao
8e19126885
Merge pull request #289009 from 999eagle/feat/miniflux-no-db 
nixos/miniflux: add option to disable configuring a local postgresql db
 2024-03-04 09:47:14 -05:00
Sophie Tauchert
cb5f2a8e87
nixos/tests/miniflux: add test for external database 2024-03-04 09:07:21 +01:00
Sophie Tauchert
1f8385d6d1
nixos/miniflux: add option to disable configuring a local postgresql db 2024-03-04 09:07:20 +01:00
Robert Schütz
e67761b6f6
Merge pull request #292854 from SuperSandro2000/vaultwarden-bitwarden_rs 
vaultwarden: cleanup maintainers, nixos/vaultwarden: drop aliases
 2024-03-04 00:36:06 +00:00
Sandro Jäckel
06a6371247
nixos/vaultwarden: set meta.maintainers to package maintainer 2024-03-04 00:41:56 +01:00
Martin Weinelt
f09b7dc6a5
Merge pull request #289961 from leona-ya/vikunja-0.23.0 
vikunja: 0.22.1 -> 0.23.0
 2024-03-03 19:15:35 +01:00
Guillaume Girol
dc9a74e61e
Merge pull request #291934 from e1mo/bird-lg-1-3-5 
bird-lg: 1.3.1 -> 1.3.5
 2024-03-03 15:50:42 +01:00
Guillaume Girol
9887be970b
Merge pull request #292437 from deviant/nixos-nixseparatedebuginfod-nix2.3 
nixos/nixseparatedebuginfod: fix compatibility with Nix 2.3
 2024-03-03 14:12:27 +01:00
Pol Dellaiera
f480f9f47e
Merge pull request #292823 from SuperSandro2000/paperless-too-many-open-files 
nixos/paperless: fix too many open files
 2024-03-02 23:51:11 +01:00
Sandro Jäckel
75c7e61601
nixos/oauth2_proxy_nginx: allow placing the login page itself under a separate domain 
OIDC provider usually requires a callback URL which can now be set to
one domain when securing multiple virtualHosts under different (sub)domains
 2024-03-02 23:07:48 +01:00
Leona Maroni
46ad1987b9
Merge pull request #278698 from bachp/photoprism-update 
photoprism: 231011-63f708417 -> 231128-f48ff16ef
 2024-03-02 23:03:49 +01:00
Mynacol
84f4100520 rss-bridge: Use new tmpfiles syntax 2024-03-02 22:45:52 +01:00
Mynacol
f7a6e75b42 rss-bridge: Move whitelist option to general config 
Prefer setting the whitelisted bridges through the generic configuration
method. Removes the need for a whitelist.txt file.

Preserves backwards compatibility by taking the same values and
essentially just renaming the config option.
 2024-03-02 22:42:21 +01:00
Mynacol
a949f4b6e2 rss-bridge: Integrate filecache path with config 
Preserve the default value for the filecache path, but also allow
modifying it, adapting the tmpfiles rule to create the directory with
the right permissions.

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2024-03-02 22:40:12 +01:00
Maximilian Bosch
a9bcd3b8b7
Merge pull request #292825 from SuperSandro2000/nextcloud-with-apps-local 
nixos/nextcloud: build with-apps local
 2024-03-02 21:39:36 +00:00
Mynacol
f2201789fe rss-bridge: add config option 
This allows managing rss-bridge's config with nix.
It leverages the environment variable way of setting the config options,
introduced quite [some time ago](https://github.com/RSS-Bridge/rss-bridge/pull/2100)
It is the only existing way to set config options independent of the
document root, and upstream is [hesitant](https://github.com/RSS-Bridge/rss-bridge/pull/3842)
to change the config loading methods.

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2024-03-02 22:26:11 +01:00
Sandro Jäckel
4264ded76e
nixos/vaultwarden: drop aliases 2024-03-02 20:18:55 +01:00
Sandro Jäckel
907b5ebcee
nixos/nextcloud: build with-apps local 2024-03-02 18:01:38 +01:00
Sandro Jäckel
da1ccb628f
nixos/paperless: fix too many open files 
paperless-web-start[658743]: kombu.exceptions.OperationalError: [Errno 24] Too many open files: '/nix/store/k6h0pihpi3ih31zjk6ragqcp4mjz4pjs-python3.11-concurrent-log-handler-0.9.24/lib/python3.11/site-packages/concurrent_log_handler-0.9.24.dist-info/entry_points.txt'
 2024-03-02 17:52:18 +01:00
Franz Pletz
764d15f59f
pinentry: remove multiple outputs package 
fixes #133156 #124753
 2024-03-02 17:16:53 +01:00
K900
57746ceea5
Merge pull request #292748 from K900/sycoca-oof 
nixos/plasma6: nuke sycoca on activation
 2024-03-02 15:21:39 +03:00
Yt
492678349b
Merge pull request #292412 from bobrippling/fix/ebusd-logging 
ebusd: fix logging overrides
 2024-03-02 11:46:35 +00:00
K900
d7a4bf5998 nixos/plasma6: nuke sycoca on activation 
This is not the right solution, but it should get us going for now.
 2024-03-02 11:26:41 +03:00
nuko
636584b3ff
nixos/komga: use lib.getExe 2024-03-02 13:56:20 +13:00
nuko
b18bcf3a04
nixos/komga: add systemd service hardening 2024-03-02 13:55:25 +13:00
phaer
fa34964ef1 etebase: make proper package... 
and remove the ad-hoc python environment.
Also remove daphne and use uvicorn just as upstream does
 2024-03-01 22:55:27 +01:00
phaer
720a1eb5e7 modules/etebase-server: add package, pythonPackage 
options, to keep the packaeges configurable
 2024-03-01 14:32:46 +01:00
RaHoni
2af073f716
nixos/bacula: refactor option generation 
The generation of the descriptions always used lib explicitly even
thoughit was already specified with 'with'.

Since using `with lib` is discouraged this was also changed to inherit.
 2024-03-01 14:11:57 +01:00
RaHoni
ad2f55dc4e
nixos/bacula: Add support for TLS 
Added the majority of TLS options used for transport encryption.

This uses a submodule since all resources share the same settings.

The documentation can be found under:
https://www.bacula.org/13.0.x-manuals/en/main/Bacula_TLS_Communications_E.html
 2024-03-01 14:11:57 +01:00
Sandro
5ad27da222
Merge pull request #291907 from SuperSandro2000/tailscaled-flags 2024-03-01 13:54:54 +01:00
Sandro
b84bc4ea3a
Merge pull request #264087 from leonm1/matter-server-module 2024-03-01 13:51:19 +01:00
Sandro
51e92056db
Merge pull request #283660 from ocfox/transfer 2024-03-01 13:36:03 +01:00
Marcel
896a4d62d8
listmonk: ensure correct application of data migration 2024-03-01 10:45:12 +01:00
Sarah Brofeldt
13a94ad1fb
Merge pull request #292291 from cafkafk/dockerRegistry-openFirewall 
nixos/dockerRegistry: add `openFirewall` option
 2024-03-01 09:57:07 +01:00
Christina Sørensen
d31cbb78ca
nixos/dockerRegistry: add openFirewall option 
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
 2024-03-01 09:56:03 +01:00
K900
690d54ef45
Merge pull request #292326 from hcsch/pipewire-wireplumber-doc-fix 
nixos/pipewire: doc fixes as a follow-up to #282377 and #291946
 2024-03-01 09:28:17 +03:00
K900
b4622a277e
Merge pull request #292483 from mjm/plasma6-kcmutils 
nixos/plasma6: install kcmutils
 2024-03-01 09:25:51 +03:00
Matt Moriarity
e59d120fc1 nixos/plasma6: install kcmutils 2024-02-29 20:12:42 -07:00
nuko
502f34f3e0
nixos/komga: rfcfmt, rm mdDoc & toplvl with lib 2024-03-01 15:13:06 +13:00
networkException
10fc05bfc1
nixos/matrix-synapse: allow synapse to write to directories of unix socket paths 
this patch takes the path of all unix socket listeners and appends their
respective parent directories to the ReadWritePaths allow list for the
matrix-synapse systemd service.

previously configuring a unix socket in a directory not writable by
synapse would fail.
 2024-03-01 02:36:29 +01:00
Sandro
bbabfca453
Merge pull request #263765 from numinit/armagetronad-module 
nixos/armagetronad: Add module with NixOS tests
 2024-03-01 00:46:34 +01:00
Sandro
daa33a4bf7
Merge pull request #287299 from SuperSandro2000/unbound-checkconf 
nixos/unbound: check validity of config file
 2024-03-01 00:33:36 +01:00
V
ff990ea66a nixos/nixseparatedebuginfod: fix compatibility with Nix 2.3 
Appending to options with the `extra-` prefix was added in Nix 2.4,
which makes config validation fail on this version without the guard.

Change-Id: Ie253978dbaf00b228fecc08698a3dcc01cd2d82b
 2024-02-29 23:10:31 +01:00
Rob Pilling
979ae4c6e5 nixos/ebusd: fix logging overrides 
This fixes #292131 - currently we specify --log=all:<level>, which
overrides all other log areas. Specifying this first allows the
further log areas to be specified without being replaced.
 2024-02-29 21:02:26 +00:00
Kerstin
51363e5c0d
Merge pull request #280628 from h7x4/nixos-module-update-kanidm-add-backup-dir-to-bindpaths 
nixos/kanidm: declare `online_backup` options
 2024-02-29 15:19:34 +01:00
Michele Guerini Rocco
11b122ec70
Merge pull request #292185 from dotlambda/searxng-mainProgram 
searxng: set meta.mainProgram
 2024-02-29 14:19:51 +01:00
Hans Christian Schmitz
3f86bd950c
nixos/pipewire: add docs for passthru.requiredLv2Packages 2024-02-29 13:28:04 +01:00
Hans Christian Schmitz
b97450b007
nixos/wireplumber: fix incorrect option name in docs 2024-02-29 13:28:04 +01:00
networkException
644eac31e6
nixos/matrix-sliding-sync: document unix socket support in SYNCV3_BINDADDR 2024-02-29 11:03:01 +01:00
Leona Maroni
3302864e6e
Merge pull request #292030 from Flakebi/paperless 
paperless: fix uploading files via local folder
 2024-02-29 08:10:28 +01:00
Robert Schütz
3330e3c9c3 nixos/searx: use lib.getExe 2024-02-28 17:51:24 -08:00
abysssol
8720397720 nixos/ollama: replace incorrect use of overrideAttrs 
The bug prevents nixos from compiling
if the ollama service is built with cuda enabled.
 2024-02-28 17:15:30 -05:00
K900
2614e40893 sddm: add Wayland to the wrapper if enabled 2024-02-28 18:49:33 +03:00
K900
7b74d9a4ac sddm: 0.20.0-unstable -> 0.21.0 2024-02-28 18:49:33 +03:00
K900
3f650b567f nixos/plasma6: init 2024-02-28 18:49:33 +03:00
K900
8be79e54c5 nixos/pam/kwallet: rename option, allow setting package 2024-02-28 18:49:33 +03:00
K900
2248bdfbbc nixos/sddm: add extraPackages option 2024-02-28 18:49:12 +03:00
André Vitor de Lima Matos
675ad00f22
pipewire: fix wireplumber config paths 
Quickfix for systemWide pipewire after #282377
 2024-02-28 10:46:52 -03:00
Pol Dellaiera
200390b3ed
Merge pull request #291748 from abysssol/update-ollama-0.1.27 
ollama: 0.1.26 -> 0.1.27
 2024-02-28 10:15:42 +01:00
Flakebi
9db96ee839
paperless: fix uploading files via local folder 
The consumer service needs to be in the same namespace as the
task-queue, otherwise they cannot see each others temporary files.
Same as for web uploading.

See also the discussion here:
https://github.com/paperless-ngx/paperless-ngx/discussions/5606
 2024-02-28 09:14:48 +01:00
K900
a64a75a7ca
Merge pull request #291946 from hcsch/pipewire-wireplumber-config-packages-migration 
nixos/pipewire: add assertions for migration to `extraConfig`/`configPackages`
 2024-02-28 09:17:34 +03:00
Morgan Jones
a5c305d170
nixos/armagetronad: address code review feedback 2024-02-27 18:59:37 -08:00
pennae
b71ca1c90a
Merge pull request #291922 from NixOS/mosquitto-2 
nixos/mosquitto: remove stutter in acl file name
 2024-02-28 02:06:01 +01:00
Hans Christian Schmitz
5f6dca8403
nixos/pipewire: add assertions for migration to extraConfig/configPackages 
The PR #282377 made files/directories specified in
`environment.etc."pipewire<...>"` and `environment.etc."wireplumber<...>"`
conflict with existing configuration of the PipeWire NixOS module due to how
the `configPackages` options were implemented. This sadly wasn't easily
avoidable. As this can cause breakage for users moving from 23.11 to 24.05
though, assertions can help guide them to use `services.pipewire.extraConfig`
or `services.pipewire.configPackages` / `services.wireplumber.configPackages`
instead, fixing the breakage.
 2024-02-28 01:22:28 +01:00
abysssol
5c143f0366 nixos/ollama: override kernelPackages with nvidia driver 
Instead of setting linuxPackages to a singleton set with nvidia_x11,
override the system's kernelPackages with the nvidia driver.
This is more semantically correct, though doesn't change any behavior.
 2024-02-27 18:51:54 -05:00
e1mo
43fee5401d
nixos/bird-lg: Update option description to indicate new features 
In release v1.3.3[0] support for CIDRs was added, thus updated the
option description to indicate the new support for that.

[0]: https://github.com/xddxdd/bird-lg-go/releases/tag/v1.3.3
 2024-02-27 23:54:21 +01:00
Sandro
f9477e3a75
Merge pull request #209506 from Izorkin/update-dhcpcd-exit-hook 
nixos/dhcpcd: optimize exitHook
 2024-02-27 23:01:22 +01:00
Sandro
4c88c797b8
nixos/mosquitto: remove stutter in acl file name 2024-02-27 22:15:43 +01:00
Atemu
97f445e8f1
Merge pull request #245005 from Scrumplex/nixos-monado 
nixos/monado: init
 2024-02-27 20:11:04 +00:00
Sandro Jäckel
6753857664
nixos/tailscale: add option to pass flags to tailscaled 2024-02-27 20:08:08 +01:00
Sandro Jäckel
6cd7477733
nixos/hydra: add option for starman workers 
This is useful for small deployments which do not need 5 spare starman
workers taking 160 MB of RAM each.
 2024-02-27 15:45:20 +01:00
Someone Serge
2a63db4e6f
nixos/virtualisation.containers.cdi.dynamic.nvidia: expose driverLink 
..shallowly
 2024-02-27 12:50:59 +00:00
Someone Serge
65dbac7215
nixos/virtualisation.containers.cdi.dynamic.nvidia: refactor w/ callPackage 2024-02-27 11:59:57 +00:00
Jon Seager
d0b85d47c6
Merge pull request #289863 from mjm/nut-exporter-variables 
nixos/prometheus-nut-exporter: use extraFlags, add nutVariables option
 2024-02-27 11:11:30 +00:00
pennae
13aff9b34c
Merge pull request #259937 from charmoniumQ/patch-1 
nixos/mosquitto: fix ACL permissions
 2024-02-26 22:58:40 +01:00
Atemu
f53c775852
Merge pull request #278454 from litchipi/mealie 
mealie: init at 1.2.0
 2024-02-26 21:01:49 +00:00
Luflosi
a982176a71
nixos/memcached: clarify behaviour of enableUnixSocket 
Let's make it clear that enabling this option will disable listening on an IP address and port.
 2024-02-26 15:29:55 +01:00
Pol Dellaiera
033a375a23
Merge pull request #290363 from abysssol/update-ollama-0.1.26 
ollama: 0.1.24 -> 0.1.26
 2024-02-26 15:00:57 +01:00
K900
eb74747f38 nixos/pipewire: add LV2 plugins option 
Follow-up #282377.

Some packages may want to load LV2 plugins directly from PipeWire config instead, so add another option to accomodate those.
 2024-02-26 10:04:45 +03:00
K900
92b9d11129
Merge pull request #282377 from hcsch/pipewire-wireplumber-config-packages 
nixos/pipewire: add configPackages options
 2024-02-26 09:12:06 +03:00
abysssol
b8d8c1f207 nixos/ollama: add option for hardware acceleration 2024-02-25 15:57:58 -05:00
0x4A6F
97bca14e41
Merge pull request #290719 from martinetd/atuin 
atuin: small fixes
 2024-02-24 23:05:25 +01:00
RatCornu
2f460b3f53
nixos/suwayomi-server: add option settings.server.extensionRepos 
This option is now a key feature of Suwayomi-Server, so it is
interesting to have it directly available in a quick search.
 2024-02-24 19:43:03 +01:00
Sandro
7fab1e2013
Merge pull request #275024 from jerith666/lorri-less-protected 2024-02-24 16:07:13 +01:00
Sandro
806772b178
Merge pull request #274662 from StarGate01/pcscd-debug 2024-02-24 01:23:10 +01:00
Sandro
f6b46c1f59
Merge pull request #290119 from cafkafk/kublet-config 2024-02-24 00:34:46 +01:00
Michele Guerini Rocco
ed9121e5d7
Merge pull request #282758 from rht/hardware_no_network 
hddfancontrol & thinkfan: disable network access.
 2024-02-24 00:15:24 +01:00
Pol Dellaiera
f9ef0053c5
Merge pull request #288401 from katexochen/bees/refactor 
bee: refactor & update; bee{-unstable,-clef}: remove; maintainers: remove attila-lendvai
 2024-02-23 20:12:41 +01:00
Christoph Honal
6c5bcf43f1 nixos/pcscd: Add extraArgs option 2024-02-23 16:52:36 +01:00
Sefa Eyeoglu
3f7e9baeeb
nixos/monado: prevent Monado from restarting quickly 
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2024-02-23 14:25:16 +01:00
Sefa Eyeoglu
0e585a63e2
nixos/monado: make CAP_SYS_NICE wrapper configurable 
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2024-02-23 14:25:16 +01:00
Sefa Eyeoglu
2d2493b23d
nixos/monado: add option to make Monado the default OpenXR runtime 
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2024-02-23 14:25:15 +01:00
Sefa Eyeoglu
ce36e73fdb
nixos/monado: link OpenXR runtimes 
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2024-02-23 14:25:15 +01:00
Sefa Eyeoglu
9003167522
xr-hardware: init at unstable-2023-11-08 
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2024-02-23 14:25:15 +01:00
Sefa Eyeoglu
5d57df8a80
nixos/monado: init 
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2024-02-23 14:25:15 +01:00
Hans Christian Schmitz
e722c56160
nixos/wireplumber: add required lv2 plugins to service path 2024-02-23 08:58:16 +01:00
Hans Christian Schmitz
5bf2637b48
nixos/wireplumber: add config packages option 2024-02-23 08:58:15 +01:00
Hans Christian Schmitz
054bba560a
nixos/pipewire: add config packages option 2024-02-23 08:57:16 +01:00
Hans Christian Schmitz
992582fdf8
nixos/pipewire: Fix capitalization 
In docs PipeWire and WirePlumber should be capitalized as in this
sentence.
 2024-02-23 08:57:12 +01:00
Christina Sørensen
26036ecf31
kubelet: Set Kubelet Parameters Via A intermediate Configuration File 
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
 2024-02-23 08:55:02 +01:00
Litchi Pi
4ebf2b54b0 nixos/mealie: init module 
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
 2024-02-23 07:15:24 +01:00
Sandro
80e6bb31d5
Merge pull request #289956 from SuperSandro2000/archisteamfarm 2024-02-23 02:06:03 +01:00
Sandro
78745f4652
Merge pull request #289934 from jnsgruk/scrutiny 2024-02-23 00:43:55 +01:00
Dominique Martinet
85ee3198c7 atuin: Allow setting database.uri to null 
When a password is required to connect to postgres using
services.atuin.database.uri directly would make the password be written
in the nix store, which is suboptimal.
Instead we can have the password in a file accessible only to root by
having systemd read an EnvironmentFile directly, but we must ensure that
this file has priority over the environment set.
Not setting the variable in this case is more straightforward.
 2024-02-23 07:35:21 +09:00
Jon Seager
88d637c6dd
nixos/scrutiny: init 2024-02-22 21:20:10 +00:00
Maxine Aubrey
e1863b4f79
nixos/networkmanager: support stable-ssid for cloned MAC addresses 2024-02-22 18:37:13 +01:00
Martin Weinelt
878609256b
Merge pull request #287348 from mweinelt/fastly-exporter-module 
nixos/prometheus-fastly-exporter: fix runtime environment, refactor, make things prettier
 2024-02-22 16:37:51 +01:00
Someone
ee3923ed7d
Merge pull request #284507 from ereslibre/containers-cdi 
NixOS: Add support for CDI
 2024-02-22 13:03:18 +00:00
Rafael Fernández López
8ba61ebb8a services/hardware: add nvidia-container-toolkit 2024-02-21 22:17:07 +01:00
Adam C. Stephens
d1e2847664
Merge pull request #281000 from cablespaghetti/master 
sabnzbd: Add configurability of state directory owner and firewall
 2024-02-21 08:37:46 -05:00
adisbladis
e4e474fbcf
Merge pull request #273670 from adisbladis/zope2-removal 
nixos/zope2: Remove module
 2024-02-21 17:19:07 +13:00
Leona Maroni
47b7eb8fd9
nixos/vikunja: remove setupNginx option 
The required nginx configuration is now really simple, and e.g. SSL/ACME
already required the user to interact with `services.nginx.virtualHosts`.
Therefore, and to reduce complexity, we now leave the web server
configuration to the user.
 2024-02-20 22:43:53 +01:00
Leona Maroni
8817f080cc
nixos/vikunja: adapt for vikunja 0.23.0 
This version removes dedicated api and frontend packages.
 2024-02-20 22:43:53 +01:00
Rick van Schijndel
e5e1de76b7
Merge pull request #281058 from wineee/fi 
deepin: don't install packages using freeimage by default
 2024-02-20 20:27:47 +01:00
Sandro
d9bc710130
Merge pull request #289754 from chewblacka/nixos/atuin-add-package-option 2024-02-20 14:11:14 +01:00
Bobby Rong
931e2b8adc
Merge pull request #289788 from FedericoSchonborn/budgie-control-center-1.4.0 
budgie.budgie-control-center: 1.3.0 -> 1.4.0
 2024-02-20 12:43:23 +08:00
Federico Damián Schonborn
b9c8b27f89
nixos/budgie: Enable SSH socket support in BCC when needed 
Signed-off-by: Federico Damián Schonborn <federicoschonborn@disroot.org>
 2024-02-19 18:06:33 -03:00
Nick Cao
2da4adbd10
Merge pull request #289862 from maxbrunet/feat/automatic-timezoned/v2 
automatic-timezoned: 1.0.148 -> 2.0.0
 2024-02-19 09:42:42 -05:00
Sandro
30f71249a8
Merge pull request #285866 from 999eagle/feat/pgbouncer-systemd 2024-02-19 14:42:01 +01:00
Sandro Jäckel
69f51e028a
ArchiSteamFarm,nixos/ArchiSteamFarm: take maintainership 
this is effectively already the case and I most updates in the last
months
 2024-02-19 13:25:57 +01:00
Sandro
a332040396
Merge pull request #247668 from jtbx/nixos-teeworlds 
nixos/teeworlds: add more configuration options
 2024-02-19 02:51:04 +01:00
Maxime Brunet
5c1c4c75f7 automatic-timezoned: 1.0.148 -> 2.0.0 2024-02-18 15:01:25 -08:00
Matt Moriarity
bbad81f937 nixos/prometheus-nut-exporter: use extraFlags, add nutVariables option 2024-02-18 15:55:09 -07:00
John Garcia
7427bec3a7 nixos/atuin: add services.atuin.package option 2024-02-18 22:19:41 +00:00
Artturi
dab023d0cc
Merge pull request #287257 from 999eagle/fix/hydra-pg-application-name 
nixos/hydra: use set-default in hydra-env wrapper package
 2024-02-18 17:21:53 +02:00
Aaron Andersen
0276bd7269
Merge pull request #288166 from Princemachiavelli/jhoffer/remove_fixed_mysql_timeout 
nixos/mysql: remove fixed timeout and use notify service type
 2024-02-18 09:13:46 -05:00
rasmus-kirk
9f2d51a4e7 nixos/transmission: fix log level bounds to match the transmission wiki 2024-02-18 23:45:10 +11:00
adisbladis
3209343527 nixos/zope2: Remove module 
`zope2` is unmaintained and the module is relying on Python2.
 2024-02-18 17:48:24 +13:00
Morgan Jones
32f56d7266
nixos/nebula: fix port resolution for firewall rules 2024-02-17 15:07:27 -08:00
Sandro
8f13ee7049
Merge pull request #179034 from viraptor/go-camo-service 
nixos/go-camo: init
 2024-02-17 22:12:13 +01:00
Sandro
cf59adeb8c
Merge pull request #271324 from nessdoor/sourcehut/tests 
nixosTests.sourcehut: implement proper integration testing
 2024-02-17 20:58:22 +01:00
Stanisław Pitucha
2eed715fbf
nixos/go-camo: init 2024-02-17 20:45:49 +01:00
Izorkin
c1a97e1f49
nixos/mastodon: add option redis.passwordFile 2024-02-17 15:52:58 +03:00
Someone
5dec53ad28
Merge pull request #289401 from philiptaron/bolt 
nixos/bolt: add a services.hardware.bolt.package option
 2024-02-17 12:17:18 +00:00
jacekpoz
86abdfdf87 nixos/asusctl: add package option 2024-02-17 21:34:35 +11:00
K900
b7efb1e376
Merge pull request #289331 from K900/greetd-restart-on-success 
nixos/greetd: only restart on success
 2024-02-17 08:39:45 +03:00
Philip Taron
ad029745ce
nixos/bolt: add a services.hardware.bolt.package option 
It just seems like good manners.
 2024-02-16 14:56:20 -08:00
Sarah Brofeldt
c267e823b7
Merge pull request #289227 from JorisBolsens/patch-3 
nixos/kubernetes: set k8 home permissions correctly
 2024-02-16 19:34:14 +01:00
K900
56eb2542da nixos/greetd: only restart on success 
Otherwise, if the greeter/session crashes on startup, greetd enters a restart loop
that requires very precise timing to kill.
 2024-02-16 19:42:31 +03:00
Izorkin
cf62e3257f
nixos/mastodon: redis now uses unix socket by default 2024-02-16 16:39:31 +03:00
Jörg Thalheim
5c84f89310 nixos/tinc: fix user to not include . in its name 
sysusers does not like . in the user name.
 2024-02-16 13:36:28 +01:00
Izorkin
1293f046b5
nixos/dhcpcd: optimize exitHook 2024-02-16 10:12:52 +03:00
Joris Bolsens
81391bd22f nixos/kubernetes: set k8 home permissions correctly 2024-02-15 23:11:59 -08:00
Izorkin
937220442c
nixos/peertube: update nginx configuration 2024-02-16 09:31:27 +03:00
Izorkin
6e61227199
peertube: split peertube-cli utility 2024-02-16 09:31:26 +03:00
Izorkin
00e4bf4d02
peertube: 5.2.1 -> 6.0.3 2024-02-16 09:31:26 +03:00
Sophie Tauchert
f6278d4f6a
nixos/pgbouncer: fix openFirewall option 2024-02-15 21:42:27 +01:00
Sophie Tauchert
b89cd583ae
nixos/pgbouncer: only depend on postgresql.service when enabled and use notify 
See also the upstream service file: e6ce619785/etc/pgbouncer.service
 2024-02-15 21:42:27 +01:00
Felix Bühler
60abd7c1f9
Merge pull request #288138 from ambroisie/tandoor-recipes-manage-script 
nixos/tandoor-recipes: improve manage script
 2024-02-15 20:26:03 +01:00
Felix Bühler
27f19c1efd
Merge pull request #288622 from Stunkymonkey/photoprism-manage-script 
nixos/photoprism: improve manage script
 2024-02-15 20:18:42 +01:00
Sarah Brofeldt
ed0bc642b7
Merge pull request #288466 from JorisBolsens/patch-2 
nixos/kubernetes: don't delete the apitoken after its created
 2024-02-15 18:20:24 +01:00
Thomas
149fb601dd
nixos/tinyproxy: add quotes around the filter path 
Using already existing function
 2024-02-15 16:25:04 +01:00
Vladimír Čunát
aaca7a186f
Merge #286596: nixos/knot: add support for XDP setups 2024-02-15 09:19:59 +01:00
Yt
f13f90978a
Merge pull request #288638 from ThyMYthOS/update-stalwart 
stalwart-mail: fix default configuration and test
 2024-02-14 21:42:46 +00:00
Michele Guerini Rocco
f74d88a6f1
Merge pull request #281162 from kennycallado/master 
nixos/icewm: Update icewm start command
 2024-02-14 18:17:27 +01:00
maxine
8c8cc53769
Merge pull request #288531 from chewblacka/update-undervolt 
undervolt: 0.3.0 -> 0.4.0
 2024-02-14 17:30:53 +01:00
Michele Guerini Rocco
cd02351ae0
Merge pull request #233017 from koenw/libreswan-StateDirectory 
nixos/libreswan: Use StateDirectory to setup ipsec/nss
 2024-02-14 14:36:43 +01:00
Michele Guerini Rocco
bac2597d26
Merge pull request #270737 from bramd/brltty-6.6 
Update BRLTTY to 6.6
 2024-02-14 14:10:32 +01:00
Michele Guerini Rocco
dc91f91987
Merge pull request #286393 from oddlama/fix-hostapd-utf8-ssid 
nixos/hostapd: fix utf8Ssid setting not properly honored
 2024-02-14 14:08:46 +01:00
Matt Leon
c0846f900a
matter-server: add nixos service module 
New module to run the python-matter-server executable as a sandboxed
system service.
 2024-02-13 19:17:53 -05:00
Jeremy
e01eda6edd nixos/teeworlds: add more configuration options, revise 
- add 'package' option
- add 'game' and 'server' attrset
- reduce repetition by using functions bool and optionalSetting
- add default value for cfg.name
- revise some option descriptions
 2024-02-14 10:57:08 +13:00
Manuel Stahl
cd8aad903c stalwart-mail: fix default configuration and test 2024-02-13 20:34:22 +01:00
emilylange
993083f0ab
nixos/garage: allow all available log levels in cfg.logLevel 
`error` and `warn` have always been valid log levels.
But because the upstream docs never mentioned those, we simply didn't
add them to the enum of our module option.

The upstream docs have been updated and now mention `error` and `warn`
as well.

Upstream PR: https://git.deuxfleurs.fr/Deuxfleurs/garage/pulls/716
 2024-02-13 20:26:29 +01:00
Peder Bergebakken Sundt
bf7c95ce73
Merge pull request #285314 from pbsds/ttyd-1706718068 
nixos/ttyd: add `entrypoint` and `writable` option
 2024-02-13 19:41:11 +01:00
Felix Buehler
9db5906a6f nixos/photoprism: improve manage script 2024-02-13 18:51:30 +01:00
John Garcia
eaa1034a80 nixos/undervolt: add turbo option 2024-02-13 13:38:22 +00:00
Martin Weinelt
ec89463a61
nixos/knot: refactor 
- Stop using `with lib`
- Drop `lib.mdDoc`
- Use `escaepSystemdExecArgs` for escaping
 2024-02-13 13:44:32 +01:00
Martin Weinelt
d1d8dd3e55
nixos/knot: add support for XDP setups 
The Express Data Path (XDP) is a way to circumvent the traditional Linux
networking stack and instead run an eBPF program on your NIC, that makes
the decision to provide Knot with certain packets. This is way faster
and more scalable but comes at the cost of reduced introspection.

Unfortunately the `knotc conf-check` command fails hard with missing
interfaces or IP addresses configured in `xdp.listen`, so we disable it
for now, once the `xdp` config section is set. We also promote the config
check condition to a proper option, so our conditions become public
documentation, and we allow users to deal with corner cases, that we have
not thought of yet.

We follow the pre-requisites documented in the Knot 3.3 manual, and set
up the required capabilities and allow the AF_XDP address family.

But on top of that, due to our strict hardening, we found two more
requirements, that were communicated upstream while debugging this.

- There is a requirement on AF_NETLINK, likely to query for and configure
  the relevant network interface
- Running eBPF programs requires access to the `bpf` syscall, which we
  deny through the `~@privileged` configuration.

In summary We now conditionally loosen the hardening of the unit once we
detect that an XDP configuration is wanted. And since we cannot
introspect arbitrary files from the `settingsFiles` option, we expose XDP
support through the `enableXDP` toggle option on the module.
 2024-02-13 13:44:31 +01:00
Yt
971fbfd00a
Merge pull request #276468 from onny/opensnitch-update4 
opensnitch: 1.6.4 -> 1.6.5, opensnitch-ui: 1.6.4 -> 1.6.5
 2024-02-13 10:46:01 +00:00
Joris Bolsens
6a11b7a777
nixos/kubernetes: don't delete the apitoken after its created 
This was breaking the nixos-kubernetes-node-join script
the token gets copied, and then immediately overridden with /dev/null when certmgr restarts.
 2024-02-12 22:50:27 -08:00
Paul Meyer
ce0a47cd2c maintainers: remove attila-lendvai 2024-02-12 23:10:03 +01:00
Paul Meyer
11eef97f3c bee-clef: remove 2024-02-12 23:10:03 +01:00
Sandro Jäckel
80e79ded15
nixos/unbound: check validity of config file 2024-02-12 22:49:03 +01:00
Maximilian Bosch
d363f52625
nixos/postgresql: drop ensurePermissions option 
...effectively what was planned already in #266270, but it was too late
because the branches were restricted and didn't allow any breaking
changes anymore.

It also suffers from the same issue that we already had when discussing
this the last time[1] when `ensureDBOwnership` was ultimately introduced
as band-aid fix: newly created users don't get CREATE permission on
the `public` schema anymore (since psql 15), even with `ALL PRIVILEGES`.

If one's use-case is more sophisticated than having a single owner, it's
questionable anyways if this module is the correct tool since
permissions aren't dropped on a change to this option or a removal which
is pretty surprising in the context of NixOS.

[1] https://github.com/NixOS/nixpkgs/pull/266270
 2024-02-12 21:10:33 +01:00
Janik
29f575d7e6
Merge pull request #288284 from NetaliDev/rustdesk-extra-args 
nixos/rustdesk-server: add extra args options for hbbr and hbbs
 2024-02-12 16:52:01 +01:00
Pol Dellaiera
2d627a2a70
Merge pull request #277220 from nu-nu-ko/nixos-jellyfin-dirs 
nixos/jellyfin: add directory options
 2024-02-12 14:06:46 +01:00
Jennifer Graul
c412263319
nixos/rustdesk-server: add extra args options for hbbr and hbbs 2024-02-12 13:41:08 +01:00
Jonas Heinrich
31b9a9d18c opensnitch: 1.6.4 -> 1.6.5, opensnitch-ui: 1.6.4 -> 1.6.5.1 2024-02-12 11:58:44 +01:00
Sophie Tauchert
b670443f42
nixos/hydra: use set-default in hydra-env wrapper package 2024-02-12 11:16:32 +01:00
Josh Hoffer
b445085c22 nixos/mysql: Use notify service type for MySQL >= 8.0 2024-02-11 15:41:25 -08:00
Josh Hoffer
e553e37abf nixos/mysql: remove MySQL fixed 30 second timeout 
Removed hard coded timeout in postScript, allow using
more general systemd TimeoutStartSec instead.
 2024-02-11 15:41:25 -08:00
Bruno BELANYI
5e43c70867 nixos/tandoor-recipes: improve manage script 
This is mirroring the way the manage script is created in the paperless
module, which is more robust to special characters.
 2024-02-11 21:21:02 +00:00
maxine
9b52568c86
Merge pull request #288122 from amaxine/fwupd-internal-tests 2024-02-11 21:15:52 +01:00
Maxine Aubrey
4a4904c2b2
nixos/fwupd: make test option internal, be explicit about removal 2024-02-11 20:27:02 +01:00
kirillrdy
76d14d166c
Merge pull request #287708 from JorisBolsens/patch-1 
nixos/kubernetes: use correct -o option with bash install when copying certs in cfssl prestart script
 2024-02-12 06:14:44 +11:00
Maximilian Bosch
417fdb06d7
Merge pull request #287856 from emilylange/nixos-gitea-package-forgejo-warning 
nixos/gitea: warn when using `services.gitea` with forgejo
 2024-02-11 18:06:05 +01:00
Sam Weston
c49e6bf8b8 nixos/sabnzbd: use stateDirectory and mkIf-ify user/group creation 2024-02-11 16:49:08 +00:00
Sam Weston
d3d5b72c65 nixos/sabnzbd: add openFirewall 2024-02-11 16:48:05 +00:00
Aaron Andersen
e163373592
Merge pull request #284814 from yaxitech/github-runner-module-update 
nixos/github-runners: remove single runner module, rework default name, add `noDefaultLabels`
 2024-02-11 06:10:56 -08:00
Martin Weinelt
18899b0c58
Merge pull request #287926 from mweinelt/home-assistant-2024.2.0-fixes 
home-assistant: fixes for 2024.2.0
 2024-02-11 04:35:53 +01:00
Martin Weinelt
055a8f709a
nixos/home-assistant: always add dependencies for default integrations 
These are loaded unconditionally during bootstrap, and home-assistant
will now fail to start, if these aren't provided.
 2024-02-11 04:09:52 +01:00
Lin Jian
f3a93440fb
Merge pull request #285813 from jerrita/nft-precheck-flatten 
nixos/nftables: add option for flattening rulesetFile
 2024-02-11 10:41:17 +08:00
Martin Weinelt
aeea37e779
Merge pull request #287480 from NixOS/home-assistant 
home-assistant: 2024.1.6 -> 2024.2.1
 2024-02-11 01:18:04 +01:00
emilylange
ca3cfc841a
nixos/gitea: warn when using services.gitea with forgejo 
since this is no longer supported and we have a dedicated module for
forgejo for quite some time now.

Such warning is, however, becoming more and more important, since
forgejo is no longer a soft-fork of gitea, but rather a hard-fork.

And as such, it will slowly but surely no longer be a drop-in
replacement.

Additionally, I hope that this warning will prevent users from
reporting issues with forgejo to nixos/gitea maintainers.

The accompanying forgejo.md, from which the manual section is created,
will be updated over the next few weeks when forgejo officially
publishes their blog post about all this and the way forward, so we can
link to it.
 2024-02-10 20:47:04 +01:00
tomberek
6e60c8526b
Merge pull request #286993 from christoph-heiss/srht-updates-next-round 
sourcehut: update all components
 2024-02-10 11:52:53 -05:00
Sandro
756e574ebd
Merge pull request #282971 from wegank/restya-board-drop 
restya-board: drop
 2024-02-10 17:28:05 +01:00
Peder Bergebakken Sundt
40cb108adf
Merge pull request #232528 from SuperSandro2000/chromium-kde 
nixos/chromium: add enablePlasmaBrowserIntegration option
 2024-02-10 17:15:14 +01:00
Peder Bergebakken Sundt
6f55f021df
Merge pull request #287304 from ambroisie/pyload-user-group 
nixos/pyload: add user/group options
 2024-02-10 14:59:23 +01:00
Maximilian Bosch
66a0b77a78
Merge pull request #286394 from SuperSandro2000/nextcloud-timer 
nixos/nextcloud: don't execute cron when in maintenace/upgrade, don't kill cgroup
 2024-02-10 12:48:05 +01:00
Peder Bergebakken Sundt
5caded32fe
Merge pull request #277189 from anpin/fix/cloudflared-service 
cloudflared: fixed missing configuration options
 2024-02-10 12:45:08 +01:00
maxine
53f6fedd04
Merge pull request #287512 from r-vdp/fwupd_1_9_13 
fwupd: 1.9.12 -> 1.9.13
 2024-02-10 11:05:51 +01:00
Joris Bolsens
1856e7e4b1 nixos/kubernetes: use correct -o option with bash install when copying certs in cfssl prestart script 2024-02-10 01:46:00 -08:00
Martin Weinelt
3d67816966
home-assistant: 2024.1.6 -> 2024.2.1 
https://www.home-assistant.io/blog/2024/02/07/release-20242/
https://github.com/home-assistant/core/releases/tag/2024.2.1
 2024-02-10 04:15:41 +01:00
Silvan Mosberger
11cd405226
Merge pull request #280322 from h7x4/add-hocon-format-generator 
pkgs.formats: Add HOCON format generator
 2024-02-10 03:07:51 +01:00
Silvan Mosberger
5de4385620
Merge pull request #285833 from 360ied/murmur-hardened 
nixos/murmur: systemd service hardening
 2024-02-10 02:48:46 +01:00
github-actions[bot]
b64b4f2d6a
Merge master into staging-next 2024-02-09 18:01:06 +00:00
Will Fancher
0cf1e24f32
Merge pull request #284627 from Trundle/nftables-ordering 
nixos/nftables: remove default systemd dependencies
 2024-02-09 12:29:24 -05:00
Vincent Haupert
6d8391a3ce nixos/github-runners: add a group option to set the executing group 
Similar to the `user` option, the added `group` option sets the group of
the executing process. If not `null`, it also sets `DynamicUser=false`.
In case `user` is set to `null` (the default), systemd would run the
service as root implicitly. As this is dangerous and most certainly not
what users want, we force them to set `user = "root"` explicitly if
that's really their intention. That's achieved through an assertion.
 2024-02-09 16:58:09 +01:00
r-vdp
12de1b3a38
fwupd: 1.9.12 -> 1.9.13 
Changelog: https://github.com/fwupd/fwupd/releases/tag/1.9.13
 2024-02-09 16:45:09 +01:00
h7x4
39a779e269
treewide: use formats.hocon 2024-02-09 16:40:22 +01:00
Vincent Haupert
35df23c07d nixos/github-runners: set DynamicUser=false if user not null 2024-02-09 16:19:23 +01:00
Vincent Haupert
3f13f8d85e nixos/github-runners: align nodeRuntimes option with package 
The `github-runner` package only supports `nodejs_20` since `nodejs_16`
was removed in a2976db919.

It still makes sense to keep the `nodeRuntimes` option as this is
probably not the last Node.js we'll deprecate with at least some grace
period.
 2024-02-09 16:19:23 +01:00
Vincent Haupert
782b164523 nixos/github-runners: rework name default 2024-02-09 16:19:19 +01:00
Martin Weinelt
91d9c159da
nixos/matrix-synapse: fix recursive filtering of null values 
Using `filterAttrsRecursive` is not sufficient to account for a nested
attribute set with list values, like used for listeners.
 2024-02-09 16:05:05 +01:00
Martin Weinelt
143d266f0d
nixos/matrix-synapse: add UNIX domain socket listener support 
Exposes two options, `path` and `mode`, to configure the location and
permissions on the socket file.

The `mode` needs to be specified as string in octal and will be converted
into a decimal integer, so it correctly passes through the YAML parser
and arrives at the `os.chmod` call in the Twisted codebase. What a fun
detour.

Adds an assertion, that either `path` or `bind_addresses` and `port` are
configured on every listener.

Migrates the default replication listener of the main instance to a UNIX
domain socket, because it is more efficient.

Introduces the `enableRegistrationScript` option, to gracefully disable
the user registration script, when the client listener listens on a UNIX
domain socket, which is something the script does not support.
 2024-02-09 16:05:05 +01:00