Commit Graph

30410 Commits

Author SHA1 Message Date
Sandro Jäckel
8db512dae8 nixos/nginx: update ciphers list 2024-04-22 23:08:14 +10:00
Adam Stephens
f171f4ffd4
nixos/lxc: add package option and use for incus/lxd 2024-04-22 08:31:05 -04:00
Maximilian Bosch
2ee96a1738
nixos: fix manual build
`mdDoc` is deprecated!
2024-04-21 23:28:46 +02:00
Maximilian Bosch
7bb471b3e8
nixos/roundcube: use php 8.3
Upstream claims that 1.6 works fine with PHP 8.3[1]. Also PHP 8.1 is in
the security-only phase already, so we'll need to change sooner or later
anyways.

[1] https://github.com/roundcube/roundcubemail/issues/9339
2024-04-21 23:18:41 +02:00
Pol Dellaiera
95d8be4d3c
Merge pull request #301514 from r-vdp/nftables-rpfilter-extra-rules
nixos/firewall-nftables: allow adding additional rules to the rpfilter chain
2024-04-21 23:02:01 +02:00
Sandro
9edb990e0e
Merge pull request #295261 from SuperSandro2000/pretalx-media
nixos/pretalx: fix /media/ nginx location block
2024-04-21 22:45:17 +02:00
Jörg Thalheim
d285a49ffa
Merge pull request #305637 from schra/fix-grub-device
digital-ocean: revert "make it easier to use disko"
2024-04-21 22:22:58 +02:00
Sandro
04a3a2a8fe
Merge pull request #260962 from lunik1/inadyn-module
nixos/inadyn: init
2024-04-21 21:38:22 +02:00
Basti
19081514c2
Merge pull request #304608 from tmuehlbacher/fix-fzf-bash-completions
nixos/fzf: fix bash with `fuzzyCompletion`
2024-04-21 18:37:01 +00:00
Thomas Mühlbacher
dd64d62858 nixos/fzf: fix bash with fuzzyCompletion
put all of fzf initialization after the bash-completions initialization
in bashrc, as the upstream project suggests in
https://github.com/junegunn/fzf/issues/72

Fixes: #303195
2024-04-21 20:33:03 +02:00
Sandro
a3739c2563
Merge pull request #303224 from 0z13/oauth2_proxy-add-issuer-url
nixos/oauth2_proxy: add oidc-issuer-url flag
2024-04-21 19:49:59 +02:00
pennae
67dfd15302
Merge pull request #305767 from emilylange/nixos-manual-abort-on-warn
nixos/manual: apply `documentation.nixos.options.warningsAreErrors` to nix eval as well
2024-04-21 18:56:54 +02:00
Julien Malka
7a85b7bc35
Merge pull request #304334 from JulienMalka/limesurvey-package
nixos/limesurvey: allow package to be customized
2024-04-21 18:53:26 +02:00
emilylange
2872e10333
nixos/manual: apply cfg.warningsAreErrors to nix eval as well
This change makes `baseOptionsJSON` (`lazy-option.json`) take
our existing `documentation.nixos.options.warningsAreErrors` option into
account to then set the `NIX_ABORT_ON_WARN` environment variable within
its build sandbox accordingly.

Given `documentation.nixos.options.warningsAreErrors` default to true,
our nixpkgs CI check that builds the NixOS manual for each PR, will now
fail when something raises a warning, e.g. as part of the `lib.mdDoc`
deprecation.

This should prevent new PRs with lib.mdDoc from getting merged.

Previously, the manual would build successfully, even if an eval warning
was raised.
2024-04-21 18:01:26 +02:00
Victor Engmark
c11815167f nixos/duosec: Split mkdir mode into chmod command for clarity
As recommended by ShellCheck
<https://github.com/koalaman/shellcheck/wiki/SC2174>.
2024-04-22 01:40:55 +10:00
Weijia Wang
d9ad2e5a1a
Merge pull request #305379 from stuebinm/fcast-receiver-mdDoc
nixos/fcast-receiver: remove uses of lib.mdDoc
2024-04-21 17:19:33 +02:00
Michele Guerini Rocco
8b93a430dc
Merge pull request #305689 from rnhmjoj/pr-fix-wpa-secrets
nixos/wireless: correctly handle secrets containing &
2024-04-21 16:07:42 +02:00
Michele Guerini Rocco
23fc571cc3
Merge pull request #305649 from rnhmjoj/pr-fix-wpa-aux
nixos/wireless: create empty config for imperative setup
2024-04-21 16:06:57 +02:00
Preston Hunt
b87790536d nixos/greenclip: restart daemon if it exits 2024-04-21 23:58:10 +10:00
André Schröder
168793f151 digital-ocean: revert "make it easier to use disko"
This reverts parts of commit d87c4e1a72 from @Mic92

After switching from nixos-23.11 to nixos-unstable, I got the following error:

```
$ nixos-rebuild switch --flake nixos/#digitalocean
...
error:
Failed assertions:
- You must set the option ‘boot.loader.grub.devices’ or 'boot.loader.grub.mirroredBoots' to make the system bootable.
```

In my nixos config I don't set boot.loader.grub.devices or boot.loader.grub.mirroredBoots explicitly.

It seems like the values are not really defaulted via mkDefault? I am still relatively new to Nix, not sure how to fix this properly, so I am proposing to revert this change.
2024-04-21 11:36:17 +02:00
rnhmjoj
89a1bde018
nixos/wireless: correctly handle secrets containing &
In the replacement arg of gsub() the & symbol is a special character
that need to be escaped. To avoid this, and further issues due to the
variable name possibly being interpreted as a regex, we do a normal
substring replacement.

This fixes issues #279803.
2024-04-21 09:58:26 +02:00
rnhmjoj
4fa107f1c9
nixos/wireless: create empty config for imperative setup
If allowAuxiliaryImperativeNetworks is enabled, the wpa_supplicant
daemon complains fails to start if /etc/wpa_supplicant.conf does not
exist. As this can be created using wpa_cli (or similar) later, it
shouldn't matter, so let's create an empty one.

This fixes issues #157537, #299466.
2024-04-21 02:10:32 +02:00
Weijia Wang
20e0c45c7a
Merge pull request #304527 from atorres1985-contrib/earlyoom
earlyoom: 1.7 -> 1.8
2024-04-20 23:06:06 +02:00
Sandro
5bfe2b6964
Merge pull request #294641 from devusb/sunshine-module
nixos/sunshine: init
2024-04-20 21:32:50 +02:00
Sandro
decb1678b6
Merge pull request #197193 from onny/manticore-service
nixos/manticore: init module
2024-04-20 20:31:03 +02:00
Bjørn Forsman
c7ab550bbc nixos/deconz: fix curl redirect option in postStart
It should be curl -L (follow redirects), not curl -l (FTP directory
listing option). I know because it's my mistake.

Fixes: d4b989cafc ("nixos/deconz: delay signalling service readiness until it's actually up")
2024-04-20 20:24:39 +02:00
Pol Dellaiera
e540698524
Merge pull request #302136 from savyajha/firefly-iii
firefly-iii: init at 6.1.13, nixos/firefly-iii: init
2024-04-20 13:56:08 +02:00
Ryan Lahfa
21bd30ea2f
Merge pull request #247118 from Tom-Hubrecht/netbird-server
nixos/netbird-server: init module
2024-04-20 11:21:10 +02:00
Pol Dellaiera
31805d0367
Merge pull request #305076 from abysssol/ollama-sandbox
nixos/ollama: add options to bypass sandboxing
2024-04-20 10:49:28 +02:00
stuebinm
5cbfb939e5 nixos/fcast-receiver: remove uses of lib.mdDoc 2024-04-19 21:39:02 +02:00
José Romildo
9b7f278b92 nixos/lxqt: use mkDefault to enable the lxqt xdg portal 2024-04-19 14:39:01 -03:00
Martin Weinelt
666b73468d
Merge pull request #304373 from SuperSandro2000/knot-settings
nixos/knot: use module system to combine settings option
2024-04-19 17:26:53 +02:00
Anderson Torres
cef01a232d services.earlyoom: set package option
Also add AndersonTorres as maintainer.
2024-04-19 09:58:27 -03:00
Leona Maroni
3905a63bdc
Merge pull request #305267 from e1mo/paperless-always-eng
nixos/paperless: Always buidl tesseract with english
2024-04-19 12:07:02 +02:00
Bruno BELANYI
5d8f1c0172
Merge pull request #297805 from ambroisie/podgrab-user
nixos/podgrab: add user/group/dataDirectory options
2024-04-19 10:08:04 +01:00
e1mo
f0721f3779
nixos/paperless: Always buidl tesseract with english
With the changes introduced in #303388 tesseract would only be compiled
with the languages defined in `PAPERLESS_OCR_LANGUAGE`. However, english
is always required, making tesseract fail to build when only non-english
languages are defined in tesseract:

```
eng.traineddata must be present in tessdata for Tesseract to work
```
2024-04-19 10:47:54 +02:00
Rick van Schijndel
e00a40a257
Merge pull request #298680 from gvolpe/lib/transposeMap
lib/attrsets: add mapCartesianProduct function
2024-04-19 08:26:09 +02:00
Mynacol
774cd77f2b nixos/akkoma: Fix media proxy URLs after upgrade
The upgrade of akkoma to 3.12.1 required to specify media upload and
media proxy URLs by default. The default value for media proxy was
wrong, leading to broken `example.com/media/proxy/[...]` URLs.

As descried in the [upgrade guide](https://meta.akkoma.dev/t/akkoma-stable-2024-03-securer-i-barely-know-her/681#explicit-upload-and-media-proxy-domains-5),
the media proxy `base_url` should be set to `https://example.com`
(without a path component). The suffix already contains `proxy/[...]`,
which gives the expected URLs.
2024-04-19 00:06:59 +02:00
nat
af65b87b23
nixos/malloc: add graphene-hardened-light 2024-04-18 23:19:46 +02:00
Weijia Wang
5448017c98
Merge pull request #304880 from OPNA2608/fix/lomiri/network-indicator-work
lomiri.lomiri-network-indicator: Make it work, add it to Lomiri module
2024-04-18 18:57:56 +02:00
Bruno BELANYI
65251f102d nixos/podgrab: add 'dataDirectory' option 2024-04-18 16:43:06 +00:00
Adam C. Stephens
67b5379607
Merge pull request #304919 from adamcstephens/lxd/cpu-hotplug
nixos/lxd-virtual-machine: enable CPU hotplug for x86_64
2024-04-18 11:55:34 -04:00
Jonathan Zielinski
87bbc5fbbe nixos/oauth2_proxy: add oidc-issuer-url flag 2024-04-18 15:20:53 +00:00
abysssol
552eb75964 nixos/ollama: add options to bypass sandboxing 2024-04-18 10:52:20 -04:00
Adam Stephens
76c69af624
nixos/lxd-virtual-machine: enable CPU hotplug for x86 VMs 2024-04-18 10:36:55 -04:00
Sandro
84d341cf55
Merge pull request #275541 from SuperSandro2000/oauth2-proxy-fix-paths 2024-04-18 16:00:42 +02:00
Tom Hubrecht
6d91c95fce nixos/netbird-server: init module 2024-04-18 15:33:18 +02:00
Sandro
f417891699
Merge pull request #293954 from Dan-Theriault/refactor-tailscale-auth 2024-04-18 15:14:01 +02:00
Lily Foster
59742f6f72
Merge pull request #292472 from Janik-Haag/networkmanager-tests
nixosTests.networking: refactor and add NetworkManager support
2024-04-18 06:38:37 -04:00
Peder Bergebakken Sundt
2cf972b603
Merge pull request #298563 from Yarny0/tsm-client-update
tsm-client: 8.1.21.0 -> 8.1.22.0
2024-04-18 12:09:50 +02:00
Sarah Brofeldt
1cf797590b
Merge pull request #301815 from cafkafk/docker-registry-configFile
nixos/dockerRegistry: add `configFile` option
2024-04-18 10:08:39 +02:00
Atemu
3bdc0e7715
Merge pull request #304810 from ju1m/dnscrypt-proxy2
nixos/dnscrypt-proxy2: fix cross-compiling
2024-04-18 09:04:41 +02:00
Christina Sørensen
d5851d5676
nixos/dockerRegistry: add configFile option
defaultText based on how nixos/modules/services/development/athens.nix
does it.

Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-04-18 06:11:06 +02:00
Peder Bergebakken Sundt
3f1bb546b5
Merge pull request #299762 from autrimpo/gonic-0.16.3
gonic: 0.15.2 -> 0.16.4
2024-04-18 02:01:35 +02:00
Nick Cao
217dd89ebe
Merge pull request #276818 from SuperSandro2000/variables-allow-int
nixos/shells-environment: allow int and float in environment variables
2024-04-17 19:47:26 -04:00
Michal Koutenský
759812cc34 nixos/gonic: allow access to playlists 2024-04-18 00:18:43 +02:00
Sandro
7e02555456
Merge pull request #304642 from erictapen/nginx-resolver-ipv4
nixos/nginx: allow for resolving IPv6 addresses only
2024-04-18 00:03:16 +02:00
Sandro Jäckel
a911604762
nixos/oauth2-proxy-nginx: lift auth_request to http block
With this change now all location blocks are protected by oauth2-proxy
and not only /
2024-04-17 23:11:49 +02:00
Sandro
3814255973
Merge pull request #300995 from SuperSandro2000/udev-nixos-wsl
nixos/udev: make more NixOS WSL friendly
2024-04-17 22:39:10 +02:00
Sandro Jäckel
c5371710de
nixos/shells-environment: allow int and float in environment variables 2024-04-17 22:36:19 +02:00
Bjørn Forsman
d4b989cafc nixos/deconz: delay signalling service readiness until it's actually up
Fixes test flakiness (`nix-build -A nixosTests.deconz`).
2024-04-17 22:32:15 +02:00
Sandro
1166097197
Merge pull request #302375 from SebastianWendel/init-prometheus-dnssec-exporter
nixos/prometheus-dnssec-exporter: init
2024-04-17 21:48:59 +02:00
Felix Bühler
671372c8ed
Merge pull request #304052 from mattchrist/freshrss-authtype-none
nixos/freshrss: fix startup when authType = "none"
2024-04-17 21:46:52 +02:00
Sandro
dd1ddc55ba
Merge pull request #283513 from YMSTNT/init-fcast
fcast-receiver: init at 1.0.14; nixos/fcast-receiver: init module
2024-04-17 21:46:38 +02:00
Acid Bong
418cc44106
nixos/soundmodem: drop lib.mdDoc, use package option everywhere (#304811)
- Fixed the `systemPackages` definition: it contained just the package
  name without preceding `pkgs`
- Removed `lib.mdDoc` usage in accordance with #303841
2024-04-17 21:45:01 +02:00
OPNA2608
dda8bfd421 nixos/lomiri: Add network indicator
It heavily depends on NetworkManager, so enable it by default.
2024-04-17 21:34:57 +02:00
Janik H.
8612ed1ee9
nixos/networkmanager: change config generation to use the ini generator 2024-04-17 21:20:11 +02:00
nikstur
5629a63379
Merge pull request #304530 from blitz/autologin
Fix services.xserver.displayManager Warnings for VBox Appliance
2024-04-17 18:02:20 +02:00
Julien Moutinho
6fd2d4b541 nixos/dnscrypt-proxy2: fix cross-compiling 2024-04-17 16:41:51 +02:00
Adam C. Stephens
95db6c67d7
Merge pull request #303149 from emilylange/forgejo-test-forgejo-actions
nixos/tests/forgejo: refactor and test Forgejo Actions workflow, nixos/gitea-actions-runner: set the `$HOME` environment variable
2024-04-17 08:27:13 -04:00
Daniel Sidhion
d84b5d7735
Merge pull request #304304 from fricklerhandwerk/link-nixpkgs-docs
doc: link to Nixpkgs manual for global configuration options
2024-04-17 04:54:39 -07:00
Pascal Wittmann
6ae4216336
Merge pull request #303890 from oluceps/ss-module
nixos/shadowsocks: ensure password be set
2024-04-17 11:17:23 +02:00
Sandro
1501bf1129
Merge pull request #302656 from Stunkymonkey/soundmodem-dekstop-sudo 2024-04-17 10:48:13 +02:00
abysssol
f53ced0368 nixos/ollama: set service working directory to home 2024-04-17 03:07:00 -04:00
Sarah Brofeldt
ab7b278a52
Merge pull request #304205 from cafkafk/fix-281851
nixos/prometheus-redis-exporter: allow `AF_UNIX`
2024-04-17 07:57:43 +02:00
Christina Sørensen
1dcf30f141
nixos/prometheus-redis-exporter: allow AF_UNIX
Fixes: #271851

Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-04-17 07:17:07 +02:00
Dan Theriault
3cf6c4ddb3 nixos/tailscale-auth: init module
This additional module allows the tailscale auth proxy to be configured
independently of nginx. The tailscale auth proxy works with both caddy
and traefik. All prior nginx/tailscale-auth options are retained as
aliases.
2024-04-16 19:06:08 -04:00
Daniel Fullmer
68142254d2 nixos/zram: add compression algorithms to option enum
These options are available on a standard NixOS system, which can be
seeing by running `cat /sys/devices/virtual/block/zram0/comp_algorithm`.
2024-04-16 15:39:31 -07:00
Matt Christ
90e673b1b8 nixos/freshrss: fix startup when authType = "none"
Prior to this patch, FreshRSS fails to load with an initial
`authType = "none"` setting, instead providing an error:
"Error during context user init!"

To fix this, this patch changes the freshrss-config service to
setup the initial `defaultUser` when `authType = "none"`
is configured.
2024-04-16 16:48:41 -05:00
Kerstin Humm
d6e8934f38
nixos/nginx: allow for resolving IPv6 addresses only 2024-04-16 23:44:11 +02:00
Savyasachee Jha
7531099464 nixos/firefly-iii: init 2024-04-17 00:23:06 +05:30
Lily Foster
c92928fb0b
Merge pull request #268133 from NyCodeGHG/nixos/db-rest
nixos/db-rest: init
2024-04-16 10:26:41 -04:00
oluceps
c2c632ff31
nixos/shadowsocks: ensure password be set
Co-authored-by: Pascal Wittmann <mail@pascal-wittmann.de>
2024-04-16 13:34:08 +00:00
Christina Sørensen
8a1dbedde5
akkoma: make options work for 23.11 state
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-04-16 14:54:09 +02:00
Mario Rodas
0d661da33c
Merge pull request #299033 from SFrijters/urserver-3.13
urserver: 3.10.0.2467 -> 3.13.0.2505
2024-04-16 06:54:43 -05:00
Jonas Heinrich
cf52591a0a nixos/manticore: init module 2024-04-16 13:50:57 +02:00
Julian Stecklina
1f97715767 profiles/graphical:rename services.xserver.displayManager 2024-04-16 13:42:29 +02:00
Julian Stecklina
92415267c6 profiles/demo: rename services.xserver.displayManager 2024-04-16 13:42:02 +02:00
Marie Ramlow
8785ef0a2d nixos/db-rest: init 2024-04-16 10:42:02 +02:00
Jörg Thalheim
dac28df361
Merge pull request #304370 from SuperSandro2000/mediawiki-php
nixos/mediawiki: use the same php everywhere
2024-04-16 10:29:50 +02:00
Christoph Hrdinka
19dd20aa06
Merge pull request #299581 from Stunkymonkey/nsd-chmod-install
nixos/nsd: prefer 'install' over 'chmod'
2024-04-16 08:59:47 +02:00
Sandro Jäckel
490ba58dd7
nixos/knot: use module system to combine settings option 2024-04-15 23:19:45 +02:00
Sandro Jäckel
a6c356974a
nixos/mediawiki: use the same php everywhere
otherwise we might end up with eg: php 8.1 and php 8.2 mixed
2024-04-15 23:02:26 +02:00
Julien Malka
873db98d3d
nixos/limesurvey: allow package to be customized 2024-04-15 19:55:19 +02:00
Gabriel Volpe
d864c36d57
tree-wide: use mapCartesianProduct 2024-04-15 19:17:53 +02:00
K900
784330e275 treewide: nuke remaining mdDoc leftovers
bors when
2024-04-15 20:12:24 +03:00
superherointj
787dcb7ce8
Merge pull request #264808 from gmemstr/coder-environment
nixos/coder: add environment.extra and environment.file
2024-04-15 13:52:08 -03:00
Florian Klink
104f0b6183
Merge pull request #304117 from ifd3f/systemd-networkd-bridge-config
nixos/networkd: add [Bridge] section to netdev conf
2024-04-15 18:26:45 +03:00
Valentin Gagarin
e6057cfd59 doc: link to Nixpkgs manual for global configuration options
Co-authored-by: Dominic Mills <dominic.millz27@gmail.com>
2024-04-15 17:00:26 +02:00
éclairevoyant
3947220b3d
Merge pull request #294923 from viperML/nh-module
nixos/nh: init
2024-04-15 14:31:42 +00:00