Commit Graph

30447 Commits

Author SHA1 Message Date
nat-418
d24376448b
docs(conduit): update link to config docs 2024-04-24 09:11:03 +02:00
Vladimír Čunát
1b357187a9
Merge branch 'master' into staging-next 2024-04-24 08:22:34 +02:00
Lin Jian
8c6ccd9a8f
Merge pull request #305370 from stuebinm/docs-remove-emacs-docbook-section
nixos/emacs: remove docbook section in the documentation
2024-04-24 08:48:42 +08:00
stuebinm
5996290676 nixos/emacs: remove docbook section in emacs documentation
Since with the completion of the docbook migration) it seems unclear
what relevance editing xml in generall and docbook in particular with
Emacs still has to NixOS at all, and people interested in the topic
will presumably look to other resources elsewhere (e.g. to the nXML
mode's actual documenation).
2024-04-23 23:18:33 +02:00
Someone
7035968845
Merge pull request #290979 from ereslibre/cdi-add-nvidia-docker-1-directories
CDI: Add `mount-nvidia-binaries` and `mount-nvidia-docker-1-directories` options
2024-04-23 19:55:41 +00:00
github-actions[bot]
e50548dc95
Merge master into staging-next 2024-04-23 18:01:16 +00:00
Adam C. Stephens
d274696071
Merge pull request #306239 from mweinelt/incus-vtpm
nixos/incus: add support for software TPMs
2024-04-23 09:24:21 -04:00
Tom Fitzhenry
3fd9ef4b40 nixos/ssh: allow PrintMotd to be enabled 2024-04-23 22:53:09 +10:00
Tom Fitzhenry
2e51a2fd03 nixos/ssh: allow UsePAM to be disabled 2024-04-23 22:40:58 +10:00
github-actions[bot]
0c36ffa13e
Merge master into staging-next 2024-04-23 12:01:30 +00:00
Rafael Fernández López
de3ce5ffa7 nixos/nvidia-container-toolkit: add mount-nvidia-executables and mount-nvidia-docker-1-directories options
- `mount-nvidia-binaries`: this option allows users to avoid mounting
nvidia binaries on the container.

- `mount-nvidia-docker-1-directories`: this option allows users to
avoid mounting `/usr/local/nvidia/lib{,64}` on containers.
2024-04-23 12:31:45 +02:00
Rafael Fernández López
471ff2c33c nixos/nvidia-container-toolkit: rename from virtualisation.containers.cdi.dynamic.nvidia.enable
Add the NixOS option `hardware.nvidia-container-toolkit-cdi-generator.enable`.

This enables the ability to expose GPU's in containers for container
runtimes that support the Container Device Interface (CDI)

Remove `cdi.static` and `cdi.dynamic.nvidia.enable` attributes.
2024-04-23 12:26:00 +02:00
Jörg Thalheim
0b4cb020ff
Merge pull request #306076 from mrgiles/mediawiki_explicit_admin_username
mediawiki: update passwordfile description field
2024-04-23 12:16:29 +02:00
Martin Weinelt
8541ec6d85
nixos/incus: add support for software TPMs
Was previously broken due to a missing runtime dependency.

> Error: Failed to start device "vtpm": Failed to validate environment: Required tool 'swtpm' is missing
2024-04-23 12:04:14 +02:00
Florian Klink
5a2d4496d3
Merge pull request #297726 from r-vdp/systemd-unit-names
systemd: add a name option to all systemd units
2024-04-23 12:58:51 +03:00
Kyle Carberry
68a917dc64
nixos/coder: fix broken service by referencing proper env (#305993) 2024-04-23 06:06:25 -03:00
Vladimír Čunát
6162a4e3f9
Merge #291339: GNOME: 45 → 46
...into staging-next
2024-04-22 21:56:49 +02:00
Nanotwerp
33cafd77e7
nixos/gnome-remote-desktop: support gnome 46 features
Add package to environment.systemPackages, services.dbus.packages, create gnome-remote-desktop user and group (fixes for GNOME 46)

This adds the `g-r-d` package to environment.systemPackages (allowing the usage of the `grdctl` command along with enabling `g-r-d`'s polkit rule), makes its dbus-related files recognizable to dbus, and creates the `gnome-remote-desktop` user and group necessary for systemd's running of the `gnome-remote-desktop-daemon` with the `--system` subcommand and enabling Remote Login.
2024-04-22 21:11:26 +02:00
Bobby Rong
fae132c6e3
gnome-online-accounts-gtk: init at 3.50.1
https://github.com/xapp-project/gnome-online-accounts-gtk
2024-04-22 21:11:25 +02:00
Bobby Rong
617e0ee76f
gnome.gnome-remote-desktop: 45.1 → 46.0
https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/compare/45.1...46.0

In file included from ../src/grd-settings.c:28:
/nix/store/xxx-freerdp-3.4.0/lib/pkgconfig/../../include/freerdp3/freerdp/freerdp.h:25:10:
fatal error: winpr/stream.h: No such file or directory
   25 | #include <winpr/stream.h>
      |          ^~~~~~~~~~~~~~~~
compilation terminated.

Ugh. So stuff I am aware of here:

- In freerdp3.pc, winpr3 is in Requires.private.
- In https://github.com/FreeRDP/FreeRDP/blob/3.4.0/include/freerdp/freerdp.h#L25 <winpr/stream.h>
  is included.
- In GNOME/gnome-remote-desktop@d29909a
  <freerdp/freerdp.h> is included in src/grd-settings.c.
- We patched pkg-config in NixOS to not include Requires.private in --cflags according to
  mate-desktop/atril issue 351.
- According to https://gitlab.gnome.org/GNOME/gjs/-/issues/571, Requires.private is probably correct
  if no data types are exposed in public API.

So to fix this somewhere, if src/grd-settings.c has direct usage of winpr, we can PR to g-r-d declaring
the dep. If freerdp/freerdp.h exposes winpr data types we PR to freerdp and move winpr to Requires.
Probably someone can help me do the check, I am committing this simply to unbreak the build for now.

Changelog-Reviewed-By: Maxine Aubrey <max@ine.dev>
2024-04-22 21:10:54 +02:00
Bobby Rong
628e5732da
gnome.gnome-shell: 45.5 → 46.0
https://gitlab.gnome.org/GNOME/gnome-shell/-/compare/45.5...46.0

Remove gnome-shell.portal:
36b3a995eb

Port to gi-docgen:
4373a91911

Changelog-Reviewed-By: Maxine Aubrey <max@ine.dev>
2024-04-22 21:08:50 +02:00
Marcelo Giles
ac259c3a59
mediawiki: update passwordfile description field 2024-04-22 11:02:52 -07:00
github-actions[bot]
5cc1b6ed0f
Merge staging-next into staging 2024-04-22 18:01:30 +00:00
misuzu
1c99cea684 castopod: remove misuzu from maintainers 2024-04-22 19:19:48 +03:00
misuzu
4146e6ea38 gotosocial: remove misuzu from maintainers 2024-04-22 19:19:01 +03:00
Maximilian Bosch
e8e9c5c3b1
Merge pull request #305837 from Ma27/roundcube-php83
nixos/roundcube: use php 8.3
2024-04-22 13:43:17 +00:00
Sandro Jäckel
8db512dae8 nixos/nginx: update ciphers list 2024-04-22 23:08:14 +10:00
Adam Stephens
f171f4ffd4
nixos/lxc: add package option and use for incus/lxd 2024-04-22 08:31:05 -04:00
Vir Chaudhury
4ca92fb6ec nixos/isolate: init module 2024-04-22 10:19:09 +08:00
github-actions[bot]
9c035c4419
Merge staging-next into staging 2024-04-22 00:03:22 +00:00
Maximilian Bosch
2ee96a1738
nixos: fix manual build
`mdDoc` is deprecated!
2024-04-21 23:28:46 +02:00
Maximilian Bosch
7bb471b3e8
nixos/roundcube: use php 8.3
Upstream claims that 1.6 works fine with PHP 8.3[1]. Also PHP 8.1 is in
the security-only phase already, so we'll need to change sooner or later
anyways.

[1] https://github.com/roundcube/roundcubemail/issues/9339
2024-04-21 23:18:41 +02:00
Pol Dellaiera
95d8be4d3c
Merge pull request #301514 from r-vdp/nftables-rpfilter-extra-rules
nixos/firewall-nftables: allow adding additional rules to the rpfilter chain
2024-04-21 23:02:01 +02:00
Sandro
9edb990e0e
Merge pull request #295261 from SuperSandro2000/pretalx-media
nixos/pretalx: fix /media/ nginx location block
2024-04-21 22:45:17 +02:00
Jörg Thalheim
d285a49ffa
Merge pull request #305637 from schra/fix-grub-device
digital-ocean: revert "make it easier to use disko"
2024-04-21 22:22:58 +02:00
Sandro
04a3a2a8fe
Merge pull request #260962 from lunik1/inadyn-module
nixos/inadyn: init
2024-04-21 21:38:22 +02:00
Basti
19081514c2
Merge pull request #304608 from tmuehlbacher/fix-fzf-bash-completions
nixos/fzf: fix bash with `fuzzyCompletion`
2024-04-21 18:37:01 +00:00
Thomas Mühlbacher
dd64d62858 nixos/fzf: fix bash with fuzzyCompletion
put all of fzf initialization after the bash-completions initialization
in bashrc, as the upstream project suggests in
https://github.com/junegunn/fzf/issues/72

Fixes: #303195
2024-04-21 20:33:03 +02:00
github-actions[bot]
3fc84a9b46
Merge staging-next into staging 2024-04-21 18:01:29 +00:00
Sandro
a3739c2563
Merge pull request #303224 from 0z13/oauth2_proxy-add-issuer-url
nixos/oauth2_proxy: add oidc-issuer-url flag
2024-04-21 19:49:59 +02:00
pennae
67dfd15302
Merge pull request #305767 from emilylange/nixos-manual-abort-on-warn
nixos/manual: apply `documentation.nixos.options.warningsAreErrors` to nix eval as well
2024-04-21 18:56:54 +02:00
Julien Malka
7a85b7bc35
Merge pull request #304334 from JulienMalka/limesurvey-package
nixos/limesurvey: allow package to be customized
2024-04-21 18:53:26 +02:00
emilylange
2872e10333
nixos/manual: apply cfg.warningsAreErrors to nix eval as well
This change makes `baseOptionsJSON` (`lazy-option.json`) take
our existing `documentation.nixos.options.warningsAreErrors` option into
account to then set the `NIX_ABORT_ON_WARN` environment variable within
its build sandbox accordingly.

Given `documentation.nixos.options.warningsAreErrors` default to true,
our nixpkgs CI check that builds the NixOS manual for each PR, will now
fail when something raises a warning, e.g. as part of the `lib.mdDoc`
deprecation.

This should prevent new PRs with lib.mdDoc from getting merged.

Previously, the manual would build successfully, even if an eval warning
was raised.
2024-04-21 18:01:26 +02:00
Victor Engmark
c11815167f nixos/duosec: Split mkdir mode into chmod command for clarity
As recommended by ShellCheck
<https://github.com/koalaman/shellcheck/wiki/SC2174>.
2024-04-22 01:40:55 +10:00
Weijia Wang
d9ad2e5a1a
Merge pull request #305379 from stuebinm/fcast-receiver-mdDoc
nixos/fcast-receiver: remove uses of lib.mdDoc
2024-04-21 17:19:33 +02:00
Michele Guerini Rocco
8b93a430dc
Merge pull request #305689 from rnhmjoj/pr-fix-wpa-secrets
nixos/wireless: correctly handle secrets containing &
2024-04-21 16:07:42 +02:00
Michele Guerini Rocco
23fc571cc3
Merge pull request #305649 from rnhmjoj/pr-fix-wpa-aux
nixos/wireless: create empty config for imperative setup
2024-04-21 16:06:57 +02:00
Preston Hunt
b87790536d nixos/greenclip: restart daemon if it exits 2024-04-21 23:58:10 +10:00
André Schröder
168793f151 digital-ocean: revert "make it easier to use disko"
This reverts parts of commit d87c4e1a72 from @Mic92

After switching from nixos-23.11 to nixos-unstable, I got the following error:

```
$ nixos-rebuild switch --flake nixos/#digitalocean
...
error:
Failed assertions:
- You must set the option ‘boot.loader.grub.devices’ or 'boot.loader.grub.mirroredBoots' to make the system bootable.
```

In my nixos config I don't set boot.loader.grub.devices or boot.loader.grub.mirroredBoots explicitly.

It seems like the values are not really defaulted via mkDefault? I am still relatively new to Nix, not sure how to fix this properly, so I am proposing to revert this change.
2024-04-21 11:36:17 +02:00
rnhmjoj
89a1bde018
nixos/wireless: correctly handle secrets containing &
In the replacement arg of gsub() the & symbol is a special character
that need to be escaped. To avoid this, and further issues due to the
variable name possibly being interpreted as a regex, we do a normal
substring replacement.

This fixes issues #279803.
2024-04-21 09:58:26 +02:00
rnhmjoj
4fa107f1c9
nixos/wireless: create empty config for imperative setup
If allowAuxiliaryImperativeNetworks is enabled, the wpa_supplicant
daemon complains fails to start if /etc/wpa_supplicant.conf does not
exist. As this can be created using wpa_cli (or similar) later, it
shouldn't matter, so let's create an empty one.

This fixes issues #157537, #299466.
2024-04-21 02:10:32 +02:00
github-actions[bot]
2f68e54184
Merge staging-next into staging 2024-04-21 00:02:52 +00:00
Weijia Wang
20e0c45c7a
Merge pull request #304527 from atorres1985-contrib/earlyoom
earlyoom: 1.7 -> 1.8
2024-04-20 23:06:06 +02:00
Sandro
5bfe2b6964
Merge pull request #294641 from devusb/sunshine-module
nixos/sunshine: init
2024-04-20 21:32:50 +02:00
Sandro
decb1678b6
Merge pull request #197193 from onny/manticore-service
nixos/manticore: init module
2024-04-20 20:31:03 +02:00
Bjørn Forsman
c7ab550bbc nixos/deconz: fix curl redirect option in postStart
It should be curl -L (follow redirects), not curl -l (FTP directory
listing option). I know because it's my mistake.

Fixes: d4b989cafc ("nixos/deconz: delay signalling service readiness until it's actually up")
2024-04-20 20:24:39 +02:00
github-actions[bot]
3aa8ef1d54
Merge staging-next into staging 2024-04-20 12:01:42 +00:00
Pol Dellaiera
e540698524
Merge pull request #302136 from savyajha/firefly-iii
firefly-iii: init at 6.1.13, nixos/firefly-iii: init
2024-04-20 13:56:08 +02:00
Ryan Lahfa
21bd30ea2f
Merge pull request #247118 from Tom-Hubrecht/netbird-server
nixos/netbird-server: init module
2024-04-20 11:21:10 +02:00
Pol Dellaiera
31805d0367
Merge pull request #305076 from abysssol/ollama-sandbox
nixos/ollama: add options to bypass sandboxing
2024-04-20 10:49:28 +02:00
github-actions[bot]
31e54e481c
Merge staging-next into staging 2024-04-20 00:02:38 +00:00
stuebinm
5cbfb939e5 nixos/fcast-receiver: remove uses of lib.mdDoc 2024-04-19 21:39:02 +02:00
github-actions[bot]
dd424ee92c
Merge staging-next into staging 2024-04-19 18:01:26 +00:00
José Romildo
9b7f278b92 nixos/lxqt: use mkDefault to enable the lxqt xdg portal 2024-04-19 14:39:01 -03:00
Martin Weinelt
666b73468d
Merge pull request #304373 from SuperSandro2000/knot-settings
nixos/knot: use module system to combine settings option
2024-04-19 17:26:53 +02:00
Maximilian Bosch
cba6af761a
Merge pull request #293996 from wolfgangwalther/postgresql-cleanup
postgresql: more cleanup
2024-04-19 13:53:20 +00:00
Anderson Torres
cef01a232d services.earlyoom: set package option
Also add AndersonTorres as maintainer.
2024-04-19 09:58:27 -03:00
Leona Maroni
3905a63bdc
Merge pull request #305267 from e1mo/paperless-always-eng
nixos/paperless: Always buidl tesseract with english
2024-04-19 12:07:02 +02:00
Bruno BELANYI
5d8f1c0172
Merge pull request #297805 from ambroisie/podgrab-user
nixos/podgrab: add user/group/dataDirectory options
2024-04-19 10:08:04 +01:00
e1mo
f0721f3779
nixos/paperless: Always buidl tesseract with english
With the changes introduced in #303388 tesseract would only be compiled
with the languages defined in `PAPERLESS_OCR_LANGUAGE`. However, english
is always required, making tesseract fail to build when only non-english
languages are defined in tesseract:

```
eng.traineddata must be present in tessdata for Tesseract to work
```
2024-04-19 10:47:54 +02:00
Rick van Schijndel
e00a40a257
Merge pull request #298680 from gvolpe/lib/transposeMap
lib/attrsets: add mapCartesianProduct function
2024-04-19 08:26:09 +02:00
Mynacol
774cd77f2b nixos/akkoma: Fix media proxy URLs after upgrade
The upgrade of akkoma to 3.12.1 required to specify media upload and
media proxy URLs by default. The default value for media proxy was
wrong, leading to broken `example.com/media/proxy/[...]` URLs.

As descried in the [upgrade guide](https://meta.akkoma.dev/t/akkoma-stable-2024-03-securer-i-barely-know-her/681#explicit-upload-and-media-proxy-domains-5),
the media proxy `base_url` should be set to `https://example.com`
(without a path component). The suffix already contains `proxy/[...]`,
which gives the expected URLs.
2024-04-19 00:06:59 +02:00
nat
af65b87b23
nixos/malloc: add graphene-hardened-light 2024-04-18 23:19:46 +02:00
Weijia Wang
5448017c98
Merge pull request #304880 from OPNA2608/fix/lomiri/network-indicator-work
lomiri.lomiri-network-indicator: Make it work, add it to Lomiri module
2024-04-18 18:57:56 +02:00
Bruno BELANYI
65251f102d nixos/podgrab: add 'dataDirectory' option 2024-04-18 16:43:06 +00:00
Adam C. Stephens
67b5379607
Merge pull request #304919 from adamcstephens/lxd/cpu-hotplug
nixos/lxd-virtual-machine: enable CPU hotplug for x86_64
2024-04-18 11:55:34 -04:00
Jonathan Zielinski
87bbc5fbbe nixos/oauth2_proxy: add oidc-issuer-url flag 2024-04-18 15:20:53 +00:00
abysssol
552eb75964 nixos/ollama: add options to bypass sandboxing 2024-04-18 10:52:20 -04:00
Adam Stephens
76c69af624
nixos/lxd-virtual-machine: enable CPU hotplug for x86 VMs 2024-04-18 10:36:55 -04:00
Sandro
84d341cf55
Merge pull request #275541 from SuperSandro2000/oauth2-proxy-fix-paths 2024-04-18 16:00:42 +02:00
Tom Hubrecht
6d91c95fce nixos/netbird-server: init module 2024-04-18 15:33:18 +02:00
Sandro
f417891699
Merge pull request #293954 from Dan-Theriault/refactor-tailscale-auth 2024-04-18 15:14:01 +02:00
Lily Foster
59742f6f72
Merge pull request #292472 from Janik-Haag/networkmanager-tests
nixosTests.networking: refactor and add NetworkManager support
2024-04-18 06:38:37 -04:00
Peder Bergebakken Sundt
2cf972b603
Merge pull request #298563 from Yarny0/tsm-client-update
tsm-client: 8.1.21.0 -> 8.1.22.0
2024-04-18 12:09:50 +02:00
Sarah Brofeldt
1cf797590b
Merge pull request #301815 from cafkafk/docker-registry-configFile
nixos/dockerRegistry: add `configFile` option
2024-04-18 10:08:39 +02:00
Atemu
3bdc0e7715
Merge pull request #304810 from ju1m/dnscrypt-proxy2
nixos/dnscrypt-proxy2: fix cross-compiling
2024-04-18 09:04:41 +02:00
Christina Sørensen
d5851d5676
nixos/dockerRegistry: add configFile option
defaultText based on how nixos/modules/services/development/athens.nix
does it.

Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-04-18 06:11:06 +02:00
Peder Bergebakken Sundt
3f1bb546b5
Merge pull request #299762 from autrimpo/gonic-0.16.3
gonic: 0.15.2 -> 0.16.4
2024-04-18 02:01:35 +02:00
Nick Cao
217dd89ebe
Merge pull request #276818 from SuperSandro2000/variables-allow-int
nixos/shells-environment: allow int and float in environment variables
2024-04-17 19:47:26 -04:00
Michal Koutenský
759812cc34 nixos/gonic: allow access to playlists 2024-04-18 00:18:43 +02:00
Sandro
7e02555456
Merge pull request #304642 from erictapen/nginx-resolver-ipv4
nixos/nginx: allow for resolving IPv6 addresses only
2024-04-18 00:03:16 +02:00
Sandro Jäckel
cb8b6a5d00
treewide: reanme renamed libinput options 2024-04-17 23:34:07 +02:00
Sandro Jäckel
810558a46b
nixos/libinput: move out of xserver 2024-04-17 23:34:07 +02:00
Sandro Jäckel
a911604762
nixos/oauth2-proxy-nginx: lift auth_request to http block
With this change now all location blocks are protected by oauth2-proxy
and not only /
2024-04-17 23:11:49 +02:00
Sandro
3814255973
Merge pull request #300995 from SuperSandro2000/udev-nixos-wsl
nixos/udev: make more NixOS WSL friendly
2024-04-17 22:39:10 +02:00
Sandro Jäckel
c5371710de
nixos/shells-environment: allow int and float in environment variables 2024-04-17 22:36:19 +02:00
Bjørn Forsman
d4b989cafc nixos/deconz: delay signalling service readiness until it's actually up
Fixes test flakiness (`nix-build -A nixosTests.deconz`).
2024-04-17 22:32:15 +02:00
Sandro
1166097197
Merge pull request #302375 from SebastianWendel/init-prometheus-dnssec-exporter
nixos/prometheus-dnssec-exporter: init
2024-04-17 21:48:59 +02:00
Felix Bühler
671372c8ed
Merge pull request #304052 from mattchrist/freshrss-authtype-none
nixos/freshrss: fix startup when authType = "none"
2024-04-17 21:46:52 +02:00
Sandro
dd1ddc55ba
Merge pull request #283513 from YMSTNT/init-fcast
fcast-receiver: init at 1.0.14; nixos/fcast-receiver: init module
2024-04-17 21:46:38 +02:00