colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
596,720 Commits 125 Branches 0 Tags 3.4 GiB
c9be2672ed
Commit Graph

18321 Commits

Author SHA1 Message Date
github-actions[bot]
93a73aa6cf
Merge staging-next into staging 2024-01-30 00:02:29 +00:00
Franz Pletz
3432be07e4
Merge pull request #278555 from leona-ya/kresd-port-only-regex 2024-01-30 00:41:53 +01:00
Bernardo Meurer
429a3accd9
Merge pull request #284800 from lovesegfault/fix-moonraker-warn 
nixos/moonraker: fix update_manager.enable_system_updates being [bool] and not bool
 2024-01-29 18:23:33 -05:00
Franz Pletz
da226d14bf
Merge pull request #284749 from 2xsaiko/outgoing/dovecot-fix-1 2024-01-30 00:17:12 +01:00
Marco Rebhan
522d660f25
nixos/dovecot: fix sieve script config generation 2024-01-29 19:42:55 +01:00
github-actions[bot]
6a27b0be74
Merge staging-next into staging 2024-01-29 18:01:37 +00:00
Bernardo Meurer
392b32b2af
nixos/moonraker: fix update_manager.enable_system_updates being [bool] and not bool 2024-01-29 11:31:12 -05:00
Pablo Andres Dealbera
bb40443e77 nixos/photoprism: use nsenter to call photoprism bin with correct UID and PID 2024-01-29 13:26:35 -03:00
Bobby Rong
850bac2305
Merge pull request #284633 from FedericoSchonborn/budgie-desktop-10.9 
Budgie Desktop 10.9
 2024-01-29 21:58:15 +08:00
Marco Rebhan
26e71b5a5b
nixos/dovecot: remove unused imports 2024-01-29 12:21:58 +01:00
Nick Cao
519ebe37e2
Merge pull request #283452 from SuperSandro2000/pcsclite-outputs 
pcsclite: move binaries, polkit, systemd files to out, move libraries to lib
 2024-01-28 21:19:51 -05:00
Felix Bühler
da47763cb8
Merge pull request #279384 from Stunkymonkey/recursive-pth-loader-normalize 
python311Packages.recursive-pth-loader: rename from recursivePthLoader
 2024-01-29 00:40:42 +01:00
Federico Damián Schonborn
0d209c6641
nixos/budgie: Replace gnome-session with budgie-session 
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
 2024-01-28 20:08:59 -03:00
Morgan Jones
1dc5eb13b0
nixos/armagetronad: add module with tests 2024-01-28 13:58:05 -08:00
Sandro Jäckel
3da096a5c3
pcsclite: move binaries, polkit, systemd files to out, move libraries to lib 
This should make the things related to the udev rules and binaries a lot
simpler and more expected.
 2024-01-28 19:31:54 +01:00
Sandro
263af58884
Merge pull request #284488 from Silver-Golden/master 
Bitwarden directory connector: fix bad preStart
 2024-01-28 19:18:10 +01:00
K900
499b9a5de0
Merge pull request #284562 from K900/lemmy-nginx-fix 
lemmy: fix nginx config generation
 2024-01-28 20:48:51 +03:00
Kerstin
45b1d68c35
Merge pull request #283981 from f2k1de/mastodon-too-many-open-files-fix 
mastodon: set LimitNOFILE
 2024-01-28 18:47:53 +01:00
ocfox
01e674ba90
nixos/transfer-sh: init 
Co-authored-by: Pablo Ovelleiro Corral <mail@pablo.tools>
 2024-01-29 00:44:35 +08:00
K900
c34a1d5135 lemmy: fix nginx config generation 2024-01-28 19:15:02 +03:00
Aaron Andersen
0ed21f3b09
Merge pull request #284122 from Stunkymonkey/zabbix-write-secret 
nixos/{zabbixServer,zabbixProxy}: prefer 'install' over 'mkdir/chmod/chown'
 2024-01-28 06:24:11 -08:00
nikstur
dff64f549e nixos/x11: remove leading slash from environment.etc path 
Even if the tools that assemble /etc can handle leading slashes, this
still is not correct. For example, you could have both /X11 and X11 in
environment.etc which makes overriding hard.
 2024-01-28 13:38:09 +01:00
Brendan Golden
fe59b6d24b
Bitwarden directory connector: fix bad preStart 2024-01-28 10:52:43 +00:00
Martin Weinelt
0deb00012d
Merge pull request #255707 from micahsoftdotexe/update-navidrome 
nixos/navidrome: accept DataFolder option
 2024-01-28 00:08:18 +01:00
Micah Tanner
7d9e3e510b nixos/navidrome: accept DataFolder option 2024-01-27 17:54:50 -05:00
WilliButz
3a00809390
nixos/prometheus-snmp-exporter: fix undefined logPrefix 
When I added `coerceConfigFile` based on the blackbox exporter module, I
did not notice the missing attribute definition.
 2024-01-27 20:59:41 +01:00
Sandro Jäckel
1af95a24c1
nixos/dhcpcd: link dhcpcd.conf to /etc/ to fix dhcpcd -k 2024-01-27 18:12:55 +01:00
Nick Cao
8138e47046
Merge pull request #284115 from jacekpoz/ratbagd-module 
nixos/ratbagd: add package option
 2024-01-27 11:12:55 -05:00
Sandro
8219e2c1bc
Merge pull request #279050 from SuperSandro2000/portunus-seedsettings 
nixos/portunus: add seedSettings option
 2024-01-27 16:08:41 +01:00
Will Fancher
2af1ee5bba
Merge pull request #259196 from liff/mod/systemd-lock-handler 
nixos/systemd-lock-handler: init with corresponding package at 2.4.2
 2024-01-27 06:13:38 -05:00
Maximilian Bosch
abd098fce8
Merge pull request #283972 from onny/nextcloud-settings 
nixos/nextcloud: Rename extraOptions to settings
 2024-01-27 11:01:23 +01:00
Olli Helenius
e103c5cfcf
nixos/systemd-lock-handler: init 2024-01-27 11:55:46 +02:00
K900
b5dc67dd94
Merge pull request #284130 from xNaxdy/fix-plasma5-mobilegear 
nixos/plasma5: fix plasmaMobileGear path
 2024-01-27 07:07:52 +03:00
Thomas Gerbet
117fd19a77
Merge pull request #276306 from ambroisie/aria2-rpc-secret-file 
nixos/aria2: implement 'rpcSecretFile'
 2024-01-27 00:46:56 +01:00
Naxdy
edc49b2e83
nixos/plasma5: fix plasmaMobileGear path 2024-01-26 23:52:49 +01:00
Yt
a759a579fb
Merge pull request #283447 from Munksgaard/livebook-fixes 
livebook: Use `mix release` to build instead of escript
 2024-01-26 22:14:08 +00:00
Felix Buehler
bdce5312c9 nixos/{zabbixServer,zabbixProxy}: prefer 'install' over 'mkdir/chmod/chown' 2024-01-26 23:10:57 +01:00
jacekpoz
49130d8bf7
nixos/ratbagd: add package option 2024-01-26 22:58:44 +01:00
Felix Buehler
4c9b5cb310 nixos/rabbitmq: prefer 'install' over 'mkdir/chmod/chown' 2024-01-26 22:56:28 +01:00
maxine
642317d03f
Merge pull request #283618 from SuperSandro2000/tailscale-resoleconf 
nixos/tailscale: make resolvconf package depending on enablement of module
 2024-01-26 22:41:14 +01:00
superherointj
cbe8e0c980 nixos/etcd: fix etcd category from misc to databases 2024-01-26 16:40:11 -03:00
superherointj
29d18e8f6f nixos/etcd: fixes etcd failing to start at boot and add openFirewall option 
Fixes etcd failing to start at boot for network and firewall not being ready and etcd peers being unavailable because of network/firewall

* configure etcd systemd unit to:

  - delay etcd start-up until network and firewall are ready
  - restart on failure and be always on

* add openFirewall option

  The official etcd ports are 2379 for client requests and 2380 for peer communication:
  https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.txt
  https://etcd.io/docs/v3.4/op-guide/configuration/
 2024-01-26 16:40:11 -03:00
Philip Munksgaard
1ee8e72834
livebook: Set KillMode=mixed 
This will gracefully shut down the service instead of resulting in errors like
this:

```
Jan 24 10:11:11 foo livebook[981676]: 10:11:11.922 [error] GenServer :disksup terminating
Jan 24 10:11:11 foo livebook[981676]: ** (stop) {:port_died, :normal}
Jan 24 10:11:11 foo livebook[981676]: Last message: {:EXIT, #Port<0.8>, :normal}
Jan 24 10:11:11 foo livebook[981676]: 10:11:11.922 [error] GenServer :memsup terminating
Jan 24 10:11:11 foo livebook[981676]: ** (stop) {:port_died, :normal}
```
 2024-01-26 20:19:49 +01:00
Philip Munksgaard
897d5670a3
livebook: Use mix release to build instead of escript 
The current build of livebook does not work with the new [Livebook
Teams](https://livebook.dev/teams/) features. The problem can be observed by
running the current version of livebook, adding a new team and going to the team
page. The process will crash and the team page will show a 500 error.

The base of the problem is that the escript build method is not officially
supported. This commit changes the livebook package to use the `mix release`
workflow, which is also the one used to build the official Docker container.

Unfortunately, the binary built with `mix release` does not support command line
arguments like the `escript` binary does. Instead, users need to pass in most of
the configuration as environment variables, as documented
[here](https://hexdocs.pm/livebook/readme.html#environment-variables). As a
result, this commit also changes the Livebook service to reflect this new way of
configuring Livebook.

Finally, the Livebook release configuration specifically excludes the
ERTS (Erlang Runtime System), which means that the resulting release cannot run
without Erlang installed.

I have tested the results (both of the package and the service) locally.
 2024-01-26 20:19:46 +01:00
Ryan Horiguchi
17243e6a84 nixos/esphome: add option to use ping to check online status of devices 2024-01-26 19:39:49 +01:00
Jonas Heinrich
e1c0d281b2 nixos/nextcloud: Rename extraOptions to settings 2024-01-26 14:22:49 +01:00
Isa
24930dadca mastodon: set LimitNOFILE 2024-01-26 12:30:57 +01:00
Lassulus
da25b2382d
Merge pull request #280373 from h7x4/treewide-use-new-tmpfiles-api 
treewide: use new tmpfiles API
 2024-01-26 10:47:18 +01:00
Aaron Jheng
096f6d6c00
prometheus-openvpn-exporter: remove 2024-01-26 14:37:05 +08:00
Robert Schütz
8433938f9b
Merge pull request #283617 from SuperSandro2000/headscale 
nixos/headscale: install package system wide
 2024-01-25 13:40:29 -08:00
Bruno BELANYI
d3a1465196 nixos/aria2: implement 'rpcSecretFile' 
Since this is supposed to be a secret, use a file path as an input
instead of making it part of the expression, which would expose it in
the nix store.
 2024-01-25 21:36:21 +00:00
Felix Buehler
d35003e302 python311Packages.recursive-pth-loader: rename from recursivePthLoader 2024-01-25 22:13:17 +01:00
maxine
066ccb996b
Merge pull request #282963 from NukaDuka/prometheus-pve-exporter-update 
prometheus-pve-exporter: 2.3.0 -> 3.2.1
 2024-01-25 21:17:19 +01:00
Ryan Lahfa
8cc42008aa
Merge pull request #274281 from RaitoBezarius/hebbot-module 
nixos/hebbot: init
 2024-01-25 20:33:02 +01:00
Ryan Lahfa
ae910a15e6
Merge pull request #281001 from RaitoBezarius/new-sieve-dovecot-api 
nixos/mail/dovecot2: re-introduce extra settings and rename `sieveScripts`
 2024-01-25 20:32:35 +01:00
Ryan Lahfa
6fe2736c6f
Merge pull request #246055 from Tom-Hubrecht/netbird 
nixos/netbird: Allow running multiple netbird networks in parallel
 2024-01-25 20:08:58 +01:00
Raito Bezarius
78bc60b8a4 nixos/hebbot: init 
This is a NixOS module to support TWIM-style Matrix bots.
 2024-01-25 18:27:33 +01:00
rnhmjoj
1a1b91b3b9
nixos/dnsdist: add options for dnscrypt 2024-01-25 18:25:40 +01:00
Tom Hubrecht
c2d822e6b0 nixos/netbird: Allow running multiple netbird networks in parallel 2024-01-25 17:25:59 +01:00
Raito Bezarius
3cb7823738 nixos/mail/dovecot2: warn about potential collision due to structured configuration 
Plugin configuration is pesky in dovecot2, let's warn about potential conflicts
in the module system by using a fancy regex.

This is only band-aid, this should be removed ASAP.

We clean up also a 21.05-era warning.
 2024-01-25 17:18:58 +01:00
Sandro Jäckel
922351ec86
nixos/tailscale: make resolvconf package depending on enablement of module 
If resolvconf is not enabled, trying to use it always fails because
/etc/resolvconf.conf contains an `exit 1`.
 2024-01-25 15:50:36 +01:00
Sandro Jäckel
9f395dae71
nixos/headscale: install package system wide 
this is required to confirm nodes and generally manage everything
 2024-01-24 23:00:54 +01:00
r-vdp
28ea07d4e3
fwupd: 1.9.11 -> 1.9.12 
The fwupd daemon refuses to start when there is an uefi_capsule key without any
values in the config file, so I modified the module to only include this
key when there are actually values that go inside.
 2024-01-24 20:29:01 +01:00
Vladimír Čunát
7f979aeb86
nixos/knot: allow specifying the clear section 
It was added in 3.3.4.  I'm not sure if it will be useful with NixOS
services, but I added it in the usual way anyway.
 2024-01-24 10:33:55 +01:00
a-n-n-a-l-e-e
18cc181b9b
Merge pull request #279511 from DanielSidhion/tigerbeetle-service 
nixos/tigerbeetle: init module
 2024-01-23 23:13:54 -08:00
h7x4
f5d513c573
treewide: use new tmpfiles api 2024-01-24 05:13:17 +01:00
ppom
65544c693b
rustdesk-server: init module 2024-01-23 18:01:54 +01:00
Bruno BELANYI
70d0a6e547 nixos/pyload: init 2024-01-23 15:04:44 +00:00
Raito Bezarius
72e23635e6 nixos/mail/dovecot2: imapsieve.mailbox.*.causes is a list 
Otherwise, it's not possible to pass `COPY,APPEND` properly.
 2024-01-23 14:04:08 +01:00
Raito Bezarius
caf9e51e0f nixos/mail/dovecot2: re-introduce extra settings and rename sieveScripts 
https://github.com/NixOS/nixpkgs/pull/275031 introduced structured configuration
for the dovecot2 sieve plugin, by doing so, it broke SNM configuration doing Sieve configurations.

This attempts to fix up the public API to make it possible for SNM to pick up the pieces.
 2024-01-23 14:04:08 +01:00
Kartik Gokte
dde72e969e nixos/prometheus-pve-exporter: updated schema and options to v3.2.1 2024-01-23 11:19:37 +05:30
Brenton Simpson
f571033ce0 handheld-daemon: use kebab-case instead of camelCase for service name 2024-01-22 19:26:43 -08:00
Brenton Simpson
bcf9a24332 handheld-daemon: init at 0.2.7 2024-01-22 19:26:42 -08:00
Peder Bergebakken Sundt
76e9a3eafc
Merge pull request #272147 from SuperSandro2000/archisteamfarm 
nixos/archisteamfarm: don't use asf abbreviation for more clarity
 2024-01-22 22:57:04 +01:00
Ryan Lahfa
5b14fea3d6
Merge pull request #280405 from RaitoBezarius/keepalived-unicast 
nixos/networking/keepalived: do not emit `unicastPeers` when there are none
 2024-01-22 22:43:29 +01:00
Raito Bezarius
08c9562995 keepalived: add myself as a maintainer 
I will use this for a while, so… let's keep it tidy.
 2024-01-22 21:56:04 +01:00
Ryan Lahfa
32a6e224ae
Merge pull request #282929 from minijackson/netbox-3.7.1 
Netbox 3.7.1
 2024-01-22 20:52:54 +01:00
Robert Schütz
6de0d9293e
Revert "Dovecot: Do not include empty sieve_extensions and sieve_global_extensions" 2024-01-22 10:02:51 -08:00
nikstur
3ea482163b
Merge pull request #282320 from helsinki-systems/fix/nix-gc-unit-type 
nixos/nix-gc: Minor module fixups
 2024-01-22 17:49:18 +01:00
Minijackson
5d2370f800
netbox_3_5: remove 2024-01-22 16:31:45 +01:00
Minijackson
163fed297e
netbox: 3.6.9 -> 3.7.1 
Or another way to see it:

netbox_3_7: init at 3.7.1

Make NetBox 3.7 the default version if stateVersion >= 24.05,
switch upgrade test to test upgrade from 3.6 to 3.7,
remove clearcache command for >=3.7.0,
make reindex command mandatory
 2024-01-22 16:31:45 +01:00
Jörg Thalheim
372513f630 nixos/buildbot: don't require network-online.target 
The daemon setup itself only requires the firewall to be up.
Workers will connect itself as they can reach the master instance.
That's why we don't need an online target for buildbot to function.
 2024-01-22 12:54:42 +01:00
Linus Heckemann
18e5176621
Merge pull request #270727 from nikstur/nixos-perlless-activation 
Perlless Activation
 2024-01-22 10:11:44 +01:00
rht
cee68718db
hddfancontrol: Disable network access 2024-01-21 21:09:13 -05:00
rht
25181b596f
thinkfan: Disable network access 2024-01-21 21:09:01 -05:00
h7x4
5f5210aa20
Merge pull request #281606 from MarcelCoding/bird-no-auto-restart 
nixos/bird2: add option to disable auto reload
 2024-01-22 01:24:37 +01:00
Nick Cao
9969fb7ff4
Merge pull request #281904 from Stunkymonkey/ttyd-fix-leakage 
ttyd: add test & use systemd LoadCredential
 2024-01-21 14:48:40 -05:00
Bernardo Meurer
28ad748d40
Merge pull request #281845 from lovesegfault/fix-moonraker-warn 2024-01-21 14:09:00 -05:00
happysalada
f3b08ca5a6 nixos/clamav: fix network-online requires assert 2024-01-21 11:37:54 -05:00
Jonas Heinrich
58fcc2db9d
Merge pull request #282339 from marcusramberg/marcus/ollama_listen 
nixos/ollama: Add listenAddress
 2024-01-21 12:57:53 +01:00
Doron Behar
49e5ffd3a9
Merge pull request #235847 from doronbehar/nixos/taskserver-permissions 
nixos/taskserver: Enable cfg.group to read clients' certificates
 2024-01-21 09:32:07 +02:00
Morgan Jones
cdd95bd39c
nixos/nebula: default to port 0 for hosts other than lighthouse/relay 2024-01-20 19:29:32 -08:00
Sandro Jäckel
6d1d912716
nixos/archisteamfarm: drop with lib 2024-01-21 02:14:02 +01:00
Sandro Jäckel
2d324fc242
nixos/archisteamfarm: don't use asf abbreviation for more clarity 2024-01-21 02:14:00 +01:00
maxine
f0dd758da7
Merge pull request #273707 from illustris/cloud-init 
cloud-init: 23.3.3 -> 23.4.1, fix race condition on AWS
 2024-01-21 00:39:06 +01:00
Marcus Ramberg
8d956b1725 nixos/ollama: Add listenAddress 2024-01-21 00:27:07 +01:00
Felix Buehler
c34493d7c0 ttyd: add test & use systemd LoadCredential 2024-01-20 21:01:51 +01:00
Maximilian Bosch
93d692f43b
Merge pull request #280600 from Ma27/nextcloud-state-tmpfiles 
nixos/nextcloud: set up base directories & override.config.php with tmpfiles
 2024-01-20 17:49:46 +01:00
h7x4
d7995e41b6
Merge pull request #277514 from gepbird/github-runner-update-docs 
github-runner: mention manpage for serviceOverrides option
 2024-01-20 16:57:03 +01:00
Kevin Cox
9cd3bd7a5c
Merge pull request #281915 from exi/patch-1 
Dovecot: Do not include empty sieve_extensions and sieve_global_extensions
 2024-01-20 09:10:41 -05:00
Janne Heß
e04524a931
nixos/nix-gc: Use singleLineStr where possible 2024-01-20 13:16:39 +01:00
Janne Heß
2315174384
nixos/nix-gc: Add Type so systemctl waits properly 2024-01-20 13:15:20 +01:00
Janne Heß
fd8727163d
nixos/nix-gc: Drop with lib; 2024-01-20 13:14:57 +01:00
Gutyina Gergő
79e8fb92b8
github-runner: mention manpage for serviceOverrides option 2024-01-20 10:22:53 +01:00
Lin Jian
436929e972
Merge pull request #282174 from linj-fork/pr/remove-emacsclient-desktop 
nixos/emacs: drop custom emacsclient desktop file
 2024-01-20 15:39:37 +08:00
h7x4
66cb51263e
Merge pull request #264552 from vifino/watchdogd 
watchdogd: init at 4.0; add module
 2024-01-20 06:21:24 +01:00
Lin Jian
9e98fce0c5
Merge pull request #281654 from SuperSandro2000/portunus-restart 
nixos/portunus: restart on failure
 2024-01-20 09:17:18 +08:00
Lin Jian
20f07b4aa9
nixos/emacs: drop custom emacsclient desktop file 
This custom emacsclient desktop file was added[1] to Nixpkgs when
the upstream did not provide one.

Since an emacsclient desktop file is provided[2] by the upstream now,
we should remove our custom one from Nixpkgs to reduce maintenance
burden[3].

Fixes https://github.com/NixOS/nixpkgs/issues/245533

[1]: https://github.com/NixOS/nixpkgs/pull/35896
[2]: https://git.savannah.gnu.org/cgit/emacs.git/commit/etc/emacsclient.desktop?id=1a845a672dc73c8e98e6cb9bb734616e168e60ba
[3]: https://git.savannah.gnu.org/cgit/emacs.git/commit/etc/emacsclient.desktop?id=1500e4b4329d4d3d0141263230d74e1b314373b1
 2024-01-20 08:21:08 +08:00
Adrian Pistol
58cbe00eb6 nixos/watchdog: add module 2024-01-20 00:15:31 +01:00
Peder Bergebakken Sundt
31ff0dfe49
Merge pull request #273024 from melvyn2/patch-1 
nixos/sshServe: use bash as default shell for nix-ssh user
 2024-01-19 22:26:44 +01:00
DS
fdf411fb36 nixos/tigerbeetle: init module 2024-01-19 13:19:27 -08:00
Peder Bergebakken Sundt
c3f2d4a319
Merge pull request #267327 from bbenno/fix/nixos-firebird 
nixos/firebird: fix coerce error
 2024-01-19 22:12:47 +01:00
h7x4
99e3c0032a
Merge pull request #281871 from RatCornu/tachidesk-server 
nixos/suwayomi-server: init at 0.7.0
 2024-01-19 20:19:06 +01:00
Martin Weinelt
c2853e2588
Merge pull request #258680 from lf-/jade/remove-multiuser-netonline-dep 
nixos/systemd: don't require network-online.target for multi-user.target
 2024-01-19 12:49:23 +01:00
Sandro
eb09653fde
Merge pull request #266428 from lf-/jade/samba-fix-security-type 2024-01-19 12:29:19 +01:00
Sandro
5897d4eb0d
nixos/portunus: remove superfluous explicit out 
Co-authored-by: Lin Jian <me@linj.tech>
 2024-01-19 11:58:07 +01:00
Sandro Jäckel
fd199bdc5b
nixos/portunus: add seedSettings option 2024-01-19 11:57:01 +01:00
Jade Lovelace
fe474ed61a nixos: fix remaining services for network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace
1b514b3e10 fix: rxe under network-online.target change [UNSURE IF CORRECT] 2024-01-19 00:11:34 -08:00
Jade Lovelace
c80398e5d2 nixos/ircd-hybrid: fix evaluation error 2024-01-19 00:11:34 -08:00
Jade Lovelace
6c5ab28fce nixos: fix a bunch of services missing dep on network-online.target 
This was done by generating a truly hilarious configuration:

rg 'services\.[^.]+\.enable\t' opts-tags | cut -f1 > allonconfig.nix

The following were not tested due to other evaluation errors. They
should probably be manually audited.
services.amule
services.castopod
services.ceph
services.chatgpt-retrieval-plugin
services.clamsmtp
services.clight
services.dante
services.dex
services.discourse
services.dwm-status
services.engelsystem
services.foundationdb
services.frigate
services.frp
services.grocy
services.guacamole-client
services.hedgedoc
services.home-assistant
services.honk
services.imaginary
services.jitsi-meet
services.kerberos_server
services.limesurvey
services.mastodon
services.mediawiki
services.mobilizon
services.moodle
services.mosquitto
services.nextcloud
services.nullmailer
services.patroni
services.pfix-srsd
services.pgpkeyserver-lite
services.postfixadmin
services.roundcube
services.schleuder
services.self-deploy
services.slskd
services.spacecookie
services.statsd
services.step-ca
services.sympa
services.tsmBackup
services.vdirsyncer
services.vikunja
services.yandex-disk
services.zabbixWeb
 2024-01-19 00:11:34 -08:00
Reno Reckling
33ede4cc7c
use concatMapStringsSep in dovecot config 
Co-authored-by: h7x4 <h7x4@nani.wtf>
 2024-01-19 07:14:59 +01:00
h7x4
5350f74b81
Merge pull request #277739 from KiaraGrouwstra/fix-sample-value-services-wordpress-sites-name-languages 
fix sample value for option services.wordpress.sites.<name>.languages
 2024-01-19 03:51:40 +01:00
RatCornu
4133bb1bb0
nixos/suwayomi-server: init at 0.7.0 2024-01-19 02:31:23 +01:00
Reno Reckling
9c5b8fe008
Merge branch 'NixOS:master' into patch-1 2024-01-19 01:31:50 +01:00
Jade Lovelace
81a3fa04ca nixos/buildbot: master also wants network-online.target 2024-01-18 16:28:42 -08:00
Jade Lovelace
ce602cc0aa nixos/kea: also want network-online.target 2024-01-18 16:28:42 -08:00
Jade Lovelace
80edf319fe nixos/paperless: fix network-online.target dependencies 2024-01-18 16:28:41 -08:00
Reno Reckling
1e4065d90a
Do not include sieve_extensions and sieve_global_extensions if they are the default value 
Setting them to empty string will disable the default behaviour, leading to missing extensions.
 2024-01-19 01:21:07 +01:00
Julian Stecklina
be2a4f37af nixos/dbus: explicitly set homeMode for dbus 
Otherwise /run/dbus is created with the wrong permissions.

For some reason our recent changes made /run/dbus be 0700 instead of
0755. This is actually the default of homeMode. So something worked by
accident before?
 2024-01-18 23:08:14 +01:00
Niklas Hambüchen
305821576a
Merge pull request #273239 from nh2/issue-31138-fix-xkbvalidate-xkb-dir 
xserver service: xkbvalidate: Respect `xkb.dir`
 2024-01-18 21:56:39 +01:00
Bernardo Meurer
a09b1c12fb
nixos/moonraker: don't warn about harmless update_manager settings 
The only setting we care to warn about is `enable_system_updates`,
there's no reason to issue warnings when folks set, for example,
`enable_auto_refresh`.
 2024-01-18 13:52:50 -05:00
Adithya Nair
8b5644684e
nixos/frp: use toml configFile 
According to upstream, the INI configuration file is deprecated and
TOML/YAML/JSON is recommended.
Link: https://github.com/fatedier/frp/tree/dev#configuration-files
 2024-01-18 21:37:40 +05:30
Franz Pletz
c00a2d02bd
Merge pull request #251882 from r-ryantm/auto-update/prometheus-snmp-exporter 
prometheus-snmp-exporter: 0.22.0 -> 0.25.0
 2024-01-18 08:16:39 +01:00
Sandro Jäckel
f154807e93
nixos/portunus: restart on failure 2024-01-18 01:01:30 +01:00
Franz Pletz
ed2ea66bbf
Merge pull request #278539 from Ma27/sshd-socket-activation-ports 
nixos/sshd: fix socket activated ports when using ListenAddress
 2024-01-17 23:27:52 +01:00
WilliButz
bb9c7762bc
nixos/prometheus-snmp-exporter: add config check 
This is introduced and enabled by default because the config syntax for
the exporter changed with release 0.23.0.

This should make the breaking config change obvious before services are
deployed with an incompatible old config.

The check is based on the check present in the blackbox-exporter module.
 2024-01-17 20:34:30 +01:00
WilliButz
a8ea9fe492
nixos/prometheus-snmp-exporter: switch to new config syntax 
Introduced with version 0.23.0, see
b75fc6b839/auth-split-migration.md
 2024-01-17 20:32:45 +01:00
Marcel
a63a884c00
nixos/bird2: add option to disable auto reload 
In a critical setup of bird with many BGP sessions,
you want to control the exact time when configuration
changes are applied. Therefore, an option was added,
to disable automatic reloading the systemd unit,
when configuration changes are made. The administrator
how has the ability to control how changes are applied.
 2024-01-17 20:09:34 +01:00
Robin Gloster
e59524560c
Merge pull request #281555 from fpletz/nixos/ntpd-rs-fix-metrics 
nixos/ntpd-rs: fix metrics service
 2024-01-17 15:49:24 +01:00
Sandro
35ef7edaea
Merge pull request #281421 from SuperSandro2000/pcsc-polkit 2024-01-17 15:21:26 +01:00
Franz Pletz
35c015ff91
nixos/ntpd-rs: fix metrics service 2024-01-17 15:06:20 +01:00
rht
fb8b20d90e
acpid: Disable network access 2024-01-17 06:46:34 -05:00
Maciej Krüger
f666630f4a
Merge pull request #280556 from gador/pgadmin-8.2 
pgadmin: 8.1 -> 8.2, python3Packages.webauthn 1.11.1 -> 2.0.0, python3Packages.flask-security-too: fix pydantic issue
 2024-01-17 08:30:24 +01:00
Benjamin Bädorf
7c3ecbdce9 nixos/invoiceplane: add nginx as a webserver option for invoiceplane 
Getting the vhost to play nice with phpfpm was done by following this
community post: https://community.invoiceplane.com/t/topic/2654
 2024-01-17 05:09:34 +01:00
Ryan Lahfa
bbd92ae047
Merge pull request #280561 from RaitoBezarius/fix-listmonk-module 
nixos/mail/listmonk: fix hardening directives
 2024-01-17 03:42:31 +01:00
Sandro Jäckel
6b1e46597f
nixos/pcscd: fix linking of org.debian.pcsc-lite.policy file for polkit 2024-01-17 00:28:22 +01:00
Maximilian Bosch
7f91c8ef83
Merge pull request #276496 from Izorkin/update-roundcube-nginx 
nixos/roundcube: update nginx configuration
 2024-01-16 20:40:12 +01:00
Nick Cao
8161251283
Merge pull request #280924 from Luflosi/kubo-cleanup 
nixos/kubo: cleanup
 2024-01-16 11:06:47 -05:00
Doron Behar
ead172880f nixos/taskserver: Enable cfg.group to read clients' certificates 
This enables the services.taskserver.group to read the certificates
generated by the taskserver.service' preStart script.
 2024-01-16 13:09:41 +02:00
Thiago Kenji Okada
401d16acd0
Merge pull request #247256 from lucasew/xrdp-audio 
xrdp: add support for audio
 2024-01-16 10:06:51 +00:00
rewine
44c752a58a deepin: don't install packages using freeimage by default 2024-01-16 13:08:43 +08:00
Peder Bergebakken Sundt
8d9eb920d3
Merge pull request #273807 from h7x4/pkgs-fixup-heimdal 
heimdal: 7.8.0 -> 7.8.0-unstable-2023-11-29, large cleanup
 2024-01-15 23:16:30 +01:00
kennycallado
73cb336785 nixos/icewm: Update icewm start command 
Preferred way to start session in icewm. [docs](https://ice-wm.org/man/icewm-session)
 2024-01-15 17:49:01 +01:00
Nick Cao
9c54ad4cf5
Merge pull request #281127 from SuperSandro2000/238474-fixup 
Revert "nixos/pcscd: suggest yubikey-personalization for additional u…
 2024-01-15 10:02:48 -05:00
Sandro Jäckel
304228fe1c
Revert "nixos/pcscd: suggest yubikey-personalization for additional udev rules" 
This reverts commit 6ecb73df1b.
 2024-01-15 13:29:34 +01:00
rewine
7e27869a75 deepin: move distribution.info back to deepin-desktop-base 2024-01-15 14:19:50 +08:00
Franz Pletz
678b899ac0
Merge pull request #264593 from fpletz/pkgs/ntp-rs-1.0.0 2024-01-15 02:17:36 +01:00
Chris M
6b55672bb5
outline: 0.73.1 -> 0.74.0 (#275007) 2024-01-15 02:31:14 +04:00
Nick Cao
b9dc8014ef
Merge pull request #278931 from SuperSandro2000/patch-1 
nixos/miniflux: allow members of miniflux group to read runtime direc…
 2024-01-14 15:24:14 -05:00
Nick Cao
5ba9fede25
Merge pull request #278593 from SuperSandro2000/xdg-data-dirs-display-managers 
nixos/display-managers: only link desktop derivation if sessionPackages is not empty
 2024-01-14 15:22:57 -05:00
K900
ceede53bfa
Merge pull request #207722 from SuperSandro2000/plasma5-cleanup-pkgs 
nixos/plasma5: use plasma5Packages everywhere for clarity
 2024-01-14 22:30:39 +03:00
Nick Cao
1840316647
Merge pull request #272556 from SuperSandro2000/influxdb-restart 
nixos/influxdb: restart on failure
 2024-01-14 14:25:21 -05:00
Nick Cao
2443ba38b6
Merge pull request #272910 from SuperSandro2000/nullmailer 
nixos/nullmailer: be flexible about time related types
 2024-01-14 14:23:28 -05:00
Nick Cao
205ac6d5d8
Merge pull request #272918 from SuperSandro2000/miniflux 
nixos/miniflux: allow ints in config
 2024-01-14 14:22:41 -05:00
Maximilian Bosch
8ccc8e9df9
Merge pull request #279890 from onny/nextcloud-cleanup5 
nixos/nextcloud: Remove old migration warnings
 2024-01-14 20:22:09 +01:00
Peder Bergebakken Sundt
fa8616a4c0
Merge pull request #279479 from gepbird/c2fmzq-server-bool-setting-allow-false 
nixos/c2fmzq-server: allow setting bool settings to false
 2024-01-14 18:32:11 +01:00
Sandro Jäckel
74808f169c
nixos/pcscd: remove noop restartTriggers 2024-01-14 18:03:31 +01:00
Sandro Jäckel
6ecb73df1b
nixos/pcscd: suggest yubikey-personalization for additional udev rules 2024-01-14 18:03:31 +01:00
Sandro Jäckel
c09acaa905
nixos/pcscd: cleanup code 2024-01-14 18:03:30 +01:00
Franz Pletz
9707745cf8
nixos/ntpd-rs: init 2024-01-14 17:34:42 +01:00
Luflosi
a4c451fd37
nixos/kubo: cleanup 
- Add note explaining why enabling the Kubo daemon won't fully work immediately and requires logging in again
- Use `builtins.isList addrIn` instead of `builtins.typeOf addrIn == "list"`
- Fix indentation
 2024-01-14 12:21:09 +01:00
h7x4
c71fa4be0c
heimdal: clean up package 
- Make inputs more diff friendly
- Add flags for enabling certain libraries
- Disable LDAP support as HDB module by default
- Add support for CJSON
- Flatten contents of `$out/libexec`, which earlier had an
  `heimdal/heimdal` directory
- Use SRI hash
- Enable package tests
- Add `passthru.tests.nixos`
- Add `meta.homepage` and `meta.changelog`

Co-authored-by: Felix Albrigtsen <felix@albrigtsen.it>
 2024-01-14 01:13:19 +01:00
Gutyina Gergő
7247d16af6
nixos/c2fmzq-server: allow setting bool settings to false 2024-01-14 00:19:19 +01:00
Peder Bergebakken Sundt
59cefcbc62
Merge pull request #277783 from gepbird/c2fmzq-server-multiple-freeform-settings 
nixos/c2fmzq-server: allow multiple freeform settings
 2024-01-13 22:01:23 +01:00
lucasew
44ae5fe211 nixos/xrdp: add audio.enable option 
Signed-off-by: lucasew <lucas59356@gmail.com>
 2024-01-13 12:42:06 -03:00
maxine
a3ada00f8a
Merge pull request #280472 from martiert/fcc-unlock 
nixos/modemmanager: Add qmicli and mbimcli when using fccUnlockScripts
 2024-01-13 15:45:11 +01:00
Florian Brandes
1c1ca56266 pgadmin: 8.1 -> 8.2 
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
 2024-01-13 09:54:32 +01:00
Yt
827bd96b2b
Merge pull request #280005 from digtail/2024-01-09-ntfy-sh-dynamic-user 
nixos/ntfy-sh: clean up DynamicUser workarounds
 2024-01-12 23:39:25 +01:00
Maximilian Bosch
90787dbe89
nixos/nextcloud: set up base directories & override.config.php with tmpfiles 
Closes #169733

The issue is that Nextcloud fails to start up after a GC because the
symlink from `override.config.php` is stale.

I'm relatively certain that this is not a bug in the Nix GC - that
would've popped up somewhere else already in the past years - and one of
the reporters seems to confirm that: when they restarted
`nextcloud-setup.service` after the issue appeared, an
`override.config.php` pointing to a different hash was there.

This hints that on a deploy `nextcloud-setup` wasn't restarted properly
and thus replacing the symlink update was missed. This is relatively
hard to trigger due to the nature of the bug unfortunately (you usually
keep system generations for a few weeks and you'll need to change the
configuration - or stdenv - to get a different `override.config.php`),
so getting pointers from folks who are affected is rather complicated.

So I decided to work around this by using systemd-tmpfiles which a lot
of other modules already utilize for this use-case. Now,
`override.config.php` and the directory structure aren't created by
`nextcloud-setup`, but by `systemd-tmpfiles`.

With that, the structure is guaranteed to exist

* on boot, since tmpfiles are always created/applied then
* on config activation, since this is done before services are
  (re)started which covers the case for new installations and existing
  ones.

Also, the recursive `chgrp` was used as transition tool when we switched
from `nginx` as owning group to a dedicated `nextcloud` group[1][2], but
this was several releases ago, so I don't consider this relevant
anymore.

[1] fd9eb16b24
[2] ca916e8cb3
 2024-01-12 22:11:36 +01:00
Maciej Krüger
6ba04cc302
Merge pull request #270876 from gador/pgadmin-check-pw 
nixos/pgadmin: add minimumPasswordLength setting and check
 2024-01-12 21:00:40 +01:00
Ryan Lahfa
08d0afbbdf
Merge pull request #239028 from chayleaf/miniupnpd 
miniupnpd-nftables: init at 2.3.3
 2024-01-12 20:17:33 +01:00
Raito Bezarius
4c84c9c1c3 nixos/mail/listmonk: fix hardening directives 
For some reason, I don't know why I missed those, but
I didn't look at my logs for a while.

It would be nice if we could catch those statically kinda (?) in CI.
 2024-01-12 20:14:52 +01:00
Ryan Lahfa
1b2aeec40a
Merge pull request #275031 from 2xsaiko/outgoing/sieve 
nixos/dovecot: add support for sieve extensions, in particular imapsieve and pipe
 2024-01-12 20:05:45 +01:00
Ryan Lahfa
6d8630efda
Merge pull request #270270 from SuperSandro2000/nginx-fastopen 
nixos/nginx: filter more options when listening has quic
 2024-01-12 20:01:29 +01:00
Ryan Lahfa
3287441158
Merge pull request #275484 from Izorkin/update-nginx-http3 
nixos/nginx: disable automatic advertise of HTTP/3 protocol support
 2024-01-12 19:49:18 +01:00
Martin Ertsås
3e3fea8653
nixos/modemmanager: Add qmicli and mbimcli when using fccUnlockScripts 
The ModemManager shipped fccUnlockScripts are using either qmicli or
mbimcli, to unlock wwan modems. These needs to be available for
ModemManager if you set the fccUnlockScripts link, so instead of having
every user than needs it pull it inn in different ways, we should just
provide the tools if we think they might be needed.

https://modemmanager.org/docs/modemmanager/fcc-unlock
 2024-01-12 11:53:44 +01:00
h7x4
d167743c72
nixos/kanidm: declare online_backup options 2024-01-12 10:19:14 +01:00
Raito Bezarius
3ecaad0e0e nixos/networking/keepalived: do not emit unicastPeers when there are none 
In the past, we emitted `unicast_peer` block even with empty unicast peers list.

This now results in:
```
Keepalived_vrrp[392762]: A unicast keyword has been specified without any unicast peers. Defaulting to multicast. This usage is deprecated - please update your configuration.
```

We do not emit it anymore to avoid this warning.
 2024-01-12 03:52:39 +01:00
Yureka
1a1c53c271
Revert "nixos/gitlab: Add CI database connection for >=15.9" (#280395) 2024-01-12 02:03:23 +01:00
Yureka
29bc446b5c
Revert "nixos/gitlab: fix database config when no passwordfile is defined" (#280392) 2024-01-12 02:00:49 +01:00
Peder Bergebakken Sundt
f489e99576
Merge pull request #277925 from Izorkin/update-nginx-http2 
nixos/nginx: use new variant of http2 option for angie package
 2024-01-12 01:40:18 +01:00
Lin Jian
52bd30d5c5
Merge pull request #279274 from MarcelCoding/patch-1 
nixos/pgadmin: disable upgrade check
 2024-01-12 08:16:16 +08:00
Marcel
0be0d8a860
nixos/pgadmin: disable upgrade check 2024-01-11 16:22:28 +01:00
Florian Klink
3d1fe1445c
Merge pull request #279433 from wentasah/nsswitch-mdns 
nixos/avahi-daemon: let nssmdns{4,6} options affect also non-minimal …
 2024-01-11 13:21:24 +02:00
Florian Brandes
bc21d288f4
nixos/pgadmin: apply review suggestions 
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
 2024-01-11 11:32:32 +01:00
Patrik Keller
30b25fa102 nixos/netdata: add missing dependency for syslog alarms 
Netdata depends on the `logger` utility for dispatching health alarms to
syslog. This dependency was missing in the systemd units environment.

Issue: https://github.com/NixOS/nixpkgs/issues/272702
Docs: https://learn.netdata.cloud/docs/alerting/notifications/agent-dispatched-notifications/syslog
Docs, archived: https://archive.is/mkQa4
 2024-01-11 08:38:52 +01:00
maxine
3534a235f1
Merge pull request #278941 from amaxine/drop-gnome-themes-extra 
gnome: don't include gnome-themes-extra by default
 2024-01-10 21:07:06 +01:00
Peder Bergebakken Sundt
dff635f38d
Merge pull request #243169 from 2xsaiko/outgoing/krb5 
nixos/krb5: cleanup, fix and RFC42-ify
 2024-01-10 21:06:15 +01:00
Tom Siewert
890ffaa1ae nixos/gitlab: fix database config when no passwordfile is defined 
In commit 41ca9c1, the database config got an additional config entry
for a separate CI database connection [1]. Unfortunately, the main connection
must always be the first entry. The fix for this was only applied when
databasePasswordFile has been set.

This commit fixes the order of the config for deployments without a databasePasswordFile.

[1] https://docs.gitlab.com/ee/update/deprecations.html#single-database-connection-is-deprecated
 2024-01-10 14:35:57 +01:00
Wim de With
de0a5c6a6b nixos/syncoid: add missing ZFS mount permission 2024-01-10 14:27:12 +01:00
Jonas Heinrich
cb919df382
Merge pull request #279887 from onny/dokuwiki-cleanup 
nixos/dokuwiki: Remove old migration warnings
 2024-01-10 14:04:20 +01:00
Franz Pletz
078c5755a9
Merge pull request #277912 from Luflosi/kubo-send-buffer-size 2024-01-10 02:09:45 +01:00
digital
39fd0c3fe3 nixos/ntfy-sh: clean up DynamicUser workarounds 
this commit removes the static assignments for the ntfy-sh user and
group. furthermore, it removes some tmpfiles.d rules which where
initially put in place by https://github.com/NixOS/nixpkgs/pull/234811.
these are however not required, as ntfy-sh will automatically create the
required files and systemd automatically handles the migration process.

A nixosTest is added to demonstrate that the migration is working
reliably.

This also fixes an issue with where systemd would sometimes not start
ntfy-sh. The tmpfiles rules in combination with impermanence caused `/
var/lib/ntfy-sh` to be a directory when it should have been a symlink.
 2024-01-10 00:15:50 +01:00
Peder Bergebakken Sundt
7bb62b90ef
Merge pull request #274807 from danielbarter/nixos-printing-cups-override 
cupsd: allow cups package override
 2024-01-09 22:30:34 +01:00
Peder Bergebakken Sundt
3bf05ba941
Merge pull request #271481 from eliandoran/feature/snmpd 
nixos/snmpd: init
 2024-01-09 21:32:27 +01:00
Jonas Heinrich
6707b97f00 nixos/nextcloud: Remove old migration warnings 2024-01-09 20:59:03 +01:00
Jonas Heinrich
d71dc05e82 nixos/dokuwiki: Remove old migration warnings 2024-01-09 20:51:12 +01:00
Nick Cao
c360b49704
Merge pull request #259849 from Scrumplex/nixos/vaultwarden/backupDirCreate 
nixos/vaultwarden: create backupDir using tmpfiles.d
 2024-01-08 12:30:03 -05:00
Tom Siewert
838a2b54ed nixos/gitlab: Add CI database connection for >=15.9 
Starting with GitLab 15.9, single connections were deprecated [1] and
will be removed in GitLab 17.0.

[1] https://docs.gitlab.com/ee/update/deprecations.html#single-database-connection-is-deprecated
 2024-01-08 18:14:06 +01:00
Michal Sojka
e23da86b18 nixos/avahi-daemon: let nssmdns{4,6} options affect also non-minimal mdns source 
This is a followup to commit bba808dbfa ("nixos/avahi-daemon:
resolve mdns only over enabled protocols, disable ipv6 by default",
2023-10-01, PR #258424). mdns occurs twice in /etc/nsswitch.conf but
that commit changed only the first one (mdns_minimal, before resolve).
This commits ensures that both occurrences are set consistently.

This is not only consistent with upstream example[1] but it also
fixes #118628 -- a longstanding issue with CUPS and printer detection.

[1]  https://github.com/avahi/nss-mdns#activation
 2024-01-07 18:16:40 +01:00
Guillaume Girol
db0f76e8c9
Merge pull request #271030 from symphorien/nixseparatedebuginfod 
nixseparatedebuginfod: init at 0.3.0, plus module and nixos test
 2024-01-07 17:45:13 +01:00
Nick Cao
0b88c3d297
Merge pull request #265783 from Silver-Golden/bitwarden-directory-connector_pkgs 
Bitwarden directory connector: init
 2024-01-07 10:28:04 -05:00
Brendan Golden
f7c25138ea nixos/bitwarden-directory-connector: init at version 
Added the module to use bitwarden-directory-connector.
 2024-01-07 11:22:31 +00:00
Guillaume Girol
73f0f9c21c
Merge pull request #275902 from williamvds/dnsmasq_docs 
nixos/dnsmasq: Add documentation
 2024-01-06 23:04:40 +01:00
Lin Jian
3179a4e209
Merge pull request #278536 from newAM/llama-cpp-server 
nixos/llama-cpp: init
 2024-01-07 03:58:38 +08:00
Lin Jian
c55537aa04
Merge pull request #278500 from Ten0/fix_avahi_ipv6_defaultText 
nixos/avahi: fix incorrect defaultText of nixos option services.avahi.ipv6
 2024-01-07 02:54:04 +08:00
Alex Martens
d8bb8a6417 nixos/llama-cpp: init 2024-01-06 10:42:55 -08:00
Maximilian Bosch
e55b4c1ec7
Merge pull request #278493 from marrobHD/patch-1 
nixos/nextcloud: fix dbport in config.php
 2024-01-06 16:26:15 +01:00
Thiago Kenji Okada
a0d94113e8
Merge pull request #278975 from lucasew/fix/transmission-web 
nixos/transmission: fix webui if no custom webui is specified
 2024-01-06 14:16:49 +00:00
Christian Kögler
93ae65d7dd
Merge pull request #278366 from ck3d/nixos-vdr-updates 
nixos/vdr: add option user/group and more admin control
 2024-01-06 13:01:13 +01:00
lucasew
82723d0494 nixos/transmission: fix webui if no custom webui is specified 
Signed-off-by: lucasew <lucas59356@gmail.com>
 2024-01-05 16:24:24 -03:00
Emilia Bopp
5f6b7a35d6 neo4j: 4.4.11 -> 5.9.0 2024-01-05 18:20:24 +01:00
Benedikt Tissot
c1d8fd1a89 nixos/ddclient: make ExecStartPre a list 
this enables to exetend ExecStartPre while keeping the default inplace.
 2024-01-05 16:36:45 +01:00
Maxine Aubrey
c3d027f9ce
gnome: don't include gnome-themes-extra by default 
Upstream moved gnome-themes-extra to world 3 years ago
8b1708c38b
 2024-01-05 16:01:12 +01:00
Thomas BESSOU
a85739af7e nixos/avahi: Fix incorrect defaultText of services.avahi.ipv6 
This seems to have been forgotten in bba808dbfa, where we changed the default from `config.networking.enableIPv6` to `false`.
 2024-01-05 15:29:22 +01:00
Sandro
9272b8ef79
nixos/miniflux: allow members of miniflux group to read runtime directory 
Otherwise a proxy server that has the miniflux group cannot read files in the runtime directory like a socket miniflux can listen on.
 2024-01-05 15:01:04 +01:00
zowoq
3d0b034e87 maintainers/teams: add buildbot 2024-01-05 11:41:19 +10:00
nu-nu-ko
e1a9d1bfcb maintainers: add nu-nu-ko 2024-01-05 12:47:15 +13:00
Nick Cao
b391da91be
Merge pull request #278523 from NickCao/zram-generator 
nixos/zram-generator: do not require zram to be a module
 2024-01-04 11:25:34 -05:00
Pascal Bach
2c86e5321c nixos/photoprism: allow writing to originalsPath, importPath and 
storagePath
 2024-01-04 14:28:47 +01:00
Lin Jian
b05d9c12d9
Merge pull request #237904 from SuperSamus/libinput-description 
nixos/libinput: update horizontalScrolling description
 2024-01-04 19:55:53 +08:00
May
5be349d0be
nixos/nextcloud: remove dbport 
To specify a port for the database host, `host:port` format has to be used [1].

[1]: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/config_sample_php_parameters.html#dbhost
 2024-01-04 12:34:24 +01:00
Martino Fontana
d6022b39ee nixos/libinput: update horizontalScrolling description 2024-01-04 11:34:25 +01:00
Atemu
94e446c260
Merge pull request #277019 from SuperSandro2000/paperless-freeform 
nixos/paperless: convert extraConfig to freeform type
 2024-01-04 09:33:54 +01:00
Emery Hemingway
b736a8a801 eris-go: 20231119 -> 20231219 2024-01-04 06:24:03 +00:00
Sandro Jäckel
7c1b4b22f9
nixos/paperless: convert extraConfig to freeform type 
Co-authored-by: Atemu <atemu.main@gmail.com>
 2024-01-04 00:04:38 +01:00
Tomas Antonio Lopez
147cc4061e nixos/sourcehut: ensure that the repos directory exists 
Fixes a bug where, if the OpenSSH server starts before the first initialization
of the git service, the SSH service fails to find the corresponding bind mount
and terminates with a 226/NAMESPACE error.
 2024-01-04 00:00:32 +01:00
Sandro Jäckel
2db74e8339
nixos/display-managers: only link desktop derivation if sessionPackages is not empty 
On a headless system there are no entries and we do not need to add it
to XDG_DATA_DIRS.
 2024-01-03 23:48:54 +01:00
Leona Maroni
9abc79018c
nixos/kresd: fix port only regex 
The output is expected to be a list [ hostname, port, optional ipv6 scope ], but the
current regex only outputs [ port ], when only a port is given as address.
 2024-01-03 21:18:54 +01:00
Maximilian Bosch
7e45990c06
nixos/sshd: fix socket activated ports when using ListenAddress 
Noticed that issue while reviewing #275633: when declaring
`ListenAddress host` without a port, all ports declared by
`Port`/`cfg.ports` will be used with `host` according to
`sshd_config(5)`.

However, if this is done and socket activation is used, only a socket
for port 22 is created instead of a sockets for each port from
`Port`/`cfg.ports`. This patch corrects that behavior.

Also added a regression test for this case.
 2024-01-03 19:42:45 +01:00
illustris
d6baaf1c42
nixos/cloud-init: fix DHCP race condition 2024-01-03 23:50:30 +05:30
Nick Cao
9eeabd33d2
nixos/zram-generator: do not require zram to be a module 2024-01-03 12:08:30 -05:00
K900
497cb80d55
Merge pull request #278490 from K900/sddm-package 
nixos/sddm: add package option
 2024-01-03 19:48:58 +03:00
Sefa Eyeoglu
4f70c901dc
nixos/vaultwarden: add example value for backupDir 
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2024-01-03 17:37:37 +01:00
Sefa Eyeoglu
80ea6a21fb
nixos/vaultwarden: create backupDir using tmpfiles.d 
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2024-01-03 17:37:35 +01:00
Nick Cao
fa5ad5c4d0
Merge pull request #278501 from hughobrien/invidious-fix 
nixos/invidious: Additional fix for user message on 24.05 changes
 2024-01-03 11:03:06 -05:00
Maximilian Bosch
cfd8c0ddd8
Merge pull request #275633 from chreekat/b/sshd-config-check 
sshd: Use top-level ports in config check when needed
 2024-01-03 16:25:08 +01:00
Hugh O'Brien
e51c00fb23
nixos/invidious: Additional fix for user message on 24.05 changes 2024-01-03 10:17:06 -05:00
K900
06cc32ffc3 nixos/sddm: add package option 2024-01-03 17:20:10 +03:00
Jonas Heinrich
818fdce3d0 nixos/nextcloud: Fix corrent option name 2024-01-03 14:08:21 +01:00
Weijia Wang
3526f2ffec
Merge pull request #274192 from foo-dogsquared/nixos-guix-add-guix-home-support 
nixos/guix: add Guix home support
 2024-01-03 01:28:11 +01:00
Mario Rodas
7f0a64976d
Merge pull request #270286 from ajs124/ruby_ossl11_cleanup 
ruby_2_7: remove
 2024-01-02 18:37:18 -05:00
Christian Kögler
7caca1b185 nixos/vdr: add option user/group and more admin control 
- Add option to set user and group name
- Set users home to runtime directory, to avoid mixing of temporal files
  like caches
- Allow admin to control LIRC service by avoiding LIRC enabling
- Allow admin to set libDir, by removing setting argument config to default
- Add package to environment, to allow easy access for admins to helper
  tools like svdrpsend and vdr -h
- Cleanup Nix code by avoiding with statement
 2024-01-02 23:17:46 +01:00
williamvds
da61f0320f
dnsmasq: Add documentation 2024-01-02 22:07:25 +00:00
Nick Cao
f6a028db30
Merge pull request #276808 from SuperSandro2000/portunus-cookie-secure 
nixos/portunus: make sure the cookies are only send over https if it …
 2024-01-02 16:54:37 -05:00
ajs124
02ad3159b0 ruby_2_7: remove 2024-01-02 15:30:06 +01:00
Bryan Richter
e797aaea0b
sshd: Use top-level ports in config check when needed 
Previously, if a listenAddress was specified without a `port`, the check
would fail.
 2024-01-02 12:51:39 +02:00
Patrick Steinhardt
f026ea0db0 nixos/nextcloud: disable output buffering 
The Nextcloud admin guide says that output buffering must be turned off
or otherwise PHP will return memory-related errors [1]. As the default
value for this PHP setting is 4096 and thus enabled the Nextcloud setup
is thus misconfigured by default. This misconfiguration will be shown in
the "Security & setup warnings" dialog for the administrator.

Fix this misconfiguration by setting "output_buffering=0" by default.

[1]: https://docs.nextcloud.com/server/stable/admin_manual/configuration_files/big_file_upload_configuration.html#configuring-php
 2024-01-02 08:45:42 +01:00
Gutyina Gergő
3306755683
nixos/c2fmzq-server: allow multiple freeform settings 2024-01-01 22:50:16 +01:00
Nick Cao
66ea36d4d3
Merge pull request #276159 from AtaraxiaSjel/fix/tor-obfs4proxy 
nixos/tor: fix transport plugin exe name
 2024-01-01 15:55:04 -05:00
Nick Cao
3d6243a6a9
Merge pull request #276430 from hellodword/patch-1 
nixos/tailscale: fix after and wants
 2024-01-01 15:52:50 -05:00
Guillaume Girol
38034a860a
Merge pull request #273286 from nh2/sane-backends-package-option 
Add hardware.sane.backends-package option.
 2024-01-01 21:43:35 +01:00
Ryan Lahfa
10af81720a
Merge pull request #277936 from Izorkin/update-nginx-ktls 
nginx: enable ktls support by default
 2024-01-01 17:19:11 +01:00
markuskowa
009b625a54
Merge pull request #277792 from ck3d/vdr-updates-2023-12 
vdr: updates 2023/12
 2024-01-01 16:58:11 +01:00
Guillaume Girol
dece72548e nixseparatedebuginfod: add module and nixos test 2024-01-01 13:42:13 +01:00
Izorkin
10c06cb060
nginx: enable ktls support by default 2024-01-01 12:02:57 +03:00
Izorkin
2fb0b52c50
nixos/nginx: disable automatic advertise of HTTP/3 protocol support 
Automatic advertise in the `http` block about support of HTTP/3
protocol makes it difficult to automatically configure services
to work with it.
HTTP/3 availability must be manually advertised, preferably in
each location block.
 2024-01-01 02:29:01 +03:00
Ryan Lahfa
5ab6191ee5
Merge pull request #276260 from Izorkin/update-nginx-acme-locations 
nixos/nginx: change position acmeLocation in nginx configuration
 2023-12-31 21:23:17 +01:00
Janik
6be9d4fc21
Merge pull request #266283 from Noodlesalat/ping-exporter-1.1.0 
ping_exporter: init at 1.1.0
 2023-12-31 20:50:30 +01:00
Guillaume Girol
17fc67eb2e
Merge pull request #255464 from georgyo/postfix-dont-use-file-ownership 
nixos/postfix: postalias should not use source file permissions
 2023-12-31 15:20:48 +01:00
Izorkin
d11fe979a2
nixos/nginx: use new variant of http2 option for angie package 2023-12-31 16:52:08 +03:00
Luflosi
b2f8b846f2
nixos/kubo: increase maximum UDP send buffer size 
In addition to increasing the maximum UDP receive buffer size in the Linux kernel, it is now recommended to do the same for the send buffer size.
This is documented in https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes.
The change to the documentation was made in June: 5b5e58d289.

Without this change, the Kubo daemon will output this warning:
```
failed to sufficiently increase send buffer size (was: 208 kiB, wanted: 2048 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details.
```
This can be seen while running the NixOS tests.
 2023-12-31 14:09:27 +01:00
Maciej Krüger
2d9d11dee6
Merge pull request #251782 from vifino/thermald_ignore-cpuid-check 
thermald: allow ignoring cpuid check
 2023-12-31 11:30:50 +01:00
Ilan Joselevich
210ab761b4
Merge pull request #276294 from phaer/cachix-signing-key 
cachix-watch-store: allow to set a signing key
 2023-12-31 00:20:52 +02:00
Christian Kögler
1c326dcb4f nixos/vdr: wait for network 2023-12-30 21:58:24 +01:00
Izorkin
ae5c0c1521
nixos/nginx: skip adding a comment to acmeLocation in nginx configuration 2023-12-30 23:50:02 +03:00
Izorkin
7f1b6d45af
nixos/nginx: change position acmeLocation in nginx configuration 2023-12-30 23:49:58 +03:00
Kiara Grouwstra
bdbd8f703b
fix sample value for option services.wordpress.sites.<name>.languages 2023-12-30 16:26:01 +01:00
Izorkin
7ead602f93
nixos/roundcube: add configureNginx option 2023-12-30 15:01:13 +03:00
Izorkin
3b74d8781f
nixos/roundcube: update nginx configuration 2023-12-30 15:01:12 +03:00
Lin Jian
55c1318537
Merge pull request #276180 from linj-fork/pr/kanata-list 
nixos/kanata: specify linux-dev as a list
 2023-12-29 20:24:56 -06:00
Nick Cao
4a8d35315a
Merge pull request #276407 from sinanmohd/dendrite-sliding-sync 
nixos/matrix-sliding-sync: rename, init dendrite
 2023-12-29 20:24:47 -05:00
markuskowa
15b39c2238
Merge pull request #275080 from SomeoneSerge/feat/munge-systemd 
nixos/munge: update the systemd service
 2023-12-30 00:11:12 +01:00
Maximilian Bosch
d25fdec5b3
Merge pull request #212430 from onny/nextcloud-cleanup 
nixos/nextcloud: Move options into now freeForm extraOptions
 2023-12-29 23:44:24 +01:00
Maximilian Bosch
a1f20ed672
Merge pull request #277382 from Ma27/fix-nextcloud-app-routing 
nixos/nextcloud: fix nginx routing to store and nix apps
 2023-12-29 23:44:12 +01:00
Jonas Heinrich
b06d3c3aa6
Merge pull request #277442 from onny/ollama 
nixos/ollama: init
 2023-12-29 23:00:10 +01:00
Dmitriy Kholkin
0929716b02
nixos/tor: fix transport plugin exe name 2023-12-29 23:20:15 +03:00
Nick Cao
08a62091a1
Merge pull request #277146 from majewsky/portunus-2.0.0 
portunus: 1.1.0 -> 2.0.0
 2023-12-29 14:53:12 -05:00
sinanmohd
e8e5c07ad0 nixos/matrix-sliding-sync: rename, init dendrite 2023-12-30 00:25:57 +05:30
Maximilian Bosch
bae5e65162
nixos/nextcloud: fix nginx routing to store and nix apps 
Closes #277206

The bug mentioned above was a symptom of the issue fixed here: when
opening the `forms` app which is installed via `extraApps` (or the
app store) the site wouldn't work because `.mjs` files had the wrong
Content-Type.

The actual problem got fixed already[1], however this config was not
used for stuff from `/nix-apps` & `/store-apps` which had their own
location section with only a `root ;` statement.

In fact, this setup isn't strictly supported by Nextcloud upstream[2],
so to fix this for good, I decided to follow the upstream suggestion for
app directories outside the server root, i.e. linking them back into the
store path.

This means that the module generates a new derivation now with

* `services.nextcloud.package` linked into it via `lndir`.
* under `nix-apps` is a symlink to the link farm containing all apps
  from `services.nextcloud.extraApps`.
* under `store-apps` is a symlink to `/var/lib/nextcloud/store-apps`.
  Since this is only used in the NixOS module that also configures this
  location for imperatively installed apps, this seems an OK thing to
  do.

Successfully tested the change on a productive Nextcloud 28.0.1 with
several apps installed via `extraApps` (`forms`, `cospend`, `maps`,
`user_saml` and a few more).

[1] 292c74c7a9
[2] https://docs.nextcloud.com/server/28/admin_manual/apps_management.html#using-custom-app-directories
 2023-12-29 18:59:18 +01:00
Jonas Heinrich
67a799c40f nixos/ollama: init 2023-12-29 15:19:55 +01:00
nikstur
8d3cf213db nixos/borgbackup: replace activationScript via tmpfiles 2023-12-29 03:41:45 +01:00
nikstur
af87c19427 nixos/yggdrasil: replace activationScript 
Replace with separate service because it cannot be moved into the
preStart of the yggdrasil service.
 2023-12-29 03:22:27 +01:00
nikstur
e96cd172fb nixos/logcheck: replace activationScript via tmpfiles 2023-12-29 03:16:03 +01:00
Jonas Heinrich
dd8c96379f nixos/nextcloud: Move options into now freeForm extraOptions 2023-12-29 01:04:46 +01:00
Maximilian Bosch
1d17e304ac
Merge pull request #273443 from jpds/thanos-query-replica-label-string 
nixos/thanos: Changed query.replica-labels to a list parameter
 2023-12-28 20:48:31 +01:00
Daniel Barter
18d65382d6 nixos/cupsd: allow cups package override 2023-12-28 08:58:01 -08:00
Luflosi
f88af99311
nixos/aerospike: use NixOS option instead of custom script 
Since 2c5abd89c7 setting the option `boot.kernel.sysctl."net.core.rmem_max"` no longer has any downsides compared to what was previously used. Since 439350753e the same is also true for `boot.kernel.sysctl."net.core.wmem_max"`.
 2023-12-28 17:41:59 +01:00
Pavel Anpin
3ca696729b
cloudflared: fixed missing configuration options 2023-12-27 22:50:00 +01:00
Stefan Majewsky
9ecbdfb5bd portunus: 1.1.0 -> 2.0.0 
Changelog: <https://github.com/majewsky/portunus/releases/tag/v2.0.0>
 2023-12-27 18:30:32 +01:00
Nick Cao
6248428d28
Merge pull request #277017 from hughobrien/patch-1 
nixos/invidious: Fix  user message on 24.05 changes
 2023-12-27 10:36:43 -05:00
Yt
bd5ff67266
Merge pull request #261789 from onny/rspamd-trainer 
nixos/rspamd-trainer: init; rspamd-trainer: init at unstable-2023-11-27
 2023-12-27 11:28:42 +00:00
Alex James
9f32ad8ff8
nixos/transmission: add webHome option 2023-12-27 04:00:43 -06:00
Jonas Heinrich
80d88736da nixos/rspamd-trainer: init; rspamd-trainer: init at unstable-2023-11-27 2023-12-27 10:35:53 +01:00
nikstur
c9569af3e0
Merge pull request #271326 from philiptaron/shutdown.target 
treewide: depend on `shutdown.target` if `DefaultDependencies=no` in almost every case
 2023-12-27 08:33:26 +01:00
Yt
56b8564a7d
Merge pull request #276525 from scvalex/livebook-configurable-package 
livebook: configurable package and extraPackages
 2023-12-27 07:30:25 +00:00
Hugh O'Brien
eff6b94cdd
nixos/invidious: Fix user message on 24.05 changes 2023-12-26 20:44:04 -05:00
Martin Weinelt
d4c4e0269d
Merge pull request #274460 from mweinelt/kea-ipc-runtimedir 
nixos/kea: return to merged runtime directory; preserve runtime directories
 2023-12-27 02:08:14 +01:00
Martin Weinelt
2f8686ce17
nixos/frigate: restart the service on failure 
Closes: #266837
 2023-12-26 22:33:19 +01:00
Dee Anzorge
b4b9b08426
nixos/prometheus-exporters/kea: run under same user/group as kea 
This fixes access to the kea unix sockets, after enabling
RuntimeDirectoryPreserve on the kea units.

https://github.com/NixOS/nixpkgs/pull/274460#issuecomment-1869702893
 2023-12-26 21:42:58 +01:00
boozedog
0b522b2429
nixos/pgadmin: add package option 2023-12-26 11:56:25 +01:00
Sandro Jäckel
64b6b5e787
nixos/portunus: make sure the cookies are only send over https if it is enabled 2023-12-26 00:27:32 +01:00
Alexandru Scvortov
0ae9c34391 livebook: configurable package and extraPackages 
Also fix examples to not include a semicolon in the .env file.
 2023-12-25 21:47:14 +00:00
Felix Bühler
0c7f041600
Merge pull request #276670 from etu/freshrss-stop-running-updater-on-system-activation 
nixos/freshrss: Stop running the updater service on system activation
 2023-12-25 11:37:32 +01:00
Weijia Wang
e520c76913
Merge pull request #275831 from foo-dogsquared/nixos-guix-socket-activation-fix 
nixos/guix: fix systemd socket unit
 2023-12-25 10:54:30 +01:00
Elis Hirwing
0c3619835b
nixos/freshrss: Stop running the updater service on system activation 2023-12-25 09:57:47 +01:00
Jörg Thalheim
98e792ad9d
Merge pull request #276524 from SuperSandro2000/harmonia-restart 
nixos/harmonia: restart systemd service
 2023-12-24 21:15:49 +01:00
Sandro Jäckel
f029a8a10d
nixos/harmonia: restart systemd service 2023-12-24 19:54:11 +01:00
Doron Behar
067338523e
Merge pull request #275281 from eliandoran/feature/mympd-service 
nixos/mympd: init
 2023-12-24 18:43:03 +00:00
Nudelsalat
5d85f0eee8 nixos/prometheus-ping-exporter: init 2023-12-24 18:11:25 +01:00
phaer
25e5dfd142 cachix-watch-store: allow to set a signing key 2023-12-24 10:25:32 +00:00
hellodword
26c2ed1c95
nixos/tailscale: fix after and wants 2023-12-24 09:44:46 +00:00
Nick Cao
a83ee8f514
Merge pull request #255227 from tomfitzhenry/postfix-harden 
nixos/postfix: add systemd hardening directives
 2023-12-23 10:36:18 -05:00
Mario Rodas
2ba8c30b4e
Merge pull request #252790 from anthonyroussel/gns3-nixos-module 
nixos/gns3-server: init
 2023-12-23 09:27:39 -05:00
Bobby Rong
5cb00274f2
Merge pull request #276060 from bobby285271/fix/cinnamon-sessionpath 
nixos/cinnamon: Unbreak sessionPath option
 2023-12-23 21:05:08 +08:00
Lin Jian
ff19ecca71
nixos/kanata: specify linux-dev as a list 
This is better because it allows some special characters in the device
path.  See [1] for more information.

[1]: https://github.com/jtroo/kanata/pull/647
 2023-12-23 10:10:15 +08:00
Bobby Rong
1ec293c599
nixos/cinnamon: Unbreak sessionPath option 
It looks like XDG_CURRENT_DESKTOP is not set when we run these lines,
and sessionCommands does not seem to work when using GDM and Cinnamon wayland.
 2023-12-23 10:09:35 +08:00
Sandro Jäckel
157256f9dd
nixos/nginx: filter more options when listening has quic 2023-12-23 02:20:48 +01:00
Doron Behar
0ae28209f1
Merge pull request #267319 from ju1m/transmission 
nixos/transmission: fixes #258793
 2023-12-22 12:35:56 +00:00
vincent.cui
9c870ac78f nixos/kubernetes: fix pki's mkSpec function 
The `authority.file.path` field of a cert spec is
[defined as follows]
(https://github.com/cloudflare/certmgr/tree/v3.0.3#pki-specs):

> if this is included, the CA certificate will be saved here.
It follows the same file specification format above. Use this
if you want to save your CA cert to disk.

So certmgr fails, because each certmgr spec (apiserver,
addonManager, ...) wants to manage the file at the `cert.caCert`
location. However, the `authority.file.path` field is not needed
for generating a certificate, as the certificate is generated by
the CA, which is reachable at `authority.remote` (e.g.
https://localhost:8888 with `easyCerts = true`). The
`authority.file.path` field just saves the certificate of the CA
to disk.
 2023-12-21 22:08:31 +01:00
Pol Dellaiera
783163f959
Merge pull request #275429 from drupol/code-server/restore 
code-server: restore and bump (4.16.1 -> 4.19.1)
 2023-12-21 21:03:41 +01:00
Gabriel Arazas
d3e246f9fa
nixos/guix: fix systemd socket unit 2023-12-21 22:18:56 +08:00
Elian Doran
3c4ddf8284 nixos/mympd: init 2023-12-21 16:01:46 +02:00
Kerstin
98e9d68cc8
Merge pull request #275663 from Izorkin/update-mastodon-build 
mastodon: remove tools from propagatedBuildInputs
 2023-12-21 13:43:28 +01:00
Åsmund Østvold
aeeb655646 service buildkite-agent: make it possible add groups to agent users 
Only one extra group was add. Some times you want the agents users to
be member of other groups like 'docker'. This change make this possible.

Co-authored-by: Florian Klink <flokli@flokli.de>
 2023-12-21 12:49:48 +01:00
Marco Rebhan
7004ee65c2
nixos/dovecot: add myself as maintainer 2023-12-21 12:41:08 +01:00
Marco Rebhan
1e31a631b7
nixos/dovecot: add support for sieve extensions, in particular imapsieve and pipe 2023-12-21 12:41:08 +01:00
Marco Rebhan
fed77d1705
nixos/krb5: move to security.krb5 2023-12-21 11:35:26 +01:00
Marco Rebhan
92a541c0ed
nixos/krb5: cleanup, fix and RFC42-ify 
This replaces the krb5 module's options with RFC 42-style krb5.settings
option, while greatly simplifying the code and fixing a few bugs,
namely:

- #243068 krb5: Configuration silently gets ignored when set by
  multiple modules
- not being able to use mkIf etc. inside subattributes of
  krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ...

See #144575.
Closes #243068.

Co-authored-by: h7x4 <h7x4@nani.wtf>
 2023-12-21 11:34:59 +01:00
Raghav Sood
7d97d9ebd1
Merge pull request #275439 from RaghavSood/nitter/guest-accounts 
nitter: unstable-2023-10-31 -> unstable-2023-12-03 (guest accounts support)
 2023-12-21 14:03:35 +08:00
Martin Weinelt
d12a0b7861
Merge pull request #275554 from SuperSandro2000/home-assistant-custom-components-fix-unlink 
nixos/home-assistant: fix removing of uninstalled custom components
 2023-12-20 21:15:26 +01:00
WilliButz
ac58b65cf5
Merge pull request #275112 from r-ryantm/auto-update/prometheus-nginx-exporter 
prometheus-nginx-exporter: 0.11.0 -> 1.0.0
 2023-12-20 20:27:28 +01:00
Maximilian Bosch
571f06ad0d
Merge pull request #270260 from SuperSandro2000/gitea-camo-hmac 
nixos/gitea: add hmacKey support
 2023-12-20 19:02:20 +01:00
Franz Pletz
faff9de754
nixos/prometheus/nginx-exporter: fix args for 1.0 2023-12-20 18:23:29 +01:00
Franz Pletz
54a4f96cfc
Merge pull request #274570 from Luflosi/kubo-more-RFC42 
nixos/kubo: convert two settings to RFC42-style settings
 2023-12-20 16:24:50 +01:00
Izorkin
8a0a8c7a04
nixos/mastodon: replace ffmpeg to ffmpeg-headless 2023-12-20 18:01:55 +03:00
Gabriel Arazas
b7ece537bb
nixos/guix: fix conditional linking of profiles 2023-12-20 22:04:01 +08:00
Sandro Jäckel
d4c622ec5f
nixos/home-assistant: fix removing of uninstalled custom components 
Before components was not an array and the first loop did never loop
through all entries but through the entire output of find without
splitting by new line.

Tested by copying the preStart script out of the nix store, doing the
change and observing that now the custom-components directory is indeed
being cleaned up after removing a custom component.
 2023-12-20 05:00:05 +01:00
Kerstin
d2d0044221
Merge pull request #274556 from networkException/mastodon-init-db-psql-escaping 
nixos/mastodon: properly escape arguments to psql in init-db script
 2023-12-19 22:28:08 +01:00
Ilan Joselevich
6f885c4e74
Merge pull request #275383 from Kranzes/nextcloud 
nixos/nextcloud: serve flac and ogg files
 2023-12-19 23:19:06 +02:00
networkException
4dd61b6e68
nixos/mastodon: properly escape arguments to psql in init-db script 2023-12-19 21:02:13 +01:00
Yarny0
59539b9bc5 tsm-client: 8.1.20.0 -> 8.1.21.0 
"Update History" (release notes):
https://www.ibm.com/support/pages/node/6998343

At the time of this writing,
the "APAR" links of the "Update History" lead to 404.
However, the abstracts indicate that
this update is not security critical.

Note that this update changed the GUI window title
to "IBM Storage Protect"
(the product itself was renamed with version 8.1.19.0 already).
The commit at hand adapts the GUI vm test accordingly.

Also, all URLs in package and module comments are updated.
 2023-12-19 19:47:28 +01:00
Elian Doran
2b0bf78df6 nixos/snmpd: init 2023-12-19 18:54:24 +02:00
Raghav Sood
2595f503cd
nitter: add guest account support to systemd service 2023-12-20 00:01:20 +08:00
Pol Dellaiera
1a57f50d95
Revert "code-server: drop" 
This reverts commit 72911a99d3.
 2023-12-19 15:40:57 +01:00
K900
e42d80fa6d
Merge pull request #274818 from eyJhb/moonraker-new-config-filemanager 
moonraker: add setting file_manager.check_klipper_config_path
 2023-12-19 17:36:54 +03:00
eyjhb
0fc323eeef
moonraker: disable check_klipper_config if klipper is immutable 2023-12-19 15:36:01 +01:00
Peder Bergebakken Sundt
1a647a10b8
Merge pull request #268806 from Izorkin/init-angie 
angie: init at 1.4.0
 2023-12-19 13:51:51 +01:00
Yonghan Ching 庄勇翰
5fff7f4078 Update zerotierone.nix per input 
Nothing will happen now when `cfg.localConf == null`
 2023-12-19 12:34:03 +00:00
Yonghan Ching 庄勇翰
7b83a839dc Fix bash prestart script syntax error 2023-12-19 12:34:03 +00:00
Yonghan Ching 庄勇翰
996bbe5bd9 delete trailing whitespace at row 70 2023-12-19 12:34:03 +00:00
Yonghan Ching 庄勇翰
8af401d3cf Update zerotierone.nix per input 
Changed `services.zerotierone.localConf` default value to `null` and type to `nullOr attrs` per input.

Changed `systemd` preStart script to delete
 `/var/lib/zerotier-one/local.conf` when it is a symlink, and rename when it is an actual file, then only create a symlink to the nix store when `services.zerotierone.localConf` is not null.
 2023-12-19 12:34:03 +00:00
Yonghan Ching 庄勇翰
b233faab82 Update zerotierone.nix 2023-12-19 12:34:03 +00:00
Yonghan Ching 庄勇翰
36791bab6a Update zerotierone.nix 2023-12-19 12:34:03 +00:00
Yonghan Ching 庄勇翰
0b357293e8 Update zerotierone.nix 2023-12-19 12:34:03 +00:00
Yonghan Ching 庄勇翰
097f2b6737 Update zerotierone.nix 
Added option to write zerotier's local.conf in nix.
 2023-12-19 12:34:03 +00:00
Ilan Joselevich
8bbbb228b4
nixos/nextcloud: serve flac and ogg files 
Since v28 Nextcloud Talk supports serving files with with .ogg/.flac extension
 2023-12-19 13:07:19 +02:00
r-vdp
c4b3e4f5f8 dbus-broker: avoid errors when reloading when /tmp got remounted 
When reloading the dbus-broker service (e.g. when switching to a new generation),
the reload fails when /tmp got remounted after the service had been started.
Since the dbus-broker service starts early, and does not have default dependencies,
this situation does occur in practice.
This change makes sure that if there are mount units for /tmp, dbus-broker gets
ordered after them.

See also https://github.com/systemd/systemd/issues/28515
 2023-12-19 10:34:41 +01:00
Thomas Churchman
972626f142 mopidy: make service wait until system is online 2023-12-19 08:34:50 +01:00
Sandro Jäckel
1ebb7d7bba
nixos/gitea: add hmacKey support 2023-12-18 23:44:24 +01:00
WilliButz
92ad5c907c
Merge pull request #274543 from fugidev/sabnzbd-exporter-loadcredential 
nixos/prometheus-sabnzbd-exporter: use LoadCredential for apiKeyFile
 2023-12-18 15:09:35 +01:00
Peder Bergebakken Sundt
45052e5e52
Merge pull request #273397 from ipetkov/nut 
nixos/ups: fix shutting down the UPS from primary monitors
 2023-12-18 15:06:22 +01:00
Fugi
6430b7a181
nixos/prometheus-sabnzbd-exporter: use LoadCredential for apiKeyFile 2023-12-18 14:48:49 +01:00
Maximilian Bosch
1a9fe45b53
Merge pull request #275053 from danth/nextcloud-mjs 
nixos/nextcloud: set correct MIME type for .mjs files
 2023-12-18 11:07:22 +01:00
Ryan Lahfa
17c3ebdba5
Merge pull request #265857 from 999eagle/feat/invidious-scale 
nixos/invidious: cleanup, allow for easy scaling and load balancing, add http3-ytproxy
 2023-12-18 10:17:09 +01:00
Peder Bergebakken Sundt
80beaf2b29
Merge pull request #245327 from JohnAZoidberg/keyd-2.4.3 
keyd: 2.4.2 -> 2.4.3
 2023-12-17 23:41:06 +01:00
Someone Serge
b27c3e8252
nixos/munge: restart "on-failure" (the default was "no") 2023-12-17 22:18:06 +00:00
Someone Serge
515a26d997
nixos/munge: run in foreground instead of using pidfile 
Confuse systemd less
 2023-12-17 22:16:09 +00:00
Someone Serge
b29d689e3a
nixos/munge: ask for the optional time-sync.target 2023-12-17 22:16:06 +00:00
Someone Serge
8fe8a22578
nixos/munge: ask for network-online instead of network.target 2023-12-17 22:16:01 +00:00
Izorkin
86efccfa45
angie: init at 1.4.0 2023-12-17 22:43:13 +03:00
Daniel Thwaites
292c74c7a9
nixos/nextcloud: set correct MIME type for .mjs files 2023-12-17 19:17:10 +00:00
Sophie Tauchert
24e561fabc
nixos/invidious: change default database user to invidious 
This makes sure we don't need any workarounds for running Invidious with a local
PostgreSQL database.
Changing the default user should be fine as the new init script for PostgreSQL automatically
creates the new user and changes the existing database's owner to the new user. The old user
will still linger and must be removed manually.
See also: https://github.com/NixOS/nixpkgs/pull/266270
 2023-12-17 19:48:15 +01:00
Sophie Tauchert
ac5c1886fd
nixos/invidious: add option to configure http3-ytproxy for invidious 2023-12-17 19:48:03 +01:00
Sophie Tauchert
d41706bae2
nixos/invidious: bind to 127.0.0.1 instead of 0.0.0.0 if nginx is used 2023-12-17 19:48:03 +01:00
Sophie Tauchert
45bd4b1159
nixos/invidious: add option to run more invidious instances 2023-12-17 19:48:02 +01:00
Sophie Tauchert
4a7faeaff3
nixos/invidious: remove obsolete database maintenance service 
See the note on https://docs.invidious.io/db-maintenance/. Manual maintenance
is no longer required.
 2023-12-17 19:48:02 +01:00
Matt McHenry
db64f7f737 lorri.service: remove ProtectHome, relax ProtectSystem 
per lorri's readme:

  lorri creates an indirect garbage collection root for each .drv in
  $XDG_CACHE_HOME/lorri (~/.cache/lorri/ by default) each time it
  evaluates your project.

... so it doesn't make sense to have ProtectHome enabled for
lorri.service.  lorri also needs to be able to modify
/nix/var/nix/gcroots/per-user/, so ProtectSystem can't be 'strict';
'full' is the next strongest.

fixes:

lorri: ERRO IO error binding to socket: Read-only file system (os error 30)

bisecting this error leads to a range of unbuildable commits including
'a31429165204 Merge pull request #243242 from
RaitoBezarius/systemd-254', so it's likely that systemd update changed
the behaviour of ProtectHome somehow (though the release notes don't
have any obvious culprits).
 2023-12-17 11:35:48 -05:00
Pierre Bourdon
91a00709ae
Merge pull request #273219 from Lurkki14/tuxclocker-master 
tuxclocker: init at 1.4.0
 2023-12-17 17:30:18 +01:00
Jussi Kuokkanen
60cb6ee94f nixos/tuxclocker: init module 2023-12-17 18:16:45 +02:00
K900
b3d1ef8dde
Merge pull request #272534 from jopejoe1/pipewire 
nixos/pipewire: add pipewire config
 2023-12-17 14:03:11 +03:00
jopejoe1
8ba76f8dd4 nixos/pipewire: add pipewire config 2023-12-17 13:38:32 +03:00
Peder Bergebakken Sundt
934c255ae4
Merge pull request #268975 from nbraud/pkgs/certmgr 
nixos/kubernetes: certmgr-selfsigned is now an alias
 2023-12-17 03:37:45 +01:00
Peder Bergebakken Sundt
210dd845de
Merge pull request #274808 from pbsds/node-red-package-option 
nixos/node-red: fix `cfg.package` default value documentation
 2023-12-16 23:20:07 +01:00
Thiago Kenji Okada
460515843c
Merge pull request #269662 from atorres1985-contrib/quick 
remove jammerful
 2023-12-16 21:11:28 +00:00
Peder Bergebakken Sundt
77e3850db0 nixos/node-red: fix cfg.package default value documentation 2023-12-16 21:03:18 +01:00
K900
be1866d698
Merge pull request #270958 from MinerSebas/plasma-samba 
nixos/plasma5: Dont add samba a second time to `environment.systemPackages`
 2023-12-16 09:15:47 +03:00
Luflosi
45c4fb240a
nixos/kubo: convert two settings to RFC42-style settings 
Convert the `ipfsMountDir` and `ipnsMountDir` settings to RFC42-style settings.
I don't know why I didn't already do this in a255c43f44, I guess I just missed it.
 2023-12-16 01:01:56 +01:00
Luflosi
d4fcb44dcc
nixos/kubo: fix potential panic on startup 
This fixes a panic of the kubo daemon which could occur under certain conditions when the daemon was starting.
It was caused by the `ipfs.service` unit not depending on the `ipfs-api.socket` and `ipfs-gateway.socket` units with `Wants=`. This allows the `ipfs.service` to be started manually or by `nixos-rebuild` without the sockets being set up before that. When that happens, the daemon won't know about these sockets and will only use what is set in `services.kubo.settings.Addresses.Gateway` and `services.kubo.settings.Addresses.API`. By default the `API` is an empty list in NixOS though. The daemon doesn't like this at all and panics on startup, see https://github.com/ipfs/kubo/issues/10056.
With this commit, starting `ipfs.service` will first set up the two sockets before starting the actual service.
Adding the `Sockets=` option implicitly adds a `Wants=` for the sockets and this is exactly what we need. See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#Implicit%20Dependencies . This can be checked with `systemctl show ipfs.service`.

This should probably be upstreamed to the unit file in the Kubo repo.

The problem can be reproduced in the following way:
- Add `services.kubo.enable = true` to `/etc/nixos/configuration.nix`
- `sudo nixos-rebuild switch` (this may already fail, not sure why it's not deterministic for me)
- `sudo systemctl stop ipfs-api.socket`
- `sudo systemctl stop ipfs-gateway.socket`
- `sudo systemctl stop ipfs.service`
- `sudo systemctl start ipfs.service`

Fixes #248447.
 2023-12-15 23:36:08 +01:00