Commit graph

33166 commits

Author SHA1 Message Date
Felix Bühler dc5ff75973
nixos/services.portunus: remove with lib; (#339097) 2024-09-10 21:41:55 +02:00
Felix Bühler 9ac4d48271
nixos/services.borgbackup: remove with lib; (#339098) 2024-09-10 21:41:29 +02:00
Felix Bühler 2954826541
nixos/services.taskserver: remove with lib; (#339104) 2024-09-10 21:41:05 +02:00
Felix Buehler 674e5ad68a nixos/services.mpd: remove with lib; 2024-09-10 21:40:16 +02:00
Felix Buehler e3ee1a97d4 nixos/iso-image: remove with lib; 2024-09-10 21:36:16 +02:00
Felix Bühler 7a46626d03
nixos/services.rippled: remove with lib; (#339106) 2024-09-10 21:35:12 +02:00
Adam C. Stephens fbbafbb834
nixos/services.radicle: remove with lib; (#339105) 2024-09-10 12:00:35 -04:00
Artturin 95db943c8d
nixos/teeworlds: add option environmentFile for injecting secrets (#334590) 2024-09-10 18:30:00 +03:00
Aleksana 1579b92dd4
todesk: init at 4.7.2.0 (#310474) 2024-09-10 21:42:59 +08:00
Kerstin 5a39b9e407
Gancio service fixes (#340782) 2024-09-10 13:34:07 +02:00
Jean-Baptiste Giraudeau 3a33b6c3a8
nixos/gancio: set default value for settings.baseurl 2024-09-10 13:13:32 +02:00
Jean-Baptiste Giraudeau 432bfec026
nixos/gancio: use unix socket between nginx and gancio 2024-09-10 13:13:28 +02:00
nicoo 9e5a44bcfc
nixos/podman: set preferLocalBuild on trivial runCommands (#340980) 2024-09-10 10:53:46 +00:00
eyjhb a719f91a85
nixos/teeworlds: use lib.getExe instead of hardcoded path 2024-09-10 11:40:24 +02:00
eyjhb e233e7d385
nixos/teeworlds: add option environmentFile for injecting secrets 2024-09-10 11:39:55 +02:00
h7x4 c2090cb303
wstunnel: the ping frequency can now also be configured for the server (#339232) 2024-09-10 10:27:42 +02:00
Vladimír Čunát 28e9b6d60f
Merge staging-next 2024-09-01 (#338840) 2024-09-10 07:42:45 +02:00
Maximilian Bosch 86af11a626
Merge: prometheus-pgbouncer-exporter: 0.8.0 -> 0.9.0, fix secrets handling (#340852) 2024-09-10 07:23:10 +02:00
Martin Weinelt 4cec81a995
Revert "modules/virtualisation: add shared options, merge various diskSize options" (#340894)
Breaks evaluation of all nixos tests, and is therefore a channel blocker.
2024-09-10 03:12:55 +02:00
github-actions[bot] 6811659137
Merge master into staging-next 2024-09-10 00:13:21 +00:00
Artturin 833c74afa4
kexec: fix shellcheck issues (#340487) 2024-09-09 23:38:36 +03:00
Jonas Chevalier 7c4dde339a
modules/virtualisation: add shared options, merge various diskSize options (#339535) 2024-09-09 21:23:11 +02:00
Maximilian Bosch 862ecd674f
nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline
Since `connectionStringFile` reads the file and puts it into the
invocation of the exporter, it's part of the cmdline and thus
effectively world-readable.

Added a new `connectionEnvFile` which is supposed to be an environment
file of the form

  PGBOUNCER_EXPORTER_CONNECTION_STRING=...

that will be added to the systemd service. The exporter will read the
connection string from that value.
2024-09-09 21:08:17 +02:00
Maximilian Bosch 4980a7d938
nixos/prometheus-exporters: fix assertions declared in exporter modules
And it turns out, the test was using a removed option all along 🙃
2024-09-09 21:08:17 +02:00
Martin Weinelt 58aa6d56f6
nixos/matrix-appservice-irc: allow disabling the ttl by setting it to 0 (#340841) 2024-09-09 20:58:45 +02:00
Martin Weinelt 420398889e
nixos/matrix-appservice-irc: allow disabling media lifetime
Posting media URLs to IRC that vanish, when they can be refetched from
the remote server they were originated from is not great UX.
2024-09-09 20:35:13 +02:00
Rick van Schijndel f6b2548c60
nixos/hydra: unset SSL_CERT_FILE (#338536) 2024-09-09 20:29:36 +02:00
github-actions[bot] a90b3d5ddb
Merge master into staging-next 2024-09-09 18:05:44 +00:00
Rick van Schijndel 0eb77d8da5
nixos/hydra: add system-hydra.slice, fix typo (#338532) 2024-09-09 19:47:21 +02:00
Felix Bühler 3ffbdee67c
nixos/services.snapper: remove with lib; (#339096) 2024-09-09 18:36:49 +02:00
github-actions[bot] f3e8528ff7
Merge master into staging-next 2024-09-09 14:31:17 +00:00
Jean-Baptiste Giraudeau 58ec286785
nixos/gancio: actually enable ssl by default. 2024-09-09 15:48:52 +02:00
K900 cb1b8436a3
nixos-install: fail if we can't set up bootloader (#340522) 2024-09-09 16:21:54 +03:00
K900 a9c0a2e2a1
nixos/tests: don't include switch-to-configuration in DUT by default (#340445) 2024-09-09 16:20:41 +03:00
github-actions[bot] 90a93f92bb
Merge master into staging-next 2024-09-09 12:05:58 +00:00
Jacek Galowicz 5aae39d683
nixos/testing: Fix graphical tty output (#339730) 2024-09-09 10:23:37 +02:00
github-actions[bot] 92d531057e
Merge master into staging-next 2024-09-09 06:05:06 +00:00
Aleksana 12f0b2ff82
systemd-boot: Add option for consoleMode to support SteamDeck (#340597) 2024-09-09 12:10:20 +08:00
Aleksana 03e62e5bc3
podman: drop slirp4netns which has been replaced by passt (#313670) 2024-09-09 09:53:33 +08:00
Pol Dellaiera bcb04b0967
open-webui: Add environmentFile option (#334830) 2024-09-09 03:28:37 +02:00
github-actions[bot] f2b767ea43
Merge master into staging-next 2024-09-09 00:14:38 +00:00
Anthony ROUSSEL 603159799c nixos/samba: revert default values 2024-09-08 23:43:10 +02:00
Kerstin e248589c0f
gancio: init at 1.19.0 (#279011) 2024-09-08 22:51:23 +02:00
Petr Hodina a9f77c2fb0 systemd-boot: Add option for consoleMode to support SteamDeck 2024-09-08 22:48:21 +02:00
Sarah Brofeldt 8a508485c4
nixos/kubernetes: add extraConfig to kubelet config (#338526) 2024-09-08 20:35:46 +02:00
github-actions[bot] 3b1652aad3
Merge master into staging-next 2024-09-08 18:04:04 +00:00
Jean-Baptiste Giraudeau f5e44554c4
nixos/gancio: init module 2024-09-08 18:09:57 +02:00
Emily 2d562e9175
security/acme: shellcheck fixes (#340491) 2024-09-08 16:27:17 +01:00
K900 7771e0b943 nixos/specialisation: add isSpecialisation option to know if we're a specialisation 2024-09-08 17:04:44 +03:00
phaer 37cf9cbb22
security/dhparams: shellcheck fixes 2024-09-08 12:31:15 +02:00
phaer 22794b93e0
security/acme: shellcheck fixes 2024-09-08 12:29:58 +02:00
r-vdp e2db383cb6
activation: avoid error due to unset PATH variable 2024-09-08 12:27:06 +02:00
r-vdp 955e3cd8fe
kexec: fix shellcheck issues 2024-09-08 12:26:22 +02:00
K900 fa39e3d642 nixos-install: fail if we can't set up bootloader 2024-09-08 11:05:59 +03:00
Guanran Wang bde8f99741
nixos/amd-microcode: remove alias 2024-09-08 15:15:12 +08:00
Guanran Wang a55aaa547c
nixos/intel-microcode: remove alias 2024-09-08 15:11:50 +08:00
github-actions[bot] 69276ad883
Merge master into staging-next 2024-09-08 06:04:18 +00:00
Yuxuan Shui 036d05a466 nixos/samba: fix migration guide for securityType 2024-09-08 00:26:27 +01:00
github-actions[bot] 5a5ebe5a1c
Merge master into staging-next 2024-09-07 18:04:01 +00:00
Martin Weinelt 458c073712
neard: 0.18 -> 0.19-unstable-2024-07-02 (#337524) 2024-09-07 18:00:14 +02:00
Florian Klink 3aca239152
nixos/caddy: restart caddy on config change when "enableReload" is turned off (#335983) 2024-09-07 22:22:24 +07:00
ash 2bab9e4eba nixos/dokuwiki: factor out toPhpString 2024-09-07 15:30:54 +01:00
K900 d1c49286e9
nixos/samba: fix conditional activation of samba services (#340272) 2024-09-07 16:53:16 +03:00
ash 345c8a7310 nixos/dokuwiki: don’t use lib.escapeShellArg
PHP strings don't obey shell quoting rules. See #333744.
2024-09-07 14:39:07 +01:00
Weijia Wang bad886d556
ayatana-indicator-bluetooth: init at 24.5.0 (#336982) 2024-09-07 14:46:32 +02:00
github-actions[bot] de15243c9a
Merge master into staging-next 2024-09-07 12:04:51 +00:00
Azat Bahawi 3f2297f073
nixos/endlessh-go: fix firewall bugs (#339701) 2024-09-07 10:22:25 +00:00
Aleksana b4b441a852
nixos/matterbridge: add services.matterbridge.package option (#340180) 2024-09-07 16:27:52 +08:00
Anthony ROUSSEL 1938960bfe nixos/samba: fix conditional activation of samba services 2024-09-07 10:16:03 +02:00
K900 f7e4fc6e56
Wireplumber 0.5.6 (#340154) 2024-09-07 09:46:17 +03:00
github-actions[bot] b6b2ac4f61
Merge master into staging-next 2024-09-07 00:12:59 +00:00
kirillrdy 5f4c0543d2
Flarum: fix installation and client interface issues (#339202) 2024-09-07 06:32:54 +10:00
Leona Maroni 7d414ecebb
sway: integrate with systemd (#323670) 2024-09-06 22:25:11 +02:00
Gabriel Fontes 13f6e6da35
nixos/matterbridge: add services.matterbridge.package option 2024-09-06 17:07:41 -03:00
Will Fancher 3f4b9096f6
nixos/zfs: mitigate data loss issues when resuming from hibernate (#208037) 2024-09-06 14:50:59 -04:00
github-actions[bot] 079813d5c4
Merge master into staging-next 2024-09-06 18:03:54 +00:00
K900 a0134dd1d8 nixos/wireplumber: drop hack for systemwide setups
Should not be necessary with 0.5.6.
2024-09-06 20:58:12 +03:00
Aaron Ecay 345618de26
nixos/zfs: mitigate data loss issues when resuming from hibernation 2024-09-06 13:39:21 -04:00
Bjørn Forsman 4861c28956 homebox: update URLs in documentation
https://github.com/hay-kot/homebox was archived on 2024-06-12 and we use
the https://github.com/sysadminsmedia/homebox fork since the beginning,
in commit 4be8e799db
("homebox: init at 0.13.0").

Update the documentation to be in sync with the source we build from.
2024-09-06 19:34:15 +02:00
Anthony Roussel 56ae1fb452 nixos/samba: split and sync SystemD services with upstream 2024-09-06 17:53:22 +02:00
Anthony Roussel ac29b192d8 nixos/samba: use mkEnableOption when possible 2024-09-06 17:53:22 +02:00
Anthony Roussel 3f0b4964c3 nixos/samba: add documentation to systemd.services 2024-09-06 17:53:22 +02:00
Anthony Roussel 7a3bba220d nixos/samba: add services.samba.smbd.enable option 2024-09-06 17:53:22 +02:00
Anthony Roussel ee6c8db585 nixos/samba: reorganize and rename module options 2024-09-06 17:53:22 +02:00
Anthony Roussel 3b48a7e013 nixos/samba: add documentation 2024-09-06 17:53:22 +02:00
Anthony Roussel 988c598106 nixos/samba: migrate to structural settings (RFC42) 2024-09-06 17:53:22 +02:00
laalsaas a89b885ae9 sway: integrate with systemd
see: https://github.com/swaywm/sway/wiki/Systemd-integration
2024-09-06 15:59:37 +02:00
github-actions[bot] bd4b5a5be6
Merge master into staging-next 2024-09-06 12:05:08 +00:00
ajs124 54604767a2
remove myself from maintainer list of packages I don't use anymore (#339910) 2024-09-06 13:05:55 +02:00
OPNA2608 132b5ce9d3 nixos/lomiri: Add bluetooth indicator 2024-09-06 12:08:10 +02:00
Emily 866a8e220c nixos/perlless: remove redundant system.switch.enableNg
This is now on by default.
2024-09-06 08:35:43 +01:00
Emily 56dea6da87 nixos: switch to switch-to-configuration-ng by default
The Rust `switch-to-configuration-ng` rewrite was carefully written
to be compatible with the original Perl script, has been checked
against NixOS VM tests, and has been available on an opt‐in basis
for testing for the 24.05 release cycle.

The next step towards replacing the Perl script entirely is to
switch it on by default so that we can get real‐world testing from
a much greater number of users. Maintaining two implementations in
parallel is becoming a burden; we are having to adjust the systemd
service activation behaviour slightly to fix a long‐standing bug,
and backporting the changes to the Perl script is an unpleasant
process. We will do it anyway to ensure that the Rust and Perl
implementations keep parity with each other throughout the 24.11
release cycle, but we think the time has come to flip the switch.

Taking this step now will give us two to three months to test this in
the wild before the 24.11 release and gain confidence that there are
no regressions. If any non‐trivial problems arise before the final
release, we will revert to the Perl implementation by default. Doing
this switch ASAP will help to disentangle any problems that might
arise from the Rust implementation from problems that arise from the
systemd service activation changes, or the upcoming switch to using
systemd in stage 1 by default.

The main concern that was raised about replacing the Perl script in the
PR that added `switch-to-configuration-ng` was that it is currently
possible to run NixOS on systems that cannot natively host a Rust
compiler. This does not apply to any platforms that have official
support from NixOS, and as far as I know we do not know of any such
systems with users that are not cross‐compiling anyway.

My understanding is that these systems are already broken by default
anyway, as `systemd.shutdownRamfs.enable` is on by default and uses
`make-initrd-ng`, which is also written in Rust. Switching the default
while keeping the Perl implementation around will give us at least
an entire release cycle to find out if there are any users that will
be affected by this and decide what to do about it if so.

There is currently one known inconsistency between
the Perl and Rust implementations, as documented in
<https://github.com/NixOS/nixpkgs/issues/312297>; the Rust
implementation has more accurate handling of failed systemd units.

We slightly adjust the semantics of `system.switch.enable{,Ng}` to
not conflict with each other, so that `system.switch.enableNg` is
on by default, but turning off `system.switch.enable` still results
in no `switch-to-configuration` implementation being used. This
won’t break the configuration of anyone who already opted in to
`system.switch.enableNg` and is probably how the option should have
worked to begin with.
2024-09-06 08:35:43 +01:00
github-actions[bot] 6802206bcc
Merge master into staging-next 2024-09-06 06:04:31 +00:00
Kier Davis 3732e94603
maintainers: remove kierdavis 2024-09-06 07:01:02 +01:00
Aleksana 3be36da2d2
unl0kr: remove tomfitzhenry@ as maintainer (#333616) 2024-09-06 12:50:55 +08:00
Yt fcc6387b76
nixos/stalwart-mail: package and configure webadmin (#314820) 2024-09-06 01:03:27 +00:00
github-actions[bot] 25ef10109d
Merge master into staging-next 2024-09-06 00:13:20 +00:00
Felix Bühler d7a108054a
nixos/security.acme: remove with lib; (#339101) 2024-09-06 00:08:41 +02:00
Will Fancher a96e54fe52
initrd: use the new tmpfiles options to create tmpfiles config (#339503) 2024-09-05 17:02:30 -04:00
Will Fancher 5a575e88b6
Revert "nixos: support dm-verity" 2024-09-05 15:56:49 -04:00