Commit graph

29714 commits

Author SHA1 Message Date
Sandro Jäckel 907b5ebcee
nixos/nextcloud: build with-apps local 2024-03-02 18:01:38 +01:00
K900 633a090546
Merge pull request #292822 from xNaxdy/work/plasma6-install-sshfs
programs/kdeconnect: install sshfs
2024-03-02 19:59:13 +03:00
Sandro Jäckel da1ccb628f
nixos/paperless: fix too many open files
paperless-web-start[658743]: kombu.exceptions.OperationalError: [Errno 24] Too many open files: '/nix/store/k6h0pihpi3ih31zjk6ragqcp4mjz4pjs-python3.11-concurrent-log-handler-0.9.24/lib/python3.11/site-packages/concurrent_log_handler-0.9.24.dist-info/entry_points.txt'
2024-03-02 17:52:18 +01:00
Naxdy bc910886a1
programs/kdeconnect: install sshfs 2024-03-02 17:51:04 +01:00
Maciej Krüger 55ead8c56a
Merge pull request #290976 from adamcstephens/incus/nft
nixos/incus: assert nftables is used when firewall is enabled
2024-03-02 17:40:44 +01:00
Paul Meyer a217ccfe1f
Merge pull request #292773 from attilaolah/patch-1
Add missing closing parens
2024-03-02 17:32:16 +01:00
Franz Pletz 764d15f59f
pinentry: remove multiple outputs package
fixes #133156 #124753
2024-03-02 17:16:53 +01:00
Nick Cao 2646fba84d
Merge pull request #292702 from NickCao/fcitx5-plasma6
nixos/fcitx5: enable plasma6Support by default if plasma6 is enabled
2024-03-02 10:54:19 -05:00
K900 57746ceea5
Merge pull request #292748 from K900/sycoca-oof
nixos/plasma6: nuke sycoca on activation
2024-03-02 15:21:39 +03:00
Yt 492678349b
Merge pull request #292412 from bobrippling/fix/ebusd-logging
ebusd: fix logging overrides
2024-03-02 11:46:35 +00:00
Attila Oláh ac4441fabd
Add missing closing parens.
https://xkcd.com/859
2024-03-02 12:40:40 +01:00
K900 d7a4bf5998 nixos/plasma6: nuke sycoca on activation
This is not the right solution, but it should get us going for now.
2024-03-02 11:26:41 +03:00
Nick Cao 48e5de444b
nixos/fcitx5: enable plasma6Support by default if plasma6 is enabled 2024-03-01 22:43:56 -05:00
r-vdp a8ab8b59a7
systemd-boot: introduce options to set a sort-key for systemd-boot entries
Without sort-keys specified on entries, the entries are sorted only by
file name (in decreasing order, so starting at the end of the alphabet!),
without taking any other fields into account (see
[the boot loader specification reference][1]).
Moreover, entries without a sort-key are always ordered after all
entries with a sort-key, so by not adding a sort-key to the NixOS ones,
we cannot add a sort-key to any other entry while keeping it below the
NixOS entries.

So currently we have options to set the file names for additional entries like
memtest and netbootxyz.
However, as mentioned above, the sorting by file name is not very intuitive and
actually sorts in the opposite order of what is currently mentioned in the option
descriptions.

With this commit, we set a configurable sort-key on all NixOS entries,
and add options for setting the sort-keys for the memtest and netbootxyz
entries.
The sorting by sort-key is more intuitive (it starts at the start of the
alphabet) and also takes into account the machine-id and version for entries
with identical sort-keys.

We use a bootspec extension to store the sort keys, which allows us to
redefine the sort key for individual specialisations without needing any
special casing.

[1]: https://uapi-group.org/specifications/specs/boot_loader_specification/#sorting
2024-03-02 02:11:32 +01:00
nikstur ce1d1f3e6c nixos/qemu-vm: remove implicit dependency on SSM
The qemu module shouldn't implicitly (and for all architectures) enable
SSM when enabling Secure Boot.

Additionally, this breaks aarch64 Secure Boot tests because this module
doesn't use the right machine type for anything but X86.
2024-03-01 23:40:36 +01:00
phaer fa34964ef1 etebase: make proper package...
and remove the ad-hoc python environment.
Also remove daphne and use uvicorn just as upstream does
2024-03-01 22:55:27 +01:00
nikstur 1df98b23f6
Merge pull request #292061 from nikstur/systemd-random-seed
nixos/systemd: include systemd-boot-random-seed.service
2024-03-01 21:46:39 +01:00
Nick Cao fcba479b33
Merge pull request #292607 from NickCao/fcitx5-nixos
nixos/fcitx5: add plasma6 support option
2024-03-01 13:36:04 -05:00
Robert Hensing 55dcd06bdb
Merge pull request #292487 from jmbaur/nixos-cross-check
nixos/nixpkgs: fix determination for cross-compiled nixos system
2024-03-01 18:19:58 +01:00
Jared Baur 3794246066
nixos/nixpkgs: fix determination for cross-compiled nixos system
Since the output of `lib.systems.elaborate` contains functions, an
equality check with `==` does not suffice, `lib.systems.equals` should
be used instead.
2024-03-01 09:05:08 -08:00
Nick Cao 6e2d4054ae
nixos/fcitx5: add plasma6 support option 2024-03-01 11:34:09 -05:00
Adam C. Stephens b52452f8c7
Merge pull request #291951 from amarshall/zfs-pkgs-renaming
zfs: rename zfsStable -> zfs_2_2; zfsUnstable -> zfs_unstable; remove enableUnstable option in favor of package
2024-03-01 10:09:12 -05:00
phaer 720a1eb5e7 modules/etebase-server: add package, pythonPackage
options, to keep the packaeges configurable
2024-03-01 14:32:46 +01:00
RaHoni 2af073f716
nixos/bacula: refactor option generation
The generation of the descriptions always used lib explicitly even
thoughit was already specified with 'with'.

Since using `with lib` is discouraged this was also changed to inherit.
2024-03-01 14:11:57 +01:00
RaHoni ad2f55dc4e
nixos/bacula: Add support for TLS
Added the majority of TLS options used for transport encryption.

This uses a submodule since all resources share the same settings.

The documentation can be found under:
https://www.bacula.org/13.0.x-manuals/en/main/Bacula_TLS_Communications_E.html
2024-03-01 14:11:57 +01:00
Sandro 5ad27da222
Merge pull request #291907 from SuperSandro2000/tailscaled-flags 2024-03-01 13:54:54 +01:00
Sandro b84bc4ea3a
Merge pull request #264087 from leonm1/matter-server-module 2024-03-01 13:51:19 +01:00
Sandro 51e92056db
Merge pull request #283660 from ocfox/transfer 2024-03-01 13:36:03 +01:00
Diogo Correia 81f21e3936
nixos/oci-containers: ignore nonexistent container when stopping
Fixes #292551
2024-03-01 10:41:00 +00:00
Marcel 896a4d62d8
listmonk: ensure correct application of data migration 2024-03-01 10:45:12 +01:00
Sarah Brofeldt 13a94ad1fb
Merge pull request #292291 from cafkafk/dockerRegistry-openFirewall
nixos/dockerRegistry: add `openFirewall` option
2024-03-01 09:57:07 +01:00
Christina Sørensen d31cbb78ca
nixos/dockerRegistry: add openFirewall option
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-03-01 09:56:03 +01:00
K900 690d54ef45
Merge pull request #292326 from hcsch/pipewire-wireplumber-doc-fix
nixos/pipewire: doc fixes as a follow-up to #282377 and #291946
2024-03-01 09:28:17 +03:00
K900 b4622a277e
Merge pull request #292483 from mjm/plasma6-kcmutils
nixos/plasma6: install kcmutils
2024-03-01 09:25:51 +03:00
Matt Moriarity e59d120fc1 nixos/plasma6: install kcmutils 2024-02-29 20:12:42 -07:00
Sandro bbabfca453
Merge pull request #263765 from numinit/armagetronad-module
nixos/armagetronad: Add module with NixOS tests
2024-03-01 00:46:34 +01:00
Sandro b8ec4c1475
Merge pull request #290449 from Kiskae/patch-2
nixos/podman: pass proxy variables to podman API
2024-03-01 00:37:27 +01:00
Sandro daa33a4bf7
Merge pull request #287299 from SuperSandro2000/unbound-checkconf
nixos/unbound: check validity of config file
2024-03-01 00:33:36 +01:00
V ff990ea66a nixos/nixseparatedebuginfod: fix compatibility with Nix 2.3
Appending to options with the `extra-` prefix was added in Nix 2.4,
which makes config validation fail on this version without the guard.

Change-Id: Ie253978dbaf00b228fecc08698a3dcc01cd2d82b
2024-02-29 23:10:31 +01:00
Rob Pilling 979ae4c6e5 nixos/ebusd: fix logging overrides
This fixes #292131 - currently we specify --log=all:<level>, which
overrides all other log areas. Specifying this first allows the
further log areas to be specified without being replaced.
2024-02-29 21:02:26 +00:00
Kerstin 51363e5c0d
Merge pull request #280628 from h7x4/nixos-module-update-kanidm-add-backup-dir-to-bindpaths
nixos/kanidm: declare `online_backup` options
2024-02-29 15:19:34 +01:00
Michele Guerini Rocco 11b122ec70
Merge pull request #292185 from dotlambda/searxng-mainProgram
searxng: set meta.mainProgram
2024-02-29 14:19:51 +01:00
Hans Christian Schmitz 3f86bd950c
nixos/pipewire: add docs for passthru.requiredLv2Packages 2024-02-29 13:28:04 +01:00
Hans Christian Schmitz b97450b007
nixos/wireplumber: fix incorrect option name in docs 2024-02-29 13:28:04 +01:00
Arnout Engelen 728d2d1fd9
Merge pull request #287805 from raboof/sway-update-to-1.9
sway: 1.8.1 -> 1.9.0
2024-02-29 12:06:52 +01:00
Arnout Engelen 36e51d7cbf
sway: 1.8.1 -> 1.9.0
Co-authored-by: Phileas Lebada <norpol@users.noreply.github.com>
Co-authored-by: éclairevoyant <848000+eclairevoyant@users.noreply.github.com>
2024-02-29 11:37:30 +01:00
networkException 644eac31e6
nixos/matrix-sliding-sync: document unix socket support in SYNCV3_BINDADDR 2024-02-29 11:03:01 +01:00
Leona Maroni 3302864e6e
Merge pull request #292030 from Flakebi/paperless
paperless: fix uploading files via local folder
2024-02-29 08:10:28 +01:00
Robert Schütz 3330e3c9c3 nixos/searx: use lib.getExe 2024-02-28 17:51:24 -08:00
Silvan Mosberger cd5dc76d83 substitute: Deprecate replacements, introduce replacementsList
Also:
- Add tests
- Treewide update
- Improve docs
2024-02-29 00:35:27 +01:00
abysssol 8720397720 nixos/ollama: replace incorrect use of overrideAttrs
The bug prevents nixos from compiling
if the ollama service is built with cuda enabled.
2024-02-28 17:15:30 -05:00
Julian Stecklina a9822fa200 nixos/virtualbox-host: expose option to run with KVM 2024-02-28 17:36:22 +01:00
K900 7d93928492 nixos/release: add Plasma 6 ISO variant 2024-02-28 18:49:33 +03:00
K900 2614e40893 sddm: add Wayland to the wrapper if enabled 2024-02-28 18:49:33 +03:00
K900 7b74d9a4ac sddm: 0.20.0-unstable -> 0.21.0 2024-02-28 18:49:33 +03:00
K900 ad1b1e8aca nixos/gnupg: check for plasma 6 2024-02-28 18:49:33 +03:00
K900 3f650b567f nixos/plasma6: init 2024-02-28 18:49:33 +03:00
K900 8be79e54c5 nixos/pam/kwallet: rename option, allow setting package 2024-02-28 18:49:33 +03:00
K900 2248bdfbbc nixos/sddm: add extraPackages option 2024-02-28 18:49:12 +03:00
André Vitor de Lima Matos 675ad00f22
pipewire: fix wireplumber config paths
Quickfix for systemWide pipewire after #282377
2024-02-28 10:46:52 -03:00
nikstur 380f36f350 nixos/systemd: include systemd-boot-random-seed.service
This is necessary to properly refresh the boot loader random seed.
See https://www.freedesktop.org/software/systemd/man/latest/systemd-boot-random-seed.service.html#
2024-02-28 12:14:06 +01:00
nikstur bd4c49f29b nixos/systemd: remove a superfluous override
This is already the upstream default.
2024-02-28 11:45:39 +01:00
Pol Dellaiera 200390b3ed
Merge pull request #291748 from abysssol/update-ollama-0.1.27
ollama: 0.1.26 -> 0.1.27
2024-02-28 10:15:42 +01:00
Flakebi 9db96ee839
paperless: fix uploading files via local folder
The consumer service needs to be in the same namespace as the
task-queue, otherwise they cannot see each others temporary files.
Same as for web uploading.

See also the discussion here:
https://github.com/paperless-ngx/paperless-ngx/discussions/5606
2024-02-28 09:14:48 +01:00
K900 a64a75a7ca
Merge pull request #291946 from hcsch/pipewire-wireplumber-config-packages-migration
nixos/pipewire: add assertions for migration to `extraConfig`/`configPackages`
2024-02-28 09:17:34 +03:00
Morgan Jones a5c305d170
nixos/armagetronad: address code review feedback 2024-02-27 18:59:37 -08:00
Will Fancher b9fe04d671
Merge pull request #291825 from WilliButz/repart/max-label-length
nixos/systemd-repart: add assertion for partition label length
2024-02-27 20:37:02 -05:00
Will Fancher a587a6a357
Merge pull request #285401 from sdht0/systemd-boot-xbootldr
nixos/systemd-boot: Add support for an XBOOTLDR partition
2024-02-27 20:35:03 -05:00
Will Fancher 031978580c
Merge pull request #291882 from philiptaron/systemd-networkd/boolValuesPlus
nixos/networkd: accept `true` and `false` in addition to "yes" and "no" for DHCP= and LinkLocalAddressing=
2024-02-27 20:33:08 -05:00
pennae b71ca1c90a
Merge pull request #291922 from NixOS/mosquitto-2
nixos/mosquitto: remove stutter in acl file name
2024-02-28 02:06:01 +01:00
Ryan Lahfa e53c07f4cc
Merge pull request #291822 from alyssais/zfs-2.1.15
zfs_2_1: 2.1.14 -> 2.1.15
2024-02-28 01:43:56 +01:00
Andrew Marshall 1f32eb724d nixos/zfs: Remove enableUnstable in favor of setting package
This just adds complexity and confusion. Once-upon-a-time, there was no
`package` and only `enableUnstable`, but now it is just confusing to
have both, as it would be possible to do e.g. `package = pkgs.zfs` and
`enableUnstable = true`, but then `enableUnstable` does nothing.
2024-02-27 19:30:19 -05:00
Hans Christian Schmitz 5f6dca8403
nixos/pipewire: add assertions for migration to extraConfig/configPackages
The PR #282377 made files/directories specified in
`environment.etc."pipewire<...>"` and `environment.etc."wireplumber<...>"`
conflict with existing configuration of the PipeWire NixOS module due to how
the `configPackages` options were implemented. This sadly wasn't easily
avoidable. As this can cause breakage for users moving from 23.11 to 24.05
though, assertions can help guide them to use `services.pipewire.extraConfig`
or `services.pipewire.configPackages` / `services.wireplumber.configPackages`
instead, fixing the breakage.
2024-02-28 01:22:28 +01:00
abysssol 5c143f0366 nixos/ollama: override kernelPackages with nvidia driver
Instead of setting linuxPackages to a singleton set with nvidia_x11,
override the system's kernelPackages with the nvidia driver.
This is more semantically correct, though doesn't change any behavior.
2024-02-27 18:51:54 -05:00
Andrew Marshall 2e36c49949 nixos/pam: Do not incorrectly use zfs.enableUnstable in assertion
`zfs.enableUnstable` only has an effect if `zfs.enabled = true`, so only
require `zfs.enabled` to be true here.
2024-02-27 18:46:00 -05:00
Andrew Marshall 929fcf9335 zfs_unstable: Rename from zfsUnstable
This matches the naming of other zfs_* pkgs.
2024-02-27 18:45:55 -05:00
Andrew Marshall ce5b1e007e nixos/zfs: Fix typo in option doc 2024-02-27 18:45:55 -05:00
e1mo 43fee5401d
nixos/bird-lg: Update option description to indicate new features
In release v1.3.3[0] support for CIDRs was added, thus updated the
option description to indicate the new support for that.

[0]: https://github.com/xddxdd/bird-lg-go/releases/tag/v1.3.3
2024-02-27 23:54:21 +01:00
Linus Heckemann 98684f4504
Merge pull request #270611 from astro/systemd-netboot
Systemd netboot
2024-02-27 23:44:57 +01:00
Sandro f9477e3a75
Merge pull request #209506 from Izorkin/update-dhcpcd-exit-hook
nixos/dhcpcd: optimize exitHook
2024-02-27 23:01:22 +01:00
Astro 6fbf631a7b nixos netboot: prepend systemd initrd sysroot for store overlay 2024-02-27 22:41:45 +01:00
Sandro 9c1ea5e3a2
Merge pull request #267012 from alois31/plymouth-unbloat
nixos/plymouth: drop the X11 renderer in the initrd
2024-02-27 22:28:27 +01:00
Sandro 4c88c797b8
nixos/mosquitto: remove stutter in acl file name 2024-02-27 22:15:43 +01:00
Atemu 97f445e8f1
Merge pull request #245005 from Scrumplex/nixos-monado
nixos/monado: init
2024-02-27 20:11:04 +00:00
Sandro Jäckel 6753857664
nixos/tailscale: add option to pass flags to tailscaled 2024-02-27 20:08:08 +01:00
Philip Taron 27d6c242ea
nixos/networkd: accept true and false in addition to "yes" and "no" for DHCP= and LinkLocalAddressing=
These were the only two systemd configuration values that were missing the `boolValues ++` treatment, according to my `rg` through the codebase.
2024-02-27 08:53:32 -08:00
WilliButz 4d59ace14f
nixos/systemd-repart: add assertion for partition label length
The maximum length for a GPT label supported by systemd is 36
characters. When a repart definition contains a label that is longer
than the supported maximum length, it is ignored by systemd-repart and
a log message is produced.

The new assertion makes this obvious to the user at evaluation time,
allowing them to either drop the property entirely or choose a supported
label within the length limit instead.
2024-02-27 17:38:14 +01:00
Sandro Jäckel 6cd7477733
nixos/hydra: add option for starman workers
This is useful for small deployments which do not need 5 spare starman
workers taking 160 MB of RAM each.
2024-02-27 15:45:20 +01:00
Someone Serge 2a63db4e6f
nixos/virtualisation.containers.cdi.dynamic.nvidia: expose driverLink
..shallowly
2024-02-27 12:50:59 +00:00
Alyssa Ross 45f1428902
zfs_2_1: 2.1.14 -> 2.1.15
This adds compatibility with newer kernels, which fixes
nixosTests.zfs.series_2_1, which broke when the default kernel version
was bumped.

This means we no longer need the removeLinuxDRM option at all, but
I've kept it around as a no-op so people can leave it set in case the
same thing happens again in future.
2024-02-27 13:44:16 +01:00
Someone Serge 65dbac7215
nixos/virtualisation.containers.cdi.dynamic.nvidia: refactor w/ callPackage 2024-02-27 11:59:57 +00:00
Jon Seager d0b85d47c6
Merge pull request #289863 from mjm/nut-exporter-variables
nixos/prometheus-nut-exporter: use extraFlags, add nutVariables option
2024-02-27 11:11:30 +00:00
Siddhartha b470b4432d nixos/systemd-boot: Add support for an XBOOTLDR partition 2024-02-26 21:55:49 -05:00
Adam C. Stephens 3a3f30d6b9
Merge pull request #291547 from alyssais/zfs-linux-6.6-aarch64
zfs: update latestCompatibleLinuxPackages
2024-02-26 21:45:20 -05:00
pennae 13aff9b34c
Merge pull request #259937 from charmoniumQ/patch-1
nixos/mosquitto: fix ACL permissions
2024-02-26 22:58:40 +01:00
Atemu f53c775852
Merge pull request #278454 from litchipi/mealie
mealie: init at 1.2.0
2024-02-26 21:01:49 +00:00
Julien Malka d882852f8b
Merge pull request #291160 from jmbaur/systemd-boot-builder-cross 2024-02-26 21:43:23 +01:00
Luflosi a982176a71
nixos/memcached: clarify behaviour of enableUnixSocket
Let's make it clear that enabling this option will disable listening on an IP address and port.
2024-02-26 15:29:55 +01:00
Pol Dellaiera 033a375a23
Merge pull request #290363 from abysssol/update-ollama-0.1.26
ollama: 0.1.24 -> 0.1.26
2024-02-26 15:00:57 +01:00
Alyssa Ross 2b9f043823
zfs: update latestCompatibleLinuxPackages
ZFS no longer tries to use GPL-only symbols on aarch64.

Tested by building nixosTests.zfs.stable (modified to use Linux 6.6)
and nixosTests.zfs.unstable.
2024-02-26 12:27:10 +01:00
K900 d596c9b4b5
Merge pull request #291513 from K900/pipewire-lv2
nixos/pipewire: add LV2 plugins option
2024-02-26 10:19:28 +03:00
K900 eb74747f38 nixos/pipewire: add LV2 plugins option
Follow-up #282377.

Some packages may want to load LV2 plugins directly from PipeWire config instead, so add another option to accomodate those.
2024-02-26 10:04:45 +03:00
Weijia Wang 9798dc0a48
Merge pull request #291464 from Gerg-L/switcheroo2
nixos/switcherooControl: add package option
2024-02-26 07:56:34 +01:00
K900 92b9d11129
Merge pull request #282377 from hcsch/pipewire-wireplumber-config-packages
nixos/pipewire: add configPackages options
2024-02-26 09:12:06 +03:00
Adam C. Stephens af810fc67e
Merge pull request #284874 from shlevy/ovmf-ms
Enable MS-compatible secure boot with OVMF
2024-02-25 22:34:05 -05:00
Gerg-L d70c353c16
nixos/switcherooControl: add package option
clean up
2024-02-25 20:49:31 -05:00
Michele Guerini Rocco 9fcbb05a2c
Merge pull request #290240 from rhoriguchi/nixos/hardware/printers
nixos/hardware/printers: fix empty ppdOptions
2024-02-26 00:08:00 +01:00
abysssol b8d8c1f207 nixos/ollama: add option for hardware acceleration 2024-02-25 15:57:58 -05:00
Ryan Lahfa 5337ff6a80
Merge pull request #254405 from lf-/jade/nix-path-flakes
nixos/flake: set up NIX_PATH and system flake registry automatically
2024-02-25 21:08:19 +01:00
Ryan Horiguchi a52e27d4f6 nixos/hardware/printers: fix empty ppdOptions 2024-02-25 19:06:35 +01:00
Sandro f8545e512d
Merge pull request #289166 from thanegill/remove-grub-version
treewide: remove deprecated grub.version references
2024-02-25 18:20:33 +01:00
Ryan Lahfa 077d41f9d8
Merge pull request #289856 from pennae/supfs-set
nixos/filesystems: make supportedFilesystems an attrset
2024-02-25 18:05:29 +01:00
Thane Gill e3d82657a2 treewide: remove deprecated grub.version references 2024-02-25 08:29:58 -08:00
Peder Bergebakken Sundt 736c43fecc
Merge pull request #288215 from budimanjojo/patch-1
nixos/oci-containers: don't login if image exists locally
2024-02-25 14:32:32 +01:00
0x4A6F 97bca14e41
Merge pull request #290719 from martinetd/atuin
atuin: small fixes
2024-02-24 23:05:25 +01:00
github-actions[bot] d6cc5bb41d
Merge master into staging-next 2024-02-24 18:00:56 +00:00
Sandro 7fab1e2013
Merge pull request #275024 from jerith666/lorri-less-protected 2024-02-24 16:07:13 +01:00
Jared Baur a786cc0227
nixos/systemd-boot: fix cross for lint check
Since we are not in a `callPackage` context, dependencies in
`nativeBuildInputs` don't get spliced to the buildPlatform, causing a
cross-compiled nixos system to fail at this step when running mypy built
for the hostPlatform.
2024-02-24 08:58:57 -06:00
github-actions[bot] a3e2b0de90
Merge master into staging-next 2024-02-24 12:01:15 +00:00
Colin a65967a12c nixos/nix: documentation: fix outdated reference to /etc/nix.conf 2024-02-24 21:29:38 +11:00
github-actions[bot] 3affb60f96
Merge master into staging-next 2024-02-24 06:03:30 +00:00
Kira Bruneau 84a19992c3
Merge pull request #285627 from opl-/steam-local-transfers
nixos/steam: add localNetworkGameTransfers.openFirewall option
2024-02-23 20:24:40 -05:00
Sandro 806772b178
Merge pull request #274662 from StarGate01/pcscd-debug 2024-02-24 01:23:10 +01:00
github-actions[bot] 8034cefe44
Merge master into staging-next 2024-02-24 00:02:02 +00:00
Sandro f6b46c1f59
Merge pull request #290119 from cafkafk/kublet-config 2024-02-24 00:34:46 +01:00
Michele Guerini Rocco ed9121e5d7
Merge pull request #282758 from rht/hardware_no_network
hddfancontrol & thinkfan: disable network access.
2024-02-24 00:15:24 +01:00
Fabián Heredia Montiel db1ee6dfe6 Merge remote-tracking branch 'origin/master' into staging-next
fastcdr was moved to by-name

Related to:

- https://github.com/NixOS/nixpkgs/pull/290836
2024-02-23 16:47:01 -06:00
opl 877179c89d nixos/steam: add localNetworkTransfers.openFirewall option
Steam local network game transfers require TCP port 27040 to be open:
https://steamcommunity.com/groups/SteamClientBeta/discussions/0/3775742015034590856/#c3827537203130812127

They also require UDP port 27036 to allow discovering peers on the same network before a transfer on port 27040 can be initiated.

Co-authored-by: Kira Bruneau <kira.bruneau@pm.me>
2024-02-23 22:03:24 +01:00
Adam Stephens 6a0ad369f2
nixos/incus: assert nftables is used when firewall is enabled
incus manages its own firewall rules and prefers nftables. The
advantages of nftables for segmenting multiple tools managing firewall
rules is sufficient to require nftables with incus.

https://linuxcontainers.org/incus/docs/main/howto/network_bridge_firewalld/#use-incus-firewall
2024-02-23 15:49:33 -05:00
Pol Dellaiera f9ef0053c5
Merge pull request #288401 from katexochen/bees/refactor
bee: refactor & update; bee{-unstable,-clef}: remove; maintainers: remove attila-lendvai
2024-02-23 20:12:41 +01:00
Christoph Honal 6c5bcf43f1 nixos/pcscd: Add extraArgs option 2024-02-23 16:52:36 +01:00
Sefa Eyeoglu 3f7e9baeeb
nixos/monado: prevent Monado from restarting quickly
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:16 +01:00
Sefa Eyeoglu 0e585a63e2
nixos/monado: make CAP_SYS_NICE wrapper configurable
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:16 +01:00
Sefa Eyeoglu 2d2493b23d
nixos/monado: add option to make Monado the default OpenXR runtime
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:15 +01:00
Sefa Eyeoglu ce36e73fdb
nixos/monado: link OpenXR runtimes
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:15 +01:00
Sefa Eyeoglu 9003167522
xr-hardware: init at unstable-2023-11-08
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:15 +01:00
Sefa Eyeoglu 5d57df8a80
nixos/monado: init
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-02-23 14:25:15 +01:00
github-actions[bot] d08f9b5833
Merge master into staging-next 2024-02-23 12:01:18 +00:00
Emery Hemingway 28ffcffcbf nixos/ccache: add options to set ownership of cache dir 2024-02-23 11:08:02 +00:00
Emery Hemingway d843ec4e3d nixos/ccache: do not "with lib;" 2024-02-23 11:08:02 +00:00
Hans Christian Schmitz e722c56160
nixos/wireplumber: add required lv2 plugins to service path 2024-02-23 08:58:16 +01:00
Hans Christian Schmitz 5bf2637b48
nixos/wireplumber: add config packages option 2024-02-23 08:58:15 +01:00
Hans Christian Schmitz 054bba560a
nixos/pipewire: add config packages option 2024-02-23 08:57:16 +01:00
Hans Christian Schmitz 992582fdf8
nixos/pipewire: Fix capitalization
In docs PipeWire and WirePlumber should be capitalized as in this
sentence.
2024-02-23 08:57:12 +01:00
Christina Sørensen 26036ecf31
kubelet: Set Kubelet Parameters Via A intermediate Configuration File
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-02-23 08:55:02 +01:00
Litchi Pi 4ebf2b54b0 nixos/mealie: init module
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-02-23 07:15:24 +01:00
Weijia Wang 5f5062d1ef Merge branch 'master' into staging-next 2024-02-23 05:09:55 +01:00
Sandro 80e6bb31d5
Merge pull request #289956 from SuperSandro2000/archisteamfarm 2024-02-23 02:06:03 +01:00
Sandro 78745f4652
Merge pull request #289934 from jnsgruk/scrutiny 2024-02-23 00:43:55 +01:00
Dominique Martinet 85ee3198c7 atuin: Allow setting database.uri to null
When a password is required to connect to postgres using
services.atuin.database.uri directly would make the password be written
in the nix store, which is suboptimal.
Instead we can have the password in a file accessible only to root by
having systemd read an EnvironmentFile directly, but we must ensure that
this file has priority over the environment set.
Not setting the variable in this case is more straightforward.
2024-02-23 07:35:21 +09:00