Commit graph

2532 commits

Author SHA1 Message Date
Maximilian Bosch 19d29ccade
Merge: nixos/nextcloud: Pass OC_PASS and NC_PASS environment variables to nextcloud-occ (#439771) 2025-09-04 00:36:03 +02:00
Sandro 3a6b82b8f5
nixos/hedgedoc: fix eval 2025-09-03 10:28:42 +02:00
provokateurin ba24e7fa23
nixos/nextcloud: Pass OC_PASS and NC_PASS environment variables to nextcloud-occ 2025-09-03 08:54:48 +02:00
Robert Helgesson 90c505624b nixos/grav: remove X-XSS-Protection
See <https://github.com/NixOS/nixpkgs/issues/438800>.
2025-09-02 20:40:09 +02:00
Robert Helgesson 22617bd181 nixos/grav: use PHP 8.3
The stable version of Grav is not compatible with later versions of
PHP.
2025-09-02 20:40:09 +02:00
Sandro da5d204889
nixos/hedgedoc: add configureNginx option (#427898) 2025-09-02 18:18:03 +02:00
Diogo Correia c129255508
nixos/grocy: don't set X-XSS-Protection anymore
Part of #438800.

The OWASP recommentation[1] is:

> The X-XSS-Protection header has been deprecated by modern browsers
> and its use can introduce additional security issues on the client
> side. As such, it is recommended to set the header as X-XSS-Protection: 0
> in order to disable the XSS Auditor, and not allow it to take the default
> behavior of the browser handling the response. Please use
> Content-Security-Policy instead.

[1] https://owasp.org/www-project-secure-headers/#x-xss-protection
2025-09-01 22:36:10 +01:00
Diogo Correia 80f6d36543
{nixos/,}grocy: add diogotcorreia as maintainer 2025-09-01 22:30:43 +01:00
dish e143b6b049
nixos/kanboard: remove X-XSS-Protection (#439035) 2025-09-01 16:50:24 -04:00
Sandro 6779ff00b3
nixos/glitchtip: fix sourcemap uploads, add stateDir option (#438957) 2025-09-01 17:53:54 +02:00
Defelo 6ef10ab044
nixos/glitchtip: add stateDir option 2025-09-01 16:57:10 +02:00
Defelo 95968f2f73
nixos/glitchtip: fix sourcemap uploads 2025-09-01 16:57:07 +02:00
Morgan Jones 344caf9640
mattermost: charset fixes (#436376) 2025-09-01 02:19:03 +00:00
Zexin Yuan 47fcf23026
nixos/kanboard: remove X-XSS-Protection 2025-09-01 09:43:15 +08:00
Robert Schütz 06c99c29c9 nixos/nextcloud: remove X-XSS-Protection
see https://github.com/nextcloud/server/pull/53476
2025-08-31 10:14:01 +02:00
Erin of Yukis 1ec5da1a27
nixos/jitsi-meet: fix systemd protection flag warning
Fixes systemd warning:

> /etc/systemd/system/jitsi-excalidraw.service:26: Failed to parse ProtectProc=true, ignoring: Invalid argument

when Jitsi-Meet Excalidraw Backend is enabled. `ProtectProc=true` is not a thing according to man pages, `ProtectProc=noaccess` is the most restrictive setting and likely what was originally intentioned.
2025-08-29 08:56:37 +00:00
Philip Taron 43d66715e5
fetchNextcloudApp: add sha512 (#435930) 2025-08-27 12:14:53 -07:00
staticdev 2196fed2b6 fetchNextcloudApp: add sha512 2025-08-26 22:25:48 +02:00
isabel 0471c45c8f
sharkey: 2025.4.3 -> 2025.4.4 (#431142) 2025-08-25 22:22:25 +01:00
dish 970dcca69c
treewide: Fix links in module documentation 2025-08-25 12:55:11 -04:00
Ruby Iris Juric 64a200b22a
sharkey: add tmarkus as maintainer
https://github.com/NixOS/nixpkgs/pull/431142#pullrequestreview-3149369365
2025-08-25 20:16:04 +10:00
Morgan Jones 6cc8a8cdb5
nixos/mattermost: remove fallback charset for MySQL
This was causing issues on newer versions of MariaDB (breaking
NixOS tests) like:

```
Error 1064 (42000): You have an error in your SQL syntax;
check the manual that corresponds to your MariaDB server version
for the right syntax to use near '%2Cutf8' at line 1
```

Since this is simply a fallback character set and all supported versions
of MariaDB support utf8mb4, delete the fallback.

This change should be fully compatible with existing deployments.
2025-08-23 20:41:44 -07:00
Pol Dellaiera bc36d3ac43 maintainers: drop drupol 2025-08-20 17:54:38 +02:00
Jonas Heinrich fd71ab35d6
invoiceplane: 1.6.2 -> 1.6.3 (#431713) 2025-08-20 16:48:57 +02:00
dotlambda 32991f1eac
nixos/immich: add support for VectorChord (#428568) 2025-08-19 13:31:01 -07:00
isabel ddd7db501d
nixos/bluesky-pds: rename from pds 2025-08-19 20:59:04 +01:00
Sefa Eyeoglu a9c17c34b1
nixos/immich: add VectorChord migration docs
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:56:20 +02:00
Sefa Eyeoglu 0b93bf6c22
nixos/immich: add enableVectors option
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:55:28 +02:00
Sefa Eyeoglu fd1994a8b7
nixos/immich: add enableVectorChord option
This enables VectorChord in the database (currently) alongside
pgvecto.rs. Note that VectorChord requires pgvector, which is enabled as
well by this option.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:55:14 +02:00
Jonas Heinrich aa06ffc4c3 nixos/invoiceplane: Update patch 2025-08-17 10:30:23 +02:00
lassulus c4142d912d
nixos/jitsi-meet: fix prosody configuration (#434201) 2025-08-17 01:07:41 +02:00
⛧-440729 [sophie] d58a9b9134
nixos/jitsi-meet: fix prosody configuration 2025-08-16 12:43:31 +02:00
Felix Bargfeldt 409bce8932
zipline: 4.2.1 -> 4.2.3, prune node_modules (#432028) 2025-08-15 12:54:26 +02:00
MiaFoxcat ab475572f4 nixos/outline: add discord auth 2025-08-15 00:16:35 +02:00
Sefa Eyeoglu 1a24457782
nixos/immich: only start after reaching postgres.target
Without this dependency, we may run into a race condition, especially in
our tests.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-14 22:30:00 +02:00
w 95452e8797
nixos/onlyoffice: fix gixy error (#419765) 2025-08-14 13:58:47 +02:00
Toma 84ac628079
nixos/lanraragi: update description (#433505) 2025-08-14 01:29:17 +02:00
TomaSajt 45e24e83c4
nixos/lanraragi: update description 2025-08-13 23:55:44 +02:00
Defelo ed4ce19544
zipline: 4.2.1 -> 4.2.3
Changelog: https://github.com/diced/zipline/releases/tag/v4.2.2
Diff: https://github.com/diced/zipline/compare/v4.2.1...v4.2.2

Changelog: https://github.com/diced/zipline/releases/tag/v4.2.3
Diff: https://github.com/diced/zipline/compare/v4.2.2...v4.2.3
2025-08-13 14:38:20 +02:00
6543 f7611cad51 nixos/nextcloud: unify usage of lib functions 2025-08-11 18:49:21 +02:00
Jörg Thalheim 4940959d28
nixos/mediawiki: fix error from wfGetDB being removed (#427623) 2025-08-10 11:42:14 +02:00
lassulus cb771a25a1
jitsi-meet: fix infinite recursion with prosody package (#432371) 2025-08-10 09:34:49 +02:00
lassulus 6f224e65ea jitsi-meet: fix infinite recursion with prosody package 2025-08-10 00:23:58 +02:00
Maximilian Bosch 3e41a080eb
Merge: nixos/nextcloud: configure redis by default (#421813) 2025-08-07 17:27:21 +02:00
isabel 281eb01683
nixos/snips-sh: init (#390655) 2025-08-07 11:16:11 +01:00
Martin Weinelt 7db4feef65
nixos/discourse: fix postgres dependency
This was broken during the postgresql.target migration in 41c5662cbe.
2025-08-04 15:48:21 +02:00
Felix Bühler a7566d72a0
nixos/freshrss: fix loading extensions' static content (#430651) 2025-08-03 21:39:11 +02:00
Aleksana 3c74938b56
nixos/outline: add support for S3 Transfer Acceleration (#429498) 2025-08-03 22:23:57 +08:00
Matt Christ 637fc36529 nixos/freshrss: fix loading extensions' static content
Before this change, the THIRDPARTY_EXTENSIONS_PATH would end up with a
double-slash in the path, which was breaking FreshRSS's is_valid_path
detection.
2025-08-03 09:22:46 -05:00
Martin Weinelt 56674702b0
nixos/postfix: modernize, cleanup (#416840) 2025-08-02 23:50:59 +02:00