Commit graph

37870 commits

Author SHA1 Message Date
Arnout Engelen 1a5f51a754
treewide: possibly inactive maintainer ericsagnes (#399433) 2025-05-09 13:51:19 +02:00
Leona Maroni 18ef62172e
nixos/udev: verify udev rules using udevadm (#404323) 2025-05-09 13:03:30 +02:00
Arnout Engelen eb9ce0eed3
treewide: remove inactive maintainer ericsagnes 2025-05-09 12:03:09 +02:00
fleaz 8638793548 nixos/gitlab-runner: Add dockerPullPolicy option 2025-05-09 09:34:00 +02:00
Maximilian Bosch 7aa84359d4
Merge: nixos/postgresql: remove recoveryConfig option (#405186) 2025-05-09 09:28:23 +02:00
Jacek Galowicz 8b3baa1402
nixos/test-driver: add backdoor based on systemd-ssh-proxy & AF_VSOCK (#392030) 2025-05-09 08:03:55 +02:00
sudoforge 8aa7a07653
nixos/iwd: move General.UseDefaultInterface to DriverQuirks.DefaultInterface
`General.UseDefaultInterface` was deprecated last year, with a
recommendation to move to `DriverQuirks.DefaultInterface` [0] [1] [2].

[0]: https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=5c7777ff0fbcdee3c5d3a3cf6b1f375f2e820644
[1]: https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=d223f49fbc622e5b2f270711619ecbd542bed12e
[2]: https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=a27b7823df12c5d185b39aa7777c546843c1c96f
2025-05-08 21:35:40 -07:00
Colin 62cab5dbe8
pkgs/buffybox: 3.2.0-unstable-2025-03-16 -> 3.3.0-unstable-2025-05-06 (#403179) 2025-05-09 02:04:39 +00:00
hustlerone 90ff6dc49e nixos/unl0kr: fix touchpads 2025-05-09 00:29:43 +02:00
K900 c50e195272
grafana: 11.6.0+security-01 -> 12.0.0 (#404897) 2025-05-09 00:08:35 +03:00
isabel d0d992d748
nixos/regreet: use proper user in tmpfiles (#284722) 2025-05-08 20:31:42 +01:00
Alex Martens fae4917f2f
nixos/homepage-dashboard: harden service (#377886) 2025-05-08 20:28:08 +01:00
r-vdp 1278d56d71
nixos/udev: verify all udev rules using udevadm 2025-05-08 20:34:26 +02:00
Jan Tojnar 5a60a1a922 nixos/gnome: Enable RTKit by default
Without this, Mutter will complain at startup:

    .gnome-shell-wr[1013]: Failed to make thread 'KMS thread' high priority scheduled: GDBus.Error:org.freedesktop.DBus.Error.NameHasNoOwner: Name "org.freedesktop.RealtimeKit1" does not exist

PipeWire, WirePlumber and xdg-desktop-portal-gnome complain about the missing service too.
2025-05-08 18:29:03 +02:00
Franz Pletz 2634ca8249
nixos/ntpd-rs: Handle configuring NTP pools (#403903) 2025-05-08 18:28:32 +02:00
Jan Tojnar 0b772ee034 nixos/gdm: Remove stray with pkgs.gnome;
It was unused – `gdm` is part of the outer scope.
2025-05-08 18:22:29 +02:00
isabel 4324b1e793
nixos/evremap: get rid of unecessary bash (#390855) 2025-05-08 17:04:52 +01:00
Pol Dellaiera aaf817bb5b
nixos/glance: allow specifying secret settings (#395551) 2025-05-08 13:58:03 +00:00
Izorkin 4ec6492b3b nixos/mastodon: add option elasticsearch.prefix 2025-05-08 14:48:52 +02:00
Wolfgang Walther 7d0363742c
nixos/postgresql: remove recoveryConfig option
Since v12, PostgreSQL doesn't support recovery.conf anymore and fails to
start up when this option is set:

  FATAL:  using recovery command file "recovery.conf" is not supported

This is documented at:

https://www.postgresql.org/docs/current/recovery-config.html
2025-05-08 12:16:25 +02:00
Johannes Kirschbauer 5ee93d2532
lib: refactor lib.attrsets.{mapAttrs', mapAttrsToList} and mapAttrs'' in the strongswan-swanctl module (#403581) 2025-05-08 09:42:40 +02:00
ccicnce113424 4551258940 lib: refactor lib.attrsets.{mapAttrs', mapAttrsToList} and mapAttrs'' in the strongswan-swanctl module
The new implementation of `mapAttrsToList` is simpler than the previous one, avoiding an extra string conversion. Benchmarking shows a slight performance improvement. See the discussion here: https://discourse.nixos.org/t/another-implementation-of-mapattrstolist

Additionally, I searched nixpkgs for expressions equivalent to the old `mapAttrsToList` and replaced them with direct calls to the new implementation.
2025-05-08 13:58:54 +08:00
Maximilian Bosch 77a41a7dd8
grafana: 11.6.0+security-01 -> 12.0.0
Closes #404580

ChangeLog: https://github.com/grafana/grafana/releases/tag/v12.0.0

A few changes were necessary here:

* the provision seems to be delayed now, so the `machine.succeed` broke
  because the result was tested before the provisioning was finished.
  Using `wait_until_succeeds` to solve this.

* Work around a problem that got unnoticed during #399404:
  the setup-hook is also run in the `goModules` derivation, but
  `offlineCache` is missing. As a result, the build breaks. I guess this
  was unnoticed because everyone had a goModules with the previous hash
  in their store.

Co-authored-by: Emily <git@emilylange.de>
2025-05-08 07:29:39 +02:00
Wolfgang Walther c8d2eca963
.editorconfig: move subfolder config into separate .editorconfig files
This avoids paths in the top-level file getting out-of-sync, because the
.editorconfig files would be moved together with the files they target.
2025-05-07 20:01:35 +02:00
Wolfgang Walther 6739a5d2bf
nixos/postgrest: make unix-socket accessible for other services (#404596) 2025-05-07 14:40:21 +00:00
Sandro ebfa5f86be
nixos/octoprint: add package option (#393772) 2025-05-07 12:51:44 +02:00
piegames a1848a66d8
nixos/stash: Fix regex in default value (#403279) 2025-05-07 12:45:34 +02:00
Yt e3fa38df6b
lauti: rename from eintopf and update to 1.0.0 (#403263) 2025-05-06 16:24:25 -04:00
Paul Haerle 34c9f25081 nixos/transmission: use Type=notify for systemd service (#396630) 2025-05-06 18:02:48 +02:00
Bruno BELANYI e8f532dea2
nixos/mealie: add 'database.createLocally' (#403670) 2025-05-06 13:45:40 +01:00
Wolfgang Walther 0f9a499fbc
nixos/postgrest: make unix-socket accessible for other services 2025-05-06 11:14:59 +02:00
rnhmjoj 66db09eb62
nixos/dhcpcd: add option to allow setuid binaries
The promise in the networking.dhcpcd.runHook description was broken by
further restrictions added in 21bb7ea9.
2025-05-05 22:00:20 +02:00
rnhmjoj 54a6949722
nixos/tests/networking: test hostname via DHCP 2025-05-05 21:59:33 +02:00
rnhmjoj bf1cf6bffc
nixos/dhcpcd: fix hostname via DHCP 2025-05-05 21:53:45 +02:00
Paul Haerle 460d72b182
nixos/qemu-guest-agent: fix udevadm verify issues (#404388) 2025-05-05 20:35:33 +02:00
Alyssa Ross afdbf499ac nixos/mailman: hyperkitty needs mailman-web-setup
qcluster won't be happy if it's started before the database migrations
have been run.

	12:25:47 [Q] ERROR Failed to pull task from broker
	Traceback (most recent call last):
	  File "/nix/store/w5ndmidmkiy02vvgl7cxx1fkzc1pichg-python3-3.12.9-env/lib/python3.12/site-packages/django/db/backends/utils.py", line 89, in _execute
	    return self.cursor.execute(sql, params)
	           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	  File "/nix/store/w5ndmidmkiy02vvgl7cxx1fkzc1pichg-python3-3.12.9-env/lib/python3.12/site-packages/django/db/backends/sqlite3/base.py", line 328, in execute
	    return super().execute(query, params)
	           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	sqlite3.OperationalError: no such table: django_q_ormq
2025-05-05 20:06:00 +02:00
K900 3730d8a308
nixos/initrd-ssh: include sshd-auth binary in initrd (#404396) 2025-05-05 19:03:40 +03:00
Yureka 3b42616f4b nixos/initrd-ssh: include sshd-auth binary in initrd 2025-05-05 17:23:47 +02:00
Florian Klink f86a08a098
nixos/dump1090-fa: init (#381375) 2025-05-05 17:49:02 +03:00
K900 bdeb7b79cc
Revert "nixos/k3b: remove module as obsolete" (#404257) 2025-05-05 17:27:11 +03:00
Andrea Ciceri 5acdacbfcf
nixos/dump1090-fa: init module 2025-05-05 15:29:16 +02:00
Sandro 9cacd7ee42
nixos/prometheus/alertmanager-ntfy: init module (#402291) 2025-05-05 13:38:24 +02:00
h7x4 beb9d5230c
coturn: add systemd support (#394670) 2025-05-05 12:53:47 +02:00
r-vdp eec01220a4
nixos/qemu-guest-agent: fix udevadm verify issues 2025-05-05 12:08:59 +02:00
Doron Behar 3642d68634
mjolnir: refactor, 1.9.1 -> 1.9.2, fix building (#403356) 2025-05-05 12:10:50 +03:00
Riyyi 39fbbb7ba0
nixos/nextcloud: fix typo in extraApps example (#404314) 2025-05-05 17:00:50 +08:00
Stel Clementine 62958875f6 Revert "nixos/k3b: remove module as obsolete"
This reverts commit 8a34d575f6.

PR #351093 removed the `programs.k3b` module due to some confusion about
its relevance. In order to write CDs, the security wrappers that allow
running cdrao and cdrecord with elevated privileges are in fact
necessary.
2025-05-04 20:46:53 -07:00
Wolfgang Walther ee942cc4a1
Merge branch 'master' into staging-next 2025-05-04 19:54:40 +02:00
Arne Keller 041121c765
pid-fan-controller: init at 0.1.1, nixos/pid-fan-controller: init (#336849) 2025-05-04 17:42:37 +02:00
Jonathan Davies 86d94b2d88
nixos/ntpd-rs: Handle configuring timeserver FQDN as a pool 2025-05-04 14:30:12 +00:00