Commit graph

40115 commits

Author SHA1 Message Date
Sandro b82347b61a
oauth2-proxy: fix nginx variables (#442825) 2025-09-15 12:01:37 +00:00
Sandro 5d91651e5e
nixos/tailscale: interface should be up prior to service finish (#396399) 2025-09-15 11:42:40 +00:00
André Schröder b2942cbeb7
nixos/umurmur: fix settings type 2025-09-15 12:57:13 +02:00
lassulus 70e8ec450b
Fix freeform usages in some modules (#440462) 2025-09-15 10:24:09 +00:00
Bert Proesmans c9377a2ec7 nixos/windmill: Introduce systemd target unit
Windmill consists of multiple services, all can be started/stopped/controlled/ordered
by the newly introduced windmill.target unit.
2025-09-15 10:04:18 +00:00
Bert Proesmans d37a03eb5a nixos/windmill: Fix database setup config
Postgresql db-init procedure changed with a separate unit for initialisation.
This commit makes the windmill configuration conformant again.
2025-09-15 10:04:17 +00:00
Scott Edlund b67bf1607c nixos/tailscale: tailscaled-autoconnect use Type=notify, wait for Running
Previously the `Starting` state was missed, allowing the service to
complete before the interface was ready, causing services that bind to
Tailscale IPs to fail to start.

Now waits for Tailscale to report `Running` and notifies systemd
accordingly.

Switch the unit to Type=notify to timeout if there is no connection.

Remove `NeedsMachineAuth` gating since it requires client approval in
the console.
2025-09-15 17:55:41 +09:00
r-vdp c4753ff331
nixos/systemd-boot-builder: make sure to print informational messages to stderr
Otherwise this gets printed to stdout when running things like
nixos-rebuild, while people rely on the toplevel store path being the only
output of such commands.
2025-09-15 10:19:15 +02:00
kirillrdy 6caa2d1210
nixos/bind: add extraArgs option for command-line arguments (#442322) 2025-09-15 07:04:18 +00:00
Michele Guerini Rocco f59c39a3cc
nixos/wpa_supplicant: allow duplicate network blocks (#441410) 2025-09-15 03:52:15 +00:00
Bobby Rong f5a8000150
nixos/pantheon, pantheon.elementary-greeter: Default to pantheon-wayland session
See elementary/session-settings issue 91.
2025-09-14 23:06:44 +08:00
Sandro 5816a8aa0a
nixos/ifstate: fixed initrd usage with cryptsetup (#441561) 2025-09-14 14:54:11 +00:00
Maximilian Bosch 9c12c46b01
nixos/grafana: document how to enable drilldown when using custom plugins (#442621) 2025-09-14 12:17:34 +00:00
Maximilian Bosch 5f44bfc59b
nixos/grafana: document how to enable drilldown when using custom plugins
IMHO, it's a bit surprising that drilldown doesn't show anything when
using `declarativePlugins` (and thus, the four apps are missing).

Add instructions on how to get these apps back.
2025-09-14 13:42:22 +02:00
Johannes Kirschbauer 30b647732c
nixos/modules: meshcentral use correct type in freeformType 2025-09-14 11:37:18 +02:00
Johannes Kirschbauer 69aa67338f
nixos/modules: openvpn3 use correct type in freeformType 2025-09-14 11:37:18 +02:00
Maximilian Bosch cdb563152f
teams/cachix: init (#441482) 2025-09-14 09:24:44 +00:00
Evgeny Kurnevsky e1cb01d0b4
oauth2-proxy: fix nginx variables
They are properly set only inside location block.
2025-09-14 09:05:39 +02:00
Bobby Rong b9eea40616
nixos/pantheon: Move out of X11
The next few commits will make pantheon-wayland the default.

Note that the Pantheon LightDM greeter option is left untouched
right now since it still runs under X11.
2025-09-14 14:36:05 +08:00
Felix Singer f6d9a910e6 nixos/murmur: Hard-code log directory to /var/log/murmur
The Murmur NixOS module allows logging to a file instead of journald. At
the moment any arbitrary directory may be specified by using the
`logfile` option, but nothing ensures that the directory exists or
proper permissions are configured.

Since there is not much reason to specify a custom directory for log
files anyway, just use `/var/log/murmur` by using the systemd way. This
replaces the option `logfile` with the boolean option `logToFile` as
well.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-14 06:59:46 +02:00
Léana 江 fe4da89657
nixos/wpa_supplicant: allow duplicate network blocks
Allow users to specify more than one network block of the same SSID.
In addition, allow the specification of its BSSID to better distinguish
these network blocks.
2025-09-14 07:06:07 +08:00
h7x4 c347657847
nixos/ente: init modules (#406847) 2025-09-13 22:11:42 +00:00
Sandro beae95d25c
purple-matrix: drop (#439346) 2025-09-13 19:35:43 +00:00
misuzu 46d631a6bb
nixos/nebula: add reload support (#441054) 2025-09-13 19:20:28 +00:00
Emily e3fcac5e08
lxd: remove packages and modules (#441370) 2025-09-13 19:17:22 +00:00
Gaétan Lepage 3cefce33a1
nixos/chromadb: deprecate logPath option (#442520) 2025-09-13 19:15:23 +00:00
dish 6ab8712005
purple-matrix: drop
Has been unmaintained since 2022 and uses the EOL http-parser library
that has many vulnerabilities.
2025-09-13 14:54:03 -04:00
John Titor d6ed16a832
nixos/bcachefs: add boot.bcachefs.package
This allows configuring the userspace bcachefs package to use.
Similar to boot.zfs.package
2025-09-13 22:17:32 +05:30
Adam C. Stephens ec17e680af
lxd: remove packages and modules 2025-09-13 12:47:00 -04:00
Adam C. Stephens 7eef130c2c
nixos/lxd: remove container and virtual-machine releases 2025-09-13 12:44:42 -04:00
Sandro 12d721cc19
nixos/mailman: add package option (#427455) 2025-09-13 16:30:12 +00:00
oddlama 84d7ec6875
nixos/ente: init module and test 2025-09-13 10:59:35 +02:00
Aleksana 32d4ae8fc2
nixos/kmscon: fix option descriptions (#441468) 2025-09-13 14:36:37 +08:00
Aleksana d954f5d323
nixos/mastodon: fix streaming path (#442462) 2025-09-13 14:27:53 +08:00
Philip Taron 78f76b6b33
nixos/tailscale: Add option to disable upstream debug logging (#432412) 2025-09-13 02:46:13 +00:00
Haylin Moore e901061412 nixos/chromadb: deprecate logPath option
The module and nixos test are currently broken because the logPath option is always set by default and it passes a parameter to the CLI that no longer exists. Lets just remove logPath all together as the parameter it relied on got removed.
2025-09-12 18:27:06 -07:00
Sandro Jäckel 608df331d8
nixos/mailman: add package option 2025-09-13 03:01:03 +02:00
merrkry f2a1154c65 nixos/mastodon: fix streaming path 2025-09-12 21:18:01 +02:00
h7x4 9e5afcd5d2
nixos/php-fpm: enable systemd watchdog (#394441) 2025-09-12 12:22:04 +00:00
fredrikr79 8c13f3d7ff
nixos/php-fpm: enable systemd watchdog 2025-09-12 14:09:26 +02:00
fsagbuya 0a35b0539c nixos/bind: add extraArgs option for command-line arguments 2025-09-12 18:18:04 +08:00
Jörg Thalheim b2ba46d82c
treewide: prefer types.ints over addCheck expressions (#442243) 2025-09-12 07:22:59 +00:00
Jörg Thalheim 220a672ae2
nixos/{kryoflux,rethinkdb,dsnet}: add missing imports in module-list (#442252) 2025-09-12 07:14:20 +00:00
Illia Pshonkin dcf2b9c0a0 nixos/victoriametrics: Add ability to pass basicAuthPasswordFile 2025-09-12 07:59:46 +02:00
h7x4 51eb8e5041
nixos/{kryoflux,rethinkdb,dsnet}: add missing imports in module-list 2025-09-12 03:23:18 +02:00
h7x4 c5e7285f2d
nixos/crowdsec: Enable module (#441602) 2025-09-12 01:19:30 +00:00
h7x4 3c10ae2f66
nixos/networking: prefer types.ints over addCheck 2025-09-12 02:37:50 +02:00
h7x4 770a8a6798
nixos/tinc: prefer types.ints over addCheck 2025-09-12 02:32:56 +02:00
h7x4 85077ec2b1
nixos/tayga: prefer types.ints over addCheck 2025-09-12 02:31:48 +02:00
h7x4 e74440f374
nixos/monero: prefer types.ints over addCheck 2025-09-12 02:30:30 +02:00
h7x4 3c811c4f71
nixos/postgrey: prefer types.ints over addCheck 2025-09-12 02:29:08 +02:00
éclairevoyant 45193d5a8c
nixos/nixpkgs: correct some option defaults 2025-09-11 17:12:35 -04:00
Nick Cao 6a15f972d1
nixos/strongswan-swanctl: update option descriptions 2025-09-11 16:58:42 -04:00
Franz Pletz c986990888
nixos/anubis: Add missing botPolicy option implementation (#401622) 2025-09-11 15:55:35 +00:00
Franz Pletz a1b4ee54d5
nixos/snapserver: migrate to settings option (#441245) 2025-09-11 15:02:12 +00:00
SandaruKasa f0d91fc928 nixos/zapret: fix examples 2025-09-11 15:41:50 +03:00
Wolfgang Walther ae4aa4370d
nixos/patroni: fix documentation link for settings and add example (#441713) 2025-09-11 10:16:07 +00:00
Felix Singer 9309fd7508 nixos/murmur: Reverse order of allowed address families
Instead of specifying what shouldn't be allowed, rather list allowed
address families.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-11 09:14:00 +02:00
sebkiro 1b22321e86 nixos/patroni: fix documentation link for settings and add example 2025-09-10 19:52:05 +02:00
Will Fancher af1b121a0d
nixos/top-level: Install 'bootStage2' as 'init' in all non-initrd configs (#441777) 2025-09-10 14:39:32 +00:00
Will Fancher 6b5020dc9c nixos/top-level: Install 'bootStage2' as 'init' in all non-initrd configs
Eventually we'd like to change our posture on this, and somehow ensure
that 'init' is always our systemd binary, but for now containers
require us to do it this way.
2025-09-10 09:45:48 -04:00
Jon Seager cfdb1500e3
scrutiny: remove jnsgruk from maintainers 2025-09-10 14:32:15 +01:00
Sandro d85e95dad6
nixos/networkmanager: fix serializing an invalid wifi.powersave=null (#438347) 2025-09-10 15:04:35 +02:00
Paul Haerle 83c4f208c2
nixos/limine: fix install script when using Xen with EFI (#441473) (#441644) 2025-09-10 13:35:19 +02:00
Harish Rajagopal 7c7747206c
nixos/crowdsec: Add missing option descriptions 2025-09-10 08:53:41 +02:00
Harish Rajagopal 5651a8722f
nixos/crowdsec: Enable module 2025-09-10 08:53:16 +02:00
David Wronek 695b0bfbe3 nixos/sshwifty: init module
Signed-off-by: David Wronek <david.wronek@mainlining.org>
2025-09-10 07:40:09 +02:00
Rane 77448445c1 nixos/limine: fix install script when using Xen with EFI (#441473) 2025-09-10 08:55:40 +10:00
Marcel 25863e23a2
nixos/ifstate: deuplicate common initrd and non-initrd service config 2025-09-09 23:53:12 +02:00
dish 4651f4529b
nixos/canaille: remove HTTP header X-XSS-Protection (#441451) 2025-09-09 17:19:51 -04:00
Marcel f3f9a71af6
nixos/ifstate: remove initrd default dependencies 2025-09-09 21:04:10 +02:00
Marcel bc846d64d2
nixos/ifstate: add upstream initrd networking targets 2025-09-09 21:04:09 +02:00
Marcel f73402c75f
nixos/ifstate: remove manual /var/run creation
The directory seems to be created by other processes using recent
changes in master now. Therefore the manual mkdir is not needed anymore.

As per the removed code comment, this will probably also be fixed later
in pyroute2 directly.
2025-09-09 21:04:06 +02:00
nixpkgs-ci[bot] 077cb3aa7d
Merge master into staging-next 2025-09-09 18:05:25 +00:00
StepBroBD 72fdd87966
nixos/calibre-web: fix malformed environment variable (#441487) 2025-09-09 19:37:26 +02:00
wrvsrx f0303c62ef
nixos/sillytavern: add it 2025-09-10 00:14:50 +08:00
Sandro 42efe1cc8a
nixos/dnscrypt-proxy: rename from dnscrypt-proxy2 (#433312) 2025-09-09 17:45:50 +02:00
Yifei Sun 6483a3e012
nixos/calibre-web: fix malformed environment variable 2025-09-09 17:15:51 +02:00
Sander 1ba28dc2f4
teams/cachix: inherit packages and modules 2025-09-09 16:55:12 +02:00
Sandro Jäckel cc651f49de
nixos/kmscon: fix option descriptions 2025-09-09 16:25:00 +02:00
Kerstin Humm 301e5cca9c
nixos/canaille: remove HTTP header X-XSS-Protection
Addresses https://github.com/NixOS/nixpkgs/issues/438800
2025-09-09 14:26:02 +02:00
nixpkgs-ci[bot] c993acaaff
Merge master into staging-next 2025-09-09 12:06:57 +00:00
Grimmauld 02176efa65
nixos/opensnitch: various fixes (#438316) 2025-09-09 11:12:09 +00:00
Franz Pletz b3ec65dc1e
nixos/ntfy: add environmentFile option for secrets (#441304) 2025-09-09 11:50:41 +02:00
Arian van Putten daffcbe598
various: drop due to broken src (#439158) 2025-09-09 08:53:25 +02:00
nixpkgs-ci[bot] e17f375991
Merge master into staging-next 2025-09-09 00:16:24 +00:00
Martin Weinelt 6d2ea675c3
nixos/snapserver: migrate to settings option
Replaces the complex commandline templating with a structured freeform
settings type, that renders out in the ini format while converting lists
to multiple key-value pairs.
2025-09-09 02:15:53 +02:00
xgroleau 810154770f nixos/ntfy: add environmentFile option for secrets 2025-09-08 23:08:44 +02:00
Felix Bühler 99fd52da3f
formats: add nixConf (#440438) 2025-09-08 22:37:30 +02:00
Vladimír Čunát a713d31b56
Merge branch 'master' into staging-next 2025-09-08 20:46:02 +02:00
h7x4 af678465ee
treewide/nixos: move number typed port options to types.port (#441136) 2025-09-08 18:36:19 +02:00
Sandro 947f328b0a
pihole-ftl: Fix log deleter service creating an empty database (#435694) 2025-09-08 17:05:02 +02:00
Sandro 25301c0bc3
pihole: 6.1 -> 6.1.4 (#414796) 2025-09-08 15:53:45 +02:00
Wolfgang Walther 42b91d5057
maintainers: rename 'rewine' to 'wineee' (#441123) 2025-09-08 13:51:49 +00:00
Haylin Moore cf540f8c98 treewide/nixos: move number typed port options to types.port 2025-09-08 15:27:19 +02:00
nixpkgs-ci[bot] c9858c34f7
Merge master into staging-next 2025-09-08 12:07:18 +00:00
Matt Sturgeon 04698ee183
nixos/timekpr: init at 0.5.8 (#419487) 2025-09-08 13:10:30 +02:00
rewine fc2e2eeb82 maintainers: rename 'rewine' to 'wineee'
Because my displayed name and username on GitHub are not the same, some users may mistakenly think that [rewine](https://github.com/rewine) is my account.
2025-09-08 14:00:29 +08:00
Yang, Bo 33dfc47d5e nixos/timekpr: init at 0.5.8
Co-authored-by: Matt Sturgeon <matt@sturgeon.me.uk>
2025-09-08 01:34:02 +00:00
nixpkgs-ci[bot] a0966d7a77
Merge master into staging-next 2025-09-08 00:17:21 +00:00