Commit graph

21248 commits

Author SHA1 Message Date
nicoo 1f08575e3a nixos/sshd: Disable authorizedKeysInHomedir if stateVersion >= 24.11
Co-authored-by: Valentin Gagarin <valentin@gagarin.work>
2024-10-18 20:21:12 +00:00
Stanisław Pitucha 87c458e3ce
nixos/go-camo: fix shellcheck findings with enableStrictShellChecks enabled (#349557) 2024-10-19 06:22:18 +11:00
jmir1 858b5c6762 nixos/ddclient: Fix ip command with usev4 and usev6 2024-10-18 20:32:16 +02:00
Sandro d72c0ce546
nixos/nextcloud-notify_push: fix connecting to mysql via socket (#348114) 2024-10-18 20:25:32 +02:00
K900 e1bc488872
nixos/plasma6: fix shellcheck findings with enableStrictShellChecks e… (#349580) 2024-10-18 20:09:15 +03:00
Christina Sørensen d218858bb1
nixos/wakapi: add database options; gate db creation behind database.createLocally (#341176) 2024-10-18 18:04:46 +02:00
Sandro Jäckel fc31cfea42
nixos/plasma6: fix shellcheck findings with enableStrictShellChecks enabled 2024-10-18 17:29:23 +02:00
Atemu dddcb35140
nixos/jupyter: set user primary group (#349415) 2024-10-18 12:05:43 +02:00
Vladimír Čunát a8f84a9dff
nixos/kresd: add link to upstream doc (#311915) 2024-10-18 10:22:18 +02:00
Atemu 267847014a
nixos/immich: do not set services.redis.servers.immich.user (#345126) 2024-10-18 10:19:46 +02:00
Jack Wilsdon df03b32278 nixos/jupyter: set user primary group 2024-10-17 23:44:53 +01:00
David McFarland cd286b21e4
resolvconf: use correct output files when used with dnsmasq (#349320) 2024-10-17 16:44:18 -03:00
David McFarland 403604ca66 resolvconf: use correct output files when used with dnsmasq 2024-10-17 14:20:57 -03:00
scrufulufugus 969102bd11 system76-scheduler: migrate to pkgs/by-name format 2024-10-17 18:22:34 +02:00
scrufulufugus 1d4df7adcc system76-scheduler: Move out of kernel category
system76-scheduler: add alias at old location
2024-10-17 18:22:34 +02:00
Brendan Taylor 04e39de6eb nixos/immich: do not set services.redis.servers.immich.user
the redis module expects a user and group to exist with this name.
previously if there was no group with the same name as
`services.immich.user` the immich redis server would fail to start.

instead we can use the redis module's default behaviour: it will
create a user & group named "redis-immich".
2024-10-17 07:19:02 -06:00
Atemu 644c36174b
nixos/redis: add option services.redis.servers.*.group (#345327) 2024-10-17 10:39:48 +02:00
Leona Maroni edd292c18b
nixos/dokuwiki,nixos/wordpress,nixos/invoiceplane: Remove deprecated isCoercibleToString (#292801) 2024-10-17 09:32:14 +02:00
Felix Bühler cc42a1be7b
nixos/services.mysql: remove with lib; (#338048) 2024-10-16 21:38:48 +02:00
Robert Schütz a9dee7c45b
immich: 1.117.0 -> 1.118.1 (#348890) 2024-10-16 12:31:58 -07:00
Robert Schütz e3152f80bf nixos/immich: change default port to 2283
This was always upstream's default but they also change the internal
port, i.e. behind the reverse proxy, to 2283 in
https://github.com/immich-app/immich/pull/13185.
2024-10-16 10:30:34 -07:00
Adam Stephens bece21421b
nixos/atticd: wants network-online.target
fixes:

trace: evaluation warning: atticd.service is ordered after 'network-online.target' but doesn't depend on it
2024-10-16 12:36:19 -04:00
nikstur e81710fa8b
nixos/userborn: fix username typo (#346773) 2024-10-16 17:00:39 +02:00
Aaron Andersen 2ab323a087
nixos/github-runners: Make 'enable' functional (#342996) 2024-10-16 10:18:14 +02:00
K900 70cc7b62f2
nixos/murmur: Set UMask to 027 (#348652) 2024-10-16 05:16:09 +03:00
Robert Schütz fb2d897809
nixos/headscale: don't set deprecated options in config (#347991) 2024-10-15 16:22:18 -07:00
Felix Bühler e544a67eba
nixos/freshrss: fix phpfpm.pool (#347324) 2024-10-15 22:39:24 +02:00
Azat Bahawi e2337957df
nixos/zapret: init (#347805) 2024-10-15 20:37:40 +00:00
Dmitry Voronin 5a5c04d1ea
nixos/zapret: init 2024-10-15 21:51:53 +03:00
Peder Bergebakken Sundt 13bf1d6259
nixos/resilio: add package option (#346427) 2024-10-15 20:38:41 +02:00
Felix Singer 13f6e2d85f nixos/murmur: Set UMask to 027
Group only needs limited access, while other users don't need access at
all. So set the UMask to 027.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-15 02:43:42 +02:00
Someone a9b63f037b
nvidia-container-toolkit: add "nvidia" to services.xserver.videoDrivers (#344174) 2024-10-14 19:58:35 +00:00
Sandro Jäckel db12279890
nixos/go-camo: fix shellcheck findings with enableStrictShellChecks enabled 2024-10-14 18:21:30 +02:00
Michele Guerini Rocco 35618d0b14
nixos/dhcpcd: fix race between namespace setup and resolvconf (#348305) 2024-10-14 15:44:32 +02:00
Adam C. Stephens 86420f4ee8
nixos/atticd: init module (#347749) 2024-10-14 09:33:35 -04:00
Martin Weinelt f4226b78df
knot-dns: 3.4.0 -> 3.4.1 (#348476) 2024-10-14 14:20:26 +02:00
Richard Steinmetz b9ca8498aa nixos/nextcloud-notify_push: fix connecting to mysql via socket 2024-10-14 13:30:05 +02:00
Vladimír Čunát 46954f61c6
nixos/knotd: extend SystemCallFilter
It was breaking knot-dns.tests.knot
New knotd uses fchown to cover cases where user changes during startup.
In typical Linux cases the user is kept the same and there are
capabilities instead, but the syscall still happens and got caught here.
2024-10-14 10:26:46 +02:00
Markus Kowalewski 812640f38a
nixos/saunafs: add module + test (#347337) 2024-10-14 09:24:51 +02:00
rnhmjoj 52e2e7027d
dhcpcd: fix race between namespace setup and resolvconf
systemd requires paths in `ReadWritePaths=` to exist before setting up
the service sandbox, so dhcpcd should be ordered after resolvconf.
Making resolvconf a oneshot service ensure `After=resolvconf.service`
works correctly.
2024-10-14 08:02:46 +02:00
Pol Dellaiera 56cbea0d2e
snapweb: init at 0.8.0 (#347536) 2024-10-14 07:14:23 +02:00
Felix Buehler de810c5163 nixos/freshrss: update de parameters 2024-10-13 23:07:46 +02:00
Bjørn Forsman 21529d1813 nixos/ups: shutdown UPS at host shutdown
Implement the missing bit of the NUT shutdown design[1]. This ensures
that machines come back up automatically after a power outage. (Without
this change they will only come back up if the UPS completely empties
its battery.)

[1] https://networkupstools.org/docs/user-manual.chunked/Configuration_notes.html#Shutdown_design
2024-10-13 17:55:52 +02:00
Bjørn Forsman 3b781a1e72 nixos/ups: document default upsmon MONITOR value 2024-10-13 17:55:52 +02:00
Bjørn Forsman 2b90f4cdb3 nixos/ups: sort settings attributes
They're listed twice (documentation and implementation) and this change
makes it easier to compare the attrsets.
2024-10-13 17:55:52 +02:00
Adam Stephens 8d4f3f2b3e
nixos/atticd: init module
Copied from 1b29816235/nixos/atticd.nix and modified
2024-10-13 08:23:34 -04:00
Robert Schütz cc4d29d353 nixos/headscale: assert that dns.base_domain is set when using MagicDNS 2024-10-12 18:28:17 -07:00
K900 001fb496bf Merge remote-tracking branch 'origin/master' into staging-next 2024-10-12 21:08:11 +03:00
Kerstin 35c52ab030
mastodon: 4.2.13 -> 4.3.0 (#337545) 2024-10-12 19:37:08 +02:00
Markus Kowalewski d22d60f3ac
nixos/saunafs: add module + test 2024-10-12 19:13:00 +02:00