tobias/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-11-22 08:34:38 +01:00
Code Issues Packages Projects Releases Wiki Activity
534361 commits 198 branches 75 tags 12 GiB
Commit graph

27151 commits

Author SHA1 Message Date
DDoSolitary d410464c5d
nixos/netdata: fix position of NETDATA_PIPENAME 
It was accidentally placed in a condition-guarded block, making the
setting only take effect when enableAnalyticsReporting = false.
 2023-08-09 19:22:20 +08:00
Florian Praden 490ec79ac3
nixos/gitea: bugfix for gitea-dump service. 
Missing custom directory setup in gitea-dump service. Adding environment variable in gitea-dump service definition.
 2023-08-09 11:53:18 +02:00
Artturin ea580ebee8 nixos/fish: Fix completion generator cross-compilation 2023-08-08 23:21:38 +03:00
Mihai Fufezan 50ad802e51
nixos/hyprland: remove xwayland.hidpi 2023-08-08 20:32:53 +03:00
K900 b0b00f0e28
Merge pull request #247937 from linj-fork/fix-types.string 
treewide: stop using types.string
 2023-08-08 18:50:42 +03:00
WilliButz acbf16d419
Merge pull request #247709 from Ma27/nextcloud-adminuser-doc-fix 
nixos/nextcloud: improve documentation of `adminuser`-option
 2023-08-08 16:29:59 +02:00
Lin Jian 74fadae942
treewide: stop using types.string 
It is an error[1] now.

[1]: https://github.com/NixOS/nixpkgs/pull/247848
 2023-08-08 21:31:21 +08:00
DavHau 74c574a8db nixos/zerotierone: document networks never left automatically 
Removing a network from the joinNetworks list does not make the machine leave the network which is confusing.

This behavior is now clarified via the options description
 2023-08-08 11:31:33 +02:00
Michele Guerini Rocco ccc33bd3d7
Merge pull request #245852 from rnhmjoj/pr-fix-dnscrypt 
dnscrypt-wrapper fixes
 2023-08-08 10:34:27 +02:00
Lassulus e63386d6bf
Merge pull request #247751 from Mic92/installation-device-trusted-users 
nixos/installation-device: allow nix-copy for root/nixos user
 2023-08-08 08:23:59 +02:00
Franz Pletz 9640eb3970
Merge pull request #246029 from ehmry/eris-go 2023-08-08 06:18:03 +02:00
Pol Dellaiera ef02511ff4
Merge pull request #247358 from pokon548/dae-add-service 
nixos/dae: init
 2023-08-07 21:11:43 +02:00
Isa bd50b5fcf5 graylog-5_1: init at 5.1.4 2023-08-07 19:49:48 +02:00
Lily Foster b367b9cf87
Merge pull request #241565 from SuperSandro2000/nox-python 
nixos/no-x-libs: use pythonPackagesExtensions to construct python ove…
 2023-08-07 10:56:27 -04:00
Jörg Thalheim 1f1a758e95 nixos/installation-device: allow nix-copy for root/nixos user 
For non-interactive installation it's quite handy to be able to nix copy additional dependencies to the system.
While this is possible for the root user, we cannot easily ssh into it, as we don't allow root login with a password.
By making nixos a trusted user, we can do "passwd && sudo systemctl start sshd" and than run nixos-anywhere
 2023-08-07 16:48:49 +02:00
Maximilian Bosch 648546b09d
nixos/nextcloud: improve documentation of adminuser-option 
This option only has an effect on the initial setup of Nextcloud and
changes later won't have any effect.

Same issue as with `adminpassFile` - it's only passed to the installer
command - but even worse because the username is frequently used as
unique ID in the database, so there's no trivial way to change it, even
imperatively.
 2023-08-07 12:16:41 +02:00
pokon548 dcf5ae3d0b nixos/dae: init 2023-08-07 14:32:32 +08:00
Wout Mertens ea07a9a98e
Merge pull request #247319 from DDoSolitary/patch-netdata-ipc 
netdata: set NETDATA_PIPENAME to /run/netdata/ipc
 2023-08-07 08:27:29 +02:00
Martin Weinelt af90462b88
Merge pull request #247235 from mweinelt/wyoming-faster-whisper-option-fix 
nixos/wyoming/faster-whisper: fix device option description
 2023-08-06 22:04:42 +02:00
K900 4a2735bb3d
Merge pull request #241481 from Mayeu/update/kubo 
kubo: 0.20.0 -> 0.21.0
 2023-08-06 20:03:37 +03:00
emilylange 8d374cebcd
nixos/forgejo: init 
Following a decicion from both the gitea and forgejo maintainers in
nixpkgs.
This means, that forgejo will no longer co-use the nixos/gitea module
via `services.gitea.package = pkgs.forgejo`.
 2023-08-06 18:40:02 +02:00
Maximilian Bosch 01820d520b
Merge pull request #247384 from jtbx/nextcloud-doc 
nixos/nextcloud: improve documentation
 2023-08-06 12:27:33 +02:00
Nick Cao 90c77d8891
Merge pull request #246842 from frederictobiasc/mautrix-whatsapp-module 
nixos/mautrix-whatsapp: init
 2023-08-06 03:21:25 -06:00
Frédéric Christ 3a1f5757b9 mautrix-whatsapp: move defaults back to options. 
As suggested by @nickcao this commit moves the defaults back to the
options. Only `homeserver.domain` stays in the config section since the
documentation module does not support referencing attributes of other
modules.
 2023-08-06 11:03:17 +02:00
zowoq b2c3198256 nixos/nix-fallback-paths: 2.15.1 -> 2.17.0 
https://releases.nixos.org/nix/nix-2.17.0/fallback-paths.nix
 2023-08-06 16:22:39 +10:00
davidak 62f11e9e1d
Merge pull request #246187 from SuperSamus/hid-nintendo-remove 
hid-nintendo: remove
 2023-08-06 04:07:11 +02:00
Tom McLaughlin addfb000c4 tmux: add extraConfigBeforePlugins 2023-08-05 18:59:52 -07:00
Jeremy c7a9f7c132 nixos/nextcloud: improve documentation 2023-08-06 10:02:52 +12:00
Chris Montgomery aefa0bb6cc
nixos/matrix-synapse: set public baseurl in example config 2023-08-05 16:08:35 -04:00
Gregor Godbersen 3d9a6399a1 nixos/paperless: set default thumbnail font 
The upstream default for the thumbnail font is set to "Liberation Serif
Regular" located at /usr/share/fonts which is inaccessible under nix.
(2a2bf3bf55/src/paperless/settings.py (L894))

Paperless throws an error when parsing plaintext files without a valid
font. This change sets a nix default using the liberation_ttf package.
 2023-08-05 22:06:27 +02:00
WilliButz 404abaa27a
Merge pull request #247314 from Ma27/nextcloud-php-settings 
nixos/nextcloud: make php settings additive
 2023-08-05 14:12:52 +02:00
Frédéric Christ 288d2ee55d mautrix-whatsapp: Move defaults to config section 
This contribution applies Example 32 (conventional settings option) from
[nixpkgs](https://nixos.org/manual/nixos/stable/#sec-settings-nix-representable).
 2023-08-05 13:57:15 +02:00
DDoSolitary 060a47e1e4
netdata: set NETDATA_PIPENAME to /run/netdata/ipc 
Netdata creates its control socket at /tmp/netdata-ipc by default, which
is insecure and actually inaccessible with systemd's PrivateTmp enabled.

Originally we patched its source code to move the socket to
/run/netdata/ipc. However, it was removed due to incompatibility when
upgrading to v1.41.0: 1d2a2dc7d0

Fortunately, this new version of netdata adds support for setting the
location of the control socket via the environment variable
NETDATA_PIPENAME. So let's set it for the netdata service and the
command line utility so that they can communicate properly.
 2023-08-05 18:19:08 +08:00
Maximilian Bosch 2ddb1453e6
nixos/nextcloud: make php settings additive 
Right now, the settings aren't additive which means that when I do

    services.nextcloud.phpOptions."opcache.interned_strings_buffer = "23";

all other options are discarded because of how the module system works.

This isn't very nice in this case, though because wanting to override
a single option doesn't mean I want to discard the rest of the -
reasonable - defaults. Hence, the settings are showed as default in the
option's manual section, but are added with normal priority.

That means, to override _all_ options at once, an expression like

    services.nextcloud.phpOptions = mkForce {
      /* ... */
    };

is needed. This is also way more intuitive IMHO because the `mkForce`
explicitly tells that everything will be modified.

Also, APCu enable and the memory & file-size limits are also written
into `services.nextcloud.phpOptions` rather than adding them
silently before passing all options to the PHP package. This has the
benefit that users will realize on evaluation time that they configured
options that would otherwise be set by the module on its own.
 2023-08-05 11:58:11 +02:00
Emery Hemingway b6c5112152 nixos/ntopng: seperate interface config with newlines 2023-08-05 10:02:48 +01:00
Martin Weinelt 12cb284a44
nixos/wyoming/faster-whisper: fix device option description 2023-08-05 00:24:26 +02:00
Artturin 103bb49f84 nixos/stage-2-init: Change permission of /etc/nixos only if it exists 
When I boot there's a warning `stage-2-init: install: cannot change permissions of '/etc/nixos': No such file or directory`
because my /etc/nixos is a symlink to $HOME/dotfiles.

```
/etc/nixos -> /home/artturin/dotfiles
```

These lines were added in 56b4653904
 2023-08-04 20:54:18 +03:00
Maximilian Bosch ed02e79bbe
Merge pull request #241497 from bendlas/prepare-gitea-120 
nixos/gitea: add WORK_PATH to config, fix 1.20
 2023-08-04 18:50:09 +02:00
Vincent Haupert f652755434 nixos/image: add image.repart.package option 
Allow giving a custom package containing the `systemd-repart` binary.
Defaults to `pkgs.systemd`. This option opens up the possibility to use
a different package for the image builder and the system configuration.

For example, someone could use this option to build an image with a
patched systemd while still using the upstream nixpkgs systemd package
(i.e., `pkgs.systemd`) for the system configuration installed to the
created image.
 2023-08-04 13:49:18 +02:00
ajs124 bf4d2e6c1e
Merge pull request #242538 from tnias/fix/apparmor 
apparmor: add some policies and improve abstractions and utils
 2023-08-04 13:05:52 +02:00
Vincent Haupert fbebce610f nixos/toplevel: move systemBuilder for boot.kernel.enable 
This avoids creating a build-time reference on `boot.kernelParams` if
the configuration does not use a kernel, i.e., `boot.kernel.enable` is
set to `false`.
 2023-08-04 12:46:03 +02:00
codec 47db2bfffb prometheus-idrac-exporter: init at unstable-2023-06-29 2023-08-04 00:57:19 +02:00
Ryan Lahfa 2a1f1797be
Merge pull request #246941 from yaxitech/image-amend-repart-r13y 2023-08-03 15:57:24 +02:00
Gerg-L 4ca2a16390 nixos/nvidia: add Dynamic Boost support 2023-08-03 09:32:14 -04:00
Martin Weinelt 667c4f2dc6
Merge pull request #224635 from helsinki-systems/drop/dhcpd 
dhcpd: remove
 2023-08-03 15:12:06 +02:00
ajs124 4b0ef51702
Merge pull request #245891 from Izorkin/fix-nginx-http2 
nixos/nginx: using new variant of http2 directive
 2023-08-03 14:50:31 +02:00
Martin Weinelt 9eaec2881f
Merge pull request #246836 from NixOS/home-assistant 
home-assistant: 2023.7.3 -> 2023.8.0
 2023-08-03 13:54:00 +02:00
Vincent Haupert 5fd478506d nixos/image: use stable target dir for amended repart definitions 
Output the amended repart definitions to a well-known directory in
$TMPDIR instead of using a temporary directory with a random directory
name.

The output file `repart-output.json` also contains the full path to the
repart definition file used to create the partition. As
`amend-repart-definitions.py` uses `tempfile.mkdtemp`, this introduces
an impurity:

```json
{
        "type" : "root-x86-64",
        "label" : "rootfs",
        "uuid" : "f2fa2e49-e443-45d2-a2e2-c3754cab6363",
        "file" : "/build/tmppjo7kv5o/rootfs.conf",
        "node" : "image.raw2",
        "offset" : 135266304,
        "old_size" : 0,
        "raw_size" : 1651101696,
        "old_padding" : 0,
        "raw_padding" : 0,
        "activity" : "create",
}
```

This commit changes the parent directory of the amended repart
definitions to `/build/amended-repart.d/`.
 2023-08-03 11:46:35 +02:00
Izorkin cf7cea3287
nixos/nginx: using new variant of http2 directive 2023-08-03 07:09:02 +03:00
Pol Dellaiera b3e46b47d9
Merge pull request #246845 from jakeschurch/add-proxmox-image-disk-size-followup 
update(proxmox-image): update pull request #246120 from jakeschurch/add-prox…
 2023-08-02 22:55:40 +02:00
Martin Weinelt a98ba7fdae
Merge pull request #246564 from erictapen/kanidm 
kanidm: 1.1.0-alpha.12 -> 1.1.0-beta.13
 2023-08-02 22:51:18 +02:00
Martin Weinelt 822c33c217
nixos/home-assistant: allow bluetooth for gardena_bluetooth component 2023-08-02 22:42:50 +02:00
Frédéric Christ a71889c042 mautrix-whatsapp: Add release notes 2023-08-02 21:38:12 +02:00
Frédéric Christ 0173330426 mautrix-whatsapp: Add postgres options to example 2023-08-02 21:32:55 +02:00
Frédéric Christ b443a4d940 mautrix-whatsapp: Apply suggestions 
This contribution applies suggestions made by Luflosi in
https://github.com/NixOS/nixpkgs/pull/176025#issuecomment-1237338551
as well as some general refactoring.

Co-authored-by: Luflosi <Luflosi@users.noreply.github.com>
 2023-08-02 21:06:41 +02:00
Victor SENE 641d717ace nixos/mautrix-whatsapp: init module 
Import from PR https://github.com/NixOS/nixpkgs/pull/176025

Co-authored-by: Luflosi <Luflosi@users.noreply.github.com>
 2023-08-02 21:06:41 +02:00
Jake Schurch 36430fbb14 revert(proxmox-image): pull request #246120 from jakeschurch/add-proxmox-image-addl-disk-size-override 
NOTES:

@jakeschurch did not realize that is was already updated on master, but not
backported to 23.05 channel

Signed-off-by: Jake Schurch <jakeschurch@gmail.com>
 2023-08-02 15:01:44 -04:00
Robert Hensing f8f9f13d57
Merge pull request #246386 from hercules-ci/lib-getExe-dont-make-name-assumption 
lib.getExe: Do not make assumptions about the main program
 2023-08-02 20:05:52 +02:00
Pol Dellaiera 17b46c61f3
Merge pull request #246746 from mode89/fix/nixos-install-with-non-empty-mnt 
nixos-install: fix removal of non-empty `/mnt`
 2023-08-02 18:41:46 +02:00
Ryan Lahfa 9616fc4149
Merge pull request #246603 from yaxitech/image-repart-output-json 2023-08-02 17:01:27 +02:00
r-vdp 44a7059bf2
nixos/update-users-groups: set expiry correctly for new users 2023-08-02 13:51:41 +02:00
Andrey Krainyak d61cc625fa
nixos-install: fix removal of non-empty /mnt 
After building the target system, `nixos-install` tries to remove `/mnt`
on the target filesystem. And the script may fail without any explanation,
if `/mnt` isn't empty.

This commit makes the installation process carry on even if there are
files under `/mnt`.

See https://github.com/NixOS/nixpkgs/issues/244643.
 2023-08-02 16:37:22 +08:00
Ember Keske c247201679 grocy: 3.3.0 -> 4.0.0 2023-08-02 06:44:36 +02:00
Samuel Dionne-Riel 1d416595ad nixos/grub: Remove with with broad scopes. 
There is only other `with` with a somewhat broad scope, `with pkgs`, but
it's used in a place where it would become awkward to change out. And
anyway its scope is rather limited still.
 2023-08-01 19:18:48 -04:00
Samuel Dionne-Riel c867c6d172 nixos/grub: Insert required image modules for themes 
With a limited testing of all packaged GRUB 2 themes (pkgs.nixos-grub2-theme)
this is tested to work.

Without this change, the theme loading will error out (waiting for a key press).

With this change, the theme loads and works as expected.
 2023-08-01 18:56:03 -04:00
Samuel Dionne-Riel 50063bf9d6 nixos/grub: Add support for timeoutStyle 2023-08-01 18:56:03 -04:00
Samuel Dionne-Riel f12b216574 nixos/grub: Fix extraFiles in subdirectories 
This directly copies the systemd-boot logic, which works.

`install` with `-D` will create all leading directory components.
 2023-08-01 18:54:27 -04:00
Samuel Dionne-Riel 894d47f989 nixos/grub: Always install with bootloader id 
The intent was to not pass the flag when installing as removable. In
reality there is a third case, where you may not want to touch EFI
variables, and not want to install as removable.

In that case, it would install to the generic \EFI\grub\grubx64.efi,
which is not a good choice in any cases. The operating system should
"own" their path under \EFI\ to be a good citizen [citation needed].

With this change, there can be only two paths GRUB can be installed to:

 - \EFI\NixOS-boot\grubx64.efi
 - \EFI\BOOT\bootx64.efi

This removes the surprising behaviour where GRUB may be installed to a
different location only because we configured NixOS not to touch EFI
variables.

It may be necessary under some configurations to install GRUB without
touching EFI variables, but to the NixOS-owned location.
 2023-08-01 18:54:27 -04:00
Vincent Haupert 7f70abf80c nixos/image: write systemd-repart output to $out/repart-output.json 
Write the output of `systemd-repart` as a JSON file to
`$out/repart-output.json`.

Depending on the repart configuration, the output of `systemd-repart`
contains important information, for example, when creating verity
partitions:

> The verity root hash itself will be included in the output of
> systemd-repart.

See `Verity=` in repart.d(5).
 2023-08-02 00:10:14 +02:00
Maximilian Bosch d2facca5c0
nixos/matrix-synapse: fix option description of extras option 
Co-authored-by: Benjamin Saunders <ben.e.saunders@gmail.com>
 2023-08-01 18:16:56 +02:00
Martin Weinelt 184d15cc06
kanidm: 1.1.0-alpha.12 -> 1.1.0-beta.13 
https://github.com/kanidm/kanidm/releases/tag/v1.1.0-beta.13

The kanidmd process now creates a unix socket, over which admin tasks
can be done, without having to shut kanidm down first.

The kanidm_unixd process now wants access to /etc/shadow and /etc/group,
so it can rule out collisions with the host system.
 2023-08-01 17:13:58 +02:00
Pol Dellaiera fa8883c580 hedgedoc: remove top level with lib; 2023-08-01 16:01:02 +02:00
Pol Dellaiera b7062f43e2 hedgedoc: add enableStatsApi configuration option 2023-08-01 15:52:11 +02:00
Pol Dellaiera a521506834 hedgedoc: use lib.mkPackageOptionMD 2023-08-01 15:51:33 +02:00
Sandro Jäckel 0d4c3913b2
nixos/no-x-libs: use pythonPackagesExtensions to construct python overlay 
to construct it for all supported python package sets at the same time
 2023-08-01 15:36:15 +02:00
Minijackson d1b0a9543d
nixos/netbox: move migration into the preStart netbox.service, reindex 
Now migrations are run only on upgrade / downgrade and first start,
which makes netbox much faster on a normal start.

add the reindex for NetBox > 3.5.0, to populate the index, preventing
empty search results.

Migrations were moved out of netbox-migration.service into
netbox.service, to prevent service dependency issues when upgrading
NixOS.
 2023-08-01 14:45:01 +02:00
h7x4 b6fbd87328 nixos/atuin: harden systemd unit 2023-08-01 18:17:37 +08:00
h7x4 fd01b3f59c nixos/atuin: fix database.createLocally behaviour 
Co-authored-by: Andrew Marshall <andrew@johnandrewmarshall.com>
 2023-08-01 18:17:37 +08:00
Adam Joseph 957541ad69 nixos/modules/system/boot/binfmt.nix: update mips patterns 
This commit updates the binfmt magic-patterns using

  f5e6786de4/scripts/qemu-binfmt-conf.sh

The patterns prior to this commit did not understand the difference
between mips32-*-* (32-bit void*,int) and mips64-*-*abin32 (32-bit
void*, 64-bit int).  This commit corrects that.
 2023-07-31 21:24:26 -07:00
Nick Cao 32e85db47c
Merge pull request #246346 from yu-re-ka/fish-cross 
nixos/fish: fix cross build
 2023-07-31 19:22:32 -06:00
Nick Cao 0d8bcf32a3
Merge pull request #246343 from yu-re-ka/bird-cross 
nixos/bird: fix checkConfig with cross-compilation
 2023-07-31 19:13:47 -06:00
Robert Hensing d36353cf86 nixos/oddjob: Maybe fix, but mark as broken 
Unfortunately there's no test for me to confirm that it works,
so all I can do is ask for maintainers, unfortunately -- I mean...
This is your opportunity!
 2023-07-31 21:19:39 +02:00
Maximilian Bosch 701d0e1da6
nixos/matrix-synapse: fix path to extras for additive settings 2023-07-31 19:15:09 +02:00
Maximilian Bosch 190886c5cc
nixos/matrix-synapse: clarify that extras are additive 2023-07-31 18:54:17 +02:00
Maximilian Bosch 5a3870c212
nixos/matrix-synapse: expose final matrix-synapse package via package-option 
When extending this module, it might be necessary to run something
from the package that's used in `matrix-synapse.service` (e.g. for
workers).

Now this can be trivially done by using
`config.services.matrix-synapse.package`. Previously it was necessary to
reuse the `PYTHONPATH` from the environment of `matrix-synapse.service`,
but that one doesn't exist anymore.
 2023-07-31 18:20:28 +02:00
digital 9d78971007
nixos/boot/initrd-network: add option to enable udhcpc (#240406) 
In some setups, and especially with sytemd-networkd becoming more widely
used, networking.useDHCP is set to false. Despite this, it may be useful
to have dhcp in the initramfs.
 2023-07-31 16:08:56 +02:00
Minijackson a57a322b8d
nixos/netbox: add GIT_PATH environment variable 
used by the synchronization backend for remote git repositories, in
"Data Sources"
 2023-07-31 14:39:08 +02:00
Minijackson bcdc4d976c
nixos/netbox: remove "with lib;" 2023-07-31 14:38:26 +02:00
Yureka 0445837cc7 nixos/fish: fix cross build 2023-07-31 14:10:04 +02:00
WilliButz bf48dde359
Merge pull request #233659 from seberm/prometheus-ipmi-exporter-family-restriction 
nixos/prometheus-ipmi-exporter: allow AF_UNIX address family
 2023-07-31 13:57:15 +02:00
Yureka 31d4a4af19 nixos/bird: fix checkConfig with cross-compilation 2023-07-31 13:48:55 +02:00
Martin Weinelt 0d117d7ad5
Merge pull request #246188 from gdamjan/bump-matrix-appservice-irc-2 
matrix-appservice-irc: 0.38.0 -> 1.0.1
 2023-07-31 13:38:09 +02:00
Weijia Wang 2d69842838
Merge pull request #245931 from soupglasses/pkg/ns-usbloader-7.0 
ns-usbloader: init at 7.0
 2023-07-31 11:56:30 +02:00
Дамјан Георгиевски 69bc2ad72f matrix-appservice-irc: 0.38.0 -> 1.0.1 
https://github.com/matrix-org/matrix-appservice-irc/releases/tag/1.0.0

* This release drops support for Node 16. The minimum required version is now 18+.
* Moved from NPM to Yarn

https://github.com/matrix-org/matrix-appservice-irc/releases/tag/1.0.1

* Fixes for GHSA-vc7j-h8xg-fv5x.
* Fixes for GHSA-3pmj-jqqp-2mj3.
* Fixes for GHSA-c7hh-3v6c-fj4q
* Update matrix-appservice-bridge to 9.0.1

while there was an effort to make this package with `mkYarnPackage`, in the end it
was suggested to just use `stdenv.mkDerivation` instead

nixos/matrix-appservice-irc:
* fix path to config.schema.yml directory stucture of the package changed
* use remarshal instead of python and pyyaml
  to convert the config schema from yaml to json
 2023-07-31 11:19:42 +02:00
Nick Cao 6ea628b5c5
Merge pull request #244969 from Stzx/fix-warnings 
udisks2: fix conf file loading warnings
 2023-07-31 00:22:32 -06:00
Nick Cao c3f4240e33
Merge pull request #246193 from christophcharles/gogs-config-file 
nixos/gogs: fix deprecations for 0.13.0
 2023-07-30 18:23:03 -06:00
Pol Dellaiera 71e3934d82
Merge pull request #246120 from jakeschurch/add-proxmox-image-addl-disk-size-override 
proxmox-image: add additionalDiskSpace parameter as input to make-disk-image.nix
 2023-07-30 20:34:00 +02:00
Oliver Schmidt ff9296f93e
nixos/gitlab: ensure service started again after dependency restarts (#245240) 
When a dependency, like postgresql.service or redis-gitlab.service, had
been stopped and started at switch-to-configuration time, gitlab.service
and its helper units had been stopped but not started again.
`multi-user.target` only has a `Wants` relation to gitlab.target, but
once gitlab.target has been successfully started once and is not stopped/
restarted again, it does not cause all its dependencies to stay activated
the whole time.

This commit fixes this by upgrading the dependy relationship of
gitlab.service towards gitlab.target from a "Wants" to a "Requires". It
should be enough to do this for this single unit part of gitlab.target
only, as all other units wantedBy gitlab.target are pulled in by
gitlab.service as well or have bindsTo relations.
 2023-07-30 18:49:54 +02:00
Jake Schurch a479735162 respond to pr feedback 
Signed-off-by: Jake Schurch <jakeschurch@gmail.com>
 2023-07-30 12:01:03 -04:00
Jake Schurch d780bdf308
Update nixos/modules/virtualisation/proxmox-image.nix 
Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com>
 2023-07-30 11:57:29 -04:00
Ember Keske ba2f38d684 nixos/zigbee2mqtt: persist groups set via ui 2023-07-30 16:48:29 +02:00
Christoph Charles 43d1c4d782 nixos/gogs: fix deprecations for 0.13.0 
Changed ROOT_URL to EXTERNAL_URL.
 2023-07-30 15:54:16 +02:00
Martino Fontana d9fd4ba733 hid-nintendo: remove 2023-07-30 14:49:27 +02:00
Martin Weinelt 6ae8e13396
nixos/matrix-appservice-irc: update syscall filter 
Simplify the SystemcallFilter by employing an explicit allow list, and
an explicit block list.

Node since version 18 requires syscalls in the @pkey group.

Excluding @privileged and @resources is a recommendation in
systemd-analyze.
 2023-07-30 03:07:52 +02:00
Nick Cao 4ad78e3e98
Merge pull request #245886 from linsui/quickphase 
nixos/fcitx5: add quickPhrase
 2023-07-29 18:48:25 -06:00
Jake Schurch f2794786fd proxmox-image: add additionalDiskSpace parameter as input to make-disk-image.nix 2023-07-29 20:47:46 -04:00
Benjamin Saunders 5f445e8cf5 nixos/matrix-synapse: fix duplicate Content-Type header in example 
nginx adds a `content-type: application/octet-stream` header by
default, and `add_header` does not supplant it. By setting
`default_type` instead we avoid the extraneous header.
 2023-07-29 17:12:09 -07:00
Florian Klink a2a7096157
Merge pull request #246082 from ElvishJerricco/exitrd-fix-shutdown-loop 
systemd shutdownRamfs: Fix infinite shutdown loop
 2023-07-30 00:11:55 +02:00
Florian Klink 0546c70849
Merge pull request #246084 from ElvishJerricco/simplify-hibernate-test 
Simplify hibernate test
 2023-07-30 00:10:19 +02:00
Ryan Lahfa 899b60de3f
Merge pull request #245893 from h7x4/move-nginx-status-page-declaration 2023-07-29 20:22:58 +02:00
Will Fancher 7a3730f901 nixos/systemd: Add util-linux to systemd-mkswap's path 2023-07-29 14:02:06 -04:00
Will Fancher 4ecd0c119a systemd shutdownRamfs: Fix infinite shutdown loop 2023-07-29 13:52:52 -04:00
Sofi 3273352d05
ns-usbloader: init at 7.0 2023-07-29 19:28:32 +02:00
Atemu d391373c40 nixos/emacs: start emacs service with the graphical-session 
If emacs starts before the graphical session is initialised, clients won't be
able to open new frames in the session. Start emacs with the graphical session
to avoid this issue.

Fixes https://github.com/NixOS/nixpkgs/issues/224512
 2023-07-29 14:17:28 +02:00
Emery Hemingway 354821c1e8 nixos/eris-server: init 2023-07-29 11:56:58 +01:00
Pol Dellaiera cb8e68fd59
Merge pull request #244146 from GiggleSquid/pkgs/boinc-headless 
boinc: add headless option
 2023-07-29 12:52:12 +02:00
Pol Dellaiera 80d8a945dd
Merge pull request #245570 from jwygoda/tailscaled-autoconnect-options 
nixos/tailscale: add extraUpFlags option
 2023-07-29 06:12:26 +02:00
Will Fancher ce2c20a14d
Merge pull request #245837 from dcarosone/zfs-systemd-udev-fix 
zfs: 'want', don't 'require', systemd-udev-settle
 2023-07-28 20:12:28 -04:00
Jarosław Wygoda 2dbda3314f nixos/tailscale: add extraUpFlags option 2023-07-28 22:44:37 +02:00
h7x4 d803f78e7c
nixos/nginx: move status page config to services.nginx 2023-07-28 20:29:09 +02:00
Ryan Lahfa 5150e29817
Merge pull request #245737 from oddlama/fix-nginx-unnecessary-acme-locations 2023-07-28 19:23:56 +02:00
Ryan Lahfa 2a0aaa7e8f
Merge pull request #245413 from oddlama/fix-hostapd-mac-allow 2023-07-28 19:19:02 +02:00
Pol Dellaiera 1e37e277ca
Merge pull request #234652 from Valodim/cage-extra-environment 
nixos/cage: add environment config
 2023-07-28 18:57:19 +02:00
linsui 71540ff216 nixos/fcitx5: add quickPhrase 2023-07-29 00:54:25 +08:00
Pol Dellaiera fd304ecc8a
Merge pull request #236027 from iliana/grub-dont-die 
nixos/grub: don't die on EFI-only systems if devices != ["nodev"]
 2023-07-28 17:26:24 +02:00
ajs124 413d9d3864 nixos/dhcp(46): remove 
package reached its EOL on 2022-10-04
see https://www.isc.org/blogs/isc-dhcp-eol/ for details
 2023-07-28 16:35:40 +02:00
Martin Weinelt de5ca86149
Merge pull request #245759 from mweinelt/frigate-recordings 
nixos/frigate: fix recording and serving of clips/recordings
 2023-07-28 12:02:29 +02:00
Eric Wolf 318d8cc4c5 nixos/lemmy: limit impurity by secrets 
Split `services.lemmy.secretFile` into
multiple options to allow only secrets.
 2023-07-28 07:49:27 +00:00
Daniel Carosone 4ffc1c82c6 zfs: 'want', don't 'require', systemd-udev-settle 
This completes changes in #227208
Fixes: #244737, #245089.
 2023-07-28 16:57:12 +10:00
Emily 49c07cd259
Merge pull request #238735 from MayNiklas/proxmox-image-settings 
nixos/proxmox-image: add additionalSpace, bootSize and diskSize options
 2023-07-27 22:17:42 +02:00
Thiago Kenji Okada a6096c235c
Merge pull request #245571 from Misterio77/qt6gtk2 
qt6Packages.qt6gtk2: init at 0.2
 2023-07-27 19:13:29 +00:00
Gabriel Fontes ff8b69941a
nixos/qt: install qt6gtk2 when using gtk2 
Now qt6 apps are correctly themed when using platformTheme gtk2.
 2023-07-27 15:39:30 -03:00
Martin Weinelt 3086313e4c
nixos/frigate: fix recording and serving of clips/recordings 
Frigate does string prefix matching for paths, which isn't exactly
compatible with dynamically provisioned directories of systemd, where
/var/cache/frigate is actually a symlink to /var/cache/private/frigate.

Because we are unlikely to get this fixed upstream, this is one of the
reason we should stop using DynamicUser= here.

The other being, that nginx needs to be able to serve clips and
recordings from both the CacheDirectory and the StateDirectory, and
nginx being a member on a group that may only exist after it was started
up doesn't work reliably.

This is also why we relax the umask to allow g+r/g+rx for newly created
files. Existing installs may need the following permissions fix to get
things going.

```
find /var/lib/frigate/recordings -type d -exec chmod g+rx {} \;
find /var/lib/frigate/recordings -type f -exec chmod g+r {} \;
find /var/cache/frigate -type f -exec chmod g+r {} \;
```

Co-Authored-By: Daniel Barlow <dan@telent.net>
 2023-07-27 18:36:25 +02:00
Matthieu Coudron 6774f3fc04 services.postgresql: fix example 2023-07-27 11:35:55 -05:00
Ryan Lahfa 7d053c812b
Merge pull request #245250 from nikstur/images 2023-07-27 17:00:13 +02:00
Mayeu 77fb833411 kubo: 0.20.0 -> 0.21.0 2023-07-27 16:59:45 +02:00
oddlama cbdaab0f17
nixos/nginx: remove unnecessary acme locations to allow double proxied setups 2023-07-27 15:30:38 +02:00
Bobby Rong 69a7cd6718
Merge pull request #245481 from bobby285271/upd/pantheon 
Pantheon updates 2023-07-26
 2023-07-27 16:04:25 +08:00
Bobby Rong 497229d3c2
nixos/pantheon: Install orca 
ref: ec0eb37689
 2023-07-27 14:08:53 +08:00
rewine d9f707f795 nixos/wayfire: init 2023-07-27 00:04:03 -03:00
Nick Cao 8f7b4e8894
Merge pull request #245564 from eliasp/paperless-docs-url 
nixos/paperless: update URL to docs
 2023-07-26 17:52:39 -06:00
nikstur cb2d047c57 nixos/image: add repart builder docs 2023-07-26 23:36:18 +02:00
nikstur ec8d30cc50 nixos/image: add repart builder 2023-07-26 23:33:14 +02:00
nikstur a662dc8b73 nixos/lib: systemd definition files function 
Add a re-usable function that converts an attrset to a directory
containing systemd definition files.
 2023-07-26 23:30:08 +02:00
nikstur 9b4d3b840e nixos/systemd-sysupdate: init 2023-07-26 20:33:31 +02:00
Elias Probst 2b0545b423
nixos/paperless: update URL to docs 2023-07-26 19:02:29 +02:00
pennae e2a43fbfb3
Merge pull request #244356 from datafoo/mosquitto-systemd-credentials 
nixos/mosquitto: leverage systemd credentials
 2023-07-26 18:23:06 +02:00
lewo 9a98962714
Merge pull request #245545 from nlewo/osquery-disable-database 
nixos/osquery: do not use the local database for osqueryi
 2023-07-26 17:58:09 +02:00
Florian Klink 7539b8f2d7
Merge pull request #244841 from flokli/networkmanager-fix-ppp-plugin 
nixos/networkmanager: create pppd lock directory
 2023-07-26 17:44:35 +02:00
Antoine Eiche 8af1d49858 nixos/osquery: do not use the local database for osqueryi 
Because the local database is used by the osquery deamon, running
osqueri fails with:

    IO error: While lock file: /var/lib/osquery/osquery.db/LOCK:    Resource temporarily unavailable
 2023-07-26 17:22:22 +02:00
Pol Dellaiera d242834675
Merge pull request #230109 from vdot0x23/docker-extraPackages 
nixos/docker: add extraPackages option
 2023-07-26 15:14:13 +02:00
ajs124 c9cf0708f0
Merge pull request #229271 from markus-heinrich/submit/sogo 
nixos/sogo: fix nginx proxy_buffer config
 2023-07-26 12:39:51 +02:00
Nick Cao 9ae5c2de7f
Merge pull request #244572 from MinerSebas/usb-modeswitch-module-rename 
nixos/usb-modeswitch: Rename module from usbWwan
 2023-07-25 19:24:14 -06:00
Nick Cao 76025b299f
Merge pull request #245454 from 2xsaiko/outgoing/emacs-env 
nixos/emacs: don't set EDITOR to store path
 2023-07-25 19:19:56 -06:00
Nick Cao e3696d3a5d
Merge pull request #245399 from mweinelt/conduit-chmod-umask 
nixos/conduit: improve state directory permissions
 2023-07-25 18:50:03 -06:00
Marco Rebhan b72044c113
nixos/emacs: don't set EDITOR to store path 
Use emacseditor in PATH instead of using the absolute path to prevent
old path from sticking around when switching configurations.
 2023-07-26 00:52:03 +02:00
Sandro 492860f609
Merge pull request #245380 from SuperSandro2000/fonts-typo 
nixos/packages: fix typo preventing mkRenamedOptionModule from working
 2023-07-25 18:56:44 +02:00
oddlama 0ac2ba763f
nixos/hostapd: fix regression after refactoring to RFC42. 
Switching from submodule notation from ({name, ...}: {}) to (submob: {}) seems to require a different accessing scheme.
 2023-07-25 18:40:51 +02:00
MinerSebas 7c309898bc nixos/usb-modeswitch: Rename module from usbWwan 2023-07-25 17:07:00 +02:00
Martin Weinelt 18733782ad
nixos/conduit: improve state directory permissions 
Allow only the conduit user to access its database files, and make sure
to create all new files with 0600 (o+rw).
 2023-07-25 16:54:39 +02:00
Aaron Andersen 8d85dcea22
Merge pull request #215247 from evan-goode/evdevremapkeys 
nixos/evdevremapkeys: init
 2023-07-25 08:45:54 -04:00
Sandro Jäckel 4c07356e3d
nixos/packages: fix typo preventing mkRenamedOptionModule from working 2023-07-25 14:43:40 +02:00
Martin Weinelt 6847465f6f
Merge pull request #242275 from Atemu/nixos/paperless-manage-toShellVars 
nixos/paperless: use toShellVars for paperless-manage
 2023-07-25 12:26:32 +02:00
Robert Hensing c9f9df2f8e
Merge pull request #245038 from R-VdP/fix_nix_channel 
nixos/nix-channel: only try to remove the nix-channel binary if it exists
 2023-07-25 11:25:15 +02:00
asymmetric 46df012d2a
Merge pull request #244332 from SuperSandro2000/fonts-fonts 
nixos/fonts: rename fonts.fonts option to fonts.packages, other cleanups
 2023-07-25 09:49:25 +02:00
Bobby Rong 34d40c6f20
Merge pull request #245105 from thoughtfull-systems/xfce-exclude-packages 
nixos/xfce: add environment.xfce.excludePackages option
 2023-07-25 11:39:30 +08:00
Pol Dellaiera 07fd6694b5
Merge pull request #236368 from SuperSandro2000/etc-dir-names 
nixos/etc: keep directories in derivation name
 2023-07-25 03:02:47 +02:00
Sandro Jäckel 83793ca898
nixos/fonts: rename fonts.enableDefaultFonts to fonts.enableDefaultPackages 
to better fit the renamed fonts.packages
 2023-07-25 00:55:25 +02:00
Sandro dfcffbd74f
Merge pull request #225055 from jtrees/update-wooting-udev-rules 
wooting: update udev rules
 2023-07-24 23:56:31 +02:00
Joshua Trees 12ad49a130 wooting: clarify requirements for hardware option to work 2023-07-24 22:34:52 +02:00
Gianmarco Gargiulo b34a51f5a7
nixos/gogs: fix deprecations for 0.13.0 
Changed APP_NAME to BRAND_NAME, DB_TYPE to TYPE and PASSWD to PASSWORD.
 2023-07-24 19:41:52 +00:00
Sandro Jäckel f9fdeb2dbc
nixos/ghostscript: evaporate the extra whitespace 2023-07-24 17:34:39 +02:00
Sandro Jäckel b0c67b4b6e
treewide: rename fonts.fonts to fonts.packages 2023-07-24 17:34:39 +02:00
Sandro Jäckel 5162df3239
nixos/fonts: rename fonts.fonts option to fonts.packages, other cleanups 
fonts.fonts is not a great name and this also resolves a TODO.
 2023-07-24 17:34:37 +02:00
Paul Stadig cb2f531332 nixos/xfce: allow exclusion of xfce4-notifyd 
Use `environment.xfce.excludePackages` with `systemd.packages` so `xfce4-notifyd` can be excluded
from installation.
 2023-07-24 07:55:10 -04:00
datafoo 533ff8546b nixos/mosquitto: leverage systemd credentials 
Use systemd credentials for all variations of user passwords.
Password files do not need special permissions anymore.
 2023-07-24 11:37:30 +02:00
r-vdp b825f65c90
nixos/nix-channel: only try to remove the nix-channel binary if it exists 
It may not be there if `system.disableInstallerTools = true`.
 2023-07-24 10:34:48 +02:00
Lassulus ceaab39b40
Merge pull request #230196 from doronbehar/nixos/syncthing 
nixos/syncthing: Use API to merge / override configurations
 2023-07-24 08:38:50 +02:00
Stzx e196c81a23
udisks2: fix conf file loading warnings 2023-07-24 11:41:50 +08:00
Pol Dellaiera a30cc10e7f
Merge pull request #242703 from jwygoda/tailscaled-autoconnect 
nixos/tailscale: add authKeyFile option
 2023-07-24 04:48:42 +02:00
Sandro 9ca0bd9db3
Merge pull request #244467 from wamserma/tarsnap-add-package-option 
tarsnap: add package option
 2023-07-24 00:46:24 +02:00
Robert Hensing 35a0bd36d0
Merge pull request #244653 from bjornfor/nixos-generate-config-emit-lib 
nixos-generate-config: add 'lib' arg to configuration.nix
 2023-07-24 00:03:26 +02:00
Paul Stadig 1c5e23c405 nixos/xfce: add environment.xfce.excludePackages option 
Packages in environment.xfce.excludePackages will be excluded from the default environment.

Fixes #91169
 2023-07-23 17:52:41 -04:00
Emily 2d83cbda63
Merge pull request #244463 from mattmelling/cloudlog-pin-php8 
cloudlog: pin php version
 2023-07-23 23:09:50 +02:00
Will Fancher df59d8c0b7
Merge pull request #227208 from ElvishJerricco/zfs-systemd-target-ordering 
zfs: Relate import services to zfs-import.target instead of local-fs
 2023-07-23 16:58:25 -04:00
Sandro 1d1fe1fe14
Merge pull request #245063 from SuperSandro2000/remove-maintainer 
treewide: reduce packages I maintainer
 2023-07-23 21:28:26 +02:00
Will Fancher 0ddc9d0250 zfs: Relate import services to zfs-import.target instead of local-fs 
Being wanted by and ordered before local-fs.target isn't strictly
correct. And in systemd initrd, it's very incorrect because
local-fs.target is for the initrd file system, not the real root file
system.
 2023-07-23 14:12:53 -04:00
Sandro Jäckel cf6c96533b
treewide: reduce packages I maintainer 2023-07-23 19:30:22 +02:00
Doron Behar 047fa8dbdf nixos/syncthing: Use API to merge / override configurations 
If one sets either of `override{Device,folder}s` to false, the jq `*`
operator doesn't merge well the devices and folders, creating duplicate
IDs for folders as observed in #230146. This PR makes the script iterate
via Nix / Bash loop the devices and folders IDs and merges the keys
using upstream's `curl -X POST` support for single objects.

Hence this commit fixes #230146.
 2023-07-23 18:22:33 +03:00
r-vdp 668e2dafb6
nixos/nix-channel: fix editorconfig warnings and apply nixpkgs-fmt 2023-07-23 15:39:32 +02:00
Ilan Joselevich 383dc75dd7
Merge pull request #244949 from FlafyDev/fix/nix-daemon-if 
nixos/nix-daemon: change regular if to mkIf
 2023-07-23 16:02:33 +03:00
oddlama d073105d6b
nixos/switch-to-configuration: fix ignoring of template unit specialization dropins 2023-07-23 13:16:58 +02:00
Robert Hensing 864404dcc1
Merge pull request #244993 from Enzime/fix/linux-builder 
linux-builder: fix eval failure
 2023-07-23 11:59:03 +02:00
Michael Hoang 1deed6cd12 linux-builder: fix eval failure 2023-07-23 18:07:48 +10:00
FlafyDev 519a71edc3 nixos/nix-daemon: change regular if to mkIf 2023-07-23 04:16:04 +03:00
Mihai Fufezan e9f270f1f0
nixos/hyprland: apply config options to package 2023-07-23 01:15:59 +03:00
Ryan Lahfa c4ae17443e
Merge pull request #244233 from oddlama/init-typesense-bin 2023-07-22 18:47:45 +02:00
oddlama 234dd85da0
nixos/typesense: init at 0.24.1 2023-07-22 16:38:13 +02:00
Raito Bezarius 44aee34594 Revert "nixos/gitea: set service type to notify" 
This reverts commit b61919e5e0.

As it breaks Forgejo who does not support this feature yet.
 2023-07-22 16:12:36 +02:00
Florian Klink 02a5e9c933 nixos/networkmanager: create pppd lock directory 
I digged up some 3G stick, which uses ppp to set up the connection.

It failed to spin up ppp, because ppp failed to find the directory it wants to create its lockfiles in:

```
Jul 22 16:47:49 tp ModemManager[926779]: <info>  [modem1] state changed (connected -> disconnecting)
Jul 22 16:47:49 tp ModemManager[926779]: <info>  [modem1] simple connect started...
Jul 22 16:47:49 tp ModemManager[926779]: <info>  [modem1] simple connect state (4/10): wait to get fully enabled
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] state changed (disconnecting -> registered)
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (5/10): wait after enabled
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1/bearer0] connection #11 finished: duration 1s
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (6/10): register
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (7/10): wait to get packet service state attached
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (8/10): bearer
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (9/10): connect
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] state changed (registered -> connecting)
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] state changed (connecting -> connected)
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (10/10): all done
Jul 22 16:47:50 tp pppd[1576260]: Plugin /nix/store/yqdqzz6y6agcmrfj8b6pwqhjcjyb3ypr-networkmanager-1.42.6/lib/pppd/2.5.0/nm-pppd-plugin.so loaded.
Jul 22 16:47:50 tp NetworkManager[1576260]: Plugin /nix/store/yqdqzz6y6agcmrfj8b6pwqhjcjyb3ypr-networkmanager-1.42.6/lib/pppd/2.5.0/nm-pppd-plugin.so loaded.
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: initializing
Jul 22 16:47:50 tp pppd[1576260]: pppd 2.5.0 started by root, uid 0
Jul 22 16:47:50 tp pppd[1576260]: Can't create lock file /var/run/pppd/lock/LCK..ttyUSB0: No such file or directory
Jul 22 16:47:50 tp NetworkManager[1576260]: Can't create lock file /var/run/pppd/lock/LCK..ttyUSB0: No such file or directory
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: status 2 / phase 'serial connection'
Jul 22 16:47:50 tp pppd[1576260]: Exit.
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: status 0 / phase 'dead'
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: cleaning up
```

Creating the directories via tmpfiles.d got the connection to succeed,
and might also fix other connections using PPP.
 2023-07-22 17:00:17 +03:00
Felix Bühler 0a2745684e
Merge pull request #239624 from Stunkymonkey/use-optionalString-then 
treewide: use optionalString instead of 'then ""'
 2023-07-22 13:02:47 +02:00
1000101 f63d863fde
nixos/pgbouncer: init (#241578) 
Co-authored-by: Marek Mahut <marek.mahut@gmail.com>
 2023-07-22 12:49:23 +02:00
Nick Cao 0b411c1e04
Merge pull request #244750 from therishidesai/rdesai/fix-hostapd-hardening 
nixos/hostapd: add AF_PACKET to RestrictAddressFamilies
 2023-07-21 21:16:22 -06:00
Rishi Desai efba841aeb nixos/hostapd: add AF_PACKET to RestrictAddressFamilies 2023-07-21 21:11:14 -05:00
rnhmjoj c7c288fbd5
nixos/dnscrypt-wrapper: avoid using polkit 2023-07-22 02:12:31 +02:00
Lassulus f8ad4849c3
Merge pull request #233386 from Lassulus/syncthing-fix 2023-07-22 01:02:04 +02:00
Matt Layher 93efcdac79
nixos/networkd: add DHCPServer PXE boot options 
Signed-off-by: Matt Layher <mdlayher@gmail.com>
 2023-07-21 16:59:21 -04:00
Ilan Joselevich 75a51855e3
Merge pull request #244689 from Kranzes/twingate-cp 
nixos/twingate: fix cp (-n -> --update=none)
 2023-07-21 23:21:53 +03:00
Maximilian Bosch 7c70396c1d
Merge pull request #242863 from emilylange/nixos/gitea-runtimedirmode 
nixos/gitea: revert change to RuntimeDirectoryMode
Closes ##243340
 2023-07-21 19:22:05 +02:00
Ilan Joselevich b0db3b7c11
nixos/twingate: fix cp (-n -> --update=none) 2023-07-21 19:57:57 +03:00
Bjørn Forsman a7da3eacaf nixos-generate-config: add 'lib' arg to configuration.nix 
Although 'lib' isn't needed by the default configuration, new NixOS uses
can get confused when being recommended configuration.nix snippets like

  systemd.services.NetworkManager-wait-online.enable = lib.mkForce false;

and have `sudo nixos-rebuild switch` fail with

  error: undefined variable 'lib'
 2023-07-21 13:53:33 +02:00
Stzx 3e8f45393d
Fix package ref 2023-07-21 18:56:49 +08:00
Sandro 0bca96affc
Merge pull request #243550 from SuperSandro2000/matrix-sliding-sync-module 2023-07-21 11:39:03 +02:00
Markus S. Wamser a936b9edec tarsnap: add package option 2023-07-21 11:37:15 +02:00
Sandro 9f4a3203eb
Merge pull request #233250 from SuperSandro2000/podman-timer-persist 2023-07-21 11:34:18 +02:00
Nathan Bijnens ffc3eb7c16 ebusd: new module 2023-07-21 18:22:46 +09:00
Maximilian Bosch 38823d15f4
Merge pull request #243883 from techknowlogick/gitea-1200 
gitea: 1.19.4 -> 1.20.0
 2023-07-21 09:41:07 +02:00
rnhmjoj 1f28c8defc
nixos/jool: validate the configuration 
This checks the validity of both NAT64 and SIIT configurations
at build time. An error produces something like this:

    Validating Jool configuration... Error: Cannot parse '283.0.113.1' as an IPv4 address.
 2023-07-21 09:08:40 +02:00
rnhmjoj 4657ff6ca7
nixos/jool: add service for setting up SIIT/NAT64 2023-07-21 09:07:54 +02:00
Artturi dbef093f84
Merge pull request #244449 from Artturin/fixsrip1 2023-07-21 01:44:33 +03:00
Maximilian Bosch b61919e5e0
nixos/gitea: set service type to notify 2023-07-20 22:20:43 +02:00
Andrew Marshall 3d774b4453 util-linux: Fix build on non-Linux 
Build logs show:

> configure: WARNING: non-linux system; not building mount
> configure: WARNING: non-linux system; not building swapon

So skip these on non-Linux

Using getOutput prevents eval failures on other platforms.
Things should stay eval'able with NIXPKGS_ALLOW_UNSUPPORTED_SYSTEM=1

Co-authored-by: Artturin <Artturin@artturin.com>
 2023-07-20 22:03:15 +03:00
Artturin 69267c22f1 nixos/stage-1: fix stripping 
got broken in 6ea1a2a1be which changed
runCommandCC to runCommand but was not
noticed because it was failing silently

runCommand doesn't include CC or bintools
 2023-07-20 21:26:38 +03:00
Felix Bühler f7bb884c13
Merge pull request #243850 from mattchrist/nixos/freshrss_auth_type 
nixos/freshrss: authType option
 2023-07-20 18:58:45 +02:00
Ryan Lahfa 2d0a128ac9
Merge pull request #201562 from jdbaldry/add/osquery 2023-07-20 11:06:46 +02:00
Matt Melling 3f34b65b2c
cloudlog: pin php version 2023-07-20 09:24:47 +01:00
Will Fancher 22bcc32f63
Merge pull request #244033 from SuperSandro2000/issue-243820 
nixos/stage-1: fix mount replacement in extra-utils
 2023-07-20 00:43:33 -04:00
Will Fancher 2e60058b95
Revert "nixos/boot/stage-1: chase symlinks when copying binaries" 2023-07-20 00:03:50 -04:00
Evan Goode be333da51f nixos/evdevremapkeys: init 
Add a service for evdevremapkeys (already packaged), a daemon for
remapping keyboard events
 2023-07-19 23:06:31 -04:00
Matt Christ c4d28ff161 nixos/freshrss: authType option 
This patch adds an `authType` option to enable configuring FreshRSS's
`auth_type` parameter.
Upstream documentation for this feature is located here:
https://freshrss.github.io/FreshRSS/en/admins/09_AccessControl.html

An accompanying NixOS test is provided to confirm this feature works
as expected.
 2023-07-19 19:43:55 -05:00
Sandro Jäckel 18010665ca
nixos/matrix-sliding-sync: init 
Co-authored-by: Emily <55066419+emilylange@users.noreply.github.com>
 2023-07-19 23:59:25 +02:00
Florian Klink 8f15fe7914
Merge pull request #241370 from RaitoBezarius/vxlan-independent 
nixos/networkd: support `Independent` flag for VXLAN netdevs
 2023-07-19 23:18:54 +03:00
Florian Klink 6f66c57acc
Merge pull request #241365 from RaitoBezarius/macaddrs-netdevs 
nixos/networkd: support netdev MAC addresses
 2023-07-19 23:03:34 +03:00
Martin Weinelt aadb3f3058
Merge pull request #244188 from mweinelt/engelsystem-php81 
nixos/engelsystem: pin php at 8.1
 2023-07-19 21:13:26 +02:00
Antoine Eiche da65d1dd20 nixos/osquery: init 2023-07-19 16:55:29 +02:00
Sandro dd5b7cfe1c
Merge pull request #228288 from Cynerd/bigclown 2023-07-19 15:51:25 +02:00
Sandro 3168d64a3f
Merge pull request #241974 from SohamG/pkg/oddjob 2023-07-19 15:07:04 +02:00
Sandro 2a2c6aeb4a
Merge pull request #244323 from SuperSandro2000/nexus 2023-07-19 14:55:09 +02:00
Linus Heckemann 5016dee6b1
Merge pull request #244177 from DeterminateSystems/initrd-chase-symlinks 
nixos/boot/stage-1: chase symlinks when copying binaries
 2023-07-19 14:26:55 +02:00
Sandro Jäckel fe6304df54
nixos/nexus: use mkPackageOption, cleanup 
This fixes:
trace: warning: literalExample is deprecated, use literalExpression instead, or use literalMD for a non-Nix description.
 2023-07-19 13:13:28 +02:00
Karel Kočí fd3f5471b0
nixos/mqtt2influxdb: init module 2023-07-19 09:47:04 +02:00
Karel Kočí dd4eec64ab
nixos/bcg: init module 
This is gateway that transforms BigClown wireless to MQTT.
 2023-07-19 09:47:04 +02:00
Gerg-L bf383adf0a nixos/user-groups: Add to $NIX_PROFILES paths 2023-07-18 23:33:18 -04:00
Gerg-L a5ccd2c5c8 nixos/nvidia: cleaned up reorganized and reformatted 2023-07-18 16:50:42 -04:00
Jack Connors 9bc84eba6f nixos/boinc: add boinc-headless example to package option 2023-07-18 21:47:12 +01:00
Martin Weinelt c8a7edcee1
nixos/engelsystem: pin php at 8.1 
Upstream supports php 8.0/8.1 for the 3.3.0 release. The upgrade to 8.2
caused a type mismatch in carbon.

> PHP message: Exception: Code: 0, Message: Carbon\Carbon::setLastErrors(): Argument #1 ($lastErrors) must be of type array, bool given, called in /nix/store/2prnw9qya9kaks2rwvd6fkrz0c7l5ygd-engelsystem-3.3.0/share/engelsystem/vendor/nesbot/carbon/src/Carbon/Traits/Creator.php on line 98, File: vendor/nesbot/carbon/src/Carbon/Traits/Creator.php:928
 2023-07-18 18:34:58 +02:00
Martin Weinelt 1076c3ada6
nixos/matrix-synapse: Allow passing extras, discover extras from config 
With this change we allow the user to configure extras, exposed as
optional-dependencies on the matrix-synapse package.

The vertical integration between package, user configuration and
deployment is a huge boon which then allows us to dynamically adapt the
python environment the service runs in, by inspecting the configuration
and autodiscovering certain used extras from config paths.
 2023-07-18 17:53:27 +02:00
Soham S Gumaste 162893f92a
nixos/oddjob: init at 0.34.7 2023-07-18 10:48:07 -05:00
Robert Hensing 8ad59ed1b2
Merge pull request #242098 from hercules-ci/nixos-no-nix-channel 
nixos: Disable nix-channel
 2023-07-18 15:27:24 +02:00
Martin Weinelt cd71c603a1
Merge pull request #244137 from flokli/web-eid-app-programs-firefox 
nixos/firefox: stop reading nixpkgs.config.firefox.enableEUWebID
 2023-07-18 14:52:49 +02:00
Sandro cacb77fb27
Merge pull request #206273 from wucke13/master 2023-07-18 13:12:06 +02:00
Sandro 065fd18e5c
Merge pull request #240452 from NickCao/bpftune 2023-07-18 12:43:02 +02:00
Florian Klink ca1dd491c6 nixos/firefox: stop reading nixpkgs.config.firefox.enableEUWebID 
This can cause firefox to be overridden with nativeMessagingHosts
pointing to web-eid-app twice, causing a conflict during build.
 2023-07-18 11:48:17 +03:00
Alexander Flurie 048f9a4adf fix whitespace issue 2023-07-18 00:20:46 -04:00
Mario Rodas 752b3281a4
Merge pull request #244061 from schra/fix/typo-vaultwarden 
nixos/vaultwarden: Fix Markdown syntax of link
 2023-07-17 20:15:58 -05:00
pennae d0299f7fa1
Merge pull request #243570 from dotlambda/patroni-python310 
nixos/patroni: use Python 3.10
 2023-07-18 01:28:29 +02:00
André Schröder 9858973dad nixos/vaultwarden: Fix Markdown syntax of link 
The typo was introduced in 1d41cff3dc
 2023-07-17 23:41:44 +02:00
Linus Heckemann dd2a892144 nixos/boot/stage-1: chase symlinks when copying binaries 
The split of util-linux into further outputs (#236463) resulted in
${util-linux.bin}/bin/mount becoming a symlink. This broke zfs in some
cases.
 2023-07-17 22:13:49 +02:00
Sandro 61dfd95022
Merge pull request #236778 from awakesecurity/jsoo1/buildkite-agent-hooks 
nixos/buildkite-agents: simplify service definition
 2023-07-17 21:46:12 +02:00
Sandro aa90c57672
Merge pull request #240774 from tollb/w20230630c_fix_atop_systemd_units 
nixos/atop: Fix regression in enabling atop units
 2023-07-17 21:26:21 +02:00
Sandro Jäckel 222222bedb
nixos/stage-1: fix mount replacement in extra-utils 2023-07-17 21:12:39 +02:00
Emily 00a7b91eac
Merge pull request #243366 from vamega/sambda-wsdd-firewall-config 
nixos/samba-wsdd: add openFirewall option
 2023-07-17 19:21:58 +02:00
Jarosław Wygoda 7fc0e3334e nixos/tailscale: add authKeyFile option 
Auth key registers new nodes without needing to sign in via a browser

Tailscale sends status changes with systemd-notify.
https://github.com/tailscale/tailscale/blob/v1.44.0/ipn/ipnlocal/local.go#L3670
 2023-07-17 18:52:07 +02:00
ppom 139259a377
slskd: init module (#233648) 
* slskd: init module

* Update nixos/modules/services/web-apps/slskd.nix

* Update nixos/modules/services/web-apps/slskd.nix

* add description to slskd module options

---------

Co-authored-by: ppom <ppom@ppom.me>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2023-07-17 18:40:54 +02:00
Alexander Flurie c2861bcbdf add separate configurable datadog process agent 2023-07-17 10:34:50 -04:00
Varun Madiath d237a7318c nixos/samba-wsdd: add openFirewall option 2023-07-17 10:22:43 -04:00
Jon Seager 5e73f0c1c9 nixos/lxd: fix default ui package 2023-07-17 08:04:42 -03:00
Maximilian Bosch 42105b2ba3
nixos/gitea: explicitly set CHUNKED_UPLOAD_PATH to writable location 
Fix for Gitea 1.20.0.

Without this being set, e.g. a `git push` (or `ssh` to `git@` in general) fails like this:

    2023/07/17 09:27:05 ...s/setting/setting.go:109:LoadCommonSettings() [F] Unable to load settings from config: unable to create chunked upload directory: /nix/store/yna9nf66wl2n9hlnhxi2g7fdgawk2kxl-gitea-1.20.0/bin/data/tmp/package-upload (mkdir /nix/store/yna9nf66wl2n9hlnhxi2g7fdgawk2kxl-gitea-1.20.0/bin/data: read-only file system)
    Connection to git.mbosch.me closed.
 2023-07-17 11:49:34 +02:00
Nick Cao b47c483bf8
nixos/bpftune: init 2023-07-17 15:59:49 +08:00
Colin e7059632c6 nixos/trust-dns: init 
Co-authored-by: Yt <happysalada@tuta.io>
 2023-07-16 15:24:10 +08:00
Artturi d1abbbd9b6
Merge pull request #242309 from Artturin/ananicyextraxadd 2023-07-16 00:43:45 +03:00
github-actions[bot] 26b725b3fe
Merge master into staging-next 2023-07-15 12:01:05 +00:00
pennae 45ae0efbbc
Merge pull request #243271 from woojiq/keyd-support-multiple-configs 
nixos/keyd: add support for multiple configuration in different files
 2023-07-15 13:59:57 +02:00
Nick Cao d9dd68efda
Merge pull request #243004 from baloo/baloo/keepalived/vrrp-router-id 
keepalived: fixup `virtualRouterId` documentation
 2023-07-15 05:36:10 -06:00
woojiq 2d3bf20086 nixos/keyd: add support for multi-file configuration 
Add `keyboards` option to define different configurations for different IDs. This creates the appropriate files in `/etc/keyd` instead of just `default.conf` as before.
Add `23.11` release note entry.
Add `mkRemovedOptionModule` for the old API with a note on how to revert the old behavior.
 2023-07-15 11:33:41 +03:00
github-actions[bot] 2a22bb7087
Merge master into staging-next 2023-07-15 06:01:19 +00:00
Matti 162039a233 nixos/swraid: Add missing mkRenamedOption 2023-07-15 03:56:54 +02:00
Robert Schütz c9e8e912cb nixos/patroni: use Python 3.10 2023-07-14 18:20:14 -07:00
Sandro 545f079f5e
Merge pull request #243475 from vtuan10/enable-klipper-flash 
nixos/klipper: add enableKlipperFlash option
 2023-07-15 02:54:47 +02:00
adisbladis 110489e12a
Merge pull request #243373 from adisbladis/pict-rs_0_4 
pict-rs: 0.3.3 -> 0.4.0
 2023-07-15 12:36:05 +12:00
github-actions[bot] 73205ff524
Merge master into staging-next 2023-07-15 00:02:34 +00:00
Arthur Gautier ee38adc8e2 keepalived: use ints.between 
Signed-off-by: Arthur Gautier <baloo@superbaloo.net>
 2023-07-14 20:52:48 +00:00
Lassulus a4ffd00fb9
Merge pull request #243251 from schnusch/cgit-regex 
nixos/cgit: fix \v and \f in regexEscape
 2023-07-14 22:03:44 +02:00
schnusch 8980fdd9b5 nixos/cgit: fix \v and \f in regexEscape 2023-07-14 21:14:01 +02:00
github-actions[bot] 0f179253f1
Merge master into staging-next 2023-07-14 18:01:25 +00:00
Sandro 75cfb4925a
Merge pull request #242126 from kjeremy/vmware-guest-aarch64 
vmware-guest module: work under aarch64
 2023-07-14 19:51:14 +02:00
Bruno BELANYI b5f28477aa nixos/prowlarr: make use of 'lib.getExe' 2023-07-14 13:43:26 +00:00
Van Tuan Vo 917bb93078
nixos/klipper: add enableKlipperFlash option 2023-07-14 15:19:36 +02:00
github-actions[bot] 781017eaf1
Merge master into staging-next 2023-07-14 12:01:45 +00:00
Ryan Lahfa c9e26d7d3a
Merge pull request #242036 from jnsgruk/prowlarr-update 2023-07-14 13:48:15 +02:00
Sandro 9e010edec7
Merge pull request #243102 from yu-re-ka/peering-manager-meta 2023-07-14 12:08:05 +02:00
Pol Dellaiera 641b814a44
Merge pull request #243094 from jnsgruk/homepage 
homepage: init at 0.6.21
 2023-07-14 09:53:26 +02:00
adisbladis 4c5afa2af4 nixos/pict-rs: Use pict-rs-0.3 for NixOS <= 23.05 2023-07-14 17:46:26 +12:00
github-actions[bot] 9905fde3a5
Merge master into staging-next 2023-07-14 00:02:39 +00:00
Janik fc7d1abf50
Merge pull request #133092 from TomatoCream/add-jvm-to-nexus 2023-07-14 01:45:19 +02:00
Your Name 9cc181f5c6 nixos/nexus: add jvm package option 2023-07-13 23:16:42 +02:00
Ryan Lahfa 7bc11802ed
Merge pull request #238777 from ORichterSec/esdm-upstream 2023-07-13 22:35:45 +02:00
Will Fancher 11fec97761
Merge pull request #183314 from DeterminateSystems/optional-swraid 
Make swraid optional
 2023-07-13 16:24:34 -04:00
Sandro 6873b5c7ee
Merge pull request #243289 from SuperSandro2000/nullmailer-group 
nixos/nullmailer: allow users in the nullmailer group to send mails
 2023-07-13 21:44:18 +02:00
Guillaume Girol aaf4aa7c7e
Merge pull request #237994 from SebTM/fix/cups-xdg-missing 
cups: add dependency for xdg-open
 2023-07-13 18:22:46 +00:00
github-actions[bot] a3b43106c9
Merge master into staging-next 2023-07-13 18:01:24 +00:00
Bjørn Forsman df1eee2aa6 nixos: show which files are related to "not applying GID/UID change" 
I initially thought it was related to /var/lib/nixos/{gid-map,uid-map},
but it seems that to migrate GID/UID you have to edit
/etc/{group,passwd} (and update GID/UID in all files). So mention those
files in the warning messages.
 2023-07-13 17:21:36 +02:00
Ramses 1bee79f9f7
nixos/swap: make sure all kernel modules are loaded before creating swap devices. (#239163) 
Co-authored-by: iliana etaoin <iliana@buttslol.net>
 2023-07-13 17:12:54 +02:00
Sandro Jäckel b2c1b176d9
nixos/nullmailer: allow users in the nullmailer group to send mails 
In combination with https://github.com/NixOS/nixpkgs/pull/231673 this
allows hardened services to use nullmailer's sendmail.
 2023-07-13 17:02:19 +02:00
Oliver Richter 9d6cd34766 esdm: init at 0.6.0 
Signed-off-by: Oliver Richter <richter-oliver@gmx.net>
 2023-07-13 16:08:12 +02:00
Sebastian Sellmeier 57071b60fe
cups: add xdg-open as dependency package as substitution does not work 
for all desktop-envs
 2023-07-13 15:37:00 +02:00
github-actions[bot] f4330398cd
Merge master into staging-next 2023-07-13 12:01:13 +00:00
Philipp Bartsch 30ad9053ab nixos/murmur: add apparmor policy 2023-07-13 11:11:01 +02:00
Philipp Bartsch ced170c030 nixos/miniflux: add apparmor policy 
This change also extends the test to ensure that normal operations
aren't denied.
 2023-07-13 11:10:39 +02:00
Jon Seager 3de6be0951
nixos/homepage-dashboard: init 2023-07-13 09:38:26 +01:00
adisbladis c88c434c34 nixos/lemmy: Move pictrs url from pictrs_url to pictrs.url 
The upstream config schema changed.
 2023-07-13 15:46:30 +12:00
adisbladis 2bc5b80182 lemmy-ui: Set NODE_ENV to run server in production mode 2023-07-13 15:46:30 +12:00
Philipp Bartsch 0f474b4c6c nixos/apparmor: support custom i18n glibc locales 
The i18n nixos module creates a customized glibcLocales package.
Use the system specific glibcLocale instead of the vanilla one.
 2023-07-12 21:38:31 +02:00
github-actions[bot] 79f291cd13
Merge master into staging-next 2023-07-12 18:01:11 +00:00
Artturin 4cf8006173 nixos/ananicy: take listOf attrs instead of string 2023-07-12 20:13:03 +03:00
Lassulus 0e1fc501c6
Merge pull request #241927 from ether42/usbguard 
nixos/usbguard: rename services.usbguard.implictPolicyTarget to services.usbguard.implicitPolicyTarget
 2023-07-12 18:58:30 +02:00
Yureka 5934231542 nixos/peering-manager: remove global 'with lib;' 2023-07-12 18:39:55 +02:00
Yureka 041e9a8e7a nixos/peering-manager: add meta section 2023-07-12 18:39:54 +02:00
Pol Dellaiera f3d3147417
Merge pull request #241528 from Gerg-L/nixos/direnvrc 
nixos/direnv: init
 2023-07-12 16:42:40 +02:00
Gerg-L 194a3a7d97 nixos/direnv: init 2023-07-12 08:48:17 -04:00
Sandro 5aa53b205e
Merge pull request #208924 from erdnaxe/nitter-network-online 2023-07-12 14:19:30 +02:00
github-actions[bot] bc41da4eb9
Merge master into staging-next 2023-07-12 12:01:23 +00:00
Cabia Rangris d857b1261c
Merge pull request #241667 from cyberus-technology/outline-0.70.0 
outline: 0.69.2 -> 0.70.2
 2023-07-12 14:45:40 +04:00
Rick van Schijndel e1163b27dd
Merge pull request #242912 from chayleaf/fix-getent 
treewide: update path to getent
 2023-07-12 12:37:08 +02:00
Jon Seager b853c70661
nixos/prowlarr: add package option 2023-07-12 10:19:05 +01:00
Felix Buehler bec27fabee treewide: use lib.optional instead of 'then []' 2023-07-12 09:36:28 +01:00
Alexander Sieg b926effb76
outline: 0.69.2 -> 0.70.2 2023-07-12 09:54:57 +02:00
Arthur Gautier c8920fc6d9 keepalived: fixup virtualRouterId documentation 
Router id 0 is an invalid option with keepalived
 2023-07-12 06:12:03 +00:00
github-actions[bot] c7f86a0032
Merge master into staging-next 2023-07-12 00:02:37 +00:00
Arnout Engelen 7e26c8d097
prometheus-exporter-nextcloud: support for auth tokens 
Fixes #176849
 2023-07-12 00:32:17 +02:00
Sandro f57af4cd1e
Merge pull request #237442 from SuperSandro2000/nixos-option 
nixos-option: update to nix 2.15
 2023-07-12 00:14:53 +02:00
chayleaf 4d4c73ff78 treewide: update path to getent 2023-07-12 02:32:23 +07:00
Sandro d6d6d42c74
Merge pull request #237364 from fdietze/patch-3 
fix herbstluftwm session command with other desktop managers
 2023-07-11 21:14:20 +02:00
Sandro Jäckel 49d0af0f1e
nixos/tools: remove nixos-option condition 2023-07-11 17:13:21 +02:00
emilylange da58b13615
nixos/gitea: revert change to RuntimeDirectoryMode 
As this broke most unix socket setups and there is a far better suited
`server.UNIX_SOCKET_PERMISSION` in gitea/forgejo itself.

https://docs.gitea.io/en-us/administration/config-cheat-sheet/#server-server

ref: a0311e5107
 2023-07-11 17:05:45 +02:00
github-actions[bot] 8e15f4621a
Merge master into staging-next 2023-07-11 00:02:57 +00:00
nikstur 3b6bc9b536 nixos/filesystems: init squashfs 2023-07-10 22:02:36 +02:00
Linus Heckemann 7d2124f9e3 stage-1: Only copy mdadm and mdmon into initramfs if enabled 2023-07-10 20:31:13 +02:00
Linus Heckemann c0f963a338 boot.initrd.services.swraid -> boot.swraid 
Since the option affects both stage-1 and stage-2, it does not make
sense to keep it within the boot.initrd namespace.
 2023-07-10 20:20:08 +02:00
Linus Heckemann 0b277bcc2b nixos/swraid: make entire module optional 
swraid support will now only be enabled by default if stateVersion is
older than 23.11. nixos-generate-config will now generate explicit
config for enabling support if needed.
 2023-07-10 16:39:35 +02:00
github-actions[bot] 09bdd38107
Merge master into staging-next 2023-07-10 00:02:30 +00:00
Sandro eae22520b9
Merge pull request #237802 from SuperSandro2000/ceph-package-options 
nixos/ceph: add options to configure package used by each component
 2023-07-09 23:38:28 +02:00
Philipp Bartsch ad7ffe3a7c nixos/apparmor: fix syntax in abstractions/bash 2023-07-09 22:25:30 +02:00
Philipp Bartsch 9145e6df84 nixos/apparmor: add missing abstraction/nss-systemd 
The abstraction/nameservice profile from apparmor-profiles package
includes abstractions/nss-systemd. Without "reexporting" it,
the include fails and we get some errors.
 2023-07-09 22:21:44 +02:00
Jacob Moody 5f97e78c64 pam_dp9ik: init at 1.5 2023-07-09 14:12:21 -05:00
Atemu 2616bb762b nixos/paperless: explain how to set JSON env vars 
Co-authored-by: Christian Theune <ct@flyingcircus.io>
Co-authored-by: Erik Arvstedt <erik.arvstedt@gmail.com>
 2023-07-09 19:52:06 +02:00
github-actions[bot] c60d48234a
Merge master into staging-next 2023-07-09 12:01:18 +00:00
Lily Foster 5c1583bfd7
nixos/plymouth: fix minor doc rendering issue 2023-07-09 02:31:05 -04:00
github-actions[bot] a52559d1f6
Merge master into staging-next 2023-07-09 06:01:18 +00:00
K900 8533b23159 nixos/networkd: fix mismerge of #240969 and #241362 2023-07-09 07:34:42 +03:00
github-actions[bot] 24fc2ed8e1
Merge master into staging-next 2023-07-09 00:02:38 +00:00
Artturin 1b1f25312d ananicy: unstable-2021-11-05 -> unstable-2023-03-21 
type's were renamed so this will break some user rules
 2023-07-09 00:58:05 +03:00
Will Fancher 0b25b4c7c9
Merge pull request #237908 from lilyinstarlight/upd/plymouth-2023-06-05 
plymouth: unstable-2021-10-18 -> unstable-2023-06-05
 2023-07-08 16:57:31 -04:00
Robert Hensing a1d0ee8c50
nixos/nix-channel: Apply suggestions from code review 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2023-07-08 20:49:37 +02:00
github-actions[bot] e949ec41bd
Merge master into staging-next 2023-07-08 18:01:04 +00:00
Ryan Lahfa 186edce0a0
Merge pull request #241362 from RaitoBezarius/macvtap-networkd 2023-07-08 20:00:52 +02:00
Artturin aae2268e0a nixos/ananicy-cpp: add rulesProvider 2023-07-08 20:28:45 +03:00
Artturin ff28d7a982 nixos/ananicy: don't error if $out/ananicy-cpp doesn't exist 
copy new rule
 2023-07-08 20:19:13 +03:00
Artturin b04a04929c nixos/ananicy: add extraTypes, extraCgroups 2023-07-08 19:42:46 +03:00
Joerie de Gram 1785fe6c01 nixos/i18n: correct defaultText for supportedLocales 2023-07-08 16:43:22 +02:00
Robert Hensing 3fd4ac8e82
Merge pull request #237040 from roberth/flexible-activation 
nixos/system: Support pre-activated images
 2023-07-08 16:06:25 +02:00
Atemu 44f637aa8d nixos/paperless: use toShellVars for paperless-manage 
The homebrewed snippet didn't escape vars properly which is an issue because
PAPERLESS_OCR_USER_ARGS requires a JSON string. This also meant a discrepancy
between the services' env vars and paperless-manage's.

Just use the correctly functioning library function for this instead.
 2023-07-08 16:03:45 +02:00
K900 9c98b1a744
Merge pull request #233981 from K900/dont-touch-graphical-session-target 
nixos/x11/display-managers: don't touch graphical-session.target in xsession-wrapper
 2023-07-08 16:43:27 +03:00
Raito Bezarius 6b9e49230d nixos/networkd: add MACVTAP= option for networks 
Example 10. of man page of systemd.network(5) shows:
```

       Example 10. MacVTap

       This brings up a network interface "macvtap-test" and attaches it to "enp0s25".

           # /usr/lib/systemd/network/25-macvtap.network
           [Match]
           Name=enp0s25

           [Network]
           MACVTAP=macvtap-test
```

Which is a MACVTAP example and is currently unsupported in NixOS.
This is useful for people using "modern" technologies with virtual machines.
 2023-07-08 15:42:10 +02:00
Ryan Lahfa ed2f009130
Merge pull request #237873 from Mic92/fix-aarch64-zfs 2023-07-08 14:41:00 +02:00
Ryan Lahfa 7be83143e8
Merge pull request #222536 from oddlama/master 2023-07-08 14:36:18 +02:00
Ryan Lahfa 89d68cebcb
Merge pull request #241126 from RaitoBezarius/fix-plausible-secret-handling 2023-07-08 14:34:20 +02:00
Ryan Lahfa 0d2f526dbb
Merge pull request #241462 from SuperSandro2000/remove-ddclient 2023-07-08 14:33:00 +02:00
Ryan Lahfa 828633d36a
Merge pull request #241534 from samueldr/fix/finally-deprecate-boot-loader-raspberrypi 2023-07-08 14:16:27 +02:00
K900 d26393d60c nixos/x11/display-managers: don't touch graphical-session.target in xsession-wrapper if the desktop knows how to handle it 
This is not correct and will in fact break things because they try to run before the target is reached.
Ideally we'd get rid of it entirely, but WM users rely on this behavior, so allowlist some desktops
to get the sane behavior, and fake the session for the rest until upstreams/NixOS modules catch up.
 2023-07-08 15:09:39 +03:00
github-actions[bot] 3ab86b3cfa
Merge master into staging-next 2023-07-08 12:01:04 +00:00
Ryan Lahfa 49413e25e0
Merge pull request #241314 from jnsgruk/master 2023-07-08 13:58:20 +02:00
Bruce Toll 8f4f1ce005 nixos/atop: Fix regression in enabling atop units 
Fix regression where the systemd units for atop are no longer
automatically started at boot when programs.atop.enable = true.

Regression was introduced in commit: 09350ff7d4
  nixos/atop: Convert log format to fix service start

This commit restructures the atop systemd service config so that the
code to convert the log format gets configured as a preStart script
along with the addition of the wantedBy rule.
 2023-07-08 07:29:22 -04:00
K900 400aafbdc9
Merge pull request #239389 from K900/sddm-0.20.0 
sddm: 0.19.0 -> 0.20.0
 2023-07-08 11:52:02 +03:00
github-actions[bot] cc1af72ece
Merge master into staging-next 2023-07-08 06:01:19 +00:00
adisbladis 038752b14e
Merge pull request #242155 from adisbladis/lemmy-0_18_1 
lemmy-{ui,server}: 0.18.0 -> 0.18.1
 2023-07-08 14:48:16 +12:00
adisbladis f2b2e6d098
Merge pull request #240246 from adisbladis/xonsh-envs 
xonsh: Add wrapper
 2023-07-08 14:26:43 +12:00
adisbladis 8062626e0e lemmy-{server,ui}: 0.18.0 -> 0.18.1 2023-07-08 13:59:30 +12:00
github-actions[bot] 6d9902baac
Merge master into staging-next 2023-07-08 00:02:35 +00:00
Philipp Bartsch 0eabede44b nixos/apparmor: make abstractions/ssl_certs more go friendly 
By default golang's crypto/x509 implementation wants to read
/etc/pki/tls/certs/ when loading system certificates.

This patch adds the path to reduce audit log noise.

Relevant code:
- https://github.com/golang/go/blob/go1.20.5/src/crypto/x509/root_unix.go#L32-L82
- https://github.com/golang/go/blob/go1.20.5/src/crypto/x509/root_linux.go#L17-L22
 2023-07-08 00:53:27 +02:00
Robert Hensing 61afc4d166 nixos/nix-channel: Take care of NIX_PATH's non-empty default when disabled 2023-07-07 23:12:39 +02:00
Janik e46ab54b68
Merge pull request #241783 from gmemstr/n8n-tweaks 2023-07-07 23:04:48 +02:00
Ilan Joselevich 7016b8bf7a
Merge pull request #242076 from Kranzes/nixtmpfilesd 
nixos/nix-daemon: use tmpfiles from nixPackage when possible
 2023-07-07 23:53:27 +03:00
Jeremy Kolb 1e16a937ca vmware-guest module: work under aarch64 2023-07-07 15:40:29 -04:00
github-actions[bot] f66291aefe
Merge master into staging-next 2023-07-07 18:01:21 +00:00
Jon Seager 2fbb85e2c9
nixos/lxd: add ui.enable option to toggle ui feature 2023-07-07 18:31:03 +01:00
Ilan Joselevich 160edcf2c5
nixos/twingate: add package option and test 2023-07-07 20:03:54 +03:00
Robert Hensing d00e242b80 nixos: Add nixos.channel.enable 
For those who wish to get rid of nix-channel.
 2023-07-07 19:00:06 +02:00
Ilan Joselevich af8206f801
nixos/nix-daemon: use tmpfiles from nixPackage when possible 2023-07-07 17:29:05 +03:00
Pol Dellaiera 764472b473
Merge pull request #233091 from yayayayaka/add-team-gitlab 
maintainers/team-list: Add team gitlab
 2023-07-07 15:19:15 +02:00
Nick Cao b119b38cc1
Merge pull request #241134 from frederictobiasc/mautrix 
mautrix-telegram: 0.14.0 -> 0.14.1, python3Packages.mautrix: 0.19.16 -> 0.20.0
 2023-07-07 20:41:07 +08:00
github-actions[bot] da44aac0b1
Merge master into staging-next 2023-07-07 12:01:26 +00:00
K900 c0132f22e9 sddm: 0.19.0 -> 0.20.0 2023-07-07 12:46:59 +03:00
Sandro Jäckel 88d7aa56e1
nixos/nix*: remove not necessary imports 
We do not really declare module dependencies anywhere else and it would
a nousance to move any file if many other referenced it without being
necessary. Also most higher level modules depend on most of the lower
level ones.
So removing this because it can only potentially cause weird issues.
 2023-07-07 11:01:12 +02:00
Robert Hensing 54303b65ef
Merge pull request #241690 from hercules-ci/nixos-nix-modules 
Split nixos/nix-daemon.nix
 2023-07-07 10:29:58 +02:00
Robert Hensing 262e7272c7
Merge pull request #236389 from Enzime/darwin-builder 
darwin-builder: use port 31022 by default
 2023-07-07 10:24:48 +02:00
Robert Hensing 12cb2b0b40 nixos: flakes.nix -> nix-flakes.nix 
I guess this is what people expect to find. Thanks Sandro.
 2023-07-06 23:27:17 +02:00
github-actions[bot] 1a76e12ddc
Merge master into staging-next 2023-07-06 18:01:11 +00:00
Robert Hensing c83ad0598b nixos/*nix*: Update module impl docs and link related modules 
Something extra for the readers.
 2023-07-06 20:00:10 +02:00
Robert Hensing 07de9b62cc nixos/*nix*: Add imports as inherently necessary 
Albeit not technically necessary because of nixos//module-list.nix
 2023-07-06 19:48:22 +02:00
Michele Guerini Rocco d0b4889418
Merge pull request #240295 from sysvinit/sysvinit/udev-privacy-address-scope 
network-interfaces: restrict ipv6 udev rules
 2023-07-06 18:03:36 +02:00
Kevin Boulain 680ee304ca nixos/usbguard: rename services.usbguard.implictPolicyTarget to services.usbguard.implicitPolicyTarget 2023-07-06 15:34:40 +02:00
Kerstin ba445ba8bc
Merge pull request #241088 from jooooscha/master 
maintainers: add joscha
 2023-07-06 15:30:28 +02:00
Michael Hoang edef486898 darwin.linux-builder: rename from darwin.builder 2023-07-06 21:33:09 +10:00
Michael Hoang 34f6ce2fc2 darwin.builder: allow overriding configuration 2023-07-06 21:32:08 +10:00
Michael Hoang 98d970bc37 nixos/qemu-vm: use CA certificates from host 2023-07-06 21:32:08 +10:00
Michael Hoang 285f5e858e darwin.builder: use port 31022 by default 2023-07-06 21:32:08 +10:00
github-actions[bot] b9424c74c5
Merge staging-next into staging 2023-07-06 00:03:25 +00:00
Gabriel Simmer 674de7c287
nixos/n8n: correct configuration, webhookUrl type 
I realised in NixOS#240189 I made some minor errors in the service definition.
 2023-07-05 23:15:52 +01:00
Sandro 5e3022fb17
Merge pull request #240320 from wegank/cdesktopenv-bump 
cdesktopenv: 2.3.2 -> 2.5.1
 2023-07-05 23:41:36 +02:00
Lassulus f751061a08
Merge pull request #237477 from accelbread/usbguard-dbus-support 
nixos/usbguard: add USBGuard dbus daemon option
 2023-07-05 23:13:10 +02:00
Vladimír Čunát d507f1d4a6
Merge branch 'master' into staging 2023-07-05 23:06:05 +02:00
K900 db9b857e1d nixos/iso-image: fix syntax 2023-07-05 21:49:03 +03:00
github-actions[bot] 8791a24d33
Merge staging-next into staging 2023-07-05 18:02:00 +00:00
Will Fancher e520c2e278
Merge pull request #240600 from lilyinstarlight/fix/luksroot-lvm-default-off 
nixos/lvm: toggle initrd enable option independently of main options
 2023-07-05 12:42:45 -04:00
Alexander Sieg 8d80108d6d nixos/gitlab: configure elasticsearch indexer path 2023-07-05 15:01:31 +02:00
Robert Hensing 0f71c406cf nixos/nix-daemon: Move to services/system 
It is now only about the system service.
Granted, it also installs the client package, but that could be
factored out later, with actual test to support such a new type of
configuration.
 2023-07-05 14:59:01 +02:00
Robert Hensing fad172a366 nixos/config/nix-channel: Move NIX_PATH logic 2023-07-05 14:54:29 +02:00
Robert Hensing 5c0c96a828 nixos/config/nix-channel: Factor out root channel initialization 2023-07-05 14:54:29 +02:00
Robert Hensing 1c772cd857 nixos/config/flakes: Factor out 2023-07-05 14:54:28 +02:00
Robert Hensing d6a68f0542 nixos/config/nix-remote-build: Factor out 2023-07-05 14:54:27 +02:00
Robert Hensing 4bbd44908c nixos/config/nix: Move extraOptions 2023-07-05 14:54:27 +02:00
Robert Hensing 19e33831c6 nixos/config/nix: Move nix.check* 2023-07-05 14:54:26 +02:00
Robert Hensing d73da5b868 nixos/config/nix: Move nix.settings 2023-07-05 14:54:26 +02:00
Yaya 71be5933cd nixos/snipe-it: Use the pinned PHP package 
As 3bb3859 bumped the default PHP version to 8.2, the snipe-it package
has been pinned to PHP 8.1. This commit changes the php package used in
the module to the one pinned by snipe-it.
 2023-07-05 14:47:05 +02:00
github-actions[bot] 007ab6fb2f
Merge staging-next into staging 2023-07-05 12:02:05 +00:00
Maximilian Bosch b82c8e13c7
Merge pull request #228508 from SuperSandro2000/gitea-no-recurse 
nixos/gitea: don't recursively change file owners/permissions
 2023-07-05 13:56:46 +02:00
tv 0ab3a1fd78 nixos/nftables: add redirect for /etc/hosts 2023-07-05 13:56:27 +02:00
tv 75e405c156 nixos/nftables: use environment.etc for redirects 2023-07-05 13:56:16 +02:00
tv 9e51ec86e7 nixos/nftables: add checkRulesetRedirects option 2023-07-05 13:55:34 +02:00
Lassulus 7e37c051c1
Merge pull request #241526 from Mic92/cloud-init 2023-07-05 13:31:27 +02:00
Jörg Thalheim 56926dda06
Merge pull request #239393 from Lassulus/iso-graphical 
nixos/iso-image: make graphical grub configurable
 2023-07-05 12:30:59 +01:00
Robert Hensing 6649d1e369 nixos/config/nix: Move nixConf 2023-07-05 13:03:32 +02:00
Robert Hensing 2fa416732c nixos/config/nix: Move legacyConfMappings 2023-07-05 12:52:56 +02:00
Maximilian Bosch 7f0bc68c32
Merge pull request #237544 from hrdinka/fix_gitea 
Revert "nixos/gitea: requires database"
 2023-07-05 12:09:55 +02:00
Lily Foster 7b514d2175
nixos/lvm: toggle initrd enable option independently of main options 2023-07-05 04:59:04 -04:00
Jan Tojnar 2819e547d3 Merge branch 'staging-next' into staging 
; Conflicts:
;	pkgs/development/libraries/nss/generic.nix

- bb53634671 removed the conditionals since firefox-esr-91 and nss <3.69 has been dropped a while ago.
- cb3762857d updated the conditionals to always partition the tests based on the nss_latest version. Chosen that since it will remain future proof.
 2023-07-05 02:22:26 +02:00
Emily 3a79936b45
Merge pull request #217536 from sephii/caddy-reload 
nixos/caddy: add support for reload
 2023-07-04 22:57:24 +02:00
Daniel Șerbănescu 50a3fdd03c wordpress: fixed installing of languages 2023-07-04 21:20:42 +02:00
r-vdp 9ef5b7d793 nixos/x11: change the description of the display manager service 
Currently systemd prints `Starting X11 Server` in the journal, which completely
misled me into searching why my wayland system was starting an X server.
Turns out that what is started is actually the display manager,
so I think it's better to call it like that in the description.
 2023-07-04 21:08:13 +02:00
Samuel Dionne-Riel a6e61a1ea9 nixos: Formally deprecate boot.loader.raspberryPi 
The whole option set was recommended against since mid-2019, and never
worked with the Raspberry Pi 4 family of devices.

We should have deprecated it in early 2020 for removal by 2021. At the
time I did not feel confident in making such a decision, and never
ended-up getting around to it.

The ***only*** supported-by-NixOS boot methods for AArch64 are
standards-based boot methods, namely UEFI or the pragmatically
almost-standard extlinux-compatible for U-Boot.

You can quote me on that.
 2023-07-04 13:42:57 -04:00
Jörg Thalheim 6f404ed214 cloud-init: add xfs support 2023-07-04 19:27:18 +02:00
Alexander Sieg 8934558abf
nixos/gitlab: fix unit test result display (#241322) 
After the update to GitLab 16 the puma worker needs `gzip` in it's PATH
in order to junit test results.
 2023-07-04 18:57:19 +02:00
Atemu 712caf8eb1
Merge pull request #224366 from martinetd/ankisyncd-rs 
ankisyncd-rs: add package for anki-sync-server-rs
 2023-07-04 18:03:19 +02:00
Sandro Jäckel d35df28f65
ddclient: remove package and module on upstream maintainer request 2023-07-04 16:46:53 +02:00
Herwig Hochleitner 5205c73d93 nixos/gitea: add WORK_PATH to config 
this is in preparation for 1.20, which needs this option set
 2023-07-04 16:05:56 +02:00
github-actions[bot] 14bdc27ee1
Merge staging-next into staging 2023-07-04 12:01:56 +00:00
Sylvain Fankhauser 27b7132e81
nixos/caddy: remove admin check 
Since it introduces IFD.
 2023-07-04 11:25:08 +02:00
Sylvain Fankhauser 1f0ac736b4
nixos/caddy: add support for reload 2023-07-04 11:25:05 +02:00
Pol Dellaiera 3ede00e4fa
Merge pull request #240571 from gaelreyrol/scaphandre-module-assertions 
nixos/prometheus/exporters: adjust scaphandre assertions
 2023-07-04 11:24:24 +02:00
Dominique Martinet fbe3e3b44e replace ankisyncd with ankisyncd-rs 
- remove old ankisyncd python package
- rename new rust package so it's a drop in replacement
 2023-07-04 18:14:18 +09:00
Dominique Martinet 668f528b6c nixos/ankisyncd: use ankisyncd-rs instead of the old python one 
Unfortunately the config is not compatible; data itself looks like it was compatible
from an up to date python ankisyncd but I wouldn't assume anything with the older
service (which didn't work for me with either ankidroid or recent desktop version)
 2023-07-04 18:14:17 +09:00
Florian Klink f338f46fff
Merge pull request #240969 from mutantmell/systemd-network-unit-util 
systemd.network: move unit file generation code into a util
 2023-07-04 12:02:37 +03:00
Janik 8419b512e6
Merge pull request #240189 from gmemstr/patch-1 
n8n: add WEBHOOK_URL environment variable
 2023-07-04 08:56:36 +02:00
Raito Bezarius faba775beb nixos/networkd: support Independent flag for VXLAN netdevs 
According to networkd netdev's manpage:
```
       Independent=
           Takes a boolean. When true, the vxlan interface is created without any underlying network interface. Defaults to false, which means that a .network
           file that requests this VXLAN interface using VXLAN= is required for the VXLAN to be created.
```

is a valid option for [VXLAN] section.
 2023-07-04 01:53:34 +02:00
Raito Bezarius 4d38fa043b nixos/networkd: support netdev MAC addresses 
According to systemd.netdev manpage:

```
MACAddress=
           Specifies the MAC address to use for the device, or takes the special value "none". When "none", systemd-networkd does not request the MAC address for
           the device, and the kernel will assign a random MAC address. For "tun", "tap", or "l2tp" devices, the MACAddress= setting in the [NetDev] section is
           not supported and will be ignored. Please specify it in the [Link] section of the corresponding systemd.network(5) file. If this option is not set,
           "vlan" device inherits the MAC address of the master interface. For other kind of netdevs, if this option is not set, then the MAC address is
           generated based on the interface name and the machine-id(5).

           Note, even if "none" is specified, systemd-udevd will assign the persistent MAC address for the device, as 99-default.link has
           MACAddressPolicy=persistent. So, it is also necessary to create a custom .link file for the device, if the MAC address assignment is not desired.
```

Therefore, `none` is an acceptable value.
 2023-07-04 01:21:35 +02:00
Pascal Bach fc478ad9ff nixos/minio: allow distributed nodes 2023-07-03 21:51:02 +02:00
github-actions[bot] 0f844d9b01
Merge staging-next into staging 2023-07-03 18:01:46 +00:00
Will Fancher 73a8ca1674
Merge pull request #240601 from lilyinstarlight/fix/lvm-root-sd-stage-1-unhide 
nixos/*: unhide remaining systemd stage-1 options
 2023-07-03 13:38:12 -04:00
Christoph Hrdinka 70cc0d412f
nixos/gitea: only require databases if createDatabase is set 
Currently the database service (mysql/postgresql) is required by the
gitea service. If none of them exists on the same machine as gitea it
will refuse to start. With this change it is only required if
createDatabase was set to true.
 2023-07-03 17:02:12 +02:00
Lein Matsumaru 143869247e
rtl8723bs-firmware: cleanup 2023-07-03 14:22:20 +00:00
Lily Foster e9207b0501
nixos/*: unhide remaining systemd stage-1 options 
These options were missed in NixOS/nixpkgs#226237, but they all were
specifically added for systemd stage-1.
 2023-07-03 08:41:38 -04:00
github-actions[bot] afae8eadb8
Merge staging-next into staging 2023-07-03 12:01:45 +00:00
Janik 565fc74d28
Merge pull request #240954 from michaelshmitty/anuko-time-tracker-fixup 2023-07-03 12:29:43 +02:00
Bobby Rong dd9fcc40b7
Merge pull request #241131 from ShamrockLee/nix-daemon-gramman 
nixos/nix-daemon: fix grammatical mistake in description
 2023-07-03 16:41:51 +08:00
Michael Smith 65585d6c53 nixos/anuko-time-tracker: improve module options 
* Remove unsafe dbinstall.php script
* Make Nginx virtualhost configurable
 2023-07-03 08:39:17 +02:00
github-actions[bot] 61abd839c4
Merge staging-next into staging 2023-07-03 06:01:59 +00:00
Eric Wolf ee5cc38432 lemmy: Support secret options 
This commit implements #101777 by merging
the config with an external file at startup.
 2023-07-03 09:12:40 +08:00
Nguyễn Gia Phong 170125ebdb nixos/ntfy.sh: require base-url setting 
It is required by attachment-cache-dir whose default is provided.
 2023-07-03 08:58:05 +08:00
github-actions[bot] 9fc1b7bdc9
Merge staging-next into staging 2023-07-03 00:03:26 +00:00
Ryan Lahfa 9f2cff4e0a
Merge pull request #240913 from gabriel-doriath-dohler/MCHPRS 2023-07-03 01:14:24 +02:00
gabriel-doriath-dohler 04c830db01 nixos/mchprs: init module 
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
 2023-07-02 23:59:59 +00:00
github-actions[bot] d3954e9196
Merge staging-next into staging 2023-07-02 18:01:45 +00:00
Emily d8c2229c49
Merge pull request #226684 from srid/patch-8 
nixos/jenkins-job-builder: Fix link to documentation, use mkEnableOption
 2023-07-02 19:49:17 +02:00
Sridhar Ratnakumar ac4790a84e
nixos/jenkins-job-builder: Fix link to documentation, use mkEnableOption 
Co-Authored-By: emilylange <git@emilylange.de>
 2023-07-02 19:07:44 +02:00
Felix Bühler e770737241
Update nixos/modules/services/networking/libreswan.nix 
Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>
 2023-07-02 19:03:19 +02:00
Felix Bühler 7cc9ced775
Update nixos/modules/services/misc/cgminer.nix 
Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>
 2023-07-02 19:03:11 +02:00
Frédéric Tobias Christ bb55edd515 mautrix-telegram: 0.14.0 -> 0.14.1 
Add new configuration option regarding IPv6 support to the example.

Diff: https://github.com/mautrix/telegram/compare/refs/tags/v0.14.0...v0.14.1
Changelog: https://github.com/mautrix/telegram/releases/tag/v0.14.1
 2023-07-02 17:44:51 +02:00
Yueh-Shun Li a899971599 nixos/nix-daemon: fix grammatical mistake in description 2023-07-02 23:27:09 +08:00
Raito Bezarius d7e721f614 plausible: fix admin user password seed and SMTP passwords 
LoadCredential was misused as it is not building any environment variable,
it is the responsibility of our preStart to do it so
Plausible's script can pick it up.
 2023-07-02 17:03:53 +02:00
github-actions[bot] 394e69c186
Merge staging-next into staging 2023-07-02 12:01:55 +00:00
Ryan Lahfa 7672c1e9ae
Merge pull request #201907 from Tom-Hubrecht/fail2ban 2023-07-02 13:57:47 +02:00
oddlama 1fa9f03eec
nixos/hostapd: rewrite to support multi-AP, password from file, and more 
At this point this is basically a full rewrite of this module, which
is a breaking change and was necessary to properly expose the useful
parts of hostapd's config. The notable changes are:

- `hostapd` is now started with additional systemd sandbox/hardening options
- A single-daemon can now manage multiple distinct radios and BSSs, which is
  why all configuration had to be moved into `hostapd.radios`
- By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are
  supported, too
- Added passwordFile-like options for wpa and sae
- Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration
- Implements RFC42 as far as reasonable for hostapd
- Removes `with lib;`
 2023-07-02 13:32:41 +02:00
Joscha Loos 1130d57afb gollum: add maintainer 2023-07-02 13:23:05 +02:00
mutantmell d51ebb6173 nixos/networkd: refactor 
Reduces size of networkd module by moving unit file generation code into a util.
 2023-07-01 17:17:51 -07:00
github-actions[bot] f5a8109c46
Merge staging-next into staging 2023-07-02 00:03:47 +00:00
Jan Tojnar ff15350944 Merge branch 'staging-next' into staging 
; Conflicts:
;	pkgs/development/libraries/nss/generic.nix

fa93045a5b adds `< 3.91` conjunct for the `remove-c25519-support.patch` condition
bb53634671 removes the ≥ 3.90 condition for the `remove-c25519-support.patch` since nss < 3.90 is no longer provided
 2023-07-01 20:11:04 +02:00
Mac Chaffee 61cb4170fd
nixos/static-web-server: create module which uses upstream systemd units 
This commit creates a nixos module for static-web-server.
The module uses upstream systemd units to start static-web-server.
It also includes options for configuring static-web-server.
 2023-07-01 12:51:13 -04:00
Jörg Thalheim cf2167b39e
Merge pull request #231609 from Mic92/bcachefs-tools 
bcachefs-tools: unstable-2023-01-31 -> unstable-2023-05-13
 2023-07-01 16:31:43 +01:00
Jörg Thalheim 4d719f101c nixos/bcachefs: add new mount.bcachefs util 2023-07-01 17:10:10 +02:00
Niklas Hambüchen 080757c6c5 nixos/vaultwarden: Bind to localhost by default. See #100192 2023-07-01 15:35:28 +02:00
TQ Hirsch dd481f2ee3
pdns: Changed paths in /etc to use pdns instead of powerdns 2023-07-01 18:55:51 +08:00
TQ Hirsch d25e5e2107
nixos/powerdns, nixos/pdns-recurser: Symlink configuration into /etc 
This places a symlink to the running configuration where the admin
tools expect it, allowing users to control the powerdns server or
recursor without manually specifying a config file.
 2023-07-01 18:55:50 +08:00
Janik 87cb1d7cd2
Merge pull request #178610 from Et7f3/headless-remove-vesa 2023-07-01 10:19:04 +02:00
Will Fancher ccaea077e2
Merge pull request #240792 from accelbread/plymoutherror 
nixos/gdm: fix plymouth-quit bootup error message
 2023-07-01 02:38:08 -04:00
github-actions[bot] ed3d23eef3
Merge staging-next into staging 2023-07-01 00:03:25 +00:00
pennae 969b4d7ba9
Merge pull request #232454 from quentinmit/bridge-vlan 
nixos/networkd: Fix typo in BridgeVLAN options
 2023-07-01 00:19:37 +02:00
Tom Hubrecht 208ee8b2e2 nixos/fail2ban: use attrsets for settings instead of strings 2023-06-30 22:27:40 +02:00
Michele Guerini Rocco aedc167ecf
Merge pull request #240325 from 999eagle/update/searxng 
nixos/searx: add configuration for redis and limiter settings
 2023-06-30 22:22:43 +02:00
Archit Gupta 36ca205e44 nixos/gdm: fix plymouth-quit bootup error message 
If plymouth is not enabled, there is no plymouth-quit service created
otherwise, so setting systemd.services.plymouth-quit.wantedBy creates an
empty service which logs an error during bootup. The plymouth fix should
only be applied if plymouth is actually available to prevent a needless
systemd service error on systems with gdm but no plymouth (such as a
default gnome setup).
 2023-06-30 13:15:53 -07:00
pennae 05b84a2b83
Merge pull request #240754 from SuperSandro2000/ssh-fix-manpage 
nixos/{sshd,thelounge,ttyd,proxmox-image}: fix example rendering
 2023-06-30 20:24:43 +02:00
github-actions[bot] 1f219a2d35
Merge staging-next into staging 2023-06-30 18:01:53 +00:00
Domen Kožar 22deb49735
Merge pull request #240744 from NixOS/pcdcd-plugins-default 
nixos: append ccid as a plugin
 2023-06-30 17:30:56 +01:00
Sandro Jäckel 2048a8ca02
nixos/proxmox-image: fix example rendering 2023-06-30 18:14:43 +02:00
Sandro Jäckel 0000004f80
nixos/ttyd: fix example rendering 2023-06-30 18:14:37 +02:00
Sandro Jäckel 000004d123
nixos/thelounge: fix example rendering 2023-06-30 18:14:24 +02:00
Sandro Jäckel 9999996fd6
nixos/sshd: fix example rendering 2023-06-30 18:14:16 +02:00
Domen Kožar 8079c9ac60 nixos: append ccid as a plugin 2023-06-30 16:21:57 +01:00
David McFarland d19ab9f1da nixos/gnupg: fix pinentryFlavor documentation and add release note 2023-06-30 10:22:38 -03:00
Gaël Reyrol f856229c9a
nixos/prometheus/exporters: adjust scaphandre assertions 2023-06-30 15:10:38 +02:00
github-actions[bot] 36acc4f99b
Merge staging-next into staging 2023-06-30 12:02:06 +00:00
David McFarland 3d4f3068fd nixos/gnupg: fix gpg-agent when pinentryFlavor is null 
8ea644997f moved the configuration outside
the pinentryFlavor check, causing evaluation to fail when it was set to
null.

960a5142aa removed the upstream systemd
units, causing gpg-agent.service to be conditional on pinentryFlavor.
 2023-06-30 08:04:16 -03:00
Maximilian Bosch c1ea4ec7a9
Merge pull request #208605 from Izorkin/update-gitea 
nixos/gitea: update configuration
 2023-06-30 11:44:04 +02:00
adisbladis 0fab94a844 xonsh: Add wrapper 
It is currently not obvious how to install/use xonsh with dependencies and python packages.

This PR implements a wrapper that allows you to construct a custom xonsh environment by using:
``` nix
xonsh.override { extraPackages = ps: [ ps.requests ]; }
```
 2023-06-30 19:39:53 +12:00
Sophie Tauchert 0aa5adef62
nixos/searx: add configuration for redis and limiter settings 2023-06-30 07:38:59 +02:00
github-actions[bot] f6242f9557
Merge staging-next into staging 2023-06-30 00:03:00 +00:00
Bobby Rong c84b823065
Merge pull request #240261 from bobby285271/upd/pantheon 
Pantheon updates 2023-06-28
 2023-06-29 23:31:46 +08:00
lassulus 345745b6da nixos/syncthing: fix syncthing-init running by default 
also remove empty values from the config
 2023-06-29 17:57:11 +03:00
lassulus c42a7b668c Revert "Merge pull request #233377 from ncfavier/revert-226088" 
This reverts commit 7b28ea6783, reversing
changes made to 3009b12817.
 2023-06-29 17:56:30 +03:00
Weijia Wang a5b7078a2d cdesktopenv: 2.3.2 -> 2.5.1 2023-06-29 17:18:45 +03:00
lassulus e4f361f352 installation-cd: enable graphicalGrub 2023-06-29 14:35:54 +02:00
lassulus 363c846d77 nixos/iso-image: make graphical grub configurable 2023-06-29 14:35:54 +02:00
Bobby Rong 82970f8b1e
nixos/pantheon: Stop shipping gnome-bluetooth-contract by default 
The functionality is now covered by wingpanel-indicator-bluetooth 7.0.0.
 2023-06-29 20:13:07 +08:00
github-actions[bot] 958ca2b0c0
Merge staging-next into staging 2023-06-29 12:01:52 +00:00
Kevin Cox 65365bbb83
Merge pull request #240417 from kevincox/minetest-conf 
nixos.minetest-server: Add option for generating config file and ability to add extra command line flags
 2023-06-29 07:36:04 -04:00
Kevin Cox 6cb0b6a4d6
nixos.minetest-server: Add option for generating config file and ability to add extra command line flags 
This adds two main features:

1. `services.minetest-server.config` is an options object that is automatically serialized into a minetest config file.
2. `services.minetest-server.extraArgs` provides an escape hatch to pass extra arguments.
 2023-06-28 17:31:46 -04:00
Izorkin a0311e5107
nixos/gitea: update sandboxing options 2023-06-28 23:28:56 +03:00
Gaël Reyrol 1a821e7bf5
nixos/prometheus-exporters: add php-fpm 2023-06-28 22:11:36 +02:00
github-actions[bot] c5b82a046f
Merge staging-next into staging 2023-06-28 18:01:51 +00:00
Benjamin Staffin 211d94d70b
nixos/paperless: Enable UMask now that it works (#240010) 
According to
https://github.com/NixOS/nixpkgs/issues/147599#issuecomment-1272286679
the bug that prevented this UMask directive from working has been fixed
in systemd, so it should be safe to use now.

This stops paperless-ngx from making everything world-readable on disk,
but it does not change permissions of any files previously created.
 2023-06-28 10:48:25 -04:00
dariof4 5c13477d40
nixos/fontdir: add otb to font regex (#239802) 2023-06-28 14:22:38 +02:00
Sandro 0a5cb5c47e
nixos/grafana: disable updater by default (#240323) 2023-06-28 14:09:55 +02:00
Gaël Reyrol 3a4e234b07
services/calibre-server: Add new http & auth options (#216497) 
nixos/doc: add calibre-server new options
 2023-06-28 14:06:47 +02:00
Robert Hensing 772d6076e8 nixos: Add system.activatable flag for images that are pre-activated 2023-06-28 14:06:28 +02:00
github-actions[bot] 291da905ac
Merge staging-next into staging 2023-06-28 12:02:09 +00:00
Robert Hensing 9edad17d29 nixos/top-level: Remove unused builder variables 
These variables were previously used by the activation script
build commands, but are now embedded into those commands for
to improve reusability for an upcoming addition.
 2023-06-28 12:49:34 +02:00
Robert Hensing 7891c8cdaf nixos/activatable-system: Move legacy variables to top-level 2023-06-28 12:48:59 +02:00
Robert Hensing 990b72f6af nixos/activatable-system: Make system builder commands env independent 
This way it will be easier to reuse in a different context, such as
a separate build of the activation script by itself (TBD).
 2023-06-28 12:42:51 +02:00
Pol Dellaiera e1b3f7b159
Merge pull request #239803 from gaelreyrol/prometheus-scaphandre-exporter-init 
services/prometheus/exporters: add scaphandre
 2023-06-28 09:46:08 +02:00
Pol Dellaiera f9c3e5dac1
Merge pull request #232415 from jensbin/displaylink57 
displaylink: 5.6.1-59.184 -> 5.7.0-61.129
 2023-06-28 08:36:14 +02:00
github-actions[bot] b0a5a6b413
Merge staging-next into staging 2023-06-28 06:01:58 +00:00
Leona Maroni dd05e2a899 nixos/paperless: add leona as maintainer 2023-06-28 08:42:23 +08:00
github-actions[bot] 6ace22c3b7
Merge staging-next into staging 2023-06-28 00:03:21 +00:00
Gabriel Simmer 3d33c5c7df
n8n: add WEBHOOK_URL environment variable 
The WEBHOOK_URL options is only able to be set through environment variables. Was considering adding a more generic "environment" parameter but wasn't sure the best way to approach this.
 2023-06-27 21:16:33 +01:00
Lily Foster 35337085ea
Merge pull request #237820 from lilyinstarlight/fix/systemd-initrd-network-default-package 
nixos/networkd: make overriding boot.initrd.systemd.package a little easier by using mkDefault
 2023-06-27 15:58:57 -04:00
Gaël Reyrol e11f06a951
services/prometheus/exporters: add scaphandre 2023-06-27 20:50:58 +02:00
github-actions[bot] ae79d808a5
Merge staging-next into staging 2023-06-27 18:01:53 +00:00
Sandro 135fef712e
Merge pull request #232920 from SuperSandro2000/nix-optimise 
nixos/nix-optimise: persist timer
 2023-06-27 18:14:08 +02:00
Sandro d698c07d15
Merge pull request #233451 from SuperSandro2000/matplotlib-nox 
nixos/no-x-libs: add python3.pkgs.matplotlib
 2023-06-27 17:57:56 +02:00
Aaron Andersen 7362e078cb
Merge pull request #208363 from GeorgesAlkhouri/refactor/nixos-modules-shadow 
nixos/shadow: refactor login.defs config options
 2023-06-27 11:49:15 -04:00
Molly Miller 3e96fd980d nixos/network-interfaces: restrict IPv6 privacy address overrides to interface 
Only trigger the privacy address override for a given interface when
that interface is added. Without restricting the rule to the
interface, this command would be run when any interface is added.
 2023-06-27 16:15:02 +02:00
Kerstin bc152fd1c1
Merge pull request #203621 from jooooscha/master 
nixos/gollum: add options for user and group of gollum process
 2023-06-27 15:49:45 +02:00
Nick Cao 694de8e63e
Merge pull request #240072 from NickCao/singbox-harden 
nixos/sing-box: set umask 0077 when generating configuration file
 2023-06-27 20:34:18 +08:00
Janik 946c3f8c51
Merge pull request #214063 from michaelshmitty/anuko-timetracker 2023-06-27 13:19:44 +02:00
Michael Smith 7532dbaa32 nixos/anuko-time-tracker: init 2023-06-27 12:30:33 +02:00
Naïm Favier 3ef988ce97
Merge pull request #237259 from ncfavier/extraDependencies-path 
nixos/top-level: change extraDependencies from packages to paths
 2023-06-27 11:59:06 +02:00
Naïm Favier 0179d9f7e6
nixos/top-level: change extraDependencies from package to pathInStore 
Allows adding subdirectory flake inputs that aren't top-level store paths.
 2023-06-27 11:48:08 +02:00
NotAShelf b5fcbad5fb nixos/lemmy: handle database creation better 2023-06-27 17:46:19 +08:00
Yaya 7d432c1ff9 nixos/gitlab: Add an additional folder to systemd-tmpfiles 2023-06-27 11:39:17 +02:00
Sandro Jäckel 1370fe7c36
nixos/no-x-libs: add python3.pkgs.matplotlib 2023-06-27 11:29:24 +02:00
Michele Guerini Rocco 3bb07bdf2d
Merge pull request #236322 from rnhmjoj/pr-udev-quiet 
nixos/udev: silence harmless warnings
 2023-06-27 10:28:41 +02:00
Nick Cao e52b401a95
nixos/sing-box: set umask 0077 when generating configuration file 2023-06-27 16:08:55 +08:00
Janik 23a11416b9
Merge pull request #238307 from pacien/pixelfed-update 2023-06-27 09:55:06 +02:00
Nick Cao d2483a8cc7
nixos/sing-box: init 2023-06-27 13:58:02 +08:00
Robin Gloster 61f41ba937
Merge pull request #234245 from nbraud/below 
nixos/below: Add service module
 2023-06-26 21:23:36 +02:00
Ivan Malison cd3b658167
starship: Remove INSIDE_EMACS checks (#239039) 
Many of the terminals supported inside emacs work perfectly fine with STARSHIP.
The TERM=dumb case already handles the tramp and eterm cases, so as far as I can
tell, this is basically just a check for the benefit of OLD versions of
term-mode (see
https://www.emacswiki.org/emacs/AnsiTerm#:~:text=Historically%2C%20'M%2Dx%20ansi%2Dterm,the%20older%20'C%2Dc'%20binding.,
which indicates that it also now handles colors)
 2023-06-26 20:37:10 +02:00
Ryan Lahfa 269144b67b
Merge pull request #239937 from Tom-Hubrecht/pixelfed 2023-06-26 18:00:26 +02:00
Michele Guerini Rocco 547cd96f10
Merge pull request #231108 from corngood/gpg-agent 
nixos/gnupg: add systemd configuration
 2023-06-26 16:22:41 +02:00
Tom Hubrecht 9075cd9e11 nixos/pixelfed: Fix missing php modules for pixelfed-horizon 2023-06-26 15:53:20 +02:00
Jens Binkert 46336e7a53 displaylink: 5.6.1-59.184 -> 5.7.0-61.129 2023-06-26 09:43:22 +02:00
Atemu a04b45f10e
Merge pull request #238596 from nikstur/qemu-vm-use-host-pkgs 
nixos/qemu-vm: use cfg.host.pkgs
 2023-06-26 09:06:31 +02:00
Luke Granger-Brown cba7cd9b6d
Merge pull request #233282 from pkern/spamassassin 
spamassassin: 3.4.6 → 4.0.0
 2023-06-25 23:55:34 +01:00
iliana etaoin 53135cc8c7 nixos/grub: don't die on EFI-only systems if devices != ["nodev"] 
Without this change, GRUB installation on non-PC systems (such as
aarch64-linux) only works if boot.loader.grub.devices is set to exactly
`["nodev"]`. If boot.loader.grub.devices was any other value (including
the default `[]`), users got the error:

    Died at /nix/store/an9ngv2vg95bdcy0ifsxlbkasprm4dcw-install-grub.pl line 586.

install-grub.pl verifies that if both $grub and $grubEfi are set, then
$grubTarget (e.g. i386-pc) and $grubTargetEfi (e.g. x86_64-efi) must
both be set, or the script will `die`. On non-PC systems, $grubTarget
is "".

When boot.loader.grub.devices is ["nodev"], $grub is set to null,
disabling non-EFI installation. But if a user has devices set for an
x86_64 config, or is using only mirroredBoots without setting devices,
they will hit this `die`.

This change sets $grub to "" if $grubTarget is "".
 2023-06-25 17:46:12 +00:00
Luke Granger-Brown 58b48cd720 nixos/spamassassin: add DMARC module to default config 2023-06-25 17:35:16 +00:00
Marco Rebhan af614b53d1 nixos/avahi: Add package option 
Allows replacing the avahi package (e.g. for debugging) without having
to use an overlay, avoiding unnecessary package rebuilds.
 2023-06-25 11:01:58 -03:00
Felix Buehler 6672dde558 treewide: use optionalAttrs instead of 'else {}' 2023-06-25 11:01:34 -03:00
pennae 32deda9ec0
Merge pull request #238222 from mads256h/harden-davmail 
davmail: enable sandboxing options
 2023-06-25 14:57:19 +02:00
Felix Buehler 933a41a73f treewide: use optional instead of 'then []' 2023-06-25 09:11:40 -03:00
Philipp Kern 0ce6a09235 spamassassin: 3.4.6 → 4.0.0 
The HashCash module has been removed, so this change also drops it from
the default config for spamassassin.
 2023-06-25 09:38:10 +00:00
Will Fancher b154feadb9
Merge pull request #237823 from lilyinstarlight/fix/systemd-initrd-no-rev 
nixos/version: remove nixpkgs commit rev from initrd
 2023-06-24 20:25:32 -04:00
happysalada 8db05aa52f nixos/rustus: inital module 2023-06-25 04:26:53 +08:00
Felix Buehler f3719756b5 treewide: use optionalString instead of 'then ""' 2023-06-24 20:19:19 +02:00
Nick Cao cca08f710c
Merge pull request #237507 from Alexis211/document-wgautomesh-gossip-secret 
wgautomesh: clearer documentation for `gossip_secret_file`
 2023-06-24 22:48:34 +08:00
nikstur f6b37ddaf2 nixos/qemu-vm: use cfg.host.pkgs 2023-06-24 00:45:15 +02:00
Franz Pletz 48d0d69869
Merge pull request #239348 from Ma27/bump-grafana 2023-06-23 23:15:43 +02:00
Naïm Favier b7098c1239
Merge pull request #239427 from ncfavier/syncthing-escaping 
nixos/syncthing: fix escaping
 2023-06-23 20:29:42 +02:00
Naïm Favier 9a9ded1675
nixos/syncthing: fix escaping 2023-06-23 20:19:51 +02:00
Robert Hensing b1ad9cd27d
Merge pull request #238136 from hercules-ci/nixos-nixpkgs-dont-check-when-_module.args.pkgs-is-set 
`nixos/nixpkgs`: Don't check when `_module.args.pkgs` is set
 2023-06-23 19:17:36 +02:00
pennae 50a780ce5c
Merge pull request #237824 from drupol/add-guacamole-server-and-client 
{guacamole-server,guacamole-client}: init at 1.5.2
 2023-06-23 15:41:50 +02:00
Maximilian Bosch 6e6c2e6530
nixos/grafana: clarify that there's still a bit of time until notifiers are removed 
See https://github.com/grafana/grafana/pull/66269
 2023-06-23 13:45:56 +02:00
Nick Cao e844ee1d27
Merge pull request #239208 from jelle-bigbridge/patch-1 
nixos/vault: set coredump ulimit to 0
 2023-06-23 09:57:19 +08:00
Ryan Lahfa 230a3705fc
Merge pull request #234223 from alyssais/stage-1-bind-file 2023-06-22 21:47:30 +02:00
Sandro 996d7cabba
Merge pull request #225877 from jappeace/upgrade-keter-2.1 
nixos/keter: 2.0 -> 2.1
 2023-06-22 20:00:22 +02:00
Jelle Besseling 53a3ddfab8
vault: set coredump ulimit to 0 2023-06-22 16:44:30 +02:00
Artturin ed55524562 nixos/malloc: add back maybe unnecessary line 2023-06-22 17:28:44 +03:00
Artturi 920b833494
Merge pull request #238459 from SuperSamus/vm.max_map_count 2023-06-22 11:37:48 +03:00
Elis Hirwing da7b79c90e
Merge pull request #239049 from LeSuisse/php80-removal 
php: drop PHP 8.0
 2023-06-22 08:43:39 +02:00
K900 66cb54c7fc nixos/supergfxd: add pciutils to path 
Used for some weird code paths. Fixes #239059.
 2023-06-22 08:27:44 +03:00
seth 18aeed351a
nixos/nvidia: fix typo in PRIME/nvidiaBusID assertion 2023-06-21 17:51:59 -04:00
Pol Dellaiera 6cc1b175d3
nixos/guacamole-server: init 2023-06-21 22:11:44 +02:00
Thomas Gerbet 84c0cb1471 php: drop PHP 8.0 
Closes #224505
 2023-06-21 22:09:16 +02:00
Pol Dellaiera a950888024
nixos/guacamole-client: init 2023-06-21 20:47:31 +02:00
Franz Pletz 5224f298f0
Merge pull request #235202 from SuperSandro2000/intel-vaapi-driver 2023-06-21 20:15:17 +02:00
Martino Fontana e1a6c85c2b nixos/sysctl: raise default vm.max_map_count to 1048576 2023-06-21 19:25:42 +02:00
Sandro 45539f8552
nixos/keter: fix port type 2023-06-21 18:23:47 +02:00
MayNiklas d7f89bbfb6 nixos/proxmox-image: add additionalSpace, bootSize and diskSize options 2023-06-21 14:13:03 +02:00
Domen Kožar b37c9b89a4
Merge pull request #221169 from bouk/bouk/mainpr 
opentelemetry-collector: add NixOS module
 2023-06-21 13:07:50 +01:00
Pol Dellaiera ec2b581c34
Merge pull request #238832 from Garmelon/grafana-config-options-fix 
nixos/grafana: Fix and adjust config options
 2023-06-21 11:45:24 +02:00
Jörg Thalheim 7b697d9698
Merge pull request #238822 from SuperSandro2000/grub-1-removal 
nixos/grub: remove grub 1 from descriptions
 2023-06-21 09:21:04 +01:00
Joscha daa75a4093 nixos/grafana: Fix and adjust config options 2023-06-20 23:19:45 +02:00
Sandro Jäckel 900104fc52
nixos/grub: remove grub 1 from descriptions 2023-06-20 22:34:25 +02:00
Weijia Wang e9b4c2b8f2 exhibitor: drop 2023-06-20 22:14:35 +03:00
Alyssa Ross eafa1fd10d nixos/public-inbox: set ProtectHome=tmpfs 
This fixes using coderepos in /home, by allowing the coderepo paths to
be bind mounted into an otherwise empty /home tmpfs.  Since this was
the usecase for making ProtectHome= overrideable, we don't need the
mkDefault any more.
 2023-06-20 17:19:09 +00:00
Alyssa Ross 03216e705c nixos/public-inbox: make coderepo paths accessible 2023-06-20 17:19:09 +00:00
Alyssa Ross 68c68f39db nixos/public-inbox: remove unused indexing code 
This was never run, because public-inbox-init now always initializes
Xapian.
 2023-06-20 17:11:23 +00:00
Sandro 0b77630d18
Merge pull request #209068 from CRTified/adguard-dhcp 2023-06-20 13:37:34 +02:00
Sandro 8eec7326a3
Merge pull request #219106 from m-bdf/nixos-testing-increase-device-timeout 2023-06-20 11:48:45 +02:00
rnhmjoj 7d263715bd nixos/fakeroute: run as unprivileged user 2023-06-20 01:12:04 +00:00
pennae c8b4e5d557
Merge pull request #237557 from pennae/dedocbookify-nixos 
nixos/doc: dedocbookify
 2023-06-19 14:05:03 +02:00
Florian Klink 1272a034f0
Merge pull request #238396 from R-VdP/fsck_path_fix 
nixos/systemd: Make the fsck unit depend only on FS packages.
 2023-06-19 12:58:27 +03:00
Joscha 5e4ec14596 nixos/grafana: update and add settings 
I went through all categories that were already present in the grafana
module and added most options from the official docs at
https://grafana.com/docs/grafana/v9.5/setup-grafana/configure-grafana/

I also modified the descriptions of some existing options to match the
official docs more closely.
 2023-06-18 22:23:48 +02:00
Joscha 2f68d8cb10 nixos/grafana: reformat 2023-06-18 22:23:39 +02:00
Ilan Joselevich c8afc7dd83
Merge pull request #238193 from MatthewCash/master 
nixos/kmscon: disable reload-systemd-vconsole-setup service
 2023-06-18 16:18:43 +03:00
Ryan Lahfa 8f83962b34
Merge pull request #238289 from NixOS/netdata-fix 2023-06-18 15:10:33 +02:00
Bobby Rong 34c861d69c
Merge pull request #238384 from bobby285271/fix/pantheon-sessionCommands 
nixos/pantheon: allow excluding pantheon-agent-geoclue2
 2023-06-18 19:23:09 +08:00
r-vdp c3fa4f9170
nixos/systemd: Make the fsck unit depend only on FS packages. 
This means that this unit no longer need to be rebuilt when the system path is changed.
 2023-06-18 12:46:13 +02:00
Bobby Rong 013bb477b4
nixos/pantheon: allow excluding pantheon-agent-geoclue2 
Bash will raise syntax error for sessionCommands if sessionPath is empty.
 2023-06-18 17:23:57 +08:00
Pol Dellaiera f6e54f4eb8
Merge pull request #192889 from pbsds/code-server-ext-compat 
code-server: add vscode-with-extensions compatibility
 2023-06-18 09:12:59 +02:00
Peder Bergebakken Sundt 53077eb1be code-server: add vscode-with-extensions compatibility 2023-06-17 23:14:50 +02:00
Emily 187729fe5d
Merge pull request #233324 from R-VdP/fwupd_1_9_1 
fwupd: 1.8.15 -> 1.9.2
 2023-06-17 22:55:59 +02:00
pacien d99dd867fb nixos/pixelfed: fix code cache cleanup 
The "bootstrap" directory only exists within the app's package.
The cached code is placed at the root of the runtime directory
instead.
 2023-06-17 19:57:29 +02:00
Vladimír Čunát 6d80b598ef
Merge #237233: staging-next 2023-06-11 2023-06-17 18:53:26 +02:00
Raito Bezarius 2d7e29b60e nixos/netdata: fix claim_token_file -> claimTokenFile 
It was forgotten in afc6f0d93b.
 2023-06-17 17:51:45 +02:00
Pol Dellaiera 2028c38a83
Merge pull request #238083 from deinferno/tailscale-kmod 
nixos/tailscale: fix ipv6 nat (v6nat) support
 2023-06-17 16:15:17 +02:00
Ryan Lahfa 3d941b6be8
Merge pull request #236656 from nikstur/qemu-vm-persistent-block-device-names 2023-06-17 14:52:26 +02:00
github-actions[bot] f300d1d5c2
Merge master into staging-next 2023-06-17 12:01:26 +00:00
Mads Mogensen 40c923aa13
davmail: enable sandboxing options 
The output from `systemd-analyze security davmail`:
Before: `Overall exposure level for davmail.service: 8.2 EXPOSED 🙁`
After: `Overall exposure level for davmail.service: 1.3 OK 🙂`
 2023-06-17 11:32:42 +02:00
Alyssa Ross 18f2be2e56 nixos/public-inbox: require that URL be non-empty 
public-inbox-init doesn't work if passed an empty URL.
 2023-06-17 07:57:27 +00:00
Vladimír Čunát 41d7e84dd8
Merge branch 'master' into staging-next 
Trivial conflict:
 	nixos/doc/manual/release-notes/rl-2311.section.md
 2023-06-17 07:46:50 +02:00
Matthew_Cash ae234ed1ab
nixos/kmscon: disable reload-systemd-vconsole-setup service 2023-06-16 19:12:07 -07:00
Robert Hensing 8f31bff794 nixos/nixpkgs: Don't check when _module.args.pkgs is set 2023-06-16 22:08:16 +02:00
Robert Hensing a742767baf nixos/nixpkgs: Make default Nixpkgs lazy when overridden 2023-06-16 21:46:26 +02:00
nikstur 0bdba6c99b nixos/qemu-vm: use persistent block device names 
This change removes the bespoke logic around identifying block devices.
Instead of trying to find the right device by iterating over
`qemu.drives` and guessing the right partition number (e.g.
/dev/vda{1,2}), devices are now identified by persistent names provided
by udev in /dev/disk/by-*.

Before this change, the root device was formatted on demand in the
initrd. However, this makes it impossible to use filesystem identifiers
to identify devices. Now, the formatting step is performed before the VM
is started. Because some tests, however, rely on this behaviour, a
utility function to replace this behaviour in added in
/nixos/tests/common/auto-format-root-device.nix.

Devices that contain neither a partition table nor a filesystem are
identified by their hardware serial number which is injecetd via QEMU
(and is thus persistent and predictable). PCI paths are not a reliably
way to identify devices because their availability and numbering depends
on the QEMU machine type.

This change makes the module more robust against changes in QEMU and the
kernel (non-persistent device naming) and by decoupling abstractions
(i.e. rootDevice, bootPartition, and bootLoaderDevice) enables further
improvement down the line.
 2023-06-16 19:36:03 +02:00
deinferno 26ff15b981
nixos/tailscale: fix ipv6 nat (v6nat) support 2023-06-16 12:18:55 +00:00
Maximilian Bosch 3df3a89892
nixos/nextcloud: fix declarative cache configuration 
It's supposed to be `memcache.distributed`, not an associative PHP array
named `memcache` with a key `distributed`.

This was probably never caught because the initial `grep -q` check in
the test was invalid: `redis-cli` prints nothing if no keys can be found
when not writing to a tty apparently.
 2023-06-16 14:11:38 +02:00
Maximilian Bosch 5a2769d981
nextcloud27: init 
Fixes #237560
 2023-06-16 14:11:38 +02:00
github-actions[bot] ebaef3ce4c
Merge master into staging-next 2023-06-16 12:01:08 +00:00
David McFarland 8ea644997f nixos/gpg-agent: move pinentry-program to /etc/gnupg/gpg-agent.conf 2023-06-16 08:24:52 -03:00
David McFarland 960a5142aa nixos/gnupg: add systemd configuration 
This depended on the systemd user configuration provided upstream in
doc/examples.  However, this was all removed in:

eae28f1bd4
 2023-06-16 08:21:47 -03:00
Charles Hall 370f3e4883 nixos/lemmy: remove option removed upstream 2023-06-16 05:59:32 -04:00
Ryan Lahfa a056d3567c
Merge pull request #236279 from minijackson/netbox-3.5.3 2023-06-16 11:49:13 +02:00
Ryan Lahfa afc6f0d93b
Merge pull request #228479 from zimbatm/netdata-auto-claim 2023-06-16 11:30:30 +02:00
Raito Bezarius d4cab20b3a zfs: add option to restore kernel_neon for linux 6.2 support on aarch64 
Introduced in aaeca98456
with the usual disdain for ZFS.

We have been there in the past with
<https://www.phoronix.com/news/NixOS-Linux-5.0-ZFS-FPU-Drop> /
https://github.com/NixOS/nixpkgs/pull/61076.

This fixes ZFS on aarch64 until the next breakage.

See https://github.com/openzfs/zfs/issues/14555 for original upstream
issue.
 2023-06-16 11:07:33 +02:00
github-actions[bot] af7beed7be
Merge master into staging-next 2023-06-16 06:01:09 +00:00
Will Fancher e57b65abbb
Merge pull request #238021 from dcarosone/empty-zpool-name-assertion 
nixos/zfs: assert that pool names are not empty
 2023-06-15 23:21:07 -04:00
Daniel Carosone 86ecee627a typo 2023-06-16 12:25:34 +10:00
Daniel Carosone 2dcb1b3ed7 nixos/zfs: assert that pool names are not empty 
a zfs fileSystems entry with an absolute (e.g. device) path rather than
a zfs dataser is parsed as an empty pool name, causing a doomed-to-fail
import job to be created as a boot dependency. Catch this as an assertion
 2023-06-16 10:40:09 +10:00
github-actions[bot] 839c033ffb
Merge master into staging-next 2023-06-16 00:02:18 +00:00
John Soo 75f419f222
nixos/buildkite-agents: simplify service definition 
* remove `with`

* replace specific hooks with attrsOf lines

  To be flexible, should they change.

* make hooks with writeShellApplication

  - Previously hooks would not build if they used a heredoc with `EOF`
  - To shellcheck hooks

* format with nixpkgs-fmt

* remove removed option module
 2023-06-15 16:31:29 -07:00
Raito Bezarius db230657fc nixos/pixelfed: cleanup package cache at the very start 2023-06-16 00:50:10 +02:00
Maciej Krüger 95c729c030
Merge pull request #223952 from m-bdf/fix-cfs-zen-tweaks 
Fix cfs-zen-tweaks
 2023-06-15 21:56:00 +02:00
Lily Foster 7fb3975256
nixos/plymouth: add actual logo defaultText and move existing to example 
Fixes #221391
 2023-06-15 10:42:40 -04:00
Lily Foster ef0c0d5c2f
nixos/plymouth: use new runtime paths for plugins and themes 2023-06-15 10:42:37 -04:00
github-actions[bot] 036d56d643
Merge master into staging-next 2023-06-15 12:01:17 +00:00
Charles Hall af585658b8 nixos/lemmy: reduce moving parts 2023-06-15 06:56:56 -04:00
Charles Hall fa9306c041 nixos/lemmy: allow overriding packages 2023-06-15 06:56:56 -04:00
Charles Hall b1853ecfcd nixos/lemmy: only use env var when instructed 
Lemmy checks the environment variable before the configuration file;
i.e. if the file is used to configure the database but the environment
variable is set to anything, the connection will fail because it'll
ignore the file. This was the previous behavior.

Now, the environment variable will be unset unless the user explicitly
chooses to set it, which makes the file-based configuration function
correctly. It's also possible to manually set the environment variable,
which has the major advantage of working around [this issue][0], which
prevents certain setups from working.

[0]: https://github.com/LemmyNet/lemmy/issues/2945
 2023-06-15 06:56:56 -04:00
Charles Hall dd0b5a7e08 nixos/lemmy: warn for option removed upstream 
Also hide it since it shouldn't be used.
 2023-06-15 06:56:56 -04:00
Carl Richard Theodor Schneider 59207cc930 nixos/adguardhome: Add allowDHCP option 
This option conditionally adds the `CAP_NET_RAW` capability to the service,
which is mandatory for enabling the integrated DHCP server.
It also adds another test case to validate that the DHCP server successfully
provides IP addresses to clients.

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2023-06-15 12:27:35 +02:00
Jörg Thalheim 23ef0fdbf7
Merge pull request #237793 from Mic92/nix-ld 
nix-ld: 1.1.0 -> 1.2.1
 2023-06-15 08:51:56 +01:00
Jörg Thalheim 5ac7371bd1 nixos/nix-ld: use mkPackageOptionMD 2023-06-15 09:47:26 +02:00
Jörg Thalheim b60f21e135 nixos/nix-ld: also include ld.so in nixos profile 2023-06-15 09:47:25 +02:00
r-vdp 52214d7f38
fwupd: 1.8.15 -> 1.9.1 
Release notes: https://github.com/fwupd/fwupd/releases/tag/1.9.1
 2023-06-15 09:33:12 +02:00
github-actions[bot] a5a4b79b0d
Merge master into staging-next 2023-06-15 06:01:39 +00:00
Bobby Rong 6a00501dfa
Merge pull request #235371 from bobby285271/upd/cinnamon 
Cinnamon 5.8
 2023-06-15 09:41:41 +08:00
github-actions[bot] c2fa140937
Merge master into staging-next 2023-06-15 00:02:27 +00:00
Lily Foster b5cc73db7d
nixos/version: remove nixpkgs commit rev from initrd 
This avoids unnecessary initrd rebuilds when nothing in the initrd would
have changed aside from the nixpkgs revision.
 2023-06-14 16:57:34 -04:00
Lily Foster be48010eb2
nixos/networkd: make overriding boot.initrd.systemd.package a little easier by using mkDefault 2023-06-14 16:09:25 -04:00
Silvan Mosberger 746e3349f8
Merge pull request #236025 from GaetanLepage/invidious-restart 2023-06-14 21:18:55 +02:00
github-actions[bot] 0f19fc4c44
Merge master into staging-next 2023-06-14 18:01:25 +00:00
Pol Dellaiera f45bee3f4d
Merge pull request #237003 from pacien/ddclient-remove-ipv6-opt 
nixos/ddclient: remove obsolete ipv6 option
 2023-06-14 19:57:34 +02:00
Sandro Jäckel d64e1f0b40
nixos/ceph: add options to configure package used by each component 
This makes updates following the upstream guide possible.
 2023-06-14 19:20:10 +02:00
Sandro Jäckel e1fedfdf45
nixos/ceph: run statix fix 2023-06-14 19:20:10 +02:00
Jappie Klooster 5c4ae23ec0 nixos/keter: Run nixpkgs-fmt 2023-06-14 11:56:35 -04:00
Jappie Klooster 3f2f5bea96 nixos/keter: 2.0 -> 2.1 
keter 2.1 now can log to stderr instead of file rotation.
Which is faster and more reliable.
These changes support that.

Announcement:
https://discourse.haskell.org/t/keter-2-1-0-released/6134

fix test by disabling log rotation

run nixpkgs fmt

move comment right before L37

run nixpkgs format on test

Add overridable default configuration

depracate keterRoot and use root, same for package

split doc lines

use lib.getExe to get keter binary

put mkRenamedOptionModule on one line
 2023-06-14 11:54:03 -04:00
Gaetan Lepage 2e582d4edc nixos/invidious: add automaticRestart option 2023-06-14 16:19:40 +02:00
Janne Heß 1ee0ab1b79
Merge pull request #237720 from NixOS/swap-dry-activate 
switch-to-configuration.pl: fix inverted dry-activate logic for swap
 2023-06-14 14:45:35 +02:00
github-actions[bot] be1f07fc6e
Merge master into staging-next 2023-06-14 12:01:12 +00:00
Maximilian Bosch d7ac3423d3
Merge pull request #235387 from doronbehar/nixos/nextcloud.adminpassFile 
nixos/nextcloud: Mention that adminpassFile is only used on startup
 2023-06-14 12:41:35 +02:00
Wout Mertens a97fe8990d
switch-to-configuration.pl: fix inverted dry-activate logic for swap 2023-06-14 12:11:45 +02:00
Bobby Rong 30d897c0ff
nixos/cinnamon: enable touchegg by default 
Needed for gesture support.
 2023-06-14 15:48:15 +08:00
Bobby Rong 664601d819
nixos/cinnamon: enable switcherooControl by default 
xapp-gpu-offload-helper looks for this.
 2023-06-14 15:48:15 +08:00
Bobby Rong bc559b4ca3
nixos/cinnamon: install mint-l by default 
This is part of Linux Mint 21.2.
 2023-06-14 15:48:15 +08:00
Bobby Rong e0034fb284
cinnamon.mint-artwork: 1.7.3 -> 1.7.5 
Read debian/changelog for what is changed.
 2023-06-14 14:14:57 +08:00
github-actions[bot] bdc9d2055e
Merge master into staging-next 2023-06-14 00:02:31 +00:00
Pol Dellaiera 7907dd9d6b
Merge pull request #235924 from Stunkymonkey/remove-then-{} 
treewide: use lib.optionalAttrs instead of 'then {}'
 2023-06-13 20:14:58 +02:00
github-actions[bot] f29c608f98
Merge master into staging-next 2023-06-13 18:01:32 +00:00
pennae f52f531a4e nixos/make-options-doc: deprecate docbook outputs 
they're no longer necessary for us and will almost definitely start to
rot now (like commonmark and asciidoc outputs did previously). most
existing users seem to take the docbook output and run it through pandoc
to generate html, those can easily migrate to use commonmark instead.
other users will hopefully pipe up when they notice that things they rely
on are going away.

optionsUsedDocbook has only been around for one release and only exposed
to allow other places to generate warnings, so that does not deserve
such precautions.
 2023-06-13 16:56:32 +02:00
pennae 0997ae1903 nixos/manual: disallow docbook option docs 
it's been long in the making, and with 23.05 out we can finally disable
docbook option docs and default to markdown instead. this brings a
massive speed boost in manual and manpage builds, so much so that we may
consider enabling user module documentation by default.

we don't remove the docbook support code entirely yet because it's a lot
all over, and probably better removed in multiple separate changes.
 2023-06-13 16:56:30 +02:00
Pol Dellaiera 9ce1accb88
nixos/modules/openvscode-server: fix options 2023-06-13 15:08:56 +02:00
github-actions[bot] 51c0c12cd4
Merge master into staging-next 2023-06-13 12:01:28 +00:00
Sandro 9183a72d11
Merge pull request #232862 from misuzu/gotosocial-init 2023-06-13 11:36:46 +02:00
Jenny 3a86958c97
prometheus-junos-czerwonk-exporter: init at 0.10.1 + module (#235433) 2023-06-13 10:15:05 +02:00
Alex Auvolat bbd4ce7d5e wgautomesh: clearer documentation for gossip_secret_file 2023-06-13 10:01:12 +02:00
Archit Gupta cbb69aa1c1 nixos/usbguard: add USBGuard dbus daemon option 
The usbguard package includes the dbus daemon, but the NixOS config
option does not provide a service file or its necessary polkit rules.

Enabling the dbus daemon allows use of Gnome's USBGuard support.
 2023-06-12 21:38:07 -07:00
github-actions[bot] 9dc5849025
Merge master into staging-next 2023-06-13 00:02:27 +00:00
Martin Weinelt 104455784c
Merge pull request #219791 from emilylange/nixos-caddy 
nixos/caddy: change `acmeCA` default to `null`, omit empty `bind` directive
 2023-06-12 22:40:54 +02:00
Martin Weinelt eb6e16e3c5
Merge pull request #236875 from mweinelt/wyoming_piper_whisper 
wyoming-piper: init at 0.0.3, wyoming-faster-whisper: ini at 0.0.3
 2023-06-12 21:02:18 +02:00
github-actions[bot] a69b4c6b89
Merge master into staging-next 2023-06-12 18:01:15 +00:00
Will Fancher 5709754a1d
Merge pull request #237336 from zi3m5f/fix-systemd-nspawn-machineid-option 
systemd-nspawn: fix spelling of MachineID option and add module test
 2023-06-12 13:12:59 -04:00
Martin Weinelt f213f33f15
nixos/wyoming/faster-whisper: init 2023-06-12 18:44:44 +02:00
Martin Weinelt 7f17f8da9f
nixos/wyoming/piper: init 2023-06-12 18:44:44 +02:00
Robert Hensing 7e63eed145
Merge pull request #237282 from isker/patch-3 
nixos/nix-daemon: fix URL for nix.conf
 2023-06-12 17:01:15 +02:00
Felix Dietze 7cfeb768e5
fix herbstluftwm session command 2023-06-12 14:17:28 +00:00
Colin bd77d4ae46 nixos/lemmy: support nginx 2023-06-12 09:59:11 -04:00
github-actions[bot] d0fbe5588d
Merge master into staging-next 2023-06-12 12:01:32 +00:00
Robert Hensing ed551f4ecf
Merge pull request #237218 from hercules-ci/fix-nixos-generate-config-system 
nixos-generate-config: Fix generated hostPlatform.system
 2023-06-12 12:26:56 +02:00
zi3m5f 67f5dcfd94 nixos/nspawn: fix spelling of systemd.nspawn MachineID option 
This changes option systemd.nspawn.execConfig.MachineId to MachineID.
See man page systemd.nspawn(5)
 2023-06-12 12:08:15 +02:00
Ryan Lahfa 3897d52760
Merge pull request #236134 from Tom-Hubrecht/pixelfed 
nixos/pixelfed: Fix missing permissions for nginx serving files
 2023-06-12 11:59:31 +02:00
Ian Kerins 2f20e0e131
nixos/nix-daemon: fix URL for nix.conf 
The existing URL no longer takes you somewhere useful.
 2023-06-11 23:17:50 -04:00
github-actions[bot] 112762351d
Merge master into staging-next 2023-06-12 00:02:19 +00:00
Martin Weinelt fe2f291e17
Merge pull request #236757 from max-privatevoid/pam-kanidm 
nixos/pam: support Kanidm
 2023-06-11 20:22:00 +02:00
Will Fancher e23693e129 systemd stage 1 networking: Use KeepConfiguration 2023-06-11 13:59:00 -04:00
Robert Hensing 1350e522fa nixos-generate-config: Fix generated hostPlatform.system 
While the intent of the code was correct, the system string can not be used
in the substituteAll function.

See https://github.com/NixOS/nixpkgs/issues/237216
 2023-06-11 19:28:51 +02:00
Max 847a7f1102 nixos/kanidm: auto-restart kanidm-unixd-tasks 2023-06-11 17:17:42 +02:00
Max 34a4165674 nixos/pam: support Kanidm 2023-06-11 17:17:42 +02:00
github-actions[bot] b5b56fecff
Merge staging-next into staging 2023-06-11 12:02:12 +00:00
Marillindië e394dc22f9 xray: allow binding lower ports 
Set CapabilityBoundingSet, AmbientCapabilities and NoNewPrivileges as described in XTLS/xray-install.
 2023-06-11 09:03:50 +01:00
github-actions[bot] 9f2767ce37
Merge staging-next into staging 2023-06-10 18:01:41 +00:00
Robert Hensing 193f4fea90 nixos/activatable-system: Make substitutions explicit 
This helps with understanding the code.
We might make this not depend on environment variables later.
systemBuilderArgs is a form of global state, which isn't helpful.
 2023-06-10 19:15:00 +02:00
Robert Hensing a16986f1a3 nixos: Move installBootLoader to activation script modules 2023-06-10 19:15:00 +02:00
Robert Hensing 61d43dee5f nixos: Extract module for activation script inclusion into toplevel 
Allows omission of this functionality through disabledModules, e.g.
for image building.
 2023-06-10 19:15:00 +02:00
Ryan Lahfa 6262a46ba8
Merge pull request #234034 from NixOS/qemu/direct-boot 
nixos/qemu-vm: introduce `virtualisation.directBoot`
 2023-06-10 18:12:56 +02:00
IndeedNotJames 93b9fc8ac0
nixos/caddy: omit empty bind directive when listenAddresses is empty 
context: https://caddy.community/t/random-502-errors-when-proxying-to-application-with-self-signed-certificate/19657/6
 2023-06-10 13:59:15 +02:00
IndeedNotJames 3f93ec5814
nixos/caddy: change acmeCA default to null 
The nixos/caddy module is somewhat old by now
and has undergone quite some refactors.
This specific module option (originally named
`ca`) used to make a bit more sense when
Caddy did not have multiple ACME CAs as
fallback (LE & ZeroSSL) by configured by
default yet (ZeroSSL came with v2.3.0).

I also rephrased the description slightly,
to mention Caddy's automatic issuer fallback
and a note which this option maps to in the
Caddyfile, to provide a bit more context and
a more up-to-date recommendation.

Specifically that "fine-grained configuration"
section comes from a time when this module did
some custom tls/issuer config json merging
with the templated Caddyfile using `jq`.

The "The URL to the ACME CA's directory"
section is a word-for-word copy from the
official Caddy docs, which also include a link
to LE's docs to the referenced staging
endpoint. So I added that as well.
 2023-06-10 13:59:10 +02:00
pacien 76cabe1644 nixos/ddclient: remove obsolete ipv6 option 
Since ddclient@24ba945 (v3.10.0), the type and meaning of the "ipv6"
option has changed. This resulted in the following warning when
starting the service:

    WARNING:  file /run/ddclient/ddclient.conf, line 13:
    Invalid Value for keyword 'ipv6' = 'no'

This therefore removes the matching boolean option.
More advanced configurations can use the "extraConfig" option instead.
 2023-06-10 11:25:54 +02:00
github-actions[bot] ffc7e7d777
Merge staging-next into staging 2023-06-10 06:01:49 +00:00
Will Fancher 90d69b1634
Merge pull request #236388 from ElvishJerricco/sd-s1-networkd-stop-on-switch-root 
systemd stage 1 networking: Stop systemd-networkd on switch-root
 2023-06-10 00:35:56 -04:00
github-actions[bot] f85baf313e
Merge staging-next into staging 2023-06-10 00:03:09 +00:00
Martin Weinelt 0983c18e6a
nixos/go2rtc: add support for v4l2 video sources 
Capturing from /dev/video* requires being member of the video group.
 2023-06-09 20:20:38 +02:00
github-actions[bot] 622850f61f
Merge staging-next into staging 2023-06-09 18:01:50 +00:00
Sergey Ivanov bbc56fd1c7
gnunet: fix systemd service config (#151269) 
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
 2023-06-09 16:33:51 +00:00
Raito Bezarius 610f60231f nixos/qemu-vm: introduce virtualisation.directBoot 
As with many things, we have scenarios where we don't want to boot on a
disk / bootloader and also we don't want to boot directly.

Sometimes, we want to boot through an OptionROM of our NIC, e.g. netboot
scenarios or let the firmware decide something, e.g. UEFI PXE (or even
UEFI OptionROM!).

This is composed of:

- `directBoot.enable`: whether to direct boot or not
- `directBoot.initrd`: enable overriding the
  `config.system.build.initialRamdisk` defaults, useful for
  netbootRamdisk for example.

This makes it possible.
 2023-06-09 14:51:18 +02:00
github-actions[bot] 52cf9e3e3b
Merge staging-next into staging 2023-06-08 18:02:03 +00:00
Pol Dellaiera f0fc9fe22d
Merge pull request #236567 from l0b0/fix-activate-lints 
nixos/modules: Fix ShellCheck lints
 2023-06-08 18:42:38 +02:00
github-actions[bot] 2259be2076
Merge staging-next into staging 2023-06-08 12:02:05 +00:00
Weijia Wang 4b8f7098da foundationdb: cleanup 2023-06-08 14:48:41 +03:00
Weijia Wang 0dfe118d22
Merge pull request #236259 from wegank/mongodb-drop 
mongodb-4_2: drop
 2023-06-08 14:40:30 +03:00
Tom McLaughlin f69aff8f89 github-runner: add thomasjm as maintainer 2023-06-08 01:03:15 -07:00
github-actions[bot] f8aa1a896e
Merge staging-next into staging 2023-06-08 06:01:46 +00:00