Commit graph

44750 commits

Author SHA1 Message Date
Erin Yuki Schlarb 61cf88212d jitsi-videobridge: Set configurable default NAT harvester address to make the
service work behind NAT without additional manual configuration
2024-09-30 18:19:33 +02:00
h7x4 11f77694ac
nixos/bluemap: move to web-apps (#345353) 2024-09-30 17:53:27 +02:00
Erin Yuki Schlarb 67e261beb5 jitsi-meet: Set internal MUC options set in official Docker image 2024-09-30 17:31:04 +02:00
pinage404 83b1350904 nixos/open-webui: fix opensearch
When [adding Open WebUI as search engine in Firefox](https://docs.openwebui.com/tutorials/integrations/browser-search-engine/#for-firefox) it always links to `http://localhost:3000` instead of the configured port

It is because [the response use `WEBUI_URL` environment variable](1d225dd804/backend/open_webui/main.py (L2370)) which [is set by default to `1d225dd804/backend/open_webui/env.py (L106))
2024-09-30 17:28:11 +02:00
Maximilian Bosch 1e746f0030
Merge: nixos/postgresql: escape initdbArgs (#345341) 2024-09-30 17:04:10 +02:00
Ali Rizvi 9020d82c70
nixos/wayland: add gtk portal by default 2024-09-30 09:54:19 -04:00
Martin Weinelt b47b572e21
nixos/freeradius: fix group assignment for radius user 2024-09-30 15:50:13 +02:00
Martin Weinelt 4ca03e3a11
nixos/logrotate: allow sending signal to arbitrary processes
Various postrotate scripts send e.g. SIGHUP to processes, to have them
reload their config or reopen their logfile.
2024-09-30 13:30:38 +02:00
Martin Weinelt 2dabc4fce1
nixos/logrotate: reorder setuid syscall group
Relevant parts of @setuid are in @privileged, so we need to flip the
order around, to grant @setuid in spite of denying @privileged.
2024-09-30 13:26:14 +02:00
Florian Klink 9ff2ff44f8
nixos/garage: fix StateDirectory check to work with multiple data_dirs (#342903) 2024-09-30 12:27:06 +02:00
Pol Dellaiera c82e57f79b
nixos: enable fstrim by default (#345285) 2024-09-30 11:52:13 +02:00
Rolf Schröder 9cd78fd3a6 tests/nextflow: restrict to x86_64-linux
The docker image hash seems to differ on different systems.
See https://github.com/NixOS/nixpkgs/pull/339197#discussion_r1779927407
2024-09-30 11:20:18 +02:00
Weijia Wang aa4c638b89
wordpressPackages: packages, language and theme updates (#345359) 2024-09-29 23:44:35 +02:00
Viorel-Cătălin Răpițeanu db71929224 wordpressPackages: update packages, add ru_RU lang, make twentytwentyfour default 2024-09-29 23:09:33 +03:00
h7x4 c25213a9bd
nixos/bluemap: move to web-apps 2024-09-29 21:40:39 +02:00
Maximilian Bosch 11d1f8776c
nixos/postgresql: escape initdbArgs
It doesn't look correct that this isn't the case already.
2024-09-29 21:03:52 +02:00
Maximilian Bosch 0e78dc369c
Merge: doc: use initdbArgs in example postgresql upgrade script (#302823) 2024-09-29 20:39:05 +02:00
Masum Reza 007e91615b
waybar: add systemdSupport input (#345107) 2024-09-29 23:28:25 +05:30
Naïm Camille Favier 7cba8410f7
nixos/networkmanager: set up /etc/ipsec.secrets as required by the L2TP plugin (#340325) 2024-09-29 18:56:59 +02:00
Martin Weinelt 6710d0dd01
nixos/logrotate: relax hardening (#345275) 2024-09-29 16:24:34 +02:00
Weijia Wang 27e93e3061
go-ethereum: 1.14.8 -> 1.14.9 (#342934) 2024-09-29 16:21:23 +02:00
Franz Pletz 273796ebd7
nixos/upower: update percentage defaults (#344839) 2024-09-29 15:39:41 +02:00
Sefa Eyeoglu 5fcc1337d2
nixos/waybar: enable systemdSupport for package
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-09-29 17:56:24 +05:30
h7x4 8b62732138
bluemap: 3.21 -> 5.4 (#332245) 2024-09-29 14:05:29 +02:00
Jörg Thalheim 7d8f1572d1 nixos: enable fstrim by default
The majority of users these days will install NixOS on SSD/NVME based
storage. Enabling fstrim ensures that the TRIM operation on this type of
storage is run at least once a week. This will improve performance and
life time of said devices. This also works in virtual machines as
formats such as qcow2 or vmdk support TRIM.
Ubuntu has a similar systemd timer also for quite a while enabled by
default.
Enabling this service will not increase the dependency closure as
util-linux is already part of the base system.
In case only filesystems that are not supported by fstrim are used, the
overhead is negelible as fstrim run in less than a second once a week.
2024-09-29 14:04:18 +02:00
phaer d179a5e5ba healthchecks: 3.4 -> 3.6 2024-09-29 13:32:32 +02:00
Martin Weinelt d3e0a89ca6
nixos/logrotate: relax hardening
The previous hardening change restricted the unit too much, breaking
legitimate functionality of logrotate.

Unfortunately this was not covered by our NixOS test.
2024-09-29 12:29:19 +02:00
Doron Behar 4fcd6b86ee
nixos/tzupdate: make it actually work (#343748) 2024-09-29 12:56:06 +03:00
K900 3951cf36e1
nixos/xdg/icons: add fallbackThemes option (#345057) 2024-09-29 12:17:57 +03:00
Bruno Bigras 1336b64235
Add veilid module (#330585) 2024-09-29 04:30:44 -04:00
Michele Guerini Rocco a08c2e29b9
nixos/monero: remove with lib; (#343474) 2024-09-29 09:36:21 +02:00
K900 ce7068660a nixos/xdg/icons: add fallbackThemes option 2024-09-29 08:42:20 +03:00
melvyn 073099d0f7
nixos/seafile: add persistent user, configurable storage path, gc service 2024-09-28 19:09:58 -04:00
melvyn d3b5dc8da1
nixos/seafile: add persistent user, configurable storage path, gc service 2024-09-28 17:57:02 -04:00
Franz Pletz e8486ebc7f
freeradius: add option to compile with postgres (#265762) 2024-09-28 22:56:08 +02:00
Daniel Nagy 6512103dfe
nixos/monero: remove with lib; 2024-09-28 22:30:00 +02:00
K900 1228db540d
nixos/plasma6: use xwayland module (#345122) 2024-09-28 22:14:43 +03:00
Danilo Reyes 056fc213e6
modules/obs-studio: optionally enable v4l2loopback (#312112)
* modules/obs-studio: optionally enable v4l2loopback

* add test

* added documentation to 24.11 changelog
2024-09-28 19:43:06 +02:00
Leona Maroni a23db91282
nixos/immich: add option database.port (#345094) 2024-09-28 18:01:08 +02:00
Yaroslav Bolyukin fba92705b0
nixos/plasma6: use xwayland module
For ability to override used xwayland package
2024-09-28 17:27:22 +02:00
Emily 818089ba73
teams: create the Xen Project Team and rename instances of Xen to Xen Project. (#344314) 2024-09-28 15:57:32 +01:00
Fernando Rodrigues dc7db9bcc4
treewide: rename Xen to Xen Project
Xen is a trademark of the Cloud Software Group; we're not packaging
Xen(Server), we're packaging the Xen Project Hypervisor, which is open
source and owned by the Linux Foundation.

This is based on advice from Kelly Choi, the Xen Project Community
Manager, who has assisted us in the branding aspects of pacakaging.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-28 14:53:59 +00:00
Fernando Rodrigues 82f0ee2c5b
treewide: assign maintainership of the Xen-related packages to the Xen Project Hypervisor Team
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-28 14:53:59 +00:00
Franz Pletz 79a01a8631
pleroma: 2.6.3 -> 2.7.0 (#333283) 2024-09-28 15:36:27 +02:00
Franz Pletz cc2142b9f0
nixos/zfs: remove incorrect conditional use of spl kmod; remove withs (#344271) 2024-09-28 15:30:13 +02:00
Franz Pletz 1ee99a4837
tailscaled: after NetworkManager-wait-online (#344678) 2024-09-28 15:26:00 +02:00
Franz Pletz a3f79b7d63
tailscale: add su to path (#344947) 2024-09-28 15:22:40 +02:00
Franz Pletz ef1ecffdbe
nixos/gitlab: add systemd slice (#343523) 2024-09-28 15:12:58 +02:00
h7x4 dd7a192b4f
nixos/gitlab: add services to systemd slice
Co-authored-by: Bjørn Forsman <bjorn.forsman@gmail.com>
2024-09-28 11:27:05 +02:00
Jörg Thalheim 028b7d27a3
growpart: shellcheck fixes (#340490) 2024-09-28 09:50:11 +02:00
Jörg Thalheim 076f2f69f3
sshd: fix shellcheck warnings in prestart script (#340484) 2024-09-28 09:49:25 +02:00
Jörg Thalheim 4f06ecd5a6
systemd/initrd: fix shellcheck issues (#340486) 2024-09-28 09:48:29 +02:00
Mikilio 938d190ed2
tailscale: add su to path
this adds access to `su` via security wrappers
2024-09-27 23:05:20 +02:00
Atemu 3913c72204
nixos/jenkinsSlave: remove with lib; (#343514) 2024-09-27 21:59:45 +02:00
Atemu e8d40a7f34
nixos/i2pd: remove with lib; (#343476) 2024-09-27 21:58:59 +02:00
Gary Guo 162f0719e9 nixos/freeradius: fix radius group
A group must be selected since it no longer defaults to nogroup
2024-09-27 20:11:57 +01:00
Gary Guo d0481239c1 nixos/freeradius: add option to override package 2024-09-27 20:11:56 +01:00
Picnoir 50ffaf03bb nixos/pleroma: format module with nixfmt 2024-09-27 19:30:14 +02:00
Picnoir aa666ce8f1 nixos/pleroma: move migrations to their own systemd unit
Running the migrations in a systemd execStartPre was a mistake. The
migrations can be pretty long to run and easily time-out.

Moving this to a proper oneshot service solves this issue and makes
this fits better the systemd execution model. We can now easily filter
the migrations logs.
2024-09-27 19:29:41 +02:00
Picnoir e7edb95142 pleroma: 2.6.3 -> 2.7.0
Upstream Changelog: https://git.pleroma.social/pleroma/pleroma/-/releases/v2.7.0

Nixpkgs package changelog:
- build with elixir 1.17.
- update dependencies hashes.
- remove prometheus_phoenix as it's apparently unused.
- fix git deps.
- update OTP permission restriction patch.
- modify test to work (adapt from akkoma test).

Co-authored-by: Leona Maroni <dev@leona.is>
2024-09-27 19:29:41 +02:00
Sandro 0151acc48e
nixos/gotenberg: Fix coredumps on service start (#344770) 2024-09-27 17:22:10 +02:00
Sandro 10ae9d0b8f
nixos/rss-bridge: Add simple NixOS test (#331291) 2024-09-27 16:59:57 +02:00
Andrew Marshall bec753ddfc nixos/zfs: replace with with let
The fully-qualified name would certainly be a lot here, but `with` can
still be unclear even with narrow scope. A short `let` adds clarity
without significantly increasing verbosity.
2024-09-27 08:08:31 -04:00
Andrew Marshall eef4c18ae8 nixos/zfs: remove unused vars 2024-09-27 08:08:31 -04:00
Andrew Marshall 33bd85a6c8 nixos/zfs: remove top-level withs
As it is generally considered an anti-pattern. Removing them here in
fact exposed one bug (see previous commit).
2024-09-27 08:08:30 -04:00
Andrew Marshall 06ed2c46fb nixos/zfs: remove incorrect conditional use of spl kmod
This was incorrectly getting `lib.version` which is e.g.
`"24.11pre-git"`, but should have been the ZFS package version. However,
the condition, at least per the comment, is reversed and should be
instead `versionOlder cfgZfs.package.version "2.2.0"`. However, the
entire premise seems to be incorrect, as ZFS 2.2.6 includes the spl
module. Since the previous condition here was effectively always true,
it would initially seem the best move is to remove the conditional
altogether and always include the spl kmod. However, going back to
4360a87c45 where this condition was added,
the intent appears to be that spl was no longer needed here in
the-pre-release ZFS (long since in all supported versions), due to it
being merged into ZFS mainline. Given that intent and that our boot
tests on all versions succeed without including it in the initrd, remove
it.
2024-09-27 08:08:30 -04:00
Adam C. Stephens f451c38542
openvswitch: remove kernel, add tests (#344653) 2024-09-27 07:03:12 -04:00
Tom Vincent 069e6f3262
nixos/upower: update percentage defaults
Current defaults were added in aecfea0, which were in turn based on upstream:
28bd86c181/etc/UPower.conf.

Current upstream config:
94c91f93f1/etc/UPower.conf
2024-09-27 09:41:55 +01:00
7c6f434c c87aad4296
Add Collabora Online (#330708) 2024-09-27 08:33:57 +00:00
K900 1e15add1c2
xwaylandvideobridge refactor + default in Plasma (#344808) 2024-09-27 10:03:24 +03:00
K900 307dda84c0 nixos/nixos-containers: partially revert aa4570ca05
Word splitting is actually intentional here, as both of those variables
can (and often do) contain multiple flags.
2024-09-27 10:00:58 +03:00
oddlama d229011025 nixos/influxdb2: fix service startup reliablility 2024-09-27 08:14:27 +02:00
Gaute Ravndal e9860fa6a9 nixos/snapper: use more precise type definition 2024-09-27 07:40:06 +02:00
K900 e23ad5ca0e nixos/plasma6: install xwaylandvideobridge by default 2024-09-27 08:16:56 +03:00
K900 15200e9966 nixos/plasma6: install baloo-widgets by default
Needed for indexer metadata in Dolphin.
2024-09-27 08:05:05 +03:00
Artturin 716f0a7327
nixos/firefox: add autoConfigFiles (#321254) 2024-09-27 05:20:08 +03:00
Pyrox e2c5983f40
nixos/gotenberg: Fix coredumps on service start 2024-09-26 21:37:41 -04:00
Weijia Wang 63ab048916 nixos/geth: add holesky testnet 2024-09-27 01:17:21 +02:00
Leona Maroni 7f35330bd8
nixos/nixos-containers: fix shellcheck errors in systemd scripts (#340483) 2024-09-26 23:05:35 +02:00
Jörg Thalheim ad2f0dd5b9
nixos/doc/rl-2411: sort incompatibilites by impact (#344677) 2024-09-26 22:37:39 +02:00
Gaute Ravndal 6ce7db1126 nixos/snapper: fix timeline option types
These can be either an integer or a range.

Range options are necessary for `FREE_LIMIT` to take effect when used in
conjunction with `TIMELINE_LIMIT_*`.
2024-09-26 21:55:23 +02:00
r-vdp aa4570ca05
nixos/nixos-containers: fix shellcheck errors in systemd scripts 2024-09-26 21:54:07 +02:00
Eman Resu 3f56777cf8 doc: 24.11: move most impactful incompatibilities to the top
Apply suggestions from code review

Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2024-09-26 15:11:19 -04:00
Jörg Thalheim 44312de8c2
nixVersions.nix_2_18: 2.18.7 -> 2.18.8 (#344714) 2024-09-26 20:59:11 +02:00
seth 0aed7f0d24 nixVersions.nix_2_18: 2.18.7 -> 2.18.8
Diff: https://github.com/NixOS/nix/compare/2.18.7...2.18.8
Fixes https://github.com/NixOS/nix/security/advisories/GHSA-6fjr-mq49-mm2c
2024-09-26 20:53:55 +02:00
Martin Weinelt e04b941dfb
nixos/printing: add option to disable browsed daemon (#344702) 2024-09-26 20:44:57 +02:00
Thomas Gerbet 981a63b005 nixos/printing: add option to disable browsed daemon
It is currently tied to `services.avahi.enable` which might not be
desirable.

With this change it is possible to disable the service with
`services.printing.browsed.enable = false`
2024-09-26 20:11:14 +02:00
Peder Bergebakken Sundt c7f9378f34 nixos/README.md: add guideline to link to nixos tests from packages 2024-09-26 19:55:43 +02:00
K900 42dd305751
nixos/plasma6: install xdg-desktop-portal-gtk (#344681) 2024-09-26 19:21:22 +03:00
Marin 0d822ccdbc tailscaled: after NetworkManager-wait-online
The wait will only be enabled on machines with NetworkManager enabled.

Closes #180175
2024-09-26 12:12:46 -04:00
Atemu 3bacd4d90b
nixos/doc, nixosTests.zfs: remove latestCompatibleLinuxPackages (#344649) 2024-09-26 18:05:26 +02:00
K900 c4c3b41d4a nixos/plasma6: install xdg-desktop-portal-gtk
As recommended by upstream, for flatpak apps and some others.
2024-09-26 18:57:53 +03:00
Robert Schütz c5d95d4999
immich: some improvements (#344237) 2024-09-26 07:14:52 -07:00
Brendan Taylor 8debc8df79 nixos/immich: add option database.port 2024-09-26 08:06:59 -06:00
Franz Pletz aa79f54998
nixos/iso-image: avoid collision between GRUB2 versions (#343992) 2024-09-26 15:53:43 +02:00
Franz Pletz 879c75e68c
nixos/tailscale: add authKeyParameters (#338505) 2024-09-26 15:43:59 +02:00
Adam Stephens 52335fc1b0
openvswitch: init simple bridge test and add incus test 2024-09-26 09:26:10 -04:00
Atemu eb538d1047 nixos/doc: remove section on latestCompatibleLinuxPackages 2024-09-26 15:06:45 +02:00
Atemu 9c0a988e11 nixosTests.zfs: remove latestCompatibleLinuxPackages usage 2024-09-26 15:06:19 +02:00
Franz Pletz e1635a35b9
nixos/nginx: add option typesHashMaxSize (#341072) 2024-09-26 14:42:26 +02:00