Commit graph

40609 commits

Author SHA1 Message Date
Robert Schütz f1e52abf0d nixos/immich: fix eval with settings == null
Using the module without declarative settings previously failed with

    error: attribute 'settingsFile' missing
2025-10-06 15:08:09 -07:00
Tim Schumacher d64cf50184 nixos/gpu-screen-recorder: Use getExe instead of building paths 2025-10-06 21:47:05 +02:00
Masum Reza 120e6fd0a1
nixos/limine: forceMbr -> force (#449144) 2025-10-06 16:24:36 +00:00
Franz Pletz 2f39ef8220
nixos/netboot: use initrd.compressorArgs on netbootRamdisk (#448924) 2025-10-06 14:31:10 +00:00
dish 231b923f0a
{nixos/,}.tt-rss: drop (#448401) 2025-10-06 13:54:05 +00:00
Sizhe Zhao 3fbc40c0ac
nixos/limine: forceMbr -> force 2025-10-06 21:48:31 +08:00
Florian Klink a2d829eaa7
nixos/gerrit: Apply more hardening settings (#448870) 2025-10-06 11:13:38 +00:00
dotlambda 65fb719b8c
nixos/immich: add secretSettings option (#448238) 2025-10-06 09:07:08 +00:00
Wolfgang Walther 9757580132
maintainers: drop evils (#448938) 2025-10-06 06:29:57 +00:00
Matteo Pacini 20fcd7d4ac
nixos/murmur: Enable PrivateMounts hardening in service config (#448490) 2025-10-05 22:19:14 +00:00
Martin Weinelt 5b039b9fd4
nixos/limesurvey: fix default config merging when config is defined, set userquestionthemerootdir default (#400448) 2025-10-05 21:34:02 +02:00
Acid Bong f418365067
maintainers: drop evils 2025-10-05 22:22:45 +03:00
Felix Stupp 604b955324
nixos/netboot: use initrd.compressorArgs on netbootRamdisk
- because already boot.initrd.compressor is used, one could expect
  compressorArgs is also used
- this allows users to customize the compression speed for netboot
  builds
2025-10-05 17:58:54 +00:00
Yohann Boniface 39d4980709
firezone-server: 0-unstable-2025-03-15 -> 0-unstable-2025-08-31 (#433162) 2025-10-05 16:07:42 +00:00
Patrick a536b2a1d6
firezone-server: 0-unstable-2025-03-15 -> 0-unstable-2025-08-10 2025-10-05 17:49:44 +02:00
Felix Singer 8dac7deb3d nixos/gerrit: Enable PrivateUsers hardening in service config
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#PrivateUsers=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-05 16:06:19 +02:00
Felix Singer 1ed557f179 nixos/gerrit: Set ProtectProc to invisible
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-05 15:58:16 +02:00
jopejoe1 5ad1786de3
nixos/gpu-screen-recorder: remove cap_sys_nice, again (#442391) 2025-10-05 13:45:07 +00:00
Felix Singer 302eaedd92 nixos/gerrit: Enable MountAPIVFS hardening in service config
This setting is already implied by others, but add it for completeness
as well. For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#MountAPIVFS=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-05 15:38:50 +02:00
Vladimír Čunát 15ed8f7638
staging-next 2025-09-21 (#444862) 2025-10-05 13:28:34 +00:00
Florian Klink bf496bd1d2
nixos/gerrit: Enable PrivateMounts hardening in service config (#448492) 2025-10-05 13:24:15 +00:00
Florian Klink 3627818f3c
nixos/gerrit: Make sure service directories have proper permissions set (#448496) 2025-10-05 12:16:58 +00:00
nixpkgs-ci[bot] 17eefed8a0
Merge master into staging-next 2025-10-05 12:06:14 +00:00
Florian Klink b17d512a77
nixos/gerrit: Set ProtectControlGroups to strict (#448646) 2025-10-05 11:24:43 +00:00
Robert Schütz c78079059a nixos/immich: add secretSettings option 2025-10-05 02:44:08 -07:00
K900 e93c560b79 Merge remote-tracking branch 'origin/master' into staging-next 2025-10-05 12:17:08 +03:00
Wolfgang Walther 91a8fee3aa
treewide: remove redundant parentheses
Auto-fixed by nixf-diagnose.
2025-10-05 10:52:03 +02:00
Wolfgang Walther c283f32d29
treewide: remove unused with
Auto-fixed by nixf-diagnose.
2025-10-05 10:50:41 +02:00
Wolfgang Walther 90e7159c55
treewide: remove unused rec
Auto-fix by nixf-diagnose.
2025-10-05 10:49:12 +02:00
Vladimír Čunát dd51f936da
Merge branch 'master' into staging-next
lixPackageSets.git conflicted via 9c29a340be + eabfa160aa
I think, hopefully good now.
2025-10-05 08:18:28 +02:00
Felix Singer 37e40baa36 nixos/gerrit: Set ProtectControlGroups to strict
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 23:49:28 +02:00
Felix Singer 05c5d78068 nixos/murmur: Set ProtectControlGroups to strict
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 23:22:11 +02:00
Felix Singer 4fb64fb8a1 nixos/redmine: Set ProtectControlGroups to strict
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 23:15:45 +02:00
Yt ac6320aa0a
meilisearch_1_11: drop (#448406) 2025-10-04 18:35:23 +00:00
K900 f8d669f413 Merge remote-tracking branch 'origin/master' into staging-next 2025-10-04 21:10:21 +03:00
Doron Behar 0fe515d371
nixos/syncthing: add guiPasswordFile option, add and move Syncthing tests (#446197) 2025-10-04 16:50:14 +00:00
Austin Horstman 3acebf0422
git-worktree-switcher: 0.2.4 -> 0.2.6 (#447031) 2025-10-04 14:07:50 +00:00
Weijia Wang cd5ef1ea27
prl-tools: 26.0.1-57243 -> 26.1.1-57288 (#448165) 2025-10-04 13:50:06 +00:00
nixpkgs-ci[bot] 45e7932c78
Merge master into staging-next 2025-10-04 12:05:54 +00:00
codgician cf2677a918
prl-tools: 26.0.1-57243 -> 26.1.1-57288 2025-10-04 18:20:59 +08:00
Felix Singer cb6ac21a2b nixos/gerrit: Make sure cache directory has proper permissions set
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 12:10:58 +02:00
Felix Singer 49cc0ce8a3 nixos/gerrit: Make sure state directory has proper permissions set
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 12:09:39 +02:00
Felix Singer 26d0023f71 nixos/gerrit: Enable PrivateMounts hardening in service config
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 11:58:09 +02:00
Maximilian Bosch 8d6d9f140b
php81: remove (#448348) 2025-10-04 09:46:58 +00:00
Felix Singer 21d81266c2 nixos/murmur: Enable PrivateMounts hardening in service config
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 11:44:05 +02:00
nixpkgs-ci[bot] 426796a389
Merge master into staging-next 2025-10-04 06:05:10 +00:00
Aidan Gauland 54716a2463 Remove dangling NixOS module
Module `peroxide` has no package.
2025-10-04 16:17:46 +13:00
dish 69b4b86d23
{nixos/,}.tt-rss: drop
Per https://community.tt-rss.org/t/the-end-of-tt-rss-org/7164, it will
cease development on 2025-11-01, and since it cannot be maintained
through the release of NixOS 25.11, it is being dropped now.
2025-10-03 22:24:16 -04:00
Sandro 6c4f138b35
nixos/ipa: cleanup (#448060) 2025-10-04 02:11:39 +00:00
dish 8e472c6999
meilisearch_1_11: drop
As noted in the now-deleted comments, this was intended to be removed
with NixOS 25.11.
2025-10-03 22:08:33 -04:00
Sandro 70f8cfe455
mopidy: migrate to rfc42 (#446598) 2025-10-04 02:00:13 +00:00
Marcel 0afff2b7a7
nixos/ipa: cleanup 2025-10-04 03:58:39 +02:00
Mateus Auler bcc9d03d40
git-worktree-switcher: add package option 2025-10-03 21:18:33 -03:00
nixpkgs-ci[bot] 1f71b1fc26
Merge master into staging-next 2025-10-04 00:15:35 +00:00
Maximilian Bosch b95a14f2ee
nixos/limesurvey: use php83
This is what the version we currently have is packaged against[1]. No
actual maintenance is done, this package will need a new person feeling
responsible for this.

[1] https://github.com/LimeSurvey/LimeSurvey/blob/6.10.2%2B250127/.github/workflows/main.yml#L20
2025-10-03 23:37:00 +02:00
Maximilian Bosch 2cb89c0aef
postfixadmin: remove, doesn't support php >8.1
In newer versions it does, but there's zero effort to package it by the
maintainer and it's not the job of the PHP team to pick that up.
2025-10-03 23:37:00 +02:00
Maximilian Bosch f4b702bb11
invoiceplane: remove, doesn't support php >8.1 2025-10-03 23:21:57 +02:00
Maximilian Bosch 3d04c5aaa8
nixos/dokuwiki: use php 8.4
PHP 8.1 needs to be removed since it'll be EOLed by the end of the year.
2025-10-03 22:57:06 +02:00
Maximilian Bosch a6b0564b7d
nixos/filesystems: fix special file-systems for systemd-nspawn (#345899) 2025-10-03 19:33:31 +00:00
Pascal Bach 4614820299
nixos/libvirtd: Make all OVMF images from QEMU package available (#421549) 2025-10-03 18:27:13 +00:00
Wael Nasreddine 209a0a025a
ncps: add support to the --netrc-file flag (#445875) 2025-10-03 18:23:33 +00:00
n 4f67d0e4f8
nixos/serviio: add option to open firewall ports
I think we should have open firewall ports and let the user choose if they want to have these ports open or not. :D
2025-10-03 21:17:58 +05:30
nixpkgs-ci[bot] 042d4f916d
Merge master into staging-next 2025-10-03 12:06:50 +00:00
Kimberly Swanson 02795dee2c nixos/syncthing: add guiPasswordFile option 2025-10-03 04:43:24 -07:00
Sandro 604a820cfd
nixos/netbird: add SYSTEMD_UNIT to pick up logs in debug bundles (#444043) 2025-10-03 11:26:18 +00:00
Marcel 87897caee2
mopidy: migrate to rfc42 2025-10-03 12:56:46 +02:00
Andrea Ciceri 09f91985f6
ncps: add support to the --netrc-file flag 2025-10-03 09:51:00 +02:00
Andrea Ciceri 4b971e4393
ncps: add aciceri as maintainer 2025-10-03 09:51:00 +02:00
HHR2020 495f606f98 nixos/linyaps: add linyaps-web-store-installer 2025-10-03 13:43:58 +08:00
nixpkgs-ci[bot] dd2d512251
Merge master into staging-next 2025-10-03 00:15:52 +00:00
h7x4 316b4b6fb5
add Ringboard pkg and service module (#445583) 2025-10-02 22:49:20 +00:00
Sefa Eyeoglu 756483bb31
nixos/borgbackup: Add option wrapper (#447400) 2025-10-02 20:09:28 +00:00
René Neumann ecb103a306
nixos/borgbackup: Add option wrapper
Add an option `service.borgbackup.jobs.<name>.wrapper` that allows to
control the name of the installed wrapper script -- or even to disable
its installation at all.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-10-02 21:46:38 +02:00
Felix Bühler afd64ceb0a
photoprism: 250321-57590c48b -> 250426-27ec7a128 (#407100) 2025-10-02 18:56:28 +00:00
K900 f75ba3acbb Merge remote-tracking branch 'origin/master' into staging-next 2025-10-02 17:11:25 +03:00
dotlambda fcf3503027
nixos/vaultwarden: Allow multiple environment files (#446345) 2025-10-02 08:37:33 +00:00
nixpkgs-ci[bot] cafa6300b3
Merge master into staging-next 2025-10-02 06:56:15 +00:00
K900 c0e0ac22d3 nixos/pipewire: also propagate LV2_PATH to standalone filter-chain 2025-10-02 09:47:37 +03:00
nixpkgs-ci[bot] 2f8516c5ac
Merge master into staging-next 2025-10-02 06:05:42 +00:00
Aidan Gauland 9bf50ebcdf treewide: remove aidalgol
- Remove aidalgol from maintainers and all packages.
- Add maintainers to tests from their corresponding packages.
- Remove package 'heroic' because this will quickly bitrot without a
  maintainer.
2025-10-02 17:42:00 +13:00
Bobby Rong 364591a874
Pantheon updates 2025-10-01 (#447636) 2025-10-02 01:14:38 +00:00
nixpkgs-ci[bot] a4cb5a506b
Merge master into staging-next 2025-10-02 00:16:08 +00:00
Niklas Korz 5bdedde60a
nixos/sddm: add example for option sddm.theme (#418223) 2025-10-01 22:14:02 +00:00
Felix Buehler 4a14d1e05d nixos/photoprism: disallow passwords in store 2025-10-01 23:13:46 +02:00
Felix Buehler 771a0ec704 nixos/photoprism: add databasePasswordFile option 2025-10-01 23:13:34 +02:00
Philip Taron a1accefd6f
nixos/tools: remove deprecated accessors for nixos-option and nixos-enter (#447768) 2025-10-01 19:33:25 +00:00
Felix Bühler 99b9c9c053
nixos/github-runner: use apply to override package (#428418) 2025-10-01 19:08:08 +00:00
Philip Taron 4b4987c5c2
nixos/tools: remove deprecated accessors for pkgs.nixos-option and pkgs.nixos-enter
These warnings were added in 5dcbab6. It has been a full year since they were added -- time to remove them.
2025-10-01 08:38:15 -07:00
René Neumann e345fad133 nixos/vaultwarden: Allow multiple environment files
Change type of `environmentFile` to also allow passing a list of paths
in order to have multiple environment files.
2025-10-01 17:37:38 +02:00
Bart Brouns d1a084e777 nixos/ringboard: add user service module 2025-10-01 15:59:28 +02:00
nixpkgs-ci[bot] 099c1ef350
Merge master into staging-next 2025-10-01 12:07:23 +00:00
Masum Reza ab90e1dfc6
amdvlk,nixos/amdvlk: drop (#444693) 2025-10-01 07:31:56 +00:00
Alyssa Ross 89871b87b9
cosmic-initial-setup: fix theme and layouts page (#447578) 2025-10-01 07:27:14 +00:00
nixpkgs-ci[bot] 100015447b
Merge master into staging-next 2025-10-01 06:06:28 +00:00
Bobby Rong 843fa0fa28
nixos/pantheon: add elementary-maps 2025-10-01 11:52:36 +08:00
Masum Reza f305d52952
nixos/bcachefs: fix warning (#447552) 2025-10-01 03:15:28 +00:00
Yt 6af2210e0c
{chatgpt-retrieval-plugin,nixos/chatgpt-retrieval-plugin}: drop (#447045) 2025-10-01 00:53:34 +00:00
Heitor Augusto d205b65645
nixos/cosmic: add /share/cosmic-themes to pathsToLink 2025-09-30 17:36:58 -03:00
K900 4999ae577c Merge remote-tracking branch 'origin/master' into staging-next 2025-09-30 21:47:55 +03:00
6543 fcf00a6c71 services.meilisearch: restrict write paths and add hardening option RemoveIPC 2025-09-30 20:13:57 +02:00