Commit graph

51468 commits

Author SHA1 Message Date
Winter M 433ab91d52 nixos/installer/cd-dvd/iso-image: include memtest86+ in grub menu
We previously only did this for Syslinux, which we don't use on UEFI machines.

Co-authored-by: Lee Bousfield <ljbousfield@gmail.com>
(cherry picked from commit dcb0423368)
2025-11-05 07:50:30 +00:00
Wolfgang Walther a025546ad4
[Backport release-25.05] nixos/ipa: fix path to ldap.conf (#446072) 2025-11-02 20:05:15 +00:00
Martin Weinelt b74cbe79bb nixos/postfix-tlspol: make tlsrpt depend on tlsrpt service
Without the tlsrpt service we can just fall back to QUERY and not push
around TLSRPT results.

https://github.com/Zuplu/postfix-tlspol/blob/v1.8.20/internal/server.go#L323-L329
(cherry picked from commit 9ccec77537)
2025-10-29 15:01:01 +00:00
dawnofmidnight 7daa71b13b nixos/snowflake-proxy: add extraFlags option
(cherry picked from commit 6559d5a41f)
2025-10-28 09:57:31 +00:00
provokateurin fa2741c80f
nextcloud32: init at 32.0.0
Subset of the original commit, without the breaking changes (i.e.
changes of defaults).

(cherry picked from commit 34a7111f89)
2025-10-27 11:31:57 +01:00
Thomas Gerbet 2ab7841f41
[25.05] nixseparatedebuginfod: 0.4.0 -> 0.4.1 (#454335) 2025-10-26 22:13:28 +00:00
Masum Reza 7def831482
[Backport release-25.05] nixos/config/sysfs: init module (#445143) 2025-10-24 01:35:48 +00:00
Sandro Jäckel 6dc1b1ed0f nixos/librenms: update config cache
otherwise any change to .env is never reflected.

(cherry picked from commit 1119d225de)
2025-10-23 11:34:56 +00:00
Guillaume Girol 8b31d8f65a nixosTests.nixseparatedebuginfod: fix now that nix is not compiled with debuginfo
Not-cherry-picked-because: On master, I want to remove nixseparatedebuginfod and replace it with nixseparatedebuginfod2 instead. This is done in https://github.com/NixOS/nixpkgs/pull/452053
2025-10-21 22:48:30 +02:00
sadorowo 2af71e0958 fix: add missing lib.escapeShellArg
(cherry picked from commit 63da2caa10)
2025-10-21 15:21:23 +00:00
Franek 21f0df1dab chore: remove dead code
(cherry picked from commit 3e5de98fc8)
2025-10-21 15:21:23 +00:00
Franek 5dcfeb4692 fix: use JSON and then convert to YAML for backwards compatibility
(cherry picked from commit e9b91d0f2d)
2025-10-21 15:21:23 +00:00
Franek 06a0338fbc chore: reformat file properly
(cherry picked from commit 3fd6717c22)
2025-10-21 15:21:23 +00:00
Franek 5d7a4ed3d9 chore: reformat and fix typo
(cherry picked from commit 59f3789f45)
2025-10-21 15:21:23 +00:00
sadorowo a449de090f invidious: use YAML configuration by default (#448476)
(cherry picked from commit a22dc98a36)
2025-10-21 15:21:23 +00:00
Rhys 4bcedb3313 nixos/ups: remove Slice from UPS shutdown service
system-ups.slice conflicts with shutdown.target, so
ups-killpower.service is never queued at shutdown.
The slice isn't doing anything; removing it is a simple fix.

(cherry picked from commit 30aa6b71f2)
2025-10-14 20:24:18 +02:00
Philip Wilk 7fa9b1e6f7 nixos/ups: add package option
(cherry picked from commit e97badfdd7)
2025-10-14 20:24:15 +02:00
Leona Maroni 1b3fb3bc7f
[Backport release-25.05] victorialogs: init package and update module to revive victorialogs in 25.05 (#451137) 2025-10-13 13:10:31 +00:00
Marie Ramlow 050858f84c nixos/victorialogs: use pkgs.victorialogs by default
(cherry picked from commit b9a699fe22)
2025-10-11 23:24:10 +02:00
Marie Ramlow 72c1ad7599 nixos/tests/victorialogs: init
(cherry picked from commit 3f9e587d44)
2025-10-11 23:24:01 +02:00
Defelo 4125234d77
nixos/tests/radicle-ci-broker: init
(cherry picked from commit c88215b4a8)
2025-10-11 21:29:30 +02:00
Defelo a0b166fa83
nixos/radicle-native-ci: init module
(cherry picked from commit 125dc2330e)
2025-10-11 21:29:30 +02:00
Defelo 2aea43ca98
nixos/radicle-ci-broker: init module
(cherry picked from commit acb76ed4d1)
2025-10-11 21:29:30 +02:00
Ratchanan Srirattanamet 5b3a0db487 kimai: fix bundled assets missing
We were relying on `composerNoScripts = false` to make sure post-install
command `assets:install` is run. `assets:install` copies assets from
`vendor/` directory into `public/` directory, placing it in appropriate
places.

However, with commit 80bb9aec24 ("kimai: switch to buildComposerProject2
and tag"), we switched to `buildComposerProject2` which has moved
`composer install` step to `composerVendor` derivation. By design,
`composerVendor` ignores anything that happens outside `vendor/`, so
the assets was not copied into final derivation.

So stop relying on `composerNoScripts = false` and run `assets:install`
ourselves in `postInstall` step. A side effect of this is that there is
another post-install step being skipped (`cache:clear`). However we
simply handle caches outside of the derivation (it's handled in the
module), so that's not a problem.

Fixes: https://github.com/NixOS/nixpkgs/issues/442208
(cherry picked from commit 1422ed8801)
2025-10-11 05:21:04 +00:00
Philip Taron 7e297ddff4
[25.05] fetchNextcloudApp: add sha512 (#448860) 2025-10-10 23:46:02 +00:00
Masum Reza 4af8011e2c
[Backport release-25.05] bcachefs-tools: 1.31.0 -> 1.31.6; Bcachefs out of tree module, Bcachefs package and scrub nixos option (#448195) 2025-10-09 13:48:56 +00:00
Thomas Gerbet 43fa4389c5
[Backport release-25.05] nixos/pixelfed: remove X-XSS-Protection header (#449709) 2025-10-09 06:51:30 +00:00
dish c572db3762 nixos/pixelfed: remove X-XSS-Protection header
not recommended to set it, per OWASP, as it can actually introduce
security issues

https://owasp.org/www-project-secure-headers/#x-xss-protection
(cherry picked from commit 47a0293617)
2025-10-07 23:31:24 +00:00
June Stepp 56a1f9c4ca nixos/virtualbox-host: fix for kernels >= 6.12
A change in Linux 6.12 broke VirtualBox without an added kernel
parameter. VirtualBox version 7.2.2 has a fix, but it only works
for kernels >= 6.16.

(cherry picked from commit b04d39b01c)
2025-10-07 16:12:46 +00:00
Michele Guerini Rocco b82bd388b9
[Backport release-25.05] nixos/mautrix-whatsapp: adapt to new config file format (#420722) (#446155) 2025-10-06 11:04:40 +00:00
staticdev a79798ac63 fetchNextcloudApp: add sha512
(cherry picked from commit 2196fed2b6)
2025-10-05 15:51:40 +02:00
Wolfgang Walther 5cbdb94f3a
treewide: remove redundant parentheses
Auto-fixed by nixf-diagnose.

(cherry picked from commit 91a8fee3aa)
2025-10-05 12:59:25 +02:00
Wolfgang Walther 1c6af9ba0a
treewide: remove unused with
Auto-fixed by nixf-diagnose.

(cherry picked from commit c283f32d29)
2025-10-05 12:38:28 +02:00
Wolfgang Walther 6c1e6f90d3
treewide: remove unused rec
Auto-fix by nixf-diagnose.

(cherry picked from commit 90e7159c55)
2025-10-05 12:38:23 +02:00
Will Fancher 7a1e72cf76
nixos/bcachefs: fix warning
(cherry picked from commit 62a07189b4)
2025-10-03 15:48:49 +05:30
Will Fancher 388a490cf9
bcachefs-kernel-module: Nest within bcachefs-tools
When you set the bcachefs userspace tools with:

```nix
boot.bcachefs.package = /* custom pacakge */;
```

This now also changes the kernel package. The NixOS module now calls
on the nested `cfg.package.kernelModule` expression with
`kernelPackages.callPackage`. This will enable overriding both
userspace and kernel space from e.g. upstream git.

(cherry picked from commit 6e331d90bd)
2025-10-03 15:48:48 +05:30
Will Fancher 41921adbc6
nixos/bcachefs: Use out-of-tree module when possible.
(partially cherry picked from commit 89e7815828)
2025-10-03 15:47:34 +05:30
Will Fancher 079c62d428
nixos/bcachefs: Don't duplicate assertions.
The first instance is unconditional. No need to have it twice.

(cherry picked from commit 25d56c5a34)
2025-10-03 15:46:41 +05:30
John Titor 24c828789b
Partially revert "nixos/bcachefs: remove linuxPackages_latest requirement"
This reverts commit afbaa572ed.

Bcachefs upstream recommends using the latest kernel for best compatibility.

(cherry picked from commit f93738d6a2)
2025-10-03 15:46:38 +05:30
John Titor c98a141da9
nixos/bcachefs: add boot.bcachefs.package
This allows configuring the userspace bcachefs package to use.
Similar to boot.zfs.package

(cherry picked from commit d6ed16a832)
2025-10-03 15:38:52 +05:30
John Titor 9694599fc9
nixos/bcachefs: remove linuxPackages_latest requirement
Nixpkgs has been on 6.12 for a while

(cherry picked from commit afbaa572ed)
2025-10-02 19:40:46 +05:30
John Titor b3fa982692
nixos/bcachefs: handle / (root filesystem) in autoScrub service
Without this, the service and timer name become like this:

❯  systemctl status bcachefs-scrub--.service
○ bcachefs-scrub--.service - bcachefs scrub on /
     Loaded: loaded (/etc/systemd/system/bcachefs-scrub--.service; linked; preset: ignored)
     Active: inactive (dead)
TriggeredBy: ● bcachefs-scrub--.timer

(cherry picked from commit 74d1da02aa)
2025-10-02 19:31:41 +05:30
Will Fancher 164972a398
nixos/unlock-bcachefs: Support x-systemd.requires/wants-mounts-for=
(cherry picked from commit 45bb7f83f4)
2025-10-02 19:30:53 +05:30
Will Fancher 8de4c8ee8a
nixos/unlock-bcachefs: Fix x-systemd.requires/wants= matching.
It would match options with those keys as a prefix,
e.g. x-systemd.requires-mounts-for=, and fail to extract a sensible
value.

(cherry picked from commit 9d769b6b9d)
2025-10-02 19:30:53 +05:30
Will Fancher 064304445c
nixos/bcachefs: Parse tags
Fixes #317901

(cherry picked from commit c90c29bacc)
2025-10-02 19:30:52 +05:30
Charlotte 0a1a2d3245
bcachefs-unlock: Also handle mount paths
Co-authored-by: Will Fancher <elvishjerricco@gmail.com>
(cherry picked from commit 814bbef95e)
2025-10-02 19:30:52 +05:30
Charlotte 🦝 Deleńkec 563e43e8ce
bcachefs-unlock: respect x-systemd mount options
This will allow unlocking to take place *after* all of the devices have
been probed, as indicated by the x-systemd.wants and x-systemd.requires
options. This allows for multi-device bcachefs volumes to be reliably
unlocked.

(cherry picked from commit ca0c35d813)
2025-10-02 19:30:50 +05:30
John Titor 36a9b7ac79
nixos/bcachefs: init module for autoScrub
Signed-off-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
(cherry picked from commit 774eadda46)
2025-10-02 19:27:16 +05:30
Defelo a10354e6ce radicle-node: 1.4.0 -> 1.5.0
(cherry picked from commit 8b399523a7)
2025-09-30 13:06:44 +00:00
Cosima Neidahl a32b7e307a
[Backport release-25.05] nixos/lomiri: Exclude Morph Browser by default (#443158) 2025-09-27 19:22:18 +00:00