Commit graph

24311 commits

Author SHA1 Message Date
Martin Weinelt b74cbe79bb nixos/postfix-tlspol: make tlsrpt depend on tlsrpt service
Without the tlsrpt service we can just fall back to QUERY and not push
around TLSRPT results.

https://github.com/Zuplu/postfix-tlspol/blob/v1.8.20/internal/server.go#L323-L329
(cherry picked from commit 9ccec77537)
2025-10-29 15:01:01 +00:00
dawnofmidnight 7daa71b13b nixos/snowflake-proxy: add extraFlags option
(cherry picked from commit 6559d5a41f)
2025-10-28 09:57:31 +00:00
provokateurin fa2741c80f
nextcloud32: init at 32.0.0
Subset of the original commit, without the breaking changes (i.e.
changes of defaults).

(cherry picked from commit 34a7111f89)
2025-10-27 11:31:57 +01:00
Sandro Jäckel 6dc1b1ed0f nixos/librenms: update config cache
otherwise any change to .env is never reflected.

(cherry picked from commit 1119d225de)
2025-10-23 11:34:56 +00:00
sadorowo 2af71e0958 fix: add missing lib.escapeShellArg
(cherry picked from commit 63da2caa10)
2025-10-21 15:21:23 +00:00
Franek 21f0df1dab chore: remove dead code
(cherry picked from commit 3e5de98fc8)
2025-10-21 15:21:23 +00:00
Franek 5dcfeb4692 fix: use JSON and then convert to YAML for backwards compatibility
(cherry picked from commit e9b91d0f2d)
2025-10-21 15:21:23 +00:00
Franek 06a0338fbc chore: reformat file properly
(cherry picked from commit 3fd6717c22)
2025-10-21 15:21:23 +00:00
Franek 5d7a4ed3d9 chore: reformat and fix typo
(cherry picked from commit 59f3789f45)
2025-10-21 15:21:23 +00:00
sadorowo a449de090f invidious: use YAML configuration by default (#448476)
(cherry picked from commit a22dc98a36)
2025-10-21 15:21:23 +00:00
Rhys 4bcedb3313 nixos/ups: remove Slice from UPS shutdown service
system-ups.slice conflicts with shutdown.target, so
ups-killpower.service is never queued at shutdown.
The slice isn't doing anything; removing it is a simple fix.

(cherry picked from commit 30aa6b71f2)
2025-10-14 20:24:18 +02:00
Philip Wilk 7fa9b1e6f7 nixos/ups: add package option
(cherry picked from commit e97badfdd7)
2025-10-14 20:24:15 +02:00
Leona Maroni 1b3fb3bc7f
[Backport release-25.05] victorialogs: init package and update module to revive victorialogs in 25.05 (#451137) 2025-10-13 13:10:31 +00:00
Marie Ramlow 050858f84c nixos/victorialogs: use pkgs.victorialogs by default
(cherry picked from commit b9a699fe22)
2025-10-11 23:24:10 +02:00
Defelo a0b166fa83
nixos/radicle-native-ci: init module
(cherry picked from commit 125dc2330e)
2025-10-11 21:29:30 +02:00
Defelo 2aea43ca98
nixos/radicle-ci-broker: init module
(cherry picked from commit acb76ed4d1)
2025-10-11 21:29:30 +02:00
Philip Taron 7e297ddff4
[25.05] fetchNextcloudApp: add sha512 (#448860) 2025-10-10 23:46:02 +00:00
dish c572db3762 nixos/pixelfed: remove X-XSS-Protection header
not recommended to set it, per OWASP, as it can actually introduce
security issues

https://owasp.org/www-project-secure-headers/#x-xss-protection
(cherry picked from commit 47a0293617)
2025-10-07 23:31:24 +00:00
Michele Guerini Rocco b82bd388b9
[Backport release-25.05] nixos/mautrix-whatsapp: adapt to new config file format (#420722) (#446155) 2025-10-06 11:04:40 +00:00
staticdev a79798ac63 fetchNextcloudApp: add sha512
(cherry picked from commit 2196fed2b6)
2025-10-05 15:51:40 +02:00
Wolfgang Walther 5cbdb94f3a
treewide: remove redundant parentheses
Auto-fixed by nixf-diagnose.

(cherry picked from commit 91a8fee3aa)
2025-10-05 12:59:25 +02:00
Wolfgang Walther 1c6af9ba0a
treewide: remove unused with
Auto-fixed by nixf-diagnose.

(cherry picked from commit c283f32d29)
2025-10-05 12:38:28 +02:00
Wolfgang Walther 6c1e6f90d3
treewide: remove unused rec
Auto-fix by nixf-diagnose.

(cherry picked from commit 90e7159c55)
2025-10-05 12:38:23 +02:00
Cosima Neidahl a32b7e307a
[Backport release-25.05] nixos/lomiri: Exclude Morph Browser by default (#443158) 2025-09-27 19:22:18 +00:00
Alexander Sieg db3124c7c9
nixos/outline: ajust for deprecation of MAXIMUM_IMPORT_SIZE
(cherry picked from commit 5daa3ed068)
2025-09-27 14:13:24 +02:00
Kabbone 36cbbc84fe [Backport release-25.05] nixos/mautrix-whatsapp: adapt to new config file format (#420722)
(cherry picked from commit 65a1a7985a)
2025-09-25 22:58:46 +02:00
Kabbone 51072b426a nixos/mautrix-whatsapp: add manual entry
(cherry picked from commit 6e5554c44c)
2025-09-25 22:52:30 +02:00
tea b5d84e5b26 nixos/mosquitto: add retain_expiry_interval freeform key
(cherry picked from commit 6adbfa11c5)
2025-09-24 18:14:06 +02:00
dotlambda f4d85a4eae
[25.05] nixos/immich: add support for VectorChord (#443145) 2025-09-23 05:02:18 -07:00
Fabian Cholewinski e0470c53eb privoxy: Allow multiple listen-address options
Change type of services.privoxy.settings.listen-address from str to
either str (listOf str).  The latter allows providing a list which
results in multiple list-address entries in privoxy.conf.

(cherry picked from commit 9f7f75f801)
2025-09-20 23:49:56 +00:00
Wolfgang Walther 22b37253ed
[Backport release-25.05] github-runner: add support for node24 (#442600) 2025-09-20 15:03:32 +00:00
Wolfgang Walther 7fdb524aee
[Backport release-25.05] nixos/grafana: add prune option to provision.datasources (#438966) 2025-09-20 14:51:41 +00:00
Wolfgang Walther dd87a415ee
[Backport release-25.05] nixos/sssd: use upstream unit directives (#434671) 2025-09-20 14:43:05 +00:00
dish 3e36f8b280
[Backport release-25.05] wivrn: 25.6.1 -> 25.8 (#438430) 2025-09-17 21:09:53 -04:00
teutat3s 9617c56e45 nixos/invoiceplane: block access to ipconfig.php
Upstream uses this method to protect sensitive data in their example
config: https://github.com/InvoicePlane/InvoicePlane/blob/v1.6.3/ipconfig.php.example#L1

(cherry picked from commit c7fb59251c)
2025-09-15 19:57:52 +00:00
Sefa Eyeoglu 9e3a0154d3
nixos/immich: add VectorChord migration docs
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
(cherry picked from commit a9c17c34b1)
2025-09-15 16:07:52 +01:00
Sefa Eyeoglu 000dc78159
nixos/immich: add enableVectors option
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
(cherry picked from commit 0b93bf6c22)
2025-09-15 16:07:52 +01:00
Sefa Eyeoglu 952ad309b6
nixos/immich: add enableVectorChord option
This enables VectorChord in the database (currently) alongside
pgvecto.rs. Note that VectorChord requires pgvector, which is enabled as
well by this option.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
(cherry picked from commit fd1994a8b7)
2025-09-15 16:07:51 +01:00
Sefa Eyeoglu 6210030914
nixos/immich: only start after reaching postgresql.service
Without this dependency, we may run into a race condition, especially in
our tests.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
(cherry picked from commit 1a24457782)
2025-09-15 16:07:45 +01:00
OPNA2608 062b9d9c18 nixos/lomiri: Exclude Morph Browser by default
Qt5 qtwebengine will be marked insecure, so this would block the entire DE from being usable.
Epiphany seems to work as a replacement until Morph can be built with Qt6.

Content-Hub test will still need adjustment, but keeping it out of this to make future reverting easier.

(cherry picked from commit 5063462bf3)
2025-09-15 14:09:53 +02:00
fsagbuya b3f02c9a60 nixos/bind: add extraArgs option for command-line arguments
(cherry picked from commit 0a35b0539c)
2025-09-15 07:08:00 +00:00
Robert Schütz b7338ccd18
nixos/nextcloud: remove X-XSS-Protection
see https://github.com/nextcloud/server/pull/53476

(cherry picked from commit 06c99c29c9)
2025-09-13 14:21:44 -04:00
Spencer Janssen 5c67cf2300 github-runner: add support for node24
Fixes #434372

(cherry picked from commit 19a7b08ea7)
2025-09-13 11:42:00 +00:00
Kerstin Humm d6326ce0bf nixos/canaille: remove HTTP header X-XSS-Protection
Addresses https://github.com/NixOS/nixpkgs/issues/438800

(cherry picked from commit 301e5cca9c)
2025-09-09 21:20:33 +00:00
Maximilian Bosch 7d7d436071
Merge: [Backport release-25.05] nixos/nextcloud: Pass OC_PASS and NC_PASS environment variables to nextcloud-occ (#440004) 2025-09-08 07:45:33 +02:00
Wael Nasreddine 88469b5caa
[Backport release-25.05] ncps: Update the module for ncps v0.3.0 (#440346) 2025-09-06 12:44:04 -07:00
nixpkgs-ci[bot] 078e17c0be
[Backport release-25.05] nixos/kerberos_server: add extraKDCArgs option (#440187)
nixos/kerberos_server: add extraKDCArgs option

(cherry picked from commit b3af89dd38)

Co-authored-by: Katalin Rebhan <me@dblsaiko.net>
2025-09-06 13:55:31 +02:00
Wael Nasreddine bb7c2bf89f ncps: Add support for the --cache-temp-path flag
(cherry picked from commit 414c23facc)
2025-09-05 07:20:36 +00:00
Wael Nasreddine 258e3e3bac ncps: Add support for the --prometheus-enabled flag
(cherry picked from commit a0817f37f2)
2025-09-05 07:20:35 +00:00
provokateurin 9a0dee2e9c nixos/nextcloud: Pass OC_PASS and NC_PASS environment variables to nextcloud-occ
(cherry picked from commit ba24e7fa23)
2025-09-03 22:36:44 +00:00