dawnofmidnight
7daa71b13b
nixos/snowflake-proxy: add extraFlags option
...
(cherry picked from commit 6559d5a41f
2025-10-28 09:57:31 +00:00
Wolfgang Walther
5cbdb94f3a
treewide: remove redundant parentheses
...
Auto-fixed by nixf-diagnose.
(cherry picked from commit 91a8fee3aa
2025-10-05 12:59:25 +02:00
Wolfgang Walther
1c6af9ba0a
treewide: remove unused with
...
Auto-fixed by nixf-diagnose.
(cherry picked from commit c283f32d29
2025-10-05 12:38:28 +02:00
Wolfgang Walther
6c1e6f90d3
treewide: remove unused rec
...
Auto-fix by nixf-diagnose.
(cherry picked from commit 90e7159c55
2025-10-05 12:38:23 +02:00
tea
b5d84e5b26
nixos/mosquitto: add retain_expiry_interval freeform key
...
(cherry picked from commit 6adbfa11c5
2025-09-24 18:14:06 +02:00
Fabian Cholewinski
e0470c53eb
privoxy: Allow multiple listen-address options
...
Change type of services.privoxy.settings.listen-address from str to
either str (listOf str). The latter allows providing a list which
results in multiple list-address entries in privoxy.conf.
(cherry picked from commit 9f7f75f801
2025-09-20 23:49:56 +00:00
fsagbuya
b3f02c9a60
nixos/bind: add extraArgs option for command-line arguments
...
(cherry picked from commit 0a35b0539c
2025-09-15 07:08:00 +00:00
Wael Nasreddine
bb7c2bf89f
ncps: Add support for the --cache-temp-path flag
...
(cherry picked from commit 414c23facc
2025-09-05 07:20:36 +00:00
Wael Nasreddine
258e3e3bac
ncps: Add support for the --prometheus-enabled flag
...
(cherry picked from commit a0817f37f2
2025-09-05 07:20:35 +00:00
liberodark
e728d7ae4b
nixos/ntpd-rs: hardening
...
(cherry picked from commit a9cd681b8d
2025-08-07 16:20:54 +05:30
Amadej Kastelic
afc5524721
nixos/cjdns: update for cjdns 22.1 compatibility
...
(cherry picked from commit 7476494b3b
2025-08-03 15:43:34 +02:00
Martin Weinelt
268ecc7bb2
kea: 2.6.2 -> 2.6.3
...
https://downloads.isc.org/isc/kea/2.6.3/Kea-2.6.3-ReleaseNotes.txt
https://kb.isc.org/docs/cve-2025-32801
https://kb.isc.org/docs/cve-2025-32802
https://kb.isc.org/docs/cve-2025-32803
Fixes: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
(cherry picked from commit fde8885198
2025-07-25 17:33:14 +02:00
Wolfgang Walther
aefcb0d50d
treewide: run nixfmt 1.0.0
2025-07-24 14:58:18 +02:00
Wolfgang Walther
a46262ae77
treewide: run treefmt with mdcr/nixfmt
2025-07-24 14:58:15 +02:00
Wolfgang Walther
ad1379b5e0
treewide: fix syntax errors in nix code blocks
...
Fixes all code blocks with "nix" language in markdown files for syntax
errors to be able to run nixfmt in the next step.
(cherry picked from commit 6c47e7d5da
2025-07-24 14:46:05 +02:00
Felix Singer
7c832ecc1c
nixos/anubis: Apply some more hardening settings
...
Signed-off-by: Felix Singer <felixsinger@posteo.net>
(cherry picked from commit 959c8e9311
2025-07-14 16:20:21 +00:00
provokateurin
1c87566236
nixos/searx: move network.target from wantedBy to after
...
In 623664e84fbcc1b762e9
2025-07-06 15:01:32 +00:00
Greizgh
0d428dab44
seafile: remove myself from maintainers
...
I do not use seafile anymore and won't spend energy working on it.
(cherry picked from commit fd3d596a1c
2025-07-01 20:14:59 +00:00
Jakob Kukla
9478be0f88
nixos/atticd: fix user and group documentation mixup
...
(cherry picked from commit db7efc1412
2025-06-21 20:32:57 +00:00
Peter Lehmann
fce8cd453a
nixos/pdns-recursor: reload service on config change
...
(cherry picked from commit c586196e17
2025-06-07 21:40:26 +00:00
alyaeanyx
3f72d383d1
maintainers: rename alyaeanyx -> pentane
...
(cherry picked from commit bdd58823ab
2025-06-01 10:14:38 +00:00
Wolfgang Walther
fad373f5c8
[Backport release-25.05] adguardhome: Build from source ( #411348 )
2025-06-01 08:20:52 +00:00
ferres
5ea9b9f743
nixos/zeronsd: fix acl permissions
...
(cherry picked from commit 41f1eadb73
2025-05-30 11:23:25 +05:30
Golbinex
b59accc8e9
nixos/adguardhome: Update binary path
...
The compiled binary filename has upper cases
(cherry picked from commit 6e99825c18
2025-05-27 09:50:50 +00:00
Sveske_Juice
b6dfcedefb
nixos/syncthing: fix cert/key permission error
...
(cherry picked from commit 3303249ed2
2025-05-26 04:50:35 +00:00
Pop
298a25eeec
netbird: fix typo in warning message ( #406819 )
...
(cherry picked from commit 017276a4aa
2025-05-23 03:32:43 +00:00
rnhmjoj
fb77c246cb
nixos/pdns-recursor: deprecate settings, add yaml-settings
...
(cherry picked from commit b71d4f5fb3
2025-05-19 08:30:52 +00:00
Adam C. Stephens
d25ea431bd
Headscale service wait before restart ( #400053 )
2025-05-16 08:30:08 -04:00
lassulus
84049bd248
nixos/syncthing: define and handle encryptionPassword option ( #383442 )
2025-05-15 19:44:22 +02:00
isabel
84c1069ebe
nixos/cloudflared: fix cert.pem installation ( #407128 )
2025-05-15 15:32:56 +01:00
Sandro
5077b9edb6
nixos/headscale: fix derp.auto_update_enabled option ( #406108 )
2025-05-15 11:04:01 +02:00
Pedro Alves
75c7d0908e
nixos/cloudflared: fix cert.pem installation
...
There was a typo in the systemd service definition for cloudflared which
meant that the cert.pem file was not being correctly exposed.
2025-05-14 20:13:42 +01:00
Arne Keller
2264d87679
cato-client: init at 5.2.1.1, nixos/cato-client: init ( #339533 )
2025-05-13 17:36:06 +02:00
Patrick Steinhardt
8578bd1117
nixos/headscale: fix derp.auto_update_enabled option
...
The options part of "services.headscale.settings" get rendered directly
into a JSON file. As such, any declared values need to match the actual
config key that upstream uses or they are ineffective.
One such key is "derp.auto_update_enable", which controls whether or not
auto-updates for the DERP map are enabled. This key is misspellt though:
the config is called "derp.auto_update_enabled", and that has always
been the case since the config has been introduced in 57f46ded (Split
derp into its own config struct, 2021-10-22). Any unknown key is simply
ignored by Headscale, and as such the setting is ineffective.
Fix this by renaming the option.
2025-05-11 20:12:05 +02:00
Patrick
7a564cf0cd
nixos/networkd-dispatcher: use writeShellApplication to ease use
2025-05-11 11:53:45 +02:00
isabel
92d64400d5
nixos/anubis: Fix defaultOptions not applying user-defined settings ( #398790 )
2025-05-11 08:56:46 +01:00
Gary Guo
7dd8c5b602
unifi8: drop
...
This was an alias to the unifi package, which has been updated to v9.
To avoid confusion, remove this alias.
2025-05-10 14:47:52 +01:00
sudoforge
8aa7a07653
nixos/iwd: move General.UseDefaultInterface to DriverQuirks.DefaultInterface
...
`General.UseDefaultInterface` was deprecated last year, with a
recommendation to move to `DriverQuirks.DefaultInterface` [0] [1] [2].
[0]: https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=5c7777ff0fbcdee3c5d3a3cf6b1f375f2e820644
[1]: https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=d223f49fbc622e5b2f270711619ecbd542bed12e
[2]: https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=a27b7823df12c5d185b39aa7777c546843c1c96f
2025-05-08 21:35:40 -07:00
Franz Pletz
2634ca8249
nixos/ntpd-rs: Handle configuring NTP pools ( #403903 )
2025-05-08 18:28:32 +02:00
Johannes Kirschbauer
5ee93d2532
lib: refactor lib.attrsets.{mapAttrs', mapAttrsToList} and mapAttrs'' in the strongswan-swanctl module ( #403581 )
2025-05-08 09:42:40 +02:00
ccicnce113424
4551258940
lib: refactor lib.attrsets.{mapAttrs', mapAttrsToList} and mapAttrs'' in the strongswan-swanctl module
...
The new implementation of `mapAttrsToList` is simpler than the previous one, avoiding an extra string conversion. Benchmarking shows a slight performance improvement. See the discussion here: https://discourse.nixos.org/t/another-implementation-of-mapattrstolist
Additionally, I searched nixpkgs for expressions equivalent to the old `mapAttrsToList` and replaced them with direct calls to the new implementation.
2025-05-08 13:58:54 +08:00
Wolfgang Walther
c8d2eca963
.editorconfig: move subfolder config into separate .editorconfig files
...
This avoids paths in the top-level file getting out-of-sync, because the
.editorconfig files would be moved together with the files they target.
2025-05-07 20:01:35 +02:00
rnhmjoj
66db09eb62
nixos/dhcpcd: add option to allow setuid binaries
...
The promise in the networking.dhcpcd.runHook description was broken by
further restrictions added in 21bb7ea9
2025-05-05 22:00:20 +02:00
rnhmjoj
54a6949722
nixos/tests/networking: test hostname via DHCP
2025-05-05 21:59:33 +02:00
rnhmjoj
bf1cf6bffc
nixos/dhcpcd: fix hostname via DHCP
2025-05-05 21:53:45 +02:00
h7x4
beb9d5230c
coturn: add systemd support ( #394670 )
2025-05-05 12:53:47 +02:00
Jonathan Davies
86d94b2d88
nixos/ntpd-rs: Handle configuring timeserver FQDN as a pool
2025-05-04 14:30:12 +00:00
Henry-Hiles
f2cdf605c3
nixos/livekit: Fix docs issues
2025-05-03 21:52:26 -04:00
Jeremy Fleischman
1b7b89c4ef
Demonstration of an alternate way to embed secrets into syncthing config
2025-05-03 12:43:42 -07:00
Wael Nasreddine
c2dcf9be27
nixos/ncps: delete failing secretKeyPath assertion and wait for network-online.target ( #396901 )
2025-05-01 14:33:24 -07:00
