Commit graph

2380 commits

Author SHA1 Message Date
Wolfgang Walther e5cb9a5ba4 nixos/immich: fix postgresql.package regression
`config.services.postgresql.package` is now only available when the
PostgreSQL module is actually enabled. If we're not using the local
database, we'll need to fallback to the latest postgresql version, since
we don't know about the remote version.

(cherry picked from commit 62d2b6d593)
2025-06-22 14:43:55 +00:00
Kerstin Humm 2f8de667c1 nixos/mastodon: make robust for cases where postgresql isn't enabled on the host
E.g. when a remote PostgreSQL database is used

Apparently you can't access the services.postgresql.package value
anymore if postgresql isn't enabled?

(cherry picked from commit ed0af3bf25)
2025-06-20 19:29:35 +00:00
linsui d50977688f nixos/readeck: add back MemoryDenyWriteExecute
SQLite driver is reverted to its CGO version so this can be enabled

(cherry picked from commit 17f95268f3)
2025-06-11 17:02:18 +00:00
Defelo 881a31616e nixos/olivetin: use yq-go to merge config files
(cherry picked from commit f71748184c)
2025-06-08 21:42:06 +00:00
Peder Bergebakken Sundt affe59411e
[Backport release-25.05] nixos/stash: fix mutableSettings logic (#412800) 2025-06-02 01:06:49 +02:00
renesat 16c1825c74 nixos/stash: fix empty immutable plugins
(cherry picked from commit cb4459412a)
2025-06-01 01:46:59 +00:00
DoctorDalek1963 1c2dbee288 nixos/stash: fix mutableSettings logic
Fixes services.stash.mutableSettings so that it makes sense. The logic
was previously backwards and the settings would be overriden if
mutableSettings was true.

(cherry picked from commit 7dcad49a30)
2025-06-01 01:39:38 +00:00
Sandro Jäckel c44d6d705d nixos/mediagoblin: fix initial media reprocessing with gmg
Running `mediagoblin-gmg reprocess initial` before would fail with
missing GST_PLUGIN_PATH and tools in PATH.

(cherry picked from commit 81d2a488e6)
2025-05-28 14:15:09 +00:00
Sandro Jäckel b7444e5d11 nixos/mediagoblin: fix gmg argument parsing
Before the argument to mediagoblin-gmg would be passed to the actual command
and the rest to sh which is obviously nonsense.

(cherry picked from commit dd63ca898e)
2025-05-28 14:15:09 +00:00
Ratchanan Srirattanamet ff4214fabd nixos/kimai: fix upgrading to Kimai 2.32 by clearing cache earlier
During testing of Kimai 2.32, it's been found that fixes done in PR
371917 [^1] is not enough to prevent error in the case of upgrading from
2.31 to 2.32.

Hinted by an upstream issue [^2], make sure that the cache is cleared
before running `kimai:install`, not after. This fixes upgrading from
2.31 to 2.32, and should prevent similar issue from popping up again.

[^1]: https://github.com/NixOS/nixpkgs/pull/371917
[^2]: https://github.com/kimai/kimai/issues/5437
2025-05-16 11:19:58 +02:00
Maximilian Bosch 26126c75df
Merge: Use cacert in Nextcloud (#406252) 2025-05-15 18:50:53 +02:00
provokateurin 12f8199080
nixos/nextcloud: Override cacert package with config.security.pki.caBundle 2025-05-15 18:19:52 +02:00
Luj b98b4f43bd
readeck: 0.17.1 -> 0.18.2 (#405276) 2025-05-14 17:38:22 +02:00
Sandro 60571a4fa9
nixos/gancio: fix cli not passing all args (#401581) 2025-05-14 15:11:36 +02:00
Jonas Heinrich 002ebbc4de
oncall: init at 2.1.7; nixos/oncall: init (#388723) 2025-05-13 23:21:54 +02:00
linsui bff193eaba readeck: 0.17.1 -> 0.18.2 2025-05-13 23:32:38 +08:00
Maximilian Bosch 0be521cb0e
Merge: nixos/nextcloud: use LoadCredential to read services.nextcloud.secretFile (#405970) 2025-05-13 13:45:36 +02:00
Sandro 95afdf2b49
nixos/gancio: properly quote
Co-authored-by: Wroclaw <wroclaw223@outlook.com>
2025-05-12 17:55:46 +02:00
provokateurin dfb7f45bb8
nixos/nextcloud: Disable integrity check 2025-05-11 21:34:33 +02:00
thiloho a847800945
nixos/archtika: remove module 2025-05-11 16:27:16 +02:00
Jonas Heinrich ce6e5f037a nixos/oncall: init 2025-05-11 13:30:01 +02:00
networkException 23468ad19f
nixos/nextcloud: use LoadCredential to read services.nextcloud.secretFile
This patch adds support for using systemd's LoadCredential
feature to read in a json file at a path defined in the
services.nextcloud.secretFile option.

This is a follow up to 2ce1e84103.
2025-05-10 20:36:01 +02:00
lassulus fb297f0be8
movim: 0.30 → 0.30.1; {movim,nixos.movim}: mysql → mariadb (#401596) 2025-05-10 07:58:20 +02:00
Pol Dellaiera aaf817bb5b
nixos/glance: allow specifying secret settings (#395551) 2025-05-08 13:58:03 +00:00
Izorkin 4ec6492b3b nixos/mastodon: add option elasticsearch.prefix 2025-05-08 14:48:52 +02:00
piegames a1848a66d8
nixos/stash: Fix regex in default value (#403279) 2025-05-07 12:45:34 +02:00
Yt e3fa38df6b
lauti: rename from eintopf and update to 1.0.0 (#403263) 2025-05-06 16:24:25 -04:00
Bruno BELANYI e8f532dea2
nixos/mealie: add 'database.createLocally' (#403670) 2025-05-06 13:45:40 +01:00
Riyyi 39fbbb7ba0
nixos/nextcloud: fix typo in extraApps example (#404314) 2025-05-05 17:00:50 +08:00
Bruno BELANYI 2e44a3dd76 nixos/mealie: add 'database.createLocally' 2025-05-02 23:15:59 +01:00
piegames 8a71705aba nixos/stash: Fix regex in default value
`\.` in a Nix string is just `.`, so it will match on any characters
instead of just dot.
2025-05-01 13:18:19 +02:00
Jonas Heinrich a22c5fac3f nixos/eintopf: rename package to lauti 2025-05-01 12:27:49 +02:00
Alexander Sieg 5205c8b5ca
nixos/snipe-it: clear and rebuild caches on startup 2025-04-29 15:45:04 +02:00
Gutyina Gergő 27d160b60b
nixos/glance: allow specifying secret settings 2025-04-26 13:42:15 +02:00
Maximilian Bosch 31357d17a3
Merge: nixos/nextcloud: Disable web updater by default (#401147) 2025-04-25 18:31:53 +02:00
โทสฺตัล 9e32e76a72 {movim,nixos.movim}: mysql → mariadb
Docs say now the separation between MySQL & MariaDB too great to be
supported going forward, so to better reflect that, rename to match.
2025-04-25 08:22:55 +07:00
Sandro Jäckel 3a5c613ce2
nixos/gancio: fix cli not passing all args 2025-04-25 01:27:15 +02:00
Defelo 965558108f
nixos/olivetin: init module 2025-04-24 23:40:51 +02:00
provokateurin 530c6f09c9
nixos/nextcloud: Disable web updater by default
Disables the "Open updater" button in the admin overview and makes sure it is not possible to update the instance through the web interface.
Nextcloud runs from the source code in the nix store and should not try to update itself manually.
The only way to update Nextcloud is to update nixpkgs and therefore the web updater must be disabled.
2025-04-23 17:08:25 +02:00
xanderio 71ae33edd3
nixos/dependency-track: fix nginx config for frontend (#393041) 2025-04-23 16:19:22 +02:00
0x4A6F d8bfbd35ee
upgrade nodejs_18 dependents in prevision for upcoming EOL (#399749) 2025-04-22 22:01:51 +02:00
Maximilian Bosch 2cb444f4fc
Merge: nixos/nextcloud: S3: Rename autocreate (a no-op) to verify_bucket_exists (#399629) 2025-04-22 16:03:51 +02:00
Maximilian Bosch 4c336c55b2
Merge: nextcloud29: drop (#397974) 2025-04-22 15:56:50 +02:00
Marcus Ramberg d3ad1eb896
hoarder: rename to karakeep, nixos/karakeep: init module (#399603) 2025-04-22 08:19:44 +02:00
Eric Roberts 9790df5968 nixos/karakeep: init module 2025-04-21 20:20:20 -04:00
Antoine du Hamel dc8397c07b
upgrade nodejs_18 dependents in prevision for upcoming EOL 2025-04-21 19:56:15 +02:00
Martin Weinelt 96c56efbc6
discourse: 3.3.2 -> 3.4.2 (#394129) 2025-04-21 16:44:43 +02:00
Thiago Kenji Okada 3bf74f2aa5
nixos/cook-cli: init module (#399226) 2025-04-21 13:57:09 +01:00
provokateurin 1efc79ccca
nextcloud29: drop 2025-04-21 07:48:32 +02:00
Tristan Ross 9ddf5cb6f4
nixos/mattermost: correct file upload directory (#400221) 2025-04-20 15:19:05 -07:00
Morgan Jones a7e52b03c3
nixos/mattermost: correct file upload directory
Fix compatibility with previous versions by making sure all the uploads
and plugins end up in the correct directory. Add a test for the exact
path we care about to ensure that it doesn't work "on accident."

Discovered while updating instances to unstable.
2025-04-19 18:33:20 -07:00
Aleksana a89584761e
nixos/gancio: fix quotes and indentation, exec into configured user (#397194) 2025-04-20 09:09:51 +08:00
Nico Felbinger e0d1b49a46
chore: move meta option to top level in many modules 2025-04-19 18:27:48 +02:00
Luana 7fbf79c4ac nixos/cook-cli: init module 2025-04-18 09:00:40 -03:00
Tom Hubrecht 08e859c8e0
nixos/nextcloud: S3: Rename autocreate (a no-op) to verify_bucket_exists
C.f. https://github.com/nextcloud/documentation/issues/10436

Co-authored-by: Tom Herbers <mail@tomherbers.de>
Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com>
2025-04-18 11:14:38 +02:00
Bruno BELANYI e1e459223d
mealie: 2.7.1 -> 2.8.0 (#392158) 2025-04-13 19:59:31 +01:00
Anton Mosich 3f12820164
nixos/mealie: update for mealie v2.8.0
mealie v2.8.0 no longer uses crfpp, but instead uses
ingredient_parser_nlp, which relies on nltk-data. If this environment
variable isn't available, mealie will just download the data instead.
2025-04-13 20:50:30 +02:00
Sandro 1cb88030dd
nixos/whoami: init module (#397396) 2025-04-11 17:00:16 +02:00
Sandro 28a43ce6ba
baikal: init at 0.10.1 (#370473) 2025-04-11 00:54:14 +02:00
Alexander Sieg 4bc3f43923
nixos/dependency-track: fix nginx config for frontend
Apparend I fell for some browser cache when implementing this in the
first place. This patch is based on the upstream nginx config.

5f318aca10/docker/etc/nginx/templates/default.conf.template
2025-04-10 12:24:29 +02:00
Defelo 3ae07e6d12
nixos/whoami: init module 2025-04-09 16:51:04 +02:00
wrvsrx 30fe7315db
nixos/baikal: add it 2025-04-09 18:16:20 +08:00
Leona Maroni f2ebbabda0
discourse: 3.3.2 -> 3.4.2
https://meta.discourse.org/t/3-3-3-security-and-maintenance-release/343239
https://meta.discourse.org/t/3-3-4-security-and-maintenance-release/349301
https://blog.discourse.org/2025/02/unpacking-discourse-3-4/
https://meta.discourse.org/t/3-4-1-bug-fix-and-ux-release/353247
https://meta.discourse.org/t/3-4-2-security-and-bug-fix-release/358152
2025-04-08 22:56:45 +02:00
Sandro Jäckel b760ece2bf
nixos/gancio: fix all defaultText
Otherwise they don't make much context when seen in docs outside of the module
2025-04-08 21:30:45 +02:00
Sandro Jäckel 79178cc661
nixos/gancio: exec into configured user with cli 2025-04-08 21:30:42 +02:00
Sandro Jäckel 57818dff0a
nixos/gancio: add missing quotes to cli command, remove erroneous dash 2025-04-08 21:29:14 +02:00
Seth Flynn 43f7128bbe
nixos/reposilite: init module (#381197) 2025-04-08 11:07:36 -04:00
Bruno BELANYI 9c09962137 nixos/homebox: add 'database.createLocally' 2025-04-07 22:19:57 +01:00
Bruno BELANYI 2830bf83f8 nixos/homebox: remove 'network.target' dependency 2025-04-07 21:31:52 +01:00
Bruno BELANYI 4ae49051cb nixos/homebox: allow using UNIX sockets
This is necessary to use PostgreSQL with a local socket.
2025-04-07 21:27:16 +01:00
Tristan Ross 77f77a046a
mattermost: 9.11.11 -> 10.5.2; use formats.json; squash systemd-tmpfiles warning (#376838) 2025-04-07 10:27:15 -07:00
Sandro cf46302e9a
nixos/modules: fix part-db package (#388313) 2025-04-06 20:52:00 +02:00
Bruno BELANYI ce4166636b
homebox: 0.17.0 -> 0.18.0; nixos/homebox: update defaults (#388655) 2025-04-06 14:38:36 +01:00
Weijia Wang 999d6cd51c
nixos/archtika: fix module and package (#392678) 2025-04-04 14:52:59 +02:00
Sandro Jäckel ed26b7b0c3
nixos/onlyoffice: misc cleanup 2025-04-04 11:37:33 +02:00
Pol Dellaiera a9899b4c8f
nixos/glance: fix broken server stats (#395859) 2025-04-04 11:23:17 +02:00
MunsMan 2728be7c31 nixos/glance: fix broken server stats 2025-04-04 10:43:13 +02:00
uku dfaad22261
nixos/reposilite: init module 2025-04-04 09:46:24 +02:00
7c6f434c 8d47959e22
x2t: init at 8.3.2 (#338794) 2025-04-04 04:46:52 +00:00
Florian Klink e9e9e07548
nixos/movim: remove useless xargs script call (#395727) 2025-04-04 00:21:00 +01:00
Florian Klink e9a9de1735
nixos/movim: H2O support, H2O + Ejabberd + runTest (#385040) 2025-04-03 19:51:51 +01:00
Arnout Engelen ea0b776f71
x2t: init at 8.3.2 2025-04-03 20:08:48 +02:00
Piotr Kwiecinski d96daf7fdd
nixos/agorakit: add phpPackage option and pass it to fpm pool 2025-04-03 16:36:28 +02:00
Pol Dellaiera 2bfc080955
nixos/monica: add phpPackage option and pass it to phpfpm pool (#395761) 2025-04-03 16:08:01 +02:00
Sandro 0a124d5554
nixos/gancio: add sendmail to path, make cli easier to use (#395737) 2025-04-03 15:56:51 +02:00
Piotr Kwiecinski 1db72d9afc
nixos/monica: add phpPackage option and pass it to phpfpm pool
fixes nixosTests.monica failure
2025-04-03 15:52:08 +02:00
Sandro Jäckel 052423a7e9
nixos/gancio: add sendmail to path 2025-04-03 14:16:02 +02:00
Sandro Jäckel c5eb4441b9
nixos/gancio: make cli easier to use 2025-04-03 14:16:02 +02:00
โทสฺตัล b556798f65 nixos/movim: remove useless xargs script call
xargs templating already covers this
2025-04-03 18:16:00 +07:00
Nick Cao a084e920e0
ocis_5-bin: rename from ocis-bin (#394598) 2025-04-02 16:56:09 -04:00
โทสฺตัล 8a8b892cc1 nixos/movim: add H2O support + testing with ejabberd 2025-04-03 00:18:28 +07:00
โทสฺตัล 0d9a758f73 nixos/movim: cleanup Nginx option 2025-04-03 00:16:19 +07:00
โทสฺตัล b0f9f1c9f5 nixos/movim: refactor types (shouldn’t meaningfully change anything) 2025-04-03 00:16:18 +07:00
Felix Zieger 1bf74aee3c nixos/haven: init 2025-04-02 17:30:18 +02:00
Maximilian Bosch 39dcdc5c9b
nixos/nextcloud: check if ownership of config is correct
Follow-up on #169733

For `data`, Nextcloud checks on its own if everything is readable.
However, for `config` it's crucial that the ownership is actually
correct: otherwise, systemd-tmpfiles will refuse any operations inside
because of unsafe path transitions.

This can result in a subtly broken setup by the `override.config.php`
not being updated, but also not part of the system closure anymore
(another override.config.php is referenced now) which means it'll be
GCed eventually even though Nextcloud relies on it.

If this precondition is not met, the following error will be printed:

    nextcloud-setup-start[972]: /var/lib/nextcloud/config is not owned by user 'nextcloud'!
    nextcloud-setup-start[972]: Please check the logs via 'journalctl -u systemd-tmpfiles-setup'
    nextcloud-setup-start[972]: and make sure there are no unsafe path transitions.
    nextcloud-setup-start[972]: (https://nixos.org/manual/nixos/stable/#module-services-nextcloud-pitfalls-during-upgrade)
2025-04-02 09:30:17 +02:00
misuzu 0f4487251d
strfry: init at 1.0.4, nixos/strfry: init (#385587) 2025-04-02 10:13:41 +03:00
Morgan Jones 9f23ed6644
nixos/mattermost: increase db connect timeouts 2025-04-01 22:17:57 -07:00
Morgan Jones ea485e1207
mattermost: squash systemd-tmpfiles warning (+ other minor fixes)
There was a systemd-tmpfiles warning about not being able to remove the
'plugins' directory. Squash this warning through removal of unnecessary
systemd-tmpfiles options, and write a test for it.

Add the {option}`services.mattermost.pluginsBundle` option to allow
overriding the plugin directory and also using it for tests. Update
wording in option documentation so it is more clear.

Use formats.json instead of builtins.toJSON so module merging works.

Make the tests go faster by pipelining shutdowns of nodes.
2025-04-01 19:20:48 -07:00
Felix Zieger dfd82bf3e5 nixos/strfry: init 2025-04-01 23:20:15 +02:00
Silvan Mosberger 374e6bcc40 treewide: Format all Nix files
Format all Nix files using the officially approved formatter,
making the CI check introduced in the previous commit succeed:

  nix-build ci -A fmt.check

This is the next step of the of the [implementation](https://github.com/NixOS/nixfmt/issues/153)
of the accepted [RFC 166](https://github.com/NixOS/rfcs/pull/166).

This commit will lead to merge conflicts for a number of PRs,
up to an estimated ~1100 (~33%) among the PRs with activity in the past 2
months, but that should be lower than what it would be without the previous
[partial treewide format](https://github.com/NixOS/nixpkgs/pull/322537).

Merge conflicts caused by this commit can now automatically be resolved while rebasing using the
[auto-rebase script](8616af08d9/maintainers/scripts/auto-rebase).

If you run into any problems regarding any of this, please reach out to the
[formatting team](https://nixos.org/community/teams/formatting/) by
pinging @NixOS/nix-formatting.
2025-04-01 20:10:43 +02:00