Commit graph

4270 commits

Author SHA1 Message Date
github-actions[bot] 4883735d0c
Merge staging-next into staging 2024-06-06 06:01:40 +00:00
Jonathan Davies 7d7cb3e425
doc/release-notes: 24.11: Added Quickwit item to new services. 2024-06-06 00:49:42 +01:00
github-actions[bot] 937c2fa134
Merge staging-next into staging 2024-06-05 18:01:19 +00:00
Adam C. Stephens af4ac075a3
Merge pull request #312523 from emilylange/nixos-forgejo-secrets
nixos/forgejo: refactor secrets, add `cfg.secrets`, forgejo: build `environment-to-ini`, nixos/tests/forgejo: test `cfg.secrets` using /metrics endpoint
2024-06-05 10:01:37 -04:00
github-actions[bot] d7993cebbc
Merge staging-next into staging 2024-06-05 12:01:43 +00:00
Thomas Gerbet ef6fea2d86 openssh: move Kerberos support into a dedicated package
The `openssh` and `openssh_hpn` packages are now built without
the Kerberos support by default in an effort to reduce the attack surface.

The Kerberos support is likely used only by a fraction of the total users
(I'm guessing mainly users integrating SSH in an Active Directory env) so
dropping it should not impact too many users. It should also be noted that
the Kerberos/GSSAPI auth is disabled by default in the configuration.
`opensshWithKerberos` and `openssh_hpnWithKerberos` are added in order
to provide an easy migration path for users needing this support.

The `openssh_gssapi` package is kept untouched.
2024-06-05 19:45:31 +10:00
Pol Dellaiera 133aa44c38
Merge pull request #317286 from drupol/open-webui-add-more-env
nixos/{ollama,open-webui}: minor service update
2024-06-05 09:12:28 +02:00
Pol Dellaiera 8ea262601a
nixos/open-webui: add release note entry 2024-06-05 08:05:18 +02:00
github-actions[bot] 1e2381cfc5
Merge staging-next into staging 2024-06-05 00:02:59 +00:00
emilylange ac20219508
nixos/rl-2411: add services.forgejo.secrets
and the accompanying `services.forgejo.mailerPasswordFile` deprecation.
2024-06-05 01:05:47 +02:00
kirillrdy dfee75c298
Merge pull request #309121 from jlbribeiro/pkgs/zx-8.0.2
zx: 7.2.3 -> 8.1.2
2024-06-05 06:07:55 +10:00
Arian van Putten f8439331dc doc/release-notes: Add note about backwards compatibility in ACME module
Co-authored-by: Stéphan Kochen <git@stephank.nl>
2024-06-04 20:23:30 +02:00
Thomas Gerbet 71ac0e5f22
Merge pull request #317024 from risicle/ris-zerocallusedregs-default-relnotes
nixos/doc/rl-2411: `zerocallusedregs` hardening flag enabled by default
2024-06-04 12:55:27 +02:00
José Ribeiro 6fc5c63584
doc(rl-24.11): zx v8 breaking changes 2024-06-03 22:16:55 +01:00
Robert Scott 35b3c16331 nixos/doc/rl-2411: zerocallusedregs hardening flag enabled by default 2024-06-03 22:02:18 +01:00
Sandro 617a79dd10
doc/release-notes: repalce security.pam.enableSSHAgentAuth with security.pam.sshAgentAuth.enable 2024-06-03 13:34:00 +02:00
Sandro 6f02edec1a
Merge pull request #316358 from majewsky/portunus-remove-libxcrypt-legacy 2024-06-02 23:10:26 +02:00
Vassilis Palassopoulos f41fc204d6 doc/release-notes: fix option that enables Plasma 6 2024-06-02 13:48:33 +03:00
Aleksana 5a7bf1479a
Merge pull request #316270 from wegank/release-notes-3
doc/release-notes: update info on gnome 46
2024-06-01 16:33:46 +08:00
Stefan Majewsky d11d18df30 portunus: remove libxcrypt-legacy usage 2024-06-01 10:28:21 +02:00
Silvan Mosberger 72ca766b70
Merge pull request #316207 from infinisil/release-notes-lib 2024-06-01 08:58:07 +02:00
Weijia Wang 6fd5c54452 doc/release-notes: update info on gnome 46 2024-06-01 00:05:54 +02:00
Weijia Wang d95b1060ca
Release NixOS 24.05 2024-05-31 20:17:44 +02:00
Silvan Mosberger 2906c69534 doc/release-notes: Add section on lib 2024-05-31 18:37:30 +02:00
Martin Weinelt 85cdd3a849
Merge pull request #316026 from wegank/release-notes-2
doc/release-notes: highlight desktop environment updates
2024-05-31 10:24:10 +02:00
Weijia Wang 8c58b05881 doc/release-notes: highlight desktop environment updates 2024-05-31 02:13:24 +02:00
Yt 6606ce9c0c
Merge pull request #273101 from onny/invoiceplane-settings2
nixos/invoiceplane: Remove deprecated extraConfig
2024-05-31 00:04:34 +00:00
euxane 0174aa1c56 nixos/stalwart-mail: rocksdb as default storage
This sets RocksDB as the default storage backend for `stateVersion` >=
24.11. For previous `stateVersion`s, the structured data and blobs
remain on SQLite and the filesystem respectively.

This is closer to the suggested upstream configuration for fully local
storage.
2024-05-30 16:22:03 +02:00
Someone 7781c1a927
Merge pull request #303682 from SomeoneSerge/feat/imgui-cmake
imgui: ship vcpkg' (cmake) distribution info
2024-05-29 12:48:33 +00:00
Someone Serge fdf0e19b73 imgui: mention cmake integration in release notes 2024-05-28 19:58:02 +00:00
Jacek Generowicz 9c6861249c Further tweaks to release notes 2024-05-28 17:28:29 +02:00
Jacek Generowicz 005ef76e9e Consistently use capitalized Nix in plain text 2024-05-28 17:28:29 +02:00
Jacek Generowicz 9708aca853 Various tweaks to release notes 2024-05-28 17:28:29 +02:00
Jacek Generowicz e36f83eac4 Clean up the curious dwarf-fortress note 2024-05-28 17:28:28 +02:00
Jonas Heinrich 4217b9cd9a nixos/invoiceplane: Remove deprecated extraConfig 2024-05-28 14:07:44 +02:00
Jonas Chevalier 5d6d058646
Merge pull request #308090 from mogeko/service-rke2
nixos/rke2: add rke2 service
2024-05-28 09:36:03 +02:00
Mogeko a642efcdab
nixos/rke2: add rke2 service
Set assertions to avoid obvious errors.

Eliminate the conflict between default CNI (`cana`) and `NetworkManager`.

Determine whether optional can be used for agent.

Add the option `cisHardening` to enable CIS Hardening.

Set kernel parameters by `boot.kernel.sysctl`.

Using `lib.escapeShellArgs` to make `ExecStart` more resilient to escaping issues.

Using a list of `str` to extra flags.
2024-05-28 12:39:30 +08:00
Franz Pletz e047b23254
Merge pull request #313844 from superherointj/nginx-libgd-optional 2024-05-27 02:10:55 +02:00
Maximilian Bosch a5f800ab48
Merge pull request #311701 from Ma27/bump-grafana
grafana: 10.4.2 -> 11.0.0
2024-05-26 20:47:56 +00:00
superherointj f2a202ff38 nixos/doc/rl-2411: nginx now has gd, geoip as an optional 2024-05-25 12:12:50 -03:00
Jonas Heinrich 3c80361f9a nixos/stalwart-mail: add release notes 2024-05-24 12:25:33 +02:00
Weijia Wang a64a502cd7
Merge pull request #313251 from lucc/nvimpager
nvimpager: 0.12.0 -> 0.13.0
2024-05-24 10:14:29 +02:00
Pol Dellaiera d9062cd5f9
Merge pull request #313146 from malteneuss/add-nextjs-ollama-llm-ui
Add nextjs ollama llm UI frontend for Ollama
2024-05-24 06:51:37 +02:00
Malte Neuss 8a05b4f8d4 nixos/nextjs-ollama-llm-ui: init module
NixOS already has good support for the Ollama
backend service. Now we can benefit from
having a convenient web frontend as well for it.
2024-05-23 23:48:55 +02:00
Bobby Rong e967f2f99c
Merge pull request #313416 from bobby285271/upd/pantheon-tweaks
pantheon-tweaks: 1.1.2 -> 2.0.1
2024-05-23 21:26:59 +08:00
Lucas Hoffmann eff2e77eee nvimpager: 0.12.0 -> 0.13.0 2024-05-23 14:57:33 +02:00
Jeremy Baxter 20fc095a1c nixos/oink: init module 2024-05-23 10:12:53 +12:00
Jacek Generowicz 028cc4b606
doc/release-notes: more release note edits (#313730)
* Move watchdogd to correct section

* Move FileSender to correct position

* Reword

* Add TODO querying meaning of dwarf-fortress note

* Remove comments suggesting random item placement

* Add comments asking to maintain alphabetical order
2024-05-22 18:57:12 +02:00
Weijia Wang f7da007372 doc/release-notes: update codename 2024-05-22 18:48:39 +02:00
Weijia Wang 4a817d2083 24.05 is Vicuña 2024-05-22 18:15:34 +02:00