tobias/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-11-11 18:23:18 +01:00
Code Issues Packages Projects Releases Wiki Activity
494951 commits 199 branches 129 tags 14 GiB
Commit graph

15965 commits

Author SHA1 Message Date
Anand Suresh aa884b8f3d
improve documentation for nix.settings.sandbox (#188541) 
* add information on the "relaxed" setting in `nix.settings.sandbox`
 2023-06-06 10:32:26 +02:00
Pol Dellaiera cc47c2189f
Merge pull request #220068 from h7x4/hedgedoc-allow-nullable-client-secret 
nixos/hedgedoc: allow `clientSecret` to be null
 2023-06-05 21:54:02 +02:00
Tom Hubrecht 953ee5df82 nixos/pixelfed: Fix missing permissions for nginx serving files 
Also fixes the service `pixelfed-cron` StateDirectory and uses the nginx user instead of group to define nginx appartenance to pixelfed's group
 2023-06-05 20:49:16 +02:00
pacien 54be076ae7 nixos/exim: apply privilege restrictions 
Since 816614bd62, the service is set to use the exim user so that
systemd takes care of the credentials ownership. The executable is
still required to run as root, to then drop privileges. The prefix '+'
that was used however interfers with the use of privilege restrictions
and other sandboxing options. Since we only want to escape the "User"
setting, we can use the '!' prefix instead.
 2023-06-05 20:04:48 +02:00
Sandro 048f167595
Merge pull request #233423 from tomaskala/self-deploy-after-network-online 
nixos/self-deploy: set after to requires, type to oneshot and remove wantedBy
 2023-06-05 19:47:10 +02:00
misuzu 45ffb33514 nixos/gotosocial: init 
Co-authored-by: Peder Bergebakken Sundt <pbsds@hotmail.com>
 2023-06-05 09:07:34 +03:00
Sandro 793dd34507
Merge pull request #219602 from 999eagle/traefik-envsubst 
nixos/traefik: add environmentFiles option
 2023-06-05 00:36:43 +02:00
Julien Moutinho b6ed3b8f40 nixos/public-inbox: explicit a few more freeform settings 2023-06-04 13:09:28 +00:00
Tom Siewert 50d66bcba6
nixos/gitlab: Fix config reference for registry (#235639) 
Support for gitlab-container-registry has been added in 014816cbe4.
However, when enabling the registry it will throw an error as it can't
find a `package` attribute.

This commit fixes the registry configuration by adding the missing
`registry` part.
 2023-06-04 02:32:35 +02:00
Jan Tojnar b575d76ce1 nixos/gdm: Do not require GTK for account-service-util 2023-06-03 17:31:15 +02:00
happysalada ba3d0f7a95 nixos/gitea: requires database 2023-06-03 05:14:46 -04:00
Bruno Adelé 0498957eac
nixos/smokeping: Fix smokeping preStart systemd 2023-06-03 08:06:18 +02:00
Gabriel Fontes dff2e184f4 nixos/prometheus.exporters.graphite: init 2023-06-03 03:13:09 +00:00
Gabriel Fontes 147668b8cf nixos/sitespeed-io: init 2023-06-03 03:12:51 +00:00
happysalada ee1c6053fb nixos/ntfy-sh: use dynamic user and add defaults 2023-06-02 15:22:14 -04:00
Linus Heckemann 15c3a653d5
Merge pull request #235440 from lheckemann/garage 
nixos/garage: allow unsafe replication modes, restart on config change
 2023-06-02 19:22:03 +02:00
Linus Heckemann c4f727c944 nixos/garage: allow unsafe replication modes, restart on config change 2023-06-02 18:11:44 +02:00
K900 e534047e2d
Merge pull request #234620 from linj-fork/fix/murmur-after 
nixos/murmur: make it be after network.target again
 2023-06-02 18:13:12 +03:00
Ryan Lahfa 4a4238a840
Merge pull request #235143 from wlcx/patch-1 
nixos/pixelfed: fix broken try_files
 2023-06-02 17:12:14 +02:00
Bobby Rong 7f96a08418
Merge pull request #235511 from bobby285271/upd/cinnamon-bpo 
Cinnamon updates 2023-06-02
 2023-06-02 21:25:34 +08:00
Bobby Rong 68dd259958
Merge pull request #235514 from bobby285271/upd/pantheon 
Pantheon updates 2023-06-02
 2023-06-02 20:36:02 +08:00
Bobby Rong e447cb9776
nixos/pantheon: enable xdg-desktop-portal-gtk by default 2023-06-02 19:29:26 +08:00
Bobby Rong 7cf3428fd5
nixos/cinnamon: fix slick-greeter icon theme package default 2023-06-02 11:40:09 +08:00
Nick Cao 9e2fa20321
Merge pull request #235425 from 999eagle/fix/nitter 
nixos/nitter: fix proxy option
 2023-06-01 20:26:54 -06:00
Sophie Tauchert 2dbd1e56c1
nixos/nitter: fix proxy option 2023-06-01 19:59:48 +02:00
Doron Behar 5b6c95c4cb nixos/nextcloud: Mention that adminpassFile is only used on startup 2023-06-01 15:43:51 +03:00
Pol Dellaiera 3090855141
Merge pull request #232360 from drupol/nixos/refactor-code-server 
nixos/code-server: add tests and more command line options
 2023-06-01 13:56:01 +02:00
Yaya e9594e6031 nixos/gitlab: Warn users who are still using an external registry 
This adds a warning for GitLab >=16.0.0 users who are still using an
external container registry such as `pkgs.docker-distribution`. Support
for external container registries has ended in GitLab 16.0 [1] and is
scheduled for removal in a future release. [2]

[1]: https://gitlab.com/gitlab-org/gitlab/-/issues/376217
[2]: https://gitlab.com/gitlab-org/gitlab/-/issues/403322
 2023-05-31 22:14:25 +02:00
Yaya 014816cbe4 nixos/gitlab: Add support for gitlab-container-registry 
Support for external container registries (namely
`pkgs.docker-distribution`) has ended in GitLab 16.0 [1] and is
scheduled for removal in a future release. [2]

This commit adds a new registry package option, defaulting to
`pkgs.docker-distribution` and `pkgs.gitlab-container-registry` for
system state versions >= 23.11.

While it is still possible to use the docker container registry, module
users should switch to gitlab's container registry fork soon. A warning
message will be added in a future commit to advise affected users to
back up their state and then switch to the new container registry
package.

[1]: https://gitlab.com/gitlab-org/gitlab/-/issues/376217
[2]: https://gitlab.com/gitlab-org/gitlab/-/issues/403322
 2023-05-31 22:14:25 +02:00
Yaya 049d680510 nixos/dockerRegistry: add package option 
This allows the module user to select an alternative container registry
package such as `pkgs.gitlab-container-registry` for GitLab users.
 2023-05-31 22:14:25 +02:00
Yaya 2a4536952a nixos/gitlab: Require at least postgresql 13.6 
https://docs.gitlab.com/16.0/ee/install/requirements.html#postgresql-requirements
 2023-05-31 22:14:25 +02:00
Yaya 4321e48b68 nixos/gitlab: Remove procps from gitaly service 
From my understanding, procps was added to the gitlay systemd service
path in #58487 to fix gitaly-ruby's internal memory leak detection.

Now that the last ruby remnants have been removed in gitaly 16.0.0,
this should not be necessary anymore.
 2023-05-31 22:14:25 +02:00
Yaya 33411f2768 nixos/gitlab: Update redis configuration 
Configuring Redis via environment variable is not supported anymore
since [1].

[1] 1242965361
 2023-05-31 22:14:25 +02:00
Yaya 6fed71cab2 gitaly: Remove ruby dependencies 
Ruby dependencies in gitaly have been removed in the 16.0.0 release. [1]

See GitLab Epic &2862 [2] for more info.

[1]: 689556e70a
[2]: https://gitlab.com/groups/gitlab-org/-/epics/2862
 2023-05-31 22:14:25 +02:00
Kira Bruneau 7e820610e3
Merge pull request #234207 from emilylange/acme-dns 
acme-dns: init at 1.0; nixos/acme-dns: init; nixos/acme-dns: init
 2023-05-31 11:40:35 -04:00
emilylange d0af39521b
nixos/acme-dns: init 2023-05-31 15:08:37 +02:00
r-vdp 2b63df0a03 modules/sshd: print the offending keys when we detect duplicate sshd keys. 2023-05-31 12:07:06 +02:00
Sam W 6ad72aa37e
nixos/pixelfed: fix broken try_files 
Add missing $ to try files directive. This fixes pixelfed federation and search, amongst presumably many other things!
 2023-05-31 15:19:23 +08:00
Aaron Andersen d098eec2da nixos/vmalert: init 2023-05-30 07:41:00 -04:00
Jonas Heinrich 63f73b3295
nixos/maddy: change secrets option to accept a list of paths 2023-05-30 12:41:07 +08:00
3JlOy_PYCCKUI 22c8251d7f nixos/dk: init 2023-05-29 19:05:55 +00:00
Julien Malka 9631553153 Revert "nixos/ntfy-sh: add defaults, use dynamic user" 
This reverts commit 3dcca62a5e.
 2023-05-29 11:11:32 -04:00
Weijia Wang 4387329d8f
Merge pull request #234729 from tie/pufferpanel-doc-fhsenv 
nixos/pufferpanel: buildFHSUserEnv -> buildFHSEnv
 2023-05-29 10:56:11 +03:00
Ivan Trubach 0143b16935 nixos/pufferpanel: buildFHSUserEnv -> buildFHSEnv 
The pufferpanel module (#225274) was merged shortly after the tree-wide
rename f63a12f296 (#225748), so the use of
deperecated buildFHSUserEnv in the docs slipped through review 😅
 2023-05-29 07:08:19 +03:00
happysalada 3dcca62a5e nixos/ntfy-sh: add defaults, use dynamic user 2023-05-28 21:17:14 -04:00
Lin Jian 0ae9df6c5e
nixos/murmur: make it be after network.target again 
network.target was changed to network-online.target in this PR[1] to
workaround an issue[2].

The murmur version in Nixpkgs has fixed that issue[2].

[1]: https://github.com/NixOS/nixpkgs/pull/42860
[2]: https://github.com/mumble-voip/mumble/issues/1629
 2023-05-28 21:03:40 +08:00
Bobby Rong 838dad5de9
Merge pull request #234231 from bobby285271/add/xdg-desktop-portal-xapp 
xdg-desktop-portal-xapp: init at 1.0.0
 2023-05-28 10:52:30 +08:00
Thomas Gerbet a24848c470 nixos/etcd: allow to choose the package 2023-05-28 08:04:43 +10:00
Victor Freire 77520d39ce nixos/legit: init 2023-05-27 16:20:05 +00:00
Nick Cao cf58ff13a3
Merge pull request #234254 from kevincox/mautrix-facebook-appservice-id 
nixos.mautrix-facebook: Fix appservice name
 2023-05-26 19:48:00 -06:00
Raito Bezarius 69bb0f94de nixos/nginx: first-class PROXY protocol support 
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.

Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.

It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.

An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.

Finally, the tests covers:

- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
  (sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;

In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.

For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
 2023-05-26 19:48:26 +02:00
Kevin Cox 5242aea64f
nixos.mautrix-facebook: Fix appservice name 
It appears that newer mautrix-facebook versions default to the appservice name `facebook`. This was breaking our registration and causing mautrix-facebook to fail to start. This changes the name back and makes the registration generated match whatever the setting in the app is.
 2023-05-26 12:39:37 -04:00
Bobby Rong 36abd7c9f8
nixos/cinnamon: enable portals by default 2023-05-26 23:53:15 +08:00
Pol Dellaiera 2c95ebadf3
nixos/code-server: add more command line options 2023-05-26 09:51:33 +02:00
Yaya f63f781063 nixos/sftpgo: init 
A fully featured and highly configurable SFTP server with optional
HTTP/S, FTP/S and WebDAV support.

https://github.com/drakkan/sftpgo
 2023-05-25 22:46:15 +02:00
Sandro ef2a17c946
Merge pull request #232339 from bl1nk/bl1nk/thelounge-package-option 
nixos/thelounge: add package option
 2023-05-25 22:04:22 +02:00
Sandro 1b40315504
Merge pull request #233092 from midchildan/chore/mirakurun/node18 2023-05-25 14:47:50 +02:00
nyanotech 3aad03a464 nixos/sshd: detect duplicate config keys 2023-05-25 00:01:03 +02:00
midchildan c3346f87c4
mirakurun: use node 18 
Relates to #229910.
 2023-05-25 03:44:13 +09:00
Maximilian Bosch 40dcc3375c
Merge pull request #232837 from emilylange/nixos/synapse 
nixos/synapse: allow omitting `trusted_key_servers[].verify_keys`
 2023-05-24 16:28:03 +02:00
Tomas Kala 37c95bc868
nixos/self-deploy: set after to requires, type to 
... oneshot, remove wantedBy
 2023-05-24 14:05:17 +02:00
Ryan Lahfa 078d3ebcaa
Merge pull request #232235 from cyberus-technology/outline-0.69.2 
outline: 0.68.1 -> 0.69.2
 2023-05-23 15:14:18 +02:00
Robert Hensing 983bf78c16
Merge pull request #233397 from Kranzes/hci-module 
nixos/hercules-ci-agent: sync module with upstream
 2023-05-23 14:17:28 +02:00
Alexander Sieg 74bc42615c
outline: 0.68.1 -> 0.69.2 2023-05-23 10:44:02 +02:00
Maximilian Bosch c0bbecef87
Merge pull request #232276 from LeSuisse/broken-php80-packages 
grocy, limesurvey: mark as broken due to lack of PHP 8.1 compatibility
 2023-05-23 07:19:17 +02:00
Sandro 493c6d8505
Merge pull request #233053 from midchildan/chore/epgstation/node18 
epgstation: use node18 + other fixes
 2023-05-23 01:48:26 +02:00
0x4A6F afad0c152b
Merge pull request #214428 from mweinelt/frigate-init 
frigate: init at 0.12.0
 2023-05-22 18:29:37 +02:00
Ryan Lahfa 2e1e1f8765
Merge pull request #231502 from SuperSandro2000/portunus-openldap 
nixos/portunus: use openldap compiled with libxcrypt-legacy
 2023-05-22 18:20:52 +02:00
Naïm Favier 7b28ea6783
Merge pull request #233377 from ncfavier/revert-226088 
Revert "nixos/syncthing: use rfc42 style settings"
 2023-05-22 16:35:04 +02:00
Martin Weinelt f11d33afb7
nixos/frigate: init 2023-05-22 16:29:54 +02:00
Martin Weinelt 958fc81472
Merge pull request #216786 from mweinelt/go2rtc 
go2rtc: init at 1.5.0
 2023-05-22 16:00:54 +02:00
Ilan Joselevich ebafd551d7
nixos/hercules-ci-agent: sync module with upstream 2023-05-22 15:05:16 +03:00
Naïm Favier d5e090d2d8
Revert "nixos/syncthing: use rfc42 style settings" 
This reverts commit 32866f8d58.
This reverts commit 40a2df0fb0.
This reverts commit 4762932601.
 2023-05-22 10:29:52 +02:00
Ryan Lahfa 0e662e669a
Merge pull request #227642 from Flakebi/powerdns-admin2 
powerdns-admin: 0.3.0 -> 0.4.1
 2023-05-22 09:30:24 +02:00
Martin Weinelt eae2018b54
nixos/go2rtc: init 2023-05-22 03:48:47 +02:00
Flakebi 1a13b4c0f9
powerdns-admin: 0.3.0 -> 0.4.1 
- Fix with flask-migrate 4+
- Update to 0.4.1
- Improve the test to check that using the database works
 2023-05-22 00:39:58 +02:00
midchildan 94eb60a7d2
nixos/epgstation: add a new option 'ffmpeg' 
Closes #187120.
 2023-05-22 05:24:19 +09:00
midchildan 059006b84b
nixos/epgstation: add required directories to tmpfiles.d 2023-05-22 05:24:18 +09:00
Aaron Andersen 9889d76032
Merge pull request #232607 from plumelo/feat/redmine-5 
redmine: 4.2.10 -> 5.0.5
 2023-05-21 14:33:01 -04:00
Sandro Jäckel 0000000324
nixos/portunus: use openldap compiled with libxcrypt-legacy 
It hardcodes sha256 crypt and the managed slapd crash loops otherwise.
 2023-05-21 18:54:56 +02:00
Sandro a74a4a2f32
Merge pull request #232534 from teutat3s/zhf/fix-prometheus-exporter-jitsi 
jitsi-videobridge: refactor broken `apis` option to `colibriRestApi`
 2023-05-21 18:43:59 +02:00
Sandro 59cb287790
Merge pull request #231260 from Luflosi/update/kubo 
kubo: 0.19.2 -> 0.20.0
 2023-05-21 17:15:22 +02:00
pennae 727086540f
Merge pull request #233238 from emilylange/username-change 
maintainers: rename indeednotjames to emilylange
 2023-05-21 17:07:05 +02:00
Sandro b34c560d19
Merge pull request #186582 from midchildan/fix/epgstation-var-empty 
nixos/epgstation: fix startup issue
 2023-05-21 16:57:54 +02:00
emilylange b0e7f7f5db
maintainers: rename indeednotjames to emilylange 2023-05-21 16:01:35 +02:00
teutat3s cb81bd9340
jitsi-videobridge: refactor broken apis option to 
colibriRestApi

Refactor option to use jvb.conf and convert to boolean. Using the CLI
argument broke a while ago and is deprecated by upstream since 2021:
https://github.com/jitsi/jitsi-videobridge/pull/1738/files#diff-d9f589d2aae1673693461d7c3b9214324201ca1f43db63a3c773d4acfc52bc81

This fixes the currently broken test:
nixosTests.prometheus-exporters.jitsi
 2023-05-21 15:31:14 +02:00
figsoda 701bcdbead nixos: fix typos 2023-05-19 22:31:04 -04:00
IndeedNotJames d212ec13b8
nixos/synapse: allow omitting trusted_key_servers[].verify_keys 
Synapse does not require the `verify_keys` attr/object to be set.
It made sense back in the day, when federation traffic used to use self-signed certificates. But this is no longer the case.

The previous `types.nullOr` didn't actually allow omitting `verify_keys` because Synapse's config parser is unable to parse that.

Not a breaking change.

Upstream docs: https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html?highlight=verify_keys#trusted_key_servers
 2023-05-19 15:46:53 +02:00
Alyssa Ross 7ddca49451 nixos/mailman: set RemainAfterExit for settings 
This seems to be required to have the unit re-run if
services.mailman.restApiPassFile gets set.
 2023-05-19 12:03:41 +02:00
Alyssa Ross 43465c94d4 nixos/mailman: randomly generate REST API token 2023-05-19 12:03:41 +02:00
Yureka 97c8817371
nixos/clickhouse: Notify systemd about successful startup (#232443) 
https://github.com/ClickHouse/ClickHouse/pull/43400
https://github.com/ClickHouse/ClickHouse/pull/46613
 2023-05-19 00:24:20 +02:00
Sandro 58f987450c
Merge pull request #226116 from erdnaxe/nitter-update-module 
nixos/nitter: update module options
 2023-05-18 23:45:39 +02:00
Naïm Favier 84f249a0c4
Merge pull request #232582 from Lassulus/syncthing-folder-fix 
nixos/syncthing: fix disabled folders
 2023-05-18 22:19:36 +02:00
Lily Foster 3e014434a7
Merge pull request #230876 from purin-aurelia/nixos-openrgb-fix 
nixos/openrgb: fix data dir & amd i2c
 2023-05-18 15:00:13 -04:00
Meghea Iulian eb222f0f97
redmine: upgrade start command 2023-05-18 14:35:38 +03:00
K900 b451cc7668 nixos/libinput: only enable when X11 is enabled 2023-05-18 13:58:18 +03:00
lassulus 4762932601 nixos/syncthing: fix disabled folders 2023-05-18 11:06:57 +02:00
Martin Weinelt a919e81dbf
Merge pull request #231512 from n0emis/zammad-5.4.1 
zammad: 5.1.1 -> 5.4.1
 2023-05-17 18:36:29 +02:00
Markus Cisler a0b7802372 nixos/thelounge: add package option 
Adds a package option to the thelounge NixOS module.
 2023-05-17 08:34:18 -07:00
Naïm Favier 40a2df0fb0
nixos/syncthing: fixup #226088 2023-05-17 16:53:01 +02:00