Commit graph

15965 commits

Author SHA1 Message Date
Federico Damián Schonborn 8e01b9d98c
nixos/budgie: Update description for sessionPath, add example for extraPlugins
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-05-11 21:35:27 -03:00
Martin Weinelt 3c09f66193
Merge pull request #231096 from kai-tub/vector/add-pkg-opt
vector: add `package` Option
2023-05-11 22:10:20 +02:00
Robert Hensing 2e2f0d28ea nixos: Use checks instead of extraDependencies
... as appropriate.

This drops a few unnecessary store paths from the system closure.
2023-05-11 21:18:38 +02:00
Kai Norman Clasen 8989ea2778 nixos/vector: add package Option 2023-05-11 19:44:50 +02:00
K900 9fec1a09bd nixos/x11/hardware/libinput: enable by default
Basically everything Wayland uses this, it's much more actively
maintained than xf86-input-evdev, and we should really be shipping
it by default.
2023-05-11 16:49:10 +03:00
Martin Weinelt 537d611a75 nixos/sshd: Remove algorithms that do MAC-then-encrypt
Algorithms with the -etm suffix calculate the MAC after encryption,
which is generally considered safer.
2023-05-11 12:54:32 +02:00
ajs124 fbfa1ec989
Merge pull request #231190 from aanderse/nixos/automysqlbackup
nixos/automysqlbackup: add some missing permissions
2023-05-11 12:47:39 +02:00
Aaron Andersen 55b3b7029d nixos/automysqlbackup: rename config option to settings 2023-05-10 20:00:09 -04:00
Aaron Andersen a73e7383c0 nixos/automysqlbackup: add some missing permissions 2023-05-10 19:57:48 -04:00
Ilan Joselevich 7ecf20b490
nixos/harmonia: adjust module and test to upstream 2023-05-10 22:28:03 +03:00
Luflosi ada7f14219
kubo: 0.19.2 -> 0.20.0
https://github.com/ipfs/kubo/releases/tag/v0.20.0

When creating a repository with `ipfs init`, `--empty-repo=true` is now the default according to the changelog. Modify the NixOS module to reflect this change and fix the `emptyRepo` setting to work with this change.
2023-05-10 19:50:46 +02:00
Sandro 84b4373d8c
Merge pull request #230550 from Mic92/harmonia 2023-05-10 16:55:06 +02:00
happysalada 47bedc81f8 uptime-kuma: add defaults for simpler initial setup 2023-05-10 09:54:56 -04:00
Jörg Thalheim 76ffeaf06c nixos/harmonia: init service 2023-05-10 14:52:31 +02:00
Sandro 7b22f5b4a2
Merge pull request #215494 from poelzi/webdav-server-rs-debug 2023-05-10 14:29:26 +02:00
asonix cb2941db79 pict-rs: 0.3.0-alpha.37 -> 0.3.3 2023-05-09 15:24:54 -04:00
Weijia Wang 419d7f9c8d
Merge pull request #230753 from fetsorn/typos
several typos
2023-05-09 19:16:12 +03:00
Sandro d199137345
Merge pull request #230560 from legendofmiracles/upddate-nodjs-asf 2023-05-09 16:58:52 +02:00
fetsorn 1a4e993104 nixos/prometheus: fix typo
"nixpgs" -> "nixpkgs"
2023-05-09 18:02:17 +04:00
fetsorn f035683f55 nixos/matomo: fix typo
"suported" -> "supported"
2023-05-09 18:02:17 +04:00
fetsorn d1398dd05c nixos/deluge: fix typo
"secuerly" -> "securely"
2023-05-09 18:02:17 +04:00
purin 9595113480 nixos/openrgb: fix data dir & amd i2c 2023-05-10 01:34:21 +12:00
Martin Weinelt 35a73717df
Merge pull request #218599 from Izorkin/update-peertube
peertube: 5.0.0 -> 5.1.0
2023-05-09 14:37:44 +02:00
lom ea1cef8c00 ArchiSteamFarm.ui: use buildNpmPackage 2023-05-08 20:34:21 -04:00
Aaron Andersen cf0327810b
Merge pull request #207093 from ymarkus/alertmanager
nixos/alertmanager: add checkConfig option
2023-05-08 20:15:17 -04:00
Izorkin 1afcb4c6ef
nixos/peertube: update nginx configuration 2023-05-08 23:49:03 +03:00
Izorkin 8d76c0b6fb
peertube: 5.0.0 -> 5.1.0 2023-05-08 23:48:32 +03:00
Raito Bezarius 16658f7634 nixos/netdata: introduce deadlineBeforeStopSec
Previously, we hardcoded a 60 second timer to stop netdata if we didn't have any answer back.
This is wrong and can cause data loss because the SIGTERM sent by systemd can sometimes be not honored.
Which in turn becomes a SIGKILL, causing potential data loss / corruption.

Offer a flag to users and bump the deadline to 2 minutes.
2023-05-08 19:29:13 +02:00
Sandro 6197953fb6
Merge pull request #207106 from autrimpo/gonic-module
nixos/gonic: init
2023-05-08 01:28:24 +02:00
Michal Koutenský 8118e3de43 nixos/gonic: init 2023-05-07 22:43:23 +02:00
Bernardo Meurer 3cf3f4395a
Merge pull request #230449 from lovesegfault/mainsail-module 2023-05-07 11:49:59 -04:00
Naïm Favier 0767f800e0
Merge pull request #224688 from Izorkin/add-nginx-upstream-timeout
nixos/nginx: allow arbitrary parameters in upstream servers
2023-05-07 11:43:39 +02:00
Izorkin 2809915f19
nixos/nginx: allow arbitrary parameters in upstream servers
Adds a `freeformType` to `services.nginx.upstreams.<name>.servers` to
allow setting arbitrary parameters.
2023-05-07 11:17:49 +02:00
Bernardo Meurer 4804f7a09b
nixos/mainsail: init 2023-05-07 01:41:03 -04:00
Martin Weinelt f4ca022023
Merge pull request #229999 from ambroisie/update-tandoor-recipes
tandoor-recipes: 1.4.4 -> 1.4.9
2023-05-06 21:58:04 +02:00
Jonas Chevalier d3ff0e4114
Merge pull request #229111 from zimbatm/cloud-init-settings
cloud-init module: adopt the settings format
2023-05-06 21:34:11 +02:00
Gabriel Fontes 16b3b0c53b nixos/tests/kavita: init 2023-05-06 13:57:53 -03:00
Gabriel Fontes e2854d332d nixos/kavita: init 2023-05-06 13:57:53 -03:00
Martin Weinelt 1c963cea48
nixos/gitea-actions-runner: init 2023-05-06 17:34:15 +02:00
Bruno BELANYI 9650310348 nixos/tandoor-recipes: disable debug toolbar 2023-05-06 14:22:17 +01:00
Bruno Adelé 7af8ace239
nixos/smokeping: Format smokeping source code 2023-05-05 22:46:30 +02:00
Pierre Bourdon 2ddbabec4d
nixos/xserver: fix xserver.conf reproducibility (sort ModulePath entries) 2023-05-05 22:33:09 +02:00
Emily Lange 549bee9851
nixos/grafana-agent: add extraFlags option (#228883) 2023-05-05 15:14:41 +02:00
Martin Weinelt 6d934088ea
nixos/home-assistant: update bluetooth components 2023-05-04 07:33:32 +02:00
Sandro Jäckel da15c5054e
nixos/nextcloud-notify_push: add bendDomainToLocalhost 2023-05-03 22:41:23 +02:00
Sandro Jäckel 546d4d4b76
nixos/nextcloud: add configureRedis option 2023-05-03 22:40:41 +02:00
pennae aad25290ee nixos/emacs: restore example markup
these examples were turned into untitle anchors previously because at
the time supporting examples was not deemed necessary or useful. now
that we have them we can restore them though.
2023-05-03 19:58:21 +02:00
Michael Livshin 11b851718e system76-scheduler: don't enable unconditionally
Oops :(
2023-05-03 10:34:32 +03:00
Izorkin edb40b3e4f nixos/fail2ban: others small update 2023-05-03 08:45:26 +02:00
Izorkin 544ebba973 nixos/fail2ban: update bantime options 2023-05-03 08:45:26 +02:00
Bernardo Meurer b04b3345f1
Merge pull request #195082 from cmm/system76-scheduler 2023-05-02 09:25:05 -07:00
Artturi 2d256ca7c2
Merge pull request #227499 from tollb/w20230421d_use_systemd_hwdb_to_build_udev_hwdb 2023-05-02 19:04:06 +03:00
Robert Hensing c4793e85f1
Merge pull request #229427 from Mic92/hercules-ci-agent
nixos/hercules-ci-agent: increase stack limit
2023-05-02 13:42:42 +02:00
Michael Livshin 549fd53520 system76-scheduler: add config module 2023-05-02 13:43:36 +03:00
Martin Weinelt 826418fc35
Merge pull request #227990 from Mic92/mediawiki-webserver
nixos/mediawiki: make apache2 optional
2023-05-02 12:39:10 +02:00
Jörg Thalheim 301d6bb9c2 nixos/hercules-ci-agent: increase stack limit
see https://github.com/hercules-ci/hercules-ci-agent/pull/451 for context
2023-05-02 09:53:41 +02:00
Jonas Heinrich d932d6929b
Merge pull request #227401 from onny/maddytls2
nixos/maddy: Add tls option
2023-05-02 07:32:56 +02:00
Sandro 7b02d16807
Merge pull request #227973 from tensor5/nixos/nextcloud--fix-notify_push-configuration-parse-error 2023-05-02 01:05:02 +02:00
figsoda ed153ccbfd
Merge pull request #229209 from Misterio77/navidrome-cfg-package
nixos/navidrome: add package option
2023-05-01 18:31:34 -04:00
Gabriel Fontes 1c3c2c8203
nixos/navidrome: add package option 2023-05-01 16:29:17 -03:00
Jörg Thalheim 077e950f7a nixos/mediawiki: also test fcgi socket 2023-05-01 20:51:11 +02:00
Jörg Thalheim d309952a5d nixos/mediawiki: make apache optional 2023-05-01 20:51:11 +02:00
Jonas Heinrich fcf6662fb5
Merge pull request #229159 from Misterio77/refactor-nextcloud-createlocally
nixos/nextcloud: refactor database.createLocally
2023-05-01 20:04:20 +02:00
Jonas Heinrich 616ba4ae5c nixos/maddy: Add tls option 2023-05-01 19:12:26 +02:00
Gabriel Fontes fddf531c6f
nixos/nextcloud: refactor database.createLocally
Fixes https://github.com/NixOS/nixpkgs/issues/228971
2023-05-01 12:20:40 -03:00
Matthieu Coudron 7fe4909bee
services.datadog: remove python2 from systemd service (#228312)
which caused a security warning. seems to work without it so let's ditch it
2023-05-01 16:37:34 +02:00
Nick Cao cb6c1de07d
Merge pull request #229138 from exzombie/fix/fstrim-interval
nixos/fstrim: fix overriding the timer interval
2023-05-01 17:23:36 +08:00
K900 5c95114a2f
Merge pull request #228951 from aacebedo/aacebedo/asusctl_4.6.2
asusctl: 4.5.8 -> 4.6.2
2023-05-01 12:08:37 +03:00
Alexandre Acebedo 576d7d34c4 asusctl: 4.5.8 -> 4.6.2 2023-05-01 11:07:39 +02:00
Weijia Wang b87aa62298
Merge pull request #227936 from wineee/dde
nixos/deepin: init
2023-05-01 08:38:45 +03:00
Kira Bruneau 50200de3f4
Merge pull request #216230 from tcheronneau/master
nixos/{consul-template,vault-agent}: init
2023-04-30 13:53:57 -04:00
gaykitty 3056e9c395 nixos/stargazer: remove with lib 2023-04-30 13:05:34 -03:00
gaykitty d4f3dd4f71 nixos/stargazer: fix route ordering 2023-04-30 13:05:34 -03:00
Jure Varlec 44438e0dcd nixos/fstrim: fix overriding the timer interval
The OnCalendar systemd setting is additive. To clear the setting defined
by the pre-existing unit file, it has to be set first to an empty
string, then to the desired value.
2023-04-30 17:36:49 +02:00
zimbatm 406a6dfa26 cloud-init module: adopt the settings format
This makes it easier to for example set `datasource_list = [ "Vultr" ];`
so that cloud-init doesn't scan trough all of the datasources when you
know on which target the system is going to be deployed.

Previously, one had to copy-paste the default config and adapt it.
2023-04-30 15:08:10 +02:00
zimbatm 4a1fd4afe0 cloud-init module: remove superfluous lib. prefixes 2023-04-30 14:59:16 +02:00
zimbatm de8b1cf647 cloud-init module: format with nixpkgs-fmt 2023-04-30 14:58:29 +02:00
Nick Cao 1acfbbb2e7
Merge pull request #125865 from eliasp/restic-private-tmp
nixos/restic: use private tmp for service unit
2023-04-30 20:37:07 +08:00
Maximilian Bosch 5c9977a524
Merge pull request #224891 from KFearsoff/fix-grafana-assertions-in-yaml
nixos/grafana: fix assertions leaking into YAML
2023-04-30 11:39:48 +02:00
Elias Probst 3bd1c64a5b
nixos/restic: use private tmp for service unit
To reduce the danger of accidentally exposing sensitive files processed
by a restic backup to other services/users, enable the `PrivateTmp=`
feature of restic service units, which provides a per service isolation
of `/tmp` and `/var/tmp`.

Co-authored-by: Daniel Nagy <danielnagy@posteo.de>
2023-04-30 10:39:29 +02:00
Sandro 5d0d352833
Merge pull request #220761 from elesiuta/picosnitch-init 2023-04-30 01:52:10 +02:00
Weijia Wang acb0a2c266
Merge pull request #228225 from LeSuisse/strongswan-5.9.10
strongswan: 5.9.8 -> 5.9.10
2023-04-29 23:08:09 +03:00
Kira Bruneau f81a619c91
Merge pull request #227916 from IndeedNotJames/lldap
lldap: init at 0.4.3; nixos/lldap: init; nixosTests.lldap: init
2023-04-29 15:24:12 -04:00
IndeedNotJames 87ccd1a47b
nixos/lldap: init
Co-authored-by: LongerHV <46924944+LongerHV@users.noreply.github.com>
2023-04-29 21:14:25 +02:00
rewine d55808c2c0
nixos/deepin: init 2023-04-29 22:36:18 +08:00
rewine dba20db482
nixos/deepin/app-services: init 2023-04-29 22:29:02 +08:00
rewine 7a6edd6448
nixos/deepin/dde-api: init 2023-04-29 22:29:01 +08:00
rewine a112e1e8ce
nixos/deepin/dde-daemon: init 2023-04-29 22:29:01 +08:00
Maciej Krüger 67283e1d3a
Merge pull request #228721 from cmm/fix/auto-cpufreq
auto-cpufreq: actually run as deamon
2023-04-29 04:42:10 +02:00
Kira Bruneau d3ccbe1e55
Merge pull request #228716 from IndeedNotJames/discourse
discourse: 3.1.0.beta2 -> 3.1.0.beta4, discourseAllPlugins: update all
2023-04-28 19:32:16 -04:00
happysalada 2909d9b117 vector: 0.28.1 -> 0.29.1 2023-04-28 18:58:41 -04:00
Michael Livshin ed01157da8 auto-cpufreq: actually run as deamon
The upstream service definition uses the (undocumented) --daemon
option, which causes the process to stay running and not exit
immediately.
2023-04-28 14:36:10 +03:00
IndeedNotJames f88be46556
discourse: 3.1.0.beta2 -> 3.1.0.beta4
https://meta.discourse.org/t/3-1-0-beta4-new-notifications-menu-chat-and-sidebar-improvements-security-fixes-and-more/262044
https://meta.discourse.org/t/3-1-0-beta3-search-optimizations-resizable-chat-drawer-new-api-scopes-and-more/258274
diff: https://github.com/discourse/discourse/compare/v3.1.0.beta2..v3.1.0.beta4
2023-04-28 12:14:58 +02:00
sandydoo 2086b377cf
nixos/nginx: serve the status page on localhost servers
The status page is inaccessible by default, unless a virtual host is
added with a `server_name` that's not `localhost`.

This commit moves the status page configuration, so that
it's matched before the main server blocks.
2023-04-28 07:20:36 +00:00
Thomas Gerbet 796121dc9b tt-rss: unstable-2022-10-15 -> unstable-2023-04-13, module use PHP 8.1
Upstream Docker images also uses PHP 8.1.

Diff:
https://git.tt-rss.org/fox/tt-rss.git/diff/?id=0578bf802571781a0a7e3debbbec66437a7d28b4&id2=602e8684258062937d7f554ab7889e8e02318c96
2023-04-27 11:46:38 +02:00
Bobby Rong a7eb77e921
Merge pull request #228428 from FedericoSchonborn/budgie-desktop-10.7.2
budgie.budgie-desktop: 10.7.1 -> 10.7.2
2023-04-27 10:30:01 +08:00
Federico Damián Schonborn e96baa117a
nixos/budgie: Add Zenity
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-26 20:54:18 -03:00
Colin 855cff92e0 nixos/lemmy: fix documentation links 2023-04-26 18:29:53 -04:00
Jonas Heinrich 8ab44af90f
Merge pull request #226141 from e1mo/dokuwiki-23-05
nixos/dokuwiki: Finally remove extraConfig
2023-04-26 22:23:12 +02:00
Bobby Rong d9293111a9
Merge pull request #227526 from FedericoSchonborn/more-budgie
budgie: add plugin support, update default settings
2023-04-26 11:11:24 +08:00
Thomas Gerbet b4e503a783 strongswan: 5.9.8 -> 5.9.10
Fixes CVE-2023-26463: https://www.strongswan.org/blog/2023/03/02/strongswan-vulnerability-%28cve-2023-26463%29.html

Release notes:
https://www.strongswan.org/blog/2023/03/02/strongswan-5.9.10-released.html
https://www.strongswan.org/blog/2023/01/03/strongswan-5.9.9-released.html
2023-04-26 01:08:29 +02:00
Sophie Tauchert d568766fc7
nixos/traefik: add environmentFiles option 2023-04-25 16:05:28 +02:00
Jean-François Roche 25671114cd
cloud-init: add udhcpc support (#226216)
* cloud-init: 22.4 -> 23.1.1

* cloud-init: add udhcpc support

Cloud-init use as dhcp client, dhclient, which is coming from the unmaintained package, isc-dhcp-client (refer https://www.isc.org/dhcp/) which ended support in 2022. dhclient is deprecated in nixos

Add patch to use `udhcpc` dhcp client coming from busybox instead.

PR based on #226173

refs #215571

upstream PR: https://github.com/canonical/cloud-init/pull/2125
2023-04-25 13:33:29 +02:00
Sandro f152e714e5
Merge pull request #199835 from SuperSandro2000/nodejs-normalisation 2023-04-25 13:10:06 +02:00
Moritz 'e1mo' Fromm 3dc05fbe40 nixos/bird-lg: Add support for traceroute-flags 2023-04-25 12:00:44 +02:00
Sandro Jäckel aad577bd30 nodejs*: normalise names to better fit other packages
Versioned package attributes are usually named like $pname_$version
eg: nodejs-14_x -> nodejs_14
2023-04-25 11:28:17 +02:00
Moritz 'e1mo' Fromm a2e2972ff3 nixos/bird-lg: Add maintainers 2023-04-25 10:41:35 +02:00
Moritz 'e1mo' Fromm b63e0d77b8 nixos/bird-lg: Rework command attribute generation
Prior to this change, arguments were not escaped nor was the possiblity
for arguments to be empty accounted for. This led to a kinda broken
startup script were arguments were "shifted", e.g. leaving allowedIPs
empty in order to use the default would cause `--bird` (the following
arguments key) to be used as the value. This was also observable when
e.g. the navbarBrand had a space in it where only everything until the
first space would show up.

With the new approach, all arguments are consistently escaped and empty
ones left out.

`extraConfig` now supports and prefers lists of strings instead of
lines (still supported but warned). This is due to the fragility with
respect to e.g. forgetting trailing backslashes after each line.
`frontend.{servers,domain}` are unset by default since the frontend
needs (the upstream project itself has no empty defaults here) needs
them to be set. If not set, an error is caused at build-time.

`proxy.birdSocket` has a new default: The projects README[^1] states
`/var/run/bird/bird.ctl` as the current default value. And bird2 on
NixOS does use this path too.

[^1]: https://github.com/xddxdd/bird-lg-go#proxy
2023-04-25 10:41:35 +02:00
gaykitty c251c021fe nixos/stargazer: init 2023-04-24 21:52:19 -03:00
Guillaume Girol 884ac29401
Merge pull request #227782 from everlanes/roundcube_bugfix_postgresql_passwd
nixos/roundcube: fix remote postgresql server
2023-04-24 18:53:21 +00:00
Nicola Squartini 3b758d4aab
nixos/nextcloud: fix notify_push configuration parse error
notify_push is unable to parse functions in PHP configuration, so we
avoid loading the `override.config.php` file.
2023-04-24 17:45:44 +02:00
Jörg Thalheim c129c9fac0 nixos/mediawiki: drop $wgEmergencyContact setting 2023-04-24 14:25:00 +02:00
Jörg Thalheim 1d2a96eda3 nixos/mediawiki: move virtualHost to httpd.virtualHost
This is a preparation to also allow nginx as a http server.
2023-04-24 14:24:52 +02:00
Thomas 4e8bde773f
nixos/{consul-template,vault-agent}: init 2023-04-24 06:55:57 +02:00
Sandro 90e2a0670d
Merge pull request #225829 from IndeedNotJames/nixos.consul 2023-04-23 23:50:14 +02:00
Andreas Brinner 9d5dba7170 nixos/roundcube: read only first line of password file
Only read the first line of the password file, if has multiple lines.
Mention that behaviour in options documentation.
2023-04-23 21:05:48 +02:00
Federico Damián Schonborn 3c0f50b28c
nixos/budgie: Add services.xserver.desktopManager.budgie.extraPlugins option
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-23 10:39:37 -03:00
Andreas Brinner 78fb35ce39 nixos/roundcube: extend documentation for passwordFile
The passwordFile must be formatted correctly. Added some information
about how the file content should look like.
2023-04-23 14:05:40 +02:00
Andreas Brinner 279eeae178 nixos/roundcube: fix roundcube-setup start
When using Roundcube with a non local PostgreSQL database wait for
network start before running roundcube-setup.service
Otherwise the database is not reachable and the service fails.
2023-04-23 13:11:28 +02:00
Andreas Brinner 2af4a9bc09 nixos/roundcube: fix PostgreSQL password
Extract PostgreSQL database password for Roundcube from .pgpass file.
The password file is used in two locations:

  1. in the Roundcube config.php
  2. in the systemd setup service that initializes the roundcube
     database

These two services need the password in different formats.

Keep the password file in PostgreSQL standard format and extract the
password for the Roundcube config (see #215986).
2023-04-23 13:11:28 +02:00
Martin Weinelt f9391cf538
Merge pull request #227557 from davidkna/patch-4
nixos/gitea: remove extra `"` in prestart
2023-04-22 15:49:55 +02:00
David Knaack 3856e84b79 nixos/gitea: remove extra " in prestart 2023-04-22 09:12:02 +02:00
Federico Damián Schonborn 375079d28c
nixos/budgie: Make default backgrounds available in Budgie Control Center
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-21 21:40:13 -03:00
Bruce Toll 0fce0749b5 nixos/udev: Fix hwdb conflict handling; build with systemdb-hwdb
Switch to systemdb-hwdb to build the udev hwdb.bin, as "udevadm hwdb" is
deprecated. This fixes an issue where the order of conflicting keys is
not respected.  The systemd-hwdb command creates a newer format (v3) of
hwdb.bin that respects the ordering of duplicate keys, with later
values replacing earlier occurrences.

A release note is included, as some mappings may be affected.
2023-04-21 19:08:37 -04:00
Will Fancher 5c46e6f4e3 systemd-stage-1: Add assertions for unsupported options. 2023-04-21 13:05:12 -04:00
Florian Klink 6b27ed3229
Merge pull request #169116 from ElvishJerricco/systemd-stage-1-networkd
Systemd stage 1 networkd
2023-04-21 18:40:59 +02:00
bezmuth 51c5aae874 nixos/pixelfed: init module 2023-04-21 17:39:24 +02:00
Jan Tojnar e25dc4a95e nixos/nginx: Fix listen string generation
This regressed in 327b0cff7a breaking nixosTests.php, among other things.
2023-04-21 17:18:45 +02:00
Maximilian Bosch 636e9f7418
Merge pull request #227235 from Ma27/bump-nextcloud
nextcloud: 25.0.5 -> 25.0.6, 26.0.0 -> 26.0.1, remove nc24
2023-04-21 11:14:29 +02:00
Nick Cao 515da5b664
Merge pull request #227243 from misuzu/netbird-update
netbird: 0.14.6 -> 0.16.0
2023-04-21 13:55:29 +08:00
IndeedNotJames 6ad64af778
nixos/consul: use lib.getExe where possible
which allows the use of custom packages, that may not have binaries called `consul` or `consul-alerts` in their `/bin/*` (though arguably pretty unlikely to be ever used)
2023-04-21 03:46:54 +02:00
IndeedNotJames 9c1f292155
nixos/consul: fix package reference in service $PATH 2023-04-21 03:46:54 +02:00
Tom Hubrecht e41c569429 nixos/authelia: Allow using Unix sockets 2023-04-20 23:53:16 +02:00
Kerstin Humm aff288424f
nixos/mastodon: fixup sidekiq jobClasses assertion
See https://github.com/NixOS/nixpkgs/pull/225005#issuecomment-1516677321
2023-04-20 22:58:34 +02:00
datafoo 066166cf49 nixos/fail2ban: add extraSettings option 2023-04-20 16:57:24 +02:00
Robert Hensing 73d2aeacf5
Merge pull request #206179 from ThinkChaos/refactor/gitea-settings
gitea: new options and settings refactor
2023-04-20 16:53:51 +02:00
Artturi b83db86a9e
Merge pull request #222080 from Stunkymonkey/nixos-optionalString 2023-04-20 16:07:30 +03:00
misuzu d5bb5259e4 nixos/netbird: allow configuring dns 2023-04-20 14:22:19 +03:00
Maximilian Bosch 0abc5bcc7e
nixos/nextcloud: for nc26 it's not necessary anymore to set enableBrokenCiphersForSSE to false 2023-04-20 12:20:52 +02:00
Maximilian Bosch 430f1dcdbd
nextcloud: remove nextcloud24, 25.0.5 -> 25.0.6, 26.0.0 -> 26.0.1 2023-04-20 11:34:54 +02:00
K900 449e8cd8d1 nixos/plasma5: install kde-inotify-survey 2023-04-20 11:54:06 +03:00
Sandro 84653ac6c7
Merge pull request #226150 from SuperSandro2000/lorri-direnv
nixos/lorri: install direnv
2023-04-20 10:49:23 +02:00
Flakebi 603e89eef9 kanidm: BindMount certificate paths
Bind mount the base dirs of the tls key and chain into the service.

Make sure to bind every directory just once. The test failed on ofborg
when /nix/store and the certificate path in /nix/store/<some path> were
bound.
2023-04-20 02:32:37 +02:00
Artturi 496c532a03
Merge pull request #105694 from laikq/master 2023-04-19 23:38:05 +03:00
datafoo 3403ee0602 nixos/fail2ban: add bantime option 2023-04-19 19:18:31 +02:00
ThinkChaos 70cf02924e
nixos/gitea: convert more simple settings to freeform
Also update `settings.server.PROTOCOL` to use non deprecated values.
2023-04-19 12:18:47 -04:00
ThinkChaos 2901c2f94e
nixos/gitea: quote paths in preStart script 2023-04-19 12:18:47 -04:00
ThinkChaos eba0db3c1c
nixos/gitea: add customDir option
Use case is storing secrets in a non persistent directory as I manage
them separately from this module.
2023-04-19 12:18:47 -04:00
ThinkChaos f7b9a1c561
nixos/gitea: disable LFS related code when it is not configured 2023-04-19 12:18:47 -04:00
ThinkChaos 184131f50d
nixos/gitea: make service group configurable 2023-04-19 12:18:46 -04:00
ThinkChaos f8d5d6cd02
nixos/gitea: disable createDatabase assert when using sqlite
Assert doesn't make sense in that case since `database.user` isn't used.
2023-04-19 12:18:46 -04:00
Ryan Lahfa 8ef336e870
Merge pull request #224491 from LeSuisse/moodle-php-81
nixos/moodle: use PHP 8.1
2023-04-19 08:35:32 +02:00
Ryan Lahfa 2fa5e844de
Merge pull request #223749 from Alexis211/add-wgautomesh
wgautomesh: init at 0.1.0
2023-04-19 08:26:09 +02:00
laikq 376e02c721 nixos/cupsd: add udev rules of driver packages 2023-04-19 03:38:02 +03:00
Sandro 349ec9c376
Merge pull request #226689 from tyxieblub/plausible 2023-04-19 01:26:22 +02:00
Sandro ce4159b4cd
Merge pull request #226514 from AtaraxiaSjel/update/ivpn 2023-04-19 00:57:19 +02:00
Dmitriy Kholkin 706060e47d
nixos/ivpn: init 2023-04-18 22:11:10 +03:00
Artturi 9a1f5d4248
Merge pull request #226889 from Artturin/fixlints2 2023-04-18 21:52:21 +03:00
Artturin eac28f38d6 treewide: fix lints
Arg to lib.optional is a list

build time tool in buildInputs

*Flags not a list

https://github.com/nix-community/nixpkgs-lint
2023-04-18 20:20:56 +03:00
Domen Kožar 31a3e311da
Merge pull request #226831 from domenkozar/cachix-watch-store-restarts
cachix-watch-store: restart indefinitely
2023-04-18 16:26:25 +01:00
Sandro 4f6b51d99c
Merge pull request #224212 from Guekka/monica
monica: init at 4.0.0 & nixos-module
2023-04-18 16:58:42 +02:00
Sandro ed7dd78b3f
Merge pull request #225274 from tie/nixos-pufferpanel
nixos/pufferpanel: init
2023-04-18 16:57:14 +02:00
Domen Kožar 1d85cfbd77 cachix-watch-store: restart indefinitely 2023-04-18 10:58:33 +01:00
Linus Heckemann b14aded48a
Merge pull request #222617 from oddlama/esphome
nixos/esphome: init module
2023-04-18 06:45:40 +02:00
Will Fancher 8598234651 systemd-initrd: dbus 2023-04-17 16:41:36 -04:00
Will Fancher dd392d7c76 systemd-initrd: networkd 2023-04-17 16:41:34 -04:00
tyxieblub efde50d9f5 nixos/plausible: add package option 2023-04-17 21:20:03 +02:00
imlonghao bc07f0ac31
borgmatic: fix timer wantedBy 2023-04-17 23:10:23 +08:00
Alex Auvolat a727a3d676 nixos/wgautomesh: init at 0.1.0 2023-04-17 12:37:18 +02:00
Weijia Wang 4c3edba856
Merge pull request #225750 from r-ryantm/auto-update/rtsp-simple-server
rtsp-simple-server: 0.21.6 -> 0.22.0
2023-04-17 10:28:44 +03:00
Sandro d85555f9ac
Merge pull request #224996 from SuperSandro2000/smokeping-ln-f 2023-04-16 23:05:25 +02:00
Guillaume Girol 40bbc9ae53
Merge pull request #225285 from symphorien/ihm-remove
python3.pkgs.ihatemoney: remove
2023-04-16 19:23:00 +00:00
Guillaume Girol 3cc8b4477e python3.pkgs.ihatemoney: remove
sqlalchemy and flask releases break ihatemoney faster than upstream
updates, so the maintenance burden increases over time.
2023-04-16 16:04:35 +02:00
Ivan Trubach 4bbe09068a nixos/pufferpanel: init 2023-04-16 15:41:24 +03:00
Atemu 445ef28548
Merge pull request #225748 from Atemu/buildFHSEnvBubblewrap-by-default
buildFHSEnv: use bubblewrap by default
2023-04-16 13:03:36 +02:00
Edgar B 33a7f368b4 nixos/monica: init 2023-04-16 11:24:00 +02:00
Atemu f63a12f296 tree-wide: buildFHSUserEnv -> buildFHSEnv 2023-04-16 10:15:13 +02:00
Ryan Lahfa b914dffe7e
Merge pull request #224494 from LeSuisse/roundcube-php81
nixos/roundcube: use PHP 8.1
2023-04-15 22:12:31 +02:00
John Ericson 0794f40589
Merge pull request #226288 from Luflosi/kubo-better-api-access
nixos/kubo: improve API access
2023-04-15 15:07:01 -04:00
happysalada 0cdd78126c qdrant: module increase limitnofile 2023-04-15 13:45:38 -04:00
Luflosi f2be3ae30d
nixos/kubo: restrict access to the API to users in a group by default 2023-04-15 15:25:20 +02:00
Luflosi 7ceebbb35b
nixos/kubo: allow multiple API and Gateway addresses
The daemon allows specifying an array of multiaddrs for Addresses.API and Addresses.Gateway, so the NixOS module should allow that as well.
2023-04-15 15:25:06 +02:00
Luflosi 929a00bd84
nixos/kubo: give normal users access to the daemon by default
Fixes https://github.com/NixOS/nixpkgs/issues/223289.

This doesn't reduce the security in any way since it was already possible for normal users to do what I do here and create such a fake repo for themselves and set their $IPFS_PATH variable to it. It was and still is also possible to just use the --api CLI option.
This change just removes the manual setup that would otherwise be required.

We wouldn't need this workaround if https://github.com/ipfs/kubo/pull/9366 was merged but the fix seems to have been ignored upstream. Patching it ourselves seems like a bad idea since the patch has security implications.
2023-04-15 15:24:58 +02:00
Janne Heß ee0bfeddf7
Merge pull request #226010 from helsinki-systems/drop/deprecated-ssh-files
nixos/openssh: Drop deprecated locations
2023-04-15 11:41:16 +02:00
Eric Lesiuta acfed64224 nixos/picosnitch: init 2023-04-14 22:09:48 -04:00
Moritz 'e1mo' Fromm cc55cd6ab7
nixos/dokuwiki: Mark last descriptions as md 2023-04-14 18:12:48 +02:00
Moritz 'e1mo' Fromm e78f08fa21
nixos/dokuwiki: Finally remove extraConfig
After the introduction of structured settings in #208299 the old
string-style options  / types which were kept for compatibility are now
removed in preparation for the 23.05 release.
2023-04-14 18:12:42 +02:00
Sandro 1c5ca89f42
nixos/lorri: install direnv
direnv is required to allow files to be run by lorri, so it should be installed, too.
2023-04-14 15:19:34 +02:00
Aidan Gauland 0135b7a556 nixos/peroxide: correct option doc
Correct the description for the option services.peroxide.enable.
2023-04-14 14:47:55 +02:00
Sandro f9e70759cd
Merge pull request #213816 from karmanyaahm/karmanyaahm/nixos/kubo 2023-04-14 00:48:37 +02:00
Janne Heß 98c3d190b2
nixos/openssh: Drop deprecated locations
The changelog entry should give a good indication why I don't think this
is necessary anymore.
2023-04-13 20:31:18 +02:00
ajs124 6fc4e722c4 nixos/prometheus-smartctl-exporter: fix evaluation after adding cfg.extraFlags
was done in 3c61665b7f but does not evaluate
error: value is a string with context while a list was expected
2023-04-13 17:32:50 +02:00
Florian Klink 4496a91077
Merge pull request #225973 from IndeedNotJames/grafana-agent
grafana-agent: 0.30.2 -> 0.32.1, remove obsolete test fix; nixos/grafana-agent: use `lib.getExe`
2023-04-13 17:29:48 +02:00
Jonas Heinrich 86a685ceb1 nixos/maddy: Add option ensureCredentials 2023-04-13 09:36:54 -04:00
IndeedNotJames 845a6e9784
nixos/grafana-agent: use lib.getExe as binary names changed between updates
and `lib.getExe` allows a safe handling and potential backport of this.
But for that to work it would require 22.11 to set `pkgs.grafana-agent.meta.mainProgram = "agent"`

Relevant upstream release: https://github.com/grafana/agent/releases/tag/v0.31.0
2023-04-13 10:43:02 +02:00
Karmanyaah Malhotra 6086d85777 nixos/kubo: documentation suggestions
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-04-13 03:14:59 -05:00
Karmanyaah Malhotra 4bd622cd9d nixos/kubo: unmount on service stop
When kubo is force killed with `pkill -KILL ipfs` or by systemd-oomd,
it doesn't unmount /ipfs and /ipns. That prevents it
from starting up the next time. So, unmount on postStop.
2023-04-13 03:14:59 -05:00
Martin Weinelt f0e4bd26bd
Merge pull request #225943 from jakubgs/smartctl-exporter/fix-extra-flags
nixos/prometheus-smartctl-exporter: support extraFlags
2023-04-13 07:37:28 +02:00
Jakub Sokołowski 3c61665b7f
nixos/prometheus-smartctl-exporter: support extraFlags
Seems to be ignored currently. Useful for `-verbose` flag.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-04-12 23:56:32 +02:00
Johan Thomsen 0b57240111 nixos/kubernetes: kubelet --container-runtime flag has been removed 2023-04-13 07:21:56 +10:00
Martin Weinelt 130be87c8d
Merge pull request #224549 from mweinelt/go-neb-unit-permissions
nixos/go-neb: Replace PermissionsStartOnly with executable prefix
2023-04-12 22:59:41 +02:00
Sandro Jäckel fdbd0834b2
nixos/smokeping: use ln with -f 2023-04-12 22:47:21 +02:00
Sandro 6152b09a6a
Merge pull request #225005 from erictapen/mastodon-sidekiq 2023-04-12 21:31:50 +02:00
Bobby Rong d550ee0d43
Merge pull request #206173 from bobby285271/pantheon
pantheon.elementary-tasks: 6.3.0 -> 6.3.1
2023-04-12 22:14:27 +08:00
Bobby Rong aacdc51e15
pantheon.elementary-tasks: 6.3.0 -> 6.3.1
https://github.com/elementary/tasks/releases/tag/6.3.1
2023-04-12 21:40:00 +08:00
Doron Behar 504849a7bb rtsp-simple-server: rebrand as mediamtx 2023-04-12 12:23:44 +03:00
Javed Mohamed 3ecc7b1484 nixos/gpsd: add multiple-device support for gpsd 2023-04-12 10:15:47 +02:00
Martin Weinelt 7a5a2fa8a4
Merge pull request #225785 from helsinki-systems/warn-dhcpd-eol
nixos/dhcpd: warn of pending removal
2023-04-12 00:08:42 +02:00
ajs124 e3702c0788 nixos/dhcpd: warn of pending removal 2023-04-11 23:47:40 +02:00
0x4A6F 3196b965ed
Merge pull request #224072 from helsinki-systems/fix/borg-compact
nixos/borgbackup: run compact after prune
2023-04-11 21:14:39 +02:00
Jörg Thalheim 89103b63d2
Merge pull request #225195 from Mic92/buildbot
buildbot: move out of python3.pkgs
2023-04-11 19:49:24 +01:00
ajs124 d37ee8222b nixos/borgbackup: run compact after prune 2023-04-11 19:48:16 +02:00
0x4A6F 1ee33cc078
Merge pull request #224460 from helsinki-systems/drop/gitit-mod
nixos/gitit: remove
2023-04-11 19:23:59 +02:00
Michael Raitza 9f0e1b6047 modules.openafsServer: Add FABS backup server 2023-04-11 08:30:56 -03:00
Jörg Thalheim 90b750456e buildbot: move out of python3.pkgs
By moving it out we can start apply overrides to python dependendencies
starting with sqlalchemy.

This fixes the build with the current version.
2023-04-11 12:38:58 +02:00
Sandro fd04c0caf0
Merge pull request #221380 from Majiir/ddclient-fix-permissions 2023-04-11 01:31:53 +02:00
Maciej Krüger e663a3a17a
Merge pull request #223645 from nbraud/auto-cpufreq 2023-04-09 23:11:54 +02:00
nicoo 04b1a3f847 nixos/auto-cpufreq: Avoid touching /etc 2023-04-09 19:15:49 +00:00
K900 c29ccca1a3
Merge pull request #222923 from oddlama/fix-nginx-duplicate-mime
nixos/nginx: fix warning about duplicate mime entry
2023-04-09 14:58:39 +03:00
Kerstin Humm 431ccf26e4
nixos/mastodon: add assertion for only allowing one sidekiq scheduler queue 2023-04-09 13:24:43 +02:00
Ryan Hendrickson 43e6f67f75 nixos/snapper: support more options 2023-04-09 02:28:16 -04:00
betaboon dd33a7a9b9 nixos/v4l2-relayd: init 2023-04-09 00:41:45 +02:00
Felix Buehler 327b0cff7a treewide: use more lib.optionalString 2023-04-07 13:38:33 +02:00
mrobbetts 3c1c5600e8
bind: replace hard-coded allow-query zone setting with a real zone parameter. (#224776) 2023-04-07 06:55:09 +02:00
Robert Schütz 2b81862da7
Merge pull request #224908 from SuperSandro2000/home-assistant-drv
nixos/home-assistant: fix infinite recursion when derivations are used in config
2023-04-06 07:56:47 -07:00
Viv Lim c778f4d225 nixos/mastodon: Allow configuring sidekiq processes
This change allows the number of sidekiq processes and which job classes
they handle to be configured.

An instance admin may choose to have separate sidekiq processes handling
jobs related to local users (`default` job class) and jobs related to
federation (`push`, `pull`, `ingress`), so that as the instance grows
and takes on more federation traffic, the local users' experience is not
as impacted.

For more details, see https://docs.joinmastodon.org/admin/scaling/#sidekiq

This pr also includes the following changes suggested in review:

- adds syslog identifiers for mastodon services
- moves working directory config to common cfgService
- adds mastodon.target
2023-04-06 16:30:16 +02:00
Martin Weinelt 9de84cd029
Merge pull request #224882 from NixOS/home-assistant
home-assistant: 2023.3.6 -> 2023.4.0
2023-04-06 16:05:07 +02:00
Martin Weinelt e89108897d
nixos/home-assistant: Allow serial access for otbr 2023-04-06 13:43:55 +02:00
Vladimir Serov 0ff543e311
nixos/garage: fix links to config reference 2023-04-06 13:40:38 +04:00
alyaeanyx bd573376ad nixos/wstunnel: init 2023-04-06 09:51:30 +02:00
Franz Pletz 0e950a1ec7
Merge pull request #223085 from Izorkin/update-nginx-proxy-cache
nixos/nginx: enable multiple proxyCachePath support
2023-04-06 02:52:44 +02:00
Sandro Jäckel 94b402045d
nixos/home-assistant: fix infinite recursion when derivations are used in config 2023-04-06 01:26:24 +02:00
KFears 51fdf00ecb nixos/grafana: fix assertions leaking into YAML
This commit deletes the assertions that were added in 4ec456b. Those
assertions weren't even working to begin with, and they also cause
assertions leak into the generated YAML.
2023-04-06 02:35:23 +04:00
Florian Klink aa158ed243
Merge pull request #219496 from f2k1de/smokeping-css-js-fix
smokeping: fix css and js symlink
2023-04-05 21:56:33 +02:00
Florian Klink ea7dd83b0d
Merge pull request #224833 from flokli/smokeping-config
nixos/smokeping: use /etc/smokeping.conf
2023-04-05 21:54:57 +02:00
oddlama 8df62ec46c
nixos/esphome: init module 2023-04-05 17:35:58 +02:00
Florian Klink 9de75c8bbe nixos/smokeping: use /etc/smokeping.conf
This allows other services to refer to the generated smokeping config,
which is e.g. necessary to run smokeping with nginx as frontend, rather
than thttpd.
2023-04-05 16:51:26 +02:00
Ryan Lahfa a6bc6ed645
Merge pull request #206983 from minijackson/netbox-3.4.1
netbox: 3.3.9 -> 3.4.7, netbox_3_3: init at 3.3.10, RFC42-style options, more tests
2023-04-05 14:04:27 +02:00
Jörg Thalheim 87083d40c0
Merge pull request #221856 from Mic92/dendrite
dendrite: 0.11.0 -> 0.12.0
2023-04-05 08:36:44 +01:00
Yureka 53c20eae38
Revert "bind: remove hard-coded allow-query config setting" 2023-04-04 23:35:11 +02:00
Martin Weinelt ca051755d9
Merge pull request #224495 from Mic92/mediawiki-postgres
mediawiki: add support for postgresql
2023-04-04 12:21:06 +02:00
Minijackson 78eb4d64e7 netbox_3_3: init
reintroduce previous version, use in NixOS module if stateVersion < 23.05
2023-04-04 11:45:31 +02:00
Minijackson 36a550c6f9 nixos/netbox: RFC42-style options
- allows specifying allowed hosts
- setup sane default for logging
2023-04-04 11:45:29 +02:00
Jörg Thalheim d9c613d746 mediawiki: add support for postgresql 2023-04-04 07:50:04 +02:00
Martin Weinelt 34464d6044
nixos/go-neb: Replace PermissionsStartOnly with executable prefix
This should work as a drop-in replacement and satisfy #53852.
2023-04-04 01:01:49 +02:00
Thomas Gerbet 188573bf93 nixos/roundcube: use PHP 8.1
Roundcube has announced support of PHP 8.1 in the 1.6.0

https://github.com/roundcube/roundcubemail/releases/tag/1.6.0
2023-04-03 18:21:35 +02:00
Thomas Gerbet 2b155e1198 nixos/moodle: use PHP 8.1
Moodle is compatible with PHP 8.1 since the 4.1.2.

https://moodledev.io/general/development/policies/php
2023-04-03 18:14:09 +02:00
Kerstin Humm 0b0cc93e79
remove myself (erictapen) from packages which I don't use anymore 2023-04-03 17:07:16 +02:00
ajs124 4f2152215a nixos/gitit: remove
has not been evaluated (in module-list) since 122d5e497e

Closes #167034
2023-04-03 13:19:31 +02:00
7c6f434c 8ce248a734
Merge pull request #218870 from Uthar/lisp2
lisp-modules: replace with an implementation based on github:uthar/nix-cl
2023-04-03 06:00:48 +00:00