Sandro
3e3b73d344
go-csp-collector: init at 0.0.16-unstable-2025-10-10 ( #455610 )
2025-11-02 22:10:10 +00:00
h7x4
39e93806aa
Revert "various: replace systemd.services.<name>.{script,preStart} with ExecStart{,Pre}"
2025-10-31 11:03:32 +01:00
Sandro
c32d974077
various: replace systemd.services.<name>.{script,preStart} with ExecStart{,Pre} ( #448763 )
2025-10-29 12:34:37 +00:00
Johannes Kirschbauer
4ad85b485d
various: lib usage improvements - prefer removeAttrs over filterAttrs ( #455787 )
2025-10-27 16:17:52 +00:00
Philip Taron
4160763d74
various: lib usage improvements - prefer elem over any for list inclusion conditions ( #455789 )
2025-10-27 13:21:20 +00:00
h7x4
0d841cc8bb
nixos/prometheus-exporters/pgbouncer: replace systemd script with ExecStart
2025-10-27 18:52:07 +09:00
Yifei Sun
e30ee35619
nixos/go-csp-collector: init module
2025-10-27 10:37:24 +01:00
StepBroBD
74cde83add
nixos/{karma,pgbouncer}: use cfg.package instead of global pkgs ( #412435 )
2025-10-26 19:29:41 +01:00
h7x4
9842083cd0
nixos/prometheus-exporters/node: lib.any -> lib.elem
2025-10-26 16:23:35 +09:00
h7x4
dbe03e152c
nixos/prometheus-exporters/mail: lib.filterAttrs -> lib.removeAttrs
2025-10-26 15:21:23 +09:00
h7x4
e3366549da
nixos/grafana: lib.filterAttrs -> lib.removeAttrs
2025-10-26 15:21:22 +09:00
Sandro Jäckel
1119d225de
nixos/librenms: update config cache
...
otherwise any change to .env is never reflected.
2025-10-23 02:26:46 +02:00
Bonus
f5d45f3499
nixos/beszel.agent: init
...
Co-authored-by: Mirza Arnaut <mirza.arnaut45@gmail.com>
2025-10-21 22:42:22 +02:00
Bonus
5dbf685def
nixos/beszel.hub: init
...
Co-authored-by: Mirza Arnaut <mirza.arnaut45@gmail.com>
2025-10-21 22:42:19 +02:00
Bouke van der Bijl
0a5bba0f15
nixos/opentelemetry-collector: validate config
2025-10-21 17:03:17 +02:00
h7x4
75d08a1a86
nixos/vnstat: allow overriding package ( #448922 )
2025-10-18 05:17:03 +00:00
Bjørn Forsman
2e79f21930
nixos/ups: remove Slice from UPS shutdown service ( #389216 )
2025-10-14 18:09:38 +00:00
Rhys
30aa6b71f2
nixos/ups: remove Slice from UPS shutdown service
...
system-ups.slice conflicts with shutdown.target, so
ups-killpower.service is never queued at shutdown.
The slice isn't doing anything; removing it is a simple fix.
2025-10-14 20:01:09 +02:00
Raphaël C.
024fd0a28c
nixos/gitwatch: add zareix as maintainers
2025-10-14 19:33:14 +02:00
Raphaël C.
fbc5e78b9c
nixos/gitwatch: add message option
2025-10-14 19:32:50 +02:00
Felix Singer
d06389e317
nixos/uptime-kuma: Ensure proper permissions for state directory
...
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 15:54:51 +02:00
Felix Singer
7b791e1de7
nixos/uptime-kuma: Enable MountAPIVFS hardening in service config
...
This setting is already implied by others, but add it for completeness
as well. For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#MountAPIVFS=
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 15:54:51 +02:00
Felix Singer
18af20e2b2
nixos/uptime-kuma: Set ProtectControlGroups to strict
...
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups=
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 15:54:51 +02:00
Felix Singer
606424d609
nixos/uptime-kuma: Set ProtectProc to invisible
...
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc=
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 15:54:51 +02:00
Felix Singer
749fd94d19
nixos/uptime-kuma: Enable PrivateUsers hardening in service config
...
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#PrivateUsers=
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 15:54:51 +02:00
Acid Bong
f418365067
maintainers: drop evils
2025-10-05 22:22:45 +03:00
Vivek
84555f540c
nixos/vnstat: allow overriding package
2025-10-05 11:19:34 -07:00
Wolfgang Walther
91a8fee3aa
treewide: remove redundant parentheses
...
Auto-fixed by nixf-diagnose.
2025-10-05 10:52:03 +02:00
Wolfgang Walther
c283f32d29
treewide: remove unused with
...
Auto-fixed by nixf-diagnose.
2025-10-05 10:50:41 +02:00
Wolfgang Walther
90e7159c55
treewide: remove unused rec
...
Auto-fix by nixf-diagnose.
2025-10-05 10:49:12 +02:00
xanderio
e3a3b32cc2
nixos/loki: refine option descriptions ( #442975 )
2025-09-27 12:33:33 +00:00
Dionysis Grigoropoulos
377847e3c8
nixos/prometheus/storagebox: Init module
2025-09-26 20:24:04 +03:00
dish
f4ac3ac7e4
{nixos/,}cockpit: add branding + small fixes ( #413033 )
2025-09-25 12:59:45 +00:00
jopejoe1
2032412fdb
various: use more accurate int types ( #445244 )
2025-09-22 21:50:55 +00:00
h7x4
a0f9e8c8b9
nixos/statsd: use types.port
2025-09-22 16:47:32 +02:00
h7x4
57c3d1033d
nixos/prometheus-exporters/fritzbox: use types.port
2025-09-22 16:32:58 +02:00
h7x4
32a008369e
various: prefer ints.between over enum for int ranges
2025-09-22 15:34:47 +02:00
Felix Stupp
ef4b2e4f4b
nixos/loki: refine option descriptions
...
- on `.enabled` make clear that Grafana Loki is meant
- on `.configuration` link to documentation
- on `.configFile` & `.configuration` make clear that both cannot specified together
2025-09-14 20:31:31 +02:00
Maximilian Bosch
5f44bfc59b
nixos/grafana: document how to enable drilldown when using custom plugins
...
IMHO, it's a bit surprising that drilldown doesn't show anything when
using `declarativePlugins` (and thus, the four apps are missing).
Add instructions on how to get these apps back.
2025-09-14 13:42:22 +02:00
Jon Seager
cfdb1500e3
scrutiny: remove jnsgruk from maintainers
2025-09-10 14:32:15 +01:00
Haylin Moore
cf540f8c98
treewide/nixos: move number typed port options to types.port
2025-09-08 15:27:19 +02:00
andre4ik3
395b411240
nixos/cockpit: add SSH to wsinstance path and issue banner support
2025-09-05 17:57:23 +00:00
dish
2b2ff53811
prometheus-script-exporter: switch to maintained fork ( #435767 )
2025-09-05 11:57:06 -04:00
Maximilian Bosch
409107d2f5
nixos/grafana: don't set X-XSS-Protection anymore
...
Part of #438800 .
The OWASP recommentation[1] is:
> The X-XSS-Protection header has been deprecated by modern browsers
> and its use can introduce additional security issues on the client
> side. As such, it is recommended to set the header as X-XSS-Protection: 0
> in order to disable the XSS Auditor, and not allow it to take the default
> behavior of the browser handling the response. Please use
> Content-Security-Policy instead.
Hence, we turn this off, diverging from the upstream defaults here. An
upstream issue has been opened[2].
[1] https://owasp.org/www-project-secure-headers/#x-xss-protection
[2] https://github.com/grafana/grafana/issues/110369
2025-08-31 15:22:16 +02:00
undefined
5365b3cdd9
gatus: 5.19.0 -> 5.23.2
2025-08-30 05:51:34 +08:00
Sandro
bab1ec5bd3
victoriametrics & vmagent: Make the config check optional ( #419908 )
2025-08-27 22:25:51 +02:00
dish
970dcca69c
treewide: Fix links in module documentation
2025-08-25 12:55:11 -04:00
C4 Patino
4a80d00387
prometheus-script-exporter: switch to maintained fork
2025-08-22 23:47:48 -05:00
Maximilian Bosch
eb6a408547
Merge: nixos/grafana: add prune option to provision.datasources ( #431775 )
2025-08-22 21:48:35 +02:00
misuzu
4b66d476f3
kminion: 2.2.7 → 2.2.13, init module ( #318792 )
2025-08-18 19:30:40 +03:00
