Commit graph

2597 commits

Author SHA1 Message Date
Bert Proesmans d37a03eb5a nixos/windmill: Fix database setup config
Postgresql db-init procedure changed with a separate unit for initialisation.
This commit makes the windmill configuration conformant again.
2025-09-15 10:04:17 +00:00
oddlama 84d7ec6875
nixos/ente: init module and test 2025-09-13 10:59:35 +02:00
merrkry f2a1154c65 nixos/mastodon: fix streaming path 2025-09-12 21:18:01 +02:00
David Wronek 695b0bfbe3 nixos/sshwifty: init module
Signed-off-by: David Wronek <david.wronek@mainlining.org>
2025-09-10 07:40:09 +02:00
wrvsrx f0303c62ef
nixos/sillytavern: add it 2025-09-10 00:14:50 +08:00
Yifei Sun 6483a3e012
nixos/calibre-web: fix malformed environment variable 2025-09-09 17:15:51 +02:00
Haylin Moore cf540f8c98 treewide/nixos: move number typed port options to types.port 2025-09-08 15:27:19 +02:00
StepBroBD 4355de94bb
nixos/calibre-web: fix book cover not showing up due to cache directory defaults to cps path under /nix/store/ (#432604) 2025-09-06 21:11:01 +02:00
Michael Smith 40c80ed80c
maintainers: drop michaelshmitty 2025-09-04 14:24:24 +02:00
Maximilian Bosch 19d29ccade
Merge: nixos/nextcloud: Pass OC_PASS and NC_PASS environment variables to nextcloud-occ (#439771) 2025-09-04 00:36:03 +02:00
teutat3s c7fb59251c
nixos/invoiceplane: block access to ipconfig.php
Upstream uses this method to protect sensitive data in their example
config: https://github.com/InvoicePlane/InvoicePlane/blob/v1.6.3/ipconfig.php.example#L1
2025-09-03 23:49:24 +02:00
Sandro 3a6b82b8f5
nixos/hedgedoc: fix eval 2025-09-03 10:28:42 +02:00
provokateurin ba24e7fa23
nixos/nextcloud: Pass OC_PASS and NC_PASS environment variables to nextcloud-occ 2025-09-03 08:54:48 +02:00
Robert Helgesson 90c505624b nixos/grav: remove X-XSS-Protection
See <https://github.com/NixOS/nixpkgs/issues/438800>.
2025-09-02 20:40:09 +02:00
Robert Helgesson 22617bd181 nixos/grav: use PHP 8.3
The stable version of Grav is not compatible with later versions of
PHP.
2025-09-02 20:40:09 +02:00
Sandro da5d204889
nixos/hedgedoc: add configureNginx option (#427898) 2025-09-02 18:18:03 +02:00
Diogo Correia c129255508
nixos/grocy: don't set X-XSS-Protection anymore
Part of #438800.

The OWASP recommentation[1] is:

> The X-XSS-Protection header has been deprecated by modern browsers
> and its use can introduce additional security issues on the client
> side. As such, it is recommended to set the header as X-XSS-Protection: 0
> in order to disable the XSS Auditor, and not allow it to take the default
> behavior of the browser handling the response. Please use
> Content-Security-Policy instead.

[1] https://owasp.org/www-project-secure-headers/#x-xss-protection
2025-09-01 22:36:10 +01:00
Diogo Correia 80f6d36543
{nixos/,}grocy: add diogotcorreia as maintainer 2025-09-01 22:30:43 +01:00
dish e143b6b049
nixos/kanboard: remove X-XSS-Protection (#439035) 2025-09-01 16:50:24 -04:00
Sandro 6779ff00b3
nixos/glitchtip: fix sourcemap uploads, add stateDir option (#438957) 2025-09-01 17:53:54 +02:00
Defelo 6ef10ab044
nixos/glitchtip: add stateDir option 2025-09-01 16:57:10 +02:00
Defelo 95968f2f73
nixos/glitchtip: fix sourcemap uploads 2025-09-01 16:57:07 +02:00
Morgan Jones 344caf9640
mattermost: charset fixes (#436376) 2025-09-01 02:19:03 +00:00
Zexin Yuan 47fcf23026
nixos/kanboard: remove X-XSS-Protection 2025-09-01 09:43:15 +08:00
Robert Schütz 06c99c29c9 nixos/nextcloud: remove X-XSS-Protection
see https://github.com/nextcloud/server/pull/53476
2025-08-31 10:14:01 +02:00
Erin of Yukis 1ec5da1a27
nixos/jitsi-meet: fix systemd protection flag warning
Fixes systemd warning:

> /etc/systemd/system/jitsi-excalidraw.service:26: Failed to parse ProtectProc=true, ignoring: Invalid argument

when Jitsi-Meet Excalidraw Backend is enabled. `ProtectProc=true` is not a thing according to man pages, `ProtectProc=noaccess` is the most restrictive setting and likely what was originally intentioned.
2025-08-29 08:56:37 +00:00
Philip Taron 43d66715e5
fetchNextcloudApp: add sha512 (#435930) 2025-08-27 12:14:53 -07:00
staticdev 2196fed2b6 fetchNextcloudApp: add sha512 2025-08-26 22:25:48 +02:00
isabel 0471c45c8f
sharkey: 2025.4.3 -> 2025.4.4 (#431142) 2025-08-25 22:22:25 +01:00
dish 970dcca69c
treewide: Fix links in module documentation 2025-08-25 12:55:11 -04:00
Ruby Iris Juric 64a200b22a
sharkey: add tmarkus as maintainer
https://github.com/NixOS/nixpkgs/pull/431142#pullrequestreview-3149369365
2025-08-25 20:16:04 +10:00
Morgan Jones 6cc8a8cdb5
nixos/mattermost: remove fallback charset for MySQL
This was causing issues on newer versions of MariaDB (breaking
NixOS tests) like:

```
Error 1064 (42000): You have an error in your SQL syntax;
check the manual that corresponds to your MariaDB server version
for the right syntax to use near '%2Cutf8' at line 1
```

Since this is simply a fallback character set and all supported versions
of MariaDB support utf8mb4, delete the fallback.

This change should be fully compatible with existing deployments.
2025-08-23 20:41:44 -07:00
Pol Dellaiera bc36d3ac43 maintainers: drop drupol 2025-08-20 17:54:38 +02:00
Jonas Heinrich fd71ab35d6
invoiceplane: 1.6.2 -> 1.6.3 (#431713) 2025-08-20 16:48:57 +02:00
dotlambda 32991f1eac
nixos/immich: add support for VectorChord (#428568) 2025-08-19 13:31:01 -07:00
isabel ddd7db501d
nixos/bluesky-pds: rename from pds 2025-08-19 20:59:04 +01:00
Sefa Eyeoglu a9c17c34b1
nixos/immich: add VectorChord migration docs
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:56:20 +02:00
Sefa Eyeoglu 0b93bf6c22
nixos/immich: add enableVectors option
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:55:28 +02:00
Sefa Eyeoglu fd1994a8b7
nixos/immich: add enableVectorChord option
This enables VectorChord in the database (currently) alongside
pgvecto.rs. Note that VectorChord requires pgvector, which is enabled as
well by this option.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:55:14 +02:00
Jonas Heinrich aa06ffc4c3 nixos/invoiceplane: Update patch 2025-08-17 10:30:23 +02:00
lassulus c4142d912d
nixos/jitsi-meet: fix prosody configuration (#434201) 2025-08-17 01:07:41 +02:00
⛧-440729 [sophie] d58a9b9134
nixos/jitsi-meet: fix prosody configuration 2025-08-16 12:43:31 +02:00
RatCornu f07a87c1e5
nixos/szurubooru: change python3.12 to python3 2025-08-15 23:53:42 +02:00
Felix Bargfeldt 409bce8932
zipline: 4.2.1 -> 4.2.3, prune node_modules (#432028) 2025-08-15 12:54:26 +02:00
MiaFoxcat ab475572f4 nixos/outline: add discord auth 2025-08-15 00:16:35 +02:00
Sefa Eyeoglu 1a24457782
nixos/immich: only start after reaching postgres.target
Without this dependency, we may run into a race condition, especially in
our tests.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-14 22:30:00 +02:00
w 95452e8797
nixos/onlyoffice: fix gixy error (#419765) 2025-08-14 13:58:47 +02:00
Toma 84ac628079
nixos/lanraragi: update description (#433505) 2025-08-14 01:29:17 +02:00
TomaSajt 45e24e83c4
nixos/lanraragi: update description 2025-08-13 23:55:44 +02:00
Defelo ed4ce19544
zipline: 4.2.1 -> 4.2.3
Changelog: https://github.com/diced/zipline/releases/tag/v4.2.2
Diff: https://github.com/diced/zipline/compare/v4.2.1...v4.2.2

Changelog: https://github.com/diced/zipline/releases/tag/v4.2.3
Diff: https://github.com/diced/zipline/compare/v4.2.2...v4.2.3
2025-08-13 14:38:20 +02:00
Yifei Sun 645af1a698
nixos/calibre-web: fix book cover not showing up due to cache directory defaults to cps path under /nix/store/ 2025-08-12 15:37:08 +02:00
6543 f7611cad51 nixos/nextcloud: unify usage of lib functions 2025-08-11 18:49:21 +02:00
Jörg Thalheim 4940959d28
nixos/mediawiki: fix error from wfGetDB being removed (#427623) 2025-08-10 11:42:14 +02:00
lassulus cb771a25a1
jitsi-meet: fix infinite recursion with prosody package (#432371) 2025-08-10 09:34:49 +02:00
lassulus 6f224e65ea jitsi-meet: fix infinite recursion with prosody package 2025-08-10 00:23:58 +02:00
oddlama a7f40a2648
nixos/mealie: add extraOptions to allow setting trusted proxies for OIDC redirect uri 2025-08-08 20:01:41 +02:00
oddlama 7ba29b306f
nixos/mealie: add trustedProxies option to fix OIDC redirect uri 2025-08-08 20:01:34 +02:00
Maximilian Bosch 3e41a080eb
Merge: nixos/nextcloud: configure redis by default (#421813) 2025-08-07 17:27:21 +02:00
isabel 281eb01683
nixos/snips-sh: init (#390655) 2025-08-07 11:16:11 +01:00
Martin Weinelt 7db4feef65
nixos/discourse: fix postgres dependency
This was broken during the postgresql.target migration in 41c5662cbe.
2025-08-04 15:48:21 +02:00
Felix Bühler a7566d72a0
nixos/freshrss: fix loading extensions' static content (#430651) 2025-08-03 21:39:11 +02:00
Aleksana 3c74938b56
nixos/outline: add support for S3 Transfer Acceleration (#429498) 2025-08-03 22:23:57 +08:00
Matt Christ 637fc36529 nixos/freshrss: fix loading extensions' static content
Before this change, the THIRDPARTY_EXTENSIONS_PATH would end up with a
double-slash in the path, which was breaking FreshRSS's is_valid_path
detection.
2025-08-03 09:22:46 -05:00
Martin Weinelt 56674702b0
nixos/postfix: modernize, cleanup (#416840) 2025-08-02 23:50:59 +02:00
isabel 3ad01858c5
nixos/snips-sh: init module
Co-authored-by: NotAShelf <raf@notashelf.dev>
2025-08-02 09:45:27 +01:00
lassulus 2ea007a23b
services/jitsi: Add missing dependency for breakout rooms (#429837) 2025-08-01 13:42:22 +02:00
Pol Dellaiera 35d4463792
nixos/drupal: config extend (#428153) 2025-08-01 04:38:23 +02:00
Andrew Benbow ed75819998 nixos/drupal: extend config interface, add config sync dir 2025-07-31 16:03:56 -04:00
Daniel Langbein 09206bfe33
nixos/homer: fix escape docstring 2025-07-31 20:42:36 +02:00
pinpox deb236c834
services/jitsi: Add missing dependency
To be able to use jitsi's breakout rooms (`muc_breaktout_rooms`),
prosody needs to include the `cjson` lua dependency.
2025-07-31 17:37:12 +02:00
Sandro c4e4ad2cda
komga: bugfix allow komga access to /proc/mounts (#429206) 2025-07-31 15:13:24 +02:00
Martin Weinelt cdeff13765
nixos/lasuite-meet: serve admin ui static assets via nginx (#429362) 2025-07-30 17:40:00 +02:00
Cobalt 069ad13822
nixos/outline: add support for S3 Transfer Acceleration
An optional extension for anyone using the transfer acceleration, either
on S3 or as a workaround for non-public S3 services.
2025-07-30 14:22:11 +02:00
Chris Moultrie 5983d4bed3
web-apps/komga: add tebriel to maintainers 2025-07-29 22:34:31 -04:00
Chris Moultrie 42eb3d422a
komga: bugfix allow komga access to /proc/mounts by service
New Java call to the Files.getFileStore uses /proc/mounts so we can no
longer hav ProcSubset as only "pid".
2025-07-29 11:15:03 -04:00
Niklas Hambüchen 436a8a1152
umami: init at 2.19.0; nixos/umami: init (#380249) 2025-07-29 16:48:52 +02:00
Diogo Correia 6d61e7b089 nixos/umami: init module 2025-07-29 14:38:02 +00:00
Alexander Sieg 32ca49df92
nixos/lasuite-meet: serve admin ui static assets via nginx 2025-07-29 16:20:44 +02:00
xanderio a70576d5ce
nixos/lasuite-meet: fix preStart script for backend (#425556) 2025-07-29 16:09:19 +02:00
Sandro 781856bcb7
go-httpbin: init at 2.18.3, nixos/go-httpbin: init module (#427717) 2025-07-29 15:48:11 +02:00
Martin Weinelt 7f52135a59
nixos/postfix: fold main and master config into settings attribute 2025-07-28 17:03:08 +02:00
Martin Weinelt 029f408b94
treewide: migrate postfix configurations to service.postfix.config
The `services.postfix.config` option is a freeform type that represents
settings in `main.cf`. The top-level options on the postfix module were
replaced by these and that is the reason behind this migration.
2025-07-28 16:42:17 +02:00
Jennifer Graul 1918e3ced1
nixos/peering-manager: fix bgp session poller
The "--all" flag from poll_bgp_sessions has been removed and is now the
default.
2025-07-28 13:29:13 +02:00
Jennifer Graul 4c21b28447
nixos/peering-manager: add environmentFile option 2025-07-28 13:29:10 +02:00
Jennifer Graul 6f35ae801e
nixos/peering-manager: remove enableOidc option since it is now builtin 2025-07-28 13:19:01 +02:00
Maximilian Bosch c3da85f1bb
Merge: nixos/nextcloud: fix eval (#428709) 2025-07-28 11:37:35 +02:00
Izorkin cbec672b38
nixos/libretranslate: init 2025-07-27 03:46:22 +02:00
Sandro Jäckel 9e2d007b94
nixos/nextcloud: configure redis by default 2025-07-26 23:31:35 +02:00
Sandro Jäckel 58def163c0
nixos/nextcloud: fix eval 2025-07-26 23:22:15 +02:00
Cosima Neidahl 009450ee9e
nixos/peertube-runner: init module (#427007) 2025-07-25 21:28:22 +02:00
June Stepp f200c10c8a
nixos/peertube-runner: init module 2025-07-25 10:58:04 -05:00
Sandro Jäckel 7259b7ca67
nixos/hedgedoc: add configureNginx option 2025-07-24 22:01:49 +02:00
6543 b6088b0d8e nixos/nextcloud: remove with lib usage 2025-07-24 17:00:10 +02:00
Maximilian Bosch 5d30429bbf
Merge: nixos/nextcloud: move phpPackage default into option (#423792) 2025-07-24 16:31:49 +02:00
Wolfgang Walther 5a0711127c
treewide: run nixfmt 1.0.0 2025-07-24 13:55:40 +02:00
Wolfgang Walther 62fe016519
treewide: run treefmt with mdcr/nixfmt 2025-07-24 13:52:31 +02:00
Wolfgang Walther 6c47e7d5da
treewide: fix syntax errors in nix code blocks
Fixes all code blocks with "nix" language in markdown files for syntax
errors to be able to run nixfmt in the next step.
2025-07-24 13:52:29 +02:00
Defelo 224dc30d39
nixos/go-httpbin: init module 2025-07-23 16:17:47 +02:00
Pol Dellaiera 0a5c852bbf
nixos/drupal: add config for private files directory (#427260) 2025-07-23 10:59:12 +02:00
Rémi NICOLE 16bf4a02fa
nixos/nextcloud: fix module maintainers (#427548) 2025-07-23 10:40:37 +08:00