Commit graph

37750 commits

Author SHA1 Message Date
liberodark 5fffaee9e9 oxidized: switch to tmpfiles 2025-05-07 16:03:33 +02:00
Wael Nasreddine c2dcf9be27
nixos/ncps: delete failing secretKeyPath assertion and wait for network-online.target (#396901) 2025-05-01 14:33:24 -07:00
Peder Bergebakken Sundt bf7cded54e
nixos/mautrix-*: add package option (#400113) 2025-05-01 21:57:18 +02:00
Gabe Venberg dad528800a nixos/restic-rest-server: fixed typos. 2025-05-01 21:25:38 +02:00
Martin Weinelt c840946142
nixos/geoclue2: set default location service to beaconDB (#391845) 2025-04-30 22:15:11 +02:00
Edward Hesketh 414b7c5a01
nixos/ncps: wait for network-online, remove failing assertion
- Start after network-online as ncps requires all upstreams to be online
  and reachable when starting
- Remove a bad assertion causing failures at eval time when using
  secrets management systems
2025-04-30 19:57:31 +01:00
John Ericson 220c309309
nixVersions.nix_2_28: 2.28.2 -> 2.28.3 (#402977) 2025-04-30 11:41:57 -04:00
Sandro 55e8dc37a3
nixos/luksroot: remove useless $new_k_luks (#115832) 2025-04-30 16:51:33 +02:00
Doron Behar 708480f836
nixos/i18n: add extraLocales option (#356477) 2025-04-30 12:06:27 +03:00
Jörg Thalheim 7fd4e73000 nix: update nix-fallback-paths to 2.28.3 2025-04-30 08:35:16 +02:00
xanderio 7b67071359
nixos/snipe-it: clear and rebuild caches on startup (#402827) 2025-04-29 21:36:25 +02:00
Cryolitia PukNgae ef059726f1
nixos/xone: enable xpad-noone by default
Co-authored-by: misuzu <neironyan@gmail.com>
2025-04-29 22:38:48 +08:00
Alexander Sieg 5205c8b5ca
nixos/snipe-it: clear and rebuild caches on startup 2025-04-29 15:45:04 +02:00
Marcus Ramberg 178f67938b
ebpf-exporter: init at 2.4.2 and add module (#301253) 2025-04-29 15:05:18 +02:00
Sandro 97cd8f2b4c
postsrsd: 1.12 -> 2.0.10 + corresponding service changes (#397316) 2025-04-29 14:41:04 +02:00
Martin Weinelt 7cd06772e3
nixos/livekit: init, nixos/lk-jwt-service: init (#399627) 2025-04-29 12:44:07 +02:00
Johannes Kirschbauer c55b5f9b72
nixos/networking: fix fqdnOrHostName when FQDN explictly set (#400864) 2025-04-29 10:34:05 +02:00
illustris 5803bdb9fc
Revert "Use mkImageMediaOverride for filesystem attributes of various images" 2025-04-29 08:41:26 +05:30
Vladimír Čunát 85f896ec76
nixos/kresd: add kresd-cli wrapper script (#388290) 2025-04-28 17:58:22 +02:00
Jeremy Fleischman d1e920fc37
services/postsrsd: updates for postsrsd 2
postsrsd 2 expects a config file, and has some breaking changes that
make it incompatible with some of our old options.
2025-04-28 17:37:16 +02:00
musjj 07dde5f4c4 nixos/i18n: refactor aggregated locales into a variable 2025-04-28 22:04:41 +07:00
musjj 0f13f78d02 nixos/i18n: warn when the user has a badly-configured supportedLocales 2025-04-28 22:04:41 +07:00
musjj 401ec59a17 nixos/i18n: hide supportedLocales from the manual 2025-04-28 22:04:41 +07:00
Wolfgang Walther d96cef60d9
opensmtpd-extras: drop in favor of standalone filters (#376913) 2025-04-28 11:46:47 +00:00
nikstur bf2bc08b37
repart: Enable discard option (#397906) 2025-04-28 13:34:32 +02:00
Patrick Steinhardt feddb6a2bc opensmtpd-extras: drop in favor of standalone tables
Upstream has archived the OpenSMTPD-extras repository with 82c49af (add
deprecation notice, 2024-10-22). Instead, it has created a set of
repositories, each containing one of the tables. The old tables aren't
compatible anymore with recent OpenSMTPD versions due to changed
protocols. Other extras, like the queues, don't have an alternative to
the best of my knowledge.

Furthermore, opensmtpd-extras doesn't even build anymore, furthermore
indicating that there aren't any users of this package. Remove the
"opensmtpd-extras" package and raise errors pointing to the new
standalone tables.

Add a release note.
2025-04-28 13:26:53 +02:00
Patrick Steinhardt 132c73dd29 nixos/opensmtpd: adapt to changed filter location
The location of filters for OpenSMTPD has been changed to
"libexec/smtpd". Adapt the service accordingly.
2025-04-28 13:26:53 +02:00
r-vdp 58013c9fb2
nixos/mycelium: pull in network-online.target
The test was failing because it waits for network-online.target which
was not part of the transaction.
2025-04-28 10:42:15 +02:00
musjj 073e4bd689 nixos/i18n: add extraLocales option 2025-04-28 02:48:08 +07:00
xanderio a9fb8169f5
nixos/tzupdate: Fix reference to non-existing attribute (#402226) 2025-04-27 15:24:01 +02:00
Paul Haerle 86a1af8a7b
nixos/systemd: clarify what enableStrictShellChecks checks (#401460) 2025-04-27 14:15:15 +02:00
Vladimír Čunát 22f5df0632
stub-ld: disable 32-bit stub ld on 64-bit systems (#398449) 2025-04-27 13:37:43 +02:00
Victor Engmark 9b3ee87994
nixos/tzupdate: Remove reference to non-existing attribute
Fixes #402016.
2025-04-27 10:48:37 +02:00
Wolfgang Walther 85b066ea53
waybar: make the systemd target that pulls in waybar configurable (#399673) 2025-04-27 08:45:49 +00:00
Arne Keller c632b25205
nixos/flashprog: Enable depending NixOS modules (#389346) 2025-04-26 23:10:07 +02:00
Robbert Gurdeep Singh 06a3db7552
nixos/wyoming-piper: allow w+x for onnxruntime (#402111)
Before this change, running piper would fail with

> cannot enable executable stack as shared object requires

because the stack is marked rwx on newer libonnxruntime versions.
2025-04-26 22:36:21 +02:00
Yt ae0f2bc1a3
services(cloudflare-dyndns): use new CLOUDFLARE_API_TOKEN_FILE setting (#401634) 2025-04-26 15:20:44 -04:00
Marcus Ramberg dab7ae6c07
nixos/k3s: add default hash for autoDeployCharts (#402005) 2025-04-26 18:06:39 +02:00
cr0n f46be21864
nixos/rsyncd: fix ini format for global section (#385064)
According to the manpage the rsyncd.conf has a global section without a
module header. Settings for listening port or bind address must be put
there and will not work if defined in a global submodule (i.e. below a
"[global]" header).

This commit changes the ini format generator for the rsyncd service to
allow a global section in the config file without a submodule header.

Fixes #304293

Credits to @nydragon

* remove retrocompat, add incompat release notes
2025-04-26 17:46:51 +02:00
Martin Weinelt b80382cf91
nixos/evcc: allow avahi discovery of eebus devices (#395686) 2025-04-26 15:27:38 +02:00
Ilan Joselevich 7da9ff9fab
nixos/openbao: init
- Added a NixOS module using RFC42 and plenty of systemd hardening
- Added a NixOS VM Test which checks the basic functionality
- Refactored the package to support HSM and UI
2025-04-26 14:48:58 +03:00
Robert Rose 4baad06ecf nixos/k3s: add default hash for autoDeployCharts module 2025-04-26 13:45:00 +02:00
Maximilian Bosch 98ed531dd3
Merge: nixos/oci-containers: escape login.username (#401765) 2025-04-26 11:26:09 +02:00
Pol Dellaiera 740d16c45a
nixos/starship: add transientPrompt option set for starship on fish shells (#400431) 2025-04-26 06:50:41 +00:00
Scott Edlund 02555cd0bd nixos/systemd: clarify what enableStrictShellChecks checks
the specifics of this option are in the release notes, but bring
them into the documentation.
2025-04-26 01:46:12 +08:00
Maximilian Bosch 31357d17a3
Merge: nixos/nextcloud: Disable web updater by default (#401147) 2025-04-25 18:31:53 +02:00
Maximilian Bosch 9cd14670ad
nixos/oci-containers: escape login.username
When using e.g. GitLab as container registry, the token name may be the
username. However, the token name can contain special characters
including spaces breaking the registry login like this:

    Apr 25 15:35:48 test42 pre-start[294091]: image doesn't exist locally and login failed
    Apr 25 15:35:52 test42 pre-start[294289]: Error: accepts at most 1 arg(s), received 2
    Apr 25 15:35:52 test42 pre-start[294297]: Error: registry.example.com/foo/bar/baz: image not known

Applying `escapeShellArg` on it fixes the problem.
2025-04-25 15:39:00 +02:00
Ryan Lahfa 55c3343f8d
bootspec: generalize the bootspec tooling packaging (#401484) 2025-04-25 15:17:29 +02:00
Sandro 172dae70d0
olivetin: init at 2025.4.22 (#395047) 2025-04-25 14:39:01 +02:00
Jeremy Fleischman 7161a83931
services(cloudflare-dyndns): use new CLOUDFLARE_API_TOKEN_FILE setting
We recently upgraded to cloudflare-dyndns 5.3:
24f9910708,
so we can now use this new `CLOUDFLARE_API_TOKEN_FILE` feature that
landed in v5.2: 1d563d2752
2025-04-24 18:25:32 -07:00