tobias/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-11-17 21:25:19 +01:00
Code Issues Packages Projects Releases Wiki Activity
793175 commits 216 branches 129 tags 15 GiB
Commit graph

37750 commits

Author SHA1 Message Date
Silvan Mosberger e52d633a63 Merge remote-tracking branch 'upstream/staging-next' into staging 2025-04-02 18:30:54 +02:00
Felix Zieger 1bf74aee3c nixos/haven: init 2025-04-02 17:30:18 +02:00
Florian Klink d0b0e168c9
nixos/tmpfiles: properly escape argument option (#391318) 2025-04-02 15:52:08 +01:00
Domen Kožar 5897ff97e2
paretosecurity: 0.0.91 -> 0.0.96 (#393366) 2025-04-02 15:13:35 +01:00
Leonie Marcy Vack 2e0d0d6333 znapzend: use system's zfs package 2025-04-02 15:12:59 +02:00
Mikael Voss 045fbc389f
nixos/tmpfiles: properly escape argument option 
The systemd.tmpfiles.settings.<name>.<path>.<type>.argument option may
contain arbitrary strings. This could allow intentional or unintentional
introduction of new configuration lines.

The argument field cannot be quoted, C‐style \xNN escape sequences are
however permitted. By escaping whitespace and newline characters, the
issue can be mitigated.
 2025-04-02 13:23:42 +02:00
Maximilian Bosch c8274e56b8
Merge: nixos/nextcloud: check if ownership of datadir and config is correct (#379581) 2025-04-02 10:51:55 +02:00
โทสฺตัล 7554581474 nixos/h2o: enable HTTP/3 via QUIC 2025-04-02 15:11:53 +07:00
โทสฺตัล 301581e073 nixos/h2o: typo 2025-04-02 15:11:53 +07:00
Florian Klink 2b0e0a9fd4
nixos/h2o: disable OCSP stapling w/ Let’s Encrypt (support sunset) (#393765) 2025-04-02 09:10:42 +01:00
Maximilian Bosch 39dcdc5c9b
nixos/nextcloud: check if ownership of config is correct 
Follow-up on #169733

For `data`, Nextcloud checks on its own if everything is readable.
However, for `config` it's crucial that the ownership is actually
correct: otherwise, systemd-tmpfiles will refuse any operations inside
because of unsafe path transitions.

This can result in a subtly broken setup by the `override.config.php`
not being updated, but also not part of the system closure anymore
(another override.config.php is referenced now) which means it'll be
GCed eventually even though Nextcloud relies on it.

If this precondition is not met, the following error will be printed:

    nextcloud-setup-start[972]: /var/lib/nextcloud/config is not owned by user 'nextcloud'!
    nextcloud-setup-start[972]: Please check the logs via 'journalctl -u systemd-tmpfiles-setup'
    nextcloud-setup-start[972]: and make sure there are no unsafe path transitions.
    nextcloud-setup-start[972]: (https://nixos.org/manual/nixos/stable/#module-services-nextcloud-pitfalls-during-upgrade)
 2025-04-02 09:30:17 +02:00
misuzu 0f4487251d
strfry: init at 1.0.4, nixos/strfry: init (#385587) 2025-04-02 10:13:41 +03:00
Morgan Jones 9f23ed6644
nixos/mattermost: increase db connect timeouts 2025-04-01 22:17:57 -07:00
Morgan Jones ea485e1207
mattermost: squash systemd-tmpfiles warning (+ other minor fixes) 
There was a systemd-tmpfiles warning about not being able to remove the
'plugins' directory. Squash this warning through removal of unnecessary
systemd-tmpfiles options, and write a test for it.

Add the {option}`services.mattermost.pluginsBundle` option to allow
overriding the plugin directory and also using it for tests. Update
wording in option documentation so it is more clear.

Use formats.json instead of builtins.toJSON so module merging works.

Make the tests go faster by pipelining shutdowns of nodes.
 2025-04-01 19:20:48 -07:00
Felix Zieger dfd82bf3e5 nixos/strfry: init 2025-04-01 23:20:15 +02:00
Pol Dellaiera 25264d105d nixos/docling-serve: init 2025-04-01 21:42:53 +02:00
K900 30edc74585 Merge remote-tracking branch 'origin/staging-next' into staging 2025-04-01 21:12:38 +03:00
Silvan Mosberger 374e6bcc40 treewide: Format all Nix files 
Format all Nix files using the officially approved formatter,
making the CI check introduced in the previous commit succeed:

  nix-build ci -A fmt.check

This is the next step of the of the [implementation](https://github.com/NixOS/nixfmt/issues/153)
of the accepted [RFC 166](https://github.com/NixOS/rfcs/pull/166).

This commit will lead to merge conflicts for a number of PRs,
up to an estimated ~1100 (~33%) among the PRs with activity in the past 2
months, but that should be lower than what it would be without the previous
[partial treewide format](https://github.com/NixOS/nixpkgs/pull/322537).

Merge conflicts caused by this commit can now automatically be resolved while rebasing using the
[auto-rebase script](8616af08d9/maintainers/scripts/auto-rebase).

If you run into any problems regarding any of this, please reach out to the
[formatting team](https://nixos.org/community/teams/formatting/) by
pinging @NixOS/nix-formatting.
 2025-04-01 20:10:43 +02:00
Adam C. Stephens 62d611a22b
nixos/incus: add AppArmor rules (#386060) 2025-04-01 12:51:34 -04:00
Franz Pletz 82f0c74912
nixos/zoxide: init module (#393493) 2025-04-01 18:01:32 +02:00
Tanya Arora 8125d74e21
nixos/dnsmasq: Fix failure on read-only /etc when resolveLocalQueries=false (#391738) 2025-04-01 17:59:21 +02:00
K900 6408946263 Merge remote-tracking branch 'origin/staging-next' into staging 2025-04-01 16:56:46 +03:00
Pol Dellaiera a18002797a
nixos/navidrome: Add environmentFile config option (#389471) 2025-04-01 15:55:58 +02:00
Maximilian Bosch f20b220e17
Merge: nixos/nextcloud: add maintainer team, update docs about maintainership of apps (#393069) 2025-04-01 11:25:28 +02:00
John Titor 51dc163364 nixos/ananicy: re enable BPF on hardened kernels 
This was a workaround to begin with, as hardened kernel didn't support tracing.
Back then kernel level tracing was only available through debugfs, and now that
tracefs has been available on NixOS for a while now, enabled in
Link: https://github.com/NixOS/nixpkgs/pull/388751

This workaround can be removed and bpf can be used with tracefs.
Link: https://github.com/NixOS/nixpkgs/issues/360957

Signed-off-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
 2025-04-01 14:42:59 +05:30
Casey Link 2db95477f9 nixos/ocis: default to the newly renamed ocis-bin5 package 
And we are getting ready for ocis-bin7 to land, where we will need to
compare it to the system.stateVersion.
 2025-04-01 08:49:20 +02:00
K900 a6d5666400 Merge remote-tracking branch 'origin/staging-next' into staging 2025-04-01 08:39:50 +03:00
Jappie3 b40d9c82c1
nixos/kanidm: don't set RUST_LOG in systemd service 
setting RUST_LOG in the systemd service means that the
serverSettings.log_level option is pretty much useless, as RUST_LOG
takes precedence
 2025-03-31 19:34:06 +02:00
André Silva 64ee43c568
nixos/hyprland: fix call to wayland-session.nix (#394858) 2025-03-31 17:47:05 +01:00
Florian Klink e9b7593367
nixos/movim: Fix accidental append to module system property (#394861) 2025-03-31 16:38:51 +01:00
Arne Keller ee6d7cb213
nitter: 0-unstable-2024-02-26 -> 0-unstable-2025-02-25; nixos/nitter: rename guestAccounts to sessionsFile (#393028) 2025-03-31 17:16:30 +02:00
nixpkgs-ci[bot] 86e22e1e80
Merge staging-next into staging 2025-03-31 12:06:34 +00:00
Herwig Hochleitner 2107f032ab nixos/startx: remove graphical-session assertions 
this assertion broke gnome sessions in very hard to debug way:

- gdm starts, but on successful login just returns to login screen
- journalctl isn't exactly helpful in this condition:
  - a typical gnome login will involve many warnings and errors, that
    aren't actually preventing login, but will lead affected users
    on a merry chase for many hours
  - the actual indicators in the log arent't even an errors, only info and warning
    - graphical-session.target: Starting requested but asserts failed.
    - Assertion failed for Current graphical user session.

startx is a power tool for power users, needing a certain level of
expertise for the user to even want it, let alone use correctly.
However, the expectation is, that the necessary expertise will be
contained within the domain of startx and that it not break tools for
regular users.

This partially reverts commit e1c3082085.
 2025-03-31 11:58:09 +01:00
Robert Hensing e12690d530 nixos/movim: Fix accidental append to module system property 2025-03-31 12:24:22 +02:00
André Silva 09879a452b
nixos/hyprland: fix call to wayland-session.nix 2025-03-31 11:15:31 +01:00
Pratham Patel cd795fd3f0 nixos/modules: cosmic: init 2025-03-31 15:28:55 +05:30
Pratham Patel cd85a8a827 nixos/modules: cosmic-greeter: init 2025-03-31 15:28:55 +05:30
Wolfgang Walther 899c3986e7
nixos/postgrest: init module (#394041) 2025-03-31 07:20:43 +00:00
nixpkgs-ci[bot] cea056bb01
Merge staging-next into staging 2025-03-31 06:06:14 +00:00
Austin Horstman f62c664b16
qt: add "kde6" to qt.platformTheme (#384669) 2025-03-31 00:00:31 -05:00
Adam C. Stephens 11e4741be7
incus: 6.10.1 -> 6.11.0 (#394108) 2025-03-30 21:20:03 -04:00
nixpkgs-ci[bot] 34600d0052
Merge staging-next into staging 2025-03-31 00:17:08 +00:00
Maximilian Bosch 97d215cf17
Merge: php: 8.3 -> 8.4 (#394112) 2025-03-30 22:54:31 +02:00
Pol Dellaiera 35bb79372d
prometheus-chrony-exporter: init chrony nixos module (#394575) 2025-03-30 22:30:21 +02:00
Arne Keller fd9f17ef49
nixos/filesystems: init bindfs (#337697) 2025-03-30 22:10:57 +02:00
Seth Flynn 53b589567a
nixos/wayland-session: fix conflicts between users (#390168) 2025-03-30 16:09:54 -04:00
Seth Flynn 4df2726a5c
nixos/wayland-session: fix conflicts between users 2025-03-30 15:37:15 -04:00
Sokhibjon Orzikulov 20396156cb
e-imzo: initialize module 
e-imzo: (fix, to be squashed) formatted accordingly using `nixfmt`
e-imzo: (fix, to be squashed) removed lib from options by @ FliegendeWurst
e-imzo: (fix, to be squashed) use lib.getExe as mainProgram is defined by @FliegendeWurst
e-imzo: (fix, to be squashed) formatted with `nixfmt-rfc-style` suggestion by @FliegendeWurst
Co-Authored-By: Arne Keller <arne.keller@posteo.de>
 2025-03-30 22:46:33 +05:00
Nico Felbinger 7dc56449ad
nixos/modules: fix part-db package 2025-03-30 15:20:13 +02:00
Wolfgang Walther 064432a519
nixos/postgrest: init module 2025-03-30 14:24:16 +02:00
nixpkgs-ci[bot] ed9f389a51
Merge staging-next into staging 2025-03-30 12:06:19 +00:00
PAEPCKE, Michael cdb80c1f44
prometheus-exporter: init chrony module 2025-03-30 11:14:30 +00:00
Jonas Heinrich 8d69e1faae
nixos/wordpress: Use https by default for caddy (#375375) 2025-03-30 10:31:52 +02:00
nixpkgs-ci[bot] 03db8f9dcb
Merge staging-next into staging 2025-03-30 00:17:21 +00:00
Maximilian Bosch 65121c9333
Merge: nextcloud-occ: work with sudo disabled (#380211) 2025-03-29 23:25:45 +01:00
Daniel Xu f1c4d339a5 nixos/wordpress: Use https by default for caddy 
Previously, `http://` scheme was hard coded into the caddy config if
`webserver = "caddy"` was chosen. This is fine for local testing, but is
problematic if you want your nixos host to be public facing.

In the public facing case, you generally want to be using TLS. But since
the wordpress module generates the caddyfile rule, the user's nixos
config cannot easily change it to also allow https.

An alternative would be to reverse proxy an https rule to the generated
http rule, but that's somewhat questionable as there's not an internal
http endpoint to proxy to. It might be possible but I couldn't figure
it out.

So simplify by omitting the scheme. This causes caddy to use https by
default and 301 redirect any http requests to the https endpoint. Caddy
will just do the right thing if it's being hosted on a local/internal
hostname (self sign certificates).

This should be backwards compatible with previous default if users are
using reasonable browsers/tools.

Signed-off-by: Daniel Xu <dxu@dxuuu.xyz>
 2025-03-29 15:10:35 -06:00
Bruno BELANYI 8fb60c58dd
calibre-web: fix ebook conversion missing config_binariesdir setting (#366642) 2025-03-29 20:08:35 +00:00
Pol Dellaiera 0ef31de6ea
monica: pin php version to 8.3 (#394415) 2025-03-29 20:12:16 +01:00
Pol Dellaiera f79c218ea5
icingaweb2: pin php version to 8.3 (#394399) 2025-03-29 20:11:29 +01:00
Maximilian Bosch b88fdf622c
Merge: nixos/dolibarr: pin php version (to 8.3) (#394153) 2025-03-29 20:11:04 +01:00
Pol Dellaiera 6945312759
agorakit: pin php version to 8.2 (#394410) 2025-03-29 20:10:33 +01:00
Piotr Kwiecinski 69c26f338b
monica: pin php version to 8.3 2025-03-29 20:07:31 +01:00
Piotr Kwiecinski ab3b601d88
rutorrent: pin php version to 8.2 2025-03-29 20:00:27 +01:00
Piotr Kwiecinski bafb6848e7
agorakit: pin php version to 8.2 2025-03-29 19:44:20 +01:00
Piotr Kwiecinski 15d0312a8a
icingaweb2: pin php version to 8.3 2025-03-29 19:25:44 +01:00
Gaetan Lepage 605ed28375 nixos/dolibarr: pin php version (to 8.3) 2025-03-29 13:32:10 +01:00
nixpkgs-ci[bot] 02e075f1a7
Merge staging-next into staging 2025-03-29 12:06:10 +00:00
K900 4b2bc4c4d7
nixos/k3b: remove, refer users to k3b 24.08 (Qt 6) (#351093) 2025-03-29 14:12:02 +03:00
K900 b5be581efe Merge remote-tracking branch 'origin/staging-next' into staging 2025-03-29 09:07:13 +03:00
โทสฺตัล 7c8b3c88bb nixos/h2o: rename certNames → acmeCertNames 
We are in agreement ðis improves the naming clarity
 2025-03-29 12:31:46 +07:00
โทสฺตัล 0c67557015 nixos/h2o: disable OCSP stapling w/ Let’s Encrypt (support sunset) 
It was noted in the TLS recommendations comment, but it actually should
be disabled everywhere if ACME is used as H2O has in enabled by default.

More info: <https://letsencrypt.org/2024/12/05/ending-ocsp/>
 2025-03-29 12:31:46 +07:00
Ryan Hendrickson 800863744b
nixos/geoclue2: add options for static source (#392257) 2025-03-28 21:10:22 -04:00
nixpkgs-ci[bot] 8c63a3f00d
Merge staging-next into staging 2025-03-29 00:15:41 +00:00
Maximilian Bosch 90a0f3874f
nixos/selfoss: pin to php83 
https://github.com/NixOS/nixpkgs/pull/394112#pullrequestreview-2726857849
 2025-03-28 22:46:39 +01:00
Adam C. Stephens 9ff6900615
incus: 6.10.1 -> 6.11.0 
https://discuss.linuxcontainers.org/t/incus-6-11-has-been-released/23322
https://github.com/lxc/incus/releases/tag/v6.11.0
 2025-03-28 16:58:33 -04:00
Izel Nakri d69fa4d3fb nixos/bitbox-bridge: init 
Signed-off-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
 2025-03-29 00:49:47 +05:30
nixpkgs-ci[bot] 66681a870f
Merge staging-next into staging 2025-03-28 18:06:07 +00:00
Maximilian Bosch 43fd8c10aa
Merge: nixos/nextcloud-notify_push: add nextcloud-setup (#392226) 2025-03-28 17:29:13 +01:00
e1mo 6764561f3e
nixos/bird-lg: Remove deprecation warnings 
The deprecation warning has been in place for quite some time now, so it
should be safe to get rid of it and clean the module up a bit.
 2025-03-28 14:49:05 +01:00
nixpkgs-ci[bot] d9eb3e5d48
Merge staging-next into staging 2025-03-28 12:06:30 +00:00
Maximilian Bosch 360cd99eed
Merge: nixos/doc: include extensions in postgresql upgrade script (#392831) 2025-03-28 10:33:00 +01:00
nixpkgs-ci[bot] 46157d4433
Merge staging-next into staging 2025-03-28 06:05:33 +00:00
Philip Taron ed221a5330
nixVersions.nix_2_24: 2.24.12 -> 2.24.13 (#393707) 2025-03-27 18:20:16 -07:00
nixpkgs-ci[bot] 3ed34914ea
Merge staging-next into staging 2025-03-28 00:15:57 +00:00
lassulus 3e7ce75dc1
jitsi-meet and prosody Added ownerallowkick patch and all_owners module (#155755) 2025-03-27 16:18:08 -07:00
Aaron Andersen caf5710825
redmine: 5.1.7 -> 6.0.4 (#355760) 2025-03-27 18:50:32 -04:00
Felix Bühler e34feb47b7
Revert "nixos/caddy: validate at build-time" (#393806) 2025-03-27 23:09:05 +01:00
Pol Dellaiera 952001e9bb
blocky: bugfix, add systemd hardening, log, adjust: startup targets (#388962) 2025-03-27 21:46:59 +01:00
Felix Buehler 3546e59acc Revert "nixos/caddy: validate at build-time" 
This reverts commit 63b6df42de.
 2025-03-27 20:25:54 +01:00
Jörg Thalheim 49a708c3f7 nix: update nix-fallback-paths to 2.24.13 2025-03-27 13:24:50 +01:00
nixpkgs-ci[bot] 9f7eb43375
Merge staging-next into staging 2025-03-27 12:07:01 +00:00
Aleksana f42205ed7f
xdg/portals/lxqt: Fix documentation string indent (#391909) 2025-03-27 18:52:23 +08:00
nixpkgs-ci[bot] 11a016be8f
Merge staging-next into staging 2025-03-27 06:05:43 +00:00
Aleksana b4ded625bd
nixos/environment: make {sessionV,v}ariables items nullable (#354186) 2025-03-27 10:10:31 +08:00
Peder Bergebakken Sundt a41310e269
nixos/code-server: recommend libargon2 over npx argon2-cli (#388640) 2025-03-27 01:19:37 +01:00
nixpkgs-ci[bot] 8ad49a1dc2
Merge staging-next into staging 2025-03-27 00:15:47 +00:00
Nick Cao c58cb4c034
Update Nvidia busid check (#388892) 2025-03-26 18:33:41 -04:00
Peder Bergebakken Sundt facba1f63a nixos/code-server: recommend libargon2 over npx argon2-cli 2025-03-26 23:09:55 +01:00
heisfer 825381d5ed nixos/zoxide: init module 2025-03-26 22:08:23 +02:00
Pol Dellaiera dd659174e0
nixos/bluetooth: add systemd hardening (#377927) 2025-03-26 20:32:54 +01:00
Neyts Zupan 6aaeae81ae Take systemd configuration from upstream package instead of definiting 
them in the nixos module.
 2025-03-26 18:23:59 +00:00
nixpkgs-ci[bot] 759b761b0d
Merge staging-next into staging 2025-03-26 18:05:48 +00:00
Ilan Joselevich 34857ed13a
nixos/amazon-ec2-amis: remove (#392076) 2025-03-26 16:40:25 +00:00
Jonas Heinrich 5325034183
froide-govplan: init at 0-unstable-2025-01-27 (#349750) 2025-03-26 14:27:02 +01:00
MakiseKurisu 9b7d65ad87
nixos/incus: add AppArmor rules to allow access to Nix store 
Fix #350012
 2025-03-26 21:01:14 +08:00
nixpkgs-ci[bot] 5e06b173b0
Merge staging-next into staging 2025-03-26 12:06:44 +00:00
Arne Keller 98430f956c
pinchflat: init at 2025.3.17, nixos/pinchflat: init (#364135) 2025-03-26 11:06:02 +01:00
nixpkgs-ci[bot] 2275dd1468
Merge staging-next into staging 2025-03-26 06:05:35 +00:00
liberodark 63b416944c nixos/openrgb: fix issue for G502 2025-03-26 10:02:35 +05:30
nixpkgs-ci[bot] dc5152a1d3
Merge staging-next into staging 2025-03-26 00:15:56 +00:00
Marcel Novotny 2411e6eecd Added Allowners muc module to prosody and jitsi-meet 2025-03-25 23:17:58 +01:00
Felix Bühler fb0fb09b5c
nixos/caddy: validate at build-time (#377075) 2025-03-25 22:53:00 +01:00
Yt f2a90a4fed
ebusd: update to 24.1 and add new log facility option ("device") (#391842) 2025-03-25 17:36:31 -04:00
K900 aca918e668 Merge remote-tracking branch 'origin/staging-next' into staging 2025-03-25 21:06:52 +03:00
Arne Keller 657dd8d7cd
nixos/ipfs-cluster: init (#292290) 2025-03-25 18:53:02 +01:00
Felix Singer 3c341a1df3 nixos/redmine: Precompile assets during pre-start phase 
Signed-off-by: Felix Singer <felixsinger@posteo.net>
 2025-03-25 16:59:54 +01:00
Felix Singer 4a803e9b26 redmine: 5.1.7 -> 6.0.4 
With release 6.0, the themes directory was moved to a different location
and thus the NixOS Redmine module needs to be adjusted. Assets seem to
be stored in public/assets now and so that needs to be handled by the
NixOS module as well.

[1] https://www.redmine.org/issues/41731

Signed-off-by: Felix Singer <felixsinger@posteo.net>
 2025-03-25 16:57:38 +01:00
Nathan Fish 950324a23e nixos/ipfs-cluster: init 
Co-authored-by: Sorki <srk@48.io>
 2025-03-25 16:34:16 +01:00
Wolfgang Walther 7277ebc2f9
Reapply "nixos/postgresql: add docs about procedural languages" 
This reverts commit a4006e4970.
 2025-03-25 15:00:50 +01:00
Wolfgang Walther a4006e4970
Revert "nixos/postgresql: add docs about procedural languages" 
This reverts commit 0bc099abd6.
 2025-03-25 14:58:02 +01:00
Dominique Martinet fb5e34fb39 nixos/cryptpad: fix service with nodejs 22.11 (for real) 
The previous fix had only been tested locally through a runtime edit of
the service, and the order in which @chown had been re-added was
different so commit cf498c1a61 ("nixos/cryptpad: fix service with
nodejs 22.11") did not actually fix the issue.

This properly orders @chown after @privileged so the rule is respected,
and also properly denies with EPERM instead of allowing the chown family
of syscalls: this will properly prevent seccomp from killing nodejs
while still disallowing fchown()

Fixes https://github.com/NixOS/nixpkgs/issues/370717
 2025-03-25 13:37:25 +00:00
Maximilian Bosch dad0bf139b
Merge: nixos/postgresql: add docs about procedural languages (#392399) 2025-03-25 13:00:09 +00:00
Maximilian Bosch 773094b49c
nixos/nextcloud: clarify support status of apps in the manual 
Realized that this is something, I discussed with Benedikt, but wasn't
written down somewhere.
 2025-03-25 12:41:30 +00:00
Maximilian Bosch d3110c9532
nextcloud: update maintainer information 
* Create a dedicated team. Before, information was inconsistent between
  e.g. tests and package, module had none at all.
* Add maintainership from us to all trivially packaged apps. This is
  only to make sure that we take care of them building and installing
  and that's about it.
 2025-03-25 12:41:18 +00:00
nixpkgs-ci[bot] 935906364c
Merge staging-next into staging 2025-03-25 12:06:47 +00:00
Maximilian Bosch 1fcfb2dcea
Merge: nixos/nextcloud: Also install when config.php exists but is empty (#391375) 2025-03-25 10:43:41 +00:00
uku b6ba4a499c
nixos/nitter: rename guestAccounts to sessionsFile 
for consistency with upstream, see
6fcd849eff
 2025-03-25 10:48:27 +01:00
misuzu f630533b4a
nixos/xpad-noone: init (#389752) 2025-03-25 11:29:52 +02:00
Kai 4867d68ec9
nixos/doc: include extensions in postgresql upgrade script 2025-03-25 07:59:01 +01:00
nixpkgs-ci[bot] f079e356d1
Merge staging-next into staging 2025-03-25 00:16:28 +00:00
Will Fancher c694997d9e
Revert "24.11 beta release" (#392904) 2025-03-24 19:47:16 -04:00
Will Fancher eefd9323ae Revert "24.11 beta release" 
This reverts commit f49e820fbc.

This should have only been on release-24.11, not master
 2025-03-24 19:39:13 -04:00
Ryan Hendrickson 4c2f564ef0 nixos/geoclue2: add options for static source 2025-03-24 19:15:47 -04:00
Tanya 5c72fd6842 nixos/bat: fix settings type handling 2025-03-25 01:21:00 +05:30
K900 f470616a7a
nixos/steam: allow overriding args passed to Steam in session (#382376) 2025-03-24 21:44:21 +03:00
Moraxyc 128bdeb3c5
nxios/cyrus-imap: fix cyrus-imap certs options 2025-03-24 21:57:25 +08:00
nixpkgs-ci[bot] d5f30d9d8a
Merge staging-next into staging 2025-03-24 12:07:10 +00:00
thiloho 6cc803093c
nixos/archtika: fix mkEnableOption naming 2025-03-24 11:45:34 +01:00
Djabx 09d3b7f834
nixos/snapper: add experimental support for bcachefs (#391885) 2025-03-24 16:04:06 +05:30
Luj e21904681e
nixos/systemd-boot: strip newline from machine-id (#375298) 2025-03-24 11:06:53 +01:00
Jonas Heinrich 46e424a858
nixos/dokuwiki: Remove unused enable option (#391057) 2025-03-24 10:30:51 +01:00
Robert Helgesson ee04cf23b6 nixos/grav: clean up PHP extensions 
Specifically, simply add the extensions that are not already part of
the default `enabled` set.
 2025-03-24 10:09:27 +01:00
Jonas Heinrich 82a382ed09
nixos/keycloak: add realmFiles option (#273833) 2025-03-24 09:35:04 +01:00
PAEPCKE, Michael 00a39d3964
blocky: add systemd hardening, add log, readjust startup targets 2025-03-24 06:11:33 +00:00
nixpkgs-ci[bot] 080d906664
Merge staging-next into staging 2025-03-24 06:05:33 +00:00
Adam C. Stephens f0b334dde5
nixos/hickory-dns: combine Hint and Forward zone types into one (#388980) 2025-03-23 22:32:51 -04:00
nixpkgs-ci[bot] b4d0fe2499
Merge staging-next into staging 2025-03-24 00:16:41 +00:00
Weijia Wang 367cbed935
nixos/kimai: ensure that our local.yaml is valid on init time (#371919) 2025-03-23 20:23:59 +01:00
Weijia Wang 86e6f70e1d
nixos/kimai: fix an error on first init after an upgrade (#371917) 2025-03-23 20:23:44 +01:00
K900 d9e165e9af
Revert "nixos/xrdp: use --replace-fail with substituteInPlace" 2025-03-23 21:58:08 +03:00
Pol Dellaiera 4ef28312db
Revert "nixos/syncthing: missing --fail to curl" (#392178) 2025-03-23 19:39:58 +01:00
Pol Dellaiera 7324582e6f
nixos/xrdp: use --replace-fail with substituteInPlace (#392206) 2025-03-23 19:38:42 +01:00
nixpkgs-ci[bot] f0313503cd
Merge staging-next into staging 2025-03-23 18:04:46 +00:00
Jonas Heinrich 4a8b7bb45d nixos/froide-govplan: init 2025-03-23 18:05:54 +01:00
Wolfgang Walther 0bc099abd6
nixos/postgresql: add docs about procedural languages 2025-03-23 15:07:43 +01:00
Wolfgang Walther 24775f6543
nixos/postgresql: fix reference to LLVM closure size 
In fact, the current difference is:
- 157M for postgresql to
- 756M for postgresql_jit

That's a difference of 589M.
 2025-03-23 15:07:39 +01:00
Wolfgang Walther 89b30e5b15
nixos/postgresql: fix spelling and grammar in docs 2025-03-23 15:07:36 +01:00
Jon Seager 7f27abf4a2
nixos/homepage-dashboard: restore strict shell checks 2025-03-23 13:16:24 +00:00
nixpkgs-ci[bot] ce179bc524
Merge staging-next into staging 2025-03-23 12:06:09 +00:00
Arne Keller b1efffe0b7
nixos/firefox: detail the format of preferences (#260204) 2025-03-23 12:53:14 +01:00
06kellyjac 130ed284d7 nixos/firefox: detail the format of preferences 2025-03-23 12:44:16 +01:00
Adam C. Stephens 451d610f37
nixos/kanidm: add extraJsonFile to BindReadOnlyPaths if set (#391044) 2025-03-23 07:04:15 -04:00
Jon Seager 737bf8c806
nixos/homepage-dashboard: minor refactor for readability 2025-03-23 09:40:05 +00:00
Jon Seager eb324777e9
nixos/homepage-dashboard: remove unmanaged config support 
This has been deprecated since before 24.05 was released
and displaying a warning.

This change means that only "managed", i.e.
Nix-native configurations are supported.
 2025-03-23 09:39:01 +00:00
Pol Dellaiera 9161bb9e0f
nixos/wlock: init (#390070) 2025-03-23 08:38:32 +01:00
Sandro Jäckel 72b9742768
nixos/nextcloud-notify_push: add nextcloud-setup 
without it notify might start to early and then fail 5 times before
nextcloud is even ready.
 2025-03-23 00:27:09 +01:00
hot burger 2dad835033 nextcloud-occ: work with sudo disabled 2025-03-22 15:11:17 -07:00
Sandro Jäckel 3d0f2b0606
nixos/xrdp: use --replace-fail with substituteInPlace 2025-03-22 22:29:55 +01:00
Bjørn Forsman d0e369e425 Revert "nixos/syncthing: missing --fail to curl" 
This reverts commit a8b8f8f8c7.

It introduced a failure in the syncthing service, where it hangs at the
curl step, repeatedly printing this:

  l3ijkvb20h5nnffg5q25i4nmcsbf7glx-merge-syncthing-config[1458]: curl: (22) The requested URL returned error: 404
  l3ijkvb20h5nnffg5q25i4nmcsbf7glx-merge-syncthing-config[1458]: curl: (22) The requested URL returned error: 404
  l3ijkvb20h5nnffg5q25i4nmcsbf7glx-merge-syncthing-config[1458]: curl: (22) The requested URL returned error: 404
  [...]

This is unfortunately not detected by `nix-build -A syncthing.tests`.

Ref https://github.com/NixOS/nixpkgs/pull/390742
 2025-03-22 20:05:16 +01:00
nixpkgs-ci[bot] a9379697ea
Merge staging-next into staging 2025-03-22 18:05:14 +00:00
Weijia Wang 7bce6fbf11
nixos/limine: Fix reading generations for primary profile and specialisations (#391210) 2025-03-22 18:23:02 +01:00
Vladimír Čunát 3fcae17eab
staging-next 2025-03-13 (#389579) 2025-03-22 17:39:24 +01:00
Pol Dellaiera 588f479f49
orthanc-framework: init at 1.12.6, orthanc-plugin-dicomweb: init at 1.18 (#391361) 2025-03-22 15:51:46 +01:00
Cosima Neidahl 2bf61528f1
lomiri.lomiri-polkit-agent: 0.1 -> 0.2 (#390248) 2025-03-22 15:10:33 +01:00
Arian van Putten 12c098f0ca nixos/amazon-ec2-amis: remove 2025-03-22 12:25:18 +00:00
nixpkgs-ci[bot] 3b3300fdd1
Merge staging-next into staging 2025-03-22 12:05:57 +00:00
nixpkgs-ci[bot] 7233659eaf
Merge master into staging-next 2025-03-22 12:05:30 +00:00
jopejoe1 e267d07816
nixos/shairport-sync: add freeform config (#363739) 2025-03-22 09:01:54 +01:00
nixpkgs-ci[bot] 56654a8868
Merge staging-next into staging 2025-03-22 06:05:08 +00:00
nixpkgs-ci[bot] ba561f878e
Merge master into staging-next 2025-03-22 06:04:41 +00:00
Austin Horstman 469f2ca232
clatd: 1.6 -> 2.1.0 (#390764) 2025-03-21 23:46:50 -05:00
nixpkgs-ci[bot] c060400edc
Merge staging-next into staging 2025-03-22 00:15:18 +00:00
nixpkgs-ci[bot] a053243735
Merge master into staging-next 2025-03-22 00:14:53 +00:00
Nick Cao d2fcc2fd84
python312Packages.rtslib: 2.2.0 -> 2.2.2 (#389871) 2025-03-21 18:40:32 -04:00
Sandro eb21063c25
streamcontroller: 1.5.0-beta.7 -> 1.5.0-beta.8 (#389259) 2025-03-21 21:23:58 +01:00
Scott Edlund 6970756fb6 nixos/homepage-dashboard: fix shellcheck SC2115 
Error if variable is null or unset.
 2025-03-21 19:07:50 +01:00
nixpkgs-ci[bot] 62ed49b3d0
Merge staging-next into staging 2025-03-21 18:05:33 +00:00
nixpkgs-ci[bot] f02955ed47
Merge master into staging-next 2025-03-21 18:04:59 +00:00
Kovacsics Robert 357a75fda7
xdg/portals/lxqt: Fix documentation string indent 
I just spotted this while browsing the code, but double checked and it
looks badly indented in the manpages and on the web too.
 2025-03-21 17:43:48 +00:00
Robert Hensing 202ac0e3d2
nixos: Cut off virtualisation.vmVariant.virtualisation.vmVariant (#390717) 2025-03-21 15:58:59 +00:00
Ulrik Strid eea56c4c08 streamcontroller module: Add kdotools when using plasma 
Update nixos/modules/programs/streamcontroller.nix

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2025-03-21 15:32:45 +01:00
Adam C. Stephens 12f83c72bc
nixos/incus ensure br_netfilter module is enabled (#391390) 2025-03-21 10:27:31 -04:00
provokateurin 34da0bd4fc
nixos/nextcloud: Also install when config.php exists but is empty 
Running any occ command will create an empty config file automatically: f85154f1e1/lib/base.php (L194-L196)
This causes the current check to never execute the installation, in case any occ command was run before it (which itself fails because Nextcloud is not installled yet).
So any services which don't properly depend on nextcloud-setup.service cause Nextcloud to never be installed.
 2025-03-21 14:51:30 +01:00
Rob Pilling 329fdc5763 ebusd: update to 24.1 and add new log facility option ("device") 2025-03-21 13:20:14 +00:00
Joel Koen e51ab12e17
nixos/geoclue2: set default location service to beaconDB 2025-03-21 22:43:25 +10:00
Sirio Balmelli 40567b6b8d
nixos/nebula: add DNS options 
Add the options:

- lighthouse.serve_dns
- lighthouse.dns.host
- lighthouse.dns.port

Improve systemd capabilities handling:

- do not give CAP_NET_ADMIN when tunnel interface is disabled
- give CAP_NET_BIND_SERVICE when DNS is enabled

Add self as maintainer: I'm using Nebula on NixOS in prod.

Signed-off-by: Sirio Balmelli <sirio@b-ad.ch>
 2025-03-21 13:21:45 +01:00
nixpkgs-ci[bot] 529326e679
Merge staging-next into staging 2025-03-21 12:06:31 +00:00
nixpkgs-ci[bot] 8fa05d5ca4
Merge master into staging-next 2025-03-21 12:05:59 +00:00
Arne Keller e000e1cbd4
nixos/tests/vdirsyncer: init (#271024) 2025-03-21 12:40:21 +01:00
Arian van Putten b684e9c6d6
fluent-bit: link against Nix dependencies, fix Darwin builds, and add NixOS module (#365493) 2025-03-21 11:39:18 +00:00
Arian van Putten e4684ee593
paretosecurity: 0.0.89 -> 0.0.91, nixos/paretosecurity: add trayIcon option (#391799) 2025-03-21 10:38:18 +00:00
Neyts Zupan 8dbf318cea paretosecurity: 0.0.89 -> 0.0.91,, nixos/paretosecurity: add trayIcon option 2025-03-21 10:15:25 +00:00
Jon Seager bfa9810ff7
nixos/scrutiny: use genJqSecretsReplacementSnippet (#320672) 2025-03-21 08:42:37 +00:00
Jared Baur 300efce181
nixos/clatd: allow AF_UNIX communication 
This is needed since clatd will use networkctl to attempt to obtain the
PLAT prefix, and networkctl uses UNIX domain sockets to communicate with
the systemd-networkd daemon over DBus.
 2025-03-21 01:12:13 -07:00
nixpkgs-ci[bot] fb67c77244
Merge staging-next into staging 2025-03-21 07:09:56 +00:00
K900 d5d2bf0bfd Merge remote-tracking branch 'origin/master' into staging-next 2025-03-21 09:13:10 +03:00
schnusch bc72dc08f2 nixos/vdirsyncer: only use ProtectHome=yes with DynamicUser=yes 
If a user is given it seems likely that their home directory is accessed.
 2025-03-21 01:51:20 +01:00
Will Fancher c983091366
nixos/sysusers: respect per user .enable (#388551) 2025-03-20 20:25:49 -04:00
Robert Hensing 9aab8b86c7 nixos: Cut off virtualisation.vmVariant.virtualisation.vmVariant 
This produced an unnecessarily infinitely deep config tree.

The "cut off" option can be written to, but not read from.
Being written to is important, because it allows users to
conveniently define vmVariant config without having to check
isVmVariant.

There's a small chance that someone *reads* from vmVariant config
in their normal config, and for them it will not be possible
to evaluate with `nixos-rebuild build-vm` anymore.

If this is a problem, we could perhaps make the vmVariant root
appear instead of the `throw` error.
This could also be done using mkOption apply.
 2025-03-20 22:30:12 +00:00
isabel 2c836c5054
nixos/sysusers: respect per user .enable 2025-03-20 20:43:00 +00:00
nixpkgs-ci[bot] 1cf5157bf0
Merge staging-next into staging 2025-03-20 18:05:48 +00:00
nixpkgs-ci[bot] 18471e1002
Merge master into staging-next 2025-03-20 18:05:19 +00:00
Kerstin aaf715153c
nixos/radicale: assertion so that users set settings.auth.type explictly (#391531) 2025-03-20 18:22:31 +01:00
Sandro 9f2544d0ea
nixos/wakapi: harden systemd service (#389534) 2025-03-20 17:48:34 +01:00
Moraxyc eca4c6ea19
nixos/scrutiny: use genJqSecretsReplacementSnippet 2025-03-20 22:27:06 +08:00
Kerstin 72cda846bf
nixos/mobilizon: create sitemap directory (#391389) 2025-03-20 14:35:36 +01:00
nixpkgs-ci[bot] a99aed50a5
Merge staging-next into staging 2025-03-20 12:10:38 +00:00
K900 3563a6096a Merge remote-tracking branch 'origin/master' into staging-next 2025-03-20 15:09:01 +03:00
Robert Rose cd10f9a874 nixos/keycloak: add realmFiles option 
Add an option to import Keycloak realms during
startup from exported realm files.
 2025-03-20 12:07:38 +01:00
Kerstin Humm c48d0033f7
nixos/radicale: assertion so that users set settings.auth.type explicitly 2025-03-20 11:15:20 +01:00
K900 85b2817da5 Merge remote-tracking branch 'origin/staging-next' into staging 2025-03-20 13:14:18 +03:00
n d6b565f277
nixos/yabar: update package option description 2025-03-20 14:39:01 +05:30
K900 6a900ee562 Merge remote-tracking branch 'origin/master' into staging-next 2025-03-20 09:08:18 +03:00
K900 b64ec1944e
nixos/fonts: ship fontconfig caches even for cross-compiled hosts (#391305) 2025-03-20 09:06:38 +03:00
nixpkgs-ci[bot] 47fbdfd4fc
Merge staging-next into staging 2025-03-20 00:16:05 +00:00
nixpkgs-ci[bot] 4733649a15
Merge master into staging-next 2025-03-20 00:15:20 +00:00
Jeremy Fleischman 9c02a1e422
services/cloudflare-dyndns: require that apiTokenFile be an api token 
Previously, this option was supposed to be a file of the form
`CLOUDFLARE_API_TOKEN=...`, which has a few problems:

- That's not an api token. It's an env file fit for passing to systemd's
  `EnvironmentFile` option. The user could typo the variable name, or
  intentionally/unintentionally include unrelated environment variables.
- It's not how secret files usually work in NixOS. Secret files are
  usually just the secret, and don't leak details about how the secret
  is passed to the service.
- This increases friction for people switching between cloudflare dyndns
  services, such as `services.cloudflare-dyndns` and
  `services.cfdyndns`, which both have a `apiToken` option, but (before
  this change) with different semantics.
 2025-03-19 18:19:29 -05:00
commiterate 3366b27e59 fluent-bit: link against Nix dependencies, fix Darwin builds, and add NixOS module 2025-03-19 18:48:46 -04:00
Angelo Bulfone 9ed29c65a4
nixos/limine: Fix reading generations and specialisations 
Previously, all generations for the primary system profile
read their data from the currently active one rather than
their own path, and specialisations in general all used
their parent bootspec rather than their own. This fixes both issues.

This commit still uses the parent path's build date for
specialisations, but this is more minor issue and the times
shouldn't be meaningfully different in most cases anyways.
 2025-03-19 15:19:41 -07:00
evplus c3f61d1cbd nixos/incus ensure br_netfilter module is enabled 2025-03-19 22:56:07 +01:00
Sandro Jäckel c317d5e222
nixos/mobilizon: create sitemap directory 
Mar 19 21:35:05 mobilizon mobilizon[1324]: 21:35:05.504 [info] {"args":{},"attempt":19,"duration":130905,"error":"** (File.Error) could not write to file \"/var/lib/mobilizon/sitemap/sitemap-00001.xml\": no such file or directory","event":"job:exception","id":178203,"max_attempts":20,"meta":{},"queue":"background","queue_time":510620016,"source":"oban","state":"failure","tags":[],"worker":"Mobilizon.Service.Workers.BuildSiteMap"}
 2025-03-19 22:52:48 +01:00
Will Fancher ecbf53f525
nixos/systemd: conditionally leave out some upstream units (#374214) 2025-03-19 16:58:14 -04:00
Will Fancher b15e9e7d3d
nixos/initrd: add extraFirmwarePaths option (#391166) 2025-03-19 16:51:26 -04:00
Pol Dellaiera eb0b7452d6 nixos/orthanc: minor cleanup 2025-03-19 21:20:06 +01:00
nixpkgs-ci[bot] 3a7baab73a
Merge staging-next into staging 2025-03-19 18:05:59 +00:00
nixpkgs-ci[bot] 9a9855f387
Merge master into staging-next 2025-03-19 18:05:30 +00:00
Sandro ddef00d3f0
nixos/zipline: improve systemd hardening (#387119) 2025-03-19 19:01:37 +01:00
Sandro 1289c91409
nixos/echoip: improve systemd hardening (#387466) 2025-03-19 19:00:27 +01:00
Sandro 86f44b004d
nixos/nixos-containers: user options take precedence over module ones (#388409) 2025-03-19 18:59:56 +01:00
Adam C. Stephens 476618066b
nixos/firezone: init module and packages (#374647) 2025-03-19 13:50:47 -04:00
Alexander Foremny 5c28518c4b nixos/modules/image: fix error message 
When a module is not found, it did not show the intended error message
`The module ... does not exist`, but rather `path ... does not exist`.
 2025-03-19 17:29:28 +00:00
Defelo ef19fcf725
nixos/zipline: improve systemd hardening 2025-03-19 18:16:01 +01:00
Silvan Mosberger 4f6e508a09
nixos/users-groups: Enforce ASCII usernames and fix repeated doubling of activation script runtime (#385904) 2025-03-19 17:33:49 +01:00
Jared Baur dad880d6bf
nixos/systemd: conditionally leave out some upstream units 
Some upstream systemd units are conditionally installed into the systemd
output, so we must make sure the feature that enables their installation
is enabled on our side prior to trying to use them.
 2025-03-19 08:14:48 -07:00
Matthias Beyer 2a725d40de
nixos/mautrix-telegram: switch to using static user for automated registration of appservice (#389679) 2025-03-19 15:38:57 +01:00
thefeiter f375a86fc1 nixos/mautrix-telegram: switch to using static user for automated registration of appservice 
Like for matrix-whatsapp use a static user so that the registration file can be automatically shared with synapse.
This also includes the registerToSynapse config option.
 2025-03-19 13:59:23 +01:00
Yt a72f22d0d8
Prefect init module (#386895) 2025-03-19 08:52:19 -04:00
nixpkgs-ci[bot] 08c1a45314
Merge staging-next into staging 2025-03-19 12:06:32 +00:00
nixpkgs-ci[bot] 77f0a726f9
Merge master into staging-next 2025-03-19 12:06:03 +00:00
WilliButz 41c7225648
podman: use serviceConfig.ExecStart instead of script (#390731) 2025-03-19 12:06:33 +01:00
WilliButz 6ba10ff228
docker: use serviceConfig.ExecStart instead of script (#390681) 2025-03-19 12:06:26 +01:00
WilliButz 4edfeafac4
initrd: implement panic-on-fail interpreterless (#390698) 2025-03-19 11:37:48 +01:00
Benedikt Ritter ef2bde5a13
docker: use serviceConfig.ExecStart instead of script 2025-03-19 11:12:59 +01:00
Benedikt Ritter ccdfb91b48
podman: use serviceConfig.ExecStart instead of script 2025-03-19 11:08:18 +01:00
Charlie Egan 20c9782e2f nixos/navidrome: Add environmentFile config option 
This is intended to be used to set secret environment variables for
navidrome, such as ListenBrainz/LastFM API keys.

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
 2025-03-19 09:51:42 +00:00
Benedikt Ritter deb045e057
initrd: implement panic-on-fail interpreterless 2025-03-19 10:23:46 +01:00
Colin 9435a2b422 nixos/fonts: ship fontconfig caches even for cross-compiled hosts 2025-03-19 07:53:24 +00:00
Jared Baur ea116654aa
nixos/initrd: add extraFirmwarePaths option 
(cherry picked from commit 488d4316b9e1510c9b4a2eeb8d7e2cc66839a1fc)
 2025-03-18 20:39:52 -07:00
nixpkgs-ci[bot] cd31c04e18
Merge staging-next into staging 2025-03-19 00:15:59 +00:00
nixpkgs-ci[bot] 1d4e3667f7
Merge master into staging-next 2025-03-19 00:15:26 +00:00
e1mo 100559d83c
nixos/dokuwiki: Remove unused enable option 
The option has been added in 50029ed89c
but never had any effect. As far as I could tell, it was only added for
backward compatibility. I think it's safe to remove this after 3+ years.

I opted for removal instead of implementing it since the module will
just do nothing if no site is configure, thus no enable / disable switch
is needed. Especially on a per-site level.
 2025-03-18 20:36:09 +01:00
oddlama f15f20aad7
nixos/kanidm: add extraJsonFile to BindReadOnlyPaths if set 2025-03-18 19:42:43 +01:00
Dawid Ciężarkiewicz 07a3793105 nixos/syncthing: make it easier to debug incorrect IDs 
In case of an incorrect ID, the behavior of this script
is quite tricky. See:

https://github.com/NixOS/nixpkgs/issues/326704#issuecomment-2730819822

for more info.
 2025-03-18 19:10:10 +01:00
Dawid Ciężarkiewicz a8b8f8f8c7 nixos/syncthing: missing --fail to curl 2025-03-18 19:10:10 +01:00
nixpkgs-ci[bot] e8240407b0
Merge staging-next into staging 2025-03-18 18:05:35 +00:00
nixpkgs-ci[bot] 0bb96173bd
Merge master into staging-next 2025-03-18 18:05:06 +00:00
Preston Pan 437ae0fb4e
nixos/ircd-hybrid: fix bug in which fails to substitute iproute2 (#390833) 2025-03-18 17:46:55 +01:00
Sandro 326cd70480
nixos/movim: improve systemd dependency directives (#388750) 2025-03-18 17:42:52 +01:00
nixpkgs-ci[bot] 078fa94031
Merge staging-next into staging 2025-03-18 12:06:38 +00:00
nixpkgs-ci[bot] 46b9032bb0
Merge master into staging-next 2025-03-18 12:06:05 +00:00
charludo 3e3b774732
nixos/pinchflat: init 2025-03-18 12:24:01 +01:00
Neyts Zupan 75773b77be paretosecurity: init at 0.0.86, nixos/paretosecurity: init 2025-03-18 11:09:14 +00:00
K900 dd102fa28d
nixos-generate-config: Fix unspecified root (#390892) 2025-03-18 12:02:33 +03:00
Will Fancher b82dbaf3ab nixos-generate-config: Fix unspecified root 2025-03-18 04:56:51 -04:00
nixpkgs-ci[bot] 63cf6695d5
Merge staging-next into staging 2025-03-18 06:05:46 +00:00
nixpkgs-ci[bot] 2341cd6a3a
Merge master into staging-next 2025-03-18 06:05:15 +00:00
Will Fancher 317736b155
nixos/iso-image: Consolidate ISOs Using Specialisations. (#355893) 2025-03-17 21:22:38 -04:00
nixpkgs-ci[bot] dbbed7e029
Merge staging-next into staging 2025-03-18 00:15:57 +00:00
nixpkgs-ci[bot] 14360cab01
Merge master into staging-next 2025-03-18 00:15:31 +00:00
programmerlexi 1a830fe9d9 nixos/limine: fix the install script 2025-03-18 01:06:55 +05:30
Rane 2cc1d33489
nixos/limine: cast partition index to string (#390732) 2025-03-18 01:01:15 +05:30
oddlama 6c888f4911
nixos/firezone: init modules 2025-03-17 20:21:00 +01:00
nixpkgs-ci[bot] dcc32e006f
Merge staging-next into staging 2025-03-17 18:05:40 +00:00
nixpkgs-ci[bot] f2e2b1814d
Merge master into staging-next 2025-03-17 18:05:11 +00:00
Arne Keller 65d532c9d9
nixos/jackett: fix hardening for custom dataDir (#390609) 2025-03-17 17:19:29 +01:00
John Ericson 9df17ad165
nixos/hydra: fix race condition in hydra-compress-logs (#390685) 2025-03-17 11:38:32 -04:00
Sandro b96c9e3a68
gokapi: init at 1.9.6 (#372911) 2025-03-17 16:12:38 +01:00
Sandro Jäckel 588f41bef0
nixos/hydra: fix race condition in hydra-compress-logs 
Source https://github.com/NixOS/hydra/pull/1450
 2025-03-17 15:41:00 +01:00
Sandro Jäckel 2581a40544
bird: change alias to throw to avoid confusion 2025-03-17 15:02:38 +01:00
nikstur 7872cf6917
nixos/perlless: only disable installer tools that introduce perl (#388564) 2025-03-17 14:01:20 +01:00
Will Fancher bbf66d50a2
Fix systemd-ssh changes (#390565) 2025-03-17 05:21:36 -04:00
FliegendeWurst 87d9195733 nixos/jackett: fix hardening for custom dataDir 2025-03-17 09:34:10 +01:00
Leona Maroni 50fc446be1
nixos/gitlab: convert gitlab-registry-cert.service to oneshot 
docker-registry.service has a `After` dependency on gitlab-registry-cert.
On the first start, docker-registry.service fails to start as it already
runs when gitlab-registry-cert.service starts up, and not when it finished.
 2025-03-17 09:19:23 +01:00
Will Fancher 4dcde98327 nixos/sshd: Fix socket activated SSH connections entering failed state. 
In afeb76d628, sshd.service and
sshd@.service were switched to Type=notify. This apparently works for
sshd.service, but not for sshd@.service. Given that the reason for
this working with sshd.service isn't exactly clear, let's revert it
for both of them for now, and revisit Type=notify later.
 2025-03-16 23:02:22 -04:00
nixpkgs-ci[bot] 75c8678243
Merge staging-next into staging 2025-03-17 00:16:57 +00:00
nixpkgs-ci[bot] 4761072df5
Merge master into staging-next 2025-03-17 00:16:22 +00:00
Pol Dellaiera c8a823d40b nixos/litellm: init 2025-03-16 20:49:22 +01:00
Pol Dellaiera 79e95661a6
orthanc: init at 1.12.6, nixos/orthanc: init (#385329) 2025-03-16 20:47:37 +01:00
Cryolitia PukNgae c33e419dd1
nixos/xpad-noone: init 2025-03-17 03:44:58 +08:00
nikstur 16c4ead8d7
zeekstd: init at 0.2.2 (#387636) 2025-03-16 19:17:30 +01:00
nixpkgs-ci[bot] 76fed55d6a
Merge staging-next into staging 2025-03-16 18:04:41 +00:00
nixpkgs-ci[bot] dbe56e9776
Merge master into staging-next 2025-03-16 18:04:12 +00:00
Robert Rose 119b75c310 nixos/repart: add zstd-seekable compression algorithm 
The seekable format splits compressed data into a series of independent
frames, each of which can be decompressed individually. This allows to
distribute images in smaller chunks and allows image downloads to be
paused and resumed later from the same point.

Seekable archives as a whole can be decompressed with any regular zstd
decompressor. However, partial decompression requires to know the
starting position of the desired frame, which can be extracted from a
skippable frame (aka seektable) that is appended to the compressed data.
 2025-03-16 18:32:56 +01:00
happysalada ef12e14cb7 nixos/prefect: init module 
prefect: add dburl to worker

prefect: use same state directory

prefect: fix worker environment

prefect: create user

prefect: use datadir for sqlite url

prefect: make datadir writable

prefect: don't protect home

prefect fix sqlite url

prefect: fix state directory

prefect: user should not be systemuser

prefect: set to normal user

add prefect to systempackages

try user with same name

prefect use prefect_home

do not set database url

revert to dynamic user

prefect: add tests

prefect: fix port to string
 2025-03-16 11:09:50 -04:00
Arne Keller d7a2a10a40
graylog-5_1: remove (#358780) 2025-03-16 15:45:23 +01:00
Darragh Elliott 46666bba62 gokapi: add module, test, release docs 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2025-03-16 14:41:28 +00:00
nixpkgs-ci[bot] 60173ed689
Merge staging-next into staging 2025-03-16 12:06:01 +00:00
nixpkgs-ci[bot] b2380f1687
Merge master into staging-next 2025-03-16 12:05:32 +00:00
Todd Brown b5c9cecbcc
nixos/docker: add auto prune randomizedDelaySec and persistent options (#301547) 
docker: add auto prune randomizedDelaySec and persistent options

Options mirror nix garbage collection
 2025-03-16 10:56:31 +01:00
FliegendeWurst 0867bf32d0 nixos/wlock: init 2025-03-16 10:52:21 +01:00
Pol Dellaiera ad9f51048b
nixos/flarum: restart on package update (#389453) 2025-03-16 07:28:51 +01:00
Will Fancher a2636dae46 iso-image: Combine GNOME and Plasma flavors 
This allows users to choose between the two during bootup rather than
at download time.
 2025-03-16 01:38:37 -04:00
Will Fancher 674a41e913 nixos-generate-config: Set linuxPackages_latest when ISO boots latest kernel 2025-03-16 01:38:37 -04:00
Will Fancher 6f1b070056 nixos-generate-config: Add config file 2025-03-16 01:38:37 -04:00
Will Fancher 0aad0248ce nixos/iso-image: Include latest kernel specialisation. 
Now that ISOs include the latest kernel as a specialisation, separate
ISOs for the new kernel are no longer necessary.
 2025-03-16 01:38:37 -04:00
Will Fancher f2204986a7 nixos/iso-image: Support specialisations. 2025-03-16 01:38:37 -04:00
Will Fancher 8eb8908837 nixos/iso-image: Move alternate boot options to submenus 
This will make more sense when specialisations are introduced in the
ISO boot menu

nixos/modules/installer/cd-dvd/iso-image.nix
 2025-03-16 01:38:37 -04:00
Will Fancher 3a2e8e97c3 nixos/iso-image: Disable plymouth along with display-manager.service 
GNOME in particular just breaks if plymouth isn't disabled, because
GDM takes on the role of quitting plymouth in a GNOME
configuration. But if we're disabling the DM, we should disable
plymouth too anyway.
 2025-03-16 01:03:25 -04:00
Will Fancher bef079a4b9 nixos/iso-image: Remove video= boot entries 
These seem largely redundant with the progress that desktop
environments have made since they were introduced.
 2025-03-16 01:03:21 -04:00
Philip Taron f4dd3ba6e0
systemd: make systemd-ssh-generator work (#372979) 2025-03-15 21:59:59 -07:00
Will Fancher da9a092c34 nixos/iso-image.nix: nixfmt 2025-03-16 00:23:46 -04:00
nixpkgs-ci[bot] c3b4c5315e
Merge master into staging-next 2025-03-16 00:16:49 +00:00
OPNA2608 9a4d3b36ea lomiri.lomiri-polkit-agent: 0.1 -> 0.2 2025-03-16 00:02:34 +01:00
Pol Dellaiera 933f835219 nixos/orthanc: init 2025-03-15 22:45:44 +01:00
Pol Dellaiera b29c5b7119
treewide: add documentation for nixos systemd units (#389283) 2025-03-15 21:30:08 +01:00
Arian van Putten 041912f739
nixos/ec2-data fix host fingerprint output to console (regression) (#390185) 2025-03-15 20:28:14 +00:00
jopejoe1 c38c901915 nixos/shairport-sync: use conf file instead of arguments 2025-03-15 21:07:35 +01:00
jopejoe1 9246d8f727 nixos/shairport-sync: add freeform config 2025-03-15 21:06:13 +01:00
Sandro ecb169f70c
nixos/minecraft-server: fix package example (#390188) 2025-03-15 20:49:20 +01:00
Marie Ramlow 0ea1aedc4d nixos/sshd: enable root ssh authorized_keys provisioning 
This enables provisioning of root ssh keys with systemd credentials
(e.g. passed in via smbios strings or kernel params)
 2025-03-15 20:15:44 +01:00
nixpkgs-ci[bot] e8a05cb8da
Merge master into staging-next 2025-03-15 18:04:06 +00:00
Sandro f961f717e7
nixos/minecraft-server: fix package example 2025-03-15 18:38:22 +01:00
Bruce Toll ae4750868c nixos/ec2-data fix host fingerprint output to console (regression) 
PR #322282 introduced a regression that causes the previous display of
the ssh host key fingerprints to get directed to the journal rather than
the console (as intended). Thus, the console only logs an empty set of
fingerprints:

    -----BEGIN SSH HOST KEY FINGERPRINTS-----
    -----END SSH HOST KEY FINGERPRINTS-----

The fix is to reorder the bash statement that invokes ssh-keygen so
that the ssh-keygen output is directed to /dev/console.
 2025-03-15 13:16:03 -04:00
Adam C. Stephens 4ee53e6544
nixos/open-webui: add additional systemd hardening (#377884) 2025-03-15 10:07:32 -04:00
nixpkgs-ci[bot] 890b967419
Merge master into staging-next 2025-03-15 12:05:14 +00:00
Pedro Alves 994c56c881 nixos/cloudflared: remove assertion for certificateFile 
While it is probably a mistake in configuration to have declarative
routes configured but no certificate file, it is not always necessary to
have a working set up, so the assertion was removed.

The documentation for the certificateFile setting was reworked to
describe this.
 2025-03-15 11:47:13 +00:00
Gaetan Lepage 6e79d0d383 targetcli: rename to targetcli-fb 2025-03-15 12:16:57 +01:00
Gaetan Lepage 68c06a055a python312Packages.rtslib: rename to rtslib-fb 2025-03-15 12:16:57 +01:00
Marcus Ramberg d07ebbab9b
nixos/k3s: add autoDeployCharts option and use systemd-tmpfiles for content activation (#374017) 2025-03-15 11:26:43 +01:00
jrdsgl 38590f303b
nixos/changedetection-io: fix typo (#383539) 
Update changedetection-io.nix

typo correction variables
 2025-03-15 10:59:05 +01:00
nixpkgs-ci[bot] e24f567a68
Merge master into staging-next 2025-03-15 09:53:30 +00:00
โทสฺตัล 521d3689fb nixos/movim: move phpExecutionUnit service in requires order 2025-03-15 16:25:53 +07:00
โทสฺตัล 02600c4ac5 nixos/movim: improve systemd dependency directives 2025-03-15 16:25:52 +07:00
Gaétan Lepage 4a7faaf2ae
uwsgi: remove python2 (#389865) 2025-03-15 10:22:15 +01:00
Ryan Hendrickson 0bb33117b2
nixos/pay-respects: fix "(eval):1: parse error near `alias'" (#385287) 2025-03-15 03:24:38 -04:00
nixpkgs-ci[bot] af561994f9
Merge master into staging-next 2025-03-15 00:14:59 +00:00
Benjamin Sparks f5e1d3bb02 nixos/uwsgi: remove support for python2 plugins 2025-03-15 00:16:01 +01:00
Arian van Putten c56cc16a63
nixos/systemd-repart: add support for repeating settings (#389826) 2025-03-14 22:19:19 +00:00
jopejoe1 dca7e827b3
nixos: Replace custom cfg format handling with pkgs.formats (#314933) 2025-03-14 21:08:14 +01:00
jopejoe1 97f8e4ee02
akkoma-*: migrate to pkgs/by-name (#389844) 2025-03-14 20:15:33 +01:00
Marie Ramlow 342c4f300b nixos/{renovate, libvirtd}: fix typo 2025-03-15 00:30:21 +05:30
Florent Charpentier 631bed6ed9 nixos/systemd-repart: add support for repeating settings 
fix https://github.com/NixOS/nixpkgs/issues/389478
 2025-03-14 19:43:28 +01:00
nixpkgs-ci[bot] 9d724cbb40
Merge master into staging-next 2025-03-14 18:04:58 +00:00
Marie Ramlow afeb76d628 nixos/sshd: always ship a sshd@.service unit for systemd-ssh-generator(1) 2025-03-14 18:34:50 +01:00
Marie Ramlow 63842ed333 nixos/sshd: move key generation into its own systemd unit 2025-03-14 18:34:50 +01:00
Marie Ramlow aab69d7f19 nixos/systemd: include sshd in PATH if openssh is enabled 
This enables systemd-ssh-generator to find the sshd binary.
 2025-03-14 18:34:50 +01:00
Marie Ramlow 5e43294735 nixos/ssh: include systemd-ssh-proxy config 2025-03-14 18:26:43 +01:00
Mikael Voss 6a55cc63f3
akkoma-emoji.blobs_gg: move to top‐level & migrate to pkgs/by-name 2025-03-14 15:13:10 +01:00
Mikael Voss 4c17535c7b
akkoma-frontends.admin-fe: rename to akkoma-admin-fe & migrate to pkgs/by-name 2025-03-14 14:55:23 +01:00
Mikael Voss 30cbef7dc9
akkoma-fe: migrate to pkgs/by-name 2025-03-14 14:48:19 +01:00
Austin Horstman 14ee3b00fe
nixos/slskd: remove useless inotify watches (#389586) 2025-03-14 08:11:31 -05:00
nixpkgs-ci[bot] d77c26326c
Merge master into staging-next 2025-03-14 12:05:44 +00:00
Sophie Taylor 4582e7ed83
nixos/kanidm: fix build error from typo (#389686) 2025-03-14 12:16:31 +01:00
K900 7d36ee97e6 Merge remote-tracking branch 'origin/master' into staging-next 2025-03-14 09:56:27 +03:00
Sandro e867100280
mastodon: 4.3.4 -> 4.3.6 (#388668) 2025-03-14 01:32:44 +01:00
K900 179281edd7
nixos/pipewire: support system wide pipewire-pulse service (#389565) 2025-03-13 20:54:40 +03:00
misuzu 05b496433a nixos/pipewire: support system wide pipewire-pulse service 2025-03-13 19:37:45 +02:00
misilelab cbd562ee42 bash: allow setting lsColorsFile to null 
Signed-off-by: misilelab <misileminecord@gmail.com>
 2025-03-13 22:41:44 +05:30
Sandro Jäckel 232e7b6df0
nixos/vaultwarden: relax hardening when using sendmail 2025-03-13 17:59:55 +01:00
Kerstin Humm c06efc8927
nixos/mastodon: some formatting 2025-03-13 16:51:55 +01:00
isabel c7968cf140
nixos/wakapi: harden systemd service 
when using `systemd-analyze security wakapi.service` we went from a 5.9
to a 3.
 2025-03-13 15:30:32 +00:00
polyfloyd 682a80bf1f bash: Make it possible to set alternative LS_COLORS 2025-03-13 20:56:41 +05:30
Robert Hensing bc54b597c5
nix-builder-vm: disable auto-optimise-store (#389439) 2025-03-13 15:24:03 +00:00
K900 656e50abce
mesa: more cleanups (#387292) 2025-03-13 16:55:54 +03:00
nixpkgs-ci[bot] 6e0bdfa0ce
Merge staging-next into staging 2025-03-13 12:06:57 +00:00
Luka Blašković 4fb937aabc
nats: fix infinite recursion when validating config (#389440) 2025-03-13 04:17:06 -07:00
ppom 5611f102a2 nixos/slskd: remove useless inotify watches 
Closes #389397
 2025-03-13 12:00:00 +01:00
Gaétan Lepage 9e889113ef
bundler: 2.5.22 -> 2.6.2 (#377415) 2025-03-13 10:35:46 +01:00
nixpkgs-ci[bot] 16ae74dc7d
Merge staging-next into staging 2025-03-13 09:24:36 +00:00
Florian Agbuya 8125e281fd nixos/flarum: restart on package update 
Ensures the Flarum service automatically restarts when its package is updated, preventing stale instances from running after upgrades.
 2025-03-13 17:16:34 +08:00
Pol Dellaiera 3bd304a863
nixos/searx: add option for favicons settings (#389428) 2025-03-13 09:18:43 +01:00
xanderio 6607cf789e
nixos/librenms: regenerate caches after every package change (#388914) 2025-03-13 08:39:42 +01:00
Michael Hoang c0e0720c74 nix-builder-vm: disable auto-optimise-store 
This option is associated with corruption[1, 2] and is disabled by
default in Nix as it can cause significant slowdowns[3].

[1]: https://github.com/NixOS/nix/issues/7273
[2]: https://github.com/LnL7/nix-darwin/pull/1152
[3]: https://github.com/NixOS/nix/issues/462#issuecomment-378189808
 2025-03-13 16:02:29 +09:00
GiggleSquid 461be7d8c8
nixos/searx: add configuration for favicons settings 
see searxng docs: https://docs.searxng.org/admin/searx.favicons.html
 2025-03-13 03:58:21 +00:00
nixpkgs-ci[bot] 3aa6cc457e
Merge staging-next into staging 2025-03-12 18:05:25 +00:00
h7x4 ce52fcd4eb
nixos/direnv: add xonsh integration (#383435) 2025-03-12 18:53:07 +01:00
Felix Singer 4d8d5f5782 nixos/libjaylink: init module 
By enabling this module, the jlink system group is created and udev
rules from the libjaylink package are enabled. Read-/Write access is
granted to the members of the jlink group and to seat sessions.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
 2025-03-12 18:42:28 +01:00
h7x4 ab0564bd10
treewide: add documentation for nixos systemd units 2025-03-12 18:00:38 +01:00
h7x4 6dd3e6958d
nixos/heimdal: extend nixos test, fix multitarget principals in acls (#389033) 2025-03-12 17:16:34 +01:00
nixpkgs-ci[bot] a604523918
Merge staging-next into staging 2025-03-12 15:18:56 +00:00
Florian Klink ae90832756
nixos/alloy: automaticlly include all .alloy files in reload trigger (#388634) 2025-03-12 17:17:58 +02:00
Florian Klink a8dc55f40b
nixos/logind: add "sleep" option to logindHandlerType (#388792) 2025-03-12 17:17:00 +02:00
Michele Guerini Rocco 0364c3a2c3
Fix up PR #388789 (#389213) 2025-03-12 16:12:35 +01:00
Sandro Jäckel 1eecf7cc06
haka: remove 2025-03-12 16:04:54 +01:00
Jacek Galowicz b20413d443
nixos/testing: Fix graphical tty output (#387836) 2025-03-12 07:21:32 -07:00
K900 0b87ccc8d6
nixos/hostapd: fix hostapd_cli (#389181) 2025-03-12 17:01:26 +03:00
K900 49db95baf5 Merge remote-tracking branch 'origin/staging-next' into staging 2025-03-12 16:27:55 +03:00
h7x4 2c3adc5fc6
nixos/kanidm: add extraJsonFile option (#376490) 2025-03-12 13:15:36 +01:00
rnhmjoj a2e29f2fe3
nixos/startx: fix error if generateScript == false 2025-03-12 13:05:53 +01:00
K900 6eb7fc1303
nixos/akkoma: remove IFD (#382944) 2025-03-12 14:49:01 +03:00