h7x4
39e93806aa
Revert "various: replace systemd.services.<name>.{script,preStart} with ExecStart{,Pre}"
2025-10-31 11:03:32 +01:00
h7x4
23312527af
nixos/sssd: migrate to rfc42-style settings ( #448955 )
2025-10-29 13:37:22 +00:00
Sandro
c32d974077
various: replace systemd.services.<name>.{script,preStart} with ExecStart{,Pre} ( #448763 )
2025-10-29 12:34:37 +00:00
Marcel
acbeb604ce
nixos/sssd: migrate to rfc42-style settings
2025-10-29 09:43:34 +01:00
Sandro
bd820895a9
nixos/rsync: remove assertion ( #455800 )
2025-10-29 00:28:40 +00:00
Wolfgang Walther
6691c568b0
nixosTests.gitlab: fix eval
...
This was recently turned into a throw.
2025-10-28 18:06:49 +01:00
Philip Taron
01898764b6
treewide: replace "yes" else "no" usages to lib.boolToYesNo ( #442387 )
2025-10-28 16:25:46 +00:00
h7x4
f964b6a027
nixos/iio-niri: move from programs to services/misc ( #455219 )
2025-10-27 15:51:12 +00:00
h7x4
589c370878
nixos/errbot: replace preStart with ExecStartPre
2025-10-27 18:52:24 +09:00
h7x4
558d442835
nixos/tandoor-recipes: replace preStart with ExecStartPre
2025-10-27 18:52:19 +09:00
h7x4
d85d382787
nixos/gollum: replace preStart with ExecStartPre
2025-10-27 18:52:18 +09:00
h7x4
0167946141
nixos/autofs: replace preStart with ExecStartPre
2025-10-27 18:52:18 +09:00
h7x4
d19e1ded79
nixos/svnserve: replace systemd script with ExecStart
2025-10-27 18:52:09 +09:00
h7x4
6e31242835
nixos/docker-registry: replace systemd script with ExecStart
2025-10-27 18:52:07 +09:00
h7x4
428fd47816
nixos/paperless: replace systemd script with ExecStart
2025-10-27 18:52:07 +09:00
h7x4
0b49e6b9dc
nixos/dictd: replace systemd script with ExecStart
2025-10-27 18:52:06 +09:00
Lukas Wurzinger
5172d80615
nixos/rsync: remove assertion
2025-10-26 12:39:07 +01:00
Pol Dellaiera
d7dd8ff319
nixos/n8n: use env vars instead of config file ( #445176 )
2025-10-26 10:37:15 +00:00
Zhaith Izaliel
0e6c2a2595
nixos/iio-niri: move from programs to services/misc
...
The module was wrongly put in programs following PR #454551 and we didn't catch it during review. This commit fixes that issue so the path is compliant to the guidelines.
2025-10-24 14:27:48 +02:00
Lukas Wurzinger
e33798277b
nixos/rsync: init module
2025-10-22 20:48:35 +02:00
Lukas Wurzinger
1f4c50ab81
lib/cli: deprecate toGNUCommandLine
2025-10-21 21:01:38 +02:00
Aliaksandr
80f12557f5
treewide: replace "yes" else "no" usages to lib.boolToYesNo
2025-10-21 16:04:34 +03:00
dish
96aa4941c0
nixos/forgejo: add age setting to automatic dump ( #450761 )
2025-10-20 14:20:09 +00:00
Luca A.
7bf1b4d04a
nixos/forgejo: add age setting to automatic dump
...
Currently dump are added to the directory but not cleaned up.
This setting allows the user to customize the cleanup age of dumps.
2025-10-20 15:42:18 +02:00
h7x4
fcfadc6853
nixos/pinchflat: make TZ variable optional ( #452647 )
2025-10-17 15:02:20 +00:00
Yechiel Worenklein
b317daf271
nixos/pinchflat: make TZ variable optional
...
This is to prvent an error while building time.timeZone is set to null
(default)
2025-10-17 15:19:44 +01:00
Cabia Rangris
fe460b7778
nixos/klipper: Expose firmware and flasher packages in config ( #432658 )
2025-10-14 12:51:46 +00:00
Emily
2f42412f78
ruby_3_2: drop
2025-10-12 17:39:43 +01:00
h7x4
375a70c8aa
nixos/local-content-share: init module ( #426887 )
2025-10-12 14:06:52 +00:00
evolve
57e3a806bf
nixos/local-content-share: init module
2025-10-12 12:40:21 +02:00
h7x4
595dc97360
nixos/serviio: add option to open firewall ports ( #448271 )
2025-10-09 05:12:25 +00:00
Felix Singer
79ab4bb47b
nixos/redmine: Enable MountAPIVFS hardening in service config
...
This setting is already implied by others, but add it for completeness
as well. For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#MountAPIVFS=
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:16:27 +02:00
Felix Singer
21f827065b
nixos/redmine: Enable PrivateUsers hardening in service config
...
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#PrivateUsers=
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:16:27 +02:00
Felix Singer
a799bd0e3d
nixos/redmine: Set ProtectProc to invisible
...
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc=
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:16:26 +02:00
sweenu
f6a4509bfb
nixos/n8n: use env vars instead of config file
2025-10-07 14:52:32 +02:00
Thomas Gerbet
f0335d8ede
nixos/redmine: Set ProtectControlGroups to strict ( #448634 )
2025-10-07 06:20:44 +00:00
Wolfgang Walther
91a8fee3aa
treewide: remove redundant parentheses
...
Auto-fixed by nixf-diagnose.
2025-10-05 10:52:03 +02:00
Wolfgang Walther
c283f32d29
treewide: remove unused with
...
Auto-fixed by nixf-diagnose.
2025-10-05 10:50:41 +02:00
Wolfgang Walther
90e7159c55
treewide: remove unused rec
...
Auto-fix by nixf-diagnose.
2025-10-05 10:49:12 +02:00
Felix Singer
4fb64fb8a1
nixos/redmine: Set ProtectControlGroups to strict
...
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups=
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 23:15:45 +02:00
n
4f67d0e4f8
nixos/serviio: add option to open firewall ports
...
I think we should have open firewall ports and let the user choose if they want to have these ports open or not. :D
2025-10-03 21:17:58 +05:30
Bart Brouns
d1a084e777
nixos/ringboard: add user service module
2025-10-01 15:59:28 +02:00
Masum Reza
9e538263a0
sssd: fix tests issues ( #446589 )
2025-09-29 14:35:47 +00:00
xanderio
61dfdcf015
nixos/gitlab: add proxyWebsockets as recommended nginx setting ( #431884 )
2025-09-29 09:02:01 +00:00
liberodark
979a95c40a
sssd: fix tests issues
2025-09-28 10:42:56 +02:00
Felix Singer
b19c6d9645
nixos/redmine: Set ProtectSystem to strict
...
Make the whole file system read-only except the directories related to
Redmine, like the state directory. The runtime directory is already
excluded by configuring it with the option `RuntimeDirectory`.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-25 16:00:26 +02:00
Felix Singer
31f095fa1a
nixos/redmine: Set up runtime directory by using RuntimeDirectory option
...
Instead of letting systemd tmpfiles set up the runtime directory, use
the option `RuntimeDirectory` from the systemd service config since the
configured path stays read-writable when ProtectSystem is set to
`strict`. This is equal to adding the path to ReadWritePaths.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-25 15:58:31 +02:00
jopejoe1
2032412fdb
various: use more accurate int types ( #445244 )
2025-09-22 21:50:55 +00:00
h7x4
2fb06be29f
nixos/gitlab: use types.port
2025-09-22 16:46:44 +02:00
h7x4
adccbd9442
nixos/cpuminer-cryptonight: use more accurate int types
2025-09-22 16:36:17 +02:00