Commit graph

3145 commits

Author SHA1 Message Date
h7x4 39e93806aa
Revert "various: replace systemd.services.<name>.{script,preStart} with ExecStart{,Pre}" 2025-10-31 11:03:32 +01:00
h7x4 23312527af
nixos/sssd: migrate to rfc42-style settings (#448955) 2025-10-29 13:37:22 +00:00
Sandro c32d974077
various: replace systemd.services.<name>.{script,preStart} with ExecStart{,Pre} (#448763) 2025-10-29 12:34:37 +00:00
Marcel acbeb604ce
nixos/sssd: migrate to rfc42-style settings 2025-10-29 09:43:34 +01:00
Sandro bd820895a9
nixos/rsync: remove assertion (#455800) 2025-10-29 00:28:40 +00:00
Wolfgang Walther 6691c568b0
nixosTests.gitlab: fix eval
This was recently turned into a throw.
2025-10-28 18:06:49 +01:00
Philip Taron 01898764b6
treewide: replace "yes" else "no" usages to lib.boolToYesNo (#442387) 2025-10-28 16:25:46 +00:00
h7x4 f964b6a027
nixos/iio-niri: move from programs to services/misc (#455219) 2025-10-27 15:51:12 +00:00
h7x4 589c370878
nixos/errbot: replace preStart with ExecStartPre 2025-10-27 18:52:24 +09:00
h7x4 558d442835
nixos/tandoor-recipes: replace preStart with ExecStartPre 2025-10-27 18:52:19 +09:00
h7x4 d85d382787
nixos/gollum: replace preStart with ExecStartPre 2025-10-27 18:52:18 +09:00
h7x4 0167946141
nixos/autofs: replace preStart with ExecStartPre 2025-10-27 18:52:18 +09:00
h7x4 d19e1ded79
nixos/svnserve: replace systemd script with ExecStart 2025-10-27 18:52:09 +09:00
h7x4 6e31242835
nixos/docker-registry: replace systemd script with ExecStart 2025-10-27 18:52:07 +09:00
h7x4 428fd47816
nixos/paperless: replace systemd script with ExecStart 2025-10-27 18:52:07 +09:00
h7x4 0b49e6b9dc
nixos/dictd: replace systemd script with ExecStart 2025-10-27 18:52:06 +09:00
Lukas Wurzinger 5172d80615
nixos/rsync: remove assertion 2025-10-26 12:39:07 +01:00
Pol Dellaiera d7dd8ff319
nixos/n8n: use env vars instead of config file (#445176) 2025-10-26 10:37:15 +00:00
Zhaith Izaliel 0e6c2a2595
nixos/iio-niri: move from programs to services/misc
The module was wrongly put in programs following PR #454551 and we didn't catch it during review. This commit fixes that issue so the path is compliant to the guidelines.
2025-10-24 14:27:48 +02:00
Lukas Wurzinger e33798277b
nixos/rsync: init module 2025-10-22 20:48:35 +02:00
Lukas Wurzinger 1f4c50ab81
lib/cli: deprecate toGNUCommandLine 2025-10-21 21:01:38 +02:00
Aliaksandr 80f12557f5
treewide: replace "yes" else "no" usages to lib.boolToYesNo 2025-10-21 16:04:34 +03:00
dish 96aa4941c0
nixos/forgejo: add age setting to automatic dump (#450761) 2025-10-20 14:20:09 +00:00
Luca A. 7bf1b4d04a nixos/forgejo: add age setting to automatic dump
Currently dump are added to the directory but not cleaned up.
This setting allows the user to customize the cleanup age of dumps.
2025-10-20 15:42:18 +02:00
h7x4 fcfadc6853
nixos/pinchflat: make TZ variable optional (#452647) 2025-10-17 15:02:20 +00:00
Yechiel Worenklein b317daf271
nixos/pinchflat: make TZ variable optional
This is to prvent an error while building time.timeZone is set to null
(default)
2025-10-17 15:19:44 +01:00
Cabia Rangris fe460b7778
nixos/klipper: Expose firmware and flasher packages in config (#432658) 2025-10-14 12:51:46 +00:00
Emily 2f42412f78 ruby_3_2: drop 2025-10-12 17:39:43 +01:00
h7x4 375a70c8aa
nixos/local-content-share: init module (#426887) 2025-10-12 14:06:52 +00:00
evolve 57e3a806bf nixos/local-content-share: init module 2025-10-12 12:40:21 +02:00
h7x4 595dc97360
nixos/serviio: add option to open firewall ports (#448271) 2025-10-09 05:12:25 +00:00
Felix Singer 79ab4bb47b nixos/redmine: Enable MountAPIVFS hardening in service config
This setting is already implied by others, but add it for completeness
as well. For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#MountAPIVFS=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:16:27 +02:00
Felix Singer 21f827065b nixos/redmine: Enable PrivateUsers hardening in service config
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#PrivateUsers=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:16:27 +02:00
Felix Singer a799bd0e3d nixos/redmine: Set ProtectProc to invisible
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:16:26 +02:00
sweenu f6a4509bfb
nixos/n8n: use env vars instead of config file 2025-10-07 14:52:32 +02:00
Thomas Gerbet f0335d8ede
nixos/redmine: Set ProtectControlGroups to strict (#448634) 2025-10-07 06:20:44 +00:00
Wolfgang Walther 91a8fee3aa
treewide: remove redundant parentheses
Auto-fixed by nixf-diagnose.
2025-10-05 10:52:03 +02:00
Wolfgang Walther c283f32d29
treewide: remove unused with
Auto-fixed by nixf-diagnose.
2025-10-05 10:50:41 +02:00
Wolfgang Walther 90e7159c55
treewide: remove unused rec
Auto-fix by nixf-diagnose.
2025-10-05 10:49:12 +02:00
Felix Singer 4fb64fb8a1 nixos/redmine: Set ProtectControlGroups to strict
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 23:15:45 +02:00
n 4f67d0e4f8
nixos/serviio: add option to open firewall ports
I think we should have open firewall ports and let the user choose if they want to have these ports open or not. :D
2025-10-03 21:17:58 +05:30
Bart Brouns d1a084e777 nixos/ringboard: add user service module 2025-10-01 15:59:28 +02:00
Masum Reza 9e538263a0
sssd: fix tests issues (#446589) 2025-09-29 14:35:47 +00:00
xanderio 61dfdcf015
nixos/gitlab: add proxyWebsockets as recommended nginx setting (#431884) 2025-09-29 09:02:01 +00:00
liberodark 979a95c40a sssd: fix tests issues 2025-09-28 10:42:56 +02:00
Felix Singer b19c6d9645 nixos/redmine: Set ProtectSystem to strict
Make the whole file system read-only except the directories related to
Redmine, like the state directory. The runtime directory is already
excluded by configuring it with the option `RuntimeDirectory`.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-25 16:00:26 +02:00
Felix Singer 31f095fa1a nixos/redmine: Set up runtime directory by using RuntimeDirectory option
Instead of letting systemd tmpfiles set up the runtime directory, use
the option `RuntimeDirectory` from the systemd service config since the
configured path stays read-writable when ProtectSystem is set to
`strict`. This is equal to adding the path to ReadWritePaths.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-25 15:58:31 +02:00
jopejoe1 2032412fdb
various: use more accurate int types (#445244) 2025-09-22 21:50:55 +00:00
h7x4 2fb06be29f
nixos/gitlab: use types.port 2025-09-22 16:46:44 +02:00
h7x4 adccbd9442
nixos/cpuminer-cryptonight: use more accurate int types 2025-09-22 16:36:17 +02:00