Commit graph

2735 commits

Author SHA1 Message Date
h7x4 c2b14be993
nixos/nifi: use types.port 2025-09-22 16:48:08 +02:00
h7x4 a955f6ac31
nixos/plantuml-server: use types.port 2025-09-22 16:46:45 +02:00
h7x4 24c79fd3cc
nixos/silverbullet: use types.port 2025-09-22 16:46:44 +02:00
h7x4 0269d83980
nixos/pgpkeyserver-lite: use types.port 2025-09-22 16:33:03 +02:00
h7x4 84d3b8350d
nixos/kasmweb: use types.port 2025-09-22 16:33:03 +02:00
h7x4 f2b5f25655
nixos/anuko-time-tracker: use types.port 2025-09-22 16:33:02 +02:00
h7x4 25332ea522
nixos/cryptpad: use types.port 2025-09-22 16:33:01 +02:00
h7x4 c31d264b5d
nixos/nexus: use types.port 2025-09-22 16:33:01 +02:00
nixpkgs-ci[bot] f08a85f704
Merge master into staging-next 2025-09-22 12:07:05 +00:00
Alexander Sieg 5daa3ed068
nixos/outline: ajust for deprecation of MAXIMUM_IMPORT_SIZE 2025-09-22 11:04:19 +02:00
h7x4 4ba3f60b8a
various: use mkPackageOption 2025-09-22 02:46:54 +02:00
nixpkgs-ci[bot] 76f580bfad
Merge staging-next into staging 2025-09-20 12:06:51 +00:00
dotlambda c36c047cbc
nixos/immich: set $XDG_CACHE_HOME (#444330) 2025-09-20 11:53:35 +00:00
nixpkgs-ci[bot] ca7f2a47c0
Merge staging-next into staging 2025-09-19 18:06:36 +00:00
Robert Schütz 3fbb8e08a1 nixos/immich: set $XDG_CACHE_HOME
The immich-machine-learning service can fail with

    RuntimeError: Data processing error: I/O error: Operation not permitted (os error 1)

because huggingface attempts to download files to $HOME/.cache (which
doesn't exist in this case) unless $XDG_CACHE_HOME or $HF_HOME is set.
2025-09-19 05:35:12 -07:00
royce-c 0d9a7c4386
ente: fix AmbientCapabilities systemd unit option typo 2025-09-19 00:47:58 -07:00
Arnout Engelen 14a3cc02bd
onlyoffice: fix syntax error
The `more_set_headers` syntax was wrong.

Syntax docs: https://github.com/openresty/headers-more-nginx-module?tab=readme-ov-file#more_set_headers

This led to:

```
{\"Exception\":\"InvalidArgumentException\",\"Message\":\"\\\"attachment;\\\" is not valid header name.\",\"Code\":0,\"Trace\":[
{\"file\":\"/nix/store/4y4c191pd9pa5nd78i8flvkf50gd4lvp-nextcloud-31.0.8/3rdparty/guzzlehttp/psr7/src/MessageTrait.php\",\"line\":153,\"function\":\"assertHeader\",\"class\":\"GuzzleHttp\\\\Psr7\\\\Response\",\"type\":\"->\"},
```

Introduced in https://github.com/NixOS/nixpkgs/pull/419765
2025-09-18 16:17:03 +02:00
nixpkgs-ci[bot] 97577361ff
Merge staging-next into staging 2025-09-18 05:48:07 +00:00
dish 6c45dd68c1
peertube: 7.2.3 -> 7.3.0 (#443185) 2025-09-18 03:06:38 +00:00
nixpkgs-ci[bot] 592e2df8c6
Merge staging-next into staging 2025-09-17 00:16:57 +00:00
Sandro 5413fb37b8
szurubooru: 2.5-unstable-2025-02-11 -> 2.5-unstable-2025-07-19, fix build for python3.13 (#427826) 2025-09-16 20:59:41 +00:00
SchweGELBin dcfd03a94f
nixos/peertube: update nginx configuration
Co-authored-by: Izorkin <Izorkin@gmail.com>
2025-09-16 21:08:27 +02:00
SchweGELBin 9654acae0e
peertube: 7.2.3 -> 7.3.0
Co-authored-by: Izorkin <Izorkin@gmail.com>
2025-09-16 21:08:09 +02:00
nixpkgs-ci[bot] 7ae9347dfb
Merge staging-next into staging 2025-09-16 18:06:57 +00:00
Sandro 5d8e397c67
nixos/sillytavern: add it (#418452) 2025-09-16 13:50:22 +00:00
nixpkgs-ci[bot] 3cf2f09936
Merge staging-next into staging 2025-09-16 12:07:49 +00:00
Yt 17960ab111
nixos/windmill: Fix database setup config + target unit (#442367) 2025-09-16 11:27:01 +00:00
nixpkgs-ci[bot] 5c46a967a6
Merge staging-next into staging 2025-09-16 00:16:31 +00:00
Sandro a9e5a2ac81
nixos/invoiceplane: block access to ipconfig.php (#439996) 2025-09-15 19:54:20 +00:00
Bert Proesmans c9377a2ec7 nixos/windmill: Introduce systemd target unit
Windmill consists of multiple services, all can be started/stopped/controlled/ordered
by the newly introduced windmill.target unit.
2025-09-15 10:04:18 +00:00
Bert Proesmans d37a03eb5a nixos/windmill: Fix database setup config
Postgresql db-init procedure changed with a separate unit for initialisation.
This commit makes the windmill configuration conformant again.
2025-09-15 10:04:17 +00:00
nixpkgs-ci[bot] eea9839c6e
Merge staging-next into staging 2025-09-14 00:17:55 +00:00
nixpkgs-ci[bot] d0e71d6bb2
Merge staging-next into staging 2025-09-13 12:06:38 +00:00
oddlama 84d7ec6875
nixos/ente: init module and test 2025-09-13 10:59:35 +02:00
merrkry f2a1154c65 nixos/mastodon: fix streaming path 2025-09-12 21:18:01 +02:00
nixpkgs-ci[bot] d63b272849
Merge staging-next into staging 2025-09-10 06:06:29 +00:00
David Wronek 695b0bfbe3 nixos/sshwifty: init module
Signed-off-by: David Wronek <david.wronek@mainlining.org>
2025-09-10 07:40:09 +02:00
nixpkgs-ci[bot] d4a82f90df
Merge staging-next into staging 2025-09-09 18:06:05 +00:00
wrvsrx f0303c62ef
nixos/sillytavern: add it 2025-09-10 00:14:50 +08:00
Yifei Sun 6483a3e012
nixos/calibre-web: fix malformed environment variable 2025-09-09 17:15:51 +02:00
Wolfgang Walther b9ec8bed14
treewide: fix typos in md files (#439306) 2025-09-09 08:03:31 +00:00
Ben Siraphob 64fb0fc99b
nixos/doc: fix typos 2025-09-09 13:15:19 +07:00
Ben Siraphob 7b646b7f6d
nixos: fix typos 2025-09-09 13:14:35 +07:00
Haylin Moore cf540f8c98 treewide/nixos: move number typed port options to types.port 2025-09-08 15:27:19 +02:00
StepBroBD 4355de94bb
nixos/calibre-web: fix book cover not showing up due to cache directory defaults to cps path under /nix/store/ (#432604) 2025-09-06 21:11:01 +02:00
Michael Smith 40c80ed80c
maintainers: drop michaelshmitty 2025-09-04 14:24:24 +02:00
Maximilian Bosch 19d29ccade
Merge: nixos/nextcloud: Pass OC_PASS and NC_PASS environment variables to nextcloud-occ (#439771) 2025-09-04 00:36:03 +02:00
teutat3s c7fb59251c
nixos/invoiceplane: block access to ipconfig.php
Upstream uses this method to protect sensitive data in their example
config: https://github.com/InvoicePlane/InvoicePlane/blob/v1.6.3/ipconfig.php.example#L1
2025-09-03 23:49:24 +02:00
Sandro 3a6b82b8f5
nixos/hedgedoc: fix eval 2025-09-03 10:28:42 +02:00
provokateurin ba24e7fa23
nixos/nextcloud: Pass OC_PASS and NC_PASS environment variables to nextcloud-occ 2025-09-03 08:54:48 +02:00
Robert Helgesson 90c505624b nixos/grav: remove X-XSS-Protection
See <https://github.com/NixOS/nixpkgs/issues/438800>.
2025-09-02 20:40:09 +02:00
Robert Helgesson 22617bd181 nixos/grav: use PHP 8.3
The stable version of Grav is not compatible with later versions of
PHP.
2025-09-02 20:40:09 +02:00
Sandro da5d204889
nixos/hedgedoc: add configureNginx option (#427898) 2025-09-02 18:18:03 +02:00
Diogo Correia c129255508
nixos/grocy: don't set X-XSS-Protection anymore
Part of #438800.

The OWASP recommentation[1] is:

> The X-XSS-Protection header has been deprecated by modern browsers
> and its use can introduce additional security issues on the client
> side. As such, it is recommended to set the header as X-XSS-Protection: 0
> in order to disable the XSS Auditor, and not allow it to take the default
> behavior of the browser handling the response. Please use
> Content-Security-Policy instead.

[1] https://owasp.org/www-project-secure-headers/#x-xss-protection
2025-09-01 22:36:10 +01:00
Diogo Correia 80f6d36543
{nixos/,}grocy: add diogotcorreia as maintainer 2025-09-01 22:30:43 +01:00
dish e143b6b049
nixos/kanboard: remove X-XSS-Protection (#439035) 2025-09-01 16:50:24 -04:00
Sandro 6779ff00b3
nixos/glitchtip: fix sourcemap uploads, add stateDir option (#438957) 2025-09-01 17:53:54 +02:00
Defelo 6ef10ab044
nixos/glitchtip: add stateDir option 2025-09-01 16:57:10 +02:00
Defelo 95968f2f73
nixos/glitchtip: fix sourcemap uploads 2025-09-01 16:57:07 +02:00
Morgan Jones 344caf9640
mattermost: charset fixes (#436376) 2025-09-01 02:19:03 +00:00
Zexin Yuan 47fcf23026
nixos/kanboard: remove X-XSS-Protection 2025-09-01 09:43:15 +08:00
Robert Schütz 06c99c29c9 nixos/nextcloud: remove X-XSS-Protection
see https://github.com/nextcloud/server/pull/53476
2025-08-31 10:14:01 +02:00
Erin of Yukis 1ec5da1a27
nixos/jitsi-meet: fix systemd protection flag warning
Fixes systemd warning:

> /etc/systemd/system/jitsi-excalidraw.service:26: Failed to parse ProtectProc=true, ignoring: Invalid argument

when Jitsi-Meet Excalidraw Backend is enabled. `ProtectProc=true` is not a thing according to man pages, `ProtectProc=noaccess` is the most restrictive setting and likely what was originally intentioned.
2025-08-29 08:56:37 +00:00
Philip Taron 43d66715e5
fetchNextcloudApp: add sha512 (#435930) 2025-08-27 12:14:53 -07:00
staticdev 2196fed2b6 fetchNextcloudApp: add sha512 2025-08-26 22:25:48 +02:00
isabel 0471c45c8f
sharkey: 2025.4.3 -> 2025.4.4 (#431142) 2025-08-25 22:22:25 +01:00
dish 970dcca69c
treewide: Fix links in module documentation 2025-08-25 12:55:11 -04:00
Ruby Iris Juric 64a200b22a
sharkey: add tmarkus as maintainer
https://github.com/NixOS/nixpkgs/pull/431142#pullrequestreview-3149369365
2025-08-25 20:16:04 +10:00
Morgan Jones 6cc8a8cdb5
nixos/mattermost: remove fallback charset for MySQL
This was causing issues on newer versions of MariaDB (breaking
NixOS tests) like:

```
Error 1064 (42000): You have an error in your SQL syntax;
check the manual that corresponds to your MariaDB server version
for the right syntax to use near '%2Cutf8' at line 1
```

Since this is simply a fallback character set and all supported versions
of MariaDB support utf8mb4, delete the fallback.

This change should be fully compatible with existing deployments.
2025-08-23 20:41:44 -07:00
Pol Dellaiera bc36d3ac43 maintainers: drop drupol 2025-08-20 17:54:38 +02:00
Jonas Heinrich fd71ab35d6
invoiceplane: 1.6.2 -> 1.6.3 (#431713) 2025-08-20 16:48:57 +02:00
dotlambda 32991f1eac
nixos/immich: add support for VectorChord (#428568) 2025-08-19 13:31:01 -07:00
isabel ddd7db501d
nixos/bluesky-pds: rename from pds 2025-08-19 20:59:04 +01:00
Sefa Eyeoglu a9c17c34b1
nixos/immich: add VectorChord migration docs
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:56:20 +02:00
Sefa Eyeoglu 0b93bf6c22
nixos/immich: add enableVectors option
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:55:28 +02:00
Sefa Eyeoglu fd1994a8b7
nixos/immich: add enableVectorChord option
This enables VectorChord in the database (currently) alongside
pgvecto.rs. Note that VectorChord requires pgvector, which is enabled as
well by this option.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:55:14 +02:00
Jonas Heinrich aa06ffc4c3 nixos/invoiceplane: Update patch 2025-08-17 10:30:23 +02:00
lassulus c4142d912d
nixos/jitsi-meet: fix prosody configuration (#434201) 2025-08-17 01:07:41 +02:00
⛧-440729 [sophie] d58a9b9134
nixos/jitsi-meet: fix prosody configuration 2025-08-16 12:43:31 +02:00
RatCornu f07a87c1e5
nixos/szurubooru: change python3.12 to python3 2025-08-15 23:53:42 +02:00
Felix Bargfeldt 409bce8932
zipline: 4.2.1 -> 4.2.3, prune node_modules (#432028) 2025-08-15 12:54:26 +02:00
MiaFoxcat ab475572f4 nixos/outline: add discord auth 2025-08-15 00:16:35 +02:00
Sefa Eyeoglu 1a24457782
nixos/immich: only start after reaching postgres.target
Without this dependency, we may run into a race condition, especially in
our tests.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-14 22:30:00 +02:00
w 95452e8797
nixos/onlyoffice: fix gixy error (#419765) 2025-08-14 13:58:47 +02:00
Toma 84ac628079
nixos/lanraragi: update description (#433505) 2025-08-14 01:29:17 +02:00
TomaSajt 45e24e83c4
nixos/lanraragi: update description 2025-08-13 23:55:44 +02:00
Defelo ed4ce19544
zipline: 4.2.1 -> 4.2.3
Changelog: https://github.com/diced/zipline/releases/tag/v4.2.2
Diff: https://github.com/diced/zipline/compare/v4.2.1...v4.2.2

Changelog: https://github.com/diced/zipline/releases/tag/v4.2.3
Diff: https://github.com/diced/zipline/compare/v4.2.2...v4.2.3
2025-08-13 14:38:20 +02:00
Yifei Sun 645af1a698
nixos/calibre-web: fix book cover not showing up due to cache directory defaults to cps path under /nix/store/ 2025-08-12 15:37:08 +02:00
6543 f7611cad51 nixos/nextcloud: unify usage of lib functions 2025-08-11 18:49:21 +02:00
Jörg Thalheim 4940959d28
nixos/mediawiki: fix error from wfGetDB being removed (#427623) 2025-08-10 11:42:14 +02:00
lassulus cb771a25a1
jitsi-meet: fix infinite recursion with prosody package (#432371) 2025-08-10 09:34:49 +02:00
lassulus 6f224e65ea jitsi-meet: fix infinite recursion with prosody package 2025-08-10 00:23:58 +02:00
oddlama a7f40a2648
nixos/mealie: add extraOptions to allow setting trusted proxies for OIDC redirect uri 2025-08-08 20:01:41 +02:00
oddlama 7ba29b306f
nixos/mealie: add trustedProxies option to fix OIDC redirect uri 2025-08-08 20:01:34 +02:00
Maximilian Bosch 3e41a080eb
Merge: nixos/nextcloud: configure redis by default (#421813) 2025-08-07 17:27:21 +02:00
isabel 281eb01683
nixos/snips-sh: init (#390655) 2025-08-07 11:16:11 +01:00
Martin Weinelt 7db4feef65
nixos/discourse: fix postgres dependency
This was broken during the postgresql.target migration in 41c5662cbe.
2025-08-04 15:48:21 +02:00
Felix Bühler a7566d72a0
nixos/freshrss: fix loading extensions' static content (#430651) 2025-08-03 21:39:11 +02:00
Aleksana 3c74938b56
nixos/outline: add support for S3 Transfer Acceleration (#429498) 2025-08-03 22:23:57 +08:00
Matt Christ 637fc36529 nixos/freshrss: fix loading extensions' static content
Before this change, the THIRDPARTY_EXTENSIONS_PATH would end up with a
double-slash in the path, which was breaking FreshRSS's is_valid_path
detection.
2025-08-03 09:22:46 -05:00
Martin Weinelt 56674702b0
nixos/postfix: modernize, cleanup (#416840) 2025-08-02 23:50:59 +02:00
isabel 3ad01858c5
nixos/snips-sh: init module
Co-authored-by: NotAShelf <raf@notashelf.dev>
2025-08-02 09:45:27 +01:00
lassulus 2ea007a23b
services/jitsi: Add missing dependency for breakout rooms (#429837) 2025-08-01 13:42:22 +02:00
Pol Dellaiera 35d4463792
nixos/drupal: config extend (#428153) 2025-08-01 04:38:23 +02:00
Andrew Benbow ed75819998 nixos/drupal: extend config interface, add config sync dir 2025-07-31 16:03:56 -04:00
Daniel Langbein 09206bfe33
nixos/homer: fix escape docstring 2025-07-31 20:42:36 +02:00
pinpox deb236c834
services/jitsi: Add missing dependency
To be able to use jitsi's breakout rooms (`muc_breaktout_rooms`),
prosody needs to include the `cjson` lua dependency.
2025-07-31 17:37:12 +02:00
Sandro c4e4ad2cda
komga: bugfix allow komga access to /proc/mounts (#429206) 2025-07-31 15:13:24 +02:00
Martin Weinelt cdeff13765
nixos/lasuite-meet: serve admin ui static assets via nginx (#429362) 2025-07-30 17:40:00 +02:00
Cobalt 069ad13822
nixos/outline: add support for S3 Transfer Acceleration
An optional extension for anyone using the transfer acceleration, either
on S3 or as a workaround for non-public S3 services.
2025-07-30 14:22:11 +02:00
Chris Moultrie 5983d4bed3
web-apps/komga: add tebriel to maintainers 2025-07-29 22:34:31 -04:00
Chris Moultrie 42eb3d422a
komga: bugfix allow komga access to /proc/mounts by service
New Java call to the Files.getFileStore uses /proc/mounts so we can no
longer hav ProcSubset as only "pid".
2025-07-29 11:15:03 -04:00
Niklas Hambüchen 436a8a1152
umami: init at 2.19.0; nixos/umami: init (#380249) 2025-07-29 16:48:52 +02:00
Diogo Correia 6d61e7b089 nixos/umami: init module 2025-07-29 14:38:02 +00:00
Alexander Sieg 32ca49df92
nixos/lasuite-meet: serve admin ui static assets via nginx 2025-07-29 16:20:44 +02:00
xanderio a70576d5ce
nixos/lasuite-meet: fix preStart script for backend (#425556) 2025-07-29 16:09:19 +02:00
Sandro 781856bcb7
go-httpbin: init at 2.18.3, nixos/go-httpbin: init module (#427717) 2025-07-29 15:48:11 +02:00
Martin Weinelt 7f52135a59
nixos/postfix: fold main and master config into settings attribute 2025-07-28 17:03:08 +02:00
Martin Weinelt 029f408b94
treewide: migrate postfix configurations to service.postfix.config
The `services.postfix.config` option is a freeform type that represents
settings in `main.cf`. The top-level options on the postfix module were
replaced by these and that is the reason behind this migration.
2025-07-28 16:42:17 +02:00
Jennifer Graul 1918e3ced1
nixos/peering-manager: fix bgp session poller
The "--all" flag from poll_bgp_sessions has been removed and is now the
default.
2025-07-28 13:29:13 +02:00
Jennifer Graul 4c21b28447
nixos/peering-manager: add environmentFile option 2025-07-28 13:29:10 +02:00
Jennifer Graul 6f35ae801e
nixos/peering-manager: remove enableOidc option since it is now builtin 2025-07-28 13:19:01 +02:00
Maximilian Bosch c3da85f1bb
Merge: nixos/nextcloud: fix eval (#428709) 2025-07-28 11:37:35 +02:00
Izorkin cbec672b38
nixos/libretranslate: init 2025-07-27 03:46:22 +02:00
Sandro Jäckel 9e2d007b94
nixos/nextcloud: configure redis by default 2025-07-26 23:31:35 +02:00
Sandro Jäckel 58def163c0
nixos/nextcloud: fix eval 2025-07-26 23:22:15 +02:00
Cosima Neidahl 009450ee9e
nixos/peertube-runner: init module (#427007) 2025-07-25 21:28:22 +02:00
June Stepp f200c10c8a
nixos/peertube-runner: init module 2025-07-25 10:58:04 -05:00
Sandro Jäckel 7259b7ca67
nixos/hedgedoc: add configureNginx option 2025-07-24 22:01:49 +02:00
6543 b6088b0d8e nixos/nextcloud: remove with lib usage 2025-07-24 17:00:10 +02:00
Maximilian Bosch 5d30429bbf
Merge: nixos/nextcloud: move phpPackage default into option (#423792) 2025-07-24 16:31:49 +02:00
Wolfgang Walther 5a0711127c
treewide: run nixfmt 1.0.0 2025-07-24 13:55:40 +02:00
Wolfgang Walther 62fe016519
treewide: run treefmt with mdcr/nixfmt 2025-07-24 13:52:31 +02:00
Wolfgang Walther 6c47e7d5da
treewide: fix syntax errors in nix code blocks
Fixes all code blocks with "nix" language in markdown files for syntax
errors to be able to run nixfmt in the next step.
2025-07-24 13:52:29 +02:00
Defelo 224dc30d39
nixos/go-httpbin: init module 2025-07-23 16:17:47 +02:00
Pol Dellaiera 0a5c852bbf
nixos/drupal: add config for private files directory (#427260) 2025-07-23 10:59:12 +02:00
Rémi NICOLE 16bf4a02fa
nixos/nextcloud: fix module maintainers (#427548) 2025-07-23 10:40:37 +08:00
Ashelyn Dawn 0918d45da9
nixos/mediawiki: update maintenance script usage
Calling maintenance scripts directly was deprecated in 1.40, so we
should call them via run.php instead

Release notes: https://www.mediawiki.org/wiki/Release_notes/1.40#Upgrading_notes_for_1.40
2025-07-22 19:48:21 -06:00
Ashelyn Dawn 61c4a6463b
nixos/mediawiki: wfGetDB removed
MediaWiki 1.44 has removed the wfGetDB function, so the init script
can no longer use it

Release notes: https://www.mediawiki.org/wiki/Release_notes/1.44#Breaking_changes_in_1.44
2025-07-22 19:48:21 -06:00
Andrew Benbow 711f3730a9 nixos/drupal: add config for private files directory 2025-07-21 17:35:39 -04:00
Gaétan Lepage 2935230aa7
peertube: remove spawn (#427111) 2025-07-21 18:47:52 +02:00
Norbert Melzer c623ad67be
nixos/LANraragi: Add openFirewall option (#421882) 2025-07-21 16:49:01 +02:00
liberodark 1c1d6a725a peertube: remove spawn 2025-07-21 12:55:23 +02:00
Yt ff3ffc8143
nixos/meilisearch: generic settings; handle secrets better. + fix racy test (#424481) 2025-07-20 04:48:44 -04:00
Maximilian Bosch 3289277081
Merge: nixos/nextcloud-notify_push: delay restart and add same dependences f… (#421552) 2025-07-19 12:59:50 +02:00
Paul Haerle f79d2fc207
Fix link syntax in Markdown files (#426381) 2025-07-18 16:06:24 +02:00
Andrew Voynov e2ce2981bf
nixos/services: fix Markdown link syntax in web-apps/ocis.md 2025-07-18 18:25:21 +05:00
Sandro d69cbe23e1
nixos/chhoto-url: init module (#424630) 2025-07-18 13:32:14 +02:00
Defelo 55e6f26bff
nixos/chhoto-url: init module 2025-07-18 12:00:32 +02:00
Maximilian Bosch bf79e3edcd
Merge: nixos/lasuite-docs: perform migrations after generating secret key (#425493) 2025-07-17 18:18:07 +02:00
xanderio caea8a1c0a
nixos/dependency-track: fix default JVM heap size (#425747) 2025-07-17 16:11:36 +02:00
Pol Dellaiera 12614d7b94
nixos/bookstack: Updated to accommodate passwordless login for mysql & Module now creates themes directory; nixosTests.bookstack: Updated to also test passwordless login for mysql; bookstack: Changed to allow themes directory to be writable (#422309) 2025-07-17 09:45:42 +02:00
Savyasachee Jha 912ca9239a nixos/bookstack: Module now creates themes directory 2025-07-17 07:57:13 +02:00
June Stepp 4ee1354ae6 nixos/peertube: only include whisper when transcription is enabled
`whisper-ctranslate2` has a large closure size with unique dependencies.
2025-07-16 21:25:16 +02:00
Julian Stecklina 5517b6f068 nixos/dependency-track: fix default JVM heap size
The default of 4GB is too low for a production setup and causes
DependencyTrack to hit java.lang.OutOfMemoryError. This causes
Dependency Track to enter a weird state where it will throw 502 and
504 errors.

The initial 4GB was set to make Dependency Track run in the (too
small) VM in the NixOS integration test. Move the explicit heap
configuration there. For the service itself, we now don't set a limit.
This means the JVM will choose its maximum heap on its own, which does
a much better job for realistic scenarios.

I added a release note, because people who run Dependency Track on
very tiny VMs/machines may experience issues.
2025-07-16 12:16:49 +02:00
soyouzpanda 31dcccb074
nixos/lasuite-meet: fix preStart script for backend
- Use Systemd bind mount instead of symlinking the static directory
- Perfom migrations after generating secret key

Thanks @networkException and @Ma27
2025-07-15 22:00:49 +02:00
Maximilian Bosch 4005a14f8f
nixos/lasuite-docs: perform migrations after generating secret key
When generating the key inside the module rather than specifying a
hard-coded one, you'd get an error like this otherwise

    Jul 15 16:02:53 nixos systemd[1]: Starting Docs from SuiteNumérique...
    [...]
    Jul 15 16:02:54 nixos lasuite-docs-pre-start[19466]: ValueError: Couldn't setup configuration 'impress.settings.Production':  Path '/var/lib/lasuite-docs/django_secret_key' does not exist.
2025-07-15 18:23:14 +02:00
Jonas Heinrich dfd06eef52
froide-govplan: 0-unstable-2025-01-27 -> 0-unstable-2025-06-25 (#422026) 2025-07-14 08:46:17 +02:00
sodiboo 5a8660f10f nixos/meilisearch: generic settings; handle secrets better. 2025-07-13 20:42:05 +02:00
Izorkin 5a922bf3e5 libvirt: nixos/mastodon: add fasp Sidekiq jobClasses 2025-07-12 15:40:09 +02:00
Jonas Heinrich d6e3516544 nixos/froide-govplan: Increase startup timeout 2025-07-10 10:54:47 +02:00
liberodark 481a3f2549 nixos/peertube: fix crash when import video 2025-07-09 19:10:22 +02:00
Sandro Jäckel 81edb3c986
nixos/nextcloud: move phpPackage default into option
This allows it to be accessed like options.services.nextcloud.phpPackage.default

(cherry picked from commit 5a7afe0a331f97d7dbc65abe38f9a1807d2d753d)
2025-07-09 16:10:29 +02:00
Kerstin 5de825150d
mastodon: 4.3.8 -> 4.4.0 (#414502)
Co-authored-by: Izorkin <izorkin@elven.pw>
2025-07-09 15:56:45 +02:00
Jonas Heinrich cd85e93ff7 nixos/froide-govplan: Fix PYTHONPATH 2025-07-09 15:48:05 +02:00
June Stepp 6d35689a8d nixos/peertube: support auto transcription
`ProcSubset = "pid"` was removed, because /proc/cpuinfo needs to be
accessed.
2025-07-08 10:58:16 +02:00
Chris Kruining f7e134def9
nixos/lanraragi: add openFirewall option
Makes it easier to set up the service, many other services offer this option
2025-07-07 16:36:26 +02:00
Jeremy Fleischman 0a4c03ed81
nextcloud: add nextcloud.nginx.enableFastcgiRequestBuffering option
Enabling this option fixes (works around) Nextcloud's notorious "0 byte file"
issue. See these upstream issues:

- https://github.com/nextcloud/documentation/issues/9574
- https://github.com/nextcloud/server/issues/7995

This fixes https://github.com/NixOS/nixpkgs/issues/252980

Co-authored-by: Maximilian Bosch <6025220+Ma27@users.noreply.github.com>
2025-07-06 13:21:01 -07:00
Ruby Iris Juric 11d8fbb0b6
nixos/sharkey: init module 2025-07-07 01:01:39 +10:00
Maximilian Bosch 85ec73855b
Merge: nixos/nextcloud: document nextcloud-occ command (#422639) 2025-07-05 18:44:48 +02:00
Maximilian Bosch 5a6f0a43ae
nixos/nextcloud: document nextcloud-occ command
It's not clear how to use this command in other systemd units, this
section gives a recommendation.

I realized that there's no explicit mention of `nextcloud-occ` in the
first place, so I wrote some introductory sentences as well.
2025-07-05 12:42:06 +02:00
Maximilian Bosch 0ccca18bd8
Merge: nixos/nextcloud-notify_push: allow overwriting recommendedProxySettings without mkForce (#421786) 2025-07-05 11:40:11 +02:00
Maximilian Bosch c21958fae8
Merge: nixos/nextcloud: add assertion explaining to set dbtype (#422433) 2025-07-05 10:00:20 +02:00
K900 a6900e5833
nixos/lasuite-meet: init (#407742) 2025-07-05 10:21:40 +03:00
soyouzpanda 15f71480e2 nixos/lasuite-meet: init 2025-07-05 10:10:15 +03:00
Pol Dellaiera e0472e2056
nixos/drupal: make https the default for Caddy (#418254) 2025-07-04 23:47:12 +02:00
Dominique Martinet 78a20758e0 nixos/nextcloud: add assertion explaining to set dbtype
Since 25.05 dbtype no longer defaults to sqlite and this yields an error
that is understandable enough but not easy to properly address.

Add an assert that is more explicit.

Before:
```
       error: The option `nodes.nextcloud.services.nextcloud.config.dbtype' was accessed but has no value defined. Try setting the option.
```

After:
```
       error:
       Failed assertions:
       - `services.nextcloud.config.dbtype` must be set explicitly (pgsql, mysql, or sqlite)

       Before 25.05, it used to default to sqlite but that is not recommended by upstream.
       Either set it to sqlite as it used to be, or convert to another type as described
       in the official db conversion page:
       https://docs.nextcloud.com/server/latest/admin_manual/configuration_database/db_conversion.html
```

Link: https://github.com/NixOS/nixpkgs/pull/369242#issuecomment-3036296243
2025-07-05 06:35:26 +09:00
Savyasachee Jha cab8025470 nixos/bookstack: Updated to accommodate passwordless login for mysql 2025-07-04 08:23:57 +02:00
Sandro Jäckel d8ada6c1d6
nixos/nextcloud-notify_push: delay restart and add same dependences for setup unit
So that in case of nextcloud taking a few seconds longer to start up,
the setup unit doesn't go into a fail state.
2025-07-03 15:42:30 +02:00
Vladimir Timofeenko 7e7b797156 nixos/homebox: fix link to documentation 2025-07-02 08:26:51 -07:00
Sandro Jäckel c049f1746c
nixos/nextcloud-notify_push: allow overwriting recommendedProxySettings without mkForce 2025-07-02 15:11:27 +02:00
Maximilian Bosch a064abed61
Merge: nixos/postgresql: move postStart into separate unit (#403645) 2025-06-27 18:09:54 +02:00
Rémi NICOLE 17f82c3cd7
nixos/netbox: don't force use of sudo in netbox-manage (#419237) 2025-06-27 13:10:55 +00:00
teutat3s 0c7a8d5255
nixos/nextcloud: sync nginx config with upstream
Upstream changes were checked by checking out the stable31 branch of the
https://github.com/nextcloud/documentation and comparing:

git diff c1c9b0a072537544769fdd6062989a631d4fb17c admin_manual/installation/nginx-root.conf.sample

Notably, this adds the text/javascript and application/wasm mime types to the list of
gzip'ed mime types, which improves nextcloud loading in our testing.

Also adds webp support.
2025-06-25 20:36:45 +02:00
Leona Maroni a467ed2611
netbox_4_3: init at 4.3.2 (#414367) 2025-06-25 11:17:09 +02:00
Arnout Engelen cab186d016
nixos/galene: allow using self-signed certificates (#417508) 2025-06-24 20:47:40 +02:00
Wolfgang Walther 41c5662cbe
nixos/postgresql: move postStart into separate unit
This avoids restarting the postgresql server, when only ensureDatabases
or ensureUsers have been changed. It will also allow to properly wait
for recovery to finish later.

To wait for "postgresql is ready" in other services, we now provide a
postgresql.target.

Resolves #400018

Co-authored-by: Marcel <me@m4rc3l.de>
2025-06-24 15:26:47 +02:00
Wolfgang Walther 3a63b54b2c
nipap: init at v0.32.7 (#417076) 2025-06-24 13:18:00 +00:00
Taliyah Webb 33ab0a191e
nixos/netbox: don't force use of sudo in netbox-manage 2025-06-24 11:20:10 +02:00
transcaffeine 142421f155
netbox_4_3: init at 4.3.2
Release notes:
  - https://github.com/netbox-community/netbox/releases/tag/v4.3.0
  - https://github.com/netbox-community/netbox/releases/tag/v4.3.1
  - https://github.com/netbox-community/netbox/releases/tag/v4.3.2
Full changelog: https://github.com/netbox-community/netbox/compare/v4.2.9...v4.3.2
2025-06-24 10:47:07 +02:00
Luke Granger-Brown a013d9258c nixos/nipap: init 2025-06-23 21:52:32 +01:00
Martin Weinelt 8dfb4412a7
engelsystem: unvendor composer and yarn dependencies 2025-06-22 23:56:49 +02:00
Wolfgang Walther dfbaabf75c
nixos/immich: assert postgresql is below v17 (#418962) 2025-06-22 16:19:10 +00:00
Wolfgang Walther cb30307559
nixos/immich: assert postgresql is below v17
We recently bumped the default PostgreSQL version to v17 in the NixOS
module. This breaks immich, which still needs PostgreSQL 16.
2025-06-22 17:50:08 +02:00
Maximilian Bosch 683bc0289e
Merge: nixos/nextcloud: add php-systemd extension if log_type is "systemd" (#416735) 2025-06-22 17:04:52 +02:00
Maximilian Bosch 5d2e8705fb
Merge: nixos/{libeufin,roundcube,immich}: fix postgresql.package regression (#418514) 2025-06-22 16:43:20 +02:00
Wolfgang Walther 62d2b6d593
nixos/immich: fix postgresql.package regression
`config.services.postgresql.package` is now only available when the
PostgreSQL module is actually enabled. If we're not using the local
database, we'll need to fallback to the latest postgresql version, since
we don't know about the remote version.
2025-06-22 14:25:03 +02:00
Lukas Nagel 589374dd71 nixos/nextcloud: add php-systemd extension if log_type is "systemd" 2025-06-21 08:47:47 +02:00
Guillaume Girol deaa642681
nixos/nextcloud: configure only unique trusted_domains (#413386) 2025-06-21 00:16:01 +02:00
Kerstin Humm ed0af3bf25 nixos/mastodon: make robust for cases where postgresql isn't enabled on the host
E.g. when a remote PostgreSQL database is used

Apparently you can't access the services.postgresql.package value
anymore if postgresql isn't enabled?
2025-06-20 14:40:25 +02:00