Robert Helgesson
90c505624b
nixos/grav: remove X-XSS-Protection
...
See <https://github.com/NixOS/nixpkgs/issues/438800 >.
2025-09-02 20:40:09 +02:00
Robert Helgesson
22617bd181
nixos/grav: use PHP 8.3
...
The stable version of Grav is not compatible with later versions of
PHP.
2025-09-02 20:40:09 +02:00
Sandro
da5d204889
nixos/hedgedoc: add configureNginx option ( #427898 )
2025-09-02 18:18:03 +02:00
Diogo Correia
c129255508
nixos/grocy: don't set X-XSS-Protection anymore
...
Part of #438800 .
The OWASP recommentation[1] is:
> The X-XSS-Protection header has been deprecated by modern browsers
> and its use can introduce additional security issues on the client
> side. As such, it is recommended to set the header as X-XSS-Protection: 0
> in order to disable the XSS Auditor, and not allow it to take the default
> behavior of the browser handling the response. Please use
> Content-Security-Policy instead.
[1] https://owasp.org/www-project-secure-headers/#x-xss-protection
2025-09-01 22:36:10 +01:00
Diogo Correia
80f6d36543
{nixos/,}grocy: add diogotcorreia as maintainer
2025-09-01 22:30:43 +01:00
dish
e143b6b049
nixos/kanboard: remove X-XSS-Protection ( #439035 )
2025-09-01 16:50:24 -04:00
Sandro
6779ff00b3
nixos/glitchtip: fix sourcemap uploads, add stateDir option ( #438957 )
2025-09-01 17:53:54 +02:00
Defelo
6ef10ab044
nixos/glitchtip: add stateDir option
2025-09-01 16:57:10 +02:00
Defelo
95968f2f73
nixos/glitchtip: fix sourcemap uploads
2025-09-01 16:57:07 +02:00
Morgan Jones
344caf9640
mattermost: charset fixes ( #436376 )
2025-09-01 02:19:03 +00:00
Zexin Yuan
47fcf23026
nixos/kanboard: remove X-XSS-Protection
2025-09-01 09:43:15 +08:00
Robert Schütz
06c99c29c9
nixos/nextcloud: remove X-XSS-Protection
...
see https://github.com/nextcloud/server/pull/53476
2025-08-31 10:14:01 +02:00
Erin of Yukis
1ec5da1a27
nixos/jitsi-meet: fix systemd protection flag warning
...
Fixes systemd warning:
> /etc/systemd/system/jitsi-excalidraw.service:26: Failed to parse ProtectProc=true, ignoring: Invalid argument
when Jitsi-Meet Excalidraw Backend is enabled. `ProtectProc=true` is not a thing according to man pages, `ProtectProc=noaccess` is the most restrictive setting and likely what was originally intentioned.
2025-08-29 08:56:37 +00:00
Philip Taron
43d66715e5
fetchNextcloudApp: add sha512 ( #435930 )
2025-08-27 12:14:53 -07:00
staticdev
2196fed2b6
fetchNextcloudApp: add sha512
2025-08-26 22:25:48 +02:00
isabel
0471c45c8f
sharkey: 2025.4.3 -> 2025.4.4 ( #431142 )
2025-08-25 22:22:25 +01:00
dish
970dcca69c
treewide: Fix links in module documentation
2025-08-25 12:55:11 -04:00
Ruby Iris Juric
64a200b22a
sharkey: add tmarkus as maintainer
...
https://github.com/NixOS/nixpkgs/pull/431142#pullrequestreview-3149369365
2025-08-25 20:16:04 +10:00
Morgan Jones
6cc8a8cdb5
nixos/mattermost: remove fallback charset for MySQL
...
This was causing issues on newer versions of MariaDB (breaking
NixOS tests) like:
```
Error 1064 (42000): You have an error in your SQL syntax;
check the manual that corresponds to your MariaDB server version
for the right syntax to use near '%2Cutf8' at line 1
```
Since this is simply a fallback character set and all supported versions
of MariaDB support utf8mb4, delete the fallback.
This change should be fully compatible with existing deployments.
2025-08-23 20:41:44 -07:00
Pol Dellaiera
bc36d3ac43
maintainers: drop drupol
2025-08-20 17:54:38 +02:00
Jonas Heinrich
fd71ab35d6
invoiceplane: 1.6.2 -> 1.6.3 ( #431713 )
2025-08-20 16:48:57 +02:00
dotlambda
32991f1eac
nixos/immich: add support for VectorChord ( #428568 )
2025-08-19 13:31:01 -07:00
isabel
ddd7db501d
nixos/bluesky-pds: rename from pds
2025-08-19 20:59:04 +01:00
Sefa Eyeoglu
a9c17c34b1
nixos/immich: add VectorChord migration docs
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:56:20 +02:00
Sefa Eyeoglu
0b93bf6c22
nixos/immich: add enableVectors option
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:55:28 +02:00
Sefa Eyeoglu
fd1994a8b7
nixos/immich: add enableVectorChord option
...
This enables VectorChord in the database (currently) alongside
pgvecto.rs. Note that VectorChord requires pgvector, which is enabled as
well by this option.
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:55:14 +02:00
Jonas Heinrich
aa06ffc4c3
nixos/invoiceplane: Update patch
2025-08-17 10:30:23 +02:00
lassulus
c4142d912d
nixos/jitsi-meet: fix prosody configuration ( #434201 )
2025-08-17 01:07:41 +02:00
⛧-440729 [sophie]
d58a9b9134
nixos/jitsi-meet: fix prosody configuration
2025-08-16 12:43:31 +02:00
RatCornu
f07a87c1e5
nixos/szurubooru: change python3.12 to python3
2025-08-15 23:53:42 +02:00
Felix Bargfeldt
409bce8932
zipline: 4.2.1 -> 4.2.3, prune node_modules ( #432028 )
2025-08-15 12:54:26 +02:00
MiaFoxcat
ab475572f4
nixos/outline: add discord auth
2025-08-15 00:16:35 +02:00
Sefa Eyeoglu
1a24457782
nixos/immich: only start after reaching postgres.target
...
Without this dependency, we may run into a race condition, especially in
our tests.
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-14 22:30:00 +02:00
w
95452e8797
nixos/onlyoffice: fix gixy error ( #419765 )
2025-08-14 13:58:47 +02:00
Toma
84ac628079
nixos/lanraragi: update description ( #433505 )
2025-08-14 01:29:17 +02:00
TomaSajt
45e24e83c4
nixos/lanraragi: update description
2025-08-13 23:55:44 +02:00
Defelo
ed4ce19544
zipline: 4.2.1 -> 4.2.3
...
Changelog: https://github.com/diced/zipline/releases/tag/v4.2.2
Diff: https://github.com/diced/zipline/compare/v4.2.1...v4.2.2
Changelog: https://github.com/diced/zipline/releases/tag/v4.2.3
Diff: https://github.com/diced/zipline/compare/v4.2.2...v4.2.3
2025-08-13 14:38:20 +02:00
Yifei Sun
645af1a698
nixos/calibre-web: fix book cover not showing up due to cache directory defaults to cps path under /nix/store/
2025-08-12 15:37:08 +02:00
6543
f7611cad51
nixos/nextcloud: unify usage of lib functions
2025-08-11 18:49:21 +02:00
Jörg Thalheim
4940959d28
nixos/mediawiki: fix error from wfGetDB being removed ( #427623 )
2025-08-10 11:42:14 +02:00
lassulus
cb771a25a1
jitsi-meet: fix infinite recursion with prosody package ( #432371 )
2025-08-10 09:34:49 +02:00
lassulus
6f224e65ea
jitsi-meet: fix infinite recursion with prosody package
2025-08-10 00:23:58 +02:00
oddlama
a7f40a2648
nixos/mealie: add extraOptions to allow setting trusted proxies for OIDC redirect uri
2025-08-08 20:01:41 +02:00
oddlama
7ba29b306f
nixos/mealie: add trustedProxies option to fix OIDC redirect uri
2025-08-08 20:01:34 +02:00
Maximilian Bosch
3e41a080eb
Merge: nixos/nextcloud: configure redis by default ( #421813 )
2025-08-07 17:27:21 +02:00
isabel
281eb01683
nixos/snips-sh: init ( #390655 )
2025-08-07 11:16:11 +01:00
Martin Weinelt
7db4feef65
nixos/discourse: fix postgres dependency
...
This was broken during the postgresql.target migration in 41c5662cbe .
2025-08-04 15:48:21 +02:00
Felix Bühler
a7566d72a0
nixos/freshrss: fix loading extensions' static content ( #430651 )
2025-08-03 21:39:11 +02:00
Aleksana
3c74938b56
nixos/outline: add support for S3 Transfer Acceleration ( #429498 )
2025-08-03 22:23:57 +08:00
Matt Christ
637fc36529
nixos/freshrss: fix loading extensions' static content
...
Before this change, the THIRDPARTY_EXTENSIONS_PATH would end up with a
double-slash in the path, which was breaking FreshRSS's is_valid_path
detection.
2025-08-03 09:22:46 -05:00
Martin Weinelt
56674702b0
nixos/postfix: modernize, cleanup ( #416840 )
2025-08-02 23:50:59 +02:00
isabel
3ad01858c5
nixos/snips-sh: init module
...
Co-authored-by: NotAShelf <raf@notashelf.dev>
2025-08-02 09:45:27 +01:00
lassulus
2ea007a23b
services/jitsi: Add missing dependency for breakout rooms ( #429837 )
2025-08-01 13:42:22 +02:00
Pol Dellaiera
35d4463792
nixos/drupal: config extend ( #428153 )
2025-08-01 04:38:23 +02:00
Andrew Benbow
ed75819998
nixos/drupal: extend config interface, add config sync dir
2025-07-31 16:03:56 -04:00
Daniel Langbein
09206bfe33
nixos/homer: fix escape docstring
2025-07-31 20:42:36 +02:00
pinpox
deb236c834
services/jitsi: Add missing dependency
...
To be able to use jitsi's breakout rooms (`muc_breaktout_rooms`),
prosody needs to include the `cjson` lua dependency.
2025-07-31 17:37:12 +02:00
Sandro
c4e4ad2cda
komga: bugfix allow komga access to /proc/mounts ( #429206 )
2025-07-31 15:13:24 +02:00
Martin Weinelt
cdeff13765
nixos/lasuite-meet: serve admin ui static assets via nginx ( #429362 )
2025-07-30 17:40:00 +02:00
Cobalt
069ad13822
nixos/outline: add support for S3 Transfer Acceleration
...
An optional extension for anyone using the transfer acceleration, either
on S3 or as a workaround for non-public S3 services.
2025-07-30 14:22:11 +02:00
Chris Moultrie
5983d4bed3
web-apps/komga: add tebriel to maintainers
2025-07-29 22:34:31 -04:00
Chris Moultrie
42eb3d422a
komga: bugfix allow komga access to /proc/mounts by service
...
New Java call to the Files.getFileStore uses /proc/mounts so we can no
longer hav ProcSubset as only "pid".
2025-07-29 11:15:03 -04:00
Niklas Hambüchen
436a8a1152
umami: init at 2.19.0; nixos/umami: init ( #380249 )
2025-07-29 16:48:52 +02:00
Diogo Correia
6d61e7b089
nixos/umami: init module
2025-07-29 14:38:02 +00:00
Alexander Sieg
32ca49df92
nixos/lasuite-meet: serve admin ui static assets via nginx
2025-07-29 16:20:44 +02:00
xanderio
a70576d5ce
nixos/lasuite-meet: fix preStart script for backend ( #425556 )
2025-07-29 16:09:19 +02:00
Sandro
781856bcb7
go-httpbin: init at 2.18.3, nixos/go-httpbin: init module ( #427717 )
2025-07-29 15:48:11 +02:00
Martin Weinelt
7f52135a59
nixos/postfix: fold main and master config into settings attribute
2025-07-28 17:03:08 +02:00
Martin Weinelt
029f408b94
treewide: migrate postfix configurations to service.postfix.config
...
The `services.postfix.config` option is a freeform type that represents
settings in `main.cf`. The top-level options on the postfix module were
replaced by these and that is the reason behind this migration.
2025-07-28 16:42:17 +02:00
Jennifer Graul
1918e3ced1
nixos/peering-manager: fix bgp session poller
...
The "--all" flag from poll_bgp_sessions has been removed and is now the
default.
2025-07-28 13:29:13 +02:00
Jennifer Graul
4c21b28447
nixos/peering-manager: add environmentFile option
2025-07-28 13:29:10 +02:00
Jennifer Graul
6f35ae801e
nixos/peering-manager: remove enableOidc option since it is now builtin
2025-07-28 13:19:01 +02:00
Maximilian Bosch
c3da85f1bb
Merge: nixos/nextcloud: fix eval ( #428709 )
2025-07-28 11:37:35 +02:00
Izorkin
cbec672b38
nixos/libretranslate: init
2025-07-27 03:46:22 +02:00
Sandro Jäckel
9e2d007b94
nixos/nextcloud: configure redis by default
2025-07-26 23:31:35 +02:00
Sandro Jäckel
58def163c0
nixos/nextcloud: fix eval
2025-07-26 23:22:15 +02:00
Cosima Neidahl
009450ee9e
nixos/peertube-runner: init module ( #427007 )
2025-07-25 21:28:22 +02:00
June Stepp
f200c10c8a
nixos/peertube-runner: init module
2025-07-25 10:58:04 -05:00
Sandro Jäckel
7259b7ca67
nixos/hedgedoc: add configureNginx option
2025-07-24 22:01:49 +02:00
6543
b6088b0d8e
nixos/nextcloud: remove with lib usage
2025-07-24 17:00:10 +02:00
Maximilian Bosch
5d30429bbf
Merge: nixos/nextcloud: move phpPackage default into option ( #423792 )
2025-07-24 16:31:49 +02:00
Wolfgang Walther
5a0711127c
treewide: run nixfmt 1.0.0
2025-07-24 13:55:40 +02:00
Wolfgang Walther
62fe016519
treewide: run treefmt with mdcr/nixfmt
2025-07-24 13:52:31 +02:00
Wolfgang Walther
6c47e7d5da
treewide: fix syntax errors in nix code blocks
...
Fixes all code blocks with "nix" language in markdown files for syntax
errors to be able to run nixfmt in the next step.
2025-07-24 13:52:29 +02:00
Defelo
224dc30d39
nixos/go-httpbin: init module
2025-07-23 16:17:47 +02:00
Pol Dellaiera
0a5c852bbf
nixos/drupal: add config for private files directory ( #427260 )
2025-07-23 10:59:12 +02:00
Rémi NICOLE
16bf4a02fa
nixos/nextcloud: fix module maintainers ( #427548 )
2025-07-23 10:40:37 +08:00
Ashelyn Dawn
0918d45da9
nixos/mediawiki: update maintenance script usage
...
Calling maintenance scripts directly was deprecated in 1.40, so we
should call them via run.php instead
Release notes: https://www.mediawiki.org/wiki/Release_notes/1.40#Upgrading_notes_for_1.40
2025-07-22 19:48:21 -06:00
Ashelyn Dawn
61c4a6463b
nixos/mediawiki: wfGetDB removed
...
MediaWiki 1.44 has removed the wfGetDB function, so the init script
can no longer use it
Release notes: https://www.mediawiki.org/wiki/Release_notes/1.44#Breaking_changes_in_1.44
2025-07-22 19:48:21 -06:00
Andrew Benbow
711f3730a9
nixos/drupal: add config for private files directory
2025-07-21 17:35:39 -04:00
Gaétan Lepage
2935230aa7
peertube: remove spawn ( #427111 )
2025-07-21 18:47:52 +02:00
Norbert Melzer
c623ad67be
nixos/LANraragi: Add openFirewall option ( #421882 )
2025-07-21 16:49:01 +02:00
liberodark
1c1d6a725a
peertube: remove spawn
2025-07-21 12:55:23 +02:00
Yt
ff3ffc8143
nixos/meilisearch: generic settings; handle secrets better. + fix racy test ( #424481 )
2025-07-20 04:48:44 -04:00
Maximilian Bosch
3289277081
Merge: nixos/nextcloud-notify_push: delay restart and add same dependences f… ( #421552 )
2025-07-19 12:59:50 +02:00
Paul Haerle
f79d2fc207
Fix link syntax in Markdown files ( #426381 )
2025-07-18 16:06:24 +02:00
Andrew Voynov
e2ce2981bf
nixos/services: fix Markdown link syntax in web-apps/ocis.md
2025-07-18 18:25:21 +05:00
Sandro
d69cbe23e1
nixos/chhoto-url: init module ( #424630 )
2025-07-18 13:32:14 +02:00
Defelo
55e6f26bff
nixos/chhoto-url: init module
2025-07-18 12:00:32 +02:00
Maximilian Bosch
bf79e3edcd
Merge: nixos/lasuite-docs: perform migrations after generating secret key ( #425493 )
2025-07-17 18:18:07 +02:00
xanderio
caea8a1c0a
nixos/dependency-track: fix default JVM heap size ( #425747 )
2025-07-17 16:11:36 +02:00
Pol Dellaiera
12614d7b94
nixos/bookstack: Updated to accommodate passwordless login for mysql & Module now creates themes directory; nixosTests.bookstack: Updated to also test passwordless login for mysql; bookstack: Changed to allow themes directory to be writable ( #422309 )
2025-07-17 09:45:42 +02:00
Savyasachee Jha
912ca9239a
nixos/bookstack: Module now creates themes directory
2025-07-17 07:57:13 +02:00
June Stepp
4ee1354ae6
nixos/peertube: only include whisper when transcription is enabled
...
`whisper-ctranslate2` has a large closure size with unique dependencies.
2025-07-16 21:25:16 +02:00
Julian Stecklina
5517b6f068
nixos/dependency-track: fix default JVM heap size
...
The default of 4GB is too low for a production setup and causes
DependencyTrack to hit java.lang.OutOfMemoryError. This causes
Dependency Track to enter a weird state where it will throw 502 and
504 errors.
The initial 4GB was set to make Dependency Track run in the (too
small) VM in the NixOS integration test. Move the explicit heap
configuration there. For the service itself, we now don't set a limit.
This means the JVM will choose its maximum heap on its own, which does
a much better job for realistic scenarios.
I added a release note, because people who run Dependency Track on
very tiny VMs/machines may experience issues.
2025-07-16 12:16:49 +02:00
soyouzpanda
31dcccb074
nixos/lasuite-meet: fix preStart script for backend
...
- Use Systemd bind mount instead of symlinking the static directory
- Perfom migrations after generating secret key
Thanks @networkException and @Ma27
2025-07-15 22:00:49 +02:00
Maximilian Bosch
4005a14f8f
nixos/lasuite-docs: perform migrations after generating secret key
...
When generating the key inside the module rather than specifying a
hard-coded one, you'd get an error like this otherwise
Jul 15 16:02:53 nixos systemd[1]: Starting Docs from SuiteNumérique...
[...]
Jul 15 16:02:54 nixos lasuite-docs-pre-start[19466]: ValueError: Couldn't setup configuration 'impress.settings.Production': Path '/var/lib/lasuite-docs/django_secret_key' does not exist.
2025-07-15 18:23:14 +02:00
Jonas Heinrich
dfd06eef52
froide-govplan: 0-unstable-2025-01-27 -> 0-unstable-2025-06-25 ( #422026 )
2025-07-14 08:46:17 +02:00
sodiboo
5a8660f10f
nixos/meilisearch: generic settings; handle secrets better.
2025-07-13 20:42:05 +02:00
Izorkin
5a922bf3e5
libvirt: nixos/mastodon: add fasp Sidekiq jobClasses
2025-07-12 15:40:09 +02:00
Jonas Heinrich
d6e3516544
nixos/froide-govplan: Increase startup timeout
2025-07-10 10:54:47 +02:00
liberodark
481a3f2549
nixos/peertube: fix crash when import video
2025-07-09 19:10:22 +02:00
Sandro Jäckel
81edb3c986
nixos/nextcloud: move phpPackage default into option
...
This allows it to be accessed like options.services.nextcloud.phpPackage.default
(cherry picked from commit 5a7afe0a331f97d7dbc65abe38f9a1807d2d753d)
2025-07-09 16:10:29 +02:00
Kerstin
5de825150d
mastodon: 4.3.8 -> 4.4.0 ( #414502 )
...
Co-authored-by: Izorkin <izorkin@elven.pw>
2025-07-09 15:56:45 +02:00
Jonas Heinrich
cd85e93ff7
nixos/froide-govplan: Fix PYTHONPATH
2025-07-09 15:48:05 +02:00
June Stepp
6d35689a8d
nixos/peertube: support auto transcription
...
`ProcSubset = "pid"` was removed, because /proc/cpuinfo needs to be
accessed.
2025-07-08 10:58:16 +02:00
Chris Kruining
f7e134def9
nixos/lanraragi: add openFirewall option
...
Makes it easier to set up the service, many other services offer this option
2025-07-07 16:36:26 +02:00
Jeremy Fleischman
0a4c03ed81
nextcloud: add nextcloud.nginx.enableFastcgiRequestBuffering option
...
Enabling this option fixes (works around) Nextcloud's notorious "0 byte file"
issue. See these upstream issues:
- https://github.com/nextcloud/documentation/issues/9574
- https://github.com/nextcloud/server/issues/7995
This fixes https://github.com/NixOS/nixpkgs/issues/252980
Co-authored-by: Maximilian Bosch <6025220+Ma27@users.noreply.github.com>
2025-07-06 13:21:01 -07:00
Ruby Iris Juric
11d8fbb0b6
nixos/sharkey: init module
2025-07-07 01:01:39 +10:00
Maximilian Bosch
85ec73855b
Merge: nixos/nextcloud: document nextcloud-occ command ( #422639 )
2025-07-05 18:44:48 +02:00
Maximilian Bosch
5a6f0a43ae
nixos/nextcloud: document nextcloud-occ command
...
It's not clear how to use this command in other systemd units, this
section gives a recommendation.
I realized that there's no explicit mention of `nextcloud-occ` in the
first place, so I wrote some introductory sentences as well.
2025-07-05 12:42:06 +02:00
Maximilian Bosch
0ccca18bd8
Merge: nixos/nextcloud-notify_push: allow overwriting recommendedProxySettings without mkForce ( #421786 )
2025-07-05 11:40:11 +02:00
Maximilian Bosch
c21958fae8
Merge: nixos/nextcloud: add assertion explaining to set dbtype ( #422433 )
2025-07-05 10:00:20 +02:00
K900
a6900e5833
nixos/lasuite-meet: init ( #407742 )
2025-07-05 10:21:40 +03:00
soyouzpanda
15f71480e2
nixos/lasuite-meet: init
2025-07-05 10:10:15 +03:00
Pol Dellaiera
e0472e2056
nixos/drupal: make https the default for Caddy ( #418254 )
2025-07-04 23:47:12 +02:00
Dominique Martinet
78a20758e0
nixos/nextcloud: add assertion explaining to set dbtype
...
Since 25.05 dbtype no longer defaults to sqlite and this yields an error
that is understandable enough but not easy to properly address.
Add an assert that is more explicit.
Before:
```
error: The option `nodes.nextcloud.services.nextcloud.config.dbtype' was accessed but has no value defined. Try setting the option.
```
After:
```
error:
Failed assertions:
- `services.nextcloud.config.dbtype` must be set explicitly (pgsql, mysql, or sqlite)
Before 25.05, it used to default to sqlite but that is not recommended by upstream.
Either set it to sqlite as it used to be, or convert to another type as described
in the official db conversion page:
https://docs.nextcloud.com/server/latest/admin_manual/configuration_database/db_conversion.html
```
Link: https://github.com/NixOS/nixpkgs/pull/369242#issuecomment-3036296243
2025-07-05 06:35:26 +09:00
Savyasachee Jha
cab8025470
nixos/bookstack: Updated to accommodate passwordless login for mysql
2025-07-04 08:23:57 +02:00
Sandro Jäckel
d8ada6c1d6
nixos/nextcloud-notify_push: delay restart and add same dependences for setup unit
...
So that in case of nextcloud taking a few seconds longer to start up,
the setup unit doesn't go into a fail state.
2025-07-03 15:42:30 +02:00
Vladimir Timofeenko
7e7b797156
nixos/homebox: fix link to documentation
2025-07-02 08:26:51 -07:00
Sandro Jäckel
c049f1746c
nixos/nextcloud-notify_push: allow overwriting recommendedProxySettings without mkForce
2025-07-02 15:11:27 +02:00
Maximilian Bosch
a064abed61
Merge: nixos/postgresql: move postStart into separate unit ( #403645 )
2025-06-27 18:09:54 +02:00
Rémi NICOLE
17f82c3cd7
nixos/netbox: don't force use of sudo in netbox-manage ( #419237 )
2025-06-27 13:10:55 +00:00
teutat3s
0c7a8d5255
nixos/nextcloud: sync nginx config with upstream
...
Upstream changes were checked by checking out the stable31 branch of the
https://github.com/nextcloud/documentation and comparing:
git diff c1c9b0a072537544769fdd6062989a631d4fb17c admin_manual/installation/nginx-root.conf.sample
Notably, this adds the text/javascript and application/wasm mime types to the list of
gzip'ed mime types, which improves nextcloud loading in our testing.
Also adds webp support.
2025-06-25 20:36:45 +02:00
Leona Maroni
a467ed2611
netbox_4_3: init at 4.3.2 ( #414367 )
2025-06-25 11:17:09 +02:00
Arnout Engelen
cab186d016
nixos/galene: allow using self-signed certificates ( #417508 )
2025-06-24 20:47:40 +02:00
Wolfgang Walther
41c5662cbe
nixos/postgresql: move postStart into separate unit
...
This avoids restarting the postgresql server, when only ensureDatabases
or ensureUsers have been changed. It will also allow to properly wait
for recovery to finish later.
To wait for "postgresql is ready" in other services, we now provide a
postgresql.target.
Resolves #400018
Co-authored-by: Marcel <me@m4rc3l.de>
2025-06-24 15:26:47 +02:00
Wolfgang Walther
3a63b54b2c
nipap: init at v0.32.7 ( #417076 )
2025-06-24 13:18:00 +00:00
Taliyah Webb
33ab0a191e
nixos/netbox: don't force use of sudo in netbox-manage
2025-06-24 11:20:10 +02:00
transcaffeine
142421f155
netbox_4_3: init at 4.3.2
...
Release notes:
- https://github.com/netbox-community/netbox/releases/tag/v4.3.0
- https://github.com/netbox-community/netbox/releases/tag/v4.3.1
- https://github.com/netbox-community/netbox/releases/tag/v4.3.2
Full changelog: https://github.com/netbox-community/netbox/compare/v4.2.9...v4.3.2
2025-06-24 10:47:07 +02:00
Luke Granger-Brown
a013d9258c
nixos/nipap: init
2025-06-23 21:52:32 +01:00
Martin Weinelt
8dfb4412a7
engelsystem: unvendor composer and yarn dependencies
2025-06-22 23:56:49 +02:00
Wolfgang Walther
dfbaabf75c
nixos/immich: assert postgresql is below v17 ( #418962 )
2025-06-22 16:19:10 +00:00
Wolfgang Walther
cb30307559
nixos/immich: assert postgresql is below v17
...
We recently bumped the default PostgreSQL version to v17 in the NixOS
module. This breaks immich, which still needs PostgreSQL 16.
2025-06-22 17:50:08 +02:00
Maximilian Bosch
683bc0289e
Merge: nixos/nextcloud: add php-systemd extension if log_type is "systemd" ( #416735 )
2025-06-22 17:04:52 +02:00
Maximilian Bosch
5d2e8705fb
Merge: nixos/{libeufin,roundcube,immich}: fix postgresql.package regression ( #418514 )
2025-06-22 16:43:20 +02:00
Wolfgang Walther
62d2b6d593
nixos/immich: fix postgresql.package regression
...
`config.services.postgresql.package` is now only available when the
PostgreSQL module is actually enabled. If we're not using the local
database, we'll need to fallback to the latest postgresql version, since
we don't know about the remote version.
2025-06-22 14:25:03 +02:00
Lukas Nagel
589374dd71
nixos/nextcloud: add php-systemd extension if log_type is "systemd"
2025-06-21 08:47:47 +02:00
Guillaume Girol
deaa642681
nixos/nextcloud: configure only unique trusted_domains ( #413386 )
2025-06-21 00:16:01 +02:00
Kerstin Humm
ed0af3bf25
nixos/mastodon: make robust for cases where postgresql isn't enabled on the host
...
E.g. when a remote PostgreSQL database is used
Apparently you can't access the services.postgresql.package value
anymore if postgresql isn't enabled?
2025-06-20 14:40:25 +02:00
Andrew Benbow
ae9adb2fa1
nixos/drupal: make https default for caddy
2025-06-19 16:02:09 -04:00
Leona Maroni
0a8f3e11c0
fediwall: init at 0.4.0 ( #413666 )
2025-06-19 18:11:51 +02:00
Pol Dellaiera
ba7f45dbf8
bookstack: 24.12.1 -> 25.05.1, nixos/bookstack: refactor, nixosTests.bookstack: init ( #389071 )
2025-06-18 15:13:29 +02:00
transcaffeine
ba7d1fec08
nixos/fediwall: init
2025-06-17 20:45:25 +02:00
Savyasachee Jha
c75204d911
nixos/bookstack: refactored to comply with RFC42 and changed structure to take advantage of laravel caching
2025-06-17 20:35:53 +02:00
Arnout Engelen
87fbf71ed6
nixos/galene: allow using self-signed certificates
...
Fixes #356170
Later we might also want to make it easier to run behind nginx as a reverse proxy, for consistency with other modules.
2025-06-17 13:13:33 +02:00
RatCornu
94de595a56
nixos/szurubooru: init at 2.5-unstable-2025-02-11
2025-06-16 08:34:16 +02:00
Maximilian Bosch
d2a5ec6b6b
Merge: nixos/nextcloud: Remove unused version logic ( #413043 )
2025-06-11 22:12:09 +02:00
provokateurin
58003922a8
nixos/nextcloud: Remove unused version logic
...
All relevant versions are not supported anymore, therefore the version logic is no longer necessary.
2025-06-10 08:57:08 +02:00
Pol Dellaiera
8e7e639670
nixos/drupal: bugfix postInstall hook and options ( #414592 )
2025-06-09 22:07:53 +02:00
Andrew Benbow
51e0229d2d
nixos/drupal: bugfix postsInstall hook and options
2025-06-09 14:23:38 -04:00
Defelo
f71748184c
nixos/olivetin: use yq-go to merge config files
2025-06-08 22:21:25 +02:00
Yureka
f7a8cfb119
nixos/lasuite-docs: Set collaboration server allowed origins ( #413190 )
...
Without this, the collaboration server closes the websocket connection
and activity within the doc is not synchronized.
2025-06-07 15:38:27 +02:00
Pol Dellaiera
13cd7afd74
nixos/glance: add environmentFile option ( #413373 )
2025-06-06 09:15:18 +02:00
Pol Dellaiera
1f36324dfd
readeck: 0.18.2 -> 0.19.2 ( #411362 )
2025-06-05 11:23:22 +02:00
williamvds
82b8a1e117
maintainers: rename williamvds -> averyvigolo
2025-06-04 21:27:11 +01:00
linsui
17f95268f3
nixos/readeck: add back MemoryDenyWriteExecute
...
SQLite driver is reverted to its CGO version so this can be enabled
2025-06-05 03:47:00 +08:00
John Wiegley
8922d4f099
pihole: init at various ( #361571 )
...
Adds pihole-ftl.service and pihole-ftl-log-deleter.service.
Authored-By: williamvds <william@williamvds.me>
2025-06-04 08:12:30 -07:00
williamvds
727fe21d5d
nixos/pihole-web: init
...
Pihole's dashboard is a web app which visualises statistics from pihole-FTL
(i.e. dnsmasq), shows query logs, and allows configuration.
With this module, configuration is largely declarative and immutable, so
settings can't be changed, but they can be viewed from the webpage.
The admin page also allows regenerating the DNS ("gravity") database.
2025-06-03 23:15:18 +01:00
6543
0019d96579
nixos/nextcloud: configure only unique trusted_domains
2025-06-02 23:51:51 +02:00
Gutyina Gergő
3bddd16a37
nixos/glance: add environmentFile option
2025-06-02 23:07:13 +02:00
Andrew Benbow
223d142ea0
nixos/drupal: init
2025-06-02 16:56:22 -04:00
Gutyina Gergő
6591213349
nixos/glance: clarify settings _secret
2025-06-02 22:47:21 +02:00
Martin Weinelt
d5bbb50acc
nixos/lasuite-docs: fix media proxying ( #412732 )
2025-06-02 21:22:37 +02:00
Martin Weinelt
0e4118f672
nixos/lasuite-docs: use systemd bind mount instead of stateful symlink for static directory ( #413308 )
2025-06-02 20:13:39 +02:00
networkException
0b360e9328
nixos/lasuite-docs: use systemd bind mount instead of stateful symlink for static directory
2025-06-02 19:51:42 +02:00
Peder Bergebakken Sundt
c77ac9dfc3
treewide: fix typos
2025-06-02 16:07:07 +02:00
Arne Keller
005efa5c0c
nixos/filebrowser: add user and group options ( #412653 )
2025-06-01 17:16:35 +02:00
h7x4
5b840ad984
bluemap: 5.4 -> 5.7 ( #357164 )
2025-06-01 15:20:10 +02:00
h7x4
5b3e5519c1
nixos/bluemap: merge addons option into packs
...
Mentioned in the release notes for bluemap 5.5:
> Move all contents (if any) of bluemaps addons folder into
> bluemaps packs folder and delete the addons folder.
> (Native addons now go into the packs folder alongside resourcepacks)
https://github.com/BlueMap-Minecraft/BlueMap/releases/tag/v5.5
2025-06-01 04:18:54 +02:00
Peder Bergebakken Sundt
cfbe1487f1
nixos/stash: fix empty immutable plugins ( #402574 )
2025-06-01 03:46:25 +02:00
Peder Bergebakken Sundt
e2c60b31f8
nixos/test/stash: fix eval ( #412794 )
2025-06-01 03:45:59 +02:00
Peder Bergebakken Sundt
8be90eac26
nixos/stash: fix mutableSettings logic ( #408198 )
2025-06-01 03:39:01 +02:00
Peder Bergebakken Sundt
dd3cbbe9d7
nixos/test/stash: fix eval
...
nixosTests.stash fails eval when trying to convert cfg.settings to json due to a lambda sneaking its way in there. Bisected the issue to 0de1d18795 . This fixes the issue.
2025-06-01 03:16:41 +02:00
Puck Meerburg
39fe05dec0
nixos/lasuite-docs: fix media proxying
2025-05-31 18:02:44 +00:00
Martin J. Andersen
c7ddf0b314
nixos/filebrowser: add user and group options
2025-05-31 15:47:12 +02:00
Ramses
6f71f0c7b2
nixos/keycloak: enable strict shell checks in systemd units ( #409042 )
2025-05-29 09:26:57 +02:00
Lukas Wurzinger
96ec055edb
nixos/filebrowser: init module
2025-05-29 00:54:49 +05:30
Sandro
f2e0bb7591
nixos/mediagoblin: fix gmg argument parsing and media reprocessing ( #362655 )
2025-05-28 16:14:10 +02:00
Sandro Jäckel
81d2a488e6
nixos/mediagoblin: fix initial media reprocessing with gmg
...
Running `mediagoblin-gmg reprocess initial` before would fail with
missing GST_PLUGIN_PATH and tools in PATH.
2025-05-28 16:00:20 +02:00
Sandro Jäckel
dd63ca898e
nixos/mediagoblin: fix gmg argument parsing
...
Before the argument to mediagoblin-gmg would be passed to the actual command
and the rest to sh which is obviously nonsense.
2025-05-28 16:00:15 +02:00
PAEPCKE, Michael
5aa1b5c829
nixos/readeck: improve systemd start target
2025-05-25 19:19:45 +00:00
Martin Weinelt
c49cc6a396
nixos/lasuite-docs: init ( #401798 )
2025-05-24 18:43:49 +02:00
soyouzpanda
f3120f0710
nixos/lasuite-docs: init
2025-05-24 18:27:39 +02:00
Yt
95b919fd5d
nltk-data: make searchable, add all downloadables ( #409952 )
2025-05-24 09:24:00 -04:00
Felix Singer
559c4d0133
nixos/gerrit: Pin Java version to 21
...
Gerrit 3.12 only supports Java 21. So in order to not get any unexpected
issues, set the default of jvmPackage to jdk21_headless.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-05-24 01:13:16 +02:00
Benjamin Sparks
a4c3b3eff2
treewide: nltk-data.averaged_perceptron_tagger_eng -> nltk-data.averaged-perceptron-tagger-eng
2025-05-23 01:24:27 +02:00
Winter
51a5e7059a
Revert "nltk-data: make searchable, add all downloadables"
2025-05-22 14:17:31 -04:00
Acid Bong
89abf8819f
nixos/dex: add package option
2025-05-22 23:12:26 +05:30
K900
a656825f1c
nixos/opencloud: slightly better documentation ( #409515 )
2025-05-22 16:44:21 +03:00
Yt
ef3140231e
nltk-data: make searchable, add all downloadables ( #409482 )
2025-05-21 21:56:01 -04:00
Benjamin Sparks
60d135d45a
treewide: nltk-data.averaged_perceptron_tagger_eng -> nltk-data.averaged-perceptron-tagger-eng
2025-05-21 23:20:49 +02:00
K900
448ae8f0bc
nixos/opencloud: slightly better documentation
2025-05-21 21:55:01 +03:00
K900
059f376f89
opencloud: init at 2.3.0 ( #404891 )
2025-05-21 20:36:00 +03:00
K900
b504cc1362
nixos/opencloud: init module
...
Co-authored-by: Christoph Heiss <christoph@c8h4.io>
2025-05-21 17:47:35 +03:00
Ulrik Strid
fbbba999f4
nixos/davis: fix several outstanding bugs ( #409068 )
2025-05-21 15:36:41 +02:00
Casey Link
b6f51cf13d
nixos/davis: Use the php version defined by the davis package
2025-05-20 20:03:42 +02:00
Casey Link
23d344b9da
nixos/davis: fix several outstanding bugs
...
As reported in #317303 , this fixes:
- nginx config is now actually optional
- mail dsn options are now optional
- broken stdout logging has been replaced with default file logging in
state dir
fixes #317303
2025-05-20 15:19:19 +02:00
Jean-François Roche
6abb0d239d
nixos/keycloak: enable strict shell checks in systemd units
2025-05-20 13:51:31 +02:00
Felix Singer
f14efb6fa2
nixos/gerrit: Add Felix Singer as maintainer
...
I'm already a maintainer of the Gerrit package and I've done various
work on the Gerrit module. So it makes sense to be a maintainer there as
well.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-05-19 04:28:36 +02:00
DoctorDalek1963
7dcad49a30
nixos/stash: fix mutableSettings logic
...
Fixes services.stash.mutableSettings so that it makes sense. The logic
was previously backwards and the settings would be overriden if
mutableSettings was true.
2025-05-18 00:36:45 +01:00
Ratchanan Srirattanamet
ff4214fabd
nixos/kimai: fix upgrading to Kimai 2.32 by clearing cache earlier
...
During testing of Kimai 2.32, it's been found that fixes done in PR
371917 [^1] is not enough to prevent error in the case of upgrading from
2.31 to 2.32.
Hinted by an upstream issue [^2], make sure that the cache is cleared
before running `kimai:install`, not after. This fixes upgrading from
2.31 to 2.32, and should prevent similar issue from popping up again.
[^1]: https://github.com/NixOS/nixpkgs/pull/371917
[^2]: https://github.com/kimai/kimai/issues/5437
2025-05-16 11:19:58 +02:00
Maximilian Bosch
26126c75df
Merge: Use cacert in Nextcloud ( #406252 )
2025-05-15 18:50:53 +02:00
provokateurin
12f8199080
nixos/nextcloud: Override cacert package with config.security.pki.caBundle
2025-05-15 18:19:52 +02:00
Luj
b98b4f43bd
readeck: 0.17.1 -> 0.18.2 ( #405276 )
2025-05-14 17:38:22 +02:00
Sandro
60571a4fa9
nixos/gancio: fix cli not passing all args ( #401581 )
2025-05-14 15:11:36 +02:00
Jonas Heinrich
002ebbc4de
oncall: init at 2.1.7; nixos/oncall: init ( #388723 )
2025-05-13 23:21:54 +02:00
linsui
bff193eaba
readeck: 0.17.1 -> 0.18.2
2025-05-13 23:32:38 +08:00
Maximilian Bosch
0be521cb0e
Merge: nixos/nextcloud: use LoadCredential to read services.nextcloud.secretFile ( #405970 )
2025-05-13 13:45:36 +02:00
Sandro
95afdf2b49
nixos/gancio: properly quote
...
Co-authored-by: Wroclaw <wroclaw223@outlook.com>
2025-05-12 17:55:46 +02:00
provokateurin
dfb7f45bb8
nixos/nextcloud: Disable integrity check
2025-05-11 21:34:33 +02:00
thiloho
a847800945
nixos/archtika: remove module
2025-05-11 16:27:16 +02:00
Jonas Heinrich
ce6e5f037a
nixos/oncall: init
2025-05-11 13:30:01 +02:00
networkException
23468ad19f
nixos/nextcloud: use LoadCredential to read services.nextcloud.secretFile
...
This patch adds support for using systemd's LoadCredential
feature to read in a json file at a path defined in the
services.nextcloud.secretFile option.
This is a follow up to 2ce1e84103 .
2025-05-10 20:36:01 +02:00
lassulus
fb297f0be8
movim: 0.30 → 0.30.1; {movim,nixos.movim}: mysql → mariadb ( #401596 )
2025-05-10 07:58:20 +02:00
Pol Dellaiera
aaf817bb5b
nixos/glance: allow specifying secret settings ( #395551 )
2025-05-08 13:58:03 +00:00
Izorkin
4ec6492b3b
nixos/mastodon: add option elasticsearch.prefix
2025-05-08 14:48:52 +02:00
piegames
a1848a66d8
nixos/stash: Fix regex in default value ( #403279 )
2025-05-07 12:45:34 +02:00
Yt
e3fa38df6b
lauti: rename from eintopf and update to 1.0.0 ( #403263 )
2025-05-06 16:24:25 -04:00
Bruno BELANYI
e8f532dea2
nixos/mealie: add 'database.createLocally' ( #403670 )
2025-05-06 13:45:40 +01:00
Riyyi
39fbbb7ba0
nixos/nextcloud: fix typo in extraApps example ( #404314 )
2025-05-05 17:00:50 +08:00
Bruno BELANYI
2e44a3dd76
nixos/mealie: add 'database.createLocally'
2025-05-02 23:15:59 +01:00
piegames
8a71705aba
nixos/stash: Fix regex in default value
...
`\.` in a Nix string is just `.`, so it will match on any characters
instead of just dot.
2025-05-01 13:18:19 +02:00
Jonas Heinrich
a22c5fac3f
nixos/eintopf: rename package to lauti
2025-05-01 12:27:49 +02:00
Alexander Sieg
5205c8b5ca
nixos/snipe-it: clear and rebuild caches on startup
2025-04-29 15:45:04 +02:00
renesat
cb4459412a
nixos/stash: fix empty immutable plugins
2025-04-28 18:41:14 +02:00
Gutyina Gergő
27d160b60b
nixos/glance: allow specifying secret settings
2025-04-26 13:42:15 +02:00
Maximilian Bosch
31357d17a3
Merge: nixos/nextcloud: Disable web updater by default ( #401147 )
2025-04-25 18:31:53 +02:00
โทสฺตัล
9e32e76a72
{movim,nixos.movim}: mysql → mariadb
...
Docs say now the separation between MySQL & MariaDB too great to be
supported going forward, so to better reflect that, rename to match.
2025-04-25 08:22:55 +07:00
Sandro Jäckel
3a5c613ce2
nixos/gancio: fix cli not passing all args
2025-04-25 01:27:15 +02:00
Defelo
965558108f
nixos/olivetin: init module
2025-04-24 23:40:51 +02:00
provokateurin
530c6f09c9
nixos/nextcloud: Disable web updater by default
...
Disables the "Open updater" button in the admin overview and makes sure it is not possible to update the instance through the web interface.
Nextcloud runs from the source code in the nix store and should not try to update itself manually.
The only way to update Nextcloud is to update nixpkgs and therefore the web updater must be disabled.
2025-04-23 17:08:25 +02:00
xanderio
71ae33edd3
nixos/dependency-track: fix nginx config for frontend ( #393041 )
2025-04-23 16:19:22 +02:00
0x4A6F
d8bfbd35ee
upgrade nodejs_18 dependents in prevision for upcoming EOL ( #399749 )
2025-04-22 22:01:51 +02:00
Maximilian Bosch
2cb444f4fc
Merge: nixos/nextcloud: S3: Rename autocreate (a no-op) to verify_bucket_exists ( #399629 )
2025-04-22 16:03:51 +02:00
Maximilian Bosch
4c336c55b2
Merge: nextcloud29: drop ( #397974 )
2025-04-22 15:56:50 +02:00
Marcus Ramberg
d3ad1eb896
hoarder: rename to karakeep, nixos/karakeep: init module ( #399603 )
2025-04-22 08:19:44 +02:00
Eric Roberts
9790df5968
nixos/karakeep: init module
2025-04-21 20:20:20 -04:00
Antoine du Hamel
dc8397c07b
upgrade nodejs_18 dependents in prevision for upcoming EOL
2025-04-21 19:56:15 +02:00
Martin Weinelt
96c56efbc6
discourse: 3.3.2 -> 3.4.2 ( #394129 )
2025-04-21 16:44:43 +02:00