tobias/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-11-16 12:45:56 +01:00
Code Issues Packages Projects Releases Wiki Activity
585250 commits 215 branches 129 tags 15 GiB
Commit graph

29346 commits

Author SHA1 Message Date
nikstur a34af9a955 image/repart: add version and compression options 
The version option is needed if you want to implement partition &
systemd-boot based A/B booting where the version information is encoded
in the files on the ESP. See systemd-sysupate docs for more details on
this:
https://www.freedesktop.org/software/systemd/man/latest/sysupdate.d.html

Note, however, that this is not *only* useful for systemd-sysupdate but
also for other similar updating tools/mechanisms.
 2024-01-19 14:43:29 +01:00
Zolo c9e7344950
Update systemd-boot.nix 
Extending the systemd-boot information and where to find more information.
 2024-01-19 14:01:26 +01:00
github-actions[bot] 4679030218
Merge master into staging-next 2024-01-19 12:01:13 +00:00
Martin Weinelt c2853e2588
Merge pull request #258680 from lf-/jade/remove-multiuser-netonline-dep 
nixos/systemd: don't require network-online.target for multi-user.target
 2024-01-19 12:49:23 +01:00
Sandro eb09653fde
Merge pull request #266428 from lf-/jade/samba-fix-security-type 2024-01-19 12:29:19 +01:00
Sandro 5897d4eb0d
nixos/portunus: remove superfluous explicit out 
Co-authored-by: Lin Jian <me@linj.tech>
 2024-01-19 11:58:07 +01:00
Sandro Jäckel fd199bdc5b
nixos/portunus: add seedSettings option 2024-01-19 11:57:01 +01:00
Jade Lovelace fe474ed61a nixos: fix remaining services for network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace 1b514b3e10 fix: rxe under network-online.target change [UNSURE IF CORRECT] 2024-01-19 00:11:34 -08:00
Jade Lovelace c80398e5d2 nixos/ircd-hybrid: fix evaluation error 2024-01-19 00:11:34 -08:00
Jade Lovelace 6c5ab28fce nixos: fix a bunch of services missing dep on network-online.target 
This was done by generating a truly hilarious configuration:

rg 'services\.[^.]+\.enable\t' opts-tags | cut -f1 > allonconfig.nix

The following were not tested due to other evaluation errors. They
should probably be manually audited.
services.amule
services.castopod
services.ceph
services.chatgpt-retrieval-plugin
services.clamsmtp
services.clight
services.dante
services.dex
services.discourse
services.dwm-status
services.engelsystem
services.foundationdb
services.frigate
services.frp
services.grocy
services.guacamole-client
services.hedgedoc
services.home-assistant
services.honk
services.imaginary
services.jitsi-meet
services.kerberos_server
services.limesurvey
services.mastodon
services.mediawiki
services.mobilizon
services.moodle
services.mosquitto
services.nextcloud
services.nullmailer
services.patroni
services.pfix-srsd
services.pgpkeyserver-lite
services.postfixadmin
services.roundcube
services.schleuder
services.self-deploy
services.slskd
services.spacecookie
services.statsd
services.step-ca
services.sympa
services.tsmBackup
services.vdirsyncer
services.vikunja
services.yandex-disk
services.zabbixWeb
 2024-01-19 00:11:34 -08:00
Reno Reckling 33ede4cc7c
use concatMapStringsSep in dovecot config 
Co-authored-by: h7x4 <h7x4@nani.wtf>
 2024-01-19 07:14:59 +01:00
github-actions[bot] 631f14c407
Merge master into staging-next 2024-01-19 06:00:59 +00:00
h7x4 5350f74b81
Merge pull request #277739 from KiaraGrouwstra/fix-sample-value-services-wordpress-sites-name-languages 
fix sample value for option services.wordpress.sites.<name>.languages
 2024-01-19 03:51:40 +01:00
RatCornu 4133bb1bb0
nixos/suwayomi-server: init at 0.7.0 2024-01-19 02:31:23 +01:00
Reno Reckling 9c5b8fe008
Merge branch 'NixOS:master' into patch-1 2024-01-19 01:31:50 +01:00
Jade Lovelace 81a3fa04ca nixos/buildbot: master also wants network-online.target 2024-01-18 16:28:42 -08:00
Jade Lovelace ce602cc0aa nixos/kea: also want network-online.target 2024-01-18 16:28:42 -08:00
Will Fancher 367d101073 nixos/systemd: assert After=network-online.target -> Wants= 
This will catch broken services at the evaluation stage.
 2024-01-18 16:28:41 -08:00
Jade Lovelace 80edf319fe nixos/paperless: fix network-online.target dependencies 2024-01-18 16:28:41 -08:00
Jade Lovelace 62f30634db nixos/systemd: don't require network-online.target for multi-user.target 
Previously we required network-online.target for multi-user.target. This
has made a lot of people very angry and has been widely regarded as a
bad move (or at least, very nonstandard):
15d761a525 (commitcomment-128564097)

This was done because of fragile tests and services declaring
dependencies on multi-user.target when they meant network-online.target.

Let's rip off the bandaid and fix our tests.
 2024-01-18 16:28:39 -08:00
Reno Reckling 1e4065d90a
Do not include sieve_extensions and sieve_global_extensions if they are the default value 
Setting them to empty string will disable the default behaviour, leading to missing extensions.
 2024-01-19 01:21:07 +01:00
nikstur 1e70382b81 nixos/version: add options to identify images 
This is useful when building appliance images that use among other
things partition based A/B updates.
 2024-01-19 01:16:49 +01:00
github-actions[bot] b459003bdd
Merge master into staging-next 2024-01-19 00:02:22 +00:00
Kira Bruneau b250e162d6 nixos/gamemode: add gamemode group 
Gamemode 1.8 requires users to be in the gamemode group to set the CPU
governor, so we should automatically create it when it's enabled.
 2024-01-18 18:06:36 -05:00
nikstur eec1845744 nixos/systemd-sysusers: init 2024-01-18 23:08:14 +01:00
Julian Stecklina be2a4f37af nixos/dbus: explicitly set homeMode for dbus 
Otherwise /run/dbus is created with the wrong permissions.

For some reason our recent changes made /run/dbus be 0700 instead of
0755. This is actually the default of homeMode. So something worked by
accident before?
 2024-01-18 23:08:14 +01:00
nikstur 4b128008c5 nixos/test-instrumentation: use file to set root password 2024-01-18 23:08:13 +01:00
Niklas Hambüchen 305821576a
Merge pull request #273239 from nh2/issue-31138-fix-xkbvalidate-xkb-dir 
xserver service: xkbvalidate: Respect `xkb.dir`
 2024-01-18 21:56:39 +01:00
Bernardo Meurer a09b1c12fb
nixos/moonraker: don't warn about harmless update_manager settings 
The only setting we care to warn about is `enable_system_updates`,
there's no reason to issue warnings when folks set, for example,
`enable_auto_refresh`.
 2024-01-18 13:52:50 -05:00
github-actions[bot] dc4a7c97b0
Merge master into staging-next 2024-01-18 18:00:55 +00:00
K900 967d49b8a8 Merge remote-tracking branch 'origin/staging-next' into staging 2024-01-18 19:15:32 +03:00
Adithya Nair 8b5644684e
nixos/frp: use toml configFile 
According to upstream, the INI configuration file is deprecated and
TOML/YAML/JSON is recommended.
Link: https://github.com/fatedier/frp/tree/dev#configuration-files
 2024-01-18 21:37:40 +05:30
Janne Heß 15c31afd8a
Merge pull request #271067 from nikstur/sysinit-reactivation 
nixos/switch-to-configuration: add sysinit-reactivation.target
 2024-01-18 16:13:32 +01:00
nikstur 1472cd16bb
Merge pull request #265951 from nikstur/systemd-255 
systemd: 254.6 -> 255.2
 2024-01-18 15:51:10 +01:00
Adam C. Stephens 887d3f54c6
Merge pull request #278753 from adamcstephens/incus/migrate-test 
incus, lxd: ensure lxd->incus migration is supported and tested
 2024-01-18 08:01:23 -05:00
mian | mian fbe9d95ed9
fix semi-colon missing 2024-01-18 16:31:54 +08:00
Franz Pletz c00a2d02bd
Merge pull request #251882 from r-ryantm/auto-update/prometheus-snmp-exporter 
prometheus-snmp-exporter: 0.22.0 -> 0.25.0
 2024-01-18 08:16:39 +01:00
Sandro Jäckel f154807e93
nixos/portunus: restart on failure 2024-01-18 01:01:30 +01:00
nikstur e6b66f08a5 nixos/switch-to-configuration: add sysinit-reactivation.target 2024-01-18 00:46:30 +01:00
Franz Pletz ed2ea66bbf
Merge pull request #278539 from Ma27/sshd-socket-activation-ports 
nixos/sshd: fix socket activated ports when using ListenAddress
 2024-01-17 23:27:52 +01:00
Jörg Thalheim 4a20af3932 nixos/systemd-boot: move all template variables in one place 
This makes it easier to reason about what variables are inserted during packaging.
We also make sure that template file is also valid python syntax, which makes editor errors go away during development.
 2024-01-17 22:53:17 +01:00
WilliButz bb9c7762bc
nixos/prometheus-snmp-exporter: add config check 
This is introduced and enabled by default because the config syntax for
the exporter changed with release 0.23.0.

This should make the breaking config change obvious before services are
deployed with an incompatible old config.

The check is based on the check present in the blackbox-exporter module.
 2024-01-17 20:34:30 +01:00
WilliButz a8ea9fe492
nixos/prometheus-snmp-exporter: switch to new config syntax 
Introduced with version 0.23.0, see
b75fc6b839/auth-split-migration.md
 2024-01-17 20:32:45 +01:00
Marcel a63a884c00
nixos/bird2: add option to disable auto reload 
In a critical setup of bird with many BGP sessions,
you want to control the exact time when configuration
changes are applied. Therefore, an option was added,
to disable automatic reloading the systemd unit,
when configuration changes are made. The administrator
how has the ability to control how changes are applied.
 2024-01-17 20:09:34 +01:00
Robin Gloster e59524560c
Merge pull request #281555 from fpletz/nixos/ntpd-rs-fix-metrics 
nixos/ntpd-rs: fix metrics service
 2024-01-17 15:49:24 +01:00
Sandro 35ef7edaea
Merge pull request #281421 from SuperSandro2000/pcsc-polkit 2024-01-17 15:21:26 +01:00
Franz Pletz 35c015ff91
nixos/ntpd-rs: fix metrics service 2024-01-17 15:06:20 +01:00
nikstur 748378a3ec systemd: 254.6 -> 255.2 
Removed patches:

- 0007-Fix-hwdb-paths.patch

  The directory we want seems to already be included in the list. Is there
  a reason why we want to restrict it further?

- 0010-build-don-t-create-statedir-and-don-t-touch-prefixdi.patch

  This patch has little to do with how the meson.build file looks now. The
  new patch 0017 is the successor to this one.

- 0015-pkg-config-derive-prefix-from-prefix.patch

  This is fixed upstream. We don't need this anymore.
 2024-01-17 14:13:46 +01:00
rht fb8b20d90e
acpid: Disable network access 2024-01-17 06:46:34 -05:00
Maciej Krüger f666630f4a
Merge pull request #280556 from gador/pgadmin-8.2 
pgadmin: 8.1 -> 8.2, python3Packages.webauthn 1.11.1 -> 2.0.0, python3Packages.flask-security-too: fix pydantic issue
 2024-01-17 08:30:24 +01:00
Benjamin Bädorf 7c3ecbdce9 nixos/invoiceplane: add nginx as a webserver option for invoiceplane 
Getting the vhost to play nice with phpfpm was done by following this
community post: https://community.invoiceplane.com/t/topic/2654
 2024-01-17 05:09:34 +01:00
Ryan Lahfa bbd92ae047
Merge pull request #280561 from RaitoBezarius/fix-listmonk-module 
nixos/mail/listmonk: fix hardening directives
 2024-01-17 03:42:31 +01:00
Sandro Jäckel 6b1e46597f
nixos/pcscd: fix linking of org.debian.pcsc-lite.policy file for polkit 2024-01-17 00:28:22 +01:00
Madoura c3316bcce4
nixos/bcachefs: add 'bcachefs-tools' to (udev/systemd).packages 2024-01-16 15:19:39 -06:00
Madoura 9dfa878a20
nixos/bcachefs: clarify 'FIXME' comment on when to remove 2024-01-16 15:06:05 -06:00
Madoura d86395db78
nixos/stage-1.init.sh: only set 'IFS' in 'waitDevice' for bcachefs 2024-01-16 15:06:05 -06:00
Madoura 919c05460b
nixos/stage-1.init.sh: fix IFS comment grammar 2024-01-16 15:06:04 -06:00
Will Fancher bf54848f3b
Merge pull request #280232 from jmbaur/sysupdate-example-fix 
nixos/sysupdate: fix example text
 2024-01-16 15:43:05 -05:00
Will Fancher 66e3ec7d30
Merge pull request #278895 from jmbaur/repart-initrd-loopback 
nixos/repart: add loop module to initrd
 2024-01-16 15:40:19 -05:00
Maximilian Bosch 7f91c8ef83
Merge pull request #276496 from Izorkin/update-roundcube-nginx 
nixos/roundcube: update nginx configuration
 2024-01-16 20:40:12 +01:00
Franz Pletz a436870727
Merge pull request #278179 from sinanmohd/network-interfaces-sit 
nixos/network-interfaces: fix implicit dependency on underlying device
 2024-01-16 19:49:46 +01:00
Nick Cao 8161251283
Merge pull request #280924 from Luflosi/kubo-cleanup 
nixos/kubo: cleanup
 2024-01-16 11:06:47 -05:00
Doron Behar ead172880f nixos/taskserver: Enable cfg.group to read clients' certificates 
This enables the services.taskserver.group to read the certificates
generated by the taskserver.service' preStart script.
 2024-01-16 13:09:41 +02:00
Thiago Kenji Okada 401d16acd0
Merge pull request #247256 from lucasew/xrdp-audio 
xrdp: add support for audio
 2024-01-16 10:06:51 +00:00
Peder Bergebakken Sundt 8d9eb920d3
Merge pull request #273807 from h7x4/pkgs-fixup-heimdal 
heimdal: 7.8.0 -> 7.8.0-unstable-2023-11-29, large cleanup
 2024-01-15 23:16:30 +01:00
Victor Engmark d516870f42
nixos/modules: Split recursive mkdir with permissions 
Detected by ShellCheck as violating
<https://github.com/koalaman/shellcheck/wiki/SC2174>.
 2024-01-16 08:36:08 +13:00
sohalt 38b2778765 nixos/podman: open firewall for aardvark-dns 2024-01-15 18:43:48 +01:00
kennycallado 73cb336785 nixos/icewm: Update icewm start command 
Preferred way to start session in icewm. [docs](https://ice-wm.org/man/icewm-session)
 2024-01-15 17:49:01 +01:00
Will Fancher c6f2b53e78
Merge pull request #280296 from ancathri/getKeyLocations-nosnapshots 
nixos/zfs: fix getKeyLocations when listsnaps=on
 2024-01-15 11:31:25 -05:00
Nick Cao 9c54ad4cf5
Merge pull request #281127 from SuperSandro2000/238474-fixup 
Revert "nixos/pcscd: suggest yubikey-personalization for additional u…
 2024-01-15 10:02:48 -05:00
Sandro Jäckel 304228fe1c
Revert "nixos/pcscd: suggest yubikey-personalization for additional udev rules" 
This reverts commit 6ecb73df1b.
 2024-01-15 13:29:34 +01:00
rewine 7e27869a75 deepin: move distribution.info back to deepin-desktop-base 2024-01-15 14:19:50 +08:00
Franz Pletz 678b899ac0
Merge pull request #264593 from fpletz/pkgs/ntp-rs-1.0.0 2024-01-15 02:17:36 +01:00
Chris M 6b55672bb5
outline: 0.73.1 -> 0.74.0 (#275007) 2024-01-15 02:31:14 +04:00
Nick Cao dfbb7a7c01
Merge pull request #279174 from SuperSandro2000/iso-minimal-override 
nixos/installation-cd-minimal: allow overwriting isoImage.edition with mkForce like other options
 2024-01-14 15:26:29 -05:00
Nick Cao b9dc8014ef
Merge pull request #278931 from SuperSandro2000/patch-1 
nixos/miniflux: allow members of miniflux group to read runtime direc…
 2024-01-14 15:24:14 -05:00
Nick Cao 5ba9fede25
Merge pull request #278593 from SuperSandro2000/xdg-data-dirs-display-managers 
nixos/display-managers: only link desktop derivation if sessionPackages is not empty
 2024-01-14 15:22:57 -05:00
K900 ceede53bfa
Merge pull request #207722 from SuperSandro2000/plasma5-cleanup-pkgs 
nixos/plasma5: use plasma5Packages everywhere for clarity
 2024-01-14 22:30:39 +03:00
Nick Cao 1840316647
Merge pull request #272556 from SuperSandro2000/influxdb-restart 
nixos/influxdb: restart on failure
 2024-01-14 14:25:21 -05:00
Nick Cao 2443ba38b6
Merge pull request #272910 from SuperSandro2000/nullmailer 
nixos/nullmailer: be flexible about time related types
 2024-01-14 14:23:28 -05:00
Nick Cao 205ac6d5d8
Merge pull request #272918 from SuperSandro2000/miniflux 
nixos/miniflux: allow ints in config
 2024-01-14 14:22:41 -05:00
Maximilian Bosch 8ccc8e9df9
Merge pull request #279890 from onny/nextcloud-cleanup5 
nixos/nextcloud: Remove old migration warnings
 2024-01-14 20:22:09 +01:00
Peder Bergebakken Sundt fa8616a4c0
Merge pull request #279479 from gepbird/c2fmzq-server-bool-setting-allow-false 
nixos/c2fmzq-server: allow setting bool settings to false
 2024-01-14 18:32:11 +01:00
Sandro Jäckel 74808f169c
nixos/pcscd: remove noop restartTriggers 2024-01-14 18:03:31 +01:00
Sandro Jäckel 6ecb73df1b
nixos/pcscd: suggest yubikey-personalization for additional udev rules 2024-01-14 18:03:31 +01:00
Sandro Jäckel c09acaa905
nixos/pcscd: cleanup code 2024-01-14 18:03:30 +01:00
Franz Pletz 9707745cf8
nixos/ntpd-rs: init 2024-01-14 17:34:42 +01:00
Adam Stephens ffdcec2d94
nixos/tests/incus: add lxd-to-incus migration test 2024-01-14 09:26:49 -05:00
Guillaume Girol e52366c4d8
Merge pull request #272169 from nyabinary/remove-deprecated-network-interfaces 
nixos/network-interfaces: remove network-interfaces.target
 2024-01-14 14:17:14 +01:00
Luflosi a4c451fd37
nixos/kubo: cleanup 
- Add note explaining why enabling the Kubo daemon won't fully work immediately and requires logging in again
- Use `builtins.isList addrIn` instead of `builtins.typeOf addrIn == "list"`
- Fix indentation
 2024-01-14 12:21:09 +01:00
h7x4 c71fa4be0c
heimdal: clean up package 
- Make inputs more diff friendly
- Add flags for enabling certain libraries
- Disable LDAP support as HDB module by default
- Add support for CJSON
- Flatten contents of `$out/libexec`, which earlier had an
  `heimdal/heimdal` directory
- Use SRI hash
- Enable package tests
- Add `passthru.tests.nixos`
- Add `meta.homepage` and `meta.changelog`

Co-authored-by: Felix Albrigtsen <felix@albrigtsen.it>
 2024-01-14 01:13:19 +01:00
Gutyina Gergő 7247d16af6
nixos/c2fmzq-server: allow setting bool settings to false 2024-01-14 00:19:19 +01:00
Peder Bergebakken Sundt 59cefcbc62
Merge pull request #277783 from gepbird/c2fmzq-server-multiple-freeform-settings 
nixos/c2fmzq-server: allow multiple freeform settings
 2024-01-13 22:01:23 +01:00
Mario Rodas 76a31fdb5c
Merge pull request #267440 from linsui/starship 
nixos/starship: add presets
 2024-01-13 14:27:06 -05:00
Ryan Lahfa b5a944511d
Merge pull request #256709 from colemickens/make-squashfs-skip-compression 
nixos/lib/make-squashfs.nix: allow disabling compression
 2024-01-13 20:23:25 +01:00
lucasew 44ae5fe211 nixos/xrdp: add audio.enable option 
Signed-off-by: lucasew <lucas59356@gmail.com>
 2024-01-13 12:42:06 -03:00
maxine a3ada00f8a
Merge pull request #280472 from martiert/fcc-unlock 
nixos/modemmanager: Add qmicli and mbimcli when using fccUnlockScripts
 2024-01-13 15:45:11 +01:00
nikstur ce1ed11483
Merge pull request #280708 from thillux/fix-trackpoint 
modules/trackpoint: fix quote
 2024-01-13 15:25:25 +01:00
Markus Theil 7fcfa4f0d6 modules/trackpoint: fix quote 
Fixes:

[    7.106281] systemd[1]: /etc/systemd/system/trackpoint.service:10: Unbalanced quoting, ignoring: "/nix/store/iidxwcyp8pqhrq3iji17shs4m6gin0kv-systemd-254.6/bin/udevadm trigger --attr-match=name="TPPS/2 IBM TrackPoint"

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2024-01-13 12:22:06 +01:00
Florian Brandes 1c1ca56266 pgadmin: 8.1 -> 8.2 
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
 2024-01-13 09:54:32 +01:00
Simon Hollingshead d077cd8691 nixos/auto-upgrade: add system.autoUpgrade.fixedRandomDelay 
From systemd 247, timers can be configured to randomize their delay
once and to apply the same random delay for all future executions.
This allows users to have less jitter between auto-upgrade executions
while still avoiding multiple timers firing simultaneously on a
machine or multiple machines all performing their upgrades
simultaneously.

The default option value (false) is backwards compatible.

All supported versions of NixOS (in fact, back to and including 21.05)
use systemd 247 or later.
 2024-01-13 03:40:44 +00:00
ancathri 51dfaf639a nixos/zfs: fix getKeyLocations when listsnaps=on 
Encountered boot errors in pool with `listsnapshots=on` getKeyLocations should ignore snapshots as they will not be well-handled by createImportService later on
 2024-01-12 19:06:00 -06:00
Alois Wohlschlager 77e5fa5ea6 nixos/libvirtd: support out-of-tree vhost-user drivers 
Add an option allowing packages containing out-of-tree vhost-user drivers for
QEMU to be specified. The relevant configurations are then linked at runtime
where libvirt expects them.
An example use case for this is virtiofs.
 2024-01-13 00:39:33 +01:00
Yt 827bd96b2b
Merge pull request #280005 from digtail/2024-01-09-ntfy-sh-dynamic-user 
nixos/ntfy-sh: clean up DynamicUser workarounds
 2024-01-12 23:39:25 +01:00
Maximilian Bosch 90787dbe89
nixos/nextcloud: set up base directories & override.config.php with tmpfiles 
Closes #169733

The issue is that Nextcloud fails to start up after a GC because the
symlink from `override.config.php` is stale.

I'm relatively certain that this is not a bug in the Nix GC - that
would've popped up somewhere else already in the past years - and one of
the reporters seems to confirm that: when they restarted
`nextcloud-setup.service` after the issue appeared, an
`override.config.php` pointing to a different hash was there.

This hints that on a deploy `nextcloud-setup` wasn't restarted properly
and thus replacing the symlink update was missed. This is relatively
hard to trigger due to the nature of the bug unfortunately (you usually
keep system generations for a few weeks and you'll need to change the
configuration - or stdenv - to get a different `override.config.php`),
so getting pointers from folks who are affected is rather complicated.

So I decided to work around this by using systemd-tmpfiles which a lot
of other modules already utilize for this use-case. Now,
`override.config.php` and the directory structure aren't created by
`nextcloud-setup`, but by `systemd-tmpfiles`.

With that, the structure is guaranteed to exist

* on boot, since tmpfiles are always created/applied then
* on config activation, since this is done before services are
  (re)started which covers the case for new installations and existing
  ones.

Also, the recursive `chgrp` was used as transition tool when we switched
from `nginx` as owning group to a dedicated `nextcloud` group[1][2], but
this was several releases ago, so I don't consider this relevant
anymore.

[1] fd9eb16b24
[2] ca916e8cb3
 2024-01-12 22:11:36 +01:00
Maciej Krüger 6ba04cc302
Merge pull request #270876 from gador/pgadmin-check-pw 
nixos/pgadmin: add minimumPasswordLength setting and check
 2024-01-12 21:00:40 +01:00
Ryan Lahfa 08d0afbbdf
Merge pull request #239028 from chayleaf/miniupnpd 
miniupnpd-nftables: init at 2.3.3
 2024-01-12 20:17:33 +01:00
Raito Bezarius 4c84c9c1c3 nixos/mail/listmonk: fix hardening directives 
For some reason, I don't know why I missed those, but
I didn't look at my logs for a while.

It would be nice if we could catch those statically kinda (?) in CI.
 2024-01-12 20:14:52 +01:00
Ryan Lahfa 724d5348a6
Merge pull request #272794 from dcarosone/zpool-import-d 
nixos/zfs: check pool state with -d, like import
 2024-01-12 20:07:24 +01:00
Ryan Lahfa 1b2aeec40a
Merge pull request #275031 from 2xsaiko/outgoing/sieve 
nixos/dovecot: add support for sieve extensions, in particular imapsieve and pipe
 2024-01-12 20:05:45 +01:00
Ryan Lahfa 6d8630efda
Merge pull request #270270 from SuperSandro2000/nginx-fastopen 
nixos/nginx: filter more options when listening has quic
 2024-01-12 20:01:29 +01:00
Ryan Lahfa 3287441158
Merge pull request #275484 from Izorkin/update-nginx-http3 
nixos/nginx: disable automatic advertise of HTTP/3 protocol support
 2024-01-12 19:49:18 +01:00
Maciej Krüger c0ef1f9479
nixos/network-interfaces: add assertion if used in after or wants 2024-01-12 17:29:05 +01:00
Niko 9e2cd6f872
nixos/network-interfaces: remove network-interfaces.target 
Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
 2024-01-12 17:29:03 +01:00
K900 e7b611e59d Merge remote-tracking branch 'origin/master' into staging-next 2024-01-12 13:59:54 +03:00
Martin Ertsås 3e3fea8653
nixos/modemmanager: Add qmicli and mbimcli when using fccUnlockScripts 
The ModemManager shipped fccUnlockScripts are using either qmicli or
mbimcli, to unlock wwan modems. These needs to be available for
ModemManager if you set the fccUnlockScripts link, so instead of having
every user than needs it pull it inn in different ways, we should just
provide the tools if we think they might be needed.

https://modemmanager.org/docs/modemmanager/fcc-unlock
 2024-01-12 11:53:44 +01:00
Raito Bezarius 3ecaad0e0e nixos/networking/keepalived: do not emit unicastPeers when there are none 
In the past, we emitted `unicast_peer` block even with empty unicast peers list.

This now results in:
```
Keepalived_vrrp[392762]: A unicast keyword has been specified without any unicast peers. Defaulting to multicast. This usage is deprecated - please update your configuration.
```

We do not emit it anymore to avoid this warning.
 2024-01-12 03:52:39 +01:00
Yureka 1a1c53c271
Revert "nixos/gitlab: Add CI database connection for >=15.9" (#280395) 2024-01-12 02:03:23 +01:00
Yureka 29bc446b5c
Revert "nixos/gitlab: fix database config when no passwordfile is defined" (#280392) 2024-01-12 02:00:49 +01:00
Peder Bergebakken Sundt f489e99576
Merge pull request #277925 from Izorkin/update-nginx-http2 
nixos/nginx: use new variant of http2 option for angie package
 2024-01-12 01:40:18 +01:00
Lin Jian 52bd30d5c5
Merge pull request #279274 from MarcelCoding/patch-1 
nixos/pgadmin: disable upgrade check
 2024-01-12 08:16:16 +08:00
Ryan Lahfa 56df644cb4 Revert "nixVersions.stable: 2.18.1 -> 2.19.2" 
This version does not pass our NixOS tests, e.g. `nixosTests.misc` and
potentially other fundamental tests such as lib-tests.
 2024-01-11 19:15:07 +01:00
Marcel 0be0d8a860
nixos/pgadmin: disable upgrade check 2024-01-11 16:22:28 +01:00
github-actions[bot] 5ee7600250
Merge master into staging-next 2024-01-11 12:01:18 +00:00
Florian Klink 3d1fe1445c
Merge pull request #279433 from wentasah/nsswitch-mdns 
nixos/avahi-daemon: let nssmdns{4,6} options affect also non-minimal …
 2024-01-11 13:21:24 +02:00
Florian Brandes bc21d288f4
nixos/pgadmin: apply review suggestions 
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
 2024-01-11 11:32:32 +01:00
TomaSajt 56a43aaba8
nixos/quark-goldleaf: init 2024-01-11 11:02:01 +01:00
Jared Baur d177e2ef06
nixos/sysupdate: fix example text 
The example systemd-sysupdate transfer name has a ".conf" suffix,
although the files on the final system are already appended with this
suffix, so the file ends up being "transfer-name.conf.conf". Remove the
suffix in the example so that users will get a transfer filename they
expect.
 2024-01-11 01:47:36 -08:00
Patrik Keller 30b25fa102 nixos/netdata: add missing dependency for syslog alarms 
Netdata depends on the `logger` utility for dispatching health alarms to
syslog. This dependency was missing in the systemd units environment.

Issue: https://github.com/NixOS/nixpkgs/issues/272702
Docs: https://learn.netdata.cloud/docs/alerting/notifications/agent-dispatched-notifications/syslog
Docs, archived: https://archive.is/mkQa4
 2024-01-11 08:38:52 +01:00
github-actions[bot] 28d4a2210a
Merge master into staging-next 2024-01-11 06:01:20 +00:00
Someone 7953a78641
Merge pull request #280076 from SomeoneSerge/fix/apptainer-nv-cherry 
apptainer: unbreak --nv (userns+nvliblist.conf variant)
 2024-01-11 00:51:23 +00:00
Ryan Lahfa 176e84d44f
Revert "nixos/systemd-boot: init boot counting" 2024-01-11 01:00:43 +01:00
Ryan Lahfa a6303da3a7
Merge pull request #273062 from JulienMalka/systemd-boot-counting 
nixos/systemd-boot: init boot counting
 2024-01-11 00:40:07 +01:00
Weijia Wang 2f9e98ccf3 Merge branch 'master' into staging-next 2024-01-10 23:12:44 +01:00
Bernardo Meurer ca25692e79
Merge pull request #280092 from eclairevoyant/nix-stable 
nixVersions.stable: 2.18.1 -> 2.19.2
 2024-01-10 18:06:22 -03:00
Someone Serge 35de6f1c4e
nixos/singularity: disable setuid for apptainer 
(cherry picked from commit 5f4b6ea5dd)
 2024-01-10 20:47:57 +00:00
maxine 3534a235f1
Merge pull request #278941 from amaxine/drop-gnome-themes-extra 
gnome: don't include gnome-themes-extra by default
 2024-01-10 21:07:06 +01:00
Peder Bergebakken Sundt dff635f38d
Merge pull request #243169 from 2xsaiko/outgoing/krb5 
nixos/krb5: cleanup, fix and RFC42-ify
 2024-01-10 21:06:15 +01:00
éclairevoyant c27bc49c43
nixVersions.stable: 2.18.1 -> 2.19.2 2024-01-10 14:04:30 -05:00
Martin Weinelt 10b01dcc89
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
-	pkgs/development/python-modules/types-setuptools/default.nix
 2024-01-10 16:09:52 +01:00
Tom Siewert 890ffaa1ae nixos/gitlab: fix database config when no passwordfile is defined 
In commit 41ca9c1, the database config got an additional config entry
for a separate CI database connection [1]. Unfortunately, the main connection
must always be the first entry. The fix for this was only applied when
databasePasswordFile has been set.

This commit fixes the order of the config for deployments without a databasePasswordFile.

[1] https://docs.gitlab.com/ee/update/deprecations.html#single-database-connection-is-deprecated
 2024-01-10 14:35:57 +01:00
Jonas Heinrich cb919df382
Merge pull request #279887 from onny/dokuwiki-cleanup 
nixos/dokuwiki: Remove old migration warnings
 2024-01-10 14:04:20 +01:00
github-actions[bot] d9ad8d1e35
Merge master into staging-next 2024-01-10 06:01:12 +00:00
Franz Pletz 078c5755a9
Merge pull request #277912 from Luflosi/kubo-send-buffer-size 2024-01-10 02:09:45 +01:00
github-actions[bot] 122355be99
Merge master into staging-next 2024-01-10 00:02:18 +00:00
jopejoe1 df5728a4f4 nixos/filesystems: init sshfs 2024-01-10 00:24:48 +01:00
digital 39fd0c3fe3 nixos/ntfy-sh: clean up DynamicUser workarounds 
this commit removes the static assignments for the ntfy-sh user and
group. furthermore, it removes some tmpfiles.d rules which where
initially put in place by https://github.com/NixOS/nixpkgs/pull/234811.
these are however not required, as ntfy-sh will automatically create the
required files and systemd automatically handles the migration process.

A nixosTest is added to demonstrate that the migration is working
reliably.

This also fixes an issue with where systemd would sometimes not start
ntfy-sh. The tmpfiles rules in combination with impermanence caused `/
var/lib/ntfy-sh` to be a directory when it should have been a symlink.
 2024-01-10 00:15:50 +01:00
Peder Bergebakken Sundt 92327152cd
Merge pull request #274813 from pbsds/lxd-package-option-fix 
nixos/lxd: convert cfg.package and company to mkPackageOption
 2024-01-09 23:36:42 +01:00
Peder Bergebakken Sundt 7bb62b90ef
Merge pull request #274807 from danielbarter/nixos-printing-cups-override 
cupsd: allow cups package override
 2024-01-09 22:30:34 +01:00
Peder Bergebakken Sundt 3bf05ba941
Merge pull request #271481 from eliandoran/feature/snmpd 
nixos/snmpd: init
 2024-01-09 21:32:27 +01:00
Jonas Heinrich 6707b97f00 nixos/nextcloud: Remove old migration warnings 2024-01-09 20:59:03 +01:00
Jonas Heinrich d71dc05e82 nixos/dokuwiki: Remove old migration warnings 2024-01-09 20:51:12 +01:00
K900 838aefefc3 Merge remote-tracking branch 'origin/master' into staging-next 2024-01-09 22:42:37 +03:00
José Romildo Malaquias 3ab8dd6bf4
Merge pull request #278819 from romildo/upd.labwc 
nixos/labwc: init
 2024-01-09 12:36:11 -03:00
Nick Cao 01db22092a
Merge pull request #276773 from SuperSandro2000/gjs-nox 
gjs: remove dependency on gtk3 when tests are disabled;  nixos/no-x-libs: add gjs
 2024-01-09 10:33:42 -05:00
K900 bff9ee8862 Merge remote-tracking branch 'origin/master' into staging-next 2024-01-09 13:03:34 +03:00
Sandro Jäckel 6b73be0ca5
nixos/no-x-libs: add gjs 2024-01-08 23:54:58 +01:00
Will Fancher 9127f63b94
Merge pull request #265030 from bb2020/usbstor 
nixos/usbStorage: update device flag
 2024-01-08 17:03:25 -05:00
Maciej Krüger c92e12d81e
Merge pull request #279650 from nbraud/nixos/pam/ssh-agent-auth 
nixos/pam: Fix use of renamed `enableSSHAgentAuth` option
 2024-01-08 19:21:03 +01:00
nicoo 0e5c95035d nixos/pam: Fix use of renamed enableSSHAgentAuth option 2024-01-08 18:13:46 +00:00
github-actions[bot] 6bf0bf35bb
Merge master into staging-next 2024-01-08 18:00:58 +00:00
Nick Cao c360b49704
Merge pull request #259849 from Scrumplex/nixos/vaultwarden/backupDirCreate 
nixos/vaultwarden: create backupDir using tmpfiles.d
 2024-01-08 12:30:03 -05:00
Tom Siewert 838a2b54ed nixos/gitlab: Add CI database connection for >=15.9 
Starting with GitLab 15.9, single connections were deprecated [1] and
will be removed in GitLab 17.0.

[1] https://docs.gitlab.com/ee/update/deprecations.html#single-database-connection-is-deprecated
 2024-01-08 18:14:06 +01:00
Maciej Krüger b5b2f6bec4
Merge pull request #277620 from nbraud/nixos/pam/ssh-agent-auth-31611 
nixos/pam: Add option for ssh-agent auth's trusted authorized_keys files
 2024-01-08 17:42:02 +01:00
Martin Weinelt ef1898454c
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
-	pkgs/development/python-modules/aiohappyeyeballs/default.nix
 2024-01-08 16:34:52 +01:00
K900 b43946170e
Merge pull request #279531 from K900/linux-6.7 
linux_6_7: init at 6.7
 2024-01-08 16:17:12 +03:00
K900 8c56a751cb
Merge pull request #279422 from wegank/partition-manager-kde 
libsForQt5.kpmcore, partition-manager: move to applications/kde
 2024-01-08 15:40:06 +03:00
Weijia Wang 788c45eb57 partition-manager: move to aliases.nix 2024-01-08 13:36:56 +01:00
K900 ef190570b8 nixos/bcachefs: use linuxPackages_latest 2024-01-08 10:47:51 +03:00
Cole Mickens 5a718794d0
nixos/lib/make-squashfs.nix: allow disabling compression 2024-01-07 22:46:20 -06:00
github-actions[bot] f85fe5fc29
Merge master into staging-next 2024-01-07 18:00:54 +00:00
Michal Sojka e23da86b18 nixos/avahi-daemon: let nssmdns{4,6} options affect also non-minimal mdns source 
This is a followup to commit bba808dbfa ("nixos/avahi-daemon:
resolve mdns only over enabled protocols, disable ipv6 by default",
2023-10-01, PR #258424). mdns occurs twice in /etc/nsswitch.conf but
that commit changed only the first one (mdns_minimal, before resolve).
This commits ensures that both occurrences are set consistently.

This is not only consistent with upstream example[1] but it also
fixes #118628 -- a longstanding issue with CUPS and printer detection.

[1]  https://github.com/avahi/nss-mdns#activation
 2024-01-07 18:16:40 +01:00
Guillaume Girol db0f76e8c9
Merge pull request #271030 from symphorien/nixseparatedebuginfod 
nixseparatedebuginfod: init at 0.3.0, plus module and nixos test
 2024-01-07 17:45:13 +01:00
Nick Cao 59eabdc943
Merge pull request #275637 from SuperSandro2000/firefox-app-update 
nixos/firefox: disable updates when policies when programs.firefox.policies is defined
 2024-01-07 10:29:43 -05:00
Nick Cao 0b88c3d297
Merge pull request #265783 from Silver-Golden/bitwarden-directory-connector_pkgs 
Bitwarden directory connector: init
 2024-01-07 10:28:04 -05:00
Jan Tojnar ff42d23313 Merge branch 'master' into staging-next 
Conflicts:

pkgs/development/python-modules/dbt-core/default.nix
pkgs/development/python-modules/dbt-semantic-interfaces/default.nix

Still broken by pydantic 2 bump, though.
 2024-01-07 16:14:41 +01:00
Maciej Krüger c931d73fba
Merge pull request #276499 from nbraud/nixos/pam/ssh-agent-auth 
nixos/pam: Add assertion for SSH-agent auth
 2024-01-07 13:54:27 +01:00
github-actions[bot] 9f96550945
Merge master into staging-next 2024-01-07 12:01:24 +00:00
Julien Malka eb435897a6 nixos/systemd-boot: init boot counting 2024-01-07 11:34:09 +00:00
Brendan Golden f7c25138ea nixos/bitwarden-directory-connector: init at version 
Added the module to use bitwarden-directory-connector.
 2024-01-07 11:22:31 +00:00
Jörg Thalheim db59d03371
Merge branch 'master' into pr/bcachefs 2024-01-07 11:40:30 +01:00
Martin Weinelt 0161570089
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
-	pkgs/development/python-modules/archspec/default.nix
 2024-01-07 01:31:56 +01:00
Guillaume Girol 73f0f9c21c
Merge pull request #275902 from williamvds/dnsmasq_docs 
nixos/dnsmasq: Add documentation
 2024-01-06 23:04:40 +01:00
Lin Jian 3179a4e209
Merge pull request #278536 from newAM/llama-cpp-server 
nixos/llama-cpp: init
 2024-01-07 03:58:38 +08:00
Lin Jian c55537aa04
Merge pull request #278500 from Ten0/fix_avahi_ipv6_defaultText 
nixos/avahi: fix incorrect defaultText of nixos option services.avahi.ipv6
 2024-01-07 02:54:04 +08:00
Alex Martens d8bb8a6417 nixos/llama-cpp: init 2024-01-06 10:42:55 -08:00
github-actions[bot] 17cf061755
Merge master into staging-next 2024-01-06 18:01:15 +00:00
Maximilian Bosch e55b4c1ec7
Merge pull request #278493 from marrobHD/patch-1 
nixos/nextcloud: fix dbport in config.php
 2024-01-06 16:26:15 +01:00
Sandro Jäckel eceb5b2f8c
nixos/installation-cd-minimal: allow overwriting isoImage.edition with mkForce like other options 
For good measure also changed fontconfig
 2024-01-06 15:52:15 +01:00
Thiago Kenji Okada a0d94113e8
Merge pull request #278975 from lucasew/fix/transmission-web 
nixos/transmission: fix webui if no custom webui is specified
 2024-01-06 14:16:49 +00:00
Christian Kögler 93ae65d7dd
Merge pull request #278366 from ck3d/nixos-vdr-updates 
nixos/vdr: add option user/group and more admin control
 2024-01-06 13:01:13 +01:00
lucasew 82723d0494 nixos/transmission: fix webui if no custom webui is specified 
Signed-off-by: lucasew <lucas59356@gmail.com>
 2024-01-05 16:24:24 -03:00
github-actions[bot] 76201c62e0
Merge master into staging-next 2024-01-05 18:00:58 +00:00
Emilia Bopp 5f6b7a35d6 neo4j: 4.4.11 -> 5.9.0 2024-01-05 18:20:24 +01:00
Benedikt Tissot c1d8fd1a89 nixos/ddclient: make ExecStartPre a list 
this enables to exetend ExecStartPre while keeping the default inplace.
 2024-01-05 16:36:45 +01:00
Maxine Aubrey c3d027f9ce
gnome: don't include gnome-themes-extra by default 
Upstream moved gnome-themes-extra to world 3 years ago
8b1708c38b
 2024-01-05 16:01:12 +01:00
Thomas BESSOU a85739af7e nixos/avahi: Fix incorrect defaultText of services.avahi.ipv6 
This seems to have been forgotten in bba808dbfa, where we changed the default from `config.networking.enableIPv6` to `false`.
 2024-01-05 15:29:22 +01:00
Sandro 9272b8ef79
nixos/miniflux: allow members of miniflux group to read runtime directory 
Otherwise a proxy server that has the miniflux group cannot read files in the runtime directory like a socket miniflux can listen on.
 2024-01-05 15:01:04 +01:00
José Romildo 42c74f2067 nixos/labwc: init 2024-01-05 10:59:13 -03:00
Jared Baur 1dad7f6821
nixos/repart: add loop module to initrd 
Systemd-repart will use loopback devices for partition creation if it is
able to, and will fallback to doing "offline" partition creation writing
data directly to files. From what I see looking at the repart code,
there are specific features that cannot be taken advantage of when not
using loopback devices (e.g. no BTRFS subvolumes in systemd v255) and in
certain places they have to perform some manual re-sizing work that can
otherwise be avoided.
 2024-01-05 01:04:30 -08:00
github-actions[bot] 340cf4304d
Merge master into staging-next 2024-01-05 06:01:12 +00:00
zowoq 3d0b034e87 maintainers/teams: add buildbot 2024-01-05 11:41:19 +10:00
github-actions[bot] 1e290d634f
Merge master into staging-next 2024-01-05 00:02:27 +00:00
nu-nu-ko e1a9d1bfcb maintainers: add nu-nu-ko 2024-01-05 12:47:15 +13:00
Julien Malka 7afe9bc384
Merge pull request #278609 from RaitoBezarius/initrd-secrets 2024-01-04 23:45:39 +01:00
Raito Bezarius 7c6f64914f system/activation/bootspec: do not synthesize initrdSecrets if unneeded 
We should not always create an appender script if we have no secret, this has no usefulness whatsover.
 2024-01-04 23:11:23 +01:00
Raito Bezarius b3d998e7ea boot/loader/systemd-boot: BootSpec makes initrdSecrets optional 
A bootspec could remove the `initrdSecrets` attribute and is a perfectly valid bootspec, as can be seen
in the bootspec.cue.

This makes the builder not fail upon missing `initrdSecrets`.
 2024-01-04 23:11:22 +01:00
Nick Cao 75b9953daf
nixos/fcitx5: allow using the wayland frontend instead of the fcitx5 one 2024-01-04 15:06:58 -05:00
github-actions[bot] 065e28482b
Merge master into staging-next 2024-01-04 18:00:54 +00:00
nicoo 2eac5106f1 nixos/sudo: Remove unused enableSSHAgentAuth let-binding 2024-01-04 17:30:09 +00:00
nicoo 9ed1423dcf nixos/pam: Warn on insecure sshAgentAuth configurations 2024-01-04 17:30:09 +00:00
Nick Cao b391da91be
Merge pull request #278523 from NickCao/zram-generator 
nixos/zram-generator: do not require zram to be a module
 2024-01-04 11:25:34 -05:00
Vladimír Čunát 8a839514de
Merge branch 'master' into staging-next 2024-01-04 15:07:44 +01:00
Lin Jian b05d9c12d9
Merge pull request #237904 from SuperSamus/libinput-description 
nixos/libinput: update horizontalScrolling description
 2024-01-04 19:55:53 +08:00
May 5be349d0be
nixos/nextcloud: remove dbport 
To specify a port for the database host, `host:port` format has to be used [1].

[1]: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/config_sample_php_parameters.html#dbhost
 2024-01-04 12:34:24 +01:00
Martino Fontana d6022b39ee nixos/libinput: update horizontalScrolling description 2024-01-04 11:34:25 +01:00
Atemu 94e446c260
Merge pull request #277019 from SuperSandro2000/paperless-freeform 
nixos/paperless: convert extraConfig to freeform type
 2024-01-04 09:33:54 +01:00
Emery Hemingway b736a8a801 eris-go: 20231119 -> 20231219 2024-01-04 06:24:03 +00:00
Sandro Jäckel 7c1b4b22f9
nixos/paperless: convert extraConfig to freeform type 
Co-authored-by: Atemu <atemu.main@gmail.com>
 2024-01-04 00:04:38 +01:00
Sandro Jäckel 2db74e8339
nixos/display-managers: only link desktop derivation if sessionPackages is not empty 
On a headless system there are no entries and we do not need to add it
to XDG_DATA_DIRS.
 2024-01-03 23:48:54 +01:00
Leona Maroni 9abc79018c
nixos/kresd: fix port only regex 
The output is expected to be a list [ hostname, port, optional ipv6 scope ], but the
current regex only outputs [ port ], when only a port is given as address.
 2024-01-03 21:18:54 +01:00
Maximilian Bosch 7e45990c06
nixos/sshd: fix socket activated ports when using ListenAddress 
Noticed that issue while reviewing #275633: when declaring
`ListenAddress host` without a port, all ports declared by
`Port`/`cfg.ports` will be used with `host` according to
`sshd_config(5)`.

However, if this is done and socket activation is used, only a socket
for port 22 is created instead of a sockets for each port from
`Port`/`cfg.ports`. This patch corrects that behavior.

Also added a regression test for this case.
 2024-01-03 19:42:45 +01:00
illustris d6baaf1c42
nixos/cloud-init: fix DHCP race condition 2024-01-03 23:50:30 +05:30
github-actions[bot] 307002948d
Merge master into staging-next 2024-01-03 18:00:57 +00:00
Nick Cao 9eeabd33d2
nixos/zram-generator: do not require zram to be a module 2024-01-03 12:08:30 -05:00
K900 497cb80d55
Merge pull request #278490 from K900/sddm-package 
nixos/sddm: add package option
 2024-01-03 19:48:58 +03:00
Sefa Eyeoglu 4f70c901dc
nixos/vaultwarden: add example value for backupDir 
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2024-01-03 17:37:37 +01:00
Sefa Eyeoglu 80ea6a21fb
nixos/vaultwarden: create backupDir using tmpfiles.d 
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2024-01-03 17:37:35 +01:00
Nick Cao fa5ad5c4d0
Merge pull request #278501 from hughobrien/invidious-fix 
nixos/invidious: Additional fix for user message on 24.05 changes
 2024-01-03 11:03:06 -05:00
Maximilian Bosch cfd8c0ddd8
Merge pull request #275633 from chreekat/b/sshd-config-check 
sshd: Use top-level ports in config check when needed
 2024-01-03 16:25:08 +01:00
Hugh O'Brien e51c00fb23
nixos/invidious: Additional fix for user message on 24.05 changes 2024-01-03 10:17:06 -05:00
nicoo 822c0a86bd nixos/pam: Add sshAgentAuth.authorizedKeysFiles option 2024-01-03 14:49:36 +00:00
nicoo a46ea51ca3 nixos/pam: Rename option enableSSHAgentAuth to sshAgentAuth.enable 2024-01-03 14:49:36 +00:00
K900 06cc32ffc3 nixos/sddm: add package option 2024-01-03 17:20:10 +03:00
Jonas Heinrich 818fdce3d0 nixos/nextcloud: Fix corrent option name 2024-01-03 14:08:21 +01:00
github-actions[bot] dc84f21849
Merge master into staging-next 2024-01-03 12:01:04 +00:00
Will Fancher 05706b850a
Merge pull request #273695 from lopsided98/initrd-systemd-lib-firmware 
systemd-stage-1: allow non-existent /lib/firmware
 2024-01-03 04:30:27 -05:00
Will Fancher 65f0d24178
Merge pull request #278147 from SuperSandro2000/oomd-followup 
nixos/oomd: use mkRenamedOptionModule like mentioned in the changelog, add missing section to use slice
 2024-01-03 01:09:47 -05:00
Weijia Wang eb5334c27d Merge branch 'master' into staging-next 2024-01-03 03:22:40 +01:00
Sandro Jäckel 27468aae96
nixos/oomd: add missing section to use slice 2024-01-03 02:45:38 +01:00
Weijia Wang 3526f2ffec
Merge pull request #274192 from foo-dogsquared/nixos-guix-add-guix-home-support 
nixos/guix: add Guix home support
 2024-01-03 01:28:11 +01:00
Mario Rodas 7f0a64976d
Merge pull request #270286 from ajs124/ruby_ossl11_cleanup 
ruby_2_7: remove
 2024-01-02 18:37:18 -05:00
Christian Kögler 7caca1b185 nixos/vdr: add option user/group and more admin control 
- Add option to set user and group name
- Set users home to runtime directory, to avoid mixing of temporal files
  like caches
- Allow admin to control LIRC service by avoiding LIRC enabling
- Allow admin to set libDir, by removing setting argument config to default
- Add package to environment, to allow easy access for admins to helper
  tools like svdrpsend and vdr -h
- Cleanup Nix code by avoiding with statement
 2024-01-02 23:17:46 +01:00
williamvds da61f0320f
dnsmasq: Add documentation 2024-01-02 22:07:25 +00:00
Nick Cao f6a028db30
Merge pull request #276808 from SuperSandro2000/portunus-cookie-secure 
nixos/portunus: make sure the cookies are only send over https if it …
 2024-01-02 16:54:37 -05:00
ajs124 02ad3159b0 ruby_2_7: remove 2024-01-02 15:30:06 +01:00
Bryan Richter e797aaea0b
sshd: Use top-level ports in config check when needed 
Previously, if a listenAddress was specified without a `port`, the check
would fail.
 2024-01-02 12:51:39 +02:00
K900 887e96e875 Merge remote-tracking branch 'origin/master' into staging-next 2024-01-02 10:55:23 +03:00
Patrick Steinhardt f026ea0db0 nixos/nextcloud: disable output buffering 
The Nextcloud admin guide says that output buffering must be turned off
or otherwise PHP will return memory-related errors [1]. As the default
value for this PHP setting is 4096 and thus enabled the Nextcloud setup
is thus misconfigured by default. This misconfiguration will be shown in
the "Security & setup warnings" dialog for the administrator.

Fix this misconfiguration by setting "output_buffering=0" by default.

[1]: https://docs.nextcloud.com/server/stable/admin_manual/configuration_files/big_file_upload_configuration.html#configuring-php
 2024-01-02 08:45:42 +01:00
sinanmohd 8314af158f nixos/network-interfaces: fix implicit dependency on underlying device 
the bug causes a hard dependency on an underlying device which might not be
valid for all interfaces, also broke the example for networking.sits. this is
due to calling hasAttr first and checking for null afterwards, the bug was
made more apparent in commit 76a3c30
 2024-01-02 12:03:29 +05:30
Gutyina Gergő 3306755683
nixos/c2fmzq-server: allow multiple freeform settings 2024-01-01 22:50:16 +01:00
Sandro Jäckel 0a1d1907a5
nixos/oomd: use mkRenamedOptionModule like mentioned in the changelog 2024-01-01 22:33:00 +01:00
Nick Cao 66ea36d4d3
Merge pull request #276159 from AtaraxiaSjel/fix/tor-obfs4proxy 
nixos/tor: fix transport plugin exe name
 2024-01-01 15:55:04 -05:00
Nick Cao 3d6243a6a9
Merge pull request #276430 from hellodword/patch-1 
nixos/tailscale: fix after and wants
 2024-01-01 15:52:50 -05:00
Guillaume Girol 38034a860a
Merge pull request #273286 from nh2/sane-backends-package-option 
Add hardware.sane.backends-package option.
 2024-01-01 21:43:35 +01:00
Maciej Krüger 8f3c9dec12
Merge pull request #278090 from mkg20001/fix-auditd 
nixos/auditd: fix typo
 2024-01-01 18:35:17 +01:00
Maciej Krüger 4f9e98905e
nixos/auditd: fix typo 
Would otherwise fail with

```
       error: A definition for option `systemd.services.auditd.conflicts."[definition 1-entry 1]"' is not of type `string matching the pattern [a-zA-Z0-9@%:_.\-]+[.](service|socket|device|mount|automount|swap|target|path|timer|scope|slice)'. Definition values:
       - In `/nix/store/x2khl2yx0vz2i357x7mz5xm1kagql8ag-source/nixos/modules/security/auditd.nix': "shutdown.target "
```
 2024-01-01 17:28:46 +01:00
Ryan Lahfa 10af81720a
Merge pull request #277936 from Izorkin/update-nginx-ktls 
nginx: enable ktls support by default
 2024-01-01 17:19:11 +01:00
markuskowa 009b625a54
Merge pull request #277792 from ck3d/vdr-updates-2023-12 
vdr: updates 2023/12
 2024-01-01 16:58:11 +01:00
Guillaume Girol dece72548e nixseparatedebuginfod: add module and nixos test 2024-01-01 13:42:13 +01:00
Izorkin 10c06cb060
nginx: enable ktls support by default 2024-01-01 12:02:57 +03:00
github-actions[bot] e61ae81f8f
Merge master into staging-next 2024-01-01 00:02:16 +00:00
Izorkin 2fb0b52c50
nixos/nginx: disable automatic advertise of HTTP/3 protocol support 
Automatic advertise in the `http` block about support of HTTP/3
protocol makes it difficult to automatically configure services
to work with it.
HTTP/3 availability must be manually advertised, preferably in
each location block.
 2024-01-01 02:29:01 +03:00
Robert Hensing f4525eefb3
Merge pull request #277949 from pennae/lazy-options-arg-list 
nixos/doc: avoid bash argument list size limit
 2023-12-31 22:04:01 +01:00
Ryan Lahfa e44341e335
Merge pull request #195805 from Luflosi/grub-use-correct-zfs-version 
nixos/grub: use the correct ZFS version
 2023-12-31 21:33:37 +01:00
Ryan Lahfa 5ab6191ee5
Merge pull request #276260 from Izorkin/update-nginx-acme-locations 
nixos/nginx: change position acmeLocation in nginx configuration
 2023-12-31 21:23:17 +01:00
Janik 6be9d4fc21
Merge pull request #266283 from Noodlesalat/ping-exporter-1.1.0 
ping_exporter: init at 1.1.0
 2023-12-31 20:50:30 +01:00
github-actions[bot] 65cbf5e637
Merge master into staging-next 2023-12-31 18:01:09 +00:00
pennae 4374f2feda nixos/doc: avoid bash argument list size limit 
see #277861. as the module list grows the argument size in the
lazy-options nix call grows, eventually reaching a hard limit and
causing the build to fail. writing the list to a file instead and import
it instead of providing it directly circumvents this.
 2023-12-31 18:08:46 +01:00
Guillaume Girol 17fc67eb2e
Merge pull request #255464 from georgyo/postfix-dont-use-file-ownership 
nixos/postfix: postalias should not use source file permissions
 2023-12-31 15:20:48 +01:00
Izorkin d11fe979a2
nixos/nginx: use new variant of http2 option for angie package 2023-12-31 16:52:08 +03:00
Luflosi b2f8b846f2
nixos/kubo: increase maximum UDP send buffer size 
In addition to increasing the maximum UDP receive buffer size in the Linux kernel, it is now recommended to do the same for the send buffer size.
This is documented in https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes.
The change to the documentation was made in June: 5b5e58d289.

Without this change, the Kubo daemon will output this warning:
```
failed to sufficiently increase send buffer size (was: 208 kiB, wanted: 2048 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details.
```
This can be seen while running the NixOS tests.
 2023-12-31 14:09:27 +01:00
github-actions[bot] dc1ce0d685
Merge staging-next into staging 2023-12-31 12:01:23 +00:00
Martin Weinelt f142aeb3a2
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
- pkgs/development/python-modules/scikit-build-core/default.nix
 2023-12-31 12:00:30 +01:00
Maciej Krüger 2d9d11dee6
Merge pull request #251782 from vifino/thermald_ignore-cpuid-check 
thermald: allow ignoring cpuid check
 2023-12-31 11:30:50 +01:00
github-actions[bot] a9cb88c7ae
Merge staging-next into staging 2023-12-31 06:01:28 +00:00
Jan Tojnar 80020c7db4 Merge branch 'master' into staging-next 
; Conflicts:
;	pkgs/development/lua-modules/generated-packages.nix
;	pkgs/development/lua-modules/overrides.nix
 2023-12-31 02:31:32 +01:00
Ilan Joselevich 210ab761b4
Merge pull request #276294 from phaer/cachix-signing-key 
cachix-watch-store: allow to set a signing key
 2023-12-31 00:20:52 +02:00
nicoo 607679c6d3 nixos/pam: Assert that authorizedKeysFiles is non-empty when using pam_ssh_agent_auth 2023-12-30 22:19:38 +00:00
Christian Kögler 1c326dcb4f nixos/vdr: wait for network 2023-12-30 21:58:24 +01:00
Izorkin ae5c0c1521
nixos/nginx: skip adding a comment to acmeLocation in nginx configuration 2023-12-30 23:50:02 +03:00
Izorkin 7f1b6d45af
nixos/nginx: change position acmeLocation in nginx configuration 2023-12-30 23:49:58 +03:00
Nick Cao fb6f005181
Merge pull request #272552 from SuperSandro2000/ghostscript-nox 
nixos/no-x-libs: add ghostscript
 2023-12-30 13:23:42 -05:00
Philip Taron da90576aac
nixos/lxd-agent: fix evaluation regression caused by nixos/nixpkgs#271326 2023-12-30 08:45:30 -08:00
Kiara Grouwstra bdbd8f703b
fix sample value for option services.wordpress.sites.<name>.languages 2023-12-30 16:26:01 +01:00
Izorkin 7ead602f93
nixos/roundcube: add configureNginx option 2023-12-30 15:01:13 +03:00
Izorkin 3b74d8781f
nixos/roundcube: update nginx configuration 2023-12-30 15:01:12 +03:00
Lin Jian 55c1318537
Merge pull request #276180 from linj-fork/pr/kanata-list 
nixos/kanata: specify linux-dev as a list
 2023-12-29 20:24:56 -06:00
Nick Cao 4a8d35315a
Merge pull request #276407 from sinanmohd/dendrite-sliding-sync 
nixos/matrix-sliding-sync: rename, init dendrite
 2023-12-29 20:24:47 -05:00
Will Fancher 9cab49c71b
Merge pull request #273921 from SaltyKitkat/oomd 
nixos/systemd: update oomd configuration
 2023-12-29 18:47:49 -05:00
markuskowa 15b39c2238
Merge pull request #275080 from SomeoneSerge/feat/munge-systemd 
nixos/munge: update the systemd service
 2023-12-30 00:11:12 +01:00
Maximilian Bosch d25fdec5b3
Merge pull request #212430 from onny/nextcloud-cleanup 
nixos/nextcloud: Move options into now freeForm extraOptions
 2023-12-29 23:44:24 +01:00
Maximilian Bosch a1f20ed672
Merge pull request #277382 from Ma27/fix-nextcloud-app-routing 
nixos/nextcloud: fix nginx routing to store and nix apps
 2023-12-29 23:44:12 +01:00
Jonas Heinrich b06d3c3aa6
Merge pull request #277442 from onny/ollama 
nixos/ollama: init
 2023-12-29 23:00:10 +01:00
Dmitriy Kholkin 0929716b02
nixos/tor: fix transport plugin exe name 2023-12-29 23:20:15 +03:00
Nick Cao 08a62091a1
Merge pull request #277146 from majewsky/portunus-2.0.0 
portunus: 1.1.0 -> 2.0.0
 2023-12-29 14:53:12 -05:00
sinanmohd e8e5c07ad0 nixos/matrix-sliding-sync: rename, init dendrite 2023-12-30 00:25:57 +05:30
github-actions[bot] 294b981465
Merge staging-next into staging 2023-12-29 18:01:23 +00:00
github-actions[bot] f50aae4fb1
Merge master into staging-next 2023-12-29 18:00:57 +00:00
Maximilian Bosch bae5e65162
nixos/nextcloud: fix nginx routing to store and nix apps 
Closes #277206

The bug mentioned above was a symptom of the issue fixed here: when
opening the `forms` app which is installed via `extraApps` (or the
app store) the site wouldn't work because `.mjs` files had the wrong
Content-Type.

The actual problem got fixed already[1], however this config was not
used for stuff from `/nix-apps` & `/store-apps` which had their own
location section with only a `root ;` statement.

In fact, this setup isn't strictly supported by Nextcloud upstream[2],
so to fix this for good, I decided to follow the upstream suggestion for
app directories outside the server root, i.e. linking them back into the
store path.

This means that the module generates a new derivation now with

* `services.nextcloud.package` linked into it via `lndir`.
* under `nix-apps` is a symlink to the link farm containing all apps
  from `services.nextcloud.extraApps`.
* under `store-apps` is a symlink to `/var/lib/nextcloud/store-apps`.
  Since this is only used in the NixOS module that also configures this
  location for imperatively installed apps, this seems an OK thing to
  do.

Successfully tested the change on a productive Nextcloud 28.0.1 with
several apps installed via `extraApps` (`forms`, `cospend`, `maps`,
`user_saml` and a few more).

[1] 292c74c7a9
[2] https://docs.nextcloud.com/server/28/admin_manual/apps_management.html#using-custom-app-directories
 2023-12-29 18:59:18 +01:00
nikstur 5a9c0b7600
Merge pull request #267983 from nikstur/replace-simple-activation-2 
nixos: replace activationScripts 2/x
 2023-12-29 16:29:11 +01:00
Jonas Heinrich 67a799c40f nixos/ollama: init 2023-12-29 15:19:55 +01:00
K900 0403c41f61 nixos/installer: add a link to how to actually upgrade your system to the stateVersion note 2023-12-29 17:01:04 +03:00
Vladimír Čunát de84adb292
Merge branch 'master' into staging-next 2023-12-29 14:00:30 +01:00
nikstur 0ebd39b541 nixos/nix-channel: remove unused stringAfter 2023-12-29 03:41:45 +01:00
nikstur 3be357b2e7 nixos/binfmt: remove unused stringAfter 2023-12-29 03:41:45 +01:00
nikstur d0014a531e nixos/wrappers: order service after sysusers service 2023-12-29 03:41:45 +01:00
nikstur 65ff518a0d nixos/ipa: replace activationScript 
Replaced with a dedicated systemd service.
 2023-12-29 03:41:45 +01:00
nikstur 8d3cf213db nixos/borgbackup: replace activationScript via tmpfiles 2023-12-29 03:41:45 +01:00
nikstur af87c19427 nixos/yggdrasil: replace activationScript 
Replace with separate service because it cannot be moved into the
preStart of the yggdrasil service.
 2023-12-29 03:22:27 +01:00
nikstur 9b29bc0010 nixos/trackpoint: replace activationScript 
Replace with a separate systemd service ordered before sysinit.target
 2023-12-29 03:22:25 +01:00
nikstur 80fa4731f9 nixos/amdgpu-pro: replacce activationScript via tmpfiles 2023-12-29 03:21:32 +01:00
nikstur 994df434ba nixos/ldap: replace activationScript 
Replace with a dedicated systemd service.
 2023-12-29 03:20:28 +01:00
nikstur e96cd172fb nixos/logcheck: replace activationScript via tmpfiles 2023-12-29 03:16:03 +01:00
nikstur 682cb1d640 nixos/vmware-host: replace activationScript 
Replace with a dedicated system servie ordered before the other VMWare
services.
 2023-12-29 03:16:03 +01:00
Luflosi c71cb77cd6
nixos/grub: use the correct ZFS version 
When `config.boot.zfs.enableUnstable` is set to true, grub was built with the `zfs` package even though the rest of the system uses the `zfsUnstable` package.
The effect of this can only be seen when `zfs` and `zfsUnstable` actually differ (which is not currently the case), for example when overriding one of them locally.
 2023-12-29 01:53:27 +01:00
Kira Bruneau 017bc47e74
Merge pull request #272943 from kira-bruneau/gamemode 
gamemode: 1.7 -> 1.8.1
 2023-12-28 19:10:56 -05:00
Jonas Heinrich dd8c96379f nixos/nextcloud: Move options into now freeForm extraOptions 2023-12-29 01:04:46 +01:00
github-actions[bot] a5650ee564
Merge staging-next into staging 2023-12-29 00:02:24 +00:00
github-actions[bot] bd7fd36fe2
Merge master into staging-next 2023-12-29 00:01:57 +00:00
Martin Weinelt fba845e36f
Merge pull request #277235 from adamcstephens/lxd-agent/path 
nixos/lxd-agent: add system path for exec
 2023-12-28 21:28:15 +01:00
Maximilian Bosch 1d17e304ac
Merge pull request #273443 from jpds/thanos-query-replica-label-string 
nixos/thanos: Changed query.replica-labels to a list parameter
 2023-12-28 20:48:31 +01:00
Adam Stephens 3f8b1d2d26
nixos/lxd-agent: add system path for exec 2023-12-28 14:27:05 -05:00
Daniel Barter 18d65382d6 nixos/cupsd: allow cups package override 2023-12-28 08:58:01 -08:00
Luflosi f88af99311
nixos/aerospike: use NixOS option instead of custom script 
Since 2c5abd89c7 setting the option `boot.kernel.sysctl."net.core.rmem_max"` no longer has any downsides compared to what was previously used. Since 439350753e the same is also true for `boot.kernel.sysctl."net.core.wmem_max"`.
 2023-12-28 17:41:59 +01:00
Luflosi 8cdabf9cf8
nixos/sysctl: cleanup 
- Use `options = {` instead of repeating `options` for every option
- Change the description of "net.core.rmem_max" slightly to match the kernel documentation
 2023-12-28 17:38:33 +01:00
Pavel Anpin 3ca696729b
cloudflared: fixed missing configuration options 2023-12-27 22:50:00 +01:00
github-actions[bot] c3c924c258
Merge staging-next into staging 2023-12-27 18:01:27 +00:00
github-actions[bot] 2a2dbf246f
Merge master into staging-next 2023-12-27 18:00:58 +00:00
Stefan Majewsky 9ecbdfb5bd portunus: 1.1.0 -> 2.0.0 
Changelog: <https://github.com/majewsky/portunus/releases/tag/v2.0.0>
 2023-12-27 18:30:32 +01:00
Nick Cao 6248428d28
Merge pull request #277017 from hughobrien/patch-1 
nixos/invidious: Fix  user message on 24.05 changes
 2023-12-27 10:36:43 -05:00
Kira Bruneau 02d4aa2306 nixos/gamemode: format with nixpkgs-fmt 2023-12-27 08:55:23 -05:00
github-actions[bot] 0097df9129
Merge staging-next into staging 2023-12-27 12:01:18 +00:00
github-actions[bot] 04686e4ee3
Merge master into staging-next 2023-12-27 12:00:55 +00:00
Yt bd5ff67266
Merge pull request #261789 from onny/rspamd-trainer 
nixos/rspamd-trainer: init; rspamd-trainer: init at unstable-2023-11-27
 2023-12-27 11:28:42 +00:00
Alex James 9f32ad8ff8
nixos/transmission: add webHome option 2023-12-27 04:00:43 -06:00
Jonas Heinrich 80d88736da nixos/rspamd-trainer: init; rspamd-trainer: init at unstable-2023-11-27 2023-12-27 10:35:53 +01:00
nikstur c9569af3e0
Merge pull request #271326 from philiptaron/shutdown.target 
treewide: depend on `shutdown.target` if `DefaultDependencies=no` in almost every case
 2023-12-27 08:33:26 +01:00
Yt 56b8564a7d
Merge pull request #276525 from scvalex/livebook-configurable-package 
livebook: configurable package and extraPackages
 2023-12-27 07:30:25 +00:00
github-actions[bot] db1ec4df1e
Merge staging-next into staging 2023-12-27 06:01:29 +00:00
github-actions[bot] 308ac97674
Merge master into staging-next 2023-12-27 06:00:55 +00:00
Hugh O'Brien eff6b94cdd
nixos/invidious: Fix user message on 24.05 changes 2023-12-26 20:44:04 -05:00
Martin Weinelt d4c4e0269d
Merge pull request #274460 from mweinelt/kea-ipc-runtimedir 
nixos/kea: return to merged runtime directory; preserve runtime directories
 2023-12-27 02:08:14 +01:00
github-actions[bot] c917183756
Merge staging-next into staging 2023-12-27 00:02:40 +00:00
github-actions[bot] d37b121146
Merge master into staging-next 2023-12-27 00:02:11 +00:00
Martin Weinelt 2f8686ce17
nixos/frigate: restart the service on failure 
Closes: #266837
 2023-12-26 22:33:19 +01:00
Dee Anzorge b4b9b08426
nixos/prometheus-exporters/kea: run under same user/group as kea 
This fixes access to the kea unix sockets, after enabling
RuntimeDirectoryPreserve on the kea units.

https://github.com/NixOS/nixpkgs/pull/274460#issuecomment-1869702893
 2023-12-26 21:42:58 +01:00
Nick Cao 5cfba53fc6
Merge pull request #258812 from Izorkin/fix-noxlibs 
nixos/no-x-libs: fix build packages
 2023-12-26 13:09:23 -05:00
github-actions[bot] 0cc20b268e
Merge staging-next into staging 2023-12-26 12:01:37 +00:00
github-actions[bot] d4086e3e8b
Merge master into staging-next 2023-12-26 12:01:11 +00:00
Maciej Krüger 51e1d86766
Merge pull request #225946 from boozedog/boozedog/pgadmin-package 
nixos/pgadmin: add package option
 2023-12-26 12:38:50 +01:00
boozedog 0b522b2429
nixos/pgadmin: add package option 2023-12-26 11:56:25 +01:00
github-actions[bot] d32a3d9b51
Merge staging-next into staging 2023-12-26 00:02:38 +00:00
github-actions[bot] 24a900e557
Merge master into staging-next 2023-12-26 00:02:12 +00:00
Sandro Jäckel 64b6b5e787
nixos/portunus: make sure the cookies are only send over https if it is enabled 2023-12-26 00:27:32 +01:00
Linus Heckemann 5494aa21c7
Merge pull request #273308 from Stunkymonkey/install-device-fix-mdadm 
nixos/installation-device: remove warning about mdadm
 2023-12-25 23:41:10 +01:00
Nick Cao 7d54909829
Merge pull request #253263 from SuperSandro2000/nox-intel-vaapi-driver 
nixos/no-x-libs: add intel-vaapi-driver
 2023-12-25 17:16:15 -05:00
Alexandru Scvortov 0ae9c34391 livebook: configurable package and extraPackages 
Also fix examples to not include a semicolon in the .env file.
 2023-12-25 21:47:14 +00:00
Izorkin 2e14d8ba72
nixos/no-x-libs: build qtbase without qt translation 2023-12-25 23:31:25 +03:00
linsui 68543ba85f nixos/starship: add presets 2023-12-26 03:48:01 +08:00
github-actions[bot] aa8844a8a9
Merge staging-next into staging 2023-12-25 18:01:25 +00:00
github-actions[bot] f6ece27ed4
Merge master into staging-next 2023-12-25 18:00:59 +00:00
Maciej Krüger d5ba1d218a
Merge pull request #276377 from mkg20001/cinnamon-fix-gpaste 
nixos/gpaste: also add to cinnamon session path + fix sessionPath
 2023-12-25 16:55:54 +01:00
Jan Tojnar 2ac16accc0 Merge branch 'master' into staging-next 
Conflicts:
	pkgs/development/python-modules/hahomematic/default.nix
 2023-12-25 16:54:44 +01:00
Felix Bühler 0c7f041600
Merge pull request #276670 from etu/freshrss-stop-running-updater-on-system-activation 
nixos/freshrss: Stop running the updater service on system activation
 2023-12-25 11:37:32 +01:00
Weijia Wang e520c76913
Merge pull request #275831 from foo-dogsquared/nixos-guix-socket-activation-fix 
nixos/guix: fix systemd socket unit
 2023-12-25 10:54:30 +01:00
Elis Hirwing 0c3619835b
nixos/freshrss: Stop running the updater service on system activation 2023-12-25 09:57:47 +01:00
github-actions[bot] 5d5f55c28d
Merge staging-next into staging 2023-12-25 00:02:44 +00:00
github-actions[bot] 88b151ed65
Merge master into staging-next 2023-12-25 00:02:15 +00:00
Pierre Bourdon 64938f6e07
Merge pull request #254995 from SuperSandro2000/wrappers 
nixos/wrapper: add basename of the wrapped program to the wrappers name to easily identify it
 2023-12-24 23:59:16 +01:00
Jörg Thalheim 98e792ad9d
Merge pull request #276524 from SuperSandro2000/harmonia-restart 
nixos/harmonia: restart systemd service
 2023-12-24 21:15:49 +01:00
Sandro Jäckel 35ca689119
nixos/wrapper: add basename of the wrapped program to the wrappers name to easily identify it 
Also fix the comment with test instructions
 2023-12-24 20:36:12 +01:00
Sandro Jäckel f029a8a10d
nixos/harmonia: restart systemd service 2023-12-24 19:54:11 +01:00
Atemu b920969079
Merge pull request #258722 from CajuM/waydroid-mod 
nixos/waydroid: Replace requirement for ASHMEM with MEMFD_CREATE
 2023-12-24 19:52:36 +01:00
Doron Behar 067338523e
Merge pull request #275281 from eliandoran/feature/mympd-service 
nixos/mympd: init
 2023-12-24 18:43:03 +00:00
7c6f434c 79fee6027b
Merge pull request #276318 from someplaceguy/u/fix-atop-start 
nixos/atop: remove leftover `*.new` files before starting conversion
 2023-12-24 18:18:56 +00:00
github-actions[bot] 03901858de
Merge staging-next into staging 2023-12-24 18:01:44 +00:00
github-actions[bot] 33c8153ba7
Merge master into staging-next 2023-12-24 18:01:15 +00:00
sternenseemann 4cf470c97c nixos/mandoc: don't create leading double slashes in MANPATH 2023-12-24 18:44:36 +01:00
aleksana ad235e5072 nixos/mandoc: add man.conf settings option 2023-12-24 18:44:36 +01:00
aleksana 4f3e29f3a3 nixos/mandoc: use MANPATH environment variable 2023-12-24 18:44:36 +01:00
aleksana ab222895b1 nixos/mandoc: fix paths don't exist failure 2023-12-24 18:44:36 +01:00
Nudelsalat 5d85f0eee8 nixos/prometheus-ping-exporter: init 2023-12-24 18:11:25 +01:00
Mihai-Drosi Câju 800af4240b nixos/waydroid: Replace requirement for ASHMEM with MEMFD_CREATE 
* fixes #250302
* ASHMEM was removed in Linux 5.18 and waydroid can use MEMFD instead.
  MEMFD is enabled by default in 4.18 and later kernels while we
  already require this version for namespace support.
 2023-12-24 16:04:20 +02:00
nicoo 1e9e8a0db0 nixos/sudo-rs: Removed unused let-binding 
Leftover from bcc2d1238a
 2023-12-24 13:58:08 +00:00
Maciej Krüger 6698e96026
nixos/gpaste: also add to cinnamon session path - fixes #276028 
This fixes gpaste-reloaded applet for cinnamon,
which requires gpaste's typelib to be accessible
 2023-12-24 14:52:20 +01:00
phaer 25e5dfd142 cachix-watch-store: allow to set a signing key 2023-12-24 10:25:32 +00:00
hellodword 26c2ed1c95
nixos/tailscale: fix after and wants 2023-12-24 09:44:46 +00:00
github-actions[bot] 3d36e72396
Merge staging-next into staging 2023-12-24 06:01:29 +00:00
Martin Weinelt a3e53d17b6 Merge remote-tracking branch 'origin/master' into staging-next 2023-12-24 02:39:15 +01:00
nikstur 133fcea523
Merge pull request #275283 from jmbaur/repart-amend-fix-cross 
image/repart: build image with buildPackages
 2023-12-23 21:45:59 +01:00
Nick Cao a83ee8f514
Merge pull request #255227 from tomfitzhenry/postfix-harden 
nixos/postfix: add systemd hardening directives
 2023-12-23 10:36:18 -05:00
someplaceguy 8164b71bf9 nixos/atop: remove leftover *.new files before starting conversion 
The pre-start script was actually trying to convert these leftover
`*.new` and even `*.new.new` files, and failing to do so because the
`*.new.new` files were being overwritten and removed before they were
converted.
 2023-12-23 14:37:29 +00:00
Mario Rodas 2ba8c30b4e
Merge pull request #252790 from anthonyroussel/gns3-nixos-module 
nixos/gns3-server: init
 2023-12-23 09:27:39 -05:00
Bobby Rong 5cb00274f2
Merge pull request #276060 from bobby285271/fix/cinnamon-sessionpath 
nixos/cinnamon: Unbreak sessionPath option
 2023-12-23 21:05:08 +08:00
Lin Jian ff19ecca71
nixos/kanata: specify linux-dev as a list 
This is better because it allows some special characters in the device
path.  See [1] for more information.

[1]: https://github.com/jtroo/kanata/pull/647
 2023-12-23 10:10:15 +08:00
Bobby Rong 1ec293c599
nixos/cinnamon: Unbreak sessionPath option 
It looks like XDG_CURRENT_DESKTOP is not set when we run these lines,
and sessionCommands does not seem to work when using GDM and Cinnamon wayland.
 2023-12-23 10:09:35 +08:00
Sandro Jäckel 157256f9dd
nixos/nginx: filter more options when listening has quic 2023-12-23 02:20:48 +01:00
github-actions[bot] dd5558f8d5
Merge staging-next into staging 2023-12-23 00:02:39 +00:00
github-actions[bot] 63c88e8d4d
Merge master into staging-next 2023-12-23 00:02:13 +00:00
hexclover 66bda599f4 mininet, nixos/mininet: Wrap executables in the package, not the module 
Also move the `mn` executable from the Python module to the main package.
 2023-12-22 19:15:14 +01:00
github-actions[bot] 0e08e6cad3
Merge staging-next into staging 2023-12-22 18:01:25 +00:00
github-actions[bot] 21e572254e
Merge master into staging-next 2023-12-22 18:01:00 +00:00
Doron Behar 0ae28209f1
Merge pull request #267319 from ju1m/transmission 
nixos/transmission: fixes #258793
 2023-12-22 12:35:56 +00:00
github-actions[bot] 6ce4f409b0
Merge staging-next into staging 2023-12-22 00:02:36 +00:00
github-actions[bot] a9a9030f1b
Merge master into staging-next 2023-12-22 00:02:09 +00:00
Jared Baur f58c5e7154
image/repart: build image with buildPackages 
Since the repart image is built on the build platform, use
`buildPackages` to construct the image. This allows for systemd-repart
images for cross-compiled nixos configurations to work properly.
 2023-12-21 15:11:13 -08:00
vincent.cui 9c870ac78f nixos/kubernetes: fix pki's mkSpec function 
The `authority.file.path` field of a cert spec is
[defined as follows]
(https://github.com/cloudflare/certmgr/tree/v3.0.3#pki-specs):

> if this is included, the CA certificate will be saved here.
It follows the same file specification format above. Use this
if you want to save your CA cert to disk.

So certmgr fails, because each certmgr spec (apiserver,
addonManager, ...) wants to manage the file at the `cert.caCert`
location. However, the `authority.file.path` field is not needed
for generating a certificate, as the certificate is generated by
the CA, which is reachable at `authority.remote` (e.g.
https://localhost:8888 with `easyCerts = true`). The
`authority.file.path` field just saves the certificate of the CA
to disk.
 2023-12-21 22:08:31 +01:00
Pol Dellaiera 783163f959
Merge pull request #275429 from drupol/code-server/restore 
code-server: restore and bump (4.16.1 -> 4.19.1)
 2023-12-21 21:03:41 +01:00
github-actions[bot] fe3a0803f6
Merge staging-next into staging 2023-12-21 18:01:22 +00:00
Martin Weinelt fb9f2b0e17 Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
- pkgs/development/python-modules/django-anymail/default.nix
- pkgs/development/python-modules/dockerspawner/default.nix
 2023-12-21 15:21:14 +01:00
Gabriel Arazas d3e246f9fa
nixos/guix: fix systemd socket unit 2023-12-21 22:18:56 +08:00
Elian Doran 3c4ddf8284 nixos/mympd: init 2023-12-21 16:01:46 +02:00
Kerstin 98e9d68cc8
Merge pull request #275663 from Izorkin/update-mastodon-build 
mastodon: remove tools from propagatedBuildInputs
 2023-12-21 13:43:28 +01:00
Åsmund Østvold aeeb655646 service buildkite-agent: make it possible add groups to agent users 
Only one extra group was add. Some times you want the agents users to
be member of other groups like 'docker'. This change make this possible.

Co-authored-by: Florian Klink <flokli@flokli.de>
 2023-12-21 12:49:48 +01:00
Marco Rebhan 7004ee65c2
nixos/dovecot: add myself as maintainer 2023-12-21 12:41:08 +01:00
Marco Rebhan 1e31a631b7
nixos/dovecot: add support for sieve extensions, in particular imapsieve and pipe 2023-12-21 12:41:08 +01:00
Marco Rebhan 5ee94c0170
nixos/krb5: add h7x4 as maintainer 2023-12-21 11:38:22 +01:00
Marco Rebhan a4a9be35f4
nixos/krb5: add myself as maintainer for module & tests 2023-12-21 11:38:18 +01:00
Marco Rebhan fed77d1705
nixos/krb5: move to security.krb5 2023-12-21 11:35:26 +01:00
Marco Rebhan 92a541c0ed
nixos/krb5: cleanup, fix and RFC42-ify 
This replaces the krb5 module's options with RFC 42-style krb5.settings
option, while greatly simplifying the code and fixing a few bugs,
namely:

- #243068 krb5: Configuration silently gets ignored when set by
  multiple modules
- not being able to use mkIf etc. inside subattributes of
  krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ...

See #144575.
Closes #243068.

Co-authored-by: h7x4 <h7x4@nani.wtf>
 2023-12-21 11:34:59 +01:00
Thiago Kenji Okada ad16ca96e6
Merge pull request #267261 from name-snrl/make-overriding-sway-package-easier 
nixos/sway: refactoring of `package` option
 2023-12-21 10:34:16 +00:00
Jörg Thalheim 3fcdbd3029
Merge pull request #275591 from Mic92/nix-direnv-nixos 
nixos/nix-direnv: respect configured nix package
 2023-12-21 11:18:08 +01:00
Jörg Thalheim fd32059984 nixos/nix-direnv: respect configured nix package 
Rebuilds should be reasonably fast since it's a shell script
and we don't end up with different versions of nix in the store.
 2023-12-21 09:08:42 +01:00
Raghav Sood 7d97d9ebd1
Merge pull request #275439 from RaghavSood/nitter/guest-accounts 
nitter: unstable-2023-10-31 -> unstable-2023-12-03 (guest accounts support)
 2023-12-21 14:03:35 +08:00
github-actions[bot] f36fabca0f
Merge staging-next into staging 2023-12-21 00:02:47 +00:00
github-actions[bot] 63203647a1
Merge master into staging-next 2023-12-21 00:02:16 +00:00
Florian Klink 011e924109
Merge pull request #239201 from nesteroff/fix-timesync 
systemd: disable NSCD when DNSSEC validation is disabled in timesyncd
 2023-12-20 22:22:52 +02:00
Martin Weinelt d12a0b7861
Merge pull request #275554 from SuperSandro2000/home-assistant-custom-components-fix-unlink 
nixos/home-assistant: fix removing of uninstalled custom components
 2023-12-20 21:15:26 +01:00
WilliButz ac58b65cf5
Merge pull request #275112 from r-ryantm/auto-update/prometheus-nginx-exporter 
prometheus-nginx-exporter: 0.11.0 -> 1.0.0
 2023-12-20 20:27:28 +01:00
Maximilian Bosch 571f06ad0d
Merge pull request #270260 from SuperSandro2000/gitea-camo-hmac 
nixos/gitea: add hmacKey support
 2023-12-20 19:02:20 +01:00
github-actions[bot] a1cd7ca146
Merge master into staging-next 2023-12-20 18:00:56 +00:00
Franz Pletz faff9de754
nixos/prometheus/nginx-exporter: fix args for 1.0 2023-12-20 18:23:29 +01:00
Franz Pletz 54a4f96cfc
Merge pull request #274570 from Luflosi/kubo-more-RFC42 
nixos/kubo: convert two settings to RFC42-style settings
 2023-12-20 16:24:50 +01:00
Izorkin 8a0a8c7a04
nixos/mastodon: replace ffmpeg to ffmpeg-headless 2023-12-20 18:01:55 +03:00
Gabriel Arazas b7ece537bb
nixos/guix: fix conditional linking of profiles 2023-12-20 22:04:01 +08:00
Maciej Krüger ff680a4c39
Merge pull request #207717 from jpathy/patch-2 2023-12-20 13:52:03 +01:00
Sandro Jäckel a3c1997215
nixos/firefox: disable updates when policies when programs.firefox.policies is defined 
Before the default value in the wrapper was just silently overwritten
and firefox prompted you for updates.
 2023-12-20 13:31:11 +01:00
github-actions[bot] 176c80219d
Merge master into staging-next 2023-12-20 12:00:53 +00:00
Peder Bergebakken Sundt 6b25f0686e
Merge pull request #253147 from SuperSandro2000/ssh-forwardx11 
nixos/ssh: add variant to not set ForwardX11
 2023-12-20 12:42:47 +01:00
Yuri Nesterov 6008246790 systemd: disable NSCD when DNSSEC validation is disabled in timesyncd 
When a system has a wrong date and time timesyncd is unable to synchronize it
because DNSSEC doesn't work. In order to break this chicken and egg problem
systemd-timesync disables DNSSEC validation by setting
SYSTEMD_NSS_RESOLVE_VALIDATE=0 in the unit file. However, it doesn't work in
NixOS because it uses NSCD. This patch disables NSCD in systemd-timesyncd when
SYSTEMD_NSS_RESOLVE_VALIDATE is set to 0 so that it uses NSS libraries
directly. In order for it to be able to find the libnss_resolve.so.2 library
this patch adds the systemd directory in the nix store to the LD_LIBRARY_PATH.
 2023-12-20 13:21:43 +02:00
Florian Klink c28f238f5a
Merge pull request #272946 from benaryorg/resolved_no_fallback 
nixos/resolved: Allow upstream fallback override
 2023-12-20 12:55:44 +02:00
Sandro Jäckel d4c622ec5f
nixos/home-assistant: fix removing of uninstalled custom components 
Before components was not an array and the first loop did never loop
through all entries but through the entire output of find without
splitting by new line.

Tested by copying the preStart script out of the nix store, doing the
change and observing that now the custom-components directory is indeed
being cleaned up after removing a custom component.
 2023-12-20 05:00:05 +01:00
github-actions[bot] a8d85ad701
Merge staging-next into staging 2023-12-20 00:02:32 +00:00
Kerstin d2d0044221
Merge pull request #274556 from networkException/mastodon-init-db-psql-escaping 
nixos/mastodon: properly escape arguments to psql in init-db script
 2023-12-19 22:28:08 +01:00
Ilan Joselevich 6f885c4e74
Merge pull request #275383 from Kranzes/nextcloud 
nixos/nextcloud: serve flac and ogg files
 2023-12-19 23:19:06 +02:00
networkException 4dd61b6e68
nixos/mastodon: properly escape arguments to psql in init-db script 2023-12-19 21:02:13 +01:00
Yarny0 59539b9bc5 tsm-client: 8.1.20.0 -> 8.1.21.0 
"Update History" (release notes):
https://www.ibm.com/support/pages/node/6998343

At the time of this writing,
the "APAR" links of the "Update History" lead to 404.
However, the abstracts indicate that
this update is not security critical.

Note that this update changed the GUI window title
to "IBM Storage Protect"
(the product itself was renamed with version 8.1.19.0 already).
The commit at hand adapts the GUI vm test accordingly.

Also, all URLs in package and module comments are updated.
 2023-12-19 19:47:28 +01:00
Sandro Jäckel 88946fe4d8
nixos/ssh: add variant to not set ForwardX11 
ssh_config allows a setting to only be set once and if more complex
conditions are used than having ForwardX11 already defined can be a
problem.
 2023-12-19 19:35:26 +01:00