Commit graph

4352 commits

Author SHA1 Message Date
Winston (Winny) Weinert d15e598bd5 rl-2305: fix typo in openjdk version note 2023-06-10 16:40:05 -05:00
IndeedNotJames 3f93ec5814
nixos/caddy: change acmeCA default to null
The nixos/caddy module is somewhat old by now
and has undergone quite some refactors.
This specific module option (originally named
`ca`) used to make a bit more sense when
Caddy did not have multiple ACME CAs as
fallback (LE & ZeroSSL) by configured by
default yet (ZeroSSL came with v2.3.0).

I also rephrased the description slightly,
to mention Caddy's automatic issuer fallback
and a note which this option maps to in the
Caddyfile, to provide a bit more context and
a more up-to-date recommendation.

Specifically that "fine-grained configuration"
section comes from a time when this module did
some custom tls/issuer config json merging
with the templated Caddyfile using `jq`.

The "The URL to the ACME CA's directory"
section is a word-for-word copy from the
official Caddy docs, which also include a link
to LE's docs to the referenced staging
endpoint. So I added that as well.
2023-06-10 13:59:10 +02:00
Linus Heckemann 6be63ce590 kbd: split vlock into its own output
This avoids a dependency on pam when only the actual keyboard data is used.
2023-06-09 09:03:11 -07:00
github-actions[bot] f8aa1a896e
Merge staging-next into staging 2023-06-08 06:01:46 +00:00
Pol Dellaiera 2a77a04971
Merge pull request #235855 from soywod/himalaya-v0.8.0
himalaya: 0.7.3 -> 0.8.0
2023-06-08 04:34:37 +02:00
github-actions[bot] 83e7490bd0
Merge staging-next into staging 2023-06-08 00:03:05 +00:00
ajs124 34eaaf331c mariadb: upgrade default from 10.6 to 10.11
which is the next LTS release
2023-06-07 13:10:23 +02:00
Clément DOUIN be53021199
himalaya: 0.7.3 -> 0.8.0 2023-06-07 12:59:26 +02:00
github-actions[bot] 03925ecb5f
Merge staging-next into staging 2023-06-07 06:01:45 +00:00
mdarocha 7eb512bfdc openraPackages.engines.devtest: init at 20230414 2023-06-07 02:26:43 +00:00
github-actions[bot] d7207bf33b
Merge staging-next into staging 2023-06-07 00:03:17 +00:00
x10an14 dc7d4dece5
Document how to use packages with extensions. (#145011)
Co-authored-by: Artturi <Artturin@artturin.com>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
2023-06-06 22:37:42 +02:00
github-actions[bot] dd60d8ee46
Merge staging-next into staging 2023-06-05 12:01:45 +00:00
Florian Klink 4627ee741d
Merge pull request #234877 from ElvishJerricco/auto-format-and-resize-with-systemd
Auto format and resize with systemd
2023-06-05 12:25:02 +03:00
misuzu 45ffb33514 nixos/gotosocial: init
Co-authored-by: Peder Bergebakken Sundt <pbsds@hotmail.com>
2023-06-05 09:07:34 +03:00
Will Fancher b497502357 nixos: Use systemd-growfs for autoResize 2023-06-04 22:57:22 -04:00
Will Fancher 5176a4f113 nixos: Use systemd-makefs for autoFormat 2023-06-04 22:57:20 -04:00
github-actions[bot] b2f58f98dd
Merge staging-next into staging 2023-06-05 00:03:13 +00:00
figsoda 6ad2ed2ada
Merge pull request #235954 from wegank/nerdfonts-release-notes
rl-2305: mention nerdfonts update
2023-06-04 16:12:56 -04:00
Weijia Wang d465aaf7c6 rl-2305: mention nerdfonts update 2023-06-04 21:23:16 +03:00
github-actions[bot] e97d10016c
Merge staging-next into staging 2023-06-04 18:01:37 +00:00
figsoda df34ed4185
Merge pull request #235204 from figsoda/text2 2023-06-04 13:02:55 -04:00
github-actions[bot] 5fc7c08add
Merge staging-next into staging 2023-06-03 18:02:23 +00:00
Lassulus 704b08c0e9
Merge pull request #235672 from mart-w/fix/redundant-syncthing-patchnote-23.05 2023-06-03 16:07:17 +02:00
Sefa Eyeoglu bd97ff5ff4 nixos/fontconfig: Change default antialiasing style to greyscale instead of subpixel
fontconfig before version 2.13.1 was apparently implicitly not using
subpixel antialiasing. The fontconfig NixOS module deviated from this,
using subpixel antialiasing with `rgb` layout by default. In fontconfig
2.14.1, subpixel antialiasing was inadvertently enabled as the default:
2b6afa02ab

According to https://gitlab.freedesktop.org/fontconfig/fontconfig/-/issues/337,
that deviates from GNOME/GTK’s defaults, which resulted in apps taking the
settings directly from fontconfig (e.g. Firefox) from diverging from GNOME
programs.

The change was subsequently reverted in 2.14.2, choosing the greyscale
antialiasing explicitly: 030759b74f
Let’s reflect this default setting in the NixOS module.

Co-authored-by: Jan Tojnar <jtojnar@gmail.com>
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2023-06-03 16:02:22 +02:00
Gabriel Fontes 147668b8cf nixos/sitespeed-io: init 2023-06-03 03:12:51 +00:00
Martin Wurm 22513042e6 nixos/syncthing: Remove unnecessary patch note
The breaking change in this patch note has been reverted for now, see #226088.
2023-06-03 01:38:53 +02:00
Alex Crawford 67c72f85a3 rl-2305: Use immutable URL for the systemd release notes 2023-06-01 13:48:11 -07:00
Alex Crawford 4b8977a3e9 rl-2305: Fix the links to the Nix release notes
NixOS 23.05 updated Nix from 2.11 to 2.13, so the release notes for
2.12 and 2.13 should be linked.
2023-06-01 13:48:11 -07:00
Weijia Wang f2654557a6
Merge pull request #235369 from vcunat/p/release-notes-nits
23.05 release notes nits
2023-06-01 20:48:14 +02:00
Weijia Wang e921ee7fdf
Merge pull request #235298 from eliasnaur/master
nixos/doc/manual: add release notes for util-linux on Darwin
2023-06-01 20:04:18 +02:00
Weijia Wang 076e3d55c0
Merge pull request #234043 from figsoda/pypi
python3.pkgs.fetchPypi: deprecate in favor of top-level fetchPypi
2023-06-01 19:56:32 +02:00
Vladimír Čunát 054c184cab
nixos/doc: drop a repeated paragraph
It's in "backward incompatibilities" section, so no need to be also
in "*other* notable changes" section.
2023-06-01 12:47:34 +02:00
Vladimír Čunát c41c19276d
nixos/doc: drop a repeated paragraph
Bad conflict resolution, I assume.
2023-06-01 12:46:52 +02:00
Vladimír Čunát ad90e88108
nixos/doc: fix typo 2023-06-01 12:46:15 +02:00
Elias Naur f970e996fc nixos/doc/manual: add release notes for util-linux on Darwin
This is a follow-up to PR #232713.
2023-05-31 18:25:11 -06:00
Yaya 28ecd17523 nixos/doc: Mention container registry deprecation in gitlab
Support for external container registries has ended in GitLab >=16 and
module users are therefore advised to switch to gitlab's fork instead.
2023-05-31 22:14:25 +02:00
Yaya edc47cb999 nixos/doc: Mention PostgreSQL requirement for gitlab
`gitlab` has been upgraded to major version 16 and requires at least
PostgreSQL 13.6.
2023-05-31 22:14:25 +02:00
figsoda ffbf6f27c9 python3.pkgs.fetchPypi: deprecate in favor of top-level fetchPypi 2023-05-31 13:48:06 -04:00
Kira Bruneau 7e820610e3
Merge pull request #234207 from emilylange/acme-dns
acme-dns: init at 1.0; nixos/acme-dns: init; nixos/acme-dns: init
2023-05-31 11:40:35 -04:00
figsoda 137dd249c5 writeTextFile: revert workaround for executable = null 2023-05-31 09:25:18 -04:00
emilylange d0af39521b
nixos/acme-dns: init 2023-05-31 15:08:37 +02:00
Sandro Jäckel fdb8f4994a
vaapiIntel: rename to intel-vaapi-driver
I tripped over this way to often and a package attr matching the pname
is way nicer, anyway.
2023-05-31 15:05:32 +02:00
Martin Weinelt 17684ef69d
rl2305: Sync back changes that only went into 23.05 2023-05-31 13:55:20 +02:00
Martin Weinelt 99012d1bbd
Merge pull request #235011 from NixOS/before-23.05-final-release
release: before 23.05 final release
2023-05-31 13:51:08 +02:00
Lennart Mühlenmeier a17e3e356a
rl-2305: finalize the release notes
Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2023-05-31 13:28:55 +02:00
Raito Bezarius b8c2962807 nixos/doc/manual/installation: update the upgrading chapter for 23.05 2023-05-30 16:42:53 +02:00
Aaron Andersen d098eec2da nixos/vmalert: init 2023-05-30 07:41:00 -04:00
Raito Bezarius 5e64b96a12
rl-2305: alpha version for 23.05
This is an alpha version worked out by the release managers.

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2023-05-30 12:09:55 +02:00
Ryan Lahfa 5e871d8aa6
Merge pull request #234639 from Atemu/rl-buildFHSEnvBubblewrap-migration
rl-2305: mention buildFHSEnv switch to bubblewrap
2023-05-29 20:11:05 +02:00
Atemu 3720991c06 rl-2305: mention buildFHSEnv switch to bubblewrap
See https://github.com/NixOS/nixpkgs/pull/225748
2023-05-28 17:41:49 +02:00
Bobby Rong 838dad5de9
Merge pull request #234231 from bobby285271/add/xdg-desktop-portal-xapp
xdg-desktop-portal-xapp: init at 1.0.0
2023-05-28 10:52:30 +08:00
Thomas Gerbet 85f15277d0 etcd: switch to etcd_3_5 2023-05-28 08:04:43 +10:00
Ryan Lahfa 77a1c48cca
Merge pull request #232011 from GaetanLepage/river
nixos/river: init module
2023-05-27 22:30:51 +02:00
Raito Bezarius 69bb0f94de nixos/nginx: first-class PROXY protocol support
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.

Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.

It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.

An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.

Finally, the tests covers:

- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
  (sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;

In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.

For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
2023-05-26 19:48:26 +02:00
Bobby Rong 36abd7c9f8
nixos/cinnamon: enable portals by default 2023-05-26 23:53:15 +08:00
Ryan Lahfa 435237d641
Merge pull request #233350 from GrahamDennis/grahamdennis/testing-networks
nixos/qemu-vm: add option for named network interfaces
2023-05-26 15:57:01 +02:00
Yaya ae47862b93 nixos/doc: add release note for sftpgo 2023-05-25 22:46:15 +02:00
Will Fancher fe43923a70
Merge pull request #229767 from mberndt123/mberndt123/stratis-rootfs
nixos/stratis: initrd support for stratis root volumes
2023-05-25 14:06:31 -04:00
Weijia Wang 67e3953505 foundationdb: default to foundationdb71 2023-05-25 01:08:10 +03:00
Gaetan Lepage 8f421acbc5 nixos/river: init module 2023-05-25 00:05:23 +02:00
Weijia Wang 94dca479f4
Merge pull request #229321 from kira-bruneau/clonehero
clonehero: 0.23.2.2 -> 1.0.0.4080
2023-05-25 01:03:18 +03:00
Syboxez Blank 47a2d457b0 clonehero: 0.23.2.2 -> 1.0.0.4080
Co-authored-by: Kira Bruneau <kira.bruneau@pm.me>
2023-05-24 17:07:32 -04:00
Artturi 9cde82ecd2
Merge pull request #231996 from amjoseph-nixpkgs/pr/release-notes/powerpc64le-linux 2023-05-25 00:04:45 +03:00
Artturi 05bf5e1c91
Merge pull request #232001 from amjoseph-nixpkgs/pr/release-notes/powerpc-ieee-long-double 2023-05-25 00:03:40 +03:00
Graham Dennis 93502aa3b1 nixos/qemu-vm: add option for named network interfaces
Adds a new option to the virtualisation modules that enables specifying explicitly named network interfaces in QEMU VMs.
The existing `virtualisation.vlans` option is still supported for cases where the name of the network interface is irrelevant.
2023-05-24 08:54:20 +10:00
Bobby Rong 44b98d80ea
rl-2311: Add placeholder entries
This fixes manual-combined validation.
2023-05-23 12:59:58 +08:00
Raito Bezarius 2c28f1de7c 23.11 is Tapir 2023-05-22 21:16:04 +02:00
Martin Weinelt f11d33afb7
nixos/frigate: init 2023-05-22 16:29:54 +02:00
Martin Weinelt eae2018b54
nixos/go2rtc: init 2023-05-22 03:48:47 +02:00
Ryan Lahfa 270dcda1e8
Merge pull request #231062 from bobvanderlinden/espanso-update-2.1.8
espanso: 0.7.3 -> 2.1.8
2023-05-21 21:44:41 +02:00
Bob van der Linden 5762a20a25
espanso: 0.7.3 -> 2.1.8 2023-05-21 19:10:34 +02:00
Sandro a74a4a2f32
Merge pull request #232534 from teutat3s/zhf/fix-prometheus-exporter-jitsi
jitsi-videobridge: refactor broken `apis` option to `colibriRestApi`
2023-05-21 18:43:59 +02:00
teutat3s cb81bd9340
jitsi-videobridge: refactor broken apis option to
colibriRestApi

Refactor option to use jvb.conf and convert to boolean. Using the CLI
argument broke a while ago and is deprecated by upstream since 2021:
https://github.com/jitsi/jitsi-videobridge/pull/1738/files#diff-d9f589d2aae1673693461d7c3b9214324201ca1f43db63a3c773d4acfc52bc81

This fixes the currently broken test:
nixosTests.prometheus-exporters.jitsi
2023-05-21 15:31:14 +02:00
jarkad 2fa279fbf3 gajim: 1.6.1 -> 1.7.3 2023-05-20 22:34:46 +03:00
José Romildo Malaquias 85fb079d0f
Merge pull request #226270 from Flakebi/albert
albert: 0.17.6 -> 0.20.13
2023-05-20 09:16:13 -03:00
figsoda 701bcdbead nixos: fix typos 2023-05-19 22:31:04 -04:00
Alyssa Ross 43465c94d4 nixos/mailman: randomly generate REST API token 2023-05-19 12:03:41 +02:00
Matthias Berndt cb410a8c59 Merge remote-tracking branch 'upstream/master' into mberndt123/stratis-rootfs 2023-05-17 21:47:19 -04:00
Doron Behar 84d5e9b123 release-notes: Mention services.syncthing changes due to RFC 42
Fixup to #226088 and #232439.
2023-05-17 22:25:49 +03:00
Matthias Berndt 92814241a8 improve stratis initrd support
it is now possible to supply a stratis pool uuid
for every filesystem, and if that filesystem
is required for boot, the relevant pool will be
started in the initramfs.
2023-05-16 22:48:36 -04:00
Sandro efb55108b3
Merge pull request #231435 from drupol/openvscode-server/systemd-service 2023-05-16 14:14:29 +02:00
Pol Dellaiera 1d37fe1526
nixos/openvscode-server: init 2023-05-15 21:48:08 +02:00
Jonas Heinrich 8a4f016281 nixos/maddy: tls.loader add acme support, add secrets option 2023-05-15 15:00:16 -04:00
K900 d5c292af6b
Merge pull request #197524 from f2k1de/graylog4
graylog: init at 4.0.8, 4.3.9, 5.0.2
2023-05-15 19:42:04 +03:00
Sandro 872c89e5a7
Merge pull request #221750 from rhendric/rhendric/nixos/snapper 2023-05-15 17:24:25 +02:00
figsoda 783ebc7682
Merge pull request #231707 from figsoda/trip 2023-05-15 09:13:59 -04:00
Ryan Lahfa 8c4a3f67b5
Merge pull request #228956 from tensor5/pam-zfs-key
nixos/pam: enable unlocking ZFS home dataset
2023-05-15 11:42:30 +02:00
Adam Joseph c87e1115d7 release-notes: mention that powerpc64 now uses IEEE-standard floats 2023-05-15 01:05:04 -07:00
Ryan Lahfa fa06a3b646
Merge pull request #230888 from Misterio77/nextcloud-createlocally-optin
nixos/nextcloud: default createLocally to false
2023-05-15 09:28:15 +02:00
Nicola Squartini 5466f76755 nixos/pam: improve documentation of ZFS module 2023-05-15 09:22:39 +02:00
Adam Joseph 2983698c4b release-notes: note ability to build powerpc64le-linux NixOS ISOs
This commit adds a mention to the release notes of the fact that
NixOS 23.05 can build installer ISOs for a new platform.
2023-05-15 00:21:41 -07:00
Nicola Squartini 09f4bf7f16 nixos/pam: enable unlocking ZFS home dataset 2023-05-15 09:20:40 +02:00
Ryan Lahfa feb7fcde4b
Merge pull request #231481 from nikstur/rshim-user-space
rshim for Nvidia BlueField
2023-05-15 09:03:50 +02:00
Ryan Lahfa e3bd7faa18
Merge pull request #226830 from Janik-Haag/birdwatcher
birdwatcher: init at 2.2.4, alice-lg: init at 6.0.0, nixos/birdwatcher: init, nixos/alice-lg: init
2023-05-15 08:42:10 +02:00
Janik H 40136a1f7f nixos/birdwatcher: init 2023-05-15 02:52:06 +02:00
Janik H 8ed86700a2 nixos/alice-lg: init 2023-05-15 02:52:06 +02:00
nikstur 5435eaaa4d nixos/rshim: init 2023-05-15 01:24:48 +02:00
Ryan Lahfa 285330f081
Merge pull request #230153 from mklca/swap-encrypt-enhancement
nixos/config/swap: improve randomEncrytion
2023-05-14 19:01:56 +02:00
Gabriel Fontes f9f76529cd
nixos/nextcloud: default createLocally to false 2023-05-14 12:09:50 -03:00