tobias/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-11-19 23:22:57 +01:00
Code Issues Packages Projects Releases Wiki Activity
498855 commits 199 branches 75 tags 12 GiB
Commit graph

25856 commits

Author SHA1 Message Date
Ilan Joselevich a8eea70935
Merge pull request #231113 from Kranzes/harmonia 
nixos/harmonia: adjust module and test to upstream, harmonia: 0.6.3 -> 0.6.4
 2023-05-11 00:37:41 +03:00
figsoda 9eff400dd9
Merge pull request #230939 from figsoda/sniffnet-module 2023-05-10 17:24:47 -04:00
ajs124 96fbdcedcd trustedGrub: remove 2023-05-10 22:17:56 +02:00
ajs124 1319323458 nixos/grub: turn definition of version option from an error into a warning 
because a lot of configurations (generated by nixos-generate-config) contain it
 2023-05-10 21:51:26 +02:00
ajs124 30bea8d82d nixos/*: remove boot.grub.version 2023-05-10 21:51:26 +02:00
Ilan Joselevich 7ecf20b490
nixos/harmonia: adjust module and test to upstream 2023-05-10 22:28:03 +03:00
Arian van Putten a33d032939 modules/rosetta: configure nix build sandbox to use rosetta 
With this we can do x86_64 builds on aarch64
 2023-05-10 14:28:50 -04:00
Luflosi ada7f14219
kubo: 0.19.2 -> 0.20.0 
https://github.com/ipfs/kubo/releases/tag/v0.20.0

When creating a repository with `ipfs init`, `--empty-repo=true` is now the default according to the changelog. Modify the NixOS module to reflect this change and fix the `emptyRepo` setting to work with this change.
 2023-05-10 19:50:46 +02:00
Aaron Andersen dd2c3b1310 nixos/lxc-container: ensure /sbin/init is updated on nixos-rebuild boot 2023-05-10 11:04:07 -04:00
Ryan Lahfa fe7b996d66
Merge pull request #230857 from s1341/bugfix_pam_sssd 
nixos/pam: Allow password changing via sssd
 2023-05-10 16:56:47 +02:00
Sandro 84b4373d8c
Merge pull request #230550 from Mic92/harmonia 2023-05-10 16:55:06 +02:00
Robert Hensing e5db80ae48 nixosModules.pkgsReadOnly: init 2023-05-10 15:55:09 +02:00
Robert Hensing 6e594fedb3 nixos/nixpkgs: Use types.pkgs 2023-05-10 15:55:09 +02:00
happysalada 47bedc81f8 uptime-kuma: add defaults for simpler initial setup 2023-05-10 09:54:56 -04:00
Jörg Thalheim 76ffeaf06c nixos/harmonia: init service 2023-05-10 14:52:31 +02:00
Sandro 7b22f5b4a2
Merge pull request #215494 from poelzi/webdav-server-rs-debug 2023-05-10 14:29:26 +02:00
github-actions[bot] 2d07e76d1a
Merge staging-next into staging 2023-05-10 00:03:33 +00:00
figsoda 282e5e03a8 nixos/sniffnet: init 2023-05-09 15:53:34 -04:00
asonix cb2941db79 pict-rs: 0.3.0-alpha.37 -> 0.3.3 2023-05-09 15:24:54 -04:00
Pascal Bach 7e14b746c0
Merge pull request #230890 from linyinfeng/tocken 
nixos/networkd: fix typo of `tokenBucketFilterConfig`
 2023-05-09 20:49:37 +02:00
github-actions[bot] b5b52a946a
Merge staging-next into staging 2023-05-09 18:02:32 +00:00
Martin Weinelt 42aaea3606
Merge pull request #230889 from mweinelt/shadow-encrypt-method 
nixos/shadow: Set default encrypt method
 2023-05-09 19:43:06 +02:00
Sandro 8f6cd53206
Merge pull request #229022 from SuperSandro2000/nox-mpv-wayland 
nixos/no-x-libs: disable wayland for mpv
 2023-05-09 19:07:16 +02:00
Weijia Wang 419d7f9c8d
Merge pull request #230753 from fetsorn/typos 
several typos
 2023-05-09 19:16:12 +03:00
Atemu 9c946bce87
Merge pull request #230680 from alyssais/netboot-squashfs 
nixos/netboot: add squashfsCompression option
 2023-05-09 18:13:27 +02:00
Lin Yinfeng 1e05869917
nixos/networkd: fix typo of tokenBucketFilterConfig 2023-05-09 23:06:47 +08:00
Martin Weinelt a3c7dcd88d
nixos/shadow: Set default encrypt method 
Fixes the default for tools like chpasswd, chgpasswd and gpasswd.

Closes: #230880
 2023-05-09 17:05:34 +02:00
Sandro d199137345
Merge pull request #230560 from legendofmiracles/upddate-nodjs-asf 2023-05-09 16:58:52 +02:00
Alyssa Ross e5e49df7fd
nixos/netboot: add squashfsCompression option 
This is copied from isoImage.squashfsCompression.  It's useful to be
able to customise, as iteration cycles are very slow with xz, and
subjectively systems booted with less efficiently compressed squashfs
stores appear to have faster reads (although I didn't test that
scientificly so there could be other factors).
 2023-05-09 14:15:10 +00:00
Alyssa Ross 096cdeeac4
nixos/iso-image: type isoImage.squashfsCompression 2023-05-09 14:15:02 +00:00
fetsorn 5e77899001 nixos/tpm2: fix typo 
"acess" -> "access"
 2023-05-09 18:02:17 +04:00
fetsorn 1a4e993104 nixos/prometheus: fix typo 
"nixpgs" -> "nixpkgs"
 2023-05-09 18:02:17 +04:00
fetsorn f035683f55 nixos/matomo: fix typo 
"suported" -> "supported"
 2023-05-09 18:02:17 +04:00
fetsorn d1398dd05c nixos/deluge: fix typo 
"secuerly" -> "securely"
 2023-05-09 18:02:17 +04:00
fetsorn ac5f6d9100 nixos/apparmor: fix typo 
"usualy" -> "usually"
 2023-05-09 18:02:17 +04:00
purin 9595113480 nixos/openrgb: fix data dir & amd i2c 2023-05-10 01:34:21 +12:00
Martin Weinelt 35a73717df
Merge pull request #218599 from Izorkin/update-peertube 
peertube: 5.0.0 -> 5.1.0
 2023-05-09 14:37:44 +02:00
Jacek Galowicz b7dfa5082a
Merge pull request #228220 from R-VdP/test_driver_guest_shell_timeout 
nixos-test-driver: include a timeout for the recv call, do not assume sh == bash
 2023-05-09 13:05:28 +02:00
s1341 e2d538fead pam: remove unused try_first_pass 2023-05-09 13:45:15 +03:00
s1341 765ae4d581 nixos/pam: allow changing password using sssd 2023-05-09 13:43:06 +03:00
Florian Klink 6c9bef6b0f
Merge pull request #230777 from nikstur/systemd-repart-definitions-in-initrd 
systemd-repart definitions in initrd
 2023-05-09 13:24:04 +03:00
Sandro 443a8f398a
Merge pull request #230756 from NixOS/fzf-fix 2023-05-09 11:54:38 +02:00
github-actions[bot] b872b6b45c
Merge staging-next into staging 2023-05-09 06:01:52 +00:00
lom ea1cef8c00 ArchiSteamFarm.ui: use buildNpmPackage 2023-05-08 20:34:21 -04:00
Aaron Andersen cf0327810b
Merge pull request #207093 from ymarkus/alertmanager 
nixos/alertmanager: add checkConfig option
 2023-05-08 20:15:17 -04:00
github-actions[bot] 5b562cf621
Merge staging-next into staging 2023-05-09 00:02:44 +00:00
nikstur d85abd2764 nixos/systemd-repart: definition files in initrd 
Store the definition files in the initrd instead of reading them from
the Nix store in /sysroot.

This way, the initrd has to be re-generated every time the definition
files change. When the path to the defintion files instead of the
definition files themselves are embedded in the initrd, however, the
initrd also has to be re-generated every time. In this regard, this
change does not improve the status quo.

However, now systemd-repart also works reliable when the Nix store is
mounted separately from the root partition.

This change also enables new use-cases like creating partitions
necessary to boot the system. However, by default, the root partition
cannot be created on first boot because the systemd-repart service
requires a /sysroot to be mounted. Otherwise, systemd-repart cannot
determine the device to operate on.
 2023-05-09 00:11:21 +02:00
Matthias Berndt 8aa320b4c2 address code review issues 2023-05-08 23:18:55 +02:00
nikstur 5c2a7490cf nixos/systemd-repart: fix 
Since v253, systemd-repart tries to create temporary directories in
/var/tmp. However, this directory doesn't exist in the initrd. This
commit adds an enviroment variable to re-use the existing /tmp directory
instead of /var/tmp.
 2023-05-08 23:12:59 +02:00
Izorkin 1afcb4c6ef
nixos/peertube: update nginx configuration 2023-05-08 23:49:03 +03:00
Izorkin 8d76c0b6fb
peertube: 5.0.0 -> 5.1.0 2023-05-08 23:48:32 +03:00
Ryan Lahfa 43a413de73
Merge pull request #230731 from NixOS/bump/netdata 
netdata: 1.38.1 -> 1.39.0
 2023-05-08 21:59:56 +02:00
Sandro Jäckel edf57fef9b
nixos/fzf: fix evaluation if ohMyZsh is enabled 2023-05-08 21:10:28 +02:00
github-actions[bot] 54295bf976
Merge staging-next into staging 2023-05-08 18:02:09 +00:00
Raito Bezarius 16658f7634 nixos/netdata: introduce deadlineBeforeStopSec 
Previously, we hardcoded a 60 second timer to stop netdata if we didn't have any answer back.
This is wrong and can cause data loss because the SIGTERM sent by systemd can sometimes be not honored.
Which in turn becomes a SIGKILL, causing potential data loss / corruption.

Offer a flag to users and bump the deadline to 2 minutes.
 2023-05-08 19:29:13 +02:00
Ryan Lahfa 98167d573d
Merge pull request #229313 from mped-oticon/mped_proxmox_assert 
nixos/proxmox-image: Disable O_DIRECT to fix assert when writing to tmpfs
 2023-05-08 16:11:40 +02:00
Atemu cb0f64e45d
Merge pull request #230665 from alyssais/iso-image-targetPlatform 
nixos/iso-image: targetPlatform -> hostPlatform
 2023-05-08 15:06:48 +02:00
Alyssa Ross ecc1ec2c72 llvmPackages_latest: move to aliases.nix 
Because llvmPackages_latest is used in Nixpkgs, by quite a few
packages, it's difficult to keep it up to date, because updating it
requires some level of confidence that every package that uses it is
going to keep working after the update.  The result of this is that
llvmPackages_latest is not updated, and so we end up in the situation
that "latest" is two versions older than the latest version we
actually provide.  This is confusing and unexpected.

"But won't this end up fragmenting our LLVM versions, if every package
previously using _latest is separately pinned to LLVM 14?", I hear you
ask.  No.  That fragmentation is already happening, even with an
llvmPackages_latest, because packages that actually require the
_latest_ version of LLVM (15/16), have already been decoupled from
llvmPackages_latest since it hasn't been upgraded.  So like it or not,
we can't escape packages depending on specific recent LLVMs.  The only
real fix is to get better at keeping the default LLVM up to
date (which I'm reasonably confident we're getting into a better
position to be feasibly better able to do).

So, unless we want to double down on providing a confusingly named
"llvmPackages_latest" attribute that refers to some arbitrary LLVM
version that's probably not the latest one (or even the latest one
available in Nixpkgs), we only have two options here: either we don't
provide such an attribute at all, or we don't use it in Nixpkgs so we
don't become scared to bump it as soon as we have a new LLVM available.
 2023-05-08 13:05:33 +00:00
Nick Cao aa7197b091
Merge pull request #230539 from OPNA2608/update/miriway 
miriway: unstable-2023-03-17 -> unstable-2023-04-25
 2023-05-08 20:27:47 +08:00
Alyssa Ross bf7de549b9
nixos/iso-image: targetPlatform -> hostPlatform 
This is not a compiler, and therefore does not need to care about the
target platform.
 2023-05-08 11:50:06 +00:00
Mark Ruvald Pedersen 66fb2f539a nixos/proxmox-image: Disable O_DIRECT to fix assert 
Context summary:
'vma create' can't otherwise write to tmpfs such as /dev/shm.
This is important when used from non-nixos machines which may
have /build as tmpfs.

VMA is Proxmox's virtual machine image format that wraps QEMU images,
augmenting these with proxmox-specific configuration file.
proxmox-image.nix uses the VMA tool to create vma image files.
The VMA tool exists as a patchset ontop of QEMU.

VMA writes its output with open() and O_DIRECT flag.
O_DIRECT does not work on Linux tmpfs [1]. Thus:
$ vma create ~/output.vma ...  # works, assuming home isn't tmpfs.
$ vma create /dev/shm/output.vma ...  # fails since /dev/shm is tmpfs
Failure results in assert(*errp == NULL).

O_DIRECT is a cache performance hint.
But it currently blocks our usage of nixos-generate -f proxmox from
Non-NixOS hosts and Docker.

The patch here simply removes O_DIRECT:
vma-writer.c later performs memalign due to O_DIRECT, but this is
safe to do with or without O_DIRECT.
Ideally, this should be fixed in upstream Proxmox: Perhaps by falling
back to open without O_DIRECT.

Another attempt to fix this SIGABRT is [2], which writes the vma file
directory to $out/ folder -- however that may still be tmpfs mounted
which it is in our case.

[1] https://lore.kernel.org/lkml/45A29EC2.8020502@tmr.com/t/
[2] https://github.com/NixOS/nixpkgs/pull/224282
 2023-05-08 12:33:41 +02:00
Jörg Thalheim 3288479636 nixos/envfs: make mounts non-critical 
We usually don't want to bring the whole machine into emergency mode
just because we couldn't mount envfs. It's usually not on the critical
path.
 2023-05-08 11:24:18 +02:00
github-actions[bot] 4532c723ec
Merge staging-next into staging 2023-05-08 00:02:49 +00:00
Sandro 6197953fb6
Merge pull request #207106 from autrimpo/gonic-module 
nixos/gonic: init
 2023-05-08 01:28:24 +02:00
Michal Koutenský 8118e3de43 nixos/gonic: init 2023-05-07 22:43:23 +02:00
Ilan Joselevich 6a751fe806
Merge pull request #227765 from zhaofengli/darling 
darling: init at unstable-2023-05-02
 2023-05-07 22:29:02 +03:00
github-actions[bot] 048e91e57b
Merge staging-next into staging 2023-05-07 18:01:53 +00:00
Matthias Berndt 9f1bc0fa02 address review comments 2023-05-07 18:48:28 +02:00
Matthias Berndt 1632e73b19 nixos/stratis: enable booting from stratis volume 2023-05-07 18:48:28 +02:00
Bernardo Meurer 3cf3f4395a
Merge pull request #230449 from lovesegfault/mainsail-module 2023-05-07 11:49:59 -04:00
Mikaela Allan 445d7cae2a
nixos/config/swap: refactor startup script generation 2023-05-07 11:42:36 -04:00
OPNA2608 fc3c5947a9 nixos/miriway: Adjust default and example config 
The keybinds for the WM's internal commands have been made configurable.
 2023-05-07 17:32:20 +02:00
github-actions[bot] 7b8084a6b9
Merge staging-next into staging 2023-05-07 12:02:13 +00:00
Martin Weinelt cd0f4fc67c
Merge pull request #230256 from lovesegfault/systemd-can 
nixos/networkd: add TransmitQueues and TransmitQueueLength
 2023-05-07 11:53:35 +02:00
Naïm Favier 0767f800e0
Merge pull request #224688 from Izorkin/add-nginx-upstream-timeout 
nixos/nginx: allow arbitrary parameters in upstream servers
 2023-05-07 11:43:39 +02:00
Izorkin 2809915f19
nixos/nginx: allow arbitrary parameters in upstream servers 
Adds a `freeformType` to `services.nginx.upstreams.<name>.servers` to
allow setting arbitrary parameters.
 2023-05-07 11:17:49 +02:00
Bernardo Meurer 4804f7a09b
nixos/mainsail: init 2023-05-07 01:41:03 -04:00
Zhaofeng Li 1e39c977f7 nixos/darling: init 2023-05-06 22:49:35 -06:00
Bernardo Meurer aa8eff129d
nixos/networkd: add TransmitQueues and TransmitQueueLength 
These are relevant when using networkd to configure CAN networks

Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
 2023-05-06 21:55:09 -04:00
github-actions[bot] a0eb573683
Merge staging-next into staging 2023-05-07 00:03:11 +00:00
Vladimír Čunát e700696f49
Merge #230386: Revert "nixos/qemu-vm: fix diskless VMs" 2023-05-06 22:00:39 +02:00
Martin Weinelt f4ca022023
Merge pull request #229999 from ambroisie/update-tandoor-recipes 
tandoor-recipes: 1.4.4 -> 1.4.9
 2023-05-06 21:58:04 +02:00
Vladimír Čunát 5674901601
Revert "nixos/qemu-vm: fix diskless VMs" 2023-05-06 21:41:14 +02:00
Jonas Chevalier d3ff0e4114
Merge pull request #229111 from zimbatm/cloud-init-settings 
cloud-init module: adopt the settings format
 2023-05-06 21:34:11 +02:00
Sandro 6a8a43e5f2
Merge pull request #225341 from SuperSandro2000/ohmyzsh-fzf 
nixos/fzf: add ohMyZsh integration
 2023-05-06 21:24:15 +02:00
Robert Hensing 216315c6c4
Merge pull request #197547 from hercules-ci/module-class-and-flake-import 
module system: Improve error messages around faulty imports
 2023-05-06 20:16:34 +02:00
github-actions[bot] 1edcdf34e3
Merge staging-next into staging 2023-05-06 18:01:44 +00:00
Gabriel Fontes 16b3b0c53b nixos/tests/kavita: init 2023-05-06 13:57:53 -03:00
Gabriel Fontes e2854d332d nixos/kavita: init 2023-05-06 13:57:53 -03:00
Robert Hensing 8054785157 lib/modules: Move class out of specialArgs 2023-05-06 18:32:58 +02:00
Robert Hensing 79703eef08 nixos,nixpkgs: Add module classes 
This allows modules that declare their class to be checked.
While that's not most user modules, frameworks can take advantage
of this by setting declaring the module class for their users.
That way, the mistake of importing a module into the wrong hierarchy
can be reported more clearly in some cases.
 2023-05-06 18:29:04 +02:00
Martin Weinelt 1c963cea48
nixos/gitea-actions-runner: init 2023-05-06 17:34:15 +02:00
Rick van Schijndel 5e2d479540
Merge pull request #229874 from mcnesium/fix_ambig_char 
fix ambiguous unicode characters
 2023-05-06 16:54:54 +02:00
Bruno BELANYI 9650310348 nixos/tandoor-recipes: disable debug toolbar 2023-05-06 14:22:17 +01:00
github-actions[bot] 76e7973d1c
Merge staging-next into staging 2023-05-06 00:02:57 +00:00
Bruno Adelé 7af8ace239
nixos/smokeping: Format smokeping source code 2023-05-05 22:46:30 +02:00
Pierre Bourdon 2ddbabec4d
nixos/xserver: fix xserver.conf reproducibility (sort ModulePath entries) 2023-05-05 22:33:09 +02:00
Ryan Lahfa 0b0c5fdf95
Merge pull request #230027 from jmbaur/fix-cross-nixos-system 
nixos/bootspec: Fix cross for nixos-system systemBuilder
 2023-05-05 22:05:44 +02:00
Ryan Lahfa 32264d614a
Merge pull request #227696 from aktaboot/fix-install-tools-deps 
nixos/installer: fix util-linux dependencies in install script
 2023-05-05 21:58:23 +02:00
github-actions[bot] cfd87655c8
Merge staging-next into staging 2023-05-05 18:01:52 +00:00
Mikaela Allan 21b6bec0ff
nixos/config/swap: improve randomEncrytion 
* add sector size parameter to swap randomEncryption
  * add key size parameter to swap randomEncryption
  * allow deviceName to be overridden for encrypted swap
  * create test for swap random encryption
  * update release notes
 2023-05-05 13:36:42 -04:00
Jonas Chevalier db8b28dc5d
Update nixos/modules/services/monitoring/netdata.nix 
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
 2023-05-05 18:41:56 +02:00
Jonas Chevalier 14793fac6c
Update nixos/modules/services/monitoring/netdata.nix 
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
 2023-05-05 18:41:51 +02:00
aktaboot b3ef821489 nixos/installer: fix util-linux dependencies in install scripts 2023-05-05 18:11:57 +02:00
Ryan Lahfa 275a6e3d8d
Merge pull request #193469 from minijackson/mount-options-stage-1 
nixos/stage-1: follow mount options
 2023-05-05 17:05:48 +02:00
Ryan Lahfa 1ab4d7d0c3
Merge pull request #228047 from RaitoBezarius/diskless-vm 
nixos/qemu-vm: fix diskless VMs
 2023-05-05 15:37:11 +02:00
Emily Lange 549bee9851
nixos/grafana-agent: add extraFlags option (#228883) 2023-05-05 15:14:41 +02:00
Jared Baur 67561dcc59
nixos/bootspec: Fix cross for nixos-system systemBuilder 
When `nixpkgs.hostPlatform` != `nixpkgs.buildPlatform`, building the
top-level attribute fails since the bootspec portion of the system
builder tries to reference the host platform's `jq`. Change this to
reference the build platform's `jq`.
 2023-05-04 20:09:16 -07:00
Sandro Jäckel 1b6078a24a
nixos/no-x-libs: add pipewire 2023-05-04 23:03:06 +02:00
Rene Hollander a70c7aba36 nixos/networkd: Fix typo in usage sectionBridgeVLAN 
The `B` in bridge should be capitalized.

It currently leads to an evuluation error: 
```
error: attribute 'sectionbridgeVLAN' missing

       at /nix/store/7wmrwj0sgwg1iivxk43lpkqjhji57mq7-source/nixos/modules/system/boot/networkd.nix:2386:56:

         2385|       example = { VLAN = "10-20"; };
         2386|       type = types.addCheck (types.attrsOf unitOption) check.network.sectionbridgeVLAN;
             |                                                        ^
         2387|       description = lib.mdDoc ''
       Did you mean sectionBridgeVLAN?
```
 2023-05-04 16:20:56 +02:00
Martin Weinelt 12a2201d61
Merge pull request #229780 from NixOS/home-assistant 
home-assistant: 2023.4.6 -> 2023.5.0
 2023-05-04 15:43:40 +02:00
Weijia Wang cddc413c66
Merge pull request #229845 from pitkling/fix/qemu-vm-escape-variable 
virtualisation/qemu-vm: fix unescaped bash variable in shell script
 2023-05-04 15:47:26 +03:00
mcnesium 36af786eda
fix ambiguous unicode characters 2023-05-04 12:54:56 +02:00
Jörg Thalheim be8e3128b9
Merge pull request #223418 from Mic92/grub 
nixos/grub-install: don't rely on shell to run commands
 2023-05-04 09:48:41 +01:00
Peter Kling 996db6d059
virtualisation/qemu-vm: escape bash variable in shell script 
Fixes #229729
 2023-05-04 09:52:49 +02:00
Martin Weinelt 6d934088ea
nixos/home-assistant: update bluetooth components 2023-05-04 07:33:32 +02:00
Sandro Jäckel da15c5054e
nixos/nextcloud-notify_push: add bendDomainToLocalhost 2023-05-03 22:41:23 +02:00
Sandro Jäckel 546d4d4b76
nixos/nextcloud: add configureRedis option 2023-05-03 22:40:41 +02:00
pennae aad25290ee nixos/emacs: restore example markup 
these examples were turned into untitle anchors previously because at
the time supporting examples was not deemed necessary or useful. now
that we have them we can restore them though.
 2023-05-03 19:58:21 +02:00
Ryan Lahfa da28a7a3d0
Merge pull request #228347 from NixOS/uefi-without-bootloaders 
nixos/qemu-vm: make it possible to use UEFI without bootloaders
 2023-05-03 17:08:47 +02:00
Michael Livshin 11b851718e system76-scheduler: don't enable unconditionally 
Oops :(
 2023-05-03 10:34:32 +03:00
Izorkin edb40b3e4f nixos/fail2ban: others small update 2023-05-03 08:45:26 +02:00
Izorkin 544ebba973 nixos/fail2ban: update bantime options 2023-05-03 08:45:26 +02:00
Raito Bezarius 6e8248c8b2 nixos/qemu-vm: make it possible to use UEFI without bootloaders 
`useEFIBoot` is somewhat misleading, but we should make it possible to
enable UEFI environment / firmware without buying into a bootloader.

This makes it possible.
 2023-05-02 23:20:03 +02:00
Bernardo Meurer b04b3345f1
Merge pull request #195082 from cmm/system76-scheduler 2023-05-02 09:25:05 -07:00
Artturi 2d256ca7c2
Merge pull request #227499 from tollb/w20230421d_use_systemd_hwdb_to_build_udev_hwdb 2023-05-02 19:04:06 +03:00
Robert Hensing c4793e85f1
Merge pull request #229427 from Mic92/hercules-ci-agent 
nixos/hercules-ci-agent: increase stack limit
 2023-05-02 13:42:42 +02:00
Michael Livshin 549fd53520 system76-scheduler: add config module 2023-05-02 13:43:36 +03:00
Martin Weinelt 826418fc35
Merge pull request #227990 from Mic92/mediawiki-webserver 
nixos/mediawiki: make apache2 optional
 2023-05-02 12:39:10 +02:00
Jörg Thalheim 301d6bb9c2 nixos/hercules-ci-agent: increase stack limit 
see https://github.com/hercules-ci/hercules-ci-agent/pull/451 for context
 2023-05-02 09:53:41 +02:00
Jonas Heinrich d932d6929b
Merge pull request #227401 from onny/maddytls2 
nixos/maddy: Add tls option
 2023-05-02 07:32:56 +02:00
Sandro 7b02d16807
Merge pull request #227973 from tensor5/nixos/nextcloud--fix-notify_push-configuration-parse-error 2023-05-02 01:05:02 +02:00
figsoda ed153ccbfd
Merge pull request #229209 from Misterio77/navidrome-cfg-package 
nixos/navidrome: add package option
 2023-05-01 18:31:34 -04:00
Gabriel Fontes 1c3c2c8203
nixos/navidrome: add package option 2023-05-01 16:29:17 -03:00
Jörg Thalheim 077e950f7a nixos/mediawiki: also test fcgi socket 2023-05-01 20:51:11 +02:00
Jörg Thalheim d309952a5d nixos/mediawiki: make apache optional 2023-05-01 20:51:11 +02:00
Jonas Heinrich fcf6662fb5
Merge pull request #229159 from Misterio77/refactor-nextcloud-createlocally 
nixos/nextcloud: refactor database.createLocally
 2023-05-01 20:04:20 +02:00
Jonas Heinrich 616ba4ae5c nixos/maddy: Add tls option 2023-05-01 19:12:26 +02:00
Gabriel Fontes fddf531c6f
nixos/nextcloud: refactor database.createLocally 
Fixes https://github.com/NixOS/nixpkgs/issues/228971
 2023-05-01 12:20:40 -03:00
Matthieu Coudron 7fe4909bee
services.datadog: remove python2 from systemd service (#228312) 
which caused a security warning. seems to work without it so let's ditch it
 2023-05-01 16:37:34 +02:00
Nick Cao cb6c1de07d
Merge pull request #229138 from exzombie/fix/fstrim-interval 
nixos/fstrim: fix overriding the timer interval
 2023-05-01 17:23:36 +08:00
K900 5c95114a2f
Merge pull request #228951 from aacebedo/aacebedo/asusctl_4.6.2 
asusctl: 4.5.8 -> 4.6.2
 2023-05-01 12:08:37 +03:00
Alexandre Acebedo 576d7d34c4 asusctl: 4.5.8 -> 4.6.2 2023-05-01 11:07:39 +02:00
Weijia Wang b87aa62298
Merge pull request #227936 from wineee/dde 
nixos/deepin: init
 2023-05-01 08:38:45 +03:00
Kira Bruneau 50200de3f4
Merge pull request #216230 from tcheronneau/master 
nixos/{consul-template,vault-agent}: init
 2023-04-30 13:53:57 -04:00
gaykitty 3056e9c395 nixos/stargazer: remove with lib 2023-04-30 13:05:34 -03:00
gaykitty d4f3dd4f71 nixos/stargazer: fix route ordering 2023-04-30 13:05:34 -03:00
Jure Varlec 44438e0dcd nixos/fstrim: fix overriding the timer interval 
The OnCalendar systemd setting is additive. To clear the setting defined
by the pre-existing unit file, it has to be set first to an empty
string, then to the desired value.
 2023-04-30 17:36:49 +02:00
zimbatm 406a6dfa26 cloud-init module: adopt the settings format 
This makes it easier to for example set `datasource_list = [ "Vultr" ];`
so that cloud-init doesn't scan trough all of the datasources when you
know on which target the system is going to be deployed.

Previously, one had to copy-paste the default config and adapt it.
 2023-04-30 15:08:10 +02:00
zimbatm 4a1fd4afe0 cloud-init module: remove superfluous lib. prefixes 2023-04-30 14:59:16 +02:00
zimbatm de8b1cf647 cloud-init module: format with nixpkgs-fmt 2023-04-30 14:58:29 +02:00
Nick Cao 1acfbbb2e7
Merge pull request #125865 from eliasp/restic-private-tmp 
nixos/restic: use private tmp for service unit
 2023-04-30 20:37:07 +08:00
Ilan Joselevich a36b310b7a
Merge pull request #228858 from m-bdf/hyprland-xwayland-conditional-default 
nixos/hyprland: conditionally enable Xwayland
 2023-04-30 13:21:53 +03:00
Maximilian Bosch 5c9977a524
Merge pull request #224891 from KFearsoff/fix-grafana-assertions-in-yaml 
nixos/grafana: fix assertions leaking into YAML
 2023-04-30 11:39:48 +02:00
Elias Probst 3bd1c64a5b
nixos/restic: use private tmp for service unit 
To reduce the danger of accidentally exposing sensitive files processed
by a restic backup to other services/users, enable the `PrivateTmp=`
feature of restic service units, which provides a per service isolation
of `/tmp` and `/var/tmp`.

Co-authored-by: Daniel Nagy <danielnagy@posteo.de>
 2023-04-30 10:39:29 +02:00
Sandro Jäckel ce0a2d2b85
nixos/no-x-libs: disable wayland for mpv 2023-04-30 02:23:41 +02:00
Sandro 5d0d352833
Merge pull request #220761 from elesiuta/picosnitch-init 2023-04-30 01:52:10 +02:00
Weijia Wang acb0a2c266
Merge pull request #228225 from LeSuisse/strongswan-5.9.10 
strongswan: 5.9.8 -> 5.9.10
 2023-04-29 23:08:09 +03:00
Kira Bruneau f81a619c91
Merge pull request #227916 from IndeedNotJames/lldap 
lldap: init at 0.4.3; nixos/lldap: init; nixosTests.lldap: init
 2023-04-29 15:24:12 -04:00
IndeedNotJames 87ccd1a47b
nixos/lldap: init 
Co-authored-by: LongerHV <46924944+LongerHV@users.noreply.github.com>
 2023-04-29 21:14:25 +02:00
rewine d55808c2c0
nixos/deepin: init 2023-04-29 22:36:18 +08:00
rewine dba20db482
nixos/deepin/app-services: init 2023-04-29 22:29:02 +08:00
rewine 7a6edd6448
nixos/deepin/dde-api: init 2023-04-29 22:29:01 +08:00
rewine a112e1e8ce
nixos/deepin/dde-daemon: init 2023-04-29 22:29:01 +08:00
Maëlys Bras de fer ce70fd28d6
nixos/hyprland: conditionally enable Xwayland 2023-04-29 06:50:47 +00:00
Maciej Krüger 67283e1d3a
Merge pull request #228721 from cmm/fix/auto-cpufreq 
auto-cpufreq: actually run as deamon
 2023-04-29 04:42:10 +02:00
Raito Bezarius bc502d0a14 nixos/bootspec: adopt the merged RFC-0125 
This removes the feature preview warning, enable by default bootspec,
adds a validation flag to prevent Go to go into build-time closure.

This will break all downstream users of bootspec as those changes are
not backward-compatible.
 2023-04-28 18:26:11 -07:00
Kira Bruneau d3ccbe1e55
Merge pull request #228716 from IndeedNotJames/discourse 
discourse: 3.1.0.beta2 -> 3.1.0.beta4, discourseAllPlugins: update all
 2023-04-28 19:32:16 -04:00
happysalada 2909d9b117 vector: 0.28.1 -> 0.29.1 2023-04-28 18:58:41 -04:00
Michael Livshin ed01157da8 auto-cpufreq: actually run as deamon 
The upstream service definition uses the (undocumented) --daemon
option, which causes the process to stay running and not exit
immediately.
 2023-04-28 14:36:10 +03:00
Weijia Wang b2ef7956b6
Merge pull request #227560 from jackyliu16/loongnix-commit 
lib.platforms.loongarch64: init
 2023-04-28 13:21:42 +03:00
IndeedNotJames f88be46556
discourse: 3.1.0.beta2 -> 3.1.0.beta4 
https://meta.discourse.org/t/3-1-0-beta4-new-notifications-menu-chat-and-sidebar-improvements-security-fixes-and-more/262044
https://meta.discourse.org/t/3-1-0-beta3-search-optimizations-resizable-chat-drawer-new-api-scopes-and-more/258274
diff: https://github.com/discourse/discourse/compare/v3.1.0.beta2..v3.1.0.beta4
 2023-04-28 12:14:58 +02:00
jackyliu16 15e3a50bd3 nixos/binfmt: add loongarch64-linux 2023-04-28 12:11:58 +03:00
Domen Kožar 1f1bc4233e
Merge pull request #228669 from sandydoo/fix/nginx-status-page 
nixos/nginx: serve the status page on localhost servers
 2023-04-28 10:52:41 +02:00
sandydoo 2086b377cf
nixos/nginx: serve the status page on localhost servers 
The status page is inaccessible by default, unless a virtual host is
added with a `server_name` that's not `localhost`.

This commit moves the status page configuration, so that
it's matched before the main server blocks.
 2023-04-28 07:20:36 +00:00
Timothy DeHerrera b866d85d5c
nixos(steam): install steam-gamescope 
Allows to launch from a tty, in addition to display-manager.
 2023-04-27 11:59:25 -06:00
Timothy DeHerrera ca0c899008
nixos(steam): fix when gamescope isn't enabled 2023-04-27 11:59:05 -06:00
Thomas Gerbet 796121dc9b tt-rss: unstable-2022-10-15 -> unstable-2023-04-13, module use PHP 8.1 
Upstream Docker images also uses PHP 8.1.

Diff:
https://git.tt-rss.org/fox/tt-rss.git/diff/?id=0578bf802571781a0a7e3debbbec66437a7d28b4&id2=602e8684258062937d7f554ab7889e8e02318c96
 2023-04-27 11:46:38 +02:00
zimbatm f4d5a76a81 netdata module: add automatic claim 
Allow machines to auto-register themselves by passing the claim token.
 2023-04-27 10:30:32 +02:00
Bobby Rong a7eb77e921
Merge pull request #228428 from FedericoSchonborn/budgie-desktop-10.7.2 
budgie.budgie-desktop: 10.7.1 -> 10.7.2
 2023-04-27 10:30:01 +08:00
Timothy DeHerrera ea924e8ec5
Merge pull request #187507 from nrdxp/gamescope-module 
Launch GameScope/Steam session from Display Manager
 2023-04-26 19:03:15 -06:00
Federico Damián Schonborn e96baa117a
nixos/budgie: Add Zenity 
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
 2023-04-26 20:54:18 -03:00
Colin 855cff92e0 nixos/lemmy: fix documentation links 2023-04-26 18:29:53 -04:00
Robert Hensing 87676d039c
Merge pull request #228133 from name-snrl/fix-nix-in-nixos-generate-config 
Use `hostPlatform.system` in `nixos-generate-config`
 2023-04-26 23:19:55 +02:00
Jonas Heinrich 8ab44af90f
Merge pull request #226141 from e1mo/dokuwiki-23-05 
nixos/dokuwiki: Finally remove extraConfig
 2023-04-26 22:23:12 +02:00
name_snrl 1aa8534f3e nixos/nixos-generate-config: use hostPlatform.system instead of calling nix 2023-04-26 23:51:48 +05:00
Bobby Rong d9293111a9
Merge pull request #227526 from FedericoSchonborn/more-budgie 
budgie: add plugin support, update default settings
 2023-04-26 11:11:24 +08:00
Timothy DeHerrera 449fde8a09
nixos(steam): add gamescope session option 2023-04-25 17:21:32 -06:00
Thomas Gerbet b4e503a783 strongswan: 5.9.8 -> 5.9.10 
Fixes CVE-2023-26463: https://www.strongswan.org/blog/2023/03/02/strongswan-vulnerability-%28cve-2023-26463%29.html

Release notes:
https://www.strongswan.org/blog/2023/03/02/strongswan-5.9.10-released.html
https://www.strongswan.org/blog/2023/01/03/strongswan-5.9.9-released.html
 2023-04-26 01:08:29 +02:00
r-vdp 4147b878bc
nixos-test-driver: include a timeout for the recv call, do not assume sh == bash 2023-04-26 01:05:53 +02:00
Sophie Tauchert d568766fc7
nixos/traefik: add environmentFiles option 2023-04-25 16:05:28 +02:00
Jean-François Roche 25671114cd
cloud-init: add udhcpc support (#226216) 
* cloud-init: 22.4 -> 23.1.1

* cloud-init: add udhcpc support

Cloud-init use as dhcp client, dhclient, which is coming from the unmaintained package, isc-dhcp-client (refer https://www.isc.org/dhcp/) which ended support in 2022. dhclient is deprecated in nixos

Add patch to use `udhcpc` dhcp client coming from busybox instead.

PR based on #226173

refs #215571

upstream PR: https://github.com/canonical/cloud-init/pull/2125
 2023-04-25 13:33:29 +02:00
Sandro f152e714e5
Merge pull request #199835 from SuperSandro2000/nodejs-normalisation 2023-04-25 13:10:06 +02:00
Minijackson b25259e021
nixos/stage-1: follow mount options 
For fileSystems needed for boot which are bind mounts, busybox tend to
ignore mount options, so we remount right afterwards
 2023-04-25 12:47:39 +02:00
Moritz 'e1mo' Fromm 3dc05fbe40 nixos/bird-lg: Add support for traceroute-flags 2023-04-25 12:00:44 +02:00
Sandro Jäckel aad577bd30 nodejs*: normalise names to better fit other packages 
Versioned package attributes are usually named like $pname_$version
eg: nodejs-14_x -> nodejs_14
 2023-04-25 11:28:17 +02:00
Moritz 'e1mo' Fromm a2e2972ff3 nixos/bird-lg: Add maintainers 2023-04-25 10:41:35 +02:00
Moritz 'e1mo' Fromm b63e0d77b8 nixos/bird-lg: Rework command attribute generation 
Prior to this change, arguments were not escaped nor was the possiblity
for arguments to be empty accounted for. This led to a kinda broken
startup script were arguments were "shifted", e.g. leaving allowedIPs
empty in order to use the default would cause `--bird` (the following
arguments key) to be used as the value. This was also observable when
e.g. the navbarBrand had a space in it where only everything until the
first space would show up.

With the new approach, all arguments are consistently escaped and empty
ones left out.

`extraConfig` now supports and prefers lists of strings instead of
lines (still supported but warned). This is due to the fragility with
respect to e.g. forgetting trailing backslashes after each line.
`frontend.{servers,domain}` are unset by default since the frontend
needs (the upstream project itself has no empty defaults here) needs
them to be set. If not set, an error is caused at build-time.

`proxy.birdSocket` has a new default: The projects README[^1] states
`/var/run/bird/bird.ctl` as the current default value. And bird2 on
NixOS does use this path too.

[^1]: https://github.com/xddxdd/bird-lg-go#proxy
 2023-04-25 10:41:35 +02:00
gaykitty c251c021fe nixos/stargazer: init 2023-04-24 21:52:19 -03:00
Raito Bezarius be4e7ef905 nixos/qemu-vm: fix diskless VMs 
Previously, it was possible to run with a tmpfs / with
`virtualisation.diskImage = null;`, this was likely broken by my changes
in 4b4e4c3ef9.

It is reintroduced by disabling properly the bootloader for now, as it
is complicated to make it work with.
 2023-04-25 02:12:26 +02:00
Guillaume Girol 884ac29401
Merge pull request #227782 from everlanes/roundcube_bugfix_postgresql_passwd 
nixos/roundcube: fix remote postgresql server
 2023-04-24 18:53:21 +00:00
Ryan Lahfa 7812abd3d0
Merge pull request #227881 from NixOS/qemu-vm/mount-host-nix-store 
nixos/qemu-vm: introduce `virtualisation.mountHostNixStore` option
 2023-04-24 19:39:54 +02:00
Nicola Squartini 3b758d4aab
nixos/nextcloud: fix notify_push configuration parse error 
notify_push is unable to parse functions in PHP configuration, so we
avoid loading the `override.config.php` file.
 2023-04-24 17:45:44 +02:00
Jörg Thalheim c129c9fac0 nixos/mediawiki: drop $wgEmergencyContact setting 2023-04-24 14:25:00 +02:00
Jörg Thalheim 1d2a96eda3 nixos/mediawiki: move virtualHost to httpd.virtualHost 
This is a preparation to also allow nginx as a http server.
 2023-04-24 14:24:52 +02:00
Thomas 4e8bde773f
nixos/{consul-template,vault-agent}: init 2023-04-24 06:55:57 +02:00
Nick Cao 3e3d82f42c
Merge pull request #227232 from datafoo/nixos-acme-fix-options-type 
nixos/acme: fix options type
 2023-04-24 10:01:04 +08:00
Raito Bezarius 0df5257b82 nixos/qemu-vm: introduce virtualisation.mountHostNixStore option 
Now that `useBootLoader` produces a full system image, moving disk
images can be slow because they have a full Nix store in them.

It does not make sense to keep the 9p mountpoint to shadow the
/nix/store of the VM.

We disable it if we have `useBootLoader` and introduce an option for
easy overrides.
 2023-04-23 23:58:46 +02:00
Sandro 90e2a0670d
Merge pull request #225829 from IndeedNotJames/nixos.consul 2023-04-23 23:50:14 +02:00
Andreas Brinner 9d5dba7170 nixos/roundcube: read only first line of password file 
Only read the first line of the password file, if has multiple lines.
Mention that behaviour in options documentation.
 2023-04-23 21:05:48 +02:00
Federico Damián Schonborn 3c0f50b28c
nixos/budgie: Add services.xserver.desktopManager.budgie.extraPlugins option 
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
 2023-04-23 10:39:37 -03:00
Andreas Brinner 78fb35ce39 nixos/roundcube: extend documentation for passwordFile 
The passwordFile must be formatted correctly. Added some information
about how the file content should look like.
 2023-04-23 14:05:40 +02:00
Andreas Brinner 279eeae178 nixos/roundcube: fix roundcube-setup start 
When using Roundcube with a non local PostgreSQL database wait for
network start before running roundcube-setup.service
Otherwise the database is not reachable and the service fails.
 2023-04-23 13:11:28 +02:00
Andreas Brinner 2af4a9bc09 nixos/roundcube: fix PostgreSQL password 
Extract PostgreSQL database password for Roundcube from .pgpass file.
The password file is used in two locations:

  1. in the Roundcube config.php
  2. in the systemd setup service that initializes the roundcube
     database

These two services need the password in different formats.

Keep the password file in PostgreSQL standard format and extract the
password for the Roundcube config (see #215986).
 2023-04-23 13:11:28 +02:00
Maëlys Bras de fer 520150fa89
nixos/logind: Add key handling options 2023-04-22 14:41:36 +00:00
Will Fancher e56084d2a0 systemd-stage-1: Revert assertions about initrd commands 2023-04-22 10:25:16 -04:00
Martin Weinelt f9391cf538
Merge pull request #227557 from davidkna/patch-4 
nixos/gitea: remove extra `"` in prestart
 2023-04-22 15:49:55 +02:00
Florian Klink 7ad24e96ea
Merge pull request #226237 from ElvishJerricco/systemd-stage-1-unhide-docs 
Systemd stage 1: Unhide docs and round out assertions about unsupported features.
 2023-04-22 10:02:23 +02:00
Florian Klink d6eb7caaa1
Merge pull request #227354 from flokli/firefox-web-eid 
nixos/firefox: add config option for Web eID support
 2023-04-22 09:32:06 +02:00
David Knaack 3856e84b79 nixos/gitea: remove extra " in prestart 2023-04-22 09:12:02 +02:00
Will Fancher 1598338521 systemd-stage-1: Make networkd options shallow 2023-04-21 21:52:38 -04:00
Federico Damián Schonborn 375079d28c
nixos/budgie: Make default backgrounds available in Budgie Control Center 
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
 2023-04-21 21:40:13 -03:00
Bruce Toll 0fce0749b5 nixos/udev: Fix hwdb conflict handling; build with systemdb-hwdb 
Switch to systemdb-hwdb to build the udev hwdb.bin, as "udevadm hwdb" is
deprecated. This fixes an issue where the order of conflicting keys is
not respected.  The systemd-hwdb command creates a newer format (v3) of
hwdb.bin that respects the ordering of duplicate keys, with later
values replacing earlier occurrences.

A release note is included, as some mappings may be affected.
 2023-04-21 19:08:37 -04:00
Will Fancher 5c46e6f4e3 systemd-stage-1: Add assertions for unsupported options. 2023-04-21 13:05:12 -04:00
Will Fancher 8f9416e9e3 systemd-stage-1: Unhide documentation 2023-04-21 13:04:15 -04:00
Florian Klink 6b27ed3229
Merge pull request #169116 from ElvishJerricco/systemd-stage-1-networkd 
Systemd stage 1 networkd
 2023-04-21 18:40:59 +02:00
bezmuth 51c5aae874 nixos/pixelfed: init module 2023-04-21 17:39:24 +02:00
Jan Tojnar e25dc4a95e nixos/nginx: Fix listen string generation 
This regressed in 327b0cff7a breaking nixosTests.php, among other things.
 2023-04-21 17:18:45 +02:00
Raito Bezarius 614b83a328 nixos/virtualisation/qemu-vm: remove persistBootDevice option 
This option has been introduced in 678eed323f without realizing there was this
PR inflight, unfortunately, it collide with what this PR does and make
it irrelevant.

Therefore, I remove it here.
 2023-04-21 13:00:19 +02:00
Raito Bezarius 76c7b656bf nixos/qemu-vm: refactor bootDisk generation using make-disk-image 2023-04-21 13:00:18 +02:00
Maximilian Bosch 636e9f7418
Merge pull request #227235 from Ma27/bump-nextcloud 
nextcloud: 25.0.5 -> 25.0.6, 26.0.0 -> 26.0.1, remove nc24
 2023-04-21 11:14:29 +02:00
Weijia Wang e2d6255e9e
Merge pull request #226882 from wegank/parallels-guests-final 
systemd.services.prlshprint: fix type
 2023-04-21 10:37:11 +03:00
Nick Cao 515da5b664
Merge pull request #227243 from misuzu/netbird-update 
netbird: 0.14.6 -> 0.16.0
 2023-04-21 13:55:29 +08:00
IndeedNotJames 6ad64af778
nixos/consul: use lib.getExe where possible 
which allows the use of custom packages, that may not have binaries called `consul` or `consul-alerts` in their `/bin/*` (though arguably pretty unlikely to be ever used)
 2023-04-21 03:46:54 +02:00
IndeedNotJames 9c1f292155
nixos/consul: fix package reference in service $PATH 2023-04-21 03:46:54 +02:00
Timothy DeHerrera e30dafc09b
nixos: add module for GameScope 2023-04-20 17:12:21 -06:00
Florian Klink effa05c052 nixos/firefox: add config option for Web eID support 
This allows users to set
`programs.firefox.nativeMessagingHosts.euwebid = true` to make the
native companion app available in Firefox.

It's used by the Web eID browser extension
(https://addons.mozilla.org/en/firefox/addon/web-eid-webextension/),
which can be tried out at https://web-eid.eu/ - pressing the
"Authenticate" button there should open a new window.
 2023-04-21 00:25:44 +02:00
Tom Hubrecht e41c569429 nixos/authelia: Allow using Unix sockets 2023-04-20 23:53:16 +02:00
Kerstin Humm aff288424f
nixos/mastodon: fixup sidekiq jobClasses assertion 
See https://github.com/NixOS/nixpkgs/pull/225005#issuecomment-1516677321
 2023-04-20 22:58:34 +02:00
datafoo 066166cf49 nixos/fail2ban: add extraSettings option 2023-04-20 16:57:24 +02:00
Robert Hensing 73d2aeacf5
Merge pull request #206179 from ThinkChaos/refactor/gitea-settings 
gitea: new options and settings refactor
 2023-04-20 16:53:51 +02:00
Artturi b83db86a9e
Merge pull request #222080 from Stunkymonkey/nixos-optionalString 2023-04-20 16:07:30 +03:00
misuzu d5bb5259e4 nixos/netbird: allow configuring dns 2023-04-20 14:22:19 +03:00
Maximilian Bosch 0abc5bcc7e
nixos/nextcloud: for nc26 it's not necessary anymore to set enableBrokenCiphersForSSE to false 2023-04-20 12:20:52 +02:00
datafoo 2890af5e4b nixos/acme: fix options type 
null is a possible default so the type must reflect that.
 2023-04-20 11:52:57 +02:00
Maximilian Bosch 430f1dcdbd
nextcloud: remove nextcloud24, 25.0.5 -> 25.0.6, 26.0.0 -> 26.0.1 2023-04-20 11:34:54 +02:00
K900 449e8cd8d1 nixos/plasma5: install kde-inotify-survey 2023-04-20 11:54:06 +03:00
Sandro 84653ac6c7
Merge pull request #226150 from SuperSandro2000/lorri-direnv 
nixos/lorri: install direnv
 2023-04-20 10:49:23 +02:00
Flakebi 603e89eef9 kanidm: BindMount certificate paths 
Bind mount the base dirs of the tls key and chain into the service.

Make sure to bind every directory just once. The test failed on ofborg
when /nix/store and the certificate path in /nix/store/<some path> were
bound.
 2023-04-20 02:32:37 +02:00
Artturi 496c532a03
Merge pull request #105694 from laikq/master 2023-04-19 23:38:05 +03:00
Luke Granger-Brown 9ae46a7cf4
Merge pull request #123357 from R-VdP/virtio_scsi_vendor 
nixos/nixos-generate-config: include new device ID for virtio_scsi
 2023-04-19 18:51:05 +01:00
datafoo 3403ee0602 nixos/fail2ban: add bantime option 2023-04-19 19:18:31 +02:00
ThinkChaos 70cf02924e
nixos/gitea: convert more simple settings to freeform 
Also update `settings.server.PROTOCOL` to use non deprecated values.
 2023-04-19 12:18:47 -04:00
ThinkChaos 2901c2f94e
nixos/gitea: quote paths in preStart script 2023-04-19 12:18:47 -04:00
ThinkChaos eba0db3c1c
nixos/gitea: add customDir option 
Use case is storing secrets in a non persistent directory as I manage
them separately from this module.
 2023-04-19 12:18:47 -04:00
ThinkChaos f7b9a1c561
nixos/gitea: disable LFS related code when it is not configured 2023-04-19 12:18:47 -04:00
ThinkChaos 184131f50d
nixos/gitea: make service group configurable 2023-04-19 12:18:46 -04:00
ThinkChaos f8d5d6cd02
nixos/gitea: disable createDatabase assert when using sqlite 
Assert doesn't make sense in that case since `database.user` isn't used.
 2023-04-19 12:18:46 -04:00
Ryan Lahfa 645bc49f34
Merge pull request #225981 from jnsgruk/multipass-wait-online 
multipass: don't start until online
 2023-04-19 18:04:47 +02:00
Ryan Lahfa 8ef336e870
Merge pull request #224491 from LeSuisse/moodle-php-81 
nixos/moodle: use PHP 8.1
 2023-04-19 08:35:32 +02:00
Ryan Lahfa 2fa5e844de
Merge pull request #223749 from Alexis211/add-wgautomesh 
wgautomesh: init at 0.1.0
 2023-04-19 08:26:09 +02:00
laikq 376e02c721 nixos/cupsd: add udev rules of driver packages 2023-04-19 03:38:02 +03:00
Sandro 349ec9c376
Merge pull request #226689 from tyxieblub/plausible 2023-04-19 01:26:22 +02:00
Sandro ce4159b4cd
Merge pull request #226514 from AtaraxiaSjel/update/ivpn 2023-04-19 00:57:19 +02:00
linsui 7b6d5d4158
nixos/neovim: add runtime file to etc/xdg/nvim (#221832) 
Else the files in the runtime can't be accessed from the vimrc. I also remove the /etc. I thought it's a leftover of the old runtime implementation which is replaced in 307b125.

Co-authored-by: linsui <linsui555@gmail.com>
 2023-04-18 23:20:54 +02:00
Dmitriy Kholkin 706060e47d
nixos/ivpn: init 2023-04-18 22:11:10 +03:00
Artturi 9a1f5d4248
Merge pull request #226889 from Artturin/fixlints2 2023-04-18 21:52:21 +03:00
R-VdP 3078cdb780 nixos/nixos-generate-config: include new device ID for virtio_scsi 
Device IDs found here:
https://devicehunt.com/view/type/pci/vendor/1AF4/device/1048
 2023-04-18 18:05:53 +00:00
Artturin eac28f38d6 treewide: fix lints 
Arg to lib.optional is a list

build time tool in buildInputs

*Flags not a list

https://github.com/nix-community/nixpkgs-lint
 2023-04-18 20:20:56 +03:00
Maurice Zhou bcccfee659 tmux: add note for tmux-direct in module option 
Signed-off-by: Maurice Zhou <yuchen@apvc.uk>
 2023-04-18 18:21:15 +02:00
Weijia Wang 8eb15c5320 systemd.services.prlshprint: fix type 2023-04-18 18:55:47 +03:00
Domen Kožar 31a3e311da
Merge pull request #226831 from domenkozar/cachix-watch-store-restarts 
cachix-watch-store: restart indefinitely
 2023-04-18 16:26:25 +01:00
Sandro 4f6b51d99c
Merge pull request #224212 from Guekka/monica 
monica: init at 4.0.0 & nixos-module
 2023-04-18 16:58:42 +02:00
Sandro ed7dd78b3f
Merge pull request #225274 from tie/nixos-pufferpanel 
nixos/pufferpanel: init
 2023-04-18 16:57:14 +02:00
Domen Kožar 1d85cfbd77 cachix-watch-store: restart indefinitely 2023-04-18 10:58:33 +01:00
Linus Heckemann b14aded48a
Merge pull request #222617 from oddlama/esphome 
nixos/esphome: init module
 2023-04-18 06:45:40 +02:00
Will Fancher 3cb9534df6 systemd-initrd: Flush networkd 2023-04-17 16:41:36 -04:00
Will Fancher 8598234651 systemd-initrd: dbus 2023-04-17 16:41:36 -04:00
Will Fancher 834ec135ce systemd-initrd: OpenVPN 2023-04-17 16:41:35 -04:00
Will Fancher 0698a1cf04 systemd-initrd: sshd 2023-04-17 16:41:35 -04:00
Will Fancher 748f1329fc systemd-initrd: Automatically configure networking.interfaces 2023-04-17 16:41:35 -04:00
Will Fancher dd392d7c76 systemd-initrd: networkd 2023-04-17 16:41:34 -04:00
tyxieblub efde50d9f5 nixos/plausible: add package option 2023-04-17 21:20:03 +02:00
imlonghao bc07f0ac31
borgmatic: fix timer wantedBy 2023-04-17 23:10:23 +08:00
Alex Auvolat a727a3d676 nixos/wgautomesh: init at 0.1.0 2023-04-17 12:37:18 +02:00
Weijia Wang 4c3edba856
Merge pull request #225750 from r-ryantm/auto-update/rtsp-simple-server 
rtsp-simple-server: 0.21.6 -> 0.22.0
 2023-04-17 10:28:44 +03:00
Sandro d85555f9ac
Merge pull request #224996 from SuperSandro2000/smokeping-ln-f 2023-04-16 23:05:25 +02:00
lewo ff24a05847
Merge pull request #206445 from nlewo/ssytemd-boot-fail 
systemd-boot-builder only ignores OSError "invalid argument"
 2023-04-16 22:17:28 +02:00
Guillaume Girol 40bbc9ae53
Merge pull request #225285 from symphorien/ihm-remove 
python3.pkgs.ihatemoney: remove
 2023-04-16 19:23:00 +00:00
Guillaume Girol 3cc8b4477e python3.pkgs.ihatemoney: remove 
sqlalchemy and flask releases break ihatemoney faster than upstream
updates, so the maintenance burden increases over time.
 2023-04-16 16:04:35 +02:00
Ivan Trubach 4bbe09068a nixos/pufferpanel: init 2023-04-16 15:41:24 +03:00
Atemu 445ef28548
Merge pull request #225748 from Atemu/buildFHSEnvBubblewrap-by-default 
buildFHSEnv: use bubblewrap by default
 2023-04-16 13:03:36 +02:00
Edgar B 33a7f368b4 nixos/monica: init 2023-04-16 11:24:00 +02:00
Atemu f63a12f296 tree-wide: buildFHSUserEnv -> buildFHSEnv 2023-04-16 10:15:13 +02:00
Sandro 893f073fe1
Merge pull request #224171 from alan-strohm/master 
nixos/proxmox-image: don't assume virtio0 is using local-lvm storage
 2023-04-16 03:30:46 +02:00
Ryan Lahfa 14577497e1
Merge pull request #223214 from Izorkin/update-zsh-hostname 
nixos/zsh: allow fqdn hostname output
 2023-04-15 22:23:31 +02:00
Ryan Lahfa b914dffe7e
Merge pull request #224494 from LeSuisse/roundcube-php81 
nixos/roundcube: use PHP 8.1
 2023-04-15 22:12:31 +02:00
Ryan Lahfa 096ad89a8c
Merge pull request #222826 from Peter015/patch-1 
regreet: run through dbus
 2023-04-15 22:02:19 +02:00
John Ericson 0794f40589
Merge pull request #226288 from Luflosi/kubo-better-api-access 
nixos/kubo: improve API access
 2023-04-15 15:07:01 -04:00
happysalada 0cdd78126c qdrant: module increase limitnofile 2023-04-15 13:45:38 -04:00
Nick Cao 7a2fcddf52
Merge pull request #223730 from zendo/clash-verge-module 
nixos/clash-verge: init module
 2023-04-15 22:00:55 +08:00
Luflosi f2be3ae30d
nixos/kubo: restrict access to the API to users in a group by default 2023-04-15 15:25:20 +02:00
Luflosi 7ceebbb35b
nixos/kubo: allow multiple API and Gateway addresses 
The daemon allows specifying an array of multiaddrs for Addresses.API and Addresses.Gateway, so the NixOS module should allow that as well.
 2023-04-15 15:25:06 +02:00
Luflosi 929a00bd84
nixos/kubo: give normal users access to the daemon by default 
Fixes https://github.com/NixOS/nixpkgs/issues/223289.

This doesn't reduce the security in any way since it was already possible for normal users to do what I do here and create such a fake repo for themselves and set their $IPFS_PATH variable to it. It was and still is also possible to just use the --api CLI option.
This change just removes the manual setup that would otherwise be required.

We wouldn't need this workaround if https://github.com/ipfs/kubo/pull/9366 was merged but the fix seems to have been ignored upstream. Patching it ourselves seems like a bad idea since the patch has security implications.
 2023-04-15 15:24:58 +02:00
Janne Heß ee0bfeddf7
Merge pull request #226010 from helsinki-systems/drop/deprecated-ssh-files 
nixos/openssh: Drop deprecated locations
 2023-04-15 11:41:16 +02:00
adisbladis 4ab1021a1b
Merge pull request #213036 from SuperSandro2000/cri-o/update_storagedrivers 
nixos/cri-o: add aufs, devmapper, and zfs to storageDrivers
 2023-04-15 16:27:50 +12:00
Eric Lesiuta acfed64224 nixos/picosnitch: init 2023-04-14 22:09:48 -04:00
Calum MacRae 7d03f1aa9f
nixos/cri-o: add aufs, devmapper, and zfs to storageDrivers 
Update the storageDrivers option to align with the supported drivers, as listed here:
https://github.com/containers/storage/blob/master/docs/containers-storage.conf.5.md#storage-table
 2023-04-15 01:15:46 +02:00
Moritz 'e1mo' Fromm cc55cd6ab7
nixos/dokuwiki: Mark last descriptions as md 2023-04-14 18:12:48 +02:00
Moritz 'e1mo' Fromm e78f08fa21
nixos/dokuwiki: Finally remove extraConfig 
After the introduction of structured settings in #208299 the old
string-style options  / types which were kept for compatibility are now
removed in preparation for the 23.05 release.
 2023-04-14 18:12:42 +02:00
Sandro 1c5ca89f42
nixos/lorri: install direnv 
direnv is required to allow files to be run by lorri, so it should be installed, too.
 2023-04-14 15:19:34 +02:00
Aidan Gauland 0135b7a556 nixos/peroxide: correct option doc 
Correct the description for the option services.peroxide.enable.
 2023-04-14 14:47:55 +02:00
Jon Seager 0dfc5c14d7
nixos/multipass: don't start until online 2023-04-14 11:27:57 +01:00
Sandro f9e70759cd
Merge pull request #213816 from karmanyaahm/karmanyaahm/nixos/kubo 2023-04-14 00:48:37 +02:00
Janne Heß 98c3d190b2
nixos/openssh: Drop deprecated locations 
The changelog entry should give a good indication why I don't think this
is necessary anymore.
 2023-04-13 20:31:18 +02:00
ajs124 6fc4e722c4 nixos/prometheus-smartctl-exporter: fix evaluation after adding cfg.extraFlags 
was done in 3c61665b7f but does not evaluate
error: value is a string with context while a list was expected
 2023-04-13 17:32:50 +02:00
Florian Klink 4496a91077
Merge pull request #225973 from IndeedNotJames/grafana-agent 
grafana-agent: 0.30.2 -> 0.32.1, remove obsolete test fix; nixos/grafana-agent: use `lib.getExe`
 2023-04-13 17:29:48 +02:00
Jonas Heinrich 86a685ceb1 nixos/maddy: Add option ensureCredentials 2023-04-13 09:36:54 -04:00
IndeedNotJames 845a6e9784
nixos/grafana-agent: use lib.getExe as binary names changed between updates 
and `lib.getExe` allows a safe handling and potential backport of this.
But for that to work it would require 22.11 to set `pkgs.grafana-agent.meta.mainProgram = "agent"`

Relevant upstream release: https://github.com/grafana/agent/releases/tag/v0.31.0
 2023-04-13 10:43:02 +02:00
Karmanyaah Malhotra 6086d85777 nixos/kubo: documentation suggestions 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2023-04-13 03:14:59 -05:00
Karmanyaah Malhotra 4bd622cd9d nixos/kubo: unmount on service stop 
When kubo is force killed with `pkill -KILL ipfs` or by systemd-oomd,
it doesn't unmount /ipfs and /ipns. That prevents it
from starting up the next time. So, unmount on postStop.
 2023-04-13 03:14:59 -05:00
Martin Weinelt f0e4bd26bd
Merge pull request #225943 from jakubgs/smartctl-exporter/fix-extra-flags 
nixos/prometheus-smartctl-exporter: support extraFlags
 2023-04-13 07:37:28 +02:00
Jakub Sokołowski 3c61665b7f
nixos/prometheus-smartctl-exporter: support extraFlags 
Seems to be ignored currently. Useful for `-verbose` flag.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
 2023-04-12 23:56:32 +02:00
Johan Thomsen 0b57240111 nixos/kubernetes: kubelet --container-runtime flag has been removed 2023-04-13 07:21:56 +10:00
Martin Weinelt 130be87c8d
Merge pull request #224549 from mweinelt/go-neb-unit-permissions 
nixos/go-neb: Replace PermissionsStartOnly with executable prefix
 2023-04-12 22:59:41 +02:00
Sandro Jäckel fdbd0834b2
nixos/smokeping: use ln with -f 2023-04-12 22:47:21 +02:00
Sandro 603320b64f
Merge pull request #204534 from SuperSandro2000/boot-tmp 2023-04-12 21:37:47 +02:00
Sandro 6152b09a6a
Merge pull request #225005 from erictapen/mastodon-sidekiq 2023-04-12 21:31:50 +02:00
Will Fancher e70b42bf61 systemd-initrd: Add users and groups with static IDs. 2023-04-12 13:55:50 -04:00
Bobby Rong d550ee0d43
Merge pull request #206173 from bobby285271/pantheon 
pantheon.elementary-tasks: 6.3.0 -> 6.3.1
 2023-04-12 22:14:27 +08:00
Bobby Rong aacdc51e15
pantheon.elementary-tasks: 6.3.0 -> 6.3.1 
https://github.com/elementary/tasks/releases/tag/6.3.1
 2023-04-12 21:40:00 +08:00
Vladimír Čunát 2a3291834f
Merge #224806: staging-next 2023-04-05 2023-04-12 13:18:37 +02:00
Doron Behar 504849a7bb rtsp-simple-server: rebrand as mediamtx 2023-04-12 12:23:44 +03:00
Javed Mohamed 3ecc7b1484 nixos/gpsd: add multiple-device support for gpsd 2023-04-12 10:15:47 +02:00
github-actions[bot] 47157337bf
Merge master into staging-next 2023-04-12 00:02:18 +00:00
Sandro Jäckel 3c76624c70
nixos/fzf: add ohMyZsh integration 2023-04-12 00:46:19 +02:00
Martin Weinelt 7a5a2fa8a4
Merge pull request #225785 from helsinki-systems/warn-dhcpd-eol 
nixos/dhcpd: warn of pending removal
 2023-04-12 00:08:42 +02:00
ajs124 e3702c0788 nixos/dhcpd: warn of pending removal 2023-04-11 23:47:40 +02:00
Will Fancher 762b69f2ff systemd-initrd: Fix up root directory mode 2023-04-11 15:20:47 -04:00
Will Fancher fef26d88e2 systemd-initrd: Support secrets when boot loader doesn't 
initrd-secrets: Fix service config with systemd-stage-1
 2023-04-11 15:20:47 -04:00
Will Fancher 71983a6eb5 systemd-initrd: Don't use SYSTEMD_SULOGIN_FORCE 2023-04-11 15:20:47 -04:00
0x4A6F 3196b965ed
Merge pull request #224072 from helsinki-systems/fix/borg-compact 
nixos/borgbackup: run compact after prune
 2023-04-11 21:14:39 +02:00
Jörg Thalheim 89103b63d2
Merge pull request #225195 from Mic92/buildbot 
buildbot: move out of python3.pkgs
 2023-04-11 19:49:24 +01:00
github-actions[bot] 4e2c1815ed
Merge master into staging-next 2023-04-11 18:01:18 +00:00
ajs124 d37ee8222b nixos/borgbackup: run compact after prune 2023-04-11 19:48:16 +02:00
0x4A6F 1ee33cc078
Merge pull request #224460 from helsinki-systems/drop/gitit-mod 
nixos/gitit: remove
 2023-04-11 19:23:59 +02:00
github-actions[bot] 3c070a08ff
Merge master into staging-next 2023-04-11 12:01:14 +00:00
Michael Raitza 9f0e1b6047 modules.openafsServer: Add FABS backup server 2023-04-11 08:30:56 -03:00
Jörg Thalheim 90b750456e buildbot: move out of python3.pkgs 
By moving it out we can start apply overrides to python dependendencies
starting with sqlalchemy.

This fixes the build with the current version.
 2023-04-11 12:38:58 +02:00
ajs124 f7245e9e4e
Merge pull request #224859 from Yarny0/tsm-client 
tsm-client: use `libxcrypt-legacy`, drop `openssl_1_1`, use `concatLines` in module
 2023-04-11 11:17:29 +02:00
github-actions[bot] bcca7c70b6
Merge master into staging-next 2023-04-11 00:02:15 +00:00
Sandro fd04c0caf0
Merge pull request #221380 from Majiir/ddclient-fix-permissions 2023-04-11 01:31:53 +02:00
Infinidoge ff4a5234da nixos/minipro: add to module list 2023-04-10 14:54:59 -04:00
github-actions[bot] ace14e0119
Merge master into staging-next 2023-04-10 18:01:11 +00:00
Martin Weinelt 19fa5ab1e6
nixos/hardware/ipu6: Improve the enable description 
The module is doing much more than just enabling the ipu6 kernel
module, so extending the enable options scope to support for these
camera modules seems a better fit.
 2023-04-10 18:43:21 +02:00
github-actions[bot] 39f71c03bf
Merge master into staging-next 2023-04-10 06:01:13 +00:00
K900 e41c8ea86d
Merge pull request #225325 from K900/no-mesa-multiversioning 
Revert "nixos/opengl: add mesaPackage option"
 2023-04-10 08:47:22 +03:00
github-actions[bot] 2ea027a913
Merge master into staging-next 2023-04-10 00:02:09 +00:00
Maciej Krüger e663a3a17a
Merge pull request #223645 from nbraud/auto-cpufreq 2023-04-09 23:11:54 +02:00
nicoo 04b1a3f847 nixos/auto-cpufreq: Avoid touching /etc 2023-04-09 19:15:49 +00:00
github-actions[bot] 20d94e414f
Merge master into staging-next 2023-04-09 12:01:09 +00:00
K900 c29ccca1a3
Merge pull request #222923 from oddlama/fix-nginx-duplicate-mime 
nixos/nginx: fix warning about duplicate mime entry
 2023-04-09 14:58:39 +03:00
Kerstin Humm 431ccf26e4
nixos/mastodon: add assertion for only allowing one sidekiq scheduler queue 2023-04-09 13:24:43 +02:00
Ryan Hendrickson 43e6f67f75 nixos/snapper: support more options 2023-04-09 02:28:16 -04:00
github-actions[bot] fc0616b73d
Merge master into staging-next 2023-04-09 06:01:16 +00:00
Martin Weinelt cf724150b0
Merge pull request #225292 from betaboon/ipu6-hardware-module 
Ipu6 hardware module
 2023-04-09 02:15:40 +02:00
github-actions[bot] 97afa6ec9b
Merge master into staging-next 2023-04-09 00:02:38 +00:00
betaboon e4e00d22bf nixos/hardware/ipu6: init 2023-04-09 00:41:45 +02:00
betaboon dd33a7a9b9 nixos/v4l2-relayd: init 2023-04-09 00:41:45 +02:00
Robert Hensing 7de60eae37
Merge pull request #225315 from roberth/nixos-systemd-resolved-discoverable 
nixos: Make services.resolved discoverable via "systemd-resolved" search
 2023-04-08 21:52:19 +02:00
K900 727f9f0fbd Revert "nixos/opengl: add mesaPackage option" 
This reverts commit bf1785d0a9.
 2023-04-08 21:45:46 +03:00
Bjørn Forsman 54731a8cea nixos/installer: update getty help message 
I think this is clearer.
 2023-04-08 20:18:28 +02:00
Bjørn Forsman bc3272f51e nixos/installation-device.nix: improve comment about ssh login 
root is not the only user that can login (user "nixos" can too), so
generalize the wording.
 2023-04-08 20:16:16 +02:00
github-actions[bot] 8ae069b888
Merge master into staging-next 2023-04-08 12:01:05 +00:00
Infinidoge cc46277bf5 nixos/minipro: init 
Minipro requires a set of udev rules to be installed to work properly.
This module installs the package and the udev rules.
 2023-04-07 22:32:02 -04:00
github-actions[bot] 1ad73cb589
Merge master into staging-next 2023-04-07 18:01:06 +00:00
Mihai Fufezan c816bd50aa
nixos/hyprland: init (#221730) 
* nixos/hyprland: init


---------

Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
 2023-04-07 14:43:01 +01:00
Felix Buehler 327b0cff7a treewide: use more lib.optionalString 2023-04-07 13:38:33 +02:00
github-actions[bot] 06a0a17fc7
Merge master into staging-next 2023-04-07 06:01:28 +00:00
mrobbetts 3c1c5600e8
bind: replace hard-coded allow-query zone setting with a real zone parameter. (#224776) 2023-04-07 06:55:09 +02:00
Geraint Ballinger 8b2521bdae
nixos/darwin-builder: add disk space options (#224480) 2023-04-07 05:10:49 +02:00
Robert Hensing bcd2d49d85 nixos: Make services.resolved discoverable via "systemd-resolved" search 
This query yielded no results on search.nixos.org.
I don't think I can make all options magically appear, but you can
the other options by reading the text.
 2023-04-07 01:09:05 +02:00
github-actions[bot] 638ad26bf6
Merge master into staging-next 2023-04-06 16:11:06 +00:00
Robert Schütz 2b81862da7
Merge pull request #224908 from SuperSandro2000/home-assistant-drv 
nixos/home-assistant: fix infinite recursion when derivations are used in config
 2023-04-06 07:56:47 -07:00
Viv Lim c778f4d225 nixos/mastodon: Allow configuring sidekiq processes 
This change allows the number of sidekiq processes and which job classes
they handle to be configured.

An instance admin may choose to have separate sidekiq processes handling
jobs related to local users (`default` job class) and jobs related to
federation (`push`, `pull`, `ingress`), so that as the instance grows
and takes on more federation traffic, the local users' experience is not
as impacted.

For more details, see https://docs.joinmastodon.org/admin/scaling/#sidekiq

This pr also includes the following changes suggested in review:

- adds syslog identifiers for mastodon services
- moves working directory config to common cfgService
- adds mastodon.target
 2023-04-06 16:30:16 +02:00
Martin Weinelt 9de84cd029
Merge pull request #224882 from NixOS/home-assistant 
home-assistant: 2023.3.6 -> 2023.4.0
 2023-04-06 16:05:07 +02:00
github-actions[bot] 707b1367f3
Merge master into staging-next 2023-04-06 12:01:12 +00:00
Martin Weinelt e89108897d
nixos/home-assistant: Allow serial access for otbr 2023-04-06 13:43:55 +02:00
Vladimír Čunát 6afd316cbc
Merge branch 'master' into staging-next 2023-04-06 11:54:07 +02:00
Vladimir Serov 0ff543e311
nixos/garage: fix links to config reference 2023-04-06 13:40:38 +04:00
Peter Zimmermann 9a63b0df9f
Change the regreet default command to run through dbus-run-session for faster startup time 
Make dbus command explicit
 2023-04-06 04:13:09 -04:00
alyaeanyx bd573376ad nixos/wstunnel: init 2023-04-06 09:51:30 +02:00
github-actions[bot] 6e7ab02752
Merge master into staging-next 2023-04-06 06:01:26 +00:00
Franz Pletz 0e950a1ec7
Merge pull request #223085 from Izorkin/update-nginx-proxy-cache 
nixos/nginx: enable multiple proxyCachePath support
 2023-04-06 02:52:44 +02:00
github-actions[bot] be07e18261
Merge master into staging-next 2023-04-06 00:02:09 +00:00
Sandro Jäckel 94b402045d
nixos/home-assistant: fix infinite recursion when derivations are used in config 2023-04-06 01:26:24 +02:00
KFears 51fdf00ecb nixos/grafana: fix assertions leaking into YAML 
This commit deletes the assertions that were added in 4ec456b. Those
assertions weren't even working to begin with, and they also cause
assertions leak into the generated YAML.
 2023-04-06 02:35:23 +04:00
Florian Klink aa158ed243
Merge pull request #219496 from f2k1de/smokeping-css-js-fix 
smokeping: fix css and js symlink
 2023-04-05 21:56:33 +02:00
Florian Klink ea7dd83b0d
Merge pull request #224833 from flokli/smokeping-config 
nixos/smokeping: use /etc/smokeping.conf
 2023-04-05 21:54:57 +02:00
github-actions[bot] 136b8f41e4
Merge master into staging-next 2023-04-05 18:01:36 +00:00
Yarny0 ad2b70061f nixos/tsm-client: use lib.concatLines 2023-04-05 19:32:52 +02:00
oddlama 8df62ec46c
nixos/esphome: init module 2023-04-05 17:35:58 +02:00
Florian Klink 9de75c8bbe nixos/smokeping: use /etc/smokeping.conf 
This allows other services to refer to the generated smokeping config,
which is e.g. necessary to run smokeping with nginx as frontend, rather
than thttpd.
 2023-04-05 16:51:26 +02:00
Ryan Lahfa a6bc6ed645
Merge pull request #206983 from minijackson/netbox-3.4.1 
netbox: 3.3.9 -> 3.4.7, netbox_3_3: init at 3.3.10, RFC42-style options, more tests
 2023-04-05 14:04:27 +02:00
github-actions[bot] ae5b53747b
Merge master into staging-next 2023-04-05 12:01:10 +00:00
Nick Cao 2d2abaa467
Merge pull request #224042 from linyinfeng/rime-data-refactor 
{ibus,fcitx5}-rime: Refactor RIME data support
 2023-04-05 16:16:18 +08:00
Jörg Thalheim 87083d40c0
Merge pull request #221856 from Mic92/dendrite 
dendrite: 0.11.0 -> 0.12.0
 2023-04-05 08:36:44 +01:00
github-actions[bot] 80f198ff3a
Merge staging-next into staging 2023-04-05 06:01:50 +00:00
Yureka 53c20eae38
Revert "bind: remove hard-coded allow-query config setting" 2023-04-04 23:35:11 +02:00
github-actions[bot] 5e498b046d
Merge staging-next into staging 2023-04-04 12:01:50 +00:00
Martin Weinelt ca051755d9
Merge pull request #224495 from Mic92/mediawiki-postgres 
mediawiki: add support for postgresql
 2023-04-04 12:21:06 +02:00
Minijackson 78eb4d64e7 netbox_3_3: init 
reintroduce previous version, use in NixOS module if stateVersion < 23.05
 2023-04-04 11:45:31 +02:00
Minijackson 36a550c6f9 nixos/netbox: RFC42-style options 
- allows specifying allowed hosts
- setup sane default for logging
 2023-04-04 11:45:29 +02:00
Antoine Eiche 2638fb722e systemd-boot-builder only ignores OSError "invalid argument" 
In order to fix
https://github.com/NixOS/nixpkgs/issues/114552 (profile name with
special characters), all OSError have been ignored while only the OSError
with errno 22 (invalid argument) could has been ignored.

The drawback of ignoring all OSError is that the "No space left on
device" error is also ignored. When the /boot doesn't have enough
available disk space, the switch-to-configuration script succeeds
while the boot menu has not been updated: the user thinks it's system
has been updated, but on the next reboot it is actually rollbacked.
 2023-04-04 09:16:41 +02:00
github-actions[bot] 0c95c3ea6b
Merge staging-next into staging 2023-04-04 06:01:40 +00:00
Jörg Thalheim d9c613d746 mediawiki: add support for postgresql 2023-04-04 07:50:04 +02:00
Martin Weinelt 34464d6044
nixos/go-neb: Replace PermissionsStartOnly with executable prefix 
This should work as a drop-in replacement and satisfy #53852.
 2023-04-04 01:01:49 +02:00
Thomas Gerbet 188573bf93 nixos/roundcube: use PHP 8.1 
Roundcube has announced support of PHP 8.1 in the 1.6.0

https://github.com/roundcube/roundcubemail/releases/tag/1.6.0
 2023-04-03 18:21:35 +02:00
Thomas Gerbet 2b155e1198 nixos/moodle: use PHP 8.1 
Moodle is compatible with PHP 8.1 since the 4.1.2.

https://moodledev.io/general/development/policies/php
 2023-04-03 18:14:09 +02:00
Kerstin Humm 0b0cc93e79
remove myself (erictapen) from packages which I don't use anymore 2023-04-03 17:07:16 +02:00
ajs124 4f2152215a nixos/gitit: remove 
has not been evaluated (in module-list) since 122d5e497e

Closes #167034
 2023-04-03 13:19:31 +02:00
github-actions[bot] baa80fd5aa
Merge staging-next into staging 2023-04-03 06:02:15 +00:00
7c6f434c 8ce248a734
Merge pull request #218870 from Uthar/lisp2 
lisp-modules: replace with an implementation based on github:uthar/nix-cl
 2023-04-03 06:00:48 +00:00
Bobby Rong 28031f7579
Merge pull request #216737 from FedericoSchonborn/budgie 
Budgie Desktop
 2023-04-03 10:57:32 +08:00
Martin Weinelt 814401390c
Merge pull request #224418 from jtojnar/users-validate-passwords-with-options 
nixos/users-groups: Fix password scheme validation
 2023-04-03 02:28:07 +02:00
Jan Tojnar 5a3eb4f6fe nixos/users-groups: Fix password scheme validation 
0d7cd66652 broke validation for hashes with options
such as those generated with `mkpasswd --method=sha-512 --rounds=1000000`:

    $6$rounds=1000000$xpzZ6Rfg873gZnDY$RxS7lpVnohfDrrKG3lt9UFHED1KoiPGzH7zQv/HzwalZepo/IfFtxw05ap25duEJSKYhC14.Fn9eXszEpWVtF.

This fixes it.
 2023-04-03 02:16:07 +02:00
github-actions[bot] 6da4ad9318
Merge staging-next into staging 2023-04-03 00:03:04 +00:00
0x4A6F 6f62b499cf nixos/atuin: add maxHistoryLength 2023-04-02 18:31:36 -04:00
github-actions[bot] 41454e267b
Merge staging-next into staging 2023-04-02 18:01:35 +00:00
K900 8f172ed10a nixos/grafana-image-renderer: fix setting name 2023-04-02 16:48:36 +03:00
happysalada 5ba4f4293d chatgpt-retrieval-plugin: init module 2023-04-02 09:26:35 -04:00
github-actions[bot] 9d596c3b86
Merge staging-next into staging 2023-04-02 06:01:46 +00:00
Lin Yinfeng e4246ae1e7
{ibus,fcitx5}-rime: Refactor RIME data support 2023-04-02 10:36:36 +08:00
Nick Cao 39a96c9518
Merge pull request #224255 from Kiskae/patch-1 
nixos/nvidia: use correct attribute
 2023-04-02 08:31:52 +08:00
github-actions[bot] 84208ebfd7
Merge staging-next into staging 2023-04-02 00:03:05 +00:00
Sandro ef6206c3ee
Merge pull request #224170 from mvnetbiz/ddclient 2023-04-02 01:29:59 +02:00
Sandro 34c25b025f
Merge pull request #224272 from mattmelling/cloudlog-no-ifd 2023-04-02 00:38:00 +02:00
Sandro 44bdb9ce9f
Merge pull request #223091 from Izorkin/update-nginx-compression 2023-04-02 00:32:47 +02:00
Federico Damián Schonborn 50198ac1f8
nixos/budgie: init 
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
 2023-04-01 18:06:52 -03:00
Sandro b5618fe81b
Merge pull request #215493 from Izorkin/fix-dhcpcd-ipv6rs 2023-04-01 22:58:01 +02:00
Luke Granger-Brown 7c66437cba
Merge pull request #207248 from Izorkin/update-nginx 
nginxQuic: 3be953161026 -> 0af598651e33
 2023-04-01 21:55:05 +01:00
Kiskae 0491659cd0
nixos/nvidia: use correct attribute 2023-04-01 20:24:02 +02:00
github-actions[bot] 75808a4bf6
Merge staging-next into staging 2023-04-01 18:01:35 +00:00
Nick Cao 236d77246c
Merge pull request #223939 from Kiskae/patch-1 
linuxPackages.nvidia_x11_production: 525.89.02 -> 525.105.17
 2023-04-01 21:15:43 +08:00
Kiskae ea126529eb nixos/nvidia: allow package to override IBT support 2023-04-01 14:44:43 +02:00
github-actions[bot] 7f0e9a3d13
Merge staging-next into staging 2023-04-01 12:01:53 +00:00
Izorkin 9fdf7027cc
nixos/zsh: allow fqdn hostname output 2023-04-01 13:56:51 +03:00
Izorkin 427ae14373
nixos/nginx: update description in compression modules 2023-04-01 13:56:26 +03:00
Izorkin 8a289bcc79
nixos/nginx: enable multiple proxyCachePath support 2023-04-01 13:55:56 +03:00
Izorkin 3ab26f9f00
nixos/dhcpcd: add IPv6rs option 2023-04-01 13:52:38 +03:00
Izorkin 77d6fd36cf
nixos/nginx: update quic configuration 2023-04-01 13:09:49 +03:00
Vladimír Čunát 45c671173b
Merge #224143: nixos/qtile: fix manual build 
(the build is OK on unstable/master but not on 22.11)
 2023-04-01 09:30:00 +02:00
github-actions[bot] d86df1eda1
Merge staging-next into staging 2023-04-01 06:01:47 +00:00
Matt Votava ee88bac7be nixos/ddclient: add iproute2 to unit path if using "if" method 2023-03-31 21:54:21 -07:00
Alan Strohm 121fddc901 nixos/proxmox-image: don't assume virtio0 is using local-lvm storage 2023-03-31 18:42:01 -07:00
Sandro eb5d126dcb
Merge pull request #163082 from ettom/zeyple 2023-04-01 02:35:08 +02:00
Lily Foster 858acb7bfc
nixos/qtile: fix manual build 2023-03-31 19:21:31 -04:00
github-actions[bot] ce96000189
Merge staging-next into staging 2023-03-31 06:01:38 +00:00
Silvan Mosberger e58b3b8ce5
Merge pull request #223843 from simplejack-src/nixos_manual_desktop_item 
nixos/documentation: Fix desktopIcon, GenericName/Comment
 2023-03-31 03:19:39 +02:00
github-actions[bot] 47ddbcb1f0
Merge staging-next into staging 2023-03-31 00:03:05 +00:00
David Houston 6e8c2760ac
maintainers: Update houstdav000 -> cyntheticfox 2023-03-30 18:50:29 -04:00
Ilan Joselevich 003c2e3957
Merge pull request #221964 from randomnetcat/sanoid-service-package 
sanoid/syncoid: Add package options
 2023-03-30 23:33:53 +03:00
github-actions[bot] 04fb768a55
Merge staging-next into staging 2023-03-30 18:01:42 +00:00
Benjamin Staffin ff296a777e
Merge pull request #207115 from s1341/init_freeipa 
freeipa: init at 4.10.1
 2023-03-30 13:15:18 -04:00
Ilan Joselevich faf84687ce
Merge pull request #223754 from IndeedNotJames/nixos-loki 
nixos/loki: add `package` option
 2023-03-30 17:43:50 +03:00
K900 3947e917cf
Merge pull request #223760 from K900/nicer-pure-eval-error 
nixos/system: disallow system.copySystemConfiguration in pure eval mode
 2023-03-30 17:00:15 +03:00
IndeedNotJames f8f3eb7a48
nixos/loki: add package option 2023-03-30 14:35:53 +02:00
superherointj a180470959 nixos/k3s: start after network-online 2023-03-30 07:53:38 -03:00
simeplejack-src fe28e8f1e6 nixos/documentation: Fix desktopIcon, GenericName/Comment 2023-03-29 22:23:39 -04:00
Robert Scott 9a6aabc474
Merge pull request #223548 from enc0urage/fix-graphene-hardened 
nixos/malloc: set vm.max_map_count when using graphene-hardened
 2023-03-29 22:32:24 +01:00
Janet Cobb 1033d0f6ac (nixos/sanoid, nixos/syncoid): Add package options 
Allows changing the sanoid package to be used for these services.
 2023-03-29 17:23:51 -04:00
K900 48b2f723f5 nixos/system: disallow system.copySystemConfiguration in pure eval mode 
This is already broken, so let's give it a better error message.
 2023-03-29 17:49:30 +03:00
K900 542012fe24
Merge pull request #222336 from motiejus/master_synapse_signing_key_path 
matrix-synapse: fix signing key path in fix-permissions script
 2023-03-29 16:57:56 +03:00
Maëlys Bras de fer 86f3bba6d2
nixos/cfs-zen-tweaks: fix service name typo 2023-03-29 15:03:50 +02:00
Bernardo Meurer afbc94b2a8
Merge pull request #223661 from filakhtov/resolvconf-disable 2023-03-29 09:39:06 -03:00
Sandro c2ae278eb8
Merge pull request #221851 from Ma27/postgresql-jit-support 
postgresql: implement opt-in JIT support
 2023-03-29 13:29:30 +02:00
zendo 907bd4927b nixos/clash-verge: init module 2023-03-29 19:05:40 +08:00
Maximilian Bosch e2fb651752
nixos/postgresql: fix enableJIT 
Make sure that JIT is actually available when using

    services.postgresql = {
      enable = true;
      enableJIT = true;
      package = pkgs.postgresql_15;
    };

The current behavior is counter-intuitive because the docs state that
`enableJIT = true;` is sufficient even though it wasn't in that case
because the declared package doesn't have the LLVM dependency.

Fixed by using `package.withJIT` if `enableJIT = true;` and
`package.jitSupport` is `false`.

Also updated the postgresql-jit test to test for that case.
 2023-03-29 08:39:47 +02:00
Maximilian Bosch 43dbeae02d
postgresql: pass through JIT-enabled variant of non-JIT postgres and vice versa 
This is useful if your postgresql version is dependant on
`system.stateVersion` and not pinned down manually. Then it's not
necessary to find out which version exactly is in use and define
`package` manually, but just stay with what NixOS provides as default:

    $ nix-instantiate -A postgresql
    /nix/store/82fzmb77mz2b787dgj7mn4a8i4f6l6sn-postgresql-14.7.drv
    $ nix-instantiate -A postgresql_jit
    /nix/store/qsjkb72fcrrfpsszrwbsi9q9wgp39m50-postgresql-14.7.drv
    $ nix-instantiate -A postgresql.withJIT
    /nix/store/qsjkb72fcrrfpsszrwbsi9q9wgp39m50-postgresql-14.7.drv
    $ nix-instantiate -A postgresql.withJIT.withoutJIT
    /nix/store/82fzmb77mz2b787dgj7mn4a8i4f6l6sn-postgresql-14.7.drv

I.e. you can use postgresql with JIT (for complex queries only[1]) like
this:

    services.postgresql = {
      enable = true;
      enableJIT = true;
    };

Performing a new override instead of re-using the `_jit`-variants for
that has the nice property that overlays for the original package apply
to the JIT-enabled variant, i.e.

    with import ./. {
      overlays = [
        (self: super: {
          postgresql = super.postgresql.overrideAttrs (_: { fnord = "snens"; });
        })
      ];
    };
    postgresql.withJIT.fnord

still gives the string `snens` whereas `postgresql_jit` doesn't have the
attribute `fnord` in its derivation.

[1] https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-JIT-ABOVE-COST
 2023-03-29 08:39:46 +02:00
Peter Simons 7942e2e38f
Merge pull request #221108 from mrobbetts/bind_remove_allow_query 
bind: remove hard-coded `allow-query` config setting
 2023-03-29 07:50:47 +02:00
Garry Filakhtov d86e9911cd
nixos/modules/config/resolvconf.nix: skip systemPackages if disabled 
A change made in #166308 added `networking.resolvconf.package` to the
`environment.systemPackages` list, so it is installed as part of the
system image. However it does so unconditionally, meaning that even if
the `config.networking.resolvconf.enable` is set to false the package
listed in the `networking.resolvconf.package` would still be intalled.

This change makes it so the package installation will depend on the
status of the `config.networking.resolvconf.enable` option instead.
 2023-03-29 09:31:09 +11:00
nicoo deab2b3bf7 nixos/auto-cpufreq: Add configuration support. 2023-03-28 22:01:27 +00:00
Sandro fd46812f7e
Merge pull request #222667 from chuangzhu/proxychains-package 2023-03-28 22:19:38 +02:00
Daniel Nagy e1a383102f
nixos/x11: set XKB_CONFIG_ROOT from config 
The motivation is to make overriding `services.xserver.xkbDir` easier.
 2023-03-28 20:00:00 +02:00
Kasper Gałkowski 9a26e2dea9 merge master 2023-03-28 19:43:40 +02:00
Atemu 91f5aa3446
Merge pull request #213378 from Atemu/steam-env-vars 
steam: add extraEnv argument
 2023-03-28 17:25:14 +02:00
enc0urage a76bd96e4b nixos/malloc: set vm.max_map_count when using graphene-hardened 2023-03-28 10:18:20 +00:00
r-vdp 982ea4295b
NixOS/opengl: Use the default Mesa package by default. 
Fixes #223458
Fixes #223331
 2023-03-28 11:06:07 +02:00
Nick Cao ca7c52c4f5
Merge pull request #222762 from Kiskae/nvidia/530.41.03 
linuxPackages.nvidia_x11: 525.89.02 -> 530.41.03
 2023-03-28 08:23:48 +08:00
Ryan Lahfa 6fcf40805a
Merge pull request #223439 from mjlbach/fix/garage 
garage: fix missing stateVersion and default pkg
 2023-03-28 00:26:47 +02:00
Michael Lingelbach e6854e7d3a garage: fix missing stateVersion and default pkg 
* stateVersion was not in scope, added config.system.systemVersion
* garage_0_8_0 -> garage_0_8, the former does not exist
 2023-03-27 13:18:33 -07:00
Ryan Lahfa 16f67c4afc
Merge pull request #223242 from panicgh/nitrokey-libnitrokey 
libnitrokey: init at 3.8
 2023-03-27 22:07:24 +02:00
Ryan Lahfa 482c735228
Merge pull request #223388 from 06kellyjac/authelia-move 
authelia: move module under security and minor fixes
 2023-03-27 21:59:57 +02:00
K900 e74d28259d
Merge pull request #162479 from stuebinm/feature/mattermost-secrets 
nixos/mattermost: add secretFile option for declarative configs (again)
 2023-03-27 21:50:18 +03:00
stuebinm c29ca6704d mattermost: add environmentFile option to allow declarative secrets 
This adds an option `services.mattermost.environmentFile`, intended to be
useful especially when `services.mattermost.mutableConfig` is set to `false`.
Since all mattermost configuration options can also be set by environment
variables, this allows managing secret configuration values in a declarative
manner without placing them in the nix store.
 2023-03-27 20:46:01 +02:00
Jörg Thalheim d9c92360a8 nixos/install-grub: stop using bare file handles for readFile/WriteFile 2023-03-27 19:25:46 +02:00
Jörg Thalheim 5a23a24ba2 nixos/grub-install: don't rely on shell to run commands 
data passed to these programs might be accidentially interpreted as
shell. Discovered in https://github.com/Mic92/envfs/issues/111
 2023-03-27 19:21:55 +02:00
Sandro fc7d893822
Merge pull request #222592 from Luflosi/update/kubo 
kubo: 0.18.1 -> 0.19.0
 2023-03-27 15:24:34 +02:00
Lily Foster 6f07da7277
Merge pull request #220450 from arjan-s/qtile-options 
qtile: add more options to NixOS module and expose unwrapped package
 2023-03-27 07:23:15 -04:00
06kellyjac 9b60eef4bd authelia: move module under security and minor fixes 
Fixed test access to lib
Added nixos test to passthru
 2023-03-27 12:00:07 +01:00
Maximilian Bosch 3351d1bdb2
Merge pull request #223294 from SuperSandro2000/synapse.nix 
nixos/synapse: fix path
 2023-03-27 10:43:25 +02:00
Nicolas Benes 771d39638b nitrokey-udev-rules: replace with libnitrokey 2023-03-27 04:02:13 +02:00
Sandro Jäckel 40c8cebade
nixos/synapse: Fix incorrect module path after it was moved 
Fixes: 22f3d4e4db ("nixos: move matrix services into their category")
 2023-03-27 00:49:38 +02:00
Sandro Jäckel 056be64f11 nixos/podman: add example to enable network dns 2023-03-27 08:42:29 +10:00
Sandro 6f558d3009
Merge pull request #212599 from SuperSandro2000/podman-cleanup 2023-03-27 00:05:30 +02:00
Sandro 97d67f4a5f
Merge pull request #221643 from Tungsten842/wireshark-capabilities 2023-03-26 22:31:40 +02:00
github-actions[bot] 665b0409ad
Merge master into staging-next 2023-03-26 16:02:07 +00:00
Atemu 1f27e0b77a steam: add extraEnv option 2023-03-26 17:19:33 +02:00
Atemu 4731598712 nixos/steam: always apply extraLibraries and make them additive 
Before, setting {option}`programs.steam.package` would result in a steam without
the {option}`hardware.opengl.package`, {option}`hardware.opengl.extraPackages`
etc. You had to manually add them yourself.

Additionally, overlaying `steam = prev.steam.override { extraLibraries = [ ... ]; }`
resulted in those extra libraries not actually being put into the fhsenv because
they'd be fully overridden by the option's default.

Now, the user can supply a custom steam to {option}`programs.steam.package` with
its own list of extraLibraries which will not be overridden and overlays work as
expected too.
 2023-03-26 17:19:33 +02:00
Maximilian Bosch 0680f297f1
Merge pull request #223182 from dotlambda/nextcloud-x-robots-tag 
nixos/nextcloud: set X-Robots-Tag to "noindex, nofollow"
 2023-03-26 15:29:55 +02:00
github-actions[bot] 055dd6c5e5
Merge master into staging-next 2023-03-26 13:21:11 +00:00
K900 52038a5e50
Merge pull request #185528 from alois31/gdk-pixbuf-modules 
nixos/gdk-pixbuf: move GDK_PIXBUF_MODULE_FILE to sessionVariables
 2023-03-26 15:51:52 +03:00
K900 88edefb1b8
Merge pull request #223234 from Atemu/mesa-multi-version 
nixos/opengl: fix wrong function application
 2023-03-26 15:22:42 +03:00
Atemu 1d19eeefee nixos/opengl: fix wrong function application 
No idea how that one slipped through. Thanks for catching @maxeaubrey!
 2023-03-26 14:20:32 +02:00
Vladimír Čunát b544cd986c
Merge branch 'master' into staging-next 2023-03-26 11:38:50 +02:00
K900 22609a5d55
Merge pull request #217883 from Atemu/mesa-multi-version 
mesa_23: init at 23.0.1
 2023-03-26 11:53:44 +03:00
Robert Schütz 15b859cefe nixos/nextcloud: set X-Robots-Tag to "noindex, nofollow" 
Upstream did so in https://github.com/nextcloud/server/pull/36689 and
Nextcloud now complains that

    The "X-Robots-Tag" HTTP header is not set to "noindex, nofollow".
    This is a potential security or privacy risk, as it is recommended
    to adjust this setting accordingly.
 2023-03-25 19:48:13 -07:00
github-actions[bot] 07fb9cae4e
Merge master into staging-next 2023-03-26 00:02:45 +00:00
Atemu d8f58908ce nixos/opengl: mesa_22 -> mesa_23 2023-03-25 21:08:50 +01:00
Atemu 33a700b406 mesa: provide patch versions 
This allows us to bump the mesa attribute (used by many packages, see
https://github.com/NixOS/nixpkgs/issues/218232) independently from the packages
used by NixOS users.
 2023-03-25 21:08:50 +01:00
Atemu bf1785d0a9 nixos/opengl: add mesaPackage option 2023-03-25 21:08:50 +01:00
Lin Jian 4482c70530 nixos/kanata: notify systemd when starting up is finished 
- set service type to notify
- allow unix socket which is needed by systemd notify
 2023-03-25 20:56:48 +01:00
github-actions[bot] 392b3f3dc3
Merge master into staging-next 2023-03-25 18:01:17 +00:00
pennae dce79b3cb1
Merge pull request #221877 from ambroisie/woodpecker-agents 
nixos/woodpecker: refactor to multi-agents setup
 2023-03-25 16:32:55 +01:00
github-actions[bot] 6a3acb9982
Merge master into staging-next 2023-03-25 06:05:24 +00:00
Nick Cao 851cd65a21
Merge pull request #220776 from Vonfry/deprecated/fcitx4 
fcitx: remove version 4
 2023-03-25 10:23:06 +08:00
06kellyjac 6373a3966b nixos/authelia: init module 
Co-authored-by: Martin Weinelt <hexa@darmstadt.ccc.de>
 2023-03-24 21:23:41 -03:00
github-actions[bot] cead7e3e73
Merge master into staging-next 2023-03-25 00:02:20 +00:00
Kevin Mehall fef4baca37
nixos/ssh: Update github.com host key in programs.ssh.knownHostsFiles example 
The `programs.ssh.knownHostsFiles` option documentation uses github.com's host keys as an example. GitHub recently announced that the ssh-rsa key has been compromised and rotated it.

The new key can be checked against
https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/
https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints
 2023-03-24 11:51:46 -07:00
oddlama ba0a1611fc
nixos/nginx: fix warning about duplicate mime entry 2023-03-24 19:44:00 +01:00
github-actions[bot] f2ead7fbda
Merge master into staging-next 2023-03-24 12:01:43 +00:00
Ryan Lahfa a119bfc80d
Merge pull request #211603 from farcaller/fish 
Assert that fish configuration is enabled if any user has fish as their shell
 2023-03-24 12:05:22 +01:00
Kiskae c3ce711249 nixos/nvidia: re-enable IBT for newer drivers 2023-03-24 11:37:35 +01:00
Vladimír Čunát 12dd95fbb1
Merge branch 'master' into staging-next 2023-03-24 09:07:41 +01:00
Will Fancher 5a9b9e620d
Merge pull request #176828 from therishidesai/luks-multi-key-files 
nixos/luksroot: add tryEmptyPassphrase option
 2023-03-24 03:02:20 -04:00
Bruno BELANYI 6048912d8b nixos/woodpecker-*: add myself as maintainer 2023-03-23 21:33:21 +00:00
Bruno BELANYI 67de7d105e nixos/woodpecker-agents: per-agent 'enable' option 2023-03-23 21:33:20 +00:00
Matt Melling 177b6a4bc3
cloudlog: remove import-from-derivation in config 2023-03-23 21:21:57 +00:00
Bruno Bigras 022436c47b nixos/logrotate: fix typo 2023-03-23 16:09:47 -04:00
K900 fae7294cf5
Merge pull request #222689 from K900/bye-dpi-2 
nixos/hidpi: remove harder
 2023-03-23 22:13:06 +03:00
K900 c9a74cf40f nixos/fontconfig: time capsule 2023-03-23 22:03:35 +03:00
Chuang Zhu 46344c77b3 nixos/proxychains: add package option 2023-03-24 02:55:11 +08:00
K900 8454084ffc nixos/hidpi: remove harder 
We can't agree on what the right settings are (see #222236), so let's make the users choose.
 2023-03-23 21:50:45 +03:00
github-actions[bot] 307b719414
Merge master into staging-next 2023-03-23 18:01:20 +00:00
Jan Tojnar 598cf2090c
Merge pull request #218990 from SuperSandro2000/dgraph 
dgraph: use --prefix to prefix PATH
 2023-03-23 16:40:43 +01:00
Ryan Lahfa e774156726
Merge pull request #222269 from SuperSandro2000/gitea-disable-updater 
nixos/gitea: disable updater by default
 2023-03-23 15:23:49 +01:00
Bruno BELANYI cd116db45e nixos/woodpecker-agents: bind network files 
Otherwise the agent might experience trouble with DNS resolution [1].

[1]: https://github.com/woodpecker-ci/plugin-git/issues/65
 2023-03-23 14:16:45 +00:00
Bruno BELANYI eb3bea6359 nixos/woodpecker-agents: simplify 'extraGroups' handling 2023-03-23 14:16:45 +00:00
Bruno BELANYI c3afdb82db nixos/woodpecker-agents: use list for environment files 2023-03-23 14:16:44 +00:00
Sandro Jäckel 20842ac039
nixos/gitea: disable updater by default 2023-03-23 14:46:51 +01:00