Commit graph

25856 commits

Author SHA1 Message Date
Mikaela Allan 21b6bec0ff
nixos/config/swap: improve randomEncrytion
* add sector size parameter to swap randomEncryption
  * add key size parameter to swap randomEncryption
  * allow deviceName to be overridden for encrypted swap
  * create test for swap random encryption
  * update release notes
2023-05-05 13:36:42 -04:00
Jonas Chevalier db8b28dc5d
Update nixos/modules/services/monitoring/netdata.nix
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
2023-05-05 18:41:56 +02:00
Jonas Chevalier 14793fac6c
Update nixos/modules/services/monitoring/netdata.nix
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
2023-05-05 18:41:51 +02:00
aktaboot b3ef821489 nixos/installer: fix util-linux dependencies in install scripts 2023-05-05 18:11:57 +02:00
Ryan Lahfa 275a6e3d8d
Merge pull request #193469 from minijackson/mount-options-stage-1
nixos/stage-1: follow mount options
2023-05-05 17:05:48 +02:00
Ryan Lahfa 1ab4d7d0c3
Merge pull request #228047 from RaitoBezarius/diskless-vm
nixos/qemu-vm: fix diskless VMs
2023-05-05 15:37:11 +02:00
Emily Lange 549bee9851
nixos/grafana-agent: add extraFlags option (#228883) 2023-05-05 15:14:41 +02:00
Jared Baur 67561dcc59
nixos/bootspec: Fix cross for nixos-system systemBuilder
When `nixpkgs.hostPlatform` != `nixpkgs.buildPlatform`, building the
top-level attribute fails since the bootspec portion of the system
builder tries to reference the host platform's `jq`. Change this to
reference the build platform's `jq`.
2023-05-04 20:09:16 -07:00
Sandro Jäckel 1b6078a24a
nixos/no-x-libs: add pipewire 2023-05-04 23:03:06 +02:00
Rene Hollander a70c7aba36 nixos/networkd: Fix typo in usage sectionBridgeVLAN
The `B` in bridge should be capitalized.

It currently leads to an evuluation error: 
```
error: attribute 'sectionbridgeVLAN' missing

       at /nix/store/7wmrwj0sgwg1iivxk43lpkqjhji57mq7-source/nixos/modules/system/boot/networkd.nix:2386:56:

         2385|       example = { VLAN = "10-20"; };
         2386|       type = types.addCheck (types.attrsOf unitOption) check.network.sectionbridgeVLAN;
             |                                                        ^
         2387|       description = lib.mdDoc ''
       Did you mean sectionBridgeVLAN?
```
2023-05-04 16:20:56 +02:00
Martin Weinelt 12a2201d61
Merge pull request #229780 from NixOS/home-assistant
home-assistant: 2023.4.6 -> 2023.5.0
2023-05-04 15:43:40 +02:00
Weijia Wang cddc413c66
Merge pull request #229845 from pitkling/fix/qemu-vm-escape-variable
virtualisation/qemu-vm: fix unescaped bash variable in shell script
2023-05-04 15:47:26 +03:00
mcnesium 36af786eda
fix ambiguous unicode characters 2023-05-04 12:54:56 +02:00
Jörg Thalheim be8e3128b9
Merge pull request #223418 from Mic92/grub
nixos/grub-install: don't rely on shell to run commands
2023-05-04 09:48:41 +01:00
Peter Kling 996db6d059
virtualisation/qemu-vm: escape bash variable in shell script
Fixes #229729
2023-05-04 09:52:49 +02:00
Martin Weinelt 6d934088ea
nixos/home-assistant: update bluetooth components 2023-05-04 07:33:32 +02:00
Sandro Jäckel da15c5054e
nixos/nextcloud-notify_push: add bendDomainToLocalhost 2023-05-03 22:41:23 +02:00
Sandro Jäckel 546d4d4b76
nixos/nextcloud: add configureRedis option 2023-05-03 22:40:41 +02:00
pennae aad25290ee nixos/emacs: restore example markup
these examples were turned into untitle anchors previously because at
the time supporting examples was not deemed necessary or useful. now
that we have them we can restore them though.
2023-05-03 19:58:21 +02:00
Ryan Lahfa da28a7a3d0
Merge pull request #228347 from NixOS/uefi-without-bootloaders
nixos/qemu-vm: make it possible to use UEFI without bootloaders
2023-05-03 17:08:47 +02:00
Michael Livshin 11b851718e system76-scheduler: don't enable unconditionally
Oops :(
2023-05-03 10:34:32 +03:00
Izorkin edb40b3e4f nixos/fail2ban: others small update 2023-05-03 08:45:26 +02:00
Izorkin 544ebba973 nixos/fail2ban: update bantime options 2023-05-03 08:45:26 +02:00
Raito Bezarius 6e8248c8b2 nixos/qemu-vm: make it possible to use UEFI without bootloaders
`useEFIBoot` is somewhat misleading, but we should make it possible to
enable UEFI environment / firmware without buying into a bootloader.

This makes it possible.
2023-05-02 23:20:03 +02:00
Bernardo Meurer b04b3345f1
Merge pull request #195082 from cmm/system76-scheduler 2023-05-02 09:25:05 -07:00
Artturi 2d256ca7c2
Merge pull request #227499 from tollb/w20230421d_use_systemd_hwdb_to_build_udev_hwdb 2023-05-02 19:04:06 +03:00
Robert Hensing c4793e85f1
Merge pull request #229427 from Mic92/hercules-ci-agent
nixos/hercules-ci-agent: increase stack limit
2023-05-02 13:42:42 +02:00
Michael Livshin 549fd53520 system76-scheduler: add config module 2023-05-02 13:43:36 +03:00
Martin Weinelt 826418fc35
Merge pull request #227990 from Mic92/mediawiki-webserver
nixos/mediawiki: make apache2 optional
2023-05-02 12:39:10 +02:00
Jörg Thalheim 301d6bb9c2 nixos/hercules-ci-agent: increase stack limit
see https://github.com/hercules-ci/hercules-ci-agent/pull/451 for context
2023-05-02 09:53:41 +02:00
Jonas Heinrich d932d6929b
Merge pull request #227401 from onny/maddytls2
nixos/maddy: Add tls option
2023-05-02 07:32:56 +02:00
Sandro 7b02d16807
Merge pull request #227973 from tensor5/nixos/nextcloud--fix-notify_push-configuration-parse-error 2023-05-02 01:05:02 +02:00
figsoda ed153ccbfd
Merge pull request #229209 from Misterio77/navidrome-cfg-package
nixos/navidrome: add package option
2023-05-01 18:31:34 -04:00
Gabriel Fontes 1c3c2c8203
nixos/navidrome: add package option 2023-05-01 16:29:17 -03:00
Jörg Thalheim 077e950f7a nixos/mediawiki: also test fcgi socket 2023-05-01 20:51:11 +02:00
Jörg Thalheim d309952a5d nixos/mediawiki: make apache optional 2023-05-01 20:51:11 +02:00
Jonas Heinrich fcf6662fb5
Merge pull request #229159 from Misterio77/refactor-nextcloud-createlocally
nixos/nextcloud: refactor database.createLocally
2023-05-01 20:04:20 +02:00
Jonas Heinrich 616ba4ae5c nixos/maddy: Add tls option 2023-05-01 19:12:26 +02:00
Gabriel Fontes fddf531c6f
nixos/nextcloud: refactor database.createLocally
Fixes https://github.com/NixOS/nixpkgs/issues/228971
2023-05-01 12:20:40 -03:00
Matthieu Coudron 7fe4909bee
services.datadog: remove python2 from systemd service (#228312)
which caused a security warning. seems to work without it so let's ditch it
2023-05-01 16:37:34 +02:00
Nick Cao cb6c1de07d
Merge pull request #229138 from exzombie/fix/fstrim-interval
nixos/fstrim: fix overriding the timer interval
2023-05-01 17:23:36 +08:00
K900 5c95114a2f
Merge pull request #228951 from aacebedo/aacebedo/asusctl_4.6.2
asusctl: 4.5.8 -> 4.6.2
2023-05-01 12:08:37 +03:00
Alexandre Acebedo 576d7d34c4 asusctl: 4.5.8 -> 4.6.2 2023-05-01 11:07:39 +02:00
Weijia Wang b87aa62298
Merge pull request #227936 from wineee/dde
nixos/deepin: init
2023-05-01 08:38:45 +03:00
Kira Bruneau 50200de3f4
Merge pull request #216230 from tcheronneau/master
nixos/{consul-template,vault-agent}: init
2023-04-30 13:53:57 -04:00
gaykitty 3056e9c395 nixos/stargazer: remove with lib 2023-04-30 13:05:34 -03:00
gaykitty d4f3dd4f71 nixos/stargazer: fix route ordering 2023-04-30 13:05:34 -03:00
Jure Varlec 44438e0dcd nixos/fstrim: fix overriding the timer interval
The OnCalendar systemd setting is additive. To clear the setting defined
by the pre-existing unit file, it has to be set first to an empty
string, then to the desired value.
2023-04-30 17:36:49 +02:00
zimbatm 406a6dfa26 cloud-init module: adopt the settings format
This makes it easier to for example set `datasource_list = [ "Vultr" ];`
so that cloud-init doesn't scan trough all of the datasources when you
know on which target the system is going to be deployed.

Previously, one had to copy-paste the default config and adapt it.
2023-04-30 15:08:10 +02:00
zimbatm 4a1fd4afe0 cloud-init module: remove superfluous lib. prefixes 2023-04-30 14:59:16 +02:00
zimbatm de8b1cf647 cloud-init module: format with nixpkgs-fmt 2023-04-30 14:58:29 +02:00
Nick Cao 1acfbbb2e7
Merge pull request #125865 from eliasp/restic-private-tmp
nixos/restic: use private tmp for service unit
2023-04-30 20:37:07 +08:00
Ilan Joselevich a36b310b7a
Merge pull request #228858 from m-bdf/hyprland-xwayland-conditional-default
nixos/hyprland: conditionally enable Xwayland
2023-04-30 13:21:53 +03:00
Maximilian Bosch 5c9977a524
Merge pull request #224891 from KFearsoff/fix-grafana-assertions-in-yaml
nixos/grafana: fix assertions leaking into YAML
2023-04-30 11:39:48 +02:00
Elias Probst 3bd1c64a5b
nixos/restic: use private tmp for service unit
To reduce the danger of accidentally exposing sensitive files processed
by a restic backup to other services/users, enable the `PrivateTmp=`
feature of restic service units, which provides a per service isolation
of `/tmp` and `/var/tmp`.

Co-authored-by: Daniel Nagy <danielnagy@posteo.de>
2023-04-30 10:39:29 +02:00
Sandro Jäckel ce0a2d2b85
nixos/no-x-libs: disable wayland for mpv 2023-04-30 02:23:41 +02:00
Sandro 5d0d352833
Merge pull request #220761 from elesiuta/picosnitch-init 2023-04-30 01:52:10 +02:00
Weijia Wang acb0a2c266
Merge pull request #228225 from LeSuisse/strongswan-5.9.10
strongswan: 5.9.8 -> 5.9.10
2023-04-29 23:08:09 +03:00
Kira Bruneau f81a619c91
Merge pull request #227916 from IndeedNotJames/lldap
lldap: init at 0.4.3; nixos/lldap: init; nixosTests.lldap: init
2023-04-29 15:24:12 -04:00
IndeedNotJames 87ccd1a47b
nixos/lldap: init
Co-authored-by: LongerHV <46924944+LongerHV@users.noreply.github.com>
2023-04-29 21:14:25 +02:00
rewine d55808c2c0
nixos/deepin: init 2023-04-29 22:36:18 +08:00
rewine dba20db482
nixos/deepin/app-services: init 2023-04-29 22:29:02 +08:00
rewine 7a6edd6448
nixos/deepin/dde-api: init 2023-04-29 22:29:01 +08:00
rewine a112e1e8ce
nixos/deepin/dde-daemon: init 2023-04-29 22:29:01 +08:00
Maëlys Bras de fer ce70fd28d6
nixos/hyprland: conditionally enable Xwayland 2023-04-29 06:50:47 +00:00
Maciej Krüger 67283e1d3a
Merge pull request #228721 from cmm/fix/auto-cpufreq
auto-cpufreq: actually run as deamon
2023-04-29 04:42:10 +02:00
Raito Bezarius bc502d0a14 nixos/bootspec: adopt the merged RFC-0125
This removes the feature preview warning, enable by default bootspec,
adds a validation flag to prevent Go to go into build-time closure.

This will break all downstream users of bootspec as those changes are
not backward-compatible.
2023-04-28 18:26:11 -07:00
Kira Bruneau d3ccbe1e55
Merge pull request #228716 from IndeedNotJames/discourse
discourse: 3.1.0.beta2 -> 3.1.0.beta4, discourseAllPlugins: update all
2023-04-28 19:32:16 -04:00
happysalada 2909d9b117 vector: 0.28.1 -> 0.29.1 2023-04-28 18:58:41 -04:00
Michael Livshin ed01157da8 auto-cpufreq: actually run as deamon
The upstream service definition uses the (undocumented) --daemon
option, which causes the process to stay running and not exit
immediately.
2023-04-28 14:36:10 +03:00
Weijia Wang b2ef7956b6
Merge pull request #227560 from jackyliu16/loongnix-commit
lib.platforms.loongarch64: init
2023-04-28 13:21:42 +03:00
IndeedNotJames f88be46556
discourse: 3.1.0.beta2 -> 3.1.0.beta4
https://meta.discourse.org/t/3-1-0-beta4-new-notifications-menu-chat-and-sidebar-improvements-security-fixes-and-more/262044
https://meta.discourse.org/t/3-1-0-beta3-search-optimizations-resizable-chat-drawer-new-api-scopes-and-more/258274
diff: https://github.com/discourse/discourse/compare/v3.1.0.beta2..v3.1.0.beta4
2023-04-28 12:14:58 +02:00
jackyliu16 15e3a50bd3 nixos/binfmt: add loongarch64-linux 2023-04-28 12:11:58 +03:00
Domen Kožar 1f1bc4233e
Merge pull request #228669 from sandydoo/fix/nginx-status-page
nixos/nginx: serve the status page on localhost servers
2023-04-28 10:52:41 +02:00
sandydoo 2086b377cf
nixos/nginx: serve the status page on localhost servers
The status page is inaccessible by default, unless a virtual host is
added with a `server_name` that's not `localhost`.

This commit moves the status page configuration, so that
it's matched before the main server blocks.
2023-04-28 07:20:36 +00:00
Timothy DeHerrera b866d85d5c
nixos(steam): install steam-gamescope
Allows to launch from a tty, in addition to display-manager.
2023-04-27 11:59:25 -06:00
Timothy DeHerrera ca0c899008
nixos(steam): fix when gamescope isn't enabled 2023-04-27 11:59:05 -06:00
Thomas Gerbet 796121dc9b tt-rss: unstable-2022-10-15 -> unstable-2023-04-13, module use PHP 8.1
Upstream Docker images also uses PHP 8.1.

Diff:
https://git.tt-rss.org/fox/tt-rss.git/diff/?id=0578bf802571781a0a7e3debbbec66437a7d28b4&id2=602e8684258062937d7f554ab7889e8e02318c96
2023-04-27 11:46:38 +02:00
zimbatm f4d5a76a81 netdata module: add automatic claim
Allow machines to auto-register themselves by passing the claim token.
2023-04-27 10:30:32 +02:00
Bobby Rong a7eb77e921
Merge pull request #228428 from FedericoSchonborn/budgie-desktop-10.7.2
budgie.budgie-desktop: 10.7.1 -> 10.7.2
2023-04-27 10:30:01 +08:00
Timothy DeHerrera ea924e8ec5
Merge pull request #187507 from nrdxp/gamescope-module
Launch GameScope/Steam session from Display Manager
2023-04-26 19:03:15 -06:00
Federico Damián Schonborn e96baa117a
nixos/budgie: Add Zenity
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-26 20:54:18 -03:00
Colin 855cff92e0 nixos/lemmy: fix documentation links 2023-04-26 18:29:53 -04:00
Robert Hensing 87676d039c
Merge pull request #228133 from name-snrl/fix-nix-in-nixos-generate-config
Use `hostPlatform.system` in `nixos-generate-config`
2023-04-26 23:19:55 +02:00
Jonas Heinrich 8ab44af90f
Merge pull request #226141 from e1mo/dokuwiki-23-05
nixos/dokuwiki: Finally remove extraConfig
2023-04-26 22:23:12 +02:00
name_snrl 1aa8534f3e nixos/nixos-generate-config: use hostPlatform.system instead of calling nix 2023-04-26 23:51:48 +05:00
Bobby Rong d9293111a9
Merge pull request #227526 from FedericoSchonborn/more-budgie
budgie: add plugin support, update default settings
2023-04-26 11:11:24 +08:00
Timothy DeHerrera 449fde8a09
nixos(steam): add gamescope session option 2023-04-25 17:21:32 -06:00
Thomas Gerbet b4e503a783 strongswan: 5.9.8 -> 5.9.10
Fixes CVE-2023-26463: https://www.strongswan.org/blog/2023/03/02/strongswan-vulnerability-%28cve-2023-26463%29.html

Release notes:
https://www.strongswan.org/blog/2023/03/02/strongswan-5.9.10-released.html
https://www.strongswan.org/blog/2023/01/03/strongswan-5.9.9-released.html
2023-04-26 01:08:29 +02:00
r-vdp 4147b878bc
nixos-test-driver: include a timeout for the recv call, do not assume sh == bash 2023-04-26 01:05:53 +02:00
Sophie Tauchert d568766fc7
nixos/traefik: add environmentFiles option 2023-04-25 16:05:28 +02:00
Jean-François Roche 25671114cd
cloud-init: add udhcpc support (#226216)
* cloud-init: 22.4 -> 23.1.1

* cloud-init: add udhcpc support

Cloud-init use as dhcp client, dhclient, which is coming from the unmaintained package, isc-dhcp-client (refer https://www.isc.org/dhcp/) which ended support in 2022. dhclient is deprecated in nixos

Add patch to use `udhcpc` dhcp client coming from busybox instead.

PR based on #226173

refs #215571

upstream PR: https://github.com/canonical/cloud-init/pull/2125
2023-04-25 13:33:29 +02:00
Sandro f152e714e5
Merge pull request #199835 from SuperSandro2000/nodejs-normalisation 2023-04-25 13:10:06 +02:00
Minijackson b25259e021
nixos/stage-1: follow mount options
For fileSystems needed for boot which are bind mounts, busybox tend to
ignore mount options, so we remount right afterwards
2023-04-25 12:47:39 +02:00
Moritz 'e1mo' Fromm 3dc05fbe40 nixos/bird-lg: Add support for traceroute-flags 2023-04-25 12:00:44 +02:00
Sandro Jäckel aad577bd30 nodejs*: normalise names to better fit other packages
Versioned package attributes are usually named like $pname_$version
eg: nodejs-14_x -> nodejs_14
2023-04-25 11:28:17 +02:00
Moritz 'e1mo' Fromm a2e2972ff3 nixos/bird-lg: Add maintainers 2023-04-25 10:41:35 +02:00
Moritz 'e1mo' Fromm b63e0d77b8 nixos/bird-lg: Rework command attribute generation
Prior to this change, arguments were not escaped nor was the possiblity
for arguments to be empty accounted for. This led to a kinda broken
startup script were arguments were "shifted", e.g. leaving allowedIPs
empty in order to use the default would cause `--bird` (the following
arguments key) to be used as the value. This was also observable when
e.g. the navbarBrand had a space in it where only everything until the
first space would show up.

With the new approach, all arguments are consistently escaped and empty
ones left out.

`extraConfig` now supports and prefers lists of strings instead of
lines (still supported but warned). This is due to the fragility with
respect to e.g. forgetting trailing backslashes after each line.
`frontend.{servers,domain}` are unset by default since the frontend
needs (the upstream project itself has no empty defaults here) needs
them to be set. If not set, an error is caused at build-time.

`proxy.birdSocket` has a new default: The projects README[^1] states
`/var/run/bird/bird.ctl` as the current default value. And bird2 on
NixOS does use this path too.

[^1]: https://github.com/xddxdd/bird-lg-go#proxy
2023-04-25 10:41:35 +02:00
gaykitty c251c021fe nixos/stargazer: init 2023-04-24 21:52:19 -03:00
Raito Bezarius be4e7ef905 nixos/qemu-vm: fix diskless VMs
Previously, it was possible to run with a tmpfs / with
`virtualisation.diskImage = null;`, this was likely broken by my changes
in 4b4e4c3ef9.

It is reintroduced by disabling properly the bootloader for now, as it
is complicated to make it work with.
2023-04-25 02:12:26 +02:00
Guillaume Girol 884ac29401
Merge pull request #227782 from everlanes/roundcube_bugfix_postgresql_passwd
nixos/roundcube: fix remote postgresql server
2023-04-24 18:53:21 +00:00
Ryan Lahfa 7812abd3d0
Merge pull request #227881 from NixOS/qemu-vm/mount-host-nix-store
nixos/qemu-vm: introduce `virtualisation.mountHostNixStore` option
2023-04-24 19:39:54 +02:00
Nicola Squartini 3b758d4aab
nixos/nextcloud: fix notify_push configuration parse error
notify_push is unable to parse functions in PHP configuration, so we
avoid loading the `override.config.php` file.
2023-04-24 17:45:44 +02:00
Jörg Thalheim c129c9fac0 nixos/mediawiki: drop $wgEmergencyContact setting 2023-04-24 14:25:00 +02:00
Jörg Thalheim 1d2a96eda3 nixos/mediawiki: move virtualHost to httpd.virtualHost
This is a preparation to also allow nginx as a http server.
2023-04-24 14:24:52 +02:00
Thomas 4e8bde773f
nixos/{consul-template,vault-agent}: init 2023-04-24 06:55:57 +02:00
Nick Cao 3e3d82f42c
Merge pull request #227232 from datafoo/nixos-acme-fix-options-type
nixos/acme: fix options type
2023-04-24 10:01:04 +08:00
Raito Bezarius 0df5257b82 nixos/qemu-vm: introduce virtualisation.mountHostNixStore option
Now that `useBootLoader` produces a full system image, moving disk
images can be slow because they have a full Nix store in them.

It does not make sense to keep the 9p mountpoint to shadow the
/nix/store of the VM.

We disable it if we have `useBootLoader` and introduce an option for
easy overrides.
2023-04-23 23:58:46 +02:00
Sandro 90e2a0670d
Merge pull request #225829 from IndeedNotJames/nixos.consul 2023-04-23 23:50:14 +02:00
Andreas Brinner 9d5dba7170 nixos/roundcube: read only first line of password file
Only read the first line of the password file, if has multiple lines.
Mention that behaviour in options documentation.
2023-04-23 21:05:48 +02:00
Federico Damián Schonborn 3c0f50b28c
nixos/budgie: Add services.xserver.desktopManager.budgie.extraPlugins option
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-23 10:39:37 -03:00
Andreas Brinner 78fb35ce39 nixos/roundcube: extend documentation for passwordFile
The passwordFile must be formatted correctly. Added some information
about how the file content should look like.
2023-04-23 14:05:40 +02:00
Andreas Brinner 279eeae178 nixos/roundcube: fix roundcube-setup start
When using Roundcube with a non local PostgreSQL database wait for
network start before running roundcube-setup.service
Otherwise the database is not reachable and the service fails.
2023-04-23 13:11:28 +02:00
Andreas Brinner 2af4a9bc09 nixos/roundcube: fix PostgreSQL password
Extract PostgreSQL database password for Roundcube from .pgpass file.
The password file is used in two locations:

  1. in the Roundcube config.php
  2. in the systemd setup service that initializes the roundcube
     database

These two services need the password in different formats.

Keep the password file in PostgreSQL standard format and extract the
password for the Roundcube config (see #215986).
2023-04-23 13:11:28 +02:00
Maëlys Bras de fer 520150fa89
nixos/logind: Add key handling options 2023-04-22 14:41:36 +00:00
Will Fancher e56084d2a0 systemd-stage-1: Revert assertions about initrd commands 2023-04-22 10:25:16 -04:00
Martin Weinelt f9391cf538
Merge pull request #227557 from davidkna/patch-4
nixos/gitea: remove extra `"` in prestart
2023-04-22 15:49:55 +02:00
Florian Klink 7ad24e96ea
Merge pull request #226237 from ElvishJerricco/systemd-stage-1-unhide-docs
Systemd stage 1: Unhide docs and round out assertions about unsupported features.
2023-04-22 10:02:23 +02:00
Florian Klink d6eb7caaa1
Merge pull request #227354 from flokli/firefox-web-eid
nixos/firefox: add config option for Web eID support
2023-04-22 09:32:06 +02:00
David Knaack 3856e84b79 nixos/gitea: remove extra " in prestart 2023-04-22 09:12:02 +02:00
Will Fancher 1598338521 systemd-stage-1: Make networkd options shallow 2023-04-21 21:52:38 -04:00
Federico Damián Schonborn 375079d28c
nixos/budgie: Make default backgrounds available in Budgie Control Center
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-21 21:40:13 -03:00
Bruce Toll 0fce0749b5 nixos/udev: Fix hwdb conflict handling; build with systemdb-hwdb
Switch to systemdb-hwdb to build the udev hwdb.bin, as "udevadm hwdb" is
deprecated. This fixes an issue where the order of conflicting keys is
not respected.  The systemd-hwdb command creates a newer format (v3) of
hwdb.bin that respects the ordering of duplicate keys, with later
values replacing earlier occurrences.

A release note is included, as some mappings may be affected.
2023-04-21 19:08:37 -04:00
Will Fancher 5c46e6f4e3 systemd-stage-1: Add assertions for unsupported options. 2023-04-21 13:05:12 -04:00
Will Fancher 8f9416e9e3 systemd-stage-1: Unhide documentation 2023-04-21 13:04:15 -04:00
Florian Klink 6b27ed3229
Merge pull request #169116 from ElvishJerricco/systemd-stage-1-networkd
Systemd stage 1 networkd
2023-04-21 18:40:59 +02:00
bezmuth 51c5aae874 nixos/pixelfed: init module 2023-04-21 17:39:24 +02:00
Jan Tojnar e25dc4a95e nixos/nginx: Fix listen string generation
This regressed in 327b0cff7a breaking nixosTests.php, among other things.
2023-04-21 17:18:45 +02:00
Raito Bezarius 614b83a328 nixos/virtualisation/qemu-vm: remove persistBootDevice option
This option has been introduced in 678eed323f without realizing there was this
PR inflight, unfortunately, it collide with what this PR does and make
it irrelevant.

Therefore, I remove it here.
2023-04-21 13:00:19 +02:00
Raito Bezarius 76c7b656bf nixos/qemu-vm: refactor bootDisk generation using make-disk-image 2023-04-21 13:00:18 +02:00
Maximilian Bosch 636e9f7418
Merge pull request #227235 from Ma27/bump-nextcloud
nextcloud: 25.0.5 -> 25.0.6, 26.0.0 -> 26.0.1, remove nc24
2023-04-21 11:14:29 +02:00
Weijia Wang e2d6255e9e
Merge pull request #226882 from wegank/parallels-guests-final
systemd.services.prlshprint: fix type
2023-04-21 10:37:11 +03:00
Nick Cao 515da5b664
Merge pull request #227243 from misuzu/netbird-update
netbird: 0.14.6 -> 0.16.0
2023-04-21 13:55:29 +08:00
IndeedNotJames 6ad64af778
nixos/consul: use lib.getExe where possible
which allows the use of custom packages, that may not have binaries called `consul` or `consul-alerts` in their `/bin/*` (though arguably pretty unlikely to be ever used)
2023-04-21 03:46:54 +02:00
IndeedNotJames 9c1f292155
nixos/consul: fix package reference in service $PATH 2023-04-21 03:46:54 +02:00
Timothy DeHerrera e30dafc09b
nixos: add module for GameScope 2023-04-20 17:12:21 -06:00
Florian Klink effa05c052 nixos/firefox: add config option for Web eID support
This allows users to set
`programs.firefox.nativeMessagingHosts.euwebid = true` to make the
native companion app available in Firefox.

It's used by the Web eID browser extension
(https://addons.mozilla.org/en/firefox/addon/web-eid-webextension/),
which can be tried out at https://web-eid.eu/ - pressing the
"Authenticate" button there should open a new window.
2023-04-21 00:25:44 +02:00
Tom Hubrecht e41c569429 nixos/authelia: Allow using Unix sockets 2023-04-20 23:53:16 +02:00
Kerstin Humm aff288424f
nixos/mastodon: fixup sidekiq jobClasses assertion
See https://github.com/NixOS/nixpkgs/pull/225005#issuecomment-1516677321
2023-04-20 22:58:34 +02:00
datafoo 066166cf49 nixos/fail2ban: add extraSettings option 2023-04-20 16:57:24 +02:00
Robert Hensing 73d2aeacf5
Merge pull request #206179 from ThinkChaos/refactor/gitea-settings
gitea: new options and settings refactor
2023-04-20 16:53:51 +02:00
Artturi b83db86a9e
Merge pull request #222080 from Stunkymonkey/nixos-optionalString 2023-04-20 16:07:30 +03:00
misuzu d5bb5259e4 nixos/netbird: allow configuring dns 2023-04-20 14:22:19 +03:00
Maximilian Bosch 0abc5bcc7e
nixos/nextcloud: for nc26 it's not necessary anymore to set enableBrokenCiphersForSSE to false 2023-04-20 12:20:52 +02:00
datafoo 2890af5e4b nixos/acme: fix options type
null is a possible default so the type must reflect that.
2023-04-20 11:52:57 +02:00
Maximilian Bosch 430f1dcdbd
nextcloud: remove nextcloud24, 25.0.5 -> 25.0.6, 26.0.0 -> 26.0.1 2023-04-20 11:34:54 +02:00
K900 449e8cd8d1 nixos/plasma5: install kde-inotify-survey 2023-04-20 11:54:06 +03:00
Sandro 84653ac6c7
Merge pull request #226150 from SuperSandro2000/lorri-direnv
nixos/lorri: install direnv
2023-04-20 10:49:23 +02:00
Flakebi 603e89eef9 kanidm: BindMount certificate paths
Bind mount the base dirs of the tls key and chain into the service.

Make sure to bind every directory just once. The test failed on ofborg
when /nix/store and the certificate path in /nix/store/<some path> were
bound.
2023-04-20 02:32:37 +02:00
Artturi 496c532a03
Merge pull request #105694 from laikq/master 2023-04-19 23:38:05 +03:00
Luke Granger-Brown 9ae46a7cf4
Merge pull request #123357 from R-VdP/virtio_scsi_vendor
nixos/nixos-generate-config: include new device ID for virtio_scsi
2023-04-19 18:51:05 +01:00
datafoo 3403ee0602 nixos/fail2ban: add bantime option 2023-04-19 19:18:31 +02:00
ThinkChaos 70cf02924e
nixos/gitea: convert more simple settings to freeform
Also update `settings.server.PROTOCOL` to use non deprecated values.
2023-04-19 12:18:47 -04:00
ThinkChaos 2901c2f94e
nixos/gitea: quote paths in preStart script 2023-04-19 12:18:47 -04:00
ThinkChaos eba0db3c1c
nixos/gitea: add customDir option
Use case is storing secrets in a non persistent directory as I manage
them separately from this module.
2023-04-19 12:18:47 -04:00
ThinkChaos f7b9a1c561
nixos/gitea: disable LFS related code when it is not configured 2023-04-19 12:18:47 -04:00
ThinkChaos 184131f50d
nixos/gitea: make service group configurable 2023-04-19 12:18:46 -04:00
ThinkChaos f8d5d6cd02
nixos/gitea: disable createDatabase assert when using sqlite
Assert doesn't make sense in that case since `database.user` isn't used.
2023-04-19 12:18:46 -04:00
Ryan Lahfa 645bc49f34
Merge pull request #225981 from jnsgruk/multipass-wait-online
multipass: don't start until online
2023-04-19 18:04:47 +02:00
Ryan Lahfa 8ef336e870
Merge pull request #224491 from LeSuisse/moodle-php-81
nixos/moodle: use PHP 8.1
2023-04-19 08:35:32 +02:00
Ryan Lahfa 2fa5e844de
Merge pull request #223749 from Alexis211/add-wgautomesh
wgautomesh: init at 0.1.0
2023-04-19 08:26:09 +02:00
laikq 376e02c721 nixos/cupsd: add udev rules of driver packages 2023-04-19 03:38:02 +03:00
Sandro 349ec9c376
Merge pull request #226689 from tyxieblub/plausible 2023-04-19 01:26:22 +02:00
Sandro ce4159b4cd
Merge pull request #226514 from AtaraxiaSjel/update/ivpn 2023-04-19 00:57:19 +02:00
linsui 7b6d5d4158
nixos/neovim: add runtime file to etc/xdg/nvim (#221832)
Else the files in the runtime can't be accessed from the vimrc. I also remove the /etc. I thought it's a leftover of the old runtime implementation which is replaced in 307b125.

Co-authored-by: linsui <linsui555@gmail.com>
2023-04-18 23:20:54 +02:00
Dmitriy Kholkin 706060e47d
nixos/ivpn: init 2023-04-18 22:11:10 +03:00
Artturi 9a1f5d4248
Merge pull request #226889 from Artturin/fixlints2 2023-04-18 21:52:21 +03:00
R-VdP 3078cdb780 nixos/nixos-generate-config: include new device ID for virtio_scsi
Device IDs found here:
https://devicehunt.com/view/type/pci/vendor/1AF4/device/1048
2023-04-18 18:05:53 +00:00
Artturin eac28f38d6 treewide: fix lints
Arg to lib.optional is a list

build time tool in buildInputs

*Flags not a list

https://github.com/nix-community/nixpkgs-lint
2023-04-18 20:20:56 +03:00
Maurice Zhou bcccfee659 tmux: add note for tmux-direct in module option
Signed-off-by: Maurice Zhou <yuchen@apvc.uk>
2023-04-18 18:21:15 +02:00
Weijia Wang 8eb15c5320 systemd.services.prlshprint: fix type 2023-04-18 18:55:47 +03:00
Domen Kožar 31a3e311da
Merge pull request #226831 from domenkozar/cachix-watch-store-restarts
cachix-watch-store: restart indefinitely
2023-04-18 16:26:25 +01:00
Sandro 4f6b51d99c
Merge pull request #224212 from Guekka/monica
monica: init at 4.0.0 & nixos-module
2023-04-18 16:58:42 +02:00
Sandro ed7dd78b3f
Merge pull request #225274 from tie/nixos-pufferpanel
nixos/pufferpanel: init
2023-04-18 16:57:14 +02:00
Domen Kožar 1d85cfbd77 cachix-watch-store: restart indefinitely 2023-04-18 10:58:33 +01:00
Linus Heckemann b14aded48a
Merge pull request #222617 from oddlama/esphome
nixos/esphome: init module
2023-04-18 06:45:40 +02:00
Will Fancher 3cb9534df6 systemd-initrd: Flush networkd 2023-04-17 16:41:36 -04:00
Will Fancher 8598234651 systemd-initrd: dbus 2023-04-17 16:41:36 -04:00
Will Fancher 834ec135ce systemd-initrd: OpenVPN 2023-04-17 16:41:35 -04:00
Will Fancher 0698a1cf04 systemd-initrd: sshd 2023-04-17 16:41:35 -04:00
Will Fancher 748f1329fc systemd-initrd: Automatically configure networking.interfaces 2023-04-17 16:41:35 -04:00
Will Fancher dd392d7c76 systemd-initrd: networkd 2023-04-17 16:41:34 -04:00
tyxieblub efde50d9f5 nixos/plausible: add package option 2023-04-17 21:20:03 +02:00
imlonghao bc07f0ac31
borgmatic: fix timer wantedBy 2023-04-17 23:10:23 +08:00
Alex Auvolat a727a3d676 nixos/wgautomesh: init at 0.1.0 2023-04-17 12:37:18 +02:00
Weijia Wang 4c3edba856
Merge pull request #225750 from r-ryantm/auto-update/rtsp-simple-server
rtsp-simple-server: 0.21.6 -> 0.22.0
2023-04-17 10:28:44 +03:00
Sandro d85555f9ac
Merge pull request #224996 from SuperSandro2000/smokeping-ln-f 2023-04-16 23:05:25 +02:00
lewo ff24a05847
Merge pull request #206445 from nlewo/ssytemd-boot-fail
systemd-boot-builder only ignores OSError "invalid argument"
2023-04-16 22:17:28 +02:00
Guillaume Girol 40bbc9ae53
Merge pull request #225285 from symphorien/ihm-remove
python3.pkgs.ihatemoney: remove
2023-04-16 19:23:00 +00:00
Guillaume Girol 3cc8b4477e python3.pkgs.ihatemoney: remove
sqlalchemy and flask releases break ihatemoney faster than upstream
updates, so the maintenance burden increases over time.
2023-04-16 16:04:35 +02:00
Ivan Trubach 4bbe09068a nixos/pufferpanel: init 2023-04-16 15:41:24 +03:00
Atemu 445ef28548
Merge pull request #225748 from Atemu/buildFHSEnvBubblewrap-by-default
buildFHSEnv: use bubblewrap by default
2023-04-16 13:03:36 +02:00
Edgar B 33a7f368b4 nixos/monica: init 2023-04-16 11:24:00 +02:00
Atemu f63a12f296 tree-wide: buildFHSUserEnv -> buildFHSEnv 2023-04-16 10:15:13 +02:00
Sandro 893f073fe1
Merge pull request #224171 from alan-strohm/master
nixos/proxmox-image: don't assume virtio0 is using local-lvm storage
2023-04-16 03:30:46 +02:00
Ryan Lahfa 14577497e1
Merge pull request #223214 from Izorkin/update-zsh-hostname
nixos/zsh: allow fqdn hostname output
2023-04-15 22:23:31 +02:00
Ryan Lahfa b914dffe7e
Merge pull request #224494 from LeSuisse/roundcube-php81
nixos/roundcube: use PHP 8.1
2023-04-15 22:12:31 +02:00
Ryan Lahfa 096ad89a8c
Merge pull request #222826 from Peter015/patch-1
regreet: run through dbus
2023-04-15 22:02:19 +02:00
John Ericson 0794f40589
Merge pull request #226288 from Luflosi/kubo-better-api-access
nixos/kubo: improve API access
2023-04-15 15:07:01 -04:00
happysalada 0cdd78126c qdrant: module increase limitnofile 2023-04-15 13:45:38 -04:00
Nick Cao 7a2fcddf52
Merge pull request #223730 from zendo/clash-verge-module
nixos/clash-verge: init module
2023-04-15 22:00:55 +08:00
Luflosi f2be3ae30d
nixos/kubo: restrict access to the API to users in a group by default 2023-04-15 15:25:20 +02:00
Luflosi 7ceebbb35b
nixos/kubo: allow multiple API and Gateway addresses
The daemon allows specifying an array of multiaddrs for Addresses.API and Addresses.Gateway, so the NixOS module should allow that as well.
2023-04-15 15:25:06 +02:00
Luflosi 929a00bd84
nixos/kubo: give normal users access to the daemon by default
Fixes https://github.com/NixOS/nixpkgs/issues/223289.

This doesn't reduce the security in any way since it was already possible for normal users to do what I do here and create such a fake repo for themselves and set their $IPFS_PATH variable to it. It was and still is also possible to just use the --api CLI option.
This change just removes the manual setup that would otherwise be required.

We wouldn't need this workaround if https://github.com/ipfs/kubo/pull/9366 was merged but the fix seems to have been ignored upstream. Patching it ourselves seems like a bad idea since the patch has security implications.
2023-04-15 15:24:58 +02:00
Janne Heß ee0bfeddf7
Merge pull request #226010 from helsinki-systems/drop/deprecated-ssh-files
nixos/openssh: Drop deprecated locations
2023-04-15 11:41:16 +02:00
adisbladis 4ab1021a1b
Merge pull request #213036 from SuperSandro2000/cri-o/update_storagedrivers
nixos/cri-o: add aufs, devmapper, and zfs to storageDrivers
2023-04-15 16:27:50 +12:00
Eric Lesiuta acfed64224 nixos/picosnitch: init 2023-04-14 22:09:48 -04:00
Calum MacRae 7d03f1aa9f
nixos/cri-o: add aufs, devmapper, and zfs to storageDrivers
Update the storageDrivers option to align with the supported drivers, as listed here:
https://github.com/containers/storage/blob/master/docs/containers-storage.conf.5.md#storage-table
2023-04-15 01:15:46 +02:00
Moritz 'e1mo' Fromm cc55cd6ab7
nixos/dokuwiki: Mark last descriptions as md 2023-04-14 18:12:48 +02:00
Moritz 'e1mo' Fromm e78f08fa21
nixos/dokuwiki: Finally remove extraConfig
After the introduction of structured settings in #208299 the old
string-style options  / types which were kept for compatibility are now
removed in preparation for the 23.05 release.
2023-04-14 18:12:42 +02:00
Sandro 1c5ca89f42
nixos/lorri: install direnv
direnv is required to allow files to be run by lorri, so it should be installed, too.
2023-04-14 15:19:34 +02:00
Aidan Gauland 0135b7a556 nixos/peroxide: correct option doc
Correct the description for the option services.peroxide.enable.
2023-04-14 14:47:55 +02:00
Jon Seager 0dfc5c14d7
nixos/multipass: don't start until online 2023-04-14 11:27:57 +01:00
Sandro f9e70759cd
Merge pull request #213816 from karmanyaahm/karmanyaahm/nixos/kubo 2023-04-14 00:48:37 +02:00
Janne Heß 98c3d190b2
nixos/openssh: Drop deprecated locations
The changelog entry should give a good indication why I don't think this
is necessary anymore.
2023-04-13 20:31:18 +02:00
ajs124 6fc4e722c4 nixos/prometheus-smartctl-exporter: fix evaluation after adding cfg.extraFlags
was done in 3c61665b7f but does not evaluate
error: value is a string with context while a list was expected
2023-04-13 17:32:50 +02:00
Florian Klink 4496a91077
Merge pull request #225973 from IndeedNotJames/grafana-agent
grafana-agent: 0.30.2 -> 0.32.1, remove obsolete test fix; nixos/grafana-agent: use `lib.getExe`
2023-04-13 17:29:48 +02:00
Jonas Heinrich 86a685ceb1 nixos/maddy: Add option ensureCredentials 2023-04-13 09:36:54 -04:00
IndeedNotJames 845a6e9784
nixos/grafana-agent: use lib.getExe as binary names changed between updates
and `lib.getExe` allows a safe handling and potential backport of this.
But for that to work it would require 22.11 to set `pkgs.grafana-agent.meta.mainProgram = "agent"`

Relevant upstream release: https://github.com/grafana/agent/releases/tag/v0.31.0
2023-04-13 10:43:02 +02:00
Karmanyaah Malhotra 6086d85777 nixos/kubo: documentation suggestions
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-04-13 03:14:59 -05:00
Karmanyaah Malhotra 4bd622cd9d nixos/kubo: unmount on service stop
When kubo is force killed with `pkill -KILL ipfs` or by systemd-oomd,
it doesn't unmount /ipfs and /ipns. That prevents it
from starting up the next time. So, unmount on postStop.
2023-04-13 03:14:59 -05:00
Martin Weinelt f0e4bd26bd
Merge pull request #225943 from jakubgs/smartctl-exporter/fix-extra-flags
nixos/prometheus-smartctl-exporter: support extraFlags
2023-04-13 07:37:28 +02:00
Jakub Sokołowski 3c61665b7f
nixos/prometheus-smartctl-exporter: support extraFlags
Seems to be ignored currently. Useful for `-verbose` flag.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-04-12 23:56:32 +02:00
Johan Thomsen 0b57240111 nixos/kubernetes: kubelet --container-runtime flag has been removed 2023-04-13 07:21:56 +10:00
Martin Weinelt 130be87c8d
Merge pull request #224549 from mweinelt/go-neb-unit-permissions
nixos/go-neb: Replace PermissionsStartOnly with executable prefix
2023-04-12 22:59:41 +02:00
Sandro Jäckel fdbd0834b2
nixos/smokeping: use ln with -f 2023-04-12 22:47:21 +02:00
Sandro 603320b64f
Merge pull request #204534 from SuperSandro2000/boot-tmp 2023-04-12 21:37:47 +02:00
Sandro 6152b09a6a
Merge pull request #225005 from erictapen/mastodon-sidekiq 2023-04-12 21:31:50 +02:00
Will Fancher e70b42bf61 systemd-initrd: Add users and groups with static IDs. 2023-04-12 13:55:50 -04:00
Bobby Rong d550ee0d43
Merge pull request #206173 from bobby285271/pantheon
pantheon.elementary-tasks: 6.3.0 -> 6.3.1
2023-04-12 22:14:27 +08:00
Bobby Rong aacdc51e15
pantheon.elementary-tasks: 6.3.0 -> 6.3.1
https://github.com/elementary/tasks/releases/tag/6.3.1
2023-04-12 21:40:00 +08:00
Vladimír Čunát 2a3291834f
Merge #224806: staging-next 2023-04-05 2023-04-12 13:18:37 +02:00
Doron Behar 504849a7bb rtsp-simple-server: rebrand as mediamtx 2023-04-12 12:23:44 +03:00
Javed Mohamed 3ecc7b1484 nixos/gpsd: add multiple-device support for gpsd 2023-04-12 10:15:47 +02:00
github-actions[bot] 47157337bf
Merge master into staging-next 2023-04-12 00:02:18 +00:00
Sandro Jäckel 3c76624c70
nixos/fzf: add ohMyZsh integration 2023-04-12 00:46:19 +02:00
Martin Weinelt 7a5a2fa8a4
Merge pull request #225785 from helsinki-systems/warn-dhcpd-eol
nixos/dhcpd: warn of pending removal
2023-04-12 00:08:42 +02:00
ajs124 e3702c0788 nixos/dhcpd: warn of pending removal 2023-04-11 23:47:40 +02:00
Will Fancher 762b69f2ff systemd-initrd: Fix up root directory mode 2023-04-11 15:20:47 -04:00
Will Fancher fef26d88e2 systemd-initrd: Support secrets when boot loader doesn't
initrd-secrets: Fix service config with systemd-stage-1
2023-04-11 15:20:47 -04:00
Will Fancher 71983a6eb5 systemd-initrd: Don't use SYSTEMD_SULOGIN_FORCE 2023-04-11 15:20:47 -04:00
0x4A6F 3196b965ed
Merge pull request #224072 from helsinki-systems/fix/borg-compact
nixos/borgbackup: run compact after prune
2023-04-11 21:14:39 +02:00
Jörg Thalheim 89103b63d2
Merge pull request #225195 from Mic92/buildbot
buildbot: move out of python3.pkgs
2023-04-11 19:49:24 +01:00
github-actions[bot] 4e2c1815ed
Merge master into staging-next 2023-04-11 18:01:18 +00:00
ajs124 d37ee8222b nixos/borgbackup: run compact after prune 2023-04-11 19:48:16 +02:00
0x4A6F 1ee33cc078
Merge pull request #224460 from helsinki-systems/drop/gitit-mod
nixos/gitit: remove
2023-04-11 19:23:59 +02:00
github-actions[bot] 3c070a08ff
Merge master into staging-next 2023-04-11 12:01:14 +00:00
Michael Raitza 9f0e1b6047 modules.openafsServer: Add FABS backup server 2023-04-11 08:30:56 -03:00
Jörg Thalheim 90b750456e buildbot: move out of python3.pkgs
By moving it out we can start apply overrides to python dependendencies
starting with sqlalchemy.

This fixes the build with the current version.
2023-04-11 12:38:58 +02:00
ajs124 f7245e9e4e
Merge pull request #224859 from Yarny0/tsm-client
tsm-client: use `libxcrypt-legacy`, drop `openssl_1_1`, use `concatLines` in module
2023-04-11 11:17:29 +02:00
github-actions[bot] bcca7c70b6
Merge master into staging-next 2023-04-11 00:02:15 +00:00
Sandro fd04c0caf0
Merge pull request #221380 from Majiir/ddclient-fix-permissions 2023-04-11 01:31:53 +02:00
Infinidoge ff4a5234da nixos/minipro: add to module list 2023-04-10 14:54:59 -04:00
github-actions[bot] ace14e0119
Merge master into staging-next 2023-04-10 18:01:11 +00:00
Martin Weinelt 19fa5ab1e6
nixos/hardware/ipu6: Improve the enable description
The module is doing much more than just enabling the ipu6 kernel
module, so extending the enable options scope to support for these
camera modules seems a better fit.
2023-04-10 18:43:21 +02:00
github-actions[bot] 39f71c03bf
Merge master into staging-next 2023-04-10 06:01:13 +00:00
K900 e41c8ea86d
Merge pull request #225325 from K900/no-mesa-multiversioning
Revert "nixos/opengl: add mesaPackage option"
2023-04-10 08:47:22 +03:00
github-actions[bot] 2ea027a913
Merge master into staging-next 2023-04-10 00:02:09 +00:00
Maciej Krüger e663a3a17a
Merge pull request #223645 from nbraud/auto-cpufreq 2023-04-09 23:11:54 +02:00
nicoo 04b1a3f847 nixos/auto-cpufreq: Avoid touching /etc 2023-04-09 19:15:49 +00:00
github-actions[bot] 20d94e414f
Merge master into staging-next 2023-04-09 12:01:09 +00:00
K900 c29ccca1a3
Merge pull request #222923 from oddlama/fix-nginx-duplicate-mime
nixos/nginx: fix warning about duplicate mime entry
2023-04-09 14:58:39 +03:00
Kerstin Humm 431ccf26e4
nixos/mastodon: add assertion for only allowing one sidekiq scheduler queue 2023-04-09 13:24:43 +02:00
Ryan Hendrickson 43e6f67f75 nixos/snapper: support more options 2023-04-09 02:28:16 -04:00
github-actions[bot] fc0616b73d
Merge master into staging-next 2023-04-09 06:01:16 +00:00
Martin Weinelt cf724150b0
Merge pull request #225292 from betaboon/ipu6-hardware-module
Ipu6 hardware module
2023-04-09 02:15:40 +02:00
github-actions[bot] 97afa6ec9b
Merge master into staging-next 2023-04-09 00:02:38 +00:00
betaboon e4e00d22bf nixos/hardware/ipu6: init 2023-04-09 00:41:45 +02:00
betaboon dd33a7a9b9 nixos/v4l2-relayd: init 2023-04-09 00:41:45 +02:00
Robert Hensing 7de60eae37
Merge pull request #225315 from roberth/nixos-systemd-resolved-discoverable
nixos: Make services.resolved discoverable via "systemd-resolved" search
2023-04-08 21:52:19 +02:00
K900 727f9f0fbd Revert "nixos/opengl: add mesaPackage option"
This reverts commit bf1785d0a9.
2023-04-08 21:45:46 +03:00
Bjørn Forsman 54731a8cea nixos/installer: update getty help message
I think this is clearer.
2023-04-08 20:18:28 +02:00
Bjørn Forsman bc3272f51e nixos/installation-device.nix: improve comment about ssh login
root is not the only user that can login (user "nixos" can too), so
generalize the wording.
2023-04-08 20:16:16 +02:00
github-actions[bot] 8ae069b888
Merge master into staging-next 2023-04-08 12:01:05 +00:00
Infinidoge cc46277bf5 nixos/minipro: init
Minipro requires a set of udev rules to be installed to work properly.
This module installs the package and the udev rules.
2023-04-07 22:32:02 -04:00
github-actions[bot] 1ad73cb589
Merge master into staging-next 2023-04-07 18:01:06 +00:00
Mihai Fufezan c816bd50aa
nixos/hyprland: init (#221730)
* nixos/hyprland: init


---------

Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2023-04-07 14:43:01 +01:00
Felix Buehler 327b0cff7a treewide: use more lib.optionalString 2023-04-07 13:38:33 +02:00
github-actions[bot] 06a0a17fc7
Merge master into staging-next 2023-04-07 06:01:28 +00:00
mrobbetts 3c1c5600e8
bind: replace hard-coded allow-query zone setting with a real zone parameter. (#224776) 2023-04-07 06:55:09 +02:00
Geraint Ballinger 8b2521bdae
nixos/darwin-builder: add disk space options (#224480) 2023-04-07 05:10:49 +02:00
Robert Hensing bcd2d49d85 nixos: Make services.resolved discoverable via "systemd-resolved" search
This query yielded no results on search.nixos.org.
I don't think I can make all options magically appear, but you can
the other options by reading the text.
2023-04-07 01:09:05 +02:00
github-actions[bot] 638ad26bf6
Merge master into staging-next 2023-04-06 16:11:06 +00:00
Robert Schütz 2b81862da7
Merge pull request #224908 from SuperSandro2000/home-assistant-drv
nixos/home-assistant: fix infinite recursion when derivations are used in config
2023-04-06 07:56:47 -07:00
Viv Lim c778f4d225 nixos/mastodon: Allow configuring sidekiq processes
This change allows the number of sidekiq processes and which job classes
they handle to be configured.

An instance admin may choose to have separate sidekiq processes handling
jobs related to local users (`default` job class) and jobs related to
federation (`push`, `pull`, `ingress`), so that as the instance grows
and takes on more federation traffic, the local users' experience is not
as impacted.

For more details, see https://docs.joinmastodon.org/admin/scaling/#sidekiq

This pr also includes the following changes suggested in review:

- adds syslog identifiers for mastodon services
- moves working directory config to common cfgService
- adds mastodon.target
2023-04-06 16:30:16 +02:00
Martin Weinelt 9de84cd029
Merge pull request #224882 from NixOS/home-assistant
home-assistant: 2023.3.6 -> 2023.4.0
2023-04-06 16:05:07 +02:00
github-actions[bot] 707b1367f3
Merge master into staging-next 2023-04-06 12:01:12 +00:00
Martin Weinelt e89108897d
nixos/home-assistant: Allow serial access for otbr 2023-04-06 13:43:55 +02:00
Vladimír Čunát 6afd316cbc
Merge branch 'master' into staging-next 2023-04-06 11:54:07 +02:00
Vladimir Serov 0ff543e311
nixos/garage: fix links to config reference 2023-04-06 13:40:38 +04:00
Peter Zimmermann 9a63b0df9f
Change the regreet default command to run through dbus-run-session for faster startup time
Make dbus command explicit
2023-04-06 04:13:09 -04:00
alyaeanyx bd573376ad nixos/wstunnel: init 2023-04-06 09:51:30 +02:00
github-actions[bot] 6e7ab02752
Merge master into staging-next 2023-04-06 06:01:26 +00:00
Franz Pletz 0e950a1ec7
Merge pull request #223085 from Izorkin/update-nginx-proxy-cache
nixos/nginx: enable multiple proxyCachePath support
2023-04-06 02:52:44 +02:00
github-actions[bot] be07e18261
Merge master into staging-next 2023-04-06 00:02:09 +00:00
Sandro Jäckel 94b402045d
nixos/home-assistant: fix infinite recursion when derivations are used in config 2023-04-06 01:26:24 +02:00
KFears 51fdf00ecb nixos/grafana: fix assertions leaking into YAML
This commit deletes the assertions that were added in 4ec456b. Those
assertions weren't even working to begin with, and they also cause
assertions leak into the generated YAML.
2023-04-06 02:35:23 +04:00
Florian Klink aa158ed243
Merge pull request #219496 from f2k1de/smokeping-css-js-fix
smokeping: fix css and js symlink
2023-04-05 21:56:33 +02:00
Florian Klink ea7dd83b0d
Merge pull request #224833 from flokli/smokeping-config
nixos/smokeping: use /etc/smokeping.conf
2023-04-05 21:54:57 +02:00
github-actions[bot] 136b8f41e4
Merge master into staging-next 2023-04-05 18:01:36 +00:00
Yarny0 ad2b70061f nixos/tsm-client: use lib.concatLines 2023-04-05 19:32:52 +02:00
oddlama 8df62ec46c
nixos/esphome: init module 2023-04-05 17:35:58 +02:00
Florian Klink 9de75c8bbe nixos/smokeping: use /etc/smokeping.conf
This allows other services to refer to the generated smokeping config,
which is e.g. necessary to run smokeping with nginx as frontend, rather
than thttpd.
2023-04-05 16:51:26 +02:00
Ryan Lahfa a6bc6ed645
Merge pull request #206983 from minijackson/netbox-3.4.1
netbox: 3.3.9 -> 3.4.7, netbox_3_3: init at 3.3.10, RFC42-style options, more tests
2023-04-05 14:04:27 +02:00
github-actions[bot] ae5b53747b
Merge master into staging-next 2023-04-05 12:01:10 +00:00
Nick Cao 2d2abaa467
Merge pull request #224042 from linyinfeng/rime-data-refactor
{ibus,fcitx5}-rime: Refactor RIME data support
2023-04-05 16:16:18 +08:00
Jörg Thalheim 87083d40c0
Merge pull request #221856 from Mic92/dendrite
dendrite: 0.11.0 -> 0.12.0
2023-04-05 08:36:44 +01:00
github-actions[bot] 80f198ff3a
Merge staging-next into staging 2023-04-05 06:01:50 +00:00
Yureka 53c20eae38
Revert "bind: remove hard-coded allow-query config setting" 2023-04-04 23:35:11 +02:00
github-actions[bot] 5e498b046d
Merge staging-next into staging 2023-04-04 12:01:50 +00:00
Martin Weinelt ca051755d9
Merge pull request #224495 from Mic92/mediawiki-postgres
mediawiki: add support for postgresql
2023-04-04 12:21:06 +02:00
Minijackson 78eb4d64e7 netbox_3_3: init
reintroduce previous version, use in NixOS module if stateVersion < 23.05
2023-04-04 11:45:31 +02:00
Minijackson 36a550c6f9 nixos/netbox: RFC42-style options
- allows specifying allowed hosts
- setup sane default for logging
2023-04-04 11:45:29 +02:00
Antoine Eiche 2638fb722e systemd-boot-builder only ignores OSError "invalid argument"
In order to fix
https://github.com/NixOS/nixpkgs/issues/114552 (profile name with
special characters), all OSError have been ignored while only the OSError
with errno 22 (invalid argument) could has been ignored.

The drawback of ignoring all OSError is that the "No space left on
device" error is also ignored. When the /boot doesn't have enough
available disk space, the switch-to-configuration script succeeds
while the boot menu has not been updated: the user thinks it's system
has been updated, but on the next reboot it is actually rollbacked.
2023-04-04 09:16:41 +02:00
github-actions[bot] 0c95c3ea6b
Merge staging-next into staging 2023-04-04 06:01:40 +00:00
Jörg Thalheim d9c613d746 mediawiki: add support for postgresql 2023-04-04 07:50:04 +02:00
Martin Weinelt 34464d6044
nixos/go-neb: Replace PermissionsStartOnly with executable prefix
This should work as a drop-in replacement and satisfy #53852.
2023-04-04 01:01:49 +02:00
Thomas Gerbet 188573bf93 nixos/roundcube: use PHP 8.1
Roundcube has announced support of PHP 8.1 in the 1.6.0

https://github.com/roundcube/roundcubemail/releases/tag/1.6.0
2023-04-03 18:21:35 +02:00
Thomas Gerbet 2b155e1198 nixos/moodle: use PHP 8.1
Moodle is compatible with PHP 8.1 since the 4.1.2.

https://moodledev.io/general/development/policies/php
2023-04-03 18:14:09 +02:00
Kerstin Humm 0b0cc93e79
remove myself (erictapen) from packages which I don't use anymore 2023-04-03 17:07:16 +02:00
ajs124 4f2152215a nixos/gitit: remove
has not been evaluated (in module-list) since 122d5e497e

Closes #167034
2023-04-03 13:19:31 +02:00
github-actions[bot] baa80fd5aa
Merge staging-next into staging 2023-04-03 06:02:15 +00:00
7c6f434c 8ce248a734
Merge pull request #218870 from Uthar/lisp2
lisp-modules: replace with an implementation based on github:uthar/nix-cl
2023-04-03 06:00:48 +00:00
Bobby Rong 28031f7579
Merge pull request #216737 from FedericoSchonborn/budgie
Budgie Desktop
2023-04-03 10:57:32 +08:00
Martin Weinelt 814401390c
Merge pull request #224418 from jtojnar/users-validate-passwords-with-options
nixos/users-groups: Fix password scheme validation
2023-04-03 02:28:07 +02:00
Jan Tojnar 5a3eb4f6fe nixos/users-groups: Fix password scheme validation
0d7cd66652 broke validation for hashes with options
such as those generated with `mkpasswd --method=sha-512 --rounds=1000000`:

    $6$rounds=1000000$xpzZ6Rfg873gZnDY$RxS7lpVnohfDrrKG3lt9UFHED1KoiPGzH7zQv/HzwalZepo/IfFtxw05ap25duEJSKYhC14.Fn9eXszEpWVtF.

This fixes it.
2023-04-03 02:16:07 +02:00
github-actions[bot] 6da4ad9318
Merge staging-next into staging 2023-04-03 00:03:04 +00:00
0x4A6F 6f62b499cf nixos/atuin: add maxHistoryLength 2023-04-02 18:31:36 -04:00
github-actions[bot] 41454e267b
Merge staging-next into staging 2023-04-02 18:01:35 +00:00
K900 8f172ed10a nixos/grafana-image-renderer: fix setting name 2023-04-02 16:48:36 +03:00
happysalada 5ba4f4293d chatgpt-retrieval-plugin: init module 2023-04-02 09:26:35 -04:00
github-actions[bot] 9d596c3b86
Merge staging-next into staging 2023-04-02 06:01:46 +00:00
Lin Yinfeng e4246ae1e7
{ibus,fcitx5}-rime: Refactor RIME data support 2023-04-02 10:36:36 +08:00
Nick Cao 39a96c9518
Merge pull request #224255 from Kiskae/patch-1
nixos/nvidia: use correct attribute
2023-04-02 08:31:52 +08:00
github-actions[bot] 84208ebfd7
Merge staging-next into staging 2023-04-02 00:03:05 +00:00
Sandro ef6206c3ee
Merge pull request #224170 from mvnetbiz/ddclient 2023-04-02 01:29:59 +02:00
Sandro 34c25b025f
Merge pull request #224272 from mattmelling/cloudlog-no-ifd 2023-04-02 00:38:00 +02:00
Sandro 44bdb9ce9f
Merge pull request #223091 from Izorkin/update-nginx-compression 2023-04-02 00:32:47 +02:00
Federico Damián Schonborn 50198ac1f8
nixos/budgie: init
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-01 18:06:52 -03:00
Sandro b5618fe81b
Merge pull request #215493 from Izorkin/fix-dhcpcd-ipv6rs 2023-04-01 22:58:01 +02:00
Luke Granger-Brown 7c66437cba
Merge pull request #207248 from Izorkin/update-nginx
nginxQuic: 3be953161026 -> 0af598651e33
2023-04-01 21:55:05 +01:00
Kiskae 0491659cd0
nixos/nvidia: use correct attribute 2023-04-01 20:24:02 +02:00
github-actions[bot] 75808a4bf6
Merge staging-next into staging 2023-04-01 18:01:35 +00:00
Nick Cao 236d77246c
Merge pull request #223939 from Kiskae/patch-1
linuxPackages.nvidia_x11_production: 525.89.02 -> 525.105.17
2023-04-01 21:15:43 +08:00
Kiskae ea126529eb nixos/nvidia: allow package to override IBT support 2023-04-01 14:44:43 +02:00
github-actions[bot] 7f0e9a3d13
Merge staging-next into staging 2023-04-01 12:01:53 +00:00
Izorkin 9fdf7027cc
nixos/zsh: allow fqdn hostname output 2023-04-01 13:56:51 +03:00
Izorkin 427ae14373
nixos/nginx: update description in compression modules 2023-04-01 13:56:26 +03:00
Izorkin 8a289bcc79
nixos/nginx: enable multiple proxyCachePath support 2023-04-01 13:55:56 +03:00
Izorkin 3ab26f9f00
nixos/dhcpcd: add IPv6rs option 2023-04-01 13:52:38 +03:00
Izorkin 77d6fd36cf
nixos/nginx: update quic configuration 2023-04-01 13:09:49 +03:00
Vladimír Čunát 45c671173b
Merge #224143: nixos/qtile: fix manual build
(the build is OK on unstable/master but not on 22.11)
2023-04-01 09:30:00 +02:00
github-actions[bot] d86df1eda1
Merge staging-next into staging 2023-04-01 06:01:47 +00:00
Matt Votava ee88bac7be nixos/ddclient: add iproute2 to unit path if using "if" method 2023-03-31 21:54:21 -07:00
Alan Strohm 121fddc901 nixos/proxmox-image: don't assume virtio0 is using local-lvm storage 2023-03-31 18:42:01 -07:00
Sandro eb5d126dcb
Merge pull request #163082 from ettom/zeyple 2023-04-01 02:35:08 +02:00
Lily Foster 858acb7bfc
nixos/qtile: fix manual build 2023-03-31 19:21:31 -04:00
github-actions[bot] ce96000189
Merge staging-next into staging 2023-03-31 06:01:38 +00:00
Silvan Mosberger e58b3b8ce5
Merge pull request #223843 from simplejack-src/nixos_manual_desktop_item
nixos/documentation: Fix desktopIcon, GenericName/Comment
2023-03-31 03:19:39 +02:00
github-actions[bot] 47ddbcb1f0
Merge staging-next into staging 2023-03-31 00:03:05 +00:00
David Houston 6e8c2760ac
maintainers: Update houstdav000 -> cyntheticfox 2023-03-30 18:50:29 -04:00
Ilan Joselevich 003c2e3957
Merge pull request #221964 from randomnetcat/sanoid-service-package
sanoid/syncoid: Add package options
2023-03-30 23:33:53 +03:00
github-actions[bot] 04fb768a55
Merge staging-next into staging 2023-03-30 18:01:42 +00:00
Benjamin Staffin ff296a777e
Merge pull request #207115 from s1341/init_freeipa
freeipa: init at 4.10.1
2023-03-30 13:15:18 -04:00
Ilan Joselevich faf84687ce
Merge pull request #223754 from IndeedNotJames/nixos-loki
nixos/loki: add `package` option
2023-03-30 17:43:50 +03:00
K900 3947e917cf
Merge pull request #223760 from K900/nicer-pure-eval-error
nixos/system: disallow system.copySystemConfiguration in pure eval mode
2023-03-30 17:00:15 +03:00
IndeedNotJames f8f3eb7a48
nixos/loki: add package option 2023-03-30 14:35:53 +02:00
superherointj a180470959 nixos/k3s: start after network-online 2023-03-30 07:53:38 -03:00
simeplejack-src fe28e8f1e6 nixos/documentation: Fix desktopIcon, GenericName/Comment 2023-03-29 22:23:39 -04:00
Robert Scott 9a6aabc474
Merge pull request #223548 from enc0urage/fix-graphene-hardened
nixos/malloc: set vm.max_map_count when using graphene-hardened
2023-03-29 22:32:24 +01:00
Janet Cobb 1033d0f6ac (nixos/sanoid, nixos/syncoid): Add package options
Allows changing the sanoid package to be used for these services.
2023-03-29 17:23:51 -04:00
K900 48b2f723f5 nixos/system: disallow system.copySystemConfiguration in pure eval mode
This is already broken, so let's give it a better error message.
2023-03-29 17:49:30 +03:00
K900 542012fe24
Merge pull request #222336 from motiejus/master_synapse_signing_key_path
matrix-synapse: fix signing key path in fix-permissions script
2023-03-29 16:57:56 +03:00
Maëlys Bras de fer 86f3bba6d2
nixos/cfs-zen-tweaks: fix service name typo 2023-03-29 15:03:50 +02:00
Bernardo Meurer afbc94b2a8
Merge pull request #223661 from filakhtov/resolvconf-disable 2023-03-29 09:39:06 -03:00
Sandro c2ae278eb8
Merge pull request #221851 from Ma27/postgresql-jit-support
postgresql: implement opt-in JIT support
2023-03-29 13:29:30 +02:00
zendo 907bd4927b nixos/clash-verge: init module 2023-03-29 19:05:40 +08:00
Maximilian Bosch e2fb651752
nixos/postgresql: fix enableJIT
Make sure that JIT is actually available when using

    services.postgresql = {
      enable = true;
      enableJIT = true;
      package = pkgs.postgresql_15;
    };

The current behavior is counter-intuitive because the docs state that
`enableJIT = true;` is sufficient even though it wasn't in that case
because the declared package doesn't have the LLVM dependency.

Fixed by using `package.withJIT` if `enableJIT = true;` and
`package.jitSupport` is `false`.

Also updated the postgresql-jit test to test for that case.
2023-03-29 08:39:47 +02:00
Maximilian Bosch 43dbeae02d
postgresql: pass through JIT-enabled variant of non-JIT postgres and vice versa
This is useful if your postgresql version is dependant on
`system.stateVersion` and not pinned down manually. Then it's not
necessary to find out which version exactly is in use and define
`package` manually, but just stay with what NixOS provides as default:

    $ nix-instantiate -A postgresql
    /nix/store/82fzmb77mz2b787dgj7mn4a8i4f6l6sn-postgresql-14.7.drv
    $ nix-instantiate -A postgresql_jit
    /nix/store/qsjkb72fcrrfpsszrwbsi9q9wgp39m50-postgresql-14.7.drv
    $ nix-instantiate -A postgresql.withJIT
    /nix/store/qsjkb72fcrrfpsszrwbsi9q9wgp39m50-postgresql-14.7.drv
    $ nix-instantiate -A postgresql.withJIT.withoutJIT
    /nix/store/82fzmb77mz2b787dgj7mn4a8i4f6l6sn-postgresql-14.7.drv

I.e. you can use postgresql with JIT (for complex queries only[1]) like
this:

    services.postgresql = {
      enable = true;
      enableJIT = true;
    };

Performing a new override instead of re-using the `_jit`-variants for
that has the nice property that overlays for the original package apply
to the JIT-enabled variant, i.e.

    with import ./. {
      overlays = [
        (self: super: {
          postgresql = super.postgresql.overrideAttrs (_: { fnord = "snens"; });
        })
      ];
    };
    postgresql.withJIT.fnord

still gives the string `snens` whereas `postgresql_jit` doesn't have the
attribute `fnord` in its derivation.

[1] https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-JIT-ABOVE-COST
2023-03-29 08:39:46 +02:00
Peter Simons 7942e2e38f
Merge pull request #221108 from mrobbetts/bind_remove_allow_query
bind: remove hard-coded `allow-query` config setting
2023-03-29 07:50:47 +02:00
Garry Filakhtov d86e9911cd
nixos/modules/config/resolvconf.nix: skip systemPackages if disabled
A change made in #166308 added `networking.resolvconf.package` to the
`environment.systemPackages` list, so it is installed as part of the
system image. However it does so unconditionally, meaning that even if
the `config.networking.resolvconf.enable` is set to false the package
listed in the `networking.resolvconf.package` would still be intalled.

This change makes it so the package installation will depend on the
status of the `config.networking.resolvconf.enable` option instead.
2023-03-29 09:31:09 +11:00
nicoo deab2b3bf7 nixos/auto-cpufreq: Add configuration support. 2023-03-28 22:01:27 +00:00
Sandro fd46812f7e
Merge pull request #222667 from chuangzhu/proxychains-package 2023-03-28 22:19:38 +02:00
Daniel Nagy e1a383102f
nixos/x11: set XKB_CONFIG_ROOT from config
The motivation is to make overriding `services.xserver.xkbDir` easier.
2023-03-28 20:00:00 +02:00
Kasper Gałkowski 9a26e2dea9 merge master 2023-03-28 19:43:40 +02:00
Atemu 91f5aa3446
Merge pull request #213378 from Atemu/steam-env-vars
steam: add extraEnv argument
2023-03-28 17:25:14 +02:00
enc0urage a76bd96e4b nixos/malloc: set vm.max_map_count when using graphene-hardened 2023-03-28 10:18:20 +00:00
r-vdp 982ea4295b
NixOS/opengl: Use the default Mesa package by default.
Fixes #223458
Fixes #223331
2023-03-28 11:06:07 +02:00
Nick Cao ca7c52c4f5
Merge pull request #222762 from Kiskae/nvidia/530.41.03
linuxPackages.nvidia_x11: 525.89.02 -> 530.41.03
2023-03-28 08:23:48 +08:00
Ryan Lahfa 6fcf40805a
Merge pull request #223439 from mjlbach/fix/garage
garage: fix missing stateVersion and default pkg
2023-03-28 00:26:47 +02:00
Michael Lingelbach e6854e7d3a garage: fix missing stateVersion and default pkg
* stateVersion was not in scope, added config.system.systemVersion
* garage_0_8_0 -> garage_0_8, the former does not exist
2023-03-27 13:18:33 -07:00
Ryan Lahfa 16f67c4afc
Merge pull request #223242 from panicgh/nitrokey-libnitrokey
libnitrokey: init at 3.8
2023-03-27 22:07:24 +02:00
Ryan Lahfa 482c735228
Merge pull request #223388 from 06kellyjac/authelia-move
authelia: move module under security and minor fixes
2023-03-27 21:59:57 +02:00
K900 e74d28259d
Merge pull request #162479 from stuebinm/feature/mattermost-secrets
nixos/mattermost: add secretFile option for declarative configs (again)
2023-03-27 21:50:18 +03:00
stuebinm c29ca6704d mattermost: add environmentFile option to allow declarative secrets
This adds an option `services.mattermost.environmentFile`, intended to be
useful especially when `services.mattermost.mutableConfig` is set to `false`.
Since all mattermost configuration options can also be set by environment
variables, this allows managing secret configuration values in a declarative
manner without placing them in the nix store.
2023-03-27 20:46:01 +02:00
Jörg Thalheim d9c92360a8 nixos/install-grub: stop using bare file handles for readFile/WriteFile 2023-03-27 19:25:46 +02:00
Jörg Thalheim 5a23a24ba2 nixos/grub-install: don't rely on shell to run commands
data passed to these programs might be accidentially interpreted as
shell. Discovered in https://github.com/Mic92/envfs/issues/111
2023-03-27 19:21:55 +02:00
Sandro fc7d893822
Merge pull request #222592 from Luflosi/update/kubo
kubo: 0.18.1 -> 0.19.0
2023-03-27 15:24:34 +02:00
Lily Foster 6f07da7277
Merge pull request #220450 from arjan-s/qtile-options
qtile: add more options to NixOS module and expose unwrapped package
2023-03-27 07:23:15 -04:00
06kellyjac 9b60eef4bd authelia: move module under security and minor fixes
Fixed test access to lib
Added nixos test to passthru
2023-03-27 12:00:07 +01:00
Maximilian Bosch 3351d1bdb2
Merge pull request #223294 from SuperSandro2000/synapse.nix
nixos/synapse: fix path
2023-03-27 10:43:25 +02:00
Nicolas Benes 771d39638b nitrokey-udev-rules: replace with libnitrokey 2023-03-27 04:02:13 +02:00
Sandro Jäckel 40c8cebade
nixos/synapse: Fix incorrect module path after it was moved
Fixes: 22f3d4e4db ("nixos: move matrix services into their category")
2023-03-27 00:49:38 +02:00
Sandro Jäckel 056be64f11 nixos/podman: add example to enable network dns 2023-03-27 08:42:29 +10:00
Sandro 6f558d3009
Merge pull request #212599 from SuperSandro2000/podman-cleanup 2023-03-27 00:05:30 +02:00
Sandro 97d67f4a5f
Merge pull request #221643 from Tungsten842/wireshark-capabilities 2023-03-26 22:31:40 +02:00
github-actions[bot] 665b0409ad
Merge master into staging-next 2023-03-26 16:02:07 +00:00
Atemu 1f27e0b77a steam: add extraEnv option 2023-03-26 17:19:33 +02:00
Atemu 4731598712 nixos/steam: always apply extraLibraries and make them additive
Before, setting {option}`programs.steam.package` would result in a steam without
the {option}`hardware.opengl.package`, {option}`hardware.opengl.extraPackages`
etc. You had to manually add them yourself.

Additionally, overlaying `steam = prev.steam.override { extraLibraries = [ ... ]; }`
resulted in those extra libraries not actually being put into the fhsenv because
they'd be fully overridden by the option's default.

Now, the user can supply a custom steam to {option}`programs.steam.package` with
its own list of extraLibraries which will not be overridden and overlays work as
expected too.
2023-03-26 17:19:33 +02:00
Maximilian Bosch 0680f297f1
Merge pull request #223182 from dotlambda/nextcloud-x-robots-tag
nixos/nextcloud: set X-Robots-Tag to "noindex, nofollow"
2023-03-26 15:29:55 +02:00
github-actions[bot] 055dd6c5e5
Merge master into staging-next 2023-03-26 13:21:11 +00:00
K900 52038a5e50
Merge pull request #185528 from alois31/gdk-pixbuf-modules
nixos/gdk-pixbuf: move GDK_PIXBUF_MODULE_FILE to sessionVariables
2023-03-26 15:51:52 +03:00
K900 88edefb1b8
Merge pull request #223234 from Atemu/mesa-multi-version
nixos/opengl: fix wrong function application
2023-03-26 15:22:42 +03:00
Atemu 1d19eeefee nixos/opengl: fix wrong function application
No idea how that one slipped through. Thanks for catching @maxeaubrey!
2023-03-26 14:20:32 +02:00
Vladimír Čunát b544cd986c
Merge branch 'master' into staging-next 2023-03-26 11:38:50 +02:00
K900 22609a5d55
Merge pull request #217883 from Atemu/mesa-multi-version
mesa_23: init at 23.0.1
2023-03-26 11:53:44 +03:00
Robert Schütz 15b859cefe nixos/nextcloud: set X-Robots-Tag to "noindex, nofollow"
Upstream did so in https://github.com/nextcloud/server/pull/36689 and
Nextcloud now complains that

    The "X-Robots-Tag" HTTP header is not set to "noindex, nofollow".
    This is a potential security or privacy risk, as it is recommended
    to adjust this setting accordingly.
2023-03-25 19:48:13 -07:00
github-actions[bot] 07fb9cae4e
Merge master into staging-next 2023-03-26 00:02:45 +00:00
Atemu d8f58908ce nixos/opengl: mesa_22 -> mesa_23 2023-03-25 21:08:50 +01:00
Atemu 33a700b406 mesa: provide patch versions
This allows us to bump the mesa attribute (used by many packages, see
https://github.com/NixOS/nixpkgs/issues/218232) independently from the packages
used by NixOS users.
2023-03-25 21:08:50 +01:00
Atemu bf1785d0a9 nixos/opengl: add mesaPackage option 2023-03-25 21:08:50 +01:00
Lin Jian 4482c70530 nixos/kanata: notify systemd when starting up is finished
- set service type to notify
- allow unix socket which is needed by systemd notify
2023-03-25 20:56:48 +01:00
github-actions[bot] 392b3f3dc3
Merge master into staging-next 2023-03-25 18:01:17 +00:00
pennae dce79b3cb1
Merge pull request #221877 from ambroisie/woodpecker-agents
nixos/woodpecker: refactor to multi-agents setup
2023-03-25 16:32:55 +01:00
github-actions[bot] 6a3acb9982
Merge master into staging-next 2023-03-25 06:05:24 +00:00
Nick Cao 851cd65a21
Merge pull request #220776 from Vonfry/deprecated/fcitx4
fcitx: remove version 4
2023-03-25 10:23:06 +08:00
06kellyjac 6373a3966b nixos/authelia: init module
Co-authored-by: Martin Weinelt <hexa@darmstadt.ccc.de>
2023-03-24 21:23:41 -03:00
github-actions[bot] cead7e3e73
Merge master into staging-next 2023-03-25 00:02:20 +00:00
Kevin Mehall fef4baca37
nixos/ssh: Update github.com host key in programs.ssh.knownHostsFiles example
The `programs.ssh.knownHostsFiles` option documentation uses github.com's host keys as an example. GitHub recently announced that the ssh-rsa key has been compromised and rotated it.

The new key can be checked against
https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/
https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints
2023-03-24 11:51:46 -07:00
oddlama ba0a1611fc
nixos/nginx: fix warning about duplicate mime entry 2023-03-24 19:44:00 +01:00
github-actions[bot] f2ead7fbda
Merge master into staging-next 2023-03-24 12:01:43 +00:00
Ryan Lahfa a119bfc80d
Merge pull request #211603 from farcaller/fish
Assert that fish configuration is enabled if any user has fish as their shell
2023-03-24 12:05:22 +01:00
Kiskae c3ce711249 nixos/nvidia: re-enable IBT for newer drivers 2023-03-24 11:37:35 +01:00
Vladimír Čunát 12dd95fbb1
Merge branch 'master' into staging-next 2023-03-24 09:07:41 +01:00
Will Fancher 5a9b9e620d
Merge pull request #176828 from therishidesai/luks-multi-key-files
nixos/luksroot: add tryEmptyPassphrase option
2023-03-24 03:02:20 -04:00
Bruno BELANYI 6048912d8b nixos/woodpecker-*: add myself as maintainer 2023-03-23 21:33:21 +00:00
Bruno BELANYI 67de7d105e nixos/woodpecker-agents: per-agent 'enable' option 2023-03-23 21:33:20 +00:00
Matt Melling 177b6a4bc3
cloudlog: remove import-from-derivation in config 2023-03-23 21:21:57 +00:00
Bruno Bigras 022436c47b nixos/logrotate: fix typo 2023-03-23 16:09:47 -04:00
K900 fae7294cf5
Merge pull request #222689 from K900/bye-dpi-2
nixos/hidpi: remove harder
2023-03-23 22:13:06 +03:00
K900 c9a74cf40f nixos/fontconfig: time capsule 2023-03-23 22:03:35 +03:00
Chuang Zhu 46344c77b3 nixos/proxychains: add package option 2023-03-24 02:55:11 +08:00
K900 8454084ffc nixos/hidpi: remove harder
We can't agree on what the right settings are (see #222236), so let's make the users choose.
2023-03-23 21:50:45 +03:00
github-actions[bot] 307b719414
Merge master into staging-next 2023-03-23 18:01:20 +00:00
Jan Tojnar 598cf2090c
Merge pull request #218990 from SuperSandro2000/dgraph
dgraph: use --prefix to prefix PATH
2023-03-23 16:40:43 +01:00
Ryan Lahfa e774156726
Merge pull request #222269 from SuperSandro2000/gitea-disable-updater
nixos/gitea: disable updater by default
2023-03-23 15:23:49 +01:00
Bruno BELANYI cd116db45e nixos/woodpecker-agents: bind network files
Otherwise the agent might experience trouble with DNS resolution [1].

[1]: https://github.com/woodpecker-ci/plugin-git/issues/65
2023-03-23 14:16:45 +00:00
Bruno BELANYI eb3bea6359 nixos/woodpecker-agents: simplify 'extraGroups' handling 2023-03-23 14:16:45 +00:00
Bruno BELANYI c3afdb82db nixos/woodpecker-agents: use list for environment files 2023-03-23 14:16:44 +00:00
Sandro Jäckel 20842ac039
nixos/gitea: disable updater by default 2023-03-23 14:46:51 +01:00
Sandro 995f9d1c95
Merge pull request #213874 from SuperSandro2000/nginx-zstd
nixos/nginx: add recommendedZstdSettings
2023-03-23 14:11:35 +01:00
Bruno BELANYI e4f5f1b718 nixos/woodpecker: refactor to multi-agents setup
The module file has been renamed from `agent.nix` to `agents.nix` to
mirror the change.
2023-03-23 12:47:47 +00:00
Vladimír Čunát 09c3a593df
Merge branch 'master' into staging-next 2023-03-23 11:13:46 +01:00
Weijia Wang 52ee7a6a92
Merge pull request #203236 from Flakebi/fail2ban
fail2ban: 0.11.2 -> 1.0.2
2023-03-23 10:36:14 +02:00
github-actions[bot] 705ac3185e
Merge master into staging-next 2023-03-23 06:01:22 +00:00
Nick Cao 1285c0a09b
Merge pull request #222205 from NickCao/zram-writeback-device
nixos/zram: add writebackDevice option and corresponding test
2023-03-23 13:14:08 +08:00
github-actions[bot] 6a3714135d
Merge master into staging-next 2023-03-23 00:02:14 +00:00
Maximilian Bosch c042a318a7
Merge pull request #222372 from NixOS/nextcloud26
nextcloud26: init at 26.0.0
2023-03-22 23:35:31 +01:00
Christoph Heiss c9c9abc608 openssh: fix 'undefined variable' error
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-03-22 22:38:14 +01:00
Maximilian Bosch 42c78ccc6b nixos/nextcloud: release notes 2023-03-22 22:37:17 +01:00
Maximilian Bosch cbc539c19f nixos/nextcloud: minor fixups
* Apply review comments.
* Default to PHP 8.2 for v26.
2023-03-22 22:37:17 +01:00
Maximilian Bosch 6a0b0a5de9 nextcloud: remove compat references to v23
This is not needed anymore because the version is EOL for almost a year
now and we don't even have the packages anymore, only the attributes for
compatibility for upgrades from older NixOS versions.
2023-03-22 22:37:17 +01:00
Raito Bezarius dd96b7d8b4 nextcloud26, nixos/web-apps/nextcloud: drop the autocreate db user patch and wire the default in the NixOS module 2023-03-22 22:37:16 +01:00
Raito Bezarius 5e5c4c975a nixos/web-apps/nextcloud: introduce nextcloud26 2023-03-22 22:37:13 +01:00
pennae 31f422d95f
Merge pull request #218721 from apfelkuchen6/nw
nixos/networkd: add some missing options
2023-03-22 22:22:03 +01:00
Ryan Lahfa 5b88469c21
Merge pull request #217366 from puppe/fix-yggdrasil
nixos/yggdrasil: fix configFile option
2023-03-22 20:18:25 +01:00
Ryan Lahfa 54de698c6f
Merge pull request #221576 from paumr/nixos-generate-config_fix_syntax
nixos-generate-config: fix invalid sample config
2023-03-22 20:10:43 +01:00
Luflosi ef9c99a035
nixos/kubo: add QUICv1 and WebTransport to Addresses.Swarm list
According to https://github.com/ipfs/kubo/blob/v0.18.0/docs/config.md#addressesswarm, the default list of swarm multiaddrs includes QUICv1 and WebTransport since v0.18.0.
More information can be found in the release notes at https://github.com/ipfs/kubo/releases/tag/v0.18.0.
2023-03-22 20:02:56 +01:00
github-actions[bot] 85f7b5276e
Merge master into staging-next 2023-03-22 18:01:11 +00:00
K900 d0f7d224da nixos/firewall-nftables: avoid using wildcards
Those were added in kernel 5.13, which is newer than our oldest supported.
2023-03-22 17:45:05 +03:00
Rishi Desai cccc3f8a8e nixos/luksroot: add tryEmptyPassphrase option 2023-03-22 09:17:23 -05:00
Weijia Wang 2d50326244
Merge pull request #222526 from wegank/wxgtk30-drop
wxGTK30, wxmac: drop
2023-03-22 16:13:12 +02:00
woojiq 296e7f92cd keyd: add keyd service and test
The keyd package already exists, but without a systemd service.

Keyd requires write access to /var/run to create its socket. Currently
the directory it uses can be changed with an environment variable, but
the keyd repo state suggests that this may turn into a compile-time
option. with that set, and some supplementary groups added, we can run
the service under DynamicUser.

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>
2023-03-22 15:12:29 +01:00
github-actions[bot] 0537539006
Merge master into staging-next 2023-03-22 12:01:22 +00:00
Weijia Wang 366e108e41 wxGTK30, wxmac: drop 2023-03-22 13:56:44 +02:00
K900 5bf9765c0a
Merge pull request #217482 from motiejus/headscale_oidc_client_secret
headscale: natively support oidc.client_secret_path
2023-03-22 14:30:03 +03:00
github-actions[bot] 797a2b9bcc
Merge master into staging-next 2023-03-21 18:01:07 +00:00
figsoda 8dd5f6227d
Merge pull request #220928 from figsoda/starship 2023-03-21 13:50:53 -04:00
Lassulus 3839340fdb
Merge pull request #220656 from oxzi/restic-cache-fix
nixos/restic: generalize cache configuration
2023-03-22 00:37:46 +07:00
Ryan Lahfa 06541976aa
Merge pull request #222236 from K900/bye-dpi
nixos/hidpi: remove
2023-03-21 15:04:59 +01:00
K900 39c344c893 nixos/console: let the kernel pick the default font 2023-03-21 13:29:57 +01:00
K900 4787ebf7ae nixos/hidpi: remove
The single option tries to do too much work, which just ends up confusing people.

So:
- don't force the console font, the kernel can figure this out as of #210205
- don't force the systemd-boot mode, it's an awkward mode that's not supported
  on most things and will break flicker-free boot
- add a separate option for the xorg cursor scaling trick and move it under the xorg namespace
- add a general `fonts.optimizeForVeryHighDPI` option that explicitly says what it does
- alias the old option to that
- don't set any of those automatically in nixos-generate-config
2023-03-21 13:29:57 +01:00
Martin Weinelt ffe3165b27
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- nixos/doc/manual/release-notes/rl-2305.section.md
2023-03-21 12:35:53 +01:00
Motiejus Jakštys f2b3bed847 matrix-synapse: fix signing key path in fix-permissions script
The preStart script will fail if the signing_key_path is nonstandard.
2023-03-21 13:21:24 +02:00
Weijia Wang 4af0426bba
Merge pull request #222149 from wegank/limesurvey-bump
limesurvey: 3.27.33+220125 -> 5.6.9+230306
2023-03-21 08:52:42 +02:00
Nick Cao cd3ffbdfe6
nixos/zram: add writebackDevice option and corresponding test 2023-03-21 09:26:27 +08:00
Sandro 680e4d75b0
Merge pull request #222006 from mdarocha/remove-baget 2023-03-21 01:39:54 +01:00
ettom a375b000a6 nixos/zeyple: init 2023-03-21 00:14:03 +02:00
github-actions[bot] 75c28ec351
Merge master into staging-next 2023-03-20 18:01:16 +00:00
Sandro Jäckel 3a5de0e725
nixos/tmp: add a note to useTmpfs on potential issues 2023-03-20 17:27:06 +01:00
Vladimír Čunát d970a81035
Merge branch 'staging' into staging-next
(it's slightly older staging)
2023-03-20 16:27:31 +01:00
Alvar Penning 0810a6e018 nixos/prometheus.alertmanagerIrcRelay: init
Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
2023-03-20 15:57:11 +01:00
Martin Weinelt 9959ec97f8
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/wxPython/4.0.nix
- pkgs/development/python-modules/wxPython/4.1.nix
2023-03-20 15:07:36 +01:00
Weijia Wang b64eb5bbbf limesurvey: 3.27.33+220125 -> 5.6.9+230306 2023-03-20 14:31:32 +02:00
Sandro 6f8210495c
Merge pull request #221684 from SuperSandro2000/portunus-localhost
nixos/portunus: fix portunus not only listening on localhost
2023-03-20 13:25:34 +01:00
Lily Foster ccae7d35d8
Merge pull request #221075 from fufexan/regreet
nixos/regreet: init
2023-03-20 08:22:18 -04:00
github-actions[bot] f785fd289c
Merge master into staging-next 2023-03-20 12:01:29 +00:00
K900 af8b2c25ee
Merge pull request #222151 from nazarewk/supergfxd-path
supergfxd: add missing kmod to PATH
2023-03-20 11:53:33 +03:00
Krzysztof Nazarewski ed4ce16637
supergfxd: add missing kmod to PATH 2023-03-20 09:44:47 +01:00
github-actions[bot] 96f7385465
Merge master into staging-next 2023-03-20 00:02:29 +00:00
Mihai Fufezan 692c28ec10
nixos/regreet: init 2023-03-20 02:01:50 +02:00
Sandro Jäckel dc5ffba52d
nixos/portunus: fix portunus not only listening on localhost
Closes #221678
2023-03-19 22:16:03 +01:00
Maximilian Bosch 23c5acad6a
Merge pull request #222042 from Ma27/fix-matrix-wellknown-example
nixos/doc: fix .well-known example for matrix-synapse
2023-03-19 21:44:19 +01:00
K900 f1d538b459
Merge pull request #221376 from laalsaas/plasma-exclude-packages
plasma5: move excludePackages option for consistency
2023-03-19 22:33:56 +03:00
Ryan Lahfa 618ba94934
Merge pull request #210205 from 9ary/kernel-fonts
Build the large Terminus font into the kernel
2023-03-19 20:13:25 +01:00
laalsaas 62b3fd5fd2
plasma5: move excludePackages option for consistency 2023-03-19 20:12:31 +01:00
Sandro 1641813e3b
Merge pull request #217515 from tensor5/nextcloud-s3-sse-c 2023-03-19 20:06:23 +01:00
Arjan Schrijver 1addf91b0b qtile: add more options and expose unwrapped package 2023-03-19 19:43:32 +01:00
Ryan Lahfa aa85df4561
Merge pull request #194594 from nbraud/hidpi
nixos/hidpi: Harmonise default with documented recommendations
2023-03-19 19:22:40 +01:00
Ryan Lahfa 49966f2c71
Merge pull request #221642 from Izorkin/fix-roundcube-tmp
nixos/roundcube: add tmp directory
2023-03-19 19:16:05 +01:00
Sandro Jäckel a5d95ac5fc
nixos/tmp: move /tmp options under boot.tmp 2023-03-19 18:49:37 +01:00
Maximilian Bosch 8c118951d5
nixos/doc: fix .well-known example for matrix-synapse
I'm using this config on my homeserver and while trying out alternative
Matrix clients I discovered (pun intended) that the auto-discovery of my
homeserver is broken. While investigating I found out that neither the
JS nor the Rust SDK (tested via element-web and fractal) are happy about
an empty `m.identity_server`-block. Removing this part fixed the problem
for me.
2023-03-19 17:38:32 +01:00
mdarocha 4062f28a76 baget: remove due to upstream being unmaintained 2023-03-19 14:19:49 +01:00
github-actions[bot] 7c9f4934b8
Merge master into staging-next 2023-03-19 12:01:32 +00:00
Bjørn Forsman 48b0aa7164 nixos/sssd: create symlinks in /etc to fix sssctl
Without this, sssctl fails to read its configuration. Update the NixOS
test to ensure sssctl doesn't regress.
2023-03-19 09:28:35 +01:00
github-actions[bot] c70342c89c
Merge master into staging-next 2023-03-19 00:02:27 +00:00
Alois Wohlschlager efd23ff1c8
nixos/gdk-pixbuf: move GDK_PIXBUF_MODULE_FILE to sessionVariables
Some environments do not load /etc/profile, so environment.variables do
not work. In particular, this is the case for Plasma Wayland.

Use environment.sessionVariables for setting that variable instead,
which is handled by PAM and hence more reliable.
2023-03-18 20:19:01 +01:00
Jörg Thalheim 2c19718bee dendrite: 0.11.0 -> 0.12.0
Diff: https://github.com/matrix-org/dendrite/compare/v0.12.0...v0.12.0

Changelog: https://github.com/matrix-org/dendrite/releases/tag/v0.12.0
2023-03-18 15:35:47 +01:00
github-actions[bot] a912b83051
Merge master into staging-next 2023-03-18 12:01:30 +00:00
talyz ccaa6078ba
nixos/gitlab: Fix error when GitLab Pages is not enabled
Even if GitLab is used without Pages, some of its settings are still
used in the gitlab.yml file, resulting in errors such as

error: The option `services.gitlab.pages.settings.pages-domain' is used but not defined.

To fix this, make the settings' usage conditional on Pages being
enabled.
2023-03-18 11:34:51 +01:00
Atemu bd7309c5a3
Merge pull request #221469 from wegank/solr-drop
solr: drop
2023-03-18 10:17:43 +01:00
github-actions[bot] 36748936f9
Merge master into staging-next 2023-03-18 06:01:16 +00:00
Sandro 8aedbfa038
Merge pull request #181013 from aidalgol/peroxide 2023-03-18 01:55:30 +01:00
github-actions[bot] 2c8e6963dc
Merge master into staging-next 2023-03-18 00:02:30 +00:00
K900 38d9db299e nixos/plasma5: remove supportDDC option
The code for this was actually removed in #172078.
2023-03-17 23:39:08 +03:00
Aidan Gauland 7fb4aae81f
nixos/peroxide: add module for peroxide service 2023-03-18 07:43:59 +13:00
Bouke van der Bijl cf90db8b70 nixiso/opentelemetry-collector: init 2023-03-17 19:18:59 +01:00
github-actions[bot] d761f69867
Merge master into staging-next 2023-03-17 17:57:00 +00:00
Izorkin 6263c45580
nixos/roundcube: add tmp directory 2023-03-17 19:40:23 +03:00
Sandro 7ec767ff54
Merge pull request #173697 from jmbaur/avahi-daemon-deny-interfaces
nixos/avahi: add denyInterfaces option
2023-03-17 17:11:49 +01:00
Savyasachee Jha 4177ddcfd6 doas: refactor config generation
According to Ted Unangst, since doas evaluates rules in a last
matched manner, it is prudent to have the "permit root to do everything
without a password at the end of the file.

Source: https://flak.tedunangst.com/post/doas-mastery
2023-03-17 09:05:08 -07:00
Tungsten842 8668d96c28 nixos/wireshark: set the correct capabilities 2023-03-17 13:17:36 +01:00
github-actions[bot] 2394986204
Merge master into staging-next 2023-03-17 12:01:17 +00:00
Weijia Wang 32f39395a7
Merge pull request #210101 from helsinki-systems/upd/jitsi
Update of all Jitsi Meet components
2023-03-17 12:23:14 +02:00
paumr a6b712f8a4 nixos-generate-config: fix invalid sample config
This issue was reported in #221510
2023-03-17 01:24:28 +01:00
github-actions[bot] d96e74c8b8
Merge staging-next into staging 2023-03-17 00:03:06 +00:00
github-actions[bot] 6746017444
Merge master into staging-next 2023-03-17 00:02:33 +00:00
Pascal Bach 7c166f412b
Merge pull request #221096 from awakesecurity/minio-paths
nixos/minio: gracefully handle root credentials file
2023-03-16 20:56:37 +01:00
github-actions[bot] 2530eb2c82
Merge staging-next into staging 2023-03-16 18:01:58 +00:00
github-actions[bot] 455127ad5e
Merge master into staging-next 2023-03-16 18:01:20 +00:00
John Soo 740fea3edd
fixup! nixos/minio: activate/restart service on credentials path changes 2023-03-16 09:45:09 -07:00
Bernardo Meurer 79cfdf110a
Merge pull request #219351 from tie/make-bios-bootable 2023-03-16 11:33:03 -03:00
Weijia Wang c24a8ccc98 solr: drop 2023-03-16 16:17:04 +02:00
Bernardo Meurer 6e55733359
Merge pull request #219747 from Stunkymonkey/deprecate-isNull 2023-03-16 11:10:22 -03:00
s1341 6d299334b0 nixos/freeipa: init 2023-03-16 08:40:13 +02:00
apfelkuchen06 0ddfb0a5df nixos/networkd: add BridgeVLAN options 2023-03-16 03:31:04 +01:00
apfelkuchen06 cd650b3fa3 nixos/networkd: add QuickFairQueueingClass options 2023-03-16 03:31:04 +01:00
apfelkuchen06 fde806d5a5 nixos/networkd: add QuickFairQueueing options 2023-03-16 03:31:04 +01:00
apfelkuchen06 493ed75418 nixos/networkd: add HeavyHitterFilter options 2023-03-16 03:31:04 +01:00
apfelkuchen06 88d99a3630 nixos/networkd: add HierarchyTokenBucketClass options 2023-03-16 03:31:04 +01:00
apfelkuchen06 24df07c786 nixos/networkd: add HierarchyTokenBucket options 2023-03-16 03:31:03 +01:00
apfelkuchen06 29e5451963 nixos/networkd: add TrivialLinkEqualizer options 2023-03-16 03:31:03 +01:00
apfelkuchen06 cf470ebd88 nixos/networkd: add FairQueueing options 2023-03-16 03:31:03 +01:00
apfelkuchen06 dbc14e5a44 nixos/networkd: add FairQueueingControlledDelay options 2023-03-16 03:31:03 +01:00
apfelkuchen06 5b5c79c6a0 nixos/networkd: add GenericRandomEarlyDetection options 2023-03-16 03:28:23 +01:00
apfelkuchen06 ca496f8754 nixos/networkd: add EnhancedTransmissionSelection options 2023-03-16 03:28:23 +01:00
apfelkuchen06 3cde7aaa36 nixos/networkd: add DeficitRoundRobinSchedulerClass options 2023-03-16 03:28:23 +01:00
apfelkuchen06 0d06e85996 nixos/networkd: add DeficitRoundRobinScheduler options 2023-03-16 03:28:23 +01:00
apfelkuchen06 49df6bc669 nixos/networkd: add ControlledDelay options 2023-03-16 03:28:23 +01:00
apfelkuchen06 728108555e nixos/networkd: add CAKE options 2023-03-16 03:28:23 +01:00
apfelkuchen06 7a6cae0e15 nixos/networkd: add PFIFOFast options 2023-03-16 03:28:23 +01:00
apfelkuchen06 f75ec30fee nixos/networkd: add PFIFOHeadDrop options 2023-03-16 03:28:23 +01:00
apfelkuchen06 d9e1963a15 nixos/networkd: add BFIFO options 2023-03-16 03:28:22 +01:00
apfelkuchen06 f2ca28f658 nixos/networkd: add PFIFO options 2023-03-16 03:28:22 +01:00
apfelkuchen06 51689e86b9 nixos/networkd: add StochasticFairnessQueueing options 2023-03-16 03:28:22 +01:00
apfelkuchen06 736650ccf1 nixos/networkd: add StochasticFairBlue options 2023-03-16 03:28:22 +01:00
apfelkuchen06 872a4823cf nixos/networkd: add FlowQueuePIE options 2023-03-16 03:28:22 +01:00
apfelkuchen06 2784862e41 nixos/networkd: add PIE options 2023-03-16 03:28:22 +01:00
apfelkuchen06 d63035329e nixos/networkd: add TokenBucketFilter options 2023-03-16 03:28:21 +01:00
apfelkuchen06 55cd970d73 nixos/networkd: add NetworkEmulator options 2023-03-16 03:28:21 +01:00
apfelkuchen06 b08e5be98d nixos/networkd: add QDisc options 2023-03-16 03:28:21 +01:00
apfelkuchen06 09e745c784 nixos/networkd: add IPoIB options 2023-03-16 03:28:21 +01:00
apfelkuchen06 df14953724 nixos/networkd: add CAN options 2023-03-16 03:28:21 +01:00
apfelkuchen06 a7724b8f91 nixos/networkd: add LLDP options 2023-03-16 03:28:21 +01:00
apfelkuchen06 ae15b86d4d nixos/networkd: add BridgeMDB option 2023-03-16 03:28:21 +01:00
apfelkuchen06 d646f7c7f2 nixos/networkd: add BridgeFDB options 2023-03-16 03:28:21 +01:00
apfelkuchen06 28ddd570f7 nixos/networkd: add Bridge options 2023-03-16 03:28:20 +01:00
apfelkuchen06 590ccae1f8 nixos/networkd: add L2TP options 2023-03-16 03:28:20 +01:00
Majiir Paktu 1021a7d928 nixos/ddclient: fix permissions warning 2023-03-15 17:47:08 -04:00
github-actions[bot] 795332a826
Merge staging-next into staging 2023-03-15 18:01:44 +00:00
Martin Weinelt 578fb7fd1f
Merge pull request #220557 from mweinelt/libxcrypt-strong
libxcrypt: Build only with strong hashes
2023-03-15 16:43:12 +00:00
Vladimír Čunát a86610144f
Merge #219444: staging-next 2023-03-04 2023-03-15 17:35:39 +01:00
Sandro fbeb9b9a96
Merge pull request #215835 from illustris/hbase
nixos/hbase: add thrift and rest servers
2023-03-15 16:55:36 +01:00
Sandro 83dcadaf61
Merge pull request #218482 from illustris/ec2-metadata
nixos/ec2: don't populate nonexistent metadata files
2023-03-15 16:53:40 +01:00
Sandro c817b58614
Merge pull request #220278 from bdd/fix-binfmt-x86_64-windows-extension
nixos/binfmt: fix extension for Windows binaries
2023-03-15 16:15:47 +01:00
Martin Weinelt 1c52b361a8
Merge remote-tracking branch 'origin/master' into staging-next 2023-03-15 14:36:40 +01:00
Robert Hensing c3b245d540
Merge pull request #195511 from DeterminateSystems/include-build-deps
nixos/top-level: add includeBuildDependencies option
2023-03-15 13:33:24 +01:00
Charles Hall 65c6ffaae9 don't enable lightdm if greetd is enabled 2023-03-15 13:26:41 +01:00
github-actions[bot] a3b786aa94
Merge staging-next into staging 2023-03-15 00:03:06 +00:00
Martin Weinelt 231c1145f2
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/rflink/default.nix
2023-03-14 22:33:40 +01:00
Janik H dafedbbba6 nixos/woodpecker: init 2023-03-14 20:31:39 +01:00
github-actions[bot] 9feb9fda3e
Merge staging-next into staging 2023-03-14 18:02:00 +00:00
github-actions[bot] 2df6c043e6
Merge master into staging-next 2023-03-14 18:01:25 +00:00
K900 1fab86929f nixos/pipewire: spring cleaning
- drop media-session (rip 💀)
- stop trying to let people override default configs, those never got merged correctly
- drop all the complexity arising from having to vendor default config files
- build docs in sandbox as we no longer recurse
2023-03-14 20:31:32 +03:00
K900 b8ac3f9a93 pipewire: 0.3.66 -> 0.3.67 2023-03-14 20:31:03 +03:00
Kasper Gałkowski e5eb0322a2 merge master 2023-03-14 17:07:39 +01:00
Sandro 66e0910e86
Merge pull request #199729 from peat-psuwit/zoneminder-1.36.31
zoneminder, nixos/zoneminder: 1.36.28 -> 1.36.31, fix issues relating to upgrade
2023-03-14 17:02:05 +01:00
Martin Weinelt 9e4d592114
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/eve/default.nix
2023-03-14 16:49:37 +01:00
Linus Heckemann 7ca65eeecf
Merge pull request #219354 from Izorkin/update-profiles-base
nixos/profiles: optimize base and minimal profiles
2023-03-14 14:45:15 +01:00
Domen Kožar c08c079893
Merge pull request #216635 from DavHau/patch-4
services.cachix-watch-store: fix description of compressionLevel
2023-03-14 13:44:58 +00:00
Thomas Dy fbb554fa58 nixos/kubernetes: update coredns 1.7.1 -> 1.10.1 2023-03-14 22:15:43 +10:00
github-actions[bot] 60e9cbe0f9
Merge staging-next into staging 2023-03-14 12:02:08 +00:00
Linus Heckemann eb45cd5108 nixos/top-level: add includeBuildDependencies option
This option allows adding the build closure of the system to its
runtime closure, enabling fully-offline rebuilds (as long as no new
packages are added).
2023-03-14 11:55:13 +01:00
Martin Weinelt 6b67186fe9
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/crownstone-cloud/default.nix
- pkgs/development/python-modules/exrex/default.nix
- pkgs/development/python-modules/mkdocs-minify/default.nix
- pkgs/development/python-modules/myjwt/default.nix
- pkgs/development/tools/analysis/checkov/default.nix
2023-03-14 08:14:26 +01:00
Franz Pletz bc0a1dd982
Merge pull request #220461 from SuperSandro2000/prometheus
prometheus: 2.41.0 -> 2.42.0, split outputs, other cleanups
2023-03-14 05:28:59 +01:00
Matthew Robbetts f5b754881d bind: remove hard-coded allow-query config file entry, so it can be customized via extraConfig 2023-03-13 20:47:02 -07:00
John Soo e30469a37b
nixos/minio: activate/restart service on credentials path changes
Otherwise the `minio.service` service will fail either:

* with a message that the EnvironmentFile does not exist
* or silently with potentially stale credentials
2023-03-13 17:43:19 -07:00
John Soo 7f85002ec0
nixos/minio: format with nixpkgs-fmt 2023-03-13 17:36:52 -07:00
Artturi b978bf0f0f
Merge pull request #220570 from Artturin/fixlints1 2023-03-14 02:15:55 +02:00
Artturi 9d18216aa3
Merge pull request #221050 from Luflosi/nixos-generate-config-microcode-condition
nixos-generate-config: update microcode only on bare metal
2023-03-13 22:56:28 +02:00
7c6f434c f7eeb48523
Merge pull request #213301 from bcc32/atop-dont-leave-new-log-files
nixos/atop: Remove upgraded logfiles if not replaced
2023-03-13 20:20:40 +00:00
Luflosi 1d65c7279c
nixos-generate-config: update microcode only on bare metal
Guest operating systems inside VMs or containers can't update the host CPU's microcode for obvious security reasons, so setting the `hardware.cpu.*.updateMicrocode` options is pointless.
2023-03-13 20:15:13 +01:00
github-actions[bot] 59ffe854f9
Merge staging-next into staging 2023-03-13 18:01:48 +00:00
Martin Weinelt bb14c4255b Merge remote-tracking branch 'origin/master' into staging-next 2023-03-13 17:14:19 +00:00
Florian Klink 504d66bae9
Merge pull request #216826 from gdamjan/systemd-253
systemd: 252.5 -> 253
2023-03-13 17:37:39 +01:00
Marcus Ramberg f834dfad8f nimdow: Add nixos windowmanager option 2023-03-13 11:37:32 -05:00
Vonfry 4e8ad00ae8
fcitx: remove packages and update documentations and aliases to fcitx5 2023-03-13 18:50:05 +08:00
Vonfry 051b74fe7d
nixos/fcitx: deprecated, and suggestions to use fcitx5 instead 2023-03-13 18:47:05 +08:00
Vladimír Čunát 2d51a0e8ad
Merge branch 'master' into staging-next 2023-03-13 08:25:10 +01:00
Martin Weinelt 4472cf44eb
treewide: Make yescrypt the default algorithm for pam_unix.so
This ensures `passwd` will default to yescrypt for newly generated
passwords.
2023-03-13 07:54:27 +01:00
Martin Weinelt 0d7cd66652
nixos/users-groups: Update password scheme validation
Updates the warnings message for statefully set up passwords, now that
weak algorithms have been removed from our libxcrypt package.

Additionall we now add proper validation for hashing schemes used in
`hashedPassword`.

Neither will prevent a rebuiild, but instead issue a warning, that this
requires immediate remediation, or else users will be unable to login.

Reuses the crypt scheme ids as provided by the libxcrypt package.
2023-03-13 07:54:27 +01:00
Elis Hirwing ce76a6838c
Merge pull request #203487 from jocelynthode/init-readarr
readarr: init at 0.1.4.1596
2023-03-13 06:56:35 +01:00
Lassulus 47233b27c9
Merge pull request #167319 from schnusch/cgit 2023-03-13 09:51:08 +07:00
figsoda 928c8115ba nixos/starship: add interactiveOnly option 2023-03-12 21:23:23 -04:00
Ben Wolsieffer b92dae961c nixos/chrony: allow @chown syscall set
The module was allowing specific chown syscalls, which is brittle because
there are several and different ones are used by glibc on different
architectures. For example, fchownat was already added to the allowlist for
aarch64, while on armv6l chrony crashes because chown32 is not in the
allowlist.

systemd provides the @chown syscall set, which includes all the chown
syscalls and avoids this brittleness. I believe the syscalls would all be
equivalent from an attacker's perspective, so there is unlikely to be any
security impact.
2023-03-12 18:10:56 -05:00
Martin Weinelt d03d74aa67
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/aiopulse/default.nix
- pkgs/development/python-modules/identify/default.nix
- pkgs/development/python-modules/spur/default.nix
2023-03-12 23:28:23 +01:00
nicoo df4faec23b nixos/hidpi: Explicitely refer to fontconfig.nix for the choice of defaults 2023-03-12 21:33:38 +00:00
Jocelyn Thode e7f54823b1
readarr: init at 0.1.4.1596 2023-03-12 20:54:23 +01:00
Guillaume Girol db901673ea
Merge pull request #209156 from pwaller/issue-114594
nixos/grub: Name initrd-secrets by system, not by initrd
2023-03-12 18:50:33 +00:00
Vladimír Čunát 1dd94ad62f
Merge branch 'master' into staging-next 2023-03-12 09:06:28 +01:00
Ryan Lahfa ac93edb3ac
Merge pull request #209829 from notgne2/fix/systemd-boot-always-profile-path
nixos/systemd-boot: always use profile_path() for system closure paths
2023-03-11 22:08:18 +01:00
Janne Heß 6798068e84
Merge pull request #220555 from lilyinstarlight/feature/fwupd-uefi-capsule
nixos/fwupd: add settings option for uefi_capsule.conf
2023-03-11 20:04:32 +01:00
github-actions[bot] feb117e32c
Merge master into staging-next 2023-03-11 18:01:19 +00:00
Jonas Heinrich 161a1ca129
Merge pull request #191974 from tu-maurice/btrbk-doas
btrbk: Use sudo or doas based on configuration
2023-03-11 16:10:50 +01:00
Lily Foster 9c1d627508
Merge pull request #208414 from RossComputerGuy/feat/java-binfmt
nixos/java: add binfmt option
2023-03-11 10:04:43 -05:00
nachoslover813260 4b0bc9ea72 nixos/plasma5: add ark as an optional package instead 2023-03-11 21:29:24 +08:00
nachoslover813260 9e8f51fc6c Adding Ark as a file archiver
Since the default plasma desktop already got dolphin-plugins adding ark for archiving would make plasma desktop more complete as well
2023-03-11 21:29:24 +08:00
Alvar Penning adafbeff4a nixos/restic: generalize cache configuration
The restic repository cache location defaults to ~/.cache/restic when
not overwritten either by the --cache-dir command line parameter or the
universal RESTIC_CACHE_DIR environment variable.

Currently, the --cache-dir variable is set to only some restic commands,
but, e.g., not to the unit's preStart command for the module's
initialize option. This results in two distinct cache locations, one at
~/.cache/restic for the initialize commands and one at the configured
--cache-dir location for the restic backup command.

By explicitly setting RESTIC_CACHE_DIR for the unit, only one cache at
the correct location will be used.

https://restic.readthedocs.io/en/v0.15.1/manual_rest.html#caching
2023-03-11 12:59:10 +01:00
github-actions[bot] d165f35883
Merge master into staging-next 2023-03-11 06:01:15 +00:00
Mario Rodas 2ce9b9842b
Merge pull request #219355 from tomfitzhenry/phosh-0.25.1
phosh: 0.23 -> 0.25.1
2023-03-10 21:03:33 -05:00
Artturin cab4a24c34 treewide: fix lints
Arg to lib.optional is a list

build time tool in buildInputs
2023-03-11 00:55:17 +02:00
Lily Foster 6e6d31f4bc
nixos/fwupd: add settings option for uefi_capsule.conf 2023-03-10 15:25:41 -05:00
Alyssa Ross 8c70bfb9f2
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/libraries/librsvg/default.nix
	pkgs/development/python-modules/r2pipe/default.nix
2023-03-10 18:46:21 +00:00
genesis cab32f0f86 nixos/jellyseerr: init 2023-03-10 16:18:00 +01:00
Yureka 7efee351ec
Merge branch 'gitlab-pages' of github.com:talyz/nixpkgs into HEAD 2023-03-10 14:36:25 +01:00
uoleg 8ca0687b97 nixos/nano: refactor nanorc creation
The default syntax highlighting rules are included at the top of the nanorc file to allow overriding.
2023-03-10 15:13:58 +03:00
Martin Weinelt ef91384e6f Merge remote-tracking branch 'origin/master' into staging-next 2023-03-10 13:09:25 +01:00
Sandro Jäckel da2f281453
prometheus: split doc and cli into extra outputs 2023-03-10 11:45:45 +01:00
Sandro bca9ab3d26
Merge pull request #205060 from jslight90/patch-8
nixos/prometheus: Add new relabel_configs actions
2023-03-10 11:19:31 +01:00
Stanisław Pitucha 5496585eb8
Merge pull request #186076 from viraptor/gemstash-service
nixos/gemstash: init module
2023-03-10 14:21:53 +11:00