tobias/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-11-24 09:33:46 +01:00
Code Issues Packages Projects Releases Wiki Activity
498855 commits 199 branches 75 tags 13 GiB
Commit graph

25856 commits

Author SHA1 Message Date
Yarny0 ad2b70061f nixos/tsm-client: use lib.concatLines 2023-04-05 19:32:52 +02:00
oddlama 8df62ec46c
nixos/esphome: init module 2023-04-05 17:35:58 +02:00
Florian Klink 9de75c8bbe nixos/smokeping: use /etc/smokeping.conf 
This allows other services to refer to the generated smokeping config,
which is e.g. necessary to run smokeping with nginx as frontend, rather
than thttpd.
 2023-04-05 16:51:26 +02:00
Ryan Lahfa a6bc6ed645
Merge pull request #206983 from minijackson/netbox-3.4.1 
netbox: 3.3.9 -> 3.4.7, netbox_3_3: init at 3.3.10, RFC42-style options, more tests
 2023-04-05 14:04:27 +02:00
github-actions[bot] ae5b53747b
Merge master into staging-next 2023-04-05 12:01:10 +00:00
Nick Cao 2d2abaa467
Merge pull request #224042 from linyinfeng/rime-data-refactor 
{ibus,fcitx5}-rime: Refactor RIME data support
 2023-04-05 16:16:18 +08:00
Jörg Thalheim 87083d40c0
Merge pull request #221856 from Mic92/dendrite 
dendrite: 0.11.0 -> 0.12.0
 2023-04-05 08:36:44 +01:00
github-actions[bot] 80f198ff3a
Merge staging-next into staging 2023-04-05 06:01:50 +00:00
Yureka 53c20eae38
Revert "bind: remove hard-coded allow-query config setting" 2023-04-04 23:35:11 +02:00
github-actions[bot] 5e498b046d
Merge staging-next into staging 2023-04-04 12:01:50 +00:00
Martin Weinelt ca051755d9
Merge pull request #224495 from Mic92/mediawiki-postgres 
mediawiki: add support for postgresql
 2023-04-04 12:21:06 +02:00
Minijackson 78eb4d64e7 netbox_3_3: init 
reintroduce previous version, use in NixOS module if stateVersion < 23.05
 2023-04-04 11:45:31 +02:00
Minijackson 36a550c6f9 nixos/netbox: RFC42-style options 
- allows specifying allowed hosts
- setup sane default for logging
 2023-04-04 11:45:29 +02:00
Antoine Eiche 2638fb722e systemd-boot-builder only ignores OSError "invalid argument" 
In order to fix
https://github.com/NixOS/nixpkgs/issues/114552 (profile name with
special characters), all OSError have been ignored while only the OSError
with errno 22 (invalid argument) could has been ignored.

The drawback of ignoring all OSError is that the "No space left on
device" error is also ignored. When the /boot doesn't have enough
available disk space, the switch-to-configuration script succeeds
while the boot menu has not been updated: the user thinks it's system
has been updated, but on the next reboot it is actually rollbacked.
 2023-04-04 09:16:41 +02:00
github-actions[bot] 0c95c3ea6b
Merge staging-next into staging 2023-04-04 06:01:40 +00:00
Jörg Thalheim d9c613d746 mediawiki: add support for postgresql 2023-04-04 07:50:04 +02:00
Martin Weinelt 34464d6044
nixos/go-neb: Replace PermissionsStartOnly with executable prefix 
This should work as a drop-in replacement and satisfy #53852.
 2023-04-04 01:01:49 +02:00
Thomas Gerbet 188573bf93 nixos/roundcube: use PHP 8.1 
Roundcube has announced support of PHP 8.1 in the 1.6.0

https://github.com/roundcube/roundcubemail/releases/tag/1.6.0
 2023-04-03 18:21:35 +02:00
Thomas Gerbet 2b155e1198 nixos/moodle: use PHP 8.1 
Moodle is compatible with PHP 8.1 since the 4.1.2.

https://moodledev.io/general/development/policies/php
 2023-04-03 18:14:09 +02:00
Kerstin Humm 0b0cc93e79
remove myself (erictapen) from packages which I don't use anymore 2023-04-03 17:07:16 +02:00
ajs124 4f2152215a nixos/gitit: remove 
has not been evaluated (in module-list) since 122d5e497e

Closes #167034
 2023-04-03 13:19:31 +02:00
github-actions[bot] baa80fd5aa
Merge staging-next into staging 2023-04-03 06:02:15 +00:00
7c6f434c 8ce248a734
Merge pull request #218870 from Uthar/lisp2 
lisp-modules: replace with an implementation based on github:uthar/nix-cl
 2023-04-03 06:00:48 +00:00
Bobby Rong 28031f7579
Merge pull request #216737 from FedericoSchonborn/budgie 
Budgie Desktop
 2023-04-03 10:57:32 +08:00
Martin Weinelt 814401390c
Merge pull request #224418 from jtojnar/users-validate-passwords-with-options 
nixos/users-groups: Fix password scheme validation
 2023-04-03 02:28:07 +02:00
Jan Tojnar 5a3eb4f6fe nixos/users-groups: Fix password scheme validation 
0d7cd66652 broke validation for hashes with options
such as those generated with `mkpasswd --method=sha-512 --rounds=1000000`:

    $6$rounds=1000000$xpzZ6Rfg873gZnDY$RxS7lpVnohfDrrKG3lt9UFHED1KoiPGzH7zQv/HzwalZepo/IfFtxw05ap25duEJSKYhC14.Fn9eXszEpWVtF.

This fixes it.
 2023-04-03 02:16:07 +02:00
github-actions[bot] 6da4ad9318
Merge staging-next into staging 2023-04-03 00:03:04 +00:00
0x4A6F 6f62b499cf nixos/atuin: add maxHistoryLength 2023-04-02 18:31:36 -04:00
github-actions[bot] 41454e267b
Merge staging-next into staging 2023-04-02 18:01:35 +00:00
K900 8f172ed10a nixos/grafana-image-renderer: fix setting name 2023-04-02 16:48:36 +03:00
happysalada 5ba4f4293d chatgpt-retrieval-plugin: init module 2023-04-02 09:26:35 -04:00
github-actions[bot] 9d596c3b86
Merge staging-next into staging 2023-04-02 06:01:46 +00:00
Lin Yinfeng e4246ae1e7
{ibus,fcitx5}-rime: Refactor RIME data support 2023-04-02 10:36:36 +08:00
Nick Cao 39a96c9518
Merge pull request #224255 from Kiskae/patch-1 
nixos/nvidia: use correct attribute
 2023-04-02 08:31:52 +08:00
github-actions[bot] 84208ebfd7
Merge staging-next into staging 2023-04-02 00:03:05 +00:00
Sandro ef6206c3ee
Merge pull request #224170 from mvnetbiz/ddclient 2023-04-02 01:29:59 +02:00
Sandro 34c25b025f
Merge pull request #224272 from mattmelling/cloudlog-no-ifd 2023-04-02 00:38:00 +02:00
Sandro 44bdb9ce9f
Merge pull request #223091 from Izorkin/update-nginx-compression 2023-04-02 00:32:47 +02:00
Federico Damián Schonborn 50198ac1f8
nixos/budgie: init 
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
 2023-04-01 18:06:52 -03:00
Sandro b5618fe81b
Merge pull request #215493 from Izorkin/fix-dhcpcd-ipv6rs 2023-04-01 22:58:01 +02:00
Luke Granger-Brown 7c66437cba
Merge pull request #207248 from Izorkin/update-nginx 
nginxQuic: 3be953161026 -> 0af598651e33
 2023-04-01 21:55:05 +01:00
Kiskae 0491659cd0
nixos/nvidia: use correct attribute 2023-04-01 20:24:02 +02:00
github-actions[bot] 75808a4bf6
Merge staging-next into staging 2023-04-01 18:01:35 +00:00
Nick Cao 236d77246c
Merge pull request #223939 from Kiskae/patch-1 
linuxPackages.nvidia_x11_production: 525.89.02 -> 525.105.17
 2023-04-01 21:15:43 +08:00
Kiskae ea126529eb nixos/nvidia: allow package to override IBT support 2023-04-01 14:44:43 +02:00
github-actions[bot] 7f0e9a3d13
Merge staging-next into staging 2023-04-01 12:01:53 +00:00
Izorkin 9fdf7027cc
nixos/zsh: allow fqdn hostname output 2023-04-01 13:56:51 +03:00
Izorkin 427ae14373
nixos/nginx: update description in compression modules 2023-04-01 13:56:26 +03:00
Izorkin 8a289bcc79
nixos/nginx: enable multiple proxyCachePath support 2023-04-01 13:55:56 +03:00
Izorkin 3ab26f9f00
nixos/dhcpcd: add IPv6rs option 2023-04-01 13:52:38 +03:00
Izorkin 77d6fd36cf
nixos/nginx: update quic configuration 2023-04-01 13:09:49 +03:00
Vladimír Čunát 45c671173b
Merge #224143: nixos/qtile: fix manual build 
(the build is OK on unstable/master but not on 22.11)
 2023-04-01 09:30:00 +02:00
github-actions[bot] d86df1eda1
Merge staging-next into staging 2023-04-01 06:01:47 +00:00
Matt Votava ee88bac7be nixos/ddclient: add iproute2 to unit path if using "if" method 2023-03-31 21:54:21 -07:00
Alan Strohm 121fddc901 nixos/proxmox-image: don't assume virtio0 is using local-lvm storage 2023-03-31 18:42:01 -07:00
Sandro eb5d126dcb
Merge pull request #163082 from ettom/zeyple 2023-04-01 02:35:08 +02:00
Lily Foster 858acb7bfc
nixos/qtile: fix manual build 2023-03-31 19:21:31 -04:00
github-actions[bot] ce96000189
Merge staging-next into staging 2023-03-31 06:01:38 +00:00
Silvan Mosberger e58b3b8ce5
Merge pull request #223843 from simplejack-src/nixos_manual_desktop_item 
nixos/documentation: Fix desktopIcon, GenericName/Comment
 2023-03-31 03:19:39 +02:00
github-actions[bot] 47ddbcb1f0
Merge staging-next into staging 2023-03-31 00:03:05 +00:00
David Houston 6e8c2760ac
maintainers: Update houstdav000 -> cyntheticfox 2023-03-30 18:50:29 -04:00
Ilan Joselevich 003c2e3957
Merge pull request #221964 from randomnetcat/sanoid-service-package 
sanoid/syncoid: Add package options
 2023-03-30 23:33:53 +03:00
github-actions[bot] 04fb768a55
Merge staging-next into staging 2023-03-30 18:01:42 +00:00
Benjamin Staffin ff296a777e
Merge pull request #207115 from s1341/init_freeipa 
freeipa: init at 4.10.1
 2023-03-30 13:15:18 -04:00
Ilan Joselevich faf84687ce
Merge pull request #223754 from IndeedNotJames/nixos-loki 
nixos/loki: add `package` option
 2023-03-30 17:43:50 +03:00
K900 3947e917cf
Merge pull request #223760 from K900/nicer-pure-eval-error 
nixos/system: disallow system.copySystemConfiguration in pure eval mode
 2023-03-30 17:00:15 +03:00
IndeedNotJames f8f3eb7a48
nixos/loki: add package option 2023-03-30 14:35:53 +02:00
superherointj a180470959 nixos/k3s: start after network-online 2023-03-30 07:53:38 -03:00
simeplejack-src fe28e8f1e6 nixos/documentation: Fix desktopIcon, GenericName/Comment 2023-03-29 22:23:39 -04:00
Robert Scott 9a6aabc474
Merge pull request #223548 from enc0urage/fix-graphene-hardened 
nixos/malloc: set vm.max_map_count when using graphene-hardened
 2023-03-29 22:32:24 +01:00
Janet Cobb 1033d0f6ac (nixos/sanoid, nixos/syncoid): Add package options 
Allows changing the sanoid package to be used for these services.
 2023-03-29 17:23:51 -04:00
K900 48b2f723f5 nixos/system: disallow system.copySystemConfiguration in pure eval mode 
This is already broken, so let's give it a better error message.
 2023-03-29 17:49:30 +03:00
K900 542012fe24
Merge pull request #222336 from motiejus/master_synapse_signing_key_path 
matrix-synapse: fix signing key path in fix-permissions script
 2023-03-29 16:57:56 +03:00
Maëlys Bras de fer 86f3bba6d2
nixos/cfs-zen-tweaks: fix service name typo 2023-03-29 15:03:50 +02:00
Bernardo Meurer afbc94b2a8
Merge pull request #223661 from filakhtov/resolvconf-disable 2023-03-29 09:39:06 -03:00
Sandro c2ae278eb8
Merge pull request #221851 from Ma27/postgresql-jit-support 
postgresql: implement opt-in JIT support
 2023-03-29 13:29:30 +02:00
zendo 907bd4927b nixos/clash-verge: init module 2023-03-29 19:05:40 +08:00
Maximilian Bosch e2fb651752
nixos/postgresql: fix enableJIT 
Make sure that JIT is actually available when using

    services.postgresql = {
      enable = true;
      enableJIT = true;
      package = pkgs.postgresql_15;
    };

The current behavior is counter-intuitive because the docs state that
`enableJIT = true;` is sufficient even though it wasn't in that case
because the declared package doesn't have the LLVM dependency.

Fixed by using `package.withJIT` if `enableJIT = true;` and
`package.jitSupport` is `false`.

Also updated the postgresql-jit test to test for that case.
 2023-03-29 08:39:47 +02:00
Maximilian Bosch 43dbeae02d
postgresql: pass through JIT-enabled variant of non-JIT postgres and vice versa 
This is useful if your postgresql version is dependant on
`system.stateVersion` and not pinned down manually. Then it's not
necessary to find out which version exactly is in use and define
`package` manually, but just stay with what NixOS provides as default:

    $ nix-instantiate -A postgresql
    /nix/store/82fzmb77mz2b787dgj7mn4a8i4f6l6sn-postgresql-14.7.drv
    $ nix-instantiate -A postgresql_jit
    /nix/store/qsjkb72fcrrfpsszrwbsi9q9wgp39m50-postgresql-14.7.drv
    $ nix-instantiate -A postgresql.withJIT
    /nix/store/qsjkb72fcrrfpsszrwbsi9q9wgp39m50-postgresql-14.7.drv
    $ nix-instantiate -A postgresql.withJIT.withoutJIT
    /nix/store/82fzmb77mz2b787dgj7mn4a8i4f6l6sn-postgresql-14.7.drv

I.e. you can use postgresql with JIT (for complex queries only[1]) like
this:

    services.postgresql = {
      enable = true;
      enableJIT = true;
    };

Performing a new override instead of re-using the `_jit`-variants for
that has the nice property that overlays for the original package apply
to the JIT-enabled variant, i.e.

    with import ./. {
      overlays = [
        (self: super: {
          postgresql = super.postgresql.overrideAttrs (_: { fnord = "snens"; });
        })
      ];
    };
    postgresql.withJIT.fnord

still gives the string `snens` whereas `postgresql_jit` doesn't have the
attribute `fnord` in its derivation.

[1] https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-JIT-ABOVE-COST
 2023-03-29 08:39:46 +02:00
Peter Simons 7942e2e38f
Merge pull request #221108 from mrobbetts/bind_remove_allow_query 
bind: remove hard-coded `allow-query` config setting
 2023-03-29 07:50:47 +02:00
Garry Filakhtov d86e9911cd
nixos/modules/config/resolvconf.nix: skip systemPackages if disabled 
A change made in #166308 added `networking.resolvconf.package` to the
`environment.systemPackages` list, so it is installed as part of the
system image. However it does so unconditionally, meaning that even if
the `config.networking.resolvconf.enable` is set to false the package
listed in the `networking.resolvconf.package` would still be intalled.

This change makes it so the package installation will depend on the
status of the `config.networking.resolvconf.enable` option instead.
 2023-03-29 09:31:09 +11:00
nicoo deab2b3bf7 nixos/auto-cpufreq: Add configuration support. 2023-03-28 22:01:27 +00:00
Sandro fd46812f7e
Merge pull request #222667 from chuangzhu/proxychains-package 2023-03-28 22:19:38 +02:00
Daniel Nagy e1a383102f
nixos/x11: set XKB_CONFIG_ROOT from config 
The motivation is to make overriding `services.xserver.xkbDir` easier.
 2023-03-28 20:00:00 +02:00
Kasper Gałkowski 9a26e2dea9 merge master 2023-03-28 19:43:40 +02:00
Atemu 91f5aa3446
Merge pull request #213378 from Atemu/steam-env-vars 
steam: add extraEnv argument
 2023-03-28 17:25:14 +02:00
enc0urage a76bd96e4b nixos/malloc: set vm.max_map_count when using graphene-hardened 2023-03-28 10:18:20 +00:00
r-vdp 982ea4295b
NixOS/opengl: Use the default Mesa package by default. 
Fixes #223458
Fixes #223331
 2023-03-28 11:06:07 +02:00
Nick Cao ca7c52c4f5
Merge pull request #222762 from Kiskae/nvidia/530.41.03 
linuxPackages.nvidia_x11: 525.89.02 -> 530.41.03
 2023-03-28 08:23:48 +08:00
Ryan Lahfa 6fcf40805a
Merge pull request #223439 from mjlbach/fix/garage 
garage: fix missing stateVersion and default pkg
 2023-03-28 00:26:47 +02:00
Michael Lingelbach e6854e7d3a garage: fix missing stateVersion and default pkg 
* stateVersion was not in scope, added config.system.systemVersion
* garage_0_8_0 -> garage_0_8, the former does not exist
 2023-03-27 13:18:33 -07:00
Ryan Lahfa 16f67c4afc
Merge pull request #223242 from panicgh/nitrokey-libnitrokey 
libnitrokey: init at 3.8
 2023-03-27 22:07:24 +02:00
Ryan Lahfa 482c735228
Merge pull request #223388 from 06kellyjac/authelia-move 
authelia: move module under security and minor fixes
 2023-03-27 21:59:57 +02:00
K900 e74d28259d
Merge pull request #162479 from stuebinm/feature/mattermost-secrets 
nixos/mattermost: add secretFile option for declarative configs (again)
 2023-03-27 21:50:18 +03:00
stuebinm c29ca6704d mattermost: add environmentFile option to allow declarative secrets 
This adds an option `services.mattermost.environmentFile`, intended to be
useful especially when `services.mattermost.mutableConfig` is set to `false`.
Since all mattermost configuration options can also be set by environment
variables, this allows managing secret configuration values in a declarative
manner without placing them in the nix store.
 2023-03-27 20:46:01 +02:00
Jörg Thalheim d9c92360a8 nixos/install-grub: stop using bare file handles for readFile/WriteFile 2023-03-27 19:25:46 +02:00
Jörg Thalheim 5a23a24ba2 nixos/grub-install: don't rely on shell to run commands 
data passed to these programs might be accidentially interpreted as
shell. Discovered in https://github.com/Mic92/envfs/issues/111
 2023-03-27 19:21:55 +02:00
Sandro fc7d893822
Merge pull request #222592 from Luflosi/update/kubo 
kubo: 0.18.1 -> 0.19.0
 2023-03-27 15:24:34 +02:00
Lily Foster 6f07da7277
Merge pull request #220450 from arjan-s/qtile-options 
qtile: add more options to NixOS module and expose unwrapped package
 2023-03-27 07:23:15 -04:00
06kellyjac 9b60eef4bd authelia: move module under security and minor fixes 
Fixed test access to lib
Added nixos test to passthru
 2023-03-27 12:00:07 +01:00
Maximilian Bosch 3351d1bdb2
Merge pull request #223294 from SuperSandro2000/synapse.nix 
nixos/synapse: fix path
 2023-03-27 10:43:25 +02:00
Nicolas Benes 771d39638b nitrokey-udev-rules: replace with libnitrokey 2023-03-27 04:02:13 +02:00
Sandro Jäckel 40c8cebade
nixos/synapse: Fix incorrect module path after it was moved 
Fixes: 22f3d4e4db ("nixos: move matrix services into their category")
 2023-03-27 00:49:38 +02:00
Sandro Jäckel 056be64f11 nixos/podman: add example to enable network dns 2023-03-27 08:42:29 +10:00
Sandro 6f558d3009
Merge pull request #212599 from SuperSandro2000/podman-cleanup 2023-03-27 00:05:30 +02:00
Sandro 97d67f4a5f
Merge pull request #221643 from Tungsten842/wireshark-capabilities 2023-03-26 22:31:40 +02:00
github-actions[bot] 665b0409ad
Merge master into staging-next 2023-03-26 16:02:07 +00:00
Atemu 1f27e0b77a steam: add extraEnv option 2023-03-26 17:19:33 +02:00
Atemu 4731598712 nixos/steam: always apply extraLibraries and make them additive 
Before, setting {option}`programs.steam.package` would result in a steam without
the {option}`hardware.opengl.package`, {option}`hardware.opengl.extraPackages`
etc. You had to manually add them yourself.

Additionally, overlaying `steam = prev.steam.override { extraLibraries = [ ... ]; }`
resulted in those extra libraries not actually being put into the fhsenv because
they'd be fully overridden by the option's default.

Now, the user can supply a custom steam to {option}`programs.steam.package` with
its own list of extraLibraries which will not be overridden and overlays work as
expected too.
 2023-03-26 17:19:33 +02:00
Maximilian Bosch 0680f297f1
Merge pull request #223182 from dotlambda/nextcloud-x-robots-tag 
nixos/nextcloud: set X-Robots-Tag to "noindex, nofollow"
 2023-03-26 15:29:55 +02:00
github-actions[bot] 055dd6c5e5
Merge master into staging-next 2023-03-26 13:21:11 +00:00
K900 52038a5e50
Merge pull request #185528 from alois31/gdk-pixbuf-modules 
nixos/gdk-pixbuf: move GDK_PIXBUF_MODULE_FILE to sessionVariables
 2023-03-26 15:51:52 +03:00
K900 88edefb1b8
Merge pull request #223234 from Atemu/mesa-multi-version 
nixos/opengl: fix wrong function application
 2023-03-26 15:22:42 +03:00
Atemu 1d19eeefee nixos/opengl: fix wrong function application 
No idea how that one slipped through. Thanks for catching @maxeaubrey!
 2023-03-26 14:20:32 +02:00
Vladimír Čunát b544cd986c
Merge branch 'master' into staging-next 2023-03-26 11:38:50 +02:00
K900 22609a5d55
Merge pull request #217883 from Atemu/mesa-multi-version 
mesa_23: init at 23.0.1
 2023-03-26 11:53:44 +03:00
Robert Schütz 15b859cefe nixos/nextcloud: set X-Robots-Tag to "noindex, nofollow" 
Upstream did so in https://github.com/nextcloud/server/pull/36689 and
Nextcloud now complains that

    The "X-Robots-Tag" HTTP header is not set to "noindex, nofollow".
    This is a potential security or privacy risk, as it is recommended
    to adjust this setting accordingly.
 2023-03-25 19:48:13 -07:00
github-actions[bot] 07fb9cae4e
Merge master into staging-next 2023-03-26 00:02:45 +00:00
Atemu d8f58908ce nixos/opengl: mesa_22 -> mesa_23 2023-03-25 21:08:50 +01:00
Atemu 33a700b406 mesa: provide patch versions 
This allows us to bump the mesa attribute (used by many packages, see
https://github.com/NixOS/nixpkgs/issues/218232) independently from the packages
used by NixOS users.
 2023-03-25 21:08:50 +01:00
Atemu bf1785d0a9 nixos/opengl: add mesaPackage option 2023-03-25 21:08:50 +01:00
Lin Jian 4482c70530 nixos/kanata: notify systemd when starting up is finished 
- set service type to notify
- allow unix socket which is needed by systemd notify
 2023-03-25 20:56:48 +01:00
github-actions[bot] 392b3f3dc3
Merge master into staging-next 2023-03-25 18:01:17 +00:00
pennae dce79b3cb1
Merge pull request #221877 from ambroisie/woodpecker-agents 
nixos/woodpecker: refactor to multi-agents setup
 2023-03-25 16:32:55 +01:00
github-actions[bot] 6a3acb9982
Merge master into staging-next 2023-03-25 06:05:24 +00:00
Nick Cao 851cd65a21
Merge pull request #220776 from Vonfry/deprecated/fcitx4 
fcitx: remove version 4
 2023-03-25 10:23:06 +08:00
06kellyjac 6373a3966b nixos/authelia: init module 
Co-authored-by: Martin Weinelt <hexa@darmstadt.ccc.de>
 2023-03-24 21:23:41 -03:00
github-actions[bot] cead7e3e73
Merge master into staging-next 2023-03-25 00:02:20 +00:00
Kevin Mehall fef4baca37
nixos/ssh: Update github.com host key in programs.ssh.knownHostsFiles example 
The `programs.ssh.knownHostsFiles` option documentation uses github.com's host keys as an example. GitHub recently announced that the ssh-rsa key has been compromised and rotated it.

The new key can be checked against
https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/
https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints
 2023-03-24 11:51:46 -07:00
oddlama ba0a1611fc
nixos/nginx: fix warning about duplicate mime entry 2023-03-24 19:44:00 +01:00
github-actions[bot] f2ead7fbda
Merge master into staging-next 2023-03-24 12:01:43 +00:00
Ryan Lahfa a119bfc80d
Merge pull request #211603 from farcaller/fish 
Assert that fish configuration is enabled if any user has fish as their shell
 2023-03-24 12:05:22 +01:00
Kiskae c3ce711249 nixos/nvidia: re-enable IBT for newer drivers 2023-03-24 11:37:35 +01:00
Vladimír Čunát 12dd95fbb1
Merge branch 'master' into staging-next 2023-03-24 09:07:41 +01:00
Will Fancher 5a9b9e620d
Merge pull request #176828 from therishidesai/luks-multi-key-files 
nixos/luksroot: add tryEmptyPassphrase option
 2023-03-24 03:02:20 -04:00
Bruno BELANYI 6048912d8b nixos/woodpecker-*: add myself as maintainer 2023-03-23 21:33:21 +00:00
Bruno BELANYI 67de7d105e nixos/woodpecker-agents: per-agent 'enable' option 2023-03-23 21:33:20 +00:00
Matt Melling 177b6a4bc3
cloudlog: remove import-from-derivation in config 2023-03-23 21:21:57 +00:00
Bruno Bigras 022436c47b nixos/logrotate: fix typo 2023-03-23 16:09:47 -04:00
K900 fae7294cf5
Merge pull request #222689 from K900/bye-dpi-2 
nixos/hidpi: remove harder
 2023-03-23 22:13:06 +03:00
K900 c9a74cf40f nixos/fontconfig: time capsule 2023-03-23 22:03:35 +03:00
Chuang Zhu 46344c77b3 nixos/proxychains: add package option 2023-03-24 02:55:11 +08:00
K900 8454084ffc nixos/hidpi: remove harder 
We can't agree on what the right settings are (see #222236), so let's make the users choose.
 2023-03-23 21:50:45 +03:00
github-actions[bot] 307b719414
Merge master into staging-next 2023-03-23 18:01:20 +00:00
Jan Tojnar 598cf2090c
Merge pull request #218990 from SuperSandro2000/dgraph 
dgraph: use --prefix to prefix PATH
 2023-03-23 16:40:43 +01:00
Ryan Lahfa e774156726
Merge pull request #222269 from SuperSandro2000/gitea-disable-updater 
nixos/gitea: disable updater by default
 2023-03-23 15:23:49 +01:00
Bruno BELANYI cd116db45e nixos/woodpecker-agents: bind network files 
Otherwise the agent might experience trouble with DNS resolution [1].

[1]: https://github.com/woodpecker-ci/plugin-git/issues/65
 2023-03-23 14:16:45 +00:00
Bruno BELANYI eb3bea6359 nixos/woodpecker-agents: simplify 'extraGroups' handling 2023-03-23 14:16:45 +00:00
Bruno BELANYI c3afdb82db nixos/woodpecker-agents: use list for environment files 2023-03-23 14:16:44 +00:00
Sandro Jäckel 20842ac039
nixos/gitea: disable updater by default 2023-03-23 14:46:51 +01:00
Sandro 995f9d1c95
Merge pull request #213874 from SuperSandro2000/nginx-zstd 
nixos/nginx: add recommendedZstdSettings
 2023-03-23 14:11:35 +01:00
Bruno BELANYI e4f5f1b718 nixos/woodpecker: refactor to multi-agents setup 
The module file has been renamed from `agent.nix` to `agents.nix` to
mirror the change.
 2023-03-23 12:47:47 +00:00
Vladimír Čunát 09c3a593df
Merge branch 'master' into staging-next 2023-03-23 11:13:46 +01:00
Weijia Wang 52ee7a6a92
Merge pull request #203236 from Flakebi/fail2ban 
fail2ban: 0.11.2 -> 1.0.2
 2023-03-23 10:36:14 +02:00
github-actions[bot] 705ac3185e
Merge master into staging-next 2023-03-23 06:01:22 +00:00
Nick Cao 1285c0a09b
Merge pull request #222205 from NickCao/zram-writeback-device 
nixos/zram: add writebackDevice option and corresponding test
 2023-03-23 13:14:08 +08:00
github-actions[bot] 6a3714135d
Merge master into staging-next 2023-03-23 00:02:14 +00:00
Maximilian Bosch c042a318a7
Merge pull request #222372 from NixOS/nextcloud26 
nextcloud26: init at 26.0.0
 2023-03-22 23:35:31 +01:00
Christoph Heiss c9c9abc608 openssh: fix 'undefined variable' error 
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
 2023-03-22 22:38:14 +01:00
Maximilian Bosch 42c78ccc6b nixos/nextcloud: release notes 2023-03-22 22:37:17 +01:00
Maximilian Bosch cbc539c19f nixos/nextcloud: minor fixups 
* Apply review comments.
* Default to PHP 8.2 for v26.
 2023-03-22 22:37:17 +01:00
Maximilian Bosch 6a0b0a5de9 nextcloud: remove compat references to v23 
This is not needed anymore because the version is EOL for almost a year
now and we don't even have the packages anymore, only the attributes for
compatibility for upgrades from older NixOS versions.
 2023-03-22 22:37:17 +01:00
Raito Bezarius dd96b7d8b4 nextcloud26, nixos/web-apps/nextcloud: drop the autocreate db user patch and wire the default in the NixOS module 2023-03-22 22:37:16 +01:00
Raito Bezarius 5e5c4c975a nixos/web-apps/nextcloud: introduce nextcloud26 2023-03-22 22:37:13 +01:00
pennae 31f422d95f
Merge pull request #218721 from apfelkuchen6/nw 
nixos/networkd: add some missing options
 2023-03-22 22:22:03 +01:00
Ryan Lahfa 5b88469c21
Merge pull request #217366 from puppe/fix-yggdrasil 
nixos/yggdrasil: fix configFile option
 2023-03-22 20:18:25 +01:00
Ryan Lahfa 54de698c6f
Merge pull request #221576 from paumr/nixos-generate-config_fix_syntax 
nixos-generate-config: fix invalid sample config
 2023-03-22 20:10:43 +01:00
Luflosi ef9c99a035
nixos/kubo: add QUICv1 and WebTransport to Addresses.Swarm list 
According to https://github.com/ipfs/kubo/blob/v0.18.0/docs/config.md#addressesswarm, the default list of swarm multiaddrs includes QUICv1 and WebTransport since v0.18.0.
More information can be found in the release notes at https://github.com/ipfs/kubo/releases/tag/v0.18.0.
 2023-03-22 20:02:56 +01:00
github-actions[bot] 85f7b5276e
Merge master into staging-next 2023-03-22 18:01:11 +00:00
K900 d0f7d224da nixos/firewall-nftables: avoid using wildcards 
Those were added in kernel 5.13, which is newer than our oldest supported.
 2023-03-22 17:45:05 +03:00
Rishi Desai cccc3f8a8e nixos/luksroot: add tryEmptyPassphrase option 2023-03-22 09:17:23 -05:00
Weijia Wang 2d50326244
Merge pull request #222526 from wegank/wxgtk30-drop 
wxGTK30, wxmac: drop
 2023-03-22 16:13:12 +02:00
woojiq 296e7f92cd keyd: add keyd service and test 
The keyd package already exists, but without a systemd service.

Keyd requires write access to /var/run to create its socket. Currently
the directory it uses can be changed with an environment variable, but
the keyd repo state suggests that this may turn into a compile-time
option. with that set, and some supplementary groups added, we can run
the service under DynamicUser.

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>
 2023-03-22 15:12:29 +01:00
github-actions[bot] 0537539006
Merge master into staging-next 2023-03-22 12:01:22 +00:00
Weijia Wang 366e108e41 wxGTK30, wxmac: drop 2023-03-22 13:56:44 +02:00
K900 5bf9765c0a
Merge pull request #217482 from motiejus/headscale_oidc_client_secret 
headscale: natively support oidc.client_secret_path
 2023-03-22 14:30:03 +03:00
github-actions[bot] 797a2b9bcc
Merge master into staging-next 2023-03-21 18:01:07 +00:00
figsoda 8dd5f6227d
Merge pull request #220928 from figsoda/starship 2023-03-21 13:50:53 -04:00
Lassulus 3839340fdb
Merge pull request #220656 from oxzi/restic-cache-fix 
nixos/restic: generalize cache configuration
 2023-03-22 00:37:46 +07:00
Ryan Lahfa 06541976aa
Merge pull request #222236 from K900/bye-dpi 
nixos/hidpi: remove
 2023-03-21 15:04:59 +01:00
K900 39c344c893 nixos/console: let the kernel pick the default font 2023-03-21 13:29:57 +01:00
K900 4787ebf7ae nixos/hidpi: remove 
The single option tries to do too much work, which just ends up confusing people.

So:
- don't force the console font, the kernel can figure this out as of #210205
- don't force the systemd-boot mode, it's an awkward mode that's not supported
  on most things and will break flicker-free boot
- add a separate option for the xorg cursor scaling trick and move it under the xorg namespace
- add a general `fonts.optimizeForVeryHighDPI` option that explicitly says what it does
- alias the old option to that
- don't set any of those automatically in nixos-generate-config
 2023-03-21 13:29:57 +01:00
Martin Weinelt ffe3165b27
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
- nixos/doc/manual/release-notes/rl-2305.section.md
 2023-03-21 12:35:53 +01:00
Motiejus Jakštys f2b3bed847 matrix-synapse: fix signing key path in fix-permissions script 
The preStart script will fail if the signing_key_path is nonstandard.
 2023-03-21 13:21:24 +02:00
Weijia Wang 4af0426bba
Merge pull request #222149 from wegank/limesurvey-bump 
limesurvey: 3.27.33+220125 -> 5.6.9+230306
 2023-03-21 08:52:42 +02:00
Nick Cao cd3ffbdfe6
nixos/zram: add writebackDevice option and corresponding test 2023-03-21 09:26:27 +08:00
Sandro 680e4d75b0
Merge pull request #222006 from mdarocha/remove-baget 2023-03-21 01:39:54 +01:00
ettom a375b000a6 nixos/zeyple: init 2023-03-21 00:14:03 +02:00
github-actions[bot] 75c28ec351
Merge master into staging-next 2023-03-20 18:01:16 +00:00
Sandro Jäckel 3a5de0e725
nixos/tmp: add a note to useTmpfs on potential issues 2023-03-20 17:27:06 +01:00
Vladimír Čunát d970a81035
Merge branch 'staging' into staging-next 
(it's slightly older staging)
 2023-03-20 16:27:31 +01:00
Alvar Penning 0810a6e018 nixos/prometheus.alertmanagerIrcRelay: init 
Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
 2023-03-20 15:57:11 +01:00
Martin Weinelt 9959ec97f8
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
- pkgs/development/python-modules/wxPython/4.0.nix
- pkgs/development/python-modules/wxPython/4.1.nix
 2023-03-20 15:07:36 +01:00
Weijia Wang b64eb5bbbf limesurvey: 3.27.33+220125 -> 5.6.9+230306 2023-03-20 14:31:32 +02:00
Sandro 6f8210495c
Merge pull request #221684 from SuperSandro2000/portunus-localhost 
nixos/portunus: fix portunus not only listening on localhost
 2023-03-20 13:25:34 +01:00
Lily Foster ccae7d35d8
Merge pull request #221075 from fufexan/regreet 
nixos/regreet: init
 2023-03-20 08:22:18 -04:00
github-actions[bot] f785fd289c
Merge master into staging-next 2023-03-20 12:01:29 +00:00
K900 af8b2c25ee
Merge pull request #222151 from nazarewk/supergfxd-path 
supergfxd: add missing kmod to PATH
 2023-03-20 11:53:33 +03:00
Krzysztof Nazarewski ed4ce16637
supergfxd: add missing kmod to PATH 2023-03-20 09:44:47 +01:00
github-actions[bot] 96f7385465
Merge master into staging-next 2023-03-20 00:02:29 +00:00
Mihai Fufezan 692c28ec10
nixos/regreet: init 2023-03-20 02:01:50 +02:00
Sandro Jäckel dc5ffba52d
nixos/portunus: fix portunus not only listening on localhost 
Closes #221678
 2023-03-19 22:16:03 +01:00
Maximilian Bosch 23c5acad6a
Merge pull request #222042 from Ma27/fix-matrix-wellknown-example 
nixos/doc: fix .well-known example for matrix-synapse
 2023-03-19 21:44:19 +01:00
K900 f1d538b459
Merge pull request #221376 from laalsaas/plasma-exclude-packages 
plasma5: move excludePackages option for consistency
 2023-03-19 22:33:56 +03:00
Ryan Lahfa 618ba94934
Merge pull request #210205 from 9ary/kernel-fonts 
Build the large Terminus font into the kernel
 2023-03-19 20:13:25 +01:00
laalsaas 62b3fd5fd2
plasma5: move excludePackages option for consistency 2023-03-19 20:12:31 +01:00
Sandro 1641813e3b
Merge pull request #217515 from tensor5/nextcloud-s3-sse-c 2023-03-19 20:06:23 +01:00
Arjan Schrijver 1addf91b0b qtile: add more options and expose unwrapped package 2023-03-19 19:43:32 +01:00
Ryan Lahfa aa85df4561
Merge pull request #194594 from nbraud/hidpi 
nixos/hidpi: Harmonise default with documented recommendations
 2023-03-19 19:22:40 +01:00
Ryan Lahfa 49966f2c71
Merge pull request #221642 from Izorkin/fix-roundcube-tmp 
nixos/roundcube: add tmp directory
 2023-03-19 19:16:05 +01:00
Sandro Jäckel a5d95ac5fc
nixos/tmp: move /tmp options under boot.tmp 2023-03-19 18:49:37 +01:00
Maximilian Bosch 8c118951d5
nixos/doc: fix .well-known example for matrix-synapse 
I'm using this config on my homeserver and while trying out alternative
Matrix clients I discovered (pun intended) that the auto-discovery of my
homeserver is broken. While investigating I found out that neither the
JS nor the Rust SDK (tested via element-web and fractal) are happy about
an empty `m.identity_server`-block. Removing this part fixed the problem
for me.
 2023-03-19 17:38:32 +01:00
mdarocha 4062f28a76 baget: remove due to upstream being unmaintained 2023-03-19 14:19:49 +01:00
github-actions[bot] 7c9f4934b8
Merge master into staging-next 2023-03-19 12:01:32 +00:00
Bjørn Forsman 48b0aa7164 nixos/sssd: create symlinks in /etc to fix sssctl 
Without this, sssctl fails to read its configuration. Update the NixOS
test to ensure sssctl doesn't regress.
 2023-03-19 09:28:35 +01:00
github-actions[bot] c70342c89c
Merge master into staging-next 2023-03-19 00:02:27 +00:00
Alois Wohlschlager efd23ff1c8
nixos/gdk-pixbuf: move GDK_PIXBUF_MODULE_FILE to sessionVariables 
Some environments do not load /etc/profile, so environment.variables do
not work. In particular, this is the case for Plasma Wayland.

Use environment.sessionVariables for setting that variable instead,
which is handled by PAM and hence more reliable.
 2023-03-18 20:19:01 +01:00
Jörg Thalheim 2c19718bee dendrite: 0.11.0 -> 0.12.0 
Diff: https://github.com/matrix-org/dendrite/compare/v0.12.0...v0.12.0

Changelog: https://github.com/matrix-org/dendrite/releases/tag/v0.12.0
 2023-03-18 15:35:47 +01:00
github-actions[bot] a912b83051
Merge master into staging-next 2023-03-18 12:01:30 +00:00
talyz ccaa6078ba
nixos/gitlab: Fix error when GitLab Pages is not enabled 
Even if GitLab is used without Pages, some of its settings are still
used in the gitlab.yml file, resulting in errors such as

error: The option `services.gitlab.pages.settings.pages-domain' is used but not defined.

To fix this, make the settings' usage conditional on Pages being
enabled.
 2023-03-18 11:34:51 +01:00
Atemu bd7309c5a3
Merge pull request #221469 from wegank/solr-drop 
solr: drop
 2023-03-18 10:17:43 +01:00
github-actions[bot] 36748936f9
Merge master into staging-next 2023-03-18 06:01:16 +00:00
Sandro 8aedbfa038
Merge pull request #181013 from aidalgol/peroxide 2023-03-18 01:55:30 +01:00
github-actions[bot] 2c8e6963dc
Merge master into staging-next 2023-03-18 00:02:30 +00:00
K900 38d9db299e nixos/plasma5: remove supportDDC option 
The code for this was actually removed in #172078.
 2023-03-17 23:39:08 +03:00
Aidan Gauland 7fb4aae81f
nixos/peroxide: add module for peroxide service 2023-03-18 07:43:59 +13:00
Bouke van der Bijl cf90db8b70 nixiso/opentelemetry-collector: init 2023-03-17 19:18:59 +01:00
github-actions[bot] d761f69867
Merge master into staging-next 2023-03-17 17:57:00 +00:00
Izorkin 6263c45580
nixos/roundcube: add tmp directory 2023-03-17 19:40:23 +03:00
Sandro 7ec767ff54
Merge pull request #173697 from jmbaur/avahi-daemon-deny-interfaces 
nixos/avahi: add denyInterfaces option
 2023-03-17 17:11:49 +01:00
Savyasachee Jha 4177ddcfd6 doas: refactor config generation 
According to Ted Unangst, since doas evaluates rules in a last
matched manner, it is prudent to have the "permit root to do everything
without a password at the end of the file.

Source: https://flak.tedunangst.com/post/doas-mastery
 2023-03-17 09:05:08 -07:00
Tungsten842 8668d96c28 nixos/wireshark: set the correct capabilities 2023-03-17 13:17:36 +01:00
github-actions[bot] 2394986204
Merge master into staging-next 2023-03-17 12:01:17 +00:00
Weijia Wang 32f39395a7
Merge pull request #210101 from helsinki-systems/upd/jitsi 
Update of all Jitsi Meet components
 2023-03-17 12:23:14 +02:00
paumr a6b712f8a4 nixos-generate-config: fix invalid sample config 
This issue was reported in #221510
 2023-03-17 01:24:28 +01:00
github-actions[bot] d96e74c8b8
Merge staging-next into staging 2023-03-17 00:03:06 +00:00
github-actions[bot] 6746017444
Merge master into staging-next 2023-03-17 00:02:33 +00:00
Pascal Bach 7c166f412b
Merge pull request #221096 from awakesecurity/minio-paths 
nixos/minio: gracefully handle root credentials file
 2023-03-16 20:56:37 +01:00
github-actions[bot] 2530eb2c82
Merge staging-next into staging 2023-03-16 18:01:58 +00:00
github-actions[bot] 455127ad5e
Merge master into staging-next 2023-03-16 18:01:20 +00:00
John Soo 740fea3edd
fixup! nixos/minio: activate/restart service on credentials path changes 2023-03-16 09:45:09 -07:00
Bernardo Meurer 79cfdf110a
Merge pull request #219351 from tie/make-bios-bootable 2023-03-16 11:33:03 -03:00
Weijia Wang c24a8ccc98 solr: drop 2023-03-16 16:17:04 +02:00
Bernardo Meurer 6e55733359
Merge pull request #219747 from Stunkymonkey/deprecate-isNull 2023-03-16 11:10:22 -03:00
s1341 6d299334b0 nixos/freeipa: init 2023-03-16 08:40:13 +02:00
apfelkuchen06 0ddfb0a5df nixos/networkd: add BridgeVLAN options 2023-03-16 03:31:04 +01:00
apfelkuchen06 cd650b3fa3 nixos/networkd: add QuickFairQueueingClass options 2023-03-16 03:31:04 +01:00
apfelkuchen06 fde806d5a5 nixos/networkd: add QuickFairQueueing options 2023-03-16 03:31:04 +01:00
apfelkuchen06 493ed75418 nixos/networkd: add HeavyHitterFilter options 2023-03-16 03:31:04 +01:00
apfelkuchen06 88d99a3630 nixos/networkd: add HierarchyTokenBucketClass options 2023-03-16 03:31:04 +01:00
apfelkuchen06 24df07c786 nixos/networkd: add HierarchyTokenBucket options 2023-03-16 03:31:03 +01:00
apfelkuchen06 29e5451963 nixos/networkd: add TrivialLinkEqualizer options 2023-03-16 03:31:03 +01:00
apfelkuchen06 cf470ebd88 nixos/networkd: add FairQueueing options 2023-03-16 03:31:03 +01:00
apfelkuchen06 dbc14e5a44 nixos/networkd: add FairQueueingControlledDelay options 2023-03-16 03:31:03 +01:00
apfelkuchen06 5b5c79c6a0 nixos/networkd: add GenericRandomEarlyDetection options 2023-03-16 03:28:23 +01:00
apfelkuchen06 ca496f8754 nixos/networkd: add EnhancedTransmissionSelection options 2023-03-16 03:28:23 +01:00
apfelkuchen06 3cde7aaa36 nixos/networkd: add DeficitRoundRobinSchedulerClass options 2023-03-16 03:28:23 +01:00
apfelkuchen06 0d06e85996 nixos/networkd: add DeficitRoundRobinScheduler options 2023-03-16 03:28:23 +01:00
apfelkuchen06 49df6bc669 nixos/networkd: add ControlledDelay options 2023-03-16 03:28:23 +01:00
apfelkuchen06 728108555e nixos/networkd: add CAKE options 2023-03-16 03:28:23 +01:00
apfelkuchen06 7a6cae0e15 nixos/networkd: add PFIFOFast options 2023-03-16 03:28:23 +01:00
apfelkuchen06 f75ec30fee nixos/networkd: add PFIFOHeadDrop options 2023-03-16 03:28:23 +01:00
apfelkuchen06 d9e1963a15 nixos/networkd: add BFIFO options 2023-03-16 03:28:22 +01:00
apfelkuchen06 f2ca28f658 nixos/networkd: add PFIFO options 2023-03-16 03:28:22 +01:00
apfelkuchen06 51689e86b9 nixos/networkd: add StochasticFairnessQueueing options 2023-03-16 03:28:22 +01:00
apfelkuchen06 736650ccf1 nixos/networkd: add StochasticFairBlue options 2023-03-16 03:28:22 +01:00
apfelkuchen06 872a4823cf nixos/networkd: add FlowQueuePIE options 2023-03-16 03:28:22 +01:00
apfelkuchen06 2784862e41 nixos/networkd: add PIE options 2023-03-16 03:28:22 +01:00
apfelkuchen06 d63035329e nixos/networkd: add TokenBucketFilter options 2023-03-16 03:28:21 +01:00
apfelkuchen06 55cd970d73 nixos/networkd: add NetworkEmulator options 2023-03-16 03:28:21 +01:00
apfelkuchen06 b08e5be98d nixos/networkd: add QDisc options 2023-03-16 03:28:21 +01:00
apfelkuchen06 09e745c784 nixos/networkd: add IPoIB options 2023-03-16 03:28:21 +01:00
apfelkuchen06 df14953724 nixos/networkd: add CAN options 2023-03-16 03:28:21 +01:00
apfelkuchen06 a7724b8f91 nixos/networkd: add LLDP options 2023-03-16 03:28:21 +01:00
apfelkuchen06 ae15b86d4d nixos/networkd: add BridgeMDB option 2023-03-16 03:28:21 +01:00
apfelkuchen06 d646f7c7f2 nixos/networkd: add BridgeFDB options 2023-03-16 03:28:21 +01:00
apfelkuchen06 28ddd570f7 nixos/networkd: add Bridge options 2023-03-16 03:28:20 +01:00
apfelkuchen06 590ccae1f8 nixos/networkd: add L2TP options 2023-03-16 03:28:20 +01:00
Majiir Paktu 1021a7d928 nixos/ddclient: fix permissions warning 2023-03-15 17:47:08 -04:00
github-actions[bot] 795332a826
Merge staging-next into staging 2023-03-15 18:01:44 +00:00
Martin Weinelt 578fb7fd1f
Merge pull request #220557 from mweinelt/libxcrypt-strong 
libxcrypt: Build only with strong hashes
 2023-03-15 16:43:12 +00:00
Vladimír Čunát a86610144f
Merge #219444: staging-next 2023-03-04 2023-03-15 17:35:39 +01:00
Sandro fbeb9b9a96
Merge pull request #215835 from illustris/hbase 
nixos/hbase: add thrift and rest servers
 2023-03-15 16:55:36 +01:00
Sandro 83dcadaf61
Merge pull request #218482 from illustris/ec2-metadata 
nixos/ec2: don't populate nonexistent metadata files
 2023-03-15 16:53:40 +01:00
Sandro c817b58614
Merge pull request #220278 from bdd/fix-binfmt-x86_64-windows-extension 
nixos/binfmt: fix extension for Windows binaries
 2023-03-15 16:15:47 +01:00
Martin Weinelt 1c52b361a8
Merge remote-tracking branch 'origin/master' into staging-next 2023-03-15 14:36:40 +01:00
Robert Hensing c3b245d540
Merge pull request #195511 from DeterminateSystems/include-build-deps 
nixos/top-level: add includeBuildDependencies option
 2023-03-15 13:33:24 +01:00
Charles Hall 65c6ffaae9 don't enable lightdm if greetd is enabled 2023-03-15 13:26:41 +01:00
github-actions[bot] a3b786aa94
Merge staging-next into staging 2023-03-15 00:03:06 +00:00
Martin Weinelt 231c1145f2
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
- pkgs/development/python-modules/rflink/default.nix
 2023-03-14 22:33:40 +01:00
Janik H dafedbbba6 nixos/woodpecker: init 2023-03-14 20:31:39 +01:00
github-actions[bot] 9feb9fda3e
Merge staging-next into staging 2023-03-14 18:02:00 +00:00
github-actions[bot] 2df6c043e6
Merge master into staging-next 2023-03-14 18:01:25 +00:00
K900 1fab86929f nixos/pipewire: spring cleaning 
- drop media-session (rip 💀)
- stop trying to let people override default configs, those never got merged correctly
- drop all the complexity arising from having to vendor default config files
- build docs in sandbox as we no longer recurse
 2023-03-14 20:31:32 +03:00
K900 b8ac3f9a93 pipewire: 0.3.66 -> 0.3.67 2023-03-14 20:31:03 +03:00
Kasper Gałkowski e5eb0322a2 merge master 2023-03-14 17:07:39 +01:00
Sandro 66e0910e86
Merge pull request #199729 from peat-psuwit/zoneminder-1.36.31 
zoneminder, nixos/zoneminder: 1.36.28 -> 1.36.31, fix issues relating to upgrade
 2023-03-14 17:02:05 +01:00
Martin Weinelt 9e4d592114
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
- pkgs/development/python-modules/eve/default.nix
 2023-03-14 16:49:37 +01:00
Linus Heckemann 7ca65eeecf
Merge pull request #219354 from Izorkin/update-profiles-base 
nixos/profiles: optimize base and minimal profiles
 2023-03-14 14:45:15 +01:00
Domen Kožar c08c079893
Merge pull request #216635 from DavHau/patch-4 
services.cachix-watch-store: fix description of compressionLevel
 2023-03-14 13:44:58 +00:00
Thomas Dy fbb554fa58 nixos/kubernetes: update coredns 1.7.1 -> 1.10.1 2023-03-14 22:15:43 +10:00
github-actions[bot] 60e9cbe0f9
Merge staging-next into staging 2023-03-14 12:02:08 +00:00
Linus Heckemann eb45cd5108 nixos/top-level: add includeBuildDependencies option 
This option allows adding the build closure of the system to its
runtime closure, enabling fully-offline rebuilds (as long as no new
packages are added).
 2023-03-14 11:55:13 +01:00
Martin Weinelt 6b67186fe9
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
- pkgs/development/python-modules/crownstone-cloud/default.nix
- pkgs/development/python-modules/exrex/default.nix
- pkgs/development/python-modules/mkdocs-minify/default.nix
- pkgs/development/python-modules/myjwt/default.nix
- pkgs/development/tools/analysis/checkov/default.nix
 2023-03-14 08:14:26 +01:00
Franz Pletz bc0a1dd982
Merge pull request #220461 from SuperSandro2000/prometheus 
prometheus: 2.41.0 -> 2.42.0, split outputs, other cleanups
 2023-03-14 05:28:59 +01:00
Matthew Robbetts f5b754881d bind: remove hard-coded allow-query config file entry, so it can be customized via extraConfig 2023-03-13 20:47:02 -07:00
John Soo e30469a37b
nixos/minio: activate/restart service on credentials path changes 
Otherwise the `minio.service` service will fail either:

* with a message that the EnvironmentFile does not exist
* or silently with potentially stale credentials
 2023-03-13 17:43:19 -07:00
John Soo 7f85002ec0
nixos/minio: format with nixpkgs-fmt 2023-03-13 17:36:52 -07:00
Artturi b978bf0f0f
Merge pull request #220570 from Artturin/fixlints1 2023-03-14 02:15:55 +02:00
Artturi 9d18216aa3
Merge pull request #221050 from Luflosi/nixos-generate-config-microcode-condition 
nixos-generate-config: update microcode only on bare metal
 2023-03-13 22:56:28 +02:00
7c6f434c f7eeb48523
Merge pull request #213301 from bcc32/atop-dont-leave-new-log-files 
nixos/atop: Remove upgraded logfiles if not replaced
 2023-03-13 20:20:40 +00:00
Luflosi 1d65c7279c
nixos-generate-config: update microcode only on bare metal 
Guest operating systems inside VMs or containers can't update the host CPU's microcode for obvious security reasons, so setting the `hardware.cpu.*.updateMicrocode` options is pointless.
 2023-03-13 20:15:13 +01:00
github-actions[bot] 59ffe854f9
Merge staging-next into staging 2023-03-13 18:01:48 +00:00
Martin Weinelt bb14c4255b Merge remote-tracking branch 'origin/master' into staging-next 2023-03-13 17:14:19 +00:00
Florian Klink 504d66bae9
Merge pull request #216826 from gdamjan/systemd-253 
systemd: 252.5 -> 253
 2023-03-13 17:37:39 +01:00
Marcus Ramberg f834dfad8f nimdow: Add nixos windowmanager option 2023-03-13 11:37:32 -05:00
Vonfry 4e8ad00ae8
fcitx: remove packages and update documentations and aliases to fcitx5 2023-03-13 18:50:05 +08:00
Vonfry 051b74fe7d
nixos/fcitx: deprecated, and suggestions to use fcitx5 instead 2023-03-13 18:47:05 +08:00
Vladimír Čunát 2d51a0e8ad
Merge branch 'master' into staging-next 2023-03-13 08:25:10 +01:00
Martin Weinelt 4472cf44eb
treewide: Make yescrypt the default algorithm for pam_unix.so 
This ensures `passwd` will default to yescrypt for newly generated
passwords.
 2023-03-13 07:54:27 +01:00
Martin Weinelt 0d7cd66652
nixos/users-groups: Update password scheme validation 
Updates the warnings message for statefully set up passwords, now that
weak algorithms have been removed from our libxcrypt package.

Additionall we now add proper validation for hashing schemes used in
`hashedPassword`.

Neither will prevent a rebuiild, but instead issue a warning, that this
requires immediate remediation, or else users will be unable to login.

Reuses the crypt scheme ids as provided by the libxcrypt package.
 2023-03-13 07:54:27 +01:00
Elis Hirwing ce76a6838c
Merge pull request #203487 from jocelynthode/init-readarr 
readarr: init at 0.1.4.1596
 2023-03-13 06:56:35 +01:00
Lassulus 47233b27c9
Merge pull request #167319 from schnusch/cgit 2023-03-13 09:51:08 +07:00
figsoda 928c8115ba nixos/starship: add interactiveOnly option 2023-03-12 21:23:23 -04:00
Ben Wolsieffer b92dae961c nixos/chrony: allow @chown syscall set 
The module was allowing specific chown syscalls, which is brittle because
there are several and different ones are used by glibc on different
architectures. For example, fchownat was already added to the allowlist for
aarch64, while on armv6l chrony crashes because chown32 is not in the
allowlist.

systemd provides the @chown syscall set, which includes all the chown
syscalls and avoids this brittleness. I believe the syscalls would all be
equivalent from an attacker's perspective, so there is unlikely to be any
security impact.
 2023-03-12 18:10:56 -05:00
Martin Weinelt d03d74aa67
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
- pkgs/development/python-modules/aiopulse/default.nix
- pkgs/development/python-modules/identify/default.nix
- pkgs/development/python-modules/spur/default.nix
 2023-03-12 23:28:23 +01:00
nicoo df4faec23b nixos/hidpi: Explicitely refer to fontconfig.nix for the choice of defaults 2023-03-12 21:33:38 +00:00
Jocelyn Thode e7f54823b1
readarr: init at 0.1.4.1596 2023-03-12 20:54:23 +01:00
Guillaume Girol db901673ea
Merge pull request #209156 from pwaller/issue-114594 
nixos/grub: Name initrd-secrets by system, not by initrd
 2023-03-12 18:50:33 +00:00
Vladimír Čunát 1dd94ad62f
Merge branch 'master' into staging-next 2023-03-12 09:06:28 +01:00
Ryan Lahfa ac93edb3ac
Merge pull request #209829 from notgne2/fix/systemd-boot-always-profile-path 
nixos/systemd-boot: always use profile_path() for system closure paths
 2023-03-11 22:08:18 +01:00
Janne Heß 6798068e84
Merge pull request #220555 from lilyinstarlight/feature/fwupd-uefi-capsule 
nixos/fwupd: add settings option for uefi_capsule.conf
 2023-03-11 20:04:32 +01:00
github-actions[bot] feb117e32c
Merge master into staging-next 2023-03-11 18:01:19 +00:00
Jonas Heinrich 161a1ca129
Merge pull request #191974 from tu-maurice/btrbk-doas 
btrbk: Use sudo or doas based on configuration
 2023-03-11 16:10:50 +01:00
Lily Foster 9c1d627508
Merge pull request #208414 from RossComputerGuy/feat/java-binfmt 
nixos/java: add binfmt option
 2023-03-11 10:04:43 -05:00
nachoslover813260 4b0bc9ea72 nixos/plasma5: add ark as an optional package instead 2023-03-11 21:29:24 +08:00
nachoslover813260 9e8f51fc6c Adding Ark as a file archiver 
Since the default plasma desktop already got dolphin-plugins adding ark for archiving would make plasma desktop more complete as well
 2023-03-11 21:29:24 +08:00
Alvar Penning adafbeff4a nixos/restic: generalize cache configuration 
The restic repository cache location defaults to ~/.cache/restic when
not overwritten either by the --cache-dir command line parameter or the
universal RESTIC_CACHE_DIR environment variable.

Currently, the --cache-dir variable is set to only some restic commands,
but, e.g., not to the unit's preStart command for the module's
initialize option. This results in two distinct cache locations, one at
~/.cache/restic for the initialize commands and one at the configured
--cache-dir location for the restic backup command.

By explicitly setting RESTIC_CACHE_DIR for the unit, only one cache at
the correct location will be used.

https://restic.readthedocs.io/en/v0.15.1/manual_rest.html#caching
 2023-03-11 12:59:10 +01:00
github-actions[bot] d165f35883
Merge master into staging-next 2023-03-11 06:01:15 +00:00
Mario Rodas 2ce9b9842b
Merge pull request #219355 from tomfitzhenry/phosh-0.25.1 
phosh: 0.23 -> 0.25.1
 2023-03-10 21:03:33 -05:00
Artturin cab4a24c34 treewide: fix lints 
Arg to lib.optional is a list

build time tool in buildInputs
 2023-03-11 00:55:17 +02:00
Lily Foster 6e6d31f4bc
nixos/fwupd: add settings option for uefi_capsule.conf 2023-03-10 15:25:41 -05:00
Alyssa Ross 8c70bfb9f2
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
	pkgs/development/libraries/librsvg/default.nix
	pkgs/development/python-modules/r2pipe/default.nix
 2023-03-10 18:46:21 +00:00
genesis cab32f0f86 nixos/jellyseerr: init 2023-03-10 16:18:00 +01:00
Yureka 7efee351ec
Merge branch 'gitlab-pages' of github.com:talyz/nixpkgs into HEAD 2023-03-10 14:36:25 +01:00
uoleg 8ca0687b97 nixos/nano: refactor nanorc creation 
The default syntax highlighting rules are included at the top of the nanorc file to allow overriding.
 2023-03-10 15:13:58 +03:00
Martin Weinelt ef91384e6f Merge remote-tracking branch 'origin/master' into staging-next 2023-03-10 13:09:25 +01:00
Sandro Jäckel da2f281453
prometheus: split doc and cli into extra outputs 2023-03-10 11:45:45 +01:00
Sandro bca9ab3d26
Merge pull request #205060 from jslight90/patch-8 
nixos/prometheus: Add new relabel_configs actions
 2023-03-10 11:19:31 +01:00
Stanisław Pitucha 5496585eb8
Merge pull request #186076 from viraptor/gemstash-service 
nixos/gemstash: init module
 2023-03-10 14:21:53 +11:00
Martin Weinelt da1a690688 Merge remote-tracking branch 'origin/master' into staging-next 2023-03-10 01:50:42 +01:00
Artturi eec92afc64
Merge pull request #220374 from Artturin/qt5splicing 2023-03-09 23:26:49 +02:00
Rick van Schijndel 8d8f5ede91
Merge pull request #216451 from Mindavi/hydra/systemd-target 
nixos/hydra: wait for network-online before evaluator start
 2023-03-09 20:53:21 +01:00
Artturin 2cbbef006b qt5: use makeScopeWithSplicing 
if there is more than one qt5 attr and this file is copied then the arg
to generateSplicesForMkScope should be changed
 2023-03-09 21:16:03 +02:00
Ivan Trubach 905be9f8c5 nixos/iso-image: s/efi/EFI in documentation 2023-03-09 19:07:33 +03:00
Ivan Trubach e5b072eca1 nixos/iso-image: add an option to disable BIOS boot 
This change adds an option to disable legacy BIOS boot support for ISO
images. The implementation uses syslinux package that currently does not
support non-x86 platforms and thus cannot be cross-compiled, e.g. from
AArch64 system.
 2023-03-09 19:07:33 +03:00
github-actions[bot] 39f6788067
Merge master into staging-next 2023-03-09 12:01:27 +00:00
Florian Klink 2a278943b5
Merge pull request #220232 from aanderse/nixos/systemd-oomd 
nixos/systemd-oomd: avoid unintentionally creating the systemd-oomd u…
 2023-03-09 10:15:56 +01:00
Domen Kožar 6a231a6eb7
Merge pull request #197613 from shyim/add-coder 
coder: fix web frontend building
 2023-03-09 12:04:16 +04:00
github-actions[bot] 98d00577f6
Merge master into staging-next 2023-03-09 06:01:01 +00:00
Berk D. Demir 147186a95b nixos/binfmt: fix extension for Windows binaries 
Extension based matching for Windows targets define it '.exe' but kernel
documentation explicitly states it should be passed "without the .".

From https://docs.kernel.org/admin-guide/binfmt-misc.html
> * magic:
>   [...] If you chose filename extension matching, this is the
>   extension to be recognised (without the ., the \x0a specials are not
>   allowed).
 2023-03-08 21:07:31 -08:00
Will Fancher 46089f7efe
Merge pull request #217886 from lilyinstarlight/fix/qemu-vm-initrd-mkdir-0755 
nixos/qemu-vm: fix minor typo
 2023-03-08 19:17:28 -05:00
github-actions[bot] c8c1423cd9
Merge master into staging-next 2023-03-09 00:02:23 +00:00
Aaron Andersen 374fc068ec nixos/systemd-oomd: disable systemd-oomd when enableUnifiedCgroupHierarchy is false 
fixup for https://github.com/NixOS/nixpkgs/pull/203596
 2023-03-08 18:39:18 -05:00
Jonas Heinrich 9f10a2e82a
Merge pull request #218633 from onny/networkd-dispatcher-rules 
nixos/networkd-dispatcher: add rules option
 2023-03-08 20:41:06 +01:00
github-actions[bot] 7072ae38b6
Merge master into staging-next 2023-03-08 18:01:34 +00:00
K900 23b0152ffb
Merge pull request #218530 from K900/murmur-dbus 
nixos/murmur: expose dbus
 2023-03-08 18:35:56 +03:00
K900 d8d8b55e7d nixos/murmur: expose dbus 2023-03-08 18:03:51 +03:00
Martin Weinelt 4729f61158 Merge remote-tracking branch 'origin/master' into staging-next 2023-03-08 15:04:13 +01:00
Ilan Joselevich 944436f290
Merge pull request #218921 from wineee/waybar 
nixos/waybar: allow change waybar package to use
 2023-03-08 14:05:03 +02:00
Motiejus Jakštys 2b168ba3f0 headscale: rename oidc.client_secret_file to oidc.client_secret_path 
Headscale now supports passing the OIDC client secret via a file, as
added in [juanfont/headscale#1127][1127]. Lets use that.

The headscale option is `client_secret_path`; let's make it consistent
and rename the Nix option to this. Note that I wasn't able to do this:

    mkRenamedOptionModule [ ... "client_secret_file" ] [ ... "client_secret_path" ]

I get such error:

    error: evaluation aborted with the following error message: 'cannot find attribute `services.headscale.settings.oidc.client_secret_file''

[1127]: https://github.com/juanfont/headscale/pull/1127
 2023-03-08 11:26:45 +02:00
Jonas Heinrich 26e14e57af nixos/networkd-dispatcher: add rules option 2023-03-08 10:20:47 +01:00
rewine ffcf148a8d
nixos/waybar: allow change waybar package to use 
also add waybar package to environment.systemPackages
 2023-03-08 17:16:37 +08:00
Robert Schütz 9af96def95 Merge branch 'master' into staging-next 2023-03-07 21:35:26 -08:00
SharzyL 5e651fe37e
nixos/nexttrace: init 2023-03-08 11:21:06 +08:00
h7x4 8c17fe986a
nixos/hedgedoc: allow clientSecret to be null 2023-03-07 23:22:32 +01:00
Rick van Schijndel 60446dda1f nixos/hydra: wait for network-online before evaluator start 
This prevents issues I'm seeing with the hydra I'm running on my laptop.
Every time I reboot it I see eval errors like this:

```
error fetching latest change from git repo at `https://github.com/nixos/nixpkgs.git':
fatal: unable to access 'https://github.com/nixos/nixpkgs.git/': Could not resolve host: github.com
```

This is because the evaluator already starts before the network is
actually online. It should wait until the network is fully online before
starting evaluation to prevent evaluation errors like above.
 2023-03-07 21:58:23 +01:00
github-actions[bot] f1b48b2a95
Merge master into staging-next 2023-03-07 18:01:12 +00:00
Izorkin 5eb5d881a4
nixos/nginx: add defaultMimeTypes option 2023-03-07 19:37:18 +03:00
Stanisław Pitucha 70073985ae nixos/gemstash: init module 2023-03-07 15:56:56 +11:00
github-actions[bot] fa94414f70
Merge master into staging-next 2023-03-07 00:02:41 +00:00
Felix Buehler d10e69c86b treewide: deprecate isNull 
https://nixos.org/manual/nix/stable/language/builtins.html#builtins-isNull
 2023-03-06 22:40:04 +01:00
7c6f434c c5b8a7f55b
Merge pull request #218718 from KoviRobi/atop-service-no-previous-logs 
nixos/atop: Don't choke if no existing atop logs
 2023-03-06 20:27:25 +00:00
Martin Weinelt 86eedea2fe Merge remote-tracking branch 'origin/master' into staging-next 2023-03-06 17:38:35 +00:00
Ilan Joselevich edff57cff4
Merge pull request #218455 from veehaitch/gh-runner-builddotnet 
github-runner: switch to `buildDotnetModule`
 2023-03-06 19:11:06 +02:00
Martin Weinelt bcf6c81a88 Merge remote-tracking branch 'origin/master' into staging-next 2023-03-06 16:55:14 +00:00
Valentin Gagarin e16a8baa41
Merge pull request #218830 from fricklerhandwerk/command-line-suggestion 
configuration.nix: suggest a command line program
 2023-03-06 15:59:33 +01:00
Martin Weinelt b04848e5fe Merge remote-tracking branch 'origin/master' into staging-next 2023-03-06 08:21:14 +01:00
Sandro 66ee57d44d
Merge pull request #217555 from SuperSandro2000/nox-qt5-no-self 2023-03-06 01:17:25 +01:00
Naïm Favier 6082d5bd0a
Merge pull request #219549 from SEIAROTg/master 
nixos/wireguard: fix mtu after switching netns.
 2023-03-05 22:56:29 +01:00
Ryan Lahfa c91b85416b
Merge pull request #216015 from r-ryantm/auto-update/dolibarr 
dolibarr: 16.0.3 -> 16.0.4
 2023-03-05 21:19:46 +01:00
Дамјан Георгиевски 83f65146ab nixos/systemd: systemd-growfs* units are real files now 
`systemd-growfs@.service` and `systemd-growfs-root.service` became real units since:
50072ccf1b

we need to add them to the nixos module so growfs works again
 2023-03-05 20:05:00 +01:00
notgne2 ca9f0682fd
nixos/systemd-boot: always use profile_path() for system closure paths 2023-03-05 06:13:45 -07:00
Дамјан Георгиевски d2837a9cb3 nixos/systemd-initrd: create the /tmp mount point in the initrd 
systemd now requires the /tmp mount point in the initrd cpio archive
since https://github.com/systemd/systemd/pull/25723

setting `"/tmp/.keep".text` will create the directory.

this fixes a boot failure:
```
(sd-gens): Failed to overmount /tmp/: No such file or directory
```
 2023-03-05 04:41:08 +01:00
SEIAROTg 5a4dc2128e
nixos/wireguard: fix mtu after switching netns. 
mtu is set after switching netns and thus the new netns should be used.
 2023-03-04 18:51:12 +00:00
Martin Weinelt e93e71ce44 Merge remote-tracking branch 'origin/master' into staging-next 2023-03-04 14:58:24 +01:00
Isa 8225d6db3a smokeping: fix css and js symlink 2023-03-04 14:39:43 +01:00
Izorkin bb5370b8b3
nixos/modules/installer/netboot/netboot-minimal: reduce closure size 2023-03-04 16:19:39 +03:00
K900 3c5319ad3a
Merge pull request #219463 from K900/virtualbox-7.0.6 
virtualbox: 6.1.40 -> 7.0.6
 2023-03-04 15:14:45 +03:00
github-actions[bot] 8480c21d06
Merge master into staging-next 2023-03-04 12:01:17 +00:00
Naïm Favier 45e44c56f1
Merge pull request #217342 from pennae/nrd-html-manual 
nixos-render-docs: add manual html renderer, use it for the nixos manual
 2023-03-04 12:58:38 +01:00
K900 e8fbf83f5e nixos/virtualbox-image: remove the raw image trick 
This is slower, but the raw image thing no longer works with VirtualBox 7.0.6.
 2023-03-04 13:39:50 +03:00
Ryan Lahfa fd09c1bdc5
Merge pull request #214759 from Tom-Hubrecht/borgmatic 
nixos/borgmatic: Allow defining multiple configurations
 2023-03-04 11:38:39 +01:00
Raito Bezarius 51b00a5e89 nixos/web-apps/dolibarr: lib.optionalAttr -> lib.optionalAttrs typo 2023-03-04 11:31:28 +01:00
Frederik Rietdijk 8cf8d77121 Merge master into staging-next 2023-03-04 09:38:25 +01:00
K900 18f85de76d nixos/firewall: assert that the kernel supports conntrack helper auto-loading 2023-03-04 10:53:47 +03:00
Linus Heckemann 48269da315
Merge pull request #206839 from lheckemann/stateless-vms 
nixos/qemu-vm: allow use without a disk image
 2023-03-04 02:02:45 +01:00
Izorkin 3e3367aa6a
nixos/profiles/base: remove duplicate and optimize fsPackages 2023-03-03 23:32:48 +03:00
github-actions[bot] a74c8d03ea
Merge staging-next into staging 2023-03-03 18:01:44 +00:00
Sandro 2665f5e379
Merge pull request #178447 from Francesco149/dendrite-prestart 2023-03-03 18:45:09 +01:00
Tom Fitzhenry 2455dfab0d phosh: 0.23.0 -> 0.25.1 2023-03-04 00:38:29 +11:00
Izorkin 0367cc8b5a
nixos/profiles/base: remove duplicate systemPackages 2023-03-03 16:12:56 +03:00
nicoo fc65af6a74 nixos/hidpi: Minor refactor 2023-03-03 12:42:55 +00:00
nicoo e1220cf121 nixos/hidpi: Don't set subpixel order 
It has no effect with `subpixel.lcdfilter = "none"`.

If the user overrides the module's default, the correct subpixel order
depends on their actual monitor, and cannot be known by this module.
 2023-03-03 12:42:55 +00:00
nicoo b2366655e2 nixos/hidpi: Disable font hinting 
Per the documentation:
> At high resolution (> 200 dpi) hinting will do nothing (at best);
> users of such displays may want to disable this option.
 2023-03-03 12:42:55 +00:00
nicoo f03716715f nixos/hidpi: Disable anti-aliasing 
Per the documentation:
> At high resolution (> 200 DPI), antialiasing has no visible effect;
> users of such displays may want to disable this option.
 2023-03-03 12:42:55 +00:00
Martin Weinelt 0580d85143 Merge remote-tracking branch 'origin/staging-next' into staging 2023-03-03 04:46:31 +01:00
Maximilian Bosch 72f45f225f
Merge pull request #218269 from theHedgehog0/gitea-module-getexe 
nixos/gitea: Move to lib.getExe
 2023-03-02 19:46:45 +01:00
Kasper Gałkowski e141ed8312 stumpwm: fix after major changes to lisp-modules 2023-03-02 19:04:47 +01:00
Pyrox 98dd7f5307
nixos/gitea: Move to lib.getExe 
This makes it so that alternative packages, such as `pkgs.forgejo` are
able to be used instead of the default `pkgs.gitea`.

Also adds myself as a maintainer of the module.

The varible `gitea`, which was used instead of `cfg.package`, has been
replaced with the variable `exe`, and is instead the value of the main
executable, as gotten from `lib.getExe`. `cfg.package` is used when this
value is not appropriate.
 2023-03-02 12:16:30 -05:00
Maximilian Bosch f8bbedfcac
Merge pull request #219073 from IndeedNotJames/gitea-gpg 
nixos/gitea: fix commit signing (`gpg`) core dump, add nixos test
 2023-03-02 17:24:02 +01:00
github-actions[bot] 6c8444842c
Merge staging-next into staging 2023-03-02 12:02:00 +00:00
Arian van Putten 17ca3dd2a6
Merge pull request #217852 from justinas/teleport-12 
teleport: 11.3.4 -> 12.0.2, reintroduce teleport_11
 2023-03-02 11:18:24 +01:00
Luke Granger-Brown b3c09089e4
Merge pull request #215750 from puppe/fix-paperless 
nixos/paperless: download NLTK data
 2023-03-02 10:00:46 +00:00
illustris 653d1f0534
nixos/hbase: add examples for options 2023-03-02 15:03:10 +05:30
Yureka 55da71c10e
nixos/nftables: add checkRuleset option (#216531) 
* nixos/nftables: add checkRuleset option

* lkl: 2022-05-18 -> 2023-01-27
 2023-03-02 10:28:01 +01:00
github-actions[bot] f61eca4e68
Merge staging-next into staging 2023-03-02 06:01:44 +00:00
Bobby Rong 3374c1ab48
Merge pull request #219004 from bobby285271/fix/pantheon-add-mutter-udev 
nixos/pantheon: add mutter to services.udev.packages
 2023-03-02 09:55:20 +08:00
IndeedNotJames 93c1d370db
nixos/gitea: fix commit signing (gpg) core dump 
Gitea spawns `gpg` processes for commit signing related actions.
Those `gpg` processes need `mlock` (probably to prevent secrets
in the memory to swap).
Blocking it (as part of the `@memlock` preset) causes any
commit signing related actions to error out as http/500
 2023-03-01 23:44:21 +01:00
github-actions[bot] 736c488efe
Merge staging-next into staging 2023-03-01 18:01:48 +00:00
K900 1e00e82f9d
Merge pull request #218437 from K900/x11-default-modesetting 
nixos/x11: default to the modesetting driver
 2023-03-01 17:51:04 +03:00
Sandro 86053e5ec2
dgraph: use --prefix to prefix PATH 
This is more robust in case PATH is empty or otherwise weird.
 2023-03-01 13:55:30 +01:00
Bobby Rong 1f9308f005
nixos/pantheon: add mutter to services.udev.packages 
For ./lib/udev/rules.d/61-mutter.rules

Same as d1eeb64. This is forgotten in PR 130380.
 2023-03-01 10:00:53 +08:00
Martin Weinelt 3686005e6e Merge remote-tracking branch 'origin/staging-next' into staging 2023-02-28 21:17:51 +00:00
maxine 7ceeb440c1
Merge pull request #213604 from mikroskeem/feature/docker-local-log-driver 
nixos/docker: add "local" as valid logDriver option
 2023-02-28 21:47:55 +01:00
Valentin Gagarin 4e0525a8cd configuration.nix: suggest a command line program 
adding two graphical programs makes a strong assmuption that users will
use a graphical environment.

add a command line program as an alternative suggestion that is easy to
comment in as a first-steps measure.
 2023-02-28 17:16:03 +01:00
github-actions[bot] 445e4a4069
Merge staging-next into staging 2023-02-28 12:01:54 +00:00
Justinas Stankevicius 31b5597cbd nixos/teleport: add "package" option 2023-02-28 13:22:50 +02:00
Jon Seager cad6488509
nixos/multipass: typo s/SyslogIdentifer/SyslogIdentifier/ 2023-02-28 10:45:38 +00:00
zowoq 48642c634e podman: remove wrapper 
trying to get all of the podman functionality to work with the wrapper
 is becoming more complicated with each release, it isn't sustainable

removing the wrapper does mean that using extraPackages will need to build from source

- remove unnecessary serviceConfig overrides

- set HELPER_BINARIES_DIR to libexec/podman

- use install.bin target on linux for podman/tmpfiles
  - also installs quadlet/rootlessport in libexec

- symlink binaries from helpersBin into HELPER_BINARIES_DIR

- remove unnecessary rootlessport output

- remove unnecessary substituteInPlace
 2023-02-28 18:08:29 +10:00
github-actions[bot] 51c18e4be1
Merge staging-next into staging 2023-02-28 06:01:38 +00:00
Robert Kovacsics 476bb88308 nixos/atop: Don't choke if no existing atop logs 2023-02-28 00:22:11 +00:00
Luke Granger-Brown 997d8d5870
Merge pull request #218618 from dali99/headscale-openid 
nixos/headscale: update oidc options
 2023-02-28 00:21:04 +00:00
github-actions[bot] 387a5e220d
Merge staging-next into staging 2023-02-28 00:03:08 +00:00
Jared Baur ea0dc2c5eb
nixos/avahi: add denyInterfaces option 2023-02-27 15:41:53 -08:00
Will Fancher ace4d26ccc
Merge pull request #217887 from lilyinstarlight/fix/allow-overriding-systemd-initrd-bins 
nixos/systemd-initrd: allow overriding initrdBin with extraBin
 2023-02-27 17:43:30 -05:00
Stefan Frijters 2af041ab44 nixos/gitlab-runner: do not pull in Docker if gitlab-runner-clear-docker-cache is disabled 
Only create the service if the option is enabled and if any docker executors exist.
 2023-02-27 22:24:14 +01:00
Robert Hensing 692a1033ff
Merge pull request #218365 from winterqt/revert-static-gid-migration 
Revert systemd-coredump and polkit static GIDs
 2023-02-27 20:16:57 +01:00
Eelco Dolstra 056b679c35 nix-fallback-paths.nix: Update to 2.13.3 2023-02-27 10:40:18 -08:00
Luke Granger-Brown f43347d8a3
Merge pull request #214346 from SFrijters/postfix-ipv4 
nixos/postfix: restrict inet_protocols to ipv4 when ipv6 is disabled
 2023-02-27 18:24:53 +00:00
github-actions[bot] 40707bbbb3
Merge staging-next into staging 2023-02-27 18:02:06 +00:00
Cabia Rangris f8b026c478
Merge pull request #218637 from Luflosi/klipper-fix-typo 
nixos/klipper: fix assert message to match actual assertion
 2023-02-27 21:17:18 +04:00
Soner Sayakci ff7dfcba57 nixos/opensearch: fix opensearch startup 2023-02-27 16:07:12 +00:00
Luflosi 2378d1a214
nixos/klipper: fix assert message to match actual assertion 
This error was introduced in 849c40b5f5.
 2023-02-27 17:04:48 +01:00
Daniel Olsen ea31ef91af nixos/headscale: update oidc options 2023-02-27 15:17:16 +01:00
github-actions[bot] 5e46cfeba0
Merge staging-next into staging 2023-02-27 12:01:41 +00:00
Riley c713217380
nixos/k3s: add environmentFile as an option 
* k3s: add environmentFile option

Enabling to include secrets through configuration such as 'sops'

* Update nixos/doc/manual/release-notes/rl-2305.section.md

Co-authored-by: Jairo Llopis <973709+yajo@users.noreply.github.com>
 2023-02-27 08:15:25 -03:00
github-actions[bot] 288c9d7892
Merge staging-next into staging 2023-02-27 06:01:44 +00:00
schnusch bbc988ba00 nixos/matrix-synapse: fix .well-known delegation of federated traffic 
Synapse is reverse-proxied on ${fqdn} not ${config.networking.domain} and
the .well-known delegation info must point to the domain on which synapse
is hosted, see https://matrix-org.github.io/synapse/latest/delegate.html
 2023-02-27 02:02:35 +01:00
github-actions[bot] 405409fce7
Merge staging-next into staging 2023-02-26 22:01:26 +00:00
Sergei Trofimovich e7e072d05a Merge remote-tracking branch 'origin/staging-next' into staging 
Conflicts:
	pkgs/top-level/python-aliases.nix

Trivial conflict of multiple added aliases.
 2023-02-26 21:53:22 +00:00
Robert Schütz 9e1d4dff3e nixos/openvpn: use writeShellScript 
Previously the upScript would fail with

    Syntax error: "(" unexpected (expecting "done")

on line 7 if /bin/sh is not bash.
 2023-02-26 10:12:28 -08:00
illustris 7e4e6e8bd7
nixos/ec2: don't populate nonexistent metadata files 2023-02-26 23:25:09 +05:30
Vincent Haupert 137db83090 nixos/github-runners: use Runner.Listener directly for registration 
Nothing the script `config.sh` does prior to the final call to
`Runner.Listener configure` is relevant for the systemd service.
Particularly, we don't need (nor want) any of the artifacts the `env.sh`
script creates.
 2023-02-26 15:39:19 +01:00
K900 82964d1694 nixos/x11: default to the modesetting driver 
The upstream drivers are very dead:
- nouveau:
   - https://gitlab.freedesktop.org/xorg/driver/xf86-video-nouveau/-/commits/master
   - last meaningful change in August 2020
- ati (aka radeon):
   - https://gitlab.freedesktop.org/xorg/driver/xf86-video-ati/-/commits/master
   - last meaningful change in April 2020
- amdgpu:
   - https://gitlab.freedesktop.org/xorg/driver/xf86-video-amdgpu/-/commits/master
   - barely alive, mostly thanks to Valve people

Modesetting isn't even the future, it's the now, especially with Wayland.
We should embrace it.
 2023-02-26 16:11:13 +03:00
Aaron Andersen d8c0a9204a
Merge pull request #217834 from yaxitech/gh-runner-workdir-clean 
nixos/github-runners: clean `workDir` as root
 2023-02-26 08:05:05 -05:00
Vladimír Čunát 30e272bc04
Merge #216499: staging-next 2023-02-15 2023-02-26 10:11:50 +01:00
happysalada 8872f52732 qdrant: service module init 2023-02-26 01:33:15 -05:00
github-actions[bot] de3f71e277
Merge staging-next into staging 2023-02-26 06:02:30 +00:00
github-actions[bot] 399e2c78d4
Merge master into staging-next 2023-02-26 06:01:09 +00:00
Winter ee6517a915 Revert "nixos/polkit: guard static gid for polkituser behind state version" 
This reverts commit 2265160fc0 and
e56db577a1.

Ideally, we shouldn't cause friction for users that bump `stateVersion`,
and I'd consider having to switch and/or manually hardcode a UID/GID
to supress the warning friction. I think it'd be more beneficial to, in
this rare case of an ID being missed, just let it be until more
discussion happens surrounding this overall issue.

See https://github.com/NixOS/nixpkgs/pull/217785 for more context.
 2023-02-25 22:32:16 -05:00
Winter 15f1369b95 Revert "nixos/systemd-coredump: guard static gid for systemd-coredump behind state version" 
This reverts commits f5483464d5 and
6b9583e5e1.

Ideally, we shouldn't cause friction for users that bump `stateVersion`,
and I'd consider having to switch and/or manually hardcode a UID/GID
to supress the warning friction. I think it'd be more beneficial to, in
this rare case of an ID being missed, just let it be until more
discussion happens surrounding this overall issue.

See https://github.com/NixOS/nixpkgs/pull/217785 for more context.
 2023-02-25 22:31:56 -05:00
Nick Cao e0bf055d99
Merge pull request #217785 from NickCao/ugid 
nixos/{polkit,systemd-coredump}: guard static gid behind state version
 2023-02-26 09:44:56 +08:00
Jan Tojnar 9bb986284f Merge branch 'staging-next' into staging 
# Conflicts:
#	pkgs/development/python-modules/mdp/default.nix
#	pkgs/top-level/python-aliases.nix
 2023-02-26 01:13:37 +01:00
github-actions[bot] 348549a031
Merge master into staging-next 2023-02-26 00:02:44 +00:00
Lily Foster c56e5ef801 nixos/users-groups: update option description to clarify initial* option precedence 2023-02-25 14:27:35 -05:00
Lily Foster bfa0bff644 nixos/update-users-groups: let hashedPassword take precedence over initialHashedPassword 
Without this change, users that have both `initialHashedPassword` and
`hashedPassword` set will have `initialHashedPassword` take precedence,
but only for the first time `/etc/passwd` is generated. After that,
`hashedPassword` takes precedence. This is surprising behavior as it
would generally be expected for `hashedPassword` to win if both are set.

This wouldn't be a noticeable problem (and an assert could just be made
instead) if the users-groups module did not default the
`root.intialHashedPassword` value to `!`, to prevent login by default.
That means that users who set `root.hashedPassword` and use an ephemeral
rootfs (i.e. `/etc/passwd` is created every boot) are not able to log in
to the root account by default, unless they switch to a new generation
during the same boot (i.e. `/etc/passwd` already exists and
`hashedPassword` is used instead of `initialHashedPassword`) or they set
`root.initialHashedPassword = null` (which is unintuitive and seems
redundant).
 2023-02-25 14:27:35 -05:00
github-actions[bot] 78fc07ec20
Merge master into staging-next 2023-02-25 00:02:47 +00:00
superherointj 371c7b8239
Merge pull request #217718 from Kiskae/nvidia/unbreak-6.2 
linuxPackages_6_2.nvidia_x11: disable ibt
 2023-02-24 17:46:26 -03:00
Nicola Squartini a2eeaddea2
nixos/nextcloud: support SSE-C for S3 primary storage 
Add configuration option to enable [server-side encryption with
customer-provided keys][1] (SSE-C) when using S3 as primary storage in
Nextcloud.

[1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html
 2023-02-24 16:59:41 +01:00
github-actions[bot] 13fb68e8cf
Merge staging-next into staging 2023-02-24 12:01:52 +00:00
github-actions[bot] 2384cd723b
Merge master into staging-next 2023-02-24 12:01:20 +00:00
Sandro 83b8193be9
Merge pull request #201780 from helsinki-systems/init/nextcloud-notify-push 
nextcloud-notify-push: init at 0.5.0
 2023-02-24 12:10:02 +01:00
Martin Puppe ebdfdae156 nixos/paperless: download NLTK data 
Since version 1.10.0 paperless-ngx depends on the NLTK library which is
used to pre-process data for machine learning. NLTK needs certain
data for stemming, stopword removal etc. This data has to be downloaded
first. This commit introduces a new systemd service that does the
downloading.
 2023-02-23 21:34:49 +01:00
Lily Foster 5210ddc701
nixos/systemd-initrd: allow overriding initrdBin with extraBin 
Being able to override `boot.initrd.systemd.initrdBin` with `boot.initrd.systemd.extraBin` is a desirable behavior, so this PR changes the `ln -s` command to `ln -sf` to force link even if the file already exists.
 2023-02-23 13:23:15 -05:00
Lily Foster e78dc938d8
nixos/qemu-vm: fix minor typo 
The typo creates an empty directory 0755 in initrd rootfs rather than
create the Nix store directories with mode 0755.

I guess setting the mode is not strictly necessary if it worked before
this change, but I'll leave the `-m 0755` in just in case.
 2023-02-23 13:01:53 -05:00
github-actions[bot] 3cdd771820
Merge staging-next into staging 2023-02-23 18:01:49 +00:00
Alyssa Ross 52c286ee5b
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
	pkgs/development/libraries/pmdk/default.nix
 2023-02-23 13:51:34 +00:00
Naïm Favier 129b6f7812
Merge pull request #216504 from ncfavier/unbound-state-dir-writable 
nixos/unbound: make stateDir writable
 2023-02-23 14:23:53 +01:00
Bernardo Meurer ef9030a3ba
Merge pull request #216430 from peterhoeg/m/qmk 2023-02-23 12:14:31 +00:00
github-actions[bot] 5dc5c20564
Merge staging-next into staging 2023-02-23 12:01:43 +00:00
github-actions[bot] 390b789c39
Merge master into staging-next 2023-02-23 12:01:07 +00:00
Profpatsch d316c28a30 modules/github-runner: Improve tokenFile docs 
We’ve been having trouble figuring out which kind of token to use and
why our setup would break every few system updates.

This should clarify which options there are, and which ones lead to
better results.

Ideally there would be a manual section that has a step-by-step guide
on how to set up the github runner, with screenshots and everything.
 2023-02-23 12:37:30 +01:00
Nick Cao f5483464d5
nixos/systemd-coredump: guard static gid for systemd-coredump behind state version 2023-02-23 17:07:50 +08:00
Nick Cao 2265160fc0
nixos/polkit: guard static gid for polkituser behind state version 2023-02-23 17:07:49 +08:00
Vincent Haupert 36949b9718 nixos/github-runners: clean workDir as root 
Purge contents of `workDir` as root to also allow the removal of files
marked as read-only. It is easy to create read-only files in `workDir`,
e.g., by copying files from the Nix store.
 2023-02-23 09:05:27 +01:00
github-actions[bot] 36f198081c
Merge staging-next into staging 2023-02-23 06:01:36 +00:00
github-actions[bot] 010946fcbd
Merge master into staging-next 2023-02-23 06:01:03 +00:00
Weijia Wang b65d2ea436
Merge pull request #192672 from amjoseph-nixpkgs/pr/nixos/sd/powerpc64le 
enable NixOS installer for powerpc64le
 2023-02-23 07:09:46 +02:00
Adam Joseph f99e8bafe6 nixos/installer: add sd-image-powerpc64le.nix 
This builds on top of nixpkgs mainline 00d8347180
with the following two PRs cherry-picked:

- https://github.com/NixOS/nixpkgs/pull/192670
- https://github.com/NixOS/nixpkgs/pull/192668

using the following command:

```
nix build -f nixos -L \
  -I nixos-config=nixos/modules/installer/sd-card/sd-image-powerpc64le.nix \
  config.system.build.sdImage
```

I was able to successfully boot the image, although it boots to a login prompt
rather than a shell, and won't accept the empty password for `root`.  I guess
I'll have to figure out why that is.

To boot the image: `zstd`-decompress the it, mount it, and use `kexec`:

```
cd boot/nixos
kexec -l \
  *-vmlinux \
  --initrd *-initrd \
  --dt-no-old-root \
  --command-line="$(grep APPEND ../extlinux/extlinux.conf | sed 's_^ *APPEND *__')"
```

The machine I used for testing has only one storage device which is completely
allocated to LVM.  It appears that the NixOS ISO loader doesn't look for
partition tables within LVM volumes.  To work aroundn this, I had to extract the
`ext4` image within the partition table within the `sd-card` image and put that
in its own LVM volume.  This likely won't be an obstacle for users who write the
image to a USB stick or similar.
 2023-02-23 06:18:52 +02:00
Robert Schütz 89c8ef30a6 nixos/imaginary: bind to localhost by default 2023-02-22 17:37:36 -08:00
Henri Menke 64be5cc145
nixos/alps: fix embarrasing typo 2023-02-22 20:41:17 +01:00
github-actions[bot] 9c68d30a50
Merge staging-next into staging 2023-02-22 18:01:38 +00:00
github-actions[bot] 68dd6912f3
Merge master into staging-next 2023-02-22 18:01:07 +00:00
Kiskae d120c53077 linuxPackages_6_2.nvidia_x11: disable ibt 2023-02-22 18:08:41 +01:00
K900 8a678a16f8
Merge pull request #217578 from eduarrrd/pam 
PAM service fixups for plasma5 and sddm
 2023-02-22 16:30:02 +03:00
Sandro Jäckel 5e5a84b193
nixos/nginx: add recommendedZstdSettings 2023-02-22 13:59:53 +01:00
github-actions[bot] 67e4f6dde0
Merge staging-next into staging 2023-02-22 12:02:05 +00:00
github-actions[bot] 0f910f5664
Merge master into staging-next 2023-02-22 12:01:31 +00:00
Nick Cao d377d9bc2e
Merge pull request #216785 from 1sixth/set-polkituser-gid 
nixos/polkit: set static gid for polkituser
 2023-02-22 18:14:40 +08:00
github-actions[bot] f95edd46da
Merge staging-next into staging 2023-02-22 06:01:53 +00:00
github-actions[bot] 77f501b5df
Merge master into staging-next 2023-02-22 06:01:21 +00:00
1sixth e56db577a1
nixos/polkit: set static gid for polkituser 
polkituser needs a group since https://github.com/NixOS/nixpkgs/pull/130522.
 2023-02-22 08:46:55 +08:00
github-actions[bot] a13cd94b7b
Merge staging-next into staging 2023-02-22 00:03:12 +00:00
github-actions[bot] 3cd1b92b06
Merge master into staging-next 2023-02-22 00:02:34 +00:00
Luflosi e5ffc94ea9
nixos/mautrix-facebook: fix copy&paste error 
Closes https://github.com/NixOS/nixpkgs/issues/166312.
 2023-02-22 00:03:19 +01:00
Sandro 5b7d323435
Merge pull request #216909 from emilytrau/tailscale-tweaks 2023-02-21 23:21:09 +01:00
Eduard Bachmakov 45a6488f9c nixos/sddm + nixos/plasma5: switch PAM service to login. 
GDM and LightDM are already using this approach. It also allows us to
enable Kwallet integration more globally without generating stray PAM
services.

The default configuration of login service includes both options sddm
was setting explicitly.
 2023-02-21 22:48:09 +01:00
Eduard Bachmakov 2ca5a88f8e nixos/plasma5: remove non-existant/unused PAM service configs. 
This removes two unused service configs from /etc/pam.d/ and, more
importantly, reduces confusion.

* kdm no longer exists in nixpkgs
* `pam.d/gdm` is not used by gdm
* `pam.d/lightdm` IS used by lightdm but hardcoded using .text rather
  than attrset+template.
 2023-02-21 22:28:32 +01:00
Sandro Jäckel a4f63a6e77
nixos/no-x-libs: hide qt5's self 2023-02-21 21:14:08 +01:00
github-actions[bot] 9acd1eb7fd
Merge staging-next into staging 2023-02-21 18:01:45 +00:00
github-actions[bot] fd8dd0c966
Merge master into staging-next 2023-02-21 18:01:08 +00:00
pennae 3794c04d79 nixos/manual: fix manpage links 
{manpage} already exapnds to a link but akkoma wants to link to
a specific setting. split the mention for clarity.

networkd just straight up duplicated what {manpage} generates anyway, so
that link can go away completely.
 2023-02-21 18:26:39 +01:00
Dominic Shelton 38593bc3c0 nixos/flipperzero: init 2023-02-21 17:45:14 +01:00
ajs124 bdb0566f8b nixos/nextcloud-notify_push: use lib.genAttrs 2023-02-21 15:53:27 +01:00
ajs124 6c24a28ea6 nixos/nextcloud-notify_push: add some restart config to the service 2023-02-21 15:05:17 +01:00
ajs124 671bd1ef7a nixos/nextcloud-notify_push: add database options 2023-02-21 15:05:16 +01:00
ajs124 1f0aa74c8f nixos/nextcloud-notify_push: init 2023-02-21 15:05:16 +01:00
github-actions[bot] 8d3dc41d38
Merge staging-next into staging 2023-02-21 12:02:07 +00:00
github-actions[bot] a160ec1116
Merge master into staging-next 2023-02-21 12:01:36 +00:00
Martin Weinelt 0663b90f54
Merge pull request #213232 from mweinelt/tts-module 
nixos/tts: init
 2023-02-21 11:33:20 +00:00
Martin Weinelt 198713cf82
nixos/tts: init 
Provide a module to configure Coqui TTS, available as `tts` in nixpkgs
for a few releases already.

The module supports multiple servers in parallel, so multiple languages
and testing scenarios can be covered, without affecting any production
usage.
 2023-02-21 11:59:17 +01:00
Franz Pletz 0e6e15e124
Merge pull request #216815 from R-VdP/flashrom-udev-rules 
flashrom: use a udev uaccess tag instead of introducing a custom flashrom group
 2023-02-21 11:41:53 +01:00
Sandro 7606d0e004
Merge pull request #199798 from j2ghz/patch-1 
Add package override to mimir
 2023-02-21 09:37:57 +01:00
github-actions[bot] 2d285b1590
Merge staging-next into staging 2023-02-21 06:01:33 +00:00
github-actions[bot] af79979d58
Merge master into staging-next 2023-02-21 06:01:00 +00:00
Aaron Andersen ab8815a4b6
Merge pull request #215789 from bb2020/mbpfan 
nixos/mbpfan: add aggressive option
 2023-02-20 22:24:11 -05:00
Martin Weinelt d92d6030be
Merge pull request #217089 from mweinelt/hass-pythonpath 
home-assistant: Load optional deps from PYTHONPATH
 2023-02-21 00:52:47 +00:00
github-actions[bot] fc3641aa1e
Merge staging-next into staging 2023-02-21 00:03:04 +00:00
github-actions[bot] e3e8374b6f
Merge master into staging-next 2023-02-21 00:02:33 +00:00
Martin Puppe 8bc615d0e0 nixos/yggdrasil: correct documentation 
The option `LinkLocalTCPPort` does not exist anymore in recent versions
of Yggdrasil. The port for incoming link-local connections is now
configured as part of the `MulticastInterfaces` option. Our
documentation should reflect that.
 2023-02-20 23:10:54 +01:00
Martin Puppe cf8b1fb85e nixos/yggdrasil: support HJSON files as configFile 
Yggdrasil uses HJSON as its configuration file format. The NixOS module
meanwhile only supports pure JSON. This commit adds support for HJSON
files.
 2023-02-20 23:10:54 +01:00
Martin Puppe 78ac812356 nixos/yggdrasil: fix configFile option 
As far as I can tell the configFile option cannot have worked as
intended. The Yggdrasil systemd service uses a dynamic user. As it was,
there was no way to set the correct permissions on a config file
beforehand which would allow the dynamic user to read the config file
without making it readable for all users. But since the config file can
contain a private key it *must not* be world-readable.

The file must only be readable by root. The file has to be copied and
the permissions have to be fixed during service startup. This can either
be done in a ExecStartPre directive with the '+' prefix (which executes
that command with elevated privileges), or it can be done more
declarative with the LoadCredential directive. I have chosen the latter
approach because it delegates more work to systemd itself. It should be
noted that this has the minor tradeoff that the config file must not be
larger than 1 MB. This is a limit which systemd imposes on credential
files. But I think 1 MB ought to be enough for anybody ;).
 2023-02-20 23:04:24 +01:00
Martin Puppe 9b2e2e8006 nixos/yggdrasil: nixpkgs-fmt 2023-02-20 22:02:59 +01:00
Will Fancher bb7cd63150
Merge pull request #215381 from lilyinstarlight/fix/make-initrd-ng-wrapped-executables 
make-initrd-ng: support wrapped executables
 2023-02-20 14:11:48 -05:00
github-actions[bot] e579b2b641
Merge staging-next into staging 2023-02-20 18:02:05 +00:00
github-actions[bot] 08d46af354
Merge master into staging-next 2023-02-20 18:01:32 +00:00
Martin Weinelt e01ccd6245
home-assistant: Inject extra dependencies through PYTHONPATH 
Injecting configuration specific dependencies into the
propagatedBuildInputs of the home-assistant package forces alot of
rebuilds while setting up home-assistant, which is annoying.

By passing optional dependencies into home-assistant via the systemd
units PYTHONPATH environment variable, only he concatenation of
library paths in the systemd unit requires a rebuild.

This also means users can rely heavily on the cached home-assistant
package and will rarely have to build from source, if ever.
 2023-02-20 18:37:20 +01:00
Joachim Breitner 20c135b191 docs: borg expects --rsh, not -rsh 2023-02-20 18:02:28 +01:00
Kim Lindberger e0c0a6c80c
Merge pull request #215523 from talyz/discourse-3.1.0.beta2 
discourse: 2.9.0.beta14 -> 3.1.0.beta2
 2023-02-20 13:58:05 +01:00
Lily Foster 1fa1b58c25
nixos/console,nixos/systemd-initrd: remove now-unnecessary wrapped bin inclusions 2023-02-20 07:02:55 -05:00
github-actions[bot] 8e4dd5face
Merge staging-next into staging 2023-02-20 06:02:09 +00:00
github-actions[bot] b629ad5e83
Merge master into staging-next 2023-02-20 06:01:33 +00:00
Maëlys Bras de fer f24f7ed242
nixos/testing: increase systemd device timeout 2023-02-20 05:27:12 +01:00
Nick Cao 902b5229e2
Merge pull request #216922 from NickCao/mautrix-telegram 
mautrix-telegram: unstable-2023-01-28 -> unstable-2023-02-16, with dependency and module updates
 2023-02-20 08:56:43 +08:00
Bernardo Meurer 39182edca4
Merge pull request #217196 from NixOS/linux-firmware-update 2023-02-20 00:54:25 +00:00
github-actions[bot] 539195e509
Merge staging-next into staging 2023-02-20 00:03:04 +00:00
github-actions[bot] 4a14359163
Merge master into staging-next 2023-02-20 00:02:26 +00:00
Bernardo Meurer fc9e3696e0
rtw89-firmware: drop 2023-02-19 23:26:53 +00:00
Yureka c683aaaa1d
nixos/nixos-containers: add specialArgs option (#216677) 2023-02-19 21:25:04 +01:00
bb2020 1e75de336c nixos/mbpfan: add aggressive option 2023-02-19 16:57:07 +03:00
github-actions[bot] 1ce3b0f272
Merge staging-next into staging 2023-02-19 12:02:03 +00:00
github-actions[bot] 85ba84c218
Merge master into staging-next 2023-02-19 12:01:25 +00:00
Jonas Heinrich 553c376a49 nixos/networkd-dispatcher: init 2023-02-19 04:42:25 -05:00
Nick Cao a1291d0d02
Merge pull request #205784 from Eliot00/v2raya-fix 
v2raya: v2rayA should start after nftables
 2023-02-19 15:08:29 +08:00
github-actions[bot] 8c0220980d
Merge staging-next into staging 2023-02-19 00:03:03 +00:00
github-actions[bot] a1eb3e0b3e
Merge master into staging-next 2023-02-19 00:02:27 +00:00
Kim Lindberger 30ed4863cd
Merge pull request #209147 from vojta001/parsedmarc_grafana 
nixos/parsedmarc: fix Grafana provisioning
 2023-02-18 23:38:33 +01:00
Sandro 6c611e8ff0
Merge pull request #216159 from Cynerd/gitlab-runner-bash-quote 2023-02-18 19:54:37 +01:00
github-actions[bot] 0e856cc7de
Merge staging-next into staging 2023-02-18 18:01:58 +00:00
github-actions[bot] 05782cfb75
Merge master into staging-next 2023-02-18 18:01:22 +00:00
Florian Klink 4bfb6411e3
Merge pull request #215188 from ElvishJerricco/binfmt-bad-setting-fix 
binfmt: Don't create invalid service with no registrations
 2023-02-18 15:39:46 +01:00
Nick Cao 2cf8e2f7ad
nixos/mautrix-telegram: add ffmpeg-full to path 
Used for converting tgs to webm and webp format, as well as generating
video thumbnails. Using ffmpeg-full for webp support.
 2023-02-18 15:40:55 +08:00
Emily Trau 949b1df785 nixos/tailscale: fix config priority conflict 2023-02-18 13:28:04 +11:00
github-actions[bot] c466fa7ff4
Merge staging-next into staging 2023-02-18 00:02:56 +00:00
github-actions[bot] 69a8c9e227
Merge master into staging-next 2023-02-18 00:02:21 +00:00
Jonas Heinrich 13ff144c70 nixos/maddy: Add option ensureAccounts 2023-02-17 17:42:27 -05:00
Lin Jian 405919c6c9 nixos/kanata: misc improvements 
- simplify some descriptions
- use getExe instead of hardcoding a binary path
- remove a unneeded "lib."
 2023-02-17 22:34:38 +01:00
Lin Jian 46122183b5 nixos/kanata: remove a limit that number of devices cannot be 0 
Since 1.0.8, kanata can automatically detect keyboard devices if
linux-dev is not in config.
 2023-02-17 22:34:38 +01:00
Lin Jian f34917b128 nixos/kanata: do not use path activation 
Since 1.2.0, kanata handles missing keyboards well:
- only one keyboard need to be present when kanata starts;
- if linux-continue-if-no-devs-found is set to yes, all keyboards can
be missing at the beginning;
- all keyboards can be (un)pluged when kanata is running.

For simplicity, linux-continue-if-no-devs-found is set to yes and
systemd patch activation is removed.
 2023-02-17 22:34:38 +01:00
Artturi efd1d7ed76
Merge pull request #97677 from ryneeverett/lockkernelmodules-docker-more 2023-02-17 23:28:32 +02:00
github-actions[bot] 19a3d0a6e8
Merge staging-next into staging 2023-02-17 18:01:52 +00:00
github-actions[bot] 1c50878b7b
Merge master into staging-next 2023-02-17 18:01:15 +00:00
R-VdP 8467c63749
flashrom: use a udev uaccess tag instead of introducing a custom flashrom group 
See https://wiki.archlinux.org/title/Udev#Allowing_regular_users_to_use_devices for more info about the uaccess tag. The udev-acl tag is a legacy implementation, we add it purely for backwards compatibility.
 2023-02-17 15:56:51 +01:00
K900 bb935706a8
Merge pull request #216763 from K900/pipewire-0.3.66 
[staging-next] pipewire: 0.3.65 -> 0.3.66
 2023-02-17 16:24:25 +03:00
Sandro 4fba4ceab7
Merge pull request #215407 from aopom/onlyoffice-mergeable-execstartpre 
nixos/onlyoffice: allow ExecStartPre additions
 2023-02-17 13:37:39 +01:00
github-actions[bot] 3b5c06282d
Merge staging-next into staging 2023-02-17 12:01:58 +00:00
Arian van Putten 98042fc6d3
Merge pull request #216357 from nikstur/systemd-repart-after-activation 
nixos/systemd-repart: enable running after initrd
 2023-02-17 12:56:24 +01:00
zowoq 3e081095a4 Revert "podman: remove wrapper" 
This reverts commit 02f9255044.

broke rootlessport port forwarding
 2023-02-17 20:26:02 +10:00
K900 218b28191a pipewire: 0.3.65 -> 0.3.66 
Also enable libmysofa
 2023-02-17 13:15:16 +03:00
Sandro a366e69a12
Merge pull request #214815 from SFrijters/vim-no-x-libs 
nixos/no-x-libs: add vim-full
 2023-02-17 11:13:47 +01:00
Florian Klink ab566b8656
Merge pull request #208269 from ElvishJerricco/systemd-stage-1-fsck 
Systemd stage 1 fsck
 2023-02-17 10:06:39 +02:00
pennae 122a7435fb Revert "nixos/jellyseerr: init" 
This reverts commit 2ca375abdc.
 2023-02-16 18:03:55 +01:00
genesis 2ca375abdc nixos/jellyseerr: init 2023-02-16 17:27:17 +01:00
DavHau 731053d8aa
services.cachix-watch-store: fix description of compressionLevel 
By now, zstd is the default.
 2023-02-16 19:25:18 +07:00
pennae 047bd73c5e nixos/wireguard: make publicKeys singleLineStrs 
using readFile instead of fileContents (or using indented strings) can
leave a trailing newline that causes build errors in systemd units and
has previously caused runtime errors in wireguard scripts. use
singleLineStr to strip a trailing newline if it exists, and to fail if
more than one is present.
 2023-02-16 11:56:12 +01:00
Artturi 7dad858aa1
Merge pull request #216385 from SuperSandro2000/ffmpeg-nox 
nixos/no-x-libs: fix infinite recursion with ffmpeg
 2023-02-16 02:46:25 +02:00
Naïm Favier 5cf311c036
nixos/unbound: make stateDir writable 2023-02-15 18:14:58 +01:00
Kim Lindberger ad36a97de0
Merge pull request #175000 from shyim/add-opensearch 
opensearch: init at 2.5.0
 2023-02-15 18:11:53 +01:00
talyz 9e9007e45f
nixos/opensearch: Use DynamicUser and StateDirectory by default 
...but still allow for setting `dataDir` to a custom path. This gets
rid of the use of the deprecated option PermissionsStartOnly. Also, add
the ability to customize user and group, since that could be useful
with a custom `dataDir`.
 2023-02-15 16:38:24 +00:00
Flakebi 12db8314d7
fail2ban: 0.11.2 -> 1.0.2 
Update to 1.0.2: https://github.com/fail2ban/fail2ban/blob/1.0.2/ChangeLog#ver-102-20221109---finally-war-game-test-tape-not-a-nuclear-alarm
1.0.1 contained a few breaking changes, but I think they have little
impact.

I changed the module to use the systemd service shipping with fail2ban
(now added to the package).
 2023-02-15 10:11:38 +01:00
Peter Hoeg 7dc0f77ecf nixos/hardware: clean up "with lib;" for keyboards 2023-02-15 11:34:22 +08:00
Peter Hoeg 2a97c0d985 nixos/hardware: add support for qmk keyboards 2023-02-15 11:33:56 +08:00
Sandro Jäckel 9e3e928ad4
nixos/no-x-libs: fix infinite recursion with ffmpeg 2023-02-14 23:29:23 +01:00
Sandro b2cf9511b3
Merge pull request #211547 from yater/patch-3 2023-02-14 22:32:47 +01:00
Soner Sayakci d7eb44a421
nixos/opensearch: init module 2023-02-14 20:00:27 +00:00
K900 03ce4617e8
Merge pull request #216072 from illdefined/akkoma 
akkoma: 3.5.0 → 3.6.0
 2023-02-14 22:43:49 +03:00
K900 0059f767b9
Merge pull request #211767 from K900/plasma-5.27 
Plasma 5.27
 2023-02-14 22:12:28 +03:00
Mikael Voss 507c66f5b1
pleroma-fe: Rename to akkoma-fe 2023-02-14 20:05:08 +01:00
nikstur b1ff1e1658 nixos/systemd-repart: enable running after initrd 2023-02-14 19:42:32 +01:00
K900 2bbd450b8b
Merge pull request #210505 from notgne2/fix/systemd-initrd-allow-symlink 
nixos/systemd-initrd: allow symlink into when checking for `/prepare-root`
 2023-02-14 21:10:31 +03:00
K900 34f3085148
Merge pull request #201963 from zhaofengli/moonraker-2022-11-18 
moonraker: unstable-2022-04-23 -> unstable-2022-11-18, nixos/moonraker: fixes
 2023-02-14 21:00:44 +03:00
Maximilian Bosch 3d53723112
Merge pull request #186660 from aopom/clickhouse-conf 
Change clickhouse's module conf directory to permit overrides
 2023-02-14 15:58:09 +01:00
K900 8474716356 nixos/plasma5: install flatpak-kcm if needed 2023-02-14 14:15:57 +03:00
zowoq 02f9255044 podman: remove wrapper 
trying to get all of the podman functionality to work with the wrapper
 is becoming more complicated with each release, it isn't sustainable

removing the wrapper does mean that using extraPackages will need to build from source

- include pkgs.zfs by default in the wrapped podman used by the module so it is cached
  - anyone using zfsUnstable will need to build from source

- remove unnecessary serviceConfig overrides

- set HELPER_BINARIES_DIR during build

- use install.bin target on linux for podman/tmpfiles
  - also installs quadlet/rootlessport in libexec

- remove unnecessary rootlessport output

- remove unnecessary substituteInPlace
 2023-02-14 19:22:24 +10:00
zowoq 04b9fcca93 nixos/podman: wrap /run/wrappers for setuid shadow binaries 
adding it here so it only needs to be done once
 2023-02-14 19:22:24 +10:00
Karel Kočí 116872aedd
nixos/gitlab-runner: fix shell syntax preventing build 
The build fails when configFile is provided because of shellcheck
detects missing quotes here.
 2023-02-13 13:20:26 +01:00
Nick Cao 48d6418a2e
Merge pull request #215696 from fee1-dead-contrib/matrix-appservice-discord.customize-package 
nixos/appservice-discord: customizable `package`
 2023-02-13 09:50:52 +08:00
Tom Hubrecht 919f2b2b62 nixos/borgmatic: Allow defining multiple configurations 2023-02-12 19:12:34 +01:00
Robert Schütz 7b60fce843
Merge pull request #215222 from dotlambda/nixos-imaginary-init 
nixos/imaginary: init
 2023-02-12 08:42:19 -08:00
Vanilla 3ba3e20347
nixos/virtualisation/linode-image: Migrate to new openssh options. 2023-02-12 13:06:11 +08:00
Nick Cao 3bd8cc7a90
Merge pull request #215795 from e1mo/fix-dokuwiki-acluse 
nixos/dokuwiki: remove last reference to aclUse
 2023-02-12 09:06:24 +08:00
Nick Cao a9335078db
Merge pull request #215740 from supermarin/patch-3 
nixos/yubikey-agent: Add dependency to pcsd.service
 2023-02-12 06:20:55 +08:00
Andreas Stührk 8dade1f713 nixos/envoy: add option requireValidConfig to make config validation errors non-fatal 
Co-authored-by: Vincent Haupert <vincent@yaxi.tech>
 2023-02-11 18:21:21 +01:00
Vincent Haupert 84220a7098 nixos/envoy: add package option 2023-02-11 18:21:21 +01:00
Vincent Haupert 3c3da8768b nixos/envoy: further service hardening 2023-02-11 18:21:21 +01:00
Vincent Haupert 8fff553f7e nixos/envoy: sort serviceConfig entries 2023-02-11 18:21:21 +01:00
Vincent Haupert 989a1a6ef5 nixos/envoy: use lists in serviceConfig where appropriate 
Using type `list` instead of `str` in `serviceConfig` entries which
accept multiple values allows easier extension of the unit
configuration.
 2023-02-11 18:21:21 +01:00
Robert Schütz efee1b5234 nixos/imaginary: init 2023-02-11 09:18:42 -08:00
illustris 8f1c823ab0
nixos/hbase: add thrift and rest servers 2023-02-11 20:07:28 +05:30
Marin 785cd824a3 nixos/yubikey-agent: Add dependency to pcsd.service 
Issue: after installing, running `yubikey-agent -setup` produces the
following error:
```
nixOS: Failed to connect to the YubiKey: connecting to pscs: the Smart
card resource manager is not running
```

More on this issue: https://github.com/FiloSottile/yubikey-agent/issues/137
 2023-02-11 09:32:24 -05:00
Naïm Favier 86a387351a
Merge branch 'master' into nixos/hostapd 2023-02-11 14:03:56 +01:00
Moritz 'e1mo' Fromm e8b59a1e2e
nixos/dokuwiki: remove last reference to aclUse 
This was overlooked in #209299, but will throw a trace when building a
system even when the setting was not set.
 2023-02-11 11:12:51 +01:00
Martin Puppe fa7fbe565d nixos/paperless: apply nixpkgs-fmt 2023-02-10 23:55:30 +01:00
Sandro 9ee0410a57
Merge pull request #214702 from Tom-Hubrecht/onlyoffice 2023-02-10 23:07:32 +01:00
Arian van Putten 5b23d0e51c
Merge pull request #214396 from nikstur/systemd-repart 
systemd-repart
 2023-02-10 20:03:09 +01:00
Tom Hubrecht 405984ac13 nixos/onlyoffice: Fix initial permissions for the documentserver data 2023-02-10 19:16:19 +01:00
Deadbeef e391cf368a nixos/appservice-discord: customizable package 2023-02-11 01:08:46 +08:00
Anderson Torres e1ffcb46cd
Merge pull request #153098 from bb2020/udisks 
nixos/udisks2: add mountOnMedia option
 2023-02-10 13:50:57 -03:00
bb2020 61219651fe nixos/udisks2: add mountOnMedia option 2023-02-10 16:38:05 +03:00
nikstur 4700198654 nixos/systemd-repart: init 2023-02-10 14:05:44 +01:00
1sixth 06972ea1fe nixos/nitter: add replaceReddit option 2023-02-10 09:28:17 +01:00
Aaron Andersen ce81c3ab72
Merge pull request #215554 from bb2020/dlna 
nixos/minidlna: minor changes
 2023-02-09 21:45:59 -05:00
Nick Cao 4ba33a758f
Merge pull request #215489 from Alper-Celik/master 
nixos/plasma5: use vlc phonon backend by default
 2023-02-10 09:27:37 +08:00
bb2020 76bf633dc2 nixos/minidlna: minor changes 2023-02-09 21:11:20 +03:00
Alvar Penning 63dd9fb5c8 nixos/ympd: Unit hardening 
Next to some systemd unit hardening, the nobody user isn't used anymore,
as suggested in #55370.
 2023-02-09 19:10:19 +01:00
talyz 8fb5bab784
discourse: 2.9.0.beta14 -> 3.1.0.beta2 2023-02-09 17:36:29 +01:00
Alper Çelik 0b74f9829f
nixos/plasma5: use vlc phonon backend by default 2023-02-09 13:53:28 +03:00
Daniel Poelzleithner fa60722e96 webdav-server-rs: Add debug option 2023-02-09 11:53:06 +01:00
Nick Cao aef8797863
Merge pull request #215345 from Izorkin/fix-coredump-id 
nixos/systemd-coredump: fix group id
 2023-02-09 13:52:05 +08:00
Nick Cao e95397343c
Merge pull request #215369 from IndeedNotJames/caddy 
caddy: 2.6.2 -> 2.6.3
 2023-02-09 12:06:41 +08:00
IndeedNotJames f5a06f7150
nixos/caddy: fix caddy fmt for caddy v2.6.3 
The nixos module uses `caddy fmt` to *format* the generated Caddyfile.
v2.6.3 slightly altered `caddy fmt`'s behavior.

Excerpt from https://github.com/caddyserver/caddy/releases/tag/v2.6.3
> cmd: caddy fmt return code is 1 if not formatted
> cmd: fmt exit successfully after overwriting config file

Which is why the internal `Caddyfile-formatted` now uses `cp` and `caddy fmt --overwrite` instead
 2023-02-09 03:36:10 +01:00
ppom 5a1ba62841 onlyoffice: allow ExecStartPre additions 2023-02-09 00:56:08 +01:00
Justin Bedő f2ab8c706d
Merge pull request #158486 from ShamrockLee/singularity-apptainer 
singularity: fix defaultPath and reflect upstream changes
 2023-02-08 23:47:32 +00:00
Izorkin 6b9583e5e1
nixos/systemd-coredump: fix group id 2023-02-08 20:48:13 +03:00
Jörg Thalheim 10d5d6196a
Merge pull request #213601 from SuperSandro2000/envfs-wsl 
nixos/envfs: use configured environment.usrbinenv and environment.binsh, add extraFallbackPath options
 2023-02-08 16:43:39 +01:00
Sandro Jäckel 1c664befd4
nixos/envfs: add extraFallbackPathCommands options 
this is mainly useful for restricted platforms like wsl which require
some extra entries in /bin/
 2023-02-08 15:52:38 +01:00
pennae bf4c0c1900 nixos/*: remove trailing period in mkEnableOptions 
those are added by mkEnableOption, and .. is replaced to … by markdown
processing.
 2023-02-08 15:23:34 +01:00
pennae 2f9d71afdb nixos/x11: fix some docs links 
the docbook stylesheets duplicated the target of these untitled links
into their label, but we should do that in markdown instead.
 2023-02-08 15:23:34 +01:00
K900 666ae72408
Merge pull request #215276 from K900/kio-admin 
kio-admin: init at 1.0.0
 2023-02-08 16:34:53 +03:00
Sandro a7b862f4f9
Merge pull request #215243 from winterqt/luksroot-pbkdf2-sha512-fix 
nixos/luksroot: build pbkdf2-sha512 binary in its own derivation
 2023-02-08 11:04:11 +01:00
Yueh-Shun Li 71a89291ee apptainer, singularity: enable non-FHS --fakeroot support 
This patch provides input arguments `newuidmapPath` and `newgidmapPath`
for apptainer and singularity to specify the path to the SUID-ed executables
newuidmap and newgidmap where they are not available from the FHS PATH.

As NixOS places those suided executables in a non-FHS position
(/run/wrapper/bin), this patch provides
programs.singularity.enableFakeroot option and implement with the above
input parameters.
 2023-02-08 18:04:05 +08:00
Yueh-Shun Li 50788d2fb0 apptainer, singularity: fix defaultPath and reflect upstream changes 
Upstream changes:
singularity 3.8.7 (the legacy) -> apptainer 1.1.3 (the renamed) / singularity 3.10.4 (Sylabs's fork)

Build process:
*   Share between different sources
*   Fix the sed regexp to make defaultPath patch work
*   allowGoReference is now true
*   Provied input parameter removeCompat (default to false)
    that removes the compatible "*singularity*" symbolic links
    and related autocompletion files when projectName != "singularity"
*   Change localstatedir to /var/lib
*   Format with nixpkgs-fmt
*   Fix the defaultPath patching
    and use it instead of the `<executable> path` config directive
    deprecated in Apptainer
*   Provide dependencies for new functionalities such as
    squashfuse (unprivileged squashfs mount)
*   Provide an attribute `defaultPathInputs` to override
    prefix of container runtime default PATH

NixOS module programs.singularity:
*   Allow users to specify packages
*   Place related directories to /var/lib
*   Format with nixpkgs-fmt

singularity-tools:
*   Allow users to specify packages
*   Place related directories to /var/lib when building images in VM
 2023-02-08 18:03:11 +08:00
Yueh-Shun Li 136bbe2605 nixos/modules/programs/singularity.nix: format expression 2023-02-08 17:42:03 +08:00
K900 4a514c6754 nixos/plasma5: install kio-admin for desktop 2023-02-08 12:38:14 +03:00
Will Fancher 14b77582da systemd-stage-1: fsck 2023-02-08 00:43:10 -05:00
Winter b2d04c1155 nixos/luksroot: build pbkdf2-sha512 binary in its own derivation 
Since this feature's inception, we've compiled a binary that uses OpenSSL
to perform PBKDF-SHA512 during the extra-utils build. In addition to this
being inefficient, it broke as of 6ea1a2a1be,
which switched the extra-utils derivation to use stdenvNoCC.

For now, I think the path of least resistence is to move the pbkdf-sha512
build to its own derivation, to fix the breakage, as well as improving
the efficiency of the extra-utils build.

(I do believe that at some point, we should revisit this binary -- perhaps
rewriting it -- as Clang even just on its default settings emits more
warnings than you'd want to see in a security-related codebase when
compiling it.)
 2023-02-07 23:06:11 -05:00
Will Fancher a0ba973e13 qemu-vm: Simplfiy systemd-initrd /nix/store mount units 2023-02-07 22:22:39 -05:00
Will Fancher 1b39491326 systemd-stage-1: Use x-initrd.mount for better unit dependencies 2023-02-07 22:22:39 -05:00
Will Fancher 988184ca82 systemd-stage-1: managerEnvironment option 2023-02-07 22:22:39 -05:00
Nick Cao 41460f747c
Merge pull request #214363 from jerith666/k3b-cdrtools 
k3b: use cdrecord from cdrtools rather than cdrkit
 2023-02-08 10:48:09 +08:00
Will Fancher b3a27afb7c binfmt: Don't create invalid service with no registrations 
We shouldn't be creating a systemd.services.systemd-binfmt value when
the upstream unit isn't being pulled in, because it results in a
service unit file with no ExecStart line
 2023-02-07 17:02:26 -05:00
Will Fancher eec740325c initrd-ssh: New sshd settings names 2023-02-07 13:56:02 -05:00
Will Fancher 1406dd02a9 sshd: Cyphers -> Ciphers 2023-02-07 13:54:36 -05:00
Maximilian Bosch 298148f714
Merge pull request #214973 from paumr/roundcube_bugfix_nginx 
nixos/roundcube: fixed nginx configuration
 2023-02-07 14:01:49 +01:00
Thiago Kenji Okada 620aa4ff15
Merge pull request #165188 from GoogleBot42/master 
nvidia: Add Reverse Prime Sync
 2023-02-07 07:43:00 +00:00
Googlebot 458c1628ee fix logic 2023-02-07 00:51:39 -05:00
Nick Cao 3aee0744e8
Merge pull request #214982 from Janik-Haag/master 
qdmr: fixup
 2023-02-07 10:09:49 +08:00
Nick Cao 8f3021c728
Merge pull request #214868 from VergeDX/pykms 
nixos/pykms: rename systemd deprecated `MemoryLimit` to `MemoryMax` with option.
 2023-02-07 10:08:23 +08:00
Vanilla 0b426cd8e2
nixos/pykms: rename systemd deprecated MemoryLimit to MemoryMax. 2023-02-07 10:04:24 +08:00
Nick Cao 341770d3f1
nixos/zram: fix default swapDevices 2023-02-07 09:16:16 +08:00
Sandro 98a5726add
Merge pull request #204390 from gbtb/openvpn_client_restart_after_suspend 
Resolves https://github.com/NixOS/nixpkgs/issues/52528
 2023-02-07 01:06:24 +01:00
Matthieu Coudron ef5da70d66
services.openssh: rename several settings (#211991) 
* services.openssh: rename several settings

... to match the sshd config format (makes transition smoother), namely:
services.openssh.forwardX11 -> services.openssh.settings.X11Forwarding
services.openssh.cyphers -> services.openssh.settings.Cyphers
services.openssh.macs -> services.openssh.settings.Macs
services.openssh.kexAlgorithms -> services.openssh.settings.KexAlgorithms
services.openssh.gatewayPorts -> services.openssh.settings.GatewayPorts

* release-notes: mention openssh renaming

* chore: regenerated release-notes
 2023-02-07 00:11:18 +01:00
Googlebot 2a7130d13a nvidia: Reverse Prime Sync 2023-02-06 22:46:56 +00:00
Sandro 6cdec6d1b8
nixos/nginx: add comment about clearing Connection header (#214211) 2023-02-06 23:37:38 +01:00
Sandro d47709d1ef
Merge pull request #208189 from numinit/update-nebula-module 2023-02-06 23:14:58 +01:00
Jozef Hollý 3cb385953b mimir: add package override 2023-02-06 21:49:23 +01:00
Maximilian Bosch 9402c27069
Merge pull request #208289 from Ma27/bump-privacyidea 
privacyidea: 3.7.4 -> 3.8
 2023-02-06 21:37:24 +01:00
Thomas Gerbet e7e447a185 meilisearch: 0.30.5 -> 1.0.0 
https://github.com/meilisearch/meilisearch/releases/tag/v1.0.0
 2023-02-06 14:30:08 -05:00
Maximilian Bosch 918c22bd5f
privacyidea: fix build 
The previous changes for the 3.8 update are ready, but staging got
merged into master, so there are a few more challenges to tackle:

* Use python 3.10 now since it's actually supported and less effort to
  build (3.9 isn't recursed into anymore).
* sphinx doesn't build with these overrides, so patch it out entirely
  (i.e. drop `sphinxHook` where it's causing problems).
* backport a few jinja2 fixes for python 3.10 that were fixed in later
  versions, but break because this env is stuck to 2.11.
 2023-02-06 20:28:26 +01:00
Janik H e24028141f qdmr: fixup 2023-02-06 20:19:42 +01:00
Anderson Torres f7e045e149
Merge pull request #209192 from lucasew/cockpit 
cockpit: init at 284
 2023-02-06 16:02:27 -03:00
paumr 9d4fdb9685 nixos/roundcube: fixed nginx configuration 
the changes are required for oauth setups,
and are based on:
https://github.com/roundcube/roundcubemail/issues/8191#issuecomment-919850328
 2023-02-06 18:11:42 +01:00
Maximilian Bosch f6c8d04d11
nixos/privacyidea: fix db uri 
Fixes db migration on 3.8. See also https://github.com/privacyidea/privacyidea/issues/3447
 2023-02-06 17:29:47 +01:00
figsoda a0231c119d
Merge pull request #214705 from Izorkin/update-noxlibs 
nixos/no-x-libs: add mc
 2023-02-06 09:43:57 -05:00
Jason Yundt b1bb9bb6c8 treewide: fix backwards smart apostrophes 
According to the Unicode Standard, you should use U+2019 RIGHT SINGLE
QUOTATION MARK for apostrophes [1]. Before this change, some of the text
in this repo would use U+2018 LEFT SINGLE QUOTATION MARKs instead.

[1]: https://www.unicode.org/versions/Unicode15.0.0/ch06.pdf#G12411
 2023-02-06 07:24:42 -05:00
Soner Sayakci 56ecab709a
nixos/coder: init module 2023-02-06 13:15:00 +01:00
Florian Klink 5aa52365e7
Merge pull request #214103 from NickCao/zram 
nixos/zram: use zram-generator
 2023-02-06 12:53:19 +01:00
Nick Cao 701390c82b
Merge pull request #214809 from drupol/fix/update-pihole-exporter 
fix: `pihole-exporter` NixOS module
 2023-02-06 18:37:11 +08:00
Pol Dellaiera 4e7f20ade9 nixos/prometheus-pihole-exporter: update configuration options 
The `interval` configuration option doesn't exist and has been removed.
The `timeout` configuration option has been added.
 2023-02-06 11:35:51 +01:00
ChaosAttractor b0e773adde nixos/sharing: init 
Co-Authored-By: fee1-dead <ent3rm4n@gmail.com>
 2023-02-06 11:35:42 +01:00
figsoda f06b88d6d0
Merge pull request #213785 from SuperSandro2000/nox-neofetch 
nixos/no-x-libs: add neofetch
 2023-02-05 21:13:07 -05:00
Robert Obryk 0a6dd02620 nixos/firefox-syncserver: enable recommendedProxySettings 
The syncserver requires a Host header identical to the one provided by
the client.
 2023-02-05 23:47:19 +01:00
Stefan Frijters 62928668a8
nixos/no-x-libs: add vim-full 2023-02-05 20:55:57 +01:00
Malte Voos 3449f83618 maintainers/malvo: update information 2023-02-05 15:05:51 +01:00
Izorkin 686eda4817
nixos/no-x-libs: add mc 2023-02-05 13:46:13 +03:00
Morgan Jones e99f342f11 nixos/nebula: harden systemd unit 2023-02-04 16:24:45 -08:00
Morgan Jones 9d649fd78c nixos/nebula: add tests for relays; clean up nebula passthru test 2023-02-04 16:24:45 -08:00
Morgan Jones 90581c977f nixos/nebula: don't run as root; support relays 2023-02-04 16:24:45 -08:00
Sebastian Sellmeier 528f7bfd5d
sway: add package-option 2023-02-04 22:49:49 +01:00
Anderson Torres f70ca07efd
Merge pull request #199881 from Yarny0/fix-plasma 
nixos/plasma: leave `displayManager.setupCommands` alone
 2023-02-04 10:34:13 -03:00
Anderson Torres bc0944c06f
Merge pull request #214193 from jnsgruk/add-multipass-pkg 
multipass: init at 1.11.0
 2023-02-04 09:03:54 -03:00
Jon Seager 63e3f8da09
nixos/multipass: init 2023-02-04 07:44:03 +00:00
Robert Kovacsics 32ec41a672 nixos/virtualbox-image: Allow SCSI storage controller for vSphere 
This is because vSphere version 6.7.0.51000 errors with

        Issues detected with selected template. Details: -
        78:7:VALUE_ILLEGAL: Value ''3'' of Parent element does not refer
        to a ref of type DiskControllerReference.

when using SATA.
 2023-02-04 07:33:11 +01:00
Robert Kovacsics 4009f60d0b nixos/virtualbox-image: Allow running extra commands after OVA creation 
This is useful as virtual machines can often be large files so not
having duplicates/work files in /nix/store can save a lot of space.
 2023-02-04 07:33:11 +01:00
Nick Cao 3d26221082
nixos/zram: use zram-generator 2023-02-04 10:33:06 +08:00
Nick Cao 3ab1fd296f
Merge pull request #212199 from OPNA2608/init/miriway 
miriway: init at unstable-2022-12-18
 2023-02-04 09:50:17 +08:00
Matt McHenry 3364a1c1a1 k3b: use cdrecord from cdrtools rather than cdrkit 
fixes this warning:

cdrecord <= 2.01.01a05 will be run with root privileges on kernel >= 2.6.8
Since Linux kernel 2.6.8 cdrecord <= 2.01.01a05 will not work when run suid root for security reasons anymore.
 2023-02-03 07:54:25 -05:00
OPNA2608 eca30e7730 nixos/miriway: init 2023-02-03 12:56:41 +01:00
Stefan Frijters 11fa179533
nixos/postfix: restrict inet_protocols to ipv4 when ipv6 is disabled 
In the previous state, postfix would still try to use IPv6 addresses,
even when it is disabled in the global networking config.

Cf. https://www.postfix.org/postconf.5.html:

  With Postfix 2.8 and earlier the default is "ipv4". For backwards compatibility with these releases,
  the Postfix 2.9 and later upgrade procedure appends an explicit "inet_protocols = ipv4" setting to
  main.cf when no explicit setting is present.
  This compatibility workaround will be phased out as IPv6 deployment becomes more common.

  inet_protocols = ipv4
  inet_protocols = all (DEFAULT)
  inet_protocols = ipv6
  inet_protocols = ipv4, ipv6

So setting it to 'all' conditionally does not help, as we are now on version 3.x.
 2023-02-03 11:29:24 +01:00
Elliot e78f2115bf
v2raya: v2rayA should start after nftables 2023-02-03 10:22:23 +08:00
Sandro Jäckel 7a7ff877b7 nixos/podman: remove unused mkMerge 2023-02-03 12:05:39 +10:00
Nick Cao 8e73b25e77
Merge pull request #214199 from TheBenCollins/patch-1 
Fix mistake in command execution parameter
 2023-02-03 09:06:39 +08:00
superherointj 5e04ad9e66
Merge pull request #210892 from sielicki/ena280-281 
linuxPackages.ena: 2.8.0 -> 2.8.2
 2023-02-02 22:01:10 -03:00
Nick Cao 96339d786a
Merge pull request #213782 from SuperSandro2000/stage1-extraUtils 
nixos/stage-1: build extraUtils without compiler
 2023-02-03 08:59:08 +08:00
lucasew c0d9f21f50 nixos/cockpit: init 
Signed-off-by: lucasew <lucas59356@gmail.com>
 2023-02-02 14:47:46 -03:00
Artturi c30deffded
Merge pull request #214048 from ElvishJerricco/systemd-stage-1-gzip-wrapped 2023-02-02 19:06:25 +02:00
Bobby Rong 6d5025d631
Merge pull request #213561 from bobby285271/fix/cinnamon 
cinnamon.cinnamon-common: various changes
 2023-02-02 23:47:04 +08:00
Ben Collins dc9fc99c53
Fix mistake in command execution parameter 
Invoking cadvisor sent the command line parameter `-storage_driver_user` twice, once passing `cfg.storageDriverHost`. Fix the typo and pass the host config option to the command line parameter `-storage_driver_host`
 2023-02-02 10:43:44 -05:00
Florian Klink fbfe2907af nixos/nscd: use nsncd by default 
As announced in the NixOS 22.11 release notes, 23.05 will switch NixOS
to using nsncd (a non-caching reimplementation in Rust) as NSS lookup
dispatcher, instead of the buggy and deprecated glibc-provided nscd.

If you need to switch back, set `services.nscd.enableNsncd = false`, but
please open an issue in nixpkgs so your issue can be fixed.
 2023-02-02 11:07:25 +01:00
Martin Weinelt df8007c30f
nixos/home-assistant: Update bluetooth components 2023-02-02 04:38:22 +01:00
Nick Cao 4840ca34f4
Merge pull request #213626 from jamesreprise/entries-typo 
nginx: fix typo in commonHttpConfig
 2023-02-02 09:12:32 +08:00
0x4A6F 321588818e
Merge pull request #209733 from Janik-Haag/master-qdmr 
qdmr: init at 0.11.2, added janik as maintainer
 2023-02-02 01:31:32 +01:00
Nick Cao 099508a1e7
Merge pull request #213471 from SebTM/fix/avahi_directory 
avahi-daemon: add ConfigurationDirectory to ensure avahi, avahi/services exist
 2023-02-02 07:50:51 +08:00
Thomas Gerbet 34f5d8cd24
Merge pull request #213534 from drupol/add-prometheus-shelly-exporter 
prometheus-shelly-exporter: init at 1.0.0
 2023-02-02 00:11:56 +01:00
Will Fancher 60c6790384 systemd stage 1: Fix gzip wrapping 
Necessary since #209371
 2023-02-01 16:03:57 -05:00
Sebastian Sellmeier f531b17f7d
avahi-daemon: add ConfigurationDirectory to ensure "avahi/services" exists 2023-02-01 21:43:29 +01:00
Pol Dellaiera 9f17e032e7
prometheus-shelly-exporter: add NixOS module 2023-02-01 19:49:33 +01:00
Janik H 68e10c242b nixos/qdmr: init 2023-02-01 19:05:17 +01:00
Bernardo Meurer 5a7d6e0bcc hqplayerd: 4.33.0-96 -> 4.34.0-100 2023-02-01 12:20:09 -05:00
ajs124 adc59137e9 nixos/jicofo: fix after update 
2943c21ff7
removed the cli parameters

migrate from legacy config while we're at it
 2023-02-01 16:32:23 +01:00
Nick Cao f1a142c476
Merge pull request #213602 from SuperSandro2000/types.string 
nixos/virtualisation/*: replace deprecated types.string with types.str
 2023-02-01 09:59:09 +08:00
Martin Weinelt a85007b253
Merge pull request #213317 from kurnevsky/throttled 
throttled: fix after recent update
 2023-02-01 01:37:20 +00:00
Sandro 8b598ff3d6
Merge pull request #199731 from Luflosi/kubo-idempotence 2023-01-31 22:12:49 +01:00
Sandro 600adcfdcc
Merge pull request #187994 from Izorkin/update-nginx-gzip 2023-01-31 20:41:59 +01:00
Izorkin 59dbe319ce nixos/gitea: update SystemCallFilter 2023-01-31 10:08:32 -06:00
Izorkin 48ecda0962 nixos/chrony: disable PrivateDevices setting 2023-01-31 10:08:32 -06:00
Martin Weinelt e60ddddbbb
Merge pull request #213489 from mweinelt/paperless-update 
paperless-ngx: 1.11.3 -> 1.12.2
 2023-01-31 15:36:45 +00:00
Sandro c3b1fd8ba1
Merge pull request #199784 from Majiir/fix-plymouth-start 
nixos/plymouth: don't start Plymouth on config switch
 2023-01-31 15:47:45 +01:00
Jörg Thalheim badb11b99f
Merge pull request #212153 from Mic92/rtorrent 
nixos/rtorrent: make directory permissions configurable
 2023-01-31 14:03:10 +00:00
Weijia Wang 5f83b5d199
Merge pull request #208801 from LeSuisse/multipath-tools-0.9.4 
multipath-tools: 0.9.3 -> 0.9.4
 2023-01-31 14:57:49 +01:00
Sandro Jäckel 1974058edb
nixos/no-x-libs: add neofetch 2023-01-31 14:48:04 +01:00
Sandro Jäckel 6ea1a2a1be
nixos/stage-1: build extraUtils without compiler 2023-01-31 14:45:39 +01:00
Erik Arvstedt a7d112b30a
nixos/paperless: Reindex documents after updating to 1.12.x 
This causes a reindex of all documents to allow for comments made before
1.12.x to be searchable.

Also change the format of the version file to just include the version,
not the whole store path.
This simplifies version comparisons and causes migrations to run only
when the version has changed.

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
 2023-01-31 14:43:36 +01:00
Bobby Rong fa9ad6e624
nixos/cinnamon: don't install evince 
On Linux Mint this is a symbolic link of xreader, we don't need
two PDF readers that does the same thing.
 2023-01-31 21:28:13 +08:00
Bobby Rong bdc6404b0f
cinnamon.cinnamon-common: unbreak calendar-server 
Reported in issue 213728. With this change you can see
list of your EDS events in your calendar applet.
 2023-01-31 21:28:13 +08:00
Nick Cao db77921d65
Merge pull request #205118 from SharzyL/fix-openconnect-protocol 
nixos/openconnect: support alternative protocol
 2023-01-31 19:53:53 +08:00
schnusch 45f06d9712 nixos/cgit: add package option 2023-01-31 12:13:56 +01:00
schnusch 218c7795a6 nixos/cgit: init 2023-01-31 12:06:12 +01:00
Vladimír Čunát e4957a85c9
Merge #211923: staging-next 2023-01-21 2023-01-31 09:42:28 +01:00
Peter Hoeg 9abbbc5979 nixos/plasma5: add tool needed for kinfocenter 2023-01-31 14:46:06 +08:00
Nicholas Sielicki 33397faec9 ena: 2.8.0 -> 2.8.2 
* Notably, fixes build on kernel >= 5.17

Signed-off-by: Nicholas Sielicki <git@opensource.nslick.com>
 2023-01-31 03:31:05 +00:00
github-actions[bot] dd1ff149da
Merge master into staging-next 2023-01-31 00:02:31 +00:00
Florian Klink cd47b8e423
Merge pull request #213445 from Majiir/fix-systemd-coredump-truncation 
nixos/systemd/coredump: fix kernel.core_pattern truncation
 2023-01-30 21:26:21 +01:00
Izorkin d178a1d7a1
nixos/nginx: update recommended brotli settings 2023-01-30 23:13:12 +03:00
Izorkin ee7e096c48
nixos/nginx: update recommended gzip settings 2023-01-30 23:03:01 +03:00
Sandro Jäckel 2d3efd3301
nixos/nginx: clear clients Connection headers 2023-01-30 20:25:22 +01:00
James Williams 18ab2268cd
fix: typo (enries -> entries) 2023-01-30 19:08:30 +00:00
pennae 5b6dcece88
Merge pull request #212684 from pennae/nixos-render-docs 
nixos-render-docs: init, use for some manual rendering to docbook
 2023-01-30 19:26:07 +01:00
github-actions[bot] 872d17dee8
Merge master into staging-next 2023-01-30 18:01:30 +00:00
K900 2c257a212e
Merge pull request #213509 from K900/accept-my-fate 
treewide: add myself as maintainer to all the Pipewire stuff
 2023-01-30 20:05:49 +03:00
Mark Vainomaa 30081adcd5
nixos/docker: add "local" as valid logDriver option 2023-01-30 18:04:18 +02:00
Vladimír Čunát 23ce77d76e Revert #178290: nixos/virtualisation: add option 
...for explicitly named network interfaces

This reverts commit 6ae3e7695e.
(and evaluation fixups 08d26bbb72 7aed90a969)
Some of the tests fail or time out after the merge.
 2023-01-30 07:55:50 -08:00
Sandro Jäckel ed9cb58886
nixos/virtualisation/*: replace deprecated types.string with types.str 2023-01-30 16:54:21 +01:00
Sandro Jäckel d9f07dcee5
nixos/envfs: use configured environment.usrbinenv and environment.binsh 
Taken from upstream
d91aeefccb
 2023-01-30 16:52:43 +01:00
Michele Guerini Rocco 72c6c848ee
Merge pull request #212685 from rnhmjoj/pr-connman 
nixos/wireless: fix failure on missing config file
 2023-01-30 13:32:58 +01:00
github-actions[bot] 1a06f52c21
Merge master into staging-next 2023-01-30 12:01:22 +00:00
Sandro d26c778ade
Merge pull request #153127 from eyJhb/user-uids-fix 
nixos/users+nixos/lightdm: fixed users starting at 1000, and system users below 1000
 2023-01-30 11:32:10 +01:00
Nick Cao 445d1dc7b0
Merge pull request #213483 from lovesegfault/fix-roon-bridge 
nixos/roon-bridge: fix exec name
 2023-01-30 14:25:25 +08:00
K900 ffaae97867 nixos/pipewire: add myself as maintainer 2023-01-30 09:09:47 +03:00
Bernardo Meurer 259cc7903c
nixos/roon-bridge: fix exec name 2023-01-29 19:57:59 -05:00
Majiir Paktu 7f35c8b2ac nixos/systemd/coredump: fix kernel.core_pattern truncation 
Fixes #213408
 2023-01-29 15:49:16 -05:00
github-actions[bot] 2019d6632b
Merge master into staging-next 2023-01-29 12:01:20 +00:00
Florian b9e6189341
Octoprint vcgencmd patch (#213201) 
* octoprint: add tmpfile.d rule for read-access to /dev/vchiq for vcgencmd

fixes #210629

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>

* Update pkgs/applications/misc/octoprint/default.nix

---------

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
Co-authored-by: Nick Cao <nickcao@nichi.co>
 2023-01-29 16:11:48 +08:00
Evgeny Kurnevsky 8542aa185d
throttled: fix after recent update 2023-01-29 10:25:08 +03:00
K900 de6e502f5e pipewire: 0.3.64 -> 0.3.65 2023-01-29 10:11:12 +03:00
Aaron L. Zeng b90cf0612e nixos/atop: Remove upgraded logfiles if not replaced 
Before this change, starting atop regularly caused a quadratic
increase in the number of log files over time, as each daily log file
was copied (multiple times) to a new file, and then left there because
the upgrade was a no-op.  This eventually led to atop being unable to
start because the log file name became too long!
 2023-01-29 00:24:25 -05:00
github-actions[bot] b460ba1998
Merge master into staging-next 2023-01-28 12:01:10 +00:00
Colin Arnott 64f3a304db
nixos/wordpress: ensure default sites includes a theme 2023-01-28 10:31:56 +00:00
Linus Heckemann 09f76e171e Merge remote-tracking branch 'upstream/nixos-unstable' into stateless-vms 2023-01-28 11:27:21 +01:00
Jonas Heinrich 7a60b737d2
Merge pull request #210686 from urandom2/wordpress2 
nixos/wordpress: plugins and themes as attrs
 2023-01-28 11:07:53 +01:00
Martin Weinelt 52029b8e00 Merge remote-tracking branch 'origin/master' into staging-next 2023-01-27 23:50:36 +01:00
pennae 0a6e6cf7e6 nixos/manual: render module chapters with nixos-render-docs 
this converts meta.doc into an md pointer, not an xml pointer. since we
no longer need xml for manual chapters we can also remove support for
manual chapters from md-to-db.sh

since pandoc converts smart quotes to docbook quote elements and our
nixos-render-docs does not we lose this distinction in the rendered
output. that's probably not that bad, our stylesheet didn't make use of
this anyway (and pre-23.05 versions of the chapters didn't use quote
elements either).

also updates the nixpkgs manual to clarify that option docs support all
extensions (although it doesn't support headings at all, so heading
anchors don't work by extension).
 2023-01-27 20:07:34 +01:00
ckie 1859e56a7f
nixos/no-x-libs: don't mask self/super in nested override 
From SuperSandro2000's post-merge review of the PR adding this,
nixos/no-x-libs: add qtbase. Sandro added a comment about this after I had
already merged it; self'/super' previously masked the top level self/super.
 2023-01-27 19:24:59 +02:00
Jonas Heinrich 748c2b416c
nixos/wordpress: fix minor syntax error 2023-01-27 16:35:46 +01:00
Colin Arnott 66e0e5ad74
nixos/wordpress: plugins and themes as attrs 
In an effort to better encode version strings and use descriptive pnames
that do not conflict with top level pkgs, we currently use
wordpress-${type}-${pname} for pname. This is good for the nix store,
but when we synthesize the wordpress derivation in our module, we reuse
this pname for the output directory.

Internally wordpress can handle this fine, since plugins must register
via php, not directory. Unfortunately, many plugins like civicrm and
wpforms-lite are designed to rely upon the name of their install
directory for homing or discovery.

As such, we should follow both the upstream convention and
services.nextcloud.extraApps and use an attribute set for these options.
This allows us to not have to deal with the implementation details of
plugins and themes, which differ from official and third party, but also
give users the option to override the install location. The only issue
is that it breaks the current api.
 2023-01-27 15:24:19 +00:00
Vladimír Čunát 8a77ed60ac
Merge branch 'master' into staging-next 2023-01-27 09:36:55 +01:00
Jan Tojnar 42930c79dd nixos/fwupd: Upgrade ESP path config key 
This setting was renamed and moved to the main config file in fwupd 1.8.5:
5d38e0aeea

Without this patch, fwupd tries to migrate the config and crashes when it meets the immutable:

    FuEngine             migrating OverrideESPMountPoint=/boot to EspLocation
    Failed to load daemon: failed to load engine: Failed to create file ?/etc/fwupd/daemon.conf.6HZBZ1?: Read-only file system

The setting was first introduced to the module in 08547ff642 to override the store paths set during build.5d38e0aeea
 2023-01-27 00:54:17 +01:00
github-actions[bot] 578f1ba854
Merge master into staging-next 2023-01-26 18:01:29 +00:00
K900 c2182db406
Merge pull request #212440 from K900/fwupd-fix 
nixos/fwupd: fix config parameter name
 2023-01-26 17:27:10 +03:00
Nick Cao 124c0f3d27
Merge pull request #210477 from wineee/deepin-lib 
deepin(library): init at 20.8
 2023-01-26 21:56:17 +08:00
zowoq b93752ceb0 nixos/nix-fallback-paths: 2.12.0 -> 2.13.2 2023-01-26 22:54:25 +10:00
yater 3e1fdaf2e5 nixos/nextcloud: fix typo in option description 
an option services.nextcloud.nginx.enableImagemagick does not exist.
 2023-01-26 03:17:22 +01:00
rnhmjoj 688d658a96
nixos/wireless: fix failure on missing config file 
This change prevents doing the secret substitution when the config is
missing, which would result in an error.

The service can be useful even without configuration; for example
connman controls wpa_supplicant using dbus and as such it does not need
a config file nor any other declarative options.
 2023-01-26 00:31:21 +01:00
github-actions[bot] a1c257a1c6
Merge master into staging-next 2023-01-25 18:01:20 +00:00
Ryan Lahfa 8803f1da66
Merge pull request #178290 from andrew-hoff/ahh/qemu-interfaces 
nixos/virtualisation: add option for explicitly named network interfaces
 2023-01-25 17:32:53 +01:00
github-actions[bot] a2f216a003
Merge master into staging-next 2023-01-25 06:01:06 +00:00
Bobby Rong 776cc63480
Merge pull request #212210 from bobby285271/rm/gnome-documents 
nixos/gnome-documents: remove
 2023-01-25 11:04:08 +08:00
github-actions[bot] c47e4b69a3
Merge master into staging-next 2023-01-25 00:02:20 +00:00
Jörg Thalheim 9ccde6dcca
Merge pull request #212268 from Mic92/tpm-crb-riscv64 
disable tpm-crb on riscv64
 2023-01-24 22:05:45 +00:00
Yurii Izorkin e673e90753
nixos/no-x-libs: add qtbase (#212460) 
Previously, `services.murmur.enable` would not work with `environment.noXlibs = true;`.
 2023-01-24 23:31:59 +02:00
Luflosi 78f357f134
nixos/kubo: make the configuration options idempotent 
Without this commit, unsetting any of the `services.kubo.settings` options does not reset the value back to the default. This commit gets rid of this statefulness.
This is achieved by generating the default config, applying the user specified config options to it and then patching the `Identity` and `Pinning` config options from the old config back in. This new config is then applied using `ipfs config replace`.
The only remaining stateful parts of the config are the `Identity` and `Pinning.RemoteServices` settings as those can't be changed with `ipfs config replace`. `Pinning.RemoteServices` also contains secrets that shouldn't be in the Nix store. Setting these options wasn't possible before as it would result in an error when the daemon tried to start. I added some assertions to guard against this case.
 2023-01-24 16:33:03 +01:00
K900 a68cd68b45 nixos/fwupd: adjust for config parameter migration 2023-01-24 18:08:09 +03:00
Vladimír Čunát 411405c9f6
Merge branch 'master' into staging-next 
Trivial conflict in release notes, except that the xml/docbook parts
are horrible for (semi-)automatic conflict resolution.
Fortunately that's generated anyway.
 2023-01-24 12:22:38 +01:00
novenary 5bb65387bf console: support using in-kernel fonts 2023-01-24 11:19:46 +02:00
Sandro 17631ae82d
Merge pull request #208712 from mattmelling/cloudlog 
cloudlog: init at 2.3
 2023-01-24 02:52:36 +01:00
github-actions[bot] 727e365f02
Merge master into staging-next 2023-01-24 00:02:11 +00:00
Sandro deeba2fb9e
Merge pull request #206257 from matklad/throttledup 2023-01-23 23:54:18 +01:00
Matt Melling c281dd3e05
nixos/cloudlog: init 2023-01-23 22:41:07 +00:00
Sandro d105aed7f5
Merge pull request #210435 from Stunkymonkey/activemq-broker-phases 2023-01-23 23:37:51 +01:00
Sandro e3d6edd75f
Merge pull request #209045 from Izorkin/update-dhcpcd-ipv6rs 2023-01-23 23:25:03 +01:00
Sandro 9cf61a285c
Merge pull request #206746 from georgyo/mastodon-secretenv 2023-01-23 23:07:57 +01:00
Bernardo Meurer 271dbd928e
nixos/blocky: restart on failure 2023-01-23 11:45:56 -05:00
Jörg Thalheim 86d5b67260 disable tpm-crb on riscv64 2023-01-23 15:00:41 +01:00
github-actions[bot] eadaaa7d20
Merge master into staging-next 2023-01-23 12:01:24 +00:00
Nick Cao a7a0d03ecc
Merge pull request #211229 from Luflosi/fix-modprobeConfig-typo 
nixos/modprobe: fix typo in boot.modprobeConfig.enable documentation
 2023-01-23 16:02:09 +08:00
Nick Cao b9576dd927
Merge pull request #211723 from tpwrules/fix-systemd-boot-more 
nixos/systemd-boot: fix tests and upgrade issues
 2023-01-23 15:55:57 +08:00
Bobby Rong 00a6553266
nixos/gnome-documents: remove 
We disabled this in gnome module starting from dcbad82
and the package was removed e84c8d6.
 2023-01-23 11:59:57 +08:00
github-actions[bot] 44319c878e
Merge master into staging-next 2023-01-23 00:02:15 +00:00
Julien Malka 808663bd02
nixos/uptime-kuma: add ping in path (#212001) 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2023-01-22 23:03:45 +01:00
Riey 0db47bd50e kime: 2.5.6 -> 3.0.2 2023-01-22 19:57:34 +01:00
Jörg Thalheim c0dc2ef1ff nixos/rtorrent: make directory permissions configurable 2023-01-22 19:43:39 +01:00
Maximilian Bosch ad6cd4173f
Merge pull request #211894 from chvp/grafana-image-renderer-use-module 
nixos/grafana-image-renderer: use grafana freeform settings in provisioning
 2023-01-22 19:06:35 +01:00
github-actions[bot] feb2240b37
Merge master into staging-next 2023-01-22 18:01:03 +00:00
Andrew Hoff 6ae3e7695e nixos/virtualisation: add option for explicitly named network interfaces 
Adds a new option to the virtualisation modules that enables specifying
explicitly named network interfaces in QEMU VMs. The existing
`virtualisation.vlans` is still supported for cases where the name of
the network interface is irrelevant.
 2023-01-22 12:20:40 -05:00
Ryan Lahfa 04bf8215a9
Merge pull request #209075 from symphorien/nginx-validate-config-revert 
nixos/nginx: revert config validation
 2023-01-22 17:57:46 +01:00
pennae e067d9e33e nixos/redsocks: fix option description formatting 2023-01-22 17:50:09 +01:00
pennae cf792cfde3 nixos/envfs: fix envfs package option default 
mdDoc is not valid here, but isn't currently rejected for xslt reasons.
 2023-01-22 17:50:09 +01:00
Julien Malka 85c34d334b nixos/uptime-kuma: add julienmalka as maintainer 2023-01-22 17:39:22 +01:00
Xavier Lambein 3f3524a447 nixos/autosuspend: init at version 4.3.0 
`autosuspend` is a daemon that periodically runs user-defined checks to
verify whether the system should be suspended.  It's already available
in nixpkgs.  This adds a NixOS module which starts the daemon as a
systemd service.

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>
 2023-01-22 17:25:01 +01:00
pennae df09c21fb2 nixos/documentation: deprecate docbook option docs 
following the plan in https://github.com/NixOS/nixpkgs/pull/189318#discussion_r961764451

also adds an activation script to print the warning during activation
instead of during build, otherwise folks using the new CLI that hides
build logs by default might never see the warning.
 2023-01-22 17:08:40 +01:00
Nick Cao c128da46bf
Merge pull request #211640 from Izorkin/update-iso-channel 
nixos/installer/cd-dvd: removing duplicate nixpkgs
 2023-01-22 16:31:54 +08:00
Nick Cao 831ce5cb71
Merge pull request #211830 from sorpaas/patch-11 
nixos/systemd-confinement: remove unused rootName
 2023-01-22 16:25:44 +08:00
Nick Cao 99f9998309
Merge pull request #204386 from robryk/resticassert 
nixos/restic: small enhancements
 2023-01-22 16:23:04 +08:00
Nick Cao c2de985844
Merge pull request #211559 from GTrunSec/nomad-credential 
nixos/nomad: add LoadCredential option
 2023-01-22 08:27:44 +08:00
zowoq e75ac30903 Revert "nixos/nix-fallback-paths: 2.12.0 -> 2.13.1" 
This reverts commit 37a44ff3a0.
 2023-01-22 09:48:21 +10:00
Naïm Favier 8bf63a5ed4
Merge pull request #211992 from ncfavier/remove-stray-spaces 2023-01-21 21:51:52 +01:00
Naïm Favier 3aa1337a71
nixos: remove stray spaces 2023-01-21 21:46:53 +01:00
Evils e6fe2eb0ed nixos/tuptime: 5.2.2 renamed option -x to -q 2023-01-21 21:01:26 +01:00
Peter Waller 678eed323f nixos/grub: Name initrd-secrets by system, not by initrd 
Previously, secrets were named according to the initrd they were
associated with. This created a problem: If secrets were changed whilst
the initrd remained the same, there were two versions of the secrets
with one initrd. The result was that only one version of the secrets would
by recorded into the /boot partition and get used. AFAICT this would
only be the oldest version of the secrets for the given initrd version.

This manifests as #114594, which I found frustrating while trying to use
initrd secrets for the first time. While developing the secrets I found
I could not get new versions of the secrets to take effect.
Additionally, it's a nasty issue to run into if you had cause to change
the initrd secrets for credential rotation, etc, if you change them and
discover you cannot, or alternatively that you can't roll back as you
would expect.

Additional changes in this patch.

* Add a regression test that switching to another grub configuration
  with the alternate secrets works. This test relies on the fact that it
  is not changing the initrd. I have checked that the test fails if I
  undo my change.

* Persist the useBootLoader disk state, similarly to other boot state.
  * I had to do this, otherwise I could not find a route to testing the
    alternate boot configuration. I did attempt a few different ways of
    testing this, including directly running install-grub.pl, but what
    I've settled on is most like what a user would do and avoids
    depending on lots of internal details.
  * Making tests that test the boot are a bit tricky (see hibernate.nix
    and installer.nix for inspiration), I found that in addition to
    having to copy quite a bit of code I still couldn't get things to
    work as desired since the bootloader state was being clobbered.

My change to persist the useBootLoader state could break things,
conceptually. I need some help here discovering if that is the case,
possibly by letting this run through a staging CI if there is one.

Fix #114594.

cc potential reviewers:

@lopsided98 (original implementer) @joachifm (original reviewer),
@wkennington (numerous fixes to grub-install.pl), @lheckemann (wrote
original secrets test).
 2023-01-21 17:19:26 +00:00
Naïm Favier 363158603a nixos: fix backticks in Markdown descriptions 2023-01-21 18:08:38 +01:00
guangtao 6c46078aad nixos/nomad: add LoadCredential option 2023-01-21 06:09:22 -08:00
Jan Tojnar 5c87c72c1f nixos/init-script: fix eval 
error: attribute 'nixos' missing

This was missed in d3528cdc3d
 2023-01-21 13:26:47 +01:00
Guillaume Girol 90c78aee6c Merge branch 'nativeCheckInputs' into staging-nativeCheckInputs 2023-01-21 12:00:00 +00:00
Charlotte Van Petegem f8a3c4e94f
nixos/grafana-image-renderer: use grafana freeform settings in provisioning 2023-01-21 10:16:41 +01:00
Aaron Andersen ad161ee67c
Merge pull request #206099 from sweenu/add-goeland-module 
nixos/goeland: init
 2023-01-20 23:06:12 -05:00
Wei Tang ec8d74d58a
nixos/systemd-confinement: remove unused rootName 2023-01-20 22:39:16 +01:00
zowoq 37a44ff3a0 nixos/nix-fallback-paths: 2.12.0 -> 2.13.1 2023-01-21 06:44:18 +10:00
Guillaume Girol cb73862665 Revert "nixos/nginx: validate syntax of config file at build time" 
This reverts commit a768871934.

This is too fragile, it breaks at least on:
* ssl dh params
* hostnames in proxypass and upstreams are resolved in the sandbox
 2023-01-20 20:10:19 +01:00
Guillaume Girol ecb06398e7 Revert "nixos/nginx: disable configuration validation for now" 
This reverts commit 7ef58bce9d.
 2023-01-20 20:07:47 +01:00
Michele Guerini Rocco 10222e1e37
Merge pull request #211295 from rnhmjoj/pr-nixos-install 
nixos-install: remove root requirement for bind mount
 2023-01-20 18:34:38 +01:00
Bruno Inec dbbb062d47
Apply suggestion 
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
 2023-01-20 14:39:35 +01:00
Luflosi 2dfc86b838
nixos/modprobe: fix typo in boot.modprobeConfig.enable documentation 
This typo was introduced in f4d8e64bed.
Also remove the dot at the end of the sentence since otherwise there would be two dots in the documentation.
 2023-01-20 13:58:15 +01:00
Sandro fe34a633e8
Merge pull request #204287 from Artturin/addmorenox 2023-01-20 13:37:52 +01:00
Thomas Watson 8f2babd032 nixos/systemd-boot: pass EFI variable flags during update too 
On some systems, EFI variables are not supported or otherwise wonky.
bootctl attempting to access them causes failures during bootloader
installations and updates. For such systems, NixOS provides the options
`boot.loader.efi.canTouchEfiVariables` and
`boot.loader.systemd-boot.graceful` which pass flags to bootctl that
change whether and how EFI variables are accessed.

Previously, these flags were only passed to bootctl during an install
operation. However, they also apply during an update operation, which
can cause the same sorts of errors. This change passes the flags during
update operations as well to prevent those errors.

Fixes https://github.com/NixOS/nixpkgs/issues/151336
 2023-01-19 23:52:57 -06:00
Thomas Watson 8736edfd95 nixos/qemu-vm: fix useBootLoader builds on aarch64-linux 
The aarch64-linux kernel and initrd recently eclipsed 60M, causing the
boot disk image build to run out of space and fail. Double the size of
the image to 120M to fix the issue.

The disk image is stored in expandable qcow2 format, so only the space
actually used by files in the image is consumed. Therefore, other
architectures are not unfairly penalized, and the output size does not
suddenly double.

This also fixes NixOS tests which use this option, like systemd-boot's.
 2023-01-19 23:28:01 -06:00
Nick Cao cd5c34bb18
Merge pull request #188795 from Sohalt/oci-containers-wait-for-network 
nixos/oci-containers: wait for network before starting container
 2023-01-20 09:11:19 +08:00
Artturin 9a34bb217e
nixos/no-x-libs: add more replacements 
all-packages: change -nox overrides to callPackage's so there is no
infinite recursion when replacing the package with a overlay
 2023-01-20 00:45:37 +01:00
Bruno Inec edb6b10966
add warning if not using password_file 2023-01-20 00:39:34 +01:00
Bruno Inec 5edf9bd76f
Apply suggestion 
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
 2023-01-20 00:39:34 +01:00
Bruno Inec 15414ff8e1
databaseDirectory -> StateDir and changed description 2023-01-20 00:39:33 +01:00
Bruno Inec 8f10857af4
let systemd handle /var/lib/goeland creation 2023-01-20 00:39:32 +01:00
Bruno Inec 988feead01
nixos/goeland: init 2023-01-20 00:39:31 +01:00
Izorkin 058951e85d
nixos/installer/cd-dvd: removing duplicate nixpkgs 2023-01-19 22:52:45 +03:00
rnhmjoj 4ed9893770
nixos/systemd-boot: improve initrd-secrets error messages 
This is the equivalent of eccc1e5b but for systemd-boot
 2023-01-19 20:50:17 +01:00
rnhmjoj 2bc5625877
nixos-install: remove root requirement for bind mount 
This moves the creation of the bind mount inside the `nixos-enter`
invocation. The command are executed in an unshared mount namespace, so
they can be run as an unprivileged user.
 2023-01-19 20:50:17 +01:00
Vladimir Pouzanov 631b7f6f88 Add support for the other shells 2023-01-19 16:59:11 +00:00
Vladimir Pouzanov 59296fbbc3 Assert that fish configuration is enabled if any user has fish as their shell. 
Suggested-By: matthiasbeyer
 2023-01-19 16:28:54 +00:00
guangtao b5a3f795c3 nixos/nomad: fix multi-plugin-dir path 2023-01-18 22:22:43 -08:00
Naïm Favier 556a4a7951 nixos/installation-cd-minimal: include HTML doc 
Although we don't really need HTML documentation in the minimal installer,
not including it may cause annoying cache misses in the case of the NixOS manual.
 2023-01-19 00:30:33 +01:00
Pascal Bach e229ca64d0
Merge pull request #211005 from AtaraxiaSjel/nixos/gitea-zstd 
nixos/gitea: add tar.zst to the dump type
 2023-01-18 09:22:38 +01:00
Ryan Lahfa eb6d457115
Merge pull request #209246 from e1mo/dokuwiki/package-overriding 
dokuwiki: Combine mechanism for plugins and templates
 2023-01-18 00:51:18 +01:00
K900 860f1b67da
Merge pull request #198287 from K900/kpackage-fix 
nixos/plasma5: make kpackage able to resolve dependencies
 2023-01-17 21:46:42 +03:00
Jonas Heinrich e8731b8778
Merge pull request #210701 from onny/wordpress-settings 
nixos/wordpress: add settings option
 2023-01-17 19:38:17 +01:00
Martin Weinelt 5770984a95
Merge pull request #211252 from schnusch/systemd-user-tmpfiles-rules 
nixos: systemd: systemd.user.tmpfiles.users add default
 2023-01-17 17:41:41 +00:00
talyz 2d4f4e9bdf
nixos/gitlab: Handle secrets in GitLab Pages config 2023-01-17 17:34:47 +01:00
talyz dbd563b9b8
nixos/gitlab: Improve support for GitLab Pages 
- provide options and set defaults for important settings
- generate the shared secret
- reenable gitlab-pages in test
 2023-01-17 17:33:47 +01:00
schnusch f0f2c6bec9 nixos: systemd: systemd.user.tmpfiles.users add default 2023-01-17 16:53:45 +01:00
Florian Klink 24b4189619
Merge pull request #207468 from schnusch/systemd-user-tmpfiles-rules 
nixos: systemd: add systemd.user.tmpfiles.rules, systemd.user.tmpfiles.users.<name>.rules
 2023-01-17 14:39:44 +01:00
schnusch 34ad8447c3 nixos: systemd: add systemd.user.tmpfiles 2023-01-17 12:19:40 +01:00
Naïm Favier cd4f1a1df5
nixos-install: only mount if root 2023-01-17 11:39:34 +01:00
Maximilian Bosch 91054ce6ce
Merge pull request #207748 from blargg/wiki-js 
nixos/wiki-js: Add git and openssh to the wiki-js service path to enable git backups.
 2023-01-17 08:35:58 +01:00
Nick Cao 8f34f01185
Merge pull request #194343 from oxalica/fix/swap-btrfs 
nixos/swap: fix creation on BTRFS and refactor assertions
 2023-01-17 08:35:15 +08:00
Sandro 8986570cb3
Merge pull request #208956 from SuperSandro2000/profile-base-tcpdump 2023-01-17 01:20:31 +01:00
Tom Jankauski eef1f70919 nixos/wiki-js: Add git and openssh to enable git backups. 2023-01-16 16:04:40 -08:00
Michele Guerini Rocco 594b94b4c3
Merge pull request #210812 from rnhmjoj/pr-initrd-secrets 
boot.initrd.secrets fixes
 2023-01-17 00:48:58 +01:00
oxalica 87a0c9490d nixos/swap: fix creation on BTRFS and refactor assertions 2023-01-17 06:47:21 +08:00
Jeff Huffman 96ec8c7623 nixos/documentation.man.mandb: Add skipPackages option, and include nixos-version 
prevents unnecessary recreation of man caches

Fixes #209835
 2023-01-16 22:24:02 +01:00
github-actions[bot] 5a50475572
Merge staging-next into staging 2023-01-16 18:01:50 +00:00
Lassulus 14c48f9864
Merge pull request #211098 from Mic92/lxc-container 
nixos/lxc-container: fix compatibility with systemd-nspawn
 2023-01-16 17:31:25 +01:00
Michael Alan Dorman 2bb560b367 gmrender-resurrect: Add gmediarender service 
This creates a systemd unit that will start and supervise the
gmediarender daemon.
 2023-01-16 17:28:56 +01:00
Jörg Thalheim 22a8cf0c28 nixos/lxc-container: fix compatibility with systemd-nspawn 2023-01-16 15:50:37 +01:00
Jonas Heinrich c51dd42311 nixos/wordpress: add settings option 2023-01-16 14:06:10 +01:00
maifel-maifel 4dbc2fe873
nixos/syncthing: point out pitfalls with extraOptions (#210208) 
Co-authored-by: digital <git-voopaipa@dinid.net>
 2023-01-16 13:12:12 +01:00
github-actions[bot] 55b5b71fba
Merge staging-next into staging 2023-01-16 12:02:01 +00:00
Nick Cao 7ace936995
Merge pull request #211003 from lilyinstarlight/fix/qt6-plugin-path 
nixos/qt: set QT_PLUGIN_PATH and QML2_IMPORT_PATH when enabled
 2023-01-16 18:34:23 +08:00
Nick Cao d3a33fd310
Merge pull request #211042 from uninsane/pr/mx-puppet-discord-to-subdir 
nixos/mx-puppet-discord: move into matrix category
 2023-01-16 15:51:40 +08:00
LuoChen 7a6c0bb468 snapper: fix "type=oneshot" error in snapper-boot.service 2023-01-16 15:33:15 +08:00
colin 87c877fff8 nixos/mx-puppet-discord: move into matrix category 2023-01-16 06:23:25 +00:00
github-actions[bot] 76839f69b4
Merge staging-next into staging 2023-01-16 06:01:40 +00:00
Lily Foster 185874df63
nixos/qt: set QT_PLUGIN_PATH and QML2_IMPORT_PATH when enabled 2023-01-15 22:08:47 -05:00
rnhmjoj 9fc47e6db3
nixos-install: fix missing initrd.secrets paths 
When installing NixOS in the target filesystem /mnt, paths relative to
configuration.nix in `initrd.secrets` are turned by Nix into absolute
paths that reference /mnt. While building the system derivation works,
installing the bootloader fails because the latter process takes place
inside the chroot environment where /mnt does not exist.

Ideally, we would also build the system within chroot, but this greatly
complicates the matter as it requires  manually copying over Nix, its
runtime dependencies and all channels. Possibly, this would also break
several assumptions users have about how nixos-install works.

A simpler and safer (but less neat) solution is to temporarily bind
mount all mount points in /mnt under /mnt/mnt to keep the paths
functional while the bootloader is being installed.
This is essentially the workaround described in issue #73404.
 2023-01-16 02:31:01 +01:00
rnhmjoj eccc1e5bf4
install-grub.pl: improve initrd-secrets error messages 
The build of initrd-secrets can routinely fail for old boot entries
if the secrets have been removed or renamed in a later generation.
This always happens for generation 1, because it's built from the
NixOS installer and the paths differs by the mount point (i.e. /mnt).

The error is very confusing because it fails to mention it's about
an older generation and that it's somewhat harmless.

This commit turns the error into a warning for all generations but the
current, adds the name of the failed entry to the message and a note
explaining why it can happen.
 2023-01-16 02:30:39 +01:00
Sandro 6fecd5a257
Merge pull request #204342 from anpandey/znc 2023-01-16 02:07:30 +01:00
Matthieu Coudron 14905af025
Merge pull request #210998 from teto/fix-sshd 
services.openssh: fix doc
 2023-01-16 01:52:47 +01:00
Dmitriy Kholkin 8e6f6d7db1
nixos/gitea: add tar.zst to the dump type 2023-01-16 03:34:11 +03:00
github-actions[bot] 5682b90ffa
Merge staging-next into staging 2023-01-16 00:02:48 +00:00
Jörg Thalheim 38d3031013
Merge pull request #210942 from GaetanLepage/autorandr 
autorandr: 1.12.1 -> 1.13, nixos/services/autorandr: add ignoreLeadOption
 2023-01-16 00:34:16 +01:00
Matthieu Coudron 293de575cb modules.openssh: provide default settings 
else evaluation fails
 2023-01-16 00:11:53 +01:00
Matthieu Coudron 83e2f6f3da services.openssh: fix doc 2023-01-16 00:06:40 +01:00
Naïm Favier 7d3f7637c6
Merge pull request #210965 from Izorkin/fix-gitea 2023-01-15 21:50:58 +01:00
Izorkin 1fd7d52d82
nixos/gitea: fix creation of data directory 2023-01-15 21:33:21 +03:00
Maximilian Bosch 6f474d1af4
Merge pull request #209495 from amesgen/gitea-dump-activation 
nixos/gitea: don't run gitea-dump on activation
 2023-01-15 19:28:03 +01:00
Maximilian Bosch 9aa1391bdf
Merge pull request #208803 from Ma27/revert-kmod-stage-1-hack 
Revert "nixos/stage-1: fix `modprobe` in initial ramdisk on systems w/glibc-2.34"
 2023-01-15 19:10:10 +01:00
github-actions[bot] c29db3b9fb
Merge staging-next into staging 2023-01-15 18:01:56 +00:00
Ryan Lahfa 503c288f4e
Merge pull request #207567 from Stunkymonkey/photoprism-module-init 
nixos/photoprism: init module
 2023-01-15 18:36:13 +01:00
Felix Buehler fb9e8b9bd4 nixos/photoprism: init module 2023-01-15 18:02:43 +01:00
Ryan Lahfa f8dd03989e
Merge pull request #208038 from SuperSandro2000/uptime-kuma-apprise 
nixos/uptime-kuma: add option to enable apprise support
 2023-01-15 17:59:00 +01:00
Ryan Lahfa 07dabf11e1
Merge pull request #210935 from JulienMalka/Ntfy-data-folder 
nixos/ntfy-sh: Create data folder and auth database
 2023-01-15 17:49:34 +01:00
Ryan Lahfa b42ea74b96
Merge pull request #206655 from vlinkz/distroname 
nixos/version: add system.nixos.distroName and system.nixos.distroId options
 2023-01-15 17:39:55 +01:00
Julien Malka d32f9548cb
nixos/ntfy-sh: Create data folder and auth database 2023-01-15 17:34:23 +01:00
Gaetan Lepage d599e734e5 autorandr: 1.12.1 -> 1.13, nixos/services/autorandr: add ignoreLeadOption 2023-01-15 16:57:13 +01:00
Matthieu Coudron cf10d7aef8
services.openssh: support freeform settings (#193757) 
* services.openssh: support freeform settings

Keep "extraConfig" but introduces "settings".

Also renames several options

(mkRenamedOptionModule [ "services" "openssh" "kbdInteractiveAuthentication" ] [  "services" "openssh" "settings" "KbdInteractiveAuthentication" ])
(mkRenamedOptionModule [ "services" "openssh" "passwordAuthentication" ] [  "services" "openssh" "settings" "PasswordAuthentication" ])
(mkRenamedOptionModule [ "services" "openssh" "useDns" ] [  "services" "openssh" "settings" "UseDns" ])
(mkRenamedOptionModule [ "services" "openssh" "permitRootLogin" ] [  "services" "openssh" "settings" "PermitRootLogin" ])

* updated doc
* regen doc
 2023-01-15 16:32:46 +01:00
github-actions[bot] f867943980
Merge staging-next into staging 2023-01-15 06:01:36 +00:00
George Shammas fef1559b05 nixos/mastodon: Add the ability to pass environment files 2023-01-15 00:18:40 -05:00
Sandro fa8ae2120d
Merge pull request #208715 from elohmeier/prom-rspamd-fix 
Fixes https://github.com/NixOS/nixpkgs/issues/210390
 2023-01-15 02:49:52 +01:00
github-actions[bot] 142d3af1cb
Merge staging-next into staging 2023-01-15 00:03:07 +00:00
Ryan Lahfa 33231c337e
Merge pull request #209538 from voidzero/zsh-syntax-hl.regexp 
zsh-syntax-highlighting: add regexp to list of highlighters
 2023-01-15 00:26:10 +01:00
Victor Fuentes d3528cdc3d
nixos/version: add config.system.nixos.distroName and config.system.nixos.distroId 2023-01-14 16:19:06 -05:00
Elian Doran ba0a640afd fancontrol: restart service after suspend 2023-01-14 19:33:48 +01:00
github-actions[bot] 5ad514cb7e
Merge staging-next into staging 2023-01-14 18:01:41 +00:00
Martin Weinelt b974cf6522
Merge pull request #209180 from NixOS/staging-next 2023-01-14 16:26:39 +00:00
Aaron Andersen 4e798adb3d
Merge pull request #209692 from veehaitch/gh-runner-mkmerge 
nixos/github-runners: use `mkMerge` for `serviceConfig`
 2023-01-14 11:10:14 -05:00
github-actions[bot] 77bded303a
Merge staging-next into staging 2023-01-14 11:13:04 +00:00
github-actions[bot] 79cb2f7e61
Merge master into staging-next 2023-01-14 11:12:34 +00:00
Sergei Trofimovich ca4da963f8 Merge remote-tracking branch 'origin/staging-next' into staging 
Conflicts:
    pkgs/development/libraries/audio/roc-toolkit/default.nix
 2023-01-14 11:07:42 +00:00
Naïm Favier 94197f9339
Merge pull request #207725 from SuperSandro2000/nixos-nginx 2023-01-14 10:45:32 +01:00
github-actions[bot] 4712ed9439
Merge master into staging-next 2023-01-14 00:02:26 +00:00
Tristan Ross 9fdd97298b nixos/java: add binfmt option 2023-01-13 13:46:31 -08:00
Robert Hensing e973da60cd
Merge pull request #200225 from pacien/nixos-qemu-vm-restrictnetwork 
nixos/qemu-vm: add option "restrictNetwork"
 2023-01-13 21:47:21 +01:00