tobias/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-11-18 05:33:56 +01:00
Code Issues Packages Projects Releases Wiki Activity
498855 commits 213 branches 129 tags 11 GiB
Commit graph

25856 commits

Author SHA1 Message Date
Weijia Wang 4387329d8f
Merge pull request #234729 from tie/pufferpanel-doc-fhsenv 
nixos/pufferpanel: buildFHSUserEnv -> buildFHSEnv
 2023-05-29 10:56:11 +03:00
Ivan Trubach 0143b16935 nixos/pufferpanel: buildFHSUserEnv -> buildFHSEnv 
The pufferpanel module (#225274) was merged shortly after the tree-wide
rename f63a12f296 (#225748), so the use of
deperecated buildFHSUserEnv in the docs slipped through review 😅
 2023-05-29 07:08:19 +03:00
happysalada 3dcca62a5e nixos/ntfy-sh: add defaults, use dynamic user 2023-05-28 21:17:14 -04:00
Lin Jian 0ae9df6c5e
nixos/murmur: make it be after network.target again 
network.target was changed to network-online.target in this PR[1] to
workaround an issue[2].

The murmur version in Nixpkgs has fixed that issue[2].

[1]: https://github.com/NixOS/nixpkgs/pull/42860
[2]: https://github.com/mumble-voip/mumble/issues/1629
 2023-05-28 21:03:40 +08:00
github-actions[bot] 19efa11381
Merge staging-next into staging 2023-05-28 06:01:45 +00:00
Bobby Rong 838dad5de9
Merge pull request #234231 from bobby285271/add/xdg-desktop-portal-xapp 
xdg-desktop-portal-xapp: init at 1.0.0
 2023-05-28 10:52:30 +08:00
github-actions[bot] 003f914d04
Merge staging-next into staging 2023-05-28 00:03:10 +00:00
Thomas Gerbet a24848c470 nixos/etcd: allow to choose the package 2023-05-28 08:04:43 +10:00
Ryan Lahfa 77a1c48cca
Merge pull request #232011 from GaetanLepage/river 
nixos/river: init module
 2023-05-27 22:30:51 +02:00
github-actions[bot] 9441fc25d1
Merge staging-next into staging 2023-05-27 18:01:38 +00:00
Victor Freire 77520d39ce nixos/legit: init 2023-05-27 16:20:05 +00:00
Raito Bezarius 09d1022782 nixos/qemu-vm: fix 32-bits assert for memorySize 
It should be an implication, rather than &&.
 2023-05-27 17:20:08 +02:00
Martin Weinelt 108721e4d1
Merge pull request #170473 from NixOS/grahamc-patch-3 
networkd: support specifying the ClientIdentifier for DHCPv4 options
 2023-05-27 16:55:30 +02:00
Ryan Lahfa 537c6ede55
Merge pull request #234266 from emilylange/qemu-vm-2047mb 
nixos/qemu-vm: add `virtualisation.memorySize < 2048` assertion on 32bit
 2023-05-27 15:31:00 +02:00
rnhmjoj 6732106210
network-interfaces-scripted: fix interface cleanup 
There is apparently a bug in the parser of iproute2 where the command
`ip link show <devname>` will not show the device but list all
interfaces (equivalent to `ip link show`) if devname is equal to one of
the flags of `ip-address(8)`. For example, `home`, or `optimistic`.

This bug causes a false positive in the clean up command of the
<devname>-netdev.service, the service fails and the interface is never
configured.

To avoid the bug we can simply use `ip link show dev <devname>`.
 2023-05-27 15:09:22 +02:00
Graham Christensen 479712af11
networkd: support specifying the ClientIdentifier for DHCPv4 options 2023-05-27 15:06:06 +02:00
nicoo 942f0a01fe nixos/below: Explicitely mark descriptions as using Markdown 2023-05-27 11:52:07 +00:00
nicoo 405e1f1e54 nixos/below: Add service module 2023-05-27 11:52:07 +00:00
github-actions[bot] 824f05f73f
Merge staging-next into staging 2023-05-27 06:01:44 +00:00
Nick Cao cf58ff13a3
Merge pull request #234254 from kevincox/mautrix-facebook-appservice-id 
nixos.mautrix-facebook: Fix appservice name
 2023-05-26 19:48:00 -06:00
Alyssa Ross 191075fa83
Merge remote-tracking branch 'origin/staging-next' into staging 
Conflicts:
	pkgs/os-specific/linux/kernel/patches.nix
	pkgs/top-level/linux-kernels.nix
 2023-05-26 18:37:26 +00:00
Raito Bezarius 69bb0f94de nixos/nginx: first-class PROXY protocol support 
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.

Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.

It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.

An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.

Finally, the tests covers:

- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
  (sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;

In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.

For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
 2023-05-26 19:48:26 +02:00
emilylange 5dbd4f3243
nixos/qemu-vm: add virtualisation.memorySize < 2048 assertion on 32bit 2023-05-26 19:43:58 +02:00
Kevin Cox 5242aea64f
nixos.mautrix-facebook: Fix appservice name 
It appears that newer mautrix-facebook versions default to the appservice name `facebook`. This was breaking our registration and causing mautrix-facebook to fail to start. This changes the name back and makes the registration generated match whatever the setting in the app is.
 2023-05-26 12:39:37 -04:00
Bobby Rong 36abd7c9f8
nixos/cinnamon: enable portals by default 2023-05-26 23:53:15 +08:00
Ryan Lahfa 435237d641
Merge pull request #233350 from GrahamDennis/grahamdennis/testing-networks 
nixos/qemu-vm: add option for named network interfaces
 2023-05-26 15:57:01 +02:00
Alyssa Ross a92bc576b1
nixos/stage-1: support bind mounts of files 
On my system, / is tmpfs, and /etc/machine-id is bind mounted from
/persist.
 2023-05-26 13:26:48 +00:00
Pol Dellaiera 2c95ebadf3
nixos/code-server: add more command line options 2023-05-26 09:51:33 +02:00
github-actions[bot] 59b8a4fae6
Merge staging-next into staging 2023-05-26 06:01:46 +00:00
lucasew 8587646ef3 nixos/virtualisation/google-compute-config: minor refactoring 
Signed-off-by: lucasew <lucas59356@gmail.com>
 2023-05-26 00:56:32 +00:00
github-actions[bot] 255911fcb9
Merge staging-next into staging 2023-05-26 00:02:51 +00:00
Lily Foster 83e9bcb109
Merge pull request #231891 from SuperSandro2000/gst-plugins-bad 
nixos/no-x-libs: add gst-plugins-bad, gst-plugins-rs
 2023-05-25 19:25:00 -04:00
Yaya f63f781063 nixos/sftpgo: init 
A fully featured and highly configurable SFTP server with optional
HTTP/S, FTP/S and WebDAV support.

https://github.com/drakkan/sftpgo
 2023-05-25 22:46:15 +02:00
Jenny 0adbf8feb4
nixos/pam_mount: fix mounts without options (#234026) 
This commit adds a comma in front of the given options, which makes the
mounts still succeed even if no options are given.

Fixes #233946
 2023-05-25 22:45:59 +02:00
Sandro 86b0cdb24b
Merge pull request #233517 from illustris/pve-fix 
nixos/proxmox-image: fix qemu build failure
 2023-05-25 22:07:14 +02:00
Sandro ef2a17c946
Merge pull request #232339 from bl1nk/bl1nk/thelounge-package-option 
nixos/thelounge: add package option
 2023-05-25 22:04:22 +02:00
Will Fancher fe43923a70
Merge pull request #229767 from mberndt123/mberndt123/stratis-rootfs 
nixos/stratis: initrd support for stratis root volumes
 2023-05-25 14:06:31 -04:00
Sandro 1b40315504
Merge pull request #233092 from midchildan/chore/mirakurun/node18 2023-05-25 14:47:50 +02:00
illustris 6a20c13258
nixos/proxmox-image: fix qemu build failure 2023-05-25 16:25:43 +05:30
Gaetan Lepage 8f421acbc5 nixos/river: init module 2023-05-25 00:05:23 +02:00
Gaetan Lepage c7bd5289d6 nixos/programs: factor out wayland-session common options 2023-05-25 00:04:22 +02:00
nyanotech 3aad03a464 nixos/sshd: detect duplicate config keys 2023-05-25 00:01:03 +02:00
Sandro Jäckel 94baf8bfd9
nixos/no-x-libs: add gst-plugins-bad 2023-05-24 20:49:08 +02:00
midchildan c3346f87c4
mirakurun: use node 18 
Relates to #229910.
 2023-05-25 03:44:13 +09:00
Maximilian Bosch 40dcc3375c
Merge pull request #232837 from emilylange/nixos/synapse 
nixos/synapse: allow omitting `trusted_key_servers[].verify_keys`
 2023-05-24 16:28:03 +02:00
Tomas Kala 37c95bc868
nixos/self-deploy: set after to requires, type to 
... oneshot, remove wantedBy
 2023-05-24 14:05:17 +02:00
Graham Dennis 93502aa3b1 nixos/qemu-vm: add option for named network interfaces 
Adds a new option to the virtualisation modules that enables specifying explicitly named network interfaces in QEMU VMs.
The existing `virtualisation.vlans` option is still supported for cases where the name of the network interface is irrelevant.
 2023-05-24 08:54:20 +10:00
Ryan Lahfa 0d13962366
Merge pull request #233518 from tie/bios-bootable-x86 
nixos/iso-image: enable BIOS boot by default if possible
 2023-05-23 17:05:21 +02:00
Ryan Lahfa 078d3ebcaa
Merge pull request #232235 from cyberus-technology/outline-0.69.2 
outline: 0.68.1 -> 0.69.2
 2023-05-23 15:14:18 +02:00
Robert Hensing 983bf78c16
Merge pull request #233397 from Kranzes/hci-module 
nixos/hercules-ci-agent: sync module with upstream
 2023-05-23 14:17:28 +02:00
Alexander Sieg 74bc42615c
outline: 0.68.1 -> 0.69.2 2023-05-23 10:44:02 +02:00
Maximilian Bosch c0bbecef87
Merge pull request #232276 from LeSuisse/broken-php80-packages 
grocy, limesurvey: mark as broken due to lack of PHP 8.1 compatibility
 2023-05-23 07:19:17 +02:00
Ivan Trubach c68a5bb85a nixos/iso-image: enable BIOS boot by default if possible 
The change introduced in commit e5b072eca1
breaks backwards compatibility for some users, see
e5b072eca1 (commitcomment-113775008)
https://github.com/NixOS/nixpkgs/pull/219351#discussion_r1139773448

This change updates the implementation to enable BIOS boot if possible
for the build and host platforms, and also assert that BIOS boot is not
enabled for non-x86 host platforms.
 2023-05-23 04:43:31 +03:00
Sandro 493c6d8505
Merge pull request #233053 from midchildan/chore/epgstation/node18 
epgstation: use node18 + other fixes
 2023-05-23 01:48:26 +02:00
0x4A6F afad0c152b
Merge pull request #214428 from mweinelt/frigate-init 
frigate: init at 0.12.0
 2023-05-22 18:29:37 +02:00
Ryan Lahfa 2e1e1f8765
Merge pull request #231502 from SuperSandro2000/portunus-openldap 
nixos/portunus: use openldap compiled with libxcrypt-legacy
 2023-05-22 18:20:52 +02:00
Naïm Favier 7b28ea6783
Merge pull request #233377 from ncfavier/revert-226088 
Revert "nixos/syncthing: use rfc42 style settings"
 2023-05-22 16:35:04 +02:00
Martin Weinelt f11d33afb7
nixos/frigate: init 2023-05-22 16:29:54 +02:00
Martin Weinelt 958fc81472
Merge pull request #216786 from mweinelt/go2rtc 
go2rtc: init at 1.5.0
 2023-05-22 16:00:54 +02:00
Will Fancher 636e03bef3
Merge pull request #232533 from nikstur/systemd-repart-create-root 
nixos/systemd-repart: enable creating root partition
 2023-05-22 09:13:00 -04:00
Ilan Joselevich ebafd551d7
nixos/hercules-ci-agent: sync module with upstream 2023-05-22 15:05:16 +03:00
ners afdf7705ad nixos/iso-image: add some types 2023-05-22 13:01:56 +02:00
ners c281a355fe nixos/iso-image: prepend to ISO menu labels 2023-05-22 11:25:00 +02:00
Naïm Favier d5e090d2d8
Revert "nixos/syncthing: use rfc42 style settings" 
This reverts commit 32866f8d58.
This reverts commit 40a2df0fb0.
This reverts commit 4762932601.
 2023-05-22 10:29:52 +02:00
Ryan Lahfa 0e662e669a
Merge pull request #227642 from Flakebi/powerdns-admin2 
powerdns-admin: 0.3.0 -> 0.4.1
 2023-05-22 09:30:24 +02:00
Martin Weinelt eae2018b54
nixos/go2rtc: init 2023-05-22 03:48:47 +02:00
Flakebi 1a13b4c0f9
powerdns-admin: 0.3.0 -> 0.4.1 
- Fix with flask-migrate 4+
- Update to 0.4.1
- Improve the test to check that using the database works
 2023-05-22 00:39:58 +02:00
midchildan 94eb60a7d2
nixos/epgstation: add a new option 'ffmpeg' 
Closes #187120.
 2023-05-22 05:24:19 +09:00
midchildan 059006b84b
nixos/epgstation: add required directories to tmpfiles.d 2023-05-22 05:24:18 +09:00
Aaron Andersen 9889d76032
Merge pull request #232607 from plumelo/feat/redmine-5 
redmine: 4.2.10 -> 5.0.5
 2023-05-21 14:33:01 -04:00
Sandro Jäckel 0000000324
nixos/portunus: use openldap compiled with libxcrypt-legacy 
It hardcodes sha256 crypt and the managed slapd crash loops otherwise.
 2023-05-21 18:54:56 +02:00
Sandro a74a4a2f32
Merge pull request #232534 from teutat3s/zhf/fix-prometheus-exporter-jitsi 
jitsi-videobridge: refactor broken `apis` option to `colibriRestApi`
 2023-05-21 18:43:59 +02:00
Sandro 59cb287790
Merge pull request #231260 from Luflosi/update/kubo 
kubo: 0.19.2 -> 0.20.0
 2023-05-21 17:15:22 +02:00
pennae 727086540f
Merge pull request #233238 from emilylange/username-change 
maintainers: rename indeednotjames to emilylange
 2023-05-21 17:07:05 +02:00
Sandro b34c560d19
Merge pull request #186582 from midchildan/fix/epgstation-var-empty 
nixos/epgstation: fix startup issue
 2023-05-21 16:57:54 +02:00
emilylange b0e7f7f5db
maintainers: rename indeednotjames to emilylange 2023-05-21 16:01:35 +02:00
teutat3s cb81bd9340
jitsi-videobridge: refactor broken apis option to 
colibriRestApi

Refactor option to use jvb.conf and convert to boolean. Using the CLI
argument broke a while ago and is deprecated by upstream since 2021:
https://github.com/jitsi/jitsi-videobridge/pull/1738/files#diff-d9f589d2aae1673693461d7c3b9214324201ca1f43db63a3c773d4acfc52bc81

This fixes the currently broken test:
nixosTests.prometheus-exporters.jitsi
 2023-05-21 15:31:14 +02:00
Ilan Joselevich 5f6ad63b4f
Merge pull request #233037 from SuperSandro2000/libvirt-polkit 
nixos/libvirtd: enable polkit
 2023-05-20 20:03:22 +03:00
Jenny 7abd408b7f
nixos/pam_mount: fix cryptmount options (#232873) 
There was a bug in the pam_mount module that crypt mount options were
not passed to the mount.crypt command. This is now fixed and
additionally, a cryptMountOptions NixOS option is added to define mount
options that should apply to all crypt mounts.

Fixes #230920
 2023-05-20 17:40:36 +02:00
Sandro Jäckel 64361e26b2
nixos/libvirtd: enable polkit 
it is enforced by an assert anyway
 2023-05-20 17:30:34 +02:00
figsoda 701bcdbead nixos: fix typos 2023-05-19 22:31:04 -04:00
Weijia Wang e70a5fac10
Merge pull request #231744 from wineee/pinentryFlavor 
nixos/gnupg: default to qt pinentry program in deepin
 2023-05-20 03:04:49 +03:00
Bjørn Forsman ef85c3fe51 nixos: use passAsFile to avoid "Argument list too long" error 
This patch fixes "Argument list too long" build failure when passing a
list of store paths to system.extraDependencies that exceeds Linux'
MAX_ARG_STRLEN limit of 128 KiB. With the shortest possible derivation
names (one byte), the 128 KiB limit is equivalent to about 2850
derivations. With longer derivations names, the limit is hit earlier.
Fix this restriction.
 2023-05-19 22:31:31 +02:00
Matthias Berndt 765349d345 minor refactoring 2023-05-19 10:22:45 -04:00
nikstur ef80e11032 nixos/systemd-repart: enable creating root partition 2023-05-19 15:54:55 +02:00
IndeedNotJames d212ec13b8
nixos/synapse: allow omitting trusted_key_servers[].verify_keys 
Synapse does not require the `verify_keys` attr/object to be set.
It made sense back in the day, when federation traffic used to use self-signed certificates. But this is no longer the case.

The previous `types.nullOr` didn't actually allow omitting `verify_keys` because Synapse's config parser is unable to parse that.

Not a breaking change.

Upstream docs: https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html?highlight=verify_keys#trusted_key_servers
 2023-05-19 15:46:53 +02:00
Alyssa Ross 7ddca49451 nixos/mailman: set RemainAfterExit for settings 
This seems to be required to have the unit re-run if
services.mailman.restApiPassFile gets set.
 2023-05-19 12:03:41 +02:00
Alyssa Ross 43465c94d4 nixos/mailman: randomly generate REST API token 2023-05-19 12:03:41 +02:00
Yureka 97c8817371
nixos/clickhouse: Notify systemd about successful startup (#232443) 
https://github.com/ClickHouse/ClickHouse/pull/43400
https://github.com/ClickHouse/ClickHouse/pull/46613
 2023-05-19 00:24:20 +02:00
Sandro 58f987450c
Merge pull request #226116 from erdnaxe/nitter-update-module 
nixos/nitter: update module options
 2023-05-18 23:45:39 +02:00
Naïm Favier 84f249a0c4
Merge pull request #232582 from Lassulus/syncthing-folder-fix 
nixos/syncthing: fix disabled folders
 2023-05-18 22:19:36 +02:00
Lily Foster 3e014434a7
Merge pull request #230876 from purin-aurelia/nixos-openrgb-fix 
nixos/openrgb: fix data dir & amd i2c
 2023-05-18 15:00:13 -04:00
Will Fancher edcd3d3056
Merge pull request #229318 from ReneHollander/fix/nixos-zfs-systemd-unlock-times-out 
nixos/zfs: disable unlock timeout with systemd
 2023-05-18 12:42:21 -04:00
Meghea Iulian eb222f0f97
redmine: upgrade start command 2023-05-18 14:35:38 +03:00
K900 b451cc7668 nixos/libinput: only enable when X11 is enabled 2023-05-18 13:58:18 +03:00
Sefa Eyeoglu 5c08d4fa3e
nixos/qt: also install qt6ct if using qt5ct 
If QT_QPA_PLATFORMTHEME is set to qt5ct, Qt 6 apps can utilize qt6ct, to
achieve consistent theming across the two major versions.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
 2023-05-18 12:45:01 +02:00
lassulus 4762932601 nixos/syncthing: fix disabled folders 2023-05-18 11:06:57 +02:00
Matthias Berndt cb410a8c59 Merge remote-tracking branch 'upstream/master' into mberndt123/stratis-rootfs 2023-05-17 21:47:19 -04:00
Anderson Torres c637afe9c1
Merge pull request #229030 from atorres1985-contrib/with-lib-is-bad 
With lib is bad: removes `with lib;` occurrences - part I
 2023-05-17 20:24:46 -03:00
Martin Weinelt a919e81dbf
Merge pull request #231512 from n0emis/zammad-5.4.1 
zammad: 5.1.1 -> 5.4.1
 2023-05-17 18:36:29 +02:00
Markus Cisler a0b7802372 nixos/thelounge: add package option 
Adds a package option to the thelounge NixOS module.
 2023-05-17 08:34:18 -07:00
Naïm Favier 40a2df0fb0
nixos/syncthing: fixup #226088 2023-05-17 16:53:01 +02:00
Ember Keske 8c5087c1f6 zammad: link test in passthru.tests 2023-05-17 16:06:50 +02:00
Ryan Lahfa d4abba5c1e
Merge pull request #232243 from mklca/issue-232229 
nixos/config/swap: resolve swapfile issue !232229
 2023-05-17 11:38:48 +02:00
K900 86c366b440
nixos/grafana-agent: remove deprecated option (#232375) 
Deprecated in version 0.21: 323c1eb36d/docs/sources/static/upgrade-guide.md?plain=1#L417
 2023-05-17 11:21:27 +02:00
Matthias Berndt 92814241a8 improve stratis initrd support 
it is now possible to supply a stratis pool uuid
for every filesystem, and if that filesystem
is required for boot, the relevant pool will be
started in the initramfs.
 2023-05-16 22:48:36 -04:00
Lassulus 52bbee772a
Merge pull request #232019 from 4z3/master-wireguard 2023-05-16 22:29:17 +02:00
Thomas Gerbet bc48fa8f5e limesurvey: mark as broken 
limesurvey is not yet compatible with PHP 8.1.
 2023-05-16 19:18:22 +02:00
Thomas Gerbet 314c64c409 grocy: mark as broken 
grocy is not yet compatible with PHP 8.1
 2023-05-16 19:13:00 +02:00
Alexandre Iooss 1ab4e66b79 nixos/nitter: remove replaceInstagram option 2023-05-16 18:54:17 +02:00
Alexandre Iooss d1d81f1866 nixos/nitter: add new upstream options 2023-05-16 18:54:02 +02:00
Mikaela Allan 4101d3b56f
nixos/config/swap: resolve swapfile issue !232229 2023-05-16 10:48:53 -04:00
Sandro efb55108b3
Merge pull request #231435 from drupol/openvscode-server/systemd-service 2023-05-16 14:14:29 +02:00
Sandro bcd46a36a7
Merge pull request #227338 from erictapen/mastodon 2023-05-16 13:52:28 +02:00
Doron Behar 9b0a03fc88
Merge pull request #226088 from Xyz00777/master 
nixos/syncthing: applied rfc42 and added some additional options
 2023-05-16 13:29:36 +03:00
tv 50b845c5a6 nixos/wireguard: allow customizing peer unit name 2023-05-16 10:28:24 +02:00
Maciej Krüger 5bb24e21ee
Merge pull request #231097 from aanderse/lxc/nixos-rebuild-boot 2023-05-16 04:13:01 +02:00
Matthias Berndt 3aa262b644 make nixos-generate-config generate stratis pool UUIDs 2023-05-15 20:48:10 -04:00
Martin Weinelt d38127eb13
Merge pull request #232017 from NickCao/mjolnir 
mjolnir: 1.5.0 -> 1.6.4, build with mkYarnPackage
 2023-05-16 01:37:54 +02:00
Robert Hensing 25f227fc67
Merge pull request #231316 from hercules-ci/nixos-system.checks 
NixOS: add `system.checks`
 2023-05-15 23:16:29 +02:00
Pol Dellaiera 1d37fe1526
nixos/openvscode-server: init 2023-05-15 21:48:08 +02:00
Jonas Heinrich 8a4f016281 nixos/maddy: tls.loader add acme support, add secrets option 2023-05-15 15:00:16 -04:00
K900 d5c292af6b
Merge pull request #197524 from f2k1de/graylog4 
graylog: init at 4.0.8, 4.3.9, 5.0.2
 2023-05-15 19:42:04 +03:00
Sandro 872c89e5a7
Merge pull request #221750 from rhendric/rhendric/nixos/snapper 2023-05-15 17:24:25 +02:00
Nick Cao dde3cb6977
Merge pull request #232007 from Janik-Haag/restic 
restic: add persistent default for timer unit
 2023-05-15 07:37:51 -06:00
Nick Cao 1de301aef3
Merge pull request #231954 from mac-chaffee/acme-ipv6 
nixos/security/acme: Fix listenHTTP bug with IPv6 addresses
 2023-05-15 07:30:57 -06:00
woojiq 2ee66a3000 keyd: run systemd service as root user 2023-05-15 15:28:34 +02:00
Sandro 5bb17df552
Merge pull request #231705 from ambroisie/add-vikunja-port 2023-05-15 15:27:31 +02:00
Janik H 95e1099d2a restic: add persistent default for timer unit 2023-05-15 15:16:58 +02:00
figsoda 783ebc7682
Merge pull request #231707 from figsoda/trip 2023-05-15 09:13:59 -04:00
Xyz00777 32866f8d58 nixos/syncthing: use rfc42 style settings 2023-05-15 14:38:56 +02:00
nikstur 6852dc2359 nixos/rshim: fix shell escape 
Using escapeShellArg does not make sense here because (a) it turned the
list into a string, so the entire service failed and (b) because systemd
does not use the same escaping mechanism as bash.
 2023-05-15 14:06:26 +02:00
Nick Cao c256ecf7a3
nixos/mjolnir: explicitly set --mjolnir-config 2023-05-15 18:40:57 +08:00
Raito Bezarius 3f446bfbd3 nixos/pam: fix ZFS support assertion 
It was always complaining even if you didn't enable PAM ZFS.
 2023-05-15 12:06:04 +02:00
Ryan Lahfa 8c4a3f67b5
Merge pull request #228956 from tensor5/pam-zfs-key 
nixos/pam: enable unlocking ZFS home dataset
 2023-05-15 11:42:30 +02:00
Ryan Lahfa fa06a3b646
Merge pull request #230888 from Misterio77/nextcloud-createlocally-optin 
nixos/nextcloud: default createLocally to false
 2023-05-15 09:28:15 +02:00
Nicola Squartini 87cbaf7ce3 nixos/pam: assert ZFS support for PAM module 2023-05-15 09:22:42 +02:00
Nicola Squartini 5466f76755 nixos/pam: improve documentation of ZFS module 2023-05-15 09:22:39 +02:00
Nicola Squartini 09f4bf7f16 nixos/pam: enable unlocking ZFS home dataset 2023-05-15 09:20:40 +02:00
Maximilian Nitsch 25f3323d60 nixos/etcd: Fix mapping of clientCertAuth option 
The clientCertAuth option must be mapped to the etcd environment
variable ETCD_CLIENT_CERT_AUTH and the peerClientCertAuth option to
ETCD_PEER_CLIENT_CERT_AUTH.

Signed-off-by: Maximilian Nitsch <maximilian.nitsch@d3tn.com>
 2023-05-15 09:11:41 +02:00
Ryan Lahfa feb7fcde4b
Merge pull request #231481 from nikstur/rshim-user-space 
rshim for Nvidia BlueField
 2023-05-15 09:03:50 +02:00
Ryan Lahfa e3bd7faa18
Merge pull request #226830 from Janik-Haag/birdwatcher 
birdwatcher: init at 2.2.4, alice-lg: init at 6.0.0, nixos/birdwatcher: init, nixos/alice-lg: init
 2023-05-15 08:42:10 +02:00
Janik H 40136a1f7f nixos/birdwatcher: init 2023-05-15 02:52:06 +02:00
Janik H 8ed86700a2 nixos/alice-lg: init 2023-05-15 02:52:06 +02:00
Mac Chaffee 33b15fdce0
security/acme: Fix listenHTTP bug with IPv6 addresses 2023-05-14 20:27:52 -04:00
nikstur 5435eaaa4d nixos/rshim: init 2023-05-15 01:24:48 +02:00
Bernardo Meurer d8b94f5b2c
Merge pull request #231881 from lovesegfault/klipper-log 2023-05-14 16:48:48 -04:00
Jonas Chevalier 9c63dd372d
cloud-init module: fix default settings (#231867) 
The `//` operator doesn't do deep merge so it was overriding the first
attrset and not recording the defaults.
 2023-05-14 22:35:06 +02:00
Jörg Thalheim 3007746b3f
Merge pull request #231473 from B4dM4n/eval-config-pass-system 
treewide: pass system argument to eval-config.nix
 2023-05-14 20:13:12 +01:00
Bernardo Meurer 570fff5e92
nixos/klipper: add logFile option 2023-05-14 13:02:08 -04:00
Bernardo Meurer 7a5f684ffd
nixos/klipper: use klippy from $out/bin 2023-05-14 13:02:06 -04:00
Ryan Lahfa 285330f081
Merge pull request #230153 from mklca/swap-encrypt-enhancement 
nixos/config/swap: improve randomEncrytion
 2023-05-14 19:01:56 +02:00
Ryan Lahfa 1ee11b8a31
Merge pull request #231283 from nikstur/filesystems-erofs 
nixos/filesystems: init erofs
 2023-05-14 18:54:37 +02:00
Jörg Thalheim fc8c839fe8
Merge pull request #231841 from Ma27/wikijs-node18 
wiki-js: use nodejs18
 2023-05-14 16:22:56 +01:00
Gabriel Fontes f9f76529cd
nixos/nextcloud: default createLocally to false 2023-05-14 12:09:50 -03:00
Ryan Lahfa 8ef486b60e
Merge pull request #207194 from RaitoBezarius/pixelfed-module 
pixelfed: init at 0.11.5, module, tests
 2023-05-14 17:09:19 +02:00
Sophie Tauchert 8af23590d3 nixos/borgbackup: fix extraCompactArgs 
Fixes the extraCompactArgs introduced with #224072 as the variable
currently isn't added to the script's environment.
 2023-05-14 16:51:24 +02:00
figsoda 3aa6580f46 nixos/trippy: init 2023-05-14 10:05:29 -04:00
Maximilian Bosch 577ffe768c
wiki-js: use nodejs18 
Part of #229910.

Unfortunately this is a little hacky because upstream doesn't intend to
support it for 2.5, but only for 3.0 which isn't out yet, however nodejs-16
will get out of maintenance during the support-span of NixOS 23.05[1].

The only breaking change is that `extract-files` uses a deprecated way
of exposing modules, I went through the list of other breaking
changes in v17 and v18[2][3] and couldn't spot any usage of removed
features, also local testing didn't reveal further issues.

Unfortunately fixing that breakage turned out to be non-trivial.
Currently, `extract-files@9.0.0` is used with the problematic portions
in its `package.json`, however it's only a transitive dependency of
`@graphql-tools/url-loader` & `apollo-upload-client`. Unfortunately, the
versions of that in use require v9 and don't work with a newer version of
`extract-files` with the problem fixed[4]. Also, upgrading the
dependencies in question is not a feasible option because `graphql-tools`
was split up into multiple smaller packages in v8 and also some of the
APIs in use in `wiki.js` were dropped there[5], so this would also be
very time-consuming and non-trivial to fix.

Since this was the only issue, I decided to go down the hacky route and
patch the problem in `package.json` of `extract-files` manually during
our `patchPhase`.

[1] https://github.com/requarks/wiki/discussions/6388
[2] https://nodejs.org/en/blog/release/v17.0.0
[3] https://nodejs.org/en/blog/release/v18.0.0
[4] Upon local testing, this broke with the following error:

        Error [ERR_PACKAGE_PATH_NOT_EXPORTED]: Package subpath './public/extractFiles' is not defined by "exports" in /wiki/node_modules/extract-files/package.json
[5] For instance `SchemaDirectiveVisitor` in
  `server/graph/directives/auth`.
 2023-05-14 14:25:33 +02:00
Jonas Heinrich 9241cee3c4
Merge pull request #224274 from SuperSandro2000/nixos/nextcloud-notify_push 
nixos/nextcloud: add configureRedis option; nixos/nextcloud-notify_push: add bendDomainToLocalhost
 2023-05-14 10:35:57 +02:00
linsui c3a2ce47a1 nixos/neovim: fix runtime.text 2023-05-13 23:41:50 +02:00
rewine 71d6ed698f
nixos/gnupg: default to qt pinentry program in deepin 2023-05-14 05:32:38 +08:00
Vladimír Čunát 1ba92fc952
Merge branch 'master' into staging-next 2023-05-13 19:23:59 +02:00
Bruno BELANYI f3f709af74 nixos/vikunja: add 'port' option 2023-05-13 18:01:36 +01:00
ajs124 831e41f469
Merge pull request #231629 from Izorkin/update-unit 
unit: 1.29.1 -> 1.30.0
 2023-05-13 19:01:33 +02:00
Izorkin baa5550162
unit: 1.29.1 -> 1.30.0 2023-05-13 16:55:47 +03:00
github-actions[bot] 51e24f4508
Merge master into staging-next 2023-05-13 12:01:05 +00:00
Rene Hollander dbb940f433
nixos/zfs: disable unlock timeout with systemd 
Currently systemd-ask-passwd times out after 1m30s. After 3 tries this
causees systemd to enter the emergency shell and basically lead to an
unbootable system requiring a reboot to be able to try to unlock again.

Also if a pool is imported but not unlocked, the unlock step will no
longer be skipped.
 2023-05-13 13:53:22 +02:00
Bobby Rong ea11a3977f
Merge pull request #231378 from FedericoSchonborn/budgie-plugins 
Add `budgiePlugins` set, init `budgie-user-indicator-redux` at 1.0.1
 2023-05-13 17:08:10 +08:00
Florian Klink e9c6179ad0
Merge pull request #231504 from nikstur/systemd-repart-add-maintainer 
nixos/systemd-repart: add myself as maintainer
 2023-05-13 10:51:11 +03:00
github-actions[bot] 0b21b8d8a6
Merge master into staging-next 2023-05-13 06:01:08 +00:00
Anderson Torres 4c6a141720 nixos/modules/rename.nix: get rid of with lib 2023-05-12 22:29:25 -03:00
Martin Weinelt 557f89f5d1
Merge pull request #228492 from LeSuisse/tt-rss-2023-04-13-php81 
tt-rss: unstable-2022-10-15 -> unstable-2023-04-13, module use PHP 8.1
 2023-05-13 02:17:24 +02:00
Isa c7629a78b7 graylog: let the user decide which version of graylog to use 2023-05-12 20:43:03 +02:00
github-actions[bot] 206417b7a2
Merge master into staging-next 2023-05-12 18:01:18 +00:00
nikstur fa09e0a3c7 nixos/filesystems: init erofs 
Enable using an erofs filesystem as one of the filesystems needed to
boot the system. This is useful for example in image based deployments
where the Nix store is mounted read only.
[erofs](https://docs.kernel.org/filesystems/erofs.html) offers multiple
benefits over older filesystems like squashfs. Skip fsck.erofs because
it is still experimental.
 2023-05-12 19:55:32 +02:00
nikstur 1bd62f43eb nixos/systemd-repart: add myself as maintainer 2023-05-12 18:55:09 +02:00
Katze dfb8a2a7c4
nixos/syncplay: add saltFile and extraArgs option (#220096) 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2023-05-12 18:01:33 +02:00
Martin Weinelt 1c80c494ca
Merge pull request #228422 from mweinelt/gitea-actions-runner-module 
nixos/gitea-actions-runner: init
 2023-05-12 17:54:16 +02:00
Fabian Möller c51fe112cc
treewide: pass system argument to eval-config.nix 
Calling `eval-config.nix` without a `system` from a Nix flake fails with
`error: attribute 'currentSystem' missing` since #230523. Setting
`system = null` removes the use of `currentSystem` and instead uses the
value from the `nixpkgs` module.
 2023-05-12 14:56:23 +02:00
github-actions[bot] 0a82cd9e62
Merge master into staging-next 2023-05-12 08:49:13 +00:00
K900 b136129246
Merge pull request #231293 from K900/libinput-default 
nixos/x11/hardware/libinput: enable by default
 2023-05-12 09:42:23 +03:00
Federico Damián Schonborn 8e01b9d98c
nixos/budgie: Update description for sessionPath, add example for extraPlugins 
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
 2023-05-11 21:35:27 -03:00
github-actions[bot] 84352fc449
Merge master into staging-next 2023-05-12 00:01:57 +00:00
Martin Weinelt 3c09f66193
Merge pull request #231096 from kai-tub/vector/add-pkg-opt 
vector: add `package` Option
 2023-05-11 22:10:20 +02:00
Robert Hensing 2e2f0d28ea nixos: Use checks instead of extraDependencies 
... as appropriate.

This drops a few unnecessary store paths from the system closure.
 2023-05-11 21:18:38 +02:00
Robert Hensing 5bdf63819b nixos/top-level.nix: Add system.checks 
Note that this does not add to the `forbiddenDependenciesRegex`
code because that code check should be unaffected as it only checks
output dependencies, not build dependencies.
Build deps are added after that check, if those are enabled in the
first place.
 2023-05-11 21:18:38 +02:00
Arian van Putten 6c0935d466
Merge pull request #231140 from NixOS/rosetta-nix-build 
modules/rosetta: configure nix build sandbox to use rosetta
 2023-05-11 14:21:54 -04:00
github-actions[bot] b9c14e0e61
Merge master into staging-next 2023-05-11 18:01:13 +00:00
Kai Norman Clasen 8989ea2778 nixos/vector: add package Option 2023-05-11 19:44:50 +02:00
Robert Hensing 5c3e59b6d6
Merge pull request #230523 from hercules-ci/fast-nixos-test-eval 
Fast nixos test eval
 2023-05-11 17:34:46 +02:00
K900 9fec1a09bd nixos/x11/hardware/libinput: enable by default 
Basically everything Wayland uses this, it's much more actively
maintained than xf86-input-evdev, and we should really be shipping
it by default.
 2023-05-11 16:49:10 +03:00
github-actions[bot] 387f5d9a5f
Merge master into staging-next 2023-05-11 12:01:42 +00:00
Martin Weinelt 537d611a75 nixos/sshd: Remove algorithms that do MAC-then-encrypt 
Algorithms with the -etm suffix calculate the MAC after encryption,
which is generally considered safer.
 2023-05-11 12:54:32 +02:00
ajs124 fbfa1ec989
Merge pull request #231190 from aanderse/nixos/automysqlbackup 
nixos/automysqlbackup: add some missing permissions
 2023-05-11 12:47:39 +02:00
github-actions[bot] d16e82bf21
Merge master into staging-next 2023-05-11 06:01:36 +00:00
Martin Weinelt ec7af23e7e
Merge pull request #231153 from helsinki-systems/drop/trusted-grub 
trustedGrub: remove
 2023-05-11 02:05:25 +02:00
github-actions[bot] 079dc4c27d
Merge master into staging-next 2023-05-11 00:02:13 +00:00
Aaron Andersen 55b3b7029d nixos/automysqlbackup: rename config option to settings 2023-05-10 20:00:09 -04:00
Aaron Andersen a73e7383c0 nixos/automysqlbackup: add some missing permissions 2023-05-10 19:57:48 -04:00
Ilan Joselevich a8eea70935
Merge pull request #231113 from Kranzes/harmonia 
nixos/harmonia: adjust module and test to upstream, harmonia: 0.6.3 -> 0.6.4
 2023-05-11 00:37:41 +03:00
figsoda 9eff400dd9
Merge pull request #230939 from figsoda/sniffnet-module 2023-05-10 17:24:47 -04:00
ajs124 96fbdcedcd trustedGrub: remove 2023-05-10 22:17:56 +02:00
ajs124 1319323458 nixos/grub: turn definition of version option from an error into a warning 
because a lot of configurations (generated by nixos-generate-config) contain it
 2023-05-10 21:51:26 +02:00
ajs124 30bea8d82d nixos/*: remove boot.grub.version 2023-05-10 21:51:26 +02:00
Ilan Joselevich 7ecf20b490
nixos/harmonia: adjust module and test to upstream 2023-05-10 22:28:03 +03:00
Arian van Putten a33d032939 modules/rosetta: configure nix build sandbox to use rosetta 
With this we can do x86_64 builds on aarch64
 2023-05-10 14:28:50 -04:00
Luflosi ada7f14219
kubo: 0.19.2 -> 0.20.0 
https://github.com/ipfs/kubo/releases/tag/v0.20.0

When creating a repository with `ipfs init`, `--empty-repo=true` is now the default according to the changelog. Modify the NixOS module to reflect this change and fix the `emptyRepo` setting to work with this change.
 2023-05-10 19:50:46 +02:00
Aaron Andersen dd2c3b1310 nixos/lxc-container: ensure /sbin/init is updated on nixos-rebuild boot 2023-05-10 11:04:07 -04:00
Ryan Lahfa fe7b996d66
Merge pull request #230857 from s1341/bugfix_pam_sssd 
nixos/pam: Allow password changing via sssd
 2023-05-10 16:56:47 +02:00
Sandro 84b4373d8c
Merge pull request #230550 from Mic92/harmonia 2023-05-10 16:55:06 +02:00
Robert Hensing e5db80ae48 nixosModules.pkgsReadOnly: init 2023-05-10 15:55:09 +02:00
Robert Hensing 6e594fedb3 nixos/nixpkgs: Use types.pkgs 2023-05-10 15:55:09 +02:00
happysalada 47bedc81f8 uptime-kuma: add defaults for simpler initial setup 2023-05-10 09:54:56 -04:00
Jörg Thalheim 76ffeaf06c nixos/harmonia: init service 2023-05-10 14:52:31 +02:00
Sandro 7b22f5b4a2
Merge pull request #215494 from poelzi/webdav-server-rs-debug 2023-05-10 14:29:26 +02:00
github-actions[bot] 2d07e76d1a
Merge staging-next into staging 2023-05-10 00:03:33 +00:00
figsoda 282e5e03a8 nixos/sniffnet: init 2023-05-09 15:53:34 -04:00
asonix cb2941db79 pict-rs: 0.3.0-alpha.37 -> 0.3.3 2023-05-09 15:24:54 -04:00
Pascal Bach 7e14b746c0
Merge pull request #230890 from linyinfeng/tocken 
nixos/networkd: fix typo of `tokenBucketFilterConfig`
 2023-05-09 20:49:37 +02:00
github-actions[bot] b5b52a946a
Merge staging-next into staging 2023-05-09 18:02:32 +00:00
Martin Weinelt 42aaea3606
Merge pull request #230889 from mweinelt/shadow-encrypt-method 
nixos/shadow: Set default encrypt method
 2023-05-09 19:43:06 +02:00
Sandro 8f6cd53206
Merge pull request #229022 from SuperSandro2000/nox-mpv-wayland 
nixos/no-x-libs: disable wayland for mpv
 2023-05-09 19:07:16 +02:00
Weijia Wang 419d7f9c8d
Merge pull request #230753 from fetsorn/typos 
several typos
 2023-05-09 19:16:12 +03:00
Atemu 9c946bce87
Merge pull request #230680 from alyssais/netboot-squashfs 
nixos/netboot: add squashfsCompression option
 2023-05-09 18:13:27 +02:00
Lin Yinfeng 1e05869917
nixos/networkd: fix typo of tokenBucketFilterConfig 2023-05-09 23:06:47 +08:00
Martin Weinelt a3c7dcd88d
nixos/shadow: Set default encrypt method 
Fixes the default for tools like chpasswd, chgpasswd and gpasswd.

Closes: #230880
 2023-05-09 17:05:34 +02:00
Sandro d199137345
Merge pull request #230560 from legendofmiracles/upddate-nodjs-asf 2023-05-09 16:58:52 +02:00
Alyssa Ross e5e49df7fd
nixos/netboot: add squashfsCompression option 
This is copied from isoImage.squashfsCompression.  It's useful to be
able to customise, as iteration cycles are very slow with xz, and
subjectively systems booted with less efficiently compressed squashfs
stores appear to have faster reads (although I didn't test that
scientificly so there could be other factors).
 2023-05-09 14:15:10 +00:00
Alyssa Ross 096cdeeac4
nixos/iso-image: type isoImage.squashfsCompression 2023-05-09 14:15:02 +00:00
fetsorn 5e77899001 nixos/tpm2: fix typo 
"acess" -> "access"
 2023-05-09 18:02:17 +04:00
fetsorn 1a4e993104 nixos/prometheus: fix typo 
"nixpgs" -> "nixpkgs"
 2023-05-09 18:02:17 +04:00
fetsorn f035683f55 nixos/matomo: fix typo 
"suported" -> "supported"
 2023-05-09 18:02:17 +04:00
fetsorn d1398dd05c nixos/deluge: fix typo 
"secuerly" -> "securely"
 2023-05-09 18:02:17 +04:00
fetsorn ac5f6d9100 nixos/apparmor: fix typo 
"usualy" -> "usually"
 2023-05-09 18:02:17 +04:00
purin 9595113480 nixos/openrgb: fix data dir & amd i2c 2023-05-10 01:34:21 +12:00
Martin Weinelt 35a73717df
Merge pull request #218599 from Izorkin/update-peertube 
peertube: 5.0.0 -> 5.1.0
 2023-05-09 14:37:44 +02:00
Jacek Galowicz b7dfa5082a
Merge pull request #228220 from R-VdP/test_driver_guest_shell_timeout 
nixos-test-driver: include a timeout for the recv call, do not assume sh == bash
 2023-05-09 13:05:28 +02:00
s1341 e2d538fead pam: remove unused try_first_pass 2023-05-09 13:45:15 +03:00
s1341 765ae4d581 nixos/pam: allow changing password using sssd 2023-05-09 13:43:06 +03:00
Florian Klink 6c9bef6b0f
Merge pull request #230777 from nikstur/systemd-repart-definitions-in-initrd 
systemd-repart definitions in initrd
 2023-05-09 13:24:04 +03:00
Sandro 443a8f398a
Merge pull request #230756 from NixOS/fzf-fix 2023-05-09 11:54:38 +02:00
github-actions[bot] b872b6b45c
Merge staging-next into staging 2023-05-09 06:01:52 +00:00
lom ea1cef8c00 ArchiSteamFarm.ui: use buildNpmPackage 2023-05-08 20:34:21 -04:00
Aaron Andersen cf0327810b
Merge pull request #207093 from ymarkus/alertmanager 
nixos/alertmanager: add checkConfig option
 2023-05-08 20:15:17 -04:00
github-actions[bot] 5b562cf621
Merge staging-next into staging 2023-05-09 00:02:44 +00:00
nikstur d85abd2764 nixos/systemd-repart: definition files in initrd 
Store the definition files in the initrd instead of reading them from
the Nix store in /sysroot.

This way, the initrd has to be re-generated every time the definition
files change. When the path to the defintion files instead of the
definition files themselves are embedded in the initrd, however, the
initrd also has to be re-generated every time. In this regard, this
change does not improve the status quo.

However, now systemd-repart also works reliable when the Nix store is
mounted separately from the root partition.

This change also enables new use-cases like creating partitions
necessary to boot the system. However, by default, the root partition
cannot be created on first boot because the systemd-repart service
requires a /sysroot to be mounted. Otherwise, systemd-repart cannot
determine the device to operate on.
 2023-05-09 00:11:21 +02:00
Matthias Berndt 8aa320b4c2 address code review issues 2023-05-08 23:18:55 +02:00
nikstur 5c2a7490cf nixos/systemd-repart: fix 
Since v253, systemd-repart tries to create temporary directories in
/var/tmp. However, this directory doesn't exist in the initrd. This
commit adds an enviroment variable to re-use the existing /tmp directory
instead of /var/tmp.
 2023-05-08 23:12:59 +02:00
Izorkin 1afcb4c6ef
nixos/peertube: update nginx configuration 2023-05-08 23:49:03 +03:00
Izorkin 8d76c0b6fb
peertube: 5.0.0 -> 5.1.0 2023-05-08 23:48:32 +03:00
Ryan Lahfa 43a413de73
Merge pull request #230731 from NixOS/bump/netdata 
netdata: 1.38.1 -> 1.39.0
 2023-05-08 21:59:56 +02:00
Sandro Jäckel edf57fef9b
nixos/fzf: fix evaluation if ohMyZsh is enabled 2023-05-08 21:10:28 +02:00
github-actions[bot] 54295bf976
Merge staging-next into staging 2023-05-08 18:02:09 +00:00
Raito Bezarius 16658f7634 nixos/netdata: introduce deadlineBeforeStopSec 
Previously, we hardcoded a 60 second timer to stop netdata if we didn't have any answer back.
This is wrong and can cause data loss because the SIGTERM sent by systemd can sometimes be not honored.
Which in turn becomes a SIGKILL, causing potential data loss / corruption.

Offer a flag to users and bump the deadline to 2 minutes.
 2023-05-08 19:29:13 +02:00
Ryan Lahfa 98167d573d
Merge pull request #229313 from mped-oticon/mped_proxmox_assert 
nixos/proxmox-image: Disable O_DIRECT to fix assert when writing to tmpfs
 2023-05-08 16:11:40 +02:00
Atemu cb0f64e45d
Merge pull request #230665 from alyssais/iso-image-targetPlatform 
nixos/iso-image: targetPlatform -> hostPlatform
 2023-05-08 15:06:48 +02:00
Alyssa Ross ecc1ec2c72 llvmPackages_latest: move to aliases.nix 
Because llvmPackages_latest is used in Nixpkgs, by quite a few
packages, it's difficult to keep it up to date, because updating it
requires some level of confidence that every package that uses it is
going to keep working after the update.  The result of this is that
llvmPackages_latest is not updated, and so we end up in the situation
that "latest" is two versions older than the latest version we
actually provide.  This is confusing and unexpected.

"But won't this end up fragmenting our LLVM versions, if every package
previously using _latest is separately pinned to LLVM 14?", I hear you
ask.  No.  That fragmentation is already happening, even with an
llvmPackages_latest, because packages that actually require the
_latest_ version of LLVM (15/16), have already been decoupled from
llvmPackages_latest since it hasn't been upgraded.  So like it or not,
we can't escape packages depending on specific recent LLVMs.  The only
real fix is to get better at keeping the default LLVM up to
date (which I'm reasonably confident we're getting into a better
position to be feasibly better able to do).

So, unless we want to double down on providing a confusingly named
"llvmPackages_latest" attribute that refers to some arbitrary LLVM
version that's probably not the latest one (or even the latest one
available in Nixpkgs), we only have two options here: either we don't
provide such an attribute at all, or we don't use it in Nixpkgs so we
don't become scared to bump it as soon as we have a new LLVM available.
 2023-05-08 13:05:33 +00:00
Nick Cao aa7197b091
Merge pull request #230539 from OPNA2608/update/miriway 
miriway: unstable-2023-03-17 -> unstable-2023-04-25
 2023-05-08 20:27:47 +08:00
Alyssa Ross bf7de549b9
nixos/iso-image: targetPlatform -> hostPlatform 
This is not a compiler, and therefore does not need to care about the
target platform.
 2023-05-08 11:50:06 +00:00
Mark Ruvald Pedersen 66fb2f539a nixos/proxmox-image: Disable O_DIRECT to fix assert 
Context summary:
'vma create' can't otherwise write to tmpfs such as /dev/shm.
This is important when used from non-nixos machines which may
have /build as tmpfs.

VMA is Proxmox's virtual machine image format that wraps QEMU images,
augmenting these with proxmox-specific configuration file.
proxmox-image.nix uses the VMA tool to create vma image files.
The VMA tool exists as a patchset ontop of QEMU.

VMA writes its output with open() and O_DIRECT flag.
O_DIRECT does not work on Linux tmpfs [1]. Thus:
$ vma create ~/output.vma ...  # works, assuming home isn't tmpfs.
$ vma create /dev/shm/output.vma ...  # fails since /dev/shm is tmpfs
Failure results in assert(*errp == NULL).

O_DIRECT is a cache performance hint.
But it currently blocks our usage of nixos-generate -f proxmox from
Non-NixOS hosts and Docker.

The patch here simply removes O_DIRECT:
vma-writer.c later performs memalign due to O_DIRECT, but this is
safe to do with or without O_DIRECT.
Ideally, this should be fixed in upstream Proxmox: Perhaps by falling
back to open without O_DIRECT.

Another attempt to fix this SIGABRT is [2], which writes the vma file
directory to $out/ folder -- however that may still be tmpfs mounted
which it is in our case.

[1] https://lore.kernel.org/lkml/45A29EC2.8020502@tmr.com/t/
[2] https://github.com/NixOS/nixpkgs/pull/224282
 2023-05-08 12:33:41 +02:00
Jörg Thalheim 3288479636 nixos/envfs: make mounts non-critical 
We usually don't want to bring the whole machine into emergency mode
just because we couldn't mount envfs. It's usually not on the critical
path.
 2023-05-08 11:24:18 +02:00
github-actions[bot] 4532c723ec
Merge staging-next into staging 2023-05-08 00:02:49 +00:00
Sandro 6197953fb6
Merge pull request #207106 from autrimpo/gonic-module 
nixos/gonic: init
 2023-05-08 01:28:24 +02:00
Michal Koutenský 8118e3de43 nixos/gonic: init 2023-05-07 22:43:23 +02:00
Ilan Joselevich 6a751fe806
Merge pull request #227765 from zhaofengli/darling 
darling: init at unstable-2023-05-02
 2023-05-07 22:29:02 +03:00
github-actions[bot] 048e91e57b
Merge staging-next into staging 2023-05-07 18:01:53 +00:00
Matthias Berndt 9f1bc0fa02 address review comments 2023-05-07 18:48:28 +02:00
Matthias Berndt 1632e73b19 nixos/stratis: enable booting from stratis volume 2023-05-07 18:48:28 +02:00
Bernardo Meurer 3cf3f4395a
Merge pull request #230449 from lovesegfault/mainsail-module 2023-05-07 11:49:59 -04:00
Mikaela Allan 445d7cae2a
nixos/config/swap: refactor startup script generation 2023-05-07 11:42:36 -04:00
OPNA2608 fc3c5947a9 nixos/miriway: Adjust default and example config 
The keybinds for the WM's internal commands have been made configurable.
 2023-05-07 17:32:20 +02:00
github-actions[bot] 7b8084a6b9
Merge staging-next into staging 2023-05-07 12:02:13 +00:00
Martin Weinelt cd0f4fc67c
Merge pull request #230256 from lovesegfault/systemd-can 
nixos/networkd: add TransmitQueues and TransmitQueueLength
 2023-05-07 11:53:35 +02:00
Naïm Favier 0767f800e0
Merge pull request #224688 from Izorkin/add-nginx-upstream-timeout 
nixos/nginx: allow arbitrary parameters in upstream servers
 2023-05-07 11:43:39 +02:00
Izorkin 2809915f19
nixos/nginx: allow arbitrary parameters in upstream servers 
Adds a `freeformType` to `services.nginx.upstreams.<name>.servers` to
allow setting arbitrary parameters.
 2023-05-07 11:17:49 +02:00
Bernardo Meurer 4804f7a09b
nixos/mainsail: init 2023-05-07 01:41:03 -04:00
Zhaofeng Li 1e39c977f7 nixos/darling: init 2023-05-06 22:49:35 -06:00
Bernardo Meurer aa8eff129d
nixos/networkd: add TransmitQueues and TransmitQueueLength 
These are relevant when using networkd to configure CAN networks

Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
 2023-05-06 21:55:09 -04:00
github-actions[bot] a0eb573683
Merge staging-next into staging 2023-05-07 00:03:11 +00:00
Vladimír Čunát e700696f49
Merge #230386: Revert "nixos/qemu-vm: fix diskless VMs" 2023-05-06 22:00:39 +02:00
Martin Weinelt f4ca022023
Merge pull request #229999 from ambroisie/update-tandoor-recipes 
tandoor-recipes: 1.4.4 -> 1.4.9
 2023-05-06 21:58:04 +02:00
Vladimír Čunát 5674901601
Revert "nixos/qemu-vm: fix diskless VMs" 2023-05-06 21:41:14 +02:00
Jonas Chevalier d3ff0e4114
Merge pull request #229111 from zimbatm/cloud-init-settings 
cloud-init module: adopt the settings format
 2023-05-06 21:34:11 +02:00
Sandro 6a8a43e5f2
Merge pull request #225341 from SuperSandro2000/ohmyzsh-fzf 
nixos/fzf: add ohMyZsh integration
 2023-05-06 21:24:15 +02:00
Robert Hensing 216315c6c4
Merge pull request #197547 from hercules-ci/module-class-and-flake-import 
module system: Improve error messages around faulty imports
 2023-05-06 20:16:34 +02:00
github-actions[bot] 1edcdf34e3
Merge staging-next into staging 2023-05-06 18:01:44 +00:00
Gabriel Fontes 16b3b0c53b nixos/tests/kavita: init 2023-05-06 13:57:53 -03:00
Gabriel Fontes e2854d332d nixos/kavita: init 2023-05-06 13:57:53 -03:00
Robert Hensing 8054785157 lib/modules: Move class out of specialArgs 2023-05-06 18:32:58 +02:00
Robert Hensing 79703eef08 nixos,nixpkgs: Add module classes 
This allows modules that declare their class to be checked.
While that's not most user modules, frameworks can take advantage
of this by setting declaring the module class for their users.
That way, the mistake of importing a module into the wrong hierarchy
can be reported more clearly in some cases.
 2023-05-06 18:29:04 +02:00
Martin Weinelt 1c963cea48
nixos/gitea-actions-runner: init 2023-05-06 17:34:15 +02:00
Rick van Schijndel 5e2d479540
Merge pull request #229874 from mcnesium/fix_ambig_char 
fix ambiguous unicode characters
 2023-05-06 16:54:54 +02:00
Bruno BELANYI 9650310348 nixos/tandoor-recipes: disable debug toolbar 2023-05-06 14:22:17 +01:00
github-actions[bot] 76e7973d1c
Merge staging-next into staging 2023-05-06 00:02:57 +00:00
Bruno Adelé 7af8ace239
nixos/smokeping: Format smokeping source code 2023-05-05 22:46:30 +02:00
Pierre Bourdon 2ddbabec4d
nixos/xserver: fix xserver.conf reproducibility (sort ModulePath entries) 2023-05-05 22:33:09 +02:00
Ryan Lahfa 0b0c5fdf95
Merge pull request #230027 from jmbaur/fix-cross-nixos-system 
nixos/bootspec: Fix cross for nixos-system systemBuilder
 2023-05-05 22:05:44 +02:00
Ryan Lahfa 32264d614a
Merge pull request #227696 from aktaboot/fix-install-tools-deps 
nixos/installer: fix util-linux dependencies in install script
 2023-05-05 21:58:23 +02:00
github-actions[bot] cfd87655c8
Merge staging-next into staging 2023-05-05 18:01:52 +00:00
Mikaela Allan 21b6bec0ff
nixos/config/swap: improve randomEncrytion 
* add sector size parameter to swap randomEncryption
  * add key size parameter to swap randomEncryption
  * allow deviceName to be overridden for encrypted swap
  * create test for swap random encryption
  * update release notes
 2023-05-05 13:36:42 -04:00
Jonas Chevalier db8b28dc5d
Update nixos/modules/services/monitoring/netdata.nix 
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
 2023-05-05 18:41:56 +02:00
Jonas Chevalier 14793fac6c
Update nixos/modules/services/monitoring/netdata.nix 
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
 2023-05-05 18:41:51 +02:00
aktaboot b3ef821489 nixos/installer: fix util-linux dependencies in install scripts 2023-05-05 18:11:57 +02:00
Ryan Lahfa 275a6e3d8d
Merge pull request #193469 from minijackson/mount-options-stage-1 
nixos/stage-1: follow mount options
 2023-05-05 17:05:48 +02:00
Ryan Lahfa 1ab4d7d0c3
Merge pull request #228047 from RaitoBezarius/diskless-vm 
nixos/qemu-vm: fix diskless VMs
 2023-05-05 15:37:11 +02:00
Emily Lange 549bee9851
nixos/grafana-agent: add extraFlags option (#228883) 2023-05-05 15:14:41 +02:00
Jared Baur 67561dcc59
nixos/bootspec: Fix cross for nixos-system systemBuilder 
When `nixpkgs.hostPlatform` != `nixpkgs.buildPlatform`, building the
top-level attribute fails since the bootspec portion of the system
builder tries to reference the host platform's `jq`. Change this to
reference the build platform's `jq`.
 2023-05-04 20:09:16 -07:00
Sandro Jäckel 1b6078a24a
nixos/no-x-libs: add pipewire 2023-05-04 23:03:06 +02:00
Rene Hollander a70c7aba36 nixos/networkd: Fix typo in usage sectionBridgeVLAN 
The `B` in bridge should be capitalized.

It currently leads to an evuluation error: 
```
error: attribute 'sectionbridgeVLAN' missing

       at /nix/store/7wmrwj0sgwg1iivxk43lpkqjhji57mq7-source/nixos/modules/system/boot/networkd.nix:2386:56:

         2385|       example = { VLAN = "10-20"; };
         2386|       type = types.addCheck (types.attrsOf unitOption) check.network.sectionbridgeVLAN;
             |                                                        ^
         2387|       description = lib.mdDoc ''
       Did you mean sectionBridgeVLAN?
```
 2023-05-04 16:20:56 +02:00
Martin Weinelt 12a2201d61
Merge pull request #229780 from NixOS/home-assistant 
home-assistant: 2023.4.6 -> 2023.5.0
 2023-05-04 15:43:40 +02:00
Weijia Wang cddc413c66
Merge pull request #229845 from pitkling/fix/qemu-vm-escape-variable 
virtualisation/qemu-vm: fix unescaped bash variable in shell script
 2023-05-04 15:47:26 +03:00
mcnesium 36af786eda
fix ambiguous unicode characters 2023-05-04 12:54:56 +02:00
Jörg Thalheim be8e3128b9
Merge pull request #223418 from Mic92/grub 
nixos/grub-install: don't rely on shell to run commands
 2023-05-04 09:48:41 +01:00
Peter Kling 996db6d059
virtualisation/qemu-vm: escape bash variable in shell script 
Fixes #229729
 2023-05-04 09:52:49 +02:00
Martin Weinelt 6d934088ea
nixos/home-assistant: update bluetooth components 2023-05-04 07:33:32 +02:00
Sandro Jäckel da15c5054e
nixos/nextcloud-notify_push: add bendDomainToLocalhost 2023-05-03 22:41:23 +02:00
Sandro Jäckel 546d4d4b76
nixos/nextcloud: add configureRedis option 2023-05-03 22:40:41 +02:00
pennae aad25290ee nixos/emacs: restore example markup 
these examples were turned into untitle anchors previously because at
the time supporting examples was not deemed necessary or useful. now
that we have them we can restore them though.
 2023-05-03 19:58:21 +02:00
Ryan Lahfa da28a7a3d0
Merge pull request #228347 from NixOS/uefi-without-bootloaders 
nixos/qemu-vm: make it possible to use UEFI without bootloaders
 2023-05-03 17:08:47 +02:00
Michael Livshin 11b851718e system76-scheduler: don't enable unconditionally 
Oops :(
 2023-05-03 10:34:32 +03:00
Izorkin edb40b3e4f nixos/fail2ban: others small update 2023-05-03 08:45:26 +02:00
Izorkin 544ebba973 nixos/fail2ban: update bantime options 2023-05-03 08:45:26 +02:00
Raito Bezarius 6e8248c8b2 nixos/qemu-vm: make it possible to use UEFI without bootloaders 
`useEFIBoot` is somewhat misleading, but we should make it possible to
enable UEFI environment / firmware without buying into a bootloader.

This makes it possible.
 2023-05-02 23:20:03 +02:00
Bernardo Meurer b04b3345f1
Merge pull request #195082 from cmm/system76-scheduler 2023-05-02 09:25:05 -07:00
Artturi 2d256ca7c2
Merge pull request #227499 from tollb/w20230421d_use_systemd_hwdb_to_build_udev_hwdb 2023-05-02 19:04:06 +03:00
Robert Hensing c4793e85f1
Merge pull request #229427 from Mic92/hercules-ci-agent 
nixos/hercules-ci-agent: increase stack limit
 2023-05-02 13:42:42 +02:00
Michael Livshin 549fd53520 system76-scheduler: add config module 2023-05-02 13:43:36 +03:00
Martin Weinelt 826418fc35
Merge pull request #227990 from Mic92/mediawiki-webserver 
nixos/mediawiki: make apache2 optional
 2023-05-02 12:39:10 +02:00
Jörg Thalheim 301d6bb9c2 nixos/hercules-ci-agent: increase stack limit 
see https://github.com/hercules-ci/hercules-ci-agent/pull/451 for context
 2023-05-02 09:53:41 +02:00
Jonas Heinrich d932d6929b
Merge pull request #227401 from onny/maddytls2 
nixos/maddy: Add tls option
 2023-05-02 07:32:56 +02:00
Sandro 7b02d16807
Merge pull request #227973 from tensor5/nixos/nextcloud--fix-notify_push-configuration-parse-error 2023-05-02 01:05:02 +02:00
figsoda ed153ccbfd
Merge pull request #229209 from Misterio77/navidrome-cfg-package 
nixos/navidrome: add package option
 2023-05-01 18:31:34 -04:00
Gabriel Fontes 1c3c2c8203
nixos/navidrome: add package option 2023-05-01 16:29:17 -03:00
Jörg Thalheim 077e950f7a nixos/mediawiki: also test fcgi socket 2023-05-01 20:51:11 +02:00
Jörg Thalheim d309952a5d nixos/mediawiki: make apache optional 2023-05-01 20:51:11 +02:00
Jonas Heinrich fcf6662fb5
Merge pull request #229159 from Misterio77/refactor-nextcloud-createlocally 
nixos/nextcloud: refactor database.createLocally
 2023-05-01 20:04:20 +02:00
Jonas Heinrich 616ba4ae5c nixos/maddy: Add tls option 2023-05-01 19:12:26 +02:00
Gabriel Fontes fddf531c6f
nixos/nextcloud: refactor database.createLocally 
Fixes https://github.com/NixOS/nixpkgs/issues/228971
 2023-05-01 12:20:40 -03:00
Matthieu Coudron 7fe4909bee
services.datadog: remove python2 from systemd service (#228312) 
which caused a security warning. seems to work without it so let's ditch it
 2023-05-01 16:37:34 +02:00
Nick Cao cb6c1de07d
Merge pull request #229138 from exzombie/fix/fstrim-interval 
nixos/fstrim: fix overriding the timer interval
 2023-05-01 17:23:36 +08:00
K900 5c95114a2f
Merge pull request #228951 from aacebedo/aacebedo/asusctl_4.6.2 
asusctl: 4.5.8 -> 4.6.2
 2023-05-01 12:08:37 +03:00
Alexandre Acebedo 576d7d34c4 asusctl: 4.5.8 -> 4.6.2 2023-05-01 11:07:39 +02:00
Weijia Wang b87aa62298
Merge pull request #227936 from wineee/dde 
nixos/deepin: init
 2023-05-01 08:38:45 +03:00
Kira Bruneau 50200de3f4
Merge pull request #216230 from tcheronneau/master 
nixos/{consul-template,vault-agent}: init
 2023-04-30 13:53:57 -04:00
gaykitty 3056e9c395 nixos/stargazer: remove with lib 2023-04-30 13:05:34 -03:00
gaykitty d4f3dd4f71 nixos/stargazer: fix route ordering 2023-04-30 13:05:34 -03:00
Jure Varlec 44438e0dcd nixos/fstrim: fix overriding the timer interval 
The OnCalendar systemd setting is additive. To clear the setting defined
by the pre-existing unit file, it has to be set first to an empty
string, then to the desired value.
 2023-04-30 17:36:49 +02:00
zimbatm 406a6dfa26 cloud-init module: adopt the settings format 
This makes it easier to for example set `datasource_list = [ "Vultr" ];`
so that cloud-init doesn't scan trough all of the datasources when you
know on which target the system is going to be deployed.

Previously, one had to copy-paste the default config and adapt it.
 2023-04-30 15:08:10 +02:00
zimbatm 4a1fd4afe0 cloud-init module: remove superfluous lib. prefixes 2023-04-30 14:59:16 +02:00