Commit graph

41745 commits

Author SHA1 Message Date
misuzu 4df3c4c17b nixos/clevis: add support for parent encrypted zfs datasets 2024-06-12 21:21:50 +03:00
Pol Dellaiera 7d270d53b9
Merge pull request #303429 from timhae/aria2-module
Aria2 module settings
2024-06-12 19:23:44 +02:00
Arian van Putten 494442762c amazon-ssm-agent: remove overrideEtc parameter
This was meant to make amazon-ssm-agent work "out of the box" on non-NixOS
systems but the feature never really worked.

The problem is that amazon-ssm-agent looks for the files "amazon-ssm-agent.json"
and "seelog.xml" but the files in the package are named
"amazon-ssm-agent.json.template" and "seelog.xml.template". So even with
this overrideEtc = true it would not be able to find the config.

E.g. you'd get an error like

Error occurred fetching the seelog config file path:  open /nix/store/pyfxjr0i0hszcj9b6fqly6344zf9zhcb-amazon-ssm-agent-3.3.484.0/etc/amazon/ssm/seelog.xml: no such file or directory
on startup.

Removing this parameter from the from the package doesn't break things as it didn't work in the first place.
2024-06-12 11:50:17 +02:00
Maximilian Bosch 0b31ada92b
nixos/nextcloud: refactor tests
The tests had very much duplication and some if it was even wrong! For
instance, `withRcloneEnv` in the MySQL test didn't have the `"$@"` at
the bottom to execute commands passed to it. Because of that, the MySQL
testcase never checked whether files can be uploaded.

Since tests are just another module-system I decided to abstract away
common things by using it:

* Define a base module with
  * an empty `client` node and a `nextcloud` node with defaults
    shared among all tests.
  * rclone scripts that are used by all tests.
  * a `testScript` checking upload/download. Additional checks can be
    added via `test-helpers.extraTests`.

* Make common information such as admin user & password shared via
  options.

Also, changed the following things:

* The `name` of the final derivation also includes the Nextcloud major
  it was tested against.

* Improved the objecstore test by making sure the file was actually
  uploaded into the bucket.
2024-06-12 10:55:26 +02:00
Sandro b4cb66799a
nixos/tests/vaultwarden: check for attachments, too 2024-06-12 10:46:30 +02:00
Félix e01926a4ac
Merge pull request #318342 from stusmall/add-auto-cpufreq-assertion/master
nixos/power-profiles-daemon: Add assertion with auto-cpufreq
2024-06-12 10:34:48 +02:00
Jörg Thalheim d0126c0508 make-disk-image: fix build for systems that use boot.loader.grub.devices
config.boot.loader.grub.device is just an alias that gets assigned to config.boot.loader.grub.devices.
If config.boot.loader.grub.device is set to null, it will fail with the following error
as described in https://github.com/nix-community/nixos-generators/issues/339
2024-06-12 08:27:18 +02:00
OTABI Tomoya 1f278a2082
Merge pull request #318384 from NyCodeGHG/nixos/renovate
nixos/renovate: init
2024-06-12 10:05:27 +09:00
Marie Ramlow dd8e2c72ad nixosTests.renovate: init vm test 2024-06-11 18:57:09 +02:00
Marie Ramlow 0adb3b8033 nixos/renovate: init 2024-06-11 18:57:04 +02:00
Sandro 5428ca74ce
Merge pull request #318924 from SuperSandro2000/317188
nixos/nvidia: fix eval with virtualisation.docker.enableNvidia enabled
2024-06-11 18:05:00 +02:00
Sandro Jäckel 319c97cfcb
nixos/nvidia: fix eval with virtualisation.docker.enableNvidia enabled 2024-06-11 16:02:24 +02:00
Sandro 7b48659268
Merge pull request #318919 from SuperSandro2000/locate-env
nixos/locate: only set LOCATE_PATH for findutils locate
2024-06-11 15:48:01 +02:00
Luflosi 4f8d158986
kubo: 0.28.0 -> 0.29.0
https://github.com/ipfs/kubo/releases/tag/v0.29.0

The FUSE mount functionality is no longer completely broken, so reenable the NixOS test.
2024-06-11 15:47:09 +02:00
h7x4 d952db86c9
nixos/vaultwarden: add test for backup script, fix flaky sqlite test 2024-06-11 13:10:44 +02:00
Maximilian Bosch 6ecafb1c38
nixos/nextcloud: fix objectstore/s3 test
* Make sure `withRcloneEnv` actually invokes the command it gets as
  `argv`. Until no, nothing was uploaded. This mistake was copied from
  the MySQL test that appears to have the same issue (will be addressed
  in the next commit).

* Test upload/download through with rclone once to see if Nextcloud
  interaction with S3 works fine.

* Make sure we actually have something in the bucket (until now with an
  `ls` and no real check, will do some larger cleanups and make this
  better in the next commit).

* Use actual AWS-style access keys.
2024-06-11 12:37:42 +02:00
Nguyễn Gia Phong 14c57ce7f7 nixos/public-inbox: make coderepo paths accessible
Fix typo in 03216e705c.
2024-06-11 19:32:59 +10:00
Ming-Chuan 9f488f27d7 nixos/initrd-ssh: Fix ignoreEmptyHostKeys description 2024-06-11 19:31:21 +10:00
Tom Fitzhenry edd19efe4e nixos/shadow: clean up module 2024-06-11 19:28:32 +10:00
Tom Fitzhenry 725777250b nixos/shadow: introduce security.shadow.enable
Allow users to disable the shadow authentication suite.

My primary motivation is to reduce the attack surface via setuid
binaries, which shadow understandably introduces many. I realised,
however, that I don't use any of these.

The test demonstrates login working without needing the shadow suite.
2024-06-11 19:28:32 +10:00
rewine cab913114a deepin: new deepin 23 components 2024-06-11 17:05:53 +08:00
rewine ccbf715d43 deepin: don't install deepin-turbo as it's unmaintained 2024-06-11 17:05:53 +08:00
Jon Seager 5b403d5f9c
Merge pull request #318866 from f0x52/patch-3
nixos/scrutiny: Default collector API url to configured host + port
2024-06-11 08:46:03 +01:00
Jared Baur d4d5fd718d
nixos/clatd: make client fetch PLAT prefix dynamically
We can expose the PLAT prefix to the client via DNS64 so clatd is able
to determine the prefix dynamically. We can also test that some
systemd-networkd PREF64 settings work as expected when exposed on the
router.
2024-06-11 00:41:10 -07:00
Sandro 4a77c223c9
Merge pull request #269460 from tie/pghero
pghero: init at 3.4.1
2024-06-11 01:00:56 +02:00
Sandro Jäckel 8e66b653e8
nixos/locate: drop with lib{,.types}, misc cleanup 2024-06-11 00:44:19 +02:00
Sandro Jäckel dec5ef74b0
nixos/locate: only set LOCATE_PATH for findutils locate
For plocate/mlocate it causes the results to be printed twice.
2024-06-11 00:10:09 +02:00
Felix Buehler edcdf6ad3b nixos/freshrss: fix reload when config changes 2024-06-10 22:16:20 +02:00
euxane e23df553b0 doc/release-notes: migration note for stalwart-mail user
This follows 6ee84bcda0.

Here I prefer a simple mention in the release notes instead of some
automatic migration, which could interfere with all the other changes
already potentially requiring some admin interventions.

Co-authored-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2024-06-10 21:03:24 +02:00
f0x52 5c922605bb
nixos/scrutiny: Default collector API url to configured host + port 2024-06-10 19:52:03 +02:00
Florian Klink d2d2467118
Merge pull request #318306 from flokli/grafana-alloy-module
grafana-alloy: add NixOS module
2024-06-10 19:36:36 +03:00
Sandro 3d057cef0e
Merge pull request #316519 from michaelBelsanti/espanso
nixos/espanso: fix espanso options
2024-06-10 17:11:39 +02:00
Emmanuel Rosa f06a960824
nixos/nvidia: optionally disable setup commands for reverse sync (#318521)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-10 16:57:45 +02:00
Sandro da3214b120
Merge pull request #309551 from aca/master 2024-06-10 15:48:32 +02:00
Matthias Beyer 8a9a6c764e
Merge pull request #314422 from eclairevoyant/journalwatch-fix-module
nixos/journalwatch: add package option
2024-06-10 15:26:15 +02:00
Arjan Schrijver 50643d3a98 qtile: use proper session .desktop files 2024-06-10 14:34:23 +02:00
Jonas Heinrich de1f4538e8
nixos/tests/nextcloud: Add test for object store 2024-06-10 13:52:55 +02:00
Sandro b8d6d611c6
Merge pull request #315380 from lucasew/20240528-fix-loki
nixos/loki: add network.target to after
2024-06-10 13:47:21 +02:00
Sandro 41386672b7
Merge pull request #286099 from Cynerd/mqtt2influxdb-package-fix
nixos/mqtt2influxdb: add missing package option
2024-06-10 13:46:24 +02:00
Sandro 0a8b4b05f2
Merge pull request #317188 from SuperSandro2000/nvidia-module 2024-06-10 13:16:42 +02:00
Weijia Wang 9520d06979
Merge pull request #266450 from CRTified/adguardhome-fix-246461
nixos/adguardhome: run --check-config before merging
2024-06-10 12:46:26 +02:00
Guanran928 e27092e106
metacubexd: init at 1.140.0 (#297721)
* metacubexd: init at 1.140.0

* nixos/mihomo: add example for cfg.webui
2024-06-10 12:45:19 +02:00
Florian Klink 1fa96ce4df grafana-alloy, nixos/alloy: add hbjydev to maintainers 2024-06-10 13:40:45 +03:00
Florian Klink c12da48755 nixosTests.alloy: init VM test
This adds a VM test, starting up Grafana Alloy and ensuring it comes
up healthy.
2024-06-10 13:35:33 +03:00
Florian Klink 486f515d47 nixos/alloy: init module
This adds a NixOS module for Grafana Alloy.

I started from the grafana-agent one but dropped all settings and config
management whatsoever.

Grafana Alloy uses its own Alloy config format (similar to HCL), which
is not really possible to express in Nix.
Simply pointing to a path in `/etc`, and leaving it up to the user to configure
it via `environment.etc` allows the user to arrange config files however
it makes most sense for them.

The module, systemd unit etc is called "alloy", not "grafana-alloy" to
follow the way it's packaged on other distros, to follow POLA.
2024-06-10 13:32:40 +03:00
Sandro Jäckel e40abba1ed
nixos/nvidia: minor cleanups 2024-06-10 12:06:42 +02:00
Christian Kögler 3844793c02
Merge pull request #318449 from ck3d/nixos-test-machinectl-cgroup2
nixos/tests/machinectl: add workaround for nix-build
2024-06-10 07:43:49 +02:00
Christian Kögler 181e82f4b2 nixos/tests/machinectl: add workaround for nix-build 2024-06-10 07:42:21 +02:00
Jared Baur b867cc215f
nixos/systemd-networkd: add PREF64 related options 2024-06-09 20:41:32 -07:00
Mario Rodas cfbeda848e
Merge pull request #318588 from 1sixth/fix-mpv-test
nixos/tests/mpv: adapt to the new mpv wrapper
2024-06-09 21:49:59 -05:00
1sixth f862ae2e31
nixos/tests/mpv: adapt to the new mpv wrapper 2024-06-10 09:34:50 +08:00
Markus Kowalewski b98e90213d
Merge pull request #317035 from ck3d/fix-node-red-path
nixos/node-red: fix passthru of PATH
2024-06-09 20:13:58 +00:00
Moritz Sanft 1ddd2fa945
grafana-reporter: migrate to buildGoModule
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-06-09 21:50:26 +02:00
Maximilian Bosch 1fca5674cc
Merge pull request #318282 from Ma27/fix-zabbix-proxy-option
nixos/zabbix-proxy: fix option default
2024-06-09 11:13:19 +00:00
Maximilian Bosch afa84d8a13
Merge pull request #318061 from PedroRegisPOAR/remove-extra-backtick
Removes extra backtick from manual
2024-06-09 10:48:16 +00:00
Francesco Gazzetta 4085796c8c nixosTests.ladybird: use programs.ladybird option 2024-06-09 08:18:31 +00:00
Sandro Jäckel e64cfbbf99
ArchiSteamFarm: 6.0.1.24 -> 6.0.3.4, switch to generic upstream variant to support Monitoring Plugin 2024-06-09 04:51:37 +02:00
Sandro 1acd99478c
Merge pull request #308539 from SuperSandro2000/gdk-pixbuf-xserver
nixos/gdk-pixbuf: move out of xserver
2024-06-09 02:08:30 +02:00
Pol Dellaiera 64e5a329cb
Merge pull request #316108 from comfysage/nixos/alsa-fix-restore
nixos/alsa: fix audio state loading on system start
2024-06-08 23:52:54 +02:00
h7x4 195d155a1c
nixos/kerberos_server: use krb format generator, plus misc cleanup
- Introduce more possible options by using the krb format generator.
- Enforce package choice is using a correct package.
- Use meta attribute to decide implementation, allows for overriding the
  package.
- Make necessary changes to the format, to allow for multiple ACL files in
  heimdal.
- Add systemd target and slice for both implementations.
- Move state to `/var/lib`
- Add documentation
2024-06-08 23:29:53 +02:00
Sandro Jäckel 131ef6d2ed
nixos/no-x-libs: fix gjs
Due to the switch to finalAttrs, we now need to properly disable installTests.
2024-06-08 21:46:14 +02:00
Sandro Jäckel b939c54015
nixos/gdk-pixbuf: move out of xserver 2024-06-08 21:26:28 +02:00
Stu Small 12bd55a1a3 nixos/power-profiles-daemon: Add assertion with auto-cpufreq
auto-cpufreq is similar to tlp in that it shouldn't be run with
power-profiles-daemon.  There functionality can conflict and bugs can
show up.  On my system this materialized by auto-cpufreq frequently
shutting down, but there may be other consequences.

This change follows the same pattern as the tlp assertion
2024-06-08 13:01:08 -06:00
sternenseemann 50848d126c Merge branch master into haskell-updates 2024-06-08 17:32:17 +02:00
Maximilian Bosch c323ea63f0
nixos/zabbix-proxy: fix option default
Apparently I forgot to test this one while developing
5142b7afa8 ("nixos/postgresql: turn
settings into a submodule").

Apologies!
2024-06-08 15:40:26 +02:00
Florian Klink 6a3a382d5b nixos/mycelium: add mycelium binary to systemPackages
It's now possible to invoke `mycelium {routes,peers} list`.
2024-06-08 15:01:32 +03:00
Kira Bruneau 783a966a20
Merge pull request #318092 from aidalgol/libxnvctrl-pure
Use libXNVCtrl purely
2024-06-08 06:35:15 -04:00
Pol Dellaiera a7049a06b7
Merge pull request #318099 from drupol/open-webui-add-more-env-vars
nixos/open-webui: add more default variables
2024-06-08 08:56:37 +02:00
Tom Fitzhenry 9e4e5d96f1 tests/openssh: use upstream's algorithms in "no openssl" example
When I initially wrote this test, I wasn't aware that services.openssh
could opt into using OpenSSH's default algorithms by just setting the
relevant settings to null.

That's a better approach since:
* it's a simpler setting for this test to have to worry about
* it introduces test coverage for the null case
* the null case should be demonstrated as an example for those that
  want to compile without OpenSSL
2024-06-08 15:03:08 +10:00
Yt 9109eb1779
Merge pull request #316845 from onny/davfs2-cleanup
nixos/davfs2: Remove deprecated extraConfig
2024-06-08 00:48:17 +00:00
github-actions[bot] 26e3a02633
Merge master into haskell-updates 2024-06-08 00:14:17 +00:00
Martin Weinelt 121ba21838
Merge pull request #286999 from SuperSandro2000/acme-check-account-hash
tests/acme: check consistent account hash
2024-06-07 23:57:20 +02:00
Pol Dellaiera 028584b548
nixos/open-webui: add more default variables 2024-06-07 23:15:54 +02:00
Aidan Gauland 19960c426d
nixos/nvidia: revert libXNVCtrl changes
This library does not actually need to match the Nvidia driver version,
so we do not need to make it available impurely.

This reverts the following commits.
9b3461e7ae
4e353b67f6
2024-06-08 08:00:55 +12:00
Pedro O. A. Regis 015e29a742 doc: removes extra backtick 2024-06-07 15:21:57 -03:00
Cosima Neidahl 5b3b5d79aa
Merge pull request #316275 from OPNA2608/fix/lomiri-xkb-layout
lomiri.lomiri: Try to consider services.xserver.xkb.layout
2024-06-07 19:49:31 +02:00
Thomas Churchman d226935fd7 nixos/ddclient: deprecate use, implement use{v4,v6}
Upstream replaced `use` with `use{v4,v6}`:
4a1b06630b/ChangeLog.md (new-features)
2024-06-07 17:28:25 +02:00
Pol Dellaiera 1905dcb574
Merge pull request #316240 from OPNA2608/init/lomiri/lomiri-filemanager-app
lomiri.lomiri-filemanager-app: init at 1.0.4
2024-06-07 14:33:41 +02:00
Jörg Thalheim 29327b68dd
Merge pull request #312863 from Mic92/netboot
netboot: drop syslinux and grub (10% savings for nixos-anywhere images)
2024-06-07 13:00:41 +02:00
OPNA2608 6477cb49a5 nixos/lomiri: Add file manager 2024-06-07 11:37:53 +02:00
OPNA2608 4a495ec755 tests/lomiri-filemanager-app: init 2024-06-07 11:37:49 +02:00
Karel Kočí 4ace1c0faf
nixos/mqtt2influxdb: add missing package option
This is used in the module but option wasn't defined at all.
2024-06-07 11:37:04 +02:00
K900 902ca5b470 nixos/opengl: fix typo 2024-06-07 12:06:26 +03:00
Keith Pine 6fda200fa4 nixos/inadyn: fix cache directory path
The CacheDirectory subdirectory is already part of $CACHE_DIRECTORY.
2024-06-07 09:03:24 +02:00
Anthony Roussel 46db91c0d7
nixos/samba: only create /etc/samba/smb.conf when samba is enabled 2024-06-07 08:44:21 +02:00
github-actions[bot] a5d1b908b4
Merge master into haskell-updates 2024-06-07 00:13:56 +00:00
PatrickDaG 0fdf6e2917
nixos/netbird: fix defaults (#314656)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-07 00:02:06 +02:00
Peder Bergebakken Sundt 4f06a00fa9
Merge pull request #295155 from onemoresuza/hare-hook
hareHook: init
2024-06-06 23:55:33 +02:00
Nicolas Lenz 0b8fdfd917
nixos/pretix: fix defaultText for celery options 2024-06-06 21:37:14 +02:00
ajs124 2bcef047dc
Merge pull request #317087 from baloo/baloo/nixosTest.lvm2/stage1-xfs
nixosTests.lvm2: stage1 tests use xfs
2024-06-06 20:58:45 +02:00
Florian Klink 610a87e260
Merge pull request #317785 from drupol/nixos-boot-use-replace-fail
nixos/boot: use `--replace-fail`
2024-06-06 20:54:18 +02:00
ajs124 84cb7f5eb5
Merge pull request #317084 from baloo/baloo/kvdo/kernel-5.17
kvdo: build is broken on kernel < 5.17
2024-06-06 19:42:32 +02:00
K900 b02badf4fd
Merge pull request #317585 from SuperSandro2000/opengl-tmpfiles-settings
nixos/opengl: use systemd.tmpfiles.settings
2024-06-06 19:41:38 +03:00
Pol Dellaiera f2318b9d58
nixos/boot: use --replace-fail 2024-06-06 18:33:30 +02:00
Bobby Rong 48deaba189
Merge pull request #317047 from bobby285271/upd/pantheon-unset-qt-env
nixos/pantheon: Do not set QT_QPA_PLATFORMTHEME
2024-06-06 22:56:02 +08:00
Arnout Engelen 2389f5fdc3
virtualbox guest module: draganddrop became dragAndDrop (#317756)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-06 16:48:47 +02:00
Sandro 345330c768
Merge pull request #291552 from SuperSandro2000/bash-completion-package-option 2024-06-06 15:22:21 +02:00
K900 7bf4340e73
Merge pull request #317582 from mweinelt/test-driver-subtest-return-type
nixos/test-driver: fix return value of subtest function
2024-06-06 08:21:14 +03:00
Sandro Jäckel 1c60f0a9a0 nixos/bash-completion: move options to programs.bash.completion, add package option, drop with lib
This allows to easily test bash-completion updates without triggering a mass rebuild locally.
2024-06-06 02:51:06 +02:00
github-actions[bot] bd4363d68b
Merge master into haskell-updates 2024-06-06 00:13:27 +00:00
Jonathan Davies 7d7cb3e425
doc/release-notes: 24.11: Added Quickwit item to new services. 2024-06-06 00:49:42 +01:00
Jonathan Davies c31c69206f
nixos/vector: Added syslog→Quickwit testcase 2024-06-06 00:49:39 +01:00
Jonathan Davies 237353040e
nixos/quickwit: Added testcase 2024-06-06 00:49:38 +01:00
Jonathan Davies 2ef778f69a
nixos/quickwit: init module 2024-06-06 00:49:37 +01:00
Martin Weinelt ab897a8c62
nixos/test-driver: fix return value of subtest function
Mypy since version 1.10.0 complains about this:

> test_driver/driver.py:109: error: No return value expected  [return-value]
2024-06-06 01:07:39 +02:00
Sandro Jäckel 576e94f8c8 nixos/opengl: use systemd.tmpfiles.settings
I want to use the final symlinked package in system.checks and need to
access that somehow. Instead of adding a new option, we might as well
convert tmpfiles to the new structure.
2024-06-06 00:55:31 +02:00
Sandro Jäckel 0898fee0de nixos/opengl: remove with lib over entire file 2024-06-06 00:35:29 +02:00
tomf b2b3f5d68d
nixos/oci-containers: add preRunExtraOptions (#315356)
`podman --help` and `docker --help` each have global options, that
must be specified before `run`.
2024-06-05 18:18:37 -04:00
Vladimír Čunát bb0a4e8786
nixos/release-combined: fix evaluation 2024-06-05 17:50:37 +02:00
Bobby Rong a53e9cab22
Merge pull request #317428 from a-kenji/virtualbox-host-typo
nixos/virtualbox-host: fix typo in assertion
2024-06-05 22:11:14 +08:00
Adam C. Stephens af4ac075a3
Merge pull request #312523 from emilylange/nixos-forgejo-secrets
nixos/forgejo: refactor secrets, add `cfg.secrets`, forgejo: build `environment-to-ini`, nixos/tests/forgejo: test `cfg.secrets` using /metrics endpoint
2024-06-05 10:01:37 -04:00
a-kenji 406e613b95 nixos/virtualbox-host: fix typo in assertion 2024-06-05 14:04:03 +02:00
Thomas Gerbet ef6fea2d86 openssh: move Kerberos support into a dedicated package
The `openssh` and `openssh_hpn` packages are now built without
the Kerberos support by default in an effort to reduce the attack surface.

The Kerberos support is likely used only by a fraction of the total users
(I'm guessing mainly users integrating SSH in an Active Directory env) so
dropping it should not impact too many users. It should also be noted that
the Kerberos/GSSAPI auth is disabled by default in the configuration.
`opensshWithKerberos` and `openssh_hpnWithKerberos` are added in order
to provide an easy migration path for users needing this support.

The `openssh_gssapi` package is kept untouched.
2024-06-05 19:45:31 +10:00
Florian Klink 40066ba0d8
Merge pull request #316168 from dawidd6/systemd-user-generators
nixos/systemd: link user-generators
2024-06-05 09:59:29 +02:00
Jörg Thalheim 7d98bbfcd5
Merge pull request #315827 from JohnRTitor/hyprland-module
nixos/{hyprland, wayland-common}: disable wlr portal for hyprland, enable xdg autostart for all wayland compositors
2024-06-05 09:57:53 +02:00
Jörg Thalheim 9028937bc4
Merge pull request #317347 from Prince213/doc-bootspec
nixos/activation/bootspec: misc fixes
2024-06-05 09:56:54 +02:00
Pol Dellaiera 133aa44c38
Merge pull request #317286 from drupol/open-webui-add-more-env
nixos/{ollama,open-webui}: minor service update
2024-06-05 09:12:28 +02:00
Pol Dellaiera 309451127f
nixos/open-webui: update options default values 2024-06-05 08:05:19 +02:00
Pol Dellaiera 5664bb7899
nixos/open-webui: add example in options 2024-06-05 08:05:18 +02:00
Pol Dellaiera a8670536e5
nixos/open-webui: remove preStart step
nixos/open-webui: remove `preStart` step
2024-06-05 08:05:18 +02:00
Pol Dellaiera 61ab4de94c
nixos/open-webui: update option and service descriptions 2024-06-05 08:05:18 +02:00
Pol Dellaiera 709eb8ebaf
nixos/open-webui: add openFirewall option 2024-06-05 08:05:18 +02:00
Pol Dellaiera 8ea262601a
nixos/open-webui: add release note entry 2024-06-05 08:05:18 +02:00
Pol Dellaiera c54890e226
nixos/ollama: update port option, use types.port 2024-06-05 08:05:18 +02:00
Pol Dellaiera cb8670469b
nixos/ollama: add openFirewall option 2024-06-05 07:09:13 +02:00
Sizhe Zhao 5209c84957
nixos/activation/bootspec: fix style 2024-06-05 11:14:36 +08:00
Sizhe Zhao 4f05b8e213
nixos/activation/bootspec: rephrase 2024-06-05 11:13:43 +08:00
Sizhe Zhao 3a4753867d
nixos/activation/bootspec: no longer experimental 2024-06-05 11:09:55 +08:00
Sizhe Zhao 0aaccaa596
nixos/activation/bootspec: now enabled by default 2024-06-05 11:06:03 +08:00
github-actions[bot] daadd0b777
Merge master into haskell-updates 2024-06-05 00:13:17 +00:00
Coutinho de Souza b0fcfa88cf
hareHook: init
Co-authored-by: Colin <colin@uninsane.org>
2024-06-04 20:32:51 -03:00
emilylange ac20219508
nixos/rl-2411: add services.forgejo.secrets
and the accompanying `services.forgejo.mailerPasswordFile` deprecation.
2024-06-05 01:05:47 +02:00
emilylange fd58d2299b
nixos/tests/forgejo: test cfg.secrets using /metrics endpoint
Heavily inspired by b59e5a34e7 (gitea).
2024-06-05 00:46:00 +02:00
emilylange 694db856ed
nixos/forgejo: refactor secrets, add cfg.secrets
This is not a breaking change. Existing setups continue to work as-is.

Users of `cfg.mailerPasswordFile` will get an option rename/deprecation
warning, but that's it (assuming there is no regression).

This adds `cfg.secrets`, which is a wrapper over systemd's
`LoadCredential=` leveraging Forgejo's `environment-to-ini`.

`environment-to-ini` is intended for configuring Forgejo in OCI
containers.

It requires some fairly annoying escaping of the section names to fit
into the allowed environment variable charset.

E.g. `"log.console".COLORIZE = false` becomes
`FORGEJO__LOG_0x2E_CONSOLE__COLORIZE=false`.

 - `.` needs to be replaced with `_0X2E_` and
 - `-` needs to be replaced with `_0X2D_`

Those are simply the hex representation of each char from an ASCII
table:

. = ASCII 46 = 46 (decimal) = 2E (hex) = 0x2E = _OX2E_

To make interacting with `environment-to-ini` less annoying, we template
and escape the sections/keys in nix:

`cfg.secrets` takes the same free-form sections/keys as `cfg.settings`.
Meaning there is now a generalized abstraction for all keys, not just
those that have been manually implemented in the past.

It goes as far as theoretically allowing one to have `DEFAULT.APP_NAME`
read from a secret file.

I don't know why one would want to do that, but it has been made
possible by this :^)

More reasonable examples are listed in the `cfg.secrets` option example.

We also continue to bootstrap a handful of secrets like
`security.SECRET_KEY`. This is done is a sort of sidecar bootstrap unit
fittingly called `forgejo-secrets.service`.

Overriding those is, just like before, not really intended and requires
the use of `lib.mkForce` and might lead to breakage. But it is, in a
way, more possible than before.
2024-06-05 00:45:59 +02:00
nikstur 1baf7d7e4e
Merge pull request #314890 from danielbarter/repart-image-fix
repart-image: remove --map-root-user flag from unshare
2024-06-04 22:28:05 +02:00
Nick Cao 5032dc9bc3
Merge pull request #317038 from abmantis/patch-5
nixos/nvidia-optimus: add nvidia-modeset to blacklist
2024-06-04 16:10:52 -04:00
kirillrdy dfee75c298
Merge pull request #309121 from jlbribeiro/pkgs/zx-8.0.2
zx: 7.2.3 -> 8.1.2
2024-06-05 06:07:55 +10:00
Arian van Putten 605418f9b1
Merge pull request #317257 from arianvp/stephank-fix-acme2
nixos/acme: allow setting security.acme.defaults.server = null to keep old accounts directory
2024-06-04 21:58:25 +02:00
K900 840914c324
Merge pull request #317268 from SuperSandro2000/plasma6-cups
nixos/plasma6: make print-manager depend on cups
2024-06-04 22:18:59 +03:00
Maximilian Bosch 7e2210236e
Merge pull request #316004 from Ma27/nc-memlimit
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
2024-06-04 19:18:03 +00:00
Sandro Jäckel 7c39d372f7 nixos/plasma6: make print-manager depend on cups 2024-06-04 20:50:06 +02:00
Arian van Putten f8439331dc doc/release-notes: Add note about backwards compatibility in ACME module
Co-authored-by: Stéphan Kochen <git@stephank.nl>
2024-06-04 20:23:30 +02:00
Stéphan Kochen d1f07e6382 nixos/acme: allow setting security.acme.defaults.server = null to keep old accounts directory
The accounts directory is based on the hash of the settings.

https://github.com/NixOS/nixpkgs/pull/270221 changed the  default of
security.acme.defaults.server from null to the default letsencrypt URL
however as an unwanted side effect this means the accounts directory
changes and the ACME module will create a new a new account.

This can cause issues with people using CAA records that pin the
account ID or people who have datacenter-scale NixOS deployments

We allow setting this option to null again for people who want
to keep the old account and migrate at their own leisure.

Fixes https://github.com/NixOS/nixpkgs/issues/316608

Co-authored-by: Arian van Putten <arian.vanputten@gmail.com>
2024-06-04 20:09:46 +02:00
Pol Dellaiera 6b6d4aeb35
Merge pull request #316248 from shivaraj-bh/open-webui
open-webui: init at 0.2.4
2024-06-04 15:47:03 +02:00
Jörg Thalheim f3ad1f2937 nixos-small: fix eval 2024-06-04 14:07:11 +02:00
shivaraj-bh f66cb82fef nixos/open-webui: init 2024-06-04 16:46:19 +05:30
Jörg Thalheim c71ebe0dc8 netboot: drop syslinux and grub
The comment says this is required by other modules but to be honest, I
cannot see where. Bootloaders will be included automatically by nixos
generation if their `installBootLoader` attribute references it.

This helps us to make kexec images even smaller espeically when
combined with the perlless profile.
2024-06-04 10:35:20 +02:00
Jörg Thalheim 7c503a8a9d
Merge pull request #315927 from Artturin/movetestsnix1
nixosTests.nix-misc: split from nixosTests.misc
2024-06-04 10:18:25 +02:00
Morgan Jones 7f03a67b0b
{doc/android,release-notes}: update android-studio and androidenv 2024-06-03 23:01:44 -07:00
Bobby Rong 6051698052
Merge pull request #314695 from nonetrix/patch-1
nixos/xdg/portal: Fix typo
2024-06-04 13:27:16 +08:00
Adam C. Stephens 72f73120fc
Merge pull request #316162 from adamcstephens/lxd/vm-cfg-rw
lxd-virtual-machine-image: install initial configuration read-write
2024-06-04 00:16:12 -04:00
Arthur Gautier 70fcd3ebf6 nixosTests.lvm2: stage1 tests use xfs 2024-06-03 20:50:39 -07:00
Arthur Gautier 265f31677e kvdo: build is broken on kernel < 5.17
complete_and_exit has been renamed to kthread_complete_and_exit
2024-06-03 20:48:47 -07:00
Daniel Barter d7a9d49c42 repart-image: removing unshare (and util-linux dep) form systemd-repart invocation
..
2024-06-03 17:48:27 -07:00
github-actions[bot] 14af82271b
Merge master into haskell-updates 2024-06-04 00:13:34 +00:00
Bobby Rong 36bc3f46ba
nixos/pantheon: Do not set QT_QPA_PLATFORMTHEME
7aa79d47f7

Closes #316991
2024-06-04 07:37:56 +08:00
Abílio Costa 79cd2f9738
nixos/nvidia-optimus: add nvidia-modeset to blacklist
The nvidia-modeset module is loaded, which in turn pulls in the nvidia module. This makes bbswitch fail to turn off the card since it would be in use by the module.
2024-06-03 23:18:34 +01:00
Christian Kögler 966d214719 nixos/node-red: fix passthru of PATH 2024-06-03 23:23:38 +02:00
José Ribeiro 6fc5c63584
doc(rl-24.11): zx v8 breaking changes 2024-06-03 22:16:55 +01:00
Jonathan Davies 2c6830c47e
nixos/prometheus: Move config reload test to subtest 2024-06-03 20:33:28 +01:00
Jonathan Davies 0c99c5f8b7
nixos/prometheus: Added Alertmanager test case 2024-06-03 20:33:28 +01:00
Jonathan Davies 571db45269
nixos/alertmanager-webhook-logger: init module 2024-06-03 20:33:27 +01:00
Jonathan Davies 38495e1ec0
nixos/prometheus: Added federation test case 2024-06-03 20:33:24 +01:00
Jonathan Davies 87cb2d582e
nixos/prometheus: Added pushgateway test case 2024-06-03 20:33:23 +01:00
Jonathan Davies 61e7915267
nixos/prometheus: Added remote-write test case 2024-06-03 20:33:22 +01:00
Jonathan Davies d6296eceaf
nixos/prometheus: Added simple two Prometheus server testcase 2024-06-03 20:33:21 +01:00
Jonathan Davies d276f0573b
nixos/prometheus: Renamed existing Prometheus test to Thanos. 2024-06-03 20:33:13 +01:00
Doron Behar 459335513a
Merge pull request #315555 from doronbehar/pkg/musescore
musescore: 4.3.0 -> 4.3.1
2024-06-03 21:20:15 +03:00
Thomas Gerbet 8359a1c6f7
Merge pull request #316884 from NixOS/enableSSHAgentAuth
doc/release-notes: repalce security.pam.enableSSHAgentAuth with secur…
2024-06-03 20:11:30 +02:00
Sandro 43b5ccde57
Merge pull request #316879 from SuperSandro2000/mkEnableOption 2024-06-03 19:03:12 +02:00
Sandro Jäckel 1c2132f714
nixos/installation-cd-plasma5: fix even more aliases 2024-06-03 16:26:54 +02:00
K900 2e8de9bd1a
Merge pull request #316929 from SuperSandro2000/cd-konsole
nixos/installation-cd-plasma5: don't use alias for konsole
2024-06-03 17:25:12 +03:00
Sandro a88fb925bb
nixos/installation-cd-plasma5: don't use alias for konsole 2024-06-03 16:22:12 +02:00
Michele Guerini Rocco 9e97770a19
Merge pull request #312317 from tom-kuca/replace-existing-network-addresses
nixos/network-interfaces: prevent failure when a network address already exists
2024-06-03 15:30:13 +02:00
Sandro 617a79dd10
doc/release-notes: repalce security.pam.enableSSHAgentAuth with security.pam.sshAgentAuth.enable 2024-06-03 13:34:00 +02:00
Sandro Jäckel 41452802cb
treewide: fix all obviously wrong mkEnableOptions 2024-06-03 13:20:32 +02:00
Sandro 0387dede7c
Merge pull request #316732 from SuperSandro2000/tailscale-auth 2024-06-03 12:49:31 +02:00
Jonas Heinrich 4ce2189082 nixos/davfs2: Remove deprecated extraConfig 2024-06-03 11:36:14 +02:00
Dawid Dziurla fbbc41f7da
nixos/systemd: simplify hooks function 2024-06-03 11:15:59 +02:00
Florian Klink c149b8818b
Merge pull request #316836 from srhb/fix-garage-assert
nixos/garage: fix replication 1.0 assertion
2024-06-03 11:14:03 +03:00
Sarah Brofeldt f7393d13fe nixos/garage: fix replication 1.0 assertion
Use the `cfg.package.version` (string) instead of the entire package so
users don't see  `error: value is a set while a string was expected`
instead of the intended assertion message.
2024-06-03 09:56:42 +02:00
Florian Klink 77a51024c0
Merge pull request #316697 from bbenno/fix-gollum
nixos/gollum: fix systemd tempfile permission
2024-06-03 08:25:04 +03:00
John Titor de77718887
nixos/wayland-session: cleanup
xwayland, wlr-portal ->
 enable-xwayland, enable-wlr-portal
2024-06-03 09:28:00 +05:30
Doron Behar 138ad7b73a nixos.tests.musescore: fix and improve
- Use the print dialog to create a sample score.
- Copy also the sample score from the vm to $out of the test.
- Create a bit more screenshots
- Only use machine.wait_for_window, never machine.wait_for_text which
  requires OCR which is slow.
- Set XDG_RUNTIME_DIR so it won't dump core.
2024-06-03 03:16:47 +03:00
github-actions[bot] ac1903efd3
Merge master into haskell-updates 2024-06-03 00:13:54 +00:00
illustris da799551a4
nixos/proxmox-lxc: fix console access (#307163)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-03 00:15:27 +02:00
Sandro 1e8d02875f
Merge pull request #307287 from illustris/proxmox-vma 2024-06-03 00:12:40 +02:00
Sandro 729002e6ce
Merge pull request #264635 from baloo/baloo/amazon-image/pkg-reimport 2024-06-02 23:42:06 +02:00
Someone e7139eb386
Merge pull request #316516 from aidalgol/libxnvctrl-nixos-fix
nixos/nvidia: add missing check for nvidia settings enabled
2024-06-02 21:32:56 +00:00
Eric Wolf 7c0937d668
nixos/nextcloud-notify_push: use Type=notify
This prevents the post start script from running
before necessary sockets have been created.

It also prevents an unused shell from being kept around
by using `exec` to make `notify_push` the main process.
2024-06-02 23:19:07 +02:00
Sandro 6f02edec1a
Merge pull request #316358 from majewsky/portunus-remove-libxcrypt-legacy 2024-06-02 23:10:26 +02:00
Sandro fa7656236f
Merge pull request #299995 from tie/centrifugo-tests-fix-shards 2024-06-02 23:09:48 +02:00
Sandro 9cce101bf1
Merge pull request #316636 from palasso/patch-1 2024-06-02 22:41:19 +02:00
Sandro Jäckel f643e4fa5b
nixos/tailscale-auth: fix enable option description 2024-06-02 22:30:42 +02:00
Ryan Horiguchi ea63e59edc nixos/adguardhome: fix typo 2024-06-02 21:01:11 +02:00
h7x4 850cbdd97d
Merge pull request #316648 from s1ls/invidious-router-descfix
nixos/invidious-router: remove redundant "Enables" in description
2024-06-02 19:28:19 +02:00
Benno Bielmeier b5c7987b52 nixos/gollum: fix systemd tempfile permission
When services.gollum.{user,group} was specified a value other than its
default (i.e. "gollum"), the build failed due to referencing a
non-existing user.
2024-06-02 18:00:19 +02:00
Sandro 56744fd9ee
Merge pull request #312261 from Yarny0/ensure-printers-fix-options 2024-06-02 17:59:01 +02:00
Onur C. Cakmak b3f70c29d5
nixos/containerd: remove LimitNOFILE from service (#313507) 2024-06-02 17:51:10 +02:00
Sandro c6c60cca65
Merge pull request #315112 from sikmir/git-daemon 2024-06-02 17:08:43 +02:00
Silas Schöffel 37afbbb602
nixos/invidious-router: remove redundant "Enables" in description 2024-06-02 13:27:22 +02:00
Thomas Gerbet e12faccb31
Merge pull request #313794 from tcmal/akkoma-3.13.2
akkoma: 3.13.1 -> 3.13.2
2024-06-02 12:57:31 +02:00
Vassilis Palassopoulos f41fc204d6 doc/release-notes: fix option that enables Plasma 6 2024-06-02 13:48:33 +03:00
Lin Jian 0dd47a00b7
Merge pull request #316500 from acid-bong/emacs
nixos/emacs: simplify the service's ExecStart line
2024-06-02 14:42:35 +08:00
Acid Bong eacb151e5d
nixos/emacs: simplify the service's ExecStart line
The upstream service just executes `emacs --fg-daemon`.
2024-06-02 09:24:31 +03:00
github-actions[bot] d865fb67ab
Merge master into haskell-updates 2024-06-02 00:14:43 +00:00
michaelBelsanti 7f447ce0f8
nixos/espanso: fix espanso options 2024-06-01 18:04:04 -04:00
Aidan Gauland 9b3461e7ae
nixos/nvidia: add missing check for nvidia settings enabled 2024-06-02 09:08:22 +12:00
Guillaume Girol 6ca2cfd75b
Merge pull request #313485 from tpwrules/copytoram-notif
nixos/stage-1-init: notify during copytoram
2024-06-01 21:06:33 +02:00
John Titor 7b2a2824b3
nixos/wayland-session: force running xdg autostart for WM-only sessions 2024-06-01 22:30:19 +05:30
Weijia Wang 9835090379 doc/release-notes: fix mention of ankisyncd 2024-06-01 14:26:51 +02:00
Arnout Engelen 61c1d28215
Merge pull request #303790 from FriedrichAltheide/cleanup-virtualbox
virtualbox & virtualboxGuestAdditions: cleanup
2024-06-01 13:42:14 +02:00
Aleksana 5a7bf1479a
Merge pull request #316270 from wegank/release-notes-3
doc/release-notes: update info on gnome 46
2024-06-01 16:33:46 +08:00
Stefan Majewsky d11d18df30 portunus: remove libxcrypt-legacy usage 2024-06-01 10:28:21 +02:00
Silvan Mosberger 72ca766b70
Merge pull request #316207 from infinisil/release-notes-lib 2024-06-01 08:58:07 +02:00
github-actions[bot] 26c4820adb
Merge master into haskell-updates 2024-06-01 00:14:21 +00:00
OPNA2608 2735184f6d lomiri.lomiri: Try to consider services.xserver.xkb.layout
Propagate the configuration setting through an envvar, check the envvar in the compositor.
Needed because querying AccountsSettings for this information fails, due to Ubuntu-only
"InputSources" interface. So you're stuck on US layout without this hack.
2024-06-01 00:26:25 +02:00
Weijia Wang 6fd5c54452 doc/release-notes: update info on gnome 46 2024-06-01 00:05:54 +02:00
Yt e45abe6d47
Merge pull request #313634 from onny/stalwart-systemd
stalwart-mail: package und use upstream systemd unit
2024-05-31 21:11:45 +00:00
Peder Bergebakken Sundt 080af6461e
Merge pull request #314294 from james-atkins/mealie-update
mealie: 1.2.0 -> 1.7.0
2024-05-31 20:41:37 +02:00
Weijia Wang d95b1060ca
Release NixOS 24.05 2024-05-31 20:17:44 +02:00
Silvan Mosberger 2906c69534 doc/release-notes: Add section on lib 2024-05-31 18:37:30 +02:00
Azat Bahawi 4a9b788bf5
Merge pull request #315749 from Sigmanificient/qtile-vm-fix
nixos/tests/qtile: run only on linux
2024-05-31 18:31:08 +03:00
Adam Stephens dfd0d14efc
lxd-virtual-machine-image: install initial configuration read-write 2024-05-31 10:19:37 -04:00
Dawid Dziurla 0133e21626
nixos/tests/podman: add test for rootless quadlet 2024-05-31 16:02:15 +02:00
WilliButz 4726504fea
Merge pull request #315656 from nikstur/os-release-remove-type-constraints
nixos/version: remove strict type constraints from image options
2024-05-31 14:51:20 +02:00
Maximilian Bosch 66e93e7e43
Merge pull request #316128 from NixOS/revert-315921-networkd-simplify-mkif
Revert "nixos/networking: use mkIfs on the inner attributes"
2024-05-31 12:39:12 +00:00
Francesco Gazzetta 3da336fc79 nixos/ladybird: init 2024-05-31 12:11:43 +00:00
Maximilian Bosch 3cf4304692
Revert "nixos/networking: use mkIfs on the inner attributes" 2024-05-31 13:05:19 +02:00
Thomas Gerbet 4e2290525d
Merge pull request #314618 from gaykitty/stargazer-1.2.1
stargazer: 1.1.0 -> 1.2.1
2024-05-31 12:57:03 +02:00
sternenseemann c2b48909d6 Merge master into haskell-updates 2024-05-31 12:49:29 +02:00
robin 4b0fd37990
nixos/alsa: fix audio state loading on system start 2024-05-31 11:55:11 +02:00
taku0 49032a79e4
Merge pull request #311669 from Nydragon/add-thunderbird-policies 2024-05-31 18:20:59 +09:00
Martin Weinelt 85cdd3a849
Merge pull request #316026 from wegank/release-notes-2
doc/release-notes: highlight desktop environment updates
2024-05-31 10:24:10 +02:00
Jonas Heinrich 336232debd stalwart-mail: package upstream systemd unit 2024-05-31 10:22:15 +02:00
John Titor 2c8ad1d1eb
nixos/gnome/gnome-keyring: rewrite the implementation 2024-05-31 13:52:12 +05:30
Jonas Heinrich dfa130e828 nixos/stalwart-mail: use upstream systemd unit 2024-05-31 10:20:47 +02:00
Tom Fitzhenry f1c7c63c69 Remove tomfitzhenry@ from some maintainership
I don't use these programs anymore, sadly.
2024-05-31 10:47:29 +10:00
Weijia Wang 8c58b05881 doc/release-notes: highlight desktop environment updates 2024-05-31 02:13:24 +02:00
Yt 6606ce9c0c
Merge pull request #273101 from onny/invoiceplane-settings2
nixos/invoiceplane: Remove deprecated extraConfig
2024-05-31 00:04:34 +00:00
Maximilian Bosch dddd08d188
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
The memory limit is equal to what's configured in php-fpm. Given that we
run in a different environment, it seems reasonable to allow different
memory contraints here.
2024-05-30 23:38:55 +02:00
Maximilian Bosch a8377e1b0f
Merge pull request #314828 from peterablehmann/prometheus
nixos/prometheus: add query_log_file option
2024-05-30 21:37:26 +00:00
Yt 0509bb8779
Merge pull request #315908 from pacien/nixos-stalwart-default-rocksdb
nixos/stalwart-mail: rocksdb as default storage
2024-05-30 21:31:59 +00:00
Yt 782f9a832e
Merge pull request #315697 from pacien/nixos-stalwart-no-dynamicuser
nixos/stalwart-mail: do not use DynamicUser
2024-05-30 21:27:34 +00:00
Maximilian Bosch ab294204ba
Merge pull request #315921 from lheckemann/networkd-simplify-mkif
nixos/networking: use mkIfs on the inner attributes
2024-05-30 18:11:51 +00:00
Artturin 413707f484 nixos/release-combined: add nixosTests.nix-misc to blockers 2024-05-30 21:00:12 +03:00
Dawid Dziurla 25ad0cdbfc
nixos/systemd: link user-generators 2024-05-30 19:52:22 +02:00
Dawid Dziurla 156757eaf7
nixos/systemd-user: add generators option 2024-05-30 19:51:42 +02:00
Maximilian Bosch 83db4d8162
Merge pull request #315307 from Ma27/kernel-generic-test
nixos/tests/kernel-generic: add linux_rt_6_6
2024-05-30 17:30:03 +00:00
Artturin e60c483eb9 nixosTests.misc: Remove nix tests
Moved to `nixosTests.nix-misc`
2024-05-30 19:11:27 +03:00