sehqlr
15eafd036b
Fixed the Monica email configuration bug
2024-12-20 14:48:38 -06:00
K900
81932cf82a
Merge remote-tracking branch 'origin/staging-next' into staging
2024-12-20 21:34:46 +03:00
Arne Keller
4ff852554d
nixos/akkoma: include ImageMagick by default ( #353164 )
2024-12-20 19:13:50 +01:00
Arne Keller
dab5c03aa4
firefly-iii: 6.1.24 -> 6.1.25, nixos/firefly-iii: Improved cache clearing ( #366564 )
2024-12-20 19:12:47 +01:00
Arne Keller
94200398f9
nixos/actual: init at 24.10.1 ( #347825 )
2024-12-20 18:55:13 +01:00
Arne Keller
75269f6e77
nixos/akkoma: Provide cache directory via environment ( #352706 )
2024-12-20 18:12:13 +01:00
oddlama
93af2d0523
nixos/actual: init module and tests
...
Co-authored-by: PatrickDaG <58092422+PatrickDaG@users.noreply.github.com>
2024-12-20 15:06:04 +01:00
github-actions[bot]
f970ef5718
Merge staging-next into staging
2024-12-20 12:06:14 +00:00
Robin Gloster
70145b71c3
Update TT-RSS, add simple test and updater flag customization ( #356592 )
2024-12-20 10:58:55 +00:00
Mathieu Fenniak
8d680a8c59
calibre-web: fix ebook conversion missing config_binariesdir setting
2024-12-19 14:39:34 -07:00
Savyasachee Jha
51bed7030f
nixos/firefly-iii: Improved cache clearing
2024-12-19 20:13:58 +05:30
github-actions[bot]
eb65114f5f
Merge staging-next into staging
2024-12-18 00:15:29 +00:00
misuzu
96ec911551
nixos/gancio: add gancio to nginx extraGroups only if nginx enabled ( #352143 )
2024-12-17 22:13:00 +02:00
github-actions[bot]
8e083c99ce
Merge staging-next into staging
2024-12-17 18:05:44 +00:00
Sam Grayson
275baaeee3
nixos/matomo: Fix typo in assertion message ( #365931 )
...
This typo is confusing because it seems like the assertion requires nginx to be non-null (old text: "either nginx or nginx.webServerUser is mandatory").
2024-12-17 18:25:41 +02:00
Sandro Jäckel
a81d5824e8
nixos/nextcloud-notify_push: add nextcloudUrl option
...
to have better control over the URL for when bendDomainToLocalhost is
not good enough
2024-12-15 22:43:12 +01:00
Wolfgang Walther
e58e0c158e
various: replace substituteAll with replaceVarsWith
...
This covers cases which need to use replaceVarsWith because the use
isExecutable = true.
2024-12-15 13:35:30 +01:00
Geoffrey “Frogeye” Preud'homme
95ebb0ea4b
nixos/powerdns-admin: adapt for newer flask-session
...
It broke somewhere between NixOS 24.05 and 24.11 due to flask-session
being upgraded. It now requires an explicit value and an empty string
will no longer do.
cachelib's SimpleCache was chosen as it doesn't require any other
configuration, and keeps previous behaviour.
2024-12-14 23:14:47 +01:00
Felix Zieger
b663e569c7
nixos/nostr-rs-relay: init ( #365038 )
...
* nixos/modules/services/web-apps: add nostr-rs-relay
* add jb55 as maintainer
* remove lib.mddoc
* mkenable requires name
2024-12-14 12:27:20 +02:00
Ember 'n0emis' Keske
601504d994
Remove n0emis as direct maintainer
2024-12-13 22:10:53 +01:00
Sandro Jäckel
b43f31e53a
nixos/nextcloud-notify_push: turn off keepalive_timeout, proxy_buffering
...
Just a safe guard in case it was configured in a higher level as
otherwise notify_push would break.
2024-12-13 17:58:08 +01:00
Sandro
7f632a70b8
nixos/bookstack: add package option ( #364347 )
2024-12-12 21:21:52 -05:00
nicoo
f6c5531461
nixos: Don't set !allowSubstitutes ( #314664 )
...
It is set by `runCommandLocal` and prevents fetching the build output
from `cache.nixos.org` or another trusted substituter.
2024-12-12 18:26:24 +00:00
Arne Keller
27aef3ef74
nixos/dokuwiki: Don't force http with Caddy ( #327743 )
2024-12-12 10:21:24 +01:00
K900
7ea7a19b2d
nixos/bookstack: fix unintended escaping of nginx locations ( #363581 )
2024-12-11 20:23:22 +03:00
Robert Schütz
d55cc4608d
nixos/immich: restrict media filesystem permissions ( #361627 )
2024-12-11 08:45:12 -08:00
Benjamin Saunders
fd21ef2a65
nixos/immich: restrict filesystem permissions
...
immich appears to create this directory with permissions 0755 by
default, which needlessly exposes user data to other processes.
2024-12-10 20:02:17 -08:00
Silvan Mosberger
4f0dadbf38
treewide: format all inactive Nix files
...
After final improvements to the official formatter implementation,
this commit now performs the first treewide reformat of Nix files using it.
This is part of the implementation of RFC 166.
Only "inactive" files are reformatted, meaning only files that
aren't being touched by any PR with activity in the past 2 months.
This is to avoid conflicts for PRs that might soon be merged.
Later we can do a full treewide reformat to get the rest,
which should not cause as many conflicts.
A CI check has already been running for some time to ensure that new and
already-formatted files are formatted, so the files being reformatted here
should also stay formatted.
This commit was automatically created and can be verified using
nix-build a08b3a4d19 .tar.gz \
--argstr baseRev b32a094368
result/bin/apply-formatting $NIXPKGS_PATH
2024-12-10 20:26:33 +01:00
Nick Cao
3c9a1fe232
nixos/wakapi: don't merge EnvironmentFile paths ( #363205 )
2024-12-09 13:37:24 -05:00
s1341
8ae4064d70
nixos/bookstack: fix unintended escaping of nginx locations
2024-12-09 15:41:22 +02:00
Elian Doran
655768419e
nixos/trilium: add adjustable package
2024-12-09 11:56:53 +01:00
Lukas Werling
1475f480d5
nixos/dokuwiki: Don't force http with Caddy
...
Caddy usually expects just a hostname without scheme to do its automatic
HTTPS. It is possible to get the old behavior (only HTTP) by setting
`services.caddy.virtualHosts.<host>.hostName`.
2024-12-09 11:49:52 +01:00
Arne Keller
414c290f3b
nixos/galene: add turnAddress option and fix httpAddress ( #353421 )
2024-12-09 06:37:50 +01:00
Zexin Yuan
53bd25e9e2
kanboard: init at 1.2.42 ( #357229 )
2024-12-08 20:17:10 -05:00
NotAShelf
a8537d1198
nixos/wakapi: don't merge EnvironmentFile paths
2024-12-08 20:26:54 +03:00
Yt
d530a7b9ea
nixos/lemmy: fix nginx backend to proxy needed headers ( #306984 )
2024-12-06 19:27:00 -05:00
Aleksana
123a31096f
firefly-iii: fix typo ( #360434 )
2024-12-06 22:46:32 +08:00
misuzu
cd9300a455
nixos/akkoma: Make imports explicit ( #320513 )
2024-12-05 15:00:33 +02:00
w
b66069df87
nixos/invoiceplane: fix sites option description ( #316699 )
2024-12-04 22:47:12 +08:00
liberodark
0c053dfc7c
peertube: 6.0.4 -> 6.3.3 ( #358194 )
2024-12-03 09:45:16 +01:00
Aleksana
ca55ed1674
filesender: FIX: missing format definition. ( #316885 )
2024-12-03 16:40:22 +08:00
Frédéric Christ
dd5ac98f89
nixos/keycloak: Enable Dual-Stack by default.
...
Keycloak already has Dual-Stack made the default for a while:
https://github.com/keycloak/keycloak/pull/21340/files#diff-28d941fe33e0f8217892e8096ba7152ba9ade67e3b2c3f0ce31a333d90cc339d
2024-12-01 20:20:27 +01:00
Ratchanan Srirattanamet
106bef066f
nixos/kimai: set PHP package for PHP-FPM pool to Kimai's PHP package
...
I've already made it so that Kimai's PHP package has all required
extensions. So use that instead of the default PHP package.
This fixes a warning in Kimai's doctor page.
2024-12-01 18:09:47 +00:00
Ratchanan Srirattanamet
a1b3091db8
nixos/kimai: fix incorrect service name for PHP-FPM service mixin
...
'systemd.services' will append '.service' suffix, so the extra
'.service' shouldn't be there. This fixes setting environment file.
2024-12-01 18:09:46 +00:00
Jenny
d3ba34c9e4
plausible: 2.0.0 -> 2.1.4 ( #356221 )
2024-12-01 18:31:00 +01:00
Aleksana
a94c29f625
privatebin: fix description typo ( #360424 )
2024-12-01 18:36:43 +08:00
Pol Dellaiera
c5150dd981
firefly-iii: 6.1.21 -> 6.1.24, firefly-iii-data-importer: 1.5.6 -> 1.5.7 ( #355838 )
2024-12-01 08:59:37 +01:00
pascal
002ebede7a
firefly-iii: fix typo
2024-11-30 15:01:30 +01:00
pascal
e06fd90239
privatebin: fix description typo
2024-11-30 14:30:15 +01:00
Thomas Gerbet
33f830be76
moodle: 4.4.1 -> 4.4.3 ( #334639 )
2024-11-30 13:08:19 +01:00
Valentin Gagarin
0ad4684753
agorakit: unbreak by setting valid database package
2024-11-26 22:20:19 +01:00
Savyasachee Jha
167c90ca01
nixos/firefly-iii-data-importer: Changes to clear cache more consistently upon updates
2024-11-25 09:46:52 +05:30
Savyasachee Jha
0c7f7224aa
nixos/firefly-iii: Changes to clear cache more consistently upon updates
...
and other minor updates to align with new RFC formatter.
2024-11-25 09:46:52 +05:30
Maximilian Bosch
52aad27d73
nixos/castopod: pin to php 8.2
...
The package is pretty outdated, so I'm not sure if it'll work with PHP
8.3, let's keep it on 8.2 for now until the maintainers update it.
2024-11-23 20:44:28 +01:00
Alexander Sieg
e8c9fa5bc8
plausible: 2.0.0 -> 2.1.4
2024-11-22 13:52:18 +01:00
Rémi NICOLE
a25e476c6a
nixos/netbox: clear old static files on upgrade ( #354036 )
2024-11-22 10:19:21 +01:00
Kerstin Humm
897954b8ae
nixos/open-web-calendar: init module
2024-11-21 16:34:39 +01:00
Thiago Kenji Okada
778f30c08c
porn-vault: init at 0.30.0-rc.11 ( #355785 )
2024-11-20 21:52:34 +00:00
Luana
cc671e2b6b
nixos/porn-vault: init module
2024-11-19 21:11:40 -03:00
Weijia Wang
5bdc0862bf
wordpress: 6.6.2 -> 6.7 ( #356449 )
2024-11-19 22:44:51 +01:00
Cosima Neidahl
e6b5e795bf
kimai, nixos/kimai: init at 2.24.0 ( #353187 )
2024-11-19 01:05:53 +01:00
Florian Agbuya
75a6be1684
flarum: fix 'mysql' has been renamed to/replaced by 'mariadb'
2024-11-18 13:03:05 +08:00
Ratchanan Srirattanamet
29e586e508
nixos/kimai: init module & add test
2024-11-17 16:20:21 +00:00
Julien Malka
cee07e8dc8
nixos/agorakit: init module
2024-11-17 16:08:58 +01:00
Viorel-Cătălin Răpițeanu
d1da56f629
wordpressPackages: package and theme updates
...
1. Make twentytwentyfive theme default
2. Update all packages
2024-11-17 15:56:28 +02:00
gileri
b652b30119
tt-rss: Add updateDaemon.commandFlags parameter
2024-11-16 23:58:58 +01:00
Maximilian Bosch
97a911e8fb
Merge: nixos/postgresql: extension based hardening relaxation ( #355010 )
2024-11-16 22:29:36 +01:00
Martin Weinelt
223a6c6ed0
nixos/postgresql: rename extraPlugins to extensions
...
This is the upstream lingo, and it makes everything slightly less
confusing.
2024-11-16 14:46:16 +01:00
Maximilian Bosch
0b3eef7441
postgresql_12: remove
...
This will be EOL at the end of November, so there's little reason to
keep it in 24.11[1]. As discussed, we'd like to keep it for as long as
possible to make sure there's a state in nixpkgs that has the latest
minor of postgresql_12 available with the most recent CVEs fixed for
people who cannot upgrade[2].
This aspect has been made explicit in the manual now for the next .11
release.
During the discussions it has been brought up that if people just do
`services.postgresql.enable = true;` and let the code decide the
postgresql version based on `system.stateVersion`, there's a chance that
such EOL dates will be missed. To make this harder, a warning will now
be raised when using the stateVersion-condition and the oldest still
available major is selected.
Additionally regrouped the postgresql things in the release notes to
make sure these are all shown consecutively. Otherwise it's a little
hard to keep track of all the changes made to postgresql in 24.11.
[1] https://endoflife.date/postgresql
[2] https://github.com/NixOS/nixpkgs/pull/353158#issuecomment-2453056692
2024-11-15 09:17:06 +01:00
Austin Horstman
57533f358a
pingvin-share: 1.1.3 -> 1.2.4 ( #354105 )
2024-11-14 13:40:09 -06:00
Sandro
1556ad266a
nixos/changedetection-io: fix creation of data dir ( #318666 )
2024-11-12 19:10:53 +01:00
Sandro
8c164faef4
nixos/nextcloud-notify_push: fix defaultText rendering ( #352479 )
2024-11-10 23:42:18 +01:00
Austin Horstman
f5f87e7240
dashy-ui: init at 3.1.1-unstable-2024-07-14 ( #349149 )
2024-11-10 09:35:31 -06:00
TheRealGramdalf
7f76ced733
nixos/dashy: init module
2024-11-10 00:04:25 +00:00
Robert Schütz
06be8564e5
immich: 1.119.1 -> 1.120.1 ( #354083 )
2024-11-09 14:53:47 -08:00
Robert Schütz
ee1cffa25c
immich: 1.119.1 -> 1.120.1
...
Changelog: https://github.com/immich-app/immich/releases/tag/v1.120.0
https://github.com/immich-app/immich/releases/tag/v1.120.1
2024-11-09 14:44:21 -08:00
Jenny
1b171c15ab
nixos/mobilizon: change psql socket dir to none symlinked directory ( #352508 )
2024-11-07 14:01:37 +01:00
RatCornu
ad6564b0c3
nixos/pingvin-share: update env variable name
2024-11-07 00:23:28 +01:00
Minijackson
fe58368de6
nixos/netbox: switch to symlink to check for upgrades
...
This makes it so that the upgrade script also runs when the
configuration changed, or when plugins were added.
This is also a hack to force everyone to run the upgrade script again,
since static files might have been copied incorrectly (see parent commit)
2024-11-06 16:14:56 +01:00
Minijackson
ff6d89ac69
nixos/netbox: clear old static files on upgrade
...
This fixes an issue where upgrading NetBox didn't correctly clean old
files, and the interface wasn't correct / didn't show object relations.
2024-11-06 16:13:18 +01:00
Franz Pletz
0fc41ad977
treewide: Remove ineffective capability grants. ( #333533 )
2024-11-06 08:12:51 +01:00
Sandro
ef9ef9ea88
mediagoblin: init at 0.14.0, nixos/mediagoblin: init ( #350578 )
2024-11-06 00:22:31 +01:00
Pol Dellaiera
7f81fa0cb9
nixos/snipe-it: fix secure flag for cookies ( #353009 )
2024-11-04 20:10:24 +01:00
Simon Hauser
c4edf93988
Cleanup helsinki maintainer ( #353611 )
...
* maintainers: update email conni2461
* maintainers: add helsinki-jo
* tree-wide: cleanup maintainership of helsinki-systems
2024-11-04 12:59:26 +01:00
Alexandre Iooss
0512de2512
nixos/galene: add turnAddress option and fix httpAddress
2024-11-03 17:14:08 +01:00
Tomo
fa08eabc4a
atlassian-{bamboo,confluence,crowd,jira}: drop
...
Support for the Atlassian Server products ended in
February 2024 and there was insufficient interest in
maintaining the Atlassian Data Center replacements
c.f. https://github.com/NixOS/nixpkgs/pull/353043#issuecomment-2452825826
2024-11-02 20:36:14 +00:00
Mikael Voss
89fbc2b61b
nixos/akkoma: Include ImageMagick by default
...
ImageMagick is used to generate image previews in the media proxy. While
compatible, GraphicsMagick fails to read a lot of images in practice.
2024-11-02 17:16:49 +01:00
Sandro Jäckel
ff9dd57d3d
nixos/mediagoblin: init
2024-11-02 00:20:01 +01:00
Leona Maroni
12dea28165
nixos/snipe-it: fix secure flag for cookies
2024-11-01 23:36:37 +01:00
Mikael Voss
a00c1932ab
nixos/akkoma: Provide cache directory via environment
...
CACHE_DIRECTORY is used in the default configuration and therefore needs
to be provided in the environment for pleroma_ctl.
2024-10-31 21:19:02 +01:00
Robert Schütz
95447fbb60
immich: 1.119.0 -> 1.119.1 ( #352155 )
2024-10-31 12:35:13 -07:00
Bruno BELANYI
745f78a683
nixos/komga: introduce 'settings' option
2024-10-31 11:08:11 +00:00
Sandro
907c79314b
nixos/mobilizon: change psql socket dir to none symlinked directory
2024-10-31 01:42:45 +01:00
Sandro
9dd1f943ec
nixos/nextcloud-notify_push: fix defaultText rendering
2024-10-30 23:48:18 +01:00
Atemu
8336127b57
peertube: startup script: exec into nodejs ( #352005 )
2024-10-30 13:25:54 +01:00
ppom
1eb6cc1582
nixos/peertube: startup script: exec into nodejs
...
1. Removed the #!/bin/sh shebang at the beginning, because
systemd.services.<name>.script already adds a #!/nix/store/.../bin/bash
shebang.
Previously:
#!/nix/store/516kai7nl5dxr792c0nzq0jp8m4zvxpi-bash-5.2p32/bin/bash
set -e
#!/bin/sh
umask 077
...
2. Exec into nodejs, so that the startup script is no longer running but
replaces itself by nodejs.
This way, only one processus is running inside peertube.service.
2024-10-30 12:00:00 +01:00
Robert Schütz
22ffb72803
nixos/immich: generate config file from services.immich.settings
2024-10-29 17:58:50 -07:00
Robert Schütz
376dd27232
nixos/immich: add systemd slice
2024-10-29 16:24:32 -07:00
Jean-Baptiste Giraudeau
da7b5ed446
nixos/gancio: add gancio to nginx extraGroups only if nginx enabled
2024-10-29 18:06:57 +01:00
Mikael Voss
88b1884142
nixos/akkoma: Make imports explicit
2024-10-29 00:06:19 +01:00
Robert Schütz
74e0f237ea
immich: 1.118.2 -> 1.119.0
...
Changelog: https://github.com/immich-app/immich/releases/tag/v1.119.0
2024-10-28 13:04:14 -07:00
Martin Weinelt
8195804e5d
nixos/sftpgo: add extraReadWriteDirs option and fix docs links ( #315619 )
2024-10-26 22:34:45 +02:00
Rémi NICOLE
0433962e5b
netbox: 3.7.8 -> 4.1.3 ( #331750 )
2024-10-25 09:09:06 +00:00
Leona Maroni
a378c72099
youtrack_2022_3: drop ( #349356 )
2024-10-24 22:46:57 +02:00
Matthieu Coudron
5c8ff2e60c
nixos/immich: use 'immich' as syslog identifier ( #350551 )
...
use 'immich' as syslog identifier
seeing 'immich' instead of the generic 'server' in journalctl is more understandable
2024-10-24 00:15:19 +02:00
Minijackson
4409a8d78f
nixos/netbox: increase timeout for NetBox pre-start script
...
since the script does database migrations and index,
it could timeout on slower system with a big enough database
2024-10-23 21:07:35 +02:00
Minijackson
69610ea296
netbox: switch to netbox_4_1, mark netbox_3_7 as EOL
...
also switch the netbox-upgrade test to check upgrade from 3.7 -> 4.1
2024-10-23 21:07:32 +02:00
Yt
e7d7f71c0b
nextcloudPackages.whiteboard: init at 1.0.4; nextcloudPackages: update ( #342773 )
2024-10-22 19:04:21 -04:00
Franz Pletz
eae71219ea
nixos/wakapi; fix logical errors; add NixOS test ( #350435 )
2024-10-22 19:02:05 +02:00
NotAShelf
a466f14627
nixos/wakapi: fix incorrect assertion conditions
...
Using implication here (->) causes the assertions to fail haphazardly due to the ordering *implied* by the operator. By using AND, we avoid this case. Unsurprisingly, this was caught by the NixOS test.
2024-10-22 12:27:24 +03:00
NotAShelf
fbec0c0d7f
nixos/wakapi: fix failing assertions
2024-10-22 12:05:02 +03:00
NotAShelf
c3ce64b13a
nixos/wakapi: fix typo in warning conditional
...
This makes the warning work as intended again.
2024-10-22 11:59:09 +03:00
Martin Weinelt
7d2fd18921
nixos/pretalx: feature the files.upload_limit setting
...
The default of 10 MiB might be too constraining for slide decks and
collateral in 2024.
2024-10-22 02:49:29 +02:00
Martin Weinelt
bd281d0259
pretalx: 2024.2.1 -> 2024.3.0
...
https://docs.pretalx.org/changelog/#v2024-3-0
2024-10-22 02:43:51 +02:00
Jonas Heinrich
345a761d13
nixos/nextcloud-whiteboard-server: init
2024-10-21 15:49:23 +00:00
Leona Maroni
dc14253a18
nixos/youtrack: drop support for YouTrack 2022.3
2024-10-21 17:36:23 +02:00
Maximilian Bosch
c5b89642bf
Merge: nixos/nextcloud: fix shellcheck findings with enableStrictShellChecks enabled ( #349558 )
2024-10-18 23:57:53 +02:00
Sandro
d72c0ce546
nixos/nextcloud-notify_push: fix connecting to mysql via socket ( #348114 )
2024-10-18 20:25:32 +02:00
Christina Sørensen
d218858bb1
nixos/wakapi: add database options; gate db creation behind database.createLocally ( #341176 )
2024-10-18 18:04:46 +02:00
Brendan Taylor
04e39de6eb
nixos/immich: do not set services.redis.servers.immich.user
...
the redis module expects a user and group to exist with this name.
previously if there was no group with the same name as
`services.immich.user` the immich redis server would fail to start.
instead we can use the redis module's default behaviour: it will
create a user & group named "redis-immich".
2024-10-17 07:19:02 -06:00
Leona Maroni
edd292c18b
nixos/dokuwiki,nixos/wordpress,nixos/invoiceplane: Remove deprecated isCoercibleToString ( #292801 )
2024-10-17 09:32:14 +02:00
Robert Schütz
e3152f80bf
nixos/immich: change default port to 2283
...
This was always upstream's default but they also change the internal
port, i.e. behind the reverse proxy, to 2283 in
https://github.com/immich-app/immich/pull/13185 .
2024-10-16 10:30:34 -07:00
Felix Bühler
e544a67eba
nixos/freshrss: fix phpfpm.pool ( #347324 )
2024-10-15 22:39:24 +02:00
Sandro Jäckel
1ada7c1d36
nixos/nextcloud: fix shellcheck findings with enableStrictShellChecks enabled
2024-10-14 18:20:25 +02:00
Richard Steinmetz
b9ca8498aa
nixos/nextcloud-notify_push: fix connecting to mysql via socket
2024-10-14 13:30:05 +02:00
Felix Buehler
de810c5163
nixos/freshrss: update de parameters
2024-10-13 23:07:46 +02:00
Kerstin
35c52ab030
mastodon: 4.2.13 -> 4.3.0 ( #337545 )
2024-10-12 19:37:08 +02:00
Pol Dellaiera
afd96bad04
Bump and fix nextjs-ollama-llm-ui ( #347856 )
2024-10-12 10:42:53 +02:00
Bruno Bigras
986d7cad0d
wakapi: set StateDirectory ( #347431 )
2024-10-11 14:48:16 -04:00
Kranium Gikos Mendoza
f385d942e1
nextjs-ollama-llm-ui: fix nextjs cache dir ( #344316 )
2024-10-11 17:35:37 +11:00
Izorkin
36a83a3bf1
mastodon: 4.2.13 -> 4.3.0
...
Changelog:
https://github.com/mastodon/mastodon/releases/tag/v4.3.0
2024-10-10 16:58:54 +02:00
Felix Singer
3d30811d4e
nixos/gerrit: Apply initial hardening using the systemd unit
...
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-10 07:12:28 +02:00
Robert Schütz
db4fd8f4e3
nodePackages.npm: drop ( #346536 )
2024-10-09 12:01:42 -07:00
Matthew Croughan
4eb19953b6
node-red: move from nodePackages ( #347018 )
2024-10-09 16:11:38 +01:00
Bruno Bigras
90f457d197
wakapi: set StateDirectory
...
fix #347393
2024-10-09 02:54:57 -04:00
Felix Buehler
6290926fed
nixos/freshrss: fix phpfpm.pool
2024-10-08 20:23:52 +02:00
Robert Schütz
b129e21ffd
node-red: move from nodePackages
2024-10-08 08:29:56 -07:00
e1mo
4f899ed44d
nixos/dokuwiki,nixos/wordpress,nixos/invoiceplane: Remove deprecated isCoercibleToString
...
Close #292788
2024-10-08 11:53:03 +02:00
Sandro
0538ecd092
rss-bridge: Remove pkg patch, adapt nixos service ( #331295 )
2024-10-07 18:57:22 +02:00
Robert Schütz
506df4e38e
nodePackages.npm: drop
2024-10-05 11:23:49 -07:00
Nick Cao
6069dde181
nixos/keycloak: make initialAdminPassword optional
2024-10-05 08:37:41 -04:00
Nick Cao
0cdc3e2a0b
nixos/keycloak: drop removed proxy option
...
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#proxy-option-removed
2024-10-04 20:20:46 -04:00
Nick Cao
16cd47369f
nixos/keycloak: KEYCLOAK_ADMIN{,PASSWORD} -> KC_BOOTSTRAP_ADMIN_{USERNAME,PASSWORD}
...
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#admin-bootstrapping-and-recovery
2024-10-04 20:08:06 -04:00
Nick Cao
d2ec2d3c29
nixos/keycloak: link $out/lib to KC_HOME_DIR to fix loading optimized app image
...
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#additional-validations-on-the-optimized-startup-option
2024-10-04 20:06:08 -04:00
Mynacol
aa0fc3e8b8
rss-bridge: Remove pkg patch, adapt nixos service
...
The rss-bridge service changes introduced in f2201789fe
resp. https://github.com/NixOS/nixpkgs/pull/223148 removes the need for
the package patch. This commit removes the patch to ease updating and
maintenance.
Relevant service functionality was also removed (e.g. the setting of
RSSBRIDGE_DATA).
The explicit definition of FileCache.path so users can easily see its
default value and change it, requires to use a freeformType to let users
freely add potentially upcoming config options. This type is restricted
to ini types (although we coerce them to environment variables).
This however makes the list of enabled_bridges impossible. That was
fixed by explicitly introducing this option with a type allowing lists.
The default value however should be unset, which is expressed as `null`,
which further spurred a change in the environment variable generation to
ignore null values (instead of coercing them to an empty string).
A breaking change note was added to highlight this change. A check that
warns users of the not-application of their existing config file is
not easily possible, as people could have only added or changed the
config.ini.php file on the file system without changing a nix variable.
2024-10-04 14:58:15 +02:00
Pol Dellaiera
2199b69a7a
nixos/privatebin: init module & privatebin: init at 1.7.4 ( #344014 )
2024-10-04 09:51:40 +02:00
Sandro
e00cc9f2fa
openwebrx: remove alias alsaUtils -> alsa-utils ( #346259 )
2024-10-04 02:21:40 +02:00
Astro
48b4aa8eae
openwebrx: s/alsaUtils/alsa-utils/
...
allows running with allowAliases = false
2024-10-03 23:53:56 +02:00
h7x4
5190ddc27d
treewide: \xc2\xa0 -> ( #345898 )
2024-10-03 18:23:59 +02:00
lassulus
def08aa2e3
jitsi-meet: Default NAT harvester, Excalidraw Caddy, Prosody lockdown ( #280615 )
2024-10-02 21:08:06 +01:00
Peder Bergebakken Sundt
3100acba08
treewide: \xc2\xa0 ->
...
I have no idea what this escape sequence even is, but it breaks the nix parser with cryptic errors if not used in a comment.
A friend let me know MacOS is prone to input weird spaces, not sure if that is the source.
Candidates were located and created with:
chr="$(echo -e '\xc2\xa0')"; rg -F "$chr" -l | xe sd -F "$chr" " "
There are some examples left, most being example output from `tree` in various markdown documents, some patches which we can't really touch, and `pkgs/tools/nix/nixos-render-docs/src/tests/test_commonmark.py` which I'm not sure if should be addressed
2024-10-02 15:33:06 +02:00
Maximilian Bosch
55a45406a6
nixos/nextcloud: update relatedPackages
2024-10-01 13:36:16 +02:00
Maximilian Bosch
20ed9ccd88
nextcloud: correct stateversion logic
2024-10-01 12:48:47 +02:00
Jonas Heinrich
1b121c1ea2
nextcloud30: init at 30.0.0
2024-10-01 12:48:45 +02:00
Nick Cao
5aa3097833
nixos/hatsu: init module ( #345102 )
2024-09-30 18:35:12 -04:00
藍+85CD
2f15b523d9
nixos/hatsu: init module
2024-10-01 00:33:38 +08:00
Erin Yuki Schlarb
56581588c3
jitsi-meet: Add option to disable Prosody services not used by Jitsi Meet
...
The default Prosody config assumes that Prosody will be used as a federated
XMPP server, while the usecase for Jitsi Meet is much narrower.
2024-09-30 18:19:34 +02:00
Erin Yuki Schlarb
7ab8f255b9
jitsi-meet: Restrict jitsi-excalidraw systemd service to the minimum requried
2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
9e8b3f97cc
jitsi-meet: Also forward Excalidraw connections when using Caddy as web server
2024-09-30 18:19:33 +02:00
h7x4
11f77694ac
nixos/bluemap: move to web-apps ( #345353 )
2024-09-30 17:53:27 +02:00
Erin Yuki Schlarb
67e261beb5
jitsi-meet: Set internal MUC options set in official Docker image
2024-09-30 17:31:04 +02:00
Viorel-Cătălin Răpițeanu
db71929224
wordpressPackages: update packages, add ru_RU lang, make twentytwentyfour default
2024-09-29 23:09:33 +03:00
h7x4
c25213a9bd
nixos/bluemap: move to web-apps
2024-09-29 21:40:39 +02:00
Savyasachee Jha
22e2e02118
nixos/privatebin: init
2024-09-29 23:02:19 +05:30
Leona Maroni
a23db91282
nixos/immich: add option database.port ( #345094 )
2024-09-28 18:01:08 +02:00
7c6f434c
c87aad4296
Add Collabora Online ( #330708 )
2024-09-27 08:33:57 +00:00
Robert Schütz
c5d95d4999
immich: some improvements ( #344237 )
2024-09-26 07:14:52 -07:00
Brendan Taylor
8debc8df79
nixos/immich: add option database.port
2024-09-26 08:06:59 -06:00
DCsunset
68d108bb04
nixos/stirling-pdf: add missing dependency ghostscript
2024-09-25 01:01:33 +00:00
Martin Weinelt
aaa7fb5840
nixos/{pretix,pretalx}: set up log rotation ( #343982 )
2024-09-24 22:48:17 +02:00
Robert Schütz
7cdda564e0
nixos/immich: override machine-learning with cfg.package
...
Otherwise they could use different versions:
nix-repl> (immich.overrideAttrs { version = "0"; }).machine-learning.version
"1.115.0"
2024-09-24 09:53:24 -07:00
Yt
d026e3fa1a
immich: init at 1.115.0; nixos/immich: init module ( #324127 )
2024-09-24 05:56:12 -04:00
Jan van Brügge
cedcd9f4f0
nixos/immich: init module
2024-09-23 22:38:02 +02:00
Martin Weinelt
1d8c946fdb
nixos/pretalx: enable log rotation
...
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:58:52 +02:00
Martin Weinelt
9a85a7e2ce
nixos/pretix: enable log rotation
...
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:57:31 +02:00
Marcel
0556c426ff
nixos/pretix: fix database.host option type ( #343917 )
...
Support database configuration using TCP and not only Unix sockets.
2024-09-23 10:52:08 +02:00
Leona Maroni
761ae3237c
dependency-track: init at 4.11.6 ( #328669 )
2024-09-22 18:49:11 +02:00
Alexander Sieg
5b67f3b831
nixos/dependency-track: init module
2024-09-22 16:38:45 +02:00
Aleksana
5c16154521
nixos/davis: fix nginx conf's well-known redirect ( #342995 )
2024-09-22 21:28:31 +08:00
Weijia Wang
d582ac052d
nixos/wordpress: fix tests
2024-09-19 22:25:37 +02:00
Andrew Kvalheim
818d2a60a8
hedgedoc: correct typo in deprecation notice
...
Continues #244941
2024-09-19 11:05:05 -07:00
Casey Link
5b64b4072a
nixos/davis: fix nginx conf's well-known redirect
...
We mistakenly used a non-existing nginx variable for the X-Forwarded-Proto causing
the well-known redirect to return erroneous Location headers like:
Location: ://dav.example/dav
instead of the correct:
Location: https://dav.example/dav
2024-09-19 12:03:51 +02:00
Maximilian Bosch
3302dc7c34
nixos/doc: mention "No such file or directory" error on Nextcloud
...
That was... interesting to debug. It took a me a bit of reading C code
until I realized that the realpath cache is internally used for
`file_get_contents`, but not for `file_exists` 🙃
I'm not comfortable on doing the workaround in the module, but I think
it's good to have this documented in the manual.
2024-09-16 18:57:10 +02:00
Aleksana
f1580efb3b
maintainers/team-list: add cyberus team ( #331059 )
2024-09-16 18:14:16 +08:00
NotAShelf
b4878419ee
nixos/wakapi: add database options; gate db creation behind database.createLocally
...
Currently the NixOS module for Wakapi will create the database
automagically if the user has database dialect configured in the Wakapi
configuration file. By all means, this is undocumented behaviour and an
anti-feature.
This MR adds a database.createLocally option that allows the end-user to
create auto-creation behaviour, and lays out groundwork for automated
database setups for different database dialects supported by Wakapi.
2024-09-16 12:50:01 +03:00
kirillrdy
51b7b3bddf
flarum: fix installation and migration logic ( #341340 )
2024-09-16 16:58:19 +10:00
Albert Safin
afb0b0ee58
nixos/collabora-online: init
2024-09-14 21:24:30 +00:00
tmarkov
b44fdbfc11
nixos/windmill: add database.url option and defaults
2024-09-14 00:36:55 +03:00
Gaétan Lepage
d4474ed33b
nixos/invidious: add options for configuring inv-sig-helper ( #340748 )
2024-09-12 14:57:57 +02:00
Florian Agbuya
317a52a757
flarum: fix installation and migration logic
2024-09-12 16:14:41 +08:00
⛧-440729 [sophie]
81b0701a4d
nixos/invidious: add options for configuring inv-sig-helper
2024-09-12 09:08:02 +02:00
Emily
1a55636200
nixos/dokuwiki: don’t use lib.escapeShellArg ( #340309 )
2024-09-11 00:34:05 +01:00
Jean-Baptiste Giraudeau
3a33b6c3a8
nixos/gancio: set default value for settings.baseurl
2024-09-10 13:13:32 +02:00
Jean-Baptiste Giraudeau
432bfec026
nixos/gancio: use unix socket between nginx and gancio
2024-09-10 13:13:28 +02:00
Jean-Baptiste Giraudeau
58ec286785
nixos/gancio: actually enable ssl by default.
2024-09-09 15:48:52 +02:00
Kerstin
e248589c0f
gancio: init at 1.19.0 ( #279011 )
2024-09-08 22:51:23 +02:00
Jean-Baptiste Giraudeau
f5e44554c4
nixos/gancio: init module
2024-09-08 18:09:57 +02:00
ash
2bab9e4eba
nixos/dokuwiki: factor out toPhpString
2024-09-07 15:30:54 +01:00
ash
345c8a7310
nixos/dokuwiki: don’t use lib.escapeShellArg
...
PHP strings don't obey shell quoting rules. See #333744 .
2024-09-07 14:39:07 +01:00
kirillrdy
5f4c0543d2
Flarum: fix installation and client interface issues ( #339202 )
2024-09-07 06:32:54 +10:00
Bjørn Forsman
4861c28956
homebox: update URLs in documentation
...
https://github.com/hay-kot/homebox was archived on 2024-06-12 and we use
the https://github.com/sysadminsmedia/homebox fork since the beginning,
in commit 4be8e799db
("homebox: init at 0.13.0").
Update the documentation to be in sync with the source we build from.
2024-09-06 19:34:15 +02:00
Kerstin Humm
21ac7729ae
nixos/weblate: add borgbackup to path
2024-09-04 12:54:31 +02:00
Florian Agbuya
1032b5fa95
flarum: disable automatic DB creation
2024-09-04 16:33:30 +08:00
Florian Agbuya
249dacfaa8
flarum: fix flarum directory permissions
2024-09-04 16:33:18 +08:00
Bernardo Meurer
fc13b0acdb
Merge branch 'master' into add-rutorrent-service
2024-09-03 01:18:16 +00:00
Finn Behrens
55e7c6155a
nixos/moodle: update to php83
2024-09-02 20:04:33 +02:00
Sandro
58ac9a4a4e
nixos/mediawiki: add resetUserEmail script ( #332325 )
2024-08-29 16:04:54 +02:00
Sandro
b5e4bf3745
kasmweb: 1.12.0 -> 1.15.0 ( #246777 )
2024-08-29 13:03:51 +02:00
Christina Sørensen
a96a49338e
nixos/wakapi: init module ( #335436 )
2024-08-28 18:58:13 +02:00
Fernando Ayats
b21bec17eb
nixos/freshrss: improve description for virtualHost
2024-08-28 10:25:10 +02:00
Sandro
7f9873b3b9
nixos/stirling-pdf: make calibre dependency optional based on config ( #337060 )
2024-08-28 09:53:33 +02:00
Savyasachee Jha
3ce5da914b
nixos/firefly-iii-data-importer: init
2024-08-28 08:29:32 +02:00
DCsunset
b94de95f9d
nixos/stirling-pdf: make calibre dependency optional based on config
2024-08-26 01:47:17 +00:00
Franz Pletz
a266f38ade
Merge pull request #336584 from mweinelt/engelsystem-cache-migration
2024-08-25 01:50:39 +02:00
Peder Bergebakken Sundt
d38f701636
Merge pull request #334559 from litchipi/ifm_fixup
...
ifm-web: init at 4.0.2
2024-08-24 01:07:30 +02:00
Martin Weinelt
760b2b5562
nixos/engelsystem: refactor option setup
2024-08-22 19:50:17 +02:00
Martin Weinelt
fe0d323af5
nixos/engelsystem: prune template cache on version changes
...
After upgrading to 3.5.0 we noticed, that registering would redirect to
the login page and not work at all. At the same time the admin user was
unable to access its user settings.
This issue could be tracked back to the template cache, that must be
invalidated between release upgrades.
2024-08-22 19:16:28 +02:00
Emily
01a749e0bf
Merge pull request #336077 from emilazy/push-yoykzrxwpykp
...
pict-rs_0_3: drop
2024-08-22 14:58:04 +01:00
Sandro
18fb834638
Merge pull request #322730 from bbenno/update-wp-httpd-htaccess
2024-08-22 14:33:17 +02:00
Sandro
a45dc99ba3
Merge pull request #287565 from RatCornu/pingvin-share
2024-08-22 11:59:03 +02:00
Emily
afdee7e458
pict-rs_0_3: drop
...
This was broken by the Rust 1.80 upgrade, and is an old version that
we’d have to patch to keep working.
We have already done the 0.4 → 0.5 update without keeping around
the old version or adding in any additional `stateVersion` logic
in <https://github.com/NixOS/nixpkgs/pull/280221 >. As a result,
migration for 0.3 users is going to be a little awkward. I’ve done
my best to provide comprehensive instructions for anyone who hasn’t
already bumped to 0.4.
It is probably a footgun to add `stateVersion` logic for any
package that makes backwards‐incompatible schema changes and only
supports migration from the immediately previous version. Users
won’t get migrated by default and we have to either package and
maintain an endlessly growing list of old versions or add complicated
instructions like this. It’s not really practical for us to support
a significantly better migration story than upstream does.
2024-08-22 01:54:09 +01:00
Emily
1a35d0ccb5
nixos/pict-rs: fix environment variable name
...
Thanks to @marius851000 for reporting this issue. I assume it probably
changed in 0.5 or something.
2024-08-21 23:09:55 +01:00
s1341
5c1ed3ad5a
kasmweb: 1.12.0 -> 1.15.0
2024-08-21 15:06:02 +03:00
Litchi Pi
ef03964b92
ifm-web: init at 4.0.2
...
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-08-20 10:42:02 +02:00
Kerstin
f0ceb9f402
Merge pull request #335768 from erictapen/mastodon
...
nixos/mastodon: remove pin for postgresql version
2024-08-19 23:11:53 +02:00
isabel
f3c2be2a80
nixos/wakapi: init module
2024-08-19 17:16:01 +01:00
Kerstin Humm
f5bb4b807c
weblate: 5.6.2 -> 5.7
...
Changelog: https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.7
Also had to rework django-compressor settings and aligned them more
closely with the official docs:
https://cheat.readthedocs.io/en/latest/django/compressor.html
2024-08-19 16:10:40 +02:00
Kerstin Humm
1592790b03
nixos/mastodon: use correct postgresql package
2024-08-19 11:06:57 +02:00
Sandro
69701a3807
Merge pull request #320060 from PatrickDaG/homebox
...
homebox: init at 0.13.0; nixos/homebox: init
2024-08-18 16:32:43 +02:00
Nick Cao
12f650234b
Merge pull request #334257 from Dan-Theriault/miniflux-no-admin-required
...
nixos/miniflux: make admin provisioning optional
2024-08-13 21:54:34 -04:00
Dan Theriault
f6788b6165
nixos/miniflux: make admin provisioning optional
...
Miniflux supports provisioning users via SSO, which renders admin
accounts unnecessary for some use-cases. This change retains the
existing default, but makes it easier to disable admin provisioning.
2024-08-13 18:56:16 -04:00
Kerstin Humm
13c96978c3
nixos/weblate: init module and test
...
Co-authored-by: Taeer Bar-Yam <Radvendii@users.noreply.github.com>
2024-08-13 08:44:54 +02:00
Litchi Pi
0ec7dd5011
fix: replace relative paths in sources with nix store paths
...
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-08-10 16:23:27 +02:00
Eduard Bachmakov
cb10fe8aaf
treewide: Remove ineffective capability grants.
...
Systemd units with `PrivateUsers` set get their capabilities within the user namespace only [1].
As a result they do cannot bind to privileged ports even though they *appear* like they should be able to.
The units in this commit [2] set `PrivateUsers` unconditionally so binding to privileged ports is currently impossible.
Granting them CAP_NET_BIND_SERVICE is useless and misleading any reader of those modules.
Technically, this commit also hardens these modules ever so slightly.
(There are corner cases where this could make sense (e.g. across units, using `JoinsNamspaceOf`) but this is arcane enough to not to be present in nixpkgs.)
[1]: systemd.exec(5): PrivateUsers
[2]: found using `rg -e 'PrivateUsers.?=\s+[^f][^a]' -l | xargs rg -e '\bCAP_' -l`
2024-08-09 23:10:30 +02:00
Patrick
f8639ea08d
nixos/homebox: init
2024-08-08 20:01:46 +02:00
Fea
0c9cb0041b
nixos/misskey: init
2024-08-06 12:24:15 +02:00
Anna Aurora
dfd120537d
nixos/meme-bingo-web: fixed documentation, service description and did further hardening
2024-08-06 03:14:22 +02:00
Martin Weinelt
3dfb2c685a
nixos/pretix: restart web and worker unit on failure
...
Found a few instances, where celery intermittently complained about a
misconfigured redis instance and exited.
> redis.exceptions.ResponseError: MISCONF Redis is configured to save RDB
> snapshots, but it's currently unable to persist to disk. Commands that
> may modify the data set are disabled, because this instance is
> configured to report errors during writes if RDB snapshotting fails
> (stop-writes-on-bgsave-error option). Please check the Redis logs for
> details about the RDB error.
2024-08-05 17:37:12 +02:00
Sandro Jäckel
4ae7723c9b
nixos/mediawiki: add resetUserEmail script
2024-08-04 22:03:59 +02:00
Martin Weinelt
3a719e06c7
nixos/mediawiki: move to php 8.2
...
There is breakage on PHP 8.1 since the last staging cycle.
2024-08-04 18:51:41 +02:00
Johannes Jöns
79723dbb2a
Merge pull request #331358 from pinpox/init-screego-module
...
nixos/screego: init module
2024-08-04 18:34:51 +02:00
RatCornu
924437f5de
nixos/pingvin-share: init at 0.29.0
2024-08-04 01:18:03 +02:00
Weijia Wang
ec581817ca
nixos/wordpress: unpin php81 in check phase
2024-08-03 20:24:27 +02:00
Sandro
377e40297c
Merge pull request #330046 from DCsunset/stirling-pdf-module-init
...
nixos/stirling-pdf: init module
2024-08-03 18:22:02 +02:00
Guanran Wang
ea6f4d5e86
treewide: remove periods from lib.mkEnableOption
...
Co-authored-by: éclairevoyant <848000+eclairevoyant@users.noreply.github.com>
2024-08-02 23:55:32 +08:00
Felix Bühler
04101568c0
Merge pull request #325644 from Stunkymonkey/sogo-chmod-install
...
nixos/sogo: prefer 'install' over 'chmod'/'chown'
2024-08-01 23:25:37 +02:00
Martin Weinelt
7b07f5371f
Merge pull request #331406 from mweinelt/pretix-2024.7.0
...
pretix: 2024.6.0 -> 2024.7.0
2024-08-01 13:04:29 +02:00
lassulus
35ac2fed3e
Merge pull request #330946 from toastal/movim-0.26
...
movim: 0.25.1 → 0.26
2024-08-01 11:39:13 +02:00
Pablo Ovelleiro Corral
c882d9b673
nixos/screego: init module
...
Add module for screego
2024-08-01 10:51:38 +02:00
Martin Weinelt
4ba537131f
nixos/pretix: increases startup timeout
...
Migrations on a busy machine can exceed 5 minutes, which I can reproduce
on a busy builder.
2024-08-01 04:37:20 +02:00
toastal
936a378123
movim service: updates for 0.26
2024-07-31 14:12:14 +07:00
DCsunset
0c2918fc91
nixos/gotify-server: add environment and environmentFiles options
2024-07-30 17:38:00 -04:00
DCsunset
e1ced8b12c
nixos/gotify-server: add package option
2024-07-30 17:32:01 -04:00
DCsunset
b5a051f694
nixos/gotify-server: add maintainer
2024-07-30 17:29:55 -04:00
DCsunset
2079eeb882
nixos/gotify-server: clean up and reformat module
2024-07-30 17:28:54 -04:00
Alexander Sieg
20b3a5458d
nixos/outline: add cyberus team as maintainer
2024-07-30 12:37:45 +02:00
DCsunset
05113f61f0
nixos/stirling-pdf: init module
2024-07-26 18:12:50 -04:00
K900
26801aa449
Merge remote-tracking branch 'origin/master' into staging-next
2024-07-26 14:31:21 +03:00
Pol Dellaiera
ceda66b310
Merge pull request #251687 from martinetd/cryptpad
...
nixos/cryptpad: init, cryptpad: init at 2024.6.0
2024-07-26 09:21:51 +02:00
K900
1410c766c8
Merge remote-tracking branch 'origin/master' into staging-next
2024-07-26 08:41:08 +03:00
Jörg Thalheim
0fbc43eaea
Merge pull request #323641 from XenGi/fix-freshrss
...
nixos/freshrss: add ability to use socket path
2024-07-26 00:20:49 +02:00
github-actions[bot]
7208220b63
Merge master into staging-next
2024-07-24 18:01:18 +00:00
Dominique Martinet
7c448e8d44
nixos/cryptpad: harden service
...
cryptpad is not directly exposed to the network, but has plenty that can
be hardened more properly, so fix that.
2024-07-24 16:17:32 +09:00
Dominique Martinet
b846e8762f
nixos/cryptpad: init
...
This is a full rewrite independent of the previously removed cryptpad
module, managing cryptpad's config in RFC0042 along with a shiny test.
Upstream cryptpad provides two nginx configs, with many optimizations
and complex settings; this uses the easier variant for now but
improvements (e.g. serving blocks and js files directly through nginx)
should be possible with a bit of work and care about http headers.
the /checkup page of cryptpad passes all tests except HSTS, we don't
seem to have any nginx config with HSTS enabled in nixpkgs so leave this
as is for now.
Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com>
Co-authored-by: Michael Smith <shmitty@protonmail.com>
2024-07-24 16:17:26 +09:00
Payas Relekar
aebb3d3474
nixos/goatcounter: init
2024-07-24 10:17:44 +05:30
github-actions[bot]
d284ef371e
Merge master into staging-next
2024-07-23 12:01:18 +00:00
Litchi Pi
0fb7268b9b
Init IFM service at version 4.0.2
...
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-07-23 08:44:50 +02:00
bolives-hax
9319cf87b8
Merge branch 'NixOS:master' into add-rutorrent-service
2024-07-22 01:37:39 +02:00
bl0v3
7c1315628b
fix exposeInsecureRPC2mount rtorrent group
2024-07-22 01:11:07 +02:00
Martin Weinelt
983077457f
Merge remote-tracking branch 'origin/staging-next' into staging
...
Conflicts:
- pkgs/development/python-modules/uvcclient/default.nix
- pkgs/development/tools/rust/rust-analyzer/default.nix
2024-07-18 12:35:33 +02:00
Aaron Andersen
2e930eafb9
Merge pull request #318285 from gador/nixos-zabbixWeb-nginx
...
nixos/zabbixWeb: Add nginx as webserver, add zabbix 6.4
2024-07-17 21:22:13 -04:00
Florian Brandes
7d3b77d66f
nixos/zabbixWeb: format
...
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-17 22:33:47 +02:00
Florian Brandes
9ca5b84e27
nixos/zabbixWeb: add nginx config
...
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-17 22:31:50 +02:00
Emily
aef28c7834
nixos/akkoma: unpin ffmpeg_5
...
Their Dockerfile uses Alpine’s ffmpeg package, which is already
on 6. They just invoke the command‐line tool and nothing they do
looks particularly version‐sensitive.
2024-07-14 08:34:23 +01:00
Masum Reza
025f6d60e3
Merge pull request #326047 from britter/britter/onlyoffice-typos
...
onlyoffice: typo fixes, remove top level `with lib;`
2024-07-10 15:01:05 +05:30
Benedikt Ritter
57ea5be929
onlyoffice: Remove top-level with lib;
...
Prepend affected components with `lib.` instead.
2024-07-10 10:42:29 +02:00
lassulus
11dbf85aad
Merge pull request #325637 from Stunkymonkey/jtisi-meet-chmod-chown
...
nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown'
2024-07-10 09:57:18 +02:00
Benedikt Ritter
d61489db1a
onlyoffice: Fix typos
2024-07-10 09:14:21 +02:00
Pol Dellaiera
db41081a91
Merge pull request #323743 from NixOS/nixos/module/glance-init
...
nixos/glance: init module
2024-07-09 06:42:22 +02:00
Felix Buehler
87051a8f44
nixos/sogo: prefer 'install' over 'chmod'/'chown'
2024-07-08 22:41:47 +02:00
Felix Buehler
16eb9ced4e
nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown'
2024-07-08 22:10:25 +02:00
Pol Dellaiera
00e9e54702
nixos/glance: init module
2024-07-08 13:14:09 +02:00
Sandro
b2a1b6f508
Merge pull request #324924 from SuperSandro2000/mediawiki-syntaxcheck
...
nixos/mediawiki: check if LocalConfig.php is valid syntax
2024-07-07 15:17:08 +02:00
Sandro Jäckel
313d2ccf83
nixos/mediawiki: check if LocalConfig.php is valid syntax
2024-07-06 02:06:50 +02:00
Maximilian Bosch
a9855af287
Merge pull request #321771 from Mynacol/nextcloud-preserveenv
...
nixos/nextcloud: Remove --preserve-env in sudo
2024-07-05 21:24:50 +00:00
Jonas Heinrich
e97d5eb3eb
Merge pull request #293210 from onny/eintopf
...
nixos/eintopf: init; eintopf: init at 0.13.16
2024-07-05 13:12:59 +02:00
Jonas Heinrich
28512d1ba4
nixos/eintopf: init
2024-07-05 13:12:35 +02:00
Weijia Wang
9c1cfad9a0
Merge pull request #307910 from r-ryantm/auto-update/pixelfed
...
pixelfed: 0.11.13 -> 0.12.1
2024-07-03 00:55:55 +02:00
Mynacol
af072cfb55
nixos/nextcloud: Remove --preserve-env in sudo
...
This helps supporting sudo-rs, which currently does not implement the
--preserve-env flag and probably won't so in the foreseeable future [1].
The replacement just sets both environment variables behind the sudo
invocation with env, as sudo-rs also doesn't implement env var lists.
The OC_PASS variable is dropped, as it is seemingly unused and would
leak through this approach through /proc.
[1] https://github.com/memorysafety/sudo-rs/issues/129
2024-07-02 11:29:35 +02:00
Felix Buehler
bb33682f3a
nixos/freshrss: add extensions
2024-07-01 23:38:56 +02:00
Maximilian Bosch
c2586ca239
nixos/nextcloud: warn about unsafe path transitions
...
Closes #294588
It _may_ also be an answer to #169733 .
See explanation from upstream[1] for further details.
[1] https://github.com/systemd/systemd/issues/19618#issuecomment-843273818
2024-07-01 21:20:12 +02:00
Ricardo Band
96c60c6b09
nixos/freshrss: add ability to use socket path
...
This change enables server:port combinations like "localhost:5432" but
also socket paths like "/run/postgresql". Without this change a port was
mendatory and attached to the path (/run/postgresql:5432) resulting in
an incorrect socket path. The underlying script already configures paths
correctly, so this small change should be enough.
2024-06-30 20:31:37 +02:00
Jörg Thalheim
d6cf181343
nixos/shiori: fix databaseUrl example
2024-06-30 13:41:38 +02:00
Jörg Thalheim
84a8354c58
nixos/shiori: fix BindPaths conditions if databaseUrl is not set
2024-06-30 13:06:11 +02:00
Jörg Thalheim
992f8bf968
nixos/shiori: fix nixos types for paths
2024-06-30 13:06:11 +02:00
Danilo Reyes
4f021e14a3
shiori: 1.5.5 -> 1.7.0
2024-06-29 15:30:22 -06:00
Kim Lindberger
b75986fd26
Merge pull request #310642 from arcnmx/keycloak-hostname-strict
...
nixos/keycloak: relax hostname settings assertion
2024-06-29 17:09:02 +02:00
Thomas Gerbet
85be596266
Merge pull request #322585 from wegank/limesurvey-security
...
nixos/limesurvey: drop default encryption key and nonce
2024-06-28 23:43:24 +02:00
Masum Reza
383744754e
Merge pull request #314798 from yomaq/healthchecks-settingsFile
...
nixos/healthchecks: add settingsFile option
2024-06-29 00:02:35 +05:30
Masum Reza
8808f7d7fc
Merge pull request #278982 from felbinger/master
...
python311Packages.mozilla-django-oidc: init at 4.0.1; peering-manager: add oidc support
2024-06-28 23:49:34 +05:30
Weijia Wang
daa81ecb2e
nixos/limesurvey: drop default encryption key and nonce
...
Co-authored-by: Thomas Gerbet <thomas@gerbet.me>
2024-06-28 00:34:00 +02:00
Silvan Mosberger
c8dec6df38
Merge pull request #322801 from eclairevoyant/discourage-mkpackageoptionmd
...
lib: deprecate mkPackageOptionMD
2024-06-27 20:15:08 +02:00
Jonas Heinrich
77e7768849
Merge pull request #322397 from Ma27/bump-nextcloud
...
nextcloud: drop 27, 28.0.6 -> 28.0.7, 29.0.2 -> 29.0.3
2024-06-27 14:09:29 +02:00
éclairevoyant
aeee4fc133
treewide: replace mkPackageOptionMD with mkPackageOption
2024-06-26 23:05:42 -04:00
Benno Bielmeier
f99e50320e
nixos/wordpress: update .htaccess for httpd
...
Update standard wordpress .htaccess content if using httpd
according to [1] (as of 2024-06-26)
[1]: https://developer.wordpress.org/advanced-administration/server/web-server/httpd/
2024-06-26 22:23:29 +02:00
Nico Felbinger
c4d2c90da0
nixos/peering-manager: add oidc support
...
Co-authored-by: Jenny <me@netali.de>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-26 07:45:18 +02:00
Sandro
33f83c6252
Merge pull request #316977 from eclairevoyant/fix-mkEnableOption
...
treewide: fix mkEnableOption usage
2024-06-25 22:42:16 +02:00
Maximilian Bosch
60657a4591
nextcloud27: remove
...
Version will be EOL by the end of 2024-06.
2024-06-25 14:08:15 +02:00
bl0v3
9abeee7aab
fixed doc
2024-06-25 01:17:47 +02:00
bolives-hax
50d6aae3fe
Merge branch 'NixOS:master' into add-rutorrent-service
2024-06-25 00:04:28 +02:00
arcnmx
a910bc8146
nixos/keycloak: relax hostname settings assertion
...
The `hostname-strict` setting enables dynamic hostname resolution.
2024-06-23 19:36:36 -07:00
Maximilian Bosch
2ac989c06f
Merge pull request #321931 from Ma27/occ-improvements
...
nixos/nextcloud: occ improvements
2024-06-23 17:42:42 +00:00
Maximilian Bosch
a71e967ef3
Merge pull request #320983 from Ma27/nc-dbtableprefix
...
nixos/nextcloud: deprecate dbtableprefix
2024-06-22 16:54:41 +00:00
Maximilian Bosch
50d5306e7c
nixos/nextcloud: use dedicated memory limit for the entire CLI
...
Originally, I wanted to execute `nextcloud-occ` with a higher memory
limit because I needed to trigger an expensive operation by hand,
regenerating a bunch of previews.
While doing so, I realized how painful it is to put an invocation of
nextcloud-occ together for that, especially when you need to put it
into another systemd unit in Nix code.
That's why I decided to use the memory limit now for every
CLI invocation just in case. The stuff you do in those units (e.g.
running background jobs) is something you can also do by hand with
`nextcloud-occ` and you'll most likely want to have the same memory
limit there.
2024-06-22 18:39:08 +02:00
Maximilian Bosch
ab9b8f8cf4
nixos/nextcloud: services.nextcloud.occ is not internal
...
This option is actually useful when having a systemd unit invoking
`nextcloud-occ`, then you want to do something like
path = [ config.services.nextcloud.occ ]
This is possible today, but not documented (and the option completion
from nil doesn't pick it up as a result).
2024-06-22 18:38:04 +02:00
Nick Cao
d10d0fc423
nixos/keycloak: update options for release 25.0.0
...
Reference: https://www.keycloak.org/docs/25.0.0/upgrading/
2024-06-22 10:23:09 -04:00
Ruby Iris Juric
088b397516
nixos/zitadel: Drop Sorixelle as maintainer
2024-06-21 16:11:10 +02:00
Thomas Gerbet
88130cec79
Merge pull request #321097 from PatrickDaG/firefly-6.1.18
...
firefly-iii: 6.1.17 -> 6.1.18
2024-06-20 23:03:48 +02:00
Patrick
6154279455
nixos/firefly-iii: enhance provisioning service
2024-06-20 12:16:48 +02:00
Pyrox
d94a39f87d
mealie: 1.7.0 -> 1.9.0
...
Also fix a small issue with the module not casting the port number
to a string
2024-06-19 20:48:39 -04:00
Maximilian Bosch
45d2b8b536
nixos/nextcloud: deprecated dbtableprefix
...
Closes #320381
Installation with a custom dbtableprefix is not allowed anymore for a
while[1] and we shouldn't advertise it as such.
The option is deprecated for now since I'm not sure if there are some
weird corner-cases where removing the option directly would break
existing installations from before <20 with a custom dbtableprefix. The
migration-path for such a case is as follows:
* Check if /var/lib/nextcloud/config/config.php has the correct
dbtableprefix set and if not, take care of it.
* Remove `dbtableprefix` from the NixOS configuration. It's effectively
state anyways.
After a bit of time to switch (perhaps after the next release
branchoff), the option can be removed.
[1] https://github.com/nextcloud/server/issues/24836
2024-06-19 11:43:33 +02:00
Aria
83b00c3637
akkoma: remove maintainer tcmal ( #320858 )
2024-06-18 22:33:38 +02:00
Sandro
07f7e6653b
Merge pull request #320593 from onny/invoiceplane-fix
...
nixos/invoiceplane: Ensure patching index.php
2024-06-18 13:33:06 +02:00
Jonas Heinrich
2a8ccf6144
nixos/invoiceplane: Ensure patching index.php
2024-06-17 20:48:21 +02:00
Martin Weinelt
decdb5e848
Merge pull request #317814 from Eisfunke/fix-pretix-celery-default-text
...
nixos/pretix: fix defaultText for celery options
2024-06-17 20:39:10 +02:00
Felix Bühler
ec48be343d
Merge pull request #320351 from Stunkymonkey/freshrss-enable-doc-improve
...
nixos/freshrss: add description about php-fpm
2024-06-16 23:30:26 +02:00
Pol Dellaiera
2754a6f4a8
Merge pull request #319456 from redxtech/fix-nextjs-ollama-llm-ui
...
nixos/nextjs-ollama-llm-ui: fix for respecting ollamaUrl config option
2024-06-16 22:46:43 +02:00
Felix Buehler
e9d13cc80e
nixos/freshrss: add description about php-fpm
2024-06-16 22:14:12 +02:00
Kai Norman Clasen
14b558e094
nixos/firefly-iii: change statedirectory
...
Set `StateDirectory=firefly-iii` instead of trying to derive it from
`dataDir` + add `dataDir` to `ReadWritePaths`, allowing `dataDir` to be
set to full paths outside of `/var/lib`.
2024-06-14 22:29:09 +02:00
éclairevoyant
7d8742da87
treewide: fix mkEnableOption usage
2024-06-14 02:41:42 -04:00
Gabe Dunn
8b182a177f
nixos/nextjs-ollama-llm-ui: fix for respecting ollamaUrl config option
2024-06-12 21:24:29 -06:00
Felix Buehler
edcdf6ad3b
nixos/freshrss: fix reload when config changes
2024-06-10 22:16:20 +02:00
James Atkins
7f78cd20fd
nixos/changedetection-io: fix creation of data dir
...
Create data directory using tmpfiles if it is not in the standard location.
Do not run mkdir manually.
2024-06-09 18:28:22 -05:00
Markus Kowalewski
b98e90213d
Merge pull request #317035 from ck3d/fix-node-red-path
...
nixos/node-red: fix passthru of PATH
2024-06-09 20:13:58 +00:00
Nicolas Lenz
0b8fdfd917
nixos/pretix: fix defaultText for celery options
2024-06-06 21:37:14 +02:00
Maximilian Bosch
7e2210236e
Merge pull request #316004 from Ma27/nc-memlimit
...
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
2024-06-04 19:18:03 +00:00
Christian Kögler
966d214719
nixos/node-red: fix passthru of PATH
2024-06-03 23:23:38 +02:00
yomaq
3f0bd8ab85
nixos/healthchecks: add settingsFile option
...
Single unified env file read by systemd
2024-06-03 08:56:52 -05:00
Robin Hack
04c973335e
filesender: FIX: missing format definition.
...
Seems like there is missing format definition in example.
Affected line:
default = format.lib.mkMixedArray [ "exampleauth:UserPass" ] {
2024-06-03 15:37:37 +02:00
Sandro Jäckel
41452802cb
treewide: fix all obviously wrong mkEnableOptions
2024-06-03 13:20:32 +02:00
Eric Wolf
7c0937d668
nixos/nextcloud-notify_push: use Type=notify
...
This prevents the post start script from running
before necessary sockets have been created.
It also prevents an unused shell from being kept around
by using `exec` to make `notify_push` the main process.
2024-06-02 23:19:07 +02:00
Thomas Gerbet
e12faccb31
Merge pull request #313794 from tcmal/akkoma-3.13.2
...
akkoma: 3.13.1 -> 3.13.2
2024-06-02 12:57:31 +02:00
Weijia Wang
b966c334d7
nixos/pixelfed: default to php82
2024-06-02 00:16:19 +02:00
Peder Bergebakken Sundt
080af6461e
Merge pull request #314294 from james-atkins/mealie-update
...
mealie: 1.2.0 -> 1.7.0
2024-05-31 20:41:37 +02:00
Yt
6606ce9c0c
Merge pull request #273101 from onny/invoiceplane-settings2
...
nixos/invoiceplane: Remove deprecated extraConfig
2024-05-31 00:04:34 +00:00
Maximilian Bosch
dddd08d188
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
...
The memory limit is equal to what's configured in php-fpm. Given that we
run in a different environment, it seems reasonable to allow different
memory contraints here.
2024-05-30 23:38:55 +02:00
Jennifer Graul
e8885abab9
nixos/sftpgo: add extraReadWriteDirs option
2024-05-29 14:35:25 +02:00
Jennifer Graul
3a66bd1dc7
nixos/sftpgo: change type of dataDir option to path
...
The dataDir options describes a path, so it should be an option of type
path.
2024-05-29 14:32:57 +02:00
Jennifer Graul
736d58b90e
nixos/sftpgo: fix upstream docs links
2024-05-29 14:29:13 +02:00
Izorkin
8730a7e8d8
nixos/mastodon: optimize systemd startup order block
2024-05-29 13:45:23 +03:00
Izorkin
a05afb1437
nixos/mastodon: update redis host and port configurations
2024-05-29 13:45:17 +03:00
tcmal
7952d92b82
nixos/akkoma: dont disable protectsystem in confinement mode
...
this works fine since #289593
2024-05-28 15:47:03 +01:00
tcmal
a247fc94b4
nixos/akkoma: deal with $RUNTIME_DIRECTORY containing multiple entries
...
this fixes issues with confined module tests.
see https://github.com/NixOS/nixpkgs/pull/313794#issuecomment-2126909110
2024-05-28 15:47:03 +01:00
Jonas Heinrich
4217b9cd9a
nixos/invoiceplane: Remove deprecated extraConfig
2024-05-28 14:07:44 +02:00
Pol Dellaiera
d091b7f681
Merge pull request #313112 from savyajha/firefly-iii
...
firefly-iii: 6.1.15 -> 6.1.16
2024-05-25 10:41:44 +02:00
Andrew Morgan
fad7ecc30f
mealie: set the correct port in BASE_URL
...
Otherwise it would default to port 8080, which breaks generated links
when `cfg.port` is set to another port.
2024-05-24 09:17:47 -05:00
James Atkins
bcaf6de467
mealie: 1.2.0 -> 1.7.0
...
https://github.com/mealie-recipes/mealie/releases/tag/v1.7.0
2024-05-24 09:17:42 -05:00
Malte Neuss
8a05b4f8d4
nixos/nextjs-ollama-llm-ui: init module
...
NixOS already has good support for the Ollama
backend service. Now we can benefit from
having a convenient web frontend as well for it.
2024-05-23 23:48:55 +02:00
nhnn
3d47565193
nixos/filesender: init module
2024-05-22 08:37:48 +03:00
Pol Dellaiera
4bb2fe0d38
Merge pull request #312251 from thenhnn/filesender-packaging-simplesamlphp-module
...
nixos/simplesamlphp: init
2024-05-21 17:12:11 +02:00
nhnn
3e14c44e21
nixos/simplesamlphp: init module
2024-05-21 11:47:39 +03:00
Savyasachee Jha
eee8b0bff3
nixos/firefly-iii: Changes to module and tests
...
Module has been fixed and now uses the maintenance service to cache
settings so as to not require environment files wherever possible.
The tests now test using mariadb and postgresql as well as sqlite to be
more complete. A test has been added for testing whether app.js has been
compiled successfully, as well as to check whether the cronjob fires
successfully.
2024-05-20 17:51:35 +05:30
Pol Dellaiera
a041ac59a9
Merge pull request #311608 from fsagbuya/flarum
...
flarum: init at 1.8.1, module
2024-05-20 09:19:31 +02:00
Florian Agbuya
7ad171b5ad
nixos/flarum: init module
2024-05-20 11:20:07 +08:00
Sandro
52f4cce004
Merge pull request #308423 from Moraxyc/add-artalk
...
artalk: init at 2.8.6
2024-05-19 18:06:08 +02:00
Sandro
5497cebc92
Merge pull request #304257 from Raroh73/add/commafeed
...
commafeed: init at 4.3.3
2024-05-19 17:44:06 +02:00
Moraxyc
da28a5ff2a
nixos/artalk: init module
2024-05-18 02:15:33 +08:00
Pol Dellaiera
3da72dcbc5
Merge pull request #312249 from dotlambda/nextcloud
...
nixos/nextcloud: correct latest version
2024-05-16 22:27:52 +02:00
Robert Schütz
dce84c46d7
nixos/nextcloud: correct latest version
2024-05-16 08:53:01 -07:00
Jade Lovelace
f05ecf16e6
Merge pull request #250638 from benley/keycloak-systemd-notify
...
nixos/keycloak: Add systemd startup notification
2024-05-15 14:13:20 -07:00
Martin Weinelt
10955966a5
Merge pull request #311916 from wegank/pretalx-plugins-init
...
pretalx: add a few plugins
2024-05-15 21:41:03 +02:00
Martin Weinelt
f4f9f96037
nixos/pretalx: add plugins option
...
Allow loading pretalx plugins in a declarative manner. They are passed
into the package dependencies at build time, so that collectstatic and
other django maintenance functions account for them, since we cannot
regenerate assets at runtime anyway.
2024-05-15 16:24:24 +02:00
Benjamin Staffin
64c94bd40a
nixos/keycloak: Add systemd startup notification
...
This makes it possible for other systemd units to depend on
keycloak.service using `after` and `wants` relationships, and systemd
will actually wait for Keycloak to finish its initialization before
starting any dependent units. This can be important for services like
oauth2-proxy, which (when configured to use Keycloak as its auth
provider) will fail to start until Keycloak's
`.well-known/openid-configuration` endpoint is available.
2024-05-14 14:26:35 -04:00
Patrick
77a6460e74
nixos/your_spotify: init
2024-05-13 22:10:13 +02:00
Martin Weinelt
9731a32d81
Merge pull request #309115 from NyCodeGHG/nixos/miniflux-sd-notify
...
nixos/miniflux: use systemd notify and watchdog
2024-05-13 10:12:37 +02:00
Martin Weinelt
622af635bb
pretalx: adopt and set up code ownership
2024-05-09 18:20:14 +02:00
Martin Weinelt
9afcf733f3
nixos/pretix: update hardening
...
- Transition from world-readable to group-readable UMask
- Remove world permissions from state directory
2024-05-09 18:20:14 +02:00
Martin Weinelt
82f2cc7489
nixos/pretalx: set up hardening
2024-05-09 18:20:13 +02:00
Martin Weinelt
b4b3165619
nixos/pretalx: fix state directory mode
...
The state directory contains static files that need to be accessible by
a webserver, but homeMode defaults to 0750 and switching the generation
will always force the homeMode, thereby breaking access to the assets.
Instead, fully rely on systemd to provide the StateDirectory with the
correct mode.
2024-05-09 18:20:13 +02:00
Martin Weinelt
a4193dba8f
nixos/pretix: fix state directory mode
...
The state directory contains static files that need to be accessible by
a webserver, but homeMode defaults to 0750 and switching the generation
will always force the homeMode, thereby breaking access to the assets.
Instead, fully rely on systemd to provide the StateDirectory with the
correct mode.
2024-05-09 17:00:02 +02:00
Jonas Heinrich
4a451cb3ce
Merge pull request #308291 from Ma27/nc-update-db
...
nixos/nextcloud: add nextcloud-update-db.service, nextcloud-cron isn't oneshot
2024-05-08 11:29:45 +02:00
Jakob Klepp
5afa8d15cb
plantuml-server: remove unnecessary systemd option path
...
@nh2 pointed out that adding `/var/lib/plantuml/bin` to `PATH` is odd
2024-05-07 19:16:29 +02:00
nikstur
951e023010
Merge pull request #309838 from cyberus-technology/take-plausible-maintainership
...
plausible: take take-plausible-maintainership
2024-05-07 18:34:24 +02:00
Leona Maroni
31be9134a2
Merge pull request #309836 from cyberus-technology/fix-nixos-plausible-unit
...
nixos/plausible: fix unit start script
2024-05-07 15:46:50 +02:00
Alexander Sieg
8edee82bc2
plausible: take take-plausible-maintainership
2024-05-07 15:35:22 +02:00
Alexander Sieg
3be1b16698
nixos/plausible: fix unit start script
...
In 8bb777ee37 a condition was added to
only execute the createdb.sh script if database setup was configurated.
However a superfluace " was added at the end of the line which cased an
escaping error the resulted in #309520 .
Fixes #309520
2024-05-07 15:27:08 +02:00
Maximilian Bosch
c7a1616be7
nixos/nextcloud: add trailing slashes to carddav/caldav redirect
...
This seems to solve the problem with the warning about carddav/caldav
redirects being broken.
2024-05-05 18:17:25 +02:00
Marie Ramlow
212c34f8c0
nixos/miniflux: use systemd notify and watchdog
...
Miniflux supports notifying systemd when it's ready.
It also supports the systemd watchdog, which will restart miniflux when it's stuck.
2024-05-05 14:47:05 +02:00
Jade Lovelace
f96f3c9e30
nixos/keycloak: pass --verbose to starting keycloak
...
This sets the exception handler to show the full exception on startup.
We don't think it does anything else, with respect to logging, for
instance. Everything else can be configured in the config file, and this
is plain reasonable to simply always enable in our view.
2024-05-04 17:43:38 -07:00
Aaron Andersen
efd518852d
Merge pull request #300090 from lytedev/300088
...
plausible: Do not run createdb.sh unless configured to setup the database
2024-05-04 18:41:49 +00:00
Daniel Flanagan
8bb777ee37
plausible: Do not run createdb.sh unless configured to setup the database
...
Closes #300088
2024-05-04 10:28:21 -05:00
Maximilian Bosch
5ef467d6f5
nixos/nextcloud: add nextcloud-update-db.service, nextcloud-cron isn't oneshot
...
This service performs operations that significantly increase the
performance of Nextcloud, can take a while. These are designed however
to not require maintenance mode and can be executed during normal
operation[1].
Make nextcloud-cron a simple unit instead of oneshot: otherwise we risk
that it'll be stopped by the startup timeout (oneshot executes ExecStart
while "activating") which can be an issue for very long running tasks or
if Nextcloud needs to catch up if one task was broken for a while.
[1] https://docs.nextcloud.com/server/29/admin_manual/maintenance/upgrade.html#long-running-migration-steps
2024-05-01 20:09:37 +02:00
Maximilian Bosch
7001f74335
Merge pull request #306595 from RaitoBezarius/nc29
...
nextcloud29: init at 29.0.0, nextcloud27: 27.1.8 -> 27.1.9, nextcloud28: 28.0.4 -> 28.0.5
2024-05-01 10:16:20 +00:00
Maximilian Bosch
28f4adfb79
nixos/nextcloud: document known warnings
2024-05-01 11:03:23 +02:00
Kyle Carberry
14679b13eb
nixos/coder: sync maintainers to coder package
2024-04-29 21:11:23 -04:00
Jörg Thalheim
368b2d71b4
Merge pull request #307130 from toastal/movim-no-parallel
...
movim: include authentication patch & remove parallel dependency
2024-04-29 09:34:08 +02:00
toastal
13852fc9ad
movim: remove parallel dependency
...
Currently there is an issue with $PATH & parallel causing build errors.
It’s probably best to just remove the dependency where bash forking is
good enough here.
2024-04-28 16:27:01 +07:00
Amelia Cuss
2e0b0c2707
nixos/akkoma: Don't warn if no installWrapper
...
Currently the installWrapper warning is issued if sudo (and sudo-rs)
aren't installed. This is fine, except we get the warning even if we
explicitly turn off installWrapper -- say, for this very reason!
Rather than warning on every build until either sudo is installed or
Akkoma is uninstalled, only warn if cfg.installWrapper is true.
2024-04-27 23:38:29 +10:00
Weijia Wang
c0e50ded28
Merge pull request #306046 from misuzu/maintainers
...
{gotosocial,castopod,swapspace,psi-plus,kmon}: remove misuzu from maintainers
2024-04-27 05:23:55 +02:00
Raroh73
3a0fa1e7aa
nixos/commafeed: init module
2024-04-26 17:19:33 +02:00