Commit graph

29387 commits

Author SHA1 Message Date
Lassulus 65f1d64303
Merge pull request #279923 from jopejoe1/sshfs
nixos/filesystems: set `system.fsPackages` for sshfs
2024-01-24 22:04:41 +01:00
Alyssa Ross 0a95fd24f0
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/libraries/libunwind/default.nix
2024-01-24 22:00:49 +01:00
r-vdp 28ea07d4e3
fwupd: 1.9.11 -> 1.9.12
The fwupd daemon refuses to start when there is an uefi_capsule key without any
values in the config file, so I modified the module to only include this
key when there are actually values that go inside.
2024-01-24 20:29:01 +01:00
github-actions[bot] d45e853c88
Merge master into staging-next 2024-01-24 12:01:06 +00:00
Vladimír Čunát 7f979aeb86
nixos/knot: allow specifying the clear section
It was added in 3.3.4.  I'm not sure if it will be useful with NixOS
services, but I added it in the usual way anyway.
2024-01-24 10:33:55 +01:00
a-n-n-a-l-e-e 18cc181b9b
Merge pull request #279511 from DanielSidhion/tigerbeetle-service
nixos/tigerbeetle: init module
2024-01-23 23:13:54 -08:00
github-actions[bot] bd24648ae1
Merge master into staging-next 2024-01-24 06:00:59 +00:00
Alex Martens c37de24b78 nixos/clevis: clairify secret creation 2024-01-23 20:46:52 -08:00
h7x4 f5d513c573
treewide: use new tmpfiles api 2024-01-24 05:13:17 +01:00
h7x4 e5f115b0d4
Merge pull request #283059 from Nanotwerp/patch-1
nixos/corectrl: add package option
2024-01-24 05:10:36 +01:00
github-actions[bot] 6a4e9dff73
Merge master into staging-next 2024-01-24 00:02:25 +00:00
Nanotwerp 6638cf69fe nixos/corectrl: add package option
Co-authored-by: Emily <git@emilylange.de>
2024-01-23 15:35:44 -05:00
github-actions[bot] 01a65d81f3
Merge master into staging-next 2024-01-23 18:00:56 +00:00
ppom 65544c693b
rustdesk-server: init module 2024-01-23 18:01:54 +01:00
Niklas Hambüchen aa6c8ae3a6
Merge pull request #253488 from nh2/install-grub-dont-stat-network-fs
install-grub.pl: Do stat() last to not hang on hanging network FS
2024-01-23 16:36:49 +01:00
Niklas Hambüchen b9ba9df3e8 install-grub.pl: Do stat() last to not hang on hanging network FS 2024-01-23 15:34:40 +00:00
Bjørn Forsman dadc54aabe nixos/installation-device: enable polkit
Polkit enables running 'reboot' and 'poweroff' in the installer without
being root, and non-root is the default login for a few NixOS releases
now.

There's no size increase in the minimal ISO:

  $ git checkout nixpkgs-unstable
  $ nix-build -A config.system.build.isoImage -I nixos-config=nixos/modules/installer/cd-dvd/installation-cd-minimal.nix nixos/default.nix && du -sc ./result/iso/*.iso
  /nix/store/bfvbvrrqjmnqqhyqyxc0w32gagdz2rya-nixos-24.05.git.1149dab64e7-x86_64-linux.iso
  998404  ./result/iso/nixos-24.05.git.1149dab64e7-x86_64-linux.iso
  998404  total

  $ git checkout THIS_COMMIT
  $ nix-build -A config.system.build.isoImage -I nixos-config=nixos/modules/installer/cd-dvd/installation-cd-minimal.nix nixos/default.nix && du -sc ./result/iso/*.iso
  /nix/store/l9x9rwlvfddnri70h1ifx865q0cvka5l-nixos-24.05.git.1149dab64e7-x86_64-linux.iso
  998404  ./result/iso/nixos-24.05.git.1149dab64e7-x86_64-linux.iso
  998404  total
2024-01-23 16:10:31 +01:00
Bruno BELANYI 70d0a6e547 nixos/pyload: init 2024-01-23 15:04:44 +00:00
Raito Bezarius 72e23635e6 nixos/mail/dovecot2: imapsieve.mailbox.*.causes is a list
Otherwise, it's not possible to pass `COPY,APPEND` properly.
2024-01-23 14:04:08 +01:00
Raito Bezarius caf9e51e0f nixos/mail/dovecot2: re-introduce extra settings and rename sieveScripts
https://github.com/NixOS/nixpkgs/pull/275031 introduced structured configuration
for the dovecot2 sieve plugin, by doing so, it broke SNM configuration doing Sieve configurations.

This attempts to fix up the public API to make it possible for SNM to pick up the pieces.
2024-01-23 14:04:08 +01:00
Kartik Gokte dde72e969e nixos/prometheus-pve-exporter: updated schema and options to v3.2.1 2024-01-23 11:19:37 +05:30
Brenton Simpson f571033ce0 handheld-daemon: use kebab-case instead of camelCase for service name 2024-01-22 19:26:43 -08:00
Brenton Simpson bcf9a24332 handheld-daemon: init at 0.2.7 2024-01-22 19:26:42 -08:00
github-actions[bot] 8303a96c2d
Merge master into staging-next 2024-01-23 00:02:30 +00:00
Peder Bergebakken Sundt 76e9a3eafc
Merge pull request #272147 from SuperSandro2000/archisteamfarm
nixos/archisteamfarm: don't use asf abbreviation for more clarity
2024-01-22 22:57:04 +01:00
Ryan Lahfa 5b14fea3d6
Merge pull request #280405 from RaitoBezarius/keepalived-unicast
nixos/networking/keepalived: do not emit `unicastPeers` when there are none
2024-01-22 22:43:29 +01:00
Raito Bezarius 08c9562995 keepalived: add myself as a maintainer
I will use this for a while, so… let's keep it tidy.
2024-01-22 21:56:04 +01:00
Ryan Lahfa 32a6e224ae
Merge pull request #282929 from minijackson/netbox-3.7.1
Netbox 3.7.1
2024-01-22 20:52:54 +01:00
Robert Schütz 6de0d9293e
Revert "Dovecot: Do not include empty sieve_extensions and sieve_global_extensions" 2024-01-22 10:02:51 -08:00
github-actions[bot] 3c7375b75c
Merge master into staging-next 2024-01-22 18:00:55 +00:00
nikstur 3ea482163b
Merge pull request #282320 from helsinki-systems/fix/nix-gc-unit-type
nixos/nix-gc: Minor module fixups
2024-01-22 17:49:18 +01:00
nikstur 733c8ee469
Merge pull request #282086 from nikstur/uki
nixos/uki: init
2024-01-22 17:43:09 +01:00
Minijackson 5d2370f800
netbox_3_5: remove 2024-01-22 16:31:45 +01:00
Minijackson 163fed297e
netbox: 3.6.9 -> 3.7.1
Or another way to see it:

netbox_3_7: init at 3.7.1

Make NetBox 3.7 the default version if stateVersion >= 24.05,
switch upgrade test to test upgrade from 3.6 to 3.7,
remove clearcache command for >=3.7.0,
make reindex command mandatory
2024-01-22 16:31:45 +01:00
Jörg Thalheim b0a5444e43
Merge pull request #282878 from Mic92/buildbot
nixos/buildbot: don't require network-online.target
2024-01-22 15:53:13 +01:00
Luke Granger-Brown f5344c8b87
Merge pull request #280658 from simonhollingshead/add-fixedrandomdelay
nixos/auto-upgrade: add system.autoUpgrade.fixedRandomDelay
2024-01-22 14:48:23 +00:00
github-actions[bot] 3a8094730e
Merge master into staging-next 2024-01-22 12:01:10 +00:00
Jörg Thalheim 372513f630 nixos/buildbot: don't require network-online.target
The daemon setup itself only requires the firewall to be up.
Workers will connect itself as they can reach the master instance.
That's why we don't need an online target for buildbot to function.
2024-01-22 12:54:42 +01:00
Linus Heckemann 18e5176621
Merge pull request #270727 from nikstur/nixos-perlless-activation
Perlless Activation
2024-01-22 10:11:44 +01:00
github-actions[bot] f363b57fc7
Merge master into staging-next 2024-01-22 06:01:17 +00:00
h7x4 5f5210aa20
Merge pull request #281606 from MarcelCoding/bird-no-auto-restart
nixos/bird2: add option to disable auto reload
2024-01-22 01:24:37 +01:00
github-actions[bot] dceddd03df
Merge master into staging-next 2024-01-22 00:02:14 +00:00
nikstur 8710a27bc6 nixos/profiles/perlless: init 2024-01-22 00:54:13 +01:00
nikstur 60f529fc82 nixos/etc: optionally mount etc as an overlay 2024-01-22 00:54:13 +01:00
Peder Bergebakken Sundt 0fbb6483cf
Merge pull request #273537 from sigprof/nixos-ssh-askpass-xauthority
nixos/ssh: pass XAUTHORITY to ssh-askpass
2024-01-22 00:43:59 +01:00
Nick Cao 9969fb7ff4
Merge pull request #281904 from Stunkymonkey/ttyd-fix-leakage
ttyd: add test & use systemd LoadCredential
2024-01-21 14:48:40 -05:00
Peder Bergebakken Sundt 3747401ffe
Merge pull request #236744 from l0b0/shells-environment-remove-redundant-p-flag
nixos/modules: Split recursive mkdir with permissions
2024-01-21 20:16:14 +01:00
Bernardo Meurer 28ad748d40
Merge pull request #281845 from lovesegfault/fix-moonraker-warn 2024-01-21 14:09:00 -05:00
happysalada f3b08ca5a6 nixos/clamav: fix network-online requires assert 2024-01-21 11:37:54 -05:00
github-actions[bot] cabf4612ca
Merge master into staging-next 2024-01-21 12:01:00 +00:00
Jonas Heinrich 58fcc2db9d
Merge pull request #282339 from marcusramberg/marcus/ollama_listen
nixos/ollama: Add listenAddress
2024-01-21 12:57:53 +01:00
Doron Behar 49e5ffd3a9
Merge pull request #235847 from doronbehar/nixos/taskserver-permissions
nixos/taskserver: Enable cfg.group to read clients' certificates
2024-01-21 09:32:07 +02:00
Sandro Jäckel 6d1d912716
nixos/archisteamfarm: drop with lib 2024-01-21 02:14:02 +01:00
Sandro Jäckel 2d324fc242
nixos/archisteamfarm: don't use asf abbreviation for more clarity 2024-01-21 02:14:00 +01:00
github-actions[bot] 84335ac8cb
Merge master into staging-next 2024-01-21 00:02:21 +00:00
maxine f0dd758da7
Merge pull request #273707 from illustris/cloud-init
cloud-init: 23.3.3 -> 23.4.1, fix race condition on AWS
2024-01-21 00:39:06 +01:00
Marcus Ramberg 8d956b1725 nixos/ollama: Add listenAddress 2024-01-21 00:27:07 +01:00
Felix Buehler c34493d7c0 ttyd: add test & use systemd LoadCredential 2024-01-20 21:01:51 +01:00
github-actions[bot] 4dea63e421
Merge master into staging-next 2024-01-20 18:01:02 +00:00
Maximilian Bosch 93d692f43b
Merge pull request #280600 from Ma27/nextcloud-state-tmpfiles
nixos/nextcloud: set up base directories & override.config.php with tmpfiles
2024-01-20 17:49:46 +01:00
h7x4 d7995e41b6
Merge pull request #277514 from gepbird/github-runner-update-docs
github-runner: mention manpage for serviceOverrides option
2024-01-20 16:57:03 +01:00
h7x4 e7069e4aa2
Merge pull request #281055 from majiru/resolved-dns-over-tls
nixos/resolved: add dnsovertls option
2024-01-20 15:21:45 +01:00
Kevin Cox 9cd3bd7a5c
Merge pull request #281915 from exi/patch-1
Dovecot: Do not include empty sieve_extensions and sieve_global_extensions
2024-01-20 09:10:41 -05:00
Janne Heß e04524a931
nixos/nix-gc: Use singleLineStr where possible 2024-01-20 13:16:39 +01:00
Janne Heß 2315174384
nixos/nix-gc: Add Type so systemctl waits properly 2024-01-20 13:15:20 +01:00
Janne Heß fd8727163d
nixos/nix-gc: Drop with lib; 2024-01-20 13:14:57 +01:00
github-actions[bot] 2aa3d6edac
Merge master into staging-next 2024-01-20 12:00:58 +00:00
Gutyina Gergő 79e8fb92b8
github-runner: mention manpage for serviceOverrides option 2024-01-20 10:22:53 +01:00
Lin Jian 436929e972
Merge pull request #282174 from linj-fork/pr/remove-emacsclient-desktop
nixos/emacs: drop custom emacsclient desktop file
2024-01-20 15:39:37 +08:00
github-actions[bot] 0cd628f6d5
Merge master into staging-next 2024-01-20 06:01:03 +00:00
h7x4 66cb51263e
Merge pull request #264552 from vifino/watchdogd
watchdogd: init at 4.0; add module
2024-01-20 06:21:24 +01:00
Jacob Moody dfc87b9048 nixos/resolved: add dnsovertls option 2024-01-19 21:29:22 -06:00
h7x4 62dbf40586
Merge pull request #282147 from eclairevoyant/acme
nixos/acme: fix assertion for renamed option
2024-01-20 03:27:15 +01:00
Lin Jian 9e98fce0c5
Merge pull request #281654 from SuperSandro2000/portunus-restart
nixos/portunus: restart on failure
2024-01-20 09:17:18 +08:00
Lin Jian 20f07b4aa9
nixos/emacs: drop custom emacsclient desktop file
This custom emacsclient desktop file was added[1] to Nixpkgs when
the upstream did not provide one.

Since an emacsclient desktop file is provided[2] by the upstream now,
we should remove our custom one from Nixpkgs to reduce maintenance
burden[3].

Fixes https://github.com/NixOS/nixpkgs/issues/245533

[1]: https://github.com/NixOS/nixpkgs/pull/35896
[2]: https://git.savannah.gnu.org/cgit/emacs.git/commit/etc/emacsclient.desktop?id=1a845a672dc73c8e98e6cb9bb734616e168e60ba
[3]: https://git.savannah.gnu.org/cgit/emacs.git/commit/etc/emacsclient.desktop?id=1500e4b4329d4d3d0141263230d74e1b314373b1
2024-01-20 08:21:08 +08:00
github-actions[bot] 650e10b010
Merge master into staging-next 2024-01-20 00:02:16 +00:00
Adrian Pistol 58cbe00eb6 nixos/watchdog: add module 2024-01-20 00:15:31 +01:00
éclairevoyant b43dcaf48f
nixos/acme: fix assertion for renamed option 2024-01-19 16:28:56 -05:00
Peder Bergebakken Sundt 31ff0dfe49
Merge pull request #273024 from melvyn2/patch-1
nixos/sshServe: use bash as default shell for nix-ssh user
2024-01-19 22:26:44 +01:00
DS fdf411fb36 nixos/tigerbeetle: init module 2024-01-19 13:19:27 -08:00
Peder Bergebakken Sundt c3f2d4a319
Merge pull request #267327 from bbenno/fix/nixos-firebird
nixos/firebird: fix coerce error
2024-01-19 22:12:47 +01:00
h7x4 99e3c0032a
Merge pull request #281871 from RatCornu/tachidesk-server
nixos/suwayomi-server: init at 0.7.0
2024-01-19 20:19:06 +01:00
Julien Malka 42ad0d80ce
Merge pull request #281639 from Mic92/systemd-refactoring 2024-01-19 19:42:32 +01:00
github-actions[bot] 331c789712
Merge master into staging-next 2024-01-19 18:01:00 +00:00
nikstur 985bafa5fc nixos/uki: init 2024-01-19 17:04:59 +01:00
Franz Pletz e7279b9102
Merge pull request #281186 from Sohalt/podman-dns-firewall 2024-01-19 17:01:23 +01:00
nikstur 066151e0de
Merge pull request #277633 from nikstur/image-repart-improvements
Image repart improvements
2024-01-19 15:25:08 +01:00
nikstur a34af9a955 image/repart: add version and compression options
The version option is needed if you want to implement partition &
systemd-boot based A/B booting where the version information is encoded
in the files on the ESP. See systemd-sysupate docs for more details on
this:
https://www.freedesktop.org/software/systemd/man/latest/sysupdate.d.html

Note, however, that this is not *only* useful for systemd-sysupdate but
also for other similar updating tools/mechanisms.
2024-01-19 14:43:29 +01:00
Zolo c9e7344950
Update systemd-boot.nix
Extending the systemd-boot information and where to find more information.
2024-01-19 14:01:26 +01:00
github-actions[bot] 4679030218
Merge master into staging-next 2024-01-19 12:01:13 +00:00
Martin Weinelt c2853e2588
Merge pull request #258680 from lf-/jade/remove-multiuser-netonline-dep
nixos/systemd: don't require network-online.target for multi-user.target
2024-01-19 12:49:23 +01:00
Sandro eb09653fde
Merge pull request #266428 from lf-/jade/samba-fix-security-type 2024-01-19 12:29:19 +01:00
Sandro 5897d4eb0d
nixos/portunus: remove superfluous explicit out
Co-authored-by: Lin Jian <me@linj.tech>
2024-01-19 11:58:07 +01:00
Sandro Jäckel fd199bdc5b
nixos/portunus: add seedSettings option 2024-01-19 11:57:01 +01:00
Jade Lovelace fe474ed61a nixos: fix remaining services for network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace 1b514b3e10 fix: rxe under network-online.target change [UNSURE IF CORRECT] 2024-01-19 00:11:34 -08:00
Jade Lovelace c80398e5d2 nixos/ircd-hybrid: fix evaluation error 2024-01-19 00:11:34 -08:00
Jade Lovelace 6c5ab28fce nixos: fix a bunch of services missing dep on network-online.target
This was done by generating a truly hilarious configuration:

rg 'services\.[^.]+\.enable\t' opts-tags | cut -f1 > allonconfig.nix

The following were not tested due to other evaluation errors. They
should probably be manually audited.
services.amule
services.castopod
services.ceph
services.chatgpt-retrieval-plugin
services.clamsmtp
services.clight
services.dante
services.dex
services.discourse
services.dwm-status
services.engelsystem
services.foundationdb
services.frigate
services.frp
services.grocy
services.guacamole-client
services.hedgedoc
services.home-assistant
services.honk
services.imaginary
services.jitsi-meet
services.kerberos_server
services.limesurvey
services.mastodon
services.mediawiki
services.mobilizon
services.moodle
services.mosquitto
services.nextcloud
services.nullmailer
services.patroni
services.pfix-srsd
services.pgpkeyserver-lite
services.postfixadmin
services.roundcube
services.schleuder
services.self-deploy
services.slskd
services.spacecookie
services.statsd
services.step-ca
services.sympa
services.tsmBackup
services.vdirsyncer
services.vikunja
services.yandex-disk
services.zabbixWeb
2024-01-19 00:11:34 -08:00
Reno Reckling 33ede4cc7c
use concatMapStringsSep in dovecot config
Co-authored-by: h7x4 <h7x4@nani.wtf>
2024-01-19 07:14:59 +01:00
github-actions[bot] 631f14c407
Merge master into staging-next 2024-01-19 06:00:59 +00:00
h7x4 5350f74b81
Merge pull request #277739 from KiaraGrouwstra/fix-sample-value-services-wordpress-sites-name-languages
fix sample value for option services.wordpress.sites.<name>.languages
2024-01-19 03:51:40 +01:00
RatCornu 4133bb1bb0
nixos/suwayomi-server: init at 0.7.0 2024-01-19 02:31:23 +01:00
Reno Reckling 9c5b8fe008
Merge branch 'NixOS:master' into patch-1 2024-01-19 01:31:50 +01:00
Jade Lovelace 81a3fa04ca nixos/buildbot: master also wants network-online.target 2024-01-18 16:28:42 -08:00
Jade Lovelace ce602cc0aa nixos/kea: also want network-online.target 2024-01-18 16:28:42 -08:00
Will Fancher 367d101073 nixos/systemd: assert After=network-online.target -> Wants=
This will catch broken services at the evaluation stage.
2024-01-18 16:28:41 -08:00
Jade Lovelace 80edf319fe nixos/paperless: fix network-online.target dependencies 2024-01-18 16:28:41 -08:00
Jade Lovelace 62f30634db nixos/systemd: don't require network-online.target for multi-user.target
Previously we required network-online.target for multi-user.target. This
has made a lot of people very angry and has been widely regarded as a
bad move (or at least, very nonstandard):
15d761a525 (commitcomment-128564097)

This was done because of fragile tests and services declaring
dependencies on multi-user.target when they meant network-online.target.

Let's rip off the bandaid and fix our tests.
2024-01-18 16:28:39 -08:00
Reno Reckling 1e4065d90a
Do not include sieve_extensions and sieve_global_extensions if they are the default value
Setting them to empty string will disable the default behaviour, leading to missing extensions.
2024-01-19 01:21:07 +01:00
nikstur 1e70382b81 nixos/version: add options to identify images
This is useful when building appliance images that use among other
things partition based A/B updates.
2024-01-19 01:16:49 +01:00
github-actions[bot] b459003bdd
Merge master into staging-next 2024-01-19 00:02:22 +00:00
Kira Bruneau b250e162d6 nixos/gamemode: add gamemode group
Gamemode 1.8 requires users to be in the gamemode group to set the CPU
governor, so we should automatically create it when it's enabled.
2024-01-18 18:06:36 -05:00
nikstur eec1845744 nixos/systemd-sysusers: init 2024-01-18 23:08:14 +01:00
Julian Stecklina be2a4f37af nixos/dbus: explicitly set homeMode for dbus
Otherwise /run/dbus is created with the wrong permissions.

For some reason our recent changes made /run/dbus be 0700 instead of
0755. This is actually the default of homeMode. So something worked by
accident before?
2024-01-18 23:08:14 +01:00
nikstur 4b128008c5 nixos/test-instrumentation: use file to set root password 2024-01-18 23:08:13 +01:00
Niklas Hambüchen 305821576a
Merge pull request #273239 from nh2/issue-31138-fix-xkbvalidate-xkb-dir
xserver service: xkbvalidate: Respect `xkb.dir`
2024-01-18 21:56:39 +01:00
Bernardo Meurer a09b1c12fb
nixos/moonraker: don't warn about harmless update_manager settings
The only setting we care to warn about is `enable_system_updates`,
there's no reason to issue warnings when folks set, for example,
`enable_auto_refresh`.
2024-01-18 13:52:50 -05:00
github-actions[bot] dc4a7c97b0
Merge master into staging-next 2024-01-18 18:00:55 +00:00
K900 967d49b8a8 Merge remote-tracking branch 'origin/staging-next' into staging 2024-01-18 19:15:32 +03:00
Adithya Nair 8b5644684e
nixos/frp: use toml configFile
According to upstream, the INI configuration file is deprecated and
TOML/YAML/JSON is recommended.
Link: https://github.com/fatedier/frp/tree/dev#configuration-files
2024-01-18 21:37:40 +05:30
Janne Heß 15c31afd8a
Merge pull request #271067 from nikstur/sysinit-reactivation
nixos/switch-to-configuration: add sysinit-reactivation.target
2024-01-18 16:13:32 +01:00
nikstur 1472cd16bb
Merge pull request #265951 from nikstur/systemd-255
systemd: 254.6 -> 255.2
2024-01-18 15:51:10 +01:00
Adam C. Stephens 887d3f54c6
Merge pull request #278753 from adamcstephens/incus/migrate-test
incus, lxd: ensure lxd->incus migration is supported and tested
2024-01-18 08:01:23 -05:00
mian | mian fbe9d95ed9
fix semi-colon missing 2024-01-18 16:31:54 +08:00
Franz Pletz c00a2d02bd
Merge pull request #251882 from r-ryantm/auto-update/prometheus-snmp-exporter
prometheus-snmp-exporter: 0.22.0 -> 0.25.0
2024-01-18 08:16:39 +01:00
Sandro Jäckel f154807e93
nixos/portunus: restart on failure 2024-01-18 01:01:30 +01:00
nikstur e6b66f08a5 nixos/switch-to-configuration: add sysinit-reactivation.target 2024-01-18 00:46:30 +01:00
Franz Pletz ed2ea66bbf
Merge pull request #278539 from Ma27/sshd-socket-activation-ports
nixos/sshd: fix socket activated ports when using ListenAddress
2024-01-17 23:27:52 +01:00
Jörg Thalheim 4a20af3932 nixos/systemd-boot: move all template variables in one place
This makes it easier to reason about what variables are inserted during packaging.
We also make sure that template file is also valid python syntax, which makes editor errors go away during development.
2024-01-17 22:53:17 +01:00
WilliButz bb9c7762bc
nixos/prometheus-snmp-exporter: add config check
This is introduced and enabled by default because the config syntax for
the exporter changed with release 0.23.0.

This should make the breaking config change obvious before services are
deployed with an incompatible old config.

The check is based on the check present in the blackbox-exporter module.
2024-01-17 20:34:30 +01:00
WilliButz a8ea9fe492
nixos/prometheus-snmp-exporter: switch to new config syntax
Introduced with version 0.23.0, see
b75fc6b839/auth-split-migration.md
2024-01-17 20:32:45 +01:00
Marcel a63a884c00
nixos/bird2: add option to disable auto reload
In a critical setup of bird with many BGP sessions,
you want to control the exact time when configuration
changes are applied. Therefore, an option was added,
to disable automatic reloading the systemd unit,
when configuration changes are made. The administrator
how has the ability to control how changes are applied.
2024-01-17 20:09:34 +01:00
Robin Gloster e59524560c
Merge pull request #281555 from fpletz/nixos/ntpd-rs-fix-metrics
nixos/ntpd-rs: fix metrics service
2024-01-17 15:49:24 +01:00
Sandro 35ef7edaea
Merge pull request #281421 from SuperSandro2000/pcsc-polkit 2024-01-17 15:21:26 +01:00
Franz Pletz 35c015ff91
nixos/ntpd-rs: fix metrics service 2024-01-17 15:06:20 +01:00
nikstur 748378a3ec systemd: 254.6 -> 255.2
Removed patches:

- 0007-Fix-hwdb-paths.patch

  The directory we want seems to already be included in the list. Is there
  a reason why we want to restrict it further?

- 0010-build-don-t-create-statedir-and-don-t-touch-prefixdi.patch

  This patch has little to do with how the meson.build file looks now. The
  new patch 0017 is the successor to this one.

- 0015-pkg-config-derive-prefix-from-prefix.patch

  This is fixed upstream. We don't need this anymore.
2024-01-17 14:13:46 +01:00
rht fb8b20d90e
acpid: Disable network access 2024-01-17 06:46:34 -05:00
Maciej Krüger f666630f4a
Merge pull request #280556 from gador/pgadmin-8.2
pgadmin: 8.1 -> 8.2, python3Packages.webauthn 1.11.1 -> 2.0.0, python3Packages.flask-security-too: fix pydantic issue
2024-01-17 08:30:24 +01:00
Benjamin Bädorf 7c3ecbdce9 nixos/invoiceplane: add nginx as a webserver option for invoiceplane
Getting the vhost to play nice with phpfpm was done by following this
community post: https://community.invoiceplane.com/t/topic/2654
2024-01-17 05:09:34 +01:00
Ryan Lahfa bbd92ae047
Merge pull request #280561 from RaitoBezarius/fix-listmonk-module
nixos/mail/listmonk: fix hardening directives
2024-01-17 03:42:31 +01:00
Sandro Jäckel 6b1e46597f
nixos/pcscd: fix linking of org.debian.pcsc-lite.policy file for polkit 2024-01-17 00:28:22 +01:00
Madoura c3316bcce4
nixos/bcachefs: add 'bcachefs-tools' to (udev/systemd).packages 2024-01-16 15:19:39 -06:00
Madoura 9dfa878a20
nixos/bcachefs: clarify 'FIXME' comment on when to remove 2024-01-16 15:06:05 -06:00
Madoura d86395db78
nixos/stage-1.init.sh: only set 'IFS' in 'waitDevice' for bcachefs 2024-01-16 15:06:05 -06:00
Madoura 919c05460b
nixos/stage-1.init.sh: fix IFS comment grammar 2024-01-16 15:06:04 -06:00
Will Fancher bf54848f3b
Merge pull request #280232 from jmbaur/sysupdate-example-fix
nixos/sysupdate: fix example text
2024-01-16 15:43:05 -05:00
Will Fancher 66e3ec7d30
Merge pull request #278895 from jmbaur/repart-initrd-loopback
nixos/repart: add loop module to initrd
2024-01-16 15:40:19 -05:00
Maximilian Bosch 7f91c8ef83
Merge pull request #276496 from Izorkin/update-roundcube-nginx
nixos/roundcube: update nginx configuration
2024-01-16 20:40:12 +01:00
Franz Pletz a436870727
Merge pull request #278179 from sinanmohd/network-interfaces-sit
nixos/network-interfaces: fix implicit dependency on underlying device
2024-01-16 19:49:46 +01:00
Nick Cao 8161251283
Merge pull request #280924 from Luflosi/kubo-cleanup
nixos/kubo: cleanup
2024-01-16 11:06:47 -05:00
Doron Behar ead172880f nixos/taskserver: Enable cfg.group to read clients' certificates
This enables the services.taskserver.group to read the certificates
generated by the taskserver.service' preStart script.
2024-01-16 13:09:41 +02:00
Thiago Kenji Okada 401d16acd0
Merge pull request #247256 from lucasew/xrdp-audio
xrdp: add support for audio
2024-01-16 10:06:51 +00:00
rewine 44c752a58a deepin: don't install packages using freeimage by default 2024-01-16 13:08:43 +08:00
Peder Bergebakken Sundt 8d9eb920d3
Merge pull request #273807 from h7x4/pkgs-fixup-heimdal
heimdal: 7.8.0 -> 7.8.0-unstable-2023-11-29, large cleanup
2024-01-15 23:16:30 +01:00
Victor Engmark d516870f42
nixos/modules: Split recursive mkdir with permissions
Detected by ShellCheck as violating
<https://github.com/koalaman/shellcheck/wiki/SC2174>.
2024-01-16 08:36:08 +13:00
sohalt 38b2778765 nixos/podman: open firewall for aardvark-dns 2024-01-15 18:43:48 +01:00
kennycallado 73cb336785 nixos/icewm: Update icewm start command
Preferred way to start session in icewm. [docs](https://ice-wm.org/man/icewm-session)
2024-01-15 17:49:01 +01:00
Will Fancher c6f2b53e78
Merge pull request #280296 from ancathri/getKeyLocations-nosnapshots
nixos/zfs: fix getKeyLocations when listsnaps=on
2024-01-15 11:31:25 -05:00
Nick Cao 9c54ad4cf5
Merge pull request #281127 from SuperSandro2000/238474-fixup
Revert "nixos/pcscd: suggest yubikey-personalization for additional u…
2024-01-15 10:02:48 -05:00
Sandro Jäckel 304228fe1c
Revert "nixos/pcscd: suggest yubikey-personalization for additional udev rules"
This reverts commit 6ecb73df1b.
2024-01-15 13:29:34 +01:00
rewine 7e27869a75 deepin: move distribution.info back to deepin-desktop-base 2024-01-15 14:19:50 +08:00
Franz Pletz 678b899ac0
Merge pull request #264593 from fpletz/pkgs/ntp-rs-1.0.0 2024-01-15 02:17:36 +01:00
Chris M 6b55672bb5
outline: 0.73.1 -> 0.74.0 (#275007) 2024-01-15 02:31:14 +04:00
Nick Cao dfbb7a7c01
Merge pull request #279174 from SuperSandro2000/iso-minimal-override
nixos/installation-cd-minimal: allow overwriting isoImage.edition with mkForce like other options
2024-01-14 15:26:29 -05:00
Nick Cao b9dc8014ef
Merge pull request #278931 from SuperSandro2000/patch-1
nixos/miniflux: allow members of miniflux group to read runtime direc…
2024-01-14 15:24:14 -05:00
Nick Cao 5ba9fede25
Merge pull request #278593 from SuperSandro2000/xdg-data-dirs-display-managers
nixos/display-managers: only link desktop derivation if sessionPackages is not empty
2024-01-14 15:22:57 -05:00
K900 ceede53bfa
Merge pull request #207722 from SuperSandro2000/plasma5-cleanup-pkgs
nixos/plasma5: use plasma5Packages everywhere for clarity
2024-01-14 22:30:39 +03:00
Nick Cao 1840316647
Merge pull request #272556 from SuperSandro2000/influxdb-restart
nixos/influxdb: restart on failure
2024-01-14 14:25:21 -05:00
Nick Cao 2443ba38b6
Merge pull request #272910 from SuperSandro2000/nullmailer
nixos/nullmailer: be flexible about time related types
2024-01-14 14:23:28 -05:00
Nick Cao 205ac6d5d8
Merge pull request #272918 from SuperSandro2000/miniflux
nixos/miniflux: allow ints in config
2024-01-14 14:22:41 -05:00
Maximilian Bosch 8ccc8e9df9
Merge pull request #279890 from onny/nextcloud-cleanup5
nixos/nextcloud: Remove old migration warnings
2024-01-14 20:22:09 +01:00
Peder Bergebakken Sundt fa8616a4c0
Merge pull request #279479 from gepbird/c2fmzq-server-bool-setting-allow-false
nixos/c2fmzq-server: allow setting bool settings to false
2024-01-14 18:32:11 +01:00
Sandro Jäckel 74808f169c
nixos/pcscd: remove noop restartTriggers 2024-01-14 18:03:31 +01:00
Sandro Jäckel 6ecb73df1b
nixos/pcscd: suggest yubikey-personalization for additional udev rules 2024-01-14 18:03:31 +01:00
Sandro Jäckel c09acaa905
nixos/pcscd: cleanup code 2024-01-14 18:03:30 +01:00
Franz Pletz 9707745cf8
nixos/ntpd-rs: init 2024-01-14 17:34:42 +01:00
Adam Stephens ffdcec2d94
nixos/tests/incus: add lxd-to-incus migration test 2024-01-14 09:26:49 -05:00
Guillaume Girol e52366c4d8
Merge pull request #272169 from nyabinary/remove-deprecated-network-interfaces
nixos/network-interfaces: remove network-interfaces.target
2024-01-14 14:17:14 +01:00
Luflosi a4c451fd37
nixos/kubo: cleanup
- Add note explaining why enabling the Kubo daemon won't fully work immediately and requires logging in again
- Use `builtins.isList addrIn` instead of `builtins.typeOf addrIn == "list"`
- Fix indentation
2024-01-14 12:21:09 +01:00
h7x4 c71fa4be0c
heimdal: clean up package
- Make inputs more diff friendly
- Add flags for enabling certain libraries
- Disable LDAP support as HDB module by default
- Add support for CJSON
- Flatten contents of `$out/libexec`, which earlier had an
  `heimdal/heimdal` directory
- Use SRI hash
- Enable package tests
- Add `passthru.tests.nixos`
- Add `meta.homepage` and `meta.changelog`

Co-authored-by: Felix Albrigtsen <felix@albrigtsen.it>
2024-01-14 01:13:19 +01:00
Gutyina Gergő 7247d16af6
nixos/c2fmzq-server: allow setting bool settings to false 2024-01-14 00:19:19 +01:00
Peder Bergebakken Sundt 59cefcbc62
Merge pull request #277783 from gepbird/c2fmzq-server-multiple-freeform-settings
nixos/c2fmzq-server: allow multiple freeform settings
2024-01-13 22:01:23 +01:00
Mario Rodas 76a31fdb5c
Merge pull request #267440 from linsui/starship
nixos/starship: add presets
2024-01-13 14:27:06 -05:00
Ryan Lahfa b5a944511d
Merge pull request #256709 from colemickens/make-squashfs-skip-compression
nixos/lib/make-squashfs.nix: allow disabling compression
2024-01-13 20:23:25 +01:00
lucasew 44ae5fe211 nixos/xrdp: add audio.enable option
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-01-13 12:42:06 -03:00
maxine a3ada00f8a
Merge pull request #280472 from martiert/fcc-unlock
nixos/modemmanager: Add qmicli and mbimcli when using fccUnlockScripts
2024-01-13 15:45:11 +01:00
nikstur ce1ed11483
Merge pull request #280708 from thillux/fix-trackpoint
modules/trackpoint: fix quote
2024-01-13 15:25:25 +01:00
Markus Theil 7fcfa4f0d6 modules/trackpoint: fix quote
Fixes:

[    7.106281] systemd[1]: /etc/systemd/system/trackpoint.service:10: Unbalanced quoting, ignoring: "/nix/store/iidxwcyp8pqhrq3iji17shs4m6gin0kv-systemd-254.6/bin/udevadm trigger --attr-match=name="TPPS/2 IBM TrackPoint"

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-01-13 12:22:06 +01:00
Florian Brandes 1c1ca56266 pgadmin: 8.1 -> 8.2
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-01-13 09:54:32 +01:00
Simon Hollingshead d077cd8691 nixos/auto-upgrade: add system.autoUpgrade.fixedRandomDelay
From systemd 247, timers can be configured to randomize their delay
once and to apply the same random delay for all future executions.
This allows users to have less jitter between auto-upgrade executions
while still avoiding multiple timers firing simultaneously on a
machine or multiple machines all performing their upgrades
simultaneously.

The default option value (false) is backwards compatible.

All supported versions of NixOS (in fact, back to and including 21.05)
use systemd 247 or later.
2024-01-13 03:40:44 +00:00
ancathri 51dfaf639a nixos/zfs: fix getKeyLocations when listsnaps=on
Encountered boot errors in pool with `listsnapshots=on` getKeyLocations should ignore snapshots as they will not be well-handled by createImportService later on
2024-01-12 19:06:00 -06:00
Alois Wohlschlager 77e5fa5ea6 nixos/libvirtd: support out-of-tree vhost-user drivers
Add an option allowing packages containing out-of-tree vhost-user drivers for
QEMU to be specified. The relevant configurations are then linked at runtime
where libvirt expects them.
An example use case for this is virtiofs.
2024-01-13 00:39:33 +01:00
Yt 827bd96b2b
Merge pull request #280005 from digtail/2024-01-09-ntfy-sh-dynamic-user
nixos/ntfy-sh: clean up DynamicUser workarounds
2024-01-12 23:39:25 +01:00
Maximilian Bosch 90787dbe89
nixos/nextcloud: set up base directories & override.config.php with tmpfiles
Closes #169733

The issue is that Nextcloud fails to start up after a GC because the
symlink from `override.config.php` is stale.

I'm relatively certain that this is not a bug in the Nix GC - that
would've popped up somewhere else already in the past years - and one of
the reporters seems to confirm that: when they restarted
`nextcloud-setup.service` after the issue appeared, an
`override.config.php` pointing to a different hash was there.

This hints that on a deploy `nextcloud-setup` wasn't restarted properly
and thus replacing the symlink update was missed. This is relatively
hard to trigger due to the nature of the bug unfortunately (you usually
keep system generations for a few weeks and you'll need to change the
configuration - or stdenv - to get a different `override.config.php`),
so getting pointers from folks who are affected is rather complicated.

So I decided to work around this by using systemd-tmpfiles which a lot
of other modules already utilize for this use-case. Now,
`override.config.php` and the directory structure aren't created by
`nextcloud-setup`, but by `systemd-tmpfiles`.

With that, the structure is guaranteed to exist

* on boot, since tmpfiles are always created/applied then
* on config activation, since this is done before services are
  (re)started which covers the case for new installations and existing
  ones.

Also, the recursive `chgrp` was used as transition tool when we switched
from `nginx` as owning group to a dedicated `nextcloud` group[1][2], but
this was several releases ago, so I don't consider this relevant
anymore.

[1] fd9eb16b24
[2] ca916e8cb3
2024-01-12 22:11:36 +01:00
Maciej Krüger 6ba04cc302
Merge pull request #270876 from gador/pgadmin-check-pw
nixos/pgadmin: add minimumPasswordLength setting and check
2024-01-12 21:00:40 +01:00
Ryan Lahfa 08d0afbbdf
Merge pull request #239028 from chayleaf/miniupnpd
miniupnpd-nftables: init at 2.3.3
2024-01-12 20:17:33 +01:00
Raito Bezarius 4c84c9c1c3 nixos/mail/listmonk: fix hardening directives
For some reason, I don't know why I missed those, but
I didn't look at my logs for a while.

It would be nice if we could catch those statically kinda (?) in CI.
2024-01-12 20:14:52 +01:00
Ryan Lahfa 724d5348a6
Merge pull request #272794 from dcarosone/zpool-import-d
nixos/zfs: check pool state with -d, like import
2024-01-12 20:07:24 +01:00
Ryan Lahfa 1b2aeec40a
Merge pull request #275031 from 2xsaiko/outgoing/sieve
nixos/dovecot: add support for sieve extensions, in particular imapsieve and pipe
2024-01-12 20:05:45 +01:00
Ryan Lahfa 6d8630efda
Merge pull request #270270 from SuperSandro2000/nginx-fastopen
nixos/nginx: filter more options when listening has quic
2024-01-12 20:01:29 +01:00
Ryan Lahfa 3287441158
Merge pull request #275484 from Izorkin/update-nginx-http3
nixos/nginx: disable automatic advertise of HTTP/3 protocol support
2024-01-12 19:49:18 +01:00
Maciej Krüger c0ef1f9479
nixos/network-interfaces: add assertion if used in after or wants 2024-01-12 17:29:05 +01:00
Niko 9e2cd6f872
nixos/network-interfaces: remove network-interfaces.target
Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
2024-01-12 17:29:03 +01:00
K900 e7b611e59d Merge remote-tracking branch 'origin/master' into staging-next 2024-01-12 13:59:54 +03:00
Martin Ertsås 3e3fea8653
nixos/modemmanager: Add qmicli and mbimcli when using fccUnlockScripts
The ModemManager shipped fccUnlockScripts are using either qmicli or
mbimcli, to unlock wwan modems. These needs to be available for
ModemManager if you set the fccUnlockScripts link, so instead of having
every user than needs it pull it inn in different ways, we should just
provide the tools if we think they might be needed.

https://modemmanager.org/docs/modemmanager/fcc-unlock
2024-01-12 11:53:44 +01:00
Raito Bezarius 3ecaad0e0e nixos/networking/keepalived: do not emit unicastPeers when there are none
In the past, we emitted `unicast_peer` block even with empty unicast peers list.

This now results in:
```
Keepalived_vrrp[392762]: A unicast keyword has been specified without any unicast peers. Defaulting to multicast. This usage is deprecated - please update your configuration.
```

We do not emit it anymore to avoid this warning.
2024-01-12 03:52:39 +01:00
Yureka 1a1c53c271
Revert "nixos/gitlab: Add CI database connection for >=15.9" (#280395) 2024-01-12 02:03:23 +01:00
Yureka 29bc446b5c
Revert "nixos/gitlab: fix database config when no passwordfile is defined" (#280392) 2024-01-12 02:00:49 +01:00
Peder Bergebakken Sundt f489e99576
Merge pull request #277925 from Izorkin/update-nginx-http2
nixos/nginx: use new variant of http2 option for angie package
2024-01-12 01:40:18 +01:00
Lin Jian 52bd30d5c5
Merge pull request #279274 from MarcelCoding/patch-1
nixos/pgadmin: disable upgrade check
2024-01-12 08:16:16 +08:00
Ryan Lahfa 56df644cb4 Revert "nixVersions.stable: 2.18.1 -> 2.19.2"
This version does not pass our NixOS tests, e.g. `nixosTests.misc` and
potentially other fundamental tests such as lib-tests.
2024-01-11 19:15:07 +01:00
Marcel 0be0d8a860
nixos/pgadmin: disable upgrade check 2024-01-11 16:22:28 +01:00
github-actions[bot] 5ee7600250
Merge master into staging-next 2024-01-11 12:01:18 +00:00
Florian Klink 3d1fe1445c
Merge pull request #279433 from wentasah/nsswitch-mdns
nixos/avahi-daemon: let nssmdns{4,6} options affect also non-minimal …
2024-01-11 13:21:24 +02:00
Florian Brandes bc21d288f4
nixos/pgadmin: apply review suggestions
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-01-11 11:32:32 +01:00
TomaSajt 56a43aaba8
nixos/quark-goldleaf: init 2024-01-11 11:02:01 +01:00
Jared Baur d177e2ef06
nixos/sysupdate: fix example text
The example systemd-sysupdate transfer name has a ".conf" suffix,
although the files on the final system are already appended with this
suffix, so the file ends up being "transfer-name.conf.conf". Remove the
suffix in the example so that users will get a transfer filename they
expect.
2024-01-11 01:47:36 -08:00
Patrik Keller 30b25fa102 nixos/netdata: add missing dependency for syslog alarms
Netdata depends on the `logger` utility for dispatching health alarms to
syslog. This dependency was missing in the systemd units environment.

Issue: https://github.com/NixOS/nixpkgs/issues/272702
Docs: https://learn.netdata.cloud/docs/alerting/notifications/agent-dispatched-notifications/syslog
Docs, archived: https://archive.is/mkQa4
2024-01-11 08:38:52 +01:00
github-actions[bot] 28d4a2210a
Merge master into staging-next 2024-01-11 06:01:20 +00:00
Someone 7953a78641
Merge pull request #280076 from SomeoneSerge/fix/apptainer-nv-cherry
apptainer: unbreak --nv (userns+nvliblist.conf variant)
2024-01-11 00:51:23 +00:00
Ryan Lahfa 176e84d44f
Revert "nixos/systemd-boot: init boot counting" 2024-01-11 01:00:43 +01:00
Ryan Lahfa a6303da3a7
Merge pull request #273062 from JulienMalka/systemd-boot-counting
nixos/systemd-boot: init boot counting
2024-01-11 00:40:07 +01:00
Weijia Wang 2f9e98ccf3 Merge branch 'master' into staging-next 2024-01-10 23:12:44 +01:00
Bernardo Meurer ca25692e79
Merge pull request #280092 from eclairevoyant/nix-stable
nixVersions.stable: 2.18.1 -> 2.19.2
2024-01-10 18:06:22 -03:00
Someone Serge 35de6f1c4e
nixos/singularity: disable setuid for apptainer
(cherry picked from commit 5f4b6ea5dd)
2024-01-10 20:47:57 +00:00
maxine 3534a235f1
Merge pull request #278941 from amaxine/drop-gnome-themes-extra
gnome: don't include gnome-themes-extra by default
2024-01-10 21:07:06 +01:00
Peder Bergebakken Sundt dff635f38d
Merge pull request #243169 from 2xsaiko/outgoing/krb5
nixos/krb5: cleanup, fix and RFC42-ify
2024-01-10 21:06:15 +01:00
éclairevoyant c27bc49c43
nixVersions.stable: 2.18.1 -> 2.19.2 2024-01-10 14:04:30 -05:00
Martin Weinelt 10b01dcc89
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
-	pkgs/development/python-modules/types-setuptools/default.nix
2024-01-10 16:09:52 +01:00
Tom Siewert 890ffaa1ae nixos/gitlab: fix database config when no passwordfile is defined
In commit 41ca9c1, the database config got an additional config entry
for a separate CI database connection [1]. Unfortunately, the main connection
must always be the first entry. The fix for this was only applied when
databasePasswordFile has been set.

This commit fixes the order of the config for deployments without a databasePasswordFile.

[1] https://docs.gitlab.com/ee/update/deprecations.html#single-database-connection-is-deprecated
2024-01-10 14:35:57 +01:00
Jonas Heinrich cb919df382
Merge pull request #279887 from onny/dokuwiki-cleanup
nixos/dokuwiki: Remove old migration warnings
2024-01-10 14:04:20 +01:00
github-actions[bot] d9ad8d1e35
Merge master into staging-next 2024-01-10 06:01:12 +00:00
Franz Pletz 078c5755a9
Merge pull request #277912 from Luflosi/kubo-send-buffer-size 2024-01-10 02:09:45 +01:00
github-actions[bot] 122355be99
Merge master into staging-next 2024-01-10 00:02:18 +00:00
jopejoe1 df5728a4f4 nixos/filesystems: init sshfs 2024-01-10 00:24:48 +01:00
digital 39fd0c3fe3 nixos/ntfy-sh: clean up DynamicUser workarounds
this commit removes the static assignments for the ntfy-sh user and
group. furthermore, it removes some tmpfiles.d rules which where
initially put in place by https://github.com/NixOS/nixpkgs/pull/234811.
these are however not required, as ntfy-sh will automatically create the
required files and systemd automatically handles the migration process.

A nixosTest is added to demonstrate that the migration is working
reliably.

This also fixes an issue with where systemd would sometimes not start
ntfy-sh. The tmpfiles rules in combination with impermanence caused `/
var/lib/ntfy-sh` to be a directory when it should have been a symlink.
2024-01-10 00:15:50 +01:00
Peder Bergebakken Sundt 92327152cd
Merge pull request #274813 from pbsds/lxd-package-option-fix
nixos/lxd: convert cfg.package and company to mkPackageOption
2024-01-09 23:36:42 +01:00
Peder Bergebakken Sundt 7bb62b90ef
Merge pull request #274807 from danielbarter/nixos-printing-cups-override
cupsd: allow cups package override
2024-01-09 22:30:34 +01:00
Peder Bergebakken Sundt 3bf05ba941
Merge pull request #271481 from eliandoran/feature/snmpd
nixos/snmpd: init
2024-01-09 21:32:27 +01:00
Jonas Heinrich 6707b97f00 nixos/nextcloud: Remove old migration warnings 2024-01-09 20:59:03 +01:00
Jonas Heinrich d71dc05e82 nixos/dokuwiki: Remove old migration warnings 2024-01-09 20:51:12 +01:00
K900 838aefefc3 Merge remote-tracking branch 'origin/master' into staging-next 2024-01-09 22:42:37 +03:00
José Romildo Malaquias 3ab8dd6bf4
Merge pull request #278819 from romildo/upd.labwc
nixos/labwc: init
2024-01-09 12:36:11 -03:00
Nick Cao 01db22092a
Merge pull request #276773 from SuperSandro2000/gjs-nox
gjs: remove dependency on gtk3 when tests are disabled;  nixos/no-x-libs: add gjs
2024-01-09 10:33:42 -05:00
K900 bff9ee8862 Merge remote-tracking branch 'origin/master' into staging-next 2024-01-09 13:03:34 +03:00
Sandro Jäckel 6b73be0ca5
nixos/no-x-libs: add gjs 2024-01-08 23:54:58 +01:00
Will Fancher 9127f63b94
Merge pull request #265030 from bb2020/usbstor
nixos/usbStorage: update device flag
2024-01-08 17:03:25 -05:00
Maciej Krüger c92e12d81e
Merge pull request #279650 from nbraud/nixos/pam/ssh-agent-auth
nixos/pam: Fix use of renamed `enableSSHAgentAuth` option
2024-01-08 19:21:03 +01:00
nicoo 0e5c95035d nixos/pam: Fix use of renamed enableSSHAgentAuth option 2024-01-08 18:13:46 +00:00
github-actions[bot] 6bf0bf35bb
Merge master into staging-next 2024-01-08 18:00:58 +00:00
Nick Cao c360b49704
Merge pull request #259849 from Scrumplex/nixos/vaultwarden/backupDirCreate
nixos/vaultwarden: create backupDir using tmpfiles.d
2024-01-08 12:30:03 -05:00
Tom Siewert 838a2b54ed nixos/gitlab: Add CI database connection for >=15.9
Starting with GitLab 15.9, single connections were deprecated [1] and
will be removed in GitLab 17.0.

[1] https://docs.gitlab.com/ee/update/deprecations.html#single-database-connection-is-deprecated
2024-01-08 18:14:06 +01:00
Maciej Krüger b5b2f6bec4
Merge pull request #277620 from nbraud/nixos/pam/ssh-agent-auth-31611
nixos/pam: Add option for ssh-agent auth's trusted authorized_keys files
2024-01-08 17:42:02 +01:00
Martin Weinelt ef1898454c
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
-	pkgs/development/python-modules/aiohappyeyeballs/default.nix
2024-01-08 16:34:52 +01:00
K900 b43946170e
Merge pull request #279531 from K900/linux-6.7
linux_6_7: init at 6.7
2024-01-08 16:17:12 +03:00
K900 8c56a751cb
Merge pull request #279422 from wegank/partition-manager-kde
libsForQt5.kpmcore, partition-manager: move to applications/kde
2024-01-08 15:40:06 +03:00
Weijia Wang 788c45eb57 partition-manager: move to aliases.nix 2024-01-08 13:36:56 +01:00
K900 ef190570b8 nixos/bcachefs: use linuxPackages_latest 2024-01-08 10:47:51 +03:00
Cole Mickens 5a718794d0
nixos/lib/make-squashfs.nix: allow disabling compression 2024-01-07 22:46:20 -06:00
github-actions[bot] f85fe5fc29
Merge master into staging-next 2024-01-07 18:00:54 +00:00
Michal Sojka e23da86b18 nixos/avahi-daemon: let nssmdns{4,6} options affect also non-minimal mdns source
This is a followup to commit bba808dbfa ("nixos/avahi-daemon:
resolve mdns only over enabled protocols, disable ipv6 by default",
2023-10-01, PR #258424). mdns occurs twice in /etc/nsswitch.conf but
that commit changed only the first one (mdns_minimal, before resolve).
This commits ensures that both occurrences are set consistently.

This is not only consistent with upstream example[1] but it also
fixes #118628 -- a longstanding issue with CUPS and printer detection.

[1]  https://github.com/avahi/nss-mdns#activation
2024-01-07 18:16:40 +01:00
Guillaume Girol db0f76e8c9
Merge pull request #271030 from symphorien/nixseparatedebuginfod
nixseparatedebuginfod: init at 0.3.0, plus module and nixos test
2024-01-07 17:45:13 +01:00
Nick Cao 59eabdc943
Merge pull request #275637 from SuperSandro2000/firefox-app-update
nixos/firefox: disable updates when policies when programs.firefox.policies is defined
2024-01-07 10:29:43 -05:00
Nick Cao 0b88c3d297
Merge pull request #265783 from Silver-Golden/bitwarden-directory-connector_pkgs
Bitwarden directory connector: init
2024-01-07 10:28:04 -05:00
Jan Tojnar ff42d23313 Merge branch 'master' into staging-next
Conflicts:

pkgs/development/python-modules/dbt-core/default.nix
pkgs/development/python-modules/dbt-semantic-interfaces/default.nix

Still broken by pydantic 2 bump, though.
2024-01-07 16:14:41 +01:00
Maciej Krüger c931d73fba
Merge pull request #276499 from nbraud/nixos/pam/ssh-agent-auth
nixos/pam: Add assertion for SSH-agent auth
2024-01-07 13:54:27 +01:00
github-actions[bot] 9f96550945
Merge master into staging-next 2024-01-07 12:01:24 +00:00
Julien Malka eb435897a6 nixos/systemd-boot: init boot counting 2024-01-07 11:34:09 +00:00
Brendan Golden f7c25138ea nixos/bitwarden-directory-connector: init at version
Added the module to use bitwarden-directory-connector.
2024-01-07 11:22:31 +00:00
Jörg Thalheim db59d03371
Merge branch 'master' into pr/bcachefs 2024-01-07 11:40:30 +01:00
Martin Weinelt 0161570089
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
-	pkgs/development/python-modules/archspec/default.nix
2024-01-07 01:31:56 +01:00
Guillaume Girol 73f0f9c21c
Merge pull request #275902 from williamvds/dnsmasq_docs
nixos/dnsmasq: Add documentation
2024-01-06 23:04:40 +01:00
Lin Jian 3179a4e209
Merge pull request #278536 from newAM/llama-cpp-server
nixos/llama-cpp: init
2024-01-07 03:58:38 +08:00
Lin Jian c55537aa04
Merge pull request #278500 from Ten0/fix_avahi_ipv6_defaultText
nixos/avahi: fix incorrect defaultText of nixos option services.avahi.ipv6
2024-01-07 02:54:04 +08:00
Alex Martens d8bb8a6417 nixos/llama-cpp: init 2024-01-06 10:42:55 -08:00
github-actions[bot] 17cf061755
Merge master into staging-next 2024-01-06 18:01:15 +00:00
Maximilian Bosch e55b4c1ec7
Merge pull request #278493 from marrobHD/patch-1
nixos/nextcloud: fix dbport in config.php
2024-01-06 16:26:15 +01:00
Sandro Jäckel eceb5b2f8c
nixos/installation-cd-minimal: allow overwriting isoImage.edition with mkForce like other options
For good measure also changed fontconfig
2024-01-06 15:52:15 +01:00
Thiago Kenji Okada a0d94113e8
Merge pull request #278975 from lucasew/fix/transmission-web
nixos/transmission: fix webui if no custom webui is specified
2024-01-06 14:16:49 +00:00
Christian Kögler 93ae65d7dd
Merge pull request #278366 from ck3d/nixos-vdr-updates
nixos/vdr: add option user/group and more admin control
2024-01-06 13:01:13 +01:00
lucasew 82723d0494 nixos/transmission: fix webui if no custom webui is specified
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-01-05 16:24:24 -03:00
github-actions[bot] 76201c62e0
Merge master into staging-next 2024-01-05 18:00:58 +00:00
Emilia Bopp 5f6b7a35d6 neo4j: 4.4.11 -> 5.9.0 2024-01-05 18:20:24 +01:00
Benedikt Tissot c1d8fd1a89 nixos/ddclient: make ExecStartPre a list
this enables to exetend ExecStartPre while keeping the default inplace.
2024-01-05 16:36:45 +01:00
Maxine Aubrey c3d027f9ce
gnome: don't include gnome-themes-extra by default
Upstream moved gnome-themes-extra to world 3 years ago
8b1708c38b
2024-01-05 16:01:12 +01:00
Thomas BESSOU a85739af7e nixos/avahi: Fix incorrect defaultText of services.avahi.ipv6
This seems to have been forgotten in bba808dbfa, where we changed the default from `config.networking.enableIPv6` to `false`.
2024-01-05 15:29:22 +01:00
Sandro 9272b8ef79
nixos/miniflux: allow members of miniflux group to read runtime directory
Otherwise a proxy server that has the miniflux group cannot read files in the runtime directory like a socket miniflux can listen on.
2024-01-05 15:01:04 +01:00
José Romildo 42c74f2067 nixos/labwc: init 2024-01-05 10:59:13 -03:00
Jared Baur 1dad7f6821
nixos/repart: add loop module to initrd
Systemd-repart will use loopback devices for partition creation if it is
able to, and will fallback to doing "offline" partition creation writing
data directly to files. From what I see looking at the repart code,
there are specific features that cannot be taken advantage of when not
using loopback devices (e.g. no BTRFS subvolumes in systemd v255) and in
certain places they have to perform some manual re-sizing work that can
otherwise be avoided.
2024-01-05 01:04:30 -08:00
github-actions[bot] 340cf4304d
Merge master into staging-next 2024-01-05 06:01:12 +00:00
zowoq 3d0b034e87 maintainers/teams: add buildbot 2024-01-05 11:41:19 +10:00
github-actions[bot] 1e290d634f
Merge master into staging-next 2024-01-05 00:02:27 +00:00
nu-nu-ko e1a9d1bfcb maintainers: add nu-nu-ko 2024-01-05 12:47:15 +13:00
Julien Malka 7afe9bc384
Merge pull request #278609 from RaitoBezarius/initrd-secrets 2024-01-04 23:45:39 +01:00
Raito Bezarius 7c6f64914f system/activation/bootspec: do not synthesize initrdSecrets if unneeded
We should not always create an appender script if we have no secret, this has no usefulness whatsover.
2024-01-04 23:11:23 +01:00
Raito Bezarius b3d998e7ea boot/loader/systemd-boot: BootSpec makes initrdSecrets optional
A bootspec could remove the `initrdSecrets` attribute and is a perfectly valid bootspec, as can be seen
in the bootspec.cue.

This makes the builder not fail upon missing `initrdSecrets`.
2024-01-04 23:11:22 +01:00
Nick Cao 75b9953daf
nixos/fcitx5: allow using the wayland frontend instead of the fcitx5 one 2024-01-04 15:06:58 -05:00
github-actions[bot] 065e28482b
Merge master into staging-next 2024-01-04 18:00:54 +00:00
nicoo 2eac5106f1 nixos/sudo: Remove unused enableSSHAgentAuth let-binding 2024-01-04 17:30:09 +00:00
nicoo 9ed1423dcf nixos/pam: Warn on insecure sshAgentAuth configurations 2024-01-04 17:30:09 +00:00
Nick Cao b391da91be
Merge pull request #278523 from NickCao/zram-generator
nixos/zram-generator: do not require zram to be a module
2024-01-04 11:25:34 -05:00
Vladimír Čunát 8a839514de
Merge branch 'master' into staging-next 2024-01-04 15:07:44 +01:00
Lin Jian b05d9c12d9
Merge pull request #237904 from SuperSamus/libinput-description
nixos/libinput: update horizontalScrolling description
2024-01-04 19:55:53 +08:00
May 5be349d0be
nixos/nextcloud: remove dbport
To specify a port for the database host, `host:port` format has to be used [1].

[1]: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/config_sample_php_parameters.html#dbhost
2024-01-04 12:34:24 +01:00
Martino Fontana d6022b39ee nixos/libinput: update horizontalScrolling description 2024-01-04 11:34:25 +01:00
Atemu 94e446c260
Merge pull request #277019 from SuperSandro2000/paperless-freeform
nixos/paperless: convert extraConfig to freeform type
2024-01-04 09:33:54 +01:00
Emery Hemingway b736a8a801 eris-go: 20231119 -> 20231219 2024-01-04 06:24:03 +00:00
Sandro Jäckel 7c1b4b22f9
nixos/paperless: convert extraConfig to freeform type
Co-authored-by: Atemu <atemu.main@gmail.com>
2024-01-04 00:04:38 +01:00
Tomas Antonio Lopez 147cc4061e nixos/sourcehut: ensure that the repos directory exists
Fixes a bug where, if the OpenSSH server starts before the first initialization
of the git service, the SSH service fails to find the corresponding bind mount
and terminates with a 226/NAMESPACE error.
2024-01-04 00:00:32 +01:00
Sandro Jäckel 2db74e8339
nixos/display-managers: only link desktop derivation if sessionPackages is not empty
On a headless system there are no entries and we do not need to add it
to XDG_DATA_DIRS.
2024-01-03 23:48:54 +01:00
Leona Maroni 9abc79018c
nixos/kresd: fix port only regex
The output is expected to be a list [ hostname, port, optional ipv6 scope ], but the
current regex only outputs [ port ], when only a port is given as address.
2024-01-03 21:18:54 +01:00
Maximilian Bosch 7e45990c06
nixos/sshd: fix socket activated ports when using ListenAddress
Noticed that issue while reviewing #275633: when declaring
`ListenAddress host` without a port, all ports declared by
`Port`/`cfg.ports` will be used with `host` according to
`sshd_config(5)`.

However, if this is done and socket activation is used, only a socket
for port 22 is created instead of a sockets for each port from
`Port`/`cfg.ports`. This patch corrects that behavior.

Also added a regression test for this case.
2024-01-03 19:42:45 +01:00
illustris d6baaf1c42
nixos/cloud-init: fix DHCP race condition 2024-01-03 23:50:30 +05:30
github-actions[bot] 307002948d
Merge master into staging-next 2024-01-03 18:00:57 +00:00
Nick Cao 9eeabd33d2
nixos/zram-generator: do not require zram to be a module 2024-01-03 12:08:30 -05:00
K900 497cb80d55
Merge pull request #278490 from K900/sddm-package
nixos/sddm: add package option
2024-01-03 19:48:58 +03:00
Sefa Eyeoglu 4f70c901dc
nixos/vaultwarden: add example value for backupDir
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-01-03 17:37:37 +01:00
Sefa Eyeoglu 80ea6a21fb
nixos/vaultwarden: create backupDir using tmpfiles.d
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-01-03 17:37:35 +01:00
Nick Cao fa5ad5c4d0
Merge pull request #278501 from hughobrien/invidious-fix
nixos/invidious: Additional fix for user message on 24.05 changes
2024-01-03 11:03:06 -05:00
Maximilian Bosch cfd8c0ddd8
Merge pull request #275633 from chreekat/b/sshd-config-check
sshd: Use top-level ports in config check when needed
2024-01-03 16:25:08 +01:00
Hugh O'Brien e51c00fb23
nixos/invidious: Additional fix for user message on 24.05 changes 2024-01-03 10:17:06 -05:00
nicoo 822c0a86bd nixos/pam: Add sshAgentAuth.authorizedKeysFiles option 2024-01-03 14:49:36 +00:00
nicoo a46ea51ca3 nixos/pam: Rename option enableSSHAgentAuth to sshAgentAuth.enable 2024-01-03 14:49:36 +00:00
K900 06cc32ffc3 nixos/sddm: add package option 2024-01-03 17:20:10 +03:00
Jonas Heinrich 818fdce3d0 nixos/nextcloud: Fix corrent option name 2024-01-03 14:08:21 +01:00
github-actions[bot] dc84f21849
Merge master into staging-next 2024-01-03 12:01:04 +00:00
Will Fancher 05706b850a
Merge pull request #273695 from lopsided98/initrd-systemd-lib-firmware
systemd-stage-1: allow non-existent /lib/firmware
2024-01-03 04:30:27 -05:00
Will Fancher 65f0d24178
Merge pull request #278147 from SuperSandro2000/oomd-followup
nixos/oomd: use mkRenamedOptionModule like mentioned in the changelog, add missing section to use slice
2024-01-03 01:09:47 -05:00
Weijia Wang eb5334c27d Merge branch 'master' into staging-next 2024-01-03 03:22:40 +01:00
Sandro Jäckel 27468aae96
nixos/oomd: add missing section to use slice 2024-01-03 02:45:38 +01:00
Weijia Wang 3526f2ffec
Merge pull request #274192 from foo-dogsquared/nixos-guix-add-guix-home-support
nixos/guix: add Guix home support
2024-01-03 01:28:11 +01:00
Mario Rodas 7f0a64976d
Merge pull request #270286 from ajs124/ruby_ossl11_cleanup
ruby_2_7: remove
2024-01-02 18:37:18 -05:00
Christian Kögler 7caca1b185 nixos/vdr: add option user/group and more admin control
- Add option to set user and group name
- Set users home to runtime directory, to avoid mixing of temporal files
  like caches
- Allow admin to control LIRC service by avoiding LIRC enabling
- Allow admin to set libDir, by removing setting argument config to default
- Add package to environment, to allow easy access for admins to helper
  tools like svdrpsend and vdr -h
- Cleanup Nix code by avoiding with statement
2024-01-02 23:17:46 +01:00
williamvds da61f0320f
dnsmasq: Add documentation 2024-01-02 22:07:25 +00:00
Nick Cao f6a028db30
Merge pull request #276808 from SuperSandro2000/portunus-cookie-secure
nixos/portunus: make sure the cookies are only send over https if it …
2024-01-02 16:54:37 -05:00
ajs124 02ad3159b0 ruby_2_7: remove 2024-01-02 15:30:06 +01:00
Bryan Richter e797aaea0b
sshd: Use top-level ports in config check when needed
Previously, if a listenAddress was specified without a `port`, the check
would fail.
2024-01-02 12:51:39 +02:00
K900 887e96e875 Merge remote-tracking branch 'origin/master' into staging-next 2024-01-02 10:55:23 +03:00
Patrick Steinhardt f026ea0db0 nixos/nextcloud: disable output buffering
The Nextcloud admin guide says that output buffering must be turned off
or otherwise PHP will return memory-related errors [1]. As the default
value for this PHP setting is 4096 and thus enabled the Nextcloud setup
is thus misconfigured by default. This misconfiguration will be shown in
the "Security & setup warnings" dialog for the administrator.

Fix this misconfiguration by setting "output_buffering=0" by default.

[1]: https://docs.nextcloud.com/server/stable/admin_manual/configuration_files/big_file_upload_configuration.html#configuring-php
2024-01-02 08:45:42 +01:00
sinanmohd 8314af158f nixos/network-interfaces: fix implicit dependency on underlying device
the bug causes a hard dependency on an underlying device which might not be
valid for all interfaces, also broke the example for networking.sits. this is
due to calling hasAttr first and checking for null afterwards, the bug was
made more apparent in commit 76a3c30
2024-01-02 12:03:29 +05:30
Gutyina Gergő 3306755683
nixos/c2fmzq-server: allow multiple freeform settings 2024-01-01 22:50:16 +01:00
Sandro Jäckel 0a1d1907a5
nixos/oomd: use mkRenamedOptionModule like mentioned in the changelog 2024-01-01 22:33:00 +01:00
Nick Cao 66ea36d4d3
Merge pull request #276159 from AtaraxiaSjel/fix/tor-obfs4proxy
nixos/tor: fix transport plugin exe name
2024-01-01 15:55:04 -05:00
Nick Cao 3d6243a6a9
Merge pull request #276430 from hellodword/patch-1
nixos/tailscale: fix after and wants
2024-01-01 15:52:50 -05:00
Guillaume Girol 38034a860a
Merge pull request #273286 from nh2/sane-backends-package-option
Add hardware.sane.backends-package option.
2024-01-01 21:43:35 +01:00
Maciej Krüger 8f3c9dec12
Merge pull request #278090 from mkg20001/fix-auditd
nixos/auditd: fix typo
2024-01-01 18:35:17 +01:00
Maciej Krüger 4f9e98905e
nixos/auditd: fix typo
Would otherwise fail with

```
       error: A definition for option `systemd.services.auditd.conflicts."[definition 1-entry 1]"' is not of type `string matching the pattern [a-zA-Z0-9@%:_.\-]+[.](service|socket|device|mount|automount|swap|target|path|timer|scope|slice)'. Definition values:
       - In `/nix/store/x2khl2yx0vz2i357x7mz5xm1kagql8ag-source/nixos/modules/security/auditd.nix': "shutdown.target "
```
2024-01-01 17:28:46 +01:00
Ryan Lahfa 10af81720a
Merge pull request #277936 from Izorkin/update-nginx-ktls
nginx: enable ktls support by default
2024-01-01 17:19:11 +01:00
markuskowa 009b625a54
Merge pull request #277792 from ck3d/vdr-updates-2023-12
vdr: updates 2023/12
2024-01-01 16:58:11 +01:00
Guillaume Girol dece72548e nixseparatedebuginfod: add module and nixos test 2024-01-01 13:42:13 +01:00
Izorkin 10c06cb060
nginx: enable ktls support by default 2024-01-01 12:02:57 +03:00
github-actions[bot] e61ae81f8f
Merge master into staging-next 2024-01-01 00:02:16 +00:00
Izorkin 2fb0b52c50
nixos/nginx: disable automatic advertise of HTTP/3 protocol support
Automatic advertise in the `http` block about support of HTTP/3
protocol makes it difficult to automatically configure services
to work with it.
HTTP/3 availability must be manually advertised, preferably in
each location block.
2024-01-01 02:29:01 +03:00
Robert Hensing f4525eefb3
Merge pull request #277949 from pennae/lazy-options-arg-list
nixos/doc: avoid bash argument list size limit
2023-12-31 22:04:01 +01:00
Ryan Lahfa e44341e335
Merge pull request #195805 from Luflosi/grub-use-correct-zfs-version
nixos/grub: use the correct ZFS version
2023-12-31 21:33:37 +01:00
Ryan Lahfa 5ab6191ee5
Merge pull request #276260 from Izorkin/update-nginx-acme-locations
nixos/nginx: change position acmeLocation in nginx configuration
2023-12-31 21:23:17 +01:00
Janik 6be9d4fc21
Merge pull request #266283 from Noodlesalat/ping-exporter-1.1.0
ping_exporter: init at 1.1.0
2023-12-31 20:50:30 +01:00
github-actions[bot] 65cbf5e637
Merge master into staging-next 2023-12-31 18:01:09 +00:00
pennae 4374f2feda nixos/doc: avoid bash argument list size limit
see #277861. as the module list grows the argument size in the
lazy-options nix call grows, eventually reaching a hard limit and
causing the build to fail. writing the list to a file instead and import
it instead of providing it directly circumvents this.
2023-12-31 18:08:46 +01:00
Guillaume Girol 17fc67eb2e
Merge pull request #255464 from georgyo/postfix-dont-use-file-ownership
nixos/postfix: postalias should not use source file permissions
2023-12-31 15:20:48 +01:00
Izorkin d11fe979a2
nixos/nginx: use new variant of http2 option for angie package 2023-12-31 16:52:08 +03:00
Luflosi b2f8b846f2
nixos/kubo: increase maximum UDP send buffer size
In addition to increasing the maximum UDP receive buffer size in the Linux kernel, it is now recommended to do the same for the send buffer size.
This is documented in https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes.
The change to the documentation was made in June: 5b5e58d289.

Without this change, the Kubo daemon will output this warning:
```
failed to sufficiently increase send buffer size (was: 208 kiB, wanted: 2048 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details.
```
This can be seen while running the NixOS tests.
2023-12-31 14:09:27 +01:00
github-actions[bot] dc1ce0d685
Merge staging-next into staging 2023-12-31 12:01:23 +00:00
Martin Weinelt f142aeb3a2
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/scikit-build-core/default.nix
2023-12-31 12:00:30 +01:00
Maciej Krüger 2d9d11dee6
Merge pull request #251782 from vifino/thermald_ignore-cpuid-check
thermald: allow ignoring cpuid check
2023-12-31 11:30:50 +01:00
github-actions[bot] a9cb88c7ae
Merge staging-next into staging 2023-12-31 06:01:28 +00:00
Jan Tojnar 80020c7db4 Merge branch 'master' into staging-next
; Conflicts:
;	pkgs/development/lua-modules/generated-packages.nix
;	pkgs/development/lua-modules/overrides.nix
2023-12-31 02:31:32 +01:00
Ilan Joselevich 210ab761b4
Merge pull request #276294 from phaer/cachix-signing-key
cachix-watch-store: allow to set a signing key
2023-12-31 00:20:52 +02:00
nicoo 607679c6d3 nixos/pam: Assert that authorizedKeysFiles is non-empty when using pam_ssh_agent_auth 2023-12-30 22:19:38 +00:00
Christian Kögler 1c326dcb4f nixos/vdr: wait for network 2023-12-30 21:58:24 +01:00
Izorkin ae5c0c1521
nixos/nginx: skip adding a comment to acmeLocation in nginx configuration 2023-12-30 23:50:02 +03:00
Izorkin 7f1b6d45af
nixos/nginx: change position acmeLocation in nginx configuration 2023-12-30 23:49:58 +03:00
Nick Cao fb6f005181
Merge pull request #272552 from SuperSandro2000/ghostscript-nox
nixos/no-x-libs: add ghostscript
2023-12-30 13:23:42 -05:00
Philip Taron da90576aac
nixos/lxd-agent: fix evaluation regression caused by nixos/nixpkgs#271326 2023-12-30 08:45:30 -08:00
Kiara Grouwstra bdbd8f703b
fix sample value for option services.wordpress.sites.<name>.languages 2023-12-30 16:26:01 +01:00
Izorkin 7ead602f93
nixos/roundcube: add configureNginx option 2023-12-30 15:01:13 +03:00
Izorkin 3b74d8781f
nixos/roundcube: update nginx configuration 2023-12-30 15:01:12 +03:00
Lin Jian 55c1318537
Merge pull request #276180 from linj-fork/pr/kanata-list
nixos/kanata: specify linux-dev as a list
2023-12-29 20:24:56 -06:00
Nick Cao 4a8d35315a
Merge pull request #276407 from sinanmohd/dendrite-sliding-sync
nixos/matrix-sliding-sync: rename, init dendrite
2023-12-29 20:24:47 -05:00
Will Fancher 9cab49c71b
Merge pull request #273921 from SaltyKitkat/oomd
nixos/systemd: update oomd configuration
2023-12-29 18:47:49 -05:00
markuskowa 15b39c2238
Merge pull request #275080 from SomeoneSerge/feat/munge-systemd
nixos/munge: update the systemd service
2023-12-30 00:11:12 +01:00
Maximilian Bosch d25fdec5b3
Merge pull request #212430 from onny/nextcloud-cleanup
nixos/nextcloud: Move options into now freeForm extraOptions
2023-12-29 23:44:24 +01:00
Maximilian Bosch a1f20ed672
Merge pull request #277382 from Ma27/fix-nextcloud-app-routing
nixos/nextcloud: fix nginx routing to store and nix apps
2023-12-29 23:44:12 +01:00
Jonas Heinrich b06d3c3aa6
Merge pull request #277442 from onny/ollama
nixos/ollama: init
2023-12-29 23:00:10 +01:00
Dmitriy Kholkin 0929716b02
nixos/tor: fix transport plugin exe name 2023-12-29 23:20:15 +03:00
Nick Cao 08a62091a1
Merge pull request #277146 from majewsky/portunus-2.0.0
portunus: 1.1.0 -> 2.0.0
2023-12-29 14:53:12 -05:00
sinanmohd e8e5c07ad0 nixos/matrix-sliding-sync: rename, init dendrite 2023-12-30 00:25:57 +05:30
github-actions[bot] 294b981465
Merge staging-next into staging 2023-12-29 18:01:23 +00:00
github-actions[bot] f50aae4fb1
Merge master into staging-next 2023-12-29 18:00:57 +00:00
Maximilian Bosch bae5e65162
nixos/nextcloud: fix nginx routing to store and nix apps
Closes #277206

The bug mentioned above was a symptom of the issue fixed here: when
opening the `forms` app which is installed via `extraApps` (or the
app store) the site wouldn't work because `.mjs` files had the wrong
Content-Type.

The actual problem got fixed already[1], however this config was not
used for stuff from `/nix-apps` & `/store-apps` which had their own
location section with only a `root ;` statement.

In fact, this setup isn't strictly supported by Nextcloud upstream[2],
so to fix this for good, I decided to follow the upstream suggestion for
app directories outside the server root, i.e. linking them back into the
store path.

This means that the module generates a new derivation now with

* `services.nextcloud.package` linked into it via `lndir`.
* under `nix-apps` is a symlink to the link farm containing all apps
  from `services.nextcloud.extraApps`.
* under `store-apps` is a symlink to `/var/lib/nextcloud/store-apps`.
  Since this is only used in the NixOS module that also configures this
  location for imperatively installed apps, this seems an OK thing to
  do.

Successfully tested the change on a productive Nextcloud 28.0.1 with
several apps installed via `extraApps` (`forms`, `cospend`, `maps`,
`user_saml` and a few more).

[1] 292c74c7a9
[2] https://docs.nextcloud.com/server/28/admin_manual/apps_management.html#using-custom-app-directories
2023-12-29 18:59:18 +01:00
nikstur 5a9c0b7600
Merge pull request #267983 from nikstur/replace-simple-activation-2
nixos: replace activationScripts 2/x
2023-12-29 16:29:11 +01:00
Jonas Heinrich 67a799c40f nixos/ollama: init 2023-12-29 15:19:55 +01:00
K900 0403c41f61 nixos/installer: add a link to how to actually upgrade your system to the stateVersion note 2023-12-29 17:01:04 +03:00
Vladimír Čunát de84adb292
Merge branch 'master' into staging-next 2023-12-29 14:00:30 +01:00
nikstur 0ebd39b541 nixos/nix-channel: remove unused stringAfter 2023-12-29 03:41:45 +01:00
nikstur 3be357b2e7 nixos/binfmt: remove unused stringAfter 2023-12-29 03:41:45 +01:00
nikstur d0014a531e nixos/wrappers: order service after sysusers service 2023-12-29 03:41:45 +01:00
nikstur 65ff518a0d nixos/ipa: replace activationScript
Replaced with a dedicated systemd service.
2023-12-29 03:41:45 +01:00
nikstur 8d3cf213db nixos/borgbackup: replace activationScript via tmpfiles 2023-12-29 03:41:45 +01:00
nikstur af87c19427 nixos/yggdrasil: replace activationScript
Replace with separate service because it cannot be moved into the
preStart of the yggdrasil service.
2023-12-29 03:22:27 +01:00