Commit graph

7957 commits

Author SHA1 Message Date
isabel 063267b711
nixos/syncthing: fix flags against 2.0 release 2025-08-31 09:02:19 +01:00
andre4ik3 b95b91c956
nixos/dnscrypt-proxy: rename from dnscrypt-proxy2
Renames the `dnscrypt-proxy2` module (back) to `dnscrypt-proxy`, to
match the package, which was renamed in 2023.

The systemd service is also renamed to `dnscrypt-proxy`, but an alias to
`dnscrypt-proxy2` is provided for backwards compatibility.
2025-08-31 00:17:07 +00:00
Adam C. Stephens ffc8f1707b
river: rename to river-classic 2025-08-30 18:49:56 -04:00
Maximilian Bosch 510532e9ae
linux_6_15: remove
EOL upstream.

We only have one hardened kernel at the moment now because
LTS == latest available. This situation would've also happened before
the cleanup since 6.13/6.14 were removed in June already[1].

[1] 23b573705d
2025-08-30 13:53:01 +02:00
Ben Siraphob cc5b731ed3
doc: fix typos 2025-08-27 11:46:26 -07:00
Robert Hensing 5bd040e3c3
Modular services: no pkgs (#435092) 2025-08-27 12:21:59 +02:00
Niklas 9d46cdc9f3
Merge branch 'master' into init-spoolman-service 2025-08-27 09:23:47 +02:00
Bang Lee d323f29257 nixos/wayvnc: init 2025-08-26 16:52:53 -07:00
Nick Cao 1b7a161df4
fctix5 packages and module update (#417815) 2025-08-26 15:43:17 -04:00
Emily 42a1d455ce nixos/doc/imperative-containers: add boot.enableContainers note 2025-08-25 20:20:56 +01:00
misuzu efd138d038
nixos/temporal: init module (#436466) 2025-08-25 21:39:38 +03:00
Florian Klink 6d3383c9e3
nixos/logind: migrate to settings option (#435407) 2025-08-25 13:31:13 +03:00
Felix Buehler 89526e1171 nixos/logind: migrate to settings option 2025-08-24 18:52:40 +02:00
Jonathan Davies f20852e46f
doc/release-notes: 25.11: Add Temporal item to new services 2025-08-24 16:37:00 +00:00
Rick van Schijndel 6b0b1559e9
nixos/restic: add command option (#432329) 2025-08-24 13:35:28 +02:00
Fernando Rodrigues adc70ce776
nixos/byedpi: init (#435882) 2025-08-23 08:17:19 +00:00
wrrrzr cf9404b315
nixos/byedpi: init 2025-08-22 16:30:40 +03:00
nixpkgs-ci[bot] d263613f2e
Merge master into staging-next 2025-08-22 12:06:42 +00:00
Jade Lovelace 602cc45c09 nixos/gateone: remove
The package is literally gone, this could never work.
2025-08-21 21:39:45 -07:00
nixpkgs-ci[bot] 2b24f84f9a
Merge master into staging-next 2025-08-21 21:18:31 +00:00
Nick Cao 09950e401c
sing-box: 1.11.15 -> 1.12.3, nixos/sing-box: add user and group, nixosTests.sing-box: migrate config (#430835) 2025-08-21 16:49:42 -04:00
nixpkgs-ci[bot] 53fe08332e
Merge master into staging-next 2025-08-21 20:43:13 +00:00
K900 9913dd115d nixos/doc/rl-2511: relnote Plasma/Gear 5 removal 2025-08-21 23:21:45 +03:00
K900 35d0bafabf nixos/treewide: clean up Plasma 5 references
Preparing to drop.
2025-08-21 22:31:56 +03:00
rowan amber-jones 73f8c1e61e nixos/restic: add test for command option, add release notes
Test checks that we are able to run a backup from a command, and that
the resulting backup has the contents that we passed into it.
2025-08-21 19:48:18 +01:00
Marcel 8d8c9633bf
nixos/ifstate: init 2025-08-21 17:44:54 +02:00
Sizhe Zhao 5bcb1aca6f
nixos/doc/manual/release-notes/rl-2511: add sing-box 2025-08-21 13:31:25 +08:00
MayNiklas 977c55de24 spoolman: init service 2025-08-20 22:39:14 +02:00
Vonfry 43d364787c
nixos/fcitx5: remove i18n.inputMethod.fcitx5.plasma6Support 2025-08-20 19:26:50 +08:00
Robert Hensing 90162e8113 nixos/service/portable: Provide an entrypoint function
... and tidy up in various small ways.

This should help a bit to make more clear the separation between
the portable parts and the systemd system service parts.
2025-08-20 11:58:12 +02:00
Robert Hensing d88b9464b0 system.services: Remove ambiguous, redundant pkgs module argument
Primary reasons: remove implicit dependencies and force uniformity.
See nixos/modules/system/service/README.md for detailed rationale.
2025-08-20 11:44:06 +02:00
nixpkgs-ci[bot] 8721febb4b
Merge master into staging-next 2025-08-20 00:16:19 +00:00
dotlambda 32991f1eac
nixos/immich: add support for VectorChord (#428568) 2025-08-19 13:31:01 -07:00
dish 375ab11873
bluesky-pds: rename from pds (#434864) 2025-08-19 16:05:09 -04:00
isabel ddd7db501d
nixos/bluesky-pds: rename from pds 2025-08-19 20:59:04 +01:00
henning phan ebb095396d nixos/zookeeper: replace outdated log4j with logback.xml
Since some versions back zookeeper replaced log4j with logback.xml

See issue https://issues.apache.org/jira/browse/ZOOKEEPER-4427
See commit 85551f9be5
2025-08-19 21:27:00 +02:00
Vladimír Čunát fea9068624
Merge branch 'master' into staging-next 2025-08-19 18:56:00 +02:00
Sefa Eyeoglu a9c17c34b1
nixos/immich: add VectorChord migration docs
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:56:20 +02:00
Sefa Eyeoglu 0b93bf6c22
nixos/immich: add enableVectors option
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:55:28 +02:00
Sefa Eyeoglu fd1994a8b7
nixos/immich: add enableVectorChord option
This enables VectorChord in the database (currently) alongside
pgvecto.rs. Note that VectorChord requires pgvector, which is enabled as
well by this option.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-08-19 17:55:14 +02:00
Robert Hensing ce7fefb396
Contributor documentation for Modular Services (#431396) 2025-08-19 15:18:48 +02:00
nixpkgs-ci[bot] 472a23ebc4
Merge master into staging-next 2025-08-18 18:05:47 +00:00
Jonathan Davies eba6963678
doc/release-notes: 25.11: Added KMinion item to new services. 2025-08-17 14:07:15 +00:00
nixpkgs-ci[bot] cbe1ad6d28
Merge master into staging-next 2025-08-15 17:34:15 +00:00
Sandro 316781dc81
conman: init at 0.3.1 (#430136) 2025-08-15 18:25:32 +02:00
Fabián Heredia Montiel 675812fca5 Merge remote-tracking branch 'origin/master' into staging-next 2025-08-14 09:23:01 -06:00
Leona Maroni 9b8ea589ea
nixos/acme: improve scalability - reduce superfluous unit activations (#422076) 2025-08-14 16:06:06 +02:00
Christian Theune 2c111ce343 nixos/acme: update release notes and documentation 2025-08-13 14:34:53 +02:00
frantathefranta 8b97231460 nixos/conman: init module
Adding a service for the conman package

Changes to conman service as per review
2025-08-13 08:26:35 -04:00
nixpkgs-ci[bot] d060c7e4de
Merge master into staging-next 2025-08-13 12:07:08 +00:00
Gaétan Lepage d74de54834
overseerr: init at 1.34.0 (#399266) 2025-08-13 12:51:09 +02:00
Jeremy Kescher a1545a073c
nixos/systemd: drop kbrequest.target symlink 2025-08-12 22:50:39 +02:00
Paul Haerle 086d855355
netbird: 0.49.0 -> 0.54.0 + split up + relicense (#431976) 2025-08-11 22:10:25 +02:00
Krzysztof Nazarewski f1277e5434
netbird: 0.49.0 -> 0.54.0 + split up + relicense
- 0.53.0+ relicensed the server components
  - as a result split into per-component packages
- adds missing 2 upload & relay components
- the tested behavior has changed
2025-08-11 20:46:42 +02:00
Franz Pletz 43a602c25d
nixos/libvirtd: allow changing firewall backend (#432610) 2025-08-11 16:00:12 +02:00
Mikael Voss 6d98ba9b24 nixos/doc/rl-2511: mention boot.kernel.sysfs addition 2025-08-11 12:16:59 +05:30
André Lima 28d3245201
nixos/libvirtd: allow changing firewall backend 2025-08-10 21:06:54 +01:00
Robert Hensing 0b9a1cb426 nixos/README-modular-services: init 2025-08-09 00:32:59 +02:00
Jessie Ross 6d57bd2ab5 release-notes: move command-not-found note from nixpkgs notes to nixos 2025-08-08 14:45:22 +02:00
Maximilian Bosch 3e41a080eb
Merge: nixos/nextcloud: configure redis by default (#421813) 2025-08-07 17:27:21 +02:00
Sandro ef2f192da2
prosody: 0.12.4 -> 13.0.2, fix nixos test (#429967) 2025-08-06 00:16:29 +02:00
Wolfgang Walther fed181fac1
nixos/doc/modular-services: run nixfmt on code blocks 2025-08-05 17:08:45 +02:00
Matthias Beyer 2c06381907
nixos/traccar: Rework configuration file creation. (#413653) 2025-08-04 10:26:00 +02:00
Philipp 620f813ef4
nixos/services.mysql: Fix restart on-abnormal 2025-08-04 10:23:03 +02:00
Sandro Jäckel ccefdbb587
nixos/release-notes: add notes for prosody 13.0.0. 2025-08-04 00:58:50 +02:00
Martin Weinelt 56674702b0
nixos/postfix: modernize, cleanup (#416840) 2025-08-02 23:50:59 +02:00
Frédéric Christ 51462b8a68 nixos/traccar: Rework configuration file creation.
Previously, a flat attribute set was expected. The new implementation
uses nested attribute sets. This is a breaking change.
2025-08-01 21:25:45 +02:00
Martin Weinelt 434d6fdcf9
zigbee2mqtt: default to zigbee2mqtt_2 2025-08-01 18:28:14 +02:00
Seth Flynn f80495afef
tuned: init at 2.25.1 (#357480) 2025-08-01 07:28:32 -04:00
Seth Flynn 3eeb7ad06a
nixos/tuned: init 2025-08-01 06:20:49 -04:00
Sandro Jäckel 0a92661ec3
nixos/release-notes: add entry for services.prosody.checkConfig 2025-08-01 04:10:50 +02:00
Will Fancher dd1cd545b9 nixos/release-notes: Move display manager note to NixOS manual 2025-07-30 18:11:56 -04:00
Pol Dellaiera 80661f912f nixos/private-gpt: drop 2025-07-30 08:20:28 +02:00
Niklas Hambüchen 436a8a1152
umami: init at 2.19.0; nixos/umami: init (#380249) 2025-07-29 16:48:52 +02:00
Diogo Correia 5d6b6bad55 doc: add services.umami to 25.11 release notes 2025-07-29 14:38:02 +00:00
Sandro 781856bcb7
go-httpbin: init at 2.18.3, nixos/go-httpbin: init module (#427717) 2025-07-29 15:48:11 +02:00
Martin Weinelt 7f52135a59
nixos/postfix: fold main and master config into settings attribute 2025-07-28 17:03:08 +02:00
Grimmauld 6cd6573d41
nixos/doc/rl-2511: document rfc42 conversion for systemd.extraConfig 2025-07-28 11:26:47 +02:00
Izorkin cbec672b38
nixos/libretranslate: init 2025-07-27 03:46:22 +02:00
Sandro Jäckel 9e2d007b94
nixos/nextcloud: configure redis by default 2025-07-26 23:31:35 +02:00
Zahrun 1c26e0e7a9 speedify: init at 15.6.4-12495
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Co-authored-by: emaryn <197520219+emaryn@users.noreply.github.com>
2025-07-25 15:54:44 +05:30
Jade Lovelace 4f93d9a2d1 mx-puppet-discord: remove
According to emilazy these were the only usages of sha1 in nixpkgs:

```
pkgs/servers/mx-puppet-discord/node-packages.nix
111:        sha1 = "532e01241dbcb0f2769f1b9a7cde313d30101173";
120:        sha1 = "68018cab4f59834b3fef2e59fbfd52938403e001";
129:        sha1 = "52b0e8bb808a1202602899af67939b049dd42402";
138:        sha1 = "0a37a3f9430ff7c29512d29882e25ae738a31283";
```

Anyone motivated to maintain it can feel free to restore this, it's just
not maintained at the moment, and the sha1 hashes need to go.

This was found after Ericson proposed implementing something like
https://github.com/NixOS/nix/issues/13544 in Lix, which led to the
question "who is using sha1 anyway?" and the realization we could just
*remove* support for it outside of .. the known chromium crimes.
2025-07-24 19:31:06 -07:00
Sandro 9928a21a4e
nixos/mautrix-whatsapp: upgrade default config (#420722) 2025-07-24 22:09:34 +02:00
Robert Hensing f5ee08446a
Modular services (#372170) 2025-07-24 16:46:34 +02:00
Wolfgang Walther 0f3f710c86
nixos/doc/wireless: fix comments
Those had been misplaced by nixfmt.
2025-07-24 13:52:36 +02:00
Wolfgang Walther 62fe016519
treewide: run treefmt with mdcr/nixfmt 2025-07-24 13:52:31 +02:00
Wolfgang Walther 6c47e7d5da
treewide: fix syntax errors in nix code blocks
Fixes all code blocks with "nix" language in markdown files for syntax
errors to be able to run nixfmt in the next step.
2025-07-24 13:52:29 +02:00
Michele Guerini Rocco 6424dede0c
nixos/network-interfaces: improve IPv6 support (#417150) 2025-07-23 16:51:24 +02:00
Defelo 224dc30d39
nixos/go-httpbin: init module 2025-07-23 16:17:47 +02:00
André Silva fcf647a843
nixos/qbittorrent: init (#287923) 2025-07-22 12:48:41 +01:00
jf-uu 50b7400d93 nixos/overseerr: init
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2025-07-22 12:43:33 +01:00
Frank Moda 12ed2954d4 nixos/homebridge: init 2025-07-22 15:26:19 +05:30
nuko 84d174e312
nixos/qbittorrent: init service module
nixos/qbittorrent: add default serverConfig & fix test

Migrate to runTest

Replace lib.optional with lib.optionals

nixos/qbittorrent: update release notes to 2511
2025-07-22 17:39:46 +12:00
Matthew Croughan 530db85404
nixos/atalkd: init (#425554) 2025-07-21 18:29:33 +01:00
matthewcroughan 75929b4612 nixos/atalkd: init 2025-07-21 18:16:26 +01:00
Jacek Galowicz 10d564cb5c
nixos/doc: clarify scope of debugHook feature in the test driver (#426935) 2025-07-21 09:59:37 +02:00
Alexandru Scvorțov 1ff3dc1245 matrix-tuwunel: add service module 2025-07-21 01:52:09 +05:30
Maximilian Bosch 9372904a35
nixos/doc: clarify scope of debugHook feature in the test driver
As discussed with tfc before, it's probably better in most cases to try
the interactive test-driver with the SSH backdoor first and resort to
this feature for flaky tests.
2025-07-20 15:46:14 +02:00
Yt ff3ffc8143
nixos/meilisearch: generic settings; handle secrets better. + fix racy test (#424481) 2025-07-20 04:48:44 -04:00
Robert Hensing 1f4e476269 nixos/doc: Modular services introduction is formally 25.11
I think we should backport it nonetheless.
2025-07-20 03:19:28 +02:00
Robert Hensing af04a80c76 modular-services: merge process.argv from executable and args 2025-07-20 03:01:06 +02:00
Robert Hensing 03c4d4bc66 nixos/doc/modular-services: Use package attr in example
Without a proper introduction it's really really hard to make sense of the examples, and where values come from; which are arbitrary, which are conventional, which are hard-coded into some part of the framework.

Co-authored-by: Valentin Gagarin <valentin@gagarin.work>
2025-07-20 03:01:06 +02:00
Robert Hensing 7d7b678ed6 nixos/doc/modular-services: Explain configuration mgmt framework
Co-authored-by: Valentin Gagarin <valentin@gagarin.work>
2025-07-20 03:01:06 +02:00
Robert Hensing b7ded19010 nixos/doc: Add modular services section 2025-07-20 03:01:06 +02:00
Felix Buehler 140a6b4522 nixos/lemurs: init 2025-07-19 16:15:58 +05:30
Maximilian Bosch c808181a64
Merge: test-driver: Implement debugging breakpoint hooks (#422066) 2025-07-18 19:13:20 +02:00
Jacek Galowicz d6b326d659
test-driver: Implement debugging breakpoint hooks
Co-authored-by: Maximilian Bosch <maximilian@mbosch.me>
2025-07-18 17:39:01 +02:00
Sandro d69cbe23e1
nixos/chhoto-url: init module (#424630) 2025-07-18 13:32:14 +02:00
Aleksana 03b3a97679
nixos/newt: init (#414337) 2025-07-18 19:07:59 +08:00
Defelo 55e6f26bff
nixos/chhoto-url: init module 2025-07-18 12:00:32 +02:00
dish 21e98fc8a9
forgejo: 11.0.3 -> 12.0.0
https://forgejo.org/2025-07-release-v12-0/

https://codeberg.org/forgejo/forgejo/milestone/12836
2025-07-17 11:46:43 -04:00
xanderio caea8a1c0a
nixos/dependency-track: fix default JVM heap size (#425747) 2025-07-17 16:11:36 +02:00
jack 9501130c38 nixos/newt: init 2025-07-17 13:04:13 +02:00
Sebastian Kowalak e33d7087b6
nixos/paisa: init 2025-07-16 22:00:12 +02:00
Julian Stecklina 5517b6f068 nixos/dependency-track: fix default JVM heap size
The default of 4GB is too low for a production setup and causes
DependencyTrack to hit java.lang.OutOfMemoryError. This causes
Dependency Track to enter a weird state where it will throw 502 and
504 errors.

The initial 4GB was set to make Dependency Track run in the (too
small) VM in the NixOS integration test. Move the explicit heap
configuration there. For the service itself, we now don't set a limit.
This means the JVM will choose its maximum heap on its own, which does
a much better job for realistic scenarios.

I added a release note, because people who run Dependency Track on
very tiny VMs/machines may experience issues.
2025-07-16 12:16:49 +02:00
Martin Weinelt fbc56958af
nixos/pfix-srsd: migrate postfix integration from postfix module
The postfix module is too big to host every individual integration option
and moving it here has no downside.
2025-07-15 22:04:28 +02:00
Martin Weinelt 9a9073fc89
nixos/postsrsd: integrate with postfix by default 2025-07-15 20:29:35 +02:00
Kevin Cox 8ff28f4d78
sparkleshare: Remove
The project has been unmaintained for a while now and has started failing to build.

Abandonment notice from the maintainer: https://github.com/hbons/SparkleShare/issues/2006

It has been a good run but it is time to say goodbye. Thanks to hbons for all of the work over the years. It looks like there is a good chance of a fork living on but it will take time to see how that shakes out. So for now let's just remove the package.
2025-07-15 08:22:27 -04:00
Leona Maroni 41ff90fcd4
nixos/varnish: turn listen addresses into structured config (#421481) 2025-07-15 13:13:50 +02:00
sodiboo 5a8660f10f nixos/meilisearch: generic settings; handle secrets better. 2025-07-13 20:42:05 +02:00
Vladimír Čunát b47d4f01d4
staging-next 2025-07-04 (#422427) 2025-07-13 19:33:14 +02:00
Wolfgang Walther 733f85ec4f
fanctrl: init at 1.0.3; add nixos module (#388514) 2025-07-13 16:36:41 +00:00
Svenum cfe95170f1 nixos/fw-fanctrl: init 2025-07-13 18:22:47 +02:00
nixpkgs-ci[bot] 8457b9345d
Merge master into staging-next 2025-07-13 00:20:06 +00:00
nixpkgs-ci[bot] 8d8db2ff25
Merge master into staging-next 2025-07-12 00:17:12 +00:00
Izorkin 80318319cb
libvirt: add support nftables backend 2025-07-11 23:51:20 +03:00
Philip Taron 8279ffe622
treewide: specify that mebibytes are used when it's ambiguous (#424169) 2025-07-11 12:29:33 -07:00
rnhmjoj 0bd522a407
nixos/release-notes: mention networking.interfaces changes 2025-07-11 09:44:49 +02:00
K900 77e81dbfc2 Merge remote-tracking branch 'origin/master' into staging-next 2025-07-11 09:24:31 +03:00
Connor Baker 6af71350c3
nixos/tee-supplicant: add tee-supplicant module (and more) (#237613) 2025-07-10 16:35:55 -07:00
Axel Karjalainen 7159ab6f43 treewide: specify where mebibytes are used when it's ambiguous 2025-07-11 00:44:23 +03:00
Kabbone 6e5554c44c
nixos/mautrix-whatsapp: add manual entry 2025-07-09 20:49:36 +02:00
Christian Theune 8046e4a6f8 nixos/varnish: turn listen addresses into structured config
Introduces `services.varnish.listen` as a list of structured
listen addresses with all allowed variations of arguments
documented in the man page.

Deprecates `services.varnish.http_address`.
2025-07-08 13:52:55 +02:00
K900 e2c8c4260d Merge remote-tracking branch 'origin/master' into staging-next 2025-07-07 10:09:49 +03:00
Martin Weinelt 468768b93b
Reapply "nixos/dovecot: improve and harden systemd unit" (#422829) 2025-07-07 01:25:22 +02:00
Martin Weinelt 5f9db3b506
nixos: stop using/installing nettools by default (#422270) 2025-07-07 00:32:19 +02:00
nixpkgs-ci[bot] 07ab953baa
Merge master into staging-next 2025-07-06 16:43:42 +00:00
Ruby Iris Juric 11d8fbb0b6
nixos/sharkey: init module 2025-07-07 01:01:39 +10:00
Martin Weinelt 6403717045
Reapply "nixos/dovecot: improve and harden systemd unit"
This reverts commit a794031c59.

With the following additions:

Allow `CAP_KILL`, so the dovecot master process may interrupt its child
processes.

Allow new privileges, so dovecot and call the setuid sendmail executable.

Allow AF_NETLINK sockets, so dovecot sieve handling can use the
getifaddrs syscall.

Finally, we now asssert, that no options are set on the legacy dovecot2
systemd unit name, to make the user aware they need to update their
overrides.
2025-07-06 14:39:40 +02:00
nixpkgs-ci[bot] 60677469ef
Merge master into staging-next 2025-07-06 12:06:26 +00:00
Michele Guerini Rocco 7a473d6701
nixos/monero: add environmentFile option (#421759) 2025-07-06 14:02:49 +02:00
K900 4e59c97081 Merge remote-tracking branch 'origin/master' into staging-next 2025-07-06 14:55:19 +03:00
Robert Hensing 7845abc842
NixOS test framework: add overriding methods (#421480) 2025-07-06 13:40:24 +02:00
Robert Hensing f2b3aeb383 nixos.runTest: Add extendNixOS 2025-07-06 13:39:15 +02:00
Robert Hensing 63e2606ddf nixos.runTest: Add extend, overrideTestDerivation 2025-07-06 13:39:15 +02:00
Jaco Malan 1fb02bc8f9
nixos/monero: add environmentFile option 2025-07-06 10:33:44 +02:00
Martin Weinelt bf1b4d35fb
networking: don't install nettools by default
https://lwn.net/Articles/710533/ has been true in 2017 and still holds
today.
2025-07-06 00:59:36 +02:00
nixpkgs-ci[bot] 61be326d8b
Merge master into staging-next 2025-07-05 18:05:00 +00:00
Maximilian Bosch 85ec73855b
Merge: nixos/nextcloud: document nextcloud-occ command (#422639) 2025-07-05 18:44:48 +02:00
nixpkgs-ci[bot] d5e57e9a43
Merge master into staging-next 2025-07-05 12:06:19 +00:00
Maximilian Bosch 5a6f0a43ae
nixos/nextcloud: document nextcloud-occ command
It's not clear how to use this command in other systemd units, this
section gives a recommendation.

I realized that there's no explicit mention of `nextcloud-occ` in the
first place, so I wrote some introductory sentences as well.
2025-07-05 12:42:06 +02:00
K900 a6900e5833
nixos/lasuite-meet: init (#407742) 2025-07-05 10:21:40 +03:00
soyouzpanda 15f71480e2 nixos/lasuite-meet: init 2025-07-05 10:10:15 +03:00
Jared Baur b8937303ce
nixos/tee-supplicant: add tee-supplicant module
The tee-supplicant is a program that interacts with OP-TEE OS and allows
loading trusted applications at runtime (among other things). There is
an `optee` test included that uses the pkcs11 trusted application (in
upstream OP-TEE OS), loads it during system startup via tee-supplicant,
and uses `pkcs11-tool` to list available token slots.
2025-07-04 15:46:25 -07:00
nixpkgs-ci[bot] 326447983d
Merge master into staging-next 2025-07-04 18:05:45 +00:00
Wolfgang Walther 778b27d2e9
doc: fixed number of Privacy Extensions RFC 4941 (#393402) 2025-07-04 15:45:08 +00:00
Sandro 3f03e8984e
renovate: 40.60.0 -> 41.16.0 (#420717) 2025-07-04 14:44:38 +02:00
nixpkgs-ci[bot] fa737a17ea
Merge staging-next into staging 2025-07-04 12:08:16 +00:00
Cosima Neidahl 7624084e1a
nixos/corteza: init, nixosTests.corteza: init (#420428) 2025-07-04 11:19:36 +02:00
nixpkgs-ci[bot] 04de8eaaf8
Merge staging-next into staging 2025-07-04 06:07:14 +00:00
K900 32ee423db2
nixos/installer: ship the minimal ISO with networkmanager (#421082) 2025-07-04 05:05:19 +03:00
Martin Weinelt a289362e80
networkmanager: drop hard dependency on openconnect and cleanup plugin handling (#421042) 2025-07-04 03:08:40 +02:00
nixpkgs-ci[bot] 4725dc1d5d
Merge staging-next into staging 2025-07-03 18:06:42 +00:00
Wolfgang Walther bed266e629
nixos/postgresql: add section about pg_config (#421516) 2025-07-03 17:43:23 +00:00
Maximilian Bosch e031c5ff6b
nixos/postgresql: add section about pg_config
See https://discourse.nixos.org/t/i-cannot-for-the-life-of-me-find-the-package-that-has-pg-config/66244/4

I decided against doing this in its own nixpkgs manual: the line
to draw is quite blurry already (e.g. we have documented our package
removal policy in here as well) and having to check two manuals for a
single subsystem feels pretty annoying to me.

The relevant part - where to find pg_config - is written at the top. I
decided to give a bit more context about the way our packaging works
since I realized a few times now that I don't remember all the details
about the problems we had in the past and having to look up individual
commit messages for that isn't very productive.
2025-07-03 19:33:01 +02:00
nixpkgs-ci[bot] e17ff436c8
Merge staging-next into staging 2025-07-01 18:06:27 +00:00
Wolfgang Walther 5b1225460c
doc/installing-pxe: fix formatting (#421239) 2025-07-01 12:25:03 +00:00
Leonardo Taglialegne 48bc90c3a8 doc/installing-pxe: fix formatting 2025-07-01 14:00:16 +02:00
Sizhe Zhao 3034ec7d07
nixos/doc/rl-25.11: add corteza 2025-07-01 19:21:06 +08:00
nixpkgs-ci[bot] 62814d33b6
Merge staging-next into staging 2025-06-30 18:06:45 +00:00
Franz Pletz 8fcfcabfe7
nixos/documentation: compress configuration.nix.5 (#418972) 2025-06-30 16:40:48 +02:00
Jonathan Davies d095a566cb
nixos/release-notes: Add note about ntpd-rs configuration validation 2025-06-30 15:25:19 +02:00
nixpkgs-ci[bot] eee21ba9fa
Merge staging-next into staging 2025-06-30 12:08:05 +00:00
emilylange d2a7d40650 nixos/sourcehut,sourcehut.*,nixosTests.sourcehut: drop
Sourcehut went a year with no update in nixpkgs, the packages did not
build for months, the module has issues at runtime, one of the
maintainers stopped using NixOS entirely and the other two don't respond
to issues.

Upstream has since also deprecated the Arch Linux and Debian
repositories to install Sourcehut. The only official way that remains is
Alpine Linux on x86_64-linux.
2025-06-30 12:29:16 +02:00
Martin Weinelt 1ef7d63228
nixos/installer: ship the minimal ISO with networkmanager
With networkmanager we can provide a much more welcoming network setup
experience in the installer and it costs us less than 10 MB with this
configuration on the minimal ISO.

By default, for new profiles it will enable DHCP and RA and allow
interactive reconfiguration through `nmtui` or `nmcli`. Especially the
TUI interface is very easy to pick up and removes the need for typing in
manual commands when setting up the WLAN connection.
2025-06-30 10:37:11 +02:00
Martin Weinelt ccdca43d80
nixos/networkmanager: drop default plugin list and toggle
It is unclear where this list originated, but it doesn't make sense to
ship it with all networkmanager installations. The most excessive plugin
is openconnect, that ships a 250 MB closure including webkitgtk.

Instead users now have to specify the plugins they want explicitly. I
updated the option to give hints on how to find them as best as I can.
2025-06-30 08:40:05 +02:00
Jörg Thalheim 34b498526c
nixos/easytier: init module (#398170) 2025-06-30 08:13:27 +02:00
nixpkgs-ci[bot] 6d1ef78814
Merge staging-next into staging 2025-06-30 00:19:30 +00:00
Wolfgang Walther b4532efe93
**/README.md: one sentence per line
As documented in doc/README.md.
2025-06-29 21:14:32 +02:00
L-Trump 725a756dbb nixos/easytier: init module 2025-06-28 23:22:51 +08:00
Marie Ramlow cdc95fd814 nixos/doc/rl-2511: document renovate major upgrade 2025-06-28 10:29:36 +02:00
K900 5985f13b69 Merge remote-tracking branch 'origin/staging-next' into staging 2025-06-27 21:07:44 +03:00
Maximilian Bosch a064abed61
Merge: nixos/postgresql: move postStart into separate unit (#403645) 2025-06-27 18:09:54 +02:00
Rémi NICOLE 17f82c3cd7
nixos/netbox: don't force use of sudo in netbox-manage (#419237) 2025-06-27 13:10:55 +00:00
nixpkgs-ci[bot] 367477b054
Merge staging-next into staging 2025-06-24 18:06:44 +00:00
Wolfgang Walther 9656e1aa9d
nixos/postgresql: make postgresql.target wait until recovery is done
The new postgresql.target will now wait until recovery is done and
read/write connections are possible.

This allows ensure* scripts and downstream migrations to work properly
after recovery from backup.

Resolves #346886
2025-06-24 15:26:48 +02:00
Wolfgang Walther 41c5662cbe
nixos/postgresql: move postStart into separate unit
This avoids restarting the postgresql server, when only ensureDatabases
or ensureUsers have been changed. It will also allow to properly wait
for recovery to finish later.

To wait for "postgresql is ready" in other services, we now provide a
postgresql.target.

Resolves #400018

Co-authored-by: Marcel <me@m4rc3l.de>
2025-06-24 15:26:47 +02:00
Wolfgang Walther 3a63b54b2c
nipap: init at v0.32.7 (#417076) 2025-06-24 13:18:00 +00:00
nixpkgs-ci[bot] efb976c94b
Merge staging-next into staging 2025-06-24 12:08:14 +00:00
Izorkin f5c5dc5f5b nixos/gitea/mailer: fix using sendmail 2025-06-24 11:47:50 +02:00
Taliyah Webb 33ab0a191e
nixos/netbox: don't force use of sudo in netbox-manage 2025-06-24 11:20:10 +02:00
Luke Granger-Brown a013d9258c nixos/nipap: init 2025-06-23 21:52:32 +01:00
K900 a10dfa1005 Merge remote-tracking branch 'origin/staging-next' into staging 2025-06-23 21:07:45 +03:00
Yorick cb6adfec42
victorialogs: init at 1.24.0 (#418806) 2025-06-23 17:05:41 +02:00
nixpkgs-ci[bot] cd0486dcd0
Merge staging-next into staging 2025-06-22 12:07:03 +00:00
Anton Mosich 97b9708f76
nixos/documentation: compress configuration.nix.5
This saves a few MB of disk space (8.4 -> 1.2 MB).
2025-06-22 13:50:31 +02:00
Guillaume Girol 129d9338e5
nixos/mautrix-discord: init mautrix-discord module (#404871) 2025-06-22 11:35:25 +02:00
nixpkgs-ci[bot] d9f7cbb224
Merge staging-next into staging 2025-06-22 00:20:02 +00:00
John Titor 2ddd28966a nixos/doc/rl-25.11: add entry for bcachefs autoscrub
Signed-off-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
2025-06-22 02:58:48 +05:30
Marie Ramlow 5f5df9b7ad doc/rl-2511: document victorialogs package migration 2025-06-21 21:00:40 +02:00
nixpkgs-ci[bot] 7ca18ff1be
Merge staging-next into staging 2025-06-21 18:06:16 +00:00
Aleksana 46968b2c89
nixos/doc: document defining basic systemd services (#418385) 2025-06-21 23:22:27 +08:00
nixpkgs-ci[bot] 61df693362
Merge staging-next into staging 2025-06-20 12:08:09 +00:00
Maximilian Bosch 02dd6f762c
Merge: nixos/postgresql: make postgresql_17 the new default (#417502) 2025-06-20 13:09:11 +02:00
Arnout Engelen aba83e0a5d
nixos/doc: document defining basic systemd services 2025-06-20 11:55:11 +02:00
Ramses 62bebf864c
nixos/wstunnel: convert to RFC42-style settings (#415326) 2025-06-20 11:02:46 +02:00
K900 678cac2a01 Merge remote-tracking branch 'origin/staging-next' into staging 2025-06-20 09:07:52 +03:00
Emily dc90d27011
treewide: remove Perl-based switch-to-configuration (#414882) 2025-06-19 20:30:55 +01:00
nixpkgs-ci[bot] b2eaef7225
Merge staging-next into staging 2025-06-19 18:06:05 +00:00
Leona Maroni 0a8f3e11c0
fediwall: init at 0.4.0 (#413666) 2025-06-19 18:11:51 +02:00
nixpkgs-ci[bot] b6b1a8bcc0
Merge staging-next into staging 2025-06-19 00:18:48 +00:00
Adam Hellberg d202498189 gitversion: 5.12.0 -> 6.3.0
GitVersion 6.x brings some breaking changes to the config format,
having an up to date version is important for those working with the
newer format.

Release notes for 6.3.0 are here:
https://github.com/GitTools/GitVersion/releases/tag/6.3.0

But the notes for 6.0.0 document the breaking changes:
https://github.com/GitTools/GitVersion/releases/tag/6.0.0

Of note is that the website (https://gitversion.net) still advertises
5.12.0 in the top nav, but the [docs][1] refer to
[the new configuration format][2] introduced in 6.x, as well as
[updated version variables][3].

[1]: https://gitversion.net/docs/
[2]: https://gitversion.net/docs/reference/configuration
[3]: https://gitversion.net/docs/reference/variables
2025-06-18 22:53:59 +02:00
r-vdp 3c853295d9
nixos/wstunnel: convert to RFC42-style settings 2025-06-18 17:31:13 +02:00
nixpkgs-ci[bot] d91fe0541b
Merge staging-next into staging 2025-06-18 06:07:15 +00:00
nixpkgs-ci[bot] 63fd3b2b2c
Merge master into staging-next 2025-06-18 06:06:20 +00:00
Martin Weinelt ec572d581a
tlsrpt-reporter: init at 0.5.0 (#415483) 2025-06-18 03:47:15 +02:00
transcaffeine ba7d1fec08
nixos/fediwall: init 2025-06-17 20:45:25 +02:00
Maximilian Bosch 950a089393
nixos/postgresql: make postgresql_17 the new default
That's overdue actually, given that it was released last fall.
2025-06-17 12:33:21 +02:00
nixpkgs-ci[bot] d07fa982d9
Merge staging-next into staging 2025-06-16 12:07:59 +00:00
K900 458a0d727d Merge remote-tracking branch 'origin/master' into staging-next 2025-06-16 12:41:22 +03:00
Alejandro Sánchez Medina 60264c48e9
doc: point manual contributing guides to devmode's README (#411326)
There's quite a bit of pingpong redirection with Nixpkgs and NixOS
manual utilities. Since devmode was lacking a README, the descriptive
text is moved there and it's referenced by both manuals.
2025-06-16 11:03:45 +02:00
nikstur 14b7196c75 nixos/nix-store-veritysetup: add release note 2025-06-16 10:29:39 +02:00
RatCornu 1198555d31 nixos/szurubooru: add release note 2025-06-16 08:34:16 +02:00
RatCornu 94de595a56 nixos/szurubooru: init at 2.5-unstable-2025-02-11 2025-06-16 08:34:16 +02:00
Martin Weinelt 863d3a151d
nixos/tlsrpt: init 2025-06-16 06:02:10 +02:00
nixpkgs-ci[bot] 7540ea811e
Merge staging-next into staging 2025-06-15 18:05:57 +00:00
nixpkgs-ci[bot] f03967bdac
Merge master into staging-next 2025-06-15 18:05:14 +00:00
teutat3s 99535261ad
docker: move default from 27.x to 28.x
27.x is no longer maintained as of May 2, 2025[1].

[1] https://github.com/moby/moby/pull/49910
2025-06-15 17:25:45 +02:00
nixpkgs-ci[bot] b539b2bfa1
Merge staging-next into staging 2025-06-15 12:07:16 +00:00
nixpkgs-ci[bot] fd52a730a9
Merge master into staging-next 2025-06-15 12:06:22 +00:00
Aleksana 6abfe96f75
nixos/dwm-status: use structured RFC42 style settings (#416212) 2025-06-15 17:33:35 +08:00
nixpkgs-ci[bot] 6c2d2c77ed
Merge staging-next into staging 2025-06-15 00:20:16 +00:00
K900 d07e701d48 Merge remote-tracking branch 'origin/master' into staging-next 2025-06-14 23:38:13 +03:00
Pol Dellaiera 732ce7ece4
yeahwm: drop (#416319) 2025-06-14 15:13:56 +02:00
Martin Weinelt d94de05424
nixos/postfix: replace tls cert/key options and allow removing settings from rendered main.cf (#413427) 2025-06-14 14:47:14 +02:00
Acid Bong 07abe18272
nixos/dwm-status: use structured RFC0042-style settings 2025-06-14 13:17:28 +03:00
nixpkgs-ci[bot] 17033ae54f
Merge staging-next into staging 2025-06-14 00:17:31 +00:00
nixpkgs-ci[bot] 7001d06792
Merge master into staging-next 2025-06-14 00:16:47 +00:00
Philip Taron 51ad441bfa
nixos/gnome/gcr-ssh-agent: init (#379731) 2025-06-13 15:03:21 -07:00
Anthony Rodriguez 69534a2257
nixos/gcr-ssh-agent: init
Co-authored-by: lilyinstarlight <lily@lily.flowers>
2025-06-13 22:37:09 +02:00
Martin Weinelt 3cb8d47c1a
nixos/postfix: replace sslCert and sslKey options
There exist multiple issues with these options, for example they are not
introspectable, since the values are configured in the config part of the
module.

Also the keypair is always configured for both server and client usage,
which is really surprising. The postfix docs even advise against setting
up client certificates, if they aren't required. [1]

The replacements are the `smtpd_tls_chain_files` for server usage and
`smtp_tls_chain_files` for client usage, which are the prefered way to
configure keys and certificates since Postfix 3.4.0. [2]

[1] https://www.postfix.org/postconf.5.html#smtp_tls_cert_file
[2] https://www.postfix.org/postconf.5.html#smtpd_tls_cert_file
2025-06-13 19:53:33 +02:00
Michael Daniels c822122883 yeahwm: drop
This package is broken and unmaintained upstream.

See also https://github.com/NixOS/nixpkgs/pull/414901#issuecomment-2968784854
2025-06-13 08:05:09 -04:00
Connor Baker c02c4a4316
no-broken-symlinks: fail on links to /build (#411775) 2025-06-11 22:15:19 -07:00
nixpkgs-ci[bot] 2885d7583c
Merge master into staging-next 2025-06-12 00:17:36 +00:00
Martin Weinelt 1b59fd6732
nixos/postfix-tlspol: init (#415482)
* pkgs.formats.yaml_1_2: init

Same as YAML 1.1 but relies on the unpinned remarshal version which emits
YAML 1.2.

* nixos/postfix-tlspol: init

MTA-STS and DANE/TLSA resolver and TLS policy socketmap server for
Postfix.

* nixos/tests/postfix-tlspol: init

Simple test if the service comes up and the CLI can interact with it and
gives reasonable results.
2025-06-12 00:36:50 +02:00
Dominique Martinet 9b36201b94 no-broken-symlinks: fail on links to /build
The no-broken-symlinks hook does not fail if bad links exist out of
store, but /build is also a special directory for nix derivations: the
build directory in the builder mount namespace.

There should be no link to /build in the output derivation, so also
error on these directories (through $TMPDIR which default to that)

Closes #410508
2025-06-12 05:23:42 +09:00
nixpkgs-ci[bot] 5f8f0b6332
Merge master into staging-next 2025-06-11 18:05:32 +00:00
Adam C. Stephens 35a71aaf4b
nixos-rebuild-ng: enable by default (#415640) 2025-06-11 12:20:02 -04:00
Jared Baur c59d4343f9
treewide: remove Perl-based switch-to-configuration 2025-06-11 08:56:42 -07:00
Martin Weinelt 7c0f92f70b
nixos/postfix-tlspol: init
MTA-STS and DANE/TLSA resolver and TLS policy socketmap server for
Postfix.
2025-06-11 17:39:36 +02:00