tobias/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-11-11 10:16:01 +01:00
Code Issues Packages Projects Releases Wiki Activity
783687 commits 197 branches 129 tags 14 GiB
Commit graph

5713 commits

Author SHA1 Message Date
nixpkgs-ci[bot] 34600d0052
Merge staging-next into staging 2025-03-31 00:17:08 +00:00
Maximilian Bosch 97d215cf17
Merge: php: 8.3 -> 8.4 (#394112) 2025-03-30 22:54:31 +02:00
Wolfgang Walther 064432a519
nixos/postgrest: init module 2025-03-30 14:24:16 +02:00
nixpkgs-ci[bot] ed9f389a51
Merge staging-next into staging 2025-03-30 12:06:19 +00:00
Daniel Xu f1c4d339a5 nixos/wordpress: Use https by default for caddy 
Previously, `http://` scheme was hard coded into the caddy config if
`webserver = "caddy"` was chosen. This is fine for local testing, but is
problematic if you want your nixos host to be public facing.

In the public facing case, you generally want to be using TLS. But since
the wordpress module generates the caddyfile rule, the user's nixos
config cannot easily change it to also allow https.

An alternative would be to reverse proxy an https rule to the generated
http rule, but that's somewhat questionable as there's not an internal
http endpoint to proxy to. It might be possible but I couldn't figure
it out.

So simplify by omitting the scheme. This causes caddy to use https by
default and 301 redirect any http requests to the https endpoint. Caddy
will just do the right thing if it's being hosted on a local/internal
hostname (self sign certificates).

This should be backwards compatible with previous default if users are
using reasonable browsers/tools.

Signed-off-by: Daniel Xu <dxu@dxuuu.xyz>
 2025-03-29 15:10:35 -06:00
K900 92e17913a7 Merge remote-tracking branch 'origin/staging-next' into staging 2025-03-29 21:07:19 +03:00
Morgan Jones 9569ad4b57 release-notes: add androidenv details to rl-2505 2025-03-29 22:13:03 +05:30
nixpkgs-ci[bot] 02e075f1a7
Merge staging-next into staging 2025-03-29 12:06:10 +00:00
K900 4b2bc4c4d7
nixos/k3b: remove, refer users to k3b 24.08 (Qt 6) (#351093) 2025-03-29 14:12:02 +03:00
K900 b5be581efe Merge remote-tracking branch 'origin/staging-next' into staging 2025-03-29 09:07:13 +03:00
Ryan Hendrickson 800863744b
nixos/geoclue2: add options for static source (#392257) 2025-03-28 21:10:22 -04:00
nixpkgs-ci[bot] 8c63a3f00d
Merge staging-next into staging 2025-03-29 00:15:41 +00:00
Maximilian Bosch d783555924
php: 8.3 -> 8.4 
The default PHP is now the latest version of the interpreter available.
 2025-03-28 22:13:39 +01:00
Izel Nakri d69fa4d3fb nixos/bitbox-bridge: init 
Signed-off-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
 2025-03-29 00:49:47 +05:30
nixpkgs-ci[bot] 66681a870f
Merge staging-next into staging 2025-03-28 18:06:07 +00:00
JuliusFreudenberger 9a48443997 nixos/rl-2505: update of teleport default version 2025-03-28 22:40:23 +05:30
Maximilian Bosch 21954cf09b
nextcloud-news-updater: remove, unmaintained 2025-03-28 17:32:41 +01:00
heisfer 825381d5ed nixos/zoxide: init module 2025-03-26 22:08:23 +02:00
nixpkgs-ci[bot] 759b761b0d
Merge staging-next into staging 2025-03-26 18:05:48 +00:00
Jonas Heinrich 5325034183
froide-govplan: init at 0-unstable-2025-01-27 (#349750) 2025-03-26 14:27:02 +01:00
nixpkgs-ci[bot] 5e06b173b0
Merge staging-next into staging 2025-03-26 12:06:44 +00:00
Arne Keller 98430f956c
pinchflat: init at 2025.3.17, nixos/pinchflat: init (#364135) 2025-03-26 11:06:02 +01:00
K900 aca918e668 Merge remote-tracking branch 'origin/staging-next' into staging 2025-03-25 21:06:52 +03:00
Arne Keller 657dd8d7cd
nixos/ipfs-cluster: init (#292290) 2025-03-25 18:53:02 +01:00
Nathan Fish 950324a23e nixos/ipfs-cluster: init 
Co-authored-by: Sorki <srk@48.io>
 2025-03-25 16:34:16 +01:00
nixpkgs-ci[bot] 935906364c
Merge staging-next into staging 2025-03-25 12:06:47 +00:00
uku b6ba4a499c
nixos/nitter: rename guestAccounts to sessionsFile 
for consistency with upstream, see
6fcd849eff
 2025-03-25 10:48:27 +01:00
misuzu f630533b4a
nixos/xpad-noone: init (#389752) 2025-03-25 11:29:52 +02:00
Ryan Hendrickson 4c2f564ef0 nixos/geoclue2: add options for static source 2025-03-24 19:15:47 -04:00
Pavol Rusnak 2925f716f8
rocmPackages: 6.0.2 -> 6.3.3, and various ROCm build fixes and new packages (#367695) 2025-03-24 21:11:47 +01:00
Luna Nova 4d2c7ad003
rocmPackages: 6.0.2 -> 6.3.1 
Includes patch suggested by @shuni64 which fixes half precision ABI
issues
Includes hipblaslt compression patch
Includes configurable hipblaslt support in rocblas
rocmPackages_6.hipblaslt: respect NIX_BUILD_CORES in tensilelite
rocmPackages_6.hipblas: propagate hipblas-common
rocmPackages_6.clr: avoid confusion with hipClangPath

Co-authored-by: Gavin Zhao <git@gzgz.dev>
 2025-03-24 09:25:56 -07:00
nixpkgs-ci[bot] d5f30d9d8a
Merge staging-next into staging 2025-03-24 12:07:10 +00:00
Jonas Heinrich 82a382ed09
nixos/keycloak: add realmFiles option (#273833) 2025-03-24 09:35:04 +01:00
nixpkgs-ci[bot] f0313503cd
Merge staging-next into staging 2025-03-23 18:04:46 +00:00
Jonas Heinrich 4a8b7bb45d nixos/froide-govplan: init 2025-03-23 18:05:54 +01:00
nixpkgs-ci[bot] ce179bc524
Merge staging-next into staging 2025-03-23 12:06:09 +00:00
Pablo Ovelleiro Corral 796556ce8d Add release notes 2025-03-23 12:51:58 +01:00
Acid Bong 67e9d0ab57
nixos/release-notes: point nixos-rebuild build-image to the right manual (#392306) 2025-03-23 14:45:35 +05:30
nixpkgs-ci[bot] 529326e679
Merge staging-next into staging 2025-03-21 12:06:31 +00:00
nixpkgs-ci[bot] 8fa05d5ca4
Merge master into staging-next 2025-03-21 12:05:59 +00:00
Arian van Putten b684e9c6d6
fluent-bit: link against Nix dependencies, fix Darwin builds, and add NixOS module (#365493) 2025-03-21 11:39:18 +00:00
Robert Rose cd10f9a874 nixos/keycloak: add realmFiles option 
Add an option to import Keycloak realms during
startup from exported realm files.
 2025-03-20 12:07:38 +01:00
K900 85b2817da5 Merge remote-tracking branch 'origin/staging-next' into staging 2025-03-20 13:14:18 +03:00
K900 6a900ee562 Merge remote-tracking branch 'origin/master' into staging-next 2025-03-20 09:08:18 +03:00
Jeremy Fleischman 9c02a1e422
services/cloudflare-dyndns: require that apiTokenFile be an api token 
Previously, this option was supposed to be a file of the form
`CLOUDFLARE_API_TOKEN=...`, which has a few problems:

- That's not an api token. It's an env file fit for passing to systemd's
  `EnvironmentFile` option. The user could typo the variable name, or
  intentionally/unintentionally include unrelated environment variables.
- It's not how secret files usually work in NixOS. Secret files are
  usually just the secret, and don't leak details about how the secret
  is passed to the service.
- This increases friction for people switching between cloudflare dyndns
  services, such as `services.cloudflare-dyndns` and
  `services.cfdyndns`, which both have a `apiToken` option, but (before
  this change) with different semantics.
 2025-03-19 18:19:29 -05:00
commiterate 3366b27e59 fluent-bit: link against Nix dependencies, fix Darwin builds, and add NixOS module 2025-03-19 18:48:46 -04:00
nixpkgs-ci[bot] 3a7baab73a
Merge staging-next into staging 2025-03-19 18:05:59 +00:00
nixpkgs-ci[bot] 9a9855f387
Merge master into staging-next 2025-03-19 18:05:30 +00:00
Adam C. Stephens 476618066b
nixos/firezone: init module and packages (#374647) 2025-03-19 13:50:47 -04:00
nixpkgs-ci[bot] e8240407b0
Merge staging-next into staging 2025-03-18 18:05:35 +00:00
nixpkgs-ci[bot] 0bb96173bd
Merge master into staging-next 2025-03-18 18:05:06 +00:00
Nicolas Mémeint 7407020674 authelia: 4.38.19 -> 4.39.1 2025-03-18 18:23:43 +01:00
charludo 3e3b774732
nixos/pinchflat: init 2025-03-18 12:24:01 +01:00
Neyts Zupan 75773b77be paretosecurity: init at 0.0.86, nixos/paretosecurity: init 2025-03-18 11:09:14 +00:00
oddlama 6c888f4911
nixos/firezone: init modules 2025-03-17 20:21:00 +01:00
nixpkgs-ci[bot] dcc32e006f
Merge staging-next into staging 2025-03-17 18:05:40 +00:00
nixpkgs-ci[bot] f2e2b1814d
Merge master into staging-next 2025-03-17 18:05:11 +00:00
Sandro b96c9e3a68
gokapi: init at 1.9.6 (#372911) 2025-03-17 16:12:38 +01:00
nixpkgs-ci[bot] 75c8678243
Merge staging-next into staging 2025-03-17 00:16:57 +00:00
nixpkgs-ci[bot] 4761072df5
Merge master into staging-next 2025-03-17 00:16:22 +00:00
Arne Keller a7125fb4f6
confluent-cli: 3.60.0 -> 4.16.0 (#376796) 2025-03-16 23:11:31 +01:00
Pol Dellaiera c8a823d40b nixos/litellm: init 2025-03-16 20:49:22 +01:00
Pol Dellaiera 79e95661a6
orthanc: init at 1.12.6, nixos/orthanc: init (#385329) 2025-03-16 20:47:37 +01:00
Cryolitia PukNgae c33e419dd1
nixos/xpad-noone: init 2025-03-17 03:44:58 +08:00
nixpkgs-ci[bot] 76fed55d6a
Merge staging-next into staging 2025-03-16 18:04:41 +00:00
nixpkgs-ci[bot] dbe56e9776
Merge master into staging-next 2025-03-16 18:04:12 +00:00
Arne Keller d7a2a10a40
graylog-5_1: remove (#358780) 2025-03-16 15:45:23 +01:00
Darragh Elliott 46666bba62 gokapi: add module, test, release docs 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2025-03-16 14:41:28 +00:00
Philip Taron f4dd3ba6e0
systemd: make systemd-ssh-generator work (#372979) 2025-03-15 21:59:59 -07:00
Pol Dellaiera 933f835219 nixos/orthanc: init 2025-03-15 22:45:44 +01:00
Marie Ramlow a0962df902 doc/rl-2505: document systemd-ssh-generator changes 2025-03-15 20:15:44 +01:00
nixpkgs-ci[bot] 890b967419
Merge master into staging-next 2025-03-15 12:05:14 +00:00
Marcus Ramberg d07ebbab9b
nixos/k3s: add autoDeployCharts option and use systemd-tmpfiles for content activation (#374017) 2025-03-15 11:26:43 +01:00
nixpkgs-ci[bot] e24f567a68
Merge master into staging-next 2025-03-15 09:53:30 +00:00
Benjamin Sparks f752f7d5d2 nixos/release-notes: uswgi does not support Python 2 plugins 2025-03-15 00:26:02 +01:00
K900 7d36ee97e6 Merge remote-tracking branch 'origin/master' into staging-next 2025-03-14 09:56:27 +03:00
Lin Jian 2a66b0320c
doc/rl-2505: mention Emacs bump and removal (#386596) 2025-03-13 21:10:43 +08:00
Lin Jian d86f1165e2
Reapply "emacs: enable __structuredAttrs by default in elisp build he… (#389276) 2025-03-13 20:59:06 +08:00
Gaétan Lepage 9e889113ef
bundler: 2.5.22 -> 2.6.2 (#377415) 2025-03-13 10:35:46 +01:00
GiggleSquid 461be7d8c8
nixos/searx: add configuration for favicons settings 
see searxng docs: https://docs.searxng.org/admin/searx.favicons.html
 2025-03-13 03:58:21 +00:00
Felix Singer dae9d1fa3a libjaylink: Grant read-write access to members of jlink group 
It's unusual to use the plugdev group in NixOS. So instead, give access
to users in the jlink group. It does not conflict with the uaccess tag,
which grants access to seat sessions.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
 2025-03-12 18:42:28 +01:00
Michele Guerini Rocco 432ceba835
Re-add xf86videointel driver (#388224) 2025-03-12 16:40:33 +01:00
Sandro Jäckel 1eecf7cc06
haka: remove 2025-03-12 16:04:54 +01:00
rnhmjoj c8d0a944f5
nixos/release-notes: mention new startx options 2025-03-12 13:48:58 +01:00
Lin Jian 3ee5cb7266
Reapply "emacs: enable __structuredAttrs by default in elisp build helpers" 
This reverts commit e9dab0cc20.

The fix[1] has been merged into staging, so we can enable
__structuredAttrs again.

[1]: https://github.com/NixOS/nixpkgs/pull/388908
 2025-03-12 14:22:40 +08:00
Pol Dellaiera c39e50acb0
nixos/limine: init module (#386368) 2025-03-11 14:09:50 +01:00
Pol Dellaiera 095c5ad313
dovecot: remove hard coding path to module dir (#387642) 2025-03-11 10:26:13 +01:00
Lin Jian e9dab0cc20
Revert "emacs: enable __structuredAttrs by default in elisp build helpers" 
This reverts commit d64a233e4c.

A stdenv bug breaks emacs.pkgs.withPackages wrapper.  A fix PR[1] will
take a few weeks to reach users because it has to go through a staging
cycle.  Revert this for now to unbreak emacs.pkgs.withPackages
wrapper.

[1]: https://github.com/NixOS/nixpkgs/pull/388908
 2025-03-11 15:49:24 +08:00
Izorkin 6f9f983368 dovecot: remove option modules 2025-03-11 10:17:21 +03:00
Austin Horstman 4ee0b8e348
isd: 0.2.0 -> 0.5.1 (#388396) 2025-03-10 12:13:30 -05:00
Gutyina Gergő d767edac8e
isd: 0.2.0 -> 0.5.1 2025-03-10 17:36:13 +01:00
Gaétan Lepage ff2d12d11d
nixos/cloudflared: add option for cert.pem and use dynamic user (#383499) 2025-03-10 11:15:06 +01:00
fleaz 676efd089b rl-2411: Add note about intel-compute-runtime package 2025-03-10 01:49:59 +05:30
Franz Pletz 7978d240c2
nixos/iosched: exclude loop devices by default; mention in release notes (#385106) 2025-03-09 09:38:05 +01:00
Mikael Voss 901b87f8fd
nixos/doc/rl-2411: mention iosched module 2025-03-09 02:27:34 +01:00
Leona Maroni 810f3b88e4
nixos/synapse-auto-compressor: init (#383168) 2025-03-08 16:55:06 +01:00
Tim Keller 2762812d2c nixos/doc/release-notes: mention xf86videointel has been fixed 2025-03-08 08:30:29 -06:00
Lin Jian 23e610d63f
emacs: support and enable __structuredAttrs in elisp build helpers (#387193) 2025-03-08 17:09:46 +08:00
Aleksana f2ef5d1a9e
tauon: doc fixes (#387077) 2025-03-08 16:48:18 +08:00
shelvacu 1a4575f9db
nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244) 
Previously some modules used `config.environment.etc."ssl/certs/ca-certificates.crt".source`, some used `"/etc/ssl/certs/ca-certificates.crt"`, and some used `"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"`. These were all bad in one way or another:

- `config.environment.etc."ssl/certs/ca-certificates.crt".source` relies on `source` being set; if `text` is set instead this breaks, introducing a weird undocumented requirement
- `"/etc/ssl/certs/ca-certificates.crt"` is probably okay but very un-nix. It's a magic string, and the path doesn't change when the file changes (and so you can't trigger service reloads, for example, when the contents change in a new system activation)
- `"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"` silently doesn't include the options from `security.pki`

Co-authored-by: Shelvacu <git@shelvacu.com>
 2025-03-08 08:41:08 +00:00