Commit graph

27651 commits

Author SHA1 Message Date
Janik H. 8e5729517e
nixos/woodpecker-server: change type of environmentFile to list of paths 2023-10-31 15:46:53 +01:00
K900 46bc9e79a9
Merge pull request #259765 from 70m6/bugfix/bitcoind-enable
bugfix/bitcoind-enable
2023-10-31 17:35:10 +03:00
Tom Barrett a4b31637b5 bitcoind: only use enabled services 2023-10-31 15:29:17 +01:00
Weijia Wang a38f4bdef6
Merge pull request #264562 from acid-bong/patch-1
nixos/direnv: fix typo
2023-10-31 14:21:25 +01:00
Maximilian Bosch 5927d55685
privacyidea: remove
Related to #262907 (Django3 removal from nixpkgs).

This package already required an unreasonable amount of maintenance
regularly for a such small leaf-package. It has a few highly outdated
dependencies (e.g. flask 1, jinja2 2.11, sqlalchemy 1.3).

After at least each Python package-set update one had to fix up a lot of
dependencies to fix the package itself, so it was only useful on stable
branches. And having so much outdated software in a security-sensitive
piece of software seems questionable.

Finally, globin and I won't be available for maintaining this now that
Mayflower is migrating to another solution (and we'll do that as well)
and I'd expect this to bitrot extremely quick if we both bail out.
2023-10-31 14:17:48 +01:00
nikstur 14152f80bb nixos/image: fix layout of option examples in repart builder 2023-10-31 11:27:57 +01:00
nikstur 151fa7c39c nixos/image: include module options in manual 2023-10-31 11:27:56 +01:00
nikstur 84722633b7 nixos/image: move docs into manual 2023-10-31 11:27:56 +01:00
Acid Bong e7d95c440b
nixos/direnv: fix typo 2023-10-31 12:09:06 +02:00
nikstur b984b2691a
Merge pull request #264475 from blitz/repart-docs
nixos/image: fix documentation build
2023-10-31 10:13:01 +01:00
Alexandru Scvortov fa54eeea5c livebook: add systemd user service, test, and docs
Co-authored-by: Yt <happysalada@tuta.io>
2023-10-31 07:31:18 +00:00
Mario Rodas 1122fb5123
Merge pull request #264250 from Ma27/rm-postgres-11
postgresql_11: remove
2023-10-30 21:36:56 -05:00
Martin Weinelt e3647a1769
nixos/wyoming/openwakeword: fix typo in attribute name 2023-10-31 00:42:04 +01:00
Julian Stecklina ea3ca0b1e3 nixos/image: fix documentation build
literalExpression triggers the following error when building the
manual:

Cacheable portion of option doc build failed.
Usually this means that an option attribute that ends up in documentation (eg `default` or `description`) depends on the restricted module arguments `config` or `pkgs`.
2023-10-31 00:36:17 +01:00
Martin Weinelt 5da8c00f11
Merge pull request #264404 from mweinelt/wyoming-openwakeword-1.8.1
wyoming-openwakeword: 1.5.1 -> 1.8.1
2023-10-30 22:53:25 +01:00
Martin Weinelt 3f224f0607
Merge pull request #264214 from mweinelt/wyoming-faster-whisper-device-param
nixos/wyoming/faster-whisper: pass device config to executable
2023-10-30 22:27:24 +01:00
Luka Blaskovic d3db35f684 stage-2: don't write to /dev/kmsg if missing 2023-10-30 21:53:52 +01:00
Lin Jian bb3474f826
Merge pull request #264008 from arcnmx/xmrig-mainProgram
xmrig: add meta.mainProgram
2023-10-31 01:21:25 +08:00
K900 998720bf94
Merge pull request #263849 from ElvishJerricco/sd-initrd-not-experimental
systemd-stage-1: No longer experimental
2023-10-30 20:04:20 +03:00
K900 7bc18b63da
Merge pull request #227633 from ElvishJerricco/systemd-stage-1-fix-initrd-commands
Systemd stage 1 assert initrd commands are empty
2023-10-30 20:03:44 +03:00
Martin Weinelt e458280606
nixos/wyoming/openwakeword: update for 1.8.1
Remove the deprecated --models option, as models are now discovered
and loaded dynamically from all configured model dirs at runtime.

Allow setting up custom model directories, so wake words other than the
built-in ones can be used, e.g. from
https://github.com/fwartner/home-assistant-wakewords-collection.
2023-10-30 18:00:28 +01:00
Martin Weinelt 0d34502fe3
nixos/wyoming/openwakeword: relax model selection
The wyoming-openwakeword supports a custom model directory, which cannot
be used when the the model list is constrained to the builtin ones.
2023-10-30 16:21:58 +01:00
Will Fancher cca22054c0 systemd-stage-1: Add assertions for unsupported options. 2023-10-30 12:15:58 +01:00
Janne Heß d80d7d6697
Merge pull request #258071 from helsinki-systems/feat/stc-lock
nixos/switch-to-configuration: Lock the switch
2023-10-30 10:49:50 +01:00
Maximilian Bosch 1220a4d4dd
postgresql_11: remove
As described in the release lifecycle docs from postgresql[1], v11 will
stop receiving fixes as of Nov 9 2023. This means it's EOL throughout
the entire lifetime of 23.11, so let's drop it now.

A lot of examples are also referencing postgresql_11. Where it's
sensible, use postgresql_15 as example now to avoid confusion.

This is also handy because the LLVM 16 fix for postgresql is not
available for postgresql 11 ;-)

[1] https://www.postgresql.org/support/versioning/
2023-10-30 10:41:16 +01:00
Martin Weinelt 4f971ebf3c
nixos/wyoming/faster-whisper: pass device config to executable
The device could previously be configured but wasn't wired up to do
anything meaningful and as such always defaulted to CPU.
2023-10-30 00:45:17 +01:00
Michele Guerini Rocco 800965ce8c
Merge pull request #245855 from rnhmjoj/pr-sslh
nixos/sslh: update and refactor for RFC42
2023-10-29 23:19:38 +01:00
Ryan Lahfa a905c3a544
Merge pull request #262854 from ElvishJerricco/systemd-stage-1-bcachefs-decryption
systemd-stage-1: bcachefs decryption
2023-10-29 22:24:38 +01:00
Jakub Sokołowski c7b3a19df6 erigon: add package option to override default version
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-10-29 18:27:13 +00:00
Rémy Grünblatt c9e3cc43c7
nixos: fix iproute2 invocations (#263976)
When using iproute2's ip binary, you can omit the dev parameter, e.g. ip link set up eth0 instead of ip link set up dev eth0.

This breaks if for some reason your device is named e.g. he, hel, … because it is interpreted as ip link set up help.

I just encountered this bug using networking.bridges trying to create an interface named he.

I used a grep on nixpkgs to try to find iproute2 invocations using variables without the dev keyword, and found a few, and fixed them by providing the dev keyword.

I merely fixed what I found, but the use of abbreviated commands makes it a bit hard to be sure everything has been found (e.g. ip l set … up instead of ip link set … up).
2023-10-29 18:27:16 +01:00
Will Fancher 5cea7ee452
Merge pull request #262583 from ElvishJerricco/systemd-stage-1-shells
systemd-stage-1: Support for user shells
2023-10-29 13:22:47 -04:00
rnhmjoj 7ecac99da7
sslh: 1.22c -> 2.0.0 2023-10-29 18:13:37 +01:00
rnhmjoj 3728338d40
nixos/sslh: refactor for RFC42 2023-10-29 18:13:37 +01:00
K900 7ea67d7cb6 Revert "nixos/activation: remove specialfs activationScript"
This reverts commit a8f50f9919.

Broke installer tests, need to figure out how to fix nixos-enter before attempting this again.
2023-10-29 20:08:48 +03:00
K900 220241421f
Merge pull request #263744 from K900/stateversion-docs
treewide: rewrite stateVersion docs (again), clean up some stateVersion usages (again)
2023-10-29 16:25:48 +03:00
Aaron Andersen 3b848391b6
Merge pull request #227442 from christoph-heiss/openssh/allowusers
openssh: add {Allow,Deny}{Users,Groups} settings
2023-10-29 08:20:22 -04:00
K900 424b0cefa4 nixos/version: rewrite stateVersion documentation
Match the comment in nixos-generate-config and add some more details for the curious.
2023-10-29 15:02:50 +03:00
K900 fb1ccc91f7 nixos-generate-config: rewrite stateVersion comment again
Hopefully this version is clearer. Also tried to make it less technical.
2023-10-29 15:02:50 +03:00
nikstur 7cb1ab909a
Merge pull request #264082 from josephst/systemd-domainname
systemd domainname unit - use nix store path of `net tools` for `domainname`
2023-10-29 10:35:04 +01:00
Guillaume Girol 98b63514f0
Merge pull request #261862 from vifino/syslog-ng-4.4.0
syslogng: Late cleanup
2023-10-29 09:51:02 +01:00
Robert Hensing 8b385c91c3
Merge pull request #263462 from nikstur/rebuildable-system
Rebuildable system & appliance
2023-10-29 08:02:35 +01:00
Peder Bergebakken Sundt 37c7104f53
Merge pull request #262915 from chayleaf/certspotter
certspotter: init at 0.17.0; nixos/certspotter: init
2023-10-29 05:10:04 +01:00
Joseph Stahl 137a3c1303
systemd domainname service - fix missing domainname binary
needs nettools in path
2023-10-28 22:30:14 -04:00
Weijia Wang eaf8053ad5
Merge pull request #264036 from wegank/unifi-hotfix
nixos/unifi: fix use of optionalString
2023-10-29 00:33:19 +02:00
Weijia Wang 88e82879f4 nixos/unifi: fix use of optionalString 2023-10-28 23:01:44 +02:00
Ryan Lahfa de47b2e8a5
Merge pull request #263033 from ElvishJerricco/systemd-stage-1-filesystems-encrypted
systemd-stage-1: Enable more encrypted installer tests
2023-10-28 20:38:14 +02:00
arcnmx 0711d3d69b xmrig: add meta.mainProgram
See #246386
2023-10-28 11:21:57 -07:00
Christoph Heiss cc8ba21629
nixos/sshd: add comment explaining different list option types
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-10-28 20:13:26 +02:00
Weijia Wang 66ab26fce8
Merge pull request #262084 from imlonghao/borgmatic/fix-262020
borgmatic: fix deprecation warning check failed
2023-10-28 15:33:39 +02:00
Julian Stecklina e8bed1eec9 nixos/profiles: add image-based-appliance profile 2023-10-28 13:26:39 +02:00
nikstur 8dfe8e447e nixos/profiles/minimal: remove some perl 2023-10-28 13:26:39 +02:00
Linus Heckemann 8670794565
Merge pull request #263203 from nikstur/replace-activation
Replace simple activationScripts
2023-10-28 10:17:15 +02:00
chayleaf f4aeeb9e81
nixos/certspotter: init 2023-10-28 14:19:36 +07:00
tomf e426508098
Merge pull request #254412 from helsinki-systems/nvme-kmod-by-default
nixos/boot/kernel: include nvme kmod by default
2023-10-28 18:01:18 +11:00
Peder Bergebakken Sundt dc42e2603b
Merge pull request #263335 from anthonyroussel/nixos-goss
nixos/goss: init
2023-10-28 06:36:43 +02:00
imlonghao 88bc98a073
borgmatic: fix deprecation warning check failed 2023-10-28 11:32:38 +08:00
Peder Bergebakken Sundt a9d001fd4a
Merge pull request #260877 from moritzrickert/plausible-registration-invite-only
nixos/plausible: add invite only registrations
2023-10-27 23:49:49 +02:00
Will Fancher a906632245 systemd-stage-1: No longer experimental 2023-10-27 16:46:47 -04:00
Artturi 61f2bd3178
Merge pull request #254386 from erikarvstedt/nginx-js-mime-type 2023-10-27 23:32:20 +03:00
Matthias Riße 63ef033992 nixos/paperless: set PAPERLESS_SECRET_KEY
If the PAPERLESS_SECRET_KEY environment variable is left unset
paperless-ngx defaults to a well-known value, which is insecure.

Co-authored-by: Erik Arvstedt <erik.arvstedt@gmail.com>
2023-10-27 21:11:01 +02:00
tomf d18f272a39
Merge pull request #262408 from evandeaubl/master
nixos/tailscale: add openFirewall option
2023-10-28 05:19:41 +11:00
tomf b42ca6b992
Merge pull request #260346 from l0b0/feat/shiori-webroot
nixos/shiori: add web root option
2023-10-28 04:25:40 +11:00
Emily f4e67057e8
Merge pull request #263234 from CobaltCause/garage-statedirectory
nixos/garage: set `StateDirectory` if used at all
2023-10-27 17:26:39 +02:00
Herwig Hochleitner a5e03844dc
Merge pull request #260091 from bendlas/fix-cdemu-service
cdemu: fix service setup
2023-10-27 14:46:57 +02:00
Alyssa Ross 44ff5dfca2 nixos/restic: remove s3CredentialsFile option
This has been deprecated since 2021, so all users should have seen the
warning and migrated by now.
2023-10-27 12:31:54 +00:00
K900 6f06066e94 nixos/containers: use latest stateVersion as example
Hopefully this way we don't confuse people into thinking you have to set it to 21.05.
2023-10-27 12:56:12 +03:00
K900 118694944d nixos/virtualbox-demo: use latest stateVersion
Just like we do for the other live images
2023-10-27 12:56:12 +03:00
Anthony Roussel 3a2d3bc3d8
nixos/goss: init 2023-10-27 08:00:48 +02:00
Pol Dellaiera aaccf42b1b
Merge pull request #261432 from yayayayaka/snipe-it-convert-to-buildComposerProject
snipe-it: convert to buildComposerProject
2023-10-27 01:36:34 +02:00
nicoo 6e15779fda nixos/sudo: fix security.sudo.package 2023-10-26 19:00:25 +00:00
Peder Bergebakken Sundt e8ff5952f6
Merge pull request #258558 from hmenke/c2FmZQ
c2FmZQ: init at 0.4.8
2023-10-26 20:33:51 +02:00
Martin Weinelt 33ddec070e
Merge pull request #262767 from andresilva/iproute-6.5.0-fix
iproute2: stateless configuration
2023-10-26 20:08:12 +02:00
Peder Bergebakken Sundt adcaf3962d
Merge pull request #212087 from robryk/resticpaths
nixos/backups/restic: handle cases when both dynamicFileFrom and paths are set
2023-10-26 19:35:22 +02:00
Nick Cao 020adc777c
Merge pull request #263492 from aschleck/patch-1
nixos/networkd: fix typoed hairpin option name
2023-10-26 13:28:52 -04:00
April Schleck 13956f7f1f nixos/networkd: fix typoed hairpin option name
You can see in https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html that
this should be "HairPin" not "Hairpin". Using "Hairpin" results in

```
Oct 25 18:55:03 my-host systemd-networkd[843736]: /etc/systemd/network/10-bridge.network:11:
    Unknown key name 'Hairpin' in section 'Bridge', ignoring.
```
2023-10-26 10:26:04 -07:00
Will Fancher 63429f43ca
Merge pull request #263627 from colemickens/systemd-stage1-fix-dosfstools
nixos/fs/vfat: fix inclusion in systemd stage1
2023-10-26 12:56:33 -04:00
Yaya d91c530a55
snipe-it: Convert to php.buildComposerPackage 2023-10-26 18:51:05 +02:00
Peder Bergebakken Sundt 4d6d43f444
Merge pull request #263460 from arcuru/rename-arcuru
treewide: rename handle/GH account patricksjackson to arcuru
2023-10-26 18:46:42 +02:00
Cole Mickens 8c7908acc8
nixos/fs/vfat: fix inclusion in systemd stage1 2023-10-26 18:44:02 +02:00
nikstur b3c1d8c9ae nixos: add system.switch.enable flag
This flag allows the user to optionally exclude
switch-to-confguration.pl from toplevel.

This is interesting for appliance images where you don't want to re-build
the system. This flag is called `rebuildable` because the standard
interface to do this is `nixos-rebuild` which will not work anymore with
this change.
2023-10-26 17:47:35 +02:00
Henri Menke e0cebb254e
nixos/c2fmzq-server: init module
Co-authored-by: Peder Bergebakken Sundt <pbsds@hotmail.com>
Co-authored-by: Anselm Schüler <mail@anselmschueler.com>
Co-authored-by: h7x4 <h7x4@nani.wtf>
2023-10-26 17:27:51 +02:00
Moritz Rickert 09794b1ee4 nixos/plausible: add invite only registrations 2023-10-26 16:54:25 +02:00
Martin Weinelt b501176d83
nixos/wyoming-faster-whisper: update model enum
The medium model was never provided due to its extensive size.
2023-10-26 15:56:17 +02:00
Maximilian Bosch 15e17917fc
nixos/grafana-image-renderer: use Grafana's http_addr rather than localhost
Otherwise the callback won't work Grafana is configured to listen on a
different IP address by default.
2023-10-26 12:57:39 +02:00
K900 5438b83028
nixos/acme: fix assertion, add actual values to message (#263543) 2023-10-26 11:28:43 +02:00
Lassulus 95a366309a
Merge pull request #262731 from Lassulus/tmpfiles
nixos/systemd-tmpfiles: add settings option
2023-10-26 09:29:46 +01:00
nikstur d300940637 nixos/network-interfaces: replace hostname and domain activationScript
The hostname is already set by systemd
https://www.freedesktop.org/software/systemd/man/latest/hostname.html#Hostname%20semantics

Create a separate service that registers the domainname.
2023-10-26 01:51:08 +02:00
nikstur b5617e0575 nixos/mysql: replace activationScripts via preStart 2023-10-26 01:51:07 +02:00
nikstur 47ff8d20d7 nixos/duosec: replace activationScript
Replace with a separate systemd service.
2023-10-26 01:51:07 +02:00
nikstur b16365b393 nixos/iscsi: replace activationScript
Move the functionality into preStart of the systemd service.
2023-10-26 01:51:07 +02:00
nikstur 256956e34d nixos/activation: link gcroot with tmpfiles instead of in activation 2023-10-26 01:44:21 +02:00
nikstur 6987ff3a4f nixos/spiped: replace activationScript via tmpfiles 2023-10-26 01:44:21 +02:00
nikstur f18ff2ec0b nixos/mlmmj: replace activationScript 2023-10-26 01:44:21 +02:00
nikstur d5a96d508b nixos/stargazer: replace activationScript via tmpfiles 2023-10-26 01:44:21 +02:00
nikstur 6c800013bf nixos/strongswan-swanctl: replace activationScripts via tmpfiles 2023-10-26 01:44:20 +02:00
nikstur 168b967b32 nixos/mattermost: replace activationScript via tmpfiles 2023-10-26 01:43:56 +02:00
André Silva 0f13df156e
iproute2: stateless configuration
0a0a8f12fa
2023-10-26 00:41:40 +01:00
Patrick Jackson 4a938cc665 treewide: rename handle/GH account patricksjackson to arcuru 2023-10-25 15:42:48 -07:00
nikstur 1b2b1364de nixos/ups: replace activationScript via tmpfiles 2023-10-25 23:44:01 +02:00
nikstur 88f63d1165 nixos/binfmt: replace activationScript via tmpfiles 2023-10-25 23:44:01 +02:00