Commit graph

33635 commits

Author SHA1 Message Date
Doron Behar 4fcd6b86ee
nixos/tzupdate: make it actually work (#343748) 2024-09-29 12:56:06 +03:00
K900 3951cf36e1
nixos/xdg/icons: add fallbackThemes option (#345057) 2024-09-29 12:17:57 +03:00
Bruno Bigras 1336b64235
Add veilid module (#330585) 2024-09-29 04:30:44 -04:00
Michele Guerini Rocco a08c2e29b9
nixos/monero: remove with lib; (#343474) 2024-09-29 09:36:21 +02:00
K900 ce7068660a nixos/xdg/icons: add fallbackThemes option 2024-09-29 08:42:20 +03:00
melvyn 073099d0f7
nixos/seafile: add persistent user, configurable storage path, gc service 2024-09-28 19:09:58 -04:00
melvyn d3b5dc8da1
nixos/seafile: add persistent user, configurable storage path, gc service 2024-09-28 17:57:02 -04:00
Franz Pletz e8486ebc7f
freeradius: add option to compile with postgres (#265762) 2024-09-28 22:56:08 +02:00
Daniel Nagy 6512103dfe
nixos/monero: remove with lib; 2024-09-28 22:30:00 +02:00
K900 1228db540d
nixos/plasma6: use xwayland module (#345122) 2024-09-28 22:14:43 +03:00
Danilo Reyes 056fc213e6
modules/obs-studio: optionally enable v4l2loopback (#312112)
* modules/obs-studio: optionally enable v4l2loopback

* add test

* added documentation to 24.11 changelog
2024-09-28 19:43:06 +02:00
Leona Maroni a23db91282
nixos/immich: add option database.port (#345094) 2024-09-28 18:01:08 +02:00
Yaroslav Bolyukin fba92705b0
nixos/plasma6: use xwayland module
For ability to override used xwayland package
2024-09-28 17:27:22 +02:00
Emily 818089ba73
teams: create the Xen Project Team and rename instances of Xen to Xen Project. (#344314) 2024-09-28 15:57:32 +01:00
Fernando Rodrigues dc7db9bcc4
treewide: rename Xen to Xen Project
Xen is a trademark of the Cloud Software Group; we're not packaging
Xen(Server), we're packaging the Xen Project Hypervisor, which is open
source and owned by the Linux Foundation.

This is based on advice from Kelly Choi, the Xen Project Community
Manager, who has assisted us in the branding aspects of pacakaging.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-28 14:53:59 +00:00
Fernando Rodrigues 82f0ee2c5b
treewide: assign maintainership of the Xen-related packages to the Xen Project Hypervisor Team
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-28 14:53:59 +00:00
Franz Pletz 79a01a8631
pleroma: 2.6.3 -> 2.7.0 (#333283) 2024-09-28 15:36:27 +02:00
Franz Pletz cc2142b9f0
nixos/zfs: remove incorrect conditional use of spl kmod; remove withs (#344271) 2024-09-28 15:30:13 +02:00
Franz Pletz 1ee99a4837
tailscaled: after NetworkManager-wait-online (#344678) 2024-09-28 15:26:00 +02:00
Franz Pletz a3f79b7d63
tailscale: add su to path (#344947) 2024-09-28 15:22:40 +02:00
Franz Pletz ef1ecffdbe
nixos/gitlab: add systemd slice (#343523) 2024-09-28 15:12:58 +02:00
h7x4 dd7a192b4f
nixos/gitlab: add services to systemd slice
Co-authored-by: Bjørn Forsman <bjorn.forsman@gmail.com>
2024-09-28 11:27:05 +02:00
Jörg Thalheim 028b7d27a3
growpart: shellcheck fixes (#340490) 2024-09-28 09:50:11 +02:00
Jörg Thalheim 076f2f69f3
sshd: fix shellcheck warnings in prestart script (#340484) 2024-09-28 09:49:25 +02:00
Jörg Thalheim 4f06ecd5a6
systemd/initrd: fix shellcheck issues (#340486) 2024-09-28 09:48:29 +02:00
Mikilio 938d190ed2
tailscale: add su to path
this adds access to `su` via security wrappers
2024-09-27 23:05:20 +02:00
Atemu 3913c72204
nixos/jenkinsSlave: remove with lib; (#343514) 2024-09-27 21:59:45 +02:00
Atemu e8d40a7f34
nixos/i2pd: remove with lib; (#343476) 2024-09-27 21:58:59 +02:00
Gary Guo 162f0719e9 nixos/freeradius: fix radius group
A group must be selected since it no longer defaults to nogroup
2024-09-27 20:11:57 +01:00
Gary Guo d0481239c1 nixos/freeradius: add option to override package 2024-09-27 20:11:56 +01:00
Picnoir 50ffaf03bb nixos/pleroma: format module with nixfmt 2024-09-27 19:30:14 +02:00
Picnoir aa666ce8f1 nixos/pleroma: move migrations to their own systemd unit
Running the migrations in a systemd execStartPre was a mistake. The
migrations can be pretty long to run and easily time-out.

Moving this to a proper oneshot service solves this issue and makes
this fits better the systemd execution model. We can now easily filter
the migrations logs.
2024-09-27 19:29:41 +02:00
Sandro 0151acc48e
nixos/gotenberg: Fix coredumps on service start (#344770) 2024-09-27 17:22:10 +02:00
Andrew Marshall bec753ddfc nixos/zfs: replace with with let
The fully-qualified name would certainly be a lot here, but `with` can
still be unclear even with narrow scope. A short `let` adds clarity
without significantly increasing verbosity.
2024-09-27 08:08:31 -04:00
Andrew Marshall eef4c18ae8 nixos/zfs: remove unused vars 2024-09-27 08:08:31 -04:00
Andrew Marshall 33bd85a6c8 nixos/zfs: remove top-level withs
As it is generally considered an anti-pattern. Removing them here in
fact exposed one bug (see previous commit).
2024-09-27 08:08:30 -04:00
Andrew Marshall 06ed2c46fb nixos/zfs: remove incorrect conditional use of spl kmod
This was incorrectly getting `lib.version` which is e.g.
`"24.11pre-git"`, but should have been the ZFS package version. However,
the condition, at least per the comment, is reversed and should be
instead `versionOlder cfgZfs.package.version "2.2.0"`. However, the
entire premise seems to be incorrect, as ZFS 2.2.6 includes the spl
module. Since the previous condition here was effectively always true,
it would initially seem the best move is to remove the conditional
altogether and always include the spl kmod. However, going back to
4360a87c45 where this condition was added,
the intent appears to be that spl was no longer needed here in
the-pre-release ZFS (long since in all supported versions), due to it
being merged into ZFS mainline. Given that intent and that our boot
tests on all versions succeed without including it in the initrd, remove
it.
2024-09-27 08:08:30 -04:00
Tom Vincent 069e6f3262
nixos/upower: update percentage defaults
Current defaults were added in aecfea0, which were in turn based on upstream:
28bd86c181/etc/UPower.conf.

Current upstream config:
94c91f93f1/etc/UPower.conf
2024-09-27 09:41:55 +01:00
7c6f434c c87aad4296
Add Collabora Online (#330708) 2024-09-27 08:33:57 +00:00
K900 1e15add1c2
xwaylandvideobridge refactor + default in Plasma (#344808) 2024-09-27 10:03:24 +03:00
K900 307dda84c0 nixos/nixos-containers: partially revert aa4570ca05
Word splitting is actually intentional here, as both of those variables
can (and often do) contain multiple flags.
2024-09-27 10:00:58 +03:00
oddlama d229011025 nixos/influxdb2: fix service startup reliablility 2024-09-27 08:14:27 +02:00
Gaute Ravndal e9860fa6a9 nixos/snapper: use more precise type definition 2024-09-27 07:40:06 +02:00
K900 e23ad5ca0e nixos/plasma6: install xwaylandvideobridge by default 2024-09-27 08:16:56 +03:00
K900 15200e9966 nixos/plasma6: install baloo-widgets by default
Needed for indexer metadata in Dolphin.
2024-09-27 08:05:05 +03:00
Artturin 716f0a7327
nixos/firefox: add autoConfigFiles (#321254) 2024-09-27 05:20:08 +03:00
Pyrox e2c5983f40
nixos/gotenberg: Fix coredumps on service start 2024-09-26 21:37:41 -04:00
Weijia Wang 63ab048916 nixos/geth: add holesky testnet 2024-09-27 01:17:21 +02:00
Leona Maroni 7f35330bd8
nixos/nixos-containers: fix shellcheck errors in systemd scripts (#340483) 2024-09-26 23:05:35 +02:00
Gaute Ravndal 6ce7db1126 nixos/snapper: fix timeline option types
These can be either an integer or a range.

Range options are necessary for `FREE_LIMIT` to take effect when used in
conjunction with `TIMELINE_LIMIT_*`.
2024-09-26 21:55:23 +02:00
r-vdp aa4570ca05
nixos/nixos-containers: fix shellcheck errors in systemd scripts 2024-09-26 21:54:07 +02:00
Jörg Thalheim 44312de8c2
nixVersions.nix_2_18: 2.18.7 -> 2.18.8 (#344714) 2024-09-26 20:59:11 +02:00
seth 0aed7f0d24 nixVersions.nix_2_18: 2.18.7 -> 2.18.8
Diff: https://github.com/NixOS/nix/compare/2.18.7...2.18.8
Fixes https://github.com/NixOS/nix/security/advisories/GHSA-6fjr-mq49-mm2c
2024-09-26 20:53:55 +02:00
Martin Weinelt e04b941dfb
nixos/printing: add option to disable browsed daemon (#344702) 2024-09-26 20:44:57 +02:00
Thomas Gerbet 981a63b005 nixos/printing: add option to disable browsed daemon
It is currently tied to `services.avahi.enable` which might not be
desirable.

With this change it is possible to disable the service with
`services.printing.browsed.enable = false`
2024-09-26 20:11:14 +02:00
Marin 0d822ccdbc tailscaled: after NetworkManager-wait-online
The wait will only be enabled on machines with NetworkManager enabled.

Closes #180175
2024-09-26 12:12:46 -04:00
K900 c4c3b41d4a nixos/plasma6: install xdg-desktop-portal-gtk
As recommended by upstream, for flatpak apps and some others.
2024-09-26 18:57:53 +03:00
Robert Schütz c5d95d4999
immich: some improvements (#344237) 2024-09-26 07:14:52 -07:00
Brendan Taylor 8debc8df79 nixos/immich: add option database.port 2024-09-26 08:06:59 -06:00
Franz Pletz aa79f54998
nixos/iso-image: avoid collision between GRUB2 versions (#343992) 2024-09-26 15:53:43 +02:00
Franz Pletz 879c75e68c
nixos/tailscale: add authKeyParameters (#338505) 2024-09-26 15:43:59 +02:00
Franz Pletz e1635a35b9
nixos/nginx: add option typesHashMaxSize (#341072) 2024-09-26 14:42:26 +02:00
Lucas Chaim 9e6338ffaf nixos/tailscale: add authKeyParameters
Adds `config.services.tailscale.authKeyParameters`
2024-09-26 07:28:19 -03:00
K900 26afe129f5
nixos/graphics: fix typo (#344551) 2024-09-26 08:18:28 +03:00
Bjørn Forsman 732d36522f nixos/influxdb2: wait until service is ready
Factor out part of the provisioning script into a
wait-until-service-is-ready script, and put it unconditionally in
front of ExecStartPost=, so that services that depend on influxdb2 are
not started until influxdb2 responds to requests.

Fixes https://github.com/NixOS/nixpkgs/issues/317017 ("Scrutiny tries to start before influxdb has started")
2024-09-26 06:54:54 +02:00
Will Fancher ea2838e1ce
nixos/qemu-vm: Ensure 9pnet_virtio module is loaded for shared dirs (#343574) 2024-09-25 23:11:08 -04:00
Lin Jian 11f1d318f6
nixos/graphics: fix typo
Searching hardware.*.extraPackages on search.nixos.org[1] shows there
is only hardware.graphics.extraPackages.

[1]: https://search.nixos.org/options?channel=unstable&from=0&size=50&sort=relevance&type=packages&query=hardware.*.extraPackages
2024-09-26 09:08:43 +08:00
Will Fancher 4e54d10912 nixos/qemu-vm: Ensure 9pnet_virtio module is loaded for shared dirs
When `diskImage = null`, the root fs is a tmpfs instead of
`/dev/vda`. Thus, it doesn't have to wait for virtio modules to load
before being mounted. The root fs is a dependency of shared
directories by nature of being their parent directory. Without
depending on `/dev/vda`, these shared directories may attempt to mount
without virtio modules being loaded.
2024-09-25 17:37:34 -04:00
Will Fancher 1f34534920
Systemd tpm fixes (#343307) 2024-09-25 17:17:57 -04:00
Izorkin d856c0374d
nixos/nginx: add option typesHashMaxSize 2024-09-25 20:57:13 +03:00
Artturin ecd4ea0ab2
nixos/auto-upgrade: correct typo in assertion message (#295125) 2024-09-25 20:41:02 +03:00
Patrick Collins 448240f6e2
nixos/nfsd: fix typo that breaks services.nfs.settings (#342200)
Currently will always fail when nfs.server.hostName is specified alongside nfs.settings.
2024-09-25 20:33:23 +03:00
Artturin f1901cf0b0
nixos/cupsd: typo (#330884) 2024-09-25 20:27:19 +03:00
Robert James Hernandez 6c527bf0fb nixos/scion: init scion-ip-gateway module 2024-09-25 19:08:33 +02:00
Sandro 6ac83e9406
nixos/mailman: configure web frontend with postfix when enablePostfix… (#333295) 2024-09-25 18:33:50 +02:00
Bruno BELANYI b2512bb043
nixos/stirling-pdf: add missing dependency ghostscript (#344331) 2024-09-25 14:09:00 +01:00
Daniel Sidhion 15ddcc64cd
nixos/tigerbeetle: add docs on upgrading, add more systemd hardening (#332899) 2024-09-24 23:56:38 -07:00
DCsunset 68d108bb04 nixos/stirling-pdf: add missing dependency ghostscript 2024-09-25 01:01:33 +00:00
Artturin e0464e4788 treewide: replace stdenv.is with stdenv.hostPlatform.is
In preparation for the deprecation of `stdenv.isX`.

These shorthands are not conducive to cross-compilation because they
hide the platforms.

Darwin might get cross-compilation for which the continued usage of `stdenv.isDarwin` will get in the way

One example of why this is bad and especially affects compiler packages
https://www.github.com/NixOS/nixpkgs/pull/343059

There are too many files to go through manually but a treewide should
get users thinking when they see a `hostPlatform.isX` in a place where it
doesn't make sense.

```
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv.is" "stdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv'.is" "stdenv'.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "clangStdenv.is" "clangStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "gccStdenv.is" "gccStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenvNoCC.is" "stdenvNoCC.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "inherit (stdenv) is" "inherit (stdenv.hostPlatform) is"
fd --type f "\.nix" | xargs sd --fixed-strings "buildStdenv.is" "buildStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "effectiveStdenv.is" "effectiveStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "originalStdenv.is" "originalStdenv.hostPlatform.is"
```
2024-09-25 00:04:37 +03:00
Martin Weinelt aaa7fb5840
nixos/{pretix,pretalx}: set up log rotation (#343982) 2024-09-24 22:48:17 +02:00
Philip Taron a829e3a287
nixos/services.snapserver: fix regression introduced in #339099 by renaming local function (#344243) 2024-09-24 13:37:17 -07:00
Maximilian Bosch 2a0f7e30e8
Merge: Revert "nixos/profiles/base: install vim w/nix-syntax plugin" (#343800) 2024-09-24 22:31:02 +02:00
Robert Schütz eb28b94bd1
nixos/iptsd: Touch was renamed to Touchscreen in v3 (#344036) 2024-09-24 09:59:14 -07:00
Robert Schütz 7cdda564e0 nixos/immich: override machine-learning with cfg.package
Otherwise they could use different versions:

    nix-repl> (immich.overrideAttrs { version = "0"; }).machine-learning.version
    "1.115.0"
2024-09-24 09:53:24 -07:00
Philip Taron 48d6e1118b
nixos/services.snapserver: fix regression introduced in #339099 by renaming local function 2024-09-24 09:08:43 -07:00
Alois Wohlschlager 59ca239d1a replaceDirectDependencies: split off from replaceDependencies
This allows both swapping out and reusing the rewrite machinery.
2024-09-24 12:20:15 +02:00
Alois Wohlschlager 63d6a7037c nixos/top-level: wire up cutoffPackages for replaceDependencies
Move replaceRuntimeDependencies to the replaceDependencies namespace,
where the structure is more consistent with the replaceDependencies
function. This makes space for wiring up cutoffPackages as an option
too.

By default, the system's initrd is excluded. The replacement process does not
work properly anyway due to the structure of the initrd (the files being copied
into it, and it being compressed). In the worst case (which has been observed
to actually occur in practice), a store path makes it into the incompressible
parts of the archive, checksums are broken, and the system won't boot.
2024-09-24 12:20:15 +02:00
Alois Wohlschlager d3abae8dee nixos/top-level: improve replaceRuntimeDependencies
Instead of iterating over all replacements and applying them one by one,
use the newly introduced replaceDependencies function to apply them all
at once for replaceRuntimeDependencies. The advantages are twofold in
case there are multiple replacements:
* Performance is significantly improved, because there is only one pass
  over the closure to be made.
* Correctness is improved, because replaceDependencies also replaces
  dependencies of the replacements themselves if applicable.

Fixes: https://github.com/NixOS/nixpkgs/issues/4336
2024-09-24 12:20:15 +02:00
Yt d026e3fa1a
immich: init at 1.115.0; nixos/immich: init module (#324127) 2024-09-24 05:56:12 -04:00
K900 e9a78e0285 nixos/installer/tools: only enable tools if nix is enabled
This restores the old behavior of being able to remove
everything nix-related with just `nix.enable = false`.

Fixes #344083.
2024-09-24 08:19:36 +03:00
Jan van Brügge cedcd9f4f0
nixos/immich: init module 2024-09-23 22:38:02 +02:00
Robert Schütz 030f88a326 nixos/iptsd: Touch was renamed to Touchscreen in v3 2024-09-23 12:31:51 -07:00
Simon Hauser 32cc042368
mariadb: 10.5.26, 10.6.19, 10.11.9, 11.4.3 (#334878)
* mariadb: 10.5.26, 10.6.19, 10.11.9, 11.4.3

* nixos/tests/automysqlbackup: nixfmt

* nixos/automysqlbackup: fix tests

* nixos/tests/mariadb-galera: nixfmt

* nixos/tests/mariadb-galera: fix test failing with new default IPv6 configuration
2024-09-23 20:00:19 +02:00
Luflosi d979b45371
nixos/iso-image: avoid collision between GRUB2 versions
4b836fb680 added `pkgs.grub2_efi` to `environment.systemPackages` so that it would be in the Nix store and available for install. But `pkgs.grub2` is already in the list. This causes the various paths of the two GRUB2 versions to collide. To fix this, put `pkgs.grub2_efi` into `system.extraDependencies` instead. This should achieve the same effect of adding the second GRUB2 version to the Nix store without the paths colliding in the environment.

To reproduce the problem, execute `nix-build nixos -I nixos-config=nixos/modules/installer/cd-dvd/iso-image.nix -A config.system.build.isoImage` and look for messages like
```
warning: collision between `/nix/store/9jk1p9n5dl431lcm4w9p6x6x8a00dm0q-grub-2.12/bin/grub-install' and `/nix/store/809l0i6aydg4zhn3kqf723brjyp2qm8h-grub-2.12/bin/grub-install'
```
2024-09-23 17:59:26 +02:00
Martin Weinelt 9b9ca77050
nixos/logrotate: harden systemd unit (#339050) 2024-09-23 17:49:29 +02:00
Jörg Thalheim 15f80d9120
Improve assertions for etc.overlay and systemd-sysusers (#332516) 2024-09-23 17:01:30 +02:00
Martin Weinelt 1d8c946fdb
nixos/pretalx: enable log rotation
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:58:52 +02:00
Martin Weinelt 9a85a7e2ce
nixos/pretix: enable log rotation
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:57:31 +02:00
Daniel Nagy 201d35822e
nixos/nar-serve: remove with lib; (#343472) 2024-09-23 15:40:56 +02:00
Marcel 0556c426ff
nixos/pretix: fix database.host option type (#343917)
Support database configuration using TCP and not only Unix sockets.
2024-09-23 10:52:08 +02:00