Commit graph

24710 commits

Author SHA1 Message Date
Maximilian Bosch 3289277081
Merge: nixos/nextcloud-notify_push: delay restart and add same dependences f… (#421552) 2025-07-19 12:59:50 +02:00
Felix Buehler 140a6b4522 nixos/lemurs: init 2025-07-19 16:15:58 +05:30
Paul Haerle f79d2fc207
Fix link syntax in Markdown files (#426381) 2025-07-18 16:06:24 +02:00
Connor Baker b435860c5a
nixos/nvidia-container-toolkit: fix tests (#426273) 2025-07-18 06:32:10 -07:00
Andrew Voynov e2ce2981bf
nixos/services: fix Markdown link syntax in web-apps/ocis.md 2025-07-18 18:25:21 +05:00
Sandro d69cbe23e1
nixos/chhoto-url: init module (#424630) 2025-07-18 13:32:14 +02:00
Aleksana 03b3a97679
nixos/newt: init (#414337) 2025-07-18 19:07:59 +08:00
Maximilian Bosch ecc0c1b956
Merge: matrix-synapse: 1.133.0 -> 1.134.0 (#425448) 2025-07-18 12:47:11 +02:00
Defelo 55e6f26bff
nixos/chhoto-url: init module 2025-07-18 12:00:32 +02:00
K900 abc0cfc4f7
nixos/home-assistant: support passing lovelace config as file (#426221) 2025-07-18 08:31:54 +03:00
Martin Weinelt 800967e9f5 nixos/home-assistant: support passing lovelace config as file 2025-07-18 08:18:52 +03:00
Rafael Fernández López d287c86c08 nixos/nvidia-container-toolkit: fix tests 2025-07-18 03:53:46 +00:00
Sandro 8c34fc8c3c
Searxng rework, searxng: 0-unstable-2025-07-08 -> 0-unstable-2025-07-11 (#346777) 2025-07-18 01:32:17 +02:00
transcaffeine d3bc50865f
matrix-synapse: 1.133.0 -> 1.134.0
Release notes: https://github.com/element-hq/synapse/releases/tag/v1.134.0
Full changelog: https://github.com/element-hq/synapse/compare/v1.133.0...v1.134.0
2025-07-17 18:18:55 +02:00
Maximilian Bosch bf79e3edcd
Merge: nixos/lasuite-docs: perform migrations after generating secret key (#425493) 2025-07-17 18:18:07 +02:00
xanderio caea8a1c0a
nixos/dependency-track: fix default JVM heap size (#425747) 2025-07-17 16:11:36 +02:00
Paul Meyer ad6b1336b1
nixos/paisa: init (#421807) 2025-07-17 14:54:43 +02:00
Sandro a3596957ff
nixos/hydra: replace nettools with hostname-debian (#422364) 2025-07-17 13:47:07 +02:00
jack 9501130c38 nixos/newt: init 2025-07-17 13:04:13 +02:00
Connor Baker fc6bc86838
nvidia-container-toolkit: reintroduce nvidia runtime wrappers (#421088) 2025-07-17 01:51:21 -07:00
Pol Dellaiera 12614d7b94
nixos/bookstack: Updated to accommodate passwordless login for mysql & Module now creates themes directory; nixosTests.bookstack: Updated to also test passwordless login for mysql; bookstack: Changed to allow themes directory to be writable (#422309) 2025-07-17 09:45:42 +02:00
Savyasachee Jha 912ca9239a nixos/bookstack: Module now creates themes directory 2025-07-17 07:57:13 +02:00
Rafael Fernández López 117bbae49c
nvidia-container-toolkit: reintroduce nvidia runtime wrappers
This allows users to keep using `docker run --gpus`. Despite CDI is
the recommended way to expose GPU's to containers nowadays, allow
users to keep using the old `--gpus` method.
2025-07-16 22:38:11 +02:00
Doron Behar 2f83e9cb4a
tsm-client: 8.1.25.0 -> 8.1.27.0, drop old migration code (#387363) 2025-07-16 23:20:28 +03:00
Sebastian Kowalak e33d7087b6
nixos/paisa: init 2025-07-16 22:00:12 +02:00
June Stepp 4ee1354ae6 nixos/peertube: only include whisper when transcription is enabled
`whisper-ctranslate2` has a large closure size with unique dependencies.
2025-07-16 21:25:16 +02:00
Sandro Jäckel 11ba4eb03e
searxng: 0-unstable-2025-07-08 -> 0-unstable-2025-07-16 2025-07-16 21:07:45 +02:00
Sandro Jäckel c265181102
nixos/hydra: replace nettools with hostname-debian
Motivated by https://github.com/NixOS/hydra/pull/1493
2025-07-16 18:50:06 +02:00
K900 879fae2fb5
nixos/nginx: remove usage of recommendedZstdSettings and zstd setting… (#425772) 2025-07-16 16:28:31 +03:00
Martin Weinelt 35cd17de4b
nixos/postsrd: settings option, hardening, postfix integration (#424954) 2025-07-16 14:37:18 +02:00
Sandro Jäckel 0f964599a5
nixos/nginx: remove usage of recommendedZstdSettings and zstd settings duplication 2025-07-16 14:14:03 +02:00
Franz Pletz 9771deb49b
nixos/nginx: remove recommendedZstdSettings, add experimental option (#381678) 2025-07-16 13:03:17 +02:00
Julian Stecklina 5517b6f068 nixos/dependency-track: fix default JVM heap size
The default of 4GB is too low for a production setup and causes
DependencyTrack to hit java.lang.OutOfMemoryError. This causes
Dependency Track to enter a weird state where it will throw 502 and
504 errors.

The initial 4GB was set to make Dependency Track run in the (too
small) VM in the NixOS integration test. Move the explicit heap
configuration there. For the service itself, we now don't set a limit.
This means the JVM will choose its maximum heap on its own, which does
a much better job for realistic scenarios.

I added a release note, because people who run Dependency Track on
very tiny VMs/machines may experience issues.
2025-07-16 12:16:49 +02:00
Alex Martens 5420ae11ea nixos/minio: harden service 2025-07-16 11:18:45 +02:00
Martin Weinelt fbc56958af
nixos/pfix-srsd: migrate postfix integration from postfix module
The postfix module is too big to host every individual integration option
and moving it here has no downside.
2025-07-15 22:04:28 +02:00
Martin Weinelt c915f104b0
nixos/postsrsd: add package option, migrate enable option 2025-07-15 20:29:35 +02:00
Martin Weinelt 9a9073fc89
nixos/postsrsd: integrate with postfix by default 2025-07-15 20:29:35 +02:00
Martin Weinelt 819c34cb7f
nixos/postsrsd: harden and modernize systemd unit
This replaces the previous confinement settings with a more complete and
context-sensitive hardening setup.

Also exposes the current config at /etc/postsrsd.conf, which makes it
easily inspectable.
2025-07-15 20:14:32 +02:00
Martin Weinelt 83af4a9aed
nixos/postsrsd: migrate to rfc42 settings
Allow a freeform configuration approach to satisfy different
configuration complexities.

Remove confinement options and make its hardening options more explicit
and removed the deprecated PermissionStartOnly= option.
2025-07-15 20:14:31 +02:00
Maximilian Bosch 4005a14f8f
nixos/lasuite-docs: perform migrations after generating secret key
When generating the key inside the module rather than specifying a
hard-coded one, you'd get an error like this otherwise

    Jul 15 16:02:53 nixos systemd[1]: Starting Docs from SuiteNumérique...
    [...]
    Jul 15 16:02:54 nixos lasuite-docs-pre-start[19466]: ValueError: Couldn't setup configuration 'impress.settings.Production':  Path '/var/lib/lasuite-docs/django_secret_key' does not exist.
2025-07-15 18:23:14 +02:00
Sandro Jäckel 3e32a1a27c
nixos/searx: move faviconcache to /var/cache 2025-07-15 17:41:15 +02:00
Sandro Jäckel 1d42336757
nixos/searx: don't delete /run/searx/ on init service restarts 2025-07-15 17:41:14 +02:00
Sandro Jäckel 8e34970572
nixos/searx: restart uwsgi when searx changes 2025-07-15 17:41:13 +02:00
Sandro Jäckel e626de7d9a
nixos/searx: add configureNginx setting to automatically configure nginx with uwsgi over a socket 2025-07-15 17:41:12 +02:00
Sandro Jäckel fe8e665cc3
nixos/searx: fix lsp findings 2025-07-15 17:41:12 +02:00
Sandro Jäckel d88324eff3
nixos/searx: match maintainers with searxng package 2025-07-15 17:41:11 +02:00
Sandro Jäckel 7e7377e043
nixos/searx: cleanup, sort config 2025-07-15 17:41:11 +02:00
Sandro Jäckel 681b727dc6
nixos/searx: rename runInUwsgi to configureUwsgi 2025-07-15 17:41:10 +02:00
Sandro Jäckel 3497e6a8af
nixos/searx: drop searx compatibility 2025-07-15 17:41:10 +02:00
Leona Maroni 41ff90fcd4
nixos/varnish: turn listen addresses into structured config (#421481) 2025-07-15 13:13:50 +02:00