Commit graph

1549 commits

Author SHA1 Message Date
nixpkgs-ci[bot] adc74351e2
Merge staging-next into staging 2025-07-04 00:18:19 +00:00
Philip Wilk e97badfdd7 nixos/ups: add package option 2025-07-03 22:30:43 +02:00
nixpkgs-ci[bot] 536476f3aa
Merge staging-next into staging 2025-07-01 12:08:22 +00:00
HE7086 ab2dc5c3f9
nixos/prometheus-wireguard-exporter: add support for new flags 2025-06-30 20:56:40 +02:00
nixpkgs-ci[bot] 62814d33b6
Merge staging-next into staging 2025-06-30 18:06:45 +00:00
Jenny 9bb3e93ca4
nixos/librenms: fix link (#421053) 2025-06-30 14:35:59 +02:00
nixpkgs-ci[bot] eee21ba9fa
Merge staging-next into staging 2025-06-30 12:08:05 +00:00
Franz Pletz 629135df7f
nixos/prometheus.alertmanagerIrcRelay: fix network-online.target ordering but not depending warning (#358851) 2025-06-30 12:26:16 +02:00
Franz Pletz e8c0884917
nixos/prometheus-wireguard-exporter: Add a new option to export wireguard_latest_handshake_delay_seconds. (#419815) 2025-06-30 12:25:18 +02:00
nixpkgs-ci[bot] 6d1ef78814
Merge staging-next into staging 2025-06-30 00:19:30 +00:00
Sandro 6dcce44311
prometheus-mailman3-exporter: init at 0.9.1 (#398164) 2025-06-29 22:30:36 +02:00
Sandro e3180b7675
nixos/librenms: fix link 2025-06-29 18:41:21 +02:00
K900 5985f13b69 Merge remote-tracking branch 'origin/staging-next' into staging 2025-06-27 21:07:44 +03:00
Jeevan Shikaram b10dabd009 nixos/prometheus-wireguard-exporter: Add a new option to export wireguard_latest_handshake_delay_seconds. 2025-06-25 18:13:45 +10:00
Wolfgang Walther 41c5662cbe
nixos/postgresql: move postStart into separate unit
This avoids restarting the postgresql server, when only ensureDatabases
or ensureUsers have been changed. It will also allow to properly wait
for recovery to finish later.

To wait for "postgresql is ready" in other services, we now provide a
postgresql.target.

Resolves #400018

Co-authored-by: Marcel <me@m4rc3l.de>
2025-06-24 15:26:47 +02:00
zimbatm 39c01d22bf net-tools: rename from nettools
By being in sync with the pname, it makes it easier to walk back from
the pname that shows in the /nix/store back to the attribute.

This change should not cause any rebuild.
2025-06-21 19:57:36 +02:00
Jon Seager f186923e32
scrutiny: fix collector endpoint to include basepath (#369221) 2025-06-18 16:53:03 +02:00
Aleksana 2054cff512
nixos/gatus: fix missing CAP_NET_RAW (#415877) (#415879) 2025-06-13 17:59:21 +08:00
WilliButz 356d4fc91c
treewide: remove myself from maintainers
This removes maintainer entries which haven't reflected reality for a
while, mostly due to a change in focus towards other topics.
2025-06-11 17:39:42 +02:00
griffi-gh 288b6609cb nixos/gatus: fix missing CAP_NET_RAW (#415877) 2025-06-11 17:35:12 +02:00
Maximilian Bosch d92e71021b
Merge: nixos/vmalert: support multiple instances (#410856) 2025-06-09 15:18:38 +02:00
Maximilian Bosch 0d46fda974
nixos/vmalert: support multiple instances
vmalert only supports a single datasource for querying metrics and
managing alerts. Because of that, we need two instances to manage alerts
for both VictoriaLogs and VictoriaMetrics.

This is strongly inspired by the change made to Redis, i.e. a new
`instances` option was introduced with each option inside it.
With `mkRenamedOptionModule` it's ensured that existing configurations
still evaluate to the same result.
2025-06-09 10:38:58 +02:00
Izorkin a621ca0a23
nixos/netadata: update capabilities 2025-06-07 22:40:22 +03:00
Florian Klink 47718fe885
nixos/alloy: add environmentFile option (#405269) 2025-06-05 15:55:16 +03:00
Peder Bergebakken Sundt c77ac9dfc3 treewide: fix typos 2025-06-02 16:07:07 +02:00
liberodark e673eca2be nixos/glpi-agent: add hardening 2025-05-30 12:32:00 +02:00
bas 975c19cb47 nixos/scrutiny: change collector schedule to daily 2025-05-25 09:58:22 +02:00
Sandro Jäckel 314cfdddb5
nixos/librenms: seed database in module, not only in test
To properly use librenms and create a user, you need the seeded roles
like admin.
2025-05-13 14:24:27 +02:00
Gabriel Smith 710e189c6e nixos/ups: run upsmon as non-root user "nutmon" by default
NUT documentation strongly suggests running `upsmon` as a non-root user
with very limited permissions. This includes only read access to
`upsmon.conf`.

Previously the `RUN_AS_USER` setting could be overwritten with
`mkForce`, but this left the system with technically incorrect
permissions on `upsmon.conf` that would prevent reloading. This patch
provides a way to change the user that `upsmon` runs as while
maintaining correct permissions on `upsmon.conf`.

Fixes #318582
2025-05-09 23:11:33 +02:00
ztmr cd3824f7bc nixos/alloy: add environmentFile option
This is a common practice among other NixOS modules, and allows
people to inject secrets via tools like `sops-nix` and similar.
2025-05-08 17:55:01 +01:00
Maximilian Bosch 77a41a7dd8
grafana: 11.6.0+security-01 -> 12.0.0
Closes #404580

ChangeLog: https://github.com/grafana/grafana/releases/tag/v12.0.0

A few changes were necessary here:

* the provision seems to be delayed now, so the `machine.succeed` broke
  because the result was tested before the provisioning was finished.
  Using `wait_until_succeeds` to solve this.

* Work around a problem that got unnoticed during #399404:
  the setup-hook is also run in the `goModules` derivation, but
  `offlineCache` is missing. As a result, the build breaks. I guess this
  was unnoticed because everyone had a goModules with the previous hash
  in their store.

Co-authored-by: Emily <git@emilylange.de>
2025-05-08 07:29:39 +02:00
Sandro 9cacd7ee42
nixos/prometheus/alertmanager-ntfy: init module (#402291) 2025-05-05 13:38:24 +02:00
Willy 67a22705e7 nixos/graphite: use lib.getExe 2025-05-02 22:08:55 +02:00
Willy 9ce87bd911 nixos/graphite: fix django-admin executable name 2025-05-02 22:08:55 +02:00
Defelo 25977534c0
nixos/prometheus/alertmanager-ntfy: init module 2025-04-29 13:03:58 +02:00
Jonathan Davies f9aba46b57
nixos/prometheus-exporters/ebpf: init 2025-04-23 16:30:28 +01:00
Florian Klink 5d094c2338 nixos/alloy: set After=network.target
This prevents the network from being torn down before alloy itself it
stopped.

Alloy tries to flush its WAL on SIGTERM, and if the network stack is
already down, it tries to flush logs up to 90s during shutdown/reboot.

From https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/:

> network.target has very little meaning during start-up. It only
> indicates that the network management stack is up after it has been
> reached. Whether any network interfaces are already configured when
> it is reached is undefined. Its primary purpose is for ordering
> things properly at shutdown: since the shutdown ordering of units in
> systemd is the reverse of the startup ordering, any unit that is order
> After=network.target can be sure that it is stopped before the network
> is shut down if the system is powered off. This allows services to
> cleanly terminate connections before going down, instead of abruptly
> losing connectivity for ongoing connections, leaving them in an
> undefined state. […]
2025-04-18 23:38:44 +02:00
lucasew 51ac5d673e cockpit: format
Signed-off-by: lucasew <lucas59356@gmail.com>
2025-04-15 11:54:12 -03:00
lucasew 45088ac0b0 cockpit: fix sudo login, patch tweaking, option for allowed origins
Signed-off-by: lucasew <lucas59356@gmail.com>
2025-04-15 11:50:01 -03:00
Marcel d33d1dda8f
nixos/prometheus-mailman3-exporter: init module 2025-04-12 17:16:14 +02:00
Pol Dellaiera 068a5dea67
prometheus-ecoflow-exporter: init ecoflow nixos module integration (#395428) 2025-04-04 11:24:56 +02:00
Pol Dellaiera 6585c0a522
prometheus-tibber-exporter: init tibber nixos module integration (#395393) 2025-04-04 11:24:30 +02:00
PAEPCKE, Michael 72857eab9f
prometheus-tibber-exporter: init tibber nixos module integration 2025-04-04 07:19:56 +00:00
PAEPCKE, Michael 979caf8f05
prometheus-ecoflow-exporter: init ecoflow nixos module integration 2025-04-04 07:18:40 +00:00
Florian Klink 28b1639d57 nixos/grafana-agent: remove
As described in https://github.com/NixOS/nixpkgs/pull/394017,
grafana-agent does not build with Go 1.23 anymore, and Go 1.22 has been
removed.

grafana-agent has been deprecated by Grafana (in favour of Grafana
Alloy), and will be EOL on 2025-11-01, which would be part of the
upcoming 25.05 release.

Instead of leaving us with a broken package, drop it alltogether, and
add release notes.
2025-04-02 21:45:31 +01:00
Silvan Mosberger 374e6bcc40 treewide: Format all Nix files
Format all Nix files using the officially approved formatter,
making the CI check introduced in the previous commit succeed:

  nix-build ci -A fmt.check

This is the next step of the of the [implementation](https://github.com/NixOS/nixfmt/issues/153)
of the accepted [RFC 166](https://github.com/NixOS/rfcs/pull/166).

This commit will lead to merge conflicts for a number of PRs,
up to an estimated ~1100 (~33%) among the PRs with activity in the past 2
months, but that should be lower than what it would be without the previous
[partial treewide format](https://github.com/NixOS/nixpkgs/pull/322537).

Merge conflicts caused by this commit can now automatically be resolved while rebasing using the
[auto-rebase script](8616af08d9/maintainers/scripts/auto-rebase).

If you run into any problems regarding any of this, please reach out to the
[formatting team](https://nixos.org/community/teams/formatting/) by
pinging @NixOS/nix-formatting.
2025-04-01 20:10:43 +02:00
PAEPCKE, Michael cdb80c1f44
prometheus-exporter: init chrony module 2025-03-30 11:14:30 +00:00
Arian van Putten b684e9c6d6
fluent-bit: link against Nix dependencies, fix Darwin builds, and add NixOS module (#365493) 2025-03-21 11:39:18 +00:00
Moraxyc eca4c6ea19
nixos/scrutiny: use genJqSecretsReplacementSnippet 2025-03-20 22:27:06 +08:00
commiterate 3366b27e59 fluent-bit: link against Nix dependencies, fix Darwin builds, and add NixOS module 2025-03-19 18:48:46 -04:00