Commit graph

1599 commits

Author SHA1 Message Date
Pol Dellaiera 3da72dcbc5
Merge pull request #312249 from dotlambda/nextcloud
nixos/nextcloud: correct latest version
2024-05-16 22:27:52 +02:00
Robert Schütz dce84c46d7 nixos/nextcloud: correct latest version 2024-05-16 08:53:01 -07:00
Jade Lovelace f05ecf16e6
Merge pull request #250638 from benley/keycloak-systemd-notify
nixos/keycloak: Add systemd startup notification
2024-05-15 14:13:20 -07:00
Martin Weinelt 10955966a5
Merge pull request #311916 from wegank/pretalx-plugins-init
pretalx: add a few plugins
2024-05-15 21:41:03 +02:00
Martin Weinelt f4f9f96037
nixos/pretalx: add plugins option
Allow loading pretalx plugins in a declarative manner. They are passed
into the package dependencies at build time, so that collectstatic and
other django maintenance functions account for them, since we cannot
regenerate assets at runtime anyway.
2024-05-15 16:24:24 +02:00
Benjamin Staffin 64c94bd40a nixos/keycloak: Add systemd startup notification
This makes it possible for other systemd units to depend on
keycloak.service using `after` and `wants` relationships, and systemd
will actually wait for Keycloak to finish its initialization before
starting any dependent units.  This can be important for services like
oauth2-proxy, which (when configured to use Keycloak as its auth
provider) will fail to start until Keycloak's
`.well-known/openid-configuration` endpoint is available.
2024-05-14 14:26:35 -04:00
Patrick 77a6460e74
nixos/your_spotify: init 2024-05-13 22:10:13 +02:00
Martin Weinelt 9731a32d81
Merge pull request #309115 from NyCodeGHG/nixos/miniflux-sd-notify
nixos/miniflux: use systemd notify and watchdog
2024-05-13 10:12:37 +02:00
Martin Weinelt 622af635bb
pretalx: adopt and set up code ownership 2024-05-09 18:20:14 +02:00
Martin Weinelt 9afcf733f3
nixos/pretix: update hardening
- Transition from world-readable to group-readable UMask
- Remove world permissions from state directory
2024-05-09 18:20:14 +02:00
Martin Weinelt 82f2cc7489
nixos/pretalx: set up hardening 2024-05-09 18:20:13 +02:00
Martin Weinelt b4b3165619
nixos/pretalx: fix state directory mode
The state directory contains static files that need to be accessible by
a webserver, but homeMode defaults to 0750 and switching the generation
will always force the homeMode, thereby breaking access to the assets.

Instead, fully rely on systemd to provide the StateDirectory with the
correct mode.
2024-05-09 18:20:13 +02:00
Martin Weinelt a4193dba8f
nixos/pretix: fix state directory mode
The state directory contains static files that need to be accessible by
a webserver, but homeMode defaults to 0750 and switching the generation
will always force the homeMode, thereby breaking access to the assets.

Instead, fully rely on systemd to provide the StateDirectory with the
correct mode.
2024-05-09 17:00:02 +02:00
Jonas Heinrich 4a451cb3ce
Merge pull request #308291 from Ma27/nc-update-db
nixos/nextcloud: add nextcloud-update-db.service, nextcloud-cron isn't oneshot
2024-05-08 11:29:45 +02:00
nikstur 951e023010
Merge pull request #309838 from cyberus-technology/take-plausible-maintainership
plausible: take take-plausible-maintainership
2024-05-07 18:34:24 +02:00
Leona Maroni 31be9134a2
Merge pull request #309836 from cyberus-technology/fix-nixos-plausible-unit
nixos/plausible: fix unit start script
2024-05-07 15:46:50 +02:00
Alexander Sieg 8edee82bc2
plausible: take take-plausible-maintainership 2024-05-07 15:35:22 +02:00
Alexander Sieg 3be1b16698
nixos/plausible: fix unit start script
In 8bb777ee37 a condition was added to
only execute the createdb.sh script if database setup was configurated.
However a superfluace " was added at the end of the line which cased an
escaping error the resulted in #309520.

Fixes #309520
2024-05-07 15:27:08 +02:00
Maximilian Bosch c7a1616be7
nixos/nextcloud: add trailing slashes to carddav/caldav redirect
This seems to solve the problem with the warning about carddav/caldav
redirects being broken.
2024-05-05 18:17:25 +02:00
Marie Ramlow 212c34f8c0 nixos/miniflux: use systemd notify and watchdog
Miniflux supports notifying systemd when it's ready.
It also supports the systemd watchdog, which will restart miniflux when it's stuck.
2024-05-05 14:47:05 +02:00
Jade Lovelace f96f3c9e30 nixos/keycloak: pass --verbose to starting keycloak
This sets the exception handler to show the full exception on startup.
We don't think it does anything else, with respect to logging, for
instance. Everything else can be configured in the config file, and this
is plain reasonable to simply always enable in our view.
2024-05-04 17:43:38 -07:00
Aaron Andersen efd518852d
Merge pull request #300090 from lytedev/300088
plausible: Do not run createdb.sh unless configured to setup the database
2024-05-04 18:41:49 +00:00
Daniel Flanagan 8bb777ee37 plausible: Do not run createdb.sh unless configured to setup the database
Closes #300088
2024-05-04 10:28:21 -05:00
Maximilian Bosch 5ef467d6f5
nixos/nextcloud: add nextcloud-update-db.service, nextcloud-cron isn't oneshot
This service performs operations that significantly increase the
performance of Nextcloud, can take a while. These are designed however
to not require maintenance mode and can be executed during normal
operation[1].

Make nextcloud-cron a simple unit instead of oneshot: otherwise we risk
that it'll be stopped by the startup timeout (oneshot executes ExecStart
while "activating") which can be an issue for very long running tasks or
if Nextcloud needs to catch up if one task was broken for a while.

[1] https://docs.nextcloud.com/server/29/admin_manual/maintenance/upgrade.html#long-running-migration-steps
2024-05-01 20:09:37 +02:00
Maximilian Bosch 7001f74335
Merge pull request #306595 from RaitoBezarius/nc29
nextcloud29: init at 29.0.0, nextcloud27: 27.1.8 -> 27.1.9, nextcloud28: 28.0.4 -> 28.0.5
2024-05-01 10:16:20 +00:00
Maximilian Bosch 28f4adfb79
nixos/nextcloud: document known warnings 2024-05-01 11:03:23 +02:00
Kyle Carberry 14679b13eb nixos/coder: sync maintainers to coder package 2024-04-29 21:11:23 -04:00
Jörg Thalheim 368b2d71b4
Merge pull request #307130 from toastal/movim-no-parallel
movim: include authentication patch & remove parallel dependency
2024-04-29 09:34:08 +02:00
toastal 13852fc9ad movim: remove parallel dependency
Currently there is an issue with $PATH & parallel causing build errors.
It’s probably best to just remove the dependency where bash forking is
good enough here.
2024-04-28 16:27:01 +07:00
Amelia Cuss 2e0b0c2707 nixos/akkoma: Don't warn if no installWrapper
Currently the installWrapper warning is issued if sudo (and sudo-rs)
aren't installed.  This is fine, except we get the warning even if we
explicitly turn off installWrapper -- say, for this very reason!

Rather than warning on every build until either sudo is installed or
Akkoma is uninstalled, only warn if cfg.installWrapper is true.
2024-04-27 23:38:29 +10:00
Weijia Wang c0e50ded28
Merge pull request #306046 from misuzu/maintainers
{gotosocial,castopod,swapspace,psi-plus,kmon}: remove misuzu from maintainers
2024-04-27 05:23:55 +02:00
Thomas Gerbet f8deac79ef
Merge pull request #305155 from Mynacol/akkoma-fix-proxy
nixos/akkoma: Fix media proxy URLs after upgrade
2024-04-26 00:39:11 +02:00
Maximilian Bosch 23f73fb2e6
nixos/nextcloud: php83 for nc29, update release notes
* PHP 8.3 seems supported, so let's go for it!

* The conditions for which Nextcloud will be the default were bogus: for
  <24.11 I'd suggest to go for nextcloud29 already. The people on
  unstable relying on the condition were on nextcloud28 so the upgrade
  will work fine.

  Also, it's unstable, so such upgrades are to be expected IMHO.

* Update the release notes to reflect that the new default is Nextcloud
  29 and warn that only one major upgrade at a time can be done.
2024-04-25 15:27:30 +02:00
Raito Bezarius 04e7710507
nixos/nextcloud: set 29 as default version for >= 24.11
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2024-04-25 15:27:30 +02:00
Jörg Thalheim 0b4cb020ff
Merge pull request #306076 from mrgiles/mediawiki_explicit_admin_username
mediawiki: update passwordfile description field
2024-04-23 12:16:29 +02:00
Kyle Carberry 68a917dc64
nixos/coder: fix broken service by referencing proper env (#305993) 2024-04-23 06:06:25 -03:00
Marcelo Giles ac259c3a59
mediawiki: update passwordfile description field 2024-04-22 11:02:52 -07:00
misuzu 1c99cea684 castopod: remove misuzu from maintainers 2024-04-22 19:19:48 +03:00
misuzu 4146e6ea38 gotosocial: remove misuzu from maintainers 2024-04-22 19:19:01 +03:00
Sandro 9edb990e0e
Merge pull request #295261 from SuperSandro2000/pretalx-media
nixos/pretalx: fix /media/ nginx location block
2024-04-21 22:45:17 +02:00
Julien Malka 7a85b7bc35
Merge pull request #304334 from JulienMalka/limesurvey-package
nixos/limesurvey: allow package to be customized
2024-04-21 18:53:26 +02:00
Pol Dellaiera e540698524
Merge pull request #302136 from savyajha/firefly-iii
firefly-iii: init at 6.1.13, nixos/firefly-iii: init
2024-04-20 13:56:08 +02:00
Mynacol 774cd77f2b nixos/akkoma: Fix media proxy URLs after upgrade
The upgrade of akkoma to 3.12.1 required to specify media upload and
media proxy URLs by default. The default value for media proxy was
wrong, leading to broken `example.com/media/proxy/[...]` URLs.

As descried in the [upgrade guide](https://meta.akkoma.dev/t/akkoma-stable-2024-03-securer-i-barely-know-her/681#explicit-upload-and-media-proxy-domains-5),
the media proxy `base_url` should be set to `https://example.com`
(without a path component). The suffix already contains `proxy/[...]`,
which gives the expected URLs.
2024-04-19 00:06:59 +02:00
Felix Bühler 671372c8ed
Merge pull request #304052 from mattchrist/freshrss-authtype-none
nixos/freshrss: fix startup when authType = "none"
2024-04-17 21:46:52 +02:00
Matt Christ 90e673b1b8 nixos/freshrss: fix startup when authType = "none"
Prior to this patch, FreshRSS fails to load with an initial
`authType = "none"` setting, instead providing an error:
"Error during context user init!"

To fix this, this patch changes the freshrss-config service to
setup the initial `defaultUser` when `authType = "none"`
is configured.
2024-04-16 16:48:41 -05:00
Savyasachee Jha 7531099464 nixos/firefly-iii: init 2024-04-17 00:23:06 +05:30
Christina Sørensen 8a1dbedde5
akkoma: make options work for 23.11 state
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-04-16 14:54:09 +02:00
Jörg Thalheim dac28df361
Merge pull request #304370 from SuperSandro2000/mediawiki-php
nixos/mediawiki: use the same php everywhere
2024-04-16 10:29:50 +02:00
Sandro Jäckel a6c356974a
nixos/mediawiki: use the same php everywhere
otherwise we might end up with eg: php 8.1 and php 8.2 mixed
2024-04-15 23:02:26 +02:00
Julien Malka 873db98d3d
nixos/limesurvey: allow package to be customized 2024-04-15 19:55:19 +02:00