Commit graph

1975 commits

Author SHA1 Message Date
Jenny d3ba34c9e4
plausible: 2.0.0 -> 2.1.4 (#356221) 2024-12-01 18:31:00 +01:00
Aleksana a94c29f625
privatebin: fix description typo (#360424) 2024-12-01 18:36:43 +08:00
Pol Dellaiera c5150dd981
firefly-iii: 6.1.21 -> 6.1.24, firefly-iii-data-importer: 1.5.6 -> 1.5.7 (#355838) 2024-12-01 08:59:37 +01:00
pascal 002ebede7a
firefly-iii: fix typo 2024-11-30 15:01:30 +01:00
pascal e06fd90239
privatebin: fix description typo 2024-11-30 14:30:15 +01:00
Thomas Gerbet 33f830be76
moodle: 4.4.1 -> 4.4.3 (#334639) 2024-11-30 13:08:19 +01:00
Valentin Gagarin 0ad4684753 agorakit: unbreak by setting valid database package 2024-11-26 22:20:19 +01:00
Savyasachee Jha 167c90ca01 nixos/firefly-iii-data-importer: Changes to clear cache more consistently upon updates 2024-11-25 09:46:52 +05:30
Savyasachee Jha 0c7f7224aa nixos/firefly-iii: Changes to clear cache more consistently upon updates
and other minor updates to align with new RFC formatter.
2024-11-25 09:46:52 +05:30
Maximilian Bosch 52aad27d73
nixos/castopod: pin to php 8.2
The package is pretty outdated, so I'm not sure if it'll work with PHP
8.3, let's keep it on 8.2 for now until the maintainers update it.
2024-11-23 20:44:28 +01:00
Alexander Sieg e8c9fa5bc8 plausible: 2.0.0 -> 2.1.4 2024-11-22 13:52:18 +01:00
Rémi NICOLE a25e476c6a
nixos/netbox: clear old static files on upgrade (#354036) 2024-11-22 10:19:21 +01:00
Kerstin Humm 897954b8ae nixos/open-web-calendar: init module 2024-11-21 16:34:39 +01:00
Thiago Kenji Okada 778f30c08c
porn-vault: init at 0.30.0-rc.11 (#355785) 2024-11-20 21:52:34 +00:00
Luana cc671e2b6b nixos/porn-vault: init module 2024-11-19 21:11:40 -03:00
Weijia Wang 5bdc0862bf
wordpress: 6.6.2 -> 6.7 (#356449) 2024-11-19 22:44:51 +01:00
Cosima Neidahl e6b5e795bf
kimai, nixos/kimai: init at 2.24.0 (#353187) 2024-11-19 01:05:53 +01:00
Florian Agbuya 75a6be1684 flarum: fix 'mysql' has been renamed to/replaced by 'mariadb' 2024-11-18 13:03:05 +08:00
Ratchanan Srirattanamet 29e586e508 nixos/kimai: init module & add test 2024-11-17 16:20:21 +00:00
Julien Malka cee07e8dc8 nixos/agorakit: init module 2024-11-17 16:08:58 +01:00
Viorel-Cătălin Răpițeanu d1da56f629 wordpressPackages: package and theme updates
1. Make twentytwentyfive theme default
2. Update all packages
2024-11-17 15:56:28 +02:00
gileri b652b30119
tt-rss: Add updateDaemon.commandFlags parameter 2024-11-16 23:58:58 +01:00
Maximilian Bosch 97a911e8fb
Merge: nixos/postgresql: extension based hardening relaxation (#355010) 2024-11-16 22:29:36 +01:00
Martin Weinelt 223a6c6ed0
nixos/postgresql: rename extraPlugins to extensions
This is the upstream lingo, and it makes everything slightly less
confusing.
2024-11-16 14:46:16 +01:00
Maximilian Bosch 0b3eef7441
postgresql_12: remove
This will be EOL at the end of November, so there's little reason to
keep it in 24.11[1]. As discussed, we'd like to keep it for as long as
possible to make sure there's a state in nixpkgs that has the latest
minor of postgresql_12 available with the most recent CVEs fixed for
people who cannot upgrade[2].

This aspect has been made explicit in the manual now for the next .11
release.

During the discussions it has been brought up that if people just do
`services.postgresql.enable = true;` and let the code decide the
postgresql version based on `system.stateVersion`, there's a chance that
such EOL dates will be missed. To make this harder, a warning will now
be raised when using the stateVersion-condition and the oldest still
available major is selected.

Additionally regrouped the postgresql things in the release notes to
make sure these are all shown consecutively. Otherwise it's a little
hard to keep track of all the changes made to postgresql in 24.11.

[1] https://endoflife.date/postgresql
[2] https://github.com/NixOS/nixpkgs/pull/353158#issuecomment-2453056692
2024-11-15 09:17:06 +01:00
Austin Horstman 57533f358a
pingvin-share: 1.1.3 -> 1.2.4 (#354105) 2024-11-14 13:40:09 -06:00
Sandro 1556ad266a
nixos/changedetection-io: fix creation of data dir (#318666) 2024-11-12 19:10:53 +01:00
Sandro 8c164faef4
nixos/nextcloud-notify_push: fix defaultText rendering (#352479) 2024-11-10 23:42:18 +01:00
Austin Horstman f5f87e7240
dashy-ui: init at 3.1.1-unstable-2024-07-14 (#349149) 2024-11-10 09:35:31 -06:00
TheRealGramdalf 7f76ced733 nixos/dashy: init module 2024-11-10 00:04:25 +00:00
Robert Schütz 06be8564e5
immich: 1.119.1 -> 1.120.1 (#354083) 2024-11-09 14:53:47 -08:00
Robert Schütz ee1cffa25c immich: 1.119.1 -> 1.120.1
Changelog: https://github.com/immich-app/immich/releases/tag/v1.120.0
           https://github.com/immich-app/immich/releases/tag/v1.120.1
2024-11-09 14:44:21 -08:00
Jenny 1b171c15ab
nixos/mobilizon: change psql socket dir to none symlinked directory (#352508) 2024-11-07 14:01:37 +01:00
RatCornu ad6564b0c3
nixos/pingvin-share: update env variable name 2024-11-07 00:23:28 +01:00
Minijackson fe58368de6
nixos/netbox: switch to symlink to check for upgrades
This makes it so that the upgrade script also runs when the
configuration changed, or when plugins were added.

This is also a hack to force everyone to run the upgrade script again,
since static files might have been copied incorrectly (see parent commit)
2024-11-06 16:14:56 +01:00
Minijackson ff6d89ac69
nixos/netbox: clear old static files on upgrade
This fixes an issue where upgrading NetBox didn't correctly clean old
files, and the interface wasn't correct / didn't show object relations.
2024-11-06 16:13:18 +01:00
Franz Pletz 0fc41ad977
treewide: Remove ineffective capability grants. (#333533) 2024-11-06 08:12:51 +01:00
Sandro ef9ef9ea88
mediagoblin: init at 0.14.0, nixos/mediagoblin: init (#350578) 2024-11-06 00:22:31 +01:00
Pol Dellaiera 7f81fa0cb9
nixos/snipe-it: fix secure flag for cookies (#353009) 2024-11-04 20:10:24 +01:00
Simon Hauser c4edf93988
Cleanup helsinki maintainer (#353611)
* maintainers: update email conni2461

* maintainers: add helsinki-jo

* tree-wide: cleanup maintainership of helsinki-systems
2024-11-04 12:59:26 +01:00
Alexandre Iooss 0512de2512 nixos/galene: add turnAddress option and fix httpAddress 2024-11-03 17:14:08 +01:00
Tomo fa08eabc4a atlassian-{bamboo,confluence,crowd,jira}: drop
Support for the Atlassian Server products ended in
February 2024 and there was insufficient interest in
maintaining the Atlassian Data Center replacements

c.f. https://github.com/NixOS/nixpkgs/pull/353043#issuecomment-2452825826
2024-11-02 20:36:14 +00:00
Mikael Voss 89fbc2b61b
nixos/akkoma: Include ImageMagick by default
ImageMagick is used to generate image previews in the media proxy. While
compatible, GraphicsMagick fails to read a lot of images in practice.
2024-11-02 17:16:49 +01:00
Sandro Jäckel ff9dd57d3d
nixos/mediagoblin: init 2024-11-02 00:20:01 +01:00
Leona Maroni 12dea28165
nixos/snipe-it: fix secure flag for cookies 2024-11-01 23:36:37 +01:00
Mikael Voss a00c1932ab
nixos/akkoma: Provide cache directory via environment
CACHE_DIRECTORY is used in the default configuration and therefore needs
to be provided in the environment for pleroma_ctl.
2024-10-31 21:19:02 +01:00
Robert Schütz 95447fbb60
immich: 1.119.0 -> 1.119.1 (#352155) 2024-10-31 12:35:13 -07:00
Sandro 907c79314b
nixos/mobilizon: change psql socket dir to none symlinked directory 2024-10-31 01:42:45 +01:00
Sandro 9dd1f943ec
nixos/nextcloud-notify_push: fix defaultText rendering 2024-10-30 23:48:18 +01:00
Atemu 8336127b57
peertube: startup script: exec into nodejs (#352005) 2024-10-30 13:25:54 +01:00
ppom 1eb6cc1582 nixos/peertube: startup script: exec into nodejs
1. Removed the #!/bin/sh shebang at the beginning, because
systemd.services.<name>.script already adds a #!/nix/store/.../bin/bash
shebang.

Previously:
	#!/nix/store/516kai7nl5dxr792c0nzq0jp8m4zvxpi-bash-5.2p32/bin/bash
	set -e
	#!/bin/sh
	umask 077
	...

2. Exec into nodejs, so that the startup script is no longer running but
replaces itself by nodejs.
This way, only one processus is running inside peertube.service.
2024-10-30 12:00:00 +01:00
Robert Schütz 22ffb72803 nixos/immich: generate config file from services.immich.settings 2024-10-29 17:58:50 -07:00
Robert Schütz 376dd27232 nixos/immich: add systemd slice 2024-10-29 16:24:32 -07:00
Jean-Baptiste Giraudeau da7b5ed446
nixos/gancio: add gancio to nginx extraGroups only if nginx enabled 2024-10-29 18:06:57 +01:00
Mikael Voss 88b1884142
nixos/akkoma: Make imports explicit 2024-10-29 00:06:19 +01:00
Robert Schütz 74e0f237ea immich: 1.118.2 -> 1.119.0
Changelog: https://github.com/immich-app/immich/releases/tag/v1.119.0
2024-10-28 13:04:14 -07:00
Martin Weinelt 8195804e5d
nixos/sftpgo: add extraReadWriteDirs option and fix docs links (#315619) 2024-10-26 22:34:45 +02:00
Rémi NICOLE 0433962e5b
netbox: 3.7.8 -> 4.1.3 (#331750) 2024-10-25 09:09:06 +00:00
Leona Maroni a378c72099
youtrack_2022_3: drop (#349356) 2024-10-24 22:46:57 +02:00
Matthieu Coudron 5c8ff2e60c
nixos/immich: use 'immich' as syslog identifier (#350551)
use 'immich' as syslog identifier

seeing 'immich' instead of the generic 'server' in journalctl is more understandable
2024-10-24 00:15:19 +02:00
Minijackson 4409a8d78f
nixos/netbox: increase timeout for NetBox pre-start script
since the script does database migrations and index,
it could timeout on slower system with a big enough database
2024-10-23 21:07:35 +02:00
Minijackson 69610ea296
netbox: switch to netbox_4_1, mark netbox_3_7 as EOL
also switch the netbox-upgrade test to check upgrade from 3.7 -> 4.1
2024-10-23 21:07:32 +02:00
Yt e7d7f71c0b
nextcloudPackages.whiteboard: init at 1.0.4; nextcloudPackages: update (#342773) 2024-10-22 19:04:21 -04:00
Franz Pletz eae71219ea
nixos/wakapi; fix logical errors; add NixOS test (#350435) 2024-10-22 19:02:05 +02:00
NotAShelf a466f14627
nixos/wakapi: fix incorrect assertion conditions
Using implication here (->) causes the assertions to fail haphazardly due to the ordering *implied* by the operator. By using AND, we avoid this case. Unsurprisingly, this was caught by the NixOS test.
2024-10-22 12:27:24 +03:00
NotAShelf fbec0c0d7f
nixos/wakapi: fix failing assertions 2024-10-22 12:05:02 +03:00
NotAShelf c3ce64b13a
nixos/wakapi: fix typo in warning conditional
This makes the warning work as intended again.
2024-10-22 11:59:09 +03:00
Martin Weinelt 7d2fd18921
nixos/pretalx: feature the files.upload_limit setting
The default of 10 MiB might be too constraining for slide decks and
collateral in 2024.
2024-10-22 02:49:29 +02:00
Martin Weinelt bd281d0259
pretalx: 2024.2.1 -> 2024.3.0
https://docs.pretalx.org/changelog/#v2024-3-0
2024-10-22 02:43:51 +02:00
Jonas Heinrich 345a761d13 nixos/nextcloud-whiteboard-server: init 2024-10-21 15:49:23 +00:00
Leona Maroni dc14253a18
nixos/youtrack: drop support for YouTrack 2022.3 2024-10-21 17:36:23 +02:00
Maximilian Bosch c5b89642bf
Merge: nixos/nextcloud: fix shellcheck findings with enableStrictShellChecks enabled (#349558) 2024-10-18 23:57:53 +02:00
Sandro d72c0ce546
nixos/nextcloud-notify_push: fix connecting to mysql via socket (#348114) 2024-10-18 20:25:32 +02:00
Christina Sørensen d218858bb1
nixos/wakapi: add database options; gate db creation behind database.createLocally (#341176) 2024-10-18 18:04:46 +02:00
Brendan Taylor 04e39de6eb nixos/immich: do not set services.redis.servers.immich.user
the redis module expects a user and group to exist with this name.
previously if there was no group with the same name as
`services.immich.user` the immich redis server would fail to start.

instead we can use the redis module's default behaviour: it will
create a user & group named "redis-immich".
2024-10-17 07:19:02 -06:00
Leona Maroni edd292c18b
nixos/dokuwiki,nixos/wordpress,nixos/invoiceplane: Remove deprecated isCoercibleToString (#292801) 2024-10-17 09:32:14 +02:00
Robert Schütz e3152f80bf nixos/immich: change default port to 2283
This was always upstream's default but they also change the internal
port, i.e. behind the reverse proxy, to 2283 in
https://github.com/immich-app/immich/pull/13185.
2024-10-16 10:30:34 -07:00
Felix Bühler e544a67eba
nixos/freshrss: fix phpfpm.pool (#347324) 2024-10-15 22:39:24 +02:00
Sandro Jäckel 1ada7c1d36
nixos/nextcloud: fix shellcheck findings with enableStrictShellChecks enabled 2024-10-14 18:20:25 +02:00
Richard Steinmetz b9ca8498aa nixos/nextcloud-notify_push: fix connecting to mysql via socket 2024-10-14 13:30:05 +02:00
Felix Buehler de810c5163 nixos/freshrss: update de parameters 2024-10-13 23:07:46 +02:00
Kerstin 35c52ab030
mastodon: 4.2.13 -> 4.3.0 (#337545) 2024-10-12 19:37:08 +02:00
Pol Dellaiera afd96bad04
Bump and fix nextjs-ollama-llm-ui (#347856) 2024-10-12 10:42:53 +02:00
Bruno Bigras 986d7cad0d
wakapi: set StateDirectory (#347431) 2024-10-11 14:48:16 -04:00
Kranium Gikos Mendoza f385d942e1 nextjs-ollama-llm-ui: fix nextjs cache dir (#344316) 2024-10-11 17:35:37 +11:00
Izorkin 36a83a3bf1
mastodon: 4.2.13 -> 4.3.0
Changelog:
https://github.com/mastodon/mastodon/releases/tag/v4.3.0
2024-10-10 16:58:54 +02:00
Felix Singer 3d30811d4e nixos/gerrit: Apply initial hardening using the systemd unit
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-10 07:12:28 +02:00
Robert Schütz db4fd8f4e3
nodePackages.npm: drop (#346536) 2024-10-09 12:01:42 -07:00
Matthew Croughan 4eb19953b6
node-red: move from nodePackages (#347018) 2024-10-09 16:11:38 +01:00
Bruno Bigras 90f457d197 wakapi: set StateDirectory
fix #347393
2024-10-09 02:54:57 -04:00
Felix Buehler 6290926fed nixos/freshrss: fix phpfpm.pool 2024-10-08 20:23:52 +02:00
Robert Schütz b129e21ffd node-red: move from nodePackages 2024-10-08 08:29:56 -07:00
e1mo 4f899ed44d
nixos/dokuwiki,nixos/wordpress,nixos/invoiceplane: Remove deprecated isCoercibleToString
Close #292788
2024-10-08 11:53:03 +02:00
Sandro 0538ecd092
rss-bridge: Remove pkg patch, adapt nixos service (#331295) 2024-10-07 18:57:22 +02:00
Robert Schütz 506df4e38e nodePackages.npm: drop 2024-10-05 11:23:49 -07:00
Nick Cao 6069dde181
nixos/keycloak: make initialAdminPassword optional 2024-10-05 08:37:41 -04:00
Nick Cao 0cdc3e2a0b
nixos/keycloak: drop removed proxy option
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#proxy-option-removed
2024-10-04 20:20:46 -04:00
Nick Cao 16cd47369f
nixos/keycloak: KEYCLOAK_ADMIN{,PASSWORD} -> KC_BOOTSTRAP_ADMIN_{USERNAME,PASSWORD}
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#admin-bootstrapping-and-recovery
2024-10-04 20:08:06 -04:00
Nick Cao d2ec2d3c29
nixos/keycloak: link $out/lib to KC_HOME_DIR to fix loading optimized app image
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#additional-validations-on-the-optimized-startup-option
2024-10-04 20:06:08 -04:00
Mynacol aa0fc3e8b8 rss-bridge: Remove pkg patch, adapt nixos service
The rss-bridge service changes introduced in f2201789fe
resp. https://github.com/NixOS/nixpkgs/pull/223148 removes the need for
the package patch. This commit removes the patch to ease updating and
maintenance.
Relevant service functionality was also removed (e.g. the setting of
RSSBRIDGE_DATA).

The explicit definition of FileCache.path so users can easily see its
default value and change it, requires to use a freeformType to let users
freely add potentially upcoming config options. This type is restricted
to ini types (although we coerce them to environment variables).
This however makes the list of enabled_bridges impossible. That was
fixed by explicitly introducing this option with a type allowing lists.
The default value however should be unset, which is expressed as `null`,
which further spurred a change in the environment variable generation to
ignore null values (instead of coercing them to an empty string).

A breaking change note was added to highlight this change. A check that
warns users of the not-application of their existing config file is
not easily possible, as people could have only added or changed the
config.ini.php file on the file system without changing a nix variable.
2024-10-04 14:58:15 +02:00