Commit graph

1975 commits

Author SHA1 Message Date
Pol Dellaiera 2199b69a7a
nixos/privatebin: init module & privatebin: init at 1.7.4 (#344014) 2024-10-04 09:51:40 +02:00
Sandro e00cc9f2fa
openwebrx: remove alias alsaUtils -> alsa-utils (#346259) 2024-10-04 02:21:40 +02:00
Astro 48b4aa8eae openwebrx: s/alsaUtils/alsa-utils/
allows running with allowAliases = false
2024-10-03 23:53:56 +02:00
h7x4 5190ddc27d
treewide: \xc2\xa0 -> (#345898) 2024-10-03 18:23:59 +02:00
lassulus def08aa2e3
jitsi-meet: Default NAT harvester, Excalidraw Caddy, Prosody lockdown (#280615) 2024-10-02 21:08:06 +01:00
Peder Bergebakken Sundt 3100acba08 treewide: \xc2\xa0 ->
I have no idea what this escape sequence even is, but it breaks the nix parser with cryptic errors if not used in a comment.
A friend let me know MacOS is prone to input weird spaces, not sure if that is the source.

Candidates were located and created with:

    chr="$(echo -e '\xc2\xa0')"; rg -F "$chr" -l | xe sd -F "$chr" " "

There are some examples left, most being example output from `tree` in various markdown documents, some patches which we can't really touch, and `pkgs/tools/nix/nixos-render-docs/src/tests/test_commonmark.py` which I'm not sure if should be addressed
2024-10-02 15:33:06 +02:00
Maximilian Bosch 55a45406a6
nixos/nextcloud: update relatedPackages 2024-10-01 13:36:16 +02:00
Maximilian Bosch 20ed9ccd88
nextcloud: correct stateversion logic 2024-10-01 12:48:47 +02:00
Jonas Heinrich 1b121c1ea2
nextcloud30: init at 30.0.0 2024-10-01 12:48:45 +02:00
Nick Cao 5aa3097833
nixos/hatsu: init module (#345102) 2024-09-30 18:35:12 -04:00
藍+85CD 2f15b523d9
nixos/hatsu: init module 2024-10-01 00:33:38 +08:00
Erin Yuki Schlarb 56581588c3 jitsi-meet: Add option to disable Prosody services not used by Jitsi Meet
The default Prosody config assumes that Prosody will be used as a federated
XMPP server, while the usecase for Jitsi Meet is much narrower.
2024-09-30 18:19:34 +02:00
Erin Yuki Schlarb 7ab8f255b9 jitsi-meet: Restrict jitsi-excalidraw systemd service to the minimum requried 2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb 9e8b3f97cc jitsi-meet: Also forward Excalidraw connections when using Caddy as web server 2024-09-30 18:19:33 +02:00
h7x4 11f77694ac
nixos/bluemap: move to web-apps (#345353) 2024-09-30 17:53:27 +02:00
Erin Yuki Schlarb 67e261beb5 jitsi-meet: Set internal MUC options set in official Docker image 2024-09-30 17:31:04 +02:00
Viorel-Cătălin Răpițeanu db71929224 wordpressPackages: update packages, add ru_RU lang, make twentytwentyfour default 2024-09-29 23:09:33 +03:00
h7x4 c25213a9bd
nixos/bluemap: move to web-apps 2024-09-29 21:40:39 +02:00
Savyasachee Jha 22e2e02118 nixos/privatebin: init 2024-09-29 23:02:19 +05:30
Leona Maroni a23db91282
nixos/immich: add option database.port (#345094) 2024-09-28 18:01:08 +02:00
7c6f434c c87aad4296
Add Collabora Online (#330708) 2024-09-27 08:33:57 +00:00
Robert Schütz c5d95d4999
immich: some improvements (#344237) 2024-09-26 07:14:52 -07:00
Brendan Taylor 8debc8df79 nixos/immich: add option database.port 2024-09-26 08:06:59 -06:00
DCsunset 68d108bb04 nixos/stirling-pdf: add missing dependency ghostscript 2024-09-25 01:01:33 +00:00
Martin Weinelt aaa7fb5840
nixos/{pretix,pretalx}: set up log rotation (#343982) 2024-09-24 22:48:17 +02:00
Robert Schütz 7cdda564e0 nixos/immich: override machine-learning with cfg.package
Otherwise they could use different versions:

    nix-repl> (immich.overrideAttrs { version = "0"; }).machine-learning.version
    "1.115.0"
2024-09-24 09:53:24 -07:00
Yt d026e3fa1a
immich: init at 1.115.0; nixos/immich: init module (#324127) 2024-09-24 05:56:12 -04:00
Jan van Brügge cedcd9f4f0
nixos/immich: init module 2024-09-23 22:38:02 +02:00
Martin Weinelt 1d8c946fdb
nixos/pretalx: enable log rotation
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:58:52 +02:00
Martin Weinelt 9a85a7e2ce
nixos/pretix: enable log rotation
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:57:31 +02:00
Marcel 0556c426ff
nixos/pretix: fix database.host option type (#343917)
Support database configuration using TCP and not only Unix sockets.
2024-09-23 10:52:08 +02:00
Leona Maroni 761ae3237c
dependency-track: init at 4.11.6 (#328669) 2024-09-22 18:49:11 +02:00
Alexander Sieg 5b67f3b831
nixos/dependency-track: init module 2024-09-22 16:38:45 +02:00
Aleksana 5c16154521
nixos/davis: fix nginx conf's well-known redirect (#342995) 2024-09-22 21:28:31 +08:00
Weijia Wang d582ac052d nixos/wordpress: fix tests 2024-09-19 22:25:37 +02:00
Andrew Kvalheim 818d2a60a8 hedgedoc: correct typo in deprecation notice
Continues #244941
2024-09-19 11:05:05 -07:00
Casey Link 5b64b4072a
nixos/davis: fix nginx conf's well-known redirect
We mistakenly used a non-existing nginx variable for the X-Forwarded-Proto causing
the well-known redirect to return erroneous Location headers like:

    Location: ://dav.example/dav

instead of the correct:

    Location: https://dav.example/dav
2024-09-19 12:03:51 +02:00
Maximilian Bosch 3302dc7c34
nixos/doc: mention "No such file or directory" error on Nextcloud
That was... interesting to debug. It took a me a bit of reading C code
until I realized that the realpath cache is internally used for
`file_get_contents`, but not for `file_exists` 🙃

I'm not comfortable on doing the workaround in the module, but I think
it's good to have this documented in the manual.
2024-09-16 18:57:10 +02:00
Aleksana f1580efb3b
maintainers/team-list: add cyberus team (#331059) 2024-09-16 18:14:16 +08:00
NotAShelf b4878419ee
nixos/wakapi: add database options; gate db creation behind database.createLocally
Currently the NixOS module for Wakapi will create the database
automagically if the user has database dialect configured in the Wakapi
configuration file. By all means, this is undocumented behaviour and an
anti-feature.

This MR adds a database.createLocally option that allows the end-user to
create auto-creation behaviour, and lays out groundwork for automated
database setups for different database dialects supported by Wakapi.
2024-09-16 12:50:01 +03:00
kirillrdy 51b7b3bddf
flarum: fix installation and migration logic (#341340) 2024-09-16 16:58:19 +10:00
Albert Safin afb0b0ee58 nixos/collabora-online: init 2024-09-14 21:24:30 +00:00
tmarkov b44fdbfc11 nixos/windmill: add database.url option and defaults 2024-09-14 00:36:55 +03:00
Gaétan Lepage d4474ed33b
nixos/invidious: add options for configuring inv-sig-helper (#340748) 2024-09-12 14:57:57 +02:00
Florian Agbuya 317a52a757 flarum: fix installation and migration logic 2024-09-12 16:14:41 +08:00
⛧-440729 [sophie] 81b0701a4d
nixos/invidious: add options for configuring inv-sig-helper 2024-09-12 09:08:02 +02:00
Emily 1a55636200
nixos/dokuwiki: don’t use lib.escapeShellArg (#340309) 2024-09-11 00:34:05 +01:00
Jean-Baptiste Giraudeau 3a33b6c3a8
nixos/gancio: set default value for settings.baseurl 2024-09-10 13:13:32 +02:00
Jean-Baptiste Giraudeau 432bfec026
nixos/gancio: use unix socket between nginx and gancio 2024-09-10 13:13:28 +02:00
Jean-Baptiste Giraudeau 58ec286785
nixos/gancio: actually enable ssl by default. 2024-09-09 15:48:52 +02:00
Kerstin e248589c0f
gancio: init at 1.19.0 (#279011) 2024-09-08 22:51:23 +02:00
Jean-Baptiste Giraudeau f5e44554c4
nixos/gancio: init module 2024-09-08 18:09:57 +02:00
ash 2bab9e4eba nixos/dokuwiki: factor out toPhpString 2024-09-07 15:30:54 +01:00
ash 345c8a7310 nixos/dokuwiki: don’t use lib.escapeShellArg
PHP strings don't obey shell quoting rules. See #333744.
2024-09-07 14:39:07 +01:00
kirillrdy 5f4c0543d2
Flarum: fix installation and client interface issues (#339202) 2024-09-07 06:32:54 +10:00
Bjørn Forsman 4861c28956 homebox: update URLs in documentation
https://github.com/hay-kot/homebox was archived on 2024-06-12 and we use
the https://github.com/sysadminsmedia/homebox fork since the beginning,
in commit 4be8e799db
("homebox: init at 0.13.0").

Update the documentation to be in sync with the source we build from.
2024-09-06 19:34:15 +02:00
Kerstin Humm 21ac7729ae nixos/weblate: add borgbackup to path 2024-09-04 12:54:31 +02:00
Florian Agbuya 1032b5fa95 flarum: disable automatic DB creation 2024-09-04 16:33:30 +08:00
Florian Agbuya 249dacfaa8 flarum: fix flarum directory permissions 2024-09-04 16:33:18 +08:00
Bernardo Meurer fc13b0acdb
Merge branch 'master' into add-rutorrent-service 2024-09-03 01:18:16 +00:00
Finn Behrens 55e7c6155a nixos/moodle: update to php83 2024-09-02 20:04:33 +02:00
Sandro 58ac9a4a4e
nixos/mediawiki: add resetUserEmail script (#332325) 2024-08-29 16:04:54 +02:00
Sandro b5e4bf3745
kasmweb: 1.12.0 -> 1.15.0 (#246777) 2024-08-29 13:03:51 +02:00
Christina Sørensen a96a49338e
nixos/wakapi: init module (#335436) 2024-08-28 18:58:13 +02:00
Fernando Ayats b21bec17eb
nixos/freshrss: improve description for virtualHost 2024-08-28 10:25:10 +02:00
Sandro 7f9873b3b9
nixos/stirling-pdf: make calibre dependency optional based on config (#337060) 2024-08-28 09:53:33 +02:00
Savyasachee Jha 3ce5da914b nixos/firefly-iii-data-importer: init 2024-08-28 08:29:32 +02:00
DCsunset b94de95f9d nixos/stirling-pdf: make calibre dependency optional based on config 2024-08-26 01:47:17 +00:00
Franz Pletz a266f38ade
Merge pull request #336584 from mweinelt/engelsystem-cache-migration 2024-08-25 01:50:39 +02:00
Peder Bergebakken Sundt d38f701636
Merge pull request #334559 from litchipi/ifm_fixup
ifm-web: init at 4.0.2
2024-08-24 01:07:30 +02:00
Martin Weinelt 760b2b5562
nixos/engelsystem: refactor option setup 2024-08-22 19:50:17 +02:00
Martin Weinelt fe0d323af5
nixos/engelsystem: prune template cache on version changes
After upgrading to 3.5.0 we noticed, that registering would redirect to
the login page and not work at all. At the same time the admin user was
unable to access its user settings.

This issue could be tracked back to the template cache, that must be
invalidated between release upgrades.
2024-08-22 19:16:28 +02:00
Emily 01a749e0bf
Merge pull request #336077 from emilazy/push-yoykzrxwpykp
pict-rs_0_3: drop
2024-08-22 14:58:04 +01:00
Sandro 18fb834638
Merge pull request #322730 from bbenno/update-wp-httpd-htaccess 2024-08-22 14:33:17 +02:00
Sandro a45dc99ba3
Merge pull request #287565 from RatCornu/pingvin-share 2024-08-22 11:59:03 +02:00
Emily afdee7e458 pict-rs_0_3: drop
This was broken by the Rust 1.80 upgrade, and is an old version that
we’d have to patch to keep working.

We have already done the 0.4 → 0.5 update without keeping around
the old version or adding in any additional `stateVersion` logic
in <https://github.com/NixOS/nixpkgs/pull/280221>. As a result,
migration for 0.3 users is going to be a little awkward. I’ve done
my best to provide comprehensive instructions for anyone who hasn’t
already bumped to 0.4.

It is probably a footgun to add `stateVersion` logic for any
package that makes backwards‐incompatible schema changes and only
supports migration from the immediately previous version. Users
won’t get migrated by default and we have to either package and
maintain an endlessly growing list of old versions or add complicated
instructions like this. It’s not really practical for us to support
a significantly better migration story than upstream does.
2024-08-22 01:54:09 +01:00
Emily 1a35d0ccb5 nixos/pict-rs: fix environment variable name
Thanks to @marius851000 for reporting this issue. I assume it probably
changed in 0.5 or something.
2024-08-21 23:09:55 +01:00
s1341 5c1ed3ad5a kasmweb: 1.12.0 -> 1.15.0 2024-08-21 15:06:02 +03:00
Litchi Pi ef03964b92 ifm-web: init at 4.0.2
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-08-20 10:42:02 +02:00
Kerstin f0ceb9f402
Merge pull request #335768 from erictapen/mastodon
nixos/mastodon: remove pin for postgresql version
2024-08-19 23:11:53 +02:00
isabel f3c2be2a80
nixos/wakapi: init module 2024-08-19 17:16:01 +01:00
Kerstin Humm f5bb4b807c weblate: 5.6.2 -> 5.7
Changelog: https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.7

Also had to rework django-compressor settings and aligned them more
closely with the official docs:
https://cheat.readthedocs.io/en/latest/django/compressor.html
2024-08-19 16:10:40 +02:00
Kerstin Humm 1592790b03
nixos/mastodon: use correct postgresql package 2024-08-19 11:06:57 +02:00
Sandro 69701a3807
Merge pull request #320060 from PatrickDaG/homebox
homebox: init at 0.13.0; nixos/homebox: init
2024-08-18 16:32:43 +02:00
Nick Cao 12f650234b
Merge pull request #334257 from Dan-Theriault/miniflux-no-admin-required
nixos/miniflux: make admin provisioning optional
2024-08-13 21:54:34 -04:00
Dan Theriault f6788b6165 nixos/miniflux: make admin provisioning optional
Miniflux supports provisioning users via SSO, which renders admin
accounts unnecessary for some use-cases. This change retains the
existing default, but makes it easier to disable admin provisioning.
2024-08-13 18:56:16 -04:00
Kerstin Humm 13c96978c3 nixos/weblate: init module and test
Co-authored-by: Taeer Bar-Yam <Radvendii@users.noreply.github.com>
2024-08-13 08:44:54 +02:00
Litchi Pi 0ec7dd5011 fix: replace relative paths in sources with nix store paths
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-08-10 16:23:27 +02:00
Eduard Bachmakov cb10fe8aaf treewide: Remove ineffective capability grants.
Systemd units with `PrivateUsers` set get their capabilities within the user namespace only [1].
As a result they do cannot bind to privileged ports even though they *appear* like they should be able to.

The units in this commit [2] set `PrivateUsers` unconditionally so binding to privileged ports is currently impossible.
Granting them CAP_NET_BIND_SERVICE is useless and misleading any reader of those modules.
Technically, this commit also hardens these modules ever so slightly.

(There are corner cases where this could make sense (e.g. across units, using `JoinsNamspaceOf`) but this is arcane enough to not to be present in nixpkgs.)

[1]: systemd.exec(5): PrivateUsers
[2]: found using `rg -e 'PrivateUsers.?=\s+[^f][^a]' -l | xargs rg -e '\bCAP_' -l`
2024-08-09 23:10:30 +02:00
Patrick f8639ea08d
nixos/homebox: init 2024-08-08 20:01:46 +02:00
Fea 0c9cb0041b nixos/misskey: init 2024-08-06 12:24:15 +02:00
Anna Aurora dfd120537d
nixos/meme-bingo-web: fixed documentation, service description and did further hardening 2024-08-06 03:14:22 +02:00
Martin Weinelt 3dfb2c685a
nixos/pretix: restart web and worker unit on failure
Found a few instances, where celery intermittently complained about a
misconfigured redis instance and exited.

> redis.exceptions.ResponseError: MISCONF Redis is configured to save RDB
> snapshots, but it's currently unable to persist to disk. Commands that
> may modify the data set are disabled, because this instance is
> configured to report errors during writes if RDB snapshotting fails
> (stop-writes-on-bgsave-error option). Please check the Redis logs for
> details about the RDB error.
2024-08-05 17:37:12 +02:00
Sandro Jäckel 4ae7723c9b
nixos/mediawiki: add resetUserEmail script 2024-08-04 22:03:59 +02:00
Martin Weinelt 3a719e06c7
nixos/mediawiki: move to php 8.2
There is breakage on PHP 8.1 since the last staging cycle.
2024-08-04 18:51:41 +02:00
Johannes Jöns 79723dbb2a
Merge pull request #331358 from pinpox/init-screego-module
nixos/screego: init module
2024-08-04 18:34:51 +02:00
RatCornu 924437f5de
nixos/pingvin-share: init at 0.29.0 2024-08-04 01:18:03 +02:00
Weijia Wang ec581817ca nixos/wordpress: unpin php81 in check phase 2024-08-03 20:24:27 +02:00
Sandro 377e40297c
Merge pull request #330046 from DCsunset/stirling-pdf-module-init
nixos/stirling-pdf: init module
2024-08-03 18:22:02 +02:00
Guanran Wang ea6f4d5e86
treewide: remove periods from lib.mkEnableOption
Co-authored-by: éclairevoyant <848000+eclairevoyant@users.noreply.github.com>
2024-08-02 23:55:32 +08:00
Felix Bühler 04101568c0
Merge pull request #325644 from Stunkymonkey/sogo-chmod-install
nixos/sogo: prefer 'install' over 'chmod'/'chown'
2024-08-01 23:25:37 +02:00
Martin Weinelt 7b07f5371f
Merge pull request #331406 from mweinelt/pretix-2024.7.0
pretix: 2024.6.0 -> 2024.7.0
2024-08-01 13:04:29 +02:00
lassulus 35ac2fed3e
Merge pull request #330946 from toastal/movim-0.26
movim: 0.25.1 → 0.26
2024-08-01 11:39:13 +02:00
Pablo Ovelleiro Corral c882d9b673
nixos/screego: init module
Add module for screego
2024-08-01 10:51:38 +02:00
Martin Weinelt 4ba537131f
nixos/pretix: increases startup timeout
Migrations on a busy machine can exceed 5 minutes, which I can reproduce
on a busy builder.
2024-08-01 04:37:20 +02:00
toastal 936a378123 movim service: updates for 0.26 2024-07-31 14:12:14 +07:00
DCsunset 0c2918fc91 nixos/gotify-server: add environment and environmentFiles options 2024-07-30 17:38:00 -04:00
DCsunset e1ced8b12c nixos/gotify-server: add package option 2024-07-30 17:32:01 -04:00
DCsunset b5a051f694 nixos/gotify-server: add maintainer 2024-07-30 17:29:55 -04:00
DCsunset 2079eeb882 nixos/gotify-server: clean up and reformat module 2024-07-30 17:28:54 -04:00
Alexander Sieg 20b3a5458d
nixos/outline: add cyberus team as maintainer 2024-07-30 12:37:45 +02:00
DCsunset 05113f61f0 nixos/stirling-pdf: init module 2024-07-26 18:12:50 -04:00
K900 26801aa449 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-26 14:31:21 +03:00
Pol Dellaiera ceda66b310
Merge pull request #251687 from martinetd/cryptpad
nixos/cryptpad: init, cryptpad: init at 2024.6.0
2024-07-26 09:21:51 +02:00
K900 1410c766c8 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-26 08:41:08 +03:00
Jörg Thalheim 0fbc43eaea
Merge pull request #323641 from XenGi/fix-freshrss
nixos/freshrss: add ability to use socket path
2024-07-26 00:20:49 +02:00
github-actions[bot] 7208220b63
Merge master into staging-next 2024-07-24 18:01:18 +00:00
Dominique Martinet 7c448e8d44 nixos/cryptpad: harden service
cryptpad is not directly exposed to the network, but has plenty that can
be hardened more properly, so fix that.
2024-07-24 16:17:32 +09:00
Dominique Martinet b846e8762f nixos/cryptpad: init
This is a full rewrite independent of the previously removed cryptpad
module, managing cryptpad's config in RFC0042 along with a shiny test.

Upstream cryptpad provides two nginx configs, with many optimizations
and complex settings; this uses the easier variant for now but
improvements (e.g. serving blocks and js files directly through nginx)
should be possible with a bit of work and care about http headers.

the /checkup page of cryptpad passes all tests except HSTS, we don't
seem to have any nginx config with HSTS enabled in nixpkgs so leave this
as is for now.

Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com>
Co-authored-by: Michael Smith <shmitty@protonmail.com>
2024-07-24 16:17:26 +09:00
Payas Relekar aebb3d3474 nixos/goatcounter: init 2024-07-24 10:17:44 +05:30
github-actions[bot] d284ef371e
Merge master into staging-next 2024-07-23 12:01:18 +00:00
Litchi Pi 0fb7268b9b Init IFM service at version 4.0.2
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-07-23 08:44:50 +02:00
bolives-hax 9319cf87b8
Merge branch 'NixOS:master' into add-rutorrent-service 2024-07-22 01:37:39 +02:00
bl0v3 7c1315628b fix exposeInsecureRPC2mount rtorrent group 2024-07-22 01:11:07 +02:00
Martin Weinelt 983077457f
Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
-	pkgs/development/python-modules/uvcclient/default.nix
-	pkgs/development/tools/rust/rust-analyzer/default.nix
2024-07-18 12:35:33 +02:00
Aaron Andersen 2e930eafb9
Merge pull request #318285 from gador/nixos-zabbixWeb-nginx
nixos/zabbixWeb: Add nginx as webserver, add zabbix 6.4
2024-07-17 21:22:13 -04:00
Florian Brandes 7d3b77d66f
nixos/zabbixWeb: format
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-17 22:33:47 +02:00
Florian Brandes 9ca5b84e27
nixos/zabbixWeb: add nginx config
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-17 22:31:50 +02:00
Emily aef28c7834 nixos/akkoma: unpin ffmpeg_5
Their Dockerfile uses Alpine’s ffmpeg package, which is already
on 6. They just invoke the command‐line tool and nothing they do
looks particularly version‐sensitive.
2024-07-14 08:34:23 +01:00
Masum Reza 025f6d60e3
Merge pull request #326047 from britter/britter/onlyoffice-typos
onlyoffice: typo fixes, remove top level `with lib;`
2024-07-10 15:01:05 +05:30
Benedikt Ritter 57ea5be929
onlyoffice: Remove top-level with lib;
Prepend affected components with `lib.` instead.
2024-07-10 10:42:29 +02:00
lassulus 11dbf85aad
Merge pull request #325637 from Stunkymonkey/jtisi-meet-chmod-chown
nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown'
2024-07-10 09:57:18 +02:00
Benedikt Ritter d61489db1a
onlyoffice: Fix typos 2024-07-10 09:14:21 +02:00
Pol Dellaiera db41081a91
Merge pull request #323743 from NixOS/nixos/module/glance-init
nixos/glance: init module
2024-07-09 06:42:22 +02:00
Felix Buehler 87051a8f44 nixos/sogo: prefer 'install' over 'chmod'/'chown' 2024-07-08 22:41:47 +02:00
Felix Buehler 16eb9ced4e nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown' 2024-07-08 22:10:25 +02:00
Pol Dellaiera 00e9e54702
nixos/glance: init module 2024-07-08 13:14:09 +02:00
Sandro b2a1b6f508
Merge pull request #324924 from SuperSandro2000/mediawiki-syntaxcheck
nixos/mediawiki: check if LocalConfig.php is valid syntax
2024-07-07 15:17:08 +02:00
Sandro Jäckel 313d2ccf83
nixos/mediawiki: check if LocalConfig.php is valid syntax 2024-07-06 02:06:50 +02:00
Maximilian Bosch a9855af287
Merge pull request #321771 from Mynacol/nextcloud-preserveenv
nixos/nextcloud: Remove --preserve-env in sudo
2024-07-05 21:24:50 +00:00
Jonas Heinrich e97d5eb3eb
Merge pull request #293210 from onny/eintopf
nixos/eintopf: init; eintopf: init at 0.13.16
2024-07-05 13:12:59 +02:00
Jonas Heinrich 28512d1ba4 nixos/eintopf: init 2024-07-05 13:12:35 +02:00
Weijia Wang 9c1cfad9a0
Merge pull request #307910 from r-ryantm/auto-update/pixelfed
pixelfed: 0.11.13 -> 0.12.1
2024-07-03 00:55:55 +02:00
Mynacol af072cfb55 nixos/nextcloud: Remove --preserve-env in sudo
This helps supporting sudo-rs, which currently does not implement the
--preserve-env flag and probably won't so in the foreseeable future [1].

The replacement just sets both environment variables behind the sudo
invocation with env, as sudo-rs also doesn't implement env var lists.

The OC_PASS variable is dropped, as it is seemingly unused and would
leak through this approach through /proc.

[1] https://github.com/memorysafety/sudo-rs/issues/129
2024-07-02 11:29:35 +02:00
Felix Buehler bb33682f3a nixos/freshrss: add extensions 2024-07-01 23:38:56 +02:00
Maximilian Bosch c2586ca239 nixos/nextcloud: warn about unsafe path transitions
Closes #294588
It _may_ also be an answer to #169733.

See explanation from upstream[1] for further details.

[1] https://github.com/systemd/systemd/issues/19618#issuecomment-843273818
2024-07-01 21:20:12 +02:00
Ricardo Band 96c60c6b09 nixos/freshrss: add ability to use socket path
This change enables server:port combinations like "localhost:5432" but
also socket paths like "/run/postgresql". Without this change a port was
mendatory and attached to the path (/run/postgresql:5432) resulting in
an incorrect socket path. The underlying script already configures paths
correctly, so this small change should be enough.
2024-06-30 20:31:37 +02:00
Jörg Thalheim d6cf181343 nixos/shiori: fix databaseUrl example 2024-06-30 13:41:38 +02:00
Jörg Thalheim 84a8354c58 nixos/shiori: fix BindPaths conditions if databaseUrl is not set 2024-06-30 13:06:11 +02:00
Jörg Thalheim 992f8bf968 nixos/shiori: fix nixos types for paths 2024-06-30 13:06:11 +02:00
Danilo Reyes 4f021e14a3 shiori: 1.5.5 -> 1.7.0 2024-06-29 15:30:22 -06:00
Kim Lindberger b75986fd26
Merge pull request #310642 from arcnmx/keycloak-hostname-strict
nixos/keycloak: relax hostname settings assertion
2024-06-29 17:09:02 +02:00
Thomas Gerbet 85be596266
Merge pull request #322585 from wegank/limesurvey-security
nixos/limesurvey: drop default encryption key and nonce
2024-06-28 23:43:24 +02:00
Masum Reza 383744754e
Merge pull request #314798 from yomaq/healthchecks-settingsFile
nixos/healthchecks: add settingsFile option
2024-06-29 00:02:35 +05:30
Masum Reza 8808f7d7fc
Merge pull request #278982 from felbinger/master
python311Packages.mozilla-django-oidc: init at 4.0.1; peering-manager: add oidc support
2024-06-28 23:49:34 +05:30
Weijia Wang daa81ecb2e nixos/limesurvey: drop default encryption key and nonce
Co-authored-by: Thomas Gerbet <thomas@gerbet.me>
2024-06-28 00:34:00 +02:00
Silvan Mosberger c8dec6df38
Merge pull request #322801 from eclairevoyant/discourage-mkpackageoptionmd
lib: deprecate mkPackageOptionMD
2024-06-27 20:15:08 +02:00
Jonas Heinrich 77e7768849
Merge pull request #322397 from Ma27/bump-nextcloud
nextcloud: drop 27, 28.0.6 -> 28.0.7, 29.0.2 -> 29.0.3
2024-06-27 14:09:29 +02:00
éclairevoyant aeee4fc133
treewide: replace mkPackageOptionMD with mkPackageOption 2024-06-26 23:05:42 -04:00
Benno Bielmeier f99e50320e nixos/wordpress: update .htaccess for httpd
Update standard wordpress .htaccess content if using httpd
according to [1] (as of 2024-06-26)

[1]: https://developer.wordpress.org/advanced-administration/server/web-server/httpd/
2024-06-26 22:23:29 +02:00
Nico Felbinger c4d2c90da0
nixos/peering-manager: add oidc support
Co-authored-by: Jenny <me@netali.de>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-26 07:45:18 +02:00
Sandro 33f83c6252
Merge pull request #316977 from eclairevoyant/fix-mkEnableOption
treewide: fix mkEnableOption usage
2024-06-25 22:42:16 +02:00
Maximilian Bosch 60657a4591
nextcloud27: remove
Version will be EOL by the end of 2024-06.
2024-06-25 14:08:15 +02:00
bl0v3 9abeee7aab fixed doc 2024-06-25 01:17:47 +02:00
bolives-hax 50d6aae3fe
Merge branch 'NixOS:master' into add-rutorrent-service 2024-06-25 00:04:28 +02:00
arcnmx a910bc8146 nixos/keycloak: relax hostname settings assertion
The `hostname-strict` setting enables dynamic hostname resolution.
2024-06-23 19:36:36 -07:00
Maximilian Bosch 2ac989c06f
Merge pull request #321931 from Ma27/occ-improvements
nixos/nextcloud: occ improvements
2024-06-23 17:42:42 +00:00
Maximilian Bosch a71e967ef3
Merge pull request #320983 from Ma27/nc-dbtableprefix
nixos/nextcloud: deprecate dbtableprefix
2024-06-22 16:54:41 +00:00
Maximilian Bosch 50d5306e7c
nixos/nextcloud: use dedicated memory limit for the entire CLI
Originally, I wanted to execute `nextcloud-occ` with a higher memory
limit because I needed to trigger an expensive operation by hand,
regenerating a bunch of previews.

While doing so, I realized how painful it is to put an invocation of
nextcloud-occ together for that, especially when you need to put it
into another systemd unit in Nix code.

That's why I decided to use the memory limit now for every
CLI invocation just in case. The stuff you do in those units (e.g.
running background jobs) is something you can also do by hand with
`nextcloud-occ` and you'll most likely want to have the same memory
limit there.
2024-06-22 18:39:08 +02:00
Maximilian Bosch ab9b8f8cf4
nixos/nextcloud: services.nextcloud.occ is not internal
This option is actually useful when having a systemd unit invoking
`nextcloud-occ`, then you want to do something like

    path = [ config.services.nextcloud.occ ]

This is possible today, but not documented (and the option completion
from nil doesn't pick it up as a result).
2024-06-22 18:38:04 +02:00
Nick Cao d10d0fc423
nixos/keycloak: update options for release 25.0.0
Reference: https://www.keycloak.org/docs/25.0.0/upgrading/
2024-06-22 10:23:09 -04:00
Ruby Iris Juric 088b397516 nixos/zitadel: Drop Sorixelle as maintainer 2024-06-21 16:11:10 +02:00
Thomas Gerbet 88130cec79
Merge pull request #321097 from PatrickDaG/firefly-6.1.18
firefly-iii: 6.1.17 -> 6.1.18
2024-06-20 23:03:48 +02:00
Patrick 6154279455
nixos/firefly-iii: enhance provisioning service 2024-06-20 12:16:48 +02:00
Pyrox d94a39f87d
mealie: 1.7.0 -> 1.9.0
Also fix a small issue with the module not casting the port number
to a string
2024-06-19 20:48:39 -04:00
Maximilian Bosch 45d2b8b536
nixos/nextcloud: deprecated dbtableprefix
Closes #320381

Installation with a custom dbtableprefix is not allowed anymore for a
while[1] and we shouldn't advertise it as such.

The option is deprecated for now since I'm not sure if there are some
weird corner-cases where removing the option directly would break
existing installations from before <20 with a custom dbtableprefix. The
migration-path for such a case is as follows:

* Check if /var/lib/nextcloud/config/config.php has the correct
  dbtableprefix set and if not, take care of it.
* Remove `dbtableprefix` from the NixOS configuration. It's effectively
  state anyways.

After a bit of time to switch (perhaps after the next release
branchoff), the option can be removed.

[1] https://github.com/nextcloud/server/issues/24836
2024-06-19 11:43:33 +02:00
Aria 83b00c3637
akkoma: remove maintainer tcmal (#320858) 2024-06-18 22:33:38 +02:00
Sandro 07f7e6653b
Merge pull request #320593 from onny/invoiceplane-fix
nixos/invoiceplane: Ensure patching index.php
2024-06-18 13:33:06 +02:00
Jonas Heinrich 2a8ccf6144 nixos/invoiceplane: Ensure patching index.php 2024-06-17 20:48:21 +02:00
Martin Weinelt decdb5e848
Merge pull request #317814 from Eisfunke/fix-pretix-celery-default-text
nixos/pretix: fix defaultText for celery options
2024-06-17 20:39:10 +02:00
Felix Bühler ec48be343d
Merge pull request #320351 from Stunkymonkey/freshrss-enable-doc-improve
nixos/freshrss: add description about php-fpm
2024-06-16 23:30:26 +02:00
Pol Dellaiera 2754a6f4a8
Merge pull request #319456 from redxtech/fix-nextjs-ollama-llm-ui
nixos/nextjs-ollama-llm-ui: fix for respecting ollamaUrl config option
2024-06-16 22:46:43 +02:00
Felix Buehler e9d13cc80e nixos/freshrss: add description about php-fpm 2024-06-16 22:14:12 +02:00
Kai Norman Clasen 14b558e094
nixos/firefly-iii: change statedirectory
Set `StateDirectory=firefly-iii` instead of trying to derive it from
`dataDir` + add `dataDir` to `ReadWritePaths`, allowing `dataDir` to be
set to full paths outside of `/var/lib`.
2024-06-14 22:29:09 +02:00
éclairevoyant 7d8742da87
treewide: fix mkEnableOption usage 2024-06-14 02:41:42 -04:00
Gabe Dunn 8b182a177f
nixos/nextjs-ollama-llm-ui: fix for respecting ollamaUrl config option 2024-06-12 21:24:29 -06:00
Felix Buehler edcdf6ad3b nixos/freshrss: fix reload when config changes 2024-06-10 22:16:20 +02:00
James Atkins 7f78cd20fd nixos/changedetection-io: fix creation of data dir
Create data directory using tmpfiles if it is not in the standard location.
Do not run mkdir manually.
2024-06-09 18:28:22 -05:00
Markus Kowalewski b98e90213d
Merge pull request #317035 from ck3d/fix-node-red-path
nixos/node-red: fix passthru of PATH
2024-06-09 20:13:58 +00:00
Nicolas Lenz 0b8fdfd917
nixos/pretix: fix defaultText for celery options 2024-06-06 21:37:14 +02:00
Maximilian Bosch 7e2210236e
Merge pull request #316004 from Ma27/nc-memlimit
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
2024-06-04 19:18:03 +00:00
Christian Kögler 966d214719 nixos/node-red: fix passthru of PATH 2024-06-03 23:23:38 +02:00
yomaq 3f0bd8ab85 nixos/healthchecks: add settingsFile option
Single unified env file read by systemd
2024-06-03 08:56:52 -05:00
Robin Hack 04c973335e filesender: FIX: missing format definition.
Seems like there is missing format definition in example.

Affected line:
default = format.lib.mkMixedArray [ "exampleauth:UserPass" ] {
2024-06-03 15:37:37 +02:00
Sandro Jäckel 41452802cb
treewide: fix all obviously wrong mkEnableOptions 2024-06-03 13:20:32 +02:00
Eric Wolf 7c0937d668
nixos/nextcloud-notify_push: use Type=notify
This prevents the post start script from running
before necessary sockets have been created.

It also prevents an unused shell from being kept around
by using `exec` to make `notify_push` the main process.
2024-06-02 23:19:07 +02:00
Thomas Gerbet e12faccb31
Merge pull request #313794 from tcmal/akkoma-3.13.2
akkoma: 3.13.1 -> 3.13.2
2024-06-02 12:57:31 +02:00
Weijia Wang b966c334d7 nixos/pixelfed: default to php82 2024-06-02 00:16:19 +02:00
Peder Bergebakken Sundt 080af6461e
Merge pull request #314294 from james-atkins/mealie-update
mealie: 1.2.0 -> 1.7.0
2024-05-31 20:41:37 +02:00
Yt 6606ce9c0c
Merge pull request #273101 from onny/invoiceplane-settings2
nixos/invoiceplane: Remove deprecated extraConfig
2024-05-31 00:04:34 +00:00