Commit graph

22566 commits

Author SHA1 Message Date
Felix Buehler 328da3a39d nixos/services.colord: remove with lib; 2024-12-30 16:23:13 +01:00
nicoo 238b407862
nixos: hardware.pulseaudio → services.pulseaudio (#369391) 2024-12-30 13:46:50 +00:00
Jan van Brügge 5037a45d41
tandoor-recipes: add jvanbruegge as maintainer 2024-12-30 13:05:36 +00:00
Cosima Neidahl 952fbd2f0e
nixos/kimai: fix incorrect service name for PHP-FPM service mixin, set PHP package for PHP-FPM pool to Kimai's PHP package (#358743) 2024-12-30 13:55:30 +01:00
Emily c1f8b214cc foundationdb: 7.1.32 -> 7.3.42
Includes fixes for GCC 14 and using non‐vendored libraries.
2024-12-30 12:35:07 +00:00
Markus Kowalewski bea29cd04f
nixos/zenohd: add module and test (#368613) 2024-12-30 12:32:19 +01:00
Felix Buehler 336a76b195 nixos/services.peerflix: remove with lib; 2024-12-30 12:09:45 +01:00
Felix Buehler 4db4628f76 nixos/services.opentracker: remove with lib; 2024-12-30 12:09:44 +01:00
Felix Buehler fd713acb0a nixos/services.magnetico: remove with lib; 2024-12-30 12:09:44 +01:00
Felix Buehler 2718eb3e96 nixos/services.flexget: remove with lib; 2024-12-30 12:09:44 +01:00
Felix Buehler 16c697e1e3 nixos/services.deluge: remove with lib; 2024-12-30 12:09:44 +01:00
Felix Buehler c05dd62835 nixos/services.uptimed: remove with lib; 2024-12-30 12:09:44 +01:00
Felix Buehler e8c85ce9ab nixos/services.saslauthd: remove with lib; 2024-12-30 12:09:44 +01:00
Felix Buehler 710d6186c1 nixos/services.nscd: remove with lib; 2024-12-30 12:09:44 +01:00
Felix Buehler 0a49bde242 nixos/nix: remove with lib; 2024-12-30 12:09:44 +01:00
Felix Buehler 08f1e99c34 nixos/services.localtimed: remove with lib; 2024-12-30 12:09:44 +01:00
Felix Buehler 128623b2f1 nixos/services.cloud-init: remove with lib; 2024-12-30 12:09:43 +01:00
Felix Buehler 354e3ac4e2 nixos/services.cachix-watch-store: remove with lib; 2024-12-30 12:09:43 +01:00
Felix Buehler 81f97e6d28 nixos/services.cachix-agent: remove with lib; 2024-12-30 12:09:43 +01:00
Felix Buehler fb31348d4d nixos/services.automatic-timezoned: remove with lib; 2024-12-30 12:09:43 +01:00
Felix Buehler 3ef002a0eb nixos/services.yubikey-agent: fmt 2024-12-30 12:09:43 +01:00
Felix Buehler 1f4bd3abb7 nixos/services.yubikey-agent: remove with lib; 2024-12-30 12:09:43 +01:00
Felix Buehler cae64813e8 nixos/services.vault: fmt 2024-12-30 12:09:43 +01:00
Felix Buehler c24987c6ad nixos/services.vault: remove with lib; 2024-12-30 12:09:43 +01:00
Felix Buehler 10e015d823 nixos/services.vault-agent: remove with lib; 2024-12-30 12:09:42 +01:00
Felix Buehler 4bcc603cd8 nixos/services.usbguard: remove with lib; 2024-12-30 12:09:42 +01:00
Felix Buehler ee9d6cd0d3 nixos/services.tor.torsocks: remove with lib; 2024-12-30 12:09:42 +01:00
Felix Buehler edf46e7668 nixos/services.tor.tsocks: remove with lib; 2024-12-30 12:09:42 +01:00
Felix Buehler d9297314fe nixos/services.tor: fmt 2024-12-30 12:09:42 +01:00
Felix Buehler a5b40fbc8b nixos/services.tor: remove with lib; 2024-12-30 12:09:42 +01:00
Felix Buehler 4beedae4a1 nixos/services.tang: remove with lib; 2024-12-30 12:09:42 +01:00
Felix Buehler 5bbc04afb0 nixos/services.sslmate-agent: remove with lib; 2024-12-30 12:09:42 +01:00
Felix Buehler 5d738347e5 nixos/services.sshguard: remove with lib; 2024-12-30 12:09:42 +01:00
Felix Buehler f956ab771b nixos/services.sks: remove with lib; 2024-12-30 12:09:41 +01:00
Felix Buehler c75c02d0ec nixos/services.physlock: fmt 2024-12-30 12:09:41 +01:00
Felix Buehler ace688110e nixos/services.physlock: remove with lib; 2024-12-30 12:09:41 +01:00
Felix Buehler 59dacf1e53 nixos/services.passSecretService: remove with lib; 2024-12-30 12:09:41 +01:00
Felix Buehler 9db6d6f090 nixos/services.opensnitch: fmt 2024-12-30 12:09:41 +01:00
Felix Buehler a8d331716c nixos/services.opensnitch: remove with lib; 2024-12-30 12:09:41 +01:00
Felix Buehler fe23e335d5 nixos/services.nginx.sso: remove with lib; 2024-12-30 12:09:41 +01:00
Felix Buehler bc6eb177b4 nixos/services.munge: remove with lib; 2024-12-30 12:09:41 +01:00
Felix Buehler bd92ad1747 nixos/services.infnoise: remove with lib; 2024-12-30 12:09:41 +01:00
Felix Buehler 3bb7989e0d nixos/services.hologram-server: remove with lib; 2024-12-30 12:09:40 +01:00
Felix Buehler 83ccb2a1bf nixos/services.hologram-agent: remove with lib; 2024-12-30 12:09:40 +01:00
Felix Buehler f155ae804a nixos/services.haveged: remove with lib; 2024-12-30 12:09:40 +01:00
Felix Buehler 1c7eaa7b7a nixos/services.haka: remove with lib; 2024-12-30 12:09:40 +01:00
Felix Buehler 4d9366e198 nixos/services.fprintd: remove with lib; 2024-12-30 12:09:40 +01:00
Felix Buehler f22a652424 nixos/services.fail2ban: remove with lib; 2024-12-30 12:09:40 +01:00
Felix Buehler 57fa81efce nixos/services.endlessh: remove with lib; 2024-12-30 12:09:40 +01:00
Felix Buehler cd46072e35 nixos/services.endlessh-go: remove with lib; 2024-12-30 12:09:40 +01:00
Felix Buehler 8dbe325321 nixos/services.clamav: remove with lib; 2024-12-30 12:09:40 +01:00
Felix Buehler 03977fb585 nixos/services.cfssl: remove with lib; 2024-12-30 12:09:39 +01:00
Felix Buehler e89c367895 nixos/services.certmgr: remove with lib; 2024-12-30 12:09:39 +01:00
Felix Buehler ed344f1d2a nixos/services.quickwit: remove with lib; 2024-12-30 12:09:39 +01:00
Felix Buehler 0c00abec83 nixos/services.qdrant: remove with lib; 2024-12-30 12:09:39 +01:00
Felix Buehler 418f49af74 nixos/services.opensearch: remove with lib; 2024-12-30 12:09:39 +01:00
Felix Buehler 90934eae50 nixos/services.meilisearch: remove with lib; 2024-12-30 12:09:39 +01:00
Felix Buehler b9b070ae82 nixos/services.manticore: remove with lib; 2024-12-30 12:09:39 +01:00
cy 53add6c0c3 nixos/borgbackup: support specific warning codes when failOnWarnings=false 2024-12-30 03:27:40 -05:00
Gaétan Lepage 3e7585fd5b
cockpit: 330 -> 331 (#368886) 2024-12-29 23:48:37 +01:00
Martin Weinelt 2a7d47f814
nixos/matter-server: allow AF_UNIX sockets for dbus connections
This is necessary for establishing bluetooth connections over dbus and
bluez.
2024-12-29 19:17:48 +01:00
Franz Pletz 3a3b9dbba3
nixos/minidlna: refactor (#344018) 2024-12-29 16:21:13 +01:00
Thiago Kenji Okada d05ee735c4
nixos/nix-optimise: add randomizedDelaySec and persistent options (#362366) 2024-12-29 14:22:51 +00:00
Arne Keller 5de8c5b941
nixos/chrony: fix memory locking issue with graphene-hardened-light (#356837) 2024-12-29 15:08:43 +01:00
Arne Keller 4b7712c3f1
nixos/dex: Restart on referenced file changes (#343738) 2024-12-29 14:54:15 +01:00
misuzu 1bdf3ca3ad
nixos/wireguard-networkd: fix loading pre shared keys for peers without a custom name (#368684) 2024-12-29 11:33:22 +02:00
โทสตัล 180c953138 nixos/movim: rm logs if found 2024-12-29 11:08:37 +07:00
โทสตัล 0d59a5928e optionally add group to nginx user 2024-12-29 11:08:36 +07:00
โทสตัล 22c7e68534 syntax hints for tree-sitter 2024-12-29 11:08:36 +07:00
โทสตัล c15c466d29 typo in script name 2024-12-29 11:08:36 +07:00
โทสตัล 431afe7289 use mkDefaults for Nginx config 2024-12-29 11:08:36 +07:00
โทสตัล 2e5268e2a5 use movim’s database user 2024-12-29 11:08:36 +07:00
lucasew b06a23a614 cockpit: 330 -> 331
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-12-28 16:10:39 -03:00
Samuel Rounce b256398a32 nixos/dex: Restart on referenced file changes
Dex now restarts when EnvironmentFile or client secretFile paths
change.
2024-12-28 11:59:12 +00:00
rnhmjoj 69b630d893
nixos/networkmanager: match upstream units Install sections
The upstream NetworkManager.service unit[1] has this Install section:

  [Install]
  WantedBy=multi-user.target
  Also=NetworkManager-dispatcher.service
  Also=NetworkManager-wait-online.service

Let's just match that in NixOS and don't try to mess with
network.target. The latter should only be used to order units at
shutdown, not when booting.

[1]: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/main/data/NetworkManager.service.in?ref_type=heads
2024-12-28 12:09:59 +01:00
Gaetan Lepage 4b5bbe915e nixos/zfs-replication: fix typo 2024-12-28 10:44:41 +01:00
Guillaume Girol ba00c29619
nixos/sane: ensure saned can access usb scanners (#367198) 2024-12-28 10:07:58 +01:00
Markus Kowalewski 6298d3e530
nixos/zenohd: add module and test 2024-12-28 02:09:38 +01:00
networkException c1eb3b68f8
nixos/wireguard-networkd: escape backslashes in systemd credential names
This patch fixes loading issues for pre shared keys for
peers without custom names. In this case the peer's public
key would be used in the name for the corresponding pre
shared key credential, causing a loading error.

The networking.wireguard base module already escapes some
base64 characters of the public key with escape sequences
starting with a backslash. This backslash is now replaced
with an underscore for use in the credential names.
2024-12-28 01:34:11 +01:00
networkException e7e42de5a7
nixos/wireguard-networkd: only set PresharedKey credential when given a file
This patch fixes an oversight in the initial implementation
of using systemd credentials in 6bc8dcc630
that would cause a warning to be logged about a missing credential
when presharedKeyFile wasn't set.
2024-12-27 23:14:32 +01:00
Jenny 09221007ce
nixos/librenms: fix optimizations and view cache on new installations (#368519) 2024-12-27 13:30:24 +01:00
Jennifer Graul b4e9af0022
nixos/librenms: fix optimizations and view cache on new installations
The optimizations and view-cache require an initialized database to
work, so the current state breaks new installations. This commit fixes
that by performing the optimizations and view caching after the database
migrations.
2024-12-27 11:59:00 +01:00
Artturin 8cf119c7a1 nixos/stalwart-mail: Fix creation of dataDir if not default
Without these I got

`mkdir: cannot create directory ‘/data/stalwart’: Read-only file system`
2024-12-27 05:02:32 +02:00
Alex Martens 403dfb7c93 nixos/ddclient: fix missing iproute2
When obtaining the IP address from an interface iproute2 is missing:

"Unable to obtain information for 'bond-wan' -- missing ip or ifconfig command"

The prefix check to include iproute2 is incorrect for "usev4" and "usev6".

Currently the NixOS module checks for the "if" prefix.  This prefix is
not valid with "usev4" and "usev6":

"Invalid Value for keyword 'usev4' = 'if'"

"ifv4" must be used with "usev4", and "ifv6" with "usev6".

I updated the nixos module to check for the correct prefix with "usev4"
and "usev6", and include iproute2 as necessary.
2024-12-26 23:59:47 +01:00
Sandro Jäckel eb46f107af
nixos/hydra: fix hydra-compress-logs choking up on quoting when using zstd 2024-12-26 23:58:11 +01:00
Gaétan Lepage 74d1d9a86a
nixos/zfs-replication: add package option (#368310) 2024-12-26 22:54:51 +01:00
misuzu 58f66948d0
nixos/nginx: default resolver.ipv6 to networking.enableIPv6 (#368055) 2024-12-26 22:29:22 +02:00
Yt d2e0912d04
nixos/stalwart-mail: Add dataDir option (#368374) 2024-12-26 15:09:05 -05:00
Sebastian Sinnlos 7a485e4780 nixos/ddclient: update defaults for usev4/6
Set to future upstream [default](5b104ad116) as current defaults are broken because the
endpoints of dyndns.com only serve http. See [ddclient issue 597](https://github.com/ddclient/ddclient/issues/597)
2024-12-26 20:48:42 +01:00
Artturin b19b16be96 nixos/stalwart-mail: Add dataDir option
I want to move it elsewhere.
2024-12-26 18:26:25 +02:00
K900 03539677da
asusd: Support for multiple aura device configs (#348226) 2024-12-26 18:22:12 +03:00
Gaetan Lepage e5f2ebf6d3 nixos/zfs-replication: add package option 2024-12-26 15:52:52 +01:00
Léo Gaspard 69a8aba113 nixos/opensmtpd: run nixfmt as requested by ci 2024-12-26 12:38:59 +01:00
Léo Gaspard fb4ff06a4b fix opensmtpd's sendmail, add relevant test 2024-12-26 12:38:59 +01:00
Jörg Thalheim 80130a37d7
nixos/mediawiki: change user in maintenance scripts, use maintenance/run.php script (#352521) 2024-12-25 21:31:12 +01:00
Sandro Jäckel 7c1f9a05ee
nixos/mediawiki: change user in maintenance scripts, use maintenance/run.php script, add deleteUserEmail,importDump,run scripts
script initially copied from nextcloud and run with run.php as requested by this big warning:

*******************************************************************************
NOTE: Do not run maintenance scripts directly, use maintenance/run.php instead!
      Running scripts directly has been deprecated in MediaWiki 1.40.
      It may not work for some (or any) scripts in the future.
*******************************************************************************
2024-12-25 19:26:06 +01:00
misuzu db3422a82f
nixos/hostapd: remove CCMP from recommended ciphers (#367464) 2024-12-25 18:32:44 +02:00
oddlama 8b193d75ac
nixos/hostapd: remove CCMP-256 from recommended ciphers 2024-12-25 16:27:05 +01:00
Gaétan Lepage 2ea61d0eb4
nixos/dolibarr: change permissions of conf.php to read only (#367572) 2024-12-25 16:20:59 +01:00
K900 7a2cb2ad15 nixos/plasma6: default to Wayland for SDDM
While technically still experimental, it seems to produce less
issues than X11 at this point, and there's a weird issue with
X11 setups that we've been unable to track down that really
hurts the new user experience, so let's just go with this.
2024-12-25 10:28:03 +03:00
Sandro Jäckel a810945475
nixos/nginx: default resolver.ipv6 to networking.enableIPv6 2024-12-25 03:58:32 +01:00
Sandro c161f61057
prometheus-frr-exporter: init prometheus exporter module (#313651) 2024-12-25 03:49:52 +01:00
Matthew Croughan f6332c09ed
nixos/ustreamer: init; ustreamer: 6.12 -> 6.18 (#367415) 2024-12-24 13:47:02 +02:00
Sefa Eyeoglu 8b261d027d
nixos/ustreamer: init
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-12-24 12:36:52 +01:00
Ramses 4af8ef3cd7
Remove Some Static IDs (#367563) 2024-12-24 11:34:14 +01:00
Alexander Sieg db087bfef3
nixos/librenms: enable optimizations and view-cache (#367679) 2024-12-23 19:18:36 +01:00
Philip Taron 297e5bb009
amazon-cloudwatch-agent: let users specify configuration file paths (#358559) 2024-12-23 09:57:18 -08:00
Jennifer Graul 6abc69d2cf
nixos/librenms: enable optimizations and view-cache
Enables optimizations and view cache for the librenms module.
Optimizations and view cache are both regenerated with each package
update.
2024-12-23 17:11:42 +01:00
Marcin Serwin 1d2118f727
asusd: allow specifying configs via paths 2024-12-23 17:02:04 +01:00
Bobby Rong 05f5f947b4
nixos/cinnamon: Replace xplayer with celluloid
https://github.com/linuxmint/xplayer/issues/169#issuecomment-1072069928
2024-12-23 23:16:29 +08:00
Nico Felbinger 578c5b6583
prometheus-frr-exporter: init prometheus exporter module 2024-12-23 15:17:45 +01:00
Vladimír Čunát fc9c33366b
staging-next 2024-12-04 (#361878) 2024-12-23 14:57:53 +01:00
Gaétan Lepage 5cd2444668
nixosModules.MooseFS: Format (#367327) 2024-12-23 14:14:19 +01:00
K900 4b816e1801 Merge remote-tracking branch 'origin/master' into staging-next 2024-12-23 11:18:12 +03:00
Arne Keller 694f4998c9
nixos/netdata: copy apps_groups.conf instead of symlink (#356313) 2024-12-23 09:04:21 +01:00
Gaetan Lepage 8b235ad144 nixos/dolibarr: change permissions of conf.php to read only 2024-12-23 08:52:03 +01:00
Gaetan Lepage 2dfabce386 nixos/dolibarr: format 2024-12-23 08:43:24 +01:00
Will Fancher 218901bd4c nixos/whisparr: Remove static IDs 2024-12-23 01:21:59 -05:00
commiterate 43caf2e0f9 amazon-cloudwatch-agent: let users specify configuration file paths 2024-12-22 22:58:07 -05:00
Sandro 31ed289d38
nixos/hadoop: fix hbase, hbase: 2.5.9 -> 2.5.10, 2.6.0 -> 2.6.1 (#366732) 2024-12-23 04:18:20 +01:00
github-actions[bot] 4726042dac
Merge master into staging-next 2024-12-23 00:15:04 +00:00
Jörg Thalheim e2680ee340
Unbreak tts (#366756) 2024-12-23 00:20:52 +01:00
Stefan Frijters 31942f20f4 nixos/ntpd: fix permissions error when creating drift file
This fixes "frequency file /var/lib/ntp/ntp.drift.TEMP: Permission denied".

Creating a directory via StateDirectory makes that directory /var/lib/ntp owned by root:root.
However, when running ntpd we change to user ntp (see ntpFlags), so the process cannot
actually use that directory.

Actually creating a home directory for the user at that location solves that problem.
2024-12-22 16:20:31 -06:00
Sandro bc26911947
nixos/nginx-sso: allow using file-based secrets (#325838) 2024-12-22 22:50:05 +01:00
oddlama e130769df5
nixos/hostapd: remove unused imports 2024-12-22 22:10:46 +01:00
Sefa Eyeoglu 29b57eacc2
Update NixOS Module evremap (#362661) 2024-12-22 22:04:59 +01:00
Sandro 2207ac3258
nixos/tests/nextcloud: fix notify_push test; nixos/nextcloud-notify_push: add nextcloudUrl option (#365442) 2024-12-22 21:27:56 +01:00
K900 c03fa0c918 Merge remote-tracking branch 'origin/master' into staging-next 2024-12-22 21:59:42 +03:00
Lorenz Leutgeb 578baae41d nixos/mailman: Remove unused extraPythonPackages 2024-12-22 16:22:32 +01:00
Marcin Serwin 8fa4a6c597
asusd: support multiple aura configs
Since version 6.0.0 asusd supports multiple aura devices. Since each of
them may have a different configuration, the `aura.ron` file, previously
used for configuration, is now ignored in favor of device specific
`aura_{prod_id}.ron` configuration. This change adds support for
specifying multiple aura configs via `auraConfigs` attribute and removes
the old `auraConfig` attribute.
2024-12-22 12:28:17 +01:00
Jean-Baptiste Giraudeau 7ebb6132f4 nixos/tts: fix handling of extraArgs 2024-12-22 10:27:04 +01:00
liberodark 10f6382917 nixosModules.MooseFS: Format 2024-12-22 09:33:01 +01:00
github-actions[bot] e1b8fbad4c
Merge master into staging-next 2024-12-22 00:15:48 +00:00
euxane 1dabc1f584 maintainers: rename pacien -> euxane, update details 2024-12-21 21:20:22 +01:00
K900 48fcb81021 Merge remote-tracking branch 'origin/master' into staging-next 2024-12-21 21:08:36 +03:00
Arne Keller 8e8d65e1ca
nixos/bind: harden systemd service (#349548) 2024-12-21 17:07:03 +01:00
Arne Keller de99d3d3e3
nixos/gitlab: Fix registry port (#351496) 2024-12-21 16:56:18 +01:00
Guillaume Girol d832d03b19
nixos/borgbackup: fix extraArgs shell expansion (#332319) 2024-12-21 16:08:45 +01:00
Arne Keller 0666911bf2
nixos/jackett: add Systemd sandboxing configuration (#211096) 2024-12-21 15:49:19 +01:00
Arne Keller b59477329f
nixos/mullvad-vpn: remove unneeded hacks (#341992) 2024-12-21 15:48:44 +01:00
Guillaume Girol 7d0c25dca2 nixos/sane: ensure saned can access usb scanners
For a user to be able to scan with an USB scanner, it must have write access
to the corresponding file in /dev/bus/usb. Enabling the sane module
adds SANE's upstream hwdb file and udev rules to udev search path. The
hwdb file tags the scanner as `libsane_matched` and a builtin (from
systemd upstream) udev rule marks all `libsane_matched` devices as
uaccess. When a physical user logins, logind adds an acl allowing them
to write to the device.

Unfortunately, saned is a daemon. Therefore, uaccess has no effect for
it, and if no other udev rule changes the device to belong to the
scanner group or the lp group, (there are such rules, but they are not
complete enough, in that some scanners known by SANE rules are not known
by these rules), it will not be able to write to the scanner.

This solves this by adding a udev rule so that all libsane_matched
devices have an acl rules so that users in the scanner group can write.

A similar rule is present on Arch and Debian at least.

Note that we don't chgroup the file instead, because this posed problems
in the past: scanners are often also printers, and a device's group
cannot be simultaneously lp and scanner.

Fixes: https://github.com/NixOS/nixpkgs/issues/361981
2024-12-21 12:00:00 +00:00
Ilya Epifanov a21e4fa9e0 restic: fixed handling of arguments with spaces in restic wrappers 2024-12-20 22:05:47 +01:00
sehqlr 15eafd036b Fixed the Monica email configuration bug 2024-12-20 14:48:38 -06:00
K900 522470aea5 Merge remote-tracking branch 'origin/master' into staging-next 2024-12-20 21:34:10 +03:00
K900 aac7b0adea Merge remote-tracking branch 'origin/master' into staging-next 2024-12-20 21:16:36 +03:00
Arne Keller 4ff852554d
nixos/akkoma: include ImageMagick by default (#353164) 2024-12-20 19:13:50 +01:00
Arne Keller dab5c03aa4
firefly-iii: 6.1.24 -> 6.1.25, nixos/firefly-iii: Improved cache clearing (#366564) 2024-12-20 19:12:47 +01:00
Arne Keller 94200398f9
nixos/actual: init at 24.10.1 (#347825) 2024-12-20 18:55:13 +01:00
Arne Keller 20c2374362
nixos/frigate: add rtmp nginx module (#341918) 2024-12-20 18:36:22 +01:00
Arne Keller 61026a1ad0
nixos/dbus: add package options (#347923) 2024-12-20 18:14:17 +01:00