Commit graph

1618 commits

Author SHA1 Message Date
Johannes Kirschbauer 4ad85b485d
various: lib usage improvements - prefer removeAttrs over filterAttrs (#455787) 2025-10-27 16:17:52 +00:00
Philip Taron 4160763d74
various: lib usage improvements - prefer elem over any for list inclusion conditions (#455789) 2025-10-27 13:21:20 +00:00
StepBroBD 74cde83add
nixos/{karma,pgbouncer}: use cfg.package instead of global pkgs (#412435) 2025-10-26 19:29:41 +01:00
h7x4 9842083cd0
nixos/prometheus-exporters/node: lib.any -> lib.elem 2025-10-26 16:23:35 +09:00
h7x4 dbe03e152c
nixos/prometheus-exporters/mail: lib.filterAttrs -> lib.removeAttrs 2025-10-26 15:21:23 +09:00
h7x4 e3366549da
nixos/grafana: lib.filterAttrs -> lib.removeAttrs 2025-10-26 15:21:22 +09:00
Sandro Jäckel 1119d225de
nixos/librenms: update config cache
otherwise any change to .env is never reflected.
2025-10-23 02:26:46 +02:00
Bonus f5d45f3499
nixos/beszel.agent: init
Co-authored-by: Mirza Arnaut <mirza.arnaut45@gmail.com>
2025-10-21 22:42:22 +02:00
Bonus 5dbf685def
nixos/beszel.hub: init
Co-authored-by: Mirza Arnaut <mirza.arnaut45@gmail.com>
2025-10-21 22:42:19 +02:00
Bouke van der Bijl 0a5bba0f15 nixos/opentelemetry-collector: validate config 2025-10-21 17:03:17 +02:00
h7x4 75d08a1a86
nixos/vnstat: allow overriding package (#448922) 2025-10-18 05:17:03 +00:00
Bjørn Forsman 2e79f21930
nixos/ups: remove Slice from UPS shutdown service (#389216) 2025-10-14 18:09:38 +00:00
Rhys 30aa6b71f2 nixos/ups: remove Slice from UPS shutdown service
system-ups.slice conflicts with shutdown.target, so
ups-killpower.service is never queued at shutdown.
The slice isn't doing anything; removing it is a simple fix.
2025-10-14 20:01:09 +02:00
Raphaël C. 024fd0a28c nixos/gitwatch: add zareix as maintainers 2025-10-14 19:33:14 +02:00
Raphaël C. fbc5e78b9c nixos/gitwatch: add message option 2025-10-14 19:32:50 +02:00
Felix Singer d06389e317 nixos/uptime-kuma: Ensure proper permissions for state directory
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 15:54:51 +02:00
Felix Singer 7b791e1de7 nixos/uptime-kuma: Enable MountAPIVFS hardening in service config
This setting is already implied by others, but add it for completeness
as well. For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#MountAPIVFS=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 15:54:51 +02:00
Felix Singer 18af20e2b2 nixos/uptime-kuma: Set ProtectControlGroups to strict
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 15:54:51 +02:00
Felix Singer 606424d609 nixos/uptime-kuma: Set ProtectProc to invisible
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 15:54:51 +02:00
Felix Singer 749fd94d19 nixos/uptime-kuma: Enable PrivateUsers hardening in service config
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#PrivateUsers=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 15:54:51 +02:00
Acid Bong f418365067
maintainers: drop evils 2025-10-05 22:22:45 +03:00
Vivek 84555f540c
nixos/vnstat: allow overriding package 2025-10-05 11:19:34 -07:00
Wolfgang Walther 91a8fee3aa
treewide: remove redundant parentheses
Auto-fixed by nixf-diagnose.
2025-10-05 10:52:03 +02:00
Wolfgang Walther c283f32d29
treewide: remove unused with
Auto-fixed by nixf-diagnose.
2025-10-05 10:50:41 +02:00
Wolfgang Walther 90e7159c55
treewide: remove unused rec
Auto-fix by nixf-diagnose.
2025-10-05 10:49:12 +02:00
xanderio e3a3b32cc2
nixos/loki: refine option descriptions (#442975) 2025-09-27 12:33:33 +00:00
Dionysis Grigoropoulos 377847e3c8
nixos/prometheus/storagebox: Init module 2025-09-26 20:24:04 +03:00
dish f4ac3ac7e4
{nixos/,}cockpit: add branding + small fixes (#413033) 2025-09-25 12:59:45 +00:00
jopejoe1 2032412fdb
various: use more accurate int types (#445244) 2025-09-22 21:50:55 +00:00
h7x4 a0f9e8c8b9
nixos/statsd: use types.port 2025-09-22 16:47:32 +02:00
h7x4 57c3d1033d
nixos/prometheus-exporters/fritzbox: use types.port 2025-09-22 16:32:58 +02:00
h7x4 32a008369e
various: prefer ints.between over enum for int ranges 2025-09-22 15:34:47 +02:00
Felix Stupp ef4b2e4f4b
nixos/loki: refine option descriptions
- on `.enabled` make clear that Grafana Loki is meant
- on `.configuration` link to documentation
- on `.configFile` & `.configuration` make clear that both cannot specified together
2025-09-14 20:31:31 +02:00
Maximilian Bosch 5f44bfc59b
nixos/grafana: document how to enable drilldown when using custom plugins
IMHO, it's a bit surprising that drilldown doesn't show anything when
using `declarativePlugins` (and thus, the four apps are missing).

Add instructions on how to get these apps back.
2025-09-14 13:42:22 +02:00
Jon Seager cfdb1500e3
scrutiny: remove jnsgruk from maintainers 2025-09-10 14:32:15 +01:00
Haylin Moore cf540f8c98 treewide/nixos: move number typed port options to types.port 2025-09-08 15:27:19 +02:00
andre4ik3 395b411240
nixos/cockpit: add SSH to wsinstance path and issue banner support 2025-09-05 17:57:23 +00:00
dish 2b2ff53811
prometheus-script-exporter: switch to maintained fork (#435767) 2025-09-05 11:57:06 -04:00
Maximilian Bosch 409107d2f5
nixos/grafana: don't set X-XSS-Protection anymore
Part of #438800.

The OWASP recommentation[1] is:

> The X-XSS-Protection header has been deprecated by modern browsers
> and its use can introduce additional security issues on the client
> side. As such, it is recommended to set the header as X-XSS-Protection: 0
> in order to disable the XSS Auditor, and not allow it to take the default
> behavior of the browser handling the response. Please use
> Content-Security-Policy instead.

Hence, we turn this off, diverging from the upstream defaults here. An
upstream issue has been opened[2].

[1] https://owasp.org/www-project-secure-headers/#x-xss-protection
[2] https://github.com/grafana/grafana/issues/110369
2025-08-31 15:22:16 +02:00
undefined 5365b3cdd9
gatus: 5.19.0 -> 5.23.2 2025-08-30 05:51:34 +08:00
Sandro bab1ec5bd3
victoriametrics & vmagent: Make the config check optional (#419908) 2025-08-27 22:25:51 +02:00
dish 970dcca69c
treewide: Fix links in module documentation 2025-08-25 12:55:11 -04:00
C4 Patino 4a80d00387
prometheus-script-exporter: switch to maintained fork 2025-08-22 23:47:48 -05:00
Maximilian Bosch eb6a408547
Merge: nixos/grafana: add prune option to provision.datasources (#431775) 2025-08-22 21:48:35 +02:00
misuzu 4b66d476f3
kminion: 2.2.7 → 2.2.13, init module (#318792) 2025-08-18 19:30:40 +03:00
Sandro b146c51ce7
vlagent: init at 1.25.0 (#424934) 2025-08-18 01:12:26 +02:00
Christina Sørensen 8373b65856
kminion: format source
Signed-off-by: Christina Sørensen <ces@fem.gg>
2025-08-17 14:07:18 +00:00
Jonathan Davies 314b467ac1
nixos/prometheus-exporters: Added kafka exporter 2025-08-17 14:07:13 +00:00
Maximilian Bosch c7eb566c41
nixos/grafana: add prune option to provision.datasources
Closes #430532
2025-08-07 17:03:57 +02:00
Matthias Beyer 2c06381907
nixos/traccar: Rework configuration file creation. (#413653) 2025-08-04 10:26:00 +02:00