Commit graph

39372 commits

Author SHA1 Message Date
K900 d56d26bf30 nixos/pcscd: fix eval 2025-08-11 21:56:05 +03:00
Emily 137414cf20
nixos/{consul-template,vault-agent}: drop template sub-option (#431031) 2025-08-11 19:29:32 +02:00
Maximilian Bosch 0dd4477d19
Merge: Fix: Correct podman systemd service name (#425170) 2025-08-11 18:39:10 +02:00
Franz Pletz 43a602c25d
nixos/libvirtd: allow changing firewall backend (#432610) 2025-08-11 16:00:12 +02:00
isabel 7c854b91a6
nixos/pcscd: Allow configuration of filters (#425047) 2025-08-11 14:36:08 +01:00
Adam C. Stephens af7f652b8d
nixos/traefik: add WorkingDirectory (#432214) 2025-08-11 07:50:10 -04:00
Jack Rosenberg f26c52e8cf nixos/traefik: add WorkingDirectory 2025-08-11 11:03:17 +02:00
Janne Heß 48d85cad8d
nixos/oxidized: allow for providing config by other means (#431687) 2025-08-11 10:37:33 +02:00
Wolfgang Walther f96d58f0c8
nixos/config/sysfs: run treefmt 2025-08-11 09:16:28 +02:00
Mikael Voss ba04f97d4e nixos/config/sysfs: init module 2025-08-11 12:16:59 +05:30
nikstur 42cf56db09 nixos/system-path: add corePackages option
This allows users to override all packages. This is useful to build
minimal systems that really don't required these packages that
previously were "required".
2025-08-10 22:48:26 +02:00
nikstur f087e5c94b nixos/network-interfaces: add packages to corePackages
This allows users to override (i.e. exclude) these packages from their
system closure if they don't need them.
2025-08-10 22:48:26 +02:00
nikstur e63a403bfb nixos/kernel: don't include append-initrd-secrets when unused 2025-08-10 22:43:48 +02:00
nikstur bc5eefd2a5 nixos/activation-script: disable userActivationScripts when system is not activatable 2025-08-10 22:43:42 +02:00
nikstur 0d9a5c2059 nixos/fuse: add enable option
Fuse is stil enabled by default so the default behaviour of NixOS
doesn't change. However, now it's possible to actively exclude fuse when
you don't need it.
2025-08-10 22:43:39 +02:00
nikstur 9e0ac0c7e6 nixos/kexec: add enable option
It is still enabled by default but now you can actively exclude it if
you don't need it.
2025-08-10 22:43:34 +02:00
nikstur 898ebf78ef nixos/bash: re-introduce enable option 2025-08-10 22:43:28 +02:00
nikstur d5ae87bdeb
Revert "nixos: allow more things to be disabled" 2025-08-10 22:22:08 +02:00
André Lima 28d3245201
nixos/libvirtd: allow changing firewall backend 2025-08-10 21:06:54 +01:00
Ryan Lahfa c230381b25
nixos/test-instrumentation: use bash directly (#432290) 2025-08-10 20:17:13 +02:00
Arian van Putten 1bb040fae8
nixos: allow more things to be disabled (#429695) 2025-08-10 19:49:52 +02:00
Luke Granger-Brown 7f552ff771
tayga: 0.9.2 -> 0.9.5 (#432528) 2025-08-10 17:50:45 +02:00
Pol Dellaiera 4594192170
nixos/netbird: fix desktop file name pattern (#432535) 2025-08-10 17:18:12 +02:00
lassulus 5316ba88a5 nixos/prosody: remove erronous spaces in module names 2025-08-10 17:09:16 +02:00
Luke Granger-Brown 4548324aae nixos/tayga: add option to allow toggling WKPF strict compliance
The RFC requires that we don't allow access to non-global v4 addresses
using the well-known 64:ff9b:: prefix, but there are some deployments
where it's convenient to permit this.

To make this work in tests, disable wkpf-strictness via the config
option introduced in bc18503e2ff1ee48ac472a67ba982dae76a5c2d3.

Tayga added 100.64.0.0 to the set of WKPF in
4dff17ef61821f5bc1996ce687a3dc317fd4fa50.
2025-08-10 17:00:13 +02:00
Luke Granger-Brown b45ba94a0e nixos/tayga: add log option
This allows configuring logging in tayga, and enables it for the NixOS
test.
2025-08-10 16:37:42 +02:00
Florian Klink 73582e4158 nixos/tayga: fix config reload
Use a trampoline at /etc/tayga.conf for the config, so reload actually
picks up a changed config file.
2025-08-10 16:30:52 +02:00
Rohan Verma 4c2b315075 nixos/netbird: fix desktop file name pattern
The desktop file substitution was looking for 'Name=NetBird' but the
actual desktop file contains 'Name=Netbird' (with lowercase 'b').

Fixes #432454
2025-08-10 19:49:14 +05:30
Martin Weinelt 63c4ed7e64
nixseparatedebuginfod2: init package and module (#428845) 2025-08-10 15:46:23 +02:00
Martin Weinelt 43eb19bae2
nixos/frigate: validate config at build time (#429986) 2025-08-10 15:09:02 +02:00
K900 aadb3e60ec
linux: remove mentions of extraStructuredConfig & throw error (#432497) 2025-08-10 15:16:42 +03:00
Maximilian Bosch dccb264578
linux: remove mentions of extraStructuredConfig & throw error
PR #431115 changed extraStructuredConfig to structuredExtraConfig to
follow the deprecation warning about `extraConfig`. However,
`extraStructuredConfig` was mentioned in several places in the docs that
weren't addressed. Also, using this would silently fail since the code
in question would still accept the old key.

This patch updates the docs accordingly and throws an error if the
code-path is reached and `extraStructuredConfig` is being used.
2025-08-10 14:10:50 +02:00
Jörg Thalheim 4940959d28
nixos/mediawiki: fix error from wfGetDB being removed (#427623) 2025-08-10 11:42:14 +02:00
lassulus cb771a25a1
jitsi-meet: fix infinite recursion with prosody package (#432371) 2025-08-10 09:34:49 +02:00
Emily 46aad76001
nixos/iso-image: Support systemd initrd (#291750) 2025-08-10 05:37:48 +01:00
Martin Weinelt a0f387ae34
nixos/frigate: validate config at build time
Only in non-cross setups because we cannot infer the buildPackages
version of cfg.package when overridden.
2025-08-10 02:18:22 +02:00
lassulus 804919a7f4 nixos/prosody: fix serialization error if httpFileShare is null 2025-08-10 01:03:49 +02:00
lassulus 6f224e65ea jitsi-meet: fix infinite recursion with prosody package 2025-08-10 00:23:58 +02:00
Sandro 29484ab654
nixos/zwave-js: allow non-world-readable secrets (#411496) 2025-08-09 21:53:14 +02:00
Morgan Jones 1dc3ecfc93
nixos/gdm: Add conffile to gdm-fingerprint (#424733) 2025-08-09 19:36:31 +00:00
Farid Zakaria 17b28eabbb nixos/gdm: Add conffile to gdm-fingerprint 2025-08-09 11:47:12 -07:00
Ryan Lahfa bcc20cad16
nixos/network-interfaces: let networkd handle privacy extensions (#431967) 2025-08-09 17:53:39 +02:00
nikstur 3ae9229600 nixos/test-instrumentation: use bash directly 2025-08-09 17:39:01 +02:00
nikstur 439d68b58d nixos/audit: fix journald test
Makes the audit module responsible for setting up the audit subsystem of
the kernel. The auditd module is now only responsible for setting up the
daemon.

Enable the audit subsystem early via kernelParams.

Increase the default audit backlog limit so that it works out of the box
for a normal system.

Remove a superfluous and pointless test case.
2025-08-09 15:00:41 +02:00
Elis Hirwing 465f689e63
treewide: Remove myself as a maintainer from most things 2025-08-09 08:41:25 +02:00
Yohann Boniface eeffb605af
nh: Delay clean service so it doesnt slow down boot (#431770) 2025-08-09 05:24:00 +02:00
nikstur bb954cddf5 nixos/network-interfaces: let networkd handle privacy extensions
This removes bash from the mandatory system closure.
2025-08-09 00:10:13 +02:00
Arian van Putten a009838396
nixos/filesystem: remove mount-pstore (#432049) 2025-08-08 21:36:03 +02:00
nikstur e9c71d971f nixos/filesystem: remove mount-pstore
Ever since fb49d81b25 we set
CONFIG_PSTORE=y in the config because we set CONIFG_ACPI_APEI=y in the
kernel. This means we always have pstore built right into the kernel.

systemd thus always mounts `/sys/fs/pstore` which makes our custom unit
superfluous and redudant.
2025-08-08 19:03:05 +02:00
GDBlaster bfa1933939 nh: Delay run on boot so clean service doesnt make the boot process wait for it
Fix formatting

Co-authored-by: Acid Bong <acidbong@tilde.club>

changed target to multi-user
2025-08-08 14:15:02 +02:00