Commit graph

5065 commits

Author SHA1 Message Date
Sandro 21a356df87
bird: print config file with line numbers to improve debugging (#411578) 2025-09-27 00:25:01 +00:00
nixpkgs-ci[bot] a827508462
Merge staging-next into staging 2025-09-26 19:57:27 +00:00
Sandro 3656f7c1f1
cloudflare-ddns: init at 1.15.1 (#394668) 2025-09-26 17:43:27 +00:00
Sizhe Zhao f1cd27b8a0
nixos/sing-box: set home and cwd to state directory 2025-09-26 23:36:13 +08:00
Sandro Jäckel 3c6d1656bd
morty: drop 2025-09-26 15:45:40 +02:00
nixpkgs-ci[bot] 416b972cef
Merge staging-next into staging 2025-09-24 18:06:34 +00:00
nixpkgs-ci[bot] f4c8c15a66
Merge staging-next into staging 2025-09-24 12:08:17 +00:00
6543 be8eb7a3ed services.hostapd: convert iwd assertion ito an warning 2025-09-24 12:31:17 +02:00
dotlambda 1e596e3ee2
nixos/mosquitto: add retain_expiry_interval freeform key (#445313) 2025-09-24 07:45:11 +00:00
K900 b2dfadf1a3 Merge remote-tracking branch 'origin/staging-next' into staging 2025-09-24 10:23:46 +03:00
Ramses 2f5e64c284
sshd: fewer empty lines in generated config (#392527) 2025-09-24 06:51:36 +02:00
Sandro 830c3bf67c
pihole-ftl: Fix files.macvendor setting, and download database (fixes #428282) (#428690) 2025-09-23 21:51:28 +00:00
K900 79838f3591 nixos/hostapd: fix type of channel option
0 is a valid value, and in fact the default.
Fixes #445244.
2025-09-23 11:37:55 +03:00
jopejoe1 2032412fdb
various: use more accurate int types (#445244) 2025-09-22 21:50:55 +00:00
Pol Dellaiera ea27db1959
various: use types.port instead of types.int (#445243) 2025-09-22 19:49:35 +00:00
tea 6adbfa11c5 nixos/mosquitto: add retain_expiry_interval freeform key 2025-09-22 21:11:22 +02:00
Felix Singer 5896ce3bca nixos/murmur: Use lib.types.path where possible
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-22 20:11:59 +02:00
Niklas Korz a4ced97842
nixos/murmur: Set ProtectSystem to strict (#442008) 2025-09-22 16:35:49 +00:00
h7x4 a7d64941f4
nixos/prosody: use types.port 2025-09-22 16:46:44 +02:00
h7x4 637a259587
nixos/resilio: use types.port 2025-09-22 16:46:44 +02:00
h7x4 bb96a741c7
nixos/i2pd: use types.port 2025-09-22 16:46:43 +02:00
h7x4 71fb838c2f
nixos/livekit: use types.port 2025-09-22 16:46:43 +02:00
h7x4 5883645672
nixos/autossh: use types.port 2025-09-22 16:46:42 +02:00
h7x4 c9d2056db0
nixos/coturn: use types.port 2025-09-22 16:46:42 +02:00
h7x4 0d2a07b795
nixos/3proxy: use types.port 2025-09-22 16:46:42 +02:00
h7x4 8c0bf2ac68
nixos/freenet: use more accurate int types 2025-09-22 16:36:18 +02:00
h7x4 2a3f551195
nixos/icecream: use more accurate int types 2025-09-22 16:36:17 +02:00
h7x4 33fb2c08bf
nixos/radvd: use more accurate int types 2025-09-22 16:36:17 +02:00
h7x4 016298079e
nixos/resilio: use more accurate int types 2025-09-22 16:36:17 +02:00
h7x4 54f5ec23ec
nixos/hostapd: use more accurate int types 2025-09-22 16:36:16 +02:00
h7x4 792ccdab5c
nixos/squid: use types.port 2025-09-22 16:33:02 +02:00
h7x4 51dd68f907
nixos/zerobin: use types.port 2025-09-22 16:33:02 +02:00
h7x4 58ef4b7ae2
nixos/syncthing: use types.port 2025-09-22 16:33:01 +02:00
h7x4 32449bcc16
nixos/livekit-ingress: use types.port 2025-09-22 16:33:00 +02:00
h7x4 d594f74f75
nixos/ntopng: use types.port 2025-09-22 16:33:00 +02:00
h7x4 a1954d1106
nixos/websockify: use types.port 2025-09-22 16:33:00 +02:00
jack 35a25c4bd2 nixos/pangolin: init 2025-09-22 12:25:42 +02:00
Fernando Rodrigues da8d220829
nixos/newt: fix cli args (#444630) 2025-09-22 09:42:18 +00:00
jopejoe1 5ae8f56b82
various: use mkPackageOption (#445103) 2025-09-22 08:58:51 +00:00
Jack Rosenberg dedf2939ec nixos/newt: fix cli args 2025-09-22 10:37:36 +02:00
Felix Singer 5b0ee7f9c4 nixos/murmur: Set ProtectSystem to strict
Make the whole file system read-only except the directories related to
Murmur, like the state or runtime directories.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-22 05:12:43 +02:00
Felix Singer 7c45736347 nixos/murmur: Fix typo in mkRemovedOptionModule message
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-22 05:07:23 +02:00
h7x4 4ba3f60b8a
various: use mkPackageOption 2025-09-22 02:46:54 +02:00
Matthieu C. 7ebfdde615
nixos/ssh: fewer empty lines in generated ssh and sshd config files
Co-authored-by: r-vdp <ramses@well-founded.dev>
Co-authored-by:  Marie <tabmeier12@gmail.com>
2025-09-22 01:03:25 +02:00
averyv 155cdfb0f9
pihole-ftl: Download macvendor.db in setup service
As done in the update script cef7fd4b02/automated install/basic-install.sh#L1791-L1792
2025-09-21 17:26:29 +01:00
averyv 113e36815e
pihole-ftl: Fix files.macvendor setting
Which accidentally duplicates the gravity.db file path.
2025-09-21 16:48:33 +01:00
Fabian Cholewinski 9f7f75f801 privoxy: Allow multiple listen-address options
Change type of services.privoxy.settings.listen-address from str to
either str (listOf str).  The latter allows providing a list which
results in multiple list-address entries in privoxy.conf.
2025-09-20 17:28:13 +00:00
Wolfgang Walther bebd83aa93
maintainers: remove Madouura (#442867) 2025-09-20 15:33:00 +00:00
Krzysztof Nazarewski dd7b399250
nixos/netbird: allow reading journald messages
2025-09-19T10:50:03+02:00 ERRO client/internal/debug/debug.go:338: failed to add systemd logs: get systemd logs for netbird-priv: execute journalctl: exit status 1 (stderr: Hint: You are currently not seeing messages from other users and the system.
      Users in groups 'adm', 'systemd-journal', 'wheel' can see all messages.
      Pass -q to turn off this notice.
No journal files were opened due to insufficient permissions.
)
2025-09-19 11:39:50 +02:00
Krzysztof Nazarewski eee5067f19
nixos/netbird: move netbird debug bundle tweaks to one place 2025-09-19 11:31:56 +02:00
royce-c 1a81c3b3a0
firezone: fix AmbientCapabilities systemd unit option typo 2025-09-19 00:59:46 -07:00
dish 971d10cf2d
ifstate: 2.0.0 -> 2.0.1 (#443243) 2025-09-18 21:04:59 +00:00
Krzysztof Nazarewski 850200ab29
nixos/netbird: add SYSTEMD_UNIT to pick up logs in debug bundles 2025-09-18 17:35:45 +02:00
Vladimír Čunát 66658778bd
knot-dns: 3.4.8 -> 3.5.0
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.5.0#knot-dns-350-2025-09-18
2025-09-18 13:24:20 +02:00
Pol Dellaiera 2df3d7d96d nixos/netbird: update path to desktop icon 2025-09-18 08:15:43 +02:00
Tristan Ross a3334dc7ab
nixos/ax25/axports: ax25 kernel module check (#432588) 2025-09-18 03:52:28 +00:00
Grimmauld c754dfa101
nixos/murmur: Hard-code log directory to /var/log/murmur (#442806) 2025-09-17 17:38:10 +00:00
Michele Guerini Rocco ab8c387f40
services.hostapd: add assertions and warnings to detect conflict with networking.wireless.iwd or networking.wireless (#440932) 2025-09-17 07:43:04 +00:00
Michele Guerini Rocco 098e9e0187
nixos/wpa_supplicant: add option to pass additional configuration files (#437247) 2025-09-17 07:29:00 +00:00
Charlotte Hartmann Paludo 1eac6104b7
nixos/services.ddclient: remove nsupdate assertion 2025-09-17 08:06:45 +02:00
6543 e3a82366de services.hostapd: add assertions and warnings to detect conflict with networking.wireless.iwd or networking.wireless
Co-authored-by: Michele Guerini Rocco <rnhmjoj@users.noreply.github.com>
2025-09-17 01:17:34 +02:00
Grimmauld 86bccaf512
nixos/murmur: Reverse order of allowed address families (#441983) 2025-09-16 20:24:46 +00:00
rnhmjoj 4fc98dff6b
nixos/wpa_supplicant: add option to pass additional configuration files to wpa_supplicant 2025-09-16 19:15:47 +02:00
Marcel 3bbaab6184
ifstate: 2.0.0 -> 2.0.1 2025-09-15 18:59:20 +02:00
Johannes Kirschbauer c061914cc6
nixos/umurmur: fix settings freeformType (#443123) 2025-09-15 12:28:54 +00:00
Sandro 5d91651e5e
nixos/tailscale: interface should be up prior to service finish (#396399) 2025-09-15 11:42:40 +00:00
André Schröder b2942cbeb7
nixos/umurmur: fix settings type 2025-09-15 12:57:13 +02:00
Scott Edlund b67bf1607c nixos/tailscale: tailscaled-autoconnect use Type=notify, wait for Running
Previously the `Starting` state was missed, allowing the service to
complete before the interface was ready, causing services that bind to
Tailscale IPs to fail to start.

Now waits for Tailscale to report `Running` and notifies systemd
accordingly.

Switch the unit to Type=notify to timeout if there is no connection.

Remove `NeedsMachineAuth` gating since it requires client approval in
the console.
2025-09-15 17:55:41 +09:00
kirillrdy 6caa2d1210
nixos/bind: add extraArgs option for command-line arguments (#442322) 2025-09-15 07:04:18 +00:00
Michele Guerini Rocco f59c39a3cc
nixos/wpa_supplicant: allow duplicate network blocks (#441410) 2025-09-15 03:52:15 +00:00
Ivan Kovalev 9007662fd0 nixos/cloudflare-ddns: init module 2025-09-15 01:33:49 +02:00
Sandro 5816a8aa0a
nixos/ifstate: fixed initrd usage with cryptsetup (#441561) 2025-09-14 14:54:11 +00:00
Aidan Gauland 982ede4108 nixos/tests/zeronet: update meta.maintainers
Inherit maintainers from zeronet package.
2025-09-14 21:56:48 +12:00
Felix Singer f6d9a910e6 nixos/murmur: Hard-code log directory to /var/log/murmur
The Murmur NixOS module allows logging to a file instead of journald. At
the moment any arbitrary directory may be specified by using the
`logfile` option, but nothing ensures that the directory exists or
proper permissions are configured.

Since there is not much reason to specify a custom directory for log
files anyway, just use `/var/log/murmur` by using the systemd way. This
replaces the option `logfile` with the boolean option `logToFile` as
well.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-14 06:59:46 +02:00
Léana 江 fe4da89657
nixos/wpa_supplicant: allow duplicate network blocks
Allow users to specify more than one network block of the same SSID.
In addition, allow the specification of its BSSID to better distinguish
these network blocks.
2025-09-14 07:06:07 +08:00
Sandro beae95d25c
purple-matrix: drop (#439346) 2025-09-13 19:35:43 +00:00
misuzu 46d631a6bb
nixos/nebula: add reload support (#441054) 2025-09-13 19:20:28 +00:00
dish 6ab8712005
purple-matrix: drop
Has been unmaintained since 2022 and uses the EOL http-parser library
that has many vulnerabilities.
2025-09-13 14:54:03 -04:00
Philip Taron 78f76b6b33
nixos/tailscale: Add option to disable upstream debug logging (#432412) 2025-09-13 02:46:13 +00:00
fsagbuya 0a35b0539c nixos/bind: add extraArgs option for command-line arguments 2025-09-12 18:18:04 +08:00
Jörg Thalheim b2ba46d82c
treewide: prefer types.ints over addCheck expressions (#442243) 2025-09-12 07:22:59 +00:00
h7x4 770a8a6798
nixos/tinc: prefer types.ints over addCheck 2025-09-12 02:32:56 +02:00
h7x4 85077ec2b1
nixos/tayga: prefer types.ints over addCheck 2025-09-12 02:31:48 +02:00
h7x4 e74440f374
nixos/monero: prefer types.ints over addCheck 2025-09-12 02:30:30 +02:00
Nick Cao 6a15f972d1
nixos/strongswan-swanctl: update option descriptions 2025-09-11 16:58:42 -04:00
Franz Pletz c986990888
nixos/anubis: Add missing botPolicy option implementation (#401622) 2025-09-11 15:55:35 +00:00
SandaruKasa f0d91fc928 nixos/zapret: fix examples 2025-09-11 15:41:50 +03:00
Felix Singer 9309fd7508 nixos/murmur: Reverse order of allowed address families
Instead of specifying what shouldn't be allowed, rather list allowed
address families.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-11 09:14:00 +02:00
Sandro d85e95dad6
nixos/networkmanager: fix serializing an invalid wifi.powersave=null (#438347) 2025-09-10 15:04:35 +02:00
Marcel 25863e23a2
nixos/ifstate: deuplicate common initrd and non-initrd service config 2025-09-09 23:53:12 +02:00
Marcel f3f9a71af6
nixos/ifstate: remove initrd default dependencies 2025-09-09 21:04:10 +02:00
Marcel bc846d64d2
nixos/ifstate: add upstream initrd networking targets 2025-09-09 21:04:09 +02:00
Marcel f73402c75f
nixos/ifstate: remove manual /var/run creation
The directory seems to be created by other processes using recent
changes in master now. Therefore the manual mkdir is not needed anymore.

As per the removed code comment, this will probably also be fixed later
in pyroute2 directly.
2025-09-09 21:04:06 +02:00
Sandro 42efe1cc8a
nixos/dnscrypt-proxy: rename from dnscrypt-proxy2 (#433312) 2025-09-09 17:45:50 +02:00
h7x4 af678465ee
treewide/nixos: move number typed port options to types.port (#441136) 2025-09-08 18:36:19 +02:00
Sandro 947f328b0a
pihole-ftl: Fix log deleter service creating an empty database (#435694) 2025-09-08 17:05:02 +02:00
Sandro 25301c0bc3
pihole: 6.1 -> 6.1.4 (#414796) 2025-09-08 15:53:45 +02:00
Haylin Moore cf540f8c98 treewide/nixos: move number typed port options to types.port 2025-09-08 15:27:19 +02:00
Majiir Paktu 76e269a01c nixos/nebula: add reload support 2025-09-07 17:19:27 -04:00
averyv 82a3e70b2d
pihole-ftl: Add basic test 2025-09-07 17:21:58 +01:00