Commit graph

23864 commits

Author SHA1 Message Date
Jörg Thalheim 9bf4ec6909
Merge pull request #206645 from Mic92/nix-ld
nixos/nix-ld: set NIX_LD by default
2022-12-19 16:26:02 +00:00
Jörg Thalheim 4ce47012a6 nixos/nix-ld: set NIX_LD by default 2022-12-19 17:06:41 +01:00
Artturi 1c387ed1a6
Merge pull request #206709 from SuperSandro2000/mandb-misc
nixos/man-db: use nativeBuildInputs
2022-12-19 17:55:46 +02:00
Jonas Heinrich a9e3b1c0f2 nixos/usbmuxd: Ability to change package 2022-12-19 08:14:07 -05:00
github-actions[bot] c45ee202ae
Merge staging-next into staging 2022-12-19 12:02:11 +00:00
Franz Pletz 6f8f1b0454
Merge pull request #205865 from DeeUnderscore/fix/grafana-socket 2022-12-19 12:04:22 +01:00
github-actions[bot] dc1fa2c776
Merge staging-next into staging 2022-12-19 00:02:57 +00:00
Sandro Jäckel 26f704b545
treewide: use nativeBuildInputs with runCommand instead of inlining 2022-12-18 23:36:40 +01:00
Anderson Torres c7499150c2
Merge pull request #206698 from linsui/firefox
nixos/firefox: add languagePacks config
2022-12-18 19:01:45 -03:00
dev-null-undefined 1cd6b0681e
nixos/i3lock: i3lock program with u2fSupport option
i3lock program with option to enable u2fAuth.
2022-12-18 21:31:06 +01:00
github-actions[bot] dc7ebb0163
Merge staging-next into staging 2022-12-18 18:01:41 +00:00
Valentin Gagarin f782da699e
Merge pull request #206646 from figsoda/typos 2022-12-18 18:27:57 +01:00
figsoda d48c2fd1ca
nixos/pgpkeyserver-lite: fix typo
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
2022-12-18 11:35:23 -05:00
Sandro Jäckel a6fa6abb15
nixos/man-db: use nativeBuildInputs 2022-12-18 14:19:36 +01:00
linsui 8153ba84ca nixos/firefox: add languagePacks config 2022-12-18 20:48:49 +08:00
Vincent Bernat fc39b5ecc8 nginx: make global redirect vhost option accept exceptions
By moving the return into a location directive, one can provide
exceptions by adding locations. This is similar to what the forceSSL
option does.
2022-12-18 12:21:27 +01:00
figsoda 6bb0dbf91f nixos: fix typos 2022-12-17 19:31:14 -05:00
Raito Bezarius b19612cb24 nixos/services/dolibarr: decouple nginx and let other web servers be used 2022-12-18 01:05:53 +01:00
github-actions[bot] 7984a7dacb
Merge staging-next into staging 2022-12-18 00:05:50 +00:00
Robert Hensing cf150c53f1
Merge pull request #200724 from JonathanLorimer/allow-configuration-of-roles
services.postgresql: Allow configuration of user roles in ensureUser
2022-12-18 00:40:57 +01:00
github-actions[bot] 887e342eaa
Merge staging-next into staging 2022-12-17 18:01:35 +00:00
Julien Moutinho 15046139d5 nixos/mmsd: init 2022-12-17 17:36:43 +01:00
Naïm Favier 723eb8d9b8
Merge pull request #205479 from IzumiRaine/borgbackup-patterns 2022-12-17 17:00:02 +01:00
Ryan Lahfa af6ea430f4
Merge pull request #201119 from Enzime/remove-tailscale-warning
nixos/tailscale: Add `useRoutingFeatures` option
2022-12-17 15:44:07 +01:00
Jakub Sokołowski c70f047315
nixos/zfs: assert no force import with hibernation
According to a ZFS issue about hibernation causing data corruption:
https://github.com/openzfs/zfs/issues/12842

The way this happens is if the system force imports a pool that was
suspended during hibernation. I've had this happen twice on NixOS and
I'd like to avoid having this happen again, to me or others.

To do this I've added an assertion that makes sure you can't have
`forceImportRoot` or `forceImportAll` enabled with `allowHibernation`.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-12-17 13:11:23 +01:00
github-actions[bot] 392cc9b8fe
Merge staging-next into staging 2022-12-17 12:01:41 +00:00
Michael Hoang 68e514ed1c nixos/tailscale: Add useRoutingFeatures option 2022-12-17 22:38:14 +11:00
Vladimír Čunát 0ba3487fc6
Merge #205270: staging-next 2022-12-09 2022-12-17 10:11:16 +01:00
Jörg Thalheim 668a2b2f33
Merge pull request #172237 from DeterminateSystems/bootspec-rfc
Support external bootloader backends (RFC-0125)
2022-12-17 08:35:53 +00:00
github-actions[bot] 4804305f6e
Merge staging-next into staging 2022-12-17 06:02:03 +00:00
github-actions[bot] 05ca3d8285
Merge master into staging-next 2022-12-17 06:01:30 +00:00
AndersonTorres 4a194173b0 nixos/katriawm: add module 2022-12-17 00:13:39 -03:00
AndersonTorres 4ee04d0f1a module-list: put in ascii-betical ordering 2022-12-17 00:13:38 -03:00
laalsaas 3546fca5a4 plasma5: add notoPackage option
Some users don't want all >190 Noto fonts.
2022-12-17 01:17:17 +01:00
github-actions[bot] 61a0176830
Merge staging-next into staging 2022-12-17 00:02:50 +00:00
github-actions[bot] 30b97b0e83
Merge master into staging-next 2022-12-17 00:02:17 +00:00
Sandro d154d50e2c
Merge pull request #200856 from aacebedo/aacebedo/streamdeck-ui_package_option 2022-12-17 00:46:28 +01:00
Ryan Lahfa 4428f9f5e9
Merge pull request #198239 from jacobgreenleaf/jacobg-borg-inhibit
nixos/borgbackup: Add option for inhibiting sleep
2022-12-17 00:45:10 +01:00
Ryan Lahfa 810e9ccfda
Merge pull request #200720 from kaldonir/dynamic-motd
pam: Allow backing the MOTD with a file
2022-12-17 00:35:08 +01:00
Sandro c338bf3244
Merge pull request #205712 from devusb/atuin-server 2022-12-16 22:38:35 +01:00
Sandro Jäckel c01a28d021
nixos/no-x-libs: add libextractor 2022-12-16 22:06:00 +01:00
Vladimír Čunát 5bfe30aafa
Merge branch 'master' into staging-next 2022-12-16 21:58:10 +01:00
Sandro Jäckel debcf570c6
nixos/no-x-libs: add msmtp 2022-12-16 20:16:10 +01:00
Nikolay Korotkiy 4e2ce56d6f
Merge pull request #206419 from peperunas/miniflux-package
miniflux: Add package option
2022-12-16 23:11:12 +04:00
github-actions[bot] f61e6f8d8e
Merge staging-next into staging 2022-12-16 18:02:14 +00:00
github-actions[bot] ac36665726
Merge master into staging-next 2022-12-16 18:01:38 +00:00
Bernardo Meurer bf4294b338
Merge pull request #203872 from mikepii/roon-server-id-dir 2022-12-16 14:37:06 -03:00
Frank Moda e27e857def nixos/cloudflared: guard config with enable flag 2022-12-16 11:30:44 -05:00
Giulio De Pasquale b2742248e8
miniflux: Add package option 2022-12-16 16:11:40 +01:00
Izorkin 8e14bf10c2
nixos/mastodon: update database configuration 2022-12-16 16:19:39 +03:00
Izorkin e2cebf2134
nixos/mastodon: fix init db on remote postgresql 2022-12-16 16:14:39 +03:00
Vladimír Čunát 59a68f487d
Merge branch 'staging-next' into staging 2022-12-16 11:20:50 +01:00
Vladimír Čunát e6cd929c5e
Merge branch 'master' into staging-next 2022-12-16 11:09:31 +01:00
Morgan Helton a935888d45 nixos/atuin: init module 2022-12-15 21:07:15 -06:00
happysalada 60797a3bfe surrealdb: add package option 2022-12-15 19:52:28 -05:00
github-actions[bot] b9ac6ee4d9
Merge master into staging-next 2022-12-16 00:02:17 +00:00
Sandro 78d53eadca
Merge pull request #201985 from Shawn8901/prometheus_web_config 2022-12-15 23:18:55 +01:00
Artturin 05a2dfd674 lib.replaceChars: warn about being a deprecated alias
replaceStrings has been in nix since 2015(nix 1.10)

so it is safe to remove the fallback

d6d5885c15
2022-12-15 22:25:51 +02:00
Markus Napierkowski 192ae663cc nixos/pam: allow backing the motd with a file 2022-12-15 11:54:26 +01:00
Shawn8901 6e530b9eda prometheus: Adds an option for web.config.file which can specity settings including authorization. 2022-12-15 10:14:42 +01:00
Shawn8901 470247d433 prometheus: Use yaml format generator instaed json for prometheus.yml
Additionally remove an unused variable
2022-12-15 10:11:25 +01:00
github-actions[bot] 9e23ec4f1c
Merge staging-next into staging 2022-12-15 00:03:02 +00:00
github-actions[bot] 58a71457f7
Merge master into staging-next 2022-12-15 00:02:26 +00:00
Sandro b5f35b1c85
Merge pull request #205399 from SuperSandro2000/fix-avahi 2022-12-14 23:34:12 +01:00
Florian Klink 03cf14a56f
Merge pull request #206042 from flokli/assertion-hsphfpd-wireplumber
nixos/wireplumber: assert hsphfpd to be disabled
2022-12-14 22:02:12 +00:00
Jörg Thalheim 92b32a8a7c
Merge pull request #205895 from jakubgs/transmission/add-package-opt
transmission: add package option
2022-12-14 21:55:08 +00:00
Jörg Thalheim 77f3936552
Merge pull request #205927 from asininemonkey/nixos-nvme-cli
nixos/modules/profiles/base: add nvme-cli
2022-12-14 21:40:46 +00:00
Florian Klink bfc60c9362 nixos/wireplumber: assert hsphfpd to be disabled
According to
https://github.com/NixOS/nixpkgs/issues/205957#issuecomment-1350158554,
pipewire/wireplumber already provides this functionality.

Fixes #205957
2022-12-14 21:24:13 +00:00
github-actions[bot] f9bd55aade
Merge staging-next into staging 2022-12-14 18:02:10 +00:00
github-actions[bot] eb81abe9c0
Merge master into staging-next 2022-12-14 18:01:37 +00:00
Matt Melling e2b79f08bd gpsd: add listenany option 2022-12-14 18:37:15 +01:00
Jörg Thalheim 7af2f0e2e7
Merge pull request #205943 from mweinelt/vaultwarden
vaultwarden: Add update script to keep web vault in sync
2022-12-14 16:15:49 +00:00
tv 816614bd62 nixos/exim: allow using service credentials
By settings User= to the actual Exim user, systemd will ensure that the
credentials directory will have the correct ownership, allowing users to
utilize LoadCredential=.  Exim still gets started as root (and drops
privileges) to preserve the previous behavior.
2022-12-14 16:43:46 +01:00
Martin Weinelt 0497d5b99f
vaultwarden: Add update script to keep web vault in sync
- Adds an update script to fetch the compatible web vault version
- Removes `vaultwarden-vault` from top-level to prevent independent
  updates through e.g. r-ryantm. Istead the vault is now accessible
  at `vaultwarden.webvault`.
- The name webvault was chosen because it is the title of the projects
  README and it makes it clearer, that this is the web UI.
2022-12-14 15:00:20 +01:00
Naïm Favier bec17309fd
Merge pull request #206079 from ncfavier/vim-fix-example 2022-12-14 14:38:42 +01:00
Naïm Favier 7bb8a42095
nixos/vim: fix example package
vimHugeX is now an alias for vim-full
2022-12-14 14:25:30 +01:00
github-actions[bot] 722750c19c
Merge staging-next into staging 2022-12-14 12:01:53 +00:00
github-actions[bot] 96a0e614c8
Merge master into staging-next 2022-12-14 12:01:19 +00:00
Naïm Favier 6573e10dee
Merge pull request #204480 from ncfavier/hv-kvp 2022-12-14 12:03:20 +01:00
Jakub Sokołowski a96172348e
transmission: add package option
Useful when someone might want to upgrade/downgrade easily.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2022-12-14 10:48:40 +01:00
github-actions[bot] c0b33aa433
Merge staging-next into staging 2022-12-14 06:01:42 +00:00
github-actions[bot] 747e072692
Merge master into staging-next 2022-12-14 06:01:05 +00:00
Thomas Tuegel 03354f45ab plasma5: Help D-Bus find kactivitymanagerd 2022-12-14 10:48:51 +08:00
Thomas Tuegel 34b2fcfd19 plasma5: Enable PipeWire by default
`xdg-desktop-portal-kde` expects PipeWire to be running, so we enable it by
default, but we don't replace PulseAudio. The user may disable it against our
default, if desired.
2022-12-14 10:48:51 +08:00
ajs124 f98e6d6290 unifi7: 7.2.95 -> 7.3.76
https://community.ui.com/releases/UniFi-Network-Application-7-3-76/85c75fc7-3e0f-4e99-aa90-7068af4f1141
2022-12-14 02:47:04 +01:00
github-actions[bot] 74a066ab3f
Merge staging-next into staging 2022-12-13 18:02:08 +00:00
github-actions[bot] d07c2d73fd
Merge master into staging-next 2022-12-13 18:01:30 +00:00
Naïm Favier cf5ab0191d
nixos/nix-daemon: remove nixbld users if auto-allocating UIDs
https://nixos.org/manual/nix/unstable/command-ref/conf-file.html#conf-auto-allocate-uids
2022-12-13 17:16:30 +01:00
Jose Cardoso c2723da1ea
nixos/modules/profiles/base.nix: add nvme-cli 2022-12-13 15:35:05 +00:00
Ryan Lahfa 78e2fbc4ce
Merge pull request #195341 from zhaofengli/fwupd-extra-daemon-conf
nixos/fwupd: Make daemon.conf structured
2022-12-13 14:19:26 +01:00
D Anzorge 9be81d0acf nixos/grafana: allow @chown syscalls when using unix sockets
Grafana will unconditionally call chown on the socket after creating it,
even if the configuration does not ask for a different socket gid.
2022-12-13 02:47:50 +01:00
github-actions[bot] cfbecb45cc
Merge staging-next into staging 2022-12-12 18:01:51 +00:00
github-actions[bot] e04ce2733d
Merge master into staging-next 2022-12-12 18:01:15 +00:00
Bernardo Meurer d2578f1dac
Merge pull request #171875 from bbigras/cloudflared
nixos/cloudflared: init
2022-12-12 13:06:21 -03:00
Martin Weinelt d6f4f4584a
nixos/botamusique: allow syscalls in the @resources group
Calls to ffmpeg from botamusique require the `set_mempolicy` syscall.

Fixes: #205702
2022-12-12 15:36:58 +01:00
github-actions[bot] 4814f1a5c8
Merge staging-next into staging 2022-12-12 12:02:03 +00:00
github-actions[bot] 3fcd016cea
Merge master into staging-next 2022-12-12 12:01:25 +00:00
Franz Pletz e7b5445fe9
Merge pull request #205346 from Izorkin/init-profile-lxc
nixos/lxc-container: undo some of the minimal profile stuff
2022-12-12 11:35:29 +01:00
Bobby Rong 9015c9f389
Merge pull request #205525 from SuperSandro2000/prometheus2
nixos/alertmanager: fix renamed option
2022-12-12 18:08:36 +08:00
github-actions[bot] 439a5b4395
Merge staging-next into staging 2022-12-12 06:01:41 +00:00
github-actions[bot] 63c2909cc1
Merge master into staging-next 2022-12-12 06:01:08 +00:00
Bobby Rong 96ba5e03af
Merge pull request #204252 from SamLukeYes/xonshrc
xonsh: migrate to /etc/xonsh/xonshrc
2022-12-12 13:57:33 +08:00
Lin Yinfeng 7f220a0422
nixos/installer/netboot-minimal: add missing lib 2022-12-12 09:54:17 +08:00
github-actions[bot] 7caf38af18
Merge staging-next into staging 2022-12-12 00:04:22 +00:00
github-actions[bot] 76e08d0f2f
Merge master into staging-next 2022-12-12 00:03:39 +00:00
Luke Granger-Brown 36c0938cc5
Merge pull request #198835 from YellowOnion/factorio-patch
factorio: better mod support
2022-12-11 21:17:05 +00:00
github-actions[bot] f14765eb08
Merge staging-next into staging 2022-12-11 18:01:53 +00:00
github-actions[bot] 99d681c4e7
Merge master into staging-next 2022-12-11 18:01:21 +00:00
Sandro Jäckel 8f99f34194
nixos/opengl: cleanup suggestions for extraPackages
- libvdpau-va-gl supports only H.264
- vaapiVdpau is unmaintained for 10 years
2022-12-11 17:44:48 +01:00
Bobby Rong 0e857e0089
Merge pull request #204807 from Eliot00/v2raya-init
v2raya: init at 2.0.0
2022-12-11 23:06:00 +08:00
K900 a95574fd2e
Merge pull request #204560 from jcumming/resilio_config_passthru
passthrough config if there are no secrets defined (address #204559)
2022-12-11 17:50:37 +03:00
Elliot 08d651764f
v2raya: init at 2.0.0
Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>

Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>

Update pkgs/tools/networking/v2raya/default.nix

Co-authored-by: zendo <linzway@qq.com>

Update pkgs/tools/networking/v2raya/default.nix

Co-authored-by: zendo <linzway@qq.com>

Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>

Update pkgs/tools/networking/v2raya/default.nix

Co-authored-by: zendo <linzway@qq.com>

Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>
2022-12-11 22:23:12 +08:00
github-actions[bot] 285157a0f9
Merge staging-next into staging 2022-12-11 06:01:42 +00:00
github-actions[bot] 97267158e3
Merge master into staging-next 2022-12-11 06:01:07 +00:00
Martin Weinelt fda65523fb nixos/evcc: Fix unit environment
In some recent version evcc started requiring `getent` in the PATH, or
else it would fail to start.

It also now requires an sqlite database, which it tries to create a
directory for at `$HOME/.evcc`, so we now need to provide a
StateDirectory.
2022-12-11 01:23:22 +01:00
Guillaume Girol a768871934 nixos/nginx: validate syntax of config file at build time
Shamelessly stolen from nixcloud-webservices:
https://github.com/nixcloud/nixcloud-webservices/blob/master/modules/web/webserver/lib/nginx_check_config.nix

The nixos test testing the behavior of nginx in case of faulty config
would not build with this change (on purpose), so I modified it so that
the failure is not syntactic.
2022-12-10 23:04:57 +01:00
Robert Hensing 16f5747575
Merge pull request #175649 from Artturin/opt-in-structured-attrs
stdenv: support opt-in __structuredAttrs
2022-12-10 21:12:43 +01:00
Sandro Jäckel a49606696e
nixos/alertmanager: fix renamed option 2022-12-10 20:11:18 +01:00
Bruno Bigras c770b44aff nixos/cloudflared: init 2022-12-10 14:07:26 -05:00
github-actions[bot] fe25c2a8d8
Merge master into staging-next 2022-12-10 18:01:12 +00:00
happysalada bdf8a69ecc surrealdb: module: add secret management 2022-12-10 10:57:13 -05:00
Naïm Favier 4b79d6c374
Merge pull request #204976 from bjornfor/nixos-borgbackup-fix-runtime-warning 2022-12-10 16:51:19 +01:00
Izumi Raine cb4547a433 nixos/borgbackup: add option "patterns" 2022-12-10 16:49:34 +01:00
Naïm Favier 75e0609a00
nixos/borgbackup: fix newline escaping with optional arguments
The newline must always be escaped, otherwise `extraPruneArgs` will be treated as a separate command if `prune.prefix` is unset.
2022-12-10 16:46:34 +01:00
Vladimír Čunát de033ae75a
Merge branch 'master' into staging-next 2022-12-10 16:19:36 +01:00
Naïm Favier bd07f70e55
Merge pull request #205358 from farcaller/patch-3 2022-12-10 16:00:28 +01:00
Jonas Heinrich 578dcac1a2
Merge pull request #203779 from Radvendii/firejail
nixos/firejail: remove the need for qualifications
2022-12-10 08:58:54 +01:00
Sandro Jäckel 89b5dddf99
nixos/avahi: revert closing firewall port by default 2022-12-10 03:40:39 +01:00
Yarny0 49a129ab40 nixos/cups-pdf: init
Some implementation notes:

* cups-pdf, and cups-pdf-to-pdf,
  support multiple instances with differing configurations.
  This can be accomplished by creating multiple configuration
  files with names `cups-pdf-{instance-name}.conf`.
  The Nixos module supports this feature by providing
  the option `instances` which is an attrset
  mapping instance names to instance configurations.
  To simplify module usage,
  an instance `pdf` is created by default.

* To use a cups-pdf instance, one also needs
  a cups queue that connects to the backend.
  The module does this automatically by default,
  using the `hardware.printers.ensurePrinters`.
  It uses one of the ppd files which is
  included in the cups-pdf package.
  If this isn't desired (e.g. because printer queues
  should be created by hand, or configured differently),
  the `installPrinter` option can be turned off
  (for each instance separately).

* In our configuration, cups calls external programs
  using the `cups` account and the `lp` group.
  cups-pdf refuses to operate without root privileges,
  likely because it needs to change the
  ownership of it output pdf files so that
  (only) the print job's owner can access them.

  The module installs a suid root wrapper for the backend
  program that can only be called by the `lp` group.
  The cups-pdf package is replaced by a wrapper
  package which calls the suid root wrapper.
  So cups can call its backend programs as usual.
2022-12-09 22:20:09 +01:00
Izorkin 2b6bfed79c
nixos/lxc-container: undo some of the minimal profile stuff 2022-12-09 23:18:37 +03:00
Vladimir Pouzanov 65aed3b37f
Allow to override the https settings 2022-12-09 19:23:50 +00:00
Linus Heckemann 2ee8b6ee74
Merge pull request #188958 from lheckemann/zram-builtin
nixos/zram: support built-in zram
2022-12-09 19:57:44 +01:00
Leorize 05420f34cf nixos: add systemd-homed support
As a start, it's not very configurable, but works pretty well.
2022-12-09 12:10:51 -06:00
github-actions[bot] 48b3a17dea
Merge master into staging-next 2022-12-09 12:01:30 +00:00
Maximilian Bosch 539954efab
Merge pull request #204780 from Ma27/kernel-maintenance-docs
nixos/manual: document kernel backporting policy and implications of it
2022-12-09 11:53:53 +01:00
K900 2123b57d5d nixos/supergfxd: make optional, fix eval (again) 2022-12-09 13:31:00 +03:00
Izorkin 0c6ce0dbab
nixos/installer/netboot-minimal: enable man 2022-12-09 13:03:49 +03:00
Izorkin 309d6a3185
iso/minimal: use mkForce 2022-12-09 13:03:49 +03:00
Izorkin 191d2115ea
iso/minimal: use minimal profile 2022-12-09 13:03:49 +03:00
Izorkin 362d351845
nixos/profiles/minimal: disable udisks service 2022-12-09 13:03:49 +03:00
Izorkin ee858454b3
nixos/profiles/minimal: disable logrotate service 2022-12-09 13:03:49 +03:00
Izorkin df22e4124d
nixos/profiles/minimal: disable documentation 2022-12-09 13:03:38 +03:00
Vladimír Čunát 9c497bb8d6
Merge branch 'staging-next' into staging 2022-12-09 10:27:46 +01:00
Sandro 18ab3af0d4
Merge pull request #205251 from InternetUnexplorer/fix-fish-skim-keybindings 2022-12-09 10:02:04 +01:00
InternetUnexplorer 86ae48a4bf skim: fix fish shell keybindings
This fixes a typo that prevented the fish keybindings from being loaded.
Also, the keybindings are now only loaded if programs.skim.keybindings
is true, which matches the behavior for bash and zsh.
2022-12-08 22:52:09 -08:00
Artturi 8ffe22e286
Merge pull request #203956 from Artturin/addforbiddendependenciesregex
nixos/top-level.nix: add forbiddenDependenciesRegex option
2022-12-09 07:54:00 +02:00
Martin Weinelt a4f2ca1ef3
Merge pull request #205123 from Frostman/prometheus-smartctl-exporter-0.9.1 2022-12-09 01:58:06 +01:00
Martin Weinelt fdcc9e8202
nixos/prometheus.exporters.smartctl: Simplify DeviceAllow logic
Setting up the DeviceAllow list with explicitly configured devices was a
nice idea, but sometimes a configured device (`/dev/nvme0n1` an NVMe
namespace) has a parent device (`/dev/nvme0`) that smartctl needs to
access to query metrics.

Falling back to the block and character definitions is probably a valid
fallback.
2022-12-09 01:40:01 +01:00
Sergey Lukjanov a49feed255 nixos/prometheus.exporters.smartctl: use cli args instead of config
Config support was dropped and replaced with CLI args
2022-12-08 15:31:33 -08:00
ajs124 3071eef957
Merge pull request #201707 from helsinki-systems/alias-krb5Full
krb5Full: turn into alias
2022-12-08 23:54:02 +01:00
Ryan Lahfa 022c7d777a
Merge pull request #196837 from KoviRobi/dnsmasq-attrsets-config
nixos/dnsmasq: Use attrs instead of plain text config
2022-12-08 23:47:08 +01:00
ajs124 c7930769a7 krb5Full: turn into alias 2022-12-08 23:08:44 +01:00
Cole Helbling 5af481f67f nixos/activation/bootspec: fixup improper $out substitution 2022-12-08 13:50:05 -08:00
Cole Helbling dce9add02b nixos/activation/bootspec: refactor the generator script
We separate the different steps (injecting the toplevel and injecting
the specialisations) so that it's easy to document what each snippet is
actually doing.
2022-12-08 13:50:05 -08:00
Cole Helbling 38e5089814 nixos/activation/bootspec: drop problematic comment, only generate bootspec when bootspec is enabled 2022-12-08 13:50:05 -08:00
Cole Helbling 97f657c742 nixos/activation/bootspec: DocBook -> Markdown, add description for extensions field 2022-12-08 13:50:05 -08:00
Cole Helbling cc63293b50 nixos/boot/external: fixup typo in generated docs, regenerate docs 2022-12-08 13:50:05 -08:00
Cole Helbling ad6ea546b4 nixos/boot/external: DocBook -> Markdown 2022-12-08 13:50:05 -08:00
Raito Bezarius 680369e504 nixos/activation/bootspec: add some comments to explain the delicate manipulations 2022-12-08 13:50:05 -08:00
Raito Bezarius 11dfbee0a4 nixos/activation/bootspec: add bootspec chapter in NixOS manual 2022-12-08 13:50:05 -08:00
Raito Bezarius 9832e3e9b9 nixos/activation/bootspec: remove SB extension example in Cue schema 2022-12-08 13:50:04 -08:00
Raito Bezarius 980f50124f nixos/boot/external: add @raitobezarius as maintainer and allow initrd secrets 2022-12-08 13:50:04 -08:00
Raito Bezarius 348ba1b33c nixos/activation/bootspec: module-ify
This does the following:

* turns bootspec into a NixOS module
* validates bootspecs with Cue
* exposes internal knobs
2022-12-08 13:50:04 -08:00
Raito Bezarius ee27291b34 nixos/activation/bootspec: fix slurping specialisation bootspecs 2022-12-08 13:50:04 -08:00
K900 e69c37eae9 nixos/activation: don't generate bootspec for containers 2022-12-08 13:50:04 -08:00
Graham Christensen e9c85d6d0f nixos/activation/bootspec: embed the document into a bootspec subdir 2022-12-08 13:50:04 -08:00
Graham Christensen 6c0e4e892f nixos/activation/bootspec: embed the entire contents of specialisation's bootspecs into the parent
See: https://github.com/NixOS/rfcs/pull/125#discussion_r871222614
2022-12-08 13:50:04 -08:00
Cole Helbling 83d06ce16d nixos/boot/external: init
This allows supporting external bootloader backends.
2022-12-08 13:50:04 -08:00
Cole Helbling 942dcd238b nixos/activation/bootspec: init bootspec support (RFC-0125) 2022-12-08 13:50:03 -08:00
Artturin c01f509e44 treewide: source .attrs in builders
if theres a source $stdenv then this is needed

for structuredAttrs
2022-12-08 21:09:02 +02:00
Naïm Favier 6a117e2759 nixos/doc: render option values using lib.generators.toPretty
Render un`_type`d defaults and examples as `literalExpression`s using
`lib.generators.toPretty` so that consumers don't have to reinvent Nix
pretty-printing. `renderOptionValue` is kept internal for now intentionally.

Make `toPretty` print floats as valid Nix values (without a tilde).

Get rid of the now-obsolete `substSpecial` function.

Move towards disallowing evaluation of packages in the manual by
raising a warning on `pkgs.foo.{outPath,drvPath}`; later, this should
throw an error. Instead, module authors should use `literalExpression`
and `mkPackageOption`.
2022-12-08 17:52:52 +01:00
Naïm Favier 0ff3b35356 nixos/doc: fix some options 2022-12-08 17:52:52 +01:00
Leorize 0cc87ab901 nixos/systemd/userdbd: add method to enable service
This is recommended to enable in conjunction with systemd-homed.
2022-12-08 10:28:41 -06:00
tars0x9752 49a8c118b2
blesh: unstable-2022-07-24 -> unstable-2022-07-29, refactor 2022-12-08 13:39:55 +01:00
Bobby Rong d44e752fba
Merge pull request #204474 from peperunas/libreddit
libreddit: Add package option to module
2022-12-08 19:49:11 +08:00
K900 4353ba58d4
Merge pull request #205119 from K900/supergfxd-fixup
supergfxd: fix config format
2022-12-08 14:13:58 +03:00
Martin Weinelt 286fb727a0
Merge pull request #205071 from NixOS/home-assistant 2022-12-08 11:52:59 +01:00
Robert Hensing 80b1fb3d5e
Merge pull request #204841 from qowoz/nix
nixVersions.nix_2_12: init at 2.12.0
2022-12-08 11:28:42 +01:00
K900 a445c5f6ea supergfxd: fix config format 2022-12-08 11:46:10 +03:00
Martin Weinelt 87c22c7909
nixos/home-assistant: update bluetooth components 2022-12-08 02:36:55 +01:00
Daniel Nagy ad866e565d
treewide: switch to port type for nixos modules 2022-12-08 00:00:00 +01:00
Sandro 3758110622
Merge pull request #204573 from SuperSandro2000/pinentry-nox 2022-12-07 23:00:26 +01:00
Sandro b3f9ddea98
Merge pull request #204422 from SuperSandro2000/bluezfull 2022-12-07 22:46:15 +01:00
Sandro 082ccd0a6d
Merge pull request #202369 from laalsaas/blesh 2022-12-07 18:47:36 +01:00
rnhmjoj 28034190de
nixos/cupsd: fix /var/run/ warning in cups.socket
Silence the systemd warning

    ListenStream= references a path below legacy directory /var/run/, updating /var/run/cups/cups.sock → /run/cups/cups.sock; please update the unit file accordingly

by resetting the value coming from the upstream unit.
2022-12-07 15:57:44 +01:00
rnhmjoj 43cb1eb2f9
nixos/cupsd: stop managing /run/cups directory
The directory is already set up by cups.socket: managing it with
RuntimeDirectory in cups.service is unnecesary and has the unwanted
effect that upon stopping cupsd systemd will remove it. This includes
the /run/cups/cups.sock socket, so it breaks socket activation.
2022-12-07 15:57:44 +01:00
rnhmjoj 47d9e7d3d7
nixos/hardware/printers: stop cupsd when unneeded
If socket activation is enable (the default) and printers are configured
declaratively, the ensure-printers service will always start cupsd and
leave it running, thus defeating the point of socket activation.

With this change ensure-printers continues to start the cups.service at
boot, but automatically stops it afterwards if socket activation is
enabled.

Note: Later restarts of ensure-printers will also restart cupsd, but
it's not an issue since it will be reactivate, if necessary.
2022-12-07 15:57:44 +01:00
Lin Yinfeng 56099e008e nixos/mastodon: allow appending other env files to serviceConfig.EnvironmentFile 2022-12-07 15:07:17 +01:00
Yureka 56d4e1ec67 nixos/peering-manager: init 2022-12-07 12:54:55 +01:00
Bobby Rong fa01623a88
Merge pull request #204809 from bobby285271/cinnamon
cinnamon.mint-artwork: 1.7.2 -> 1.7.3
2022-12-07 09:45:02 +08:00
Zhaofeng Li c4ae704be6 nixos/fwupd: Make daemon.conf structured 2022-12-06 18:24:40 -07:00
Bjørn Forsman bbcfd192a8 nixos/borgbackup: change --prefix to --glob-archives
Fixes warning from `borg prune`:

  Warning: "--prefix" has been deprecated. Use "--glob-archives 'yourprefix*'" (-a) instead.
2022-12-07 02:24:00 +01:00
Yoan Tournade 4c915f1d1a Add BORG_RSH entry under an environment option 2022-12-07 01:00:59 +01:00
Sandro bc3206a9e2
Merge pull request #202909 from symphorien/ipp-usb 2022-12-06 22:36:30 +01:00
Sandro Jäckel 714cd4a0a5
nixos/no-x-libs: add qrencode 2022-12-06 22:01:30 +01:00
laalsaas cbf4a44852 blesh: init module 2022-12-06 21:40:23 +01:00
Guillaume Girol 8e7a32d061 nixos/ipp-usb: add module 2022-12-06 21:06:54 +01:00
zowoq 1ec69621ef nixos/nix-fallback-paths: 2.11.1 -> 2.12.0 2022-12-07 04:42:28 +10:00
Luke Granger-Brown 5faeb3ba2d factorio: fix review comments 2022-12-06 18:29:54 +00:00
Wael Nasreddine 69dff6a36c
Merge pull request #144455 from Twingate/master 2022-12-06 09:33:20 -08:00
Bobby Rong 42748ee18f
cinnamon.mint-artwork: 1.7.2 -> 1.7.3
This changes the greeter theme to Mint-Y-Aqua.
2022-12-06 23:53:47 +08:00
Maximilian Bosch fa257ecb33
nixos/kernel: link manual (with backport policies) from boot.kernelPackages
Yes I know it's dirty to link the rendered HTML, but linking
`#sec-kernel-config` breaks the manual build for me with the following
error:

    element link: validity error : IDREF attribute linkend references an unknown ID "sec-kernel-config"

This is something that should probably be fixed, but for the current
change I'd argue that this is good enough (in fact even the
`nix.settings`-option uses that hack).
2022-12-06 14:38:16 +01:00
Robert Hensing 5775cfa4b8 nixos/cassandra: Prepare for cassandra 4
Its scripts disagree a bit with our flexible
logging approach and our default logging config.
Might want to revisit this at some point.

The `mkdir` failures in the log are harmless.
2022-12-06 14:09:38 +01:00
Robert Hensing 90b1c9fa10 nixos/cassandra: Refactor: extract version variables 2022-12-06 14:09:38 +01:00
github-actions[bot] 0ac4c6779e
Merge master into staging-next 2022-12-06 00:02:32 +00:00
Naïm Favier a6dd75809d
Merge pull request #204178 from ncfavier/iso-filter-nixpkgs 2022-12-05 19:00:03 +01:00
Maximilian Bosch 7f684f3160
Merge pull request #204618 from rapenne-s/openFirewall_off_2
make openFirewall options to false for NixOS services
2022-12-05 18:13:39 +01:00
Naïm Favier 98a5ae3e5d
Merge pull request #202956 from arcnmx/systemd-networkd-wait-online 2022-12-05 17:53:26 +01:00
Maximilian Bosch 38c786c6ef
Merge pull request #204269 from mayflower/fix-mailman-nginx
nixos/mailman: remove trailing slash from `/static` location
2022-12-05 16:48:57 +01:00
Solene Rapenne 372a2d2111 nixos/unifi-video: openFirewall default to false 2022-12-05 12:03:09 +01:00
Solene Rapenne 659803e879 nixos/tmate-ssh-server: openFirewall default to false 2022-12-05 12:03:09 +01:00
Solene Rapenne efeb1e50d9 nixos/avahi-daemon: openFirewall default to false 2022-12-05 12:03:09 +01:00
Solene Rapenne 535c434fa8 nixos/snapserver: openFirewall default to false 2022-12-05 12:03:02 +01:00
github-actions[bot] d267d26578
Merge master into staging-next 2022-12-05 06:01:36 +00:00
Jacob Greenleaf 0111e9547e nixos/borgbackup: Add option for inhibiting sleep
Adds a new option for backup jobs `inhibitsSleep` which prevents
the system from going to sleep while a backup is in progress.
Uses `systemd-inhibit`, which holds a "lock" that prevents the
system from sleeping while the process it invokes is running.

This did require wrapping the existing backup script using
`writeShellScript` so that it could be run by `systemd-inhibit`.
2022-12-04 19:57:41 -08:00
Sandro Jäckel f2bd1b839c
nixos/no-x-libs: add pinentry 2022-12-05 02:42:50 +01:00
Sandro Jäckel de66678a60
nixos/no-x-libs: add zbar 2022-12-05 02:07:00 +01:00
Sandro Jäckel d0ffce42bb
nixos/no-x-libs: add imagemagick/imagemagickBig 2022-12-05 02:07:00 +01:00
Jack Cummings 75f2f8e753 passthrough config if there are no secrets defined 2022-12-04 16:37:51 -08:00
Robert Kovacsics 2c00429560 nixos/dnsmasq: Use attrs instead of plain text config
This should make it easier to configure in multiple places, override
defaults, etc.
2022-12-04 23:08:37 +00:00
squalus ef90ce7093 nixos/grafana: add Admin to valid auto_assign_org_role values 2022-12-04 13:10:19 -08:00
Martin Weinelt fe8eef1ae4 Merge remote-tracking branch 'origin/master' into staging-next 2022-12-04 22:06:42 +01:00
Mario Rodas 4eebb34855
Merge pull request #204297 from bjornfor/nixos-fix-lxd-init
nixos/lxd: add missing util-linux to $PATH
2022-12-04 15:02:59 -05:00
Vincent Haupert dbff3c22c1 nixos/aesmd: add option environment 2022-12-04 20:12:50 +01:00
Andreas Stührk da0dc8339c nixos/aesmd: add option to configure quote provider library
Changes sgx-psw to append `aesm` to `LD_LIBRARY_PATH`:
- Append instead of prepend to allow for overriding in service config
- As we already add a wrapper to add `aesm` to `LD_LIBRARY_PATH` it is
  not necessary to also set in `LD_LIBRARY_PATH` of the systemd service.

Co-authored-by: Vincent Haupert <mail@vincent-haupert.de>
2022-12-04 20:12:50 +01:00
Naïm Favier 170a98ba73
Merge pull request #167871 from asymmetric/doc-networkd 2022-12-04 16:24:02 +01:00
Lorenzo Manacorda 2ae17515e0 nixos/networkd: doc activation of systemd.networkd 2022-12-04 16:18:48 +01:00
Ryan Lahfa e1185ea096
Merge pull request #197382 from phaer/patch-4
initrd-ssh: allow empty hostKeys
2022-12-04 15:34:43 +01:00
Anderson Torres 3ec5fa600e
Merge pull request #201033 from linsui/firefox
nixos/firefox: add more options
2022-12-04 11:32:17 -03:00
Naïm Favier f9743988ad
linuxPackages.hyperv-daemons: add path conditions for kvp and vss 2022-12-04 15:25:26 +01:00
Naïm Favier 364d3609cd
nixos/installer/cd-dvd: use filtered nixpkgs source
Pin the `nixpkgs` registry entry to the *filtered* nixpkgs source to
avoid copying the entire `.git` directory to the ISO when building
from a local checkout.

Also set `to` directly instead of the `flake.outPath` hack.
2022-12-04 14:54:18 +01:00
Giulio De Pasquale 34ddff29a4
libreddit: Add package option 2022-12-04 14:00:17 +01:00
Anderson Torres b793d48515
Merge pull request #204352 from laalsaas/skim
skim: refactor and init module
2022-12-04 07:51:43 -03:00
Sandro e38618a657
Merge pull request #203825 from SuperSandro2000/mastodon-tootctl
Closes https://github.com/NixOS/nixpkgs/issues/199029
2022-12-04 11:29:45 +01:00
Sandro 9622693a4b
nixos/bluetooth: remove bluezFull alias from examples 2022-12-04 09:58:49 +01:00
Alexandre Acebedo 0905acf069 nixos/rog-control-center: init 2022-12-04 10:11:27 +03:00
Alexandre Acebedo 8f7537e34f nixos/asusctl: init 2022-12-04 10:11:27 +03:00
Alexandre Acebedo 8f14c05c50 nixos/supergfxctl: init 2022-12-04 10:11:27 +03:00
Bobby Rong 71fe9c0596
Merge pull request #204225 from bobby285271/cinnamon
Cinnamon updates 2022-12-02
2022-12-04 12:02:36 +08:00
Bobby Rong 35763bc43b
cinnamon.mint-artwork: 1.7.0 -> 1.7.2
Now sets cursor theme and size.
2022-12-04 11:20:51 +08:00
Bobby Rong 1b6468cfb4
nixos/lightdm-greeters/slick: Add options for cursor themes
These options are newly added in 1.6.0.
2022-12-04 11:20:51 +08:00
Sandro 9467d17255
Merge pull request #204316 from nagy/nixos/fzf-refactor 2022-12-04 01:55:13 +01:00
laalsaas a78621f9b0 skim: init module 2022-12-03 23:15:09 +01:00
Martin Weinelt f069b36483
Merge pull request #204331 from mweinelt/zigbee2mqtt-1.28.4 2022-12-03 22:27:44 +01:00
Luke Granger-Brown c7918fed9e nixos/prometheus/unifi-poller: rename to unpoller. 2022-12-03 20:12:54 +00:00
Luke Granger-Brown ffcd97b521 nixos/unifi-poller: rename to unpoller. 2022-12-03 20:12:54 +00:00
Daniel Nagy 3126eb7621
nixos/fzf: refactor two options 2022-12-03 20:00:00 +01:00
Martin Weinelt 5d685e0eed nixos/zigbee2mqtt: Update syscall filter
The tests would fail after migrating to `buildNpmPackage`, likely
because we are now using nodejs 18.

> audit: type=1326 audit(1670092271.655:102): auid=4294967295 uid=317 gid=317 ses=4294967295 subj=kernel pid=995 comm="node" exe="/nix/store/dj805sw07vvpbxx39c8g67x8qddg0ikw-nodejs-18.12.1/bin/node" sig=31 arch=c000003e syscall=330 compat=0 ip=0x7ff8b655f37b code=0x8000000
2022-12-03 19:57:50 +01:00
github-actions[bot] e1399a2156
Merge master into staging-next 2022-12-03 18:01:02 +00:00
Maximilian Bosch d85c685320
Merge pull request #201380 from Ma27/installer/vim-with-nix-support
nixos/profiles/base: install vim w/nix-syntax plugin
2022-12-03 16:20:08 +01:00
Maximilian Bosch 0b5a0cbc69
nixos/profiles/base: install vim w/nix-syntax plugin
Considering that you most likely edit Nix code in the installer, that
seems like a useful thing.

The size of the ISO I got from

    nix-build nixos/release.nix -A iso_minimal.x86_64-linux

is still at 877M.
2022-12-03 16:05:01 +01:00
Bjørn Forsman c3cfa83884 nixos/lxd: add missing util-linux to $PATH
This fixes `lxd init`, which previously failed like this:

  $ yes "" | lxd init
  [...]
  Error: Failed to create storage pool "default": Failed to run: losetup --find --nooverlap --direct-io=on --show /var/lib/lxd/disks/default.img: exec: "losetup": executable file not found in $PATH
2022-12-03 16:01:05 +01:00
phaer 3c1906b202 initrd-ssh: add ignoreEmptyHostKeys option 2022-12-03 15:10:43 +01:00
Maximilian Bosch 367897a68b
nixos/mailman: remove trailing slash from /static location
Otherwise HTTP routes such as `/static/django-mailman3/css/main.css`
will cause a 404.
2022-12-03 13:03:26 +01:00
SamLukeYes ad35d94ecc xonsh: migrate to /etc/xonsh/xonshrc 2022-12-03 17:42:47 +08:00
Raphael Robatsch 9f874dd95e nixos/tests/initrd-network-openvpn: fix
- The default cipher is BF-CBC, which openvpn refuses to use by default.
  Switched to AES-256-CBC.
- openvpn does not require an external "ip" executable anymore, and does
  not support the "ipconfig" option by default, so remove that option.
2022-12-03 10:32:38 +01:00
github-actions[bot] 7ec4183673
Merge master into staging-next 2022-12-03 06:01:28 +00:00
arcnmx 51b5602b45 nixos/networkd: add wait-online.enable option
When no interfaces are managed by systemd-networkd, it will
unconditionally fail. This option allows it to be disabled in those
situations where it prevents system switches from succeeding.
2022-12-02 19:00:31 -08:00
laalsaas 257a832e61 fzf: init module 2022-12-03 03:14:21 +01:00
Sandro Jäckel 6e845a8491
nixos/mastodon: replace mastodon-env with a proper wrapper mastodon-tootctl 2022-12-03 02:59:39 +01:00
Sandro 068e7cb340
Merge pull request #201817 from jhh/nut-exporter 2022-12-03 02:22:48 +01:00
github-actions[bot] a83c4dd193
Merge master into staging-next 2022-12-03 00:02:19 +00:00
Artturin a34d7b67fd nixos/top-level.nix: add forbiddenDependenciesRegex option
useful for making sure that there's no dev outputs in the system
2022-12-02 21:15:24 +02:00
Robert Hensing 7bfbf037d7 Merge remote-tracking branch 'upstream/master' into allow-configuration-of-roles 2022-12-02 18:12:14 +00:00
Jasper Woudenberg bc3b07cb93 resilio: Add jwoudenberg as extra maintainer 2022-12-02 12:08:33 -06:00
Jasper Woudenberg c8f9d170d4 nixos/resilio: support secret files
When using the declarative shared folder configuration for resilio sync
it is now possible to pass a path from which to read the secret should
be read at runtime. The path will not be added to the nix store.

The 'secret' parameter to specify the secret directly is still
supported. This option will still store the secret in the nix store.

This commit follows the pattern described in this issue, for upstream
programs that do not provide support for setting a password using a
file: https://github.com/NixOS/nixpkgs/issues/24288
2022-12-02 12:08:33 -06:00
github-actions[bot] fcd7475a32
Merge master into staging-next 2022-12-02 18:01:15 +00:00
Valentin Gagarin 260de5901e
Merge pull request #204103 from ncfavier/doc-mkOrder
nixos/doc: document `mkOrder` and friends
2022-12-02 17:19:40 +01:00
Artturi dadca5c5e1
Merge pull request #140890 from seb314/wireguard/dyndns-restart-on-failure
wireguard: non-invasive fix for permanent disconnects on unstable network (e.g. laptops) from dyndns endpoints
2022-12-02 17:47:47 +02:00
Naïm Favier 2f7f695dd7
Merge pull request #204001 from nagy/port-types 2022-12-02 14:52:35 +01:00
Naïm Favier e8927c46b8
nixos/doc: document mkOrder and friends
Add a section on ordering option definitions.

Also mention `mkDefault` in the section on `mkOverride`.

Clarify the code a bit by renaming `defaultPriority` to
`defaultOverridePriority` and introducing `defaultOrderPriority`.
2022-12-02 14:15:24 +01:00
github-actions[bot] f2b70bba3e
Merge master into staging-next 2022-12-02 00:02:32 +00:00
Martin Weinelt 2755aba128
Merge pull request #204014 from AmineChikhaoui/rel22.11-ec2-amis 2022-12-02 00:03:29 +01:00
arcnmx 0e89c822af nixos/binfmt: mkDefault auto-detected interpreter 2022-12-01 14:57:59 -08:00
arcnmx 873074ac60 nixos/binfmt: add interpreter path to sandbox 2022-12-01 14:57:59 -08:00
AmineChikhaoui 2c90cb9304
ec2-amis: add release 22.11 2022-12-01 17:21:34 -05:00
Daniel Nagy dbe8182e74
treewide: switch to port type for nixos modules 2022-12-01 22:30:00 +01:00
Ryan Lahfa d13437b014
Merge pull request #201052 from Stunkymonkey/octoprint-firewall
nixos/octoprint: add openFirewall option
2022-12-01 21:35:40 +01:00
Ryan Lahfa 5d87a1b9b8
Merge pull request #195735 from hax404/tayga_init
nixos/tayga: init
2022-12-01 21:14:50 +01:00
Bernardo Meurer 831b9b4c36
Merge pull request #203818 from qowoz/nix 2022-12-01 15:01:50 -05:00
github-actions[bot] 237453e7f7
Merge master into staging-next 2022-12-01 18:01:25 +00:00
Felix Buehler 6de9ec5969 nixos/octoprint: add openFirewall option 2022-12-01 17:38:08 +01:00
Ryan Lahfa 40b71c3e93
nixos/redmine: add missing lib.mdDoc (#203952) 2022-12-01 17:37:16 +01:00
figsoda 5195ca2346
Merge pull request #203826 from figsoda/lint
nixos/*: apply some lints from statix and nil
2022-12-01 11:20:11 -05:00
Ryan Lahfa 9f6a1541c7
Merge pull request #198592 from winterqt/remove-dispatchsrht
sourcehut.dispatchsrht: remove
2022-12-01 16:18:07 +01:00
Ryan Lahfa ec545378b5
Merge pull request #98633 from DavHau/patch-1
profiles: add HP Smart Array RAID scsi driver to all-hardware.nix
2022-12-01 16:07:29 +01:00
Ryan Lahfa bc7c15825b
Merge pull request #117371 from grahamc/sysctl-hostname
network-interfaces: set hostname from sysctl if defined
2022-12-01 16:03:04 +01:00
Ryan Lahfa 2ae5aa0bd6
Merge pull request #118036 from jluttine/add-jupyter-kernel-env
nixos/jupyter: add env kernel option
2022-12-01 16:02:16 +01:00
Ryan Lahfa 94ac413379
Merge pull request #140840 from erdnaxe/isso_hardening
nixos/isso: systemd unit hardening
2022-12-01 15:52:54 +01:00
Ryan Lahfa 78ef5b8663
Merge pull request #171930 from felixsinger/module/redmine/add-component-configs
nixos/redmine: Rework module
2022-12-01 15:35:08 +01:00
Ryan Lahfa a8a68c3427
Merge pull request #189935 from baloo/baloo/qemu-vm/fixup-efi-partitions
qemu-vm: ensure we do not overwrite the partition table when EFI is in use
2022-12-01 15:16:23 +01:00
Ryan Lahfa cc11eea79d
Merge pull request #195671 from amarshall/rename-readonlystore
nixos: nix.readOnlyStore -> boot.readOnlyNixStore
2022-12-01 15:06:23 +01:00
Ryan Lahfa 39f399f6ff
Merge pull request #199395 from owm111/physlock-m
nixos/physlock: add muteKernelMessages option
2022-12-01 14:51:50 +01:00
Ryan Lahfa da5ef17a96
Merge pull request #199520 from bjornfor/nixos-hardware-sane-open-firewal
nixos/sane: add openFirewall option
2022-12-01 14:50:11 +01:00
Ryan Lahfa cd08eded16
Merge pull request #202077 from Mic92/mandb-cross
nixos/mandb: fix cross compiling
2022-12-01 14:37:02 +01:00
Ryan Lahfa 1c5443f6cd
Merge pull request #203183 from teutat3s/fix/gitea-needs-gpg-in-path
gitea: needs gnupg in its path to sign commits
2022-12-01 14:29:34 +01:00
Ryan Lahfa e1c7bf6657
Merge pull request #203723 from rvolosatovs/fix/amd-sev
module-list: include AMD SEV module
2022-12-01 14:22:16 +01:00
Alex Zero 16b7892876
nixos/tayga: init 2022-12-01 11:17:20 +01:00
Mike Placentra 518ef4d8d8 nixos/roon-server: persist installation ID to avoid re-login
Set environment variable ROON_ID_DIR to the same value as ROON_DATA_DIR
so that it knows it's the same installation after a restart.
Otherwise, each time the server process restarts, the user will need
to log in, and configure any server-local audio devices, again.

This environment variable was found in Roon's "easy installer" script:
https://help.roonlabs.com/portal/en/kb/articles/linux-install#The_Easy_Installer_Recommended
2022-12-01 01:05:39 -05:00
Andrew Marshall c88944f025 nixos: nix.readOnlyStore -> boot.readOnlyNixStore
The placement of this option under `nix` was misleading, as it is not
configuration of the Nix daemon, but rather configuration of the NixOS
boot process and how it mounts the Nix store. As such, make it an option
of `boot` to clarify what it actually affects, and imply that it will
only take effect on a reboot.

Since it no longer has the context of nix, adjust the name to include
it.
2022-11-30 22:57:08 -05:00