Commit graph

5677 commits

Author SHA1 Message Date
Pablo Ovelleiro Corral 796556ce8d Add release notes 2025-03-23 12:51:58 +01:00
Acid Bong 67e9d0ab57
nixos/release-notes: point nixos-rebuild build-image to the right manual (#392306) 2025-03-23 14:45:35 +05:30
nixpkgs-ci[bot] 529326e679
Merge staging-next into staging 2025-03-21 12:06:31 +00:00
nixpkgs-ci[bot] 8fa05d5ca4
Merge master into staging-next 2025-03-21 12:05:59 +00:00
Arian van Putten b684e9c6d6
fluent-bit: link against Nix dependencies, fix Darwin builds, and add NixOS module (#365493) 2025-03-21 11:39:18 +00:00
Robert Rose cd10f9a874 nixos/keycloak: add realmFiles option
Add an option to import Keycloak realms during
startup from exported realm files.
2025-03-20 12:07:38 +01:00
K900 85b2817da5 Merge remote-tracking branch 'origin/staging-next' into staging 2025-03-20 13:14:18 +03:00
K900 6a900ee562 Merge remote-tracking branch 'origin/master' into staging-next 2025-03-20 09:08:18 +03:00
Jeremy Fleischman 9c02a1e422
services/cloudflare-dyndns: require that apiTokenFile be an api token
Previously, this option was supposed to be a file of the form
`CLOUDFLARE_API_TOKEN=...`, which has a few problems:

- That's not an api token. It's an env file fit for passing to systemd's
  `EnvironmentFile` option. The user could typo the variable name, or
  intentionally/unintentionally include unrelated environment variables.
- It's not how secret files usually work in NixOS. Secret files are
  usually just the secret, and don't leak details about how the secret
  is passed to the service.
- This increases friction for people switching between cloudflare dyndns
  services, such as `services.cloudflare-dyndns` and
  `services.cfdyndns`, which both have a `apiToken` option, but (before
  this change) with different semantics.
2025-03-19 18:19:29 -05:00
commiterate 3366b27e59 fluent-bit: link against Nix dependencies, fix Darwin builds, and add NixOS module 2025-03-19 18:48:46 -04:00
nixpkgs-ci[bot] 3a7baab73a
Merge staging-next into staging 2025-03-19 18:05:59 +00:00
nixpkgs-ci[bot] 9a9855f387
Merge master into staging-next 2025-03-19 18:05:30 +00:00
Adam C. Stephens 476618066b
nixos/firezone: init module and packages (#374647) 2025-03-19 13:50:47 -04:00
nixpkgs-ci[bot] e8240407b0
Merge staging-next into staging 2025-03-18 18:05:35 +00:00
nixpkgs-ci[bot] 0bb96173bd
Merge master into staging-next 2025-03-18 18:05:06 +00:00
Nicolas Mémeint 7407020674 authelia: 4.38.19 -> 4.39.1 2025-03-18 18:23:43 +01:00
charludo 3e3b774732
nixos/pinchflat: init 2025-03-18 12:24:01 +01:00
Neyts Zupan 75773b77be paretosecurity: init at 0.0.86, nixos/paretosecurity: init 2025-03-18 11:09:14 +00:00
oddlama 6c888f4911
nixos/firezone: init modules 2025-03-17 20:21:00 +01:00
nixpkgs-ci[bot] dcc32e006f
Merge staging-next into staging 2025-03-17 18:05:40 +00:00
nixpkgs-ci[bot] f2e2b1814d
Merge master into staging-next 2025-03-17 18:05:11 +00:00
Sandro b96c9e3a68
gokapi: init at 1.9.6 (#372911) 2025-03-17 16:12:38 +01:00
nixpkgs-ci[bot] 75c8678243
Merge staging-next into staging 2025-03-17 00:16:57 +00:00
nixpkgs-ci[bot] 4761072df5
Merge master into staging-next 2025-03-17 00:16:22 +00:00
Arne Keller a7125fb4f6
confluent-cli: 3.60.0 -> 4.16.0 (#376796) 2025-03-16 23:11:31 +01:00
Pol Dellaiera c8a823d40b nixos/litellm: init 2025-03-16 20:49:22 +01:00
Pol Dellaiera 79e95661a6
orthanc: init at 1.12.6, nixos/orthanc: init (#385329) 2025-03-16 20:47:37 +01:00
Cryolitia PukNgae c33e419dd1
nixos/xpad-noone: init 2025-03-17 03:44:58 +08:00
nixpkgs-ci[bot] 76fed55d6a
Merge staging-next into staging 2025-03-16 18:04:41 +00:00
nixpkgs-ci[bot] dbe56e9776
Merge master into staging-next 2025-03-16 18:04:12 +00:00
Arne Keller d7a2a10a40
graylog-5_1: remove (#358780) 2025-03-16 15:45:23 +01:00
Darragh Elliott 46666bba62 gokapi: add module, test, release docs
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2025-03-16 14:41:28 +00:00
Philip Taron f4dd3ba6e0
systemd: make systemd-ssh-generator work (#372979) 2025-03-15 21:59:59 -07:00
Pol Dellaiera 933f835219 nixos/orthanc: init 2025-03-15 22:45:44 +01:00
Marie Ramlow a0962df902 doc/rl-2505: document systemd-ssh-generator changes 2025-03-15 20:15:44 +01:00
nixpkgs-ci[bot] 890b967419
Merge master into staging-next 2025-03-15 12:05:14 +00:00
Marcus Ramberg d07ebbab9b
nixos/k3s: add autoDeployCharts option and use systemd-tmpfiles for content activation (#374017) 2025-03-15 11:26:43 +01:00
nixpkgs-ci[bot] e24f567a68
Merge master into staging-next 2025-03-15 09:53:30 +00:00
Benjamin Sparks f752f7d5d2 nixos/release-notes: uswgi does not support Python 2 plugins 2025-03-15 00:26:02 +01:00
K900 7d36ee97e6 Merge remote-tracking branch 'origin/master' into staging-next 2025-03-14 09:56:27 +03:00
Lin Jian 2a66b0320c
doc/rl-2505: mention Emacs bump and removal (#386596) 2025-03-13 21:10:43 +08:00
Lin Jian d86f1165e2
Reapply "emacs: enable __structuredAttrs by default in elisp build he… (#389276) 2025-03-13 20:59:06 +08:00
Gaétan Lepage 9e889113ef
bundler: 2.5.22 -> 2.6.2 (#377415) 2025-03-13 10:35:46 +01:00
GiggleSquid 461be7d8c8
nixos/searx: add configuration for favicons settings
see searxng docs: https://docs.searxng.org/admin/searx.favicons.html
2025-03-13 03:58:21 +00:00
Felix Singer dae9d1fa3a libjaylink: Grant read-write access to members of jlink group
It's unusual to use the plugdev group in NixOS. So instead, give access
to users in the jlink group. It does not conflict with the uaccess tag,
which grants access to seat sessions.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-03-12 18:42:28 +01:00
Michele Guerini Rocco 432ceba835
Re-add xf86videointel driver (#388224) 2025-03-12 16:40:33 +01:00
Sandro Jäckel 1eecf7cc06
haka: remove 2025-03-12 16:04:54 +01:00
rnhmjoj c8d0a944f5
nixos/release-notes: mention new startx options 2025-03-12 13:48:58 +01:00
Lin Jian 3ee5cb7266
Reapply "emacs: enable __structuredAttrs by default in elisp build helpers"
This reverts commit e9dab0cc20.

The fix[1] has been merged into staging, so we can enable
__structuredAttrs again.

[1]: https://github.com/NixOS/nixpkgs/pull/388908
2025-03-12 14:22:40 +08:00
Pol Dellaiera c39e50acb0
nixos/limine: init module (#386368) 2025-03-11 14:09:50 +01:00
Pol Dellaiera 095c5ad313
dovecot: remove hard coding path to module dir (#387642) 2025-03-11 10:26:13 +01:00
Lin Jian e9dab0cc20
Revert "emacs: enable __structuredAttrs by default in elisp build helpers"
This reverts commit d64a233e4c.

A stdenv bug breaks emacs.pkgs.withPackages wrapper.  A fix PR[1] will
take a few weeks to reach users because it has to go through a staging
cycle.  Revert this for now to unbreak emacs.pkgs.withPackages
wrapper.

[1]: https://github.com/NixOS/nixpkgs/pull/388908
2025-03-11 15:49:24 +08:00
Izorkin 6f9f983368 dovecot: remove option modules 2025-03-11 10:17:21 +03:00
Austin Horstman 4ee0b8e348
isd: 0.2.0 -> 0.5.1 (#388396) 2025-03-10 12:13:30 -05:00
Gutyina Gergő d767edac8e
isd: 0.2.0 -> 0.5.1 2025-03-10 17:36:13 +01:00
Gaétan Lepage ff2d12d11d
nixos/cloudflared: add option for cert.pem and use dynamic user (#383499) 2025-03-10 11:15:06 +01:00
fleaz 676efd089b rl-2411: Add note about intel-compute-runtime package 2025-03-10 01:49:59 +05:30
Franz Pletz 7978d240c2
nixos/iosched: exclude loop devices by default; mention in release notes (#385106) 2025-03-09 09:38:05 +01:00
Mikael Voss 901b87f8fd
nixos/doc/rl-2411: mention iosched module 2025-03-09 02:27:34 +01:00
Leona Maroni 810f3b88e4
nixos/synapse-auto-compressor: init (#383168) 2025-03-08 16:55:06 +01:00
Tim Keller 2762812d2c nixos/doc/release-notes: mention xf86videointel has been fixed 2025-03-08 08:30:29 -06:00
Lin Jian 23e610d63f
emacs: support and enable __structuredAttrs in elisp build helpers (#387193) 2025-03-08 17:09:46 +08:00
Aleksana f2ef5d1a9e
tauon: doc fixes (#387077) 2025-03-08 16:48:18 +08:00
shelvacu 1a4575f9db
nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244)
Previously some modules used `config.environment.etc."ssl/certs/ca-certificates.crt".source`, some used `"/etc/ssl/certs/ca-certificates.crt"`, and some used `"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"`. These were all bad in one way or another:

- `config.environment.etc."ssl/certs/ca-certificates.crt".source` relies on `source` being set; if `text` is set instead this breaks, introducing a weird undocumented requirement
- `"/etc/ssl/certs/ca-certificates.crt"` is probably okay but very un-nix. It's a magic string, and the path doesn't change when the file changes (and so you can't trigger service reloads, for example, when the contents change in a new system activation)
- `"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"` silently doesn't include the options from `security.pki`

Co-authored-by: Shelvacu <git@shelvacu.com>
2025-03-08 08:41:08 +00:00
Sandro 07c24fffa3
nixos/matrix-alertmanager: init module (#378966) 2025-03-07 19:59:46 +01:00
misuzu f3b9f47891
nixos/umurmur: init (#387580) 2025-03-07 17:46:10 +02:00
Maximilian Bosch 6c4f93e113
Merge: nixos/nextcloud: use LoadCredential to read secrets (#367433) 2025-03-07 10:58:29 +01:00
3JlOy_PYCCKUI 095da00b2d nixos/umurmur: init 2025-03-07 12:07:53 +03:00
Dionysis Grigoropoulos ce90b7889c
nixos/matrix-alertmanager: init module 2025-03-07 00:04:17 +02:00
Izorkin a6a9bb9725 dovecot: remove hard coding path to module dir 2025-03-06 19:47:04 +03:00
programmerlexi 12779dc091
nixos/limine: init module
Co-Authored-By: Gabriel Waksmundzki <czapek1337@gmail.com>
2025-03-06 08:05:08 +01:00
Jeremiah 1e0217b0c5
nixos/soft-serve: restart trigger added (#384829)
Previously changing configuration did not apply to the running service
requiring it to be restarted manually. This fixes that issue.
2025-03-05 12:54:04 -05:00
Sandro 5ca7fffe87
nezha: 0.20.3 -> 1.9.5; nezha-agent: 0.20.5 -> 1.9.2; nixos/nezha-agent: refactor (#361515) 2025-03-05 17:38:42 +01:00
Pedro Alves 4f644e0b31 nixos/cloudflared: add option for cert.pem and use dynamic user
Make the cloudflared tunnel service use systemd credentials and dynamic
users, removing the services.cloudflared.user and .group option.

Also add an option to provide the cert.pem file, without which tunnels
defined declaratively would not work.

Additionally, add an assertion checking that the certificate file is
provided if there are declarative routes defined.
2025-03-05 13:33:04 +00:00
Lin Jian d64a233e4c
emacs: enable __structuredAttrs by default in elisp build helpers 2025-03-05 14:07:47 +08:00
ZHAO Jin-Xiang 6cbe4bd3ad wtfutil: rename wtf to wtfutil 2025-03-05 12:57:57 +08:00
Sandro 4f7fc6dfdf
nixos/glitchtip: init module (#386013) 2025-03-05 01:23:43 +01:00
Defelo 5da710d274
nixos/glitchtip: init module
Co-authored-by: soyouzpanda <soyouzpanda@soyouzpanda.fr>
Co-authored-by: Nico Felbinger <nico@felbinger.eu>
2025-03-05 00:24:50 +01:00
Philip Wilk aa8fe45398
hddfancontrol: 1.5.1->2.0.1 2025-03-04 19:48:06 +00:00
Jan Solanti 8bd9f1d373 tauon: add DB migration warning to release notes 2025-03-04 21:18:51 +02:00
Moraxyc 1df119a49c
nixos/doc/rl-2505: mention Nezha update 2025-03-04 18:08:05 +08:00
xanderio 8bc3ee6396
dependency-track: stop bundling frontend in jar (#386408) 2025-03-04 09:39:44 +01:00
Lin Jian c07efdbb57
doc/rl-2505: mention Emacs bump and removal 2025-03-03 13:18:47 +08:00
Tom McLaughlin 60f9abdbf4 mkBinaryCache: add release notes entry about new zstd compression by default 2025-03-02 15:40:01 -08:00
Alexander Sieg 8af0a5abfd dependency-track: don't bundle frontend in jar
Bundling the frontend in the jar is deprecated by upstream and causes
the frontend from being serve after weeks of runtime.
2025-03-02 16:50:01 +01:00
transcaffeine 0b483037f7
nixos/synapse-auto-compressor: init 2025-03-02 15:59:42 +01:00
Weijia Wang 95779c4cb4
nixos/rippled: move drop notice to nixos release notes (#385928) 2025-03-01 16:38:41 +01:00
Maximilian Bosch 2cf427c045
Merge: nextcloud31: init at 31.0.0 (#385060) 2025-03-01 13:47:45 +01:00
Maximilian Bosch be4fd8fdf2
nixos/nextcloud: update docs
* Update related packages for pkg option.
* Add release notes.
2025-03-01 11:58:54 +01:00
Christoph Heiss af74cbc292
nixos/rippled: move drop notice to nixos release notes
See the accompanying discussion [0] and e.g. the PR at [1].

[0] https://github.com/NixOS/nixpkgs/pull/374568#discussion_r1951562014
[1] https://github.com/NixOS/nixpkgs/pull/371930

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2025-02-28 23:53:29 +01:00
Samuel Dionne-Riel 6ec6eae586
Revert "nixos/grub: generate BLS entries" 2025-02-28 14:30:10 -05:00
dish a94dc905b3
webpack-cli: 5.1.4 -> 6.0.1 2025-02-28 11:32:25 -05:00
Michele Guerini Rocco 6bf084c4ea
nixos/grub: generate BLS entries (#95901) 2025-02-28 15:12:36 +01:00
rnhmjoj 7b71abeaac
nixos/release-notes: mention GRUB boot loader entries 2025-02-28 10:00:01 +01:00
Pol Dellaiera 56e88da108
rebuilderd: init at 0.22.1 (#343334) 2025-02-28 09:14:08 +01:00
Sandro 32d2826f35
nixos/archtika: init at 1.0.1 (#365218) 2025-02-27 23:56:06 +01:00
Sandro d1c535f62a
nixos/user-groups: add a toggle for user account creation (#358646) 2025-02-27 23:47:20 +01:00
Sandro 75f83b13f6
release-notes/25.05: drop extra added new line 2025-02-27 23:36:41 +01:00
Sandro Jäckel 36a3c6c11d
nixos/paperless: move paperless-manage to proper systemPackage 2025-02-27 21:47:35 +01:00
Pol Dellaiera 2c8bdd00fd nixos/rebuilderd: init 2025-02-27 21:18:46 +01:00