Commit Graph

42281 Commits

Author SHA1 Message Date
Artur Faizullin
4e3c5fb713 nixos/opentelemetry-collector: Avoid using a fixed hardcoded path
Follow the boyscout rule.
2024-07-11 08:27:29 +02:00
Artur Faizullin
40013729d3 nixos/opentelemetry-collector: Use SupplementaryGroups to add the dynamic user to systemd-journal group
OpenTelemetry collector's Journald Receiver has not enough permissions
2024-07-11 08:23:20 +02:00
Artur Faizullin
e304e2ee59 nixos/opentelemetry-collector: Accept changes from linter
Follow the boyscout rule.
2024-07-11 08:19:48 +02:00
jopejoe1
5f56edf0b9 nixos/vim: add enable option and link /share/vim-plugins only when vim is enabled 2024-07-11 08:08:12 +02:00
Aleksana
733998ee32
Merge pull request #326160 from jopejoe1/nano-link
nixos/nano: only link `/share/nano` when nano is enabled
2024-07-11 12:09:01 +08:00
Masum Reza
341ef0e80b
Merge pull request #321142 from treyfortmuller/tff/cloudflare-warp-module
nixos/cloudflare-warp: init module
2024-07-11 09:28:09 +05:30
Peder Bergebakken Sundt
0271af555b
Merge pull request #309213 from jmbaur/homed-nixos-test
nixos/homed: fix test
2024-07-11 01:41:30 +02:00
Peder Bergebakken Sundt
26b1af9155
Merge pull request #318543 from TomaSajt/terraria-kill-service
nixos/terraria: kill session when stopping without world selected
2024-07-11 01:38:35 +02:00
Aaron Andersen
6c4182b0c2
Merge pull request #325957 from mibmo/module/clamav/package-option
nixos/clamav: add package option
2024-07-10 17:18:41 -04:00
Wroclaw
d77469c442 nixos/tests/installer: add testByAttrSwitch 2024-07-10 20:59:41 +02:00
Wroclaw
c7b66353bf nixos/tests/installer: rename "flake" argument in makeConfig and reverse meaning
to "withTestInstrumentation", which reflects what this argument does
2024-07-10 20:59:41 +02:00
jopejoe1
a9007d0831 nixos/nano: only link /share/nano when nano is enabled 2024-07-10 20:29:50 +02:00
Trey Fortmuller
7b32ea9abb
nixos/cloudflare-warp: init
Co-authored-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
removed `with lib;` at the top level
cleanup
2024-07-10 22:48:57 +05:30
Peder Bergebakken Sundt
447ca95585
Merge pull request #320277 from Yarny0/tsm-client-update
tsm-client: update and migrate to by-name and finalAttrs
2024-07-10 19:00:24 +02:00
Gavin John
e3e16de910 nixos/envision: Add udev rules 2024-07-10 10:53:02 -04:00
Sandro
96b59d07fb
Merge pull request #308779 from SuperSandro2000/shells-environment-followup 2024-07-10 16:48:15 +02:00
ocfox
f0e2e1d83e
nixos/realm: add release note 2024-07-10 16:43:18 +02:00
ocfox
76b5481df7
nixosTests.realm: init 2024-07-10 16:43:17 +02:00
ocfox
86ce0733d2
nixos/realm: init
Co-authored-by: Nick Cao <nickcao@nichi.co>
Co-authored-by: oluceps <i@oluceps.uk>
2024-07-10 16:43:17 +02:00
Robert Schütz
626ecc4e32
Merge pull request #325711 from wahjava/update-vaultwarden
vaultwarden: 1.30.5 -> 1.31.0
2024-07-10 07:21:26 -07:00
Ashish SHUKLA
4d8ce0754f
vaultwarden: 1.30.5 -> 1.31.0 2024-07-10 14:46:37 +02:00
WilliButz
0864b38144
nixos/repart-image: fix amend script
Calling ruff directly on files was deprecated in favor of
`ruff check`. Since #322953 usage without the subcommand is no longer
possible.
2024-07-10 11:40:40 +02:00
Masum Reza
025f6d60e3
Merge pull request #326047 from britter/britter/onlyoffice-typos
onlyoffice: typo fixes, remove top level `with lib;`
2024-07-10 15:01:05 +05:30
Benedikt Ritter
57ea5be929
onlyoffice: Remove top-level with lib;
Prepend affected components with `lib.` instead.
2024-07-10 10:42:29 +02:00
lassulus
11dbf85aad
Merge pull request #325637 from Stunkymonkey/jtisi-meet-chmod-chown
nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown'
2024-07-10 09:57:18 +02:00
Benedikt Ritter
d61489db1a
onlyoffice: Fix typos 2024-07-10 09:14:21 +02:00
Doron Behar
238d267aef doc: mention yarn hooks in release notes 2024-07-10 09:39:48 +03:00
Martin Joerg
a85c314882 nixos/magic-wormhole-mailbox-server: use Python 3.11, adopt
magic-wormhole-mailbox-server is not yet supported with Python 3.12.
https://github.com/magic-wormhole/magic-wormhole-mailbox-server/issues/41
2024-07-09 22:22:56 +00:00
Martin Joerg
12de9a7469 nixos/magic-wormhole-mailbox-server: nixfmt 2024-07-09 22:22:56 +00:00
Gavin John
e922115dfd nixos/doc/rl-2411: Document nixos/qgroundcontrol 2024-07-09 18:19:19 -04:00
Gavin John
b480a4b396 qgroundcontrol: Add pandapip1 as maintainer 2024-07-09 18:19:18 -04:00
Gavin John
36a1b0dc58 nixos/qgroundcontrol: init module 2024-07-09 18:19:18 -04:00
mib
8eac966310 nixos/clamav: add package option 2024-07-10 00:00:01 +02:00
Tom Butler
e7e8ad1e35
nixos: Set home directory parent tree permissions to 0755
When the user's home directory is created using `createHome` e.g.

```
users.users.alice = {
    home = "/users/alice";
    createHome = true;
};
```

The `/users` directory was created with the same permissions as `/users/alice`, `0700` by default.

The parent directory `/users` permissions results in `createHome` creating a home directory that is inaccessible to the user:

```
$ su alice
$ cd /user/alice
cd: permission denied: /users/alice
```

The underlying cause is `make_path($u->{home}, { mode => oct($u->{homeMode}) })` which sets, in the example above`, `/users` to `0700`. Instead it should be `0755` like other system directories `/var`, `/dev`, etc.
2024-07-09 23:09:09 +02:00
Jean-François Roche
c08c79536c nixVersions.nix_2_18: 2.18.4 -> 2.18.5
Fix sandbox on macos.

More details here: https://github.com/NixOS/nix/compare/2.18.4...2.18.5
2024-07-09 21:56:09 +02:00
Franz Pletz
c7ee75329f
Merge pull request #325247 from OPNA2608/fix/lomiri/revert-glib-workarounds
lomiri.*: Revert GLib workarounds
2024-07-09 17:51:49 +02:00
Franz Pletz
f1d54d49b9
Merge pull request #325459 from numinit/nebula-module-tweaks
nixos/nebula: support non-path host keys
2024-07-09 16:59:35 +02:00
Franz Pletz
b9db8b7c16
Merge pull request #325589 from wskeele/duplicity-include-filelist
nixos/duplicity: Add support for --include-filelist / --exclude-filelist
2024-07-09 16:45:35 +02:00
Franz Pletz
a88ac08475
Merge pull request #325377 from hughobrien/hetzner-virtio_gpu
profiles/qemu_guest: add virtio_gpu to initrd
2024-07-09 15:47:21 +02:00
Franz Pletz
31c99a61da
Merge pull request #325286 from bjornfor/nixos-deconz-fix-service-stop
nixos/deconz: treat SIGTERM exit status as success
2024-07-09 15:07:36 +02:00
Emily Trau
5fbd57aebc
Merge pull request #325738 from Enzime/drop/Enzime
maintainers: remove Enzime
2024-07-09 16:00:59 +10:00
Pol Dellaiera
db41081a91
Merge pull request #323743 from NixOS/nixos/module/glance-init
nixos/glance: init module
2024-07-09 06:42:22 +02:00
Michael Hoang
eb725313bc treewide: remove Enzime 2024-07-09 14:32:33 +10:00
Martin Weinelt
5a82f82cc5
Merge pull request #325594 from mweinelt/firefox-128.0
Firefox: 127.0.2 -> 128.0; 115.12.0esr -> 115.13.0esr; init 128.0esr
2024-07-09 01:38:57 +02:00
Will Fancher
21aed90c1e
Merge pull request #325348 from JulienMalka/remove-uefi-large-file-test
nixos/tests/systemd-boot: remove uefiLargeFileWorkaround test
2024-07-08 18:49:47 -04:00
Felix Buehler
16eb9ced4e nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown' 2024-07-08 22:10:25 +02:00
Pol Dellaiera
ed24a0baf3
Merge pull request #317107 from ibizaman/deluge_exporter_init
prometheus-deluge-exporter: init at 2.4.0-unstable-2024-06-02
2024-07-08 20:09:50 +02:00
Martin Weinelt
6d85f70d35
firefox-esr-128-unwrapped: init at 128.0esr 2024-07-08 19:41:05 +02:00
Sandro
e08b520450
Merge pull request #323469 from OPNA2608/init/lomiri/lomiri-clock-app 2024-07-08 17:47:39 +02:00
wskeele
fff878e7c6 nixos/duplicity: Add support for --include-filelist / --exclude-filelist 2024-07-08 17:02:42 +02:00
OPNA2608
2204726a6d nixos/lomiri: Add clock 2024-07-08 16:02:09 +02:00
OPNA2608
3efabb3359 tests/lomiri-clock-app: init 2024-07-08 16:02:09 +02:00
matthewcroughan
c53e5201f4 nixos/scion: make storing path database optional
Storing the SCION path sqlite databases persistently on disk is a valid
setup that improves performance, but may have outstanding bugs that need
to be investigated, so this makes persisent storage optional, off by
default.
2024-07-08 13:26:30 +02:00
Pol Dellaiera
00e9e54702
nixos/glance: init module 2024-07-08 13:14:09 +02:00
Aleksana
81c768e223
Merge pull request #324757 from sjamaan/remove-key-mgmt-from-wpa-cli-examples
Remove key management setting in wpa_cli examples
2024-07-08 18:13:46 +08:00
Morgan Jones
de5e0cf11b
nixos/nebula: add numinit as maintainer
I maintain the package and coauthored this module, so should be on it.
:-)
2024-07-08 01:06:58 -07:00
Morgan Jones
95f1ebd2aa
nixos/nebula: loosen ProtectSystem
"strict" may be too strict for some PKCS#11 providers.
2024-07-08 01:04:15 -07:00
Morgan Jones
b81827b992
nixos/nebula: allow string or path for keys
Nebula will be getting PKCS#11 support soon, and this will allow
keys to be specified as PKCS#11 URIs instead of paths.
2024-07-08 01:03:40 -07:00
Hugh O'Brien
66b896630d
profiles/qemu_guest: add virtio_gpu to initrd 2024-07-07 19:35:32 -04:00
Sandro
9d33b8d690
Merge pull request #321046 from OPNA2608/init/lomiri/lomiri-calculator-app
lomiri.lomiri-calculator-app: init at 4.0.2
2024-07-08 00:30:19 +02:00
Julien Malka
107fe87209 nixos/tests/systemd-boot: remove uefiLargeFileWorkaround test 2024-07-07 20:44:21 +00:00
Aaron Andersen
aa3e6fadd2
Merge pull request #325133 from jpds/nixos-prometheus-hardening
nixos/prometheus: systemd hardening for alertmanager/pushgateway
2024-07-07 16:22:35 -04:00
Aaron Andersen
b9ada94572
Merge pull request #325062 from matteo-pacini/nzbhydra2
nzbhydra2: 4.7.6 -> 7.2.3, add maintainer
2024-07-07 16:00:06 -04:00
Jörg Thalheim
ef1670eee9
Merge pull request #325291 from Stunkymonkey/bee-umask-chmod
nixos/bee: prefer 'install' over 'chmod'
2024-07-07 21:49:17 +02:00
Julien Malka
6701c2c867
Merge pull request #323421 from Mic92/systemd-boot-builder 2024-07-07 19:36:09 +02:00
Jörg Thalheim
c7411f7d53
Merge pull request #277579 from nikstur/openssh-tests-in-separate-derivation
openssh: put tests into passthru
2024-07-07 19:10:35 +02:00
Matteo Pacini
146fa6b114 nzbhydra2: changed test maintainers
Removed jamiemagee from maintainers.
Added myself as maintainer.
2024-07-07 17:37:56 +01:00
Felix Buehler
72a4f148f9 nixos/bee: prefer 'install' over 'chmod' 2024-07-07 17:47:28 +02:00
Jörg Thalheim
d1b9c95fdf
Merge pull request #325284 from trueNAHO/docs-fix-broken-nix-dev-urls
treewide: fix broken `nix.dev` URLs
2024-07-07 17:41:07 +02:00
Julien Malka
777cdce1de
Merge pull request #325231 from magneticflux-/python312-invalid-escape-seq 2024-07-07 17:23:47 +02:00
NAHO
a7cc1dcd68
treewide: fix broken 'nix.dev' URLs 2024-07-07 17:15:35 +02:00
Sandro
ebd625a22a
Merge pull request #276692 from dani0854/nixos/languagetool/add_jvm_options
nixos/languagetool: add jvm options
2024-07-07 16:41:41 +02:00
Bjørn Forsman
5aab6344c2 nixos/deconz: treat SIGTERM exit status as success
deconz doesn't handle SIGTERM and terminates with code 143 (128 + 15
(SIGTERM) instead of 0. This results in systemd marking the service as
failed when a user stops it (with `systemctl stop deconz`). Fix it by
treating code 143 as success.
2024-07-07 16:11:11 +02:00
Lin Jian
ec44ccbf6b
Merge pull request #325217 from linyinfeng/json-secrets
nixos/utils: support JSON secret files in genJqSecretsReplacementSnippet
2024-07-07 21:46:13 +08:00
Sandro
b2a1b6f508
Merge pull request #324924 from SuperSandro2000/mediawiki-syntaxcheck
nixos/mediawiki: check if LocalConfig.php is valid syntax
2024-07-07 15:17:08 +02:00
Aaron Andersen
a25848c974
Merge pull request #324884 from SuperSandro2000/locate-persist-timer
nixos/locate: persist updatedb timer
2024-07-07 08:28:46 -04:00
Lin Yinfeng
01543e789c
nixos/utils: support JSON secret files in genJqSecretsReplacementSnippet
genJqReplacementSnippet quotes the content of the secret file in the
output json file, which prevents structured secret, such as a list or
an object, from being used.

This commit adds a `quote = true|false` option to the `{ _secret =
"/path/to/secret"; }` attribute set. `quote = true` treats the
content of /path/to/secret as string, while `quote = false` treats
the content of /path/to/secret as a JSON document.

`quote = true` is the default, maintaining backward compatibility.
2024-07-07 19:22:10 +08:00
OPNA2608
c34ee327e6 Revert "lomiri.telephony-service: Mark broken & exclude everywhere"
This reverts commit 3ef60ac499.
2024-07-07 12:58:45 +02:00
Mitchell Skaggs
5e1481ccc7
nixos/systemd-boot: fix invalid escape sequences
This was inadvertently introduced in https://github.com/NixOS/nixpkgs/pull/281639, but was not a loud warning until Python 3.12 made invalid escape sequences a `SyntaxWarning` instead of a `DeprecationWarning` in https://github.com/python/cpython/issues/98401.
2024-07-07 05:37:08 -05:00
Judson Lester
a9c8ff2cee
lorri: 1.6.0 -> 1.7.0 (#322749)
* (lorri): (1.6.0 -> 1.7.0)

1.7.0 supports Flakes

* (lorri) (update tests)

* lorri: 1.6.0 -> 1.7.0

Removing superfluous binding for `gitRev`
2024-07-07 11:16:23 +02:00
Yu Ishii
f210aaf4ca nixos/prometheus-snmp-exporter: add a parameter implicitly
Change to adding `--config.expand-environment-variables` parameter to
`ExecStart` if `environmentFile` option is set.
2024-07-07 16:49:31 +09:00
Yu Ishii
839bbc1700 nixos/prometheus-snmp-exporter: add environmentFile option
Prometheus snmp-exporter has support to pass sensitive data as environment
variables. Since other exporter configurations for NixOS have
environmentFile option, the same option is added to snmp-exporter.
2024-07-07 14:28:37 +09:00
Jonathan Davies
008ea18566
nixos/prometheus: Harden alertmanager/webhook-logger/pushgateway systemd definitions 2024-07-07 00:15:57 +01:00
Jonathan Davies
7ce4fe5463
nixos/prometheus: Log systemd-analyze for alertmanager/webhook-logger/pushgateway 2024-07-07 00:15:42 +01:00
OPNA2608
3a788099cd tests/lomiri: Add polkit agent test 2024-07-06 20:05:07 +02:00
OPNA2608
916ba54f24 nixos/lomiri: Add polkit agent 2024-07-06 20:05:06 +02:00
github-actions[bot]
5a601bc241
Merge master into staging-next 2024-07-06 06:01:20 +00:00
Masum Reza
06eb305992
Merge pull request #321649 from Frontear/update-stevenblack-blocklist
stevenblack-blocklist: rev bump and improvements of module + package
2024-07-06 09:45:35 +05:30
Ali Rizvi
ab98e84e0d
nixos/stevenblack: rework to use distinct package outputs 2024-07-05 23:30:26 -04:00
Sandro Jäckel
313d2ccf83
nixos/mediawiki: check if LocalConfig.php is valid syntax 2024-07-06 02:06:50 +02:00
Martin Weinelt
d9610a9f2e
Merge remote-tracking branch 'origin/master' into staging-next 2024-07-06 01:51:14 +02:00
Charles Hall
142c8ab9a4
nixos/nvidia: enable fbdev when available
In my experience this is required to get Plasma 6 Wayland to work on
my GTX 1080 with the proprietary driver. Otherwise, I get errors in my
`journalctl --user` about "MESA-LOADER: failed to open simpledrm" (among
many other things) and Plasma just presents a black screen with a cursor
and nothing else.

I discovered this by searching the aforementioned error and found
[this Arch Linux forum post][0] and some further clicking around led
me to [this section on the ArchWiki][1], which is where I got the
`versionAtLeast` value from.

Tested with `nvidia-x11-555.58-6.9.7`.

[0]: https://bbs.archlinux.org/viewtopic.php?id=293741
[1]: https://wiki.archlinux.org/title/NVIDIA#DRM_kernel_mode_setting
2024-07-05 16:24:12 -07:00
Maximilian Bosch
a9855af287
Merge pull request #321771 from Mynacol/nextcloud-preserveenv
nixos/nextcloud: Remove --preserve-env in sudo
2024-07-05 21:24:50 +00:00
Weijia Wang
93244d111c
Merge pull request #276106 from 9ary/pam_u2f-rfc42
nixos/pam/u2f: implement RFC0042
2024-07-05 23:20:03 +02:00
Maximilian Bosch
c4a59a99ba
Merge pull request #324617 from NotAShelf/271968-take-two
nixos/roundcube: adjust maxAttachmentSize, clarify documentation
2024-07-05 21:16:45 +00:00
Sandro Jäckel
dd743c70ee
nixos/locate: persist updatedb timer 2024-07-05 20:12:15 +02:00
github-actions[bot]
d6339576fb
Merge master into staging-next 2024-07-05 18:01:19 +00:00
0x4A6F
5292f247a1
Merge pull request #324066 from hacklschorsch/gitlab-runner-add-post-get-sources-script
Gitlab-Runner: add postGetSourcesScript
2024-07-05 16:51:56 +02:00
0x4A6F
1c3adad3c4
Merge pull request #324042 from hacklschorsch/gitlab-runner-preclone-is-now-pre-get-sources-script
Gitlab-Runner: preCloneScript is now preGetSourcesScript
2024-07-05 16:50:58 +02:00
novenary
fcccfb9e48 nixos/pam/u2f: implement RFC0042
This module has a lot of options, so it's a good candidate for freeform
settings.
2024-07-05 17:07:02 +03:00