Commit Graph

46155 Commits

Author SHA1 Message Date
Maximilian Bosch
0c8d661707
Merge: nixos/pgbouncer: rework RFC42 integration (#356965) 2024-11-23 09:20:09 +01:00
Emily
05cf591edb
vuze: drop (#358309) 2024-11-23 04:45:34 +00:00
Tomodachi94
268ae6a302 vuze: drop
No releases since early 2017:
https://en.wikipedia.org/wiki/Vuze#Development_hiatus_and_fork

Vulnerable to CVE-2018-13417

BiglyBT (`biglybt`) is a maintained fork.
2024-11-23 04:35:14 +00:00
Masum Reza
773ebf1f37
scx: 1.0.5 -> 1.0.6; build all rust subpackages together (#358154) 2024-11-23 08:47:40 +05:30
Connor Baker
4e54bbdea1
nixos/activation: Add pre-switch checks (#236375) 2024-11-22 17:33:20 -08:00
Martin Weinelt
7eb0c197fb
frigate: coral tpu support, audio model, nvidia ffmpeg hwaccel, other fixes (#357717) 2024-11-23 01:05:20 +01:00
John Titor
9480c8be07
nixos/scx: remove dead reference to scx.rustland 2024-11-23 01:17:54 +05:30
Sefa Eyeoglu
ecd6e1eed1
nixos/netbird: fix port conflict on metrics endpoint (#357105) 2024-11-22 20:03:23 +01:00
Emily
811c0af5f5
dcgm: 3.3.5 -> 3.3.9; cudaPackages_10{,_0,_1,_2}: drop (#357655) 2024-11-22 18:00:03 +00:00
Martin Weinelt
1c07d92099
nixos/frigate: allow configuring a libva driver
In my testing this helped steer VA-API towards the correct card and also
made it show GPU statistics in performance monitoring.
2024-11-22 17:59:37 +01:00
Martin Weinelt
7411b85629
nixos/frigate: allow GPU use for video acceleration
The `render` group is required to acces the graphic cards decoding,
encoding and transcoding capabilities.

It is required for using fancy `ffmpeg.hwaccel-args` values, like
`preset-vaapi`.
2024-11-22 17:59:36 +01:00
Martin Weinelt
2b56a916ca
nixos/frigate: use shellscript to clear frigate cache
Shell expansions apparently do not work correctly in systemd command
lines.

Co-Authored-By: Joshua Manchester <JManch@protonmail.com>
2024-11-22 17:59:36 +01:00
Martin Weinelt
a810c07ff2
nixos/frigate: inherit required functions from lib 2024-11-22 17:59:36 +01:00
Martin Weinelt
7e33e470df
nixos/frigate: provide ffmpeg-full for nvidia hw accel
Closes: #344114
2024-11-22 17:59:35 +01:00
Martin Weinelt
d31bf00e2b
nixos/frigate: stop enabling recommendedProxySettings globally
Closes: #320512
2024-11-22 17:59:35 +01:00
Martin Weinelt
b96c4a67b9
nixos/frigate: add support for Coral devices 2024-11-22 17:59:35 +01:00
Martin Weinelt
2b2a669741
nixos/coral: init
Provides a small wrapper to enable support for Coral USB and PCIe
devices.
2024-11-22 17:59:34 +01:00
Maximilian Bosch
2995b3825e
nixos/pgbouncer: rework RFC42 integration
Commit bfb9d1825d added RFC42 support
which is a good thing in general, but this implementation has the
following flaws:

* `services.pgbouncer.logFile` was not renamed to `[...].log_file`, but
  to `[...].logfile`. Also the use of `mkRenamedOptionModule` is
  inappropriate here because the two options are not equivalent: the old
  option took a path relative to the home directory, the new an absolute
  path.

* Using `mkRenamedOptionModule` with options that don't exist (but are
  keys in a freeform attr-set or an `attrsOf X`), you get the following
  error when referencing an option you didn't declare:

    error: evaluation aborted with the following error message: 'Renaming error: option `services.pgbouncer.settings.pgbouncer.listen_port' does not exist.'

  This error is pretty bad because it's not actionable for an end-user of
  the module. A possible use-case is doing

    networking.firewall.allowedTCPPorts = [ config.services.pgbouncer.listenPort ];

  without specifying a custom listen port. This is an example of why you
  want to keep options, they already contain defaults and you can re-use
  those defaults in other parts of your system configuration.

  I decided to re-add a bunch of options where I figured that it's
  either useful to be able to address those in the NixOS configuration
  or having documentation directly in the options' reference in the
  NixOS manual.

  I didn't add all options, I'll leave that to the maintainers of
  pgbouncer.
2024-11-22 17:01:36 +01:00
Nick Cao
172a35f8ce
nixos/test-driver: target python 3.12 2024-11-22 10:49:32 -05:00
Nick Cao
e23f1733c6
nixos/test-driver: use ruff format in place of black 2024-11-22 10:49:31 -05:00
Nick Cao
ef2d3c542a
nixos/test-driver: modernize 2024-11-22 10:49:31 -05:00
Nick Cao
42d4046e94
nixos/test-driver: format with nixfmt 2024-11-22 10:49:30 -05:00
Nick Cao
b25360a7e5
nixos/test-driver: apply ruff check suggestions 2024-11-22 10:49:30 -05:00
Sandro
3156de49ba
nixos/postgresql: update docs with extraPlugins to extensions rename 2024-11-22 15:48:08 +01:00
Sefa Eyeoglu
baa412f46d
nixos/kanidm: allow origin url ending without slash (#355216) 2024-11-22 13:44:09 +01:00
Rémi NICOLE
a25e476c6a
nixos/netbox: clear old static files on upgrade (#354036) 2024-11-22 10:19:21 +01:00
tomberek
a42bdea0a7
rfmakecloud: 0.0.18 -> 0.0.21 (#356963) 2024-11-22 00:35:19 -05:00
tomberek
b2d5ac855d
technium-dns-server: 13.0.2 -> 13.2 (#356520) 2024-11-22 00:24:16 -05:00
Emily
e3d26a1815 cudaPackages_10{,_0,_1,_2}: drop 2024-11-21 23:09:53 +00:00
Florian Klink
653b603cef
notmuch: move the vim plugin to another output (#353500) 2024-11-22 00:18:24 +02:00
Jared Baur
6e192c4489
nixos/activation: Add pre-switch checks
Add an option for shell script fragments that are ran before switching
to a new NixOS system configuration (pre installation of bootloader or
system activation). Also add a new subcommand for
switch-to-configuration called "check" that will cause the program to
always exit after checks are ran.
2024-11-21 13:02:54 -08:00
Kerstin Humm
ff2f00d425 nixos/canaille: init module
Co-Authored-By: Janik <80165193+Janik-Haag@users.noreply.github.com>
2024-11-21 20:28:03 +01:00
Emery Hemingway
50bbfb5788 nixos/nncp: recursively merge configurations 2024-11-21 18:31:13 +00:00
Sandro
4c79ccf34d
nixos/luksroot: make it harder to accidentially break cryptsetup (#355464) 2024-11-21 18:38:55 +01:00
Sandro
b3ac2f4ead
nixos/meilisearch: fix disabling analytics (#356614) 2024-11-21 17:15:13 +01:00
Kerstin Humm
897954b8ae nixos/open-web-calendar: init module 2024-11-21 16:34:39 +01:00
Adam C. Stephens
63de272302
nixos/kanidm: add provisioning secret directories to BindReadOnlyPaths (#357440) 2024-11-21 09:46:02 -05:00
Aleksana
c1b9d0ce79
nixos/alertmanager: add additional docs about envsubst (#302536) 2024-11-21 21:20:44 +08:00
Aleksana
9612e216ce
nixos/tabby: fix typo (#355223) 2024-11-21 21:01:54 +08:00
Weijia Wang
02287a8c02
kubo-migrator: add migration from 15 to 16 (#344265) 2024-11-21 12:22:45 +01:00
Naïm Camille Favier
6735eef1b1
nixos/libreswan: use environment.etc."ipsec.secrets".text (#357626) 2024-11-21 08:18:24 +01:00
kirillrdy
c8021779cd
amazon-cloudwatch-agent: init at 1.300049.1 (#337212) 2024-11-21 17:18:47 +11:00
TheRealGramdalf
bfc160a84c nixos/netbird: fix port conflict on metrics endpoint 2024-11-21 05:31:53 +00:00
Thiago Kenji Okada
778f30c08c
porn-vault: init at 0.30.0-rc.11 (#355785) 2024-11-20 21:52:34 +00:00
Maximilian Bosch
f10fc704df
Merge: postgresqlPackages.timescaledb: 2.14.2 -> 2.17.2; adopt, nixfmt; postgresqlPackages.timescaledb_toolkit: 1.18.0 -> 1.19.0 (#348223) 2024-11-20 22:25:14 +01:00
Naïm Favier
b294762bb9
nixos/libreswan: use environment.etc."ipsec.secrets".text
This is to ensure compatibility with the networkmanager module, which
uses the `text` option.
2024-11-20 19:59:02 +01:00
Masum Reza
d834b054f4
nixos/scx: init module (#352300) 2024-11-21 00:10:45 +05:30
Luflosi
9e2866d215
kubo-migrator: rewrite
- Migrate to pkgs/by-name
- Format with nixfmt-rfc-style
- Make it possible to remove support for very old migrations in the future by increasing the `minRepoVersion` parameter
- Rename kubo-migrator-all-fs-repo-migrations to kubo-fs-repo-migrations since it may no longer include all migrations
- Add an alias for kubo-migrator-all-fs-repo-migrations to keep backwards compatibility
- Update descriptions to differentiate between kubo-migrator and kubo-migrator-unwrapped and better describe the purpose of the migrator
- Add a description to every individual migration
- Add a description to kubo-fs-repo-migrations
- Fetch the source code of the individual migrations from their specific Git tags, like upstream intends
- Enable tests for some migrations
- Check that the migrations don't crash on startup
- Mark two broken migrations as broken. They are not compatible with the latest Go versions and upstream is not interested in fixing this
- Change code to allow most updates to be done by only changing three lines (add new version and change git tag and hash)
- Add a stub for any disabled or broken migration to prevent downloading unsigned binaries from the internet, see https://github.com/ipfs/fs-repo-migrations/issues/148#issuecomment-2351355627 and https://github.com/ipfs/fs-repo-migrations/issues/188
- Use `lib.getExe` instead of hardcoding the binary name in the kubo NixOS module
- Use `substituteInPlace` with `--replace-fail` instead of `--replace`
2024-11-20 16:17:14 +01:00
Masum Reza
e1cedaabe5
nixos/obs-studio: nullable package (#356845) 2024-11-20 18:47:47 +05:30
TobTobXX
26fbd1adbe
nixos/bind: Fix cacheNetworks option
services.bind.cacheNetworks should only apply to recursive queryies, as
per the option documentation:
> Note that this is for recursive queries – all networks are allowed to
> query zones configured with the zones option by default [...].

This would correspond to the `allow-query-cache` option in named.conf,
as per the BIND docs[1]:
> Specifies which hosts (an IP address list) can access this server’s
> cache and thus effectively controls recursion.

And not `allow-query`, which restricts all requests (including requests
where the server has authority) [2]:
> Specifies which hosts (an IP address list) are allowed to send queries
> to this resolver.
> [...]
> Note:
> `allow-query-cache` is used to specify access to the cache.

[1]: https://bind9.readthedocs.io/en/v9.20.0/reference.html#namedconf-statement-allow-query-cache
[2]: https://bind9.readthedocs.io/en/v9.20.0/reference.html#namedconf-statement-allow-query
2024-11-20 10:47:06 +01:00