41373 Commits

Author	SHA1	Message	Date
Florian Agbuya	0e59203469	flarum: fix flarum directory permissions ... (cherry picked from commit 249dacfaa8)	2024-09-07 15:43:50 +00:00
Justinas Stankevicius	db4e63a4e2	nixos/prowlarr: set HOME for the service ... (cherry picked from commit 6e14231e83)	2024-09-03 10:08:36 +00:00
Peder Bergebakken Sundt	43d2816c1d	[Backport release-24.05] invidious: 2.20240427 -> 2.20240825.2 (#338811)	2024-09-02 17:16:20 -04:00
Emily	f778afc484	[24.05] python3Packages.{mautrix,matrix-nio}: add withOlm flags (#338843)	2024-09-02 03:41:25 +01:00
Niklas Hambüchen	114af9abab	[24.05] Backport fix for ceph with dmcrypt (#338630)	2024-09-01 20:49:25 +02:00
Artturin	891f087836	[Backport release-24.05] nixos/telegraf: make sure ping executable is available when trying to ping (#338740)	2024-09-01 21:29:28 +03:00
Emily	caef9784ec	python3Packages.matrix-nio: add withOlm flag	2024-09-01 17:32:10 +01:00
Sandro	baca75692d	[Backport release-24.05] nixos/tsm-client: Fix multi-value dsm.sys options (#328031)	2024-09-01 18:11:53 +02:00
Gaetan Lepage	580de4d195	nixos/invidious: remove machine.config in test ... (cherry picked from commit a1f7e3d10e)	2024-09-01 13:45:58 +00:00
Shea Levy	fbbd9323de	[Backport release-24.05] nixos/ipu6: Don't build out-of-tree driver for kernels that have it (#332240)	2024-09-01 06:33:05 -04:00
Echo Nolan	43e77c3a5f	nixos/telegraf: make sure ping executable is available when trying to ping ... We need ping to be in PATH of the service otherwise it can't ping. This commit adds it, conditional on one of the inputs being a ping task. (cherry picked from commit 934a337a13)	2024-09-01 04:25:31 +00:00
Will Fancher	d829513235	nixos/iso-image: Compress squashfs with zstd 19 ... (cherry picked from commit 49192ef7a3)	2024-08-31 18:39:20 +00:00
Emily	e2b77fb94c	[24.05] backport fcgiwrap instances fix for local privilege escalation issue (#331465)	2024-08-31 16:38:03 +01:00
euxane	8931f18bfa	nixos/fcgiwrap: add security advisory links to messages	2024-08-31 17:15:42 +02:00
Niklas Hambüchen	d05b6e3573	ceph.tests: Fix maintainer eval ... (cherry picked from commit def05db018)	2024-08-31 13:49:50 +00:00
benaryorg	31e495125b	tests/ceph: bluestore, dmcrypt, and IPv6 test ... Signed-off-by: benaryorg <binary@benary.org> (cherry picked from commit 0cd631e61f) The cherry-pick required -addresses = [ { Address = "${ip}/128"; } ]; +addresses = [ { addressConfig.Address = "${ip}/128"; } ]; to account for the fact that the test was written for master commit c4fd7cf16d nixos/networkd: get rid of *Config attributes in lists which is not in this branch.	2024-08-31 13:49:27 +00:00
Leona Maroni	cad30495d5	[Backport release-24.05] nixos/varnish: change default stateDir to /run (#337679)	2024-08-28 10:45:53 +02:00
Emery Hemingway	665a1853b5	nixos/eris-server: update comment ... (cherry picked from commit f5b732e9bf)	2024-08-27 19:08:30 +00:00
Will Fancher	4797a40769	[Backport release-24.05] nixos/systemd/initrd: Fix emergencyAccess to work with null. (#336418)	2024-08-27 12:12:12 -04:00
Cosima Neidahl	b316d12227	[Backport release-24.05] lomiri.lomiri-gallery-app: init at 3.0.2 (#336579)	2024-08-27 16:20:44 +02:00
laalsaas	691e09524a	nixos/varnish: change default stateDir to /run ... The stateDir, or as varnish calls it, the workdir should always be a tmpfs. Otherwise, performance issues may occur. See: - https://varnish-cache.org/docs/trunk/reference/varnishd.html#opt-n - https://github.com/varnishcache/varnish-cache/issues/4121 (cherry picked from commit 9e5316a1c5)	2024-08-27 10:22:15 +00:00
rnhmjoj	c794436285	nixos/tests/firewall: fix deprecation warning ... (cherry picked from commit fa5ae18c14)	2024-08-25 13:07:35 +00:00
rnhmjoj	749b4b36d4	nixos/firewall: fix reverse path check failures with IPsec ... The endpoint of an IPsec tunnel receives encrypted IPsec packets that are first decrypted and then forwarded to the intended destination. The decrypted traffic appears to originate from the same interface it came in from, so in most cases these packets will fail the reverse path check even if legitimate. This change adds an exception to not reject packets that were previously IPsec-encrypted, meaning the have been accepted, decrypted and are in the process of being forwarded to their final destinal. Sources: - https://www.kernel.org/doc/Documentation/networking/xfrm_device.txt - https://git.netfilter.org/nftables/commit/?id=49f6e9a846c6c8325b95debe04d5ebc3c01246fb - https://git.netfilter.org/nftables/commit/?id=8f55ed41d007061bd8aae94fee2bda172c0e8996 - https://thermalcircle.de/doku.php?id=blog:linux:nftables_demystifying_ipsec_expressions (cherry picked from commit 3c12ef3f21)	2024-08-25 13:07:35 +00:00
Bjørn Forsman	53d5d2be6d	nixos/ups: restart upsdrv.service on config changes ... Or else new configuration won't take effect until the next boot (or if the user manually restarts the service). (cherry picked from commit dc7379e04f)	2024-08-23 17:27:36 +02:00
Masum Reza	05e1e2736e	Merge pull request #336568 from GaetanLepage/zed ... [release-24.05] zed-editor: remove package	2024-08-23 18:46:30 +05:30
OPNA2608	ec4dd6d792	tests/lomiri-camera-app: Fix backported test	2024-08-22 19:00:12 +02:00
OPNA2608	669d0c9dea	nixos/lomiri: Add gallery app ... (cherry picked from commit 8c1cb41408)	2024-08-22 18:59:56 +02:00
OPNA2608	d86677556f	tests/lomiri-gallery-app: init ... (cherry picked from commit cb0faa488a)	2024-08-22 18:59:49 +02:00
Adam Stephens	00abdbc620	nixos/tests/kanidm: bind certs path to fix ofborg tests ... provision # [ 8.223448] (kanidmd)[819]: kanidm.service: Failed to set up mount namespacing: /ofborg/checkout/repo/38dca4e3aa6bca43ea96d2fcc04e8229/builder/ofborg-evaluator-1/nixos/tests/common/acme/server: No such file or directory (cherry picked from commit b93f6e4acd)	2024-08-22 12:55:23 -04:00
Gaetan Lepage	213edbbcfe	[nixos-24.05] zed-editor: remove package ... https://github.com/zed-industries/zed/issues/15757#issuecomment-2305101015	2024-08-22 18:48:52 +02:00
Eduard Bachmakov	987f6a5bf2	nixos/systemd/initrd: Fix emergencyAccess to work with null. ... Implementation is now compatible with the option's .type already defined. This allows us to pass `config.users.users.<user>.hashedPassword` even if this is null (the default). Before: true => access false => no access hash => access via password null => eval error After: true => access false => no access hash => access via password null => no access (cherry picked from commit b33bf6b99a)	2024-08-21 22:42:12 +00:00
Masum Reza	b538a69ce8	Merge pull request #327380 from NixOS/backport-321010-to-release-24.05 ... [Backport release-24.05] virtualboxKvm: 20240515 -> 20240617	2024-08-21 15:07:44 +05:30
John Titor	acf94f31f7	nixos/hyprland: set systemd environment PATH for versions < 0.41.2 ... Importing PATH into the systemd environment is done by default in Hyprland v0.41.2+ (https://github.com/hyprwm/Hyprland/pull/6640) We soft deprecate this option here for versions >= 0.41.2. (cherry picked from commit ff0738b736)	2024-08-19 10:32:27 +05:30
Reputable2722	86dc9c933c	nixos/hyprland: set path order for systemd user services ... Set PATH order correctly for systemd user services (see NixOS/nixpkgs#320734 Signed-off-by: Reputable2722 <153411261+Reputable2772@users.noreply.github.com> (cherry picked from commit dc423d5c69)	2024-08-19 10:32:26 +05:30
Leon	e8106db723	nixos/hyprland: use lib.mkDefault for enableWlrPortal ... (cherry picked from commit 5b216845b6)	2024-08-19 10:32:26 +05:30
Leon	326d906fc4	nixos/hyprland: enable xdg.portal by default ... (cherry picked from commit 9585e5d3aa)	2024-08-19 10:32:25 +05:30
John Titor	898641392c	nixos/wayland-session: cleanup ... xwayland, wlr-portal -> enable-xwayland, enable-wlr-portal (cherry picked from commit de77718887)	2024-08-19 10:32:25 +05:30
John Titor	ad1684cd48	nixos/wayland-session: force running xdg autostart for WM-only sessions ... (cherry picked from commit 7b2a2824b3)	2024-08-19 10:32:25 +05:30
John Titor	00622e9fcf	nixos/hyprland: add fufexan as maintainer ... Per https://github.com/NixOS/nixpkgs/pull/315827#issuecomment-2139073465 (cherry picked from commit 98f9f9951a)	2024-08-19 10:32:24 +05:30
John Titor	8d03ed3202	nixos/hyprland: disable wlr-portal for Hyprland ... This commit: - Adds wlr-portal override of wayland-session module (enabled by default) - Disable it for hyprland module (cherry picked from commit 0b0b7cefcc)	2024-08-19 10:32:24 +05:30
Thomas Gerbet	4840d50624	openstack-config: remove hardcoded default password for the root account ... (cherry picked from commit 66c0275843)	2024-08-16 18:30:38 +00:00
Maximilian Bosch	7c23c073dc	Merge pull request #334640 from Ma27/backport-kernel-cleanup ... [24.05] linux_6_8,linux_6_9: remove	2024-08-16 15:51:38 +02:00
Morgan Jones	e806a52f28	[Backport release-24.05] armagetronad: update 0.4; fix possible problem in installCheckPhase (#331239) ... * armagetronad: fix installCheckPhase on hydra (cherry picked from commit e6fc1e31ec9e7540f9321843b84b84404d5b3dcc) * armagetronad: add passthru.tests (cherry picked from commit 84d6bb650796c9bc3ad776aa62535487f957f43f) * tests/armagetronad: increase memory allocation (cherry picked from commit 5ff8ec524cf81cf147d37f20e700ad87f809db54) * tests/armagetronad: increase timeout for busy Hydra server (cherry picked from commit 648cf36656225541e38d7bfc76d18506aa861096)	2024-08-15 12:42:08 +05:30
Alyssa Ross	c13ad8e5c2	linux_6_8,linux_6_9: remove ... EOL upstream. This seems to mean we no longer need any patches to support modern Rust versions in the kernel! (cherry picked from commit ba0d495264)	2024-08-14 16:21:08 +02:00
Cosima Neidahl	3aa0401868	Merge pull request #331273 from NixOS/backport-325639-to-release-24.05 ... [Backport release-24.05] lomiri.lomiri-camera-app: init at 4.0.6	2024-08-14 16:08:23 +02:00
Julien Malka	cba99ebd9e	Merge pull request #333631 from NixOS/backport-325348-to-release-24.05 ... [Backport release-24.05] nixos/tests/systemd-boot: remove uefiLargeFileWorkaround test	2024-08-10 12:50:35 +02:00
Julien Malka	8be510a4ca	Merge pull request #332702 from sarunint/backport-253260-to-release-24.05 ... [24.05] nixos/systemd-boot: Add reboot-for-bitlocker support	2024-08-10 10:02:50 +02:00
Julien Malka	852281b669	nixos/tests/systemd-boot: remove uefiLargeFileWorkaround test ... (cherry picked from commit 107fe87209)	2024-08-10 08:02:38 +00:00
Bjørn Forsman	c8ab0eb08b	nixos/mosquitto: fix "listeners" option default ... The option type is listOf, so the default should be an empty list, not empty attrset. (cherry picked from commit 4265f4354c)	2024-08-09 17:00:38 +02:00
Pol Dellaiera	7b1e9b0807	Merge pull request #332915 from shivaraj-bh/backport-open-webui-latest-to-release-24.05 ... [Backport release-24.05] Update open-webui to 0.3.12	2024-08-08 22:58:02 +02:00