Pol Dellaiera
028584b548
nixos/open-webui: add more default variables
2024-06-07 23:15:54 +02:00
Adam C. Stephens
af4ac075a3
Merge pull request #312523 from emilylange/nixos-forgejo-secrets
...
nixos/forgejo: refactor secrets, add `cfg.secrets`, forgejo: build `environment-to-ini`, nixos/tests/forgejo: test `cfg.secrets` using /metrics endpoint
2024-06-05 10:01:37 -04:00
Pol Dellaiera
309451127f
nixos/open-webui: update options default values
2024-06-05 08:05:19 +02:00
Pol Dellaiera
5664bb7899
nixos/open-webui: add example in options
2024-06-05 08:05:18 +02:00
Pol Dellaiera
a8670536e5
nixos/open-webui: remove preStart step
...
nixos/open-webui: remove `preStart` step
2024-06-05 08:05:18 +02:00
Pol Dellaiera
61ab4de94c
nixos/open-webui: update option and service descriptions
2024-06-05 08:05:18 +02:00
Pol Dellaiera
709eb8ebaf
nixos/open-webui: add openFirewall option
2024-06-05 08:05:18 +02:00
Pol Dellaiera
c54890e226
nixos/ollama: update port option, use types.port
2024-06-05 08:05:18 +02:00
Pol Dellaiera
cb8670469b
nixos/ollama: add openFirewall option
2024-06-05 07:09:13 +02:00
emilylange
694db856ed
nixos/forgejo: refactor secrets, add cfg.secrets
...
This is not a breaking change. Existing setups continue to work as-is.
Users of `cfg.mailerPasswordFile` will get an option rename/deprecation
warning, but that's it (assuming there is no regression).
This adds `cfg.secrets`, which is a wrapper over systemd's
`LoadCredential=` leveraging Forgejo's `environment-to-ini`.
`environment-to-ini` is intended for configuring Forgejo in OCI
containers.
It requires some fairly annoying escaping of the section names to fit
into the allowed environment variable charset.
E.g. `"log.console".COLORIZE = false` becomes
`FORGEJO__LOG_0x2E_CONSOLE__COLORIZE=false`.
- `.` needs to be replaced with `_0X2E_` and
- `-` needs to be replaced with `_0X2D_`
Those are simply the hex representation of each char from an ASCII
table:
. = ASCII 46 = 46 (decimal) = 2E (hex) = 0x2E = _OX2E_
To make interacting with `environment-to-ini` less annoying, we template
and escape the sections/keys in nix:
`cfg.secrets` takes the same free-form sections/keys as `cfg.settings`.
Meaning there is now a generalized abstraction for all keys, not just
those that have been manually implemented in the past.
It goes as far as theoretically allowing one to have `DEFAULT.APP_NAME`
read from a secret file.
I don't know why one would want to do that, but it has been made
possible by this :^)
More reasonable examples are listed in the `cfg.secrets` option example.
We also continue to bootstrap a handful of secrets like
`security.SECRET_KEY`. This is done is a sort of sidecar bootstrap unit
fittingly called `forgejo-secrets.service`.
Overriding those is, just like before, not really intended and requires
the use of `lib.mkForce` and might lead to breakage. But it is, in a
way, more possible than before.
2024-06-05 00:45:59 +02:00
Pol Dellaiera
6b6d4aeb35
Merge pull request #316248 from shivaraj-bh/open-webui
...
open-webui: init at 0.2.4
2024-06-04 15:47:03 +02:00
shivaraj-bh
f66cb82fef
nixos/open-webui: init
2024-06-04 16:46:19 +05:30
Florian Klink
77a51024c0
Merge pull request #316697 from bbenno/fix-gollum
...
nixos/gollum: fix systemd tempfile permission
2024-06-03 08:25:04 +03:00
Sandro
6f02edec1a
Merge pull request #316358 from majewsky/portunus-remove-libxcrypt-legacy
2024-06-02 23:10:26 +02:00
Benno Bielmeier
b5c7987b52
nixos/gollum: fix systemd tempfile permission
...
When services.gollum.{user,group} was specified a value other than its
default (i.e. "gollum"), the build failed due to referencing a
non-existing user.
2024-06-02 18:00:19 +02:00
Silas Schöffel
37afbbb602
nixos/invidious-router: remove redundant "Enables" in description
2024-06-02 13:27:22 +02:00
Stefan Majewsky
d11d18df30
portunus: remove libxcrypt-legacy usage
2024-06-01 10:28:21 +02:00
Sandro
9584ef2c26
Merge pull request #315189 from SuperSandro2000/gitea-maint
2024-05-29 15:49:00 +02:00
Christina Rust
343ddd9f4b
Merge pull request #315263 from srhb/devpi-loadcredential
...
nixos/devpi-server: fix loading credentials as DynamicUser
2024-05-28 19:22:40 +02:00
abysssol
c01818d57c
Merge pull request #314722 from abysssol/ollama-split-listenaddress
...
nixos/ollama: split `listenAddress` into `host` and `port`
2024-05-28 15:37:51 +00:00
Sarah Brofeldt
4d4571b20a
nixos/devpi-server: fix loading credentials as DynamicUser
2024-05-28 08:58:24 +02:00
Sandro Jäckel
73c11de701
gitea,nixos/gitea: add SuperSandro2000 as maintainer, remove inactive maintainers, unify maintainers
2024-05-27 22:48:14 +02:00
abysssol
428e60cad9
nixos/ollama: split listenAddress into host and port
...
breaking change; do not backport
2024-05-25 21:22:15 -04:00
sodiboo
0fa287f2ff
nixos/invidious-router: maintianers.s1ls -> maintainers.sils
2024-05-25 13:10:20 +02:00
Matt Kline
234f4db797
nixos/snapper, nixos/borgbackup: Fix module doc typo
...
The persistentTimer argument sets the _Persistent_ field in
systemd.timer(5).
Pointed out in #312549
2024-05-23 14:23:40 -07:00
Sandro
f53713e2cf
Merge pull request #304893 from SuperSandro2000/portunus-note
...
nixos/portunus: add note about allowed characters to id
2024-05-23 20:10:52 +02:00
Peder Bergebakken Sundt
087055ed4f
Merge pull request #293118 from xyven1/harden-plex-service
...
nixos/plex: Harden plex service
2024-05-21 00:37:47 +02:00
tomberek
2c55e033f2
Merge pull request #306909 from mrkline/snapper-timer
...
nixos/snapper: Add persistent option to config
2024-05-17 10:01:04 -05:00
Aleksana
be3aee43dd
Merge pull request #311397 from Raroh73/fix/services.llama-cpp
...
nixos/llama-cpp: fix rocm support
2024-05-16 20:26:28 +08:00
Pol Dellaiera
8821e81e02
Merge pull request #311307 from michaelpj/mpj/remove-some-maintennce
...
Remove myself from some packages I no longer use
2024-05-14 21:23:12 +02:00
Aleksana
39458d9055
Merge pull request #300564 from Cynerd/bcg-fix
...
nixos/bcg: fix usage without environment files
2024-05-14 21:27:59 +08:00
Raroh73
1f2c3812d4
nixos/llama-cpp: fix rocm support
2024-05-13 17:01:33 +02:00
Christina Rust
31a5a35b7e
Merge pull request #305286 from cafkafk/devpi-server-init
...
nixos/devpi-server: init
2024-05-13 13:14:51 +02:00
Christina Sørensen
52e0ad744d
nixos/devpi-server: init
...
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-05-13 12:14:44 +02:00
Michael Peyton Jones
cd981c1cc6
tzupdate: remove michaelpj as maintainer
2024-05-13 10:57:00 +01:00
Xyven1
201a5ff61f
nixos/plex: add systemd hardening configuration
2024-05-12 14:22:04 -04:00
Pol Dellaiera
aff1950a3f
nixos/private-gpt: init
2024-05-11 22:42:04 +02:00
Rouven Seifert
06667e028f
nixos/portunus: fix dangling service files for dex
2024-05-09 11:29:23 +02:00
Karel Kočí
282f8b7be3
nixos/bcg: fix usage without environment files
...
The preStart script should be used only if it is really needed.
2024-05-07 14:58:19 +02:00
Niklas Hambüchen
9d7a729277
treewide: ReadWriteDirectories -> ReadWritePaths.
...
These were renamed in systemd v231:
2a624c36e6
2024-05-07 01:06:02 +02:00
éclairevoyant
b43ad60e1a
Merge pull request #308966 from Guanran928/wastebin
...
nixos/wastebin: fix typo
2024-05-04 06:28:36 +00:00
Guanran Wang
c46effbdf0
nixos/wastebin: fix typo
2024-05-04 13:00:34 +08:00
piegames
315db4f0f2
heisenbridge: Drop piegames from maintainers
2024-05-03 13:38:25 +02:00
nicoo
1207b23cc2
Merge #305764 : nixos/gitlab: Add a second database connection
2024-05-02 17:44:56 +00:00
Matt Kline
ff0f4540c0
snapper: Add persistentTimer option to config
...
Defaults to false, but allows users to enable it for machines that
aren't on persistently (e.g., laptops, home PCs).
2024-04-25 22:26:18 -07:00
Pyrox
11255ef03c
maintainers: thehedgeh0g -> pyrox0
...
Also updates my information and contact info.
I no longer use The Hedgehog as my github username or online presence
username, so this fixes that. It also matches my github username, so it
should be easier for others to mention me if needed.
2024-04-24 12:53:58 -04:00
Yaya
c743d6d617
nixos/gitlab: Add a second database connection
...
GitLab deprecated single database connections in 15.9. [1]
From GitLab 17.0 onward it will be mandatory to define both `main` and
`ci` sections in the `database.yml`. [2]
This commit updates the module to address the upcoming breaking change.
[1]: https://gitlab.com/gitlab-org/gitlab/-/issues/387898
[2]: https://docs.gitlab.com/16.10/ee/install/installation.html#configure-gitlab-db-settings
2024-04-21 16:59:37 +02:00
Yaya
df9bc1f9a7
nixos/gitlab: Rename postgresql port option
2024-04-21 16:58:30 +02:00
Preston Hunt
b87790536d
nixos/greenclip: restart daemon if it exits
2024-04-21 23:58:10 +10:00
Pol Dellaiera
31805d0367
Merge pull request #305076 from abysssol/ollama-sandbox
...
nixos/ollama: add options to bypass sandboxing
2024-04-20 10:49:28 +02:00
