Carl Richard Theodor Schneider
1526a1b041
adguardhome: Add schema_version
...
This will add `passthru.schema_version` to be used as default value for
the adguardhome module.
It will also update the `update.sh` to keep the `schema_version` in sync
with the version by inspecting the sourcecode.
This might break existing configs, if they use deprecated values that don't
appear in newer schema_versions and schema_version wasn't set explicitly.
Explicit declarations of schema_version always have higher priority.
This also removes the `host` and `config` settings in favour of using the
appropriate `settings`.
Fixes #173938
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-10-25 17:35:27 +02:00
MidAutumnMoon
9b8fd74d68
nixos/nats: set proper SystemCallFilter
2022-10-25 16:47:46 +08:00
MidAutumnMoon
db029623b7
nixos/dnscrypt-proxy2: properly set SystemCallFilter
2022-10-24 22:20:42 +10:00
github-actions[bot]
18a6423900
Merge master into staging-next
2022-10-17 00:04:21 +00:00
Nick Cao
46982f4194
nixos/iwd: allow setting iwd package
2022-10-16 23:12:26 +08:00
github-actions[bot]
886633ba43
Merge master into staging-next
2022-10-15 00:04:00 +00:00
Sandro
bdca71e9c0
Merge pull request #191924 from SuperSandro2000/ddclient-daemon
2022-10-14 23:52:14 +02:00
github-actions[bot]
283841a1ce
Merge master into staging-next
2022-10-14 06:20:50 +00:00
Timothy DeHerrera
912a3deedc
Merge pull request #110197 from milahu/patch-1
...
firewall: move rpfilter to mangle.PREROUTING to fix conntrack
2022-10-13 21:04:40 -06:00
Vladimír Čunát
00a757ed3f
Merge branch 'master' into staging
2022-10-13 08:27:55 +02:00
Patrick Jackson
4c69843460
nixos/mullvad-vpn: change dependency for the daemon to pkg mullvad
2022-10-11 12:37:49 -07:00
Artturin
7e49471316
treewide: optional -> optionals where the argument is a list
...
the argument to optional should not be list
2022-10-10 15:40:21 +03:00
Artturin
f4ea1208ec
treewide: *Flags convert to list from str
...
*Flags implies a list
slightly relevant:
> stdenv: start deprecating non-list configureFlags https://github.com/NixOS/nixpkgs/pull/173172
the makeInstalledTests function in `nixos/tests/installed-tests/default.nix` isn't available outside of nixpkgs so
it's not a breaking change
2022-10-10 15:30:59 +03:00
github-actions[bot]
8972888c55
Merge master into staging-next
2022-10-09 12:01:31 +00:00
Maximilian Bosch
4fd75277dd
nixos/coturn: refactor secret injection
...
The original implementation had a few issues:
* The secret was briefly leaked since it is part of the cmdline for
`sed(1)` and on Linux `cmdline` is world-readable.
* If the secret would contain either a `,` or a `"` it would mess with
the `sed(1)` expression itself unless you apply messy escape hacks.
To circumvent all of that, I decided to use `replace-secret` which
allows you to replace a string inside a file (in this case
`#static-auth-secret#`) with the contents of a file, i.e.
`cfg.static-auth-secret-file` without any of these issues.
2022-10-09 09:31:48 +02:00
github-actions[bot]
130aa9ca68
Merge master into staging-next
2022-10-09 00:03:29 +00:00
Jörg Thalheim
b4bb571fa0
iwd: remove myself as maintainer
2022-10-08 16:50:37 +02:00
github-actions[bot]
c5f0d725df
Merge master into staging-next
2022-10-06 18:03:10 +00:00
pennae
3826e303c6
nixos/firefox-syncserver: remove extra add_header
...
syncstorage-rs sets this header starting with 0.12.3.
2022-10-06 14:48:53 +02:00
pennae
f97c9d60e4
nixos/firefox-syncserver: proxyPass singleNode to 127.0.0.1
...
syncstorage-rs does not listen on ::1 unless explicitly configured.
2022-10-06 14:48:53 +02:00
pennae
8dc30e9e98
nixos/firefox-syncserver: set default for oauth verifier threads
...
the 0.12.1 update introduced a static thread pool for verifying oauth
tokens. set a reasonable default for self-hosted setups (10 threads).
2022-10-06 14:48:53 +02:00
github-actions[bot]
863df54d13
Merge master into staging-next
2022-10-06 06:05:17 +00:00
Stanisław Pitucha
4a6979d310
Merge pull request #194603 from phiadaarr/jitsiVideobridge
...
jitsi-videobridge: fix link in docs
2022-10-06 12:19:43 +11:00
github-actions[bot]
939050602c
Merge master into staging-next
2022-10-05 18:07:32 +00:00
José Luis Lafuente
396f4f05b9
nixos/tmate-ssh-server: init module ( #192270 )
...
* nixos/tmate-ssh-server: init module
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
2022-10-05 17:34:30 +01:00
Philipp Arras
1e430612dc
jitsi-videobridge: fix link in docs
2022-10-05 18:11:57 +02:00
Milan Hauth
a1e9f1e036
nixos/firewall: move rpfilter from raw to mangle
...
fix wireguard (wg-quick)
netfilter packet flow:
raw.prerouting -> conntrack -> mangle.prerouting
rpfilter must be after conntrack
otherwise response packets are dropped
2022-10-05 09:50:56 +02:00
github-actions[bot]
fc393d5731
Merge master into staging-next
2022-10-02 12:01:22 +00:00
Christian Kögler
6845ddc94b
Merge pull request #192864 from alyaeanyx/nix-serve-package-option
...
nixos/nix-serve: add package option
2022-10-02 11:39:28 +02:00
github-actions[bot]
25043f0f28
Merge master into staging-next
2022-10-01 12:01:27 +00:00
Christian Kögler
d3fc91e579
Merge pull request #191352 from maifel-maifel/mr-networking-deprecation-note
...
nixos/networking: add a suggestion to use networkd options
2022-10-01 09:10:30 +02:00
github-actions[bot]
9c14978f84
Merge master into staging-next
2022-09-29 12:01:25 +00:00
digital
eb49174f7b
nixos/wireguard: add option to set mtu
...
Some networks can only transfer packets with a lower than normal maximum
transfer unit size. In these cases, it is necessary to set a MTU that
works for the given upstream network.
2022-09-28 17:14:38 +02:00
digital
084509af8b
nixos/wireguard: add option to set firewall mark
...
Wireguard can tag its packets with a firewall mark. This can be used for
firewalls or policy routing. This is very useful in some setups where
all traffic should go through a wireguard interface. The wireguard
packets cannot go through the wireguard interface and must be routed
differently, which can be done via the Firewall Mark.
The nixos option `config.networking.wireguard.interface.<name>.fwMark`
is of type `types.str` and not `types.int` to allow for specifying the
mark as a hexadecimal value.
2022-09-28 17:14:38 +02:00
Artturin
6910a4eea0
treewide: makeWrapper to nativeBuildInputs
...
this should be all of them other than the failed splices
found with nixpkgs-lint
2022-09-26 17:53:26 +03:00
Emery Hemingway
dbf8bba95b
nixos/yggdrasil: services.yggdrasil.config renamed to settings
2022-09-25 11:10:32 -05:00
alyaeanyx
850053ebe7
nixos/nix-serve: add package option
2022-09-25 11:08:59 +02:00
oxalica
07a9b7b1d8
nixos/{test/,}v2ray: fix for new CLI and use upstream systemd units
2022-09-21 15:59:29 +08:00
Sandro
5267176a38
nixos/ddclient: document that daemon should not be set
...
Closes #191105
2022-09-19 17:06:45 +02:00
digital
12d64e041b
nixos/networking: add a suggestion to use networkd options
2022-09-15 18:07:24 +02:00
Jonas Heinrich
d990f88f9f
nixos/go-autoconfig: init module
2022-09-14 02:21:39 -04:00
Christian Kögler
11bafe6b5b
nixos/syncthing: remove exit code 2 from exit status success
...
Fix #181713
2022-09-11 16:21:07 +02:00
pennae
d98322834b
nixos/*: fix docbook deprecation notices
...
mostly no rendering changes except in buildkite, which used markdown
where docbook was expected without marking up its markdown.
2022-09-10 18:23:13 +02:00
Christian Kögler
4b6b03f99c
Merge pull request #185782 from e1mo/e1mo/syncthing-receiveencrypted
...
nixos/syncthing: Add receiveencrypted folder type
2022-09-09 17:30:45 +02:00
Bernardo Meurer
0627237785
Merge pull request #181334 from zhaofengli/nat-iptables-pkg
...
nixos/nat: Use the package specified in networking.firewall.package
2022-09-06 14:05:20 -03:00
bb2020
ce609256fb
nixos/minidlna: update documentation
2022-09-04 09:07:40 +00:00
amesgen
592d13693e
nixos/teamspeak3: restart on failure
...
Prevents transient failures such as
> failed to register local accounting service
2022-09-03 14:55:36 +02:00
pennae
3bddcf5f90
Merge branch 'master' into option-docs-md
2022-09-01 16:10:09 +02:00
Zhaofeng Li
7689468a4b
nixos/nat: Use the package specified in networking.firewall.package
...
Otherwise the system path is inconsistent if you do something like
networking.firewall.package = pkgs.iptables-legacy;
2022-08-31 13:14:07 -06:00
Christian Kögler
43c0f946a8
Merge pull request #188620 from KFearsoff/fix-syncthing-versioning-path
...
nixos/syncthing: fix path setting for versioning
2022-08-31 20:46:54 +02:00
