17348 Commits

Author	SHA1	Message	Date
talyz	7842e89bfc	nixos/gitlab: Use replace-secret to avoid leaking secrets ... Using `replace-literal` to insert secrets leaks the secrets through the `replace-literal` process' `/proc/<pid>/cmdline` file. `replace-secret` solves this by reading the secret straight from the file instead, which also simplifies the code a bit.	2021-05-19 09:32:12 +02:00
talyz	38398fade1	nixos/discourse: Use replace-secret to avoid leaking secrets ... Using `replace-literal` to insert secrets leaks the secrets through the `replace-literal` process' `/proc/<pid>/cmdline` file. `replace-secret` solves this by reading the secret straight from the file instead, which also simplifies the code a bit.	2021-05-19 09:32:06 +02:00
Jörg Thalheim	5b4915fb7a	Merge pull request #110927 from Izorkin/fix-qemu-ga ... nixos/qemu-guest-agent: fix start service	2021-05-19 05:42:06 +01:00
Aaron Andersen	58ddbfa71d	Merge pull request #118395 from jwygoda/grafana-google-oauth2 ... grafana: add google oauth2 config	2021-05-18 23:11:24 -04:00
github-actions[bot]	7000ae2b9a	Merge master into staging-next	2021-05-19 00:55:36 +00:00
Martin Weinelt	a8f71f069f	Merge pull request #123006 from mweinelt/postgresqlbackup-startat ... nixos/postgresqlBackup: allow defining multiple times to start at	2021-05-19 01:54:38 +02:00
Martin Weinelt	4c798857e2	Merge pull request #100274 from hax404/prometheus-xmpp-alerts	2021-05-19 01:36:28 +02:00
Georg Haas	03c092579a	prometheus-xmpp-alerts: apply RFC 42	2021-05-19 01:08:38 +02:00
superherointj	4e3060d488	libvirtd: fix ovmf for aarch64	2021-05-18 17:27:37 -03:00
Jonathan Ringer	ca46ad3762	Merge remote-tracking branch 'origin/master' into staging-next ... Conflicts: pkgs/tools/package-management/cargo-release/default.nix	2021-05-18 11:03:38 -07:00
Pamplemousse	037e51702e	nixos/services/foldingathome: Add an option to set the "nice level" (#122864) ... Signed-off-by: Pamplemousse <xav.maso@gmail.com>	2021-05-18 18:44:52 +02:00
Maciej Krüger	7458dcd956	Merge pull request #75242 from mkg20001/cjdns-fix ... services.cjdns: add missing, optional login & peerName attribute	2021-05-18 18:22:29 +02:00
Jonathan Ringer	f7a112f6c4	Merge remote-tracking branch 'origin/master' into staging-next ... Conflicts: pkgs/applications/graphics/emulsion/default.nix pkgs/development/tools/misc/texlab/default.nix pkgs/development/tools/rust/bindgen/default.nix pkgs/development/tools/rust/cargo-udeps/default.nix pkgs/misc/emulators/ruffle/default.nix pkgs/tools/misc/code-minimap/default.nix	2021-05-18 08:57:16 -07:00
Robert Schütz	d189df235a	Merge pull request #122241 from dotlambda/znc-harden ... nixos/znc: harden systemd unit	2021-05-18 17:44:14 +02:00
Maciej Krüger	7409f9bab3	services.cjdns: add missing, optional login & peerName attribute	2021-05-18 17:39:04 +02:00
Ashlynn Anderson	903665f31c	nixos/self-deploy: init (#120940) ... Add `self-deploy` service to facilitate continuous deployment of NixOS configuration from a git repository.	2021-05-18 08:29:37 -07:00
Maciej Krüger	362ca08510	Merge pull request #123448 from mweinelt/phosh-pam ... nixos/phosh: Fix PAM configuration	2021-05-18 17:26:21 +02:00
Martin Weinelt	ec9cfba2d3	nixos/phosh: Fix unrestricted login because of insecure PAM config ... The PAM config deployed would not check anything meaningful. Remove it and rely on the defaults in the security.pam module to fix login with arbitrary credentials. Resolves: #123435	2021-05-18 16:39:03 +02:00
Jan Tojnar	1b1faeb2db	Merge pull request #86288 from worldofpeace/gnome-doc ... nixos/gnome3: add docs	2021-05-18 14:19:33 +02:00
Jan Tojnar	ed47351533	nixos/flatpak: Remove guiPackages internal option ... It was basically just a `environment.systemPackages` synonym, only GNOME used it, and it was stretching the responsibilities of the flatpak module too far. It also makes it cleaner to avoid installing the program using GNOME module’s `excludePackages` option. Partially reverts: https://github.com/NixOS/nixpkgs/pull/101516 Fixes: https://github.com/NixOS/nixpkgs/issues/110310	2021-05-18 14:06:23 +02:00
Michael Raskin	02ba3238d2	Merge pull request #123053 from pschyska/master ... atop, netatop, nixos/atop: improve packaging and options	2021-05-18 10:54:13 +00:00
rnhmjoj	1a4db01c84	nixos/libreswan: update for version 4.x ... - Use upstream unit files - Remove deprecated config options - Add option to disable redirects - Add option to configure policies	2021-05-18 08:13:36 +02:00
Vincent Haupert	faeb9e3233	nixos/networkd: add missing [DHCPServer] options ... `systemd.network.networks.*.dhcpServerConfig` did not accept all of the options which are valid for networkd's [DHCPServer] section. See systemd.network(5) of systemd 247 for details.	2021-05-17 18:30:37 +02:00
ajs124	e2cf342ba9	nixos/security/apparmor: utillinux -> util-linux	2021-05-17 17:14:08 +02:00
Jonathan Ringer	c227fb4b17	Merge remote-tracking branch 'origin/master' into staging-next ... Conflicts: pkgs/development/tools/rust/cargo-cache/default.nix pkgs/development/tools/rust/cargo-embed/default.nix pkgs/development/tools/rust/cargo-flash/default.nix pkgs/servers/nosql/influxdb2/default.nix	2021-05-17 07:01:38 -07:00
Robert Schütz	a22ebb6d6d	Merge pull request #123017 from DavHau/davhau-scikitlearn ... python3Packages.scikitlearn: rename to scikit-learn	2021-05-17 15:13:33 +02:00
ajs124	8e78793029	nixos/tasks/filesystems: utillinux -> util-linux	2021-05-17 14:47:57 +02:00
Maximilian Bosch	2addab5fd6	nixos/matrix-synapse: room_invite_state_types was deprecated and room_prejoin_state is used now ... See https://github.com/matrix-org/synapse/blob/release-v1.34.0/UPGRADE.rst#upgrading-to-v1340	2021-05-17 13:45:28 +02:00
Jörg Thalheim	b900661f6e	Merge pull request #122825 from Izorkin/update-duplicates-systemcallfilters ... treewide: remove duplicates SystemCallFilters	2021-05-17 12:06:06 +01:00
DavHau	cd8f3e6c44	python3Packages.scikitlearn: rename to scikit-learn	2021-05-17 17:41:36 +07:00
Eelco Dolstra	c3b27282d7	Merge pull request #123272 from kini/nixos/security.pki/pems-without-final-newline ... nixos/security.pki: handle PEMs w/o a final newline	2021-05-17 11:14:03 +02:00
Richard Marko	16b0f07890	nixos/nginx: fix comment about acme postRun not running as root ... As of 67a5d66 this is no longer true, since acme postRun runs as root. The idea of the service is good so reword a comment a bit.	2021-05-17 18:03:04 +09:00
Richard Marko	7423afb5e4	nixos/molly-brown: fix description of certPath ... `allowKeysForGroup` is no longer available so this drops ``` security.acme.certs."example.com".allowKeysForGroup = true; ``` line. `SupplementaryGroups` should be enough for allowing access to certificates.	2021-05-17 18:03:04 +09:00
Richard Marko	29158fc0ac	nixos/postgresql: fix description of ensureUsers.ensurePermissions ... `attrName` and `attrValue` are now in correct order.	2021-05-17 18:03:04 +09:00
Jan Tojnar	354e005d6c	nixos/dconf: fix d-bus activation ... dconf now supports autostarting the d-bus service using systemd's d-bus activation. 2781a86848 On NixOS, that requires making systemd aware of the package. Fixes: https://github.com/NixOS/nixpkgs/issues/123265	2021-05-17 09:46:07 +02:00
Evils	7641769055	nixos/fancontrol: back to running as root ... regular users don't have write access to /sys/devices which is where the kernel endpoints are to control fan speed	2021-05-17 00:00:01 -07:00
github-actions[bot]	3ff6965554	Merge master into staging-next	2021-05-17 06:22:23 +00:00
Jonathan Ringer	d8e62d8e41	Merge remote-tracking branch 'origin/master' into staging-next ... Fix cargo-flash build	2021-05-16 18:27:14 -07:00
Sandro	ec1dd62608	Merge pull request #118521 from SuperSandro2000/nginx-proxy-timeout ... nixos/nginx: add option to change proxy timeouts	2021-05-17 03:15:54 +02:00
Sandro	700942d2a5	Merge pull request #121119 from SuperSandro2000/remove-gnidorah ... treewide: remove gnidorah	2021-05-17 02:42:24 +02:00
Sandro Jäckel	51166f90c6	nixos/nginx: add option to change proxy timeouts	2021-05-17 02:37:44 +02:00
Keshav Kini	348858f297	nixos/security.pki: handle PEMs w/o a final newline ... According to the ABNF grammar for PEM files described in [RFC 7468][1], an eol character (i.e. a newline) is not mandatory after the posteb line (i.e. "-----END CERTIFICATE-----" in the case of certificates). This commit makes our CA certificate bundler expression account for the possibility that files in config.security.pki.certificateFiles might not have final newlines, by using `awk` instead of `cat` to concatenate them. (`awk` prints a final newline from each input file even if the file doesn't end with a newline.) [1]: https://datatracker.ietf.org/doc/html/rfc7468#section-3	2021-05-16 17:23:11 -07:00
Martin Weinelt	7bd65d54f7	treewide: remove nand0p as maintainer ... While looking at the sphinx package I noticed it was heavily undermaintained, which is when we noticed nand0p has been inactive for roughly 18 months. It is therefore prudent to assume they will not be maintaining their packages, modules and tests. - Their last contribution to nixpkgs was in 2019/12 - On 2021/05/08 I wrote them an email to the address listed in the maintainer-list, which they didn't reply to.	2021-05-17 01:50:49 +02:00
Florian Klink	6c0058f47f	Merge pull request #85073 from hyperfekt/systemd-pstore ... nixos/systemd|filesystems: mount and evacuate /sys/fs/pstore using systemd-pstore	2021-05-17 00:00:52 +02:00
Aaron Andersen	21f5dd5c6e	Merge pull request #122647 from onny/caddy ... nixos/caddy: support user and group options	2021-05-16 17:23:57 -04:00
Johan Thomsen	7e310dd8e8	nixos/containerd: StartLimit* options must be in the unit-section ... also, raise limits to ensure reasonable startup time, now that StartLimits are actually enforced	2021-05-17 06:17:18 +10:00
Johan Thomsen	2142f88526	nixos/containerd: sanitize StateDirectory and RuntimeDirectory	2021-05-17 06:17:18 +10:00
Paul Schyska	563ba07543	nixos/atop: Split up restart triggers between atop and netatop	2021-05-16 22:00:24 +02:00
Paul Schyska	526bc6a4d5	nixos/atop: Add a note about netatop tainting the kernel	2021-05-16 21:43:20 +02:00
Niklas Hambüchen	357cf46c8d	wireguard module: Add dynamicEndpointRefreshSeconds option. ... See for an intro: https://wiki.archlinux.org/index.php/WireGuard#Endpoint_with_changing_IP	2021-05-16 20:11:51 +02:00
Paul Schyska	b87c366046	nixos/atop: Never enable setuidWrapper by default, rename service/timer enabling options	2021-05-16 18:22:03 +02:00
Paul Schyska	8f3d2e5c3b	nixos/atop: Add configuration for atop services, allow to enable netatop, gpuatop, allow setuid wrapper	2021-05-16 18:22:03 +02:00
Matthias Devlamynck	2a217314f2	nixos/plasma5: also add plasma-pa when using pipewire with pulseaudio support	2021-05-16 10:51:11 +02:00
github-actions[bot]	9911b1c75b	Merge staging-next into staging	2021-05-16 01:01:01 +00:00
github-actions[bot]	b484cef365	Merge master into staging-next	2021-05-16 01:00:58 +00:00
Michael Weiss	a542827c9b	nixos/sway: Update the module documentation ... Most programs already run natively under Wayland so extraSessionCommands isn't as important anymore. XWayland is already covered by "programs.xwayland.enable = mkDefault true;" in the module.	2021-05-15 20:30:53 +02:00
github-actions[bot]	c10600230e	Merge staging-next into staging	2021-05-15 18:30:31 +00:00
github-actions[bot]	f1b78f8618	Merge master into staging-next	2021-05-15 18:30:28 +00:00
Michael Weiss	73e0dd4b29	Merge pull request #123034 from primeos/sway-simplify-screen-sharing ... sway: Simplify screen sharing	2021-05-15 18:38:52 +02:00
Jonathan Ringer	5a6540c49c	nixos/factorio: update admin setting	2021-05-15 09:04:35 -07:00
Jonas Heinrich	fff9cf00fd	caddy: support user and group options	2021-05-15 10:32:49 +02:00
github-actions[bot]	78ae7ac75e	Merge staging-next into staging	2021-05-15 06:22:25 +00:00
github-actions[bot]	c48794dcef	Merge master into staging-next	2021-05-15 06:22:22 +00:00
Aaron Andersen	fc63be7ac8	Merge pull request #122658 from aanderse/httpd-reload ... nixos/httpd: provide a stable path stable path to the configuration f…	2021-05-14 23:50:43 -04:00
Yarny0	c2af1ff281	nixos/hylafax: enable ProtectKernelLogs for most services ... Also document that `ProtectClock` blocks access to serial line. I couldn't found out why this is the case, but faxgetty complains about the device file not being accessible with `ProtectClock=true`.	2021-05-14 22:55:50 +02:00
Michael Weiss	3f31c0edef	sway: Simplify screen sharing ... This should make it easier to get started. The xdg-desktop-portal backend for wlroots is required and one needs to "make sure WAYLAND_DISPLAY and XDG_CURRENT_DESKTOP are imported into D-Bus." [0] [0]: efcbcb60aa/README.md (running)	2021-05-14 22:42:19 +02:00
Vladimír Čunát	c48eaa70e3	Merge branch 'master' into staging-next	2021-05-14 22:27:34 +02:00
Martin Weinelt	21746a7c80	nixos/postgresqlBackup: allow defining multiple times to start at ... Or … none! Because forcing a string always results in an OnCalender= setting, but an empty string leads to an empty value. > postgresqlBackup-hass.timer: Timer unit lacks value setting. Refusing. or > postgresqlBackup-miniflux.timer: Cannot add dependency job, ignoring: Unit postgresqlBackup-miniflux.timer has a bad unit file setting. I require the postgresqlBackup in my borgbackup unit, so I don't strictly need the timer and could previously set it to an empty list.	2021-05-14 20:41:08 +02:00
V	f4c5ebea50	nixos/mailman: fix documentation option links	2021-05-14 18:33:24 +02:00
Robert Schütz	e611d663f4	Merge pull request #120440 from dotlambda/radicale-settings ... nixos/radicale: add settings option	2021-05-14 15:37:26 +02:00
WilliButz	94b2848559	Merge pull request #91663 from mweinelt/kea-exporter ... prometheus-kea-exporter: init at 0.4.1	2021-05-14 14:38:08 +02:00
Eelco Dolstra	b08e223a04	nix: 2.3.10 -> 2.3.11 ... The patch is included in the new release, so can be dropped. Co-authored-by: Alyssa Ross <hi@alyssa.is>	2021-05-14 12:24:54 +00:00
Alyssa Ross	195d532a63	Revert "Revert "Revert "nix: 2.3.10 -> 2.3.11""" ... This reverts commit 66fc303070. There is still a patch that doesn't apply.	2021-05-14 11:35:18 +00:00
Eelco Dolstra	66fc303070	Revert "Revert "nix: 2.3.10 -> 2.3.11"" ... This reverts commit 1872bbdae5.	2021-05-14 13:33:05 +02:00
Alyssa Ross	1872bbdae5	Revert "nix: 2.3.10 -> 2.3.11" ... This reverts commit 6f6b2cdc98. Version wasn't updated, and apparently a patch didn't apply. Let's do this upgrade properly, in a PR, but for now I'm reverting so we don't have a broken nix package in master.	2021-05-14 11:30:55 +00:00
Eelco Dolstra	6f6b2cdc98	nix: 2.3.10 -> 2.3.11	2021-05-14 13:11:26 +02:00
zowoq	004f8cd986	Merge staging-next into staging	2021-05-14 16:32:43 +10:00
Yarny0	4415846d5c	nixos/hylafax: use runtimeShell where possible ... According to https://github.com/NixOS/nixpkgs/pull/84556 this effort helps with cross-compilation. This commit also renames a substituted variable `hylafax` to `hylafaxplus` to permit substitution with `inherit`.	2021-05-14 05:42:18 +02:00
Yarny0	89df33f882	nixos/hylafax: replace a nested expression with lib.pipe ... This avoids a tripple-nested function call, and it looks slightly simpler (at least to me).	2021-05-14 05:42:18 +02:00
Yarny0	449647daf5	nixos/hylafax: use lib.types.ints.positive ... I haven't realized earlier that there is already an option type for postive integers.	2021-05-14 05:42:17 +02:00
github-actions[bot]	bf5d8bb531	Merge master into staging-next	2021-05-14 00:58:11 +00:00
Jan Tojnar	ac6a4f7cf5	Merge branch 'staging-next' into staging	2021-05-14 01:40:09 +02:00
Samuel Dionne-Riel	12ede41735	Merge pull request #110435 from superloach/patch-2 ... nixos/modules: add "sdhci_pci" to availableKernelModules	2021-05-13 17:45:22 -04:00
Jens Nolte	22e797947b	nixos/zfs: Add defaultText for 'boot.zfs.package'-option (#122002)	2021-05-13 17:40:10 -04:00
Maximilian Bosch	bfd4c121ff	Merge pull request #122637 from mayflower/prometheus-2.26.0 ... Prometheus 2.26.0 + exporter updates	2021-05-13 23:05:29 +02:00
Michael Weiss	60f2af5938	Merge pull request #122605 from primeos/nixos-sway-extend-default-configuration ... nixos/sway: Extend the default configuration for NixOS	2021-05-13 20:48:55 +02:00
github-actions[bot]	39e3f7c2cc	Merge master into staging-next	2021-05-13 18:32:50 +00:00
Janne Heß	672e64701c	nixos/prometheus: Add support for metric relabeling	2021-05-13 15:59:46 +02:00
Izorkin	feebe402f5	treewide: remove duplicates SystemCallFilters	2021-05-13 15:44:56 +03:00
Luke Granger-Brown	ca6255bf0b	nixos/docker: fix evaluation when NAT is enabled too ... Both networking.nat.enable and virtualisation.docker.enable now want to make sure that the IP forwarding sysctl is enabled, but the module system dislikes that both modules contain this option. Realistically this should be refactored a bit, so that the Docker module automatically enables the NAT module instead, but this is a more obvious fix.	2021-05-13 10:26:45 +00:00
Martin Weinelt	bc4a80979b	nixos/prometheus-kea-exporter: init	2021-05-12 21:51:44 +02:00
github-actions[bot]	b057978bb2	Merge staging-next into staging	2021-05-12 18:32:29 +00:00
github-actions[bot]	f214722172	Merge master into staging-next	2021-05-12 18:32:26 +00:00
midchildan	6567031111	nixos/mirakurun: add polkit rule for smart card access (#122066) ... Fixes #122039	2021-05-12 13:57:49 -04:00
Aaron Andersen	f20aa073e1	nixos/httpd: provide a stable path stable path to the configuration file for reloads	2021-05-11 22:36:55 -04:00
Robin Gloster	9438b12f99	prometheus-collectd-exporter: fix options for new version	2021-05-11 17:57:46 -05:00
Robin Gloster	b2956ce654	prometheus-bind-exporter: fix options for new version	2021-05-11 17:57:46 -05:00
Robin Gloster	da85657a6c	prometheus-rspamd-exporter: fix for new json exporter syntax	2021-05-11 17:57:46 -05:00
Thomas Tuegel	799f351997	KDE Applications 20.12.3 -> KDE Gear 21.04.0	2021-05-11 12:14:58 -05:00
Michael Weiss	00e8e5b123	nixos/sway: Extend the default configuration for NixOS ... The default config.in template contains "include @sysconfdir@/sway/config.d/*" but we've dropped it to better support non-NixOS (which seems like a mistake in retrospect). This restores that behaviour and extends the default configuration via nixos.conf to fix #119445. Note: The security configurations (security.d) where dropped entirely (but maybe they'll return).	2021-05-11 18:53:49 +02:00
Jan Tojnar	8380ceb766	nixos/gnome: Allow disabling sysprof	2021-05-11 18:11:01 +02:00
worldofpeace	8ad5d65d09	nixos/gnome: add user docs ... Co-Authored-By: Jan Tojnar <jtojnar@gmail.com>	2021-05-11 18:10:53 +02:00
github-actions[bot]	1e7a48b474	Merge master into staging-next	2021-05-11 12:24:28 +00:00
Tom	33a4c43126	nixos/tor: fix HidServAuth (#122439) ... * add an example for services.tor.settings.HidServAuth * fix HidServAuth validation to require ".onion" Per https://manpages.debian.org/testing/tor/torrc.5.en.html : > Valid onion addresses contain 16 characters in a-z2-7 plus ".onion"	2021-05-11 10:10:32 +02:00
github-actions[bot]	10e16ec9ab	Merge master into staging-next	2021-05-11 06:20:33 +00:00
Jörg Thalheim	8af4bf61fd	Merge pull request #122423 from Izorkin/update-netdata ... nixos/netdata: update configuration	2021-05-11 06:07:48 +01:00
github-actions[bot]	49b8e6f7d4	Merge master into staging-next	2021-05-11 00:48:15 +00:00
Robert Schütz	7217b2d85e	Merge pull request #121785 from dotlambda/dendrite-rename ... matrix-dendrite: rename to dendrite	2021-05-10 23:30:12 +02:00
Joe DeVivo	bf92d0ec37	nixos/ssm-agent: conf files written to /etc ... ssm-agent expects files in /etc/amazon/ssm. The pkg substitutes a location in the nix store for those default files, but if we ever want to adjust this configuration on NixOS, we'd need the ability to modify that file. This change to the nixos module writes copies of the default files from the nix store to /etc/amazon/ssm. Future versions can add config, but right now this would allow users to at least write out a text value to environment.etc."amazon/ssm/amazon-ssm-agent.json".text to provide their own config.	2021-05-10 13:16:41 -07:00
Samuel Dionne-Riel	37f14fa4d9	Merge pull request #121450 from samueldr/feature/cross-uefi-iso ... iso-image: Fixes for cross-compilation	2021-05-10 14:42:59 -04:00
github-actions[bot]	61fa3fdde8	Merge master into staging-next	2021-05-10 18:28:17 +00:00
Samuel Dionne-Riel	79752e2310	Merge pull request #121834 from samueldr/feature/raspberrypi4-image-cleanup ... sd_image_raspberrypi4: Remove, as planned initially	2021-05-10 14:05:02 -04:00
Sandro	f0bb4f066a	Merge pull request #95050 from paumr/bind-fmt	2021-05-10 19:06:00 +02:00
github-actions[bot]	115881e756	Merge master into staging-next	2021-05-10 12:24:32 +00:00
Izorkin	85914bc01d	nixos/netdata: change wrappers permissions	2021-05-10 10:35:51 +03:00
Izorkin	859633ee43	nixos/netdata: use cgroup v2	2021-05-10 10:24:31 +03:00
Izorkin	58497175be	nixos/netdata: cgroup-network: don't use AmbientCapabilities	2021-05-10 10:19:57 +03:00
Michele Guerini Rocco	4cbe186a8a	Merge pull request #121394 from bjornfor/atd-file-creation ... nixos/atd: prefer 'install' over 'mkdir/chmod/chown'	2021-05-10 08:43:57 +02:00
github-actions[bot]	f4d69ad1f2	Merge master into staging-next	2021-05-10 06:20:28 +00:00
Michele Guerini Rocco	d0cbcce8d4	Merge pull request #121395 from bjornfor/nixos-wpa-supplicant ... nixos/wpa_supplicant: prefer 'install' over 'touch/chmod/mkdir/chgrp'	2021-05-10 08:16:39 +02:00
hyperfekt	3e3e763a07	nixos/systemd: enable systemd-pstore.service ... As described in issue #81138, the Install section of upstream units is currently ignored, so we make it part of the sysinit.target manually.	2021-05-09 23:21:51 +02:00
hyperfekt	870fa77ff6	nixos/filesystems: mount persistent storage to /sys/fs/pstore	2021-05-09 23:21:32 +02:00
github-actions[bot]	bc1f4b790e	Merge master into staging-next	2021-05-09 12:23:16 +00:00
Luke Granger-Brown	491216df02	Merge pull request #122099 from alekna/fix/docker ... nixos/docker: ensure ipv4 forwarding is enabled	2021-05-09 12:15:16 +01:00
Michele Guerini Rocco	e5452226af	Merge pull request #121791 from dotlambda/sudo-execWheelOnly ... nixos/sudo: add option execWheelOnly	2021-05-09 10:04:15 +02:00
Vladimír Čunát	5663b2b2d3	Merge branch 'master' into staging-next ... (a trivial conflict in transmission)	2021-05-09 09:31:55 +02:00
Robert Schütz	5624aa9f81	nixos/sudo: add option execWheelOnly ... By setting the executable's group to wheel and permissions to 4510, we make sure that only members of the wheel group can execute sudo.	2021-05-08 23:48:00 +02:00
paumr	5390d4b946	nixos/bind: formatted with nixpkgs-fmt	2021-05-08 23:13:58 +02:00
Robert Schütz	314a64a026	nixos/znc: fix example	2021-05-08 22:54:19 +02:00
Robert Schütz	5986f233a6	nixos/znc: remove trailing slash from dataDir	2021-05-08 22:54:19 +02:00
Robert Schütz	4400ee83ec	nixos/znc: harden systemd unit	2021-05-08 22:54:15 +02:00
Robert Hensing	4433ba90aa	Merge pull request #121927 from rissson/nixos-unbound-fix-top-level-include ... nixos/unbound: allow list of strings in top-level settings option type	2021-05-08 22:00:57 +02:00
github-actions[bot]	6d46d8a9b9	Merge master into staging-next	2021-05-08 18:22:46 +00:00
Hedtke, Moritz	7a80d281ed	nixos/containers: Increase startup timeout for imperative containers ... Changed the startup timeout from 15 seconds to one minute as 15 seconds is really low. Also it's currently not possible to change it without editing your system configuration.	2021-05-08 19:59:20 +02:00
Laurynas Alekna	9317570735	nixos/docker: ensure ipv4 forwarding is enabled ... Fixes #118656	2021-05-08 18:58:24 +01:00
Marc 'risson' Schmitt	0340cd2abe	nixos/unbound: allow list of strings in top-level settings option type ... Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>	2021-05-08 19:55:17 +02:00
Aaron Andersen	9254b82706	Merge pull request #121746 from j0hax/monero-options ... nixos/monero: add dataDir option	2021-05-08 11:43:49 -04:00
Martin Weinelt	9651084620	Merge remote-tracking branch 'origin/master' into staging-next	2021-05-08 14:43:43 +02:00
Vladimír Čunát	080cd658ca	Merge #121780: treewide meta.maintainers tweaks	2021-05-08 10:47:08 +02:00
Gemini Lasswell	28f51d7757	nixos/yggdrasil: set directory permissions before writing keys ... Remove the opportunity for someone to read the keys in between when they are written and when the chmod is done. Addresses #121293.	2021-05-08 09:49:19 +02:00
Jan Tojnar	468cb5980b	gnome: rename from gnome3 ... Since GNOME version is now 40, it no longer makes sense to use the old attribute name.	2021-05-08 09:47:42 +02:00
github-actions[bot]	e21fb16f9a	Merge master into staging-next	2021-05-08 06:20:05 +00:00
Silvan Mosberger	08d94fd2b0	Merge pull request #114374 from oxalica/lib/platform-support-check ... lib.meta: introduce `availableOn` to check package availability on given platform	2021-05-08 03:54:36 +02:00
github-actions[bot]	b4416b52c5	Merge master into staging-next	2021-05-08 00:46:50 +00:00
Johannes Arnold	c0853b6e2c	nixos/monero: use isSystemUser = true	2021-05-08 02:13:25 +02:00
Michele Guerini Rocco	4e4869b92b	Merge pull request #114745 from rnhmjoj/brltty ... brltty: 6.1 -> 6.3; nixos/brltty: use upstream units	2021-05-07 23:35:57 +02:00
Domen Kožar	8ecb0344a0	Merge pull request #121720 from samueldr/feature/arm-stage-1-modules ... installer images: Add available modules to stage-1 on ARM platforms	2021-05-07 22:01:09 +02:00
Evils	5ae90276c3	nixos/fancontrol: clean up module ... set a group and user for the service remove default null config it's required, now it throws an error pointing to the option set myself (module author) as maintainer	2021-05-07 11:46:40 -07:00
github-actions[bot]	1ae6d3d02f	Merge master into staging-next	2021-05-07 18:24:29 +00:00
Robin Gloster	29e92116d1	Merge pull request #118037 from mayflower/privacy-extensions-configurable ... nixos/network: allow configuring tempaddr for undeclared interfaces	2021-05-07 13:01:29 -05:00
ajs124	cd609e7a1c	Merge pull request #117094 from helsinki-systems/drop/spidermonkey_1_8_5 ... spidermonkey_1_8_5: drop	2021-05-07 18:55:49 +02:00
Robert Hensing	316b82563a	Merge pull request #121702 from hercules-ci/nixos-hercules-ci-agent-update ... nixos/hercules-ci-agent: updates	2021-05-07 15:48:33 +02:00
Vladimír Čunát	9f054b5e1a	treewide: remove worldofpeace from meta.maintainers ... (It was requested by them.) I left one case due to fetching from their personal repo: pkgs/desktops/pantheon/desktop/extra-elementary-contracts/default.nix	2021-05-07 15:36:40 +02:00
github-actions[bot]	12193913a1	Merge staging-next into staging	2021-05-07 12:23:21 +00:00
Jan Tojnar	9468b07326	Merge branch 'gnome-40'	2021-05-07 12:12:40 +02:00
github-actions[bot]	e5f4def056	Merge staging-next into staging	2021-05-07 00:46:58 +00:00
Robert Hensing	0633b6aa74	Merge pull request #121870 from Pacman99/pass-specialargs ... lib/modules: pass specialArgs to modules	2021-05-07 01:54:48 +02:00
Pacman99	87c659ab94	nixos/top-level: specialArgs to specialisations	2021-05-06 16:04:08 -07:00
John Ericson	a3e54cb582	Merge remote-tracking branch 'upstream/staging-next' into staging	2021-05-06 15:48:25 -04:00
Sander van der Burg	77295e7e6b	nixos/disnix: configure the remote client by default, if multi-user mode has been enabled	2021-05-06 19:33:02 +02:00
Martin Weinelt	6a09bc4405	Merge pull request #121865 from mweinelt/home-assistant	2021-05-06 18:05:00 +02:00
Martin Weinelt	24adc01e2e	nixos/home-assistant: allow netlink sockets and /proc/net inspection ... Since v2021.5.0 home-assistant uses the ifaddr library in the zeroconf component to enumerate network interfaces via netlink. Since discovery is all over the place lets allow AF_NETLINK unconditionally. It also relies on pyroute2 now, which additionally tries to access files in /proc/net, so we relax ProtectProc a bit by default as well. This leaves us with these options unsecured: ✗ PrivateNetwork= Service has access to the host's network 0.5 ✗ RestrictAddressFamilies=~AF_(INET|INET6) Service may allocate Internet sockets 0.3 ✗ DeviceAllow= Service has a device ACL with some special devices 0.1 ✗ IPAddressDeny= Service does not define an IP address allow list 0.2 ✗ PrivateDevices= Service potentially has access to hardware devices 0.2 ✗ PrivateUsers= Service has access to other users 0.2 ✗ SystemCallFilter=~@resources System call allow list defined for service, and @resources is included (e.g. ioprio_set is allowed) 0.2 ✗ RestrictAddressFamilies=~AF_NETLINK Service may allocate netlink sockets 0.1 ✗ RootDirectory=/RootImage= Service runs within the host's root directory 0.1 ✗ SupplementaryGroups= Service runs with supplementary groups 0.1 ✗ RestrictAddressFamilies=~AF_UNIX Service may allocate local sockets 0.1 ✗ ProcSubset= Service has full access to non-process /proc files (/proc subset=) 0.1 → Overall exposure level for home-assistant.service: 1.6 OK 🙂	2021-05-06 16:55:53 +02:00
Jörg Thalheim	4e783a4cb7	Merge pull request #121724 from Izorkin/update-netdata ... netdata: 1.29.3 -> 1.30.1	2021-05-06 14:58:33 +01:00
github-actions[bot]	c63e69cd89	Merge staging-next into staging	2021-05-06 12:23:32 +00:00
Maximilian Bosch	a50b9e6c23	Merge pull request #113716 from Ma27/wpa_multiple ... wpa_supplicant: allow both imperative and declarative networks	2021-05-06 11:01:35 +02:00
Simon Thoby	1bdda029cd	nixos/services/torrent/transmission.nix: add a missing apparmor rule ... libbrotli wasn't listed as a dependency for the AppArmor profile of the transmission-daemon binary. As a result, transmission wouldn't run and would fail, logging this audit message to dmesg: audit[11595]: AVC apparmor=DENIED operation=open profile=/nix/store/08i1rmakmnpwyxpvp0sfc5hcm106am7w-transmission-3.00/bin/transmission-daemon name=/proc/11595/environ pid=11595 comm=transmission-da requested_mask=r denied_mask=r fsuid=70 ouid=70	2021-05-05 22:47:52 +02:00
Jan Tojnar	878abc6488	nixos/gnome3: Install GNOME Tour ... It will be run after startup.	2021-05-05 22:43:02 +02:00
Jan Tojnar	316928e8c1	nixos/gnome3: Enable power-profiles-daemon ... GNOME 40 added support for it in Control Center.	2021-05-05 22:43:01 +02:00
Jan Tojnar	49ae2e4c26	gnome3.gnome-getting-started-docs: drop ... It has been retired https://gitlab.gnome.org/GNOME/gnome-build-meta/-/issues/353	2021-05-05 22:43:01 +02:00
Jan Tojnar	d2e141e412	gnome3.gdm: 3.38.2.1 → 40.0	2021-05-05 22:42:32 +02:00
Samuel Dionne-Riel	6cb46a3897	sd_image_raspberrypi4: Remove, as planned initially ... The replacement is the generic AArch64 image. From there, you can customize an image that works better for your needs, if need be.	2021-05-05 16:19:13 -04:00
Izorkin	53651179b9	nixos/netdata: update capabilities	2021-05-05 20:46:07 +03:00
github-actions[bot]	af9d9374fa	Merge staging-next into staging	2021-05-05 12:23:47 +00:00
Robert Schütz	f82c6fdfd5	nixos/matrix-dendrite: rename to dendrite	2021-05-05 12:38:02 +02:00
Robert Schütz	007cab9644	matrix-dendrite: rename to dendrite ... No other distro calls it matrix-dendrite: https://repology.org/project/matrix-dendrite	2021-05-05 12:37:04 +02:00
Robert Hensing	ce93c98ce2	Merge pull request #99132 from Infinisil/recursive-type-deprecation ... Recursive type deprecation	2021-05-05 11:13:37 +02:00
Jörg Thalheim	503b937542	nixos/buildkite-agents: fix race-condition when installing secrets	2021-05-05 06:56:06 +02:00
Silvan Mosberger	0a377f11a5	nixos/treewide: Remove usages of deprecated types.string	2021-05-05 03:31:41 +02:00
github-actions[bot]	68e3ba2b1d	Merge staging-next into staging	2021-05-05 00:46:07 +00:00
Samuel Dionne-Riel	1cb977c858	sd-image: Rely on profiles/all-hardware.nix ... This ensures that SD images and UEFI installers don't drift in compatibility with regards to early initrd.	2021-05-04 19:42:13 -04:00
Samuel Dionne-Riel	cb9b46a3cd	profiles/all-hardware.nix: Add vc4 for broadcom hardware ... Namely, early KMS on raspberry pi	2021-05-04 19:42:13 -04:00
Samuel Dionne-Riel	f5b7687d26	profiles/all-hardware.nix: Share some config for all ARM	2021-05-04 19:42:13 -04:00
Samuel Dionne-Riel	14ac6de024	profiles/all-hardware.nix: Fix for arvmv7l-linux	2021-05-04 19:42:13 -04:00
Samuel Dionne-Riel	82625705c6	profiles/all-hardware.nix: Add analogix-dp ... While it's being brought in implicitly by the other analogix driver, let's be explicit, in case things change.	2021-05-04 19:42:13 -04:00
Samuel Dionne-Riel	9fa3e2c2a3	profiles/all-hardware.nix: Add regulator needed for rockchip ... But not exclusive to rockchip	2021-05-04 19:42:13 -04:00
Samuel Dionne-Riel	535d463cf9	profiles/all-hardware.nix: Add rockchip modules	2021-05-04 19:42:13 -04:00
Samuel Dionne-Riel	70205bd13c	profiles/all-hardware.nix: Add support for Raspberry Pi 4 USB	2021-05-04 19:42:13 -04:00
Samuel Dionne-Riel	a846d19831	profiles/all-hardware.nix: Add power regulator modules ... This is used on some allwinner platforms, and is a weak dependency for USB to work.	2021-05-04 19:42:12 -04:00
Samuel Dionne-Riel	a8af02fe6d	profiles/all-hardware.nix: Add modules for integrated displays ... Namely, this is used by the pinebook's display	2021-05-04 19:42:12 -04:00
Samuel Dionne-Riel	5bc36c1b30	profiles/all-hardware.nix: Add support for Allwinner hardware	2021-05-04 19:42:12 -04:00
Samuel Dionne-Riel	c60de92917	profiles/all-hardware.nix: Add simplefb for AArch64	2021-05-04 19:42:12 -04:00
Samuel Dionne-Riel	556fc32d69	iso-image: Build using strictDeps	2021-05-04 19:37:49 -04:00
Samuel Dionne-Riel	f1100e1506	iso-image: Add support for armv7l-linux	2021-05-04 19:37:49 -04:00
Samuel Dionne-Riel	d053c05d19	iso-image: Fixes for cross-compilation ... Note that here, since it's not a in a callPackage call, splicing won't work on nativeBuildInputs.	2021-05-04 19:37:48 -04:00
Samuel Dionne-Riel	385dc32fa8	Merge pull request #119974 from samueldr/feature/grub-gfx-aarch64 ... iso-image: Fix GRUB graphical menu on AArch64	2021-05-04 19:36:40 -04:00
Johannes Arnold	ff65166f44	nixos/monero: fix typo	2021-05-04 21:57:21 +00:00
Johannes Arnold	7cf3ffbddd	nixos/monero: add dataDir option	2021-05-04 21:56:45 +00:00
github-actions[bot]	4cbb35eba8	Merge staging-next into staging	2021-05-04 18:21:27 +00:00
Izorkin	9aad915539	nixos/netadata: add required packages	2021-05-04 21:02:23 +03:00
talyz	deb58f6486	nixos/keycloak: Document how to use a custom local database	2021-05-04 19:27:08 +02:00