Commit Graph

33782 Commits

Author SHA1 Message Date
github-actions[bot]
4b2e2c8b39
Merge master into staging-next 2023-06-03 00:02:20 +00:00
Martin Wurm
22513042e6 nixos/syncthing: Remove unnecessary patch note
The breaking change in this patch note has been reverted for now, see #226088.
2023-06-03 01:38:53 +02:00
Pol Dellaiera
161182c362
Merge pull request #234987 from mmusnjak/apache-datasketches
apache_datasketches: init at 1.6.0
2023-06-02 21:55:22 +02:00
happysalada
ee1c6053fb nixos/ntfy-sh: use dynamic user and add defaults 2023-06-02 15:22:14 -04:00
Marko Mušnjak
aafe0f4314
apache_datasketches: init at 1.6.0
PostgreSQL extension providing approximate algorithms for
distinct item counts, quantile estimation and frequent items detection.
2023-06-02 21:03:19 +02:00
github-actions[bot]
6084eca7dc
Merge master into staging-next 2023-06-02 18:01:04 +00:00
Linus Heckemann
15c3a653d5
Merge pull request #235440 from lheckemann/garage
nixos/garage: allow unsafe replication modes, restart on config change
2023-06-02 19:22:03 +02:00
Linus Heckemann
c4f727c944 nixos/garage: allow unsafe replication modes, restart on config change 2023-06-02 18:11:44 +02:00
K900
e534047e2d
Merge pull request #234620 from linj-fork/fix/murmur-after
nixos/murmur: make it be after network.target again
2023-06-02 18:13:12 +03:00
Ryan Lahfa
4a4238a840
Merge pull request #235143 from wlcx/patch-1
nixos/pixelfed: fix broken try_files
2023-06-02 17:12:14 +02:00
Ryan Lahfa
0902958046
Merge pull request #235295 from nikstur/qemu-vm-improve-comments-and-docs
nixos/qemu-vm: improve comments and option descriptions
2023-06-02 15:34:49 +02:00
Bobby Rong
7f96a08418
Merge pull request #235511 from bobby285271/upd/cinnamon-bpo
Cinnamon updates 2023-06-02
2023-06-02 21:25:34 +08:00
Mario Rodas
99287fe19b
Merge pull request #235450 from Luflosi/update/aaaaxy
aaaaxy: 1.3.538 -> 1.4.2
2023-06-02 07:42:12 -05:00
Bobby Rong
68dd259958
Merge pull request #235514 from bobby285271/upd/pantheon
Pantheon updates 2023-06-02
2023-06-02 20:36:02 +08:00
github-actions[bot]
c8021f68a8
Merge master into staging-next 2023-06-02 12:01:23 +00:00
Bobby Rong
9f5dc9f927
nixos/tests/cinnamon: silence a warning and remove unused args
Module argument `nodes.machine.config` is deprecated. Use `nodes.machine` instead.
2023-06-02 19:51:12 +08:00
Bobby Rong
e447cb9776
nixos/pantheon: enable xdg-desktop-portal-gtk by default 2023-06-02 19:29:26 +08:00
Ryan Lahfa
32630256f2
Merge pull request #235424 from AmineChikhaoui/ec2-amis-rel-23.05 2023-06-02 12:18:48 +02:00
github-actions[bot]
1625d790e1
Merge staging-next into staging 2023-06-02 06:01:45 +00:00
Bobby Rong
7cf3428fd5
nixos/cinnamon: fix slick-greeter icon theme package default 2023-06-02 11:40:09 +08:00
Nick Cao
9e2fa20321
Merge pull request #235425 from 999eagle/fix/nitter
nixos/nitter: fix proxy option
2023-06-01 20:26:54 -06:00
github-actions[bot]
8b93c4f667
Merge staging-next into staging 2023-06-02 00:03:07 +00:00
Dennis Gosnell
dcf201d275
nixosTests.virtualbox: remove cdepillabout as maintainer 2023-06-02 07:44:51 +09:00
Silvan Mosberger
d4fe69faea nix-fallback-paths.nix: Update to 2.15.1 2023-06-01 22:55:14 +02:00
Alex Crawford
67c72f85a3 rl-2305: Use immutable URL for the systemd release notes 2023-06-01 13:48:11 -07:00
Alex Crawford
4b8977a3e9 rl-2305: Fix the links to the Nix release notes
NixOS 23.05 updated Nix from 2.11 to 2.13, so the release notes for
2.12 and 2.13 should be linked.
2023-06-01 13:48:11 -07:00
Thiago Kenji Okada
99d37f54f0 nixos/sway: fix package option documentation 2023-06-01 19:40:02 +00:00
Weijia Wang
f2654557a6
Merge pull request #235369 from vcunat/p/release-notes-nits
23.05 release notes nits
2023-06-01 20:48:14 +02:00
Luflosi
35af643640
aaaaxy: 1.3.538 -> 1.4.2
https://github.com/divVerent/aaaaxy/releases/tag/v1.4.2
2023-06-01 20:14:33 +02:00
Weijia Wang
e921ee7fdf
Merge pull request #235298 from eliasnaur/master
nixos/doc/manual: add release notes for util-linux on Darwin
2023-06-01 20:04:18 +02:00
github-actions[bot]
8985306cfd
Merge staging-next into staging 2023-06-01 18:01:45 +00:00
Sophie Tauchert
2dbd1e56c1
nixos/nitter: fix proxy option 2023-06-01 19:59:48 +02:00
Weijia Wang
076e3d55c0
Merge pull request #234043 from figsoda/pypi
python3.pkgs.fetchPypi: deprecate in favor of top-level fetchPypi
2023-06-01 19:56:32 +02:00
Amine Chikhaoui
709043ed97
add release 23.05 AWS AMIs 2023-06-01 13:46:53 -04:00
Martin Weinelt
849fe26ac4
Merge pull request #229309 from bjornfor/update-kanidm
kanidm: 1.1.0-alpha.11 -> 1.1.0-alpha.12
2023-06-01 16:47:44 +02:00
Bjørn Forsman
ed99bd0fb9
kanidm: 1.1.0-alpha.11 -> 1.1.0-alpha.12
* Update Cargo.lock from upstream.
* Adapt expression to upstream source tree layout changes.
* Apply patch to restore x86_64 v1 support

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>

Also updates the NixOS test:

* Stop kanidm to recover the idm_admin account
* Group all tests into subtest blocks
* Add TODO to wait for unix socket on unixd for the next release

Co-Authored-By: Raito Bezarius <masterancpp@gmail.com>
Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2023-06-01 15:28:11 +02:00
github-actions[bot]
e8e956566c
Merge staging-next into staging 2023-06-01 12:02:11 +00:00
Pol Dellaiera
3090855141
Merge pull request #232360 from drupol/nixos/refactor-code-server
nixos/code-server: add tests and more command line options
2023-06-01 13:56:01 +02:00
Vladimír Čunát
054c184cab
nixos/doc: drop a repeated paragraph
It's in "backward incompatibilities" section, so no need to be also
in "*other* notable changes" section.
2023-06-01 12:47:34 +02:00
Vladimír Čunát
c41c19276d
nixos/doc: drop a repeated paragraph
Bad conflict resolution, I assume.
2023-06-01 12:46:52 +02:00
Vladimír Čunát
ad90e88108
nixos/doc: fix typo 2023-06-01 12:46:15 +02:00
Elias Naur
f970e996fc nixos/doc/manual: add release notes for util-linux on Darwin
This is a follow-up to PR #232713.
2023-05-31 18:25:11 -06:00
github-actions[bot]
52e40d8261
Merge staging-next into staging 2023-06-01 00:03:14 +00:00
nikstur
003fec835c nixos/qemu-vm: remove grub references from useBootLoader description 2023-06-01 01:38:08 +02:00
nikstur
8ea8154a32 nixos/qemu-vm: (re-)move old/incorrect comments 2023-06-01 01:38:06 +02:00
Yaya
28ecd17523 nixos/doc: Mention container registry deprecation in gitlab
Support for external container registries has ended in GitLab >=16 and
module users are therefore advised to switch to gitlab's fork instead.
2023-05-31 22:14:25 +02:00
Yaya
e9594e6031 nixos/gitlab: Warn users who are still using an external registry
This adds a warning for GitLab >=16.0.0 users who are still using an
external container registry such as `pkgs.docker-distribution`. Support
for external container registries has ended in GitLab 16.0 [1] and is
scheduled for removal in a future release. [2]

[1]: https://gitlab.com/gitlab-org/gitlab/-/issues/376217
[2]: https://gitlab.com/gitlab-org/gitlab/-/issues/403322
2023-05-31 22:14:25 +02:00
Yaya
014816cbe4 nixos/gitlab: Add support for gitlab-container-registry
Support for external container registries (namely
`pkgs.docker-distribution`) has ended in GitLab 16.0 [1] and is
scheduled for removal in a future release. [2]

This commit adds a new registry package option, defaulting to
`pkgs.docker-distribution` and `pkgs.gitlab-container-registry` for
system state versions >= 23.11.

While it is still possible to use the docker container registry, module
users should switch to gitlab's container registry fork soon. A warning
message will be added in a future commit to advise affected users to
back up their state and then switch to the new container registry
package.

[1]: https://gitlab.com/gitlab-org/gitlab/-/issues/376217
[2]: https://gitlab.com/gitlab-org/gitlab/-/issues/403322
2023-05-31 22:14:25 +02:00
Yaya
049d680510 nixos/dockerRegistry: add package option
This allows the module user to select an alternative container registry
package such as `pkgs.gitlab-container-registry` for GitLab users.
2023-05-31 22:14:25 +02:00
Yureka
82d9c2e91f nixosTests.gitlab: fix project ids 2023-05-31 22:14:25 +02:00
Yaya
edc47cb999 nixos/doc: Mention PostgreSQL requirement for gitlab
`gitlab` has been upgraded to major version 16 and requires at least
PostgreSQL 13.6.
2023-05-31 22:14:25 +02:00
Yaya
2a4536952a nixos/gitlab: Require at least postgresql 13.6
https://docs.gitlab.com/16.0/ee/install/requirements.html#postgresql-requirements
2023-05-31 22:14:25 +02:00
Yaya
4321e48b68 nixos/gitlab: Remove procps from gitaly service
From my understanding, procps was added to the gitlay systemd service
path in #58487 to fix gitaly-ruby's internal memory leak detection.

Now that the last ruby remnants have been removed in gitaly 16.0.0,
this should not be necessary anymore.
2023-05-31 22:14:25 +02:00
Yaya
33411f2768 nixos/gitlab: Update redis configuration
Configuring Redis via environment variable is not supported anymore
since [1].

[1] 1242965361
2023-05-31 22:14:25 +02:00
Yaya
6fed71cab2 gitaly: Remove ruby dependencies
Ruby dependencies in gitaly have been removed in the 16.0.0 release. [1]

See GitLab Epic &2862 [2] for more info.

[1]: 689556e70a
[2]: https://gitlab.com/groups/gitlab-org/-/epics/2862
2023-05-31 22:14:25 +02:00
github-actions[bot]
e436cc21a6
Merge staging-next into staging 2023-05-31 18:01:35 +00:00
figsoda
ffbf6f27c9 python3.pkgs.fetchPypi: deprecate in favor of top-level fetchPypi 2023-05-31 13:48:06 -04:00
Kira Bruneau
7e820610e3
Merge pull request #234207 from emilylange/acme-dns
acme-dns: init at 1.0; nixos/acme-dns: init; nixos/acme-dns: init
2023-05-31 11:40:35 -04:00
figsoda
137dd249c5 writeTextFile: revert workaround for executable = null 2023-05-31 09:25:18 -04:00
emilylange
fa21828be5
nixosTests.acme-dns: init 2023-05-31 15:08:39 +02:00
emilylange
d0af39521b
nixos/acme-dns: init 2023-05-31 15:08:37 +02:00
github-actions[bot]
323e9a44c2
Merge staging-next into staging 2023-05-31 12:01:43 +00:00
Martin Weinelt
17684ef69d
rl2305: Sync back changes that only went into 23.05 2023-05-31 13:55:20 +02:00
Martin Weinelt
99012d1bbd
Merge pull request #235011 from NixOS/before-23.05-final-release
release: before 23.05 final release
2023-05-31 13:51:08 +02:00
Arian van Putten
5a13c00640
Merge pull request #235082 from ElvishJerricco/systemd-uefi-bug-chunked-reads
systemd-boot: Patch for firmwares that fail to load large files
2023-05-31 13:49:57 +02:00
Lennart Mühlenmeier
a17e3e356a
rl-2305: finalize the release notes
Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2023-05-31 13:28:55 +02:00
ajs124
957db96d53
Merge pull request #233850 from helsinki-systems/upd/apparmor
apparmor: 3.1.3 -> 3.1.4
2023-05-31 12:12:30 +02:00
r-vdp
2b63df0a03 modules/sshd: print the offending keys when we detect duplicate sshd keys. 2023-05-31 12:07:06 +02:00
Sam W
6ad72aa37e
nixos/pixelfed: fix broken try_files
Add missing $ to try files directive. This fixes pixelfed federation and search, amongst presumably many other things!
2023-05-31 15:19:23 +08:00
Will Fancher
6727bab05e systemd-boot: Patch for firmwares that fail to load large files 2023-05-30 19:21:16 -04:00
github-actions[bot]
4265b54868
Merge staging-next into staging 2023-05-30 18:01:44 +00:00
github-actions[bot]
15b82046fb
Merge master into staging-next 2023-05-30 18:01:10 +00:00
Raito Bezarius
b8c2962807 nixos/doc/manual/installation: update the upgrading chapter for 23.05 2023-05-30 16:42:53 +02:00
github-actions[bot]
7443b1efc5
Merge staging-next into staging 2023-05-30 12:01:46 +00:00
github-actions[bot]
8ca315db3e
Merge master into staging-next 2023-05-30 12:01:07 +00:00
Aaron Andersen
d098eec2da nixos/vmalert: init 2023-05-30 07:41:00 -04:00
Nick Cao
93ebabefb2
Merge pull request #234930 from NickCao/maddy
maddy: 0.6.3 -> 0.7.0
2023-05-30 05:16:51 -06:00
Raito Bezarius
5e64b96a12
rl-2305: alpha version for 23.05
This is an alpha version worked out by the release managers.

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2023-05-30 12:09:55 +02:00
github-actions[bot]
36927e8629
Merge staging-next into staging 2023-05-30 06:01:32 +00:00
github-actions[bot]
2cc7256a10
Merge master into staging-next 2023-05-30 06:01:03 +00:00
Jonas Heinrich
63f73b3295
nixos/maddy: change secrets option to accept a list of paths 2023-05-30 12:41:07 +08:00
github-actions[bot]
1df97aede2
Merge staging-next into staging 2023-05-30 00:02:56 +00:00
github-actions[bot]
ceb7ed5e38
Merge master into staging-next 2023-05-30 00:02:21 +00:00
Gaetan Lepage
d93dc82ee9 nixos/river: fix display manager error 2023-05-29 22:41:48 +02:00
3JlOy_PYCCKUI
22c8251d7f nixos/dk: init 2023-05-29 19:05:55 +00:00
Will Fancher
76d668fae7
Merge pull request #227628 from m-bdf/logind-handle-keys
nixos/logind: Add key handling options
2023-05-29 14:31:43 -04:00
Ryan Lahfa
5e871d8aa6
Merge pull request #234639 from Atemu/rl-buildFHSEnvBubblewrap-migration
rl-2305: mention buildFHSEnv switch to bubblewrap
2023-05-29 20:11:05 +02:00
github-actions[bot]
5611fa71ab
Merge staging-next into staging 2023-05-29 18:01:43 +00:00
github-actions[bot]
698b4f4f63
Merge master into staging-next 2023-05-29 18:01:07 +00:00
Julien Malka
9631553153 Revert "nixos/ntfy-sh: add defaults, use dynamic user"
This reverts commit 3dcca62a5e.
2023-05-29 11:11:32 -04:00
Florian Klink
8b8a64d737
Merge pull request #234442 from rnhmjoj/pr-fix-ifnames
network-interfaces-scripted: fix interface cleanup
2023-05-29 15:14:12 +02:00
github-actions[bot]
a0de937efb
Merge staging-next into staging 2023-05-29 12:02:05 +00:00
github-actions[bot]
1baa1734cb
Merge master into staging-next 2023-05-29 12:01:30 +00:00
Weijia Wang
4387329d8f
Merge pull request #234729 from tie/pufferpanel-doc-fhsenv
nixos/pufferpanel: buildFHSUserEnv -> buildFHSEnv
2023-05-29 10:56:11 +03:00
Vladimír Čunát
2f9191eb88
Merge branch 'master' into staging-next 2023-05-29 08:14:18 +02:00
Ivan Trubach
0143b16935 nixos/pufferpanel: buildFHSUserEnv -> buildFHSEnv
The pufferpanel module (#225274) was merged shortly after the tree-wide
rename f63a12f296 (#225748), so the use of
deperecated buildFHSUserEnv in the docs slipped through review 😅
2023-05-29 07:08:19 +03:00
happysalada
3dcca62a5e nixos/ntfy-sh: add defaults, use dynamic user 2023-05-28 21:17:14 -04:00
github-actions[bot]
7ff7700c0b
Merge staging-next into staging 2023-05-29 00:03:02 +00:00
Martin Weinelt
6b554aae1c
Merge pull request #234186 from hmenke/shadowsocks
nixos/shadowsocks: wait for nginx to prevent race condition
2023-05-29 01:37:36 +02:00
Weijia Wang
b8ce4c46f5
Merge pull request #234645 from Izorkin/update-http3-libs
Update http3 libraries
2023-05-29 00:50:38 +03:00
github-actions[bot]
a981e2e0f3
Merge staging-next into staging 2023-05-28 18:01:48 +00:00
Izorkin
f28c987507
nixos/tests: update nginx-http3 test 2023-05-28 19:55:00 +03:00
Alyssa Ross
ad31856bd9
nixosTests.public-inbox: extend sleep
5 seconds isn't reliably enough here on my system.
2023-05-28 16:40:13 +00:00
Atemu
3720991c06 rl-2305: mention buildFHSEnv switch to bubblewrap
See https://github.com/NixOS/nixpkgs/pull/225748
2023-05-28 17:41:49 +02:00
Lin Jian
0ae9df6c5e
nixos/murmur: make it be after network.target again
network.target was changed to network-online.target in this PR[1] to
workaround an issue[2].

The murmur version in Nixpkgs has fixed that issue[2].

[1]: https://github.com/NixOS/nixpkgs/pull/42860
[2]: https://github.com/mumble-voip/mumble/issues/1629
2023-05-28 21:03:40 +08:00
Alyssa Ross
507ff39251 nixos/test-driver: fix formatting
This caused the test driver to fail to build.

Fixes: 406de94b41 ("nixos/test-driver: add `timeout` option for `wait_for_console_text`")
2023-05-28 12:29:26 +00:00
github-actions[bot]
572e24048b
Merge staging-next into staging 2023-05-28 12:01:53 +00:00
Jacek Galowicz
b4b45ee6d2
Revert "nixos/lib/test-driver: enable EFI variable reads at runtime" 2023-05-28 13:05:59 +02:00
Jacek Galowicz
d9626034f1
Merge pull request #234513 from NixOS/test-driver/wait_for_console_timeout
nixos/test-driver: add `timeout` option for `wait_for_console_text`
2023-05-28 09:57:00 +02:00
Jacek Galowicz
be62469b22
Merge pull request #229027 from NixOS/qemu-vm/read-efi-var
nixos/lib/test-driver: enable EFI variable reads at runtime
2023-05-28 09:51:29 +02:00
github-actions[bot]
19efa11381
Merge staging-next into staging 2023-05-28 06:01:45 +00:00
Bobby Rong
838dad5de9
Merge pull request #234231 from bobby285271/add/xdg-desktop-portal-xapp
xdg-desktop-portal-xapp: init at 1.0.0
2023-05-28 10:52:30 +08:00
github-actions[bot]
003f914d04
Merge staging-next into staging 2023-05-28 00:03:10 +00:00
Raito Bezarius
d1104e2109 nixos/test-driver: add timeout option for wait_for_console_text (variant 2) 2023-05-28 00:07:43 +02:00
Thomas Gerbet
85f15277d0 etcd: switch to etcd_3_5 2023-05-28 08:04:43 +10:00
Thomas Gerbet
a24848c470 nixos/etcd: allow to choose the package 2023-05-28 08:04:43 +10:00
Raito Bezarius
406de94b41 nixos/test-driver: add timeout option for wait_for_console_text
Previously, `wait_for_console_text` would block indefinitely until there were lines
shown in the buffer.

This is highly annoying when testing for things that can just hang for some reasons.

This introduces a classical timeout mechanism via non-blocking get on the Queue.
2023-05-27 23:55:52 +02:00
Raito Bezarius
f1aee66f92 nixos/lib/test-driver: enable EFI variable reads at runtime
This is useful whenever you want to diagnose the current state of UEFI
variables, to assert that bootloaders or boot programs (systemd-stub)
did their job correctly and set their variables accordingly.

In the future, it can enable inspecting SecureBoot keys also.
2023-05-27 22:44:58 +02:00
Ryan Lahfa
77a1c48cca
Merge pull request #232011 from GaetanLepage/river
nixos/river: init module
2023-05-27 22:30:51 +02:00
github-actions[bot]
9441fc25d1
Merge staging-next into staging 2023-05-27 18:01:38 +00:00
rnhmjoj
ea0b4a694a
nixos/test/networking: test unusual interface names 2023-05-27 19:19:37 +02:00
Victor Freire
fca068a558 nixos/tests/legit: init 2023-05-27 16:20:05 +00:00
Victor Freire
77520d39ce nixos/legit: init 2023-05-27 16:20:05 +00:00
Raito Bezarius
09d1022782 nixos/qemu-vm: fix 32-bits assert for memorySize
It should be an implication, rather than &&.
2023-05-27 17:20:08 +02:00
Jacek Galowicz
3580ac6c65
Merge pull request #234427 from alyssais/create_machine
nixos/test-driver: undeprecate create_machine
2023-05-27 17:02:11 +02:00
Alyssa Ross
e33c2a5e4c nixos/test-driver: add missing spaces to warning 2023-05-27 15:00:00 +00:00
Martin Weinelt
108721e4d1
Merge pull request #170473 from NixOS/grahamc-patch-3
networkd: support specifying the ClientIdentifier for DHCPv4 options
2023-05-27 16:55:30 +02:00
Ryan Lahfa
537c6ede55
Merge pull request #234266 from emilylange/qemu-vm-2047mb
nixos/qemu-vm: add `virtualisation.memorySize < 2048` assertion on 32bit
2023-05-27 15:31:00 +02:00
rnhmjoj
6732106210
network-interfaces-scripted: fix interface cleanup
There is apparently a bug in the parser of iproute2 where the command
`ip link show <devname>` will not show the device but list all
interfaces (equivalent to `ip link show`) if devname is equal to one of
the flags of `ip-address(8)`. For example, `home`, or `optimistic`.

This bug causes a false positive in the clean up command of the
<devname>-netdev.service, the service fails and the interface is never
configured.

To avoid the bug we can simply use `ip link show dev <devname>`.
2023-05-27 15:09:22 +02:00
Graham Christensen
479712af11
networkd: support specifying the ClientIdentifier for DHCPv4 options 2023-05-27 15:06:06 +02:00
Alyssa Ross
845576aac4
nixos/test-driver: undeprecate create_machine
This warning was added a year and a half ago, but still no test in
NixOS directly instantiates the machine class, presumably because it's
not actually possible for a test to do so without losing
functionality.  For example, there's no way for a NixOS test to access
the output directory that create_machine passes to the Machine
constructor.

This warning is therefore just contributing to alert fatigue for
users, who are unable to follow its advice.  Once it's actually
possible to do what it suggests, the warning can be reintroduced.
2023-05-27 12:56:04 +00:00
github-actions[bot]
824f05f73f
Merge staging-next into staging 2023-05-27 06:01:44 +00:00
Nick Cao
cf58ff13a3
Merge pull request #234254 from kevincox/mautrix-facebook-appservice-id
nixos.mautrix-facebook: Fix appservice name
2023-05-26 19:48:00 -06:00
Alyssa Ross
191075fa83
Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
	pkgs/os-specific/linux/kernel/patches.nix
	pkgs/top-level/linux-kernels.nix
2023-05-26 18:37:26 +00:00
Raito Bezarius
69bb0f94de nixos/nginx: first-class PROXY protocol support
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.

Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.

It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.

An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.

Finally, the tests covers:

- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
  (sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;

In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.

For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
2023-05-26 19:48:26 +02:00
emilylange
5dbd4f3243
nixos/qemu-vm: add virtualisation.memorySize < 2048 assertion on 32bit 2023-05-26 19:43:58 +02:00
Kevin Cox
5242aea64f
nixos.mautrix-facebook: Fix appservice name
It appears that newer mautrix-facebook versions default to the appservice name `facebook`. This was breaking our registration and causing mautrix-facebook to fail to start. This changes the name back and makes the registration generated match whatever the setting in the app is.
2023-05-26 12:39:37 -04:00
Bobby Rong
36abd7c9f8
nixos/cinnamon: enable portals by default 2023-05-26 23:53:15 +08:00
Ryan Lahfa
435237d641
Merge pull request #233350 from GrahamDennis/grahamdennis/testing-networks
nixos/qemu-vm: add option for named network interfaces
2023-05-26 15:57:01 +02:00
Vladimír Čunát
2159f74076
Merge branch 'staging-next' into staging 2023-05-26 14:03:40 +02:00
Henri Menke
7d621d6be5
nixos/shadowsocks: wait for nginx to prevent race condition 2023-05-26 11:24:21 +02:00
Weijia Wang
9b6c126355
Merge pull request #234116 from chkno/nar-serve-fix
nixos/tests/nar-serve: Fix
2023-05-26 11:43:24 +03:00
Pol Dellaiera
371b4c3eb7
nixos/code-server: init tests 2023-05-26 09:51:33 +02:00
Pol Dellaiera
2c95ebadf3
nixos/code-server: add more command line options 2023-05-26 09:51:33 +02:00
github-actions[bot]
59b8a4fae6
Merge staging-next into staging 2023-05-26 06:01:46 +00:00
Scott Worley
8dcfb6853c nixos/tests/nar-serve: Fix 2023-05-25 19:10:22 -07:00
lucasew
8587646ef3 nixos/virtualisation/google-compute-config: minor refactoring
Signed-off-by: lucasew <lucas59356@gmail.com>
2023-05-26 00:56:32 +00:00
github-actions[bot]
255911fcb9
Merge staging-next into staging 2023-05-26 00:02:51 +00:00
Lily Foster
83e9bcb109
Merge pull request #231891 from SuperSandro2000/gst-plugins-bad
nixos/no-x-libs: add gst-plugins-bad, gst-plugins-rs
2023-05-25 19:25:00 -04:00
Yaya
ae47862b93 nixos/doc: add release note for sftpgo 2023-05-25 22:46:15 +02:00