Nick Cao
5f821de20c
keycloak: 25.0.6 -> 26.0.0 ( #346439 )
2024-10-05 18:14:45 -04:00
Felix Singer
0f599d1e68
nixos/redmine: Apply initial hardening using the systemd unit
...
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.
In my tests, Redmine only bound to an IPv4 address and Unix socket,
which is why I restricted the address families to these both.
The command `systemd-analyze security redmine.service` reports an
overall exposure level of 2.9 with this patch.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-05 22:13:37 +02:00
h7x4
25f2846361
nixos/bind: set type of zones.*.extraConfig to lines ( #346424 )
2024-10-05 21:07:26 +02:00
h7x4
cc76cf58f8
nixos/uinput: set a static GID for the uinput group ( #333762 )
2024-10-05 20:59:16 +02:00
Robert Schütz
506df4e38e
nodePackages.npm: drop
2024-10-05 11:23:49 -07:00
github-actions[bot]
653bcc0ea9
Merge master into staging-next
2024-10-05 18:04:03 +00:00
Will Fancher
9f8eb445fa
nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1 ( #346547 )
2024-10-05 13:44:39 -04:00
Jared Baur
c39781c558
nixos/activation-script: only setup nix tmpfiles if nix is enabled
...
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
2024-10-05 09:03:19 -07:00
Jared Baur
3d6e7d7b56
nixos/tmpfiles: only setup nix tmpfiles when nix is used
...
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
2024-10-05 09:01:55 -07:00
Nick Cao
6069dde181
nixos/keycloak: make initialAdminPassword optional
2024-10-05 08:37:41 -04:00
github-actions[bot]
94cb2166da
Merge master into staging-next
2024-10-05 12:05:30 +00:00
r-vdp
94532d1530
nixos/syncthing: remove syncthing-resume service
...
It was removed upstream in https://github.com/syncthing/syncthing/pull/9611
and the stub generated by nixos now prints an error in the logs due to
it not having a ExecStart line.
2024-10-05 12:55:39 +02:00
r-vdp
70119aa60f
nixis/uinput: use a fixed GID for the uinput group
2024-10-05 10:21:26 +02:00
r-vdp
469f505813
nixos/{uinput,ids}: format
2024-10-05 10:21:01 +02:00
github-actions[bot]
13400dc754
Merge master into staging-next
2024-10-05 06:04:21 +00:00
Nick Cao
937d3964c9
nixos/keycloak: raise memory size in tests to 2047M
2024-10-04 21:43:19 -04:00
Bobby Rong
f594475564
nixos/xfce: Fix ambiguous with ( #346528 )
2024-10-05 09:03:18 +08:00
Sandro Jäckel
9b996f7396
nixos/xfce: Fix ambiguous with
...
Pull request 345352 introduces `pkgs.exo`, don't pick up that package.
2024-10-05 08:43:24 +08:00
Nick Cao
05caac302f
nixos/keycloak: fixup login test after ui change
2024-10-04 20:39:55 -04:00
Nick Cao
0cdc3e2a0b
nixos/keycloak: drop removed proxy option
...
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#proxy-option-removed
2024-10-04 20:20:46 -04:00
github-actions[bot]
e9c8665026
Merge master into staging-next
2024-10-05 00:14:01 +00:00
Nick Cao
16cd47369f
nixos/keycloak: KEYCLOAK_ADMIN{,PASSWORD} -> KC_BOOTSTRAP_ADMIN_{USERNAME,PASSWORD}
...
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#admin-bootstrapping-and-recovery
2024-10-04 20:08:06 -04:00
Nick Cao
d2ec2d3c29
nixos/keycloak: link $out/lib to KC_HOME_DIR to fix loading optimized app image
...
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#additional-validations-on-the-optimized-startup-option
2024-10-04 20:06:08 -04:00
Will Fancher
3e90d5a2bc
nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1
2024-10-04 19:50:46 -04:00
jade
f0ce0e71c3
Remove the revCount attribute from the generated flake registry ( #316225 )
2024-10-04 15:25:55 -07:00
Aaron Andersen
913a23b5e2
nixos/redmine: Allow specifying an IP address Redmine should bind to ( #345617 )
2024-10-04 18:18:45 -04:00
h7x4
c38aa540ba
nixos/networking: fix macvlan service description ( #346507 )
2024-10-04 23:20:09 +02:00
h7x4
639922811e
apfsprogs: unstable-2023-11-30 -> 0-unstable-2024-09-27 ( #346422 )
2024-10-04 23:05:15 +02:00
David Knaack
81f3c68b92
rustic: 0.8.1 -> 0.9.1
2024-10-04 22:25:08 +02:00
Anthony Roussel
17fd7e3eea
nixos/gns3-server: fix ubridge support ( #303442 )
2024-10-04 22:16:13 +02:00
Bjørn Forsman
20a3012813
nixos/networking: improve vlan service description
...
VLAN is an abbreviation, so let's not write Vlan.
2024-10-04 22:09:01 +02:00
Bjørn Forsman
e8da2c8981
nixos/networking: fix macvlan service description
...
Fix copy pasta from the vlan service: Vlan -> MACVLAN
2024-10-04 22:08:40 +02:00
github-actions[bot]
fb53f9f64b
Merge master into staging-next
2024-10-04 18:04:31 +00:00
Peder Bergebakken Sundt
986e6d4e3d
tsm-client: 8.1.23.0 -> 8.1.24.0 ( #345039 )
2024-10-04 18:25:37 +02:00
Ramses
2d809488f7
nixos/containers: Fix shellcheck issues ( #346131 )
2024-10-04 18:19:19 +02:00
K900
d5f1752ca9
xdg-desktop-portal-gtk: Enable all default portals unconditionally ( #345979 )
2024-10-04 18:29:33 +03:00
nicoo
6f26c88376
nixos/macos-builder: pin stateVersion ( #342380 )
...
Closes #325610 , #325674
2024-10-04 16:09:56 +02:00
Luflosi
7a12fe7b2f
apfsprogs: unstable-2023-11-30 -> 0-unstable-2024-09-27
...
Diff: 990163894d...f31d7c2d69
2024-10-04 15:50:10 +02:00
Mynacol
aa0fc3e8b8
rss-bridge: Remove pkg patch, adapt nixos service
...
The rss-bridge service changes introduced in f2201789fehttps://github.com/NixOS/nixpkgs/pull/223148 removes the need for
the package patch. This commit removes the patch to ease updating and
maintenance.
Relevant service functionality was also removed (e.g. the setting of
RSSBRIDGE_DATA).
The explicit definition of FileCache.path so users can easily see its
default value and change it, requires to use a freeformType to let users
freely add potentially upcoming config options. This type is restricted
to ini types (although we coerce them to environment variables).
This however makes the list of enabled_bridges impossible. That was
fixed by explicitly introducing this option with a type allowing lists.
The default value however should be unset, which is expressed as `null`,
which further spurred a change in the environment variable generation to
ignore null values (instead of coercing them to an empty string).
A breaking change note was added to highlight this change. A check that
warns users of the not-application of their existing config file is
not easily possible, as people could have only added or changed the
config.ini.php file on the file system without changing a nix variable.
2024-10-04 14:58:15 +02:00
Felix Stupp
6de4d04fdb
nixos/bind: set type of zones.*.extraConfig to lines
...
allowing multiple definitions of that option to be merged, because:
- their order should be irrelevant
- it might make sense to declare multiples of them at different locations
2024-10-04 14:49:12 +02:00
github-actions[bot]
5942e21e4e
Merge master into staging-next
2024-10-04 12:05:36 +00:00
h7x4
d783411040
nixos: improve systemd slice names ( #345990 )
2024-10-04 12:08:36 +02:00
Ivan Mincik
e478171269
postgis: 3.4.3 -> 3.5.0 ( #346151 )
2024-10-04 08:30:34 +00:00
Pol Dellaiera
2199b69a7a
nixos/privatebin: init module & privatebin: init at 1.7.4 ( #344014 )
2024-10-04 09:51:40 +02:00
Paul Meyer
3e9b0cdf35
go_1_21/buildGo121Module: remove ( #344622 )
2024-10-04 08:29:15 +02:00
github-actions[bot]
61f961f1f6
Merge master into staging-next
2024-10-04 06:04:48 +00:00
Sandro
e00cc9f2fa
openwebrx: remove alias alsaUtils -> alsa-utils ( #346259 )
2024-10-04 02:21:40 +02:00
github-actions[bot]
579054c806
Merge master into staging-next
2024-10-04 00:14:14 +00:00
Adam C. Stephens
acc3335fa4
rl-notes/24.11: Add note about ZFS import being in postResumeCommands ( #346247 )
2024-10-03 19:07:55 -04:00
Astro
48b4aa8eae
openwebrx: s/alsaUtils/alsa-utils/
...
allows running with allowAliases = false
2024-10-03 23:53:56 +02:00
h7x4
c760c830d4
nixos/fedimintd: init service ( #322815 )
2024-10-03 23:53:30 +02:00
Bjørn Forsman
e6d7bbf71d
nixos/prometheus-dnsmasq-exporter: use a working default leasesPath
...
dnsmasq dhcp-leasefile defaults to /var/lib/dnsmasq/dnsmasq.leases, so
use that as the default for the exporter too. Curiously, the example was
using the working path, so this patch simply swaps "example" and
"default" values.
2024-10-03 23:06:09 +02:00
Will Fancher
10dbb88971
rl-notes/24.11: Add note about ZFS import being in postResumeCommands
2024-10-03 17:06:02 -04:00
Nico Felbinger
924ee0c2bc
nixos/suricata: init module
2024-10-03 22:50:30 +02:00
Dawid Ciężarkiewicz
ba727987d4
nixos/fedimintd: init services
2024-10-03 13:05:12 -07:00
Sandro Jäckel
d82d689716
nixos/tailscale-derper: init
2024-10-03 22:04:40 +02:00
github-actions[bot]
192fd67cc3
Merge master into staging-next
2024-10-03 18:04:30 +00:00
Augustin Trancart
406609b044
postgresqlPackages.postgis: add more nixos tests
2024-10-03 19:31:10 +02:00
Christina Sørensen
e7602822bc
nixos/terminfo, contour: mark contour broken, remove from enableAllTerminfo ( #345827 )
2024-10-03 19:00:56 +02:00
h7x4
5190ddc27d
treewide: \xc2\xa0 -> ( #345898 )
2024-10-03 18:23:59 +02:00
r-vdp
cc28f2bef5
nixos/containers: Fix shellcheck issues
2024-10-03 17:57:41 +02:00
h7x4
75b209227d
wstunnel: 10.1.1 -> 10.1.3 ( #346011 )
2024-10-03 17:28:05 +02:00
Domen Kožar
e873268a35
nixos/datadog-agent: fix deprecated trace agent option ( #336546 )
2024-10-03 16:15:08 +01:00
Emily
7dc35d8704
cudaPackages_{10*,11*}: warn about upcoming removal ( #342112 )
2024-10-03 13:48:13 +01:00
github-actions[bot]
ca0b5f7edc
Merge master into staging-next
2024-10-03 12:05:39 +00:00
r-vdp
bf8c66fc22
wstunnel: run the VM test on Linux only
2024-10-03 11:50:43 +02:00
Florian Klink
3ae3a4fb69
nixos/tests/acme: Better error handling ( #250260 )
2024-10-03 11:41:53 +03:00
Florian Klink
3398bb12a9
nixos/tests/acme: Fix fullchain validation ( #346023 )
2024-10-03 11:39:19 +03:00
Bjørn Forsman
2a13d67dcc
nixosTests.scrutiny: remove explicit wait for influxdb2
...
Explicitly waiting for influxdb2 in the test, instead of fixing the
underlying issue[1], was hiding a real bug[2]. Now that the bug has been
fixed we can remove the wait code.
[1] Commit 732d36522fhttps://github.com/NixOS/nixpkgs/issues/317017 ("Scrutiny tries to start before influxdb has started")
2024-10-03 08:10:56 +02:00
github-actions[bot]
0e9a6f22a1
Merge master into staging-next
2024-10-03 00:14:11 +00:00
Lucas Savva
ffc9bf1882
nixos/tests/acme: Better error handling
...
Added a decorator function to handle any
exceptions generated by test functions and
apply some retry logic with backoff.
Also wrapped the unwrapped add-a curl which
was causing some fails.
2024-10-02 23:07:37 +01:00
Lucas Savva
b2758880b3
nixos/tests/acme: Fix fullchain validation
...
In the next release of Pebble, the certificate
subject is no longer populated with a useful domain name.
This change will refactor the fullchain validation assertions
to avoid checking the subject line.
2024-10-02 23:02:51 +01:00
lassulus
def08aa2e3
jitsi-meet: Default NAT harvester, Excalidraw Caddy, Prosody lockdown ( #280615 )
2024-10-02 21:08:06 +01:00
Bjørn Forsman
48908e5b86
nixos: improve systemd slice names
...
Following
https://www.freedesktop.org/software/systemd/man/latest/systemd.unit.html#Description= ,
update slice names to be short, descriptive and capitalized.
2024-10-02 20:24:13 +02:00
github-actions[bot]
b90a808faa
Merge master into staging-next
2024-10-02 18:04:34 +00:00
Jan Tojnar
c85360e799
nixos/gnome: Enable all x-d-p-gtk portals
...
This will fix the conflict when another DE using the full `xdg-desktop-portal-gtk` is enabled simultaneously with GNOME.
There will not be conflicts at runtime since the portals have been configured by `gnome-session` in `xdg.portal.configPackages` for a while now.
There will be minimal effect on system closure as all the extra x-d-p dependencies are also used by GNOME platform.
2024-10-02 18:54:06 +02:00
Jan Tojnar
0b5c9469bb
nixos/deepin: Enable all x-d-p-gtk portals
...
This will fix the conflict when another DE using the full `xdg-desktop-portal-gtk` is enabled simultaneously with Deepin.
Currently, our Deepin uses `gtk` as the preferred default implementation for all portals so presumably the duplicate portals should not have been disabled anyway.
The added closure size should be negligible, as most of the packages are probably also used by Deepin transitively.
2024-10-02 18:49:42 +02:00
Jan Tojnar
ef3e98107f
nixos/cinnamon: Enable all x-d-p-gtk portals
...
This will fix the conflict when another DE using the full `xdg-desktop-portal-gtk` is enabled simultaneously with Cinnamon.
There will no longer be conflicts at runtime since the portals are now configured by `cinnamon-common` in `xdg.portal.configPackages`.
The added closure size should be negligible, as most of the packages are also used by Cinnamon.
2024-10-02 18:44:58 +02:00
Emily
7033ba8331
switch-to-configuration-ng: update rust-ini to support multi-line INI… ( #343145 )
2024-10-02 16:04:20 +01:00
Sandro
d44717c448
nixos/binfmt: Add option to use static emulators when available ( #334859 )
2024-10-02 15:51:30 +02:00
Peder Bergebakken Sundt
3100acba08
treewide: \xc2\xa0 ->
...
I have no idea what this escape sequence even is, but it breaks the nix parser with cryptic errors if not used in a comment.
A friend let me know MacOS is prone to input weird spaces, not sure if that is the source.
Candidates were located and created with:
chr="$(echo -e '\xc2\xa0')"; rg -F "$chr" -l | xe sd -F "$chr" " "
There are some examples left, most being example output from `tree` in various markdown documents, some patches which we can't really touch, and `pkgs/tools/nix/nixos-render-docs/src/tests/test_commonmark.py` which I'm not sure if should be addressed
2024-10-02 15:33:06 +02:00
github-actions[bot]
58677f23e2
Merge master into staging-next
2024-10-02 12:05:45 +00:00
Atemu
b12b45ea63
nixos/i2pd: fix build ( #345879 )
2024-10-02 13:03:18 +02:00
Pol Dellaiera
075be3e70b
nixos/gatus: init module ( #294469 )
2024-10-02 11:08:14 +02:00
h7x4
d5a0693815
nixos/veilid: add release notes ( #345847 )
2024-10-02 10:34:56 +02:00
Weijia Wang
e687c4933e
doc/release-notes: fix typos ( #345864 )
2024-10-02 10:16:13 +02:00
Daniel Nagy
1d8136e1ae
nixos/i2pd: fix build
2024-10-02 09:45:00 +02:00
figboy9
cb736cfc9f
nixos/veilid: add release notes
2024-10-02 15:57:57 +09:00
Doron Behar
cb793d5383
nextflow: 22.10.6 -> 24.08.0-edge + remove buildFHSEnv + compile from source + add tests ( #339197 )
2024-10-02 09:36:29 +03:00
Bruno Bigras
3d0b31ec79
doc/release-notes: fix typos
2024-10-02 02:19:34 -04:00
Christina Sørensen
c911876981
nixos/terminfo: remove broken package contour
...
Contour was broken for aarch64 in #253334 , and completely broke
in #344788 for all platforms.
This removes the broken package, and adds a notice to remove broken
packages in the future. aarch64 users have waited a year for this to be
fixed, so I think we should lean to be more eager to remove in general,
and then the fix can come when it is ready, instead of letting it block
this.
Resolves : #258515
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-10-02 05:56:13 +02:00
github-actions[bot]
5810844b9c
Merge master into staging-next
2024-10-02 00:14:22 +00:00
Zhaofeng Li
fc0cc3fe27
nixos/tests/systemd-binfmt: Add chroot test
2024-10-02 08:48:09 +09:00
Sandro Jäckel
55dd113034
nixos/release-notes: add entry for headscale 0.23.0
2024-10-01 21:53:33 +02:00
Kristoffer Dalby
abb3b0089b
nixos/headscale: update module to headscale 0.23.0
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
2024-10-01 21:53:33 +02:00
h7x4
6a0de76511
qbittorrent: 4.6.7 -> 5.0.0 ( #345595 )
2024-10-01 21:40:58 +02:00
Kristoffer Dalby
5dd728a081
nixos/headscale: modernize
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
2024-10-01 20:40:19 +02:00
h7x4
cd9c62afca
nixos/graphite: add systemd slice
...
Co-authored-by: Bjørn Forsman <bjorn.forsman@gmail.com>
2024-10-01 20:15:22 +02:00
github-actions[bot]
c3c8b24e1c
Merge master into staging-next
2024-10-01 18:04:42 +00:00
h7x4
ed45f4b166
nixos/phpfpm: phpfpm.slice -> system-phpfpm.slice
2024-10-01 20:03:08 +02:00
Nick Cao
89284118a9
nixos/sing-box: test distribution specific features ( #343641 )
2024-10-01 13:42:59 -04:00
Emily
4ec4146f54
unifi-video: drop
...
EOL since January 2021.
2024-10-01 15:58:19 +01:00
Maximilian Bosch
25fe330bc9
Merge: nextcloud30: init at 30.0.0; nextcloud30Packages: init ( #342521 )
2024-10-01 14:51:56 +02:00
K900
e3bf09623f
Merge remote-tracking branch 'origin/master' into staging-next
2024-10-01 15:09:28 +03:00
Florian Klink
b66c0f2e99
nixos/systemd: let systemd setup /etc/machine-id ( #327552 )
2024-10-01 15:05:59 +03:00
Savyasachee Jha
2a06cac30a
nixos/tests/privatebin: init
2024-10-01 17:12:42 +05:30
Maximilian Bosch
07c824db7f
Merge: nixos/nextcloud: re-add declarative-redis-and-secrets to matrix ( #345592 )
2024-10-01 13:42:39 +02:00
Maximilian Bosch
55a45406a6
nixos/nextcloud: update relatedPackages
2024-10-01 13:36:16 +02:00
Maximilian Bosch
20ed9ccd88
nextcloud: correct stateversion logic
2024-10-01 12:48:47 +02:00
Jonas Heinrich
1b121c1ea2
nextcloud30: init at 30.0.0
2024-10-01 12:48:45 +02:00
Paul Meyer
6e839b8f99
go_1_21/buildGo121Module: remove
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-10-01 12:43:42 +02:00
Ryan Lahfa
29d56eea7e
nixos/repart-image: pass partition attrs to builder instead of JSON file ( #345524 )
2024-10-01 11:38:07 +02:00
Zhaofeng Li
b8c1ef98e4
nixos/binfmt: Add option to use static emulators when available
...
The fixBinary flag will be enabled if a static emulator is in use.
2024-10-01 15:05:32 +09:00
K900
3f7da3dfa9
Merge remote-tracking branch 'origin/master' into staging-next
2024-10-01 08:44:24 +03:00
José Ribeiro
4cf117d25c
nixos/rl-2411: feishin requirements for Navidrome
...
More in https://github.com/jeffvli/feishin/releases/tag/v0.10.0
2024-10-01 06:13:05 +01:00
Felix Singer
5f14c876bd
nixos/redmine: Allow specifying an IP address Redmine should bind to
...
In order to not expose Redmine over all interfaces, allow configuring an
IP address it should bind to. Listen to 0.0.0.0 by default.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-01 06:16:42 +02:00
seth
0539d522be
doc/release-notes: add section on cargo-tauri.hook
2024-09-30 20:14:36 -04:00
hellodword
10fb67f966
nixos/sing-box: test distribution specific features
2024-10-01 00:09:01 +00:00
h7x4
0d67767718
nixos/networkd: add DHCPv4 - IPv6OnlyMode toggle ( #343605 )
2024-10-01 01:33:24 +02:00
h7x4
da8a5a1f77
healthchecks: 3.4 -> 3.6 ( #345283 )
2024-10-01 01:26:14 +02:00
h7x4
ed96650379
skkDictionaries: split up skk-dicts ( #266144 )
2024-10-01 00:55:16 +02:00
melvyn
fcdc65bc1a
qbittorrent: 4.6.7 -> 5.0.0
2024-09-30 18:39:31 -04:00
Nick Cao
5aa3097833
nixos/hatsu: init module ( #345102 )
2024-09-30 18:35:12 -04:00
h7x4
636185e25a
seafile: 10.0.1 -> 11.0.12 ( #318727 )
2024-09-30 23:53:02 +02:00
Pol Dellaiera
abbc4cb34c
nixos/open-webui: fix opensearch ( #345529 )
2024-09-30 23:28:21 +02:00
WilliButz
93c61c1e58
nixos/repart-verity-store: include original roothashes in repart-output.json
2024-09-30 22:45:05 +02:00
Maximilian Bosch
02be206846
nixos/nextcloud: add nc version to drv name of mysql & declarative redis test
2024-09-30 22:21:29 +02:00
Maximilian Bosch
cd6157bea4
nixos/nextcloud: re-add declarative-redis-and-secrets to matrix
...
Just noticed that I apparently disabled this test while restructuring
the Nextcloud tests[1] effectively disabling the test.
This patch re-adds it and adjusts the code accordingly.
I also noticed that the old check whether the cache is actually used
(`test "[]" = "$(redis-cli --json KEYS "*")"`) was broken because the
`nextcloud.fail()` hid the fact that the `redis-cli` invocation was
failing due to a missing password. Fixed the subtest accordingly.
[1] 0b31ada92b
2024-09-30 22:15:03 +02:00
Masum Reza
afab97c863
nixos/wayland: add gtk portal to all applicable compositors ( #342646 )
2024-10-01 00:23:28 +05:30
WilliButz
3f1f20b2a7
nixos/repart-image: pass partition attrs to builder instead of JSON file
...
Having access to the original Nix partition definitions in the builder
should make it a bit easier to manipulate them and still provide access
to the manipulated results.
2024-09-30 20:10:51 +02:00
K900
b29cb6c1f9
Merge remote-tracking branch 'origin/master' into staging-next
2024-09-30 20:23:25 +03:00
midchildan
c2b4a5dc17
mikutter: remove
...
This package was broken and had no maintainers.
2024-10-01 02:00:52 +09:00
藍+85CD
2f15b523d9
nixos/hatsu: init module
2024-10-01 00:33:38 +08:00
midchildan
c3d1c9cdf5
skkDictionaries: replace skk-dicts
2024-10-01 01:24:28 +09:00
Erin Yuki Schlarb
56581588c3
jitsi-meet: Add option to disable Prosody services not used by Jitsi Meet
...
The default Prosody config assumes that Prosody will be used as a federated
XMPP server, while the usecase for Jitsi Meet is much narrower.
2024-09-30 18:19:34 +02:00
Erin Yuki Schlarb
7ab8f255b9
jitsi-meet: Restrict jitsi-excalidraw systemd service to the minimum requried
2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
9e8b3f97cc
jitsi-meet: Also forward Excalidraw connections when using Caddy as web server
2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
61cf88212d
jitsi-videobridge: Set configurable default NAT harvester address to make the
...
service work behind NAT without additional manual configuration
2024-09-30 18:19:33 +02:00
h7x4
11f77694ac
nixos/bluemap: move to web-apps ( #345353 )
2024-09-30 17:53:27 +02:00
Erin Yuki Schlarb
67e261beb5
jitsi-meet: Set internal MUC options set in official Docker image
2024-09-30 17:31:04 +02:00
pinage404
83b1350904
nixos/open-webui: fix opensearch
...
When [adding Open WebUI as search engine in Firefox](https://docs.openwebui.com/tutorials/integrations/browser-search-engine/#for-firefox ) it always links to `http://localhost:3000 ` instead of the configured port
It is because [the response use `WEBUI_URL` environment variable](1d225dd804/backend/open_webui/main.py (L2370)1d225dd804/backend/open_webui/env.py (L106)
2024-09-30 17:28:11 +02:00
Maximilian Bosch
1e746f0030
Merge: nixos/postgresql: escape initdbArgs ( #345341 )
2024-09-30 17:04:10 +02:00
Ali Rizvi
9020d82c70
nixos/wayland: add gtk portal by default
2024-09-30 09:54:19 -04:00
Martin Weinelt
b47b572e21
nixos/freeradius: fix group assignment for radius user
2024-09-30 15:50:13 +02:00
github-actions[bot]
d7d44ff498
Merge master into staging-next
2024-09-30 12:05:43 +00:00
Martin Weinelt
4ca03e3a11
nixos/logrotate: allow sending signal to arbitrary processes
...
Various postrotate scripts send e.g. SIGHUP to processes, to have them
reload their config or reopen their logfile.
2024-09-30 13:30:38 +02:00
Martin Weinelt
2dabc4fce1
nixos/logrotate: reorder setuid syscall group
...
Relevant parts of @setuid are in @privileged, so we need to flip the
order around, to grant @setuid in spite of denying @privileged.
2024-09-30 13:26:14 +02:00
Florian Klink
9ff2ff44f8
nixos/garage: fix StateDirectory check to work with multiple data_dirs ( #342903 )
2024-09-30 12:27:06 +02:00
Pol Dellaiera
c82e57f79b
nixos: enable fstrim by default ( #345285 )
2024-09-30 11:52:13 +02:00
Rolf Schröder
9cd78fd3a6
tests/nextflow: restrict to x86_64-linux
...
The docker image hash seems to differ on different systems.
See https://github.com/NixOS/nixpkgs/pull/339197#discussion_r1779927407
2024-09-30 11:20:18 +02:00
Quentin Smith
ea044760ce
zammad: 6.2.0 -> 6.3.1
...
This also fixes the build with the current version of Ruby.
2024-09-30 04:01:28 -04:00
github-actions[bot]
09f18b89af
Merge master into staging-next
2024-09-30 00:14:50 +00:00
Weijia Wang
aa4c638b89
wordpressPackages: packages, language and theme updates ( #345359 )
2024-09-29 23:44:35 +02:00
Viorel-Cătălin Răpițeanu
db71929224
wordpressPackages: update packages, add ru_RU lang, make twentytwentyfour default
2024-09-29 23:09:33 +03:00
h7x4
c25213a9bd
nixos/bluemap: move to web-apps
2024-09-29 21:40:39 +02:00
Maximilian Bosch
11d1f8776c
nixos/postgresql: escape initdbArgs
...
It doesn't look correct that this isn't the case already.
2024-09-29 21:03:52 +02:00
Maximilian Bosch
0e78dc369c
Merge: doc: use initdbArgs in example postgresql upgrade script ( #302823 )
2024-09-29 20:39:05 +02:00
Alyssa Ross
ac037f0b18
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
pkgs/development/compilers/llvm/common/default.nix
2024-09-29 20:10:12 +02:00
Masum Reza
007e91615b
waybar: add systemdSupport input ( #345107 )
2024-09-29 23:28:25 +05:30
Savyasachee Jha
22e2e02118
nixos/privatebin: init
2024-09-29 23:02:19 +05:30
Naïm Camille Favier
7cba8410f7
nixos/networkmanager: set up /etc/ipsec.secrets as required by the L2TP plugin ( #340325 )
2024-09-29 18:56:59 +02:00
Martin Weinelt
6710d0dd01
nixos/logrotate: relax hardening ( #345275 )
2024-09-29 16:24:34 +02:00
Weijia Wang
27e93e3061
go-ethereum: 1.14.8 -> 1.14.9 ( #342934 )
2024-09-29 16:21:23 +02:00
Franz Pletz
273796ebd7
nixos/upower: update percentage defaults ( #344839 )
2024-09-29 15:39:41 +02:00
OPNA2608
85e63d0540
lomiri.lomiri: Replace NIXOS_XKB_LAYOUTS envvar with file
...
This only ever worked for the session, not for the greeter. Writing the information out to a file should be more consistent.
To make sure that this works, and continues working, for the greeter & session, also add a new VM test.
2024-09-29 14:51:04 +02:00
Sefa Eyeoglu
5fcc1337d2
nixos/waybar: enable systemdSupport for package
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-09-29 17:56:24 +05:30
h7x4
8b62732138
bluemap: 3.21 -> 5.4 ( #332245 )
2024-09-29 14:05:29 +02:00
github-actions[bot]
8e5ca58e0a
Merge master into staging-next
2024-09-29 12:05:05 +00:00
Jörg Thalheim
7d8f1572d1
nixos: enable fstrim by default
...
The majority of users these days will install NixOS on SSD/NVME based
storage. Enabling fstrim ensures that the TRIM operation on this type of
storage is run at least once a week. This will improve performance and
life time of said devices. This also works in virtual machines as
formats such as qcow2 or vmdk support TRIM.
Ubuntu has a similar systemd timer also for quite a while enabled by
default.
Enabling this service will not increase the dependency closure as
util-linux is already part of the base system.
In case only filesystems that are not supported by fstrim are used, the
overhead is negelible as fstrim run in less than a second once a week.
2024-09-29 14:04:18 +02:00
phaer
d179a5e5ba
healthchecks: 3.4 -> 3.6
2024-09-29 13:32:32 +02:00
Martin Weinelt
d3e0a89ca6
nixos/logrotate: relax hardening
...
The previous hardening change restricted the unit too much, breaking
legitimate functionality of logrotate.
Unfortunately this was not covered by our NixOS test.
2024-09-29 12:29:19 +02:00
Doron Behar
4fcd6b86ee
nixos/tzupdate: make it actually work ( #343748 )
2024-09-29 12:56:06 +03:00
K900
3951cf36e1
nixos/xdg/icons: add fallbackThemes option ( #345057 )
2024-09-29 12:17:57 +03:00
Bruno Bigras
1336b64235
Add veilid module ( #330585 )
2024-09-29 04:30:44 -04:00
Michele Guerini Rocco
a08c2e29b9
nixos/monero: remove with lib; ( #343474 )
2024-09-29 09:36:21 +02:00
K900
ce7068660a
nixos/xdg/icons: add fallbackThemes option
2024-09-29 08:42:20 +03:00
github-actions[bot]
080ddac139
Merge master into staging-next
2024-09-29 00:15:45 +00:00
melvyn
073099d0f7
nixos/seafile: add persistent user, configurable storage path, gc service
2024-09-28 19:09:58 -04:00
melvyn
d3b5dc8da1
nixos/seafile: add persistent user, configurable storage path, gc service
2024-09-28 17:57:02 -04:00
Franz Pletz
e8486ebc7f
freeradius: add option to compile with postgres ( #265762 )
2024-09-28 22:56:08 +02:00
Daniel Nagy
6512103dfe
nixos/monero: remove with lib;
2024-09-28 22:30:00 +02:00
K900
1228db540d
nixos/plasma6: use xwayland module ( #345122 )
2024-09-28 22:14:43 +03:00
github-actions[bot]
8693fc15c4
Merge master into staging-next
2024-09-28 18:04:13 +00:00
Danilo Reyes
056fc213e6
modules/obs-studio: optionally enable v4l2loopback ( #312112 )
...
* modules/obs-studio: optionally enable v4l2loopback
* add test
* added documentation to 24.11 changelog
2024-09-28 19:43:06 +02:00
Leona Maroni
a23db91282
nixos/immich: add option database.port ( #345094 )
2024-09-28 18:01:08 +02:00
Yaroslav Bolyukin
fba92705b0
nixos/plasma6: use xwayland module
...
For ability to override used xwayland package
2024-09-28 17:27:22 +02:00
Emily
818089ba73
teams: create the Xen Project Team and rename instances of Xen to Xen Project. ( #344314 )
2024-09-28 15:57:32 +01:00
Fernando Rodrigues
dc7db9bcc4
treewide: rename Xen to Xen Project
...
Xen is a trademark of the Cloud Software Group; we're not packaging
Xen(Server), we're packaging the Xen Project Hypervisor, which is open
source and owned by the Linux Foundation.
This is based on advice from Kelly Choi, the Xen Project Community
Manager, who has assisted us in the branding aspects of pacakaging.
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-28 14:53:59 +00:00
Fernando Rodrigues
82f0ee2c5b
treewide: assign maintainership of the Xen-related packages to the Xen Project Hypervisor Team
...
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-28 14:53:59 +00:00
Franz Pletz
79a01a8631
pleroma: 2.6.3 -> 2.7.0 ( #333283 )
2024-09-28 15:36:27 +02:00
Franz Pletz
cc2142b9f0
nixos/zfs: remove incorrect conditional use of spl kmod; remove withs ( #344271 )
2024-09-28 15:30:13 +02:00
Franz Pletz
1ee99a4837
tailscaled: after NetworkManager-wait-online ( #344678 )
2024-09-28 15:26:00 +02:00
Franz Pletz
a3f79b7d63
tailscale: add su to path ( #344947 )
2024-09-28 15:22:40 +02:00
Franz Pletz
ef1ecffdbe
nixos/gitlab: add systemd slice ( #343523 )
2024-09-28 15:12:58 +02:00
github-actions[bot]
aef46265d9
Merge master into staging-next
2024-09-28 12:05:16 +00:00
h7x4
dd7a192b4f
nixos/gitlab: add services to systemd slice
...
Co-authored-by: Bjørn Forsman <bjorn.forsman@gmail.com>
2024-09-28 11:27:05 +02:00
Jörg Thalheim
028b7d27a3
growpart: shellcheck fixes ( #340490 )
2024-09-28 09:50:11 +02:00
Jörg Thalheim
076f2f69f3
sshd: fix shellcheck warnings in prestart script ( #340484 )
2024-09-28 09:49:25 +02:00
Jörg Thalheim
4f06ecd5a6
systemd/initrd: fix shellcheck issues ( #340486 )
2024-09-28 09:48:29 +02:00
Yarny0
f748ccc318
tsm-client: 8.1.23.0 -> 8.1.24.0
...
Also, all URLs in package and module comments are updated.
At the time of this writing, the "Update History" page
(release notes) for tsm-client >=8.1.19 does not list any
"APARs" ("Authorized Program Analysis Reports") for 8.1.24.0.
2024-09-28 08:48:41 +02:00
