Commit Graph

38976 Commits

Author SHA1 Message Date
K900
526bcf58da nixos/chromium: fix incorrect option definition
Fixes #232528
2024-02-13 15:17:45 +03:00
Yt
971fbfd00a
Merge pull request #276468 from onny/opensnitch-update4
opensnitch: 1.6.4 -> 1.6.5, opensnitch-ui: 1.6.4 -> 1.6.5
2024-02-13 10:46:01 +00:00
Joris Bolsens
6a11b7a777
nixos/kubernetes: don't delete the apitoken after its created
This was breaking the nixos-kubernetes-node-join script
the token gets copied, and then immediately overridden with /dev/null when certmgr restarts.
2024-02-12 22:50:27 -08:00
Adam C. Stephens
fccf3732ef
Merge pull request #288123 from adamcstephens/incus/networkd
nixos/lxc: fix VM network and switch container to networkd
2024-02-13 00:30:26 -05:00
Yt
8893789d4a
Merge pull request #288243 from ThyMYthOS/update-stalwart
stalwart-mail: 0.5.2 -> 0.5.3
2024-02-12 21:51:36 +00:00
Adam Stephens
cf68af8561
nixos/lxc/container: switch to networkd by default 2024-02-12 16:26:30 -05:00
Adam Stephens
bdc79efc2b
nixos/lxd/vm: fix network config 2024-02-12 16:26:29 -05:00
Sandro
886449aef2
Merge pull request #268979 from con-f-use/warn_docker_storage_driver
nixos/docker: warn about changing storageDriver and remove `devicemapper` value
2024-02-12 19:46:05 +01:00
Janik
29f575d7e6
Merge pull request #288284 from NetaliDev/rustdesk-extra-args
nixos/rustdesk-server: add extra args options for hbbr and hbbs
2024-02-12 16:52:01 +01:00
Pol Dellaiera
2d627a2a70
Merge pull request #277220 from nu-nu-ko/nixos-jellyfin-dirs
nixos/jellyfin: add directory options
2024-02-12 14:06:46 +01:00
Jennifer Graul
c412263319
nixos/rustdesk-server: add extra args options for hbbr and hbbs 2024-02-12 13:41:08 +01:00
Jonas Heinrich
31b9a9d18c opensnitch: 1.6.4 -> 1.6.5, opensnitch-ui: 1.6.4 -> 1.6.5.1 2024-02-12 11:58:44 +01:00
Maciej Krüger
4a9a73c626
Merge pull request #284046 from mkg20001/oils-for-linux
oil: rename to oil-python, oil: init at 0.20.0
2024-02-12 11:08:07 +01:00
Manuel Stahl
cf1efc01d3 stalwart-mail: 0.5.2 -> 0.5.3 2024-02-12 09:50:35 +01:00
Bruno BELANYI
5e43c70867 nixos/tandoor-recipes: improve manage script
This is mirroring the way the manage script is created in the paperless
module, which is more robust to special characters.
2024-02-11 21:21:02 +00:00
maxine
9b52568c86
Merge pull request #288122 from amaxine/fwupd-internal-tests 2024-02-11 21:15:52 +01:00
Maxine Aubrey
4a4904c2b2
nixos/fwupd: make test option internal, be explicit about removal 2024-02-11 20:27:02 +01:00
kirillrdy
76d14d166c
Merge pull request #287708 from JorisBolsens/patch-1
nixos/kubernetes: use correct -o option with bash install when copying certs in cfssl prestart script
2024-02-12 06:14:44 +11:00
Maximilian Bosch
417fdb06d7
Merge pull request #287856 from emilylange/nixos-gitea-package-forgejo-warning
nixos/gitea: warn when using `services.gitea` with forgejo
2024-02-11 18:06:05 +01:00
Maciej Krüger
7e2cabc5ea
Merge pull request #287270 from mweinelt/lxd-networkd
nixos/lxd: use networkd for DHCP/RA
2024-02-11 15:40:59 +01:00
Aaron Andersen
e163373592
Merge pull request #284814 from yaxitech/github-runner-module-update
nixos/github-runners: remove single runner module, rework default name, add `noDefaultLabels`
2024-02-11 06:10:56 -08:00
Martin Weinelt
18899b0c58
Merge pull request #287926 from mweinelt/home-assistant-2024.2.0-fixes
home-assistant: fixes for 2024.2.0
2024-02-11 04:35:53 +01:00
Will Fancher
d4ee957afa
Merge pull request #287445 from fricklerhandwerk/qemu-env-vars
doc: expand on parameters passed to QEMU VMs
2024-02-10 22:12:06 -05:00
Martin Weinelt
055a8f709a
nixos/home-assistant: always add dependencies for default integrations
These are loaded unconditionally during bootstrap, and home-assistant
will now fail to start, if these aren't provided.
2024-02-11 04:09:52 +01:00
Lin Jian
f3a93440fb
Merge pull request #285813 from jerrita/nft-precheck-flatten
nixos/nftables: add option for flattening rulesetFile
2024-02-11 10:41:17 +08:00
Jan Tojnar
fe40e99020 nixos/xdg/portal: Use systemPackage instead of buildEnv
Portals are global so we can just link them globally.

There might, in theory, be some unexpected system-path contamination
(e.g. when a portal package installs its executables to `/bin`)
but I think the risk is relatively minor compared to the added complexity.

While at it, let’s point the environment variable to system-path.
That will allow changes to installed portals to apply without having to re-log in.
2024-02-11 03:32:47 +01:00
Jan Tojnar
3b2f55e89f xdg-desktop-portal: Use custom variable for finding portals
x-d-p only looks for portal definitions in one of two places:
- datadir (which we cannot install anything to, since Nix packages are immutable)
- when `XDG_DESKTOP_PORTAL_DIR` environment variable is set, the path specified therein
  (meant for tests, disables looking for portal configuration anywhere else)

Let’s introduce our own `NIX_XDG_DESKTOP_PORTAL_DIR` environment variable
that will only control the portal definitions lookup.
We will not use it for searching for configuration
because it would require looking in the parent directory
and `XDG_CONFIG_DIRS` variable is sufficient for us.
2024-02-11 03:21:55 +01:00
Will Fancher
f7087dd159
Merge pull request #287743 from nagisa/adds-systemd-upholds
systemd: add support for upholds and upheldBy
2024-02-10 19:49:43 -05:00
Martin Weinelt
aeea37e779
Merge pull request #287480 from NixOS/home-assistant
home-assistant: 2024.1.6 -> 2024.2.1
2024-02-11 01:18:04 +01:00
Simonas Kazlauskas
fd5664871f review 2024-02-10 22:25:24 +02:00
emilylange
ca3cfc841a
nixos/gitea: warn when using services.gitea with forgejo
since this is no longer supported and we have a dedicated module for
forgejo for quite some time now.

Such warning is, however, becoming more and more important, since
forgejo is no longer a soft-fork of gitea, but rather a hard-fork.

And as such, it will slowly but surely no longer be a drop-in
replacement.

Additionally, I hope that this warning will prevent users from
reporting issues with forgejo to nixos/gitea maintainers.

The accompanying forgejo.md, from which the manual section is created,
will be updated over the next few weeks when forgejo officially
publishes their blog post about all this and the way forward, so we can
link to it.
2024-02-10 20:47:04 +01:00
tomberek
6e60c8526b
Merge pull request #286993 from christoph-heiss/srht-updates-next-round
sourcehut: update all components
2024-02-10 11:52:53 -05:00
Sandro
756e574ebd
Merge pull request #282971 from wegank/restya-board-drop
restya-board: drop
2024-02-10 17:28:05 +01:00
Peder Bergebakken Sundt
40cb108adf
Merge pull request #232528 from SuperSandro2000/chromium-kde
nixos/chromium: add enablePlasmaBrowserIntegration option
2024-02-10 17:15:14 +01:00
Peder Bergebakken Sundt
c43fd32e03
Merge pull request #248315 from apeschar/oci-containers-backend-stop
nixos/oci-containers: stop container using backend
2024-02-10 17:12:56 +01:00
Peder Bergebakken Sundt
6f55f021df
Merge pull request #287304 from ambroisie/pyload-user-group
nixos/pyload: add user/group options
2024-02-10 14:59:23 +01:00
Simonas Kazlauskas
74eeb75af1 systemd: add support for upholds and upheldBy 2024-02-10 13:48:40 +02:00
Maximilian Bosch
66a0b77a78
Merge pull request #286394 from SuperSandro2000/nextcloud-timer
nixos/nextcloud: don't execute cron when in maintenace/upgrade, don't kill cgroup
2024-02-10 12:48:05 +01:00
Peder Bergebakken Sundt
5caded32fe
Merge pull request #277189 from anpin/fix/cloudflared-service
cloudflared: fixed missing configuration options
2024-02-10 12:45:08 +01:00
maxine
53f6fedd04
Merge pull request #287512 from r-vdp/fwupd_1_9_13
fwupd: 1.9.12 -> 1.9.13
2024-02-10 11:05:51 +01:00
Joris Bolsens
1856e7e4b1 nixos/kubernetes: use correct -o option with bash install when copying certs in cfssl prestart script 2024-02-10 01:46:00 -08:00
Martin Weinelt
3d67816966
home-assistant: 2024.1.6 -> 2024.2.1
https://www.home-assistant.io/blog/2024/02/07/release-20242/
https://github.com/home-assistant/core/releases/tag/2024.2.1
2024-02-10 04:15:41 +01:00
Silvan Mosberger
11cd405226
Merge pull request #280322 from h7x4/add-hocon-format-generator
pkgs.formats: Add HOCON format generator
2024-02-10 03:07:51 +01:00
Silvan Mosberger
f37ba19765
Merge pull request #284512 from hercules-ci/lib-types-unique-merge
lib.types.unique: Check inner type deeply
2024-02-10 02:52:45 +01:00
Silvan Mosberger
5de4385620
Merge pull request #285833 from 360ied/murmur-hardened
nixos/murmur: systemd service hardening
2024-02-10 02:48:46 +01:00
Vladimír Čunát
7d2eb73e43
Merge #285983: staging-next 2024-02-03 2024-02-09 21:26:03 +01:00
kirillrdy
d035354673
Merge pull request #282597 from prTopi/freetube-ozone-patch
freetube: make compatible with NIXOS_OZONE_WL
2024-02-10 07:20:49 +11:00
github-actions[bot]
b64b4f2d6a
Merge master into staging-next 2024-02-09 18:01:06 +00:00
Bernardo Meurer
f459aeeb8d
Merge pull request #287528 from arianvp/amazon-image-maintainer
nixos/amazon-image: Take over maintainership
2024-02-09 12:33:11 -05:00
Will Fancher
0cf1e24f32
Merge pull request #284627 from Trundle/nftables-ordering
nixos/nftables: remove default systemd dependencies
2024-02-09 12:29:24 -05:00
Arian van Putten
a1232992ac nixos/amazon-image: Take over maintainership
I am actively working on bringing back Amazon Images for 24.05.
Please track progress in https://github.com/nixos/amis
2024-02-09 18:02:40 +01:00
Maximilian Bosch
bd8acd0141
Merge pull request #286172 from mweinelt/matrix-uds-listeners
nixos/matrix-synapse: Add UNIX domain socket listener support
2024-02-09 17:58:41 +01:00
Vincent Haupert
6d8391a3ce nixos/github-runners: add a group option to set the executing group
Similar to the `user` option, the added `group` option sets the group of
the executing process. If not `null`, it also sets `DynamicUser=false`.
In case `user` is set to `null` (the default), systemd would run the
service as root implicitly. As this is dangerous and most certainly not
what users want, we force them to set `user = "root"` explicitly if
that's really their intention. That's achieved through an assertion.
2024-02-09 16:58:09 +01:00
r-vdp
12de1b3a38
fwupd: 1.9.12 -> 1.9.13
Changelog: https://github.com/fwupd/fwupd/releases/tag/1.9.13
2024-02-09 16:45:09 +01:00
Maximilian Bosch
f6954309e8
nixos/users-groups: warn on ambiguous password settings
After 4b128008c5 it took me a while in a
test setup to find out why `root` didn't have the password anymore I
declared in my config.

Because of that I got reminded how the order of preference works for the
password options:

    hashedPassword > password > hashedPasswordFile

If the user is new, initialPassword & initialHashedPassword are also
relevant. Also, the override is silent in contrast to any other
conflicting definition in NixOS.

To make this less surprising I decided to warn in such a case -
assertions would probably break too much that technically works as
intended.

Also removed the `initialHashedPassword` for `root`. This would cause a
warning whenever you set something in your own config and a `!` is added
automatically by `users-groups.pl`.

`systemd-sysusers` also seems to implement these precedence rules, so
having the warning for that case also seems useful.
2024-02-09 16:44:35 +01:00
h7x4
39a779e269
treewide: use formats.hocon 2024-02-09 16:40:22 +01:00
Vincent Haupert
35df23c07d nixos/github-runners: set DynamicUser=false if user not null 2024-02-09 16:19:23 +01:00
Vincent Haupert
3f13f8d85e nixos/github-runners: align nodeRuntimes option with package
The `github-runner` package only supports `nodejs_20` since `nodejs_16`
was removed in a2976db919.

It still makes sense to keep the `nodeRuntimes` option as this is
probably not the last Node.js we'll deprecate with at least some grace
period.
2024-02-09 16:19:23 +01:00
Vincent Haupert
782b164523 nixos/github-runners: rework name default 2024-02-09 16:19:19 +01:00
Martin Weinelt
91d9c159da
nixos/matrix-synapse: fix recursive filtering of null values
Using `filterAttrsRecursive` is not sufficient to account for a nested
attribute set with list values, like used for listeners.
2024-02-09 16:05:05 +01:00
Martin Weinelt
143d266f0d
nixos/matrix-synapse: add UNIX domain socket listener support
Exposes two options, `path` and `mode`, to configure the location and
permissions on the socket file.

The `mode` needs to be specified as string in octal and will be converted
into a decimal integer, so it correctly passes through the YAML parser
and arrives at the `os.chmod` call in the Twisted codebase. What a fun
detour.

Adds an assertion, that either `path` or `bind_addresses` and `port` are
configured on every listener.

Migrates the default replication listener of the main instance to a UNIX
domain socket, because it is more efficient.

Introduces the `enableRegistrationScript` option, to gracefully disable
the user registration script, when the client listener listens on a UNIX
domain socket, which is something the script does not support.
2024-02-09 16:05:05 +01:00
Valentin Gagarin
e385b36a32
Merge pull request #287438 from fricklerhandwerk/qemu-docs-link 2024-02-09 15:37:35 +01:00
Vincent Haupert
9ad02c831a nixos/github-runner: deprecate module in favor of github-runners.* 2024-02-09 15:14:32 +01:00
Vincent Haupert
ab57ba24cf nixos/github-runners: document new runner registrations
Make the documentation of the options `workDir` and `ephemeral` reflect
that changing these options will trigger a new runner registration.
2024-02-09 15:14:32 +01:00
Vincent Haupert
a9c807496f nixos/github-runners: add noDefaultLabels option
Add option `noDefaultLabels` which controls the `--no-default-labels`
switch passed to the configure script.
2024-02-09 15:14:32 +01:00
Vincent Haupert
ae140cd468 nixos/github-runners: remove superfluous usages of lib 2024-02-09 15:14:31 +01:00
github-actions[bot]
a7f4ae0644
Merge master into staging-next 2024-02-09 12:01:11 +00:00
nikstur
8a3e1cf40a
Merge pull request #287013 from WilliButz/qemu-vm/tmpfiles-settings
nixos/qemu-vm: convert tmpfiles rules to settings
2024-02-09 11:42:17 +01:00
Valentin Gagarin
85f4b05e39 doc: add link to QEMU reference documentation in QEMU module 2024-02-09 11:21:07 +01:00
Valentin Gagarin
11c26d4cc5 use code for env var notation 2024-02-09 11:16:28 +01:00
Valentin Gagarin
d9009e0028 doc: expand on parameters passed to QEMU VMs 2024-02-09 10:48:52 +01:00
Valentin Gagarin
b1f6e08177 doc: add link to Nix manual 2024-02-09 10:47:08 +01:00
Topi
c2cbe752d3
nixosTests.freetube: mark as broken on aarch64-linux 2024-02-09 10:26:49 +02:00
Linus Heckemann
4916e22812
Merge pull request #286176 from nikstur/writable-overlays
nixos/filesystems: init overlayfs
2024-02-09 08:22:09 +01:00
github-actions[bot]
592e5dab71
Merge master into staging-next 2024-02-09 00:02:27 +00:00
Bruno BELANYI
c14f029dae nixos/pyload: add user/group options 2024-02-08 20:27:14 +00:00
nikstur
4d2c5b722a
Merge pull request #285114 from WilliButz/improve-uki-settings-merging
nixos/boot.uki: allow partial overrides of default UKI settings
2024-02-08 21:15:08 +01:00
github-actions[bot]
13d222c591
Merge master into staging-next 2024-02-08 18:01:04 +00:00
Martin Weinelt
73e19e1a8d
nixos/lxd: use networkd for DHCP/RA
Enables networkd instead of dhcpcd for DHCP/RA. It offers a solid base
for network configuration, that is much more extensible than dhcpcd and
also better maintained than our bespoke `networking.interfaces` modules.

Closes: #287269
2024-02-08 17:57:46 +01:00
Aaron Andersen
2d8bd81554
Merge pull request #286063 from yaxitech/github-runner-node-runtimes-286059
nixos/github-runners: only override pkg if it has a `nodeRuntimes` arg
2024-02-08 07:20:13 -08:00
Maciej Krüger
bca04fb384
release-notes: add oil c++ note 2024-02-08 10:25:24 +01:00
github-actions[bot]
74098fff88
Merge master into staging-next 2024-02-08 06:01:13 +00:00
Ryan Lahfa
f5c054af12
Merge pull request #264369 from RaitoBezarius/drop-pamusb
pam_usb, nixos/pam-usb: drop
2024-02-08 04:26:23 +01:00
Raito Bezarius
2d78f55438 pam_usb, nixos/pam-usb: drop
`security.pam.usb` is broken anyway and upstream has abandoned the software.
2024-02-08 02:59:45 +01:00
Maciej Krüger
2ce33c60cf
lxd-container-image: set mode of configuration.nix
before:
```
[root@nixos:~]# ls -la /etc/nixos
total 16
drwxr-xr-x  2 root root 4096 Feb  8 00:51 .
drwxr-xr-x 16 root root 4096 Feb  8 00:51 ..
-r--r--r--  1 root root  605 Feb  8 00:51 configuration.nix
-rw-r--r--  1 root root  150 Feb  8 00:51 lxd.nix
```

after:
```
[root@nixos:~]# ls -la /etc/nixos
total 16
drwxr-xr-x  2 root root 4096 Feb  8 00:50 .
drwxr-xr-x 16 root root 4096 Feb  8 00:50 ..
-rw-r--r--  1 root root  605 Feb  8 00:50 configuration.nix
-rw-r--r--  1 root root  149 Feb  8 00:50 lxd.nix
```
2024-02-08 01:52:05 +01:00
github-actions[bot]
8cb642cb14
Merge master into staging-next 2024-02-08 00:02:08 +00:00
Peter Hoeg
9a113b42b3 nixos/version: add ANSI_COLOR 2024-02-08 00:14:53 +01:00
Jörg Thalheim
ded6a6cb80
Merge pull request #277137 from ajs124/fix/tt-rss-phpPackage
nixos/tt-rss: add phpPackage option
2024-02-07 23:19:57 +01:00
nikstur
ad2dfe1ef4
Merge pull request #286717 from msanft/nixos/appliance-docs
nixos/appliance-repart-image: use UKI in docs
2024-02-07 22:51:31 +01:00
nikstur
bbce103ca8 nixos/filesystems: add release notes 2024-02-07 22:13:00 +01:00
nikstur
1407ec7420 nixos/filesystems: add overlayfs docs 2024-02-07 22:13:00 +01:00
nikstur
1c1cfa073a nixos/filesystems: init overlayfs 2024-02-07 22:13:00 +01:00
Kim Lindberger
debe2ca258
Merge pull request #286532 from flyingcircusio/PL-131811-gitlab-loose-coupling-upstream
nixos.gitlab: loosen the coupling of gitlab services to postgresql and redis
2024-02-07 19:29:01 +01:00
github-actions[bot]
296d2f6991
Merge master into staging-next 2024-02-07 18:00:58 +00:00
Sarah Brofeldt
cd5c10f696
Merge pull request #275896 from hoppla20/master
nixos/kubernetes: fix pki's mkSpec function
2024-02-07 18:44:35 +01:00
Oliver Schmidt
13ba002dd0 nixos/services.gitlab: loosen the coupling between gitlab and postgres/ redis to avoid restarts and races
Gitlab stays running at redis and postgresql restarts as if these
components were on a different host anyways. Handling reconnetctions is
part of the application logic.

Co-authored-by: Kim Lindberger <kim.lindberger@gmail.com>
for formatting fixes and test failure debugging.
2024-02-07 18:19:18 +01:00
Sandro
f7654894a3
Merge pull request #285298 from SuperSandro2000/govee2mqtt
govee2mqtt: init at 2024.01.21-088d4ca8, nixos/govee2mqtt: init
2024-02-07 18:14:05 +01:00
Moritz Sanft
66deaec720
nixos/appliance-repart-image: use UKI in docs 2024-02-07 17:45:22 +01:00
ajs124
106626b8d7 nixos/tt-rss: add phpPackage option
right now, we have php81 and php (which points to php82), which means that:
- php-fpm uses php81
- the update preStart uses php81
- the actual updater uses php82
2024-02-07 17:41:27 +01:00
ajs124
33ca948d6a
Merge pull request #259604 from sefidel/tt-rss-force-update-schema
nixos/tt-rss: supply --force-yes to update-schema
2024-02-07 17:39:03 +01:00