Commit Graph

1786 Commits

Author SHA1 Message Date
Kerstin Humm
1592790b03
nixos/mastodon: use correct postgresql package 2024-08-19 11:06:57 +02:00
Sandro
69701a3807
Merge pull request #320060 from PatrickDaG/homebox
homebox: init at 0.13.0; nixos/homebox: init
2024-08-18 16:32:43 +02:00
Nick Cao
12f650234b
Merge pull request #334257 from Dan-Theriault/miniflux-no-admin-required
nixos/miniflux: make admin provisioning optional
2024-08-13 21:54:34 -04:00
Dan Theriault
f6788b6165 nixos/miniflux: make admin provisioning optional
Miniflux supports provisioning users via SSO, which renders admin
accounts unnecessary for some use-cases. This change retains the
existing default, but makes it easier to disable admin provisioning.
2024-08-13 18:56:16 -04:00
Kerstin Humm
13c96978c3 nixos/weblate: init module and test
Co-authored-by: Taeer Bar-Yam <Radvendii@users.noreply.github.com>
2024-08-13 08:44:54 +02:00
Litchi Pi
0ec7dd5011 fix: replace relative paths in sources with nix store paths
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-08-10 16:23:27 +02:00
Patrick
f8639ea08d
nixos/homebox: init 2024-08-08 20:01:46 +02:00
Fea
0c9cb0041b nixos/misskey: init 2024-08-06 12:24:15 +02:00
Anna Aurora
dfd120537d
nixos/meme-bingo-web: fixed documentation, service description and did further hardening 2024-08-06 03:14:22 +02:00
Martin Weinelt
3dfb2c685a
nixos/pretix: restart web and worker unit on failure
Found a few instances, where celery intermittently complained about a
misconfigured redis instance and exited.

> redis.exceptions.ResponseError: MISCONF Redis is configured to save RDB
> snapshots, but it's currently unable to persist to disk. Commands that
> may modify the data set are disabled, because this instance is
> configured to report errors during writes if RDB snapshotting fails
> (stop-writes-on-bgsave-error option). Please check the Redis logs for
> details about the RDB error.
2024-08-05 17:37:12 +02:00
Sandro Jäckel
4ae7723c9b
nixos/mediawiki: add resetUserEmail script 2024-08-04 22:03:59 +02:00
Martin Weinelt
3a719e06c7
nixos/mediawiki: move to php 8.2
There is breakage on PHP 8.1 since the last staging cycle.
2024-08-04 18:51:41 +02:00
Johannes Jöns
79723dbb2a
Merge pull request #331358 from pinpox/init-screego-module
nixos/screego: init module
2024-08-04 18:34:51 +02:00
RatCornu
924437f5de
nixos/pingvin-share: init at 0.29.0 2024-08-04 01:18:03 +02:00
Weijia Wang
ec581817ca nixos/wordpress: unpin php81 in check phase 2024-08-03 20:24:27 +02:00
Sandro
377e40297c
Merge pull request #330046 from DCsunset/stirling-pdf-module-init
nixos/stirling-pdf: init module
2024-08-03 18:22:02 +02:00
Guanran Wang
ea6f4d5e86
treewide: remove periods from lib.mkEnableOption
Co-authored-by: éclairevoyant <848000+eclairevoyant@users.noreply.github.com>
2024-08-02 23:55:32 +08:00
Felix Bühler
04101568c0
Merge pull request #325644 from Stunkymonkey/sogo-chmod-install
nixos/sogo: prefer 'install' over 'chmod'/'chown'
2024-08-01 23:25:37 +02:00
Martin Weinelt
7b07f5371f
Merge pull request #331406 from mweinelt/pretix-2024.7.0
pretix: 2024.6.0 -> 2024.7.0
2024-08-01 13:04:29 +02:00
lassulus
35ac2fed3e
Merge pull request #330946 from toastal/movim-0.26
movim: 0.25.1 → 0.26
2024-08-01 11:39:13 +02:00
Pablo Ovelleiro Corral
c882d9b673
nixos/screego: init module
Add module for screego
2024-08-01 10:51:38 +02:00
Martin Weinelt
4ba537131f
nixos/pretix: increases startup timeout
Migrations on a busy machine can exceed 5 minutes, which I can reproduce
on a busy builder.
2024-08-01 04:37:20 +02:00
toastal
936a378123 movim service: updates for 0.26 2024-07-31 14:12:14 +07:00
DCsunset
0c2918fc91 nixos/gotify-server: add environment and environmentFiles options 2024-07-30 17:38:00 -04:00
DCsunset
e1ced8b12c nixos/gotify-server: add package option 2024-07-30 17:32:01 -04:00
DCsunset
b5a051f694 nixos/gotify-server: add maintainer 2024-07-30 17:29:55 -04:00
DCsunset
2079eeb882 nixos/gotify-server: clean up and reformat module 2024-07-30 17:28:54 -04:00
Alexander Sieg
20b3a5458d
nixos/outline: add cyberus team as maintainer 2024-07-30 12:37:45 +02:00
DCsunset
05113f61f0 nixos/stirling-pdf: init module 2024-07-26 18:12:50 -04:00
K900
26801aa449 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-26 14:31:21 +03:00
Pol Dellaiera
ceda66b310
Merge pull request #251687 from martinetd/cryptpad
nixos/cryptpad: init, cryptpad: init at 2024.6.0
2024-07-26 09:21:51 +02:00
K900
1410c766c8 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-26 08:41:08 +03:00
Jörg Thalheim
0fbc43eaea
Merge pull request #323641 from XenGi/fix-freshrss
nixos/freshrss: add ability to use socket path
2024-07-26 00:20:49 +02:00
github-actions[bot]
7208220b63
Merge master into staging-next 2024-07-24 18:01:18 +00:00
Dominique Martinet
7c448e8d44 nixos/cryptpad: harden service
cryptpad is not directly exposed to the network, but has plenty that can
be hardened more properly, so fix that.
2024-07-24 16:17:32 +09:00
Dominique Martinet
b846e8762f nixos/cryptpad: init
This is a full rewrite independent of the previously removed cryptpad
module, managing cryptpad's config in RFC0042 along with a shiny test.

Upstream cryptpad provides two nginx configs, with many optimizations
and complex settings; this uses the easier variant for now but
improvements (e.g. serving blocks and js files directly through nginx)
should be possible with a bit of work and care about http headers.

the /checkup page of cryptpad passes all tests except HSTS, we don't
seem to have any nginx config with HSTS enabled in nixpkgs so leave this
as is for now.

Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com>
Co-authored-by: Michael Smith <shmitty@protonmail.com>
2024-07-24 16:17:26 +09:00
Payas Relekar
aebb3d3474 nixos/goatcounter: init 2024-07-24 10:17:44 +05:30
github-actions[bot]
d284ef371e
Merge master into staging-next 2024-07-23 12:01:18 +00:00
Litchi Pi
0fb7268b9b Init IFM service at version 4.0.2
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-07-23 08:44:50 +02:00
bolives-hax
9319cf87b8
Merge branch 'NixOS:master' into add-rutorrent-service 2024-07-22 01:37:39 +02:00
bl0v3
7c1315628b fix exposeInsecureRPC2mount rtorrent group 2024-07-22 01:11:07 +02:00
Martin Weinelt
983077457f
Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
-	pkgs/development/python-modules/uvcclient/default.nix
-	pkgs/development/tools/rust/rust-analyzer/default.nix
2024-07-18 12:35:33 +02:00
Aaron Andersen
2e930eafb9
Merge pull request #318285 from gador/nixos-zabbixWeb-nginx
nixos/zabbixWeb: Add nginx as webserver, add zabbix 6.4
2024-07-17 21:22:13 -04:00
Florian Brandes
7d3b77d66f
nixos/zabbixWeb: format
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-17 22:33:47 +02:00
Florian Brandes
9ca5b84e27
nixos/zabbixWeb: add nginx config
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-17 22:31:50 +02:00
Emily
aef28c7834 nixos/akkoma: unpin ffmpeg_5
Their Dockerfile uses Alpine’s ffmpeg package, which is already
on 6. They just invoke the command‐line tool and nothing they do
looks particularly version‐sensitive.
2024-07-14 08:34:23 +01:00
Masum Reza
025f6d60e3
Merge pull request #326047 from britter/britter/onlyoffice-typos
onlyoffice: typo fixes, remove top level `with lib;`
2024-07-10 15:01:05 +05:30
Benedikt Ritter
57ea5be929
onlyoffice: Remove top-level with lib;
Prepend affected components with `lib.` instead.
2024-07-10 10:42:29 +02:00
lassulus
11dbf85aad
Merge pull request #325637 from Stunkymonkey/jtisi-meet-chmod-chown
nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown'
2024-07-10 09:57:18 +02:00
Benedikt Ritter
d61489db1a
onlyoffice: Fix typos 2024-07-10 09:14:21 +02:00
Pol Dellaiera
db41081a91
Merge pull request #323743 from NixOS/nixos/module/glance-init
nixos/glance: init module
2024-07-09 06:42:22 +02:00
Felix Buehler
87051a8f44 nixos/sogo: prefer 'install' over 'chmod'/'chown' 2024-07-08 22:41:47 +02:00
Felix Buehler
16eb9ced4e nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown' 2024-07-08 22:10:25 +02:00
Pol Dellaiera
00e9e54702
nixos/glance: init module 2024-07-08 13:14:09 +02:00
Sandro
b2a1b6f508
Merge pull request #324924 from SuperSandro2000/mediawiki-syntaxcheck
nixos/mediawiki: check if LocalConfig.php is valid syntax
2024-07-07 15:17:08 +02:00
Sandro Jäckel
313d2ccf83
nixos/mediawiki: check if LocalConfig.php is valid syntax 2024-07-06 02:06:50 +02:00
Maximilian Bosch
a9855af287
Merge pull request #321771 from Mynacol/nextcloud-preserveenv
nixos/nextcloud: Remove --preserve-env in sudo
2024-07-05 21:24:50 +00:00
Jonas Heinrich
e97d5eb3eb
Merge pull request #293210 from onny/eintopf
nixos/eintopf: init; eintopf: init at 0.13.16
2024-07-05 13:12:59 +02:00
Jonas Heinrich
28512d1ba4 nixos/eintopf: init 2024-07-05 13:12:35 +02:00
Weijia Wang
9c1cfad9a0
Merge pull request #307910 from r-ryantm/auto-update/pixelfed
pixelfed: 0.11.13 -> 0.12.1
2024-07-03 00:55:55 +02:00
Mynacol
af072cfb55 nixos/nextcloud: Remove --preserve-env in sudo
This helps supporting sudo-rs, which currently does not implement the
--preserve-env flag and probably won't so in the foreseeable future [1].

The replacement just sets both environment variables behind the sudo
invocation with env, as sudo-rs also doesn't implement env var lists.

The OC_PASS variable is dropped, as it is seemingly unused and would
leak through this approach through /proc.

[1] https://github.com/memorysafety/sudo-rs/issues/129
2024-07-02 11:29:35 +02:00
Felix Buehler
bb33682f3a nixos/freshrss: add extensions 2024-07-01 23:38:56 +02:00
Maximilian Bosch
c2586ca239 nixos/nextcloud: warn about unsafe path transitions
Closes #294588
It _may_ also be an answer to #169733.

See explanation from upstream[1] for further details.

[1] https://github.com/systemd/systemd/issues/19618#issuecomment-843273818
2024-07-01 21:20:12 +02:00
Ricardo Band
96c60c6b09 nixos/freshrss: add ability to use socket path
This change enables server:port combinations like "localhost:5432" but
also socket paths like "/run/postgresql". Without this change a port was
mendatory and attached to the path (/run/postgresql:5432) resulting in
an incorrect socket path. The underlying script already configures paths
correctly, so this small change should be enough.
2024-06-30 20:31:37 +02:00
Jörg Thalheim
d6cf181343 nixos/shiori: fix databaseUrl example 2024-06-30 13:41:38 +02:00
Jörg Thalheim
84a8354c58 nixos/shiori: fix BindPaths conditions if databaseUrl is not set 2024-06-30 13:06:11 +02:00
Jörg Thalheim
992f8bf968 nixos/shiori: fix nixos types for paths 2024-06-30 13:06:11 +02:00
Danilo Reyes
4f021e14a3 shiori: 1.5.5 -> 1.7.0 2024-06-29 15:30:22 -06:00
Kim Lindberger
b75986fd26
Merge pull request #310642 from arcnmx/keycloak-hostname-strict
nixos/keycloak: relax hostname settings assertion
2024-06-29 17:09:02 +02:00
Thomas Gerbet
85be596266
Merge pull request #322585 from wegank/limesurvey-security
nixos/limesurvey: drop default encryption key and nonce
2024-06-28 23:43:24 +02:00
Masum Reza
383744754e
Merge pull request #314798 from yomaq/healthchecks-settingsFile
nixos/healthchecks: add settingsFile option
2024-06-29 00:02:35 +05:30
Masum Reza
8808f7d7fc
Merge pull request #278982 from felbinger/master
python311Packages.mozilla-django-oidc: init at 4.0.1; peering-manager: add oidc support
2024-06-28 23:49:34 +05:30
Weijia Wang
daa81ecb2e nixos/limesurvey: drop default encryption key and nonce
Co-authored-by: Thomas Gerbet <thomas@gerbet.me>
2024-06-28 00:34:00 +02:00
Silvan Mosberger
c8dec6df38
Merge pull request #322801 from eclairevoyant/discourage-mkpackageoptionmd
lib: deprecate mkPackageOptionMD
2024-06-27 20:15:08 +02:00
Jonas Heinrich
77e7768849
Merge pull request #322397 from Ma27/bump-nextcloud
nextcloud: drop 27, 28.0.6 -> 28.0.7, 29.0.2 -> 29.0.3
2024-06-27 14:09:29 +02:00
éclairevoyant
aeee4fc133
treewide: replace mkPackageOptionMD with mkPackageOption 2024-06-26 23:05:42 -04:00
Benno Bielmeier
f99e50320e nixos/wordpress: update .htaccess for httpd
Update standard wordpress .htaccess content if using httpd
according to [1] (as of 2024-06-26)

[1]: https://developer.wordpress.org/advanced-administration/server/web-server/httpd/
2024-06-26 22:23:29 +02:00
Nico Felbinger
c4d2c90da0
nixos/peering-manager: add oidc support
Co-authored-by: Jenny <me@netali.de>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-26 07:45:18 +02:00
Sandro
33f83c6252
Merge pull request #316977 from eclairevoyant/fix-mkEnableOption
treewide: fix mkEnableOption usage
2024-06-25 22:42:16 +02:00
Maximilian Bosch
60657a4591
nextcloud27: remove
Version will be EOL by the end of 2024-06.
2024-06-25 14:08:15 +02:00
bl0v3
9abeee7aab fixed doc 2024-06-25 01:17:47 +02:00
bolives-hax
50d6aae3fe
Merge branch 'NixOS:master' into add-rutorrent-service 2024-06-25 00:04:28 +02:00
arcnmx
a910bc8146 nixos/keycloak: relax hostname settings assertion
The `hostname-strict` setting enables dynamic hostname resolution.
2024-06-23 19:36:36 -07:00
Maximilian Bosch
2ac989c06f
Merge pull request #321931 from Ma27/occ-improvements
nixos/nextcloud: occ improvements
2024-06-23 17:42:42 +00:00
Maximilian Bosch
a71e967ef3
Merge pull request #320983 from Ma27/nc-dbtableprefix
nixos/nextcloud: deprecate dbtableprefix
2024-06-22 16:54:41 +00:00
Maximilian Bosch
50d5306e7c
nixos/nextcloud: use dedicated memory limit for the entire CLI
Originally, I wanted to execute `nextcloud-occ` with a higher memory
limit because I needed to trigger an expensive operation by hand,
regenerating a bunch of previews.

While doing so, I realized how painful it is to put an invocation of
nextcloud-occ together for that, especially when you need to put it
into another systemd unit in Nix code.

That's why I decided to use the memory limit now for every
CLI invocation just in case. The stuff you do in those units (e.g.
running background jobs) is something you can also do by hand with
`nextcloud-occ` and you'll most likely want to have the same memory
limit there.
2024-06-22 18:39:08 +02:00
Maximilian Bosch
ab9b8f8cf4
nixos/nextcloud: services.nextcloud.occ is not internal
This option is actually useful when having a systemd unit invoking
`nextcloud-occ`, then you want to do something like

    path = [ config.services.nextcloud.occ ]

This is possible today, but not documented (and the option completion
from nil doesn't pick it up as a result).
2024-06-22 18:38:04 +02:00
Nick Cao
d10d0fc423
nixos/keycloak: update options for release 25.0.0
Reference: https://www.keycloak.org/docs/25.0.0/upgrading/
2024-06-22 10:23:09 -04:00
Ruby Iris Juric
088b397516 nixos/zitadel: Drop Sorixelle as maintainer 2024-06-21 16:11:10 +02:00
Thomas Gerbet
88130cec79
Merge pull request #321097 from PatrickDaG/firefly-6.1.18
firefly-iii: 6.1.17 -> 6.1.18
2024-06-20 23:03:48 +02:00
Patrick
6154279455
nixos/firefly-iii: enhance provisioning service 2024-06-20 12:16:48 +02:00
Pyrox
d94a39f87d
mealie: 1.7.0 -> 1.9.0
Also fix a small issue with the module not casting the port number
to a string
2024-06-19 20:48:39 -04:00
Maximilian Bosch
45d2b8b536
nixos/nextcloud: deprecated dbtableprefix
Closes #320381

Installation with a custom dbtableprefix is not allowed anymore for a
while[1] and we shouldn't advertise it as such.

The option is deprecated for now since I'm not sure if there are some
weird corner-cases where removing the option directly would break
existing installations from before <20 with a custom dbtableprefix. The
migration-path for such a case is as follows:

* Check if /var/lib/nextcloud/config/config.php has the correct
  dbtableprefix set and if not, take care of it.
* Remove `dbtableprefix` from the NixOS configuration. It's effectively
  state anyways.

After a bit of time to switch (perhaps after the next release
branchoff), the option can be removed.

[1] https://github.com/nextcloud/server/issues/24836
2024-06-19 11:43:33 +02:00
Aria
83b00c3637
akkoma: remove maintainer tcmal (#320858) 2024-06-18 22:33:38 +02:00
Sandro
07f7e6653b
Merge pull request #320593 from onny/invoiceplane-fix
nixos/invoiceplane: Ensure patching index.php
2024-06-18 13:33:06 +02:00
Jonas Heinrich
2a8ccf6144 nixos/invoiceplane: Ensure patching index.php 2024-06-17 20:48:21 +02:00
Martin Weinelt
decdb5e848
Merge pull request #317814 from Eisfunke/fix-pretix-celery-default-text
nixos/pretix: fix defaultText for celery options
2024-06-17 20:39:10 +02:00
Felix Bühler
ec48be343d
Merge pull request #320351 from Stunkymonkey/freshrss-enable-doc-improve
nixos/freshrss: add description about php-fpm
2024-06-16 23:30:26 +02:00
Pol Dellaiera
2754a6f4a8
Merge pull request #319456 from redxtech/fix-nextjs-ollama-llm-ui
nixos/nextjs-ollama-llm-ui: fix for respecting ollamaUrl config option
2024-06-16 22:46:43 +02:00
Felix Buehler
e9d13cc80e nixos/freshrss: add description about php-fpm 2024-06-16 22:14:12 +02:00