Commit Graph

14727 Commits

Author SHA1 Message Date
Martin Weinelt
d6f4f4584a
nixos/botamusique: allow syscalls in the @resources group
Calls to ffmpeg from botamusique require the `set_mempolicy` syscall.

Fixes: #205702
2022-12-12 15:36:58 +01:00
Bobby Rong
9015c9f389
Merge pull request #205525 from SuperSandro2000/prometheus2
nixos/alertmanager: fix renamed option
2022-12-12 18:08:36 +08:00
Luke Granger-Brown
36c0938cc5
Merge pull request #198835 from YellowOnion/factorio-patch
factorio: better mod support
2022-12-11 21:17:05 +00:00
Bobby Rong
0e857e0089
Merge pull request #204807 from Eliot00/v2raya-init
v2raya: init at 2.0.0
2022-12-11 23:06:00 +08:00
K900
a95574fd2e
Merge pull request #204560 from jcumming/resilio_config_passthru
passthrough config if there are no secrets defined (address #204559)
2022-12-11 17:50:37 +03:00
Elliot
08d651764f
v2raya: init at 2.0.0
Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>

Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>

Update pkgs/tools/networking/v2raya/default.nix

Co-authored-by: zendo <linzway@qq.com>

Update pkgs/tools/networking/v2raya/default.nix

Co-authored-by: zendo <linzway@qq.com>

Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>

Update pkgs/tools/networking/v2raya/default.nix

Co-authored-by: zendo <linzway@qq.com>

Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>
2022-12-11 22:23:12 +08:00
Martin Weinelt
fda65523fb nixos/evcc: Fix unit environment
In some recent version evcc started requiring `getent` in the PATH, or
else it would fail to start.

It also now requires an sqlite database, which it tries to create a
directory for at `$HOME/.evcc`, so we now need to provide a
StateDirectory.
2022-12-11 01:23:22 +01:00
Guillaume Girol
a768871934 nixos/nginx: validate syntax of config file at build time
Shamelessly stolen from nixcloud-webservices:
https://github.com/nixcloud/nixcloud-webservices/blob/master/modules/web/webserver/lib/nginx_check_config.nix

The nixos test testing the behavior of nginx in case of faulty config
would not build with this change (on purpose), so I modified it so that
the failure is not syntactic.
2022-12-10 23:04:57 +01:00
Sandro Jäckel
a49606696e
nixos/alertmanager: fix renamed option 2022-12-10 20:11:18 +01:00
Bruno Bigras
c770b44aff nixos/cloudflared: init 2022-12-10 14:07:26 -05:00
happysalada
bdf8a69ecc surrealdb: module: add secret management 2022-12-10 10:57:13 -05:00
Naïm Favier
4b79d6c374
Merge pull request #204976 from bjornfor/nixos-borgbackup-fix-runtime-warning 2022-12-10 16:51:19 +01:00
Izumi Raine
cb4547a433 nixos/borgbackup: add option "patterns" 2022-12-10 16:49:34 +01:00
Naïm Favier
75e0609a00
nixos/borgbackup: fix newline escaping with optional arguments
The newline must always be escaped, otherwise `extraPruneArgs` will be treated as a separate command if `prune.prefix` is unset.
2022-12-10 16:46:34 +01:00
Sandro Jäckel
89b5dddf99
nixos/avahi: revert closing firewall port by default 2022-12-10 03:40:39 +01:00
Vladimir Pouzanov
65aed3b37f
Allow to override the https settings 2022-12-09 19:23:50 +00:00
K900
2123b57d5d nixos/supergfxd: make optional, fix eval (again) 2022-12-09 13:31:00 +03:00
Martin Weinelt
a4f2ca1ef3
Merge pull request #205123 from Frostman/prometheus-smartctl-exporter-0.9.1 2022-12-09 01:58:06 +01:00
Martin Weinelt
fdcc9e8202
nixos/prometheus.exporters.smartctl: Simplify DeviceAllow logic
Setting up the DeviceAllow list with explicitly configured devices was a
nice idea, but sometimes a configured device (`/dev/nvme0n1` an NVMe
namespace) has a parent device (`/dev/nvme0`) that smartctl needs to
access to query metrics.

Falling back to the block and character definitions is probably a valid
fallback.
2022-12-09 01:40:01 +01:00
Sergey Lukjanov
a49feed255 nixos/prometheus.exporters.smartctl: use cli args instead of config
Config support was dropped and replaced with CLI args
2022-12-08 15:31:33 -08:00
ajs124
3071eef957
Merge pull request #201707 from helsinki-systems/alias-krb5Full
krb5Full: turn into alias
2022-12-08 23:54:02 +01:00
Ryan Lahfa
022c7d777a
Merge pull request #196837 from KoviRobi/dnsmasq-attrsets-config
nixos/dnsmasq: Use attrs instead of plain text config
2022-12-08 23:47:08 +01:00
ajs124
c7930769a7 krb5Full: turn into alias 2022-12-08 23:08:44 +01:00
Naïm Favier
0ff3b35356 nixos/doc: fix some options 2022-12-08 17:52:52 +01:00
Bobby Rong
d44e752fba
Merge pull request #204474 from peperunas/libreddit
libreddit: Add package option to module
2022-12-08 19:49:11 +08:00
K900
4353ba58d4
Merge pull request #205119 from K900/supergfxd-fixup
supergfxd: fix config format
2022-12-08 14:13:58 +03:00
Martin Weinelt
286fb727a0
Merge pull request #205071 from NixOS/home-assistant 2022-12-08 11:52:59 +01:00
K900
a445c5f6ea supergfxd: fix config format 2022-12-08 11:46:10 +03:00
Martin Weinelt
87c22c7909
nixos/home-assistant: update bluetooth components 2022-12-08 02:36:55 +01:00
Daniel Nagy
ad866e565d
treewide: switch to port type for nixos modules 2022-12-08 00:00:00 +01:00
Sandro
b3f9ddea98
Merge pull request #204422 from SuperSandro2000/bluezfull 2022-12-07 22:46:15 +01:00
Lin Yinfeng
56099e008e nixos/mastodon: allow appending other env files to serviceConfig.EnvironmentFile 2022-12-07 15:07:17 +01:00
Yureka
56d4e1ec67 nixos/peering-manager: init 2022-12-07 12:54:55 +01:00
Bobby Rong
fa01623a88
Merge pull request #204809 from bobby285271/cinnamon
cinnamon.mint-artwork: 1.7.2 -> 1.7.3
2022-12-07 09:45:02 +08:00
Zhaofeng Li
c4ae704be6 nixos/fwupd: Make daemon.conf structured 2022-12-06 18:24:40 -07:00
Bjørn Forsman
bbcfd192a8 nixos/borgbackup: change --prefix to --glob-archives
Fixes warning from `borg prune`:

  Warning: "--prefix" has been deprecated. Use "--glob-archives 'yourprefix*'" (-a) instead.
2022-12-07 02:24:00 +01:00
Yoan Tournade
4c915f1d1a Add BORG_RSH entry under an environment option 2022-12-07 01:00:59 +01:00
Sandro
bc3206a9e2
Merge pull request #202909 from symphorien/ipp-usb 2022-12-06 22:36:30 +01:00
Guillaume Girol
8e7a32d061 nixos/ipp-usb: add module 2022-12-06 21:06:54 +01:00
Luke Granger-Brown
5faeb3ba2d factorio: fix review comments 2022-12-06 18:29:54 +00:00
Wael Nasreddine
69dff6a36c
Merge pull request #144455 from Twingate/master 2022-12-06 09:33:20 -08:00
Bobby Rong
42748ee18f
cinnamon.mint-artwork: 1.7.2 -> 1.7.3
This changes the greeter theme to Mint-Y-Aqua.
2022-12-06 23:53:47 +08:00
Robert Hensing
5775cfa4b8 nixos/cassandra: Prepare for cassandra 4
Its scripts disagree a bit with our flexible
logging approach and our default logging config.
Might want to revisit this at some point.

The `mkdir` failures in the log are harmless.
2022-12-06 14:09:38 +01:00
Robert Hensing
90b1c9fa10 nixos/cassandra: Refactor: extract version variables 2022-12-06 14:09:38 +01:00
Maximilian Bosch
7f684f3160
Merge pull request #204618 from rapenne-s/openFirewall_off_2
make openFirewall options to false for NixOS services
2022-12-05 18:13:39 +01:00
Maximilian Bosch
38c786c6ef
Merge pull request #204269 from mayflower/fix-mailman-nginx
nixos/mailman: remove trailing slash from `/static` location
2022-12-05 16:48:57 +01:00
Solene Rapenne
372a2d2111 nixos/unifi-video: openFirewall default to false 2022-12-05 12:03:09 +01:00
Solene Rapenne
659803e879 nixos/tmate-ssh-server: openFirewall default to false 2022-12-05 12:03:09 +01:00
Solene Rapenne
efeb1e50d9 nixos/avahi-daemon: openFirewall default to false 2022-12-05 12:03:09 +01:00
Solene Rapenne
535c434fa8 nixos/snapserver: openFirewall default to false 2022-12-05 12:03:02 +01:00
Jacob Greenleaf
0111e9547e nixos/borgbackup: Add option for inhibiting sleep
Adds a new option for backup jobs `inhibitsSleep` which prevents
the system from going to sleep while a backup is in progress.
Uses `systemd-inhibit`, which holds a "lock" that prevents the
system from sleeping while the process it invokes is running.

This did require wrapping the existing backup script using
`writeShellScript` so that it could be run by `systemd-inhibit`.
2022-12-04 19:57:41 -08:00
Jack Cummings
75f2f8e753 passthrough config if there are no secrets defined 2022-12-04 16:37:51 -08:00
Robert Kovacsics
2c00429560 nixos/dnsmasq: Use attrs instead of plain text config
This should make it easier to configure in multiple places, override
defaults, etc.
2022-12-04 23:08:37 +00:00
squalus
ef90ce7093 nixos/grafana: add Admin to valid auto_assign_org_role values 2022-12-04 13:10:19 -08:00
Giulio De Pasquale
34ddff29a4
libreddit: Add package option 2022-12-04 14:00:17 +01:00
Sandro
e38618a657
Merge pull request #203825 from SuperSandro2000/mastodon-tootctl
Closes https://github.com/NixOS/nixpkgs/issues/199029
2022-12-04 11:29:45 +01:00
Sandro
9622693a4b
nixos/bluetooth: remove bluezFull alias from examples 2022-12-04 09:58:49 +01:00
Alexandre Acebedo
8f7537e34f nixos/asusctl: init 2022-12-04 10:11:27 +03:00
Alexandre Acebedo
8f14c05c50 nixos/supergfxctl: init 2022-12-04 10:11:27 +03:00
Bobby Rong
71fe9c0596
Merge pull request #204225 from bobby285271/cinnamon
Cinnamon updates 2022-12-02
2022-12-04 12:02:36 +08:00
Bobby Rong
35763bc43b
cinnamon.mint-artwork: 1.7.0 -> 1.7.2
Now sets cursor theme and size.
2022-12-04 11:20:51 +08:00
Bobby Rong
1b6468cfb4
nixos/lightdm-greeters/slick: Add options for cursor themes
These options are newly added in 1.6.0.
2022-12-04 11:20:51 +08:00
Martin Weinelt
f069b36483
Merge pull request #204331 from mweinelt/zigbee2mqtt-1.28.4 2022-12-03 22:27:44 +01:00
Luke Granger-Brown
c7918fed9e nixos/prometheus/unifi-poller: rename to unpoller. 2022-12-03 20:12:54 +00:00
Luke Granger-Brown
ffcd97b521 nixos/unifi-poller: rename to unpoller. 2022-12-03 20:12:54 +00:00
Martin Weinelt
5d685e0eed nixos/zigbee2mqtt: Update syscall filter
The tests would fail after migrating to `buildNpmPackage`, likely
because we are now using nodejs 18.

> audit: type=1326 audit(1670092271.655:102): auid=4294967295 uid=317 gid=317 ses=4294967295 subj=kernel pid=995 comm="node" exe="/nix/store/dj805sw07vvpbxx39c8g67x8qddg0ikw-nodejs-18.12.1/bin/node" sig=31 arch=c000003e syscall=330 compat=0 ip=0x7ff8b655f37b code=0x8000000
2022-12-03 19:57:50 +01:00
Maximilian Bosch
367897a68b
nixos/mailman: remove trailing slash from /static location
Otherwise HTTP routes such as `/static/django-mailman3/css/main.css`
will cause a 404.
2022-12-03 13:03:26 +01:00
Sandro Jäckel
6e845a8491
nixos/mastodon: replace mastodon-env with a proper wrapper mastodon-tootctl 2022-12-03 02:59:39 +01:00
Sandro
068e7cb340
Merge pull request #201817 from jhh/nut-exporter 2022-12-03 02:22:48 +01:00
Robert Hensing
7bfbf037d7 Merge remote-tracking branch 'upstream/master' into allow-configuration-of-roles 2022-12-02 18:12:14 +00:00
Jasper Woudenberg
bc3b07cb93 resilio: Add jwoudenberg as extra maintainer 2022-12-02 12:08:33 -06:00
Jasper Woudenberg
c8f9d170d4 nixos/resilio: support secret files
When using the declarative shared folder configuration for resilio sync
it is now possible to pass a path from which to read the secret should
be read at runtime. The path will not be added to the nix store.

The 'secret' parameter to specify the secret directly is still
supported. This option will still store the secret in the nix store.

This commit follows the pattern described in this issue, for upstream
programs that do not provide support for setting a password using a
file: https://github.com/NixOS/nixpkgs/issues/24288
2022-12-02 12:08:33 -06:00
Artturi
dadca5c5e1
Merge pull request #140890 from seb314/wireguard/dyndns-restart-on-failure
wireguard: non-invasive fix for permanent disconnects on unstable network (e.g. laptops) from dyndns endpoints
2022-12-02 17:47:47 +02:00
Daniel Nagy
dbe8182e74
treewide: switch to port type for nixos modules 2022-12-01 22:30:00 +01:00
Ryan Lahfa
d13437b014
Merge pull request #201052 from Stunkymonkey/octoprint-firewall
nixos/octoprint: add openFirewall option
2022-12-01 21:35:40 +01:00
Ryan Lahfa
5d87a1b9b8
Merge pull request #195735 from hax404/tayga_init
nixos/tayga: init
2022-12-01 21:14:50 +01:00
Felix Buehler
6de9ec5969 nixos/octoprint: add openFirewall option 2022-12-01 17:38:08 +01:00
Ryan Lahfa
40b71c3e93
nixos/redmine: add missing lib.mdDoc (#203952) 2022-12-01 17:37:16 +01:00
figsoda
5195ca2346
Merge pull request #203826 from figsoda/lint
nixos/*: apply some lints from statix and nil
2022-12-01 11:20:11 -05:00
Ryan Lahfa
9f6a1541c7
Merge pull request #198592 from winterqt/remove-dispatchsrht
sourcehut.dispatchsrht: remove
2022-12-01 16:18:07 +01:00
Ryan Lahfa
2ae5aa0bd6
Merge pull request #118036 from jluttine/add-jupyter-kernel-env
nixos/jupyter: add env kernel option
2022-12-01 16:02:16 +01:00
Ryan Lahfa
94ac413379
Merge pull request #140840 from erdnaxe/isso_hardening
nixos/isso: systemd unit hardening
2022-12-01 15:52:54 +01:00
Ryan Lahfa
78ef5b8663
Merge pull request #171930 from felixsinger/module/redmine/add-component-configs
nixos/redmine: Rework module
2022-12-01 15:35:08 +01:00
Ryan Lahfa
cc11eea79d
Merge pull request #195671 from amarshall/rename-readonlystore
nixos: nix.readOnlyStore -> boot.readOnlyNixStore
2022-12-01 15:06:23 +01:00
Ryan Lahfa
39f399f6ff
Merge pull request #199395 from owm111/physlock-m
nixos/physlock: add muteKernelMessages option
2022-12-01 14:51:50 +01:00
Ryan Lahfa
da5ef17a96
Merge pull request #199520 from bjornfor/nixos-hardware-sane-open-firewal
nixos/sane: add openFirewall option
2022-12-01 14:50:11 +01:00
Ryan Lahfa
1c5443f6cd
Merge pull request #203183 from teutat3s/fix/gitea-needs-gpg-in-path
gitea: needs gnupg in its path to sign commits
2022-12-01 14:29:34 +01:00
Alex Zero
16b7892876
nixos/tayga: init 2022-12-01 11:17:20 +01:00
Mike Placentra
518ef4d8d8 nixos/roon-server: persist installation ID to avoid re-login
Set environment variable ROON_ID_DIR to the same value as ROON_DATA_DIR
so that it knows it's the same installation after a restart.
Otherwise, each time the server process restarts, the user will need
to log in, and configure any server-local audio devices, again.

This environment variable was found in Roon's "easy installer" script:
https://help.roonlabs.com/portal/en/kb/articles/linux-install#The_Easy_Installer_Recommended
2022-12-01 01:05:39 -05:00
Andrew Marshall
c88944f025 nixos: nix.readOnlyStore -> boot.readOnlyNixStore
The placement of this option under `nix` was misleading, as it is not
configuration of the Nix daemon, but rather configuration of the NixOS
boot process and how it mounts the Nix store. As such, make it an option
of `boot` to clarify what it actually affects, and imply that it will
only take effect on a reboot.

Since it no longer has the context of nix, adjust the name to include
it.
2022-11-30 22:57:08 -05:00
Naïm Favier
e989ef9671
Merge pull request #203595 from ncfavier/registry-paths 2022-12-01 01:01:30 +01:00
figsoda
b865b96b97 nixos/invoiceplane: remove unnecessary parentheses 2022-11-30 18:13:58 -05:00
figsoda
f97daa68bc nixos/gammu-smsd: remove unnecessary parentheses 2022-11-30 18:12:53 -05:00
figsoda
1ecbafd0a2 nixos/discourse: remove unnecessary parentheses 2022-11-30 18:01:29 -05:00
figsoda
d1c73c2543 nixos/keepalived: remove unnecessary parentheses 2022-11-30 17:59:52 -05:00
figsoda
55acad5c35 nixos/softether: apply statix suggestions 2022-11-30 17:56:56 -05:00
figsoda
d65639ce40 nixos/redis: simplify 2022-11-30 17:38:52 -05:00
figsoda
dfff1a2b83 nixos/prosody: simplify logic 2022-11-30 17:36:07 -05:00
figsoda
025142b808 nixos/hbase: remove unnecessary parenthesis 2022-11-30 17:32:53 -05:00
figsoda
1b9b057d92 nixos/buildbot: syntax clean up 2022-11-30 17:31:28 -05:00