nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-02-01 01:33:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
415,731 Commits 180 Branches 125 Tags 7.4 GiB
24addef4ae
Commit Graph

29252 Commits

Author SHA1 Message Date
Maximilian Bosch
4ece171482
Merge pull request #194738 from mayflower/pi-tokenjanitor 
nixos/privacyidea: add proper support for `privacyidea-token-janitor`
 2022-10-09 09:50:20 +02:00
Sandro
21469bd965
Merge pull request #191198 from Moredread/nixpkgs-paperless 
nixosTests.paperless: check if /metadata/ can be accessed
 2022-10-09 08:49:28 +02:00
talyz
fae653deb4 nixos/gitlab: Configure ActionCable 
ActionCable is used to provide realtime updates in a few places,
mainly the issue sidebar.
 2022-10-09 08:12:19 +02:00
talyz
9b3ff51c77 nixos/gitlab: Set a more appropriate type for extraConfig 2022-10-09 08:12:19 +02:00
talyz
58158100f7 nixos/gitlab: Make sure docker-registry starts after cert generation 2022-10-09 08:12:19 +02:00
talyz
8e8253ddb4 nixos/gitlab: Create registry state path 2022-10-09 08:12:19 +02:00
talyz
3dedfb3fa0 nixos/gitlab: Connect to redis through a unix socket by default 
This gives us slightly higher security as you have to be in the gitlab
group to connect, and possibly a (very small) performance benefit as
well.
 2022-10-09 08:12:19 +02:00
talyz
843082eb3a nixos/gitlab: Add findutils to runtime dependencies 
Needed for the gitlab:cleanup:orphan_job_artifact_files rake task.
 2022-10-09 08:12:19 +02:00
talyz
bee6e1dafa nixos/gitlab: Deduplicate runtime dependency listing 2022-10-09 08:12:19 +02:00
talyz
0211edd1ff nixos/gitlab: Add workhorse.config option 2022-10-09 08:12:19 +02:00
talyz
4df4d2a8ea genJqSecretsReplacementSnippet: Allow dots in attribute names... 
...and escape quotation marks and backslashes.
 2022-10-09 08:12:19 +02:00
Jörg Thalheim
b4bb571fa0 iwd: remove myself as maintainer 2022-10-08 16:50:37 +02:00
Florian Klink
1780768449
Merge pull request #194684 from oxalica/fix/systemd-oomd-test 
nixos/tests/systemd-oomd: fix and follows upstream tests
 2022-10-08 16:09:45 +02:00
Robert Scott
68138bfb28 nixosTests.spark: give worker node 2G of memory 
test currently failing due to OOM
 2022-10-08 11:55:51 +01:00
Nick Cao
309ea5a1af nixos/udev: allow marking firmware as not compressible 2022-10-07 19:40:58 +00:00
Christian Kögler
aff16d8bc8
Merge pull request #190052 from JasonWoof/acme-example 
nixos/doc: fix acme dns-01 example
 2022-10-07 12:53:15 +02:00
Alexander Bantyev
99cc02fe98
Merge pull request #193694 from cab404/fwupd-remote-list 
nixos.fwupd: add remote list option
 2022-10-07 14:23:19 +04:00
Edward Tjörnhammar
a72e138b78 nixos/jfs: correct broken toplevel reference 2022-10-06 19:26:13 +00:00
Lucas Savva
49c0fd7d60 nixos/acme: Disable lego renew sleeping 
Lego has a built-in mechanism for sleeping for a random amount
of time before renewing a certificate. In our environment this
is not only unnecessary (as our systemd timer takes care of it)
but also unwanted since it slows down the execution of the
systemd service encompassing it, thus also slowing down the
start up of any services its depending on.

Also added FixedRandomDelay to the timer for more predictability.
 2022-10-06 10:30:24 -04:00
Lucas Savva
657ecbca0e nixos/acme: Make account creds check more robust 
Fixes #190493

Check if an actual key file exists. This does not
completely cover the work accountHash does to ensure
that a new account is registered when account
related options are changed.
 2022-10-06 10:30:24 -04:00
Lucas Savva
39796cad46 nixos/acme: Fix cert renewal with built in webserver 
Fixes #191794

Lego threw a permission denied error binding to port 80.
AmbientCapabilities with CAP_NET_BIND_SERVICE was required.
Also added a test for this.
 2022-10-06 10:30:24 -04:00
Sandro
2fca262fa0
Merge pull request #194271 from andersk/teleport-10 2022-10-06 15:36:47 +02:00
pennae
3826e303c6 nixos/firefox-syncserver: remove extra add_header 
syncstorage-rs sets this header starting with 0.12.3.
 2022-10-06 14:48:53 +02:00
pennae
f97c9d60e4 nixos/firefox-syncserver: proxyPass singleNode to 127.0.0.1 
syncstorage-rs does not listen on ::1 unless explicitly configured.
 2022-10-06 14:48:53 +02:00
pennae
8dc30e9e98 nixos/firefox-syncserver: set default for oauth verifier threads 
the 0.12.1 update introduced a static thread pool for verifying oauth
tokens. set a reasonable default for self-hosted setups (10 threads).
 2022-10-06 14:48:53 +02:00
Maximilian Bosch
15914eba85
nixos/privacyidea: fix manual build 2022-10-06 13:50:31 +02:00
Maximilian Bosch
ecaf6aed02
nixos/privacyidea: add proper support for privacyidea-token-janitor 
`privacyidea-token-janitor`[1] is a tool which helps to automate
maintenance of tokens. This is helpful to identify e.g. orphaned tokens,
i.e. tokens of users that were removed or tokens that were unused for a
longer period of time and apply actions to them (e.g. `disable` or
`delete`).

This patch adds two new things:

* A wrapper for `privacyidea-token-janitor` to make sure it's executable
  from CLI. To achieve this, it does a `sudo(8)` into the
  `privacyidea`-user and sets up the environment to make sure the
  configuration file can be found. With that, administrators can
  directly invoke it from the CLI without additional steps.

* An optional service is added which performs automatic cleanups of
  orphaned and/or unassigned tokens. Yes, the tool can do way more
  stuff, but I figured it's reasonable to have an automatic way to clean
  up tokens of users who were removed from the PI instance. Additional
  automation steps should probably be implemented in additional
  services (and are perhaps too custom to add them to this module).

[1] https://privacyidea.readthedocs.io/en/v3.7/workflows_and_tools/tools/index.html
 2022-10-06 11:43:20 +02:00
Jörg Thalheim
988c9130e1
Merge pull request #193767 from winterqt/update-dendrite 
dendrite: 0.9.9 -> 0.10.1
 2022-10-06 09:28:32 +02:00
oxalica
9fca212c84 nixos/tests/systemd-oomd: fix and follows upstream tests 
The current test triggers the kernel OOM killer and doesn't work well.
 2022-10-06 09:48:13 +08:00
Stanisław Pitucha
4a6979d310
Merge pull request #194603 from phiadaarr/jitsiVideobridge 
jitsi-videobridge: fix link in docs
 2022-10-06 12:19:43 +11:00
06kellyjac
becacf259d teleport: 9.1.2 -> 10.3.1 
Dropped the roletester since it doesn't exist anymore

Co-authored-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
 2022-10-05 13:52:20 -07:00
José Luis Lafuente
396f4f05b9
nixos/tmate-ssh-server: init module (#192270) 
* nixos/tmate-ssh-server: init module

Co-authored-by: Aaron Andersen <aaron@fosslib.net>
 2022-10-05 17:34:30 +01:00
Philipp Arras
1e430612dc jitsi-videobridge: fix link in docs 2022-10-05 18:11:57 +02:00
Florian Klink
c1c406bc87
Merge pull request #191491 from oxalica/fix/systemd-initrd-modprobe 
nixos/systemd-stage-1: include modprobe confg in initrd
 2022-10-05 10:39:58 +02:00
Thiago Kenji Okada
d10f9fdccd
Merge pull request #193939 from thiagokokada/bump-retroarch 
retroarch: 1.10.3 -> 1.11.0;  libretro: unstable-2022-04-21 -> unstable-2022-10-01
 2022-10-05 09:00:37 +01:00
oxalica
3c92009868 nixos/tests/systemd-initrd-modprobe: init 2022-10-05 08:37:51 +08:00
Robert Hensing
70ec3b9f54
Merge pull request #193498 from hercules-ci/nixos-doc-disambiguate-test-options 
nixos/doc: disambiguate test option ids
 2022-10-04 21:35:49 +01:00
superherointj
2e19f2fa53 maintainers: remove superherointj 2022-10-04 14:06:48 -03:00
superherointj
ef157b4b4c
Merge pull request #193376 from superherointj/package-k3s-1.25.2+k3s1 
k3s: 1.25.0+k3s1 -> 1.25.2+k3s1
 2022-10-04 13:11:41 -03:00
Adam Joseph
c46bdcbaf2 nixos/lib/qemu-common.nix: set qemuSerialDevice for isMips64 2022-10-04 07:48:12 +00:00
Jan Tojnar
e14d1e1bc9
Merge pull request #192969 from jtojnar/extra-gsettings-strict 
GNOME/Cinnamon/Pantheon: Clean up GSettings overrides and make strict
 2022-10-04 00:59:08 +02:00
Christian Kögler
fd323dfe49
Merge pull request #194159 from foo-dogsquared/update-systemd-extraconfig-module-doc 
nixos/systemd: update extraConfig description
 2022-10-03 21:56:25 +02:00
Sandro
b70049a463
Merge pull request #183349 from Luflosi/rename-ipfs-to-kubo 2022-10-03 21:34:14 +02:00
David Morgan
bd62717fd3
libinput: Add tappingButtonMap option (#189612) 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2022-10-03 21:13:43 +02:00
Sandro
1385382014
Merge pull request #191532 from ambroisie/add-tandoor-recipes 2022-10-03 20:25:06 +02:00
Bruno BELANYI
91ba8464f4 nixos/tandoor-recipes: add test 2022-10-03 09:48:54 +02:00
Bruno BELANYI
d8b1d34806 nixos/tandoor-recipes: init module 2022-10-03 09:48:54 +02:00
Gabriel Arazas
292aab9822 nixos/systemd: update extraConfig description 2022-10-03 11:17:41 +08:00
Graham Christensen
25acc1d800
Merge pull request #190014 from fgaz/vengi-tools/0.0.21 
vengi-tools: 0.0.20 -> 0.0.21
 2022-10-02 13:04:45 -04:00
superherointj
3d200bd959 nixos/tests/k3s: fix tests 
* add superherointj as maintainer
 2022-10-02 13:01:47 -03:00