Commit Graph

33469 Commits

Author SHA1 Message Date
Daniel Sidhion
15ddcc64cd
nixos/tigerbeetle: add docs on upgrading, add more systemd hardening (#332899) 2024-09-24 23:56:38 -07:00
Artturin
e0464e4788 treewide: replace stdenv.is with stdenv.hostPlatform.is
In preparation for the deprecation of `stdenv.isX`.

These shorthands are not conducive to cross-compilation because they
hide the platforms.

Darwin might get cross-compilation for which the continued usage of `stdenv.isDarwin` will get in the way

One example of why this is bad and especially affects compiler packages
https://www.github.com/NixOS/nixpkgs/pull/343059

There are too many files to go through manually but a treewide should
get users thinking when they see a `hostPlatform.isX` in a place where it
doesn't make sense.

```
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv.is" "stdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv'.is" "stdenv'.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "clangStdenv.is" "clangStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "gccStdenv.is" "gccStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenvNoCC.is" "stdenvNoCC.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "inherit (stdenv) is" "inherit (stdenv.hostPlatform) is"
fd --type f "\.nix" | xargs sd --fixed-strings "buildStdenv.is" "buildStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "effectiveStdenv.is" "effectiveStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "originalStdenv.is" "originalStdenv.hostPlatform.is"
```
2024-09-25 00:04:37 +03:00
Martin Weinelt
aaa7fb5840
nixos/{pretix,pretalx}: set up log rotation (#343982) 2024-09-24 22:48:17 +02:00
Philip Taron
a829e3a287
nixos/services.snapserver: fix regression introduced in #339099 by renaming local function (#344243) 2024-09-24 13:37:17 -07:00
Maximilian Bosch
2a0f7e30e8
Merge: Revert "nixos/profiles/base: install vim w/nix-syntax plugin" (#343800) 2024-09-24 22:31:02 +02:00
Robert Schütz
eb28b94bd1
nixos/iptsd: Touch was renamed to Touchscreen in v3 (#344036) 2024-09-24 09:59:14 -07:00
Philip Taron
48d6e1118b
nixos/services.snapserver: fix regression introduced in #339099 by renaming local function 2024-09-24 09:08:43 -07:00
Alois Wohlschlager
59ca239d1a replaceDirectDependencies: split off from replaceDependencies
This allows both swapping out and reusing the rewrite machinery.
2024-09-24 12:20:15 +02:00
Alois Wohlschlager
63d6a7037c nixos/top-level: wire up cutoffPackages for replaceDependencies
Move replaceRuntimeDependencies to the replaceDependencies namespace,
where the structure is more consistent with the replaceDependencies
function. This makes space for wiring up cutoffPackages as an option
too.

By default, the system's initrd is excluded. The replacement process does not
work properly anyway due to the structure of the initrd (the files being copied
into it, and it being compressed). In the worst case (which has been observed
to actually occur in practice), a store path makes it into the incompressible
parts of the archive, checksums are broken, and the system won't boot.
2024-09-24 12:20:15 +02:00
Alois Wohlschlager
d3abae8dee nixos/top-level: improve replaceRuntimeDependencies
Instead of iterating over all replacements and applying them one by one,
use the newly introduced replaceDependencies function to apply them all
at once for replaceRuntimeDependencies. The advantages are twofold in
case there are multiple replacements:
* Performance is significantly improved, because there is only one pass
  over the closure to be made.
* Correctness is improved, because replaceDependencies also replaces
  dependencies of the replacements themselves if applicable.

Fixes: https://github.com/NixOS/nixpkgs/issues/4336
2024-09-24 12:20:15 +02:00
Yt
d026e3fa1a
immich: init at 1.115.0; nixos/immich: init module (#324127) 2024-09-24 05:56:12 -04:00
K900
e9a78e0285 nixos/installer/tools: only enable tools if nix is enabled
This restores the old behavior of being able to remove
everything nix-related with just `nix.enable = false`.

Fixes #344083.
2024-09-24 08:19:36 +03:00
Jan van Brügge
cedcd9f4f0
nixos/immich: init module 2024-09-23 22:38:02 +02:00
Robert Schütz
030f88a326 nixos/iptsd: Touch was renamed to Touchscreen in v3 2024-09-23 12:31:51 -07:00
Simon Hauser
32cc042368
mariadb: 10.5.26, 10.6.19, 10.11.9, 11.4.3 (#334878)
* mariadb: 10.5.26, 10.6.19, 10.11.9, 11.4.3

* nixos/tests/automysqlbackup: nixfmt

* nixos/automysqlbackup: fix tests

* nixos/tests/mariadb-galera: nixfmt

* nixos/tests/mariadb-galera: fix test failing with new default IPv6 configuration
2024-09-23 20:00:19 +02:00
Martin Weinelt
9b9ca77050
nixos/logrotate: harden systemd unit (#339050) 2024-09-23 17:49:29 +02:00
Jörg Thalheim
15f80d9120
Improve assertions for etc.overlay and systemd-sysusers (#332516) 2024-09-23 17:01:30 +02:00
Martin Weinelt
1d8c946fdb
nixos/pretalx: enable log rotation
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:58:52 +02:00
Martin Weinelt
9a85a7e2ce
nixos/pretix: enable log rotation
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:57:31 +02:00
Daniel Nagy
201d35822e
nixos/nar-serve: remove with lib; (#343472) 2024-09-23 15:40:56 +02:00
Marcel
0556c426ff
nixos/pretix: fix database.host option type (#343917)
Support database configuration using TCP and not only Unix sockets.
2024-09-23 10:52:08 +02:00
Jonas Chevalier
b4dc369186
Fix expandOnBoot=false and rigid path to nix-path-registration (#341071) 2024-09-23 09:59:27 +02:00
Atemu
b8f89a9b04
nixos/darkhttpd: remove with lib; (#343441) 2024-09-22 22:16:03 +02:00
Geoffrey Thomas
82978a85c6 Revert "nixos/profiles/base: install vim w/nix-syntax plugin"
Adding custom plugins causes the `vim` command to be a wrapper script
running `vim -u ...`, which makes it not load the default ~/.vimrc.
(This is analogous to #177375 about neovim.)

As of Vim 9, the syntax-highlighting portion of the nix plugin is
upstream; the full plugin is only needed for indentation etc. (see also
e261eb152b). So, using regular pkgs.vim
works around this behavior/bug and causes any ~/.vimrc to get loaded,
without regressing the syntax highlighting support that motivated the
change being reverted here.

This reverts commit 0b5a0cbc69.
2024-09-22 15:16:39 -04:00
Emily
457b356b91
nixos/profiles/minimal: set fonts.enableDefaultPackages which was previously set by environment.noXLibs (#341734) 2024-09-22 19:29:40 +01:00
Sandro
d7a90aab71
nixos/profiles/minimal: set fonts.enableDefaultPackages which was previously set by environment.noXLibs 2024-09-22 20:21:16 +02:00
Leona Maroni
761ae3237c
dependency-track: init at 4.11.6 (#328669) 2024-09-22 18:49:11 +02:00
Emily
2e00bfd393
nixos: remove environment.noXlibs (#341717) 2024-09-22 16:25:00 +01:00
Alexander Sieg
5b67f3b831
nixos/dependency-track: init module 2024-09-22 16:38:45 +02:00
Jörg Thalheim
f05d081652
nix: update nix-fallback-paths (#343716) 2024-09-22 15:44:24 +02:00
Aleksana
5c16154521
nixos/davis: fix nginx conf's well-known redirect (#342995) 2024-09-22 21:28:31 +08:00
Jörg Thalheim
8999c869a8 nix: update nix-fallback-paths 2024-09-22 14:44:27 +02:00
Weijia Wang
84cd38f778
globalprotect-openconnect: add core logic and packages for 2.x releases (#316526) 2024-09-22 12:07:33 +02:00
Weijia Wang
2b0ff836a9 nixos/globalprotect: mention removal 2024-09-22 11:06:38 +02:00
Felix Singer
421d1b8974 nixos/{redmine,murmur}: Add Felix Singer as maintainer
I'm maintaining the associated packages. So it makes sense to add myself
to their modules as well.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-09-22 08:35:08 +02:00
Emily
6233296137
nixos/xen: fix spurious ShellCheck warning (#343528) 2024-09-22 00:55:16 +01:00
h7x4
f21ae37d3d
clash-verge: remove (#342557) 2024-09-22 01:41:17 +02:00
Masum Reza
e677e7056c
waybar: include the systemd user unit (#340874) 2024-09-22 00:29:40 +05:30
Rahul Rameshbabu
b08d6a664f
globalprotect-openconnect: remove deprecated 1.x package
The 1.x iteration of globalprotect-openconnect is no longer being
developed. Remove related components from nixpkgs.

Signed-off-by: Rahul Rameshbabu <sergeantsagara@protonmail.com>
2024-09-21 10:20:21 -07:00
Fernando Rodrigues
da018db144
nixos/xen: fix spurious ShellCheck warning
It thinks we want to expand the `*` regex expressions inside the `sed`
commands. We do not.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-21 13:37:01 -03:00
Jörg Thalheim
927b67cdc0
nixos/tools: continue cleanup (#343466) 2024-09-21 18:32:05 +02:00
h7x4
f88d5e23d9
nixos/bacula: add system-bacula.slice (#338739) 2024-09-21 17:07:20 +02:00
h7x4
b12aa4265c
nixos/ups: add system-ups.slice (#338556) 2024-09-21 17:05:26 +02:00
zendo
fe0d4615fe clash-verge: remove 2024-09-21 22:31:17 +08:00
K900
5dcbab6b74 nixos/tools: continue cleanup
- remove with lib
- shuffle some things around for readability
- add separate options for each tool
2024-09-21 16:10:32 +03:00
Masum Reza
3f3cc85de3
nixos/nautilus-open-any-terminal: only set NAUTILUS_4_EXTENSION_DIR in non GNOME environment (#343447) 2024-09-21 16:43:30 +05:30
Sandro
a2fe2c872a
tailscale: only autoconnect after backend is up (#338210) 2024-09-21 11:27:18 +02:00
linsui
c9f8285f05 nixos/nautilus-open-any-terminal: only set NAUTILUS_4_EXTENSION_DIR in non GNOME environment 2024-09-21 16:28:55 +08:00
Daniel Nagy
84b8922e82
nixos/darkhttpd: remove with lib; 2024-09-21 09:00:00 +02:00
Daniel Nagy
991fd5f462 nixos/yggdrasil: add nagy as maintainer 2024-09-21 06:30:54 +00:00