Commit Graph

46469 Commits

Author SHA1 Message Date
Sandro
cbe4fa7a64
binwalk: 2.4.3 -> 3.1.0 (#357991) 2024-11-26 21:50:34 +01:00
Sefa Eyeoglu
849225f9a1
nixos/renovate: unset service restart
Unsetting `Restart=` defaults to `Restart=no`. We don't want Renovate to
automatically restart, as it might trigger rate limits.

See https://github.com/NixOS/nixpkgs/issues/358028

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-11-26 21:36:20 +01:00
Jörg Thalheim
43f6a895e5
image/images: init (#359328) 2024-11-26 21:32:18 +01:00
Jörg Thalheim
41961a54e1
make-disk-image: Allow passing of image baseName (#359326) 2024-11-26 21:28:32 +01:00
Jonathan Ringer
b5168a9900 nixos/iso-image: fix isoImage.grubTheme = null;
Fixes `error: cannot coerce null to a string`
2024-11-26 21:18:21 +02:00
Matthew Croughan
3ecd1bade7
nixos/scion: hardcode large expiry timestamps in bootstrap.sh (#359321) 2024-11-26 18:29:47 +00:00
phaer
08b9155e20 image/images: init
A new NixOS module that adds two new options to `system.build`:

- imageModules: An attrset mapping image variant names to a list of nixos
  modules to use when building such images.

- images: An attrset mapping image variant names to a nixos instance
  based on the current config plus variant-specific modules (see
  `system.build.imageModules` above.
2024-11-26 19:04:53 +01:00
phaer
148ba06717 image/file-options: init 2024-11-26 19:04:53 +01:00
phaer
bb6586c4e6 make-disk-image: Allow passing of image baseName
It's currently alsways "nixos", which leads to various schemes of
renaming the resulting files in virtualisation/*-image.nix files as
well as further downstream, outside of nixpkgs.
2024-11-26 17:19:18 +01:00
matthewcroughan
c8446a92ab nixos/scion: hardcode large expiry timestamps in bootstrap.sh
This makes timestamps and cert expiry less of a spurious issue in VM
Tests, and in CI/Hydra, by hardcoding large values, and allowing certs
to begin at 0 seconds from UNIX epoch time
2024-11-26 15:56:41 +00:00
Izorkin
a7c8d553ae
nixos/logrotate: allow change mode of a file 2024-11-26 18:55:41 +03:00
Sandro
8e82ef5df1
nixos/binfmt: add option addEmulatedSystemsToNixSandbox (#354533) 2024-11-26 16:35:42 +01:00
Nick Cao
a17db8891e
nezha-agent: add updateScript; 0.20.3 -> 0.20.5 (#358660) 2024-11-26 08:44:16 -05:00
Artturin
86d8180759
Revert "nixos/iso-image: fix isoImage.grubTheme = null; logic" (#359280) 2024-11-26 15:01:19 +02:00
Jakub Kozłowski
ccca341011
bloop: fix service (#358951) 2024-11-26 13:59:49 +01:00
Will Fancher
80ec892b74
Revert "nixos/iso-image: fix isoImage.grubTheme = null; logic" 2024-11-26 07:56:33 -05:00
aleksana
949b67679d nerd-fonts: move release note to 25.05 2024-11-26 17:40:21 +08:00
Doron Behar
de4dbc58fd
nerdfonts: separate into individual font packages, 3.2.1 -> 3.3.0 (#354543) 2024-11-26 10:41:24 +02:00
happysalada
4f456b4dec nixos/meilisearch: add to systemPackages 2024-11-26 02:14:47 -05:00
happysalada
ab7abb5c80 nixos/meilisearch: format 2024-11-26 02:13:20 -05:00
Artturin
fa4b9638fa
nixos/iso-image: fix isoImage.grubTheme = null; logic (#156754) 2024-11-26 00:39:02 +02:00
jopejoe1
1ff4137a05
vscode-extensions: set pname (#354740) 2024-11-25 19:46:24 +01:00
Jenny
ac24b97156
nixos/zammad: refactor package, module and nixos-test (#277456) 2024-11-25 19:45:58 +01:00
Philip Taron
a102f137f5
nixos/manticore: fix mkKeyValueDefault (#358673) 2024-11-25 09:20:10 -08:00
Thiago Kenji Okada
6b83f7004c
retroarch: refactor (#358405) 2024-11-25 16:58:02 +00:00
Jared Baur
7b87a185a8 nixos/clatd: use clat-dev if it exists in settings
Otherwise, fallback to the default interface name `clat`.
2024-11-25 23:24:11 +11:00
Jared Baur
7665f6cb34 nixos/clatd: fix NetworkManager integration for dispatcher script 2024-11-25 23:24:11 +11:00
Evgeny Kurnevsky
87647a1bf9
bloop: fix service
bloop uses 'start' command now which starts daemon in the background
2024-11-25 11:40:46 +01:00
Jenny
61aa4ba718
nixos/open-webui: update doc link url (#354446) 2024-11-25 10:31:04 +01:00
Leona Maroni
1044b2ccdb
nixos/paperless: add environmentFile option (#350944) 2024-11-25 08:51:01 +01:00
Maximilian Bosch
0f9abba69d
Merge: mautrix-signal: 0.7.2 -> 0.7.3 (#358785) 2024-11-25 08:33:43 +01:00
Tomodachi94
5bb480bf8f nixos/java: format with nixfmt-rfc-style 2024-11-24 22:44:54 +00:00
Thiago Kenji Okada
006b13c56c retroarch-{bare,full}: renamed from retroarch{Bare,Full} 2024-11-24 21:58:01 +00:00
Emily
49d9ef16b1
treewide: remove deprecations up until 24.11 (#356732) 2024-11-24 19:46:12 +00:00
Maximilian Bosch
705ae9b92e
mautrix-signal: 0.7.2 -> 0.7.3
ChangeLog: https://github.com/mautrix/signal/releases/tag/v0.7.3
2024-11-24 19:44:49 +01:00
oddlama
91cbd96ffe
kanidm: allow hydra to cache alternative build with secret provisioning 2024-11-24 19:24:43 +01:00
rczb
ee2bb9be3e nerdfonts: separate into packages under nerd-fonts 2024-11-24 19:57:09 +02:00
Nico Felbinger
2c8074dfa7
binwalk: 2.4.3 -> 3.1.0
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-11-24 18:20:06 +01:00
Franz Pletz
d4b1fcdbe6
nixos/redlib: format, add maintainer, add cfg.settings, use upstream systemd unit (#345715) 2024-11-24 17:13:16 +01:00
Martin Weinelt
6632eed37b
nixos/haka: fix assert (#358675) 2024-11-24 16:30:35 +01:00
Felix Bühler
b675ca747f
nixos/mopidy: test & cleanup (#356021) 2024-11-24 16:01:21 +01:00
netali
4ad703d62e
nixos/tests/zammad: refactor test 2024-11-24 14:42:49 +01:00
netali
f41f218e0d
nixos/zammad: refactor module 2024-11-24 14:42:43 +01:00
Aleksana
1dc3b902a6
torq: drop (#358683) 2024-11-24 21:41:55 +08:00
Moraxyc
b84c7c214e
nixos/nezha-agent: add options for new features
- servives.nezha-agent.disableNat: Disable NAT penetration
 - servives.nezha-agent.disableSendQuery: Disable sending TCP/ICMP/HTTP requests
2024-11-24 21:39:44 +08:00
Maximilian Bosch
4220a62d70
Merge: nixos/victoriametrics: check config, more tests & update desc (#353950) 2024-11-24 14:18:29 +01:00
Andreas Zweili
ce7cc9146e torq: drop 2024-11-24 13:35:05 +01:00
Sefa Eyeoglu
2636739e7a
nixos/monado: add forceDefaultRuntime option (#348815) 2024-11-24 13:26:39 +01:00
Felix Buehler
5c99958613 nixos/haka: fix assert 2024-11-24 12:28:39 +01:00
Felix Buehler
7882454654 nixos/manticore: fix mkKeyValueDefault 2024-11-24 12:26:40 +01:00
Felix Buehler
9262fc48f9 nixos/mopidy: use lib.getExe 2024-11-24 12:05:41 +01:00
Felix Buehler
dddc9d800a nixos/mopidy: fmt 2024-11-24 12:03:28 +01:00
Felix Buehler
8f6ffd06a4 nixos/mopidy: add test 2024-11-24 12:03:28 +01:00
Felix Buehler
fba9ba64b3 nixos/mopidy: remove "with" statment 2024-11-24 12:03:03 +01:00
Matthew Croughan
383f676a1b
matrix-sliding-sync: remove the word 'simply' from option rename (#358544) 2024-11-24 09:26:38 +00:00
Masum Reza
041855ac56
nixos/scx: cleanup (#358339) 2024-11-24 13:40:30 +05:30
Kaleo
5991ed35da nixos/open-webui: update doc link url 2024-11-24 14:30:42 +08:00
Adam C. Stephens
4238856f15
incus: 6.6.0 -> 6.7.0 (#356230) 2024-11-23 17:46:48 -05:00
Adam Stephens
ed24c80ef6
incus: add tpm to container test 2024-11-23 16:37:31 -05:00
Adam Stephens
0e12722d4b
incus: fix tpm support 2024-11-23 16:28:31 -05:00
Maximilian Bosch
d2ed89833b
php: 8.2 -> 8.3
PHP 8.2 will only receive security patches starting at the end of
November[1], so it makes sense to bump the default version forward.

I looked through all modules with the substring `pkgs.php`[2] and all of
the usages looked fine or were fixed in a commit before this one.

[1] https://www.php.net/supported-versions.php
[2] I didn't take `with`/`let ... in` things into account, but honestly,
    if an application doesn't work with a newer PHP, it should probably
    be pinned down instead of blindly relying on `pkgs.php`.
2024-11-23 20:47:31 +01:00
Maximilian Bosch
52aad27d73
nixos/castopod: pin to php 8.2
The package is pretty outdated, so I'm not sure if it'll work with PHP
8.3, let's keep it on 8.2 for now until the maintainers update it.
2024-11-23 20:44:28 +01:00
Adam C. Stephens
053e9d35f3
incus: add lvm to storage test (#358528) 2024-11-23 14:27:33 -05:00
matthewcroughan
d6128750fb matrix-sliding-sync: remove the word 'simply' from option rename 2024-11-23 19:10:20 +00:00
Adam C. Stephens
496390848d
incus: add lvm to storage test 2024-11-23 13:15:48 -05:00
Sandro
d1c079db10
nixos/suricata: Fix module and add to module-list (#349826) 2024-11-23 18:30:55 +01:00
Franz Pletz
2e07e3990d
kubo: 0.29.0 -> 0.32.1 (#357960) 2024-11-23 18:21:27 +01:00
Guillaume Girol
a929772d78
nixos/prometheus-postfix-exporter: add package option and format (#356564) 2024-11-23 17:53:28 +01:00
Martin Weinelt
59c2685a24
nixos/mackerel-agent: fix pkgs (#358476) 2024-11-23 17:53:13 +01:00
Matthew Croughan
c8eb734b5a
matrix-sliding-sync: improve assertion/deprecation message (#355938) 2024-11-23 16:34:15 +00:00
Franz Pletz
c6369bb94a
nixos-containers: fix enableTun option (#357276) 2024-11-23 17:18:57 +01:00
Felix Buehler
ae94b60d54 nixos/mackerel-agent: fix pkgs 2024-11-23 17:06:58 +01:00
Franz Pletz
c1fb3d817b
nixos/virtualisation: fix rendering of example in diskSize (#355944) 2024-11-23 17:06:13 +01:00
OPNA2608
ee25f37003 gkraken,nixos/gkraken: Drop
It was switched to maintenance mode on 2020-12-09[1], and marked deprecated in favour of Coolero/CoolerControl on 2022-02-23[2].

We have CoolerControl packaged since 24.05[3], so we can now drop gkraken.

[1]: https://gitlab.com/leinardi/gkraken/-/releases/0.14.5
[2]: https://gitlab.com/leinardi/gkraken/-/releases/1.2.0
[3]: c981cb00dd
2024-11-23 14:40:23 +01:00
LorenzBischof
c5d7865d83
nixos/etesync-dav: update default apiurl 2024-11-23 11:41:32 +01:00
Maximilian Bosch
0c8d661707
Merge: nixos/pgbouncer: rework RFC42 integration (#356965) 2024-11-23 09:20:09 +01:00
John Titor
fc8f58848e
nixos/scx: cleanup
- use utils.escapeSystemdExecArgs in systemd service

- remove StandardError="journal" as it's already default
2024-11-23 13:17:36 +05:30
Emily
05cf591edb
vuze: drop (#358309) 2024-11-23 04:45:34 +00:00
Tomodachi94
268ae6a302 vuze: drop
No releases since early 2017:
https://en.wikipedia.org/wiki/Vuze#Development_hiatus_and_fork

Vulnerable to CVE-2018-13417

BiglyBT (`biglybt`) is a maintained fork.
2024-11-23 04:35:14 +00:00
Masum Reza
773ebf1f37
scx: 1.0.5 -> 1.0.6; build all rust subpackages together (#358154) 2024-11-23 08:47:40 +05:30
Connor Baker
4e54bbdea1
nixos/activation: Add pre-switch checks (#236375) 2024-11-22 17:33:20 -08:00
Martin Weinelt
7eb0c197fb
frigate: coral tpu support, audio model, nvidia ffmpeg hwaccel, other fixes (#357717) 2024-11-23 01:05:20 +01:00
Wulfsta
7df67599ea nixos/prometheus-postfix-exporter: add package option and format 2024-11-22 17:08:44 -05:00
Wolfgang Walther
51da8b6b00
writeReferencesToFile: remove
Had been deprecated and scheduled for removal in 24.11.
2024-11-22 21:01:53 +01:00
John Titor
9480c8be07
nixos/scx: remove dead reference to scx.rustland 2024-11-23 01:17:54 +05:30
Sefa Eyeoglu
ecd6e1eed1
nixos/netbird: fix port conflict on metrics endpoint (#357105) 2024-11-22 20:03:23 +01:00
Nick Cao
5aa904b61e
nixos/mautrix-telegram: use ffmpeg-headless instead of ffmpeg-full
ffmpeg-full was used for webp/webm support, but now they are
also enabled in ffmpeg-headless
2024-11-22 13:22:32 -05:00
Emily
811c0af5f5
dcgm: 3.3.5 -> 3.3.9; cudaPackages_10{,_0,_1,_2}: drop (#357655) 2024-11-22 18:00:03 +00:00
Wolfgang Walther
4255d7a658
nixos/archisteamfarm: remove dataDir fallback
Scheduled for 24.11.

Added in #272147.
2024-11-22 18:30:15 +01:00
Wolfgang Walther
e1e2193dff
nixos/pipewire: remove version reference from warning message
This is also true in 24.11 and up, so no need to state the version
number explicitly.
2024-11-22 18:30:15 +01:00
Wolfgang Walther
8bdfc5eca2
nixos/screen: remove assertion
Scheduled for 24.11.
2024-11-22 18:30:12 +01:00
Wolfgang Walther
9966353ee7
nixos/garage: remove assertions
Those were scheduled to be removed in 24.11, so let's do that.

Added in #311893.
2024-11-22 18:30:12 +01:00
Wolfgang Walther
749a6fe1ad
nixos/zigbee2mqtt: remove renamed-option warning
This was planned for 21.11, so let's follow through.
2024-11-22 18:30:12 +01:00
Wolfgang Walther
de69ff528b
nixos/lib/make-options-doc: remove optionsDocBook
Follow through on #296384.
2024-11-22 18:30:11 +01:00
Wolfgang Walther
73df63f8ef
lib/options: remove mdDoc
Following through on message itself.
2024-11-22 18:30:11 +01:00
Ryan Yin
ad06fc936d nixos/victoriametrics: check config, more tests, update desc 2024-11-23 01:19:11 +08:00
Martin Weinelt
1c07d92099
nixos/frigate: allow configuring a libva driver
In my testing this helped steer VA-API towards the correct card and also
made it show GPU statistics in performance monitoring.
2024-11-22 17:59:37 +01:00
Martin Weinelt
7411b85629
nixos/frigate: allow GPU use for video acceleration
The `render` group is required to acces the graphic cards decoding,
encoding and transcoding capabilities.

It is required for using fancy `ffmpeg.hwaccel-args` values, like
`preset-vaapi`.
2024-11-22 17:59:36 +01:00
Martin Weinelt
2b56a916ca
nixos/frigate: use shellscript to clear frigate cache
Shell expansions apparently do not work correctly in systemd command
lines.

Co-Authored-By: Joshua Manchester <JManch@protonmail.com>
2024-11-22 17:59:36 +01:00
Martin Weinelt
a810c07ff2
nixos/frigate: inherit required functions from lib 2024-11-22 17:59:36 +01:00
Martin Weinelt
7e33e470df
nixos/frigate: provide ffmpeg-full for nvidia hw accel
Closes: #344114
2024-11-22 17:59:35 +01:00
Martin Weinelt
d31bf00e2b
nixos/frigate: stop enabling recommendedProxySettings globally
Closes: #320512
2024-11-22 17:59:35 +01:00
Martin Weinelt
b96c4a67b9
nixos/frigate: add support for Coral devices 2024-11-22 17:59:35 +01:00
Martin Weinelt
2b2a669741
nixos/coral: init
Provides a small wrapper to enable support for Coral USB and PCIe
devices.
2024-11-22 17:59:34 +01:00
Maximilian Bosch
2995b3825e
nixos/pgbouncer: rework RFC42 integration
Commit bfb9d1825d added RFC42 support
which is a good thing in general, but this implementation has the
following flaws:

* `services.pgbouncer.logFile` was not renamed to `[...].log_file`, but
  to `[...].logfile`. Also the use of `mkRenamedOptionModule` is
  inappropriate here because the two options are not equivalent: the old
  option took a path relative to the home directory, the new an absolute
  path.

* Using `mkRenamedOptionModule` with options that don't exist (but are
  keys in a freeform attr-set or an `attrsOf X`), you get the following
  error when referencing an option you didn't declare:

    error: evaluation aborted with the following error message: 'Renaming error: option `services.pgbouncer.settings.pgbouncer.listen_port' does not exist.'

  This error is pretty bad because it's not actionable for an end-user of
  the module. A possible use-case is doing

    networking.firewall.allowedTCPPorts = [ config.services.pgbouncer.listenPort ];

  without specifying a custom listen port. This is an example of why you
  want to keep options, they already contain defaults and you can re-use
  those defaults in other parts of your system configuration.

  I decided to re-add a bunch of options where I figured that it's
  either useful to be able to address those in the NixOS configuration
  or having documentation directly in the options' reference in the
  NixOS manual.

  I didn't add all options, I'll leave that to the maintainers of
  pgbouncer.
2024-11-22 17:01:36 +01:00
Nick Cao
172a35f8ce
nixos/test-driver: target python 3.12 2024-11-22 10:49:32 -05:00
Nick Cao
e23f1733c6
nixos/test-driver: use ruff format in place of black 2024-11-22 10:49:31 -05:00
Nick Cao
ef2d3c542a
nixos/test-driver: modernize 2024-11-22 10:49:31 -05:00
Nick Cao
42d4046e94
nixos/test-driver: format with nixfmt 2024-11-22 10:49:30 -05:00
Nick Cao
b25360a7e5
nixos/test-driver: apply ruff check suggestions 2024-11-22 10:49:30 -05:00
Sandro
3156de49ba
nixos/postgresql: update docs with extraPlugins to extensions rename 2024-11-22 15:48:08 +01:00
Sefa Eyeoglu
baa412f46d
nixos/kanidm: allow origin url ending without slash (#355216) 2024-11-22 13:44:09 +01:00
Rémi NICOLE
a25e476c6a
nixos/netbox: clear old static files on upgrade (#354036) 2024-11-22 10:19:21 +01:00
Guanran Wang
0f77709e0f
nixosTests.redlib: test settings mechanic 2024-11-22 15:42:09 +08:00
Guanran Wang
4a0893c186
fixup! nixos/redlib: use upstream systemd service file 2024-11-22 15:24:46 +08:00
tomberek
a42bdea0a7
rfmakecloud: 0.0.18 -> 0.0.21 (#356963) 2024-11-22 00:35:19 -05:00
tomberek
b2d5ac855d
technium-dns-server: 13.0.2 -> 13.2 (#356520) 2024-11-22 00:24:16 -05:00
Emily
e3d26a1815 cudaPackages_10{,_0,_1,_2}: drop 2024-11-21 23:09:53 +00:00
Florian Klink
653b603cef
notmuch: move the vim plugin to another output (#353500) 2024-11-22 00:18:24 +02:00
Jared Baur
6e192c4489
nixos/activation: Add pre-switch checks
Add an option for shell script fragments that are ran before switching
to a new NixOS system configuration (pre installation of bootloader or
system activation). Also add a new subcommand for
switch-to-configuration called "check" that will cause the program to
always exit after checks are ran.
2024-11-21 13:02:54 -08:00
Kerstin Humm
ff2f00d425 nixos/canaille: init module
Co-Authored-By: Janik <80165193+Janik-Haag@users.noreply.github.com>
2024-11-21 20:28:03 +01:00
Emery Hemingway
50bbfb5788 nixos/nncp: recursively merge configurations 2024-11-21 18:31:13 +00:00
Luflosi
5742cb2a48
kubo: 0.29.0 -> 0.30.0
https://github.com/ipfs/kubo/releases/tag/v0.30.0
2024-11-21 19:12:27 +01:00
Sandro
4c79ccf34d
nixos/luksroot: make it harder to accidentially break cryptsetup (#355464) 2024-11-21 18:38:55 +01:00
Sandro
b3ac2f4ead
nixos/meilisearch: fix disabling analytics (#356614) 2024-11-21 17:15:13 +01:00
Kerstin Humm
897954b8ae nixos/open-web-calendar: init module 2024-11-21 16:34:39 +01:00
Adam C. Stephens
63de272302
nixos/kanidm: add provisioning secret directories to BindReadOnlyPaths (#357440) 2024-11-21 09:46:02 -05:00
Aleksana
c1b9d0ce79
nixos/alertmanager: add additional docs about envsubst (#302536) 2024-11-21 21:20:44 +08:00
Aleksana
9612e216ce
nixos/tabby: fix typo (#355223) 2024-11-21 21:01:54 +08:00
Weijia Wang
02287a8c02
kubo-migrator: add migration from 15 to 16 (#344265) 2024-11-21 12:22:45 +01:00
Naïm Camille Favier
6735eef1b1
nixos/libreswan: use environment.etc."ipsec.secrets".text (#357626) 2024-11-21 08:18:24 +01:00
kirillrdy
c8021779cd
amazon-cloudwatch-agent: init at 1.300049.1 (#337212) 2024-11-21 17:18:47 +11:00
TheRealGramdalf
bfc160a84c nixos/netbird: fix port conflict on metrics endpoint 2024-11-21 05:31:53 +00:00
Thiago Kenji Okada
778f30c08c
porn-vault: init at 0.30.0-rc.11 (#355785) 2024-11-20 21:52:34 +00:00
Maximilian Bosch
f10fc704df
Merge: postgresqlPackages.timescaledb: 2.14.2 -> 2.17.2; adopt, nixfmt; postgresqlPackages.timescaledb_toolkit: 1.18.0 -> 1.19.0 (#348223) 2024-11-20 22:25:14 +01:00
Sefa Eyeoglu
91fee43100
nixos/monado: add forceDefaultRuntime option
This option replaces the active runtime manifest in the user directory.
Games running through Steam's Pressure Vessel cannot read /etc so
forcefully overriding the file every time the service starts, will allow
those games to use Monado.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-11-20 21:42:06 +01:00
Naïm Favier
b294762bb9
nixos/libreswan: use environment.etc."ipsec.secrets".text
This is to ensure compatibility with the networkmanager module, which
uses the `text` option.
2024-11-20 19:59:02 +01:00
Masum Reza
d834b054f4
nixos/scx: init module (#352300) 2024-11-21 00:10:45 +05:30
Luflosi
9e2866d215
kubo-migrator: rewrite
- Migrate to pkgs/by-name
- Format with nixfmt-rfc-style
- Make it possible to remove support for very old migrations in the future by increasing the `minRepoVersion` parameter
- Rename kubo-migrator-all-fs-repo-migrations to kubo-fs-repo-migrations since it may no longer include all migrations
- Add an alias for kubo-migrator-all-fs-repo-migrations to keep backwards compatibility
- Update descriptions to differentiate between kubo-migrator and kubo-migrator-unwrapped and better describe the purpose of the migrator
- Add a description to every individual migration
- Add a description to kubo-fs-repo-migrations
- Fetch the source code of the individual migrations from their specific Git tags, like upstream intends
- Enable tests for some migrations
- Check that the migrations don't crash on startup
- Mark two broken migrations as broken. They are not compatible with the latest Go versions and upstream is not interested in fixing this
- Change code to allow most updates to be done by only changing three lines (add new version and change git tag and hash)
- Add a stub for any disabled or broken migration to prevent downloading unsigned binaries from the internet, see https://github.com/ipfs/fs-repo-migrations/issues/148#issuecomment-2351355627 and https://github.com/ipfs/fs-repo-migrations/issues/188
- Use `lib.getExe` instead of hardcoding the binary name in the kubo NixOS module
- Use `substituteInPlace` with `--replace-fail` instead of `--replace`
2024-11-20 16:17:14 +01:00
Masum Reza
e1cedaabe5
nixos/obs-studio: nullable package (#356845) 2024-11-20 18:47:47 +05:30
TobTobXX
26fbd1adbe
nixos/bind: Fix cacheNetworks option
services.bind.cacheNetworks should only apply to recursive queryies, as
per the option documentation:
> Note that this is for recursive queries – all networks are allowed to
> query zones configured with the zones option by default [...].

This would correspond to the `allow-query-cache` option in named.conf,
as per the BIND docs[1]:
> Specifies which hosts (an IP address list) can access this server’s
> cache and thus effectively controls recursion.

And not `allow-query`, which restricts all requests (including requests
where the server has authority) [2]:
> Specifies which hosts (an IP address list) are allowed to send queries
> to this resolver.
> [...]
> Note:
> `allow-query-cache` is used to specify access to the cache.

[1]: https://bind9.readthedocs.io/en/v9.20.0/reference.html#namedconf-statement-allow-query-cache
[2]: https://bind9.readthedocs.io/en/v9.20.0/reference.html#namedconf-statement-allow-query
2024-11-20 10:47:06 +01:00
kirillrdy
a7d1482799
nixos/goatcounter: Fix typo in link (#357451) 2024-11-20 17:41:22 +11:00
Kirill Radzikhovskyy
1f2ee293c6 nixos/doc/rl-2505: mention timescaledb 2024-11-20 17:23:20 +11:00
Victor Engmark
9256f91881
nixos/goatcounter: Fix typo in link 2024-11-20 15:20:57 +13:00
oddlama
3e29e0560d
nixos/kanidm: add provisioning secret directories to BindReadOnlyPaths 2024-11-20 01:41:31 +01:00
Luana
cc671e2b6b nixos/porn-vault: init module 2024-11-19 21:11:40 -03:00
Weijia Wang
5bdc0862bf
wordpress: 6.6.2 -> 6.7 (#356449) 2024-11-19 22:44:51 +01:00
Sandro
8bc2cc19bb
nixos/opendkim: modernize, add expandable settings option, put config file under standard location (#333758) 2024-11-19 22:29:49 +01:00
Marcus Ramberg
258174aead
nixos/pay-respects: actually import the module (#356231) 2024-11-19 20:56:02 +01:00
Matthieu C.
0082fde43d notmuch: move the vim plugin to another output
I wondered why my neovim was slow. Turned out notmuch.vim loading took >
500ms to load (ruby and all). And I dont even use it !
I suspect the plugin could be improved to lazyload more stuff but I
think it's ok to have the vim plugin installer be a user decision as well.
I moved it to a new "vim" output : you can install the plugin via
"notmuch.vim"
2024-11-19 20:53:26 +01:00
John Titor
d19bc236cf
nixos/release-notes-24.11: add scx module 2024-11-19 23:09:54 +05:30
John Titor
3e710e6d15
nixos/scx: init
This adds a `services.scx.enable` option to enable sched-ext schedulers.

Requires a kernel with sched-ext enabled (6.12+) or a kernel with the patchset.

requiredKernelConfigs are taken from https://cateee.net/lkddb/web-lkddb/SCHED_CLASS_EXT.html
2024-11-19 23:09:53 +05:30
Pol Dellaiera
d6a0449d10
freecad: make customizable (#347776) 2024-11-19 18:04:16 +01:00
Sefa Eyeoglu
969ad19f9d
nixos/monado: nixfmt
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-11-19 17:00:50 +01:00
Aleksana
0ecc88f77d
buildGoPackage: remove (#349478) 2024-11-19 22:41:50 +08:00
Martin Weinelt
fe8fdf8ff2
nixos/snapserver: restart systemd service on failure (#356584) 2024-11-19 15:08:13 +01:00
Paul Grandperrin
853d34898d
nixos-containers: fix enableTun option
When using private users, `mknod /dev/net/tun` is run from the guest and therefor needs the `m` modifier.
2024-11-19 14:43:02 +01:00
Emily
f65de0f46a
nixos/doc/rl-2411: add highlight for the Darwin changes (#356689) 2024-11-19 13:25:06 +00:00
Emily
5113c488af nixos/doc/rl-2411: add highlight for the Darwin changes 2024-11-19 13:04:45 +00:00
Jordan Williams
7031d0fdd0
nixos/snapserver: restart the systemd service on failure 2024-11-19 06:52:11 -06:00
Emily
60b321b6a3
nixos/acme: make address families in systemd service less restrictive (#357124) 2024-11-19 10:36:41 +00:00
Toast
d5808aee19
handheld-daemon-ui: init at 3.2.3 (#305027)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Co-authored-by: Arne Keller <2012gdwu+github@posteo.de>
2024-11-19 11:17:59 +01:00
Sandro
eaeca4c794
nixos/arp-scan: init, nixos/tcpdump: init (#356994) 2024-11-19 11:03:46 +01:00
Sandro
8b230d41d2
python312Packages.magic-wormhole-mailbox-server: 0.4.1 -> 0.5.1 (#354724) 2024-11-19 10:46:25 +01:00
OTABI Tomoya
55f94d9fda
python3Packages: Fix and document the removal of the local .overrideAttrs attribute (#350127) 2024-11-19 17:45:32 +09:00
Leona Maroni
3239d863ac
Merge: docs: remove old NixOS version references (#356684) 2024-11-19 09:10:51 +01:00
Will Fancher
9100366975
nixos/network-interfaces-systemd: improve default ethernet network matching (#347283) 2024-11-18 21:18:19 -08:00
Will Fancher
a599ce82dd
nixos/networkd: warn about naively replacing IPForward (#356955) 2024-11-18 20:10:52 -08:00
Will Fancher
768f628de7
nixos/systemd-stage-1: nixos-find-nixos-closure before initrd.target (#357135) 2024-11-18 19:33:21 -08:00
Will Fancher
af8279fe38 nixos/systemd-stage-1: nixos-find-nixos-closure before initrd.target
Without this, boot could proceed to the initrd cleanup step before the
closure was found, killing the service and breaking boot.
2024-11-18 21:14:51 -05:00
Malte Voos
d9bf91700e nixos/acme: make address families in systemd service less restrictive
This change is to support LEGO's capability to spawn an external process that
solves the DNS-01 challenge. In particular, this enables a setup where LEGO
runs a shell script that uses nsd-control to add an appropriate zone to a
local NSD instance.
2024-11-19 01:40:59 +01:00
David McFarland
b0d941edb4
dotnet: november 2024 upgrades and infrastructure changes (#355753) 2024-11-18 20:20:45 -04:00
commiterate
3d0e3156ea amazon-cloudwatch-agent: init at 1.300049.1 2024-11-18 19:19:35 -05:00
Cosima Neidahl
e6b5e795bf
kimai, nixos/kimai: init at 2.24.0 (#353187) 2024-11-19 01:05:53 +01:00
Colin
67fe3c2326
nixos/geoclue2: add package option (#326882) 2024-11-18 22:40:37 +00:00
kirillrdy
16952bdb0c
flarum: fix 'mysql' has been renamed to/replaced by 'mariadb' (#356868) 2024-11-19 08:54:08 +11:00
Cosima Neidahl
1d87ec425f
lomiri.*: OTA-6 (#355289) 2024-11-18 22:40:08 +01:00
Francesco Gazzetta
dca9282154
libresprite: 1.0 -> 1.1 (#356557) 2024-11-18 21:22:07 +00:00
MithicSpirit
d14392eaf6
nixos/obs-studio: nullable package
Allows setting `programs.obs-studio.package = null`, which is useful in
case the user wants the appropriate kernel modules from
`programs.obs-studio.enableVirtualCamera`, but does not wish to install
obs system-wide with nixos (e.g., because they want to install it just
for their user with home-manager or maybe via flatpak).
2024-11-18 11:33:43 -05:00
K900
45533e4b16
nixos/tools: add enable options to manual (#356992) 2024-11-18 19:03:51 +03:00
Sandro Jäckel
b4d622fd7a
nixos/{arp-scan,iftop,tcpdump,traceroute}: format 2024-11-18 16:47:56 +01:00
Sandro Jäckel
a6ee554a67
nixos/traceroute: use lib.getExe 2024-11-18 16:47:56 +01:00
Sandro Jäckel
4fae28967b
nixos/iftop: improve description, use lib.getExe 2024-11-18 16:47:55 +01:00
Sandro Jäckel
eb42ef0c24
nixos/tcpdump: init 2024-11-18 16:47:55 +01:00
Sandro Jäckel
2829181316
nixos/arp-scan: init 2024-11-18 16:40:20 +01:00
Maximilian Bosch
859c76c505
nixos/tools: add enable options to manual
E.g. when overriding `nix` with `pkgs.lix`, `nixos-option` will fail.
Given that I haven't used it in a very long time, I wanted to disable
it, but finding an option to turn off `nixos-option` is kinda hard given
that the options are generated here using `mkToolModule`.

I assumed that this isn't possible until I learned that
`system.tools.X.enable` exists. To me, this is a clear sign that these
shouldn't be internal.
2024-11-18 16:22:41 +01:00
Silvan Mosberger
555f0e9f1e
formats.ini: expose INI atom from all ini formats (#354800) 2024-11-18 16:11:51 +01:00
Johannes Kirschbauer
6b53949b0c
formats.ini: expose INI atom from all ini formats 2024-11-18 16:07:22 +01:00
Dominique Martinet
f27f1e0931 nixos/tests/rmfakecloud: new test 2024-11-18 22:59:41 +09:00
Dominique Martinet
64a13b7609 nixos/rmfakecloud: remove outdated note about webui not included
the webui has been built by default for a while
2024-11-18 22:59:41 +09:00
Dominique Martinet
b15ed174fa rmfakecloud: run nixfmt 2024-11-18 22:59:40 +09:00
Paul Meyer
2ac1f685b6 docs: update Go section after buildGoPackage removal
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-11-18 14:36:08 +01:00
Maximilian Bosch
06f50f4adf
nixos/networkd: warn about naively replacing IPForward
See https://github.com/systemd/systemd/issues/33414.

The way this was phrased sounded like a dumb search/replace operation to
me. This resulted in random parts of my routing being broken (forward
from if X -> Y being fine, but the opposite direction being broken).

This change makes it explicit that it's a little more complicated and
you should really consult the docs before making that change.
2024-11-18 14:16:38 +01:00
Yury Shvedov
a7ab6aa51a doc: notice freecad customization an changelog
Change-Id: If019f12696db1c1661580e51b1920e637c52efec
2024-11-18 12:24:26 +03:00
Martin Joerg
0afba0d517 python312Packages.magic-wormhole-mailbox-server: 0.4.1 -> 0.5.1
https://github.com/magic-wormhole/magic-wormhole-mailbox-server/compare/refs/tags/0.4.1...refs/tags/0.5.1
https://github.com/magic-wormhole/magic-wormhole-mailbox-server/blob/0.5.1/NEWS.md

Python 3.12 is now supported
2024-11-18 07:37:49 +00:00
Paul Meyer
4ad10975ec buildGoPackage: remove
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-11-18 07:51:19 +01:00
Florian Agbuya
75a6be1684 flarum: fix 'mysql' has been renamed to/replaced by 'mariadb' 2024-11-18 13:03:05 +08:00
Martin Weinelt
ee595b709e
nixos/wyoming-faster-whisper: update CUDA device allowlist
This list can change between driver versions, and it requires an update
now to find my GPU.
2024-11-18 03:21:43 +01:00
David McFarland
bfaca46529 dotnet-sdk/runtime/aspnetcore: 6.0 -> 8.0 2024-11-17 18:35:19 -04:00
Patrick
6728211ec8
nixos/kanidm: allow origin url ending without slash 2024-11-17 23:21:07 +01:00
Sandro Jäckel
f497159195
nixos/opendkim: put config file under standard location 2024-11-17 22:27:10 +01:00
Sandro Jäckel
1414b222f5
nixos/opendkim: add expandable settings option 2024-11-17 22:27:09 +01:00
Sandro Jäckel
dfac70cb1d
nixos/opendkim: modernize 2024-11-17 22:27:09 +01:00
David McFarland
42d69ab59a dotnet: move dotnet_root to $out/share/dotnet 2024-11-17 14:19:23 -04:00
David McFarland
ddd08e404f dotnet: split setup hooks into wrapper for runtime/sdk 2024-11-17 14:19:22 -04:00
Ratchanan Srirattanamet
986a0381df nixos/doc/rl: mention added module Kimai 2024-11-17 16:21:19 +00:00
Ratchanan Srirattanamet
29e586e508 nixos/kimai: init module & add test 2024-11-17 16:20:21 +00:00
Julien Malka
891bfded62 nixos/tests/agorakit: init test 2024-11-17 16:08:58 +01:00
Julien Malka
cee07e8dc8 nixos/agorakit: init module 2024-11-17 16:08:58 +01:00
Marcin Serwin
6fa830fc0d
libresprite: 1.0 -> 1.1 2024-11-17 15:07:57 +01:00
Viorel-Cătălin Răpițeanu
d1da56f629 wordpressPackages: package and theme updates
1. Make twentytwentyfive theme default
2. Update all packages
2024-11-17 15:56:28 +02:00
Viorel-Cătălin Răpițeanu
5705ab5bc5 wordpress: 6.6.2 -> 6.7
Update the package to the latest version.
2024-11-17 15:56:09 +02:00
Masum Reza
9930c0783d
nixos/g810-led: fix module (#356687) 2024-11-17 18:22:07 +05:30
Leona Maroni
84ad4442b0
nixos/gotosocial: fix failing tests (#353901) 2024-11-17 13:38:30 +01:00
Wolfgang Walther
7076d32d23
nixos/yabar: remove reference to nixos 18.03
No need to mention that anymore - it's just a fact by now.
2024-11-17 13:06:11 +01:00
Wolfgang Walther
1dd9c32b18
docs: remove references before 22.11
Stuff that has been in for many years doesn't need to be mentioned
explicitly anymore.
2024-11-17 12:51:09 +01:00
Emily
6cf76dce17
nixos: remove boot.loader.raspberryPi (#356688) 2024-11-17 11:49:35 +00:00
Wolfgang Walther
8ca24a7a2b
nixos: remove boot.loader.raspberryPi
This has been announced for 24.11 in #241534, so let's follow through.
2024-11-17 12:33:57 +01:00
Maximilian Bosch
cdc32ef5a5
Merge: nixos/postgresql: fix warning typo (#356619) 2024-11-17 12:24:19 +01:00
Gaetan Lepage
8fac714b78 nixos/g810-led: fix module 2024-11-17 11:48:24 +01:00
Masum Reza
e13831335f
treewide: stdenv.is -> stdenv.hostPlatform.is (#356363)
* treewide: stdenv.is -> stdenv.hostPlatform.is

* treewide: nixfmt due to ci error
2024-11-17 16:11:54 +05:30
Tom Fitzhenry
a2337e4f6c nixos/spiped: use systemctl restart during activation
As is common with other networking services, stopIfChanged=true (the default) can cause O(seconds) downtime during activation.

Reduce this downtime by disabling stopIfChanged as done in:
* sshd https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/networking/ssh/sshd.nix#L569
* tailscale https://github.com/NixOS/nixpkgs/pull/170210
2024-11-17 20:39:25 +11:00
Tom Fitzhenry
235d103ff7 nixos/clatd: add enableNetworkManagerIntegration option 2024-11-17 20:38:55 +11:00
Ian Kerins
307090125f
nixos/postgresql: fix warning typo 2024-11-16 20:59:04 -05:00
PapayaJackal
4a42682ff8 nixos/meilisearch: fix disabling analytics 2024-11-17 01:34:29 +00:00
Martin Weinelt
f3a1d218b0
nixos/zigbee2mqtt: only add port to DeviceAllow if it is a device (#356573) 2024-11-16 22:52:47 +01:00
Andrew Marshall
577e162073 nixos/zigbee2mqtt: only add port to DeviceAllow if it is a path
zigbee2mqtt supports having non-device ports (e.g. `tcp://`); those
should not be set in DeviceAllow. No URI will start with `/`, so use
that as the filter that it is a “real” device that needs to be allowed.
2024-11-16 16:47:38 -05:00
Maximilian Bosch
97a911e8fb
Merge: nixos/postgresql: extension based hardening relaxation (#355010) 2024-11-16 22:29:36 +01:00
Leona Maroni
3013234aef
druid: 30.0.0 -> 31.0.0 (#351877) 2024-11-16 22:20:41 +01:00
Maximilian Bosch
6306bb79b8
Merge: nixos/rl-2411: fix version Grafana has been updated to (#356528) 2024-11-16 21:21:28 +01:00
Maximilian Bosch
68d9643388
nixos/tests/postgresql: test plv8 hardening on non-JIT variants only
PostgreSQL with JIT support enabled doesn't work with plv8. Hence, we'd
get an evaluation failure for each
`nixosTests.postgresql.postgresql.postgresql_jit_X`.

This should be restructured in the future (less VM tests for custom
extensions, but a single VM test for this case to cover). For now, we
should get this fix out and this is a good-enough approach.
2024-11-16 21:16:06 +01:00
Masum Reza
e6914ee14c
nixos/hyprland: adds programs.hyprland.withUWSM option (#355959) 2024-11-17 00:41:49 +05:30
Maximilian Bosch
3bad58ed01
nixos/rl-2411: fix version Grafana has been updated to 2024-11-16 18:57:15 +01:00
Tim Häring
7550580e19
technium-dns-server: 13.0.2 -> 13.2 2024-11-16 18:31:39 +01:00
Martin Weinelt
e198536d26
nixosTests.postgresql: test hardening gets relaxed
The plv8 plugin requires access to pkey syscalls. The execution will
crash hard when it is not allowed by the syscall filter.

Co-Authored-By: Jan Tojnar <jtojnar@gmail.com>
2024-11-16 17:29:34 +01:00
Martin Weinelt
d370af0785
nixos/postgresql: create infrastructure for relaxing systemd hardening
By matching on the package names of the plugins passed into the package
we can relax the systemd unit hardening as needed.
2024-11-16 17:29:34 +01:00
Masum Reza
f4ae47b33e
nixos/gdm: automatically enable services.displayManager (#353848) 2024-11-16 21:40:04 +05:30
Martin Weinelt
223a6c6ed0
nixos/postgresql: rename extraPlugins to extensions
This is the upstream lingo, and it makes everything slightly less
confusing.
2024-11-16 14:46:16 +01:00
Guillaume Girol
8bb2a40c90
sgx-psw+aesmd: 2.24 -> 2.25 (#353041) 2024-11-16 12:21:10 +01:00
jopejoe1
7b47ad2dfd vscode-extensions: set pname 2024-11-16 09:50:13 +01:00
Marcus Ramberg
0aa644e317
k3s_1_31: 1.31.1+k3s1 -> 1.31.2+k3s1 (#352182) 2024-11-16 09:42:43 +01:00
Emily
fbd635df5d nixos/doc/rl-2505: add more comments about ordering
This looks a little ridiculous right now, but my experience is that
it’s common to find the beginning or end of a section and add more
things there without seeing the comments. We should probably move
to a one file per release note system, but in the meantime this is
a low‐cost way to help reduce merge conflicts.
2024-11-16 06:48:00 +00:00
Emily
71e6c012dc nixos/doc/rl-2505: fix quotes
Fixes: a836397580
2024-11-16 06:47:32 +00:00
Adam C. Stephens
7ea9ba60d8
nixos/incus: add incus-user service and socket (#355645) 2024-11-15 23:34:21 -05:00
Adam Stephens
0214dd4ef2
nixos/tests/incus: test incus-user 2024-11-15 23:32:16 -05:00
jopejoe1
95b30da133
nixos/shairport-sync: add package option (#355985) 2024-11-16 03:12:02 +01:00
Lin Jian
8ebe7dbb74
kanata: 1.7.0-prerelease-1 -> 1.7.0 (#356078) 2024-11-16 09:20:36 +08:00
Felix Bühler
8a95f3f42b
nixos/mopidy: fix Python dependency collisions between extensions (#354069) 2024-11-16 00:59:30 +01:00
Gaétan Lepage
34dd7c3f68
nixos/auto-upgrade: Format (#356091) 2024-11-16 00:41:13 +01:00
Fernando Rodrigues
c346fd5125
nixos/pay-respects: fix interactiveShellInit for fish and zsh
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-11-15 17:56:54 +00:00