Commit Graph

25951 Commits

Author SHA1 Message Date
Atemu
a04b45f10e
Merge pull request #238596 from nikstur/qemu-vm-use-host-pkgs
nixos/qemu-vm: use cfg.host.pkgs
2023-06-26 09:06:31 +02:00
Luke Granger-Brown
cba7cd9b6d
Merge pull request #233282 from pkern/spamassassin
spamassassin: 3.4.6 → 4.0.0
2023-06-25 23:55:34 +01:00
Luke Granger-Brown
58b48cd720 nixos/spamassassin: add DMARC module to default config 2023-06-25 17:35:16 +00:00
Marco Rebhan
af614b53d1 nixos/avahi: Add package option
Allows replacing the avahi package (e.g. for debugging) without having
to use an overlay, avoiding unnecessary package rebuilds.
2023-06-25 11:01:58 -03:00
Felix Buehler
6672dde558 treewide: use optionalAttrs instead of 'else {}' 2023-06-25 11:01:34 -03:00
pennae
32deda9ec0
Merge pull request #238222 from mads256h/harden-davmail
davmail: enable sandboxing options
2023-06-25 14:57:19 +02:00
Felix Buehler
933a41a73f treewide: use optional instead of 'then []' 2023-06-25 09:11:40 -03:00
Philipp Kern
0ce6a09235 spamassassin: 3.4.6 → 4.0.0
The HashCash module has been removed, so this change also drops it from
the default config for spamassassin.
2023-06-25 09:38:10 +00:00
Will Fancher
b154feadb9
Merge pull request #237823 from lilyinstarlight/fix/systemd-initrd-no-rev
nixos/version: remove nixpkgs commit rev from initrd
2023-06-24 20:25:32 -04:00
happysalada
8db05aa52f nixos/rustus: inital module 2023-06-25 04:26:53 +08:00
Nick Cao
cca08f710c
Merge pull request #237507 from Alexis211/document-wgautomesh-gossip-secret
wgautomesh: clearer documentation for `gossip_secret_file`
2023-06-24 22:48:34 +08:00
nikstur
f6b37ddaf2 nixos/qemu-vm: use cfg.host.pkgs 2023-06-24 00:45:15 +02:00
Franz Pletz
48d0d69869
Merge pull request #239348 from Ma27/bump-grafana 2023-06-23 23:15:43 +02:00
Naïm Favier
b7098c1239
Merge pull request #239427 from ncfavier/syncthing-escaping
nixos/syncthing: fix escaping
2023-06-23 20:29:42 +02:00
Naïm Favier
9a9ded1675
nixos/syncthing: fix escaping 2023-06-23 20:19:51 +02:00
Robert Hensing
b1ad9cd27d
Merge pull request #238136 from hercules-ci/nixos-nixpkgs-dont-check-when-_module.args.pkgs-is-set
`nixos/nixpkgs`: Don't check when `_module.args.pkgs` is set
2023-06-23 19:17:36 +02:00
pennae
50a780ce5c
Merge pull request #237824 from drupol/add-guacamole-server-and-client
{guacamole-server,guacamole-client}: init at 1.5.2
2023-06-23 15:41:50 +02:00
Maximilian Bosch
6e6c2e6530
nixos/grafana: clarify that there's still a bit of time until notifiers are removed
See https://github.com/grafana/grafana/pull/66269
2023-06-23 13:45:56 +02:00
Nick Cao
e844ee1d27
Merge pull request #239208 from jelle-bigbridge/patch-1
nixos/vault: set coredump ulimit to 0
2023-06-23 09:57:19 +08:00
Ryan Lahfa
230a3705fc
Merge pull request #234223 from alyssais/stage-1-bind-file 2023-06-22 21:47:30 +02:00
Sandro
996d7cabba
Merge pull request #225877 from jappeace/upgrade-keter-2.1
nixos/keter: 2.0 -> 2.1
2023-06-22 20:00:22 +02:00
Jelle Besseling
53a3ddfab8
vault: set coredump ulimit to 0 2023-06-22 16:44:30 +02:00
Artturin
ed55524562 nixos/malloc: add back maybe unnecessary line 2023-06-22 17:28:44 +03:00
Artturi
920b833494
Merge pull request #238459 from SuperSamus/vm.max_map_count 2023-06-22 11:37:48 +03:00
Elis Hirwing
da7b79c90e
Merge pull request #239049 from LeSuisse/php80-removal
php: drop PHP 8.0
2023-06-22 08:43:39 +02:00
K900
66cb54c7fc nixos/supergfxd: add pciutils to path
Used for some weird code paths. Fixes #239059.
2023-06-22 08:27:44 +03:00
seth
18aeed351a
nixos/nvidia: fix typo in PRIME/nvidiaBusID assertion 2023-06-21 17:51:59 -04:00
Pol Dellaiera
6cc1b175d3
nixos/guacamole-server: init 2023-06-21 22:11:44 +02:00
Thomas Gerbet
84c0cb1471 php: drop PHP 8.0
Closes #224505
2023-06-21 22:09:16 +02:00
Pol Dellaiera
a950888024
nixos/guacamole-client: init 2023-06-21 20:47:31 +02:00
Franz Pletz
5224f298f0
Merge pull request #235202 from SuperSandro2000/intel-vaapi-driver 2023-06-21 20:15:17 +02:00
Martino Fontana
e1a6c85c2b nixos/sysctl: raise default vm.max_map_count to 1048576 2023-06-21 19:25:42 +02:00
Sandro
45539f8552
nixos/keter: fix port type 2023-06-21 18:23:47 +02:00
Domen Kožar
b37c9b89a4
Merge pull request #221169 from bouk/bouk/mainpr
opentelemetry-collector: add NixOS module
2023-06-21 13:07:50 +01:00
Pol Dellaiera
ec2b581c34
Merge pull request #238832 from Garmelon/grafana-config-options-fix
nixos/grafana: Fix and adjust config options
2023-06-21 11:45:24 +02:00
Jörg Thalheim
7b697d9698
Merge pull request #238822 from SuperSandro2000/grub-1-removal
nixos/grub: remove grub 1 from descriptions
2023-06-21 09:21:04 +01:00
Joscha
daa75a4093 nixos/grafana: Fix and adjust config options 2023-06-20 23:19:45 +02:00
Sandro Jäckel
900104fc52
nixos/grub: remove grub 1 from descriptions 2023-06-20 22:34:25 +02:00
Weijia Wang
e9b4c2b8f2 exhibitor: drop 2023-06-20 22:14:35 +03:00
Alyssa Ross
eafa1fd10d nixos/public-inbox: set ProtectHome=tmpfs
This fixes using coderepos in /home, by allowing the coderepo paths to
be bind mounted into an otherwise empty /home tmpfs.  Since this was
the usecase for making ProtectHome= overrideable, we don't need the
mkDefault any more.
2023-06-20 17:19:09 +00:00
Alyssa Ross
03216e705c nixos/public-inbox: make coderepo paths accessible 2023-06-20 17:19:09 +00:00
Alyssa Ross
68c68f39db nixos/public-inbox: remove unused indexing code
This was never run, because public-inbox-init now always initializes
Xapian.
2023-06-20 17:11:23 +00:00
Sandro
0b77630d18
Merge pull request #209068 from CRTified/adguard-dhcp 2023-06-20 13:37:34 +02:00
Sandro
8eec7326a3
Merge pull request #219106 from m-bdf/nixos-testing-increase-device-timeout 2023-06-20 11:48:45 +02:00
rnhmjoj
7d263715bd nixos/fakeroute: run as unprivileged user 2023-06-20 01:12:04 +00:00
pennae
c8b4e5d557
Merge pull request #237557 from pennae/dedocbookify-nixos
nixos/doc: dedocbookify
2023-06-19 14:05:03 +02:00
Florian Klink
1272a034f0
Merge pull request #238396 from R-VdP/fsck_path_fix
nixos/systemd: Make the fsck unit depend only on FS packages.
2023-06-19 12:58:27 +03:00
Joscha
5e4ec14596 nixos/grafana: update and add settings
I went through all categories that were already present in the grafana
module and added most options from the official docs at
https://grafana.com/docs/grafana/v9.5/setup-grafana/configure-grafana/

I also modified the descriptions of some existing options to match the
official docs more closely.
2023-06-18 22:23:48 +02:00
Joscha
2f68d8cb10 nixos/grafana: reformat 2023-06-18 22:23:39 +02:00
Ilan Joselevich
c8afc7dd83
Merge pull request #238193 from MatthewCash/master
nixos/kmscon: disable reload-systemd-vconsole-setup service
2023-06-18 16:18:43 +03:00
Ryan Lahfa
8f83962b34
Merge pull request #238289 from NixOS/netdata-fix 2023-06-18 15:10:33 +02:00
Bobby Rong
34c861d69c
Merge pull request #238384 from bobby285271/fix/pantheon-sessionCommands
nixos/pantheon: allow excluding pantheon-agent-geoclue2
2023-06-18 19:23:09 +08:00
r-vdp
c3fa4f9170
nixos/systemd: Make the fsck unit depend only on FS packages.
This means that this unit no longer need to be rebuilt when the system path is changed.
2023-06-18 12:46:13 +02:00
Bobby Rong
013bb477b4
nixos/pantheon: allow excluding pantheon-agent-geoclue2
Bash will raise syntax error for sessionCommands if sessionPath is empty.
2023-06-18 17:23:57 +08:00
Pol Dellaiera
f6e54f4eb8
Merge pull request #192889 from pbsds/code-server-ext-compat
code-server: add vscode-with-extensions compatibility
2023-06-18 09:12:59 +02:00
Peder Bergebakken Sundt
53077eb1be code-server: add vscode-with-extensions compatibility 2023-06-17 23:14:50 +02:00
Emily
187729fe5d
Merge pull request #233324 from R-VdP/fwupd_1_9_1
fwupd: 1.8.15 -> 1.9.2
2023-06-17 22:55:59 +02:00
pacien
d99dd867fb nixos/pixelfed: fix code cache cleanup
The "bootstrap" directory only exists within the app's package.
The cached code is placed at the root of the runtime directory
instead.
2023-06-17 19:57:29 +02:00
Vladimír Čunát
6d80b598ef
Merge #237233: staging-next 2023-06-11 2023-06-17 18:53:26 +02:00
Raito Bezarius
2d7e29b60e nixos/netdata: fix claim_token_file -> claimTokenFile
It was forgotten in afc6f0d93b.
2023-06-17 17:51:45 +02:00
Pol Dellaiera
2028c38a83
Merge pull request #238083 from deinferno/tailscale-kmod
nixos/tailscale: fix ipv6 nat (v6nat) support
2023-06-17 16:15:17 +02:00
Ryan Lahfa
3d941b6be8
Merge pull request #236656 from nikstur/qemu-vm-persistent-block-device-names 2023-06-17 14:52:26 +02:00
github-actions[bot]
f300d1d5c2
Merge master into staging-next 2023-06-17 12:01:26 +00:00
Mads Mogensen
40c923aa13
davmail: enable sandboxing options
The output from `systemd-analyze security davmail`:
Before: `Overall exposure level for davmail.service: 8.2 EXPOSED 🙁`
After: `Overall exposure level for davmail.service: 1.3 OK 🙂`
2023-06-17 11:32:42 +02:00
Alyssa Ross
18f2be2e56 nixos/public-inbox: require that URL be non-empty
public-inbox-init doesn't work if passed an empty URL.
2023-06-17 07:57:27 +00:00
Vladimír Čunát
41d7e84dd8
Merge branch 'master' into staging-next
Trivial conflict:
 	nixos/doc/manual/release-notes/rl-2311.section.md
2023-06-17 07:46:50 +02:00
Matthew_Cash
ae234ed1ab
nixos/kmscon: disable reload-systemd-vconsole-setup service 2023-06-16 19:12:07 -07:00
Robert Hensing
8f31bff794 nixos/nixpkgs: Don't check when _module.args.pkgs is set 2023-06-16 22:08:16 +02:00
Robert Hensing
a742767baf nixos/nixpkgs: Make default Nixpkgs lazy when overridden 2023-06-16 21:46:26 +02:00
nikstur
0bdba6c99b nixos/qemu-vm: use persistent block device names
This change removes the bespoke logic around identifying block devices.
Instead of trying to find the right device by iterating over
`qemu.drives` and guessing the right partition number (e.g.
/dev/vda{1,2}), devices are now identified by persistent names provided
by udev in /dev/disk/by-*.

Before this change, the root device was formatted on demand in the
initrd. However, this makes it impossible to use filesystem identifiers
to identify devices. Now, the formatting step is performed before the VM
is started. Because some tests, however, rely on this behaviour, a
utility function to replace this behaviour in added in
/nixos/tests/common/auto-format-root-device.nix.

Devices that contain neither a partition table nor a filesystem are
identified by their hardware serial number which is injecetd via QEMU
(and is thus persistent and predictable). PCI paths are not a reliably
way to identify devices because their availability and numbering depends
on the QEMU machine type.

This change makes the module more robust against changes in QEMU and the
kernel (non-persistent device naming) and by decoupling abstractions
(i.e. rootDevice, bootPartition, and bootLoaderDevice) enables further
improvement down the line.
2023-06-16 19:36:03 +02:00
deinferno
26ff15b981
nixos/tailscale: fix ipv6 nat (v6nat) support 2023-06-16 12:18:55 +00:00
Maximilian Bosch
3df3a89892
nixos/nextcloud: fix declarative cache configuration
It's supposed to be `memcache.distributed`, not an associative PHP array
named `memcache` with a key `distributed`.

This was probably never caught because the initial `grep -q` check in
the test was invalid: `redis-cli` prints nothing if no keys can be found
when not writing to a tty apparently.
2023-06-16 14:11:38 +02:00
Maximilian Bosch
5a2769d981
nextcloud27: init
Fixes #237560
2023-06-16 14:11:38 +02:00
github-actions[bot]
ebaef3ce4c
Merge master into staging-next 2023-06-16 12:01:08 +00:00
David McFarland
8ea644997f nixos/gpg-agent: move pinentry-program to /etc/gnupg/gpg-agent.conf 2023-06-16 08:24:52 -03:00
David McFarland
960a5142aa nixos/gnupg: add systemd configuration
This depended on the systemd user configuration provided upstream in
doc/examples.  However, this was all removed in:

eae28f1bd4
2023-06-16 08:21:47 -03:00
Charles Hall
370f3e4883 nixos/lemmy: remove option removed upstream 2023-06-16 05:59:32 -04:00
Ryan Lahfa
a056d3567c
Merge pull request #236279 from minijackson/netbox-3.5.3 2023-06-16 11:49:13 +02:00
Ryan Lahfa
afc6f0d93b
Merge pull request #228479 from zimbatm/netdata-auto-claim 2023-06-16 11:30:30 +02:00
github-actions[bot]
af7beed7be
Merge master into staging-next 2023-06-16 06:01:09 +00:00
Will Fancher
e57b65abbb
Merge pull request #238021 from dcarosone/empty-zpool-name-assertion
nixos/zfs: assert that pool names are not empty
2023-06-15 23:21:07 -04:00
Daniel Carosone
86ecee627a typo 2023-06-16 12:25:34 +10:00
Daniel Carosone
2dcb1b3ed7 nixos/zfs: assert that pool names are not empty
a zfs fileSystems entry with an absolute (e.g. device) path rather than
a zfs dataser is parsed as an empty pool name, causing a doomed-to-fail
import job to be created as a boot dependency. Catch this as an assertion
2023-06-16 10:40:09 +10:00
github-actions[bot]
839c033ffb
Merge master into staging-next 2023-06-16 00:02:18 +00:00
Raito Bezarius
db230657fc nixos/pixelfed: cleanup package cache at the very start 2023-06-16 00:50:10 +02:00
Maciej Krüger
95c729c030
Merge pull request #223952 from m-bdf/fix-cfs-zen-tweaks
Fix cfs-zen-tweaks
2023-06-15 21:56:00 +02:00
github-actions[bot]
036d56d643
Merge master into staging-next 2023-06-15 12:01:17 +00:00
Charles Hall
af585658b8 nixos/lemmy: reduce moving parts 2023-06-15 06:56:56 -04:00
Charles Hall
fa9306c041 nixos/lemmy: allow overriding packages 2023-06-15 06:56:56 -04:00
Charles Hall
b1853ecfcd nixos/lemmy: only use env var when instructed
Lemmy checks the environment variable before the configuration file;
i.e. if the file is used to configure the database but the environment
variable is set to anything, the connection will fail because it'll
ignore the file. This was the previous behavior.

Now, the environment variable will be unset unless the user explicitly
chooses to set it, which makes the file-based configuration function
correctly. It's also possible to manually set the environment variable,
which has the major advantage of working around [this issue][0], which
prevents certain setups from working.

[0]: https://github.com/LemmyNet/lemmy/issues/2945
2023-06-15 06:56:56 -04:00
Charles Hall
dd0b5a7e08 nixos/lemmy: warn for option removed upstream
Also hide it since it shouldn't be used.
2023-06-15 06:56:56 -04:00
Carl Richard Theodor Schneider
59207cc930 nixos/adguardhome: Add allowDHCP option
This option conditionally adds the `CAP_NET_RAW` capability to the service,
which is mandatory for enabling the integrated DHCP server.
It also adds another test case to validate that the DHCP server successfully
provides IP addresses to clients.

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-06-15 12:27:35 +02:00
Jörg Thalheim
23ef0fdbf7
Merge pull request #237793 from Mic92/nix-ld
nix-ld: 1.1.0 -> 1.2.1
2023-06-15 08:51:56 +01:00
Jörg Thalheim
5ac7371bd1 nixos/nix-ld: use mkPackageOptionMD 2023-06-15 09:47:26 +02:00
Jörg Thalheim
b60f21e135 nixos/nix-ld: also include ld.so in nixos profile 2023-06-15 09:47:25 +02:00
r-vdp
52214d7f38
fwupd: 1.8.15 -> 1.9.1
Release notes: https://github.com/fwupd/fwupd/releases/tag/1.9.1
2023-06-15 09:33:12 +02:00
github-actions[bot]
a5a4b79b0d
Merge master into staging-next 2023-06-15 06:01:39 +00:00
Bobby Rong
6a00501dfa
Merge pull request #235371 from bobby285271/upd/cinnamon
Cinnamon 5.8
2023-06-15 09:41:41 +08:00
github-actions[bot]
c2fa140937
Merge master into staging-next 2023-06-15 00:02:27 +00:00
Lily Foster
b5cc73db7d
nixos/version: remove nixpkgs commit rev from initrd
This avoids unnecessary initrd rebuilds when nothing in the initrd would
have changed aside from the nixpkgs revision.
2023-06-14 16:57:34 -04:00
Lily Foster
be48010eb2
nixos/networkd: make overriding boot.initrd.systemd.package a little easier by using mkDefault 2023-06-14 16:09:25 -04:00
Silvan Mosberger
746e3349f8
Merge pull request #236025 from GaetanLepage/invidious-restart 2023-06-14 21:18:55 +02:00
github-actions[bot]
0f19fc4c44
Merge master into staging-next 2023-06-14 18:01:25 +00:00
Pol Dellaiera
f45bee3f4d
Merge pull request #237003 from pacien/ddclient-remove-ipv6-opt
nixos/ddclient: remove obsolete ipv6 option
2023-06-14 19:57:34 +02:00
Jappie Klooster
5c4ae23ec0 nixos/keter: Run nixpkgs-fmt 2023-06-14 11:56:35 -04:00
Jappie Klooster
3f2f5bea96 nixos/keter: 2.0 -> 2.1
keter 2.1 now can log to stderr instead of file rotation.
Which is faster and more reliable.
These changes support that.

Announcement:
https://discourse.haskell.org/t/keter-2-1-0-released/6134

fix test by disabling log rotation

run nixpkgs fmt

move comment right before L37

run nixpkgs format on test

Add overridable default configuration

depracate keterRoot and use root, same for package

split doc lines

use lib.getExe to get keter binary

put mkRenamedOptionModule on one line
2023-06-14 11:54:03 -04:00
Gaetan Lepage
2e582d4edc nixos/invidious: add automaticRestart option 2023-06-14 16:19:40 +02:00
Janne Heß
1ee0ab1b79
Merge pull request #237720 from NixOS/swap-dry-activate
switch-to-configuration.pl: fix inverted dry-activate logic for swap
2023-06-14 14:45:35 +02:00
github-actions[bot]
be1f07fc6e
Merge master into staging-next 2023-06-14 12:01:12 +00:00
Maximilian Bosch
d7ac3423d3
Merge pull request #235387 from doronbehar/nixos/nextcloud.adminpassFile
nixos/nextcloud: Mention that adminpassFile is only used on startup
2023-06-14 12:41:35 +02:00
Wout Mertens
a97fe8990d
switch-to-configuration.pl: fix inverted dry-activate logic for swap 2023-06-14 12:11:45 +02:00
Bobby Rong
30d897c0ff
nixos/cinnamon: enable touchegg by default
Needed for gesture support.
2023-06-14 15:48:15 +08:00
Bobby Rong
664601d819
nixos/cinnamon: enable switcherooControl by default
xapp-gpu-offload-helper looks for this.
2023-06-14 15:48:15 +08:00
Bobby Rong
bc559b4ca3
nixos/cinnamon: install mint-l by default
This is part of Linux Mint 21.2.
2023-06-14 15:48:15 +08:00
Bobby Rong
e0034fb284
cinnamon.mint-artwork: 1.7.3 -> 1.7.5
Read debian/changelog for what is changed.
2023-06-14 14:14:57 +08:00
github-actions[bot]
bdc9d2055e
Merge master into staging-next 2023-06-14 00:02:31 +00:00
Pol Dellaiera
7907dd9d6b
Merge pull request #235924 from Stunkymonkey/remove-then-{}
treewide: use lib.optionalAttrs instead of 'then {}'
2023-06-13 20:14:58 +02:00
github-actions[bot]
f29c608f98
Merge master into staging-next 2023-06-13 18:01:32 +00:00
pennae
f52f531a4e nixos/make-options-doc: deprecate docbook outputs
they're no longer necessary for us and will almost definitely start to
rot now (like commonmark and asciidoc outputs did previously). most
existing users seem to take the docbook output and run it through pandoc
to generate html, those can easily migrate to use commonmark instead.
other users will hopefully pipe up when they notice that things they rely
on are going away.

optionsUsedDocbook has only been around for one release and only exposed
to allow other places to generate warnings, so that does not deserve
such precautions.
2023-06-13 16:56:32 +02:00
pennae
0997ae1903 nixos/manual: disallow docbook option docs
it's been long in the making, and with 23.05 out we can finally disable
docbook option docs and default to markdown instead. this brings a
massive speed boost in manual and manpage builds, so much so that we may
consider enabling user module documentation by default.

we don't remove the docbook support code entirely yet because it's a lot
all over, and probably better removed in multiple separate changes.
2023-06-13 16:56:30 +02:00
Pol Dellaiera
9ce1accb88
nixos/modules/openvscode-server: fix options 2023-06-13 15:08:56 +02:00
github-actions[bot]
51c0c12cd4
Merge master into staging-next 2023-06-13 12:01:28 +00:00
Sandro
9183a72d11
Merge pull request #232862 from misuzu/gotosocial-init 2023-06-13 11:36:46 +02:00
Jenny
3a86958c97
prometheus-junos-czerwonk-exporter: init at 0.10.1 + module (#235433) 2023-06-13 10:15:05 +02:00
Alex Auvolat
bbd4ce7d5e wgautomesh: clearer documentation for gossip_secret_file 2023-06-13 10:01:12 +02:00
github-actions[bot]
9dc5849025
Merge master into staging-next 2023-06-13 00:02:27 +00:00
Martin Weinelt
104455784c
Merge pull request #219791 from emilylange/nixos-caddy
nixos/caddy: change `acmeCA` default to `null`, omit empty `bind` directive
2023-06-12 22:40:54 +02:00
Martin Weinelt
eb6e16e3c5
Merge pull request #236875 from mweinelt/wyoming_piper_whisper
wyoming-piper: init at 0.0.3, wyoming-faster-whisper: ini at 0.0.3
2023-06-12 21:02:18 +02:00
github-actions[bot]
a69b4c6b89
Merge master into staging-next 2023-06-12 18:01:15 +00:00
Will Fancher
5709754a1d
Merge pull request #237336 from zi3m5f/fix-systemd-nspawn-machineid-option
systemd-nspawn: fix spelling of MachineID option and add module test
2023-06-12 13:12:59 -04:00
Martin Weinelt
f213f33f15
nixos/wyoming/faster-whisper: init 2023-06-12 18:44:44 +02:00
Martin Weinelt
7f17f8da9f
nixos/wyoming/piper: init 2023-06-12 18:44:44 +02:00
Robert Hensing
7e63eed145
Merge pull request #237282 from isker/patch-3
nixos/nix-daemon: fix URL for nix.conf
2023-06-12 17:01:15 +02:00
Colin
bd77d4ae46 nixos/lemmy: support nginx 2023-06-12 09:59:11 -04:00
github-actions[bot]
d0fbe5588d
Merge master into staging-next 2023-06-12 12:01:32 +00:00
Robert Hensing
ed551f4ecf
Merge pull request #237218 from hercules-ci/fix-nixos-generate-config-system
nixos-generate-config: Fix generated hostPlatform.system
2023-06-12 12:26:56 +02:00
zi3m5f
67f5dcfd94 nixos/nspawn: fix spelling of systemd.nspawn MachineID option
This changes option systemd.nspawn.execConfig.MachineId to MachineID.
See man page systemd.nspawn(5)
2023-06-12 12:08:15 +02:00
Ryan Lahfa
3897d52760
Merge pull request #236134 from Tom-Hubrecht/pixelfed
nixos/pixelfed: Fix missing permissions for nginx serving files
2023-06-12 11:59:31 +02:00
Ian Kerins
2f20e0e131
nixos/nix-daemon: fix URL for nix.conf
The existing URL no longer takes you somewhere useful.
2023-06-11 23:17:50 -04:00
github-actions[bot]
112762351d
Merge master into staging-next 2023-06-12 00:02:19 +00:00
Martin Weinelt
fe2f291e17
Merge pull request #236757 from max-privatevoid/pam-kanidm
nixos/pam: support Kanidm
2023-06-11 20:22:00 +02:00
Robert Hensing
1350e522fa nixos-generate-config: Fix generated hostPlatform.system
While the intent of the code was correct, the system string can not be used
in the substituteAll function.

See https://github.com/NixOS/nixpkgs/issues/237216
2023-06-11 19:28:51 +02:00
Max
847a7f1102 nixos/kanidm: auto-restart kanidm-unixd-tasks 2023-06-11 17:17:42 +02:00
Max
34a4165674 nixos/pam: support Kanidm 2023-06-11 17:17:42 +02:00
github-actions[bot]
b5b56fecff
Merge staging-next into staging 2023-06-11 12:02:12 +00:00
Marillindië
e394dc22f9 xray: allow binding lower ports
Set CapabilityBoundingSet, AmbientCapabilities and NoNewPrivileges as described in XTLS/xray-install.
2023-06-11 09:03:50 +01:00
github-actions[bot]
9f2767ce37
Merge staging-next into staging 2023-06-10 18:01:41 +00:00
Ryan Lahfa
6262a46ba8
Merge pull request #234034 from NixOS/qemu/direct-boot
nixos/qemu-vm: introduce `virtualisation.directBoot`
2023-06-10 18:12:56 +02:00
IndeedNotJames
93b9fc8ac0
nixos/caddy: omit empty bind directive when listenAddresses is empty
context: https://caddy.community/t/random-502-errors-when-proxying-to-application-with-self-signed-certificate/19657/6
2023-06-10 13:59:15 +02:00
IndeedNotJames
3f93ec5814
nixos/caddy: change acmeCA default to null
The nixos/caddy module is somewhat old by now
and has undergone quite some refactors.
This specific module option (originally named
`ca`) used to make a bit more sense when
Caddy did not have multiple ACME CAs as
fallback (LE & ZeroSSL) by configured by
default yet (ZeroSSL came with v2.3.0).

I also rephrased the description slightly,
to mention Caddy's automatic issuer fallback
and a note which this option maps to in the
Caddyfile, to provide a bit more context and
a more up-to-date recommendation.

Specifically that "fine-grained configuration"
section comes from a time when this module did
some custom tls/issuer config json merging
with the templated Caddyfile using `jq`.

The "The URL to the ACME CA's directory"
section is a word-for-word copy from the
official Caddy docs, which also include a link
to LE's docs to the referenced staging
endpoint. So I added that as well.
2023-06-10 13:59:10 +02:00