nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-28 18:03:04 +00:00
Code Issues Packages Projects Releases Wiki Activity
691,526 Commits 251 Branches 124 Tags 8 GiB
299a94a7ed
Commit Graph

44935 Commits

Author SHA1 Message Date
Izorkin
c3e32a04ae
nixos/dhcpcd: allow jemalloc and mimalloc memory allocators 2024-10-08 14:12:27 +03:00
Florian Klink
146e83d76b
dhcpcd: enable sandboxing options (#208780) 2024-10-08 13:09:11 +03:00
Norbert Melzer
8af94f7ca2
rustic: 0.8.1 -> 0.9.1 (#346508) 2024-10-08 12:07:39 +02:00
r-vdp
2b224f0e3c
nixos/systemd: allow using writeShellApplication for systemd unit scripts 2024-10-08 12:01:48 +02:00
Robert Hensing
729225e355 treewide: lib.isInOldestRelease -> lib.oldestSupportedReleaseIsAtLeast 2024-10-08 11:14:24 +02:00
Robert Hensing
2d11924c9a
macos-builder: readd Nix CLI for debugging (#347205) 2024-10-08 09:58:17 +02:00
Sebastián Zavala Villagómez
1c5727cdf7 nixos/localtimed: set time.timeZone to null to avoid silent overriding 
Currently if a timezone was selected explicitly, the service will
silently override the value, essentially ignoring what is meant to be a
a deliberate choice of option. This may cause confusion as to why the
option is not doing anything when this service is enabled, particularly
in more complex set-ups after some time.

This will simply make the choice deliberate from the user's part, either
by having to remove the option or lowering its priority as a recognition
that it may be ignored.

This change was inspired by the `services.tzupdate` module, which does
the same.

[1]: <https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/misc/tzupdate.nix#L24>
 2024-10-07 23:40:49 -04:00
Michael Hoang
10bad16926 macos-builder: readd Nix CLI for debugging 
See https://github.com/NixOS/nixpkgs/pull/268574#discussion_r1788966194
 2024-10-08 12:41:55 +11:00
Thomas Gerbet
16caf1231b cups-filters: remove support for legacy CUPS browsing and for LDAP 
Fixes CVE-2024-47176 and CVE-2024-47850. NixOS is not affected by these security issues by
default because we do not ship the default configuration file so it fallbacks to `BrowseRemoteProtocols dnssd`.

631/udp is removed from the open firewall ports, it was by the CUPS
browsing protocol.
 2024-10-07 22:28:12 +02:00
Sandro
0538ecd092
rss-bridge: Remove pkg patch, adapt nixos service (#331295) 2024-10-07 18:57:22 +02:00
Peder Bergebakken Sundt
cd9a00431c
ec2: shellcheck fixes (#340489) 2024-10-07 15:39:38 +02:00
Sandro
41dd374aa4
nixosTests: fixup tests/common/resolver to work with a local resolver (#346793) 2024-10-07 10:35:03 +02:00
Cosima Neidahl
a825406b15
lomiri.lomiri: Replace NIXOS_XKB_LAYOUTS envvar with file (#345288) 2024-10-07 09:33:40 +02:00
codgician
2a848b3732
nixos/libvirtd: add startDelay and shutdownTimeout option 2024-10-07 14:43:45 +08:00
Florian Klink
9c13bad7ca
nixos/tmpfiles: only setup nix-related tmpfiles if nix is enabled (#343784) 2024-10-07 09:11:46 +03:00
Emily
85c36fecfc
xen: nuke, move to by-name. (#345192) 2024-10-07 03:48:37 +01:00
Emily
1a53b400e5
mongodb: mongodb-5_0 -> mongodb-7_0; mongodb-5_0: drop; unifi: unifi7 -> unifi8; unifi{7,-video}: drop (#345625) 2024-10-07 01:38:54 +01:00
Will Fancher
aad455b434
nixos/usbStorage: apply upstream (#284334) 2024-10-06 19:39:07 -04:00
Emily
086676017e mongodb: mongodb-5_0 -> mongodb-7_0 2024-10-06 22:47:42 +01:00
Emily
b0395df085 unifi7: drop 2024-10-06 22:47:41 +01:00
Will Fancher
c00fc8bd1a
nixos/unl0kr: add settings to the unl0kr module (#339787) 2024-10-06 17:44:55 -04:00
Izorkin
611b1d53b7
dhcpcd: enable sandboxing options 2024-10-06 23:46:18 +03:00
Fernando Rodrigues
64cc613a0f
release-notes: remove mentions to xen-slim or 4.18 
They were removed during the great Xen deletion.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2024-10-06 20:24:30 +00:00
Fernando Rodrigues
251dc99c70
nixos/xen: simplify package options 
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2024-10-06 20:24:29 +00:00
Fernando Rodrigues
0eaec9f2f3
xen: drop 4.17 
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2024-10-06 15:55:39 -03:00
Kevin Cox
fb9b5c806b
mautrix-meta: drop maintainership Rutherther (#346916) 2024-10-06 14:45:10 -04:00
Kevin Cox
b8fc5855fb
nixos.mautrix-meta: Update config to 0.4 format (#343606) 2024-10-06 14:44:41 -04:00
Rutherther
379ca4e67f mautrix-meta: drop maintainership Rutherther 2024-10-06 20:33:42 +02:00
Bjørn Forsman
40bfbe3226 nixos/scrutiny: wait until ready 
Add postStart code that waits until Scrutiny has opened its port. This
fixes a race condition against scrutiny-collector, which can start (and
fail) before scrutiny is ready.
 2024-10-06 20:07:45 +02:00
Michele Guerini Rocco
7eef63ed98
wpa_supplicant: add patch to fix ext_passwords_file bug (#342792) 2024-10-06 19:15:19 +02:00
Michele Guerini Rocco
463f8b8ed4
nixos/tests/dnsdist: fix dnscrypt test (#346843) 2024-10-06 19:12:07 +02:00
Arthur Gautier
a32dbada18 nixosTests: fixup tests/common/resolver to work with a local resolver 
When 757a455dde refactored the zones to go
from a list to a map, this broke the tests/common/resolver helper.

reproduction:
```
let
  pkgs = import <nixpkgs> {};

  testConfig = {
    name = "resolver-repro";
    nodes = {
      acme = { nodes, ... }: {
        imports = [ (pkgs.path + /nixos/tests/common/acme/server) ];
      };
    };

    testScript = ''
    '';
  };
in pkgs.nixosTest testConfig
```
 2024-10-06 15:18:45 +00:00
Maximilian Bosch
5ee80e8120
Merge: nixos/nginx: remove shortand from defaultText (#346767) 2024-10-06 17:13:51 +02:00
Sandro
0cc879fa99
nixos/tests/non-default-filesystems: fix btrfs mount regex (#340702) 2024-10-06 14:08:21 +02:00
Sandro
85100fcc51
nixos/tests/tmate-ssh-server: fix test (#342318) 2024-10-06 14:07:14 +02:00
Sandro
020c26717f
nixos/quorum: fix geth args, fix test (#341181) 2024-10-06 14:06:31 +02:00
Sandro
c0ad8503fa
nixos/tests/pgjwt: fix test (#341150) 2024-10-06 14:05:36 +02:00
Sandro
00461d0fcb
nixos/nginx: fix double slash in example (#346774) 2024-10-06 13:58:54 +02:00
rnhmjoj
cf614ee789
nixos/tests/dnsdist: fix dnscrypt test 2024-10-06 11:34:57 +02:00
Jonas Heinrich
c566a36839
feishin: 0.9.0 -> 0.10.1 (#344865) 2024-10-06 10:27:49 +02:00
Sandro Jäckel
dd7ef21afc
nixos/nginx: fix double slash in example 2024-10-06 03:45:51 +02:00
Sandro
b64b2d25c2
nixos/nginx: remove shortand from defaultText 2024-10-06 03:19:07 +02:00
Peder Bergebakken Sundt
90c1e58d22
zammad: 6.2.0 -> 6.3.1 (#345456) 2024-10-06 03:00:44 +02:00
Nick Cao
5f821de20c
keycloak: 25.0.6 -> 26.0.0 (#346439) 2024-10-05 18:14:45 -04:00
Felix Singer
0f599d1e68 nixos/redmine: Apply initial hardening using the systemd unit 
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.

In my tests, Redmine only bound to an IPv4 address and Unix socket,
which is why I restricted the address families to these both.

The command `systemd-analyze security redmine.service` reports an
overall exposure level of 2.9 with this patch.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
 2024-10-05 22:13:37 +02:00
h7x4
25f2846361
nixos/bind: set type of zones.*.extraConfig to lines (#346424) 2024-10-05 21:07:26 +02:00
h7x4
cc76cf58f8
nixos/uinput: set a static GID for the uinput group (#333762) 2024-10-05 20:59:16 +02:00
Robert Schütz
506df4e38e nodePackages.npm: drop 2024-10-05 11:23:49 -07:00
Will Fancher
9f8eb445fa
nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1 (#346547) 2024-10-05 13:44:39 -04:00
Jared Baur
c39781c558
nixos/activation-script: only setup nix tmpfiles if nix is enabled 
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
 2024-10-05 09:03:19 -07:00
Jared Baur
3d6e7d7b56
nixos/tmpfiles: only setup nix tmpfiles when nix is used 
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
 2024-10-05 09:01:55 -07:00
Nick Cao
6069dde181
nixos/keycloak: make initialAdminPassword optional 2024-10-05 08:37:41 -04:00
r-vdp
94532d1530 nixos/syncthing: remove syncthing-resume service 
It was removed upstream in https://github.com/syncthing/syncthing/pull/9611
and the stub generated by nixos now prints an error in the logs due to
it not having a ExecStart line.
 2024-10-05 12:55:39 +02:00
r-vdp
70119aa60f
nixis/uinput: use a fixed GID for the uinput group 2024-10-05 10:21:26 +02:00
r-vdp
469f505813
nixos/{uinput,ids}: format 2024-10-05 10:21:01 +02:00
Nick Cao
937d3964c9
nixos/keycloak: raise memory size in tests to 2047M 2024-10-04 21:43:19 -04:00
Bobby Rong
f594475564
nixos/xfce: Fix ambiguous with (#346528) 2024-10-05 09:03:18 +08:00
Sandro Jäckel
9b996f7396
nixos/xfce: Fix ambiguous with 
Pull request 345352 introduces `pkgs.exo`, don't pick up that package.
 2024-10-05 08:43:24 +08:00
Nick Cao
05caac302f
nixos/keycloak: fixup login test after ui change 2024-10-04 20:39:55 -04:00
Nick Cao
0cdc3e2a0b
nixos/keycloak: drop removed proxy option 
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#proxy-option-removed
 2024-10-04 20:20:46 -04:00
Nick Cao
16cd47369f
nixos/keycloak: KEYCLOAK_ADMIN{,PASSWORD} -> KC_BOOTSTRAP_ADMIN_{USERNAME,PASSWORD} 
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#admin-bootstrapping-and-recovery
 2024-10-04 20:08:06 -04:00
Nick Cao
d2ec2d3c29
nixos/keycloak: link $out/lib to KC_HOME_DIR to fix loading optimized app image 
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#additional-validations-on-the-optimized-startup-option
 2024-10-04 20:06:08 -04:00
Will Fancher
3e90d5a2bc nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1 2024-10-04 19:50:46 -04:00
jade
f0ce0e71c3
Remove the revCount attribute from the generated flake registry (#316225) 2024-10-04 15:25:55 -07:00
Aaron Andersen
913a23b5e2
nixos/redmine: Allow specifying an IP address Redmine should bind to (#345617) 2024-10-04 18:18:45 -04:00
h7x4
c38aa540ba
nixos/networking: fix macvlan service description (#346507) 2024-10-04 23:20:09 +02:00
h7x4
639922811e
apfsprogs: unstable-2023-11-30 -> 0-unstable-2024-09-27 (#346422) 2024-10-04 23:05:15 +02:00
David Knaack
81f3c68b92 rustic: 0.8.1 -> 0.9.1 2024-10-04 22:25:08 +02:00
Anthony Roussel
17fd7e3eea
nixos/gns3-server: fix ubridge support (#303442) 2024-10-04 22:16:13 +02:00
Bjørn Forsman
20a3012813 nixos/networking: improve vlan service description 
VLAN is an abbreviation, so let's not write Vlan.
 2024-10-04 22:09:01 +02:00
Bjørn Forsman
e8da2c8981 nixos/networking: fix macvlan service description 
Fix copy pasta from the vlan service: Vlan -> MACVLAN
 2024-10-04 22:08:40 +02:00
Peder Bergebakken Sundt
986e6d4e3d
tsm-client: 8.1.23.0 -> 8.1.24.0 (#345039) 2024-10-04 18:25:37 +02:00
Ramses
2d809488f7
nixos/containers: Fix shellcheck issues (#346131) 2024-10-04 18:19:19 +02:00
K900
d5f1752ca9
xdg-desktop-portal-gtk: Enable all default portals unconditionally (#345979) 2024-10-04 18:29:33 +03:00
nicoo
6f26c88376
nixos/macos-builder: pin stateVersion (#342380) 
Closes #325610, #325674
 2024-10-04 16:09:56 +02:00
Luflosi
7a12fe7b2f
apfsprogs: unstable-2023-11-30 -> 0-unstable-2024-09-27 
Diff: 990163894d...f31d7c2d69

This adds `apfs-label`, a new utility, so add a small test for it.
 2024-10-04 15:50:10 +02:00
Mynacol
aa0fc3e8b8 rss-bridge: Remove pkg patch, adapt nixos service 
The rss-bridge service changes introduced in f2201789fe
resp. https://github.com/NixOS/nixpkgs/pull/223148 removes the need for
the package patch. This commit removes the patch to ease updating and
maintenance.
Relevant service functionality was also removed (e.g. the setting of
RSSBRIDGE_DATA).

The explicit definition of FileCache.path so users can easily see its
default value and change it, requires to use a freeformType to let users
freely add potentially upcoming config options. This type is restricted
to ini types (although we coerce them to environment variables).
This however makes the list of enabled_bridges impossible. That was
fixed by explicitly introducing this option with a type allowing lists.
The default value however should be unset, which is expressed as `null`,
which further spurred a change in the environment variable generation to
ignore null values (instead of coercing them to an empty string).

A breaking change note was added to highlight this change. A check that
warns users of the not-application of their existing config file is
not easily possible, as people could have only added or changed the
config.ini.php file on the file system without changing a nix variable.
 2024-10-04 14:58:15 +02:00
Felix Stupp
6de4d04fdb
nixos/bind: set type of zones.*.extraConfig to lines 
allowing multiple definitions of that option to be merged, because:
- their order should be irrelevant
- it might make sense to declare multiples of them at different locations
 2024-10-04 14:49:12 +02:00
h7x4
d783411040
nixos: improve systemd slice names (#345990) 2024-10-04 12:08:36 +02:00
Ivan Mincik
e478171269
postgis: 3.4.3 -> 3.5.0 (#346151) 2024-10-04 08:30:34 +00:00
Pol Dellaiera
2199b69a7a
nixos/privatebin: init module & privatebin: init at 1.7.4 (#344014) 2024-10-04 09:51:40 +02:00
Paul Meyer
3e9b0cdf35
go_1_21/buildGo121Module: remove (#344622) 2024-10-04 08:29:15 +02:00
Sandro
e00cc9f2fa
openwebrx: remove alias alsaUtils -> alsa-utils (#346259) 2024-10-04 02:21:40 +02:00
Adam C. Stephens
acc3335fa4
rl-notes/24.11: Add note about ZFS import being in postResumeCommands (#346247) 2024-10-03 19:07:55 -04:00
Astro
48b4aa8eae openwebrx: s/alsaUtils/alsa-utils/ 
allows running with allowAliases = false
 2024-10-03 23:53:56 +02:00
h7x4
c760c830d4
nixos/fedimintd: init service (#322815) 2024-10-03 23:53:30 +02:00
Bjørn Forsman
e6d7bbf71d nixos/prometheus-dnsmasq-exporter: use a working default leasesPath 
dnsmasq dhcp-leasefile defaults to /var/lib/dnsmasq/dnsmasq.leases, so
use that as the default for the exporter too. Curiously, the example was
using the working path, so this patch simply swaps "example" and
"default" values.
 2024-10-03 23:06:09 +02:00
Will Fancher
10dbb88971 rl-notes/24.11: Add note about ZFS import being in postResumeCommands 2024-10-03 17:06:02 -04:00
Nico Felbinger
924ee0c2bc nixos/suricata: init module 2024-10-03 22:50:30 +02:00
Dawid Ciężarkiewicz
ba727987d4
nixos/fedimintd: init services 2024-10-03 13:05:12 -07:00
Sandro Jäckel
d82d689716
nixos/tailscale-derper: init 2024-10-03 22:04:40 +02:00
Augustin Trancart
406609b044 postgresqlPackages.postgis: add more nixos tests 2024-10-03 19:31:10 +02:00
Christina Sørensen
e7602822bc
nixos/terminfo, contour: mark contour broken, remove from enableAllTerminfo (#345827) 2024-10-03 19:00:56 +02:00
h7x4
5190ddc27d
treewide: \xc2\xa0 -> (#345898) 2024-10-03 18:23:59 +02:00
r-vdp
cc28f2bef5
nixos/containers: Fix shellcheck issues 2024-10-03 17:57:41 +02:00
h7x4
75b209227d
wstunnel: 10.1.1 -> 10.1.3 (#346011) 2024-10-03 17:28:05 +02:00
Domen Kožar
e873268a35
nixos/datadog-agent: fix deprecated trace agent option (#336546) 2024-10-03 16:15:08 +01:00
Emily
7dc35d8704
cudaPackages_{10*,11*}: warn about upcoming removal (#342112) 2024-10-03 13:48:13 +01:00
r-vdp
bf8c66fc22
wstunnel: run the VM test on Linux only 2024-10-03 11:50:43 +02:00
Florian Klink
3ae3a4fb69
nixos/tests/acme: Better error handling (#250260) 2024-10-03 11:41:53 +03:00