Commit Graph

31255 Commits

Author SHA1 Message Date
Markus Kowalewski
b98e90213d
Merge pull request #317035 from ck3d/fix-node-red-path
nixos/node-red: fix passthru of PATH
2024-06-09 20:13:58 +00:00
Moritz Sanft
1ddd2fa945
grafana-reporter: migrate to buildGoModule
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-06-09 21:50:26 +02:00
Maximilian Bosch
1fca5674cc
Merge pull request #318282 from Ma27/fix-zabbix-proxy-option
nixos/zabbix-proxy: fix option default
2024-06-09 11:13:19 +00:00
Sandro Jäckel
e64cfbbf99
ArchiSteamFarm: 6.0.1.24 -> 6.0.3.4, switch to generic upstream variant to support Monitoring Plugin 2024-06-09 04:51:37 +02:00
Sandro
1acd99478c
Merge pull request #308539 from SuperSandro2000/gdk-pixbuf-xserver
nixos/gdk-pixbuf: move out of xserver
2024-06-09 02:08:30 +02:00
Pol Dellaiera
64e5a329cb
Merge pull request #316108 from comfysage/nixos/alsa-fix-restore
nixos/alsa: fix audio state loading on system start
2024-06-08 23:52:54 +02:00
h7x4
195d155a1c
nixos/kerberos_server: use krb format generator, plus misc cleanup
- Introduce more possible options by using the krb format generator.
- Enforce package choice is using a correct package.
- Use meta attribute to decide implementation, allows for overriding the
  package.
- Make necessary changes to the format, to allow for multiple ACL files in
  heimdal.
- Add systemd target and slice for both implementations.
- Move state to `/var/lib`
- Add documentation
2024-06-08 23:29:53 +02:00
Sandro Jäckel
131ef6d2ed
nixos/no-x-libs: fix gjs
Due to the switch to finalAttrs, we now need to properly disable installTests.
2024-06-08 21:46:14 +02:00
Sandro Jäckel
b939c54015
nixos/gdk-pixbuf: move out of xserver 2024-06-08 21:26:28 +02:00
Stu Small
12bd55a1a3 nixos/power-profiles-daemon: Add assertion with auto-cpufreq
auto-cpufreq is similar to tlp in that it shouldn't be run with
power-profiles-daemon.  There functionality can conflict and bugs can
show up.  On my system this materialized by auto-cpufreq frequently
shutting down, but there may be other consequences.

This change follows the same pattern as the tlp assertion
2024-06-08 13:01:08 -06:00
Maximilian Bosch
c323ea63f0
nixos/zabbix-proxy: fix option default
Apparently I forgot to test this one while developing
5142b7afa8 ("nixos/postgresql: turn
settings into a submodule").

Apologies!
2024-06-08 15:40:26 +02:00
Florian Klink
6a3a382d5b nixos/mycelium: add mycelium binary to systemPackages
It's now possible to invoke `mycelium {routes,peers} list`.
2024-06-08 15:01:32 +03:00
Kira Bruneau
783a966a20
Merge pull request #318092 from aidalgol/libxnvctrl-pure
Use libXNVCtrl purely
2024-06-08 06:35:15 -04:00
Pol Dellaiera
a7049a06b7
Merge pull request #318099 from drupol/open-webui-add-more-env-vars
nixos/open-webui: add more default variables
2024-06-08 08:56:37 +02:00
Yt
9109eb1779
Merge pull request #316845 from onny/davfs2-cleanup
nixos/davfs2: Remove deprecated extraConfig
2024-06-08 00:48:17 +00:00
Pol Dellaiera
028584b548
nixos/open-webui: add more default variables 2024-06-07 23:15:54 +02:00
Aidan Gauland
19960c426d
nixos/nvidia: revert libXNVCtrl changes
This library does not actually need to match the Nvidia driver version,
so we do not need to make it available impurely.

This reverts the following commits.
9b3461e7ae
4e353b67f6
2024-06-08 08:00:55 +12:00
Cosima Neidahl
5b3b5d79aa
Merge pull request #316275 from OPNA2608/fix/lomiri-xkb-layout
lomiri.lomiri: Try to consider services.xserver.xkb.layout
2024-06-07 19:49:31 +02:00
Thomas Churchman
d226935fd7 nixos/ddclient: deprecate use, implement use{v4,v6}
Upstream replaced `use` with `use{v4,v6}`:
4a1b06630b/ChangeLog.md (new-features)
2024-06-07 17:28:25 +02:00
Pol Dellaiera
1905dcb574
Merge pull request #316240 from OPNA2608/init/lomiri/lomiri-filemanager-app
lomiri.lomiri-filemanager-app: init at 1.0.4
2024-06-07 14:33:41 +02:00
Jörg Thalheim
29327b68dd
Merge pull request #312863 from Mic92/netboot
netboot: drop syslinux and grub (10% savings for nixos-anywhere images)
2024-06-07 13:00:41 +02:00
OPNA2608
6477cb49a5 nixos/lomiri: Add file manager 2024-06-07 11:37:53 +02:00
Karel Kočí
4ace1c0faf
nixos/mqtt2influxdb: add missing package option
This is used in the module but option wasn't defined at all.
2024-06-07 11:37:04 +02:00
K900
902ca5b470 nixos/opengl: fix typo 2024-06-07 12:06:26 +03:00
Keith Pine
6fda200fa4 nixos/inadyn: fix cache directory path
The CacheDirectory subdirectory is already part of $CACHE_DIRECTORY.
2024-06-07 09:03:24 +02:00
Anthony Roussel
46db91c0d7
nixos/samba: only create /etc/samba/smb.conf when samba is enabled 2024-06-07 08:44:21 +02:00
PatrickDaG
0fdf6e2917
nixos/netbird: fix defaults (#314656)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-07 00:02:06 +02:00
Nicolas Lenz
0b8fdfd917
nixos/pretix: fix defaultText for celery options 2024-06-06 21:37:14 +02:00
Florian Klink
610a87e260
Merge pull request #317785 from drupol/nixos-boot-use-replace-fail
nixos/boot: use `--replace-fail`
2024-06-06 20:54:18 +02:00
K900
b02badf4fd
Merge pull request #317585 from SuperSandro2000/opengl-tmpfiles-settings
nixos/opengl: use systemd.tmpfiles.settings
2024-06-06 19:41:38 +03:00
Pol Dellaiera
f2318b9d58
nixos/boot: use --replace-fail 2024-06-06 18:33:30 +02:00
Bobby Rong
48deaba189
Merge pull request #317047 from bobby285271/upd/pantheon-unset-qt-env
nixos/pantheon: Do not set QT_QPA_PLATFORMTHEME
2024-06-06 22:56:02 +08:00
Arnout Engelen
2389f5fdc3
virtualbox guest module: draganddrop became dragAndDrop (#317756)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-06 16:48:47 +02:00
Sandro
345330c768
Merge pull request #291552 from SuperSandro2000/bash-completion-package-option 2024-06-06 15:22:21 +02:00
Sandro Jäckel
1c60f0a9a0 nixos/bash-completion: move options to programs.bash.completion, add package option, drop with lib
This allows to easily test bash-completion updates without triggering a mass rebuild locally.
2024-06-06 02:51:06 +02:00
Jonathan Davies
2ef778f69a
nixos/quickwit: init module 2024-06-06 00:49:37 +01:00
Sandro Jäckel
576e94f8c8 nixos/opengl: use systemd.tmpfiles.settings
I want to use the final symlinked package in system.checks and need to
access that somehow. Instead of adding a new option, we might as well
convert tmpfiles to the new structure.
2024-06-06 00:55:31 +02:00
Sandro Jäckel
0898fee0de nixos/opengl: remove with lib over entire file 2024-06-06 00:35:29 +02:00
tomf
b2b3f5d68d
nixos/oci-containers: add preRunExtraOptions (#315356)
`podman --help` and `docker --help` each have global options, that
must be specified before `run`.
2024-06-05 18:18:37 -04:00
Bobby Rong
a53e9cab22
Merge pull request #317428 from a-kenji/virtualbox-host-typo
nixos/virtualbox-host: fix typo in assertion
2024-06-05 22:11:14 +08:00
Adam C. Stephens
af4ac075a3
Merge pull request #312523 from emilylange/nixos-forgejo-secrets
nixos/forgejo: refactor secrets, add `cfg.secrets`, forgejo: build `environment-to-ini`, nixos/tests/forgejo: test `cfg.secrets` using /metrics endpoint
2024-06-05 10:01:37 -04:00
a-kenji
406e613b95 nixos/virtualbox-host: fix typo in assertion 2024-06-05 14:04:03 +02:00
Thomas Gerbet
ef6fea2d86 openssh: move Kerberos support into a dedicated package
The `openssh` and `openssh_hpn` packages are now built without
the Kerberos support by default in an effort to reduce the attack surface.

The Kerberos support is likely used only by a fraction of the total users
(I'm guessing mainly users integrating SSH in an Active Directory env) so
dropping it should not impact too many users. It should also be noted that
the Kerberos/GSSAPI auth is disabled by default in the configuration.
`opensshWithKerberos` and `openssh_hpnWithKerberos` are added in order
to provide an easy migration path for users needing this support.

The `openssh_gssapi` package is kept untouched.
2024-06-05 19:45:31 +10:00
Florian Klink
40066ba0d8
Merge pull request #316168 from dawidd6/systemd-user-generators
nixos/systemd: link user-generators
2024-06-05 09:59:29 +02:00
Jörg Thalheim
7d98bbfcd5
Merge pull request #315827 from JohnRTitor/hyprland-module
nixos/{hyprland, wayland-common}: disable wlr portal for hyprland, enable xdg autostart for all wayland compositors
2024-06-05 09:57:53 +02:00
Pol Dellaiera
133aa44c38
Merge pull request #317286 from drupol/open-webui-add-more-env
nixos/{ollama,open-webui}: minor service update
2024-06-05 09:12:28 +02:00
Pol Dellaiera
309451127f
nixos/open-webui: update options default values 2024-06-05 08:05:19 +02:00
Pol Dellaiera
5664bb7899
nixos/open-webui: add example in options 2024-06-05 08:05:18 +02:00
Pol Dellaiera
a8670536e5
nixos/open-webui: remove preStart step
nixos/open-webui: remove `preStart` step
2024-06-05 08:05:18 +02:00
Pol Dellaiera
61ab4de94c
nixos/open-webui: update option and service descriptions 2024-06-05 08:05:18 +02:00
Pol Dellaiera
709eb8ebaf
nixos/open-webui: add openFirewall option 2024-06-05 08:05:18 +02:00
Pol Dellaiera
c54890e226
nixos/ollama: update port option, use types.port 2024-06-05 08:05:18 +02:00
Pol Dellaiera
cb8670469b
nixos/ollama: add openFirewall option 2024-06-05 07:09:13 +02:00
emilylange
694db856ed
nixos/forgejo: refactor secrets, add cfg.secrets
This is not a breaking change. Existing setups continue to work as-is.

Users of `cfg.mailerPasswordFile` will get an option rename/deprecation
warning, but that's it (assuming there is no regression).

This adds `cfg.secrets`, which is a wrapper over systemd's
`LoadCredential=` leveraging Forgejo's `environment-to-ini`.

`environment-to-ini` is intended for configuring Forgejo in OCI
containers.

It requires some fairly annoying escaping of the section names to fit
into the allowed environment variable charset.

E.g. `"log.console".COLORIZE = false` becomes
`FORGEJO__LOG_0x2E_CONSOLE__COLORIZE=false`.

 - `.` needs to be replaced with `_0X2E_` and
 - `-` needs to be replaced with `_0X2D_`

Those are simply the hex representation of each char from an ASCII
table:

. = ASCII 46 = 46 (decimal) = 2E (hex) = 0x2E = _OX2E_

To make interacting with `environment-to-ini` less annoying, we template
and escape the sections/keys in nix:

`cfg.secrets` takes the same free-form sections/keys as `cfg.settings`.
Meaning there is now a generalized abstraction for all keys, not just
those that have been manually implemented in the past.

It goes as far as theoretically allowing one to have `DEFAULT.APP_NAME`
read from a secret file.

I don't know why one would want to do that, but it has been made
possible by this :^)

More reasonable examples are listed in the `cfg.secrets` option example.

We also continue to bootstrap a handful of secrets like
`security.SECRET_KEY`. This is done is a sort of sidecar bootstrap unit
fittingly called `forgejo-secrets.service`.

Overriding those is, just like before, not really intended and requires
the use of `lib.mkForce` and might lead to breakage. But it is, in a
way, more possible than before.
2024-06-05 00:45:59 +02:00
nikstur
1baf7d7e4e
Merge pull request #314890 from danielbarter/repart-image-fix
repart-image: remove --map-root-user flag from unshare
2024-06-04 22:28:05 +02:00
Nick Cao
5032dc9bc3
Merge pull request #317038 from abmantis/patch-5
nixos/nvidia-optimus: add nvidia-modeset to blacklist
2024-06-04 16:10:52 -04:00
Arian van Putten
605418f9b1
Merge pull request #317257 from arianvp/stephank-fix-acme2
nixos/acme: allow setting security.acme.defaults.server = null to keep old accounts directory
2024-06-04 21:58:25 +02:00
K900
840914c324
Merge pull request #317268 from SuperSandro2000/plasma6-cups
nixos/plasma6: make print-manager depend on cups
2024-06-04 22:18:59 +03:00
Maximilian Bosch
7e2210236e
Merge pull request #316004 from Ma27/nc-memlimit
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
2024-06-04 19:18:03 +00:00
Sandro Jäckel
7c39d372f7 nixos/plasma6: make print-manager depend on cups 2024-06-04 20:50:06 +02:00
Stéphan Kochen
d1f07e6382 nixos/acme: allow setting security.acme.defaults.server = null to keep old accounts directory
The accounts directory is based on the hash of the settings.

https://github.com/NixOS/nixpkgs/pull/270221 changed the  default of
security.acme.defaults.server from null to the default letsencrypt URL
however as an unwanted side effect this means the accounts directory
changes and the ACME module will create a new a new account.

This can cause issues with people using CAA records that pin the
account ID or people who have datacenter-scale NixOS deployments

We allow setting this option to null again for people who want
to keep the old account and migrate at their own leisure.

Fixes https://github.com/NixOS/nixpkgs/issues/316608

Co-authored-by: Arian van Putten <arian.vanputten@gmail.com>
2024-06-04 20:09:46 +02:00
Pol Dellaiera
6b6d4aeb35
Merge pull request #316248 from shivaraj-bh/open-webui
open-webui: init at 0.2.4
2024-06-04 15:47:03 +02:00
shivaraj-bh
f66cb82fef nixos/open-webui: init 2024-06-04 16:46:19 +05:30
Jörg Thalheim
c71ebe0dc8 netboot: drop syslinux and grub
The comment says this is required by other modules but to be honest, I
cannot see where. Bootloaders will be included automatically by nixos
generation if their `installBootLoader` attribute references it.

This helps us to make kexec images even smaller espeically when
combined with the perlless profile.
2024-06-04 10:35:20 +02:00
Bobby Rong
6051698052
Merge pull request #314695 from nonetrix/patch-1
nixos/xdg/portal: Fix typo
2024-06-04 13:27:16 +08:00
Daniel Barter
d7a9d49c42 repart-image: removing unshare (and util-linux dep) form systemd-repart invocation
..
2024-06-03 17:48:27 -07:00
Bobby Rong
36bc3f46ba
nixos/pantheon: Do not set QT_QPA_PLATFORMTHEME
7aa79d47f7

Closes #316991
2024-06-04 07:37:56 +08:00
Abílio Costa
79cd2f9738
nixos/nvidia-optimus: add nvidia-modeset to blacklist
The nvidia-modeset module is loaded, which in turn pulls in the nvidia module. This makes bbswitch fail to turn off the card since it would be in use by the module.
2024-06-03 23:18:34 +01:00
Christian Kögler
966d214719 nixos/node-red: fix passthru of PATH 2024-06-03 23:23:38 +02:00
Jonathan Davies
571db45269
nixos/alertmanager-webhook-logger: init module 2024-06-03 20:33:27 +01:00
Sandro
43b5ccde57
Merge pull request #316879 from SuperSandro2000/mkEnableOption 2024-06-03 19:03:12 +02:00
Sandro Jäckel
1c2132f714
nixos/installation-cd-plasma5: fix even more aliases 2024-06-03 16:26:54 +02:00
K900
2e8de9bd1a
Merge pull request #316929 from SuperSandro2000/cd-konsole
nixos/installation-cd-plasma5: don't use alias for konsole
2024-06-03 17:25:12 +03:00
Sandro
a88fb925bb
nixos/installation-cd-plasma5: don't use alias for konsole 2024-06-03 16:22:12 +02:00
Michele Guerini Rocco
9e97770a19
Merge pull request #312317 from tom-kuca/replace-existing-network-addresses
nixos/network-interfaces: prevent failure when a network address already exists
2024-06-03 15:30:13 +02:00
Sandro Jäckel
41452802cb
treewide: fix all obviously wrong mkEnableOptions 2024-06-03 13:20:32 +02:00
Sandro
0387dede7c
Merge pull request #316732 from SuperSandro2000/tailscale-auth 2024-06-03 12:49:31 +02:00
Jonas Heinrich
4ce2189082 nixos/davfs2: Remove deprecated extraConfig 2024-06-03 11:36:14 +02:00
Dawid Dziurla
fbbc41f7da
nixos/systemd: simplify hooks function 2024-06-03 11:15:59 +02:00
Florian Klink
c149b8818b
Merge pull request #316836 from srhb/fix-garage-assert
nixos/garage: fix replication 1.0 assertion
2024-06-03 11:14:03 +03:00
Sarah Brofeldt
f7393d13fe nixos/garage: fix replication 1.0 assertion
Use the `cfg.package.version` (string) instead of the entire package so
users don't see  `error: value is a set while a string was expected`
instead of the intended assertion message.
2024-06-03 09:56:42 +02:00
Florian Klink
77a51024c0
Merge pull request #316697 from bbenno/fix-gollum
nixos/gollum: fix systemd tempfile permission
2024-06-03 08:25:04 +03:00
John Titor
de77718887
nixos/wayland-session: cleanup
xwayland, wlr-portal ->
 enable-xwayland, enable-wlr-portal
2024-06-03 09:28:00 +05:30
illustris
da799551a4
nixos/proxmox-lxc: fix console access (#307163)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-03 00:15:27 +02:00
Sandro
1e8d02875f
Merge pull request #307287 from illustris/proxmox-vma 2024-06-03 00:12:40 +02:00
Someone
e7139eb386
Merge pull request #316516 from aidalgol/libxnvctrl-nixos-fix
nixos/nvidia: add missing check for nvidia settings enabled
2024-06-02 21:32:56 +00:00
Eric Wolf
7c0937d668
nixos/nextcloud-notify_push: use Type=notify
This prevents the post start script from running
before necessary sockets have been created.

It also prevents an unused shell from being kept around
by using `exec` to make `notify_push` the main process.
2024-06-02 23:19:07 +02:00
Sandro
6f02edec1a
Merge pull request #316358 from majewsky/portunus-remove-libxcrypt-legacy 2024-06-02 23:10:26 +02:00
Sandro Jäckel
f643e4fa5b
nixos/tailscale-auth: fix enable option description 2024-06-02 22:30:42 +02:00
Ryan Horiguchi
ea63e59edc nixos/adguardhome: fix typo 2024-06-02 21:01:11 +02:00
h7x4
850cbdd97d
Merge pull request #316648 from s1ls/invidious-router-descfix
nixos/invidious-router: remove redundant "Enables" in description
2024-06-02 19:28:19 +02:00
Benno Bielmeier
b5c7987b52 nixos/gollum: fix systemd tempfile permission
When services.gollum.{user,group} was specified a value other than its
default (i.e. "gollum"), the build failed due to referencing a
non-existing user.
2024-06-02 18:00:19 +02:00
Sandro
56744fd9ee
Merge pull request #312261 from Yarny0/ensure-printers-fix-options 2024-06-02 17:59:01 +02:00
Onur C. Cakmak
b3f70c29d5
nixos/containerd: remove LimitNOFILE from service (#313507) 2024-06-02 17:51:10 +02:00
Sandro
c6c60cca65
Merge pull request #315112 from sikmir/git-daemon 2024-06-02 17:08:43 +02:00
Silas Schöffel
37afbbb602
nixos/invidious-router: remove redundant "Enables" in description 2024-06-02 13:27:22 +02:00
Thomas Gerbet
e12faccb31
Merge pull request #313794 from tcmal/akkoma-3.13.2
akkoma: 3.13.1 -> 3.13.2
2024-06-02 12:57:31 +02:00
Lin Jian
0dd47a00b7
Merge pull request #316500 from acid-bong/emacs
nixos/emacs: simplify the service's ExecStart line
2024-06-02 14:42:35 +08:00
Acid Bong
eacb151e5d
nixos/emacs: simplify the service's ExecStart line
The upstream service just executes `emacs --fg-daemon`.
2024-06-02 09:24:31 +03:00
michaelBelsanti
7f447ce0f8
nixos/espanso: fix espanso options 2024-06-01 18:04:04 -04:00
Aidan Gauland
9b3461e7ae
nixos/nvidia: add missing check for nvidia settings enabled 2024-06-02 09:08:22 +12:00
Guillaume Girol
6ca2cfd75b
Merge pull request #313485 from tpwrules/copytoram-notif
nixos/stage-1-init: notify during copytoram
2024-06-01 21:06:33 +02:00
John Titor
7b2a2824b3
nixos/wayland-session: force running xdg autostart for WM-only sessions 2024-06-01 22:30:19 +05:30
Arnout Engelen
61c1d28215
Merge pull request #303790 from FriedrichAltheide/cleanup-virtualbox
virtualbox & virtualboxGuestAdditions: cleanup
2024-06-01 13:42:14 +02:00
Stefan Majewsky
d11d18df30 portunus: remove libxcrypt-legacy usage 2024-06-01 10:28:21 +02:00
OPNA2608
2735184f6d lomiri.lomiri: Try to consider services.xserver.xkb.layout
Propagate the configuration setting through an envvar, check the envvar in the compositor.
Needed because querying AccountsSettings for this information fails, due to Ubuntu-only
"InputSources" interface. So you're stuck on US layout without this hack.
2024-06-01 00:26:25 +02:00
Yt
e45abe6d47
Merge pull request #313634 from onny/stalwart-systemd
stalwart-mail: package und use upstream systemd unit
2024-05-31 21:11:45 +00:00
Peder Bergebakken Sundt
080af6461e
Merge pull request #314294 from james-atkins/mealie-update
mealie: 1.2.0 -> 1.7.0
2024-05-31 20:41:37 +02:00
WilliButz
4726504fea
Merge pull request #315656 from nikstur/os-release-remove-type-constraints
nixos/version: remove strict type constraints from image options
2024-05-31 14:51:20 +02:00
Maximilian Bosch
66e93e7e43
Merge pull request #316128 from NixOS/revert-315921-networkd-simplify-mkif
Revert "nixos/networking: use mkIfs on the inner attributes"
2024-05-31 12:39:12 +00:00
Francesco Gazzetta
3da336fc79 nixos/ladybird: init 2024-05-31 12:11:43 +00:00
Maximilian Bosch
3cf4304692
Revert "nixos/networking: use mkIfs on the inner attributes" 2024-05-31 13:05:19 +02:00
robin
4b0fd37990
nixos/alsa: fix audio state loading on system start 2024-05-31 11:55:11 +02:00
taku0
49032a79e4
Merge pull request #311669 from Nydragon/add-thunderbird-policies 2024-05-31 18:20:59 +09:00
Jonas Heinrich
336232debd stalwart-mail: package upstream systemd unit 2024-05-31 10:22:15 +02:00
John Titor
2c8ad1d1eb
nixos/gnome/gnome-keyring: rewrite the implementation 2024-05-31 13:52:12 +05:30
Jonas Heinrich
dfa130e828 nixos/stalwart-mail: use upstream systemd unit 2024-05-31 10:20:47 +02:00
Yt
6606ce9c0c
Merge pull request #273101 from onny/invoiceplane-settings2
nixos/invoiceplane: Remove deprecated extraConfig
2024-05-31 00:04:34 +00:00
Maximilian Bosch
dddd08d188
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
The memory limit is equal to what's configured in php-fpm. Given that we
run in a different environment, it seems reasonable to allow different
memory contraints here.
2024-05-30 23:38:55 +02:00
Maximilian Bosch
a8377e1b0f
Merge pull request #314828 from peterablehmann/prometheus
nixos/prometheus: add query_log_file option
2024-05-30 21:37:26 +00:00
Yt
0509bb8779
Merge pull request #315908 from pacien/nixos-stalwart-default-rocksdb
nixos/stalwart-mail: rocksdb as default storage
2024-05-30 21:31:59 +00:00
Yt
782f9a832e
Merge pull request #315697 from pacien/nixos-stalwart-no-dynamicuser
nixos/stalwart-mail: do not use DynamicUser
2024-05-30 21:27:34 +00:00
Maximilian Bosch
ab294204ba
Merge pull request #315921 from lheckemann/networkd-simplify-mkif
nixos/networking: use mkIfs on the inner attributes
2024-05-30 18:11:51 +00:00
Dawid Dziurla
25ad0cdbfc
nixos/systemd: link user-generators 2024-05-30 19:52:22 +02:00
Dawid Dziurla
156757eaf7
nixos/systemd-user: add generators option 2024-05-30 19:51:42 +02:00
euxane
0174aa1c56 nixos/stalwart-mail: rocksdb as default storage
This sets RocksDB as the default storage backend for `stateVersion` >=
24.11. For previous `stateVersion`s, the structured data and blobs
remain on SQLite and the filesystem respectively.

This is closer to the suggested upstream configuration for fully local
storage.
2024-05-30 16:22:03 +02:00
Seaver Thorn
90b70f368d
nixos/xone: fixed a typo in the option description (#310419) 2024-05-30 14:53:04 +03:00
John Titor
98f9f9951a
nixos/hyprland: add fufexan as maintainer
Per https://github.com/NixOS/nixpkgs/pull/315827#issuecomment-2139073465
2024-05-30 14:25:36 +05:30
Sandro
357ccb3199
Merge pull request #314418 from SuperSandro2000/mopidy-online
nixos/mopidy: add wants network-online.target to fix warning
2024-05-30 10:16:35 +02:00
John Titor
0b0b7cefcc
nixos/hyprland: disable wlr-portal for Hyprland
This commit:
- Adds wlr-portal override of wayland-session module (enabled by default)
- Disable it for hyprland module
2024-05-30 13:30:41 +05:30
Jonas Heinrich
0ef99565a9
Merge pull request #315745 from pacien/nixos-stalwart-default-directory-db
nixos/stalwart-mail: add default account directory
2024-05-30 09:37:30 +02:00
Jonas Heinrich
dfad9bb515
Merge pull request #315710 from pacien/nixos-stalwart-log-update
nixos/stalwart-mail: migrate logging config
2024-05-30 09:34:28 +02:00
Franz Pletz
4e1b4397d9
Merge pull request #312472 from Ma27/networkd-option-rename
nixos/networkd: get rid of *Config attributes in lists
2024-05-30 04:06:01 +02:00
Martin Weinelt
e0f4e4b535
Merge pull request #274425 from woffs/fix-274286
nixos/frr: adapt to frr-9
2024-05-30 02:33:26 +02:00
euxane
ddcbe4c369 nixos/stalwart-mail: add default account directory
This configures a default account directory for the Stalwart service.
It uses the default common database which was already configured.

Without this directory, admins could not manage users and groups using
the `stalwart-cli` tools.
2024-05-30 02:07:17 +02:00
lassulus
d6f07be682
Merge pull request #314889 from DavHau/pr_sshd
nixos/openssh: allow removing settings
2024-05-30 01:01:07 +02:00
euxane
6ee84bcda0 nixos/stalwart-mail: do not use DynamicUser
This service stores a large number of files for its blob store and some
of its databases. This is not compatible with `DynamicUser`, which
`chown`s everything in the state directory every time the service is
started. Therefore, we now use a static system user and group instead.

See https://github.com/NixOS/nixpkgs/pull/313634#discussion_r1609960417
2024-05-30 00:40:12 +02:00
euxane
824949f300 nixos/stalwart-mail: migrate logging config
The logging configuration keys have changed,
which caused this config to be ignored.
2024-05-29 22:17:59 +02:00
Jade Lovelace
83eba84f9e
Merge pull request #315580 from lf-/jade/remove-old-nix-workaround
tree-wide: remove --build-users-group '' workaround for 10 year old Nix bug
2024-05-29 13:05:01 -06:00
Kerstin
daa52e1d9e
Merge pull request #289582 from Izorkin/update-mastodon-redis
nixos/mastodon: update redis host and port configurations
2024-05-29 18:41:20 +02:00
Cosima Neidahl
0db9149e2a
Merge pull request #315627 from OPNA2608/fix/coolercontrold-nvidia-package
nixos/coolercontrol: Use user-preferred nvidia package
2024-05-29 16:44:07 +02:00
nikstur
acba687721 nixos/version: remove strict type constraints from image options
This constraints aren't super useful because they arent really enforced
by the software, so it's hard to get them right and we've gotten them
wrong multiple times in the past. It's better to remove them altogether
in the spirit of RFC 42.
2024-05-29 16:13:41 +02:00
Sandro
9584ef2c26
Merge pull request #315189 from SuperSandro2000/gitea-maint 2024-05-29 15:49:00 +02:00
OPNA2608
07b369b5aa nixos/coolercontrol: Use user-preferred nvidia package 2024-05-29 15:21:41 +02:00
Izorkin
8730a7e8d8
nixos/mastodon: optimize systemd startup order block 2024-05-29 13:45:23 +03:00
Izorkin
a05afb1437
nixos/mastodon: update redis host and port configurations 2024-05-29 13:45:17 +03:00
Jade Lovelace
e60c7e080d nixos/systemd-boot-builder: remove workaround for 10 year old Nix bug
This was originally introduced in 9245516b46,
which reveals it is a workaround for a Nix bug from 10 years ago that
was *fixed* 10 years ago.

References:
https://github.com/NixOS/nix/pull/425
https://github.com/NixOS/nixpkgs/issues/5494
2024-05-29 02:52:47 -07:00
Frank Doepper
4df955130e nixos/frr: adapt to frr-9
- fix #274286
- remove `-f configfile` from ExecStart
- use /etc/frr/${service}d.conf
- enable mgmtd when staticd is enabled
- don't frr-reload.py mgmtd
- remove obsolete lib.mdDoc
2024-05-29 11:07:39 +02:00
Giel van Schijndel
83b38c6d30 nixos/netboot: only install syslinux on platforms where it's available
Instead of maintaining an inevitably incomplete list of unsupported
architectures.

I discovered this while building for armv7-linux (32-bit ARM).
2024-05-29 10:28:03 +02:00
Cosima Neidahl
33ce263359
Merge pull request #315117 from OPNA2608/fix/lomiri-24.05-buildable
lomiri.*: Make buildable while waiting for GLib fix
2024-05-29 08:43:42 +02:00
Lin Jian
ad57eef4ef
Merge pull request #315149 from Cryolitia/ghostscript
nixos/steam: fix evaluation failure when `fonts.packages` contains path
2024-05-29 10:06:23 +08:00
Ivan Trubach
a5499ee535 nixos/pghero: init 2024-05-29 03:40:48 +03:00
Christina Rust
343ddd9f4b
Merge pull request #315263 from srhb/devpi-loadcredential
nixos/devpi-server: fix loading credentials as DynamicUser
2024-05-28 19:22:40 +02:00
abysssol
c01818d57c
Merge pull request #314722 from abysssol/ollama-split-listenaddress
nixos/ollama: split `listenAddress` into `host` and `port`
2024-05-28 15:37:51 +00:00
lucasew
4c621ef886 nixos/loki: add network.target to after
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-05-28 12:02:04 -03:00
tcmal
7952d92b82 nixos/akkoma: dont disable protectsystem in confinement mode
this works fine since #289593
2024-05-28 15:47:03 +01:00
tcmal
a247fc94b4 nixos/akkoma: deal with $RUNTIME_DIRECTORY containing multiple entries
this fixes issues with confined module tests.

see https://github.com/NixOS/nixpkgs/pull/313794#issuecomment-2126909110
2024-05-28 15:47:03 +01:00
Someone
93b5069466
Merge pull request #314840 from ereslibre/cdi-fix-egl
hardware/nvidia-container-toolkit: mount `nvidia-driver/share`
2024-05-28 12:50:40 +00:00
Jonas Heinrich
4217b9cd9a nixos/invoiceplane: Remove deprecated extraConfig 2024-05-28 14:07:44 +02:00
Jonas Chevalier
5d6d058646
Merge pull request #308090 from mogeko/service-rke2
nixos/rke2: add rke2 service
2024-05-28 09:36:03 +02:00
Jörg Thalheim
7475325763
Merge pull request #315040 from JohnRTitor/hyprlock-module
nixos/hyprlock, nixos/hypridle: init module
2024-05-28 09:03:48 +02:00
Sarah Brofeldt
4d4571b20a nixos/devpi-server: fix loading credentials as DynamicUser 2024-05-28 08:58:24 +02:00
Mogeko
a642efcdab
nixos/rke2: add rke2 service
Set assertions to avoid obvious errors.

Eliminate the conflict between default CNI (`cana`) and `NetworkManager`.

Determine whether optional can be used for agent.

Add the option `cisHardening` to enable CIS Hardening.

Set kernel parameters by `boot.kernel.sysctl`.

Using `lib.escapeShellArgs` to make `ExecStart` more resilient to escaping issues.

Using a list of `str` to extra flags.
2024-05-28 12:39:30 +08:00
北雁 Cryolitia
1652a914fd
nixos/steam: fix evaluation failure when fonts.packages contains path 2024-05-28 12:05:43 +08:00
Tom Fitzhenry
25193bdc60 nixos/less: introduce programs.less.package
Allow users to set the package, e.g. to override withSecure to true.
2024-05-28 08:34:45 +10:00
Rafael Fernández López
79c79671a7 hardware/nvidia-container-toolkit: mount nvidia-driver/share 2024-05-27 23:44:32 +02:00
Sandro Jäckel
73c11de701
gitea,nixos/gitea: add SuperSandro2000 as maintainer, remove inactive maintainers, unify maintainers 2024-05-27 22:48:14 +02:00
OPNA2608
3ef60ac499 lomiri.telephony-service: Mark broken & exclude everywhere
Needs a GLib change to be fixed, which needs a staging cycle, which I was told won't happen in time anymore.
Luckily it's not a crucial component for the desktop mode.
2024-05-27 17:08:53 +02:00
Nikolay Korotkiy
ecddd99c6a
nixos/gitDaemon: add package option 2024-05-27 18:50:15 +04:00
John Titor
353aa12446
nixos/hypridle: init 2024-05-27 17:41:36 +05:30
Sandro
77e9384f0f
Merge pull request #314428 from SuperSandro2000/nox-gst 2024-05-27 14:03:46 +02:00
John Titor
07a0b79ed1
nixos/hyprlock: init module 2024-05-27 17:32:22 +05:30
Sandro
99d60e5489
Merge pull request #314948 from Izorkin/update-pinentry-tty 2024-05-27 11:04:18 +02:00
Thomas Gerbet
00015f3ef9
Merge pull request #309036 from tomfitzhenry/sshd-package
nixos/ssh: add services.openssh.package
2024-05-27 09:40:31 +02:00
Will Fancher
0415aec200
Merge pull request #297250 from NickCao/sysuser
nixos/systemd-sysusers: make uid/gid allocation stable
2024-05-26 20:17:06 -04:00
Izorkin
3381fdd745
nixos/no-x-libs: add pinentry-tty 2024-05-27 00:22:07 +03:00
Maximilian Bosch
a5f800ab48
Merge pull request #311701 from Ma27/bump-grafana
grafana: 10.4.2 -> 11.0.0
2024-05-26 20:47:56 +00:00
Jörg Thalheim
f33f71f6f6
Merge pull request #240989 from m-bdf/hyprland-wayland-session
nixos/{sway,river,hyprland}: improve common wayland-session module
2024-05-26 22:06:53 +02:00
Sandro Jäckel
db66127c5b
nixos/no-x-libs: make sure gst-plugins-base has enableGl disabled 2024-05-26 20:51:00 +02:00
Sandro Jäckel
cb58275dc6
nixos/no-x-libs: build gst-plugins-rs without gtk 2024-05-26 20:51:00 +02:00
DavHau
3fe773a174 nixos/openssh: allow removing settings
# Motivation
So far it was not possible to configure sshd to allow password authentication only for a specific user. This is because in the generated config a `Match User xxx` section would be required before the global `PasswordAuthentication` is defined, as otherwise the global option always takes precedence.
The same problem occurs with multiple other options under `settings`.

# Done
This PR fixes that issue for all settings by simply allowing them to be overridden with `null`, which leads to a removal of that setting from the config.
The user can then correctly configure user specific settings using extraConfig, like this:
```
    Match User user1
    PasswordAuthentication yes
    Match all
    PasswordAuthentication no
```
2024-05-26 18:46:27 +02:00
北雁 Cryolitia
164f66169a
nixos/steam: add option fontPackages
fix #178121
2024-05-26 22:55:38 +08:00
北雁 Cryolitia
efef69a51d
nixos/steam: add option extraPackages 2024-05-26 22:03:50 +08:00
Pol Dellaiera
017ee1411d
Merge pull request #314433 from SuperSandro2000/mpv-nox
nixos/no-x-libs: fix mpv build
2024-05-26 07:56:52 +02:00
abysssol
428e60cad9 nixos/ollama: split listenAddress into host and port
breaking change; do not backport
2024-05-25 21:22:15 -04:00
fuggy
ef5ff2a075
nixos/xdg/portal: Fix typo
There was a typo that misspelled /etc/ as /etx/
2024-05-25 17:26:15 -05:00
Peter Lehmann
09be64ecc8
nixos/prometheus: Add query_log_file option 2024-05-25 17:03:24 +02:00
ivan770
1b288bca00
nixos/etc: support direct symlinks with etc overlay 2024-05-25 08:41:24 -04:00
sodiboo
0fa287f2ff nixos/invidious-router: maintianers.s1ls -> maintainers.sils 2024-05-25 13:10:20 +02:00
Pol Dellaiera
d091b7f681
Merge pull request #313112 from savyajha/firefly-iii
firefly-iii: 6.1.15 -> 6.1.16
2024-05-25 10:41:44 +02:00
Yt
1777f06494
Merge pull request #314244 from onny/stalwart-cleanup
stalwart-mail_0_6: drop
2024-05-25 01:59:37 +00:00
Sandro Jäckel
b9ec2c14d8
nixos/no-x-libs: fix mpv build by disabling drmSupport, disable more GUI only relevant features 2024-05-25 02:36:13 +02:00
Sandro Jäckel
2a8e5155c9
nixos/no-x-libs: add libplacebo 2024-05-25 02:36:12 +02:00
éclairevoyant
04548e7e1f
nixos/journalwatch: add package option 2024-05-24 19:11:54 -04:00
Sandro Jäckel
b064e2db69
nixos/mopidy: add wants network-online.target to fix warning 2024-05-25 00:43:18 +02:00
Silvan Mosberger
6c42e8745a
Merge pull request #309517 from bobrippling/fix/ebusd-args
Fix ebusd service argument passing
2024-05-24 23:25:28 +02:00
Atemu
061a135d05
Merge pull request #309585 from diniamo/global-steam-compat-paths-var
nixos/steam: add protontricks submodule
2024-05-24 20:17:35 +02:00
Vladimir Timofeenko
f41e387c26
nixos/frigate: drop BindPaths from systemd service (#309341)
Migrations have been working well even with misconfigured BindPaths => removing
2024-05-24 18:24:56 +02:00
Andrew Morgan
fad7ecc30f mealie: set the correct port in BASE_URL
Otherwise it would default to port 8080, which breaks generated links
when `cfg.port` is set to another port.
2024-05-24 09:17:47 -05:00
James Atkins
bcaf6de467 mealie: 1.2.0 -> 1.7.0
https://github.com/mealie-recipes/mealie/releases/tag/v1.7.0
2024-05-24 09:17:42 -05:00
Someone
67d54c2e29
Merge pull request #312811 from aidalgol/libxnvctrl-shared
linuxPackages.nvidia_x11.libXNVCtrl: make the shared library available
2024-05-24 13:35:19 +00:00
Jonas Heinrich
50388b71cc nixos/stalwart-mail: add onny as maintainer 2024-05-24 12:26:13 +02:00
Jonas Heinrich
3d6a20f380 nixos/stalwart-mail: drop legacy package 2024-05-24 12:15:50 +02:00
K900
69aa70cddf
Merge pull request #307766 from SuperSandro2000/oauth2-proxy-fix-headers
nixos/oauth2_proxy_nginx: fix proxy_set_header
2024-05-24 10:48:07 +03:00
diniamo
fcaec6bdf7 nixos/steam: add protontricks submodule 2024-05-24 08:51:37 +02:00
Pol Dellaiera
d9062cd5f9
Merge pull request #313146 from malteneuss/add-nextjs-ollama-llm-ui
Add nextjs ollama llm UI frontend for Ollama
2024-05-24 06:51:37 +02:00
Aidan Gauland
4e353b67f6
nixos/nvidia: make libXNVCtrl available on nvidia systems 2024-05-24 15:54:18 +12:00
pennae
4d2462511f
Merge pull request #314099 from mrkline/snapper-and-borgbackup-doc-fix
nixos/snapper, nixos/borgbackup: Fix module doc typo
2024-05-24 01:15:09 +02:00
Sandro
3e3ac0e7ba
Merge pull request #305516 from OPNA2608/init/lomiri/ayatana-indicator-display
ayatana-indicator-display: init & add to Lomiri
2024-05-24 00:40:55 +02:00
Malte Neuss
8a05b4f8d4 nixos/nextjs-ollama-llm-ui: init module
NixOS already has good support for the Ollama
backend service. Now we can benefit from
having a convenient web frontend as well for it.
2024-05-23 23:48:55 +02:00
Matt Kline
234f4db797 nixos/snapper, nixos/borgbackup: Fix module doc typo
The persistentTimer argument sets the _Persistent_ field in
systemd.timer(5).

Pointed out in #312549
2024-05-23 14:23:40 -07:00
Lin Jian
4be6150a4c
Merge pull request #313822 from linj-fork/pr/kanata-config-file
nixos/kanata: add a configFile option
2024-05-24 02:53:42 +08:00
Sandro
d836a3e678
Merge pull request #307499 from SuperSandro2000/bwdc-network-online
nixos/bitwarden-directory-connector-cli: add dependsOn network-online…
2024-05-23 20:47:05 +02:00
Nick Cao
9a0eef506d
Merge pull request #314038 from icewind1991/hydra-fix-init-script
nixos/hydra: fix typo in hydra init script
2024-05-23 14:38:44 -04:00
OPNA2608
d29e469f2a nixos/lomiri: Add display indicator 2024-05-23 20:37:34 +02:00
Sandro
f53713e2cf
Merge pull request #304893 from SuperSandro2000/portunus-note
nixos/portunus: add note about allowed characters to id
2024-05-23 20:10:52 +02:00
Robin Appelman
c64e560c86 nixos/hydra: fix typo in hydra init script 2024-05-23 19:25:12 +02:00
Linus Heckemann
cf50bd0aa1 nixos/networking: use mkIfs on the inner attributes
This is a bit more compact and yields the same evaluation results.
2024-05-23 17:46:15 +02:00
Sandro Jäckel
f221b4f5f5
nixos/oauth2_proxy_nginx: fix proxy_set_header 2024-05-23 16:34:37 +02:00
Bobby Rong
e967f2f99c
Merge pull request #313416 from bobby285271/upd/pantheon-tweaks
pantheon-tweaks: 1.1.2 -> 2.0.1
2024-05-23 21:26:59 +08:00
Sandro
6a82eb34cc
Merge pull request #305127 from OPNA2608/init/lomiri/ayatana-indicator-sound 2024-05-23 14:03:14 +02:00
Sandro
360221d4bf
Merge pull request #313096 from onny/stalwart-fix-test 2024-05-23 13:54:39 +02:00
Isabelle
56141e2236
nixos/wireguard: add option preShutdown for commands called before interface deletion (#310345) 2024-05-23 13:53:45 +02:00
Sandro
445809871d
Merge pull request #313228 from SuperSandro2000/asf-no-web-ui 2024-05-23 13:12:54 +02:00
Martin Weinelt
aee13d3d9a
nixos/wyoming*: depend on network-online.target
Ordering it after network-online.target only makes sense, if it actually
gets requested.
2024-05-23 10:43:33 +02:00
Martin Weinelt
5d515c373e
nixos/kea: make ctrl-agent want network-online.target
If it wants to run after it, it needs to want it for it to be there.
2024-05-23 10:31:30 +02:00
Florian Klink
fadd3fef94
Merge pull request #304322 from ElvishJerricco/sd-s1-resolved
nixos/systemd-stage-1: Support resolved
2024-05-23 10:46:51 +03:00
Thomas Watson
5aa9fc9273 nixos/stage-1-init: notify during copytoram
Demystifies a long pause at an unrelated message, particularly if the
source media is slow.
2024-05-22 18:43:18 -05:00
Lin Jian
d679ddfcab
nixos/kanata: add a configFile option
This brings two benefits.  For one thing, it exposes the generated
config file which users can build separately to validate it.  For
another, it allows users to provide their own config file.
2024-05-23 06:42:41 +08:00
Jeremy Baxter
20fc095a1c nixos/oink: init module 2024-05-23 10:12:53 +12:00
Maëlys Bras de fer
95674de399 nixos/{river,hyprland}: override package using apply 2024-05-22 20:01:05 +02:00
Maëlys Bras de fer
bcbeccfa7d nixos/{sway,river,hyprland}: cleanup 2024-05-22 19:45:46 +02:00
Maëlys Bras de fer
a4160dfe88 nixos/hyprland: use generic wayland-session module 2024-05-22 19:43:21 +02:00
Maëlys Bras de fer
cf159c437d nixos/{sway,river}: make XWayland support optional 2024-05-22 19:43:19 +02:00
Nick Cao
b72dc8eb43
Merge pull request #313440 from Kiskae/nvidia/555.42.02
linuxPackages.nvidiaPackages.beta: 550.40.07 -> 555.42.02
2024-05-22 13:20:09 -04:00
Bobby Rong
735a11d300
nixos/pantheon-tweaks: remove
You can just add the app to environment.systemPackages.
2024-05-22 21:58:16 +08:00
Kiskae
fbdcdde04a nixos/nvidia: apply nixfmt-rfc-style 2024-05-22 13:46:52 +02:00
Martin Weinelt
a68d0e6819
Merge pull request #312771 from mweinelt/garage-data-dir
nixos/garage: support 0.9.0+ data_dir format
2024-05-22 13:18:36 +02:00
Martin Weinelt
07a26ae742
nixos/garage: support 0.9.0+ data_dir format
https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/#data_dir
2024-05-22 13:12:46 +02:00
Pol Dellaiera
543582d5e2
Merge pull request #313473 from thenhnn/filesender-packaging-filesender-module
nixos/filesender: init
2024-05-22 09:55:41 +02:00
K900
6ac507dd08
Merge pull request #309127 from omentic/plasma6
plasma6: mark dolphin + spectacle as optional packages & reorganize dependencies
2024-05-22 10:48:17 +03:00
Rob Pilling
5458b62cf7 ebusd: fix argument passing, separate using an equals (=) 2024-05-22 07:58:26 +01:00
Nydragon
70b284d60c
nixos/thunderbird: init module
Addition of the thunderbird policies and about:config options to reflect
firefox's capabilities and to allow system wide locking of options.
2024-05-22 14:55:16 +09:00
nhnn
3d47565193
nixos/filesender: init module 2024-05-22 08:37:48 +03:00
Will Fancher
072054ccb5 nixos/systemd-stage-1: Support systemd-resolved 2024-05-21 20:55:37 -04:00
Will Fancher
dd0ebdffcd nixos/systemd-stage-1/dbus: Fix systemd services 2024-05-21 20:55:37 -04:00
Peder Bergebakken Sundt
64076cea1d
Merge pull request #312518 from dali99/bluemap
bluemap: init at 3.21, and init module
2024-05-22 01:09:49 +02:00
Martin Weinelt
98d2dbc78d
Merge pull request #312591 from r-ryantm/auto-update/navidrome
navidrome: 0.52.0 -> 0.52.5
2024-05-21 21:43:12 +02:00
Martin Weinelt
90916525a6
nixos/navidrome: set empty settings default
This will not affect the options, but allows to not configure settings at
all, if you don't need to. Unbreaks the NixOS test, which relies on this
behavior.

Fixes: #312757
2024-05-21 21:23:35 +02:00
Jonas Heinrich
2c4128ea01 nixos/stalwart-mail: use publicsuffix-list package
Co-authored-by: shawn8901 <shawn8901@googlemail.com>
2024-05-21 21:09:38 +02:00