Commit Graph

15239 Commits

Author SHA1 Message Date
Vincent Haupert
84220a7098 nixos/envoy: add package option 2023-02-11 18:21:21 +01:00
Vincent Haupert
3c3da8768b nixos/envoy: further service hardening 2023-02-11 18:21:21 +01:00
Vincent Haupert
8fff553f7e nixos/envoy: sort serviceConfig entries 2023-02-11 18:21:21 +01:00
Vincent Haupert
989a1a6ef5 nixos/envoy: use lists in serviceConfig where appropriate
Using type `list` instead of `str` in `serviceConfig` entries which
accept multiple values allows easier extension of the unit
configuration.
2023-02-11 18:21:21 +01:00
Robert Schütz
efee1b5234 nixos/imaginary: init 2023-02-11 09:18:42 -08:00
Marin
785cd824a3 nixos/yubikey-agent: Add dependency to pcsd.service
Issue: after installing, running `yubikey-agent -setup` produces the
following error:
```
nixOS: Failed to connect to the YubiKey: connecting to pscs: the Smart
card resource manager is not running
```

More on this issue: https://github.com/FiloSottile/yubikey-agent/issues/137
2023-02-11 09:32:24 -05:00
Naïm Favier
86a387351a
Merge branch 'master' into nixos/hostapd 2023-02-11 14:03:56 +01:00
Moritz 'e1mo' Fromm
e8b59a1e2e
nixos/dokuwiki: remove last reference to aclUse
This was overlooked in #209299, but will throw a trace when building a
system even when the setting was not set.
2023-02-11 11:12:51 +01:00
Sandro
9ee0410a57
Merge pull request #214702 from Tom-Hubrecht/onlyoffice 2023-02-10 23:07:32 +01:00
Tom Hubrecht
405984ac13 nixos/onlyoffice: Fix initial permissions for the documentserver data 2023-02-10 19:16:19 +01:00
Deadbeef
e391cf368a nixos/appservice-discord: customizable package 2023-02-11 01:08:46 +08:00
Anderson Torres
e1ffcb46cd
Merge pull request #153098 from bb2020/udisks
nixos/udisks2: add mountOnMedia option
2023-02-10 13:50:57 -03:00
bb2020
61219651fe nixos/udisks2: add mountOnMedia option 2023-02-10 16:38:05 +03:00
1sixth
06972ea1fe nixos/nitter: add replaceReddit option 2023-02-10 09:28:17 +01:00
Aaron Andersen
ce81c3ab72
Merge pull request #215554 from bb2020/dlna
nixos/minidlna: minor changes
2023-02-09 21:45:59 -05:00
Nick Cao
4ba33a758f
Merge pull request #215489 from Alper-Celik/master
nixos/plasma5: use vlc phonon backend by default
2023-02-10 09:27:37 +08:00
bb2020
76bf633dc2 nixos/minidlna: minor changes 2023-02-09 21:11:20 +03:00
Alvar Penning
63dd9fb5c8 nixos/ympd: Unit hardening
Next to some systemd unit hardening, the nobody user isn't used anymore,
as suggested in #55370.
2023-02-09 19:10:19 +01:00
talyz
8fb5bab784
discourse: 2.9.0.beta14 -> 3.1.0.beta2 2023-02-09 17:36:29 +01:00
Alper Çelik
0b74f9829f
nixos/plasma5: use vlc phonon backend by default 2023-02-09 13:53:28 +03:00
IndeedNotJames
f5a06f7150
nixos/caddy: fix caddy fmt for caddy v2.6.3
The nixos module uses `caddy fmt` to *format* the generated Caddyfile.
v2.6.3 slightly altered `caddy fmt`'s behavior.

Excerpt from https://github.com/caddyserver/caddy/releases/tag/v2.6.3
> cmd: caddy fmt return code is 1 if not formatted
> cmd: fmt exit successfully after overwriting config file

Which is why the internal `Caddyfile-formatted` now uses `cp` and `caddy fmt --overwrite` instead
2023-02-09 03:36:10 +01:00
ppom
5a1ba62841 onlyoffice: allow ExecStartPre additions 2023-02-09 00:56:08 +01:00
pennae
bf4c0c1900 nixos/*: remove trailing period in mkEnableOptions
those are added by mkEnableOption, and .. is replaced to … by markdown
processing.
2023-02-08 15:23:34 +01:00
pennae
2f9d71afdb nixos/x11: fix some docs links
the docbook stylesheets duplicated the target of these untitled links
into their label, but we should do that in markdown instead.
2023-02-08 15:23:34 +01:00
K900
4a514c6754 nixos/plasma5: install kio-admin for desktop 2023-02-08 12:38:14 +03:00
Will Fancher
1406dd02a9 sshd: Cyphers -> Ciphers 2023-02-07 13:54:36 -05:00
Maximilian Bosch
298148f714
Merge pull request #214973 from paumr/roundcube_bugfix_nginx
nixos/roundcube: fixed nginx configuration
2023-02-07 14:01:49 +01:00
Nick Cao
8f3021c728
Merge pull request #214868 from VergeDX/pykms
nixos/pykms: rename systemd deprecated `MemoryLimit` to `MemoryMax` with option.
2023-02-07 10:08:23 +08:00
Vanilla
0b426cd8e2
nixos/pykms: rename systemd deprecated MemoryLimit to MemoryMax. 2023-02-07 10:04:24 +08:00
Sandro
98a5726add
Merge pull request #204390 from gbtb/openvpn_client_restart_after_suspend
Resolves https://github.com/NixOS/nixpkgs/issues/52528
2023-02-07 01:06:24 +01:00
Matthieu Coudron
ef5da70d66
services.openssh: rename several settings (#211991)
* services.openssh: rename several settings

... to match the sshd config format (makes transition smoother), namely:
services.openssh.forwardX11 -> services.openssh.settings.X11Forwarding
services.openssh.cyphers -> services.openssh.settings.Cyphers
services.openssh.macs -> services.openssh.settings.Macs
services.openssh.kexAlgorithms -> services.openssh.settings.KexAlgorithms
services.openssh.gatewayPorts -> services.openssh.settings.GatewayPorts

* release-notes: mention openssh renaming

* chore: regenerated release-notes
2023-02-07 00:11:18 +01:00
Sandro
6cdec6d1b8
nixos/nginx: add comment about clearing Connection header (#214211) 2023-02-06 23:37:38 +01:00
Sandro
d47709d1ef
Merge pull request #208189 from numinit/update-nebula-module 2023-02-06 23:14:58 +01:00
Jozef Hollý
3cb385953b mimir: add package override 2023-02-06 21:49:23 +01:00
Maximilian Bosch
9402c27069
Merge pull request #208289 from Ma27/bump-privacyidea
privacyidea: 3.7.4 -> 3.8
2023-02-06 21:37:24 +01:00
Thomas Gerbet
e7e447a185 meilisearch: 0.30.5 -> 1.0.0
https://github.com/meilisearch/meilisearch/releases/tag/v1.0.0
2023-02-06 14:30:08 -05:00
Maximilian Bosch
918c22bd5f
privacyidea: fix build
The previous changes for the 3.8 update are ready, but staging got
merged into master, so there are a few more challenges to tackle:

* Use python 3.10 now since it's actually supported and less effort to
  build (3.9 isn't recursed into anymore).
* sphinx doesn't build with these overrides, so patch it out entirely
  (i.e. drop `sphinxHook` where it's causing problems).
* backport a few jinja2 fixes for python 3.10 that were fixed in later
  versions, but break because this env is stuck to 2.11.
2023-02-06 20:28:26 +01:00
Anderson Torres
f7e045e149
Merge pull request #209192 from lucasew/cockpit
cockpit: init at 284
2023-02-06 16:02:27 -03:00
paumr
9d4fdb9685 nixos/roundcube: fixed nginx configuration
the changes are required for oauth setups,
and are based on:
https://github.com/roundcube/roundcubemail/issues/8191#issuecomment-919850328
2023-02-06 18:11:42 +01:00
Maximilian Bosch
f6c8d04d11
nixos/privacyidea: fix db uri
Fixes db migration on 3.8. See also https://github.com/privacyidea/privacyidea/issues/3447
2023-02-06 17:29:47 +01:00
Nick Cao
701390c82b
Merge pull request #214809 from drupol/fix/update-pihole-exporter
fix: `pihole-exporter` NixOS module
2023-02-06 18:37:11 +08:00
Pol Dellaiera
4e7f20ade9 nixos/prometheus-pihole-exporter: update configuration options
The `interval` configuration option doesn't exist and has been removed.
The `timeout` configuration option has been added.
2023-02-06 11:35:51 +01:00
Robert Obryk
0a6dd02620 nixos/firefox-syncserver: enable recommendedProxySettings
The syncserver requires a Host header identical to the one provided by
the client.
2023-02-05 23:47:19 +01:00
Malte Voos
3449f83618 maintainers/malvo: update information 2023-02-05 15:05:51 +01:00
Morgan Jones
e99f342f11 nixos/nebula: harden systemd unit 2023-02-04 16:24:45 -08:00
Morgan Jones
9d649fd78c nixos/nebula: add tests for relays; clean up nebula passthru test 2023-02-04 16:24:45 -08:00
Morgan Jones
90581c977f nixos/nebula: don't run as root; support relays 2023-02-04 16:24:45 -08:00
Anderson Torres
f70ca07efd
Merge pull request #199881 from Yarny0/fix-plasma
nixos/plasma: leave `displayManager.setupCommands` alone
2023-02-04 10:34:13 -03:00
Elliot
e78f2115bf
v2raya: v2rayA should start after nftables 2023-02-03 10:22:23 +08:00
Nick Cao
8e73b25e77
Merge pull request #214199 from TheBenCollins/patch-1
Fix mistake in command execution parameter
2023-02-03 09:06:39 +08:00
lucasew
c0d9f21f50 nixos/cockpit: init
Signed-off-by: lucasew <lucas59356@gmail.com>
2023-02-02 14:47:46 -03:00
Bobby Rong
6d5025d631
Merge pull request #213561 from bobby285271/fix/cinnamon
cinnamon.cinnamon-common: various changes
2023-02-02 23:47:04 +08:00
Ben Collins
dc9fc99c53
Fix mistake in command execution parameter
Invoking cadvisor sent the command line parameter `-storage_driver_user` twice, once passing `cfg.storageDriverHost`. Fix the typo and pass the host config option to the command line parameter `-storage_driver_host`
2023-02-02 10:43:44 -05:00
Florian Klink
fbfe2907af nixos/nscd: use nsncd by default
As announced in the NixOS 22.11 release notes, 23.05 will switch NixOS
to using nsncd (a non-caching reimplementation in Rust) as NSS lookup
dispatcher, instead of the buggy and deprecated glibc-provided nscd.

If you need to switch back, set `services.nscd.enableNsncd = false`, but
please open an issue in nixpkgs so your issue can be fixed.
2023-02-02 11:07:25 +01:00
Martin Weinelt
df8007c30f
nixos/home-assistant: Update bluetooth components 2023-02-02 04:38:22 +01:00
Nick Cao
4840ca34f4
Merge pull request #213626 from jamesreprise/entries-typo
nginx: fix typo in commonHttpConfig
2023-02-02 09:12:32 +08:00
Nick Cao
099508a1e7
Merge pull request #213471 from SebTM/fix/avahi_directory
avahi-daemon: add ConfigurationDirectory to ensure avahi, avahi/services exist
2023-02-02 07:50:51 +08:00
Thomas Gerbet
34f5d8cd24
Merge pull request #213534 from drupol/add-prometheus-shelly-exporter
prometheus-shelly-exporter: init at 1.0.0
2023-02-02 00:11:56 +01:00
Sebastian Sellmeier
f531b17f7d
avahi-daemon: add ConfigurationDirectory to ensure "avahi/services" exists 2023-02-01 21:43:29 +01:00
Pol Dellaiera
9f17e032e7
prometheus-shelly-exporter: add NixOS module 2023-02-01 19:49:33 +01:00
Bernardo Meurer
5a7d6e0bcc hqplayerd: 4.33.0-96 -> 4.34.0-100 2023-02-01 12:20:09 -05:00
Martin Weinelt
a85007b253
Merge pull request #213317 from kurnevsky/throttled
throttled: fix after recent update
2023-02-01 01:37:20 +00:00
Sandro
8b598ff3d6
Merge pull request #199731 from Luflosi/kubo-idempotence 2023-01-31 22:12:49 +01:00
Sandro
600adcfdcc
Merge pull request #187994 from Izorkin/update-nginx-gzip 2023-01-31 20:41:59 +01:00
Izorkin
59dbe319ce nixos/gitea: update SystemCallFilter 2023-01-31 10:08:32 -06:00
Izorkin
48ecda0962 nixos/chrony: disable PrivateDevices setting 2023-01-31 10:08:32 -06:00
Martin Weinelt
e60ddddbbb
Merge pull request #213489 from mweinelt/paperless-update
paperless-ngx: 1.11.3 -> 1.12.2
2023-01-31 15:36:45 +00:00
Jörg Thalheim
badb11b99f
Merge pull request #212153 from Mic92/rtorrent
nixos/rtorrent: make directory permissions configurable
2023-01-31 14:03:10 +00:00
Weijia Wang
5f83b5d199
Merge pull request #208801 from LeSuisse/multipath-tools-0.9.4
multipath-tools: 0.9.3 -> 0.9.4
2023-01-31 14:57:49 +01:00
Erik Arvstedt
a7d112b30a
nixos/paperless: Reindex documents after updating to 1.12.x
This causes a reindex of all documents to allow for comments made before
1.12.x to be searchable.

Also change the format of the version file to just include the version,
not the whole store path.
This simplifies version comparisons and causes migrations to run only
when the version has changed.

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2023-01-31 14:43:36 +01:00
Bobby Rong
fa9ad6e624
nixos/cinnamon: don't install evince
On Linux Mint this is a symbolic link of xreader, we don't need
two PDF readers that does the same thing.
2023-01-31 21:28:13 +08:00
Bobby Rong
bdc6404b0f
cinnamon.cinnamon-common: unbreak calendar-server
Reported in issue 213728. With this change you can see
list of your EDS events in your calendar applet.
2023-01-31 21:28:13 +08:00
Nick Cao
db77921d65
Merge pull request #205118 from SharzyL/fix-openconnect-protocol
nixos/openconnect: support alternative protocol
2023-01-31 19:53:53 +08:00
Vladimír Čunát
e4957a85c9
Merge #211923: staging-next 2023-01-21 2023-01-31 09:42:28 +01:00
Peter Hoeg
9abbbc5979 nixos/plasma5: add tool needed for kinfocenter 2023-01-31 14:46:06 +08:00
github-actions[bot]
dd1ff149da
Merge master into staging-next 2023-01-31 00:02:31 +00:00
Izorkin
d178a1d7a1
nixos/nginx: update recommended brotli settings 2023-01-30 23:13:12 +03:00
Izorkin
ee7e096c48
nixos/nginx: update recommended gzip settings 2023-01-30 23:03:01 +03:00
Sandro Jäckel
2d3efd3301
nixos/nginx: clear clients Connection headers 2023-01-30 20:25:22 +01:00
James Williams
18ab2268cd
fix: typo (enries -> entries) 2023-01-30 19:08:30 +00:00
pennae
5b6dcece88
Merge pull request #212684 from pennae/nixos-render-docs
nixos-render-docs: init, use for some manual rendering to docbook
2023-01-30 19:26:07 +01:00
github-actions[bot]
872d17dee8
Merge master into staging-next 2023-01-30 18:01:30 +00:00
K900
2c257a212e
Merge pull request #213509 from K900/accept-my-fate
treewide: add myself as maintainer to all the Pipewire stuff
2023-01-30 20:05:49 +03:00
Michele Guerini Rocco
72c6c848ee
Merge pull request #212685 from rnhmjoj/pr-connman
nixos/wireless: fix failure on missing config file
2023-01-30 13:32:58 +01:00
github-actions[bot]
1a06f52c21
Merge master into staging-next 2023-01-30 12:01:22 +00:00
Sandro
d26c778ade
Merge pull request #153127 from eyJhb/user-uids-fix
nixos/users+nixos/lightdm: fixed users starting at 1000, and system users below 1000
2023-01-30 11:32:10 +01:00
Nick Cao
445d1dc7b0
Merge pull request #213483 from lovesegfault/fix-roon-bridge
nixos/roon-bridge: fix exec name
2023-01-30 14:25:25 +08:00
K900
ffaae97867 nixos/pipewire: add myself as maintainer 2023-01-30 09:09:47 +03:00
Bernardo Meurer
259cc7903c
nixos/roon-bridge: fix exec name 2023-01-29 19:57:59 -05:00
github-actions[bot]
2019d6632b
Merge master into staging-next 2023-01-29 12:01:20 +00:00
Florian
b9e6189341
Octoprint vcgencmd patch (#213201)
* octoprint: add tmpfile.d rule for read-access to /dev/vchiq for vcgencmd

fixes #210629

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>

* Update pkgs/applications/misc/octoprint/default.nix

---------

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
Co-authored-by: Nick Cao <nickcao@nichi.co>
2023-01-29 16:11:48 +08:00
Evgeny Kurnevsky
8542aa185d
throttled: fix after recent update 2023-01-29 10:25:08 +03:00
K900
de6e502f5e pipewire: 0.3.64 -> 0.3.65 2023-01-29 10:11:12 +03:00
github-actions[bot]
b460ba1998
Merge master into staging-next 2023-01-28 12:01:10 +00:00
Colin Arnott
64f3a304db
nixos/wordpress: ensure default sites includes a theme 2023-01-28 10:31:56 +00:00
pennae
0a6e6cf7e6 nixos/manual: render module chapters with nixos-render-docs
this converts meta.doc into an md pointer, not an xml pointer. since we
no longer need xml for manual chapters we can also remove support for
manual chapters from md-to-db.sh

since pandoc converts smart quotes to docbook quote elements and our
nixos-render-docs does not we lose this distinction in the rendered
output. that's probably not that bad, our stylesheet didn't make use of
this anyway (and pre-23.05 versions of the chapters didn't use quote
elements either).

also updates the nixpkgs manual to clarify that option docs support all
extensions (although it doesn't support headings at all, so heading
anchors don't work by extension).
2023-01-27 20:07:34 +01:00
Jonas Heinrich
748c2b416c
nixos/wordpress: fix minor syntax error 2023-01-27 16:35:46 +01:00
Colin Arnott
66e0e5ad74
nixos/wordpress: plugins and themes as attrs
In an effort to better encode version strings and use descriptive pnames
that do not conflict with top level pkgs, we currently use
wordpress-${type}-${pname} for pname. This is good for the nix store,
but when we synthesize the wordpress derivation in our module, we reuse
this pname for the output directory.

Internally wordpress can handle this fine, since plugins must register
via php, not directory. Unfortunately, many plugins like civicrm and
wpforms-lite are designed to rely upon the name of their install
directory for homing or discovery.

As such, we should follow both the upstream convention and
services.nextcloud.extraApps and use an attribute set for these options.
This allows us to not have to deal with the implementation details of
plugins and themes, which differ from official and third party, but also
give users the option to override the install location. The only issue
is that it breaks the current api.
2023-01-27 15:24:19 +00:00
Vladimír Čunát
8a77ed60ac
Merge branch 'master' into staging-next 2023-01-27 09:36:55 +01:00
Jan Tojnar
42930c79dd nixos/fwupd: Upgrade ESP path config key
This setting was renamed and moved to the main config file in fwupd 1.8.5:
5d38e0aeea

Without this patch, fwupd tries to migrate the config and crashes when it meets the immutable:

    FuEngine             migrating OverrideESPMountPoint=/boot to EspLocation
    Failed to load daemon: failed to load engine: Failed to create file ?/etc/fwupd/daemon.conf.6HZBZ1?: Read-only file system

The setting was first introduced to the module in 08547ff642 to override the store paths set during build.5d38e0aeea
2023-01-27 00:54:17 +01:00