pennae
af0f3944bd
Merge pull request #163009 from scvalex/nbd-service
...
nbd: add nbd service and test
2022-03-11 01:02:10 +00:00
Martin Weinelt
76721f5e5e
Merge pull request #159986 from NukaDuka/pve_exporter
2022-03-10 22:41:45 +01:00
Martin Weinelt
44c88e44c9
Merge pull request #162992 from mweinelt/minidlna
2022-03-10 22:34:42 +01:00
Giulio De Pasquale
81781c338d
Jellyfin: Disable ProtectClock to allow NVENC, NVDEC acceleration
2022-03-10 00:19:57 +00:00
Evgeny Kurnevsky
d94be44526
tox-node: fix config
2022-03-09 23:27:34 +03:00
Giulio De Pasquale
3b944f4c0c
Jellyfin: Fix NVENC, NVDEC usage by allowing AF_UNIX
...
Fix NVENC, NVDEC usage when transcoding with hardware capabilities
2022-03-09 19:44:06 +00:00
Lassulus
155c02837b
Merge pull request #163383 from Lassulus/tor_newlines
...
nixos/tor: admit newlines in secret key
2022-03-09 19:19:39 +01:00
davidak
f02094df72
Merge pull request #161837 from bobby285271/appstream
...
appstream: 0.14.4 → 0.15.2
2022-03-09 17:29:57 +01:00
pennae
06c57317c2
Merge pull request #146653 from DarkDNA/nixos/fix-systemd-exporter/extraFlags
...
nixos/prometheus/systemd: Implement the extraFlags config option.
2022-03-09 16:12:32 +00:00
Florian Klink
788abdba4b
nixos/doc: update rl-2111 w.r.t. iptables-nft migration
...
Follow-up on https://github.com/NixOS/nixpkgs/pull/161426 .
Explain why having legacy iptables rules installed can lead to confusing
firewall behaviour, and provide some guidance on how to fix this.
2022-03-09 15:30:36 +01:00
lassulus
236a731da0
nixos/tor: admit newlines in secret key
2022-03-09 15:11:01 +01:00
Alexandru Scvortov
252f20aaa2
nbd: add programs.nbd, services.nbd, and test
...
Changes:
nbd: Update nixos/modules/services/networking/nbd.nix
Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>
nbd: Update nixos/modules/services/networking/nbd.nix
Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>
nbd: Update nixos/tests/nbd.nix
Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>
nbd: generalize options in nbd service
nbd: harden service
nbd: Update nixos/modules/services/networking/nbd.nix
Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>
nbd: Update nixos/modules/services/networking/nbd.nix
Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>
nbd: refactor code a bit and BindPaths automatically
2022-03-09 12:00:47 +00:00
Peter Hoeg
d44916d12f
nixos/activation: allowed quoted values in /etc/os-release
2022-03-09 17:07:48 +08:00
Bernardo Meurer
e3a73aed43
Merge pull request #163255 from NickCao/nix
...
nixVersions.stable: 2.6.1 -> 2.7.0
2022-03-08 10:22:51 -08:00
Nick Cao
3c09fec700
nix-fallback-paths.nix: Update to 2.7.0
2022-03-08 22:40:16 +08:00
Sandro
a879922e62
Merge pull request #163208 from Izorkin/fix-modsecurity-nginx
2022-03-08 13:11:42 +01:00
Sandro
e9183df241
Merge pull request #157923 from tim-tx/update/dendrite-0.6.0
2022-03-08 12:51:04 +01:00
Sandro
1a0b804799
Merge pull request #162866 from euank/k3s-unified-cgroups
2022-03-08 12:39:37 +01:00
Sandro
0ffade9012
Merge pull request #162214 from ncfavier/redis-bind-localhost
2022-03-08 12:38:39 +01:00
Izorkin
b672e4dd2c
nginxModules: add option disableIPC
...
The disableIPC option is required to checking enabled nginxModules
and disable the SystemCallFilter IPC filter.
2022-03-08 14:37:11 +03:00
Gaute Ravndal
fe6f628343
nixos/amuled: fix package reference in service definition
...
The amuleDaemon package was renamed to kebab-case in 81ef57d6
.
2022-03-08 12:14:25 +01:00
Artturi
5cd34745f0
Merge pull request #161701 from RyanGibb/zsh-autosuggest-strategy-array
2022-03-08 12:01:07 +02:00
Kim Lindberger
b71a8e2383
Merge pull request #162095 from midchildan/fix/keycloak-mysql
...
nixos/keycloak: fix database provisioning issues
2022-03-07 20:13:01 +01:00
Timo Kaufmann
94ea3a8899
Merge pull request #160777 from LunNova/improve-input-remapper-module
...
nixos/input-remapper: Fix missing [], add more options, add test
2022-03-07 18:51:08 +01:00
Maciej Krüger
75ea3ea9b8
Merge pull request #157438 from sbruder/nitter-package-option
2022-03-07 18:50:27 +01:00
Luna Nova
0643620420
nixos/input-remapper: document pkexec workaround in test
2022-03-07 08:39:15 -08:00
Jos van Bakel
daab8fb3af
nixos/nats: fix test
2022-03-07 17:36:21 +01:00
Luna Nova
865e0df2fc
nixos/input-remapper: add nixos test for input-remapper
2022-03-07 08:31:40 -08:00
Luna Nova
d8cb494765
nixos/input-remapper: Fix missing [] for package, add enableUdevRules and serviceWantedBy options, add meta.maintainers
2022-03-07 08:31:40 -08:00
Ryan Gibb
34b5dd453b
nixos/zsh-autosuggestions: ZSH_AUTOSUGGEST_STRATEGY array
...
zsh-autosuggestions supports having fallback strategies expressed
through the ZSH_AUTOSUGGEST_STRATEGY array. For example,
`ZSH_AUTOSUGGEST_STRATEGY=(history completion)`. We should also support
this.
2022-03-07 16:29:00 +00:00
Sandro
652aa6df2c
Merge pull request #158015 from j0hax/kclockd-integration
2022-03-07 17:21:08 +01:00
Robert Scott
97572a798c
nixosTests.minidlna: fix by performing requests by IP
...
a little ugly, but minidlna now checks requests Host: header and
only accepts requests using an IPv4 address to avoid DNS-rebinding
attacks.
2022-03-06 13:08:19 +00:00
Euan Kemp
e6d1c597f1
nixos/k3s: use the systemd driver for docker + unified cgroups
...
This is necessary for it to work at all. The single-node-docker test
will fail without this change.
Also add a release note for it.
2022-03-05 11:30:53 -08:00
tim-tx
5a6b36e498
dendrite: 0.5.1 -> 0.6.5
2022-03-05 11:41:31 -05:00
Martin Weinelt
5556fc8f8f
Merge pull request #162407 from mweinelt/zigbee2mqtt
2022-03-05 15:33:57 +01:00
piegames
be4a0e6e40
Merge pull request #158605 from mweinelt/synapse-rfc42
...
nixos/matrix-synapse: migrate to rfc42 settings and formatter
2022-03-05 15:23:52 +01:00
Alexandru Scvortov
f386c42a48
nixos/doc: improve wording in "Options Types" and "Option Declarations"
2022-03-05 13:51:37 +00:00
piegames
cd7e516b26
Merge pull request #156858 : nixos/polkit: don't enable by default
2022-03-05 14:48:35 +01:00
Martin Weinelt
8a95d9fede
nixos/flatpak: enable polkit
...
via https://github.com/NixOS/nixpkgs/pull/156858#issuecomment-1022254342
2022-03-05 13:57:30 +01:00
Johannes Arnold
e21874098d
nixos/kclock: integrate with dbus
2022-03-05 12:38:36 +01:00
ngerstle
8aaa0699db
k3s: enable enableUnifiedCgroupHierarchy
2022-03-05 00:18:17 -08:00
Sandro
13c9be5066
Merge pull request #160482 from jansol/pipewire
2022-03-05 03:08:25 +01:00
Martin Weinelt
cf805d3b9e
Merge pull request #162529 from mweinelt/home-assistant
2022-03-05 02:58:19 +01:00
Martin Weinelt
9c465fc4e6
nixos/tests/home-assistant: drop mqtt tests
...
With Home Assistant 2022.3.0 the MQTT configuration cannot be done
declaratively anymore, so this test scenario has been rendered moot.
2022-03-05 02:06:50 +01:00
Martin Weinelt
f799a02bca
nixos/synapse: move into matrix category
2022-03-04 23:57:35 +01:00
Martin Weinelt
a483264931
nixos/matrix-synapse: fix registerNewMatrixUser script
2022-03-04 23:57:34 +01:00
Martin Weinelt
625ba6b0fa
nixos/doc/2205: explain matrix-synapse rfc42 migration
2022-03-04 23:57:33 +01:00
Martin Weinelt
550fc51d7b
nixos/tests/pantalaimon: use synapse setting option
2022-03-04 23:57:32 +01:00
Martin Weinelt
88ddbee02e
nixos/tests/mjolnir: use synapse setting option
2022-03-04 23:57:31 +01:00
Martin Weinelt
f89769055b
nixos/tests/matrix-appservice-irc: use synapse settings option
2022-03-04 23:57:31 +01:00
Martin Weinelt
f8fff1c1a6
nixos/tests/matrix-synapse: use settings option
2022-03-04 23:57:30 +01:00
Martin Weinelt
d918011885
nixos/matrix-synapse: update manual with settings option
2022-03-04 23:57:29 +01:00
Martin Weinelt
f7286992d2
nixos/matrix-synapse: migrate to rfc42 settings and formatter
2022-03-04 23:57:28 +01:00
Pascal Bach
b5fa1aa46f
Merge pull request #162496 from Baughn/master
...
pam: Fix google-authenticator reference
2022-03-04 17:18:17 +01:00
Yaya
38246ed194
nixos/snowflake-proxy: init
...
This commit introduces snowflake-proxy [1], a system to circumvent internet
censorship.
[1] https://snowflake.torproject.org/
2022-03-04 08:41:38 -06:00
Naïm Favier
2e46cc1f00
nixos/earlyoom: remove useKernelOOMKiller
...
This option is deprecated and ignored by earlyoom since 1.2.
2022-03-04 13:04:24 +00:00
Janne Heß
803f7d4af5
Merge pull request #161838 from helsinki-systems/feat/stc-less-socket-restarts
...
nixos/switch-to-configuration: Document and test handling of socket-activated services
2022-03-04 09:32:55 +01:00
Jonas Heinrich
9a30f53ffe
nixos/firejail: Fix order of extrsArgs before profile wrappedBinaries option
2022-03-03 21:35:37 -05:00
Peter Hoeg
bae181d3f0
nixos/os-release: generate from attrset
2022-03-04 09:36:40 +08:00
Janne Heß
f6ad15fd8c
nixos/switchTest: Make checks more precise
2022-03-03 20:56:37 +01:00
Janne Heß
1def557525
nixos/switch-to-configuration: Document and test socket-activated services
2022-03-03 20:49:20 +01:00
Robert Hensing
1cf9650148
Merge pull request #162612 from hercules-ci/update-nixopsUnstable
...
nixopsUnstable: 2.0.0-pre (2021-12-01) -> 2.0.0-pre (2022-02-21)
2022-03-03 16:14:19 +01:00
Sandro
c5ea50c4ec
Merge pull request #161401 from yurrriq/kops-1.22.4
2022-03-03 14:28:03 +01:00
Robert Hensing
d2c3410efd
nixopsUnstable -> nixops_unstable
...
Conform to https://nixos.org/manual/nixpkgs/unstable/#sec-package-naming
2022-03-03 12:50:15 +01:00
Jörg Thalheim
d34f7085a9
Merge pull request #162582 from JJJollyjim/cntr-test
...
nixos/tests: fix flaky cntr test
2022-03-03 10:40:23 +00:00
Jamie McClymont
126ce87b0c
nixos/tests: fix flaky cntr test
...
The cntr sometimes hangs until the 10-hour hydra limit. This behaviour
appears to be an edge-case related to the type of TTY in which the cntr
command runs during test execution. We can work around this by running
the command as a background job.
I additionally added a wait_for_open_port to fix nondeterministic test
failures I observed after fixing the hanging issue.
2022-03-03 19:15:10 +13:00
Jonas Heinrich
764670261a
nixos/opensnitch: Add options to configure daemon
2022-03-02 18:38:56 -05:00
zowoq
6a28e4887c
nixos/release: disable nfs3.simple
...
follow up from 5682853027
2022-03-03 06:34:59 +10:00
Renaud
671a068a01
Remove F-PROT package and service module (EoL) ( #160372 )
2022-03-02 21:51:47 +02:00
aszlig
7286be7e81
nixos/systemd-confinement: Allow shipped unit file
...
In issue #157787 @martined wrote:
Trying to use confinement on packages providing their systemd units
with systemd.packages, for example mpd, fails with the following
error:
system-units> ln: failed to create symbolic link
'/nix/store/...-system-units/mpd.service': File exists
This is because systemd-confinement and mpd both provide a mpd.service
file through systemd.packages. (mpd got updated that way recently to
use upstream's service file)
To address this, we now place the unit file containing the bind-mounted
paths of the Nix closure into a drop-in directory instead of using the
name of a unit file directly.
This does come with the implication that the options set in the drop-in
directory won't apply if the main unit file is missing. In practice
however this should not happen for two reasons:
* The systemd-confinement module already sets additional options via
systemd.services and thus we should get a main unit file
* In the unlikely event that we don't get a main unit file regardless
of the previous point, the unit would be a no-op even if the options
of the drop-in directory would apply
Another thing to consider is the order in which those options are
merged, since systemd loads the files from the drop-in directory in
alphabetical order. So given that we have confinement.conf and
overrides.conf, the confinement options are loaded before the NixOS
overrides.
Since we're only setting the BindReadOnlyPaths option, the order isn't
that important since all those paths are merged anyway and we still
don't lose the ability to reset the option since overrides.conf comes
afterwards.
Fixes: https://github.com/NixOS/nixpkgs/issues/157787
Signed-off-by: aszlig <aszlig@nix.build>
2022-03-02 11:42:44 -08:00
Kartik Gokte
6a0b420d94
nixos/prometheus-pve-exporter: init at 2.2.2
2022-03-02 23:59:33 +05:30
Silvan Mosberger
c1dfec2be6
Merge pull request #149689 from Infinisil/types-type
...
Introduce `types.optionType` and use it for `freeformType`
2022-03-02 18:29:44 +01:00
Martin Weinelt
d78f8c588d
nixos/udisks2: enable polkit
2022-03-02 17:38:36 +01:00
Kevin Cox
79862ae905
Merge pull request #161008 from rhysmdnz/xone
...
xone: init package and module
2022-03-02 11:26:51 -05:00
Svein Ove Aas
cf0f406ed6
pam: Fix google-authenticator reference
2022-03-02 15:18:58 +00:00
Bobby Rong
b3d4c1d48f
nixosTests.installed-tests.appstream-qt: init
2022-03-02 11:28:29 +08:00
Bobby Rong
c942cd7b2e
nixosTests.installed-tests.appstream: init
2022-03-02 11:28:29 +08:00
Silvan Mosberger
5cbeddfde4
lib.types: Introduce types.optionType
...
This type correctly merges multiple option types together while also
annotating them with file information. In a future commit this will be
used for `_module.freeformType`
2022-03-01 19:31:00 +01:00
Vladimír Čunát
18bd82edcc
nixos/release tested job: drop nano
test
...
It doesn't exist since PR #161707 (commit 7ef8df8767
).
2022-03-01 19:28:31 +01:00
Martin Weinelt
accca0bd6e
nixos/zigbee2mqtt: move into home-automation category
2022-03-01 19:19:31 +01:00
Rok Garbas
43a765422f
Merge pull request #158613 from ConnorBaker/master
...
hadoop: add aarch64 support
2022-03-01 15:59:08 +01:00
Maximilian Bosch
199d4224e9
Merge pull request #155207 from rapenne-s/freshclam_when_internet
...
clamav: start freshclan after network-online target
2022-03-01 11:14:30 +01:00
ajs124
8289e6478b
vsftpd: enable seccomp ( #158974 )
...
* vsftpd: enable seccomp
* nixos/tests/vsftpd: add basic test
* vsftpd: add test to passthru
2022-03-01 11:03:47 +08:00
Solene Rapenne
317ca6bb4e
clamav: remove freshclam service dependency
2022-02-28 22:51:07 +01:00
Maximilian Bosch
5cee9c9ef2
prometheus-dmarc-exporter: init at 0.5.1
2022-02-28 16:50:01 +01:00
Naïm Favier
6e4f5f9aee
nixos/redis: bind on localhost by default
2022-02-28 13:37:47 +01:00
Minijackson
6a96ddb675
pkgs-lib: Implement settings format for Elixir
2022-02-28 07:09:10 -05:00
Kim Lindberger
ab7314cb32
Merge pull request #161507 from talyz/genJqSecretsReplacementSnippet-error-handling
...
genJqSecretsReplacementSnippet: Fix error handling
2022-02-28 11:37:12 +01:00
Janne Heß
d32ba3f4b0
Merge pull request #161929 from martinetd/switchTest
...
logrotate: do not enable logrotate.service itself
2022-02-28 10:19:25 +01:00
Rok Garbas
993c35991b
Merge pull request #157693 from Radvendii/zammad
...
zammad: init at 5.0.2
2022-02-28 00:57:11 +01:00
zowoq
5682853027
nixos/release: disable nfs3.simple
2022-02-27 15:04:37 -08:00
zowoq
177281ad00
nixos/amazon-image: use 5_10 kernel and add assert
2022-02-27 15:04:37 -08:00
Janne Heß
5ec0477dfc
Merge pull request #161059 from hercules-ci/fix-nix-daemon-socket-availability
...
nixos/nix-daemon: Ensure continued availability of daemon socket
2022-02-27 17:57:57 +01:00
midchildan
0334498c74
nixosTests.keycloak: replace libtidy with html-tidy
...
Follow-up of cc700ad55b
.
2022-02-28 00:54:27 +09:00
midchildan
dc5bd4b375
nixos/keycloak: fix database provisioning issues
...
This fixes the following issues with the database provisioning script
included in the services.keycloak module:
- It lacked permission to access the DB password file specified in the
module option 'services.keycloak.database.passwordFile'.
- It prevented Keycloak from starting after the second time if the user
chose MySQL for the database.
2022-02-28 00:54:26 +09:00
Jörg Thalheim
c219935f5e
Merge pull request #162056 from NickCao/bird-reload
...
nixos/bird: run service as non-root user, add test for reload
2022-02-27 09:48:04 +00:00
Nick Cao
6e389e6367
nixos/bird: run service as non-root user, add test for reload
2022-02-27 16:19:22 +08:00
Rémi NICOLE
17df62a937
shiori: fix NixOS test ( #161969 )
...
* nixos/tests/shiori: fix auth JSON
* shiori: link NixOS test in passthru.tests
2022-02-27 08:38:55 +02:00
Dominique Martinet
0dadec45d8
logrotate/systemd: add 'minsize = 1M' to wtmp/btmp rotation
...
align with upstream logrotate which added the minsize rule at some point.
This avoids needlessly rotating the files too often as brought up in
https://github.com/NixOS/nixpkgs/pull/159187#issuecomment-1052426774
2022-02-27 07:20:26 +09:00
Martin Weinelt
308403c329
Merge pull request #161663 from felixsinger/update/pkgs/mumble
2022-02-26 22:38:26 +01:00