Commit Graph

16461 Commits

Author SHA1 Message Date
Ryan Lahfa
2a0aaa7e8f
Merge pull request #245413 from oddlama/fix-hostapd-mac-allow 2023-07-28 19:19:02 +02:00
Pol Dellaiera
1e37e277ca
Merge pull request #234652 from Valodim/cage-extra-environment
nixos/cage: add environment config
2023-07-28 18:57:19 +02:00
ajs124
413d9d3864 nixos/dhcp(46): remove
package reached its EOL on 2022-10-04
see https://www.isc.org/blogs/isc-dhcp-eol/ for details
2023-07-28 16:35:40 +02:00
Martin Weinelt
de5ca86149
Merge pull request #245759 from mweinelt/frigate-recordings
nixos/frigate: fix recording and serving of clips/recordings
2023-07-28 12:02:29 +02:00
Eric Wolf
318d8cc4c5 nixos/lemmy: limit impurity by secrets
Split `services.lemmy.secretFile` into
multiple options to allow only secrets.
2023-07-28 07:49:27 +00:00
Martin Weinelt
3086313e4c
nixos/frigate: fix recording and serving of clips/recordings
Frigate does string prefix matching for paths, which isn't exactly
compatible with dynamically provisioned directories of systemd, where
/var/cache/frigate is actually a symlink to /var/cache/private/frigate.

Because we are unlikely to get this fixed upstream, this is one of the
reason we should stop using DynamicUser= here.

The other being, that nginx needs to be able to serve clips and
recordings from both the CacheDirectory and the StateDirectory, and
nginx being a member on a group that may only exist after it was started
up doesn't work reliably.

This is also why we relax the umask to allow g+r/g+rx for newly created
files. Existing installs may need the following permissions fix to get
things going.

```
find /var/lib/frigate/recordings -type d -exec chmod g+rx {} \;
find /var/lib/frigate/recordings -type f -exec chmod g+r {} \;
find /var/cache/frigate -type f -exec chmod g+r {} \;
```

Co-Authored-By: Daniel Barlow <dan@telent.net>
2023-07-27 18:36:25 +02:00
Matthieu Coudron
6774f3fc04 services.postgresql: fix example 2023-07-27 11:35:55 -05:00
Mayeu
77fb833411 kubo: 0.20.0 -> 0.21.0 2023-07-27 16:59:45 +02:00
oddlama
cbdaab0f17
nixos/nginx: remove unnecessary acme locations to allow double proxied setups 2023-07-27 15:30:38 +02:00
Bobby Rong
69a7cd6718
Merge pull request #245481 from bobby285271/upd/pantheon
Pantheon updates 2023-07-26
2023-07-27 16:04:25 +08:00
Bobby Rong
497229d3c2
nixos/pantheon: Install orca
ref: ec0eb37689
2023-07-27 14:08:53 +08:00
Elias Probst
2b0545b423
nixos/paperless: update URL to docs 2023-07-26 19:02:29 +02:00
pennae
e2a43fbfb3
Merge pull request #244356 from datafoo/mosquitto-systemd-credentials
nixos/mosquitto: leverage systemd credentials
2023-07-26 18:23:06 +02:00
lewo
9a98962714
Merge pull request #245545 from nlewo/osquery-disable-database
nixos/osquery: do not use the local database for osqueryi
2023-07-26 17:58:09 +02:00
Florian Klink
7539b8f2d7
Merge pull request #244841 from flokli/networkmanager-fix-ppp-plugin
nixos/networkmanager: create pppd lock directory
2023-07-26 17:44:35 +02:00
Antoine Eiche
8af1d49858 nixos/osquery: do not use the local database for osqueryi
Because the local database is used by the osquery deamon, running
osqueri fails with:

    IO error: While lock file: /var/lib/osquery/osquery.db/LOCK:    Resource temporarily unavailable
2023-07-26 17:22:22 +02:00
ajs124
c9cf0708f0
Merge pull request #229271 from markus-heinrich/submit/sogo
nixos/sogo: fix nginx proxy_buffer config
2023-07-26 12:39:51 +02:00
Nick Cao
76025b299f
Merge pull request #245454 from 2xsaiko/outgoing/emacs-env
nixos/emacs: don't set EDITOR to store path
2023-07-25 19:19:56 -06:00
Marco Rebhan
b72044c113
nixos/emacs: don't set EDITOR to store path
Use emacseditor in PATH instead of using the absolute path to prevent
old path from sticking around when switching configurations.
2023-07-26 00:52:03 +02:00
oddlama
0ac2ba763f
nixos/hostapd: fix regression after refactoring to RFC42.
Switching from submodule notation from ({name, ...}: {}) to (submob: {}) seems to require a different accessing scheme.
2023-07-25 18:40:51 +02:00
Martin Weinelt
18733782ad
nixos/conduit: improve state directory permissions
Allow only the conduit user to access its database files, and make sure
to create all new files with 0600 (o+rw).
2023-07-25 16:54:39 +02:00
Aaron Andersen
8d85dcea22
Merge pull request #215247 from evan-goode/evdevremapkeys
nixos/evdevremapkeys: init
2023-07-25 08:45:54 -04:00
Martin Weinelt
6847465f6f
Merge pull request #242275 from Atemu/nixos/paperless-manage-toShellVars
nixos/paperless: use toShellVars for paperless-manage
2023-07-25 12:26:32 +02:00
asymmetric
46df012d2a
Merge pull request #244332 from SuperSandro2000/fonts-fonts
nixos/fonts: rename fonts.fonts option to fonts.packages, other cleanups
2023-07-25 09:49:25 +02:00
Bobby Rong
34d40c6f20
Merge pull request #245105 from thoughtfull-systems/xfce-exclude-packages
nixos/xfce: add environment.xfce.excludePackages option
2023-07-25 11:39:30 +08:00
Sandro Jäckel
83793ca898
nixos/fonts: rename fonts.enableDefaultFonts to fonts.enableDefaultPackages
to better fit the renamed fonts.packages
2023-07-25 00:55:25 +02:00
Gianmarco Gargiulo
b34a51f5a7
nixos/gogs: fix deprecations for 0.13.0
Changed APP_NAME to BRAND_NAME, DB_TYPE to TYPE and PASSWD to PASSWORD.
2023-07-24 19:41:52 +00:00
Sandro Jäckel
b0c67b4b6e
treewide: rename fonts.fonts to fonts.packages 2023-07-24 17:34:39 +02:00
Paul Stadig
cb2f531332 nixos/xfce: allow exclusion of xfce4-notifyd
Use `environment.xfce.excludePackages` with `systemd.packages` so `xfce4-notifyd` can be excluded
from installation.
2023-07-24 07:55:10 -04:00
datafoo
533ff8546b nixos/mosquitto: leverage systemd credentials
Use systemd credentials for all variations of user passwords.
Password files do not need special permissions anymore.
2023-07-24 11:37:30 +02:00
Lassulus
ceaab39b40
Merge pull request #230196 from doronbehar/nixos/syncthing
nixos/syncthing: Use API to merge / override configurations
2023-07-24 08:38:50 +02:00
Stzx
e196c81a23
udisks2: fix conf file loading warnings 2023-07-24 11:41:50 +08:00
Pol Dellaiera
a30cc10e7f
Merge pull request #242703 from jwygoda/tailscaled-autoconnect
nixos/tailscale: add authKeyFile option
2023-07-24 04:48:42 +02:00
Sandro
9ca0bd9db3
Merge pull request #244467 from wamserma/tarsnap-add-package-option
tarsnap: add package option
2023-07-24 00:46:24 +02:00
Paul Stadig
1c5e23c405 nixos/xfce: add environment.xfce.excludePackages option
Packages in environment.xfce.excludePackages will be excluded from the default environment.

Fixes #91169
2023-07-23 17:52:41 -04:00
Emily
2d83cbda63
Merge pull request #244463 from mattmelling/cloudlog-pin-php8
cloudlog: pin php version
2023-07-23 23:09:50 +02:00
Sandro
1d1fe1fe14
Merge pull request #245063 from SuperSandro2000/remove-maintainer
treewide: reduce packages I maintainer
2023-07-23 21:28:26 +02:00
Sandro Jäckel
cf6c96533b
treewide: reduce packages I maintainer 2023-07-23 19:30:22 +02:00
Doron Behar
047fa8dbdf nixos/syncthing: Use API to merge / override configurations
If one sets either of `override{Device,folder}s` to false, the jq `*`
operator doesn't merge well the devices and folders, creating duplicate
IDs for folders as observed in #230146. This PR makes the script iterate
via Nix / Bash loop the devices and folders IDs and merges the keys
using upstream's `curl -X POST` support for single objects.

Hence this commit fixes #230146.
2023-07-23 18:22:33 +03:00
Ilan Joselevich
383dc75dd7
Merge pull request #244949 from FlafyDev/fix/nix-daemon-if
nixos/nix-daemon: change regular if to mkIf
2023-07-23 16:02:33 +03:00
FlafyDev
519a71edc3 nixos/nix-daemon: change regular if to mkIf 2023-07-23 04:16:04 +03:00
Ryan Lahfa
c4ae17443e
Merge pull request #244233 from oddlama/init-typesense-bin 2023-07-22 18:47:45 +02:00
oddlama
234dd85da0
nixos/typesense: init at 0.24.1 2023-07-22 16:38:13 +02:00
Raito Bezarius
44aee34594 Revert "nixos/gitea: set service type to notify"
This reverts commit b61919e5e0.

As it breaks Forgejo who does not support this feature yet.
2023-07-22 16:12:36 +02:00
Florian Klink
02a5e9c933 nixos/networkmanager: create pppd lock directory
I digged up some 3G stick, which uses ppp to set up the connection.

It failed to spin up ppp, because ppp failed to find the directory it wants to create its lockfiles in:

```
Jul 22 16:47:49 tp ModemManager[926779]: <info>  [modem1] state changed (connected -> disconnecting)
Jul 22 16:47:49 tp ModemManager[926779]: <info>  [modem1] simple connect started...
Jul 22 16:47:49 tp ModemManager[926779]: <info>  [modem1] simple connect state (4/10): wait to get fully enabled
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] state changed (disconnecting -> registered)
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (5/10): wait after enabled
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1/bearer0] connection #11 finished: duration 1s
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (6/10): register
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (7/10): wait to get packet service state attached
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (8/10): bearer
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (9/10): connect
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] state changed (registered -> connecting)
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] state changed (connecting -> connected)
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (10/10): all done
Jul 22 16:47:50 tp pppd[1576260]: Plugin /nix/store/yqdqzz6y6agcmrfj8b6pwqhjcjyb3ypr-networkmanager-1.42.6/lib/pppd/2.5.0/nm-pppd-plugin.so loaded.
Jul 22 16:47:50 tp NetworkManager[1576260]: Plugin /nix/store/yqdqzz6y6agcmrfj8b6pwqhjcjyb3ypr-networkmanager-1.42.6/lib/pppd/2.5.0/nm-pppd-plugin.so loaded.
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: initializing
Jul 22 16:47:50 tp pppd[1576260]: pppd 2.5.0 started by root, uid 0
Jul 22 16:47:50 tp pppd[1576260]: Can't create lock file /var/run/pppd/lock/LCK..ttyUSB0: No such file or directory
Jul 22 16:47:50 tp NetworkManager[1576260]: Can't create lock file /var/run/pppd/lock/LCK..ttyUSB0: No such file or directory
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: status 2 / phase 'serial connection'
Jul 22 16:47:50 tp pppd[1576260]: Exit.
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: status 0 / phase 'dead'
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: cleaning up
```

Creating the directories via tmpfiles.d got the connection to succeed,
and might also fix other connections using PPP.
2023-07-22 17:00:17 +03:00
Felix Bühler
0a2745684e
Merge pull request #239624 from Stunkymonkey/use-optionalString-then
treewide: use optionalString instead of 'then ""'
2023-07-22 13:02:47 +02:00
1000101
f63d863fde
nixos/pgbouncer: init (#241578)
Co-authored-by: Marek Mahut <marek.mahut@gmail.com>
2023-07-22 12:49:23 +02:00
Nick Cao
0b411c1e04
Merge pull request #244750 from therishidesai/rdesai/fix-hostapd-hardening
nixos/hostapd: add AF_PACKET to RestrictAddressFamilies
2023-07-21 21:16:22 -06:00
Rishi Desai
efba841aeb nixos/hostapd: add AF_PACKET to RestrictAddressFamilies 2023-07-21 21:11:14 -05:00
rnhmjoj
c7c288fbd5
nixos/dnscrypt-wrapper: avoid using polkit 2023-07-22 02:12:31 +02:00
Lassulus
f8ad4849c3
Merge pull request #233386 from Lassulus/syncthing-fix 2023-07-22 01:02:04 +02:00
Ilan Joselevich
75a51855e3
Merge pull request #244689 from Kranzes/twingate-cp
nixos/twingate: fix cp (-n -> --update=none)
2023-07-21 23:21:53 +03:00
Maximilian Bosch
7c70396c1d
Merge pull request #242863 from emilylange/nixos/gitea-runtimedirmode
nixos/gitea: revert change to RuntimeDirectoryMode
Closes ##243340
2023-07-21 19:22:05 +02:00
Ilan Joselevich
b0db3b7c11
nixos/twingate: fix cp (-n -> --update=none) 2023-07-21 19:57:57 +03:00
Stzx
3e8f45393d
Fix package ref 2023-07-21 18:56:49 +08:00
Sandro
0bca96affc
Merge pull request #243550 from SuperSandro2000/matrix-sliding-sync-module 2023-07-21 11:39:03 +02:00
Markus S. Wamser
a936b9edec tarsnap: add package option 2023-07-21 11:37:15 +02:00
Nathan Bijnens
ffc3eb7c16 ebusd: new module 2023-07-21 18:22:46 +09:00
Maximilian Bosch
38823d15f4
Merge pull request #243883 from techknowlogick/gitea-1200
gitea: 1.19.4 -> 1.20.0
2023-07-21 09:41:07 +02:00
rnhmjoj
1f28c8defc
nixos/jool: validate the configuration
This checks the validity of both NAT64 and SIIT configurations
at build time. An error produces something like this:

    Validating Jool configuration... Error: Cannot parse '283.0.113.1' as an IPv4 address.
2023-07-21 09:08:40 +02:00
rnhmjoj
4657ff6ca7
nixos/jool: add service for setting up SIIT/NAT64 2023-07-21 09:07:54 +02:00
Maximilian Bosch
b61919e5e0
nixos/gitea: set service type to notify 2023-07-20 22:20:43 +02:00
Felix Bühler
f7bb884c13
Merge pull request #243850 from mattchrist/nixos/freshrss_auth_type
nixos/freshrss: authType option
2023-07-20 18:58:45 +02:00
Ryan Lahfa
2d0a128ac9
Merge pull request #201562 from jdbaldry/add/osquery 2023-07-20 11:06:46 +02:00
Matt Melling
3f34b65b2c
cloudlog: pin php version 2023-07-20 09:24:47 +01:00
Evan Goode
be333da51f nixos/evdevremapkeys: init
Add a service for evdevremapkeys (already packaged), a daemon for
remapping keyboard events
2023-07-19 23:06:31 -04:00
Matt Christ
c4d28ff161 nixos/freshrss: authType option
This patch adds an `authType` option to enable configuring FreshRSS's
`auth_type` parameter.
Upstream documentation for this feature is located here:
https://freshrss.github.io/FreshRSS/en/admins/09_AccessControl.html

An accompanying NixOS test is provided to confirm this feature works
as expected.
2023-07-19 19:43:55 -05:00
Sandro Jäckel
18010665ca
nixos/matrix-sliding-sync: init
Co-authored-by: Emily <55066419+emilylange@users.noreply.github.com>
2023-07-19 23:59:25 +02:00
Martin Weinelt
aadb3f3058
Merge pull request #244188 from mweinelt/engelsystem-php81
nixos/engelsystem: pin php at 8.1
2023-07-19 21:13:26 +02:00
Antoine Eiche
da65d1dd20 nixos/osquery: init 2023-07-19 16:55:29 +02:00
Sandro
dd5b7cfe1c
Merge pull request #228288 from Cynerd/bigclown 2023-07-19 15:51:25 +02:00
Sandro Jäckel
fe6304df54
nixos/nexus: use mkPackageOption, cleanup
This fixes:
trace: warning: literalExample is deprecated, use literalExpression instead, or use literalMD for a non-Nix description.
2023-07-19 13:13:28 +02:00
Karel Kočí
fd3f5471b0
nixos/mqtt2influxdb: init module 2023-07-19 09:47:04 +02:00
Karel Kočí
dd4eec64ab
nixos/bcg: init module
This is gateway that transforms BigClown wireless to MQTT.
2023-07-19 09:47:04 +02:00
Jack Connors
9bc84eba6f nixos/boinc: add boinc-headless example to package option 2023-07-18 21:47:12 +01:00
Martin Weinelt
c8a7edcee1
nixos/engelsystem: pin php at 8.1
Upstream supports php 8.0/8.1 for the 3.3.0 release. The upgrade to 8.2
caused a type mismatch in carbon.

> PHP message: Exception: Code: 0, Message: Carbon\Carbon::setLastErrors(): Argument #1 ($lastErrors) must be of type array, bool given, called in /nix/store/2prnw9qya9kaks2rwvd6fkrz0c7l5ygd-engelsystem-3.3.0/share/engelsystem/vendor/nesbot/carbon/src/Carbon/Traits/Creator.php on line 98, File: vendor/nesbot/carbon/src/Carbon/Traits/Creator.php:928
2023-07-18 18:34:58 +02:00
Martin Weinelt
1076c3ada6
nixos/matrix-synapse: Allow passing extras, discover extras from config
With this change we allow the user to configure extras, exposed as
optional-dependencies on the matrix-synapse package.

The vertical integration between package, user configuration and
deployment is a huge boon which then allows us to dynamically adapt the
python environment the service runs in, by inspecting the configuration
and autodiscovering certain used extras from config paths.
2023-07-18 17:53:27 +02:00
Sandro
cacb77fb27
Merge pull request #206273 from wucke13/master 2023-07-18 13:12:06 +02:00
Sandro
065fd18e5c
Merge pull request #240452 from NickCao/bpftune 2023-07-18 12:43:02 +02:00
Alexander Flurie
048f9a4adf fix whitespace issue 2023-07-18 00:20:46 -04:00
Mario Rodas
752b3281a4
Merge pull request #244061 from schra/fix/typo-vaultwarden
nixos/vaultwarden: Fix Markdown syntax of link
2023-07-17 20:15:58 -05:00
pennae
d0299f7fa1
Merge pull request #243570 from dotlambda/patroni-python310
nixos/patroni: use Python 3.10
2023-07-18 01:28:29 +02:00
André Schröder
9858973dad nixos/vaultwarden: Fix Markdown syntax of link
The typo was introduced in 1d41cff3dc
2023-07-17 23:41:44 +02:00
Sandro
61dfd95022
Merge pull request #236778 from awakesecurity/jsoo1/buildkite-agent-hooks
nixos/buildkite-agents: simplify service definition
2023-07-17 21:46:12 +02:00
Emily
00a7b91eac
Merge pull request #243366 from vamega/sambda-wsdd-firewall-config
nixos/samba-wsdd: add openFirewall option
2023-07-17 19:21:58 +02:00
Jarosław Wygoda
7fc0e3334e nixos/tailscale: add authKeyFile option
Auth key registers new nodes without needing to sign in via a browser

Tailscale sends status changes with systemd-notify.
https://github.com/tailscale/tailscale/blob/v1.44.0/ipn/ipnlocal/local.go#L3670
2023-07-17 18:52:07 +02:00
ppom
139259a377
slskd: init module (#233648)
* slskd: init module

* Update nixos/modules/services/web-apps/slskd.nix

* Update nixos/modules/services/web-apps/slskd.nix

* add description to slskd module options

---------

Co-authored-by: ppom <ppom@ppom.me>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-07-17 18:40:54 +02:00
Alexander Flurie
c2861bcbdf add separate configurable datadog process agent 2023-07-17 10:34:50 -04:00
Varun Madiath
d237a7318c nixos/samba-wsdd: add openFirewall option 2023-07-17 10:22:43 -04:00
Maximilian Bosch
42105b2ba3
nixos/gitea: explicitly set CHUNKED_UPLOAD_PATH to writable location
Fix for Gitea 1.20.0.

Without this being set, e.g. a `git push` (or `ssh` to `git@` in general) fails like this:

    2023/07/17 09:27:05 ...s/setting/setting.go:109:LoadCommonSettings() [F] Unable to load settings from config: unable to create chunked upload directory: /nix/store/yna9nf66wl2n9hlnhxi2g7fdgawk2kxl-gitea-1.20.0/bin/data/tmp/package-upload (mkdir /nix/store/yna9nf66wl2n9hlnhxi2g7fdgawk2kxl-gitea-1.20.0/bin/data: read-only file system)
    Connection to git.mbosch.me closed.
2023-07-17 11:49:34 +02:00
Nick Cao
b47c483bf8
nixos/bpftune: init 2023-07-17 15:59:49 +08:00
Colin
e7059632c6 nixos/trust-dns: init
Co-authored-by: Yt <happysalada@tuta.io>
2023-07-16 15:24:10 +08:00
Artturi
d1abbbd9b6
Merge pull request #242309 from Artturin/ananicyextraxadd 2023-07-16 00:43:45 +03:00
pennae
45ae0efbbc
Merge pull request #243271 from woojiq/keyd-support-multiple-configs
nixos/keyd: add support for multiple configuration in different files
2023-07-15 13:59:57 +02:00
Nick Cao
d9dd68efda
Merge pull request #243004 from baloo/baloo/keepalived/vrrp-router-id
keepalived: fixup `virtualRouterId` documentation
2023-07-15 05:36:10 -06:00
woojiq
2d3bf20086 nixos/keyd: add support for multi-file configuration
Add `keyboards` option to define different configurations for different IDs. This creates the appropriate files in `/etc/keyd` instead of just `default.conf` as before.
Add `23.11` release note entry.
Add `mkRemovedOptionModule` for the old API with a note on how to revert the old behavior.
2023-07-15 11:33:41 +03:00
Robert Schütz
c9e8e912cb nixos/patroni: use Python 3.10 2023-07-14 18:20:14 -07:00
Sandro
545f079f5e
Merge pull request #243475 from vtuan10/enable-klipper-flash
nixos/klipper: add enableKlipperFlash option
2023-07-15 02:54:47 +02:00
adisbladis
110489e12a
Merge pull request #243373 from adisbladis/pict-rs_0_4
pict-rs: 0.3.3 -> 0.4.0
2023-07-15 12:36:05 +12:00
Arthur Gautier
ee38adc8e2 keepalived: use ints.between
Signed-off-by: Arthur Gautier <baloo@superbaloo.net>
2023-07-14 20:52:48 +00:00
Lassulus
a4ffd00fb9
Merge pull request #243251 from schnusch/cgit-regex
nixos/cgit: fix \v and \f in regexEscape
2023-07-14 22:03:44 +02:00
schnusch
8980fdd9b5 nixos/cgit: fix \v and \f in regexEscape 2023-07-14 21:14:01 +02:00
Bruno BELANYI
b5f28477aa nixos/prowlarr: make use of 'lib.getExe' 2023-07-14 13:43:26 +00:00
Van Tuan Vo
917bb93078
nixos/klipper: add enableKlipperFlash option 2023-07-14 15:19:36 +02:00
Ryan Lahfa
c9e26d7d3a
Merge pull request #242036 from jnsgruk/prowlarr-update 2023-07-14 13:48:15 +02:00
Sandro
9e010edec7
Merge pull request #243102 from yu-re-ka/peering-manager-meta 2023-07-14 12:08:05 +02:00
Pol Dellaiera
641b814a44
Merge pull request #243094 from jnsgruk/homepage
homepage: init at 0.6.21
2023-07-14 09:53:26 +02:00
adisbladis
4c5afa2af4 nixos/pict-rs: Use pict-rs-0.3 for NixOS <= 23.05 2023-07-14 17:46:26 +12:00
Janik
fc7d1abf50
Merge pull request #133092 from TomatoCream/add-jvm-to-nexus 2023-07-14 01:45:19 +02:00
Your Name
9cc181f5c6 nixos/nexus: add jvm package option 2023-07-13 23:16:42 +02:00
Ryan Lahfa
7bc11802ed
Merge pull request #238777 from ORichterSec/esdm-upstream 2023-07-13 22:35:45 +02:00
Sandro
6873b5c7ee
Merge pull request #243289 from SuperSandro2000/nullmailer-group
nixos/nullmailer: allow users in the nullmailer group to send mails
2023-07-13 21:44:18 +02:00
Guillaume Girol
aaf4aa7c7e
Merge pull request #237994 from SebTM/fix/cups-xdg-missing
cups: add dependency for xdg-open
2023-07-13 18:22:46 +00:00
Sandro Jäckel
b2c1b176d9
nixos/nullmailer: allow users in the nullmailer group to send mails
In combination with https://github.com/NixOS/nixpkgs/pull/231673 this
allows hardened services to use nullmailer's sendmail.
2023-07-13 17:02:19 +02:00
Oliver Richter
9d6cd34766 esdm: init at 0.6.0
Signed-off-by: Oliver Richter <richter-oliver@gmx.net>
2023-07-13 16:08:12 +02:00
Sebastian Sellmeier
57071b60fe
cups: add xdg-open as dependency package as substitution does not work
for all desktop-envs
2023-07-13 15:37:00 +02:00
Philipp Bartsch
30ad9053ab nixos/murmur: add apparmor policy 2023-07-13 11:11:01 +02:00
Philipp Bartsch
ced170c030 nixos/miniflux: add apparmor policy
This change also extends the test to ensure that normal operations
aren't denied.
2023-07-13 11:10:39 +02:00
Jon Seager
3de6be0951
nixos/homepage-dashboard: init 2023-07-13 09:38:26 +01:00
adisbladis
c88c434c34 nixos/lemmy: Move pictrs url from pictrs_url to pictrs.url
The upstream config schema changed.
2023-07-13 15:46:30 +12:00
adisbladis
2bc5b80182 lemmy-ui: Set NODE_ENV to run server in production mode 2023-07-13 15:46:30 +12:00
Artturin
4cf8006173 nixos/ananicy: take listOf attrs instead of string 2023-07-12 20:13:03 +03:00
Lassulus
0e1fc501c6
Merge pull request #241927 from ether42/usbguard
nixos/usbguard: rename services.usbguard.implictPolicyTarget to services.usbguard.implicitPolicyTarget
2023-07-12 18:58:30 +02:00
Yureka
5934231542 nixos/peering-manager: remove global 'with lib;' 2023-07-12 18:39:55 +02:00
Yureka
041e9a8e7a nixos/peering-manager: add meta section 2023-07-12 18:39:54 +02:00
Sandro
5aa53b205e
Merge pull request #208924 from erdnaxe/nitter-network-online 2023-07-12 14:19:30 +02:00
Cabia Rangris
d857b1261c
Merge pull request #241667 from cyberus-technology/outline-0.70.0
outline: 0.69.2 -> 0.70.2
2023-07-12 14:45:40 +04:00
Rick van Schijndel
e1163b27dd
Merge pull request #242912 from chayleaf/fix-getent
treewide: update path to getent
2023-07-12 12:37:08 +02:00
Jon Seager
b853c70661
nixos/prowlarr: add package option 2023-07-12 10:19:05 +01:00
Felix Buehler
bec27fabee treewide: use lib.optional instead of 'then []' 2023-07-12 09:36:28 +01:00
Alexander Sieg
b926effb76
outline: 0.69.2 -> 0.70.2 2023-07-12 09:54:57 +02:00
Arthur Gautier
c8920fc6d9 keepalived: fixup virtualRouterId documentation
Router id 0 is an invalid option with keepalived
2023-07-12 06:12:03 +00:00
chayleaf
4d4c73ff78 treewide: update path to getent 2023-07-12 02:32:23 +07:00
Sandro
d6d6d42c74
Merge pull request #237364 from fdietze/patch-3
fix herbstluftwm session command with other desktop managers
2023-07-11 21:14:20 +02:00
emilylange
da58b13615
nixos/gitea: revert change to RuntimeDirectoryMode
As this broke most unix socket setups and there is a far better suited
`server.UNIX_SOCKET_PERMISSION` in gitea/forgejo itself.

https://docs.gitea.io/en-us/administration/config-cheat-sheet/#server-server

ref: a0311e5107
2023-07-11 17:05:45 +02:00
Sandro
eae22520b9
Merge pull request #237802 from SuperSandro2000/ceph-package-options
nixos/ceph: add options to configure package used by each component
2023-07-09 23:38:28 +02:00
Atemu
2616bb762b nixos/paperless: explain how to set JSON env vars
Co-authored-by: Christian Theune <ct@flyingcircus.io>
Co-authored-by: Erik Arvstedt <erik.arvstedt@gmail.com>
2023-07-09 19:52:06 +02:00
Artturin
1b1f25312d ananicy: unstable-2021-11-05 -> unstable-2023-03-21
type's were renamed so this will break some user rules
2023-07-09 00:58:05 +03:00
Artturin
aae2268e0a nixos/ananicy-cpp: add rulesProvider 2023-07-08 20:28:45 +03:00
Artturin
ff28d7a982 nixos/ananicy: don't error if $out/ananicy-cpp doesn't exist
copy new rule
2023-07-08 20:19:13 +03:00
Artturin
b04a04929c nixos/ananicy: add extraTypes, extraCgroups 2023-07-08 19:42:46 +03:00
Atemu
44f637aa8d nixos/paperless: use toShellVars for paperless-manage
The homebrewed snippet didn't escape vars properly which is an issue because
PAPERLESS_OCR_USER_ARGS requires a JSON string. This also meant a discrepancy
between the services' env vars and paperless-manage's.

Just use the correctly functioning library function for this instead.
2023-07-08 16:03:45 +02:00
K900
9c98b1a744
Merge pull request #233981 from K900/dont-touch-graphical-session-target
nixos/x11/display-managers: don't touch graphical-session.target in xsession-wrapper
2023-07-08 16:43:27 +03:00
Ryan Lahfa
7be83143e8
Merge pull request #222536 from oddlama/master 2023-07-08 14:36:18 +02:00
Ryan Lahfa
89d68cebcb
Merge pull request #241126 from RaitoBezarius/fix-plausible-secret-handling 2023-07-08 14:34:20 +02:00
Ryan Lahfa
0d2f526dbb
Merge pull request #241462 from SuperSandro2000/remove-ddclient 2023-07-08 14:33:00 +02:00
K900
d26393d60c nixos/x11/display-managers: don't touch graphical-session.target in xsession-wrapper if the desktop knows how to handle it
This is not correct and will in fact break things because they try to run before the target is reached.
Ideally we'd get rid of it entirely, but WM users rely on this behavior, so allowlist some desktops
to get the sane behavior, and fake the session for the rest until upstreams/NixOS modules catch up.
2023-07-08 15:09:39 +03:00
K900
400aafbdc9
Merge pull request #239389 from K900/sddm-0.20.0
sddm: 0.19.0 -> 0.20.0
2023-07-08 11:52:02 +03:00
adisbladis
8062626e0e lemmy-{server,ui}: 0.18.0 -> 0.18.1 2023-07-08 13:59:30 +12:00
Janik
e46ab54b68
Merge pull request #241783 from gmemstr/n8n-tweaks 2023-07-07 23:04:48 +02:00
Ilan Joselevich
7016b8bf7a
Merge pull request #242076 from Kranzes/nixtmpfilesd
nixos/nix-daemon: use tmpfiles from nixPackage when possible
2023-07-07 23:53:27 +03:00
Ilan Joselevich
160edcf2c5
nixos/twingate: add package option and test 2023-07-07 20:03:54 +03:00
Ilan Joselevich
af8206f801
nixos/nix-daemon: use tmpfiles from nixPackage when possible 2023-07-07 17:29:05 +03:00
Pol Dellaiera
764472b473
Merge pull request #233091 from yayayayaka/add-team-gitlab
maintainers/team-list: Add team gitlab
2023-07-07 15:19:15 +02:00
Nick Cao
b119b38cc1
Merge pull request #241134 from frederictobiasc/mautrix
mautrix-telegram: 0.14.0 -> 0.14.1, python3Packages.mautrix: 0.19.16 -> 0.20.0
2023-07-07 20:41:07 +08:00
K900
c0132f22e9 sddm: 0.19.0 -> 0.20.0 2023-07-07 12:46:59 +03:00
Sandro Jäckel
88d7aa56e1
nixos/nix*: remove not necessary imports
We do not really declare module dependencies anywhere else and it would
a nousance to move any file if many other referenced it without being
necessary. Also most higher level modules depend on most of the lower
level ones.
So removing this because it can only potentially cause weird issues.
2023-07-07 11:01:12 +02:00
Robert Hensing
54303b65ef
Merge pull request #241690 from hercules-ci/nixos-nix-modules
Split nixos/nix-daemon.nix
2023-07-07 10:29:58 +02:00
Robert Hensing
c83ad0598b nixos/*nix*: Update module impl docs and link related modules
Something extra for the readers.
2023-07-06 20:00:10 +02:00
Robert Hensing
07de9b62cc nixos/*nix*: Add imports as inherently necessary
Albeit not technically necessary because of nixos//module-list.nix
2023-07-06 19:48:22 +02:00
Kevin Boulain
680ee304ca nixos/usbguard: rename services.usbguard.implictPolicyTarget to services.usbguard.implicitPolicyTarget 2023-07-06 15:34:40 +02:00
Kerstin
ba445ba8bc
Merge pull request #241088 from jooooscha/master
maintainers: add joscha
2023-07-06 15:30:28 +02:00
Gabriel Simmer
674de7c287
nixos/n8n: correct configuration, webhookUrl type
I realised in NixOS#240189 I made some minor errors in the service definition.
2023-07-05 23:15:52 +01:00
Sandro
5e3022fb17
Merge pull request #240320 from wegank/cdesktopenv-bump
cdesktopenv: 2.3.2 -> 2.5.1
2023-07-05 23:41:36 +02:00
Lassulus
f751061a08
Merge pull request #237477 from accelbread/usbguard-dbus-support
nixos/usbguard: add USBGuard dbus daemon option
2023-07-05 23:13:10 +02:00
Alexander Sieg
8d80108d6d nixos/gitlab: configure elasticsearch indexer path 2023-07-05 15:01:31 +02:00
Robert Hensing
0f71c406cf nixos/nix-daemon: Move to services/system
It is now only about the system service.
Granted, it also installs the client package, but that could be
factored out later, with actual test to support such a new type of
configuration.
2023-07-05 14:59:01 +02:00
Robert Hensing
fad172a366 nixos/config/nix-channel: Move NIX_PATH logic 2023-07-05 14:54:29 +02:00
Robert Hensing
5c0c96a828 nixos/config/nix-channel: Factor out root channel initialization 2023-07-05 14:54:29 +02:00
Robert Hensing
1c772cd857 nixos/config/flakes: Factor out 2023-07-05 14:54:28 +02:00
Robert Hensing
d6a68f0542 nixos/config/nix-remote-build: Factor out 2023-07-05 14:54:27 +02:00
Robert Hensing
4bbd44908c nixos/config/nix: Move extraOptions 2023-07-05 14:54:27 +02:00
Robert Hensing
19e33831c6 nixos/config/nix: Move nix.check* 2023-07-05 14:54:26 +02:00
Robert Hensing
d73da5b868 nixos/config/nix: Move nix.settings 2023-07-05 14:54:26 +02:00
Yaya
71be5933cd nixos/snipe-it: Use the pinned PHP package
As 3bb3859 bumped the default PHP version to 8.2, the snipe-it package
has been pinned to PHP 8.1. This commit changes the php package used in
the module to the one pinned by snipe-it.
2023-07-05 14:47:05 +02:00
Maximilian Bosch
b82c8e13c7
Merge pull request #228508 from SuperSandro2000/gitea-no-recurse
nixos/gitea: don't recursively change file owners/permissions
2023-07-05 13:56:46 +02:00
Lassulus
7e37c051c1
Merge pull request #241526 from Mic92/cloud-init 2023-07-05 13:31:27 +02:00
Robert Hensing
6649d1e369 nixos/config/nix: Move nixConf 2023-07-05 13:03:32 +02:00
Robert Hensing
2fa416732c nixos/config/nix: Move legacyConfMappings 2023-07-05 12:52:56 +02:00
Maximilian Bosch
7f0bc68c32
Merge pull request #237544 from hrdinka/fix_gitea
Revert "nixos/gitea: requires database"
2023-07-05 12:09:55 +02:00
Emily
3a79936b45
Merge pull request #217536 from sephii/caddy-reload
nixos/caddy: add support for reload
2023-07-04 22:57:24 +02:00
r-vdp
9ef5b7d793 nixos/x11: change the description of the display manager service
Currently systemd prints `Starting X11 Server` in the journal, which completely
misled me into searching why my wayland system was starting an X server.
Turns out that what is started is actually the display manager,
so I think it's better to call it like that in the description.
2023-07-04 21:08:13 +02:00
Jörg Thalheim
6f404ed214 cloud-init: add xfs support 2023-07-04 19:27:18 +02:00
Alexander Sieg
8934558abf
nixos/gitlab: fix unit test result display (#241322)
After the update to GitLab 16 the puma worker needs `gzip` in it's PATH
in order to junit test results.
2023-07-04 18:57:19 +02:00
Atemu
712caf8eb1
Merge pull request #224366 from martinetd/ankisyncd-rs
ankisyncd-rs: add package for anki-sync-server-rs
2023-07-04 18:03:19 +02:00
Sandro Jäckel
d35df28f65
ddclient: remove package and module on upstream maintainer request 2023-07-04 16:46:53 +02:00
Herwig Hochleitner
5205c73d93 nixos/gitea: add WORK_PATH to config
this is in preparation for 1.20, which needs this option set
2023-07-04 16:05:56 +02:00
Sylvain Fankhauser
27b7132e81
nixos/caddy: remove admin check
Since it introduces IFD.
2023-07-04 11:25:08 +02:00
Sylvain Fankhauser
1f0ac736b4
nixos/caddy: add support for reload 2023-07-04 11:25:05 +02:00
Pol Dellaiera
3ede00e4fa
Merge pull request #240571 from gaelreyrol/scaphandre-module-assertions
nixos/prometheus/exporters: adjust scaphandre assertions
2023-07-04 11:24:24 +02:00
Dominique Martinet
fbe3e3b44e replace ankisyncd with ankisyncd-rs
- remove old ankisyncd python package
- rename new rust package so it's a drop in replacement
2023-07-04 18:14:18 +09:00
Dominique Martinet
668f528b6c nixos/ankisyncd: use ankisyncd-rs instead of the old python one
Unfortunately the config is not compatible; data itself looks like it was compatible
from an up to date python ankisyncd but I wouldn't assume anything with the older
service (which didn't work for me with either ankidroid or recent desktop version)
2023-07-04 18:14:17 +09:00
Janik
8419b512e6
Merge pull request #240189 from gmemstr/patch-1
n8n: add WEBHOOK_URL environment variable
2023-07-04 08:56:36 +02:00
Pascal Bach
fc478ad9ff nixos/minio: allow distributed nodes 2023-07-03 21:51:02 +02:00
Will Fancher
73a8ca1674
Merge pull request #240601 from lilyinstarlight/fix/lvm-root-sd-stage-1-unhide
nixos/*: unhide remaining systemd stage-1 options
2023-07-03 13:38:12 -04:00
Christoph Hrdinka
70cc0d412f
nixos/gitea: only require databases if createDatabase is set
Currently the database service (mysql/postgresql) is required by the
gitea service. If none of them exists on the same machine as gitea it
will refuse to start. With this change it is only required if
createDatabase was set to true.
2023-07-03 17:02:12 +02:00
Lily Foster
e9207b0501
nixos/*: unhide remaining systemd stage-1 options
These options were missed in NixOS/nixpkgs#226237, but they all were
specifically added for systemd stage-1.
2023-07-03 08:41:38 -04:00
Janik
565fc74d28
Merge pull request #240954 from michaelshmitty/anuko-time-tracker-fixup 2023-07-03 12:29:43 +02:00
Bobby Rong
dd9fcc40b7
Merge pull request #241131 from ShamrockLee/nix-daemon-gramman
nixos/nix-daemon: fix grammatical mistake in description
2023-07-03 16:41:51 +08:00
Michael Smith
65585d6c53 nixos/anuko-time-tracker: improve module options
* Remove unsafe dbinstall.php script
* Make Nginx virtualhost configurable
2023-07-03 08:39:17 +02:00