Commit Graph

1590 Commits

Author SHA1 Message Date
Martin Weinelt
622af635bb
pretalx: adopt and set up code ownership 2024-05-09 18:20:14 +02:00
Martin Weinelt
9afcf733f3
nixos/pretix: update hardening
- Transition from world-readable to group-readable UMask
- Remove world permissions from state directory
2024-05-09 18:20:14 +02:00
Martin Weinelt
82f2cc7489
nixos/pretalx: set up hardening 2024-05-09 18:20:13 +02:00
Martin Weinelt
b4b3165619
nixos/pretalx: fix state directory mode
The state directory contains static files that need to be accessible by
a webserver, but homeMode defaults to 0750 and switching the generation
will always force the homeMode, thereby breaking access to the assets.

Instead, fully rely on systemd to provide the StateDirectory with the
correct mode.
2024-05-09 18:20:13 +02:00
Martin Weinelt
a4193dba8f
nixos/pretix: fix state directory mode
The state directory contains static files that need to be accessible by
a webserver, but homeMode defaults to 0750 and switching the generation
will always force the homeMode, thereby breaking access to the assets.

Instead, fully rely on systemd to provide the StateDirectory with the
correct mode.
2024-05-09 17:00:02 +02:00
Jonas Heinrich
4a451cb3ce
Merge pull request #308291 from Ma27/nc-update-db
nixos/nextcloud: add nextcloud-update-db.service, nextcloud-cron isn't oneshot
2024-05-08 11:29:45 +02:00
nikstur
951e023010
Merge pull request #309838 from cyberus-technology/take-plausible-maintainership
plausible: take take-plausible-maintainership
2024-05-07 18:34:24 +02:00
Leona Maroni
31be9134a2
Merge pull request #309836 from cyberus-technology/fix-nixos-plausible-unit
nixos/plausible: fix unit start script
2024-05-07 15:46:50 +02:00
Alexander Sieg
8edee82bc2
plausible: take take-plausible-maintainership 2024-05-07 15:35:22 +02:00
Alexander Sieg
3be1b16698
nixos/plausible: fix unit start script
In 8bb777ee37 a condition was added to
only execute the createdb.sh script if database setup was configurated.
However a superfluace " was added at the end of the line which cased an
escaping error the resulted in #309520.

Fixes #309520
2024-05-07 15:27:08 +02:00
Maximilian Bosch
c7a1616be7
nixos/nextcloud: add trailing slashes to carddav/caldav redirect
This seems to solve the problem with the warning about carddav/caldav
redirects being broken.
2024-05-05 18:17:25 +02:00
Jade Lovelace
f96f3c9e30 nixos/keycloak: pass --verbose to starting keycloak
This sets the exception handler to show the full exception on startup.
We don't think it does anything else, with respect to logging, for
instance. Everything else can be configured in the config file, and this
is plain reasonable to simply always enable in our view.
2024-05-04 17:43:38 -07:00
Aaron Andersen
efd518852d
Merge pull request #300090 from lytedev/300088
plausible: Do not run createdb.sh unless configured to setup the database
2024-05-04 18:41:49 +00:00
Daniel Flanagan
8bb777ee37 plausible: Do not run createdb.sh unless configured to setup the database
Closes #300088
2024-05-04 10:28:21 -05:00
Maximilian Bosch
5ef467d6f5
nixos/nextcloud: add nextcloud-update-db.service, nextcloud-cron isn't oneshot
This service performs operations that significantly increase the
performance of Nextcloud, can take a while. These are designed however
to not require maintenance mode and can be executed during normal
operation[1].

Make nextcloud-cron a simple unit instead of oneshot: otherwise we risk
that it'll be stopped by the startup timeout (oneshot executes ExecStart
while "activating") which can be an issue for very long running tasks or
if Nextcloud needs to catch up if one task was broken for a while.

[1] https://docs.nextcloud.com/server/29/admin_manual/maintenance/upgrade.html#long-running-migration-steps
2024-05-01 20:09:37 +02:00
Maximilian Bosch
7001f74335
Merge pull request #306595 from RaitoBezarius/nc29
nextcloud29: init at 29.0.0, nextcloud27: 27.1.8 -> 27.1.9, nextcloud28: 28.0.4 -> 28.0.5
2024-05-01 10:16:20 +00:00
Maximilian Bosch
28f4adfb79
nixos/nextcloud: document known warnings 2024-05-01 11:03:23 +02:00
Kyle Carberry
14679b13eb nixos/coder: sync maintainers to coder package 2024-04-29 21:11:23 -04:00
Jörg Thalheim
368b2d71b4
Merge pull request #307130 from toastal/movim-no-parallel
movim: include authentication patch & remove parallel dependency
2024-04-29 09:34:08 +02:00
toastal
13852fc9ad movim: remove parallel dependency
Currently there is an issue with $PATH & parallel causing build errors.
It’s probably best to just remove the dependency where bash forking is
good enough here.
2024-04-28 16:27:01 +07:00
Amelia Cuss
2e0b0c2707 nixos/akkoma: Don't warn if no installWrapper
Currently the installWrapper warning is issued if sudo (and sudo-rs)
aren't installed.  This is fine, except we get the warning even if we
explicitly turn off installWrapper -- say, for this very reason!

Rather than warning on every build until either sudo is installed or
Akkoma is uninstalled, only warn if cfg.installWrapper is true.
2024-04-27 23:38:29 +10:00
Weijia Wang
c0e50ded28
Merge pull request #306046 from misuzu/maintainers
{gotosocial,castopod,swapspace,psi-plus,kmon}: remove misuzu from maintainers
2024-04-27 05:23:55 +02:00
Thomas Gerbet
f8deac79ef
Merge pull request #305155 from Mynacol/akkoma-fix-proxy
nixos/akkoma: Fix media proxy URLs after upgrade
2024-04-26 00:39:11 +02:00
Maximilian Bosch
23f73fb2e6
nixos/nextcloud: php83 for nc29, update release notes
* PHP 8.3 seems supported, so let's go for it!

* The conditions for which Nextcloud will be the default were bogus: for
  <24.11 I'd suggest to go for nextcloud29 already. The people on
  unstable relying on the condition were on nextcloud28 so the upgrade
  will work fine.

  Also, it's unstable, so such upgrades are to be expected IMHO.

* Update the release notes to reflect that the new default is Nextcloud
  29 and warn that only one major upgrade at a time can be done.
2024-04-25 15:27:30 +02:00
Raito Bezarius
04e7710507
nixos/nextcloud: set 29 as default version for >= 24.11
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2024-04-25 15:27:30 +02:00
Jörg Thalheim
0b4cb020ff
Merge pull request #306076 from mrgiles/mediawiki_explicit_admin_username
mediawiki: update passwordfile description field
2024-04-23 12:16:29 +02:00
Kyle Carberry
68a917dc64
nixos/coder: fix broken service by referencing proper env (#305993) 2024-04-23 06:06:25 -03:00
Marcelo Giles
ac259c3a59
mediawiki: update passwordfile description field 2024-04-22 11:02:52 -07:00
misuzu
1c99cea684 castopod: remove misuzu from maintainers 2024-04-22 19:19:48 +03:00
misuzu
4146e6ea38 gotosocial: remove misuzu from maintainers 2024-04-22 19:19:01 +03:00
Sandro
9edb990e0e
Merge pull request #295261 from SuperSandro2000/pretalx-media
nixos/pretalx: fix /media/ nginx location block
2024-04-21 22:45:17 +02:00
Julien Malka
7a85b7bc35
Merge pull request #304334 from JulienMalka/limesurvey-package
nixos/limesurvey: allow package to be customized
2024-04-21 18:53:26 +02:00
Pol Dellaiera
e540698524
Merge pull request #302136 from savyajha/firefly-iii
firefly-iii: init at 6.1.13, nixos/firefly-iii: init
2024-04-20 13:56:08 +02:00
Mynacol
774cd77f2b nixos/akkoma: Fix media proxy URLs after upgrade
The upgrade of akkoma to 3.12.1 required to specify media upload and
media proxy URLs by default. The default value for media proxy was
wrong, leading to broken `example.com/media/proxy/[...]` URLs.

As descried in the [upgrade guide](https://meta.akkoma.dev/t/akkoma-stable-2024-03-securer-i-barely-know-her/681#explicit-upload-and-media-proxy-domains-5),
the media proxy `base_url` should be set to `https://example.com`
(without a path component). The suffix already contains `proxy/[...]`,
which gives the expected URLs.
2024-04-19 00:06:59 +02:00
Felix Bühler
671372c8ed
Merge pull request #304052 from mattchrist/freshrss-authtype-none
nixos/freshrss: fix startup when authType = "none"
2024-04-17 21:46:52 +02:00
Matt Christ
90e673b1b8 nixos/freshrss: fix startup when authType = "none"
Prior to this patch, FreshRSS fails to load with an initial
`authType = "none"` setting, instead providing an error:
"Error during context user init!"

To fix this, this patch changes the freshrss-config service to
setup the initial `defaultUser` when `authType = "none"`
is configured.
2024-04-16 16:48:41 -05:00
Savyasachee Jha
7531099464 nixos/firefly-iii: init 2024-04-17 00:23:06 +05:30
Christina Sørensen
8a1dbedde5
akkoma: make options work for 23.11 state
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-04-16 14:54:09 +02:00
Jörg Thalheim
dac28df361
Merge pull request #304370 from SuperSandro2000/mediawiki-php
nixos/mediawiki: use the same php everywhere
2024-04-16 10:29:50 +02:00
Sandro Jäckel
a6c356974a
nixos/mediawiki: use the same php everywhere
otherwise we might end up with eg: php 8.1 and php 8.2 mixed
2024-04-15 23:02:26 +02:00
Julien Malka
873db98d3d
nixos/limesurvey: allow package to be customized 2024-04-15 19:55:19 +02:00
K900
784330e275 treewide: nuke remaining mdDoc leftovers
bors when
2024-04-15 20:12:24 +03:00
superherointj
787dcb7ce8
Merge pull request #264808 from gmemstr/coder-environment
nixos/coder: add environment.extra and environment.file
2024-04-15 13:52:08 -03:00
lassulus
44f5a5f39c
Merge pull request #300917 from Tom-Hubrecht/crabfit
crabfit: init at unstable-2023-08-02
2024-04-13 20:29:09 +02:00
stuebinm
6afb255d97 nixos: remove all uses of lib.mdDoc
these changes were generated with nixq 0.0.2, by running

  nixq ">> lib.mdDoc[remove] Argument[keep]" --batchmode nixos/**.nix
  nixq ">> mdDoc[remove] Argument[keep]" --batchmode nixos/**.nix
  nixq ">> Inherit >> mdDoc[remove]" --batchmode nixos/**.nix

two mentions of the mdDoc function remain in nixos/, both of which
are inside of comments.

Since lib.mdDoc is already defined as just id, this commit is a no-op as
far as Nix (and the built manual) is concerned.
2024-04-13 10:07:35 -07:00
Tom Hubrecht
96659af197 nixos/crabfit: init 2024-04-13 18:51:02 +02:00
Thomas Gerbet
8aa99de316
Merge pull request #300343 from tcmal/akkoma-update-main
akkoma: 3.11.0 -> 3.12.1
2024-04-12 23:13:10 +02:00
toastal
0ba23300de nixos/movim: precompress static files 2024-04-11 23:26:11 +07:00
toastal
64b110589c movim: minifyStaticFiles prop 2024-04-11 23:26:11 +07:00
toastal
fcc7c53e9c nixos/movim: add service module 2024-04-11 23:26:11 +07:00