github-actions[bot]
44f6a02f39
Merge master into staging-next
2022-10-09 18:01:35 +00:00
Sandro
f5802f496d
Merge pull request #187026 from azahi/endlessh-go
2022-10-09 16:50:02 +02:00
github-actions[bot]
8972888c55
Merge master into staging-next
2022-10-09 12:01:31 +00:00
Franz Pletz
8a86d9d4aa
Merge pull request #195190 from Ma27/coturn-replace-secret
...
nixos/coturn: refactor secret injection
2022-10-09 13:48:49 +02:00
Maximilian Bosch
4ece171482
Merge pull request #194738 from mayflower/pi-tokenjanitor
...
nixos/privacyidea: add proper support for `privacyidea-token-janitor`
2022-10-09 09:50:20 +02:00
Maximilian Bosch
4fd75277dd
nixos/coturn: refactor secret injection
...
The original implementation had a few issues:
* The secret was briefly leaked since it is part of the cmdline for
`sed(1)` and on Linux `cmdline` is world-readable.
* If the secret would contain either a `,` or a `"` it would mess with
the `sed(1)` expression itself unless you apply messy escape hacks.
To circumvent all of that, I decided to use `replace-secret` which
allows you to replace a string inside a file (in this case
`#static-auth-secret#`) with the contents of a file, i.e.
`cfg.static-auth-secret-file` without any of these issues.
2022-10-09 09:31:48 +02:00
talyz
fae653deb4
nixos/gitlab: Configure ActionCable
...
ActionCable is used to provide realtime updates in a few places,
mainly the issue sidebar.
2022-10-09 08:12:19 +02:00
talyz
9b3ff51c77
nixos/gitlab: Set a more appropriate type for extraConfig
2022-10-09 08:12:19 +02:00
talyz
58158100f7
nixos/gitlab: Make sure docker-registry starts after cert generation
2022-10-09 08:12:19 +02:00
talyz
8e8253ddb4
nixos/gitlab: Create registry state path
2022-10-09 08:12:19 +02:00
talyz
3dedfb3fa0
nixos/gitlab: Connect to redis through a unix socket by default
...
This gives us slightly higher security as you have to be in the gitlab
group to connect, and possibly a (very small) performance benefit as
well.
2022-10-09 08:12:19 +02:00
talyz
843082eb3a
nixos/gitlab: Add findutils to runtime dependencies
...
Needed for the gitlab:cleanup:orphan_job_artifact_files rake task.
2022-10-09 08:12:19 +02:00
talyz
bee6e1dafa
nixos/gitlab: Deduplicate runtime dependency listing
2022-10-09 08:12:19 +02:00
talyz
0211edd1ff
nixos/gitlab: Add workhorse.config option
2022-10-09 08:12:19 +02:00
github-actions[bot]
130aa9ca68
Merge master into staging-next
2022-10-09 00:03:29 +00:00
Jörg Thalheim
b4bb571fa0
iwd: remove myself as maintainer
2022-10-08 16:50:37 +02:00
Vladimír Čunát
6565abc264
Merge branch 'master' into staging-next
2022-10-08 10:20:07 +02:00
Nick Cao
309ea5a1af
nixos/udev: allow marking firmware as not compressible
2022-10-07 19:40:58 +00:00
Alexander Bantyev
99cc02fe98
Merge pull request #193694 from cab404/fwupd-remote-list
...
nixos.fwupd: add remote list option
2022-10-07 14:23:19 +04:00
github-actions[bot]
c5f0d725df
Merge master into staging-next
2022-10-06 18:03:10 +00:00
pennae
3826e303c6
nixos/firefox-syncserver: remove extra add_header
...
syncstorage-rs sets this header starting with 0.12.3.
2022-10-06 14:48:53 +02:00
pennae
f97c9d60e4
nixos/firefox-syncserver: proxyPass singleNode to 127.0.0.1
...
syncstorage-rs does not listen on ::1 unless explicitly configured.
2022-10-06 14:48:53 +02:00
pennae
8dc30e9e98
nixos/firefox-syncserver: set default for oauth verifier threads
...
the 0.12.1 update introduced a static thread pool for verifying oauth
tokens. set a reasonable default for self-hosted setups (10 threads).
2022-10-06 14:48:53 +02:00
github-actions[bot]
8d6fbd7341
Merge master into staging-next
2022-10-06 12:01:31 +00:00
Maximilian Bosch
15914eba85
nixos/privacyidea: fix manual build
2022-10-06 13:50:31 +02:00
Maximilian Bosch
ecaf6aed02
nixos/privacyidea: add proper support for privacyidea-token-janitor
...
`privacyidea-token-janitor`[1] is a tool which helps to automate
maintenance of tokens. This is helpful to identify e.g. orphaned tokens,
i.e. tokens of users that were removed or tokens that were unused for a
longer period of time and apply actions to them (e.g. `disable` or
`delete`).
This patch adds two new things:
* A wrapper for `privacyidea-token-janitor` to make sure it's executable
from CLI. To achieve this, it does a `sudo(8)` into the
`privacyidea`-user and sets up the environment to make sure the
configuration file can be found. With that, administrators can
directly invoke it from the CLI without additional steps.
* An optional service is added which performs automatic cleanups of
orphaned and/or unassigned tokens. Yes, the tool can do way more
stuff, but I figured it's reasonable to have an automatic way to clean
up tokens of users who were removed from the PI instance. Additional
automation steps should probably be implemented in additional
services (and are perhaps too custom to add them to this module).
[1] https://privacyidea.readthedocs.io/en/v3.7/workflows_and_tools/tools/index.html
2022-10-06 11:43:20 +02:00
Jörg Thalheim
988c9130e1
Merge pull request #193767 from winterqt/update-dendrite
...
dendrite: 0.9.9 -> 0.10.1
2022-10-06 09:28:32 +02:00
github-actions[bot]
863df54d13
Merge master into staging-next
2022-10-06 06:05:17 +00:00
Stanisław Pitucha
4a6979d310
Merge pull request #194603 from phiadaarr/jitsiVideobridge
...
jitsi-videobridge: fix link in docs
2022-10-06 12:19:43 +11:00
github-actions[bot]
939050602c
Merge master into staging-next
2022-10-05 18:07:32 +00:00
José Luis Lafuente
396f4f05b9
nixos/tmate-ssh-server: init module ( #192270 )
...
* nixos/tmate-ssh-server: init module
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
2022-10-05 17:34:30 +01:00
Philipp Arras
1e430612dc
jitsi-videobridge: fix link in docs
2022-10-05 18:11:57 +02:00
Martin Weinelt
253ca4957d
Merge remote-tracking branch 'origin/master' into staging-next
2022-10-05 00:44:16 +02:00
Jan Tojnar
e14d1e1bc9
Merge pull request #192969 from jtojnar/extra-gsettings-strict
...
GNOME/Cinnamon/Pantheon: Clean up GSettings overrides and make strict
2022-10-04 00:59:08 +02:00
Sandro
b70049a463
Merge pull request #183349 from Luflosi/rename-ipfs-to-kubo
2022-10-03 21:34:14 +02:00
David Morgan
bd62717fd3
libinput: Add tappingButtonMap option ( #189612 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-10-03 21:13:43 +02:00
Sandro
1385382014
Merge pull request #191532 from ambroisie/add-tandoor-recipes
2022-10-03 20:25:06 +02:00
Bruno BELANYI
d8b1d34806
nixos/tandoor-recipes: init module
2022-10-03 09:48:54 +02:00
github-actions[bot]
0ae3aa5345
Merge master into staging-next
2022-10-02 17:45:43 +00:00
Jörg Thalheim
ffde4721ab
Merge pull request #194052 from rapenne-s/fail2ban_doc
...
nixos/fail2ban: improve module documentation
2022-10-02 17:09:43 +02:00
Luflosi
eefaaf41d6
kubo: rename from ipfs
...
Go-IPFS was renamed to Kubo in version 0.14.0, see https://github.com/ipfs/kubo/issues/8959 .
2022-10-02 16:00:22 +02:00
github-actions[bot]
fc393d5731
Merge master into staging-next
2022-10-02 12:01:22 +00:00
Solene Rapenne
605a588ea6
nixos/fail2ban: improve module documentation
2022-10-02 12:59:54 +02:00
Christian Kögler
6845ddc94b
Merge pull request #192864 from alyaeanyx/nix-serve-package-option
...
nixos/nix-serve: add package option
2022-10-02 11:39:28 +02:00
github-actions[bot]
25043f0f28
Merge master into staging-next
2022-10-01 12:01:27 +00:00
Christian Kögler
1c23b486f2
Merge pull request #189275 from wentasah/nullmailer-ownership
...
nixos/nullmailer: Always adjust ownership of spool directories
2022-10-01 12:51:57 +02:00
Christian Kögler
95de459778
Merge pull request #191963 from pbsds/code-remote-module
...
nixos/code-server: escape shell extraArguments
2022-10-01 10:15:32 +02:00
Christian Kögler
d3fc91e579
Merge pull request #191352 from maifel-maifel/mr-networking-deprecation-note
...
nixos/networking: add a suggestion to use networkd options
2022-10-01 09:10:30 +02:00
Winter
7414171dd1
dendrite: 0.9.9 -> 0.10.1
2022-09-30 16:56:57 -04:00
github-actions[bot]
e1d2f74dee
Merge master into staging-next
2022-09-30 18:03:29 +00:00
