Maximilian Bosch
ecaf6aed02
nixos/privacyidea: add proper support for privacyidea-token-janitor
...
`privacyidea-token-janitor`[1] is a tool which helps to automate
maintenance of tokens. This is helpful to identify e.g. orphaned tokens,
i.e. tokens of users that were removed or tokens that were unused for a
longer period of time and apply actions to them (e.g. `disable` or
`delete`).
This patch adds two new things:
* A wrapper for `privacyidea-token-janitor` to make sure it's executable
from CLI. To achieve this, it does a `sudo(8)` into the
`privacyidea`-user and sets up the environment to make sure the
configuration file can be found. With that, administrators can
directly invoke it from the CLI without additional steps.
* An optional service is added which performs automatic cleanups of
orphaned and/or unassigned tokens. Yes, the tool can do way more
stuff, but I figured it's reasonable to have an automatic way to clean
up tokens of users who were removed from the PI instance. Additional
automation steps should probably be implemented in additional
services (and are perhaps too custom to add them to this module).
[1] https://privacyidea.readthedocs.io/en/v3.7/workflows_and_tools/tools/index.html
2022-10-06 11:43:20 +02:00
Jörg Thalheim
988c9130e1
Merge pull request #193767 from winterqt/update-dendrite
...
dendrite: 0.9.9 -> 0.10.1
2022-10-06 09:28:32 +02:00
github-actions[bot]
863df54d13
Merge master into staging-next
2022-10-06 06:05:17 +00:00
Stanisław Pitucha
4a6979d310
Merge pull request #194603 from phiadaarr/jitsiVideobridge
...
jitsi-videobridge: fix link in docs
2022-10-06 12:19:43 +11:00
github-actions[bot]
939050602c
Merge master into staging-next
2022-10-05 18:07:32 +00:00
José Luis Lafuente
396f4f05b9
nixos/tmate-ssh-server: init module ( #192270 )
...
* nixos/tmate-ssh-server: init module
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
2022-10-05 17:34:30 +01:00
Philipp Arras
1e430612dc
jitsi-videobridge: fix link in docs
2022-10-05 18:11:57 +02:00
Milan Hauth
a1e9f1e036
nixos/firewall: move rpfilter from raw to mangle
...
fix wireguard (wg-quick)
netfilter packet flow:
raw.prerouting -> conntrack -> mangle.prerouting
rpfilter must be after conntrack
otherwise response packets are dropped
2022-10-05 09:50:56 +02:00
Martin Weinelt
253ca4957d
Merge remote-tracking branch 'origin/master' into staging-next
2022-10-05 00:44:16 +02:00
Jan Tojnar
e14d1e1bc9
Merge pull request #192969 from jtojnar/extra-gsettings-strict
...
GNOME/Cinnamon/Pantheon: Clean up GSettings overrides and make strict
2022-10-04 00:59:08 +02:00
Sandro
b70049a463
Merge pull request #183349 from Luflosi/rename-ipfs-to-kubo
2022-10-03 21:34:14 +02:00
David Morgan
bd62717fd3
libinput: Add tappingButtonMap option ( #189612 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-10-03 21:13:43 +02:00
Sandro
1385382014
Merge pull request #191532 from ambroisie/add-tandoor-recipes
2022-10-03 20:25:06 +02:00
Bruno BELANYI
d8b1d34806
nixos/tandoor-recipes: init module
2022-10-03 09:48:54 +02:00
github-actions[bot]
0ae3aa5345
Merge master into staging-next
2022-10-02 17:45:43 +00:00
Jörg Thalheim
ffde4721ab
Merge pull request #194052 from rapenne-s/fail2ban_doc
...
nixos/fail2ban: improve module documentation
2022-10-02 17:09:43 +02:00
Luflosi
eefaaf41d6
kubo: rename from ipfs
...
Go-IPFS was renamed to Kubo in version 0.14.0, see https://github.com/ipfs/kubo/issues/8959 .
2022-10-02 16:00:22 +02:00
github-actions[bot]
fc393d5731
Merge master into staging-next
2022-10-02 12:01:22 +00:00
Solene Rapenne
605a588ea6
nixos/fail2ban: improve module documentation
2022-10-02 12:59:54 +02:00
Christian Kögler
6845ddc94b
Merge pull request #192864 from alyaeanyx/nix-serve-package-option
...
nixos/nix-serve: add package option
2022-10-02 11:39:28 +02:00
github-actions[bot]
25043f0f28
Merge master into staging-next
2022-10-01 12:01:27 +00:00
Christian Kögler
1c23b486f2
Merge pull request #189275 from wentasah/nullmailer-ownership
...
nixos/nullmailer: Always adjust ownership of spool directories
2022-10-01 12:51:57 +02:00
Christian Kögler
95de459778
Merge pull request #191963 from pbsds/code-remote-module
...
nixos/code-server: escape shell extraArguments
2022-10-01 10:15:32 +02:00
Christian Kögler
d3fc91e579
Merge pull request #191352 from maifel-maifel/mr-networking-deprecation-note
...
nixos/networking: add a suggestion to use networkd options
2022-10-01 09:10:30 +02:00
Winter
7414171dd1
dendrite: 0.9.9 -> 0.10.1
2022-09-30 16:56:57 -04:00
github-actions[bot]
e1d2f74dee
Merge master into staging-next
2022-09-30 18:03:29 +00:00
Martin Weinelt
656e267275
Merge pull request #193565 from NixOS/home-assistant
2022-09-30 18:00:37 +02:00
Jonas Heinrich
b881869205
nixos/wordpress: Add language support
2022-10-01 00:44:32 +09:00
Martin Weinelt
4978672881
nixos/home-assistant: update bluetooth and serial component list
...
And fix the capability logic for bluetooth devices.
2022-09-30 15:07:17 +02:00
cab
e03e61f62e
nixos.fwupd: add remote list option
...
Co-authored-by: jtojnar <jtojnar@gmail.com>
2022-09-30 16:47:16 +04:00
github-actions[bot]
f29cec4450
Merge master into staging-next
2022-09-30 06:22:32 +00:00
Martin Weinelt
b76d66b4fd
nixos/sachet: replace literalExample with literalExpression
2022-09-29 21:13:50 -04:00
github-actions[bot]
7170a03e58
Merge master into staging-next
2022-09-30 00:07:38 +00:00
Sandro
00b86b69f0
Merge pull request #193009 from SuperSandro2000/nix-daemon-localhost
2022-09-29 23:38:05 +02:00
github-actions[bot]
9d19287993
Merge master into staging-next
2022-09-29 18:03:40 +00:00
Linus Heckemann
3f7fa3fe68
Merge pull request #193404 from evrim/master
...
nix-daemon module: fix mandatoryFeatures in nix.buildMachines
2022-09-29 15:48:05 +02:00
github-actions[bot]
9c14978f84
Merge master into staging-next
2022-09-29 12:01:25 +00:00
Vladimír Čunát
8ba120420f
Merge #191339 : staging-next 2022-09-15
2022-09-29 09:16:47 +02:00
Sandro
f88b09a712
Merge pull request #189176 from maifel-maifel/mr-wireguard-fwmark-mtu
2022-09-29 00:04:33 +02:00
void
6349a7d15b
nix-daemon module: fix mandatoryFeatures in nix.buildMachines
2022-09-29 00:35:17 +03:00
Lassulus
af364a3655
Merge pull request #190172 from Stunkymonkey/init-freshrss
2022-09-28 23:11:33 +02:00
Felix Buehler
0b204f0c28
freshrss: init at 1.20.0, tests and module
2022-09-28 22:46:15 +02:00
github-actions[bot]
f18d801779
Merge staging-next into staging
2022-09-28 18:05:53 +00:00
Martin Weinelt
7da8d25d87
Merge remote-tracking branch 'origin/master' into staging-next
2022-09-28 17:15:11 +02:00
digital
eb49174f7b
nixos/wireguard: add option to set mtu
...
Some networks can only transfer packets with a lower than normal maximum
transfer unit size. In these cases, it is necessary to set a MTU that
works for the given upstream network.
2022-09-28 17:14:38 +02:00
digital
084509af8b
nixos/wireguard: add option to set firewall mark
...
Wireguard can tag its packets with a firewall mark. This can be used for
firewalls or policy routing. This is very useful in some setups where
all traffic should go through a wireguard interface. The wireguard
packets cannot go through the wireguard interface and must be routed
differently, which can be done via the Firewall Mark.
The nixos option `config.networking.wireguard.interface.<name>.fwMark`
is of type `types.str` and not `types.int` to allow for specifying the
mark as a hexadecimal value.
2022-09-28 17:14:38 +02:00
David Warde-Farley
a81954b818
Fix docs.
2022-09-28 10:48:10 -04:00
David Warde-Farley
c3e75d4931
Use null
instead of empty string.
...
Per @aanderse in 7556fd7.
2022-09-28 10:48:10 -04:00
David Warde-Farley
0d5a365f61
caddy: Omit --adapter
from invocations if empty string supplied
...
This allows specifying configuration in the natively processed Caddy JSON format.
Fixes #153142 .
2022-09-28 10:48:10 -04:00
Alexander Bantyev
3814271800
Merge pull request #188273 from cab404/klipper-mutable-config
...
klipper: additional config options
2022-09-28 04:12:05 +04:00
github-actions[bot]
d6a1c7033e
Merge staging-next into staging
2022-09-28 00:06:37 +00:00
github-actions[bot]
70776ac218
Merge master into staging-next
2022-09-28 00:06:02 +00:00
Artturi
1c1c182814
Merge pull request #192851 from Artturin/treewides1
2022-09-28 00:50:06 +03:00
Jonathan Ringer
a2bcf8564d
nixos/openrgb: init module
2022-09-27 11:59:33 -07:00
github-actions[bot]
28a3306bd7
Merge master into staging-next
2022-09-27 12:01:17 +00:00
Sandro
2e977bf954
Merge pull request #188575 from gador/pgadmin-6.13
2022-09-27 10:18:38 +02:00
Artturin
6910a4eea0
treewide: makeWrapper to nativeBuildInputs
...
this should be all of them other than the failed splices
found with nixpkgs-lint
2022-09-26 17:53:26 +03:00
Sandro Jäckel
2970778928
nixos/nix-daemon: allow removing protocol for hydra
2022-09-26 11:50:19 +02:00
Frederik Rietdijk
de57d754a0
Merge master into staging-next
2022-09-26 09:31:22 +02:00
Jan Tojnar
1d4bddaed5
gnome.nixos-gsettings-override: extract from NixOS module
...
This will clean up the module slightly and bring it more in line with Pantheon & Cinnamon.
While at it do some other refactoring inspired by those modules:
- Correct a typo in light background attribute name.
- Rename the attribute name.
- Quote arguments.
- Extract the overridden package list and override text into variables.
- Avoid having separate copy commands for overrides from packages.
- Avoid `with` statements.
- Use `concatMapStringsSep`.
2022-09-26 00:52:08 +02:00
Sandro
d374d79d89
Merge pull request #190496 from NukaDuka/kthxbye
2022-09-25 23:43:29 +02:00
Martin Weinelt
68c0ca4416
Merge remote-tracking branch 'origin/master' into staging-next
2022-09-25 21:36:31 +02:00
Kartik Gokte
5a93846946
nixos/kthxbye: init
2022-09-26 00:16:03 +05:30
Emery Hemingway
dbf8bba95b
nixos/yggdrasil: services.yggdrasil.config renamed to settings
2022-09-25 11:10:32 -05:00
Sandro
e85617ef84
Merge pull request #192806 from r-ryantm/auto-update/onlyoffice-documentserver
2022-09-25 17:40:08 +02:00
Mario Rodas
0ea721a941
Merge pull request #192196 from oxalica/pkg/v2ray
...
v2ray: 4.45.0 -> 5.1.0 and refactor
2022-09-25 09:20:49 -05:00
alyaeanyx
850053ebe7
nixos/nix-serve: add package option
2022-09-25 11:08:59 +02:00
Sandro Jäckel
0a564318e8
nixos/onlyoffice: fix database upgrades
2022-09-25 01:35:01 +02:00
K900
640aa41dfb
nixos/plasma5: only generate kwinrc/kdeglobals if we have anything to generate
2022-09-24 15:10:14 +03:00
Azat Bahawi
99dc9b9c16
nixos/endlessh-go: init module
2022-09-23 23:55:54 +03:00
github-actions[bot]
ef833a6fd2
Merge master into staging-next
2022-09-23 12:01:34 +00:00
Alexander Bantyev
9ee2ceb492
Merge pull request #192496 from cab404/moonraker-defaults-fix
...
nixos.moonraker: fix config options location
2022-09-23 11:25:57 +04:00
cab
e46430d503
nixos.moonraker: version change fixes
...
Old config locations were deprecated
https://moonraker.readthedocs.io/en/latest/configuration/#option-moved-deprecations .
Also, added PrivateTmp to accomodate for logs being unconditionally
written there.
2022-09-23 11:17:54 +04:00
cab
849c40b5f5
klipper: additional options
...
This allows for easier interop with Moonraker, as well as giving an
ability to store klipper configuration files in /var/lib/klipper, thus not
littering /etc with all the backups SAVE_CONFIG does.
- Added `configFile` as an alternative way to specify configuration
- Added `isMutableConfig` and `mutableConfigPath`
Co-authored-by: @lovesegfault <bernardo@meurer.org>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Co-authored-by: Bernardo Meurer <bernardo@meurer.org>
2022-09-23 03:10:28 +04:00
Florian Brandes
73f09f2145
pgadmin4: 6.12 -> 6.13
...
- Add update script
- Add email options to pgadmin4 nixOS module
- Add override for flask 2.2
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2022-09-22 17:42:20 +02:00
Martin Weinelt
c571a5d1c2
Merge pull request #192388 from erikarvstedt/paperless-fix-syscalls
2022-09-22 09:11:23 +02:00
Erik Arvstedt
ecacff35a6
nixos/paperless: add required syscall
...
`unpaper` requires syscall 238 (`set_mempolicy`).
Add this by un-blocking the systemd syscall filter set `@resources`
which is safe in the context of paperless.
2022-09-22 08:14:21 +02:00
Sandro
fad61ad09c
Merge pull request #188949 from RaitoBezarius/listmonk-module
2022-09-21 23:42:03 +02:00
Raito Bezarius
6b891f4788
nixos/listmonk: init module
2022-09-21 19:55:20 +02:00
maralorn
90eacab493
Merge branch 'master' into haskell-updates
2022-09-21 17:42:00 +02:00
maralorn
e2c6425398
Merge pull request #191991 from maralorn/drop-minor-versions
...
haskell.{compiler,packages}: Add aliases without minor versions
2022-09-21 16:15:48 +02:00
Brian Leung
e5f798f3b9
nixos/lemmy: use PostgreSQL module to ensure database/user existence
...
Co-authored-by: Shahar Dawn Or <mightyiampresence@gmail.com>
Co-authored-by: a-kenji <aks.kenji@protonmail.com>
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Ilan Joselevich <personal@ilanjoselevich.com>
2022-09-21 09:00:52 -04:00
Brian Leung
3de898f262
nixos/lemmy: inline localPostgres into database assertion
...
Co-authored-by: Shahar Dawn Or <mightyiampresence@gmail.com>
Co-authored-by: Ctem <c@ctem.me>
Co-authored-by: a-kenji <aks.kenji@protonmail.com>
Co-authored-by: Brian Leung <leungbk@posteo.net>
Co-authored-by: Ilan Joselevich <personal@ilanjoselevich.com>
2022-09-21 09:00:52 -04:00
oxalica
07a9b7b1d8
nixos/{test/,}v2ray: fix for new CLI and use upstream systemd units
2022-09-21 15:59:29 +08:00
maralorn
fae2ff5c03
haskell.{compiler,packages}: Add aliases without minor versions
2022-09-21 05:51:28 +02:00
Thomas Tuegel
fff89194fe
Merge pull request #183381 from alois31/oxygen-sounds
...
oxygen-sounds: init at 5.25.3
2022-09-20 14:25:55 -05:00
Jonas Heinrich
77984dedc4
Merge pull request #191851 from wentasah/usbrelay-1.0.1
...
usbrelay: 1.0 -> 1.0.1
2022-09-20 12:23:36 +02:00
Peder Bergebakken Sundt
d9de5da65b
nixos/code-server: escape shell extraArguments
2022-09-19 22:21:26 +02:00
Brian Leung
2c8e67bf6b
nixos/lemmy: settings.database.createLocally -> database.createLocally
...
Co-authored-by: Shahar Dawn Or <mightyiampresence@gmail.com>
Co-authored-by: Ctem <c@ctem.me>
Co-authored-by: a-kenji <aks.kenji@protonmail.com>
2022-09-19 11:34:08 -04:00
Sandro
5267176a38
nixos/ddclient: document that daemon should not be set
...
Closes #191105
2022-09-19 17:06:45 +02:00
Michal Sojka
ec026d26d2
usbrelay: 1.0 -> 1.0.1
2022-09-18 22:54:13 +02:00
Lorenzo Manacorda
241f31a0a7
nixos/matrix-synapse: fix link to install instructions
2022-09-18 04:14:57 +02:00
Jairo Llopis
a7a94811e3
nixos/nix-daemon: support machine protocol
...
Make ssh-ng:// users happier.
@moduon MT-904
2022-09-18 00:05:35 +02:00
Maximilian Bosch
5b35cc27e0
Merge pull request #190431 from r-ryantm/auto-update/wiki-js
...
wiki-js: 2.5.286 -> 2.5.287
2022-09-17 18:20:28 +02:00
Maximilian Bosch
6b6bb7cdd3
nixos/wiki-js: pin nodejs to v16
...
v18 is not supported, see https://docs.requarks.io/install/requirements#nodejs
2022-09-17 17:46:20 +02:00
Emmanouil Kampitakis
85f0887662
nixos/alps: init module
2022-09-16 22:29:11 +02:00
Sandro
c2e7745b08
Merge pull request #190060 from revol-xut/master
2022-09-15 21:30:27 +02:00
digital
12d64e041b
nixos/networking: add a suggestion to use networkd options
2022-09-15 18:07:24 +02:00
Kerstin
1637945189
Merge pull request #189975 from Tasqa/kanidm-cacerts-fix
...
nixos/kanidm: Add cacerts path to unixd service
2022-09-15 16:28:21 +02:00
Artturi
dbc00be498
Merge pull request #190358 from ck3d/fix-nixos-cross
2022-09-14 19:15:23 +03:00