Commit Graph

43348 Commits

Author SHA1 Message Date
Jon Seager
fded2e8f7c
nixos/homepage-dashboard: set an explicit cache dir (#337902) 2024-08-28 15:15:25 +01:00
K900
83d01bef7b
glxinfo: replace with mesa-demos (#324562) 2024-08-28 16:21:32 +03:00
Matteo Sozzi
389de87aed
lxc: added option for unprivileged containers.
Added extra option to enable unprivileged containers. This includes a
patch to remove the hard-coded path to `lxc-user-nic` and a new security
wrapper to set SUID to `lxc-user-nic`.
2024-08-28 09:18:23 -04:00
Adam Stephens
056b6a1f40
nixos/tests/lxd: fix squashfs container import 2024-08-28 09:18:19 -04:00
Adam Stephens
4d2a0cfb34
nixos/tests/incus: fix container importing 2024-08-28 09:18:17 -04:00
Bobby Rong
ce95ecae1a
nixos/doc/rl-2411: Don't mention nemo layer-shell change (#337854) 2024-08-28 20:39:39 +08:00
Sandro Jäckel
d50e23f0a4
glxinfo: replace with mesa-demos 2024-08-28 14:38:12 +02:00
Adam C. Stephens
277d18341c
nixos/freshrss: improve description for virtualHost (#337895) 2024-08-28 08:14:25 -04:00
Sandro
84c8d21c64
nixos/streamcontroller: init, streamcontroller: init at 1.5.0-beta.6-unstable-2024-08-13, pythonPackages.usb-monitor: init at 1.21 (#335545) 2024-08-28 11:38:05 +02:00
Ming-Chuan
fc8e88205b
nixos/streamcontroller: init 2024-08-28 11:28:29 +02:00
Jon Seager
c4c45fb768
nixos/homepage-dashboard: set an explicit cache dir 2024-08-28 10:09:03 +01:00
Florian Klink
c8912137a3
wstunnel: 9.7.4 -> 10.0.1 (#335185) 2024-08-28 10:56:59 +02:00
Jörg Thalheim
0ff142f17e
fix build: sdimage (#337886) 2024-08-28 10:49:31 +02:00
Fernando Ayats
b21bec17eb
nixos/freshrss: improve description for virtualHost 2024-08-28 10:25:10 +02:00
Sandro
7f9873b3b9
nixos/stirling-pdf: make calibre dependency optional based on config (#337060) 2024-08-28 09:53:33 +02:00
Ganga Ram
0c848e9ef0 fix build: sdimage
Increase extra space to 20% to accomodate file system overhead.
Align image size to 1 MiB.

Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
2024-08-28 11:32:36 +04:00
Savyasachee Jha
781791a2da Added changelog entry for firefly-iii-data-importer 2024-08-28 08:29:32 +02:00
Savyasachee Jha
7e729ac34d nixosTests.firefly-iii-data-importer: init 2024-08-28 08:29:32 +02:00
Savyasachee Jha
3ce5da914b nixos/firefly-iii-data-importer: init 2024-08-28 08:29:32 +02:00
Bobby Rong
fce9e62bf1
nixos/doc/rl-2411: Don't mention nemo layer-shell change
It is dropped again in 6.2.8.

ref: a550001241
ref: 49d0f43f57
2024-08-28 11:32:16 +08:00
Felix Buehler
e2ff604f85 nixos/services.postfix: remove with lib; 2024-08-27 20:57:37 +02:00
Felix Buehler
fa20162c79 nixos/services.sympa: remove with lib; 2024-08-27 19:59:19 +02:00
K900
363df5ad86 nixos/sddm: add layer-shell-qt to the wrapper when kwin is used
Otherwise the greeter just dies immediately.
2024-08-27 20:50:08 +03:00
K900
094e80f6ff nixos/sddm: don't set kwin related config if Wayland isn't enabled 2024-08-27 20:14:23 +03:00
K900
0dfb94dbdf nixos/sddm: remove LANG=C.UTF-8
Not sure why that was there but it's evidently not necessary.
2024-08-27 19:45:47 +03:00
Gaétan Lepage
310d15111f
invidious: 2.20240427 -> 2.20240825.2 (#337338) 2024-08-27 15:56:43 +02:00
abysssol
d0231321f5
nixos/ollama: fix rocmOverrideGfx description (#337696) 2024-08-27 13:13:46 +00:00
Gaetan Lepage
a1f7e3d10e nixos/invidious: remove machine.config in test 2024-08-27 14:59:21 +02:00
Herwig Hochleitner
98ce61be57
nixos/smokeping: do homedir management with systemd.tmpfiles (#332050)
- ensures that everything in /var/lib/smokeping belongs to the service
- add nginx user to smokeping group, instead of allowing world to cd
  into somkeping homedir
2024-08-27 14:37:34 +02:00
Kerstin
c680ce3c36
nixos/kanidm: fix systemd service type (#337527) 2024-08-27 14:23:38 +02:00
abysssol
4b417eb22b nixos/ollama: fix rocmOverrideGfx description
Updated example to one that works, based on this comment:
https://github.com/NixOS/nixpkgs/issues/333123#issuecomment-2310706898
2024-08-27 08:13:37 -04:00
Someone
4faf4ca9af
nvidia-container-toolkit: only mount existing paths in the host (#319772) 2024-08-27 11:18:18 +00:00
Leona Maroni
e5f138e033
nixos/varnish: change default stateDir to /run (#336032) 2024-08-27 12:21:36 +02:00
Yury Shvedov
183a78cb56 nixos/gitwatch: add module
Create module for gitwatch script. This module runs systemd services.
You are able to have several services for different paths at once.

Change-Id: If6100e883dd12a428f79881a80b9b88e683f6db9
2024-08-27 07:35:47 +00:00
Emery Hemingway
f5b732e9bf nixos/eris-server: update comment 2024-08-27 05:00:44 +00:00
Emily
1162c1ed62
{tvheadend,antennas}: drop (#336395) 2024-08-27 02:47:56 +01:00
Philip Taron
b7f194b939
nixos/hardware.pulseaudio: remove with lib; (#337088) 2024-08-26 15:01:54 -07:00
Felix Buehler
18485b25ad nixos/hardware.pulseaudio: remove with lib; 2024-08-26 21:28:10 +02:00
Martin Weinelt
cf696ce6a5
home-assistant-custom-components.waste_collection_schedule: 2.0.1 -> 2.1.0 (#337375) 2024-08-26 21:22:02 +02:00
TheRealGramdalf
f298639e45 nixos/kanidm: fix systemd service type 2024-08-26 18:16:10 +00:00
TheRealGramdalf
5a1e877394 nixos/kanidm: fix systemd service type 2024-08-26 18:05:32 +00:00
TheRealGramdalf
8f18393d38 nixos/kanidm: inherit lib, nixfmt 2024-08-26 18:01:58 +00:00
Robert Schütz
75ad0af1b6 nixos/home-assistant: set WorkingDirectory 2024-08-26 09:39:06 -07:00
Masum Reza
a8e2b007c5
nixos/autoUpgrade: add --refresh when using flakes (#337436) 2024-08-26 20:16:03 +05:30
Franz Pletz
0b50871403
nixos/gamescope: expose gamescopectl (#337449) 2024-08-26 16:26:46 +02:00
Bobby Rong
28d45487fa
metacity, gnome-notes: Fixups for #333917 (#337452) 2024-08-26 19:59:38 +08:00
Bobby Rong
32eeaa5013
nixos/gnome: Fix eval for gnome-flashback
error: Default graphical session, 'gnome-flashback-metacity', not found.

Fixes f192bd9e5c.
2024-08-26 19:45:12 +08:00
PedroHLC
61dfef9a3d
nixos/gamescope: expose gamescopectl 2024-08-26 08:32:36 -03:00
Masum Reza
b8024284d1
Merge pull request #335625 from JohnRTitor/uwsm-module
nixos/uwsm: init
2024-08-26 15:58:29 +05:30
Jörg Thalheim
f40cd1bfe0 nixos/autoUpgrade: add --refresh when using flakes
otherwise the cache might delay updates quite a bit
2024-08-26 12:02:38 +02:00
Sandro
6b4d280cf5
Merge pull request #336797 from SuperSandro2000/paperless-ngx 2024-08-26 11:47:01 +02:00
7c6f434c
8487207876
Merge pull request #337094 from OPNA2608/init/lomiri/lomiri-docviewer-app
lomiri.lomiri-docviewer-app: init at 3.0.4
2024-08-26 05:40:34 +00:00
DCsunset
b94de95f9d nixos/stirling-pdf: make calibre dependency optional based on config 2024-08-26 01:47:17 +00:00
Martin Weinelt
4da8cc80f1
Merge pull request #337319 from emilazy/push-tuksqzuumnzo
nixos/go2rtc: unpin FFmpeg 6
2024-08-26 02:45:50 +02:00
tomberek
7f7df390e6
Merge pull request #335672 from tomberek/tomberek.nixos_test
nixosTest.nix-upgrade: init
2024-08-25 17:48:39 -04:00
ettom
549912e6ff nixos/snapserver: add nss-lookup.target dependency 2024-08-25 23:46:52 +02:00
Nick Cao
2a7a22122f
Merge pull request #337289 from Kiskae/nvidia/fixes_2024_08_25
nixos/nvidia: various fixes
2024-08-25 17:36:24 -04:00
Sandro
68d0798164
Merge pull request #334901 from jpds/kafka-3.8.0
apacheKafka: init 3.8.0
2024-08-25 23:30:47 +02:00
Kiskae
ef3b6ad33d nixos/nvidia: allow the gsp to be toggled independently from open source driver
fixes #323886
2024-08-25 21:51:17 +02:00
Kiskae
20c5d0adfb nixos/nvidia: make the nvidia driver variant a mandatory user choice
fixes #329450
2024-08-25 21:47:29 +02:00
Sandro Jäckel
bb69775568
paperless-ngx: drop inactive maintainers, add myself to maintainers 2024-08-25 21:39:54 +02:00
Emily
fbb4515fdf nixos/go2rtc: unpin FFmpeg 6
The release we package supports FFmpeg 7; see
<https://github.com/AlexxIT/go2rtc/blob/v1.9.4/pkg/ffmpeg/ffmpeg.go#L15>.
2024-08-25 20:29:08 +01:00
Masum Reza
8da188f8e7
Merge pull request #306650 from returntoreality/indi-3rdparty-refactor
indi-full: Indi 3rdparty refactor
2024-08-25 23:09:21 +05:30
abysssol
503245dd07
Merge pull request #334903 from abysssol/ollama-load-models-service
nixos/ollama: move `loadModels` script into a separate service
2024-08-25 15:56:00 +00:00
Franz Pletz
0a490d78b1
Merge pull request #336599 from bjornfor/nixos-ups-use-enum-for-upsmon-option 2024-08-25 15:49:46 +02:00
Maciej Krüger
00f536f650
Merge pull request #310857 from rnhmjoj/pr-firewall
nixos/firewall: fix reverse path check failures with IPsec
2024-08-25 15:06:49 +02:00
Robert Hensing
727351517e
Merge pull request #335660 from Gabriella439/gabriella/containers_nixpkgs.pkgs
containers.*.config.nixpkgs: use `host.pkgs.stdenv.hostPlatform`
2024-08-25 14:40:31 +02:00
Vili Sinervä
13f07436d4 nixos/libinput: Change new options to more appropriate data types
Change the options to be numbers or lists of numbers instead of strings
like the pre-existing options.
2024-08-25 13:45:14 +02:00
Vili Sinervä
891202ef1f nixos/libinput: Clarify that accelSpeed does not apply to custom profile
Add note to the description of the accelSpeed option to make it clear
that is only applies when flat or adaptive profile is in use.
2024-08-25 13:45:14 +02:00
Vili Sinervä
3aa3236289 nixos/libinput: Add options for defining a custom acceleration functions
Without these options the custom acceleration functions would have to be
defined with the additionalOptions option.
2024-08-25 13:45:14 +02:00
Vili Sinervä
34302b2424 nixos/libinput: Allow 'custom' acceleration profile
This is an option that works with the NixOS module as-is, but is
being blocked from use by the allowed enum values.
2024-08-25 13:45:14 +02:00
Jörg Thalheim
82ac9a1580
Merge pull request #337054 from Mic92/sysusers
sysuser: slightly better assertions message
2024-08-25 09:44:58 +02:00
Bobby Rong
dc23466adb
Merge pull request #336934 from bobby285271/upd/pantheon
Pantheon updates 2024-08-24 (switchboard 8.0.0)
2024-08-25 11:34:02 +08:00
Franz Pletz
9446a5d8da
Merge pull request #337003 from alyssais/no-tell-kernel 2024-08-25 02:07:33 +02:00
Franz Pletz
83cd05ff59
Merge pull request #335976 from poscat0x04/nixos-networkd-ipv6ra 2024-08-25 01:51:36 +02:00
Franz Pletz
a266f38ade
Merge pull request #336584 from mweinelt/engelsystem-cache-migration 2024-08-25 01:50:39 +02:00
Franz Pletz
76d7ccecdf
Merge pull request #313105 from bb2020/xserver 2024-08-25 01:47:27 +02:00
Franz Pletz
39c0d9f53d
Merge pull request #336896 from tomodachi94/enhance/nixos/clamav/systemd-slices 2024-08-25 01:45:27 +02:00
Franz Pletz
35b2bfb7ed
Merge pull request #335967 from CajuM/waydroid-svc-stop 2024-08-25 01:40:42 +02:00
Franz Pletz
3969d739d8
Merge pull request #336995 from Ma27/gitea-drop-pam 2024-08-25 01:25:13 +02:00
Franz Pletz
89b019abe9
Merge pull request #337083 from zimward/doc-ssh 2024-08-25 01:15:35 +02:00
OPNA2608
1758314043 nixos/lomiri: Add docviewer app 2024-08-24 23:27:52 +02:00
OPNA2608
531655d3bf tests/lomiri-docviewer-app: init 2024-08-24 23:27:52 +02:00
Felix Buehler
0c91ea6ec1 nixos/services.mailman: remove with lib; 2024-08-24 23:20:06 +02:00
zimward
81a9bf5861
doc: remove mention of key type 2024-08-24 21:59:22 +02:00
Jared Baur
05aefd6f05
nixos/systemd-boot: remove semicolon 2024-08-24 12:50:26 -07:00
Jared Baur
6327b07b25
nixos/systemd-boot: use unique path for devicetree blob
Use the store directory for the devicetree package containing the
desired DTB when installing to the ESP. This allows for more than one
NixOS generation containing differing DTBs to coexist on the same ESP
(similar to how we can have multiple kernels & initrds). This change
removes the assumption that the filepath passed to `copy_from_file` is a
file that lives at the toplevel of a nix output path (which prior to the
systemd-boot DTB support was the case for the kernel and initrd
derivations).
2024-08-24 12:50:24 -07:00
Jörg Thalheim
7211a81060 sysuser: slightly better assertions message 2024-08-24 19:20:28 +02:00
Mihai-Drosi Câju
05313fc5b3 nixos/waydroid: Update service definition according to upstream
* Upstream switched the service's Type to dbus in 1.4.0
* Enable D-Bus activation
* Fixes #334687
2024-08-24 19:48:20 +03:00
Bobby Rong
8e75a28e4e
nixos/pantheon: Increase memorySize
https://logs.ofborg.org/?key=nixos/nixpkgs.336934&attempt_id=24f89861-72eb-417f-94bf-93cea578a1f1
2024-08-24 22:34:55 +08:00
Adam C. Stephens
bd29cb4b30
Merge pull request #336836 from oddlama/feat-update-kanidm-provision
kanidm-provision: 1.1.1 -> 1.1.2
2024-08-24 08:58:35 -04:00
Alyssa Ross
148261d04b
sd-image: optimise sfdisk call for image building
When building an image, rather than operating on a real partition,
there's no need to have sfdisk tell the kernel to reread the partition
table.  This also avoids a call to sync(2), which could be very
expensive depending on what other IO is going on on the system at the time.
2024-08-24 14:36:07 +02:00
Maximilian Bosch
b39569222b
gitea: drop PAM support
Strongly inspired by the forgejo counterpart[1], for the following
reasons:

* The feature is broken with the current module and crashes on
  authentication with the following stacktrace (with a PAM service
  `gitea` added):

      server # Stack trace of thread 1008:
      server # #0  0x00007f3116917dfb __nptl_setxid (libc.so.6 + 0x8ddfb)
      server # #1  0x00007f3116980ae6 setuid (libc.so.6 + 0xf6ae6)
      server # #2  0x00007f30cc80f420 _unix_run_helper_binary (pam_unix.so + 0x5420)
      server # #3  0x00007f30cc8108c9 _unix_verify_password (pam_unix.so + 0x68c9)
      server # #4  0x00007f30cc80e1b5 pam_sm_authenticate (pam_unix.so + 0x41b5)
      server # #5  0x00007f3116a84e5b _pam_dispatch (libpam.so.0 + 0x3e5b)
      server # #6  0x00007f3116a846a3 pam_authenticate (libpam.so.0 + 0x36a3)
      server # #7  0x00000000029b1e7a n/a (.gitea-wrapped + 0x25b1e7a)
      server # #8  0x000000000047c7e4 n/a (.gitea-wrapped + 0x7c7e4)
      server # ELF object binary architecture: AMD x86-64
      server #
      server # [   42.420827] gitea[897]: pam_unix(gitea:auth): unix_chkpwd abnormal exit: 159
      server # [   42.423142] gitea[897]: pam_unix(gitea:auth): authentication failure; logname= uid=998 euid=998 tty= ruser= rhost=  user=snenskek

  It only worked after turning off multiple sandbox settings and adding
  `shadow` as supplementary group to `gitea.service`.

  I'm not willing to maintain additional multiple sandbox settings for
  different features, especially given that it was probably not used for
  quite a long time:

  * There was no PR or bugreport about sandboxing issues related to
    PAM.

  * Ever since the module exists, it used the user `gitea`, i.e. it had
    never read-access to `/etc/shadow`.

* Upstream has it disabled by default[2].

If somebody really needs it, it can still be brought back by an overlay
updating `tags` accordingly and modifying the systemd service config.

[1] 07641a91c9
[2] https://docs.gitea.com/usage/authentication#pam-pluggable-authentication-module
2024-08-24 13:40:58 +02:00
Cosima Neidahl
eb76459e90
Merge pull request #334952 from OPNA2608/fix/ayatana-lomiri-indicator-marking
nixos/ayatana-indicators: Split ayatana and lomiri indicators
2024-08-24 11:12:00 +02:00
Bobby Rong
b3784b8153
treewide: Fix switchboard executable name 2024-08-24 14:31:20 +08:00
Bobby Rong
96b1f3bd99
Merge pull request #336790 from bobby285271/upd/pantheon
Pantheon updates 2024-08-23
2024-08-24 11:52:42 +08:00
Gabriella Gonzalez
0b6fa5ee40
virtualisation.oci-containers: Add new imageStream option (#335430)
This adds a new `imageStream` option that can be used in conjunction
with `pkgs.dockerTools.streamLayeredImage` so that the image archive
never needs to be materialized in the `/nix/store`.  This greatly
improves the disk utilization for systems that use container images
built using Nix because they only need to store image layers instead of
the full image.  Additionally, when deploying the new system and only
new layers need to be built/copied.
2024-08-24 04:38:27 +02:00
Tomodachi94
695b1c874d
nixos/clamav: add system-clamav.slice
Tracking: https://github.com/NixOS/nixpkgs/issues/279915
2024-08-23 17:09:11 -07:00
Jan Tojnar
b8f3c78021
Merge pull request #333917 from jtojnar/gnome-top-level
gnome: Move more packages to top-level
2024-08-24 01:43:31 +02:00
Peder Bergebakken Sundt
d38f701636
Merge pull request #334559 from litchipi/ifm_fixup
ifm-web: init at 4.0.2
2024-08-24 01:07:30 +02:00