Pyrox
4e632e9c3f
nixos/ntpd: Add hardening
2024-10-19 14:26:17 -04:00
Pyrox
53bc9450bc
nixos/ntpd: Use StateDirectory instead of a preStart script
2024-10-19 14:26:00 -04:00
Pyrox
297f21e357
nixos/ntpd: format with nixfmt-rfc-style
2024-10-19 04:39:16 -04:00
Peder Bergebakken Sundt
03d8f52dc6
nixos/tailscale: document tailscale-autoconnect ( #347881 )
2024-10-19 07:01:26 +02:00
Peder Bergebakken Sundt
465201822e
nixos/mihomo: fix option type and test ( #345891 )
2024-10-19 06:58:41 +02:00
Sandro
f0bc4f6bbf
nixos-firewall-tool: add nftables support ( #324615 )
2024-10-18 23:57:39 +02:00
Stanisław Pitucha
87c458e3ce
nixos/go-camo: fix shellcheck findings with enableStrictShellChecks enabled ( #349557 )
2024-10-19 06:22:18 +11:00
jmir1
858b5c6762
nixos/ddclient: Fix ip command with usev4 and usev6
2024-10-18 20:32:16 +02:00
Gary Guo
cabbab19e2
nixos-firewall-tool: add nftables support
...
Co-authored-by: Rvfg <i@rvf6.com>
2024-10-18 20:16:27 +02:00
Vladimír Čunát
a8f84a9dff
nixos/kresd: add link to upstream doc ( #311915 )
2024-10-18 10:22:18 +02:00
David McFarland
cd286b21e4
resolvconf: use correct output files when used with dnsmasq ( #349320 )
2024-10-17 16:44:18 -03:00
David McFarland
403604ca66
resolvconf: use correct output files when used with dnsmasq
2024-10-17 14:20:57 -03:00
Adam Stephens
bece21421b
nixos/atticd: wants network-online.target
...
fixes:
trace: evaluation warning: atticd.service is ordered after 'network-online.target' but doesn't depend on it
2024-10-16 12:36:19 -04:00
K900
70cc7b62f2
nixos/murmur: Set UMask to 027 ( #348652 )
2024-10-16 05:16:09 +03:00
Robert Schütz
fb2d897809
nixos/headscale: don't set deprecated options in config ( #347991 )
2024-10-15 16:22:18 -07:00
Azat Bahawi
e2337957df
nixos/zapret: init ( #347805 )
2024-10-15 20:37:40 +00:00
Dmitry Voronin
5a5c04d1ea
nixos/zapret: init
2024-10-15 21:51:53 +03:00
Peder Bergebakken Sundt
13bf1d6259
nixos/resilio: add package option ( #346427 )
2024-10-15 20:38:41 +02:00
Felix Singer
13f6e2d85f
nixos/murmur: Set UMask to 027
...
Group only needs limited access, while other users don't need access at
all. So set the UMask to 027.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-15 02:43:42 +02:00
Sandro Jäckel
db12279890
nixos/go-camo: fix shellcheck findings with enableStrictShellChecks enabled
2024-10-14 18:21:30 +02:00
Michele Guerini Rocco
35618d0b14
nixos/dhcpcd: fix race between namespace setup and resolvconf ( #348305 )
2024-10-14 15:44:32 +02:00
Adam C. Stephens
86420f4ee8
nixos/atticd: init module ( #347749 )
2024-10-14 09:33:35 -04:00
Vladimír Čunát
46954f61c6
nixos/knotd: extend SystemCallFilter
...
It was breaking knot-dns.tests.knot
New knotd uses fchown to cover cases where user changes during startup.
In typical Linux cases the user is kept the same and there are
capabilities instead, but the syscall still happens and got caught here.
2024-10-14 10:26:46 +02:00
rnhmjoj
52e2e7027d
dhcpcd: fix race between namespace setup and resolvconf
...
systemd requires paths in `ReadWritePaths=` to exist before setting up
the service sandbox, so dhcpcd should be ordered after resolvconf.
Making resolvconf a oneshot service ensure `After=resolvconf.service`
works correctly.
2024-10-14 08:02:46 +02:00
Adam Stephens
8d4f3f2b3e
nixos/atticd: init module
...
Copied from 1b29816235/nixos/atticd.nix
2024-10-13 08:23:34 -04:00
Robert Schütz
cc4d29d353
nixos/headscale: assert that dns.base_domain is set when using MagicDNS
2024-10-12 18:28:17 -07:00
Robert Schütz
0673e98248
nixos/headscale: update option descriptions
2024-10-11 20:17:15 -07:00
Robert Schütz
dfb0f00fc9
nixos/headscale: don't set deprecated options in config
...
We cannot use `mkRenamedOptionModule` or `mkRemovedOptionModule` inside
a freeform option. Thus we have to manually assert these deprecated
options aren't used rather than aliasing them to their replacement.
2024-10-11 20:05:29 -07:00
Robert Schütz
d4ae06c73b
nixos/headscale: assert that server_url does not contain base_domain
2024-10-11 13:29:04 -07:00
Peder Bergebakken Sundt
233d422887
nixos/tailscale: document tailscale-autoconnect
2024-10-11 10:59:49 +02:00
github-actions[bot]
aa2334f4a8
Merge master into staging-next
2024-10-11 00:14:02 +00:00
h7x4
e49f3574ab
nixos/fedimintd: make nginx url forwarding path configurable ( #347604 )
2024-10-10 21:14:20 +02:00
github-actions[bot]
a5883bc172
Merge master into staging-next
2024-10-10 12:05:39 +00:00
Franz Pletz
1479e0c4de
nixos/frr: refactor ( #327099 )
2024-10-10 12:55:34 +02:00
Pol Dellaiera
a72a8bcfb3
treewide: fix typo chown -> chmod ( #347678 )
2024-10-10 10:55:34 +02:00
r-vdp
9f1d2e97af
nixos/shorewall: Fix typo, chown -> chmod
2024-10-10 09:02:58 +02:00
Dawid Ciężarkiewicz
570454c295
nixos/fedimintd: make nginx url forwarding path configurable
...
Some users would like to customize it.
Also, in current versions of fedimint p2p port in the URL
must be set, due to some bug, so update the example value
to reflect that.
2024-10-09 14:28:51 -07:00
Frank Doepper
ecdfb14ef9
nixos/frr: refactor
...
- use upstream service and scripts
- switch to integrated-vtysh-config, abandon per-daemon config
- use always daemon names in options (e.g. ospf -> ospfd)
- zebra, mgmtd and staticd are always enabled
- abandon vtyListenAddress, vtyListenPort options; use
just "extraOptions" or "options" instead, respectively
- extend test to test staticd
- update release-notes
- pkgs.servers.frr: fix sbindir and remove FHS PATH
- introduce services.frr.openFilesLimit option
2024-10-09 22:49:50 +02:00
K900
0717a4da77
Merge remote-tracking branch 'origin/master' into staging-next
2024-10-09 21:08:25 +03:00
Franz Pletz
ca912828ba
nixos/dhcpcd: allow jemalloc and mimalloc memory allocators ( #346938 )
2024-10-09 17:27:26 +02:00
Franz Pletz
689b9903ac
nixos/tailscale-derper: init ( #306533 )
2024-10-09 17:05:01 +02:00
Franz Pletz
ae4102c9f3
headscale (module and package): 0.22.3 -> 0.23.0 ( #340054 )
2024-10-09 17:01:18 +02:00
K900
956f9243c0
Merge remote-tracking branch 'origin/master' into staging-next
2024-10-08 21:15:13 +03:00
Izorkin
c3e32a04ae
nixos/dhcpcd: allow jemalloc and mimalloc memory allocators
2024-10-08 14:12:27 +03:00
Florian Klink
146e83d76b
dhcpcd: enable sandboxing options ( #208780 )
2024-10-08 13:09:11 +03:00
github-actions[bot]
5fa43e7396
Merge master into staging-next
2024-10-07 06:05:15 +00:00
Emily
1a53b400e5
mongodb: mongodb-5_0 -> mongodb-7_0; mongodb-5_0: drop; unifi: unifi7 -> unifi8; unifi{7,-video}: drop ( #345625 )
2024-10-07 01:38:54 +01:00
Emily
b0395df085
unifi7: drop
2024-10-06 22:47:41 +01:00
Izorkin
611b1d53b7
dhcpcd: enable sandboxing options
2024-10-06 23:46:18 +03:00
github-actions[bot]
7ab01e096c
Merge master into staging-next
2024-10-06 18:03:58 +00:00
