3189 Commits

Author	SHA1	Message	Date
Yureka	55da71c10e	nixos/nftables: add checkRuleset option (#216531) ... * nixos/nftables: add checkRuleset option * lkl: 2022-05-18 -> 2023-01-27	2023-03-02 10:28:01 +01:00
Daniel Olsen	ea31ef91af	nixos/headscale: update oidc options	2023-02-27 15:17:16 +01:00
Robert Schütz	9e1d4dff3e	nixos/openvpn: use writeShellScript ... Previously the upScript would fail with Syntax error: "(" unexpected (expecting "done") on line 7 if /bin/sh is not bash.	2023-02-26 10:12:28 -08:00
Naïm Favier	129b6f7812	Merge pull request #216504 from ncfavier/unbound-state-dir-writable ... nixos/unbound: make stateDir writable	2023-02-23 14:23:53 +01:00
Robert Schütz	89c8ef30a6	nixos/imaginary: bind to localhost by default	2023-02-22 17:37:36 -08:00
Sandro	5b7d323435	Merge pull request #216909 from emilytrau/tailscale-tweaks	2023-02-21 23:21:09 +01:00
Jonas Heinrich	553c376a49	nixos/networkd-dispatcher: init	2023-02-19 04:42:25 -05:00
Nick Cao	a1291d0d02	Merge pull request #205784 from Eliot00/v2raya-fix ... v2raya: v2rayA should start after nftables	2023-02-19 15:08:29 +08:00
Emily Trau	949b1df785	nixos/tailscale: fix config priority conflict	2023-02-18 13:28:04 +11:00
pennae	047bd73c5e	nixos/wireguard: make publicKeys singleLineStrs ... using readFile instead of fileContents (or using indented strings) can leave a trailing newline that causes build errors in systemd units and has previously caused runtime errors in wireguard scripts. use singleLineStr to strip a trailing newline if it exists, and to fail if more than one is present.	2023-02-16 11:56:12 +01:00
Naïm Favier	5cf311c036	nixos/unbound: make stateDir writable	2023-02-15 18:14:58 +01:00
Robert Schütz	7b60fce843	Merge pull request #215222 from dotlambda/nixos-imaginary-init ... nixos/imaginary: init	2023-02-12 08:42:19 -08:00
Andreas Stührk	8dade1f713	nixos/envoy: add option requireValidConfig to make config validation errors non-fatal ... Co-authored-by: Vincent Haupert <vincent@yaxi.tech>	2023-02-11 18:21:21 +01:00
Vincent Haupert	84220a7098	nixos/envoy: add package option	2023-02-11 18:21:21 +01:00
Vincent Haupert	3c3da8768b	nixos/envoy: further service hardening	2023-02-11 18:21:21 +01:00
Vincent Haupert	8fff553f7e	nixos/envoy: sort serviceConfig entries	2023-02-11 18:21:21 +01:00
Vincent Haupert	989a1a6ef5	nixos/envoy: use lists in serviceConfig where appropriate ... Using type `list` instead of `str` in `serviceConfig` entries which accept multiple values allows easier extension of the unit configuration.	2023-02-11 18:21:21 +01:00
Robert Schütz	efee1b5234	nixos/imaginary: init	2023-02-11 09:18:42 -08:00
Naïm Favier	86a387351a	Merge branch 'master' into nixos/hostapd	2023-02-11 14:03:56 +01:00
bb2020	76bf633dc2	nixos/minidlna: minor changes	2023-02-09 21:11:20 +03:00
pennae	bf4c0c1900	nixos/*: remove trailing period in mkEnableOptions ... those are added by mkEnableOption, and .. is replaced to … by markdown processing.	2023-02-08 15:23:34 +01:00
Will Fancher	1406dd02a9	sshd: Cyphers -> Ciphers	2023-02-07 13:54:36 -05:00
Sandro	98a5726add	Merge pull request #204390 from gbtb/openvpn_client_restart_after_suspend ... Resolves https://github.com/NixOS/nixpkgs/issues/52528	2023-02-07 01:06:24 +01:00
Matthieu Coudron	ef5da70d66	services.openssh: rename several settings (#211991) ... * services.openssh: rename several settings ... to match the sshd config format (makes transition smoother), namely: services.openssh.forwardX11 -> services.openssh.settings.X11Forwarding services.openssh.cyphers -> services.openssh.settings.Cyphers services.openssh.macs -> services.openssh.settings.Macs services.openssh.kexAlgorithms -> services.openssh.settings.KexAlgorithms services.openssh.gatewayPorts -> services.openssh.settings.GatewayPorts * release-notes: mention openssh renaming * chore: regenerated release-notes	2023-02-07 00:11:18 +01:00
Sandro	d47709d1ef	Merge pull request #208189 from numinit/update-nebula-module	2023-02-06 23:14:58 +01:00
Robert Obryk	0a6dd02620	nixos/firefox-syncserver: enable recommendedProxySettings ... The syncserver requires a Host header identical to the one provided by the client.	2023-02-05 23:47:19 +01:00
Malte Voos	3449f83618	maintainers/malvo: update information	2023-02-05 15:05:51 +01:00
Morgan Jones	e99f342f11	nixos/nebula: harden systemd unit	2023-02-04 16:24:45 -08:00
Morgan Jones	9d649fd78c	nixos/nebula: add tests for relays; clean up nebula passthru test	2023-02-04 16:24:45 -08:00
Morgan Jones	90581c977f	nixos/nebula: don't run as root; support relays	2023-02-04 16:24:45 -08:00
Elliot	e78f2115bf	v2raya: v2rayA should start after nftables	2023-02-03 10:22:23 +08:00
Sebastian Sellmeier	f531b17f7d	avahi-daemon: add ConfigurationDirectory to ensure "avahi/services" exists	2023-02-01 21:43:29 +01:00
Izorkin	59dbe319ce	nixos/gitea: update SystemCallFilter	2023-01-31 10:08:32 -06:00
Izorkin	48ecda0962	nixos/chrony: disable PrivateDevices setting	2023-01-31 10:08:32 -06:00
Weijia Wang	5f83b5d199	Merge pull request #208801 from LeSuisse/multipath-tools-0.9.4 ... multipath-tools: 0.9.3 -> 0.9.4	2023-01-31 14:57:49 +01:00
Nick Cao	db77921d65	Merge pull request #205118 from SharzyL/fix-openconnect-protocol ... nixos/openconnect: support alternative protocol	2023-01-31 19:53:53 +08:00
pennae	5b6dcece88	Merge pull request #212684 from pennae/nixos-render-docs ... nixos-render-docs: init, use for some manual rendering to docbook	2023-01-30 19:26:07 +01:00
Michele Guerini Rocco	72c6c848ee	Merge pull request #212685 from rnhmjoj/pr-connman ... nixos/wireless: fix failure on missing config file	2023-01-30 13:32:58 +01:00
pennae	0a6e6cf7e6	nixos/manual: render module chapters with nixos-render-docs ... this converts meta.doc into an md pointer, not an xml pointer. since we no longer need xml for manual chapters we can also remove support for manual chapters from md-to-db.sh since pandoc converts smart quotes to docbook quote elements and our nixos-render-docs does not we lose this distinction in the rendered output. that's probably not that bad, our stylesheet didn't make use of this anyway (and pre-23.05 versions of the chapters didn't use quote elements either). also updates the nixpkgs manual to clarify that option docs support all extensions (although it doesn't support headings at all, so heading anchors don't work by extension).	2023-01-27 20:07:34 +01:00
rnhmjoj	688d658a96	nixos/wireless: fix failure on missing config file ... This change prevents doing the secret substitution when the config is missing, which would result in an error. The service can be useful even without configuration; for example connman controls wpa_supplicant using dbus and as such it does not need a config file nor any other declarative options.	2023-01-26 00:31:21 +01:00
Sandro	e3d6edd75f	Merge pull request #209045 from Izorkin/update-dhcpcd-ipv6rs	2023-01-23 23:25:03 +01:00
Bernardo Meurer	271dbd928e	nixos/blocky: restart on failure	2023-01-23 11:45:56 -05:00
pennae	e067d9e33e	nixos/redsocks: fix option description formatting	2023-01-22 17:50:09 +01:00
Nick Cao	c2de985844	Merge pull request #211559 from GTrunSec/nomad-credential ... nixos/nomad: add LoadCredential option	2023-01-22 08:27:44 +08:00
Naïm Favier	8bf63a5ed4	Merge pull request #211992 from ncfavier/remove-stray-spaces	2023-01-21 21:51:52 +01:00
Naïm Favier	3aa1337a71	nixos: remove stray spaces	2023-01-21 21:46:53 +01:00
Naïm Favier	363158603a	nixos: fix backticks in Markdown descriptions	2023-01-21 18:08:38 +01:00
guangtao	6c46078aad	nixos/nomad: add LoadCredential option	2023-01-21 06:09:22 -08:00
guangtao	b5a3f795c3	nixos/nomad: fix multi-plugin-dir path	2023-01-18 22:22:43 -08:00
maifel-maifel	4dbc2fe873	nixos/syncthing: point out pitfalls with extraOptions (#210208) ... Co-authored-by: digital <git-voopaipa@dinid.net>	2023-01-16 13:12:12 +01:00