Commit Graph

33745 Commits

Author SHA1 Message Date
Erin Yuki Schlarb
56581588c3 jitsi-meet: Add option to disable Prosody services not used by Jitsi Meet
The default Prosody config assumes that Prosody will be used as a federated
XMPP server, while the usecase for Jitsi Meet is much narrower.
2024-09-30 18:19:34 +02:00
Erin Yuki Schlarb
7ab8f255b9 jitsi-meet: Restrict jitsi-excalidraw systemd service to the minimum requried 2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
9e8b3f97cc jitsi-meet: Also forward Excalidraw connections when using Caddy as web server 2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
61cf88212d jitsi-videobridge: Set configurable default NAT harvester address to make the
service work behind NAT without additional manual configuration
2024-09-30 18:19:33 +02:00
h7x4
11f77694ac
nixos/bluemap: move to web-apps (#345353) 2024-09-30 17:53:27 +02:00
Erin Yuki Schlarb
67e261beb5 jitsi-meet: Set internal MUC options set in official Docker image 2024-09-30 17:31:04 +02:00
pinage404
83b1350904 nixos/open-webui: fix opensearch
When [adding Open WebUI as search engine in Firefox](https://docs.openwebui.com/tutorials/integrations/browser-search-engine/#for-firefox) it always links to `http://localhost:3000` instead of the configured port

It is because [the response use `WEBUI_URL` environment variable](1d225dd804/backend/open_webui/main.py (L2370)) which [is set by default to `1d225dd804/backend/open_webui/env.py (L106))
2024-09-30 17:28:11 +02:00
Maximilian Bosch
1e746f0030
Merge: nixos/postgresql: escape initdbArgs (#345341) 2024-09-30 17:04:10 +02:00
Ali Rizvi
9020d82c70
nixos/wayland: add gtk portal by default 2024-09-30 09:54:19 -04:00
Martin Weinelt
b47b572e21
nixos/freeradius: fix group assignment for radius user 2024-09-30 15:50:13 +02:00
github-actions[bot]
d7d44ff498
Merge master into staging-next 2024-09-30 12:05:43 +00:00
Martin Weinelt
4ca03e3a11
nixos/logrotate: allow sending signal to arbitrary processes
Various postrotate scripts send e.g. SIGHUP to processes, to have them
reload their config or reopen their logfile.
2024-09-30 13:30:38 +02:00
Martin Weinelt
2dabc4fce1
nixos/logrotate: reorder setuid syscall group
Relevant parts of @setuid are in @privileged, so we need to flip the
order around, to grant @setuid in spite of denying @privileged.
2024-09-30 13:26:14 +02:00
Florian Klink
9ff2ff44f8
nixos/garage: fix StateDirectory check to work with multiple data_dirs (#342903) 2024-09-30 12:27:06 +02:00
Pol Dellaiera
c82e57f79b
nixos: enable fstrim by default (#345285) 2024-09-30 11:52:13 +02:00
github-actions[bot]
09f18b89af
Merge master into staging-next 2024-09-30 00:14:50 +00:00
Weijia Wang
aa4c638b89
wordpressPackages: packages, language and theme updates (#345359) 2024-09-29 23:44:35 +02:00
Viorel-Cătălin Răpițeanu
db71929224 wordpressPackages: update packages, add ru_RU lang, make twentytwentyfour default 2024-09-29 23:09:33 +03:00
h7x4
c25213a9bd
nixos/bluemap: move to web-apps 2024-09-29 21:40:39 +02:00
Maximilian Bosch
11d1f8776c
nixos/postgresql: escape initdbArgs
It doesn't look correct that this isn't the case already.
2024-09-29 21:03:52 +02:00
Maximilian Bosch
0e78dc369c
Merge: doc: use initdbArgs in example postgresql upgrade script (#302823) 2024-09-29 20:39:05 +02:00
Alyssa Ross
ac037f0b18
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/compilers/llvm/common/default.nix
2024-09-29 20:10:12 +02:00
Masum Reza
007e91615b
waybar: add systemdSupport input (#345107) 2024-09-29 23:28:25 +05:30
Savyasachee Jha
22e2e02118 nixos/privatebin: init 2024-09-29 23:02:19 +05:30
Naïm Camille Favier
7cba8410f7
nixos/networkmanager: set up /etc/ipsec.secrets as required by the L2TP plugin (#340325) 2024-09-29 18:56:59 +02:00
Martin Weinelt
6710d0dd01
nixos/logrotate: relax hardening (#345275) 2024-09-29 16:24:34 +02:00
Weijia Wang
27e93e3061
go-ethereum: 1.14.8 -> 1.14.9 (#342934) 2024-09-29 16:21:23 +02:00
Franz Pletz
273796ebd7
nixos/upower: update percentage defaults (#344839) 2024-09-29 15:39:41 +02:00
Sefa Eyeoglu
5fcc1337d2
nixos/waybar: enable systemdSupport for package
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-09-29 17:56:24 +05:30
h7x4
8b62732138
bluemap: 3.21 -> 5.4 (#332245) 2024-09-29 14:05:29 +02:00
github-actions[bot]
8e5ca58e0a
Merge master into staging-next 2024-09-29 12:05:05 +00:00
Jörg Thalheim
7d8f1572d1 nixos: enable fstrim by default
The majority of users these days will install NixOS on SSD/NVME based
storage. Enabling fstrim ensures that the TRIM operation on this type of
storage is run at least once a week. This will improve performance and
life time of said devices. This also works in virtual machines as
formats such as qcow2 or vmdk support TRIM.
Ubuntu has a similar systemd timer also for quite a while enabled by
default.
Enabling this service will not increase the dependency closure as
util-linux is already part of the base system.
In case only filesystems that are not supported by fstrim are used, the
overhead is negelible as fstrim run in less than a second once a week.
2024-09-29 14:04:18 +02:00
Martin Weinelt
d3e0a89ca6
nixos/logrotate: relax hardening
The previous hardening change restricted the unit too much, breaking
legitimate functionality of logrotate.

Unfortunately this was not covered by our NixOS test.
2024-09-29 12:29:19 +02:00
Doron Behar
4fcd6b86ee
nixos/tzupdate: make it actually work (#343748) 2024-09-29 12:56:06 +03:00
K900
3951cf36e1
nixos/xdg/icons: add fallbackThemes option (#345057) 2024-09-29 12:17:57 +03:00
Bruno Bigras
1336b64235
Add veilid module (#330585) 2024-09-29 04:30:44 -04:00
Michele Guerini Rocco
a08c2e29b9
nixos/monero: remove with lib; (#343474) 2024-09-29 09:36:21 +02:00
K900
ce7068660a nixos/xdg/icons: add fallbackThemes option 2024-09-29 08:42:20 +03:00
github-actions[bot]
080ddac139
Merge master into staging-next 2024-09-29 00:15:45 +00:00
melvyn
073099d0f7
nixos/seafile: add persistent user, configurable storage path, gc service 2024-09-28 19:09:58 -04:00
melvyn
d3b5dc8da1
nixos/seafile: add persistent user, configurable storage path, gc service 2024-09-28 17:57:02 -04:00
Franz Pletz
e8486ebc7f
freeradius: add option to compile with postgres (#265762) 2024-09-28 22:56:08 +02:00
Daniel Nagy
6512103dfe
nixos/monero: remove with lib; 2024-09-28 22:30:00 +02:00
K900
1228db540d
nixos/plasma6: use xwayland module (#345122) 2024-09-28 22:14:43 +03:00
github-actions[bot]
8693fc15c4
Merge master into staging-next 2024-09-28 18:04:13 +00:00
Danilo Reyes
056fc213e6
modules/obs-studio: optionally enable v4l2loopback (#312112)
* modules/obs-studio: optionally enable v4l2loopback

* add test

* added documentation to 24.11 changelog
2024-09-28 19:43:06 +02:00
Leona Maroni
a23db91282
nixos/immich: add option database.port (#345094) 2024-09-28 18:01:08 +02:00
Yaroslav Bolyukin
fba92705b0
nixos/plasma6: use xwayland module
For ability to override used xwayland package
2024-09-28 17:27:22 +02:00
Emily
818089ba73
teams: create the Xen Project Team and rename instances of Xen to Xen Project. (#344314) 2024-09-28 15:57:32 +01:00
Fernando Rodrigues
dc7db9bcc4
treewide: rename Xen to Xen Project
Xen is a trademark of the Cloud Software Group; we're not packaging
Xen(Server), we're packaging the Xen Project Hypervisor, which is open
source and owned by the Linux Foundation.

This is based on advice from Kelly Choi, the Xen Project Community
Manager, who has assisted us in the branding aspects of pacakaging.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-28 14:53:59 +00:00
Fernando Rodrigues
82f0ee2c5b
treewide: assign maintainership of the Xen-related packages to the Xen Project Hypervisor Team
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-28 14:53:59 +00:00
Franz Pletz
79a01a8631
pleroma: 2.6.3 -> 2.7.0 (#333283) 2024-09-28 15:36:27 +02:00
Franz Pletz
cc2142b9f0
nixos/zfs: remove incorrect conditional use of spl kmod; remove withs (#344271) 2024-09-28 15:30:13 +02:00
Franz Pletz
1ee99a4837
tailscaled: after NetworkManager-wait-online (#344678) 2024-09-28 15:26:00 +02:00
Franz Pletz
a3f79b7d63
tailscale: add su to path (#344947) 2024-09-28 15:22:40 +02:00
Franz Pletz
ef1ecffdbe
nixos/gitlab: add systemd slice (#343523) 2024-09-28 15:12:58 +02:00
github-actions[bot]
aef46265d9
Merge master into staging-next 2024-09-28 12:05:16 +00:00
h7x4
dd7a192b4f
nixos/gitlab: add services to systemd slice
Co-authored-by: Bjørn Forsman <bjorn.forsman@gmail.com>
2024-09-28 11:27:05 +02:00
Jörg Thalheim
028b7d27a3
growpart: shellcheck fixes (#340490) 2024-09-28 09:50:11 +02:00
Jörg Thalheim
076f2f69f3
sshd: fix shellcheck warnings in prestart script (#340484) 2024-09-28 09:49:25 +02:00
Jörg Thalheim
4f06ecd5a6
systemd/initrd: fix shellcheck issues (#340486) 2024-09-28 09:48:29 +02:00
github-actions[bot]
9badc90a26
Merge master into staging-next 2024-09-28 00:13:56 +00:00
Mikilio
938d190ed2
tailscale: add su to path
this adds access to `su` via security wrappers
2024-09-27 23:05:20 +02:00
Atemu
3913c72204
nixos/jenkinsSlave: remove with lib; (#343514) 2024-09-27 21:59:45 +02:00
Atemu
e8d40a7f34
nixos/i2pd: remove with lib; (#343476) 2024-09-27 21:58:59 +02:00
Gary Guo
162f0719e9 nixos/freeradius: fix radius group
A group must be selected since it no longer defaults to nogroup
2024-09-27 20:11:57 +01:00
Gary Guo
d0481239c1 nixos/freeradius: add option to override package 2024-09-27 20:11:56 +01:00
github-actions[bot]
911b856128
Merge master into staging-next 2024-09-27 18:04:26 +00:00
Picnoir
50ffaf03bb nixos/pleroma: format module with nixfmt 2024-09-27 19:30:14 +02:00
Picnoir
aa666ce8f1 nixos/pleroma: move migrations to their own systemd unit
Running the migrations in a systemd execStartPre was a mistake. The
migrations can be pretty long to run and easily time-out.

Moving this to a proper oneshot service solves this issue and makes
this fits better the systemd execution model. We can now easily filter
the migrations logs.
2024-09-27 19:29:41 +02:00
Sandro
0151acc48e
nixos/gotenberg: Fix coredumps on service start (#344770) 2024-09-27 17:22:10 +02:00
Andrew Marshall
bec753ddfc nixos/zfs: replace with with let
The fully-qualified name would certainly be a lot here, but `with` can
still be unclear even with narrow scope. A short `let` adds clarity
without significantly increasing verbosity.
2024-09-27 08:08:31 -04:00
Andrew Marshall
eef4c18ae8 nixos/zfs: remove unused vars 2024-09-27 08:08:31 -04:00
Andrew Marshall
33bd85a6c8 nixos/zfs: remove top-level withs
As it is generally considered an anti-pattern. Removing them here in
fact exposed one bug (see previous commit).
2024-09-27 08:08:30 -04:00
Andrew Marshall
06ed2c46fb nixos/zfs: remove incorrect conditional use of spl kmod
This was incorrectly getting `lib.version` which is e.g.
`"24.11pre-git"`, but should have been the ZFS package version. However,
the condition, at least per the comment, is reversed and should be
instead `versionOlder cfgZfs.package.version "2.2.0"`. However, the
entire premise seems to be incorrect, as ZFS 2.2.6 includes the spl
module. Since the previous condition here was effectively always true,
it would initially seem the best move is to remove the conditional
altogether and always include the spl kmod. However, going back to
4360a87c45 where this condition was added,
the intent appears to be that spl was no longer needed here in
the-pre-release ZFS (long since in all supported versions), due to it
being merged into ZFS mainline. Given that intent and that our boot
tests on all versions succeed without including it in the initrd, remove
it.
2024-09-27 08:08:30 -04:00
github-actions[bot]
22165c231d
Merge master into staging-next 2024-09-27 12:05:46 +00:00
Tom Vincent
069e6f3262
nixos/upower: update percentage defaults
Current defaults were added in aecfea0, which were in turn based on upstream:
28bd86c181/etc/UPower.conf.

Current upstream config:
94c91f93f1/etc/UPower.conf
2024-09-27 09:41:55 +01:00
7c6f434c
c87aad4296
Add Collabora Online (#330708) 2024-09-27 08:33:57 +00:00
K900
1e15add1c2
xwaylandvideobridge refactor + default in Plasma (#344808) 2024-09-27 10:03:24 +03:00
K900
307dda84c0 nixos/nixos-containers: partially revert aa4570ca05
Word splitting is actually intentional here, as both of those variables
can (and often do) contain multiple flags.
2024-09-27 10:00:58 +03:00
oddlama
d229011025 nixos/influxdb2: fix service startup reliablility 2024-09-27 08:14:27 +02:00
github-actions[bot]
b42890bf68
Merge master into staging-next 2024-09-27 06:04:49 +00:00
Gaute Ravndal
e9860fa6a9 nixos/snapper: use more precise type definition 2024-09-27 07:40:06 +02:00
K900
e23ad5ca0e nixos/plasma6: install xwaylandvideobridge by default 2024-09-27 08:16:56 +03:00
K900
15200e9966 nixos/plasma6: install baloo-widgets by default
Needed for indexer metadata in Dolphin.
2024-09-27 08:05:05 +03:00
Artturin
716f0a7327
nixos/firefox: add autoConfigFiles (#321254) 2024-09-27 05:20:08 +03:00
Pyrox
e2c5983f40
nixos/gotenberg: Fix coredumps on service start 2024-09-26 21:37:41 -04:00
Fabián Heredia Montiel
2a115bbd1e Merge remote-tracking branch 'origin/master' into staging-next 2024-09-26 18:03:59 -06:00
Weijia Wang
63ab048916 nixos/geth: add holesky testnet 2024-09-27 01:17:21 +02:00
Leona Maroni
7f35330bd8
nixos/nixos-containers: fix shellcheck errors in systemd scripts (#340483) 2024-09-26 23:05:35 +02:00
Gaute Ravndal
6ce7db1126 nixos/snapper: fix timeline option types
These can be either an integer or a range.

Range options are necessary for `FREE_LIMIT` to take effect when used in
conjunction with `TIMELINE_LIMIT_*`.
2024-09-26 21:55:23 +02:00
r-vdp
aa4570ca05
nixos/nixos-containers: fix shellcheck errors in systemd scripts 2024-09-26 21:54:07 +02:00
Jörg Thalheim
e5a08c8859 nix-fallback-paths: 2.24.7 -> 2.24.8 2024-09-26 21:04:57 +02:00
Jörg Thalheim
91ea06cb60 Merge remote-tracking branch 'upstream/master' into HEAD 2024-09-26 21:04:22 +02:00
Jörg Thalheim
44312de8c2
nixVersions.nix_2_18: 2.18.7 -> 2.18.8 (#344714) 2024-09-26 20:59:11 +02:00
seth
0aed7f0d24 nixVersions.nix_2_18: 2.18.7 -> 2.18.8
Diff: https://github.com/NixOS/nix/compare/2.18.7...2.18.8
Fixes https://github.com/NixOS/nix/security/advisories/GHSA-6fjr-mq49-mm2c
2024-09-26 20:53:55 +02:00
Martin Weinelt
e04b941dfb
nixos/printing: add option to disable browsed daemon (#344702) 2024-09-26 20:44:57 +02:00
Thomas Gerbet
981a63b005 nixos/printing: add option to disable browsed daemon
It is currently tied to `services.avahi.enable` which might not be
desirable.

With this change it is possible to disable the service with
`services.printing.browsed.enable = false`
2024-09-26 20:11:14 +02:00
github-actions[bot]
c8c18095f9
Merge master into staging-next 2024-09-26 18:04:33 +00:00
Marin
0d822ccdbc tailscaled: after NetworkManager-wait-online
The wait will only be enabled on machines with NetworkManager enabled.

Closes #180175
2024-09-26 12:12:46 -04:00