Weijia Wang
5d0ea948f7
Merge pull request #267490 from onny/wordpress-update5
...
wordpress6_4: init at 6.4.1; wordpressPackages: update
2023-11-16 22:24:07 +01:00
Vladimír Čunát
a7a8f8253d
Merge #263535 : staging-next 2023-10-26
2023-11-16 22:06:22 +01:00
Matthias Beyer
da1923d134
Merge pull request #267931 from picnoir/pic/toot-0-38-2
...
toot: 0.38.1 -> 0.38.2
2023-11-16 21:20:06 +01:00
Daniel Ziltener
beca814e27
Modify Pharo entry in rl-2311.section.md
2023-11-16 19:06:59 +00:00
github-actions[bot]
dba5c9ef4e
Merge master into staging-next
2023-11-16 18:01:17 +00:00
Pol Dellaiera
3acc2484cf
Merge pull request #267560 from anthonyroussel/bugfix/plantuml-server-nixos
...
nixos/plantuml-server: fix
2023-11-16 18:32:44 +01:00
Félix Baylac Jacqué
7e7d403939
nixosTests.pleroma: un-vendor toot
...
Upstream released 0.38.2. This new release contains the pleroma fix we
previously were getting from master.
We don't need this override anymore to get the test to succeed.
https://github.com/ihabunek/toot/issues/399#issuecomment-1814712723
2023-11-16 18:16:15 +01:00
Kim Lindberger
9c4df4d618
Merge pull request #246992 from cransom/cransom-parsedmarc-smtp
...
nixos/parsedmarc: fix validation for smtp
2023-11-16 15:06:20 +01:00
github-actions[bot]
301fcc69ba
Merge master into staging-next
2023-11-16 12:01:02 +00:00
Sarah Brofeldt
54f00576aa
Merge pull request #265193 from 0z13/opensearch-module-link-plugins
...
nixos/opensearch: link plugins from opensearch package
2023-11-16 11:30:09 +01:00
Michele Guerini Rocco
f4b1ed666e
Merge pull request #245888 from rnhmjoj/pr-dnscrypt
...
nixos/tests/dnscrypt-wrapper: test TCP and run on port 443
2023-11-16 10:49:25 +01:00
Vladimír Čunát
0fe5300699
Merge branch 'master' into staging-next
2023-11-16 09:49:24 +01:00
Lin Jian
bf8a6ad72c
Merge pull request #265733 from nbdd0121/unbound
...
nixos/unbound: fix wrong syscall filter and tighten sandbox
2023-11-16 14:38:46 +08:00
Adrian Pistol
7a1d45811e
nixos/chrony: Let Chrony control/track RTC drift
2023-11-15 15:09:22 -06:00
rnhmjoj
7f71262745
nixos/tests/dnscrypt-wrapper: test TCP and run on port 443
...
- Test both TCP and UDP queries (tinydns → bind)
- Test IPv6 by default
- Run DNSCrypt on port 443 along with HTTPS
2023-11-15 21:42:40 +01:00
Weijia Wang
1a85914512
Merge pull request #266528 from lucasbergman/unifi-jvmoptions
...
nixos/unifi: Add the ability to specify extra JVM options
2023-11-15 17:53:25 +01:00
Anthony Roussel
8c7c1e7a30
nixos/plantuml-server: remove deprecated allowPlantumlInclude option
...
See https://github.com/plantuml/plantuml-server/pull/301
2023-11-15 15:14:28 +01:00
Anthony Roussel
deae39af43
nixos/plantuml-server: use jetty_11
...
PlantUML Server does not support Jetty versions higher than 12.x.
Jetty 12.x has introduced major breaking changes, see
* https://github.com/jetty/jetty.project/releases/tag/jetty-12.0.0
* https://eclipse.dev/jetty/documentation/jetty-12/programming-guide/index.html#pg-migration-11-to-12
2023-11-15 15:14:28 +01:00
Anthony Roussel
2c94d267c2
nixos/plantuml-server: use mkPackageOptionMD
2023-11-15 15:12:58 +01:00
Anthony Roussel
3b17b80525
nixos/plantuml-server: add anthonyroussel to maintainers
2023-11-15 15:12:58 +01:00
Anthony Roussel
09e9d47508
nixos/plantuml-server: add hardening
2023-11-15 15:12:58 +01:00
Anthony Roussel
e3839eef71
nixos/plantuml-server: remove with lib;
notation
...
https://nix.dev/guides/best-practices#with-scopes
2023-11-15 15:12:58 +01:00
Anthony Roussel
2b455c1649
nixosTests.plantuml-server: init
2023-11-15 15:12:56 +01:00
Izorkin
63ed35dac4
nixos/mastodon: update elasticsearch configuration
2023-11-15 14:01:47 +01:00
github-actions[bot]
eba04b3485
Merge master into staging-next
2023-11-15 12:01:18 +00:00
Ryan Lahfa
75fbff2576
Merge pull request #263442 from JulienMalka/systemd-boot-bootspec
2023-11-15 08:40:19 +01:00
Vladimír Čunát
c46eae0f35
Merge branch 'master' into staging-next
2023-11-15 07:33:10 +01:00
Samuel Dionne-Riel
3d88cc85dd
Merge pull request #262595 from tpwrules/fix-extra-config-documentation
...
nixos/kernel: correct kernelPatches.extraConfig documentation
2023-11-14 22:40:04 -05:00
Ryan Lahfa
d983d6c863
Merge pull request #251950 from erictapen/mastodon
2023-11-15 01:46:50 +01:00
Mario Rodas
1d8fbb4459
Merge pull request #267535 from ajs124/ejabber-drop-maint
...
nixos/test/ejabberd: remove myself as maintainer
2023-11-14 18:35:18 -05:00
ajs124
bf93b0bd3f
nixos/test/ejabberd: remove myself as maintainer
2023-11-14 22:34:27 +01:00
zzywysm
3f4c802d26
initrd/autofs4: remove legacy references to autofs4 kernel module
...
Back in 2018, the kernel decided to remove the autofs4 module.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a2225d931f75ddd3c39f4d0d195fad99dfd68671
This caused immediate problems with systemd, so the kernel allowed autofs4 as a config option that would simply map back to autofs.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d02d21ea007b6b33cdaf15c2f84fb1fea996ecc2
Earlier this year, in July 2023, the kernel got tired of people not adapting to the autofs change, and forced the issue by fixing it within the kernel defconfigs, which NixOS uses as a starting point for their own kernel configs.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1f2190d6b7112d22d3f8dfeca16a2f6a2f51444e
This commit reflects the post-2018 reality by changing the remaining autofs4 references to autofs. Since this change initially happened in kernel 4.18 and we no longer support 4.x kernels, we don't need any backwards-compatibility tweaks.
2023-11-14 15:37:50 -05:00
Kerstin Humm
c82195d9e8
mastodon: 4.1.6 -> 4.2.1
...
- run streaming processes in separate systemd services
- remove redundancy in test
- fix update script
- release notes
See https://github.com/mastodon/mastodon/releases/tag/v4.2.1 for details
2023-11-14 21:13:46 +01:00
Kerstin Humm
0f535d40f9
nixos/mastodon: fix integration test
2023-11-14 21:13:45 +01:00
Julien Malka
372d07dc29
nixos/systemd-boot: conform backend to RFC-0125
...
Now the builder is using Bootspec documents.
2023-11-14 20:37:07 +01:00
Léo Gaspard
b1c25de57b
nixos/acme: do not eat Let's Encrypt's request limits if misconfigured on first try ( #266155 )
2023-11-14 20:29:50 +01:00
Yang, Bo
a9b36a5fb3
nixos/doc: release notes for waagent
provisioning
2023-11-14 19:47:27 +01:00
Yang, Bo
bff548fef1
waagent: enable provisioning
2023-11-14 19:47:27 +01:00
Nathan Henrie
6c69d3c9ca
nixos/navidrome: add openFirewall option
...
This adds an option to the navidrome module to open the configured TCP
port in the firewall.
2023-11-14 19:29:08 +01:00
github-actions[bot]
6cc772a6fa
Merge master into staging-next
2023-11-14 18:01:11 +00:00
Jonas Heinrich
0d6a668d40
nixos/wordpress: Add test for wordpress6_4
2023-11-14 18:34:57 +01:00
Pierre Bourdon
68367e66e1
Merge pull request #267037 from nbraud/nixos/sudo/assertion
...
nixos/sudo: Update `cfg.package` assertion
2023-11-14 17:26:08 +01:00
Félix Baylac Jacqué
f80b2b510d
nixosTests/pleroma: fix test
...
Two issues:
1. We need a subjectAltName on the TLS cert. Stolen from the akkoma
test. <3 illdefined
2. There's a bug in the current toot release wrt. date parsing. It's
been fixed upstream but it's not been released yet. Using the
current toot master for this VM test to work around this.
Note: I warned upstream we'd need a new toot release.
Fixes https://github.com/NixOS/nixpkgs/issues/264951
2023-11-14 16:45:54 +01:00
Jonathan Zielinski
aca76b750d
nixos/opensearch: link plugins from opensearch package
...
disable security module by default, it crashes unit expecting
certificates.
2023-11-14 14:00:30 +01:00
nicoo
d5a8e667d2
nixos/sudo: Update assertion message
2023-11-14 12:25:55 +00:00
Martin Weinelt
3c336a1647
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/libraries/gdcm/default.nix
2023-11-14 13:16:34 +01:00
Niklas Hambüchen
f9c7c12de6
Merge pull request #266702 from nh2/plausible-listen-address-no-distributed-erlang
...
plausible, nixos/plausible: Add `listenAddress` option
2023-11-14 10:52:21 +01:00
Niklas Hambüchen
fc3f56f2fe
release notes: Mention removal of services.plausible.releaseCookiePath
2023-11-14 10:51:16 +01:00
Niklas Hambüchen
65a471717c
plausible, nixos/plausible: Add listenAddress
option.
...
This changes
* the plausible HTTP web server
to be listening on localhost only, explicitly.
This makes Plausible have an explicit safe default configuration,
like all other networked services in NixOS.
For background discussion, see: https://github.com/NixOS/nixpkgs/issues/130244
As per my upstream Plausible contribution
(https://github.com/plausible/analytics/pull/1190 )
Plausible >= 1.5 also defaults to listening to localhost only;
nevertheless, this default should be stated explicitly in nixpkgs
for easier review and independence from upstream changes, and
a NixOS user must be able to configure the
`listenAddress`, as there are valid use cases for that.
Also, disable
* the Erlang Beam VM inter-node RPC port
* the Erlang EPMD port
because Plausible does not use them (see added comment).
This is done by setting `RELEASE_DISTRIBUTION=none`.
Thus, this commit also removes the NixOS setting `releaseCookiePath`,
because it now has no effect.
2023-11-14 10:51:16 +01:00
Jörg Thalheim
54fd866569
nixos/harmonia: set extra-allowed-users
...
This fixes the case where users enable harmonia but also have allowed-users set.
Having extra-allowed-users is a no-op when nix.settings.allowed-users is set to "*" (the default)
2023-11-14 10:37:39 +01:00