Commit Graph

4297 Commits

Author SHA1 Message Date
Dmitry Ivankov
ccdd853b64 23.05 changelog typo fix: buildFHSEnvChrootenv -> buildFHSEnvChroot 2023-06-14 07:52:56 -04:00
Weijia Wang
9bb343d628
Merge pull request #237548 from rnhmjoj/pr-fix-rel
doc/release-notes: fix typo
2023-06-13 15:24:10 +03:00
rnhmjoj
90d11579d7
doc/release-notes: fix typo 2023-06-13 13:23:46 +02:00
Sandro
9183a72d11
Merge pull request #232862 from misuzu/gotosocial-init 2023-06-13 11:36:46 +02:00
Martin Weinelt
104455784c
Merge pull request #219791 from emilylange/nixos-caddy
nixos/caddy: change `acmeCA` default to `null`, omit empty `bind` directive
2023-06-12 22:40:54 +02:00
pennae
3edc20aa55 nixos/doc: stub out epub manual
epub manuals are holding back the transition away from docbook, and
cursory research does not suggest that they are used very much. it's
still very early in the 23.11 release cycle, so if we're going to find
out just how many people do use the epub manuals it should be now.

this need not be the end of epub manuals. nixos-render-docs could be
extended to also export epubs, but that has not been done yet since it's
going to be some effort with unknown real-world usefulness.
2023-06-12 17:50:19 +02:00
Winston (Winny) Weinert
d15e598bd5 rl-2305: fix typo in openjdk version note 2023-06-10 16:40:05 -05:00
IndeedNotJames
3f93ec5814
nixos/caddy: change acmeCA default to null
The nixos/caddy module is somewhat old by now
and has undergone quite some refactors.
This specific module option (originally named
`ca`) used to make a bit more sense when
Caddy did not have multiple ACME CAs as
fallback (LE & ZeroSSL) by configured by
default yet (ZeroSSL came with v2.3.0).

I also rephrased the description slightly,
to mention Caddy's automatic issuer fallback
and a note which this option maps to in the
Caddyfile, to provide a bit more context and
a more up-to-date recommendation.

Specifically that "fine-grained configuration"
section comes from a time when this module did
some custom tls/issuer config json merging
with the templated Caddyfile using `jq`.

The "The URL to the ACME CA's directory"
section is a word-for-word copy from the
official Caddy docs, which also include a link
to LE's docs to the referenced staging
endpoint. So I added that as well.
2023-06-10 13:59:10 +02:00
Pol Dellaiera
2a77a04971
Merge pull request #235855 from soywod/himalaya-v0.8.0
himalaya: 0.7.3 -> 0.8.0
2023-06-08 04:34:37 +02:00
ajs124
34eaaf331c mariadb: upgrade default from 10.6 to 10.11
which is the next LTS release
2023-06-07 13:10:23 +02:00
Clément DOUIN
be53021199
himalaya: 0.7.3 -> 0.8.0 2023-06-07 12:59:26 +02:00
mdarocha
7eb512bfdc openraPackages.engines.devtest: init at 20230414 2023-06-07 02:26:43 +00:00
x10an14
dc7d4dece5
Document how to use packages with extensions. (#145011)
Co-authored-by: Artturi <Artturin@artturin.com>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
2023-06-06 22:37:42 +02:00
Florian Klink
4627ee741d
Merge pull request #234877 from ElvishJerricco/auto-format-and-resize-with-systemd
Auto format and resize with systemd
2023-06-05 12:25:02 +03:00
misuzu
45ffb33514 nixos/gotosocial: init
Co-authored-by: Peder Bergebakken Sundt <pbsds@hotmail.com>
2023-06-05 09:07:34 +03:00
Will Fancher
b497502357 nixos: Use systemd-growfs for autoResize 2023-06-04 22:57:22 -04:00
Will Fancher
5176a4f113 nixos: Use systemd-makefs for autoFormat 2023-06-04 22:57:20 -04:00
figsoda
6ad2ed2ada
Merge pull request #235954 from wegank/nerdfonts-release-notes
rl-2305: mention nerdfonts update
2023-06-04 16:12:56 -04:00
Weijia Wang
d465aaf7c6 rl-2305: mention nerdfonts update 2023-06-04 21:23:16 +03:00
figsoda
df34ed4185
Merge pull request #235204 from figsoda/text2 2023-06-04 13:02:55 -04:00
Lassulus
704b08c0e9
Merge pull request #235672 from mart-w/fix/redundant-syncthing-patchnote-23.05 2023-06-03 16:07:17 +02:00
Gabriel Fontes
147668b8cf nixos/sitespeed-io: init 2023-06-03 03:12:51 +00:00
Martin Wurm
22513042e6 nixos/syncthing: Remove unnecessary patch note
The breaking change in this patch note has been reverted for now, see #226088.
2023-06-03 01:38:53 +02:00
Alex Crawford
67c72f85a3 rl-2305: Use immutable URL for the systemd release notes 2023-06-01 13:48:11 -07:00
Alex Crawford
4b8977a3e9 rl-2305: Fix the links to the Nix release notes
NixOS 23.05 updated Nix from 2.11 to 2.13, so the release notes for
2.12 and 2.13 should be linked.
2023-06-01 13:48:11 -07:00
Weijia Wang
f2654557a6
Merge pull request #235369 from vcunat/p/release-notes-nits
23.05 release notes nits
2023-06-01 20:48:14 +02:00
Weijia Wang
e921ee7fdf
Merge pull request #235298 from eliasnaur/master
nixos/doc/manual: add release notes for util-linux on Darwin
2023-06-01 20:04:18 +02:00
Weijia Wang
076e3d55c0
Merge pull request #234043 from figsoda/pypi
python3.pkgs.fetchPypi: deprecate in favor of top-level fetchPypi
2023-06-01 19:56:32 +02:00
Vladimír Čunát
054c184cab
nixos/doc: drop a repeated paragraph
It's in "backward incompatibilities" section, so no need to be also
in "*other* notable changes" section.
2023-06-01 12:47:34 +02:00
Vladimír Čunát
c41c19276d
nixos/doc: drop a repeated paragraph
Bad conflict resolution, I assume.
2023-06-01 12:46:52 +02:00
Vladimír Čunát
ad90e88108
nixos/doc: fix typo 2023-06-01 12:46:15 +02:00
Elias Naur
f970e996fc nixos/doc/manual: add release notes for util-linux on Darwin
This is a follow-up to PR #232713.
2023-05-31 18:25:11 -06:00
Yaya
28ecd17523 nixos/doc: Mention container registry deprecation in gitlab
Support for external container registries has ended in GitLab >=16 and
module users are therefore advised to switch to gitlab's fork instead.
2023-05-31 22:14:25 +02:00
Yaya
edc47cb999 nixos/doc: Mention PostgreSQL requirement for gitlab
`gitlab` has been upgraded to major version 16 and requires at least
PostgreSQL 13.6.
2023-05-31 22:14:25 +02:00
figsoda
ffbf6f27c9 python3.pkgs.fetchPypi: deprecate in favor of top-level fetchPypi 2023-05-31 13:48:06 -04:00
Kira Bruneau
7e820610e3
Merge pull request #234207 from emilylange/acme-dns
acme-dns: init at 1.0; nixos/acme-dns: init; nixos/acme-dns: init
2023-05-31 11:40:35 -04:00
figsoda
137dd249c5 writeTextFile: revert workaround for executable = null 2023-05-31 09:25:18 -04:00
emilylange
d0af39521b
nixos/acme-dns: init 2023-05-31 15:08:37 +02:00
Martin Weinelt
17684ef69d
rl2305: Sync back changes that only went into 23.05 2023-05-31 13:55:20 +02:00
Martin Weinelt
99012d1bbd
Merge pull request #235011 from NixOS/before-23.05-final-release
release: before 23.05 final release
2023-05-31 13:51:08 +02:00
Lennart Mühlenmeier
a17e3e356a
rl-2305: finalize the release notes
Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2023-05-31 13:28:55 +02:00
Raito Bezarius
b8c2962807 nixos/doc/manual/installation: update the upgrading chapter for 23.05 2023-05-30 16:42:53 +02:00
Aaron Andersen
d098eec2da nixos/vmalert: init 2023-05-30 07:41:00 -04:00
Raito Bezarius
5e64b96a12
rl-2305: alpha version for 23.05
This is an alpha version worked out by the release managers.

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2023-05-30 12:09:55 +02:00
Ryan Lahfa
5e871d8aa6
Merge pull request #234639 from Atemu/rl-buildFHSEnvBubblewrap-migration
rl-2305: mention buildFHSEnv switch to bubblewrap
2023-05-29 20:11:05 +02:00
Atemu
3720991c06 rl-2305: mention buildFHSEnv switch to bubblewrap
See https://github.com/NixOS/nixpkgs/pull/225748
2023-05-28 17:41:49 +02:00
Bobby Rong
838dad5de9
Merge pull request #234231 from bobby285271/add/xdg-desktop-portal-xapp
xdg-desktop-portal-xapp: init at 1.0.0
2023-05-28 10:52:30 +08:00
Thomas Gerbet
85f15277d0 etcd: switch to etcd_3_5 2023-05-28 08:04:43 +10:00
Ryan Lahfa
77a1c48cca
Merge pull request #232011 from GaetanLepage/river
nixos/river: init module
2023-05-27 22:30:51 +02:00
Raito Bezarius
69bb0f94de nixos/nginx: first-class PROXY protocol support
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.

Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.

It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.

An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.

Finally, the tests covers:

- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
  (sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;

In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.

For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
2023-05-26 19:48:26 +02:00