Commit Graph

21328 Commits

Author SHA1 Message Date
Peder Bergebakken Sundt
ed72e91db1 nixos/mihomo: fix option type 2024-10-02 10:57:28 +02:00
Daniel Nagy
1d8136e1ae
nixos/i2pd: fix build 2024-10-02 09:45:00 +02:00
github-actions[bot]
5810844b9c
Merge master into staging-next 2024-10-02 00:14:22 +00:00
Kristoffer Dalby
abb3b0089b
nixos/headscale: update module to headscale 0.23.0
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
2024-10-01 21:53:33 +02:00
Kristoffer Dalby
5dd728a081
nixos/headscale: modernize
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
2024-10-01 20:40:19 +02:00
h7x4
cd9c62afca nixos/graphite: add systemd slice
Co-authored-by: Bjørn Forsman <bjorn.forsman@gmail.com>
2024-10-01 20:15:22 +02:00
github-actions[bot]
c3c8b24e1c
Merge master into staging-next 2024-10-01 18:04:42 +00:00
h7x4
ed45f4b166 nixos/phpfpm: phpfpm.slice -> system-phpfpm.slice 2024-10-01 20:03:08 +02:00
Emily
4ec4146f54 unifi-video: drop
EOL since January 2021.
2024-10-01 15:58:19 +01:00
Maximilian Bosch
55a45406a6
nixos/nextcloud: update relatedPackages 2024-10-01 13:36:16 +02:00
Maximilian Bosch
20ed9ccd88
nextcloud: correct stateversion logic 2024-10-01 12:48:47 +02:00
Jonas Heinrich
1b121c1ea2
nextcloud30: init at 30.0.0 2024-10-01 12:48:45 +02:00
Paul Meyer
6e839b8f99 go_1_21/buildGo121Module: remove
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-10-01 12:43:42 +02:00
K900
3f7da3dfa9 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-01 08:44:24 +03:00
Felix Singer
5f14c876bd nixos/redmine: Allow specifying an IP address Redmine should bind to
In order to not expose Redmine over all interfaces, allow configuring an
IP address it should bind to. Listen to 0.0.0.0 by default.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-01 06:16:42 +02:00
Nick Cao
5aa3097833
nixos/hatsu: init module (#345102) 2024-09-30 18:35:12 -04:00
h7x4
636185e25a
seafile: 10.0.1 -> 11.0.12 (#318727) 2024-09-30 23:53:02 +02:00
Pol Dellaiera
abbc4cb34c
nixos/open-webui: fix opensearch (#345529) 2024-09-30 23:28:21 +02:00
K900
b29cb6c1f9 Merge remote-tracking branch 'origin/master' into staging-next 2024-09-30 20:23:25 +03:00
藍+85CD
2f15b523d9
nixos/hatsu: init module 2024-10-01 00:33:38 +08:00
Erin Yuki Schlarb
56581588c3 jitsi-meet: Add option to disable Prosody services not used by Jitsi Meet
The default Prosody config assumes that Prosody will be used as a federated
XMPP server, while the usecase for Jitsi Meet is much narrower.
2024-09-30 18:19:34 +02:00
Erin Yuki Schlarb
7ab8f255b9 jitsi-meet: Restrict jitsi-excalidraw systemd service to the minimum requried 2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
9e8b3f97cc jitsi-meet: Also forward Excalidraw connections when using Caddy as web server 2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
61cf88212d jitsi-videobridge: Set configurable default NAT harvester address to make the
service work behind NAT without additional manual configuration
2024-09-30 18:19:33 +02:00
h7x4
11f77694ac
nixos/bluemap: move to web-apps (#345353) 2024-09-30 17:53:27 +02:00
Erin Yuki Schlarb
67e261beb5 jitsi-meet: Set internal MUC options set in official Docker image 2024-09-30 17:31:04 +02:00
pinage404
83b1350904 nixos/open-webui: fix opensearch
When [adding Open WebUI as search engine in Firefox](https://docs.openwebui.com/tutorials/integrations/browser-search-engine/#for-firefox) it always links to `http://localhost:3000` instead of the configured port

It is because [the response use `WEBUI_URL` environment variable](1d225dd804/backend/open_webui/main.py (L2370)) which [is set by default to `1d225dd804/backend/open_webui/env.py (L106))
2024-09-30 17:28:11 +02:00
Maximilian Bosch
1e746f0030
Merge: nixos/postgresql: escape initdbArgs (#345341) 2024-09-30 17:04:10 +02:00
Martin Weinelt
b47b572e21
nixos/freeradius: fix group assignment for radius user 2024-09-30 15:50:13 +02:00
github-actions[bot]
d7d44ff498
Merge master into staging-next 2024-09-30 12:05:43 +00:00
Martin Weinelt
4ca03e3a11
nixos/logrotate: allow sending signal to arbitrary processes
Various postrotate scripts send e.g. SIGHUP to processes, to have them
reload their config or reopen their logfile.
2024-09-30 13:30:38 +02:00
Martin Weinelt
2dabc4fce1
nixos/logrotate: reorder setuid syscall group
Relevant parts of @setuid are in @privileged, so we need to flip the
order around, to grant @setuid in spite of denying @privileged.
2024-09-30 13:26:14 +02:00
Florian Klink
9ff2ff44f8
nixos/garage: fix StateDirectory check to work with multiple data_dirs (#342903) 2024-09-30 12:27:06 +02:00
Pol Dellaiera
c82e57f79b
nixos: enable fstrim by default (#345285) 2024-09-30 11:52:13 +02:00
github-actions[bot]
09f18b89af
Merge master into staging-next 2024-09-30 00:14:50 +00:00
Weijia Wang
aa4c638b89
wordpressPackages: packages, language and theme updates (#345359) 2024-09-29 23:44:35 +02:00
Viorel-Cătălin Răpițeanu
db71929224 wordpressPackages: update packages, add ru_RU lang, make twentytwentyfour default 2024-09-29 23:09:33 +03:00
h7x4
c25213a9bd
nixos/bluemap: move to web-apps 2024-09-29 21:40:39 +02:00
Maximilian Bosch
11d1f8776c
nixos/postgresql: escape initdbArgs
It doesn't look correct that this isn't the case already.
2024-09-29 21:03:52 +02:00
Maximilian Bosch
0e78dc369c
Merge: doc: use initdbArgs in example postgresql upgrade script (#302823) 2024-09-29 20:39:05 +02:00
Alyssa Ross
ac037f0b18
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/compilers/llvm/common/default.nix
2024-09-29 20:10:12 +02:00
Savyasachee Jha
22e2e02118 nixos/privatebin: init 2024-09-29 23:02:19 +05:30
Naïm Camille Favier
7cba8410f7
nixos/networkmanager: set up /etc/ipsec.secrets as required by the L2TP plugin (#340325) 2024-09-29 18:56:59 +02:00
Martin Weinelt
6710d0dd01
nixos/logrotate: relax hardening (#345275) 2024-09-29 16:24:34 +02:00
Weijia Wang
27e93e3061
go-ethereum: 1.14.8 -> 1.14.9 (#342934) 2024-09-29 16:21:23 +02:00
Franz Pletz
273796ebd7
nixos/upower: update percentage defaults (#344839) 2024-09-29 15:39:41 +02:00
OPNA2608
85e63d0540 lomiri.lomiri: Replace NIXOS_XKB_LAYOUTS envvar with file
This only ever worked for the session, not for the greeter. Writing the information out to a file should be more consistent.

To make sure that this works, and continues working, for the greeter & session, also add a new VM test.
2024-09-29 14:51:04 +02:00
h7x4
8b62732138
bluemap: 3.21 -> 5.4 (#332245) 2024-09-29 14:05:29 +02:00
github-actions[bot]
8e5ca58e0a
Merge master into staging-next 2024-09-29 12:05:05 +00:00
Jörg Thalheim
7d8f1572d1 nixos: enable fstrim by default
The majority of users these days will install NixOS on SSD/NVME based
storage. Enabling fstrim ensures that the TRIM operation on this type of
storage is run at least once a week. This will improve performance and
life time of said devices. This also works in virtual machines as
formats such as qcow2 or vmdk support TRIM.
Ubuntu has a similar systemd timer also for quite a while enabled by
default.
Enabling this service will not increase the dependency closure as
util-linux is already part of the base system.
In case only filesystems that are not supported by fstrim are used, the
overhead is negelible as fstrim run in less than a second once a week.
2024-09-29 14:04:18 +02:00
Martin Weinelt
d3e0a89ca6
nixos/logrotate: relax hardening
The previous hardening change restricted the unit too much, breaking
legitimate functionality of logrotate.

Unfortunately this was not covered by our NixOS test.
2024-09-29 12:29:19 +02:00
Doron Behar
4fcd6b86ee
nixos/tzupdate: make it actually work (#343748) 2024-09-29 12:56:06 +03:00
K900
3951cf36e1
nixos/xdg/icons: add fallbackThemes option (#345057) 2024-09-29 12:17:57 +03:00
Bruno Bigras
1336b64235
Add veilid module (#330585) 2024-09-29 04:30:44 -04:00
Michele Guerini Rocco
a08c2e29b9
nixos/monero: remove with lib; (#343474) 2024-09-29 09:36:21 +02:00
K900
ce7068660a nixos/xdg/icons: add fallbackThemes option 2024-09-29 08:42:20 +03:00
github-actions[bot]
080ddac139
Merge master into staging-next 2024-09-29 00:15:45 +00:00
melvyn
073099d0f7
nixos/seafile: add persistent user, configurable storage path, gc service 2024-09-28 19:09:58 -04:00
melvyn
d3b5dc8da1
nixos/seafile: add persistent user, configurable storage path, gc service 2024-09-28 17:57:02 -04:00
Franz Pletz
e8486ebc7f
freeradius: add option to compile with postgres (#265762) 2024-09-28 22:56:08 +02:00
Daniel Nagy
6512103dfe
nixos/monero: remove with lib; 2024-09-28 22:30:00 +02:00
K900
1228db540d
nixos/plasma6: use xwayland module (#345122) 2024-09-28 22:14:43 +03:00
github-actions[bot]
8693fc15c4
Merge master into staging-next 2024-09-28 18:04:13 +00:00
Leona Maroni
a23db91282
nixos/immich: add option database.port (#345094) 2024-09-28 18:01:08 +02:00
Yaroslav Bolyukin
fba92705b0
nixos/plasma6: use xwayland module
For ability to override used xwayland package
2024-09-28 17:27:22 +02:00
Franz Pletz
79a01a8631
pleroma: 2.6.3 -> 2.7.0 (#333283) 2024-09-28 15:36:27 +02:00
Franz Pletz
1ee99a4837
tailscaled: after NetworkManager-wait-online (#344678) 2024-09-28 15:26:00 +02:00
Franz Pletz
a3f79b7d63
tailscale: add su to path (#344947) 2024-09-28 15:22:40 +02:00
Franz Pletz
ef1ecffdbe
nixos/gitlab: add systemd slice (#343523) 2024-09-28 15:12:58 +02:00
github-actions[bot]
aef46265d9
Merge master into staging-next 2024-09-28 12:05:16 +00:00
h7x4
dd7a192b4f
nixos/gitlab: add services to systemd slice
Co-authored-by: Bjørn Forsman <bjorn.forsman@gmail.com>
2024-09-28 11:27:05 +02:00
Jörg Thalheim
076f2f69f3
sshd: fix shellcheck warnings in prestart script (#340484) 2024-09-28 09:49:25 +02:00
Yarny0
f748ccc318 tsm-client: 8.1.23.0 -> 8.1.24.0
Also, all URLs in package and module comments are updated.

At the time of this writing, the "Update History" page
(release notes) for tsm-client >=8.1.19 does not list any
"APARs" ("Authorized Program Analysis Reports") for 8.1.24.0.
2024-09-28 08:48:41 +02:00
github-actions[bot]
9badc90a26
Merge master into staging-next 2024-09-28 00:13:56 +00:00
Mikilio
938d190ed2
tailscale: add su to path
this adds access to `su` via security wrappers
2024-09-27 23:05:20 +02:00
Atemu
3913c72204
nixos/jenkinsSlave: remove with lib; (#343514) 2024-09-27 21:59:45 +02:00
Atemu
e8d40a7f34
nixos/i2pd: remove with lib; (#343476) 2024-09-27 21:58:59 +02:00
Gary Guo
162f0719e9 nixos/freeradius: fix radius group
A group must be selected since it no longer defaults to nogroup
2024-09-27 20:11:57 +01:00
Gary Guo
d0481239c1 nixos/freeradius: add option to override package 2024-09-27 20:11:56 +01:00
github-actions[bot]
911b856128
Merge master into staging-next 2024-09-27 18:04:26 +00:00
Picnoir
50ffaf03bb nixos/pleroma: format module with nixfmt 2024-09-27 19:30:14 +02:00
Picnoir
aa666ce8f1 nixos/pleroma: move migrations to their own systemd unit
Running the migrations in a systemd execStartPre was a mistake. The
migrations can be pretty long to run and easily time-out.

Moving this to a proper oneshot service solves this issue and makes
this fits better the systemd execution model. We can now easily filter
the migrations logs.
2024-09-27 19:29:41 +02:00
Sandro
0151acc48e
nixos/gotenberg: Fix coredumps on service start (#344770) 2024-09-27 17:22:10 +02:00
github-actions[bot]
22165c231d
Merge master into staging-next 2024-09-27 12:05:46 +00:00
Tom Vincent
069e6f3262
nixos/upower: update percentage defaults
Current defaults were added in aecfea0, which were in turn based on upstream:
28bd86c181/etc/UPower.conf.

Current upstream config:
94c91f93f1/etc/UPower.conf
2024-09-27 09:41:55 +01:00
7c6f434c
c87aad4296
Add Collabora Online (#330708) 2024-09-27 08:33:57 +00:00
K900
1e15add1c2
xwaylandvideobridge refactor + default in Plasma (#344808) 2024-09-27 10:03:24 +03:00
oddlama
d229011025 nixos/influxdb2: fix service startup reliablility 2024-09-27 08:14:27 +02:00
github-actions[bot]
b42890bf68
Merge master into staging-next 2024-09-27 06:04:49 +00:00
Gaute Ravndal
e9860fa6a9 nixos/snapper: use more precise type definition 2024-09-27 07:40:06 +02:00
K900
e23ad5ca0e nixos/plasma6: install xwaylandvideobridge by default 2024-09-27 08:16:56 +03:00
K900
15200e9966 nixos/plasma6: install baloo-widgets by default
Needed for indexer metadata in Dolphin.
2024-09-27 08:05:05 +03:00
Pyrox
e2c5983f40
nixos/gotenberg: Fix coredumps on service start 2024-09-26 21:37:41 -04:00
Fabián Heredia Montiel
2a115bbd1e Merge remote-tracking branch 'origin/master' into staging-next 2024-09-26 18:03:59 -06:00
Weijia Wang
63ab048916 nixos/geth: add holesky testnet 2024-09-27 01:17:21 +02:00
Gaute Ravndal
6ce7db1126 nixos/snapper: fix timeline option types
These can be either an integer or a range.

Range options are necessary for `FREE_LIMIT` to take effect when used in
conjunction with `TIMELINE_LIMIT_*`.
2024-09-26 21:55:23 +02:00
Jörg Thalheim
91ea06cb60 Merge remote-tracking branch 'upstream/master' into HEAD 2024-09-26 21:04:22 +02:00
Martin Weinelt
e04b941dfb
nixos/printing: add option to disable browsed daemon (#344702) 2024-09-26 20:44:57 +02:00
Thomas Gerbet
981a63b005 nixos/printing: add option to disable browsed daemon
It is currently tied to `services.avahi.enable` which might not be
desirable.

With this change it is possible to disable the service with
`services.printing.browsed.enable = false`
2024-09-26 20:11:14 +02:00
github-actions[bot]
c8c18095f9
Merge master into staging-next 2024-09-26 18:04:33 +00:00
Marin
0d822ccdbc tailscaled: after NetworkManager-wait-online
The wait will only be enabled on machines with NetworkManager enabled.

Closes #180175
2024-09-26 12:12:46 -04:00
K900
c4c3b41d4a nixos/plasma6: install xdg-desktop-portal-gtk
As recommended by upstream, for flatpak apps and some others.
2024-09-26 18:57:53 +03:00
Robert Schütz
c5d95d4999
immich: some improvements (#344237) 2024-09-26 07:14:52 -07:00
Brendan Taylor
8debc8df79 nixos/immich: add option database.port 2024-09-26 08:06:59 -06:00
Franz Pletz
879c75e68c
nixos/tailscale: add authKeyParameters (#338505) 2024-09-26 15:43:59 +02:00
Franz Pletz
e1635a35b9
nixos/nginx: add option typesHashMaxSize (#341072) 2024-09-26 14:42:26 +02:00
Lucas Chaim
9e6338ffaf nixos/tailscale: add authKeyParameters
Adds `config.services.tailscale.authKeyParameters`
2024-09-26 07:28:19 -03:00
github-actions[bot]
a3340e0fbf
Merge master into staging-next 2024-09-26 06:04:51 +00:00
Bjørn Forsman
732d36522f nixos/influxdb2: wait until service is ready
Factor out part of the provisioning script into a
wait-until-service-is-ready script, and put it unconditionally in
front of ExecStartPost=, so that services that depend on influxdb2 are
not started until influxdb2 responds to requests.

Fixes https://github.com/NixOS/nixpkgs/issues/317017 ("Scrutiny tries to start before influxdb has started")
2024-09-26 06:54:54 +02:00
Kevin Cox
0dcfe7e565
nixos.mautrix-meta: Update config to 0.4 format
The package has been updated to 0.4 which will result in an auto-migration of the config. This updates our config to match the new expected format. Assertions have been added to warn users that they need to migrate their configuration.
2024-09-25 17:35:19 -04:00
K900
a9128ce2f2 Merge remote-tracking branch 'origin/master' into staging-next 2024-09-25 21:07:19 +03:00
Izorkin
d856c0374d
nixos/nginx: add option typesHashMaxSize 2024-09-25 20:57:13 +03:00
Artturin
f1901cf0b0
nixos/cupsd: typo (#330884) 2024-09-25 20:27:19 +03:00
Robert James Hernandez
6c527bf0fb nixos/scion: init scion-ip-gateway module 2024-09-25 19:08:33 +02:00
Sandro
6ac83e9406
nixos/mailman: configure web frontend with postfix when enablePostfix… (#333295) 2024-09-25 18:33:50 +02:00
Bruno BELANYI
b2512bb043
nixos/stirling-pdf: add missing dependency ghostscript (#344331) 2024-09-25 14:09:00 +01:00
Daniel Sidhion
15ddcc64cd
nixos/tigerbeetle: add docs on upgrading, add more systemd hardening (#332899) 2024-09-24 23:56:38 -07:00
Artturin
f0e657f3b1 Merge branch 'master' into staging-next 2024-09-25 06:05:01 +03:00
DCsunset
68d108bb04 nixos/stirling-pdf: add missing dependency ghostscript 2024-09-25 01:01:33 +00:00
Artturin
e0464e4788 treewide: replace stdenv.is with stdenv.hostPlatform.is
In preparation for the deprecation of `stdenv.isX`.

These shorthands are not conducive to cross-compilation because they
hide the platforms.

Darwin might get cross-compilation for which the continued usage of `stdenv.isDarwin` will get in the way

One example of why this is bad and especially affects compiler packages
https://www.github.com/NixOS/nixpkgs/pull/343059

There are too many files to go through manually but a treewide should
get users thinking when they see a `hostPlatform.isX` in a place where it
doesn't make sense.

```
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv.is" "stdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv'.is" "stdenv'.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "clangStdenv.is" "clangStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "gccStdenv.is" "gccStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenvNoCC.is" "stdenvNoCC.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "inherit (stdenv) is" "inherit (stdenv.hostPlatform) is"
fd --type f "\.nix" | xargs sd --fixed-strings "buildStdenv.is" "buildStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "effectiveStdenv.is" "effectiveStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "originalStdenv.is" "originalStdenv.hostPlatform.is"
```
2024-09-25 00:04:37 +03:00
Martin Weinelt
aaa7fb5840
nixos/{pretix,pretalx}: set up log rotation (#343982) 2024-09-24 22:48:17 +02:00
Philip Taron
a829e3a287
nixos/services.snapserver: fix regression introduced in #339099 by renaming local function (#344243) 2024-09-24 13:37:17 -07:00
github-actions[bot]
9108a87017
Merge master into staging-next 2024-09-24 18:04:41 +00:00
Robert Schütz
eb28b94bd1
nixos/iptsd: Touch was renamed to Touchscreen in v3 (#344036) 2024-09-24 09:59:14 -07:00
Robert Schütz
7cdda564e0 nixos/immich: override machine-learning with cfg.package
Otherwise they could use different versions:

    nix-repl> (immich.overrideAttrs { version = "0"; }).machine-learning.version
    "1.115.0"
2024-09-24 09:53:24 -07:00
Philip Taron
48d6e1118b
nixos/services.snapserver: fix regression introduced in #339099 by renaming local function 2024-09-24 09:08:43 -07:00
Rafael Fernández López
0d3c3735e5
nvidia-container-toolkit: add "nvidia" to services.xserver.videoDrivers
This will ensure that all requirements are met when the
nvidia-container-toolkit is enabled in order to generate the CDI specs
for the machine.

Also, if `config.virtualisation.docker.rootless.enable` is true,
automatically enable the CDI feature if the Docker version > 25 for
the rootless installation.
2024-09-24 17:10:07 +02:00
github-actions[bot]
bcd5388d39
Merge master into staging-next 2024-09-24 12:05:12 +00:00
Yt
d026e3fa1a
immich: init at 1.115.0; nixos/immich: init module (#324127) 2024-09-24 05:56:12 -04:00
Jan van Brügge
cedcd9f4f0
nixos/immich: init module 2024-09-23 22:38:02 +02:00
Robert Schütz
030f88a326 nixos/iptsd: Touch was renamed to Touchscreen in v3 2024-09-23 12:31:51 -07:00
Anthony ROUSSEL
c1104aee4d nixos/gns3-server: disable SystemD hardening 2024-09-23 20:46:18 +02:00
Anthony Roussel
77edd2b066 nixos/gns3-server: disable SystemD DisableUser
Usage of DynamicUser is compatible with SUID wrappers.
GNS3 needs to call ubridge via its SUID Wrapper to work.
2024-09-23 20:46:17 +02:00
Anthony Roussel
46044101f3 nixos/gns3-server: fix ubridge_path 2024-09-23 20:46:17 +02:00
github-actions[bot]
9a6f63ebed
Merge master into staging-next 2024-09-23 18:04:34 +00:00
Simon Hauser
32cc042368
mariadb: 10.5.26, 10.6.19, 10.11.9, 11.4.3 (#334878)
* mariadb: 10.5.26, 10.6.19, 10.11.9, 11.4.3

* nixos/tests/automysqlbackup: nixfmt

* nixos/automysqlbackup: fix tests

* nixos/tests/mariadb-galera: nixfmt

* nixos/tests/mariadb-galera: fix test failing with new default IPv6 configuration
2024-09-23 20:00:19 +02:00
Martin Weinelt
9b9ca77050
nixos/logrotate: harden systemd unit (#339050) 2024-09-23 17:49:29 +02:00
Martin Weinelt
1d8c946fdb
nixos/pretalx: enable log rotation
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:58:52 +02:00
Martin Weinelt
9a85a7e2ce
nixos/pretix: enable log rotation
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:57:31 +02:00
Daniel Nagy
201d35822e
nixos/nar-serve: remove with lib; (#343472) 2024-09-23 15:40:56 +02:00
github-actions[bot]
ac34133fb9
Merge master into staging-next 2024-09-23 12:05:36 +00:00
Marcel
0556c426ff
nixos/pretix: fix database.host option type (#343917)
Support database configuration using TCP and not only Unix sockets.
2024-09-23 10:52:08 +02:00
figboy9
56f8f810ae nixos/veilid: fix description link 2024-09-23 13:30:38 +09:00
github-actions[bot]
3625d99bb2
Merge master into staging-next 2024-09-23 00:14:30 +00:00
Atemu
b8f89a9b04
nixos/darkhttpd: remove with lib; (#343441) 2024-09-22 22:16:03 +02:00
Fabián Heredia Montiel
9b2a506736 Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:

- pkgs/tools/package-management/nix/default.nix
2024-09-22 13:45:27 -06:00
Leona Maroni
761ae3237c
dependency-track: init at 4.11.6 (#328669) 2024-09-22 18:49:11 +02:00
Alexander Sieg
5b67f3b831
nixos/dependency-track: init module 2024-09-22 16:38:45 +02:00
Jörg Thalheim
7d751654ec
Merge branch 'master' into staging-next 2024-09-22 15:51:19 +02:00
Aleksana
5c16154521
nixos/davis: fix nginx conf's well-known redirect (#342995) 2024-09-22 21:28:31 +08:00
github-actions[bot]
6bb2408295
Merge master into staging-next 2024-09-22 12:05:17 +00:00
Weijia Wang
84cd38f778
globalprotect-openconnect: add core logic and packages for 2.x releases (#316526) 2024-09-22 12:07:33 +02:00
Felix Singer
421d1b8974 nixos/{redmine,murmur}: Add Felix Singer as maintainer
I'm maintaining the associated packages. So it makes sense to add myself
to their modules as well.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-09-22 08:35:08 +02:00
github-actions[bot]
f2c1ad7ad5
Merge master into staging-next 2024-09-21 18:03:54 +00:00
Rahul Rameshbabu
b08d6a664f
globalprotect-openconnect: remove deprecated 1.x package
The 1.x iteration of globalprotect-openconnect is no longer being
developed. Remove related components from nixpkgs.

Signed-off-by: Rahul Rameshbabu <sergeantsagara@protonmail.com>
2024-09-21 10:20:21 -07:00
h7x4
f88d5e23d9
nixos/bacula: add system-bacula.slice (#338739) 2024-09-21 17:07:20 +02:00
h7x4
b12aa4265c
nixos/ups: add system-ups.slice (#338556) 2024-09-21 17:05:26 +02:00
Daniel Nagy
fdf019979e
nixos/jenkinsSlave: remove with lib; 2024-09-21 16:30:00 +02:00
h7x4
32f34d13c2
bluemap: 3.21 -> 5.3 2024-09-21 14:47:04 +02:00
github-actions[bot]
d3ae261fc3
Merge master into staging-next 2024-09-21 12:05:16 +00:00
Daniel Nagy
608bd15ce5
nixos/i2pd: remove with lib; 2024-09-21 12:45:00 +02:00
Sandro
a2fe2c872a
tailscale: only autoconnect after backend is up (#338210) 2024-09-21 11:27:18 +02:00
Daniel Nagy
84b8922e82
nixos/darkhttpd: remove with lib; 2024-09-21 09:00:00 +02:00
Daniel Nagy
991fd5f462 nixos/yggdrasil: add nagy as maintainer 2024-09-21 06:30:54 +00:00
Daniel Nagy
cb7635612e nixos/yggdrasil: remove with lib; 2024-09-21 06:30:54 +00:00
github-actions[bot]
754402a237
Merge staging-next into staging 2024-09-21 00:13:41 +00:00
Nick Cao
a1d92660c6
hydra: 0-unstable-2024-09-15 -> 0-unstable-2024-09-20 (#338902) 2024-09-20 18:35:44 -04:00
Ryan Horiguchi
c26ca03c4d nixos/dnsmasq: remove deprecated option "extraConfig" 2024-09-20 22:44:16 +02:00
github-actions[bot]
33e2cbc61f
Merge staging-next into staging 2024-09-20 12:05:56 +00:00
Weijia Wang
98a31cdb8d
wordpress: 6.6.1 -> 6.6.2 (#343013) 2024-09-20 10:17:04 +02:00
zowoq
2ff3fa0e87 nixos/hydra: set a default for hydra-compress-logs service
follow up from 0c454e9317
2024-09-20 17:36:22 +10:00
Bryan Richter
588b1f8df6
nixos/github-runners: make enable functional
Fixes #305304
2024-09-20 09:09:17 +03:00
K900
d8a54461fc Merge remote-tracking branch 'origin/staging-next' into staging 2024-09-20 07:27:56 +03:00
Sandro
97ca40d3ca
turn-rs: init at 3.1.0 (#338928) 2024-09-19 22:53:28 +02:00
Weijia Wang
d582ac052d nixos/wordpress: fix tests 2024-09-19 22:25:37 +02:00
PassiveLemon
6e9e75f7f2 nixos/wivrn: init module 2024-09-19 15:34:31 -04:00
Pim Kunis
f1daa46d45 nixos/gatus: init module 2024-09-19 21:34:10 +02:00
Bjørn Forsman
b03e47330b
smartmontools: build with systemdLibs on linux (#342407) 2024-09-19 20:49:26 +02:00
Andrew Kvalheim
818d2a60a8 hedgedoc: correct typo in deprecation notice
Continues #244941
2024-09-19 11:05:05 -07:00
Michele Guerini Rocco
ebdd7ce69d
Revert "nixos/wireless: link config to /etc by default" (#343039) 2024-09-19 18:38:39 +02:00
Peder Bergebakken Sundt
9f0fb06ceb
nixos/ttyd: allow caFile=null when enableSSL=true (#340554) 2024-09-19 17:30:29 +02:00
Bjørn Forsman
86a6ef5f15 nixos/prometheus-smartctl-exporter: fix NVMe scanning
smartctl_exporter already runs with SupplementaryGroups "disk", which
gives full access to SATA drives, but NVMe devices are owned by
root:root, resulting in no access:

  [...] msg="Smartctl open device: /dev/nvme0 failed: Permission denied"

This patch introduces a "smartctl-exporter-access" supplementary
group, and an udev rule with setfacl to give the exporter access to NVMe
drives, without changing the base root:root ownership.

Fixes https://github.com/NixOS/nixpkgs/issues/210041
2024-09-19 17:28:30 +02:00
Josh Hoffer
4080d35d2b nixos/udev: only restart when udev rules change
Only restart `systemd-udevd.service` if udev rules in `/etc/udev/rules`
actually changed. The paths of `services.udev.packages` may change
frequently but the resulting udev rules built by `udevRulesFor`
likely change less often.

This has the added benefit of not adding `services.udev.packages` to
the system closure if they are only used for their udev rules
(issue #308937).
2024-09-19 17:26:01 +02:00
rnhmjoj
7efc956510
Revert "nixos/wireless: link config to /etc by default"
This reverts commit 89eb93dc3f.

It broken setups where /etc/wpa_supplicant.conf is configured
imperatively and reloading of the service on configuration changes.
2024-09-19 16:36:34 +02:00
github-actions[bot]
1f0ce6a4e5
Merge staging-next into staging 2024-09-19 12:05:50 +00:00
Casey Link
5b64b4072a
nixos/davis: fix nginx conf's well-known redirect
We mistakenly used a non-existing nginx variable for the X-Forwarded-Proto causing
the well-known redirect to return erroneous Location headers like:

    Location: ://dav.example/dav

instead of the correct:

    Location: https://dav.example/dav
2024-09-19 12:03:51 +02:00
Arian van Putten
5a7ae8f7de
amazon-ssm-agent: add the system's software to the path (#342947) 2024-09-19 10:37:59 +02:00
h7x4
a79863f0e1
nixos/services.tarsnap: fix escapeSystemdPath (#342911) 2024-09-19 09:21:02 +02:00
h7x4
dcf1beb438
nixos/authelia: complete level enum (#342619) 2024-09-19 09:17:30 +02:00
Graham Christensen
7547a1f5f8
amazon-ssm-agent: add the system's software to the path
Follow up to #342584.

Similarly to that PR, it is surprising that software which was installed by the user isn't available to a script run over ssm by default.

When executing commands with ssm, users will now have more predictable access to baked-in software instead of an extremely bare-minimum set currently there.
2024-09-18 23:18:28 -04:00
Ashish SHUKLA
f6e2fb5e11
nixos/services.tarsnap: fix escapeSystemdPath invocation 2024-09-19 00:12:13 +00:00
wxt
1a742a9f80 nixos/turn-rs: init 2024-09-19 07:33:51 +08:00
Matt Moriarity
4d3d3e46fe nixos/garage: fix StateDirectory check to work with multiple data_dirs 2024-09-18 17:18:36 -06:00
Matt Moriarity
cb905a5649 nixos/garage: add mjm as maintainer 2024-09-18 17:06:56 -06:00
Matt Moriarity
e4fc65e079 nixos/garage: reformat 2024-09-18 17:05:09 -06:00
hatch01
abc51d1654
nixos/authelia: complete level enum 2024-09-18 23:34:21 +02:00
github-actions[bot]
71d46fbcdf
Merge staging-next into staging 2024-09-18 18:04:48 +00:00
Jared Baur
46b97e7f0f
nixos/plasma6: install discover if flatpak is enabled
Just like for gnome, we should install the respective PackageKit
frontend for KDE Plasma if flatpak is enabled in the NixOS config.
2024-09-18 10:45:12 -07:00
h7x4
50470da36e
nixos/matrix-hookshot: init module (#323196) 2024-09-18 16:04:30 +02:00
Nick Cao
5d9d66572b
nixos/services.mediatomb: fix vlc reference (#341865) 2024-09-18 09:26:36 -04:00
Finn Landweber
6974feb92c
nixos/matrix-hookshot: init module 2024-09-18 13:03:42 +02:00
github-actions[bot]
b638e02a58
Merge staging-next into staging 2024-09-18 00:13:59 +00:00
Gautier DI FOLCO
7960660f55
nixos/services.mediatomb: drop not supported transcoding profile for the current vlc version 2024-09-18 00:04:56 +02:00
Gautier DI FOLCO
caf4aa4e10
nixos/services.mediatomb: fix vlc reference 2024-09-18 00:03:31 +02:00
h7x4
f954d6185c
wstunnel: exclude TLS arguments when enableHTTPS is false (#342203) 2024-09-17 21:30:58 +02:00
K900
87cbfcba1c Merge remote-tracking branch 'origin/staging-next' into staging 2024-09-17 21:07:02 +03:00
Michele Guerini Rocco
e3191b8ded
nixos/dhcpcd: harden and run as unprivileged user (#336988) 2024-09-17 19:21:11 +02:00
K900
1047f0a6bf nixos/hostapd: set default channel to auto
The current default, 7, is, to put it nicely, absolutely ridiculous.

On 2.4 GHz, the only channels you should use are 1, 6 and 11, because
every other channel overlaps one of those and causes interference.

On 5/6 GHz, channel 7 does not exist at all.

Also, it's 2024, most things will support automatic channel selection,
and those that don't will likely need extra care to support prehistoric
hardware anyway.
2024-09-17 19:07:47 +03:00
nicoo
40e940fae3
doc(livebook): Fix small spelling mistake (#342373) 2024-09-17 14:55:22 +00:00
github-actions[bot]
73cf025711
Merge staging-next into staging 2024-09-17 12:05:50 +00:00
Aleksana
99d5afb211
nixos/doc: mention "No such file or directory" error on Nextcloud (#342353) 2024-09-17 17:30:00 +08:00
Aleksana
e9e4fb40ef
nixos/ly: unlock gnome-keyring on login when enabled (#341900) 2024-09-17 16:10:38 +08:00
Doron Behar
8efaf0d2d6 nixos/tzupdate: use timedatectl to actually set the timezone
See also: https://github.com/cdown/tzupdate/issues/135
2024-09-17 09:32:44 +03:00
Doron Behar
94892f8f20 tzupdate: add doronbehar to maintainers 2024-09-17 09:32:14 +03:00
github-actions[bot]
3aaf0938c0
Merge staging-next into staging 2024-09-17 00:12:19 +00:00
Raymond Douglas
e868bfa5b1
wstunnel: exclude TLS arguments when enableHTTPS is false 2024-09-16 14:27:42 -07:00
h7x4
4423e93451
nixos/smartd: set Type = notify on systemd service 2024-09-16 23:21:24 +02:00
Jörg Thalheim
d82fa80488
nixos/services.cloudflared: fix filterConfig (#342370) 2024-09-16 21:37:42 +02:00
David Knaack
b6fed52cbc
nixos/services.snapraid: re-add missing lib. for lib imports
Related #335631
2024-09-16 21:10:57 +02:00
Aos Dabbagh
44a4c266c3 doc(livebook): Fix small spelling mistake 2024-09-16 14:54:45 -04:00
Felix Buehler
4cbff7e5d4 nixos/services.cloudflared: fix filterConfig 2024-09-16 20:47:07 +02:00
github-actions[bot]
1eb2a0e2d5
Merge staging-next into staging 2024-09-16 18:04:57 +00:00
Maximilian Bosch
3302dc7c34
nixos/doc: mention "No such file or directory" error on Nextcloud
That was... interesting to debug. It took a me a bit of reading C code
until I realized that the realpath cache is internally used for
`file_get_contents`, but not for `file_exists` 🙃

I'm not comfortable on doing the workaround in the module, but I think
it's good to have this documented in the manual.
2024-09-16 18:57:10 +02:00
Jörg Thalheim
09b875f827
nixos/syncoid: use local escapeUnitName instead of lib (#342347) 2024-09-16 18:49:58 +02:00
Jörg Thalheim
224510cec2 nixos/syncoid: don't prepend escapeUnitName 2024-09-16 18:45:00 +02:00
Jörg Thalheim
0f00e553c5
nixos/buildbot: fix usage of escapeStr (#342276) 2024-09-16 14:38:12 +02:00
github-actions[bot]
1c3463dc7a
Merge staging-next into staging 2024-09-16 12:06:19 +00:00
Weijia Wang
53eac0b4de nixos/buildbot: fix usage of escapeStr 2024-09-16 13:34:58 +02:00
Aleksana
f1580efb3b
maintainers/team-list: add cyberus team (#331059) 2024-09-16 18:14:16 +08:00
NotAShelf
b4878419ee
nixos/wakapi: add database options; gate db creation behind database.createLocally
Currently the NixOS module for Wakapi will create the database
automagically if the user has database dialect configured in the Wakapi
configuration file. By all means, this is undocumented behaviour and an
anti-feature.

This MR adds a database.createLocally option that allows the end-user to
create auto-creation behaviour, and lays out groundwork for automated
database setups for different database dialects supported by Wakapi.
2024-09-16 12:50:01 +03:00
Sandro
fd3ddb6b60
dnscrypt-wrapper: remove package and NixOS modules (#341838) 2024-09-16 11:25:30 +02:00
kirillrdy
51b7b3bddf
flarum: fix installation and migration logic (#341340) 2024-09-16 16:58:19 +10:00
rnhmjoj
234b7541be
dhcpcd: move database to /var/lib 2024-09-16 08:07:56 +02:00
rnhmjoj
b447fd58c7
nixos/dhcpcd: harden and run as unprivileged user 2024-09-16 08:07:55 +02:00
rnhmjoj
aff5d1d523
nixos/dhcpcd: remove ntpd workaround
This workaround for NTP daemons has been there for 12 years and is most
likely not needed anymore.
2024-09-16 08:07:55 +02:00
github-actions[bot]
7aea2e99a8
Merge staging-next into staging 2024-09-16 00:14:57 +00:00
rnhmjoj
a432668acf
dhcpcd: disable privsep by default
The priviledge separation mode has several downsides:

  - it's incompatible with alternative memory allocators, including
    graphene-hardened;

  - it needs an unreleased patch to fix a crash;

  - it results in none less than 6 subprocesses running at any time,
    increasing the memory usage;

  - the privileged process (albeit not doing any networking related
    tasks) is still running as root, so it has complete access to the
    system.

Let's disable this by default and instead run dhcpcd as an unpriviledge
user with only the necessary capabilities.
2024-09-16 01:23:54 +02:00
azahi
94c62f5036
nixos/networking.firewall: fix refactor regression
This fixes a regression that was introduced in #335631
2024-09-16 01:10:55 +03:00
Masum Reza
a5cfe01240
nixos/shairport-sync: Add pulse group also for pipewire (#341172) 2024-09-15 23:39:57 +05:30
github-actions[bot]
952947bdf8
Merge staging-next into staging 2024-09-15 18:04:54 +00:00
Nick Cao
04cc842ee5
nixos/dendrite: fix broken example conf link (#342056) 2024-09-15 09:37:32 -04:00
misuzu
2505777e0c nixos/netbird: remove misuzu as maintainer 2024-09-15 12:57:13 +00:00
M. Ian Graham
70f53bf307
nixos/dendrite: fix broken example conf link
Example config yaml has moved to: https://github.com/matrix-org/dendrite/blob/main/dendrite-sample.yaml
2024-09-15 21:31:37 +09:00
github-actions[bot]
84a5c54b60
Merge staging-next into staging 2024-09-15 12:05:26 +00:00
Sandro
76d7694a3f
nixos/neo4j: always set http values, even when disabled (#341586) 2024-09-15 12:42:20 +02:00
Jörg Thalheim
b4b8ef5bb6 nixos/network-filesystems/samba: fix eval 2024-09-15 11:02:11 +02:00
Felix Buehler
1cd7970bb8 nixos/services.matterbridge: remove with lib; 2024-09-15 10:43:57 +02:00
Felix Buehler
252e9bb1e7 nixos/services.lxd-image-server: remove with lib; 2024-09-15 10:43:57 +02:00
Felix Buehler
2e30f07cc0 nixos/services.logmein-hamachi: remove with lib; 2024-09-15 10:43:57 +02:00
Felix Buehler
196a14a174 nixos/services.lldpd: remove with lib; 2024-09-15 10:43:57 +02:00
Felix Buehler
0d57426bae nixos/services.lambdabot: remove with lib; 2024-09-15 10:43:57 +02:00
Felix Buehler
081c71df4b nixos/services.keybase: remove with lib; 2024-09-15 10:43:57 +02:00
Felix Buehler
f3bb24eb64 nixos/services.jotta-cli: remove with lib; 2024-09-15 10:43:57 +02:00
Felix Buehler
6c50168c7c nixos/services.jitsi-videobridge: remove with lib; 2024-09-15 10:43:57 +02:00
Felix Buehler
fee0a07c28 nixos/services.jigasi: remove with lib; 2024-09-15 10:43:57 +02:00
Felix Buehler
0cca8e9756 nixos/services.jicofo: remove with lib; 2024-09-15 10:43:56 +02:00
Felix Buehler
050c81941d nixos/services.ivpn: remove with lib; 2024-09-15 10:43:56 +02:00
Felix Buehler
aa27551b00 nixos/services.iodine: remove with lib; 2024-09-15 10:43:56 +02:00
Felix Buehler
b610b3cac2 nixos/services.inadyn: remove with lib; 2024-09-15 10:43:56 +02:00
Felix Buehler
f69dd2df9a nixos/services.i2p: remove with lib; 2024-09-15 10:43:56 +02:00
Felix Buehler
49224ecc3b nixos/services.htpdate: remove with lib; 2024-09-15 10:43:56 +02:00
Felix Buehler
9ceab680a6 nixos/services.haproxy: remove with lib; 2024-09-15 10:43:56 +02:00
Felix Buehler
f30e72ffbb nixos/services.hans: remove with lib; 2024-09-15 10:43:56 +02:00
Felix Buehler
a811ef8255 nixos/services.gobgpd: remove with lib; 2024-09-15 10:43:56 +02:00
Felix Buehler
90a98fc103 nixos/services.go-shadowsocks2: remove with lib; 2024-09-15 10:43:55 +02:00
Felix Buehler
2ec70782ab nixos/services.go-neb: remove with lib; 2024-09-15 10:43:55 +02:00
Felix Buehler
9ca9ac0b51 nixos/services.go-autoconfig: remove with lib; 2024-09-15 10:43:55 +02:00
Felix Buehler
3e72e14a6d nixos/services.gnunet: remove with lib; 2024-09-15 10:43:55 +02:00
Felix Buehler
7a65f58698 nixos/services.globalprotect: remove with lib; 2024-09-15 10:43:55 +02:00
Felix Buehler
878c5dc6eb nixos/services.gitDaemon: remove with lib; 2024-09-15 10:43:55 +02:00
Felix Buehler
0b865525e8 nixos/services.gdomap: remove with lib; 2024-09-15 10:43:55 +02:00
Felix Buehler
d0901224e1 nixos/services.gateone: remove with lib; 2024-09-15 10:43:55 +02:00
Felix Buehler
191b68cd26 nixos/services.frr: remove with lib; 2024-09-15 10:43:55 +02:00
Felix Buehler
fdcec053e6 nixos/services.frp: remove with lib; 2024-09-15 10:43:55 +02:00
Felix Buehler
7cc95389d1 nixos/services.freeradius: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
a49fa6ee3b nixos/services.freenet: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
688b08939c nixos/services.flannel: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
00d0e3ba98 nixos/networking.firewall: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
e915ced804 nixos/networking.firewall.nftables: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
15edaa6e16 nixos/networking.firewall.iptables: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
f12d3df878 nixos/services.fireqos: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
17f8650ace nixos/services.ferm: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
abc0a6e035 nixos/services.expressvpn: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
19e88959ef nixos/services.eternal-terminal: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
6233a59db3 nixos/services.epmd: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
a09250d8ab nixos/services.envoy: remove with lib; 2024-09-15 10:43:54 +02:00
Felix Buehler
aa2c039ab0 nixos/services.ejabberd: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
e59cdc8e99 nixos/services.doh-proxy-rust: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
504abe12d1 nixos/services.dnsmasq: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
3a05a07ef7 nixos/services.dnsdist: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
56576f90e3 nixos/services.dnscache: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
630754ae20 nixos/networking.dhcpcd: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
8681b42c62 nixos/services.ddclient: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
657cd334e6 nixos/services.dante: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
4589149299 nixos/services.create_ap: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
7fcd972c94 nixos/services.coturn: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
bd2d5c89ce nixos/services.corerad: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
c4bbbbbb10 nixos/services.coredns: remove with lib; 2024-09-15 10:43:53 +02:00
Felix Buehler
6c6b5e7f80 nixos/services.consul: remove with lib; 2024-09-15 10:43:52 +02:00
Felix Buehler
5438332690 nixos/services.cntlm: remove with lib; 2024-09-15 10:43:52 +02:00