Jonas Heinrich
9f10a2e82a
Merge pull request #218633 from onny/networkd-dispatcher-rules
...
nixos/networkd-dispatcher: add rules option
2023-03-08 20:41:06 +01:00
K900
23b0152ffb
Merge pull request #218530 from K900/murmur-dbus
...
nixos/murmur: expose dbus
2023-03-08 18:35:56 +03:00
K900
d8d8b55e7d
nixos/murmur: expose dbus
2023-03-08 18:03:51 +03:00
Jonas Heinrich
26e14e57af
nixos/networkd-dispatcher: add rules option
2023-03-08 10:20:47 +01:00
SEIAROTg
5a4dc2128e
nixos/wireguard: fix mtu after switching netns.
...
mtu is set after switching netns and thus the new netns should be used.
2023-03-04 18:51:12 +00:00
K900
18f85de76d
nixos/firewall: assert that the kernel supports conntrack helper auto-loading
2023-03-04 10:53:47 +03:00
Arian van Putten
17ca3dd2a6
Merge pull request #217852 from justinas/teleport-12
...
teleport: 11.3.4 -> 12.0.2, reintroduce teleport_11
2023-03-02 11:18:24 +01:00
Yureka
55da71c10e
nixos/nftables: add checkRuleset option ( #216531 )
...
* nixos/nftables: add checkRuleset option
* lkl: 2022-05-18 -> 2023-01-27
2023-03-02 10:28:01 +01:00
Justinas Stankevicius
31b5597cbd
nixos/teleport: add "package" option
2023-02-28 13:22:50 +02:00
Daniel Olsen
ea31ef91af
nixos/headscale: update oidc options
2023-02-27 15:17:16 +01:00
Robert Schütz
9e1d4dff3e
nixos/openvpn: use writeShellScript
...
Previously the upScript would fail with
Syntax error: "(" unexpected (expecting "done")
on line 7 if /bin/sh is not bash.
2023-02-26 10:12:28 -08:00
Naïm Favier
129b6f7812
Merge pull request #216504 from ncfavier/unbound-state-dir-writable
...
nixos/unbound: make stateDir writable
2023-02-23 14:23:53 +01:00
Robert Schütz
89c8ef30a6
nixos/imaginary: bind to localhost by default
2023-02-22 17:37:36 -08:00
Sandro
5b7d323435
Merge pull request #216909 from emilytrau/tailscale-tweaks
2023-02-21 23:21:09 +01:00
Jonas Heinrich
553c376a49
nixos/networkd-dispatcher: init
2023-02-19 04:42:25 -05:00
Nick Cao
a1291d0d02
Merge pull request #205784 from Eliot00/v2raya-fix
...
v2raya: v2rayA should start after nftables
2023-02-19 15:08:29 +08:00
Emily Trau
949b1df785
nixos/tailscale: fix config priority conflict
2023-02-18 13:28:04 +11:00
pennae
047bd73c5e
nixos/wireguard: make publicKeys singleLineStrs
...
using readFile instead of fileContents (or using indented strings) can
leave a trailing newline that causes build errors in systemd units and
has previously caused runtime errors in wireguard scripts. use
singleLineStr to strip a trailing newline if it exists, and to fail if
more than one is present.
2023-02-16 11:56:12 +01:00
Naïm Favier
5cf311c036
nixos/unbound: make stateDir writable
2023-02-15 18:14:58 +01:00
Robert Schütz
7b60fce843
Merge pull request #215222 from dotlambda/nixos-imaginary-init
...
nixos/imaginary: init
2023-02-12 08:42:19 -08:00
Andreas Stührk
8dade1f713
nixos/envoy: add option requireValidConfig to make config validation errors non-fatal
...
Co-authored-by: Vincent Haupert <vincent@yaxi.tech>
2023-02-11 18:21:21 +01:00
Vincent Haupert
84220a7098
nixos/envoy: add package option
2023-02-11 18:21:21 +01:00
Vincent Haupert
3c3da8768b
nixos/envoy: further service hardening
2023-02-11 18:21:21 +01:00
Vincent Haupert
8fff553f7e
nixos/envoy: sort serviceConfig entries
2023-02-11 18:21:21 +01:00
Vincent Haupert
989a1a6ef5
nixos/envoy: use lists in serviceConfig where appropriate
...
Using type `list` instead of `str` in `serviceConfig` entries which
accept multiple values allows easier extension of the unit
configuration.
2023-02-11 18:21:21 +01:00
Robert Schütz
efee1b5234
nixos/imaginary: init
2023-02-11 09:18:42 -08:00
Naïm Favier
86a387351a
Merge branch 'master' into nixos/hostapd
2023-02-11 14:03:56 +01:00
bb2020
76bf633dc2
nixos/minidlna: minor changes
2023-02-09 21:11:20 +03:00
pennae
bf4c0c1900
nixos/*: remove trailing period in mkEnableOptions
...
those are added by mkEnableOption, and .. is replaced to … by markdown
processing.
2023-02-08 15:23:34 +01:00
Will Fancher
1406dd02a9
sshd: Cyphers -> Ciphers
2023-02-07 13:54:36 -05:00
Sandro
98a5726add
Merge pull request #204390 from gbtb/openvpn_client_restart_after_suspend
...
Resolves https://github.com/NixOS/nixpkgs/issues/52528
2023-02-07 01:06:24 +01:00
Matthieu Coudron
ef5da70d66
services.openssh: rename several settings ( #211991 )
...
* services.openssh: rename several settings
... to match the sshd config format (makes transition smoother), namely:
services.openssh.forwardX11 -> services.openssh.settings.X11Forwarding
services.openssh.cyphers -> services.openssh.settings.Cyphers
services.openssh.macs -> services.openssh.settings.Macs
services.openssh.kexAlgorithms -> services.openssh.settings.KexAlgorithms
services.openssh.gatewayPorts -> services.openssh.settings.GatewayPorts
* release-notes: mention openssh renaming
* chore: regenerated release-notes
2023-02-07 00:11:18 +01:00
Sandro
d47709d1ef
Merge pull request #208189 from numinit/update-nebula-module
2023-02-06 23:14:58 +01:00
Robert Obryk
0a6dd02620
nixos/firefox-syncserver: enable recommendedProxySettings
...
The syncserver requires a Host header identical to the one provided by
the client.
2023-02-05 23:47:19 +01:00
Malte Voos
3449f83618
maintainers/malvo: update information
2023-02-05 15:05:51 +01:00
Morgan Jones
e99f342f11
nixos/nebula: harden systemd unit
2023-02-04 16:24:45 -08:00
Morgan Jones
9d649fd78c
nixos/nebula: add tests for relays; clean up nebula passthru test
2023-02-04 16:24:45 -08:00
Morgan Jones
90581c977f
nixos/nebula: don't run as root; support relays
2023-02-04 16:24:45 -08:00
Elliot
e78f2115bf
v2raya: v2rayA should start after nftables
2023-02-03 10:22:23 +08:00
Sebastian Sellmeier
f531b17f7d
avahi-daemon: add ConfigurationDirectory to ensure "avahi/services" exists
2023-02-01 21:43:29 +01:00
Izorkin
59dbe319ce
nixos/gitea: update SystemCallFilter
2023-01-31 10:08:32 -06:00
Izorkin
48ecda0962
nixos/chrony: disable PrivateDevices setting
2023-01-31 10:08:32 -06:00
Weijia Wang
5f83b5d199
Merge pull request #208801 from LeSuisse/multipath-tools-0.9.4
...
multipath-tools: 0.9.3 -> 0.9.4
2023-01-31 14:57:49 +01:00
Nick Cao
db77921d65
Merge pull request #205118 from SharzyL/fix-openconnect-protocol
...
nixos/openconnect: support alternative protocol
2023-01-31 19:53:53 +08:00
pennae
5b6dcece88
Merge pull request #212684 from pennae/nixos-render-docs
...
nixos-render-docs: init, use for some manual rendering to docbook
2023-01-30 19:26:07 +01:00
Michele Guerini Rocco
72c6c848ee
Merge pull request #212685 from rnhmjoj/pr-connman
...
nixos/wireless: fix failure on missing config file
2023-01-30 13:32:58 +01:00
pennae
0a6e6cf7e6
nixos/manual: render module chapters with nixos-render-docs
...
this converts meta.doc into an md pointer, not an xml pointer. since we
no longer need xml for manual chapters we can also remove support for
manual chapters from md-to-db.sh
since pandoc converts smart quotes to docbook quote elements and our
nixos-render-docs does not we lose this distinction in the rendered
output. that's probably not that bad, our stylesheet didn't make use of
this anyway (and pre-23.05 versions of the chapters didn't use quote
elements either).
also updates the nixpkgs manual to clarify that option docs support all
extensions (although it doesn't support headings at all, so heading
anchors don't work by extension).
2023-01-27 20:07:34 +01:00
rnhmjoj
688d658a96
nixos/wireless: fix failure on missing config file
...
This change prevents doing the secret substitution when the config is
missing, which would result in an error.
The service can be useful even without configuration; for example
connman controls wpa_supplicant using dbus and as such it does not need
a config file nor any other declarative options.
2023-01-26 00:31:21 +01:00
Sandro
e3d6edd75f
Merge pull request #209045 from Izorkin/update-dhcpcd-ipv6rs
2023-01-23 23:25:03 +01:00
Bernardo Meurer
271dbd928e
nixos/blocky: restart on failure
2023-01-23 11:45:56 -05:00
