Commit Graph

37352 Commits

Author SHA1 Message Date
phaer
c40f706dc4 nixos/nginx/tailscale-auth: init module 2023-12-06 20:57:38 +01:00
Vincent Haupert
44522d8478 nixos/vector: align service restart policy with upstream
Restart vector 5 times within 10s on exit. The upstream systemd unit
uses the same values.
2023-12-06 19:15:11 +00:00
Adam C. Stephens
b1f7f1ce6d
Merge pull request #271689 from adamcstephens/lxc/team
treewide: init lxc team and take ownership of components
2023-12-06 13:55:45 -05:00
Jacob Greenleaf
ed67e22139 nixos/teamspeak3: SSH and HTTP ip+port options
ServerQuery actually listens on three separate addresses each
corresponding to its own protocol (raw/telnet, ssh, and http). By only
setting `query_addr` we only update what IP we listen on for the raw
protocol, not ssh and http protocols which end up listening on the
default wildcard address.

This change simply makes it so that setting `queryIP` sets the IP for
all three protocols by setting each corresponding option (`query_ip`,
`query_ssh_ip` and `query_http_ip`).
2023-12-06 08:31:38 -08:00
Jörg Thalheim
224537581a nixos/harmonia: test if extra-allowed-users works 2023-12-06 12:56:35 +01:00
Jörg Thalheim
bd88398369 nixos/harmonia: allocate user
DynamicUser seem to broken in combination with the nix-daemon.
2023-12-06 12:56:35 +01:00
Martin Weinelt
d809a6f9c3
nixos/home-automation: fix lovelace card entrypoint
Only append the .js extension to the card pname, not to the specified
entrypoint.
2023-12-06 04:35:35 +01:00
Martin Weinelt
17c08296e3
Merge pull request #269940 from mweinelt/home-assistant-errata
Home Assistant Custom Component Errata
2023-12-06 04:11:36 +01:00
Martin Weinelt
b908dc8654
Merge pull request #271785 from SuperSandro2000/hass-custom-lovelace
nixos/home-assistant: fix custom lovelace module loading
2023-12-06 04:10:34 +01:00
Martin Weinelt
01616e5331
buildHomeAssistantComponent: migrate from pname to owner/domain
Also make the attribute name to match the domain name.

This is more in line with the home-assistant custom component ecosystem
and allows additional validation between the derivation and the manifest.

Also, at a later time, this will enable us to check for domain conflicts
at eval time.
2023-12-06 03:55:33 +01:00
maxine
ad7955279d
Merge pull request #270011 from christoph-heiss/networkd-fix-wgpeer-doc
nixos/networkd: fix manpage for `WireGuardPeer` config
2023-12-06 00:33:05 +01:00
happysalada
21d23dddd8 nixos/windmill: init module 2023-12-05 22:54:18 +00:00
happysalada
93c790aef3 nixos/clamav: add scanner service 2023-12-05 22:53:35 +00:00
happysalada
6b014e92de nixos/clamav: fix /run/clamav being removed 2023-12-05 22:53:35 +00:00
maxine
f73dbfa5f8
Merge pull request #213006 from Majiir/nut
nixos/ups: add options for essential config files
2023-12-05 23:14:37 +01:00
Sandro Jäckel
bba808dbfa
nixos/avahi-daemon: resolve mdns only over enabled protocols, disable ipv6 by default
see https://github.com/lathiat/nss-mdns#:~:text=in%20such%20a%20situation%20causes%20long%20timeouts%20when%20resolving%20hosts
especially:
> libnss_mdns.so.2 resolves both IPv6 and IPv4 addresses, libnss_mdns4.so.2 only IPv4 addresses and
> libnss_mdns6.so.2 only IPv6 addresses. Due to the fact that most mDNS responders only register local IPv4
> addresses via mDNS, most people will want to use libnss_mdns4.so.2 exclusively. Using libnss_mdns.so.2
> or libnss_mdns6.so.2 in such a situation causes long timeouts when resolving hosts since most modern
> Unix/Linux applications check for IPv6 addresses first, followed by a lookup for IPv4.
2023-12-05 21:51:12 +01:00
Robert Hensing
4d1f62836e scripts/create-amis.sh: Update region list 2023-12-05 18:30:52 +01:00
Thiago Kenji Okada
bed09b735f
Merge pull request #226923 from Drakonis/prometheus/agent-mode
nixos/prometheus: add `enableAgentMode` option
2023-12-05 17:17:37 +00:00
Alejandro Sánchez Medina
f10cab3241
Merge pull request #271343 from tweag/release-notes-stable
Use stable Nixpkgs URLs in release notes
2023-12-05 10:28:53 -05:00
Sandro
d011c93f7d
nixos/hound: adopt, rework, cleanup (#268983)
- add me as maintainer
- remove hardcoded user id
- validate syntax of config file
- remove superfluous option extraGroups
- use mkPackageOptionMD
2023-12-05 15:59:26 +01:00
Victor Hugo Aguiar Pacce
5c6c35d0f8 nixos/prometheus: add enableAgentMode option
Required for running a prometheus service under agent mode

Signed-off-by: Victor Hugo Aguiar Pacce <victorhugoaguiarpacce@gmail.com>
2023-12-05 11:24:04 -03:00
Robert Hensing
708e7ccb37
Merge pull request #271423 from hercules-ci/nixos-nix.nix-nix-config-show
nixos/nix.nix: Support new Nix 2.20 command syntax
2023-12-05 14:47:20 +01:00
Pol Dellaiera
d79be73295
Merge pull request #271628 from scvalex/kubernetes-flannel-dont-open-ports
kubernetes: don't always open flannel fw ports
2023-12-05 12:29:21 +01:00
Janik
7703f36fd1
Merge pull request #269469 from NetaliDev/zammad-update 2023-12-05 09:29:51 +01:00
h7x4
e6a98c8254
nixos/mattermost: fix mkPackageOption default name 2023-12-04 23:12:25 +01:00
netali
531fa59187
nixos/tests/zammad: fix test 2023-12-04 23:10:08 +01:00
netali
a1f6e1d6f1
nixos/zammad: update for zammad 6.1 2023-12-04 23:10:07 +01:00
K900
3c1ad28f89
Merge pull request #266234 from SuperSamus/plasma-dconf-glib
nixos/plasma5: enable dconf by default
2023-12-05 00:23:29 +03:00
Ryan Lahfa
0275f6fc9e
Merge pull request #272061 from JulienMalka/clevis-fix-zfs-evaluation 2023-12-04 19:36:39 +01:00
Julien Malka
28608b0448 nixos/clevis: skip filesystem with null devices 2023-12-04 15:21:16 +00:00
Julien Malka
9b6b934949 nixos/clevis: guard zfs code behind config.clevis.boot.initrd.enable 2023-12-04 15:09:49 +00:00
Adam Stephens
27064dd722
nixos/lxc: remove with lib 2023-12-04 10:06:54 -05:00
Adam Stephens
ccb7b8e309
nixos/lxcfs: remove with lib 2023-12-04 10:06:52 -05:00
Adam Stephens
6765aac154
treewide/lxc: set lxc team as maintainer 2023-12-04 10:06:50 -05:00
Kerstin
ba513b2979
Merge pull request #270522 from schmittlauch/mastodon-streaming-processes-number-docs
Proposal: nixos/mastodon; Releasenotes and (possibly) better error messages for `streamingProcesses`
2023-12-04 16:04:27 +01:00
Nick Cao
c0443ea94c
Merge pull request #271869 from wentasah/redmine-assertions
nixos/redmine: Fix database assertions
2023-12-04 08:56:45 -05:00
John Garcia
f509382c11 node-red_service: correct package to nodePackages.node-red 2023-12-04 11:53:23 +00:00
K900
f0b6f1fb27
Merge pull request #271922 from puetzk/qt6-qtmultimedia-ffmpeg
qt6.qtmultimedia: Enable ffmpeg/VAAPI backend
2023-12-04 10:07:02 +03:00
zowoq
34deb05e55 nixos/buildbot: fix worker package 2023-12-04 13:55:09 +10:00
Trolli Schmittlauch
cbf69c83d3 nixos/mastodon: clarify the need to set streamingProcesses
Explicitly declaring that option is now necessary, but wasn't in the module shipped with 23.05.
2023-12-04 02:18:39 +01:00
Peder Bergebakken Sundt
58ffd55cde
Merge pull request #249777 from LunNova/lunnova/input-remapper-2.x
input-remapper: 1.5.0 -> 2.0.1
2023-12-04 01:23:30 +01:00
Peder Bergebakken Sundt
d2852f5af0
Merge pull request #238711 from moni-dz/contour
contour: 0.3.1.200 -> 0.3.12.262
2023-12-04 00:10:19 +01:00
Kevin Puetz
91b8e472a5 qt6.qtmultimedia: Compile ffmpeg multimedia plugin
This is now the default recommendation upstream for linux platforms

> https://doc.qt.io/qt-6.6/qtmultimedia-index.html#ffmpeg-as-the-default-backend
> In this release the FFmpeg framework is set as the default backend on
> Windows, macOS, Android, and Linux except Yocto distribution.

> The version shipped with Qt binary packages is FFmpeg 6.0
> and is tested by the maintainers.

libXrandr is required to compile support QT_WINDOW_CAPTURE_BACKEND=x11
2023-12-03 16:58:28 -06:00
Atemu
fd7f5fd9a2
Merge pull request #269475 from jonringer/addhardwarerunpath-mini
addDriverRunpath: init
2023-12-03 22:27:36 +01:00
Emily
a0ba4615da
Merge pull request #270467 from nalves599/269944-keepalived-firewall
nixos/keepalived: add openFirewall option
2023-12-03 20:37:09 +01:00
fortuneteller2k
1769cf416e contour: 0.3.1.200 -> 0.3.12.262
- use qt6 by default
  - codesign macOS bundle executable
  - install terminfo for Darwin
  - install shell completions for zsh and fish
2023-12-04 02:39:26 +08:00
Jonathan Ringer
05f1bc9654
nixos/manual: add entry for addDriverRunpath 2023-12-03 07:23:45 -08:00
Nick Cao
fba68401fb
Merge pull request #271835 from undefined-moe/patch-2
prometheus-mongodb-exporter: fix service ExecStart
2023-12-03 09:35:28 -05:00
Weijia Wang
d1fc3a5f9f
Merge pull request #253428 from Yarny0/tsm-freeform
nixos/tsm-client: migrate to freeform settings (RFC42)
2023-12-03 14:50:12 +01:00
Michal Sojka
8667baf161 nixos/redmine: Fix database assertions
Recent PR 266270[1] modified an assertion related to database settings
of the redmine service. There are two problems with that change:

1. Assert message was not updated to reflect the change in the assert
   condition.

2. The new condition applies only to postgresql, not the default
   mysql. Therefore, the assertion breaks existing mysql-based
   installations without any reason.

This commit fixes these by 1) reverting the modified assertion to the
previous value, making the message match the condition and 2) adding a
new assertion that applies only to postgresql.

[1]: https://github.com/NixOS/nixpkgs/pull/266270
2023-12-03 14:41:42 +01:00
Weijia Wang
f5f2b471f3
Merge pull request #271437 from martinetd/ankisyncd-deprecation
ankisyncd: mark module as deprecated
2023-12-03 14:35:57 +01:00
Weijia Wang
4e81387d5b
Merge pull request #264331 from foo-dogsquared/add-nixos-guix-module
nixos/guix: init
2023-12-03 13:03:43 +01:00
Pol Dellaiera
9284581a09
Merge pull request #271376 from kallistoteles/thinkfan-service-restart
nixos/thinkfan: restart on failure
2023-12-03 12:47:01 +01:00
undefined
3c4370ca2f
prometheus-mongodb-exporter: fix service ExecStart 2023-12-03 17:54:21 +08:00
kalle
f1e6c6641e nixos/thinkfan: add setting
the thinkfan service failed from time to time on my t440s, so I added
restart on fail to the systemd service.
2023-12-03 08:45:03 +01:00
Janik
5380b3c73a
Merge pull request #259773 from dadada/dadada/luks-fido2-systemd 2023-12-03 07:19:00 +01:00
Bobby Rong
43744f5bc4
Merge pull request #268515 from NixOS/cinnamon
Cinnamon 6.0
2023-12-03 12:20:39 +08:00
Majiir Paktu
c1793ff623 nixos/ups: add {users,upsmon,upsd} config options 2023-12-02 22:44:07 -05:00
Majiir Paktu
09002e9d23 nixos/ups: various fixes & clean up
- Ensure NUT_STATEPATH exists (fixes service startup)
- Use mode option to enable services (fixes #113735)
- Remove extraneous slash in paths (fixes confusing logs)
- Support reload for upsmon and upsd
- Remove ExecStart wrapper scripts
2023-12-02 22:42:14 -05:00
Sandro Jäckel
663dbfb82d
nixos/home-assistant: fix custom lovelace module loading
based on https://community.home-assistant.io/t/ui-lovelace-yaml-and-custom-resources/240178/4

Tested on a home-assistant server and before the card was not loaded at all.
After this it threw an error that my config is wrong.
2023-12-03 00:53:59 +01:00
Lin Jian
094017d16d
Merge pull request #271723 from LDprg/master
nixos/preload: fix log permission
2023-12-02 16:58:19 -06:00
Nuno Alves
24d9151d15
nixos/keepalived: add openFirewall option
Allow VRRP and AH (authentication packets) through the firewall
automatically if the option is set.
2023-12-02 22:42:12 +00:00
Janik
c3ac6b916c
Merge pull request #271441 from NetaliDev/mysql-auth-fix 2023-12-02 23:34:51 +01:00
Martin Weinelt
2a57f9aeba
Merge pull request #271760 from SuperSandro2000/hass-switching-lovelace-writtable
nixos/home-assistant: fix error when switching between writable and none writable lovelace config
2023-12-02 23:09:25 +01:00
Sandro Jäckel
57bfbc781c
nixos/home-assistant: fix error when switching between writable and none writable lovelace config
error message before was:
cp: not writing through dangling symlink '/var/lib/hass/ui-lovelace.yaml'
2023-12-02 23:04:48 +01:00
Benjamin Saunders
dffba14043 nixos/matrix-appservice-irc: fix syscall filter
The pre-start script requires @chown; the service fails without it.
2023-12-02 12:03:58 -08:00
netali
22b5fecd98
nixos/tests/auth-mysql: fix test 2023-12-02 20:18:30 +01:00
LDprg
6f33e6e4ab nixos/preload: fix log permission 2023-12-02 19:19:33 +01:00
Peder Bergebakken Sundt
1079eccc63
Merge pull request #262133 from h7x4/cleanup-screen-module
nixos/screen: clean up module
2023-12-02 15:56:45 +01:00
Ryan Lahfa
8626b5c06d
Merge pull request #257525 from SaumonNet/clevis 2023-12-02 12:58:01 +01:00
Peder Bergebakken Sundt
598129ea00
Merge pull request #243476 from OPNA2608/init/lomiri/ayatana-messages
ayatana-indicators: init messaging indicator, module, test
2023-12-02 12:56:21 +01:00
Julien Malka
3aa4ed0985 nixos/tests/installer: init clevis tests
Co-Authored-By: Camille Mondon <camillemondon@free.fr>
2023-12-02 11:55:52 +00:00
Camille Mondon
27493b4d49 nixos/clevis: init
Co-Authored-By: Julien Malka <julien@malka.sh>
2023-12-02 11:55:47 +00:00
Thomas Gerbet
70d27ac5a8
Merge pull request #267531 from techknowlogick/gitea-1210
gitea: 1.20.5 -> 1.21.1
2023-12-02 12:14:45 +01:00
Alexandru Scvortov
f9123510db kubernetes: don't always open flannel fw ports 2023-12-02 10:50:56 +00:00
Yarny0
20a9a21b24 nixos/tsm-client: add migration code for freeform settings
To help users migrate from the previous
settings to new freeform settings type,
the commit at hand adds some
`mkRemovedOptionModule` and `mkRenamedOptionModule`.

These modules are not designed to work
inside an attribute set of submodules.
They create values for `assertions` and
`warnings` to inform the user of required changes.
Also, these informational texts do not contain
the full attribute path of the changed options.
To work around these deficiencies,
we define the required options `assertions` and `warnings`
inside the submodule and later add the values collected
inside these options to the corresponding top-level options.
In the course of doing so, we also add the full attribute path
to the informational texts so the user knows these warning
and error messages refer to the `tsmClient.servers` option.

Also, we have to filter out `warnings`, `assertions`, and
the "old" options when rendering the target config file.
2023-12-02 09:09:28 +01:00
Yarny0
98c03bf8c6 nixos/tsm-client: stricter assertions
Check for spaces or duplicate names in server config keys.
Since server config keys are case insensitive,
a setting like

```
{
  compression = "yes";
  Compression = "no";
}
```

would lead to an ambiguous configuration.
2023-12-02 09:09:27 +01:00
Yarny0
3fb29fecd5 nixos/tsm-client: use freeformType for server config
`tsm-client` uses a global configuration
file that must contain coordinates for each
server that it is supposed to contact.
This configuration consists of text
lines with key-value pairs.

In the NixOS module, these servers may be declared
with an attribute set, where the attribute name
defines an alias for the server, and the value
is again an attribute set with the settings for
the respective server.
This is organized as an option of type `attrsOf submodule...`.

Before this commit:

Important settings have their own option within
the submodule.  For everything else, there is
the "catch-all" option `extraConfig` that may
be used to declare any key-value pairs.
There is also `text` that can be used to
add arbitrary text to each server's
section in the global config file.

After this commit:

`extraConfig` and `text` are gone,
the attribute names and values of each server's attribute
set are translated directly into key-value pairs,
with the following notable rules:

* Lists are translated into multiple lines
  with the same key, as such is permitted by
  the software for certain keys.
* `null` may be used to override/shadow a value that
  is defined elsewhere and hides the corresponding key.

Those "important settings" that have previously been
defined as dedicated options are still defined as such,
but they have been renamed to match their
corresponding key names in the configuration file.
There is a notable exception:
"Our" boolean option `genPasswd` influences the "real"
option `passwordaccess', but the latter one is
uncomfortable to use and might lead
to undesirable outcome if used the wrong way.
So it seems advisable to keep the boolean option
and the warning in its description.
To this end, the value of `getPasswd` itself is
later filtered out when the config file is generated.

The tsm-backup service module and the vm test are adapted.

Migration code will be added in a separate
commit to permit easy reversal later, when the
migration code is no longer deemed necessary.
2023-12-02 09:09:27 +01:00
Yarny0
8b918ed8ab nixos/tsm-client: submodule doesn't need singleton list 2023-12-02 09:09:27 +01:00
Yarny0
5bc6eb731e nixos/tsm-client: server alias names cannot have spaces 2023-12-02 09:09:27 +01:00
Yarny0
fe96d79adf nixos/tsm-client: drop own checkIUnique for allUnique 2023-12-02 09:09:27 +01:00
Yarny0
363cf1e363 nixos/tsm-client: use mkPackageOption for wrappedPackage 2023-12-02 09:08:47 +01:00
Yarny0
d5f337809e nixos/backup/tsm: use lib.getExe' for service command line 2023-12-02 09:05:45 +01:00
Yarny0
cec6d7f51a nixos/tsm*: update product name and URLs
With the tsm-client 8.1.19.0 release,
IBM renamed the product brand from
"IBM Spectrum Protect" to "IBM Storage Protect":
https://www.ibm.com/support/pages/node/6964770 .

The package already got updated in commits
5ff5b2ae4c and
a4b7a62532 .

The commit at hand updates the modules accordingly.
2023-12-02 09:05:45 +01:00
Bobby Rong
74065b1858
nixos/rl-2405: Mention Cinnamon 6.0 update 2023-12-02 14:06:13 +08:00
Bobby Rong
9247bdfce7
nixos/cinnamon: switch to xdg.portal.configPackages
This will make sure the config is in sync with upstream.
2023-12-02 12:12:48 +08:00
Bobby Rong
b7fa2ea58b
nixosTests.cinnamon-wayland: init 2023-12-02 12:12:47 +08:00
Emily Trau
54ba768be8
Merge pull request #271164 from helsinki-systems/feat/netbox-gunicorn
netbox: Inherit gunicorn from the package
2023-12-02 13:37:33 +11:00
Peder Bergebakken Sundt
08999b8e15
Merge pull request #271160 from ethorsoe/terminfo
nixos/terminfo: ignore broken packages in all-terminfo test
2023-12-02 03:16:34 +01:00
techknowlogick
c70d0c8ce3 gitea: 1.20.5 -> 1.21.1 2023-12-01 15:17:32 -08:00
Robert Scott
53bf3e8255
Merge pull request #267049 from justinas/justinas/remove-teleport-11
teleport_11: remove
2023-12-01 23:06:31 +00:00
Sefa Eyeoglu
c1f0be0373 nixos/postgresqlBackup: add Scrumplex as maintainer
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2023-12-01 19:08:31 +01:00
Sefa Eyeoglu
0aaf428fde nixos/postgresqlBackup: add --rsyncable to compression programs
The --rsyncable option changes the behavior of gzip/zstd so that the
resulting files can be incrementally backed up easily. Tools like Borg,
rsync and xdelta can make use their deduplication/diff mechanisms more
easily.

In my local testing, this resulted in a 2% size increase for backup
files.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2023-12-01 19:08:31 +01:00
Nick Cao
79bea56197
Merge pull request #271426 from R-VdP/fix_eris_test
eris-server: fix nixos test
2023-12-01 10:32:48 -05:00
netali
b1b67e980a
nixos/mysql-auth: fix passwords in config files 2023-12-01 14:04:45 +01:00
Dominique Martinet
8a2c07ba40 ankisyncd: mark module as deprecated 2023-12-01 21:21:35 +09:00
r-vdp
4411e1933d
eris-server: fix nixos test 2023-12-01 12:24:03 +01:00
Robert Hensing
2d0f4a7ec1 nixos/nix.nix: Support new Nix 2.20 command syntax
Otherwise it shows a deprecation warning, which is escalated to
an error. For context, see
https://github.com/NixOS/nixpkgs/pull/139075#discussion_r733615550
2023-12-01 12:14:21 +01:00
Emily Trau
00bee09724
Merge pull request #264419 from Noodlez1232/joycond-cemuhook
joycond-cemuhook: init at unstable-2023-08-09
2023-12-01 22:00:55 +11:00
Emily Trau
61bc4eb133
Merge pull request #271246 from otavio/rio
rio: 0.0.27 -> 0.0.28
2023-12-01 21:17:10 +11:00