Emily
00a7b91eac
Merge pull request #243366 from vamega/sambda-wsdd-firewall-config
...
nixos/samba-wsdd: add openFirewall option
2023-07-17 19:21:58 +02:00
Jarosław Wygoda
7fc0e3334e
nixos/tailscale: add authKeyFile option
...
Auth key registers new nodes without needing to sign in via a browser
Tailscale sends status changes with systemd-notify.
https://github.com/tailscale/tailscale/blob/v1.44.0/ipn/ipnlocal/local.go#L3670
2023-07-17 18:52:07 +02:00
ppom
139259a377
slskd: init module ( #233648 )
...
* slskd: init module
* Update nixos/modules/services/web-apps/slskd.nix
* Update nixos/modules/services/web-apps/slskd.nix
* add description to slskd module options
---------
Co-authored-by: ppom <ppom@ppom.me>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-07-17 18:40:54 +02:00
Alexander Flurie
c2861bcbdf
add separate configurable datadog process agent
2023-07-17 10:34:50 -04:00
Varun Madiath
d237a7318c
nixos/samba-wsdd: add openFirewall option
2023-07-17 10:22:43 -04:00
Maximilian Bosch
42105b2ba3
nixos/gitea: explicitly set CHUNKED_UPLOAD_PATH to writable location
...
Fix for Gitea 1.20.0.
Without this being set, e.g. a `git push` (or `ssh` to `git@` in general) fails like this:
2023/07/17 09:27:05 ...s/setting/setting.go:109:LoadCommonSettings() [F] Unable to load settings from config: unable to create chunked upload directory: /nix/store/yna9nf66wl2n9hlnhxi2g7fdgawk2kxl-gitea-1.20.0/bin/data/tmp/package-upload (mkdir /nix/store/yna9nf66wl2n9hlnhxi2g7fdgawk2kxl-gitea-1.20.0/bin/data: read-only file system)
Connection to git.mbosch.me closed.
2023-07-17 11:49:34 +02:00
Nick Cao
b47c483bf8
nixos/bpftune: init
2023-07-17 15:59:49 +08:00
Colin
e7059632c6
nixos/trust-dns: init
...
Co-authored-by: Yt <happysalada@tuta.io>
2023-07-16 15:24:10 +08:00
Artturi
d1abbbd9b6
Merge pull request #242309 from Artturin/ananicyextraxadd
2023-07-16 00:43:45 +03:00
pennae
45ae0efbbc
Merge pull request #243271 from woojiq/keyd-support-multiple-configs
...
nixos/keyd: add support for multiple configuration in different files
2023-07-15 13:59:57 +02:00
Nick Cao
d9dd68efda
Merge pull request #243004 from baloo/baloo/keepalived/vrrp-router-id
...
keepalived: fixup `virtualRouterId` documentation
2023-07-15 05:36:10 -06:00
woojiq
2d3bf20086
nixos/keyd: add support for multi-file configuration
...
Add `keyboards` option to define different configurations for different IDs. This creates the appropriate files in `/etc/keyd` instead of just `default.conf` as before.
Add `23.11` release note entry.
Add `mkRemovedOptionModule` for the old API with a note on how to revert the old behavior.
2023-07-15 11:33:41 +03:00
Robert Schütz
c9e8e912cb
nixos/patroni: use Python 3.10
2023-07-14 18:20:14 -07:00
Sandro
545f079f5e
Merge pull request #243475 from vtuan10/enable-klipper-flash
...
nixos/klipper: add enableKlipperFlash option
2023-07-15 02:54:47 +02:00
adisbladis
110489e12a
Merge pull request #243373 from adisbladis/pict-rs_0_4
...
pict-rs: 0.3.3 -> 0.4.0
2023-07-15 12:36:05 +12:00
Arthur Gautier
ee38adc8e2
keepalived: use ints.between
...
Signed-off-by: Arthur Gautier <baloo@superbaloo.net>
2023-07-14 20:52:48 +00:00
Lassulus
a4ffd00fb9
Merge pull request #243251 from schnusch/cgit-regex
...
nixos/cgit: fix \v and \f in regexEscape
2023-07-14 22:03:44 +02:00
schnusch
8980fdd9b5
nixos/cgit: fix \v and \f in regexEscape
2023-07-14 21:14:01 +02:00
Bruno BELANYI
b5f28477aa
nixos/prowlarr: make use of 'lib.getExe'
2023-07-14 13:43:26 +00:00
Van Tuan Vo
917bb93078
nixos/klipper: add enableKlipperFlash option
2023-07-14 15:19:36 +02:00
Ryan Lahfa
c9e26d7d3a
Merge pull request #242036 from jnsgruk/prowlarr-update
2023-07-14 13:48:15 +02:00
Sandro
9e010edec7
Merge pull request #243102 from yu-re-ka/peering-manager-meta
2023-07-14 12:08:05 +02:00
Pol Dellaiera
641b814a44
Merge pull request #243094 from jnsgruk/homepage
...
homepage: init at 0.6.21
2023-07-14 09:53:26 +02:00
adisbladis
4c5afa2af4
nixos/pict-rs: Use pict-rs-0.3 for NixOS <= 23.05
2023-07-14 17:46:26 +12:00
Janik
fc7d1abf50
Merge pull request #133092 from TomatoCream/add-jvm-to-nexus
2023-07-14 01:45:19 +02:00
Your Name
9cc181f5c6
nixos/nexus: add jvm package option
2023-07-13 23:16:42 +02:00
Ryan Lahfa
7bc11802ed
Merge pull request #238777 from ORichterSec/esdm-upstream
2023-07-13 22:35:45 +02:00
Sandro
6873b5c7ee
Merge pull request #243289 from SuperSandro2000/nullmailer-group
...
nixos/nullmailer: allow users in the nullmailer group to send mails
2023-07-13 21:44:18 +02:00
Guillaume Girol
aaf4aa7c7e
Merge pull request #237994 from SebTM/fix/cups-xdg-missing
...
cups: add dependency for xdg-open
2023-07-13 18:22:46 +00:00
Sandro Jäckel
b2c1b176d9
nixos/nullmailer: allow users in the nullmailer group to send mails
...
In combination with https://github.com/NixOS/nixpkgs/pull/231673 this
allows hardened services to use nullmailer's sendmail.
2023-07-13 17:02:19 +02:00
Oliver Richter
9d6cd34766
esdm: init at 0.6.0
...
Signed-off-by: Oliver Richter <richter-oliver@gmx.net>
2023-07-13 16:08:12 +02:00
Sebastian Sellmeier
57071b60fe
cups: add xdg-open as dependency package as substitution does not work
...
for all desktop-envs
2023-07-13 15:37:00 +02:00
Philipp Bartsch
30ad9053ab
nixos/murmur: add apparmor policy
2023-07-13 11:11:01 +02:00
Philipp Bartsch
ced170c030
nixos/miniflux: add apparmor policy
...
This change also extends the test to ensure that normal operations
aren't denied.
2023-07-13 11:10:39 +02:00
Jon Seager
3de6be0951
nixos/homepage-dashboard: init
2023-07-13 09:38:26 +01:00
adisbladis
c88c434c34
nixos/lemmy: Move pictrs url from pictrs_url to pictrs.url
...
The upstream config schema changed.
2023-07-13 15:46:30 +12:00
adisbladis
2bc5b80182
lemmy-ui: Set NODE_ENV to run server in production mode
2023-07-13 15:46:30 +12:00
Artturin
4cf8006173
nixos/ananicy: take listOf attrs
instead of string
2023-07-12 20:13:03 +03:00
Lassulus
0e1fc501c6
Merge pull request #241927 from ether42/usbguard
...
nixos/usbguard: rename services.usbguard.implictPolicyTarget to services.usbguard.implicitPolicyTarget
2023-07-12 18:58:30 +02:00
Yureka
5934231542
nixos/peering-manager: remove global 'with lib;'
2023-07-12 18:39:55 +02:00
Yureka
041e9a8e7a
nixos/peering-manager: add meta section
2023-07-12 18:39:54 +02:00
Sandro
5aa53b205e
Merge pull request #208924 from erdnaxe/nitter-network-online
2023-07-12 14:19:30 +02:00
Cabia Rangris
d857b1261c
Merge pull request #241667 from cyberus-technology/outline-0.70.0
...
outline: 0.69.2 -> 0.70.2
2023-07-12 14:45:40 +04:00
Rick van Schijndel
e1163b27dd
Merge pull request #242912 from chayleaf/fix-getent
...
treewide: update path to getent
2023-07-12 12:37:08 +02:00
Jon Seager
b853c70661
nixos/prowlarr: add package option
2023-07-12 10:19:05 +01:00
Felix Buehler
bec27fabee
treewide: use lib.optional instead of 'then []'
2023-07-12 09:36:28 +01:00
Alexander Sieg
b926effb76
outline: 0.69.2 -> 0.70.2
2023-07-12 09:54:57 +02:00
Arthur Gautier
c8920fc6d9
keepalived: fixup virtualRouterId
documentation
...
Router id 0 is an invalid option with keepalived
2023-07-12 06:12:03 +00:00
chayleaf
4d4c73ff78
treewide: update path to getent
2023-07-12 02:32:23 +07:00
Sandro
d6d6d42c74
Merge pull request #237364 from fdietze/patch-3
...
fix herbstluftwm session command with other desktop managers
2023-07-11 21:14:20 +02:00
emilylange
da58b13615
nixos/gitea: revert change to RuntimeDirectoryMode
...
As this broke most unix socket setups and there is a far better suited
`server.UNIX_SOCKET_PERMISSION` in gitea/forgejo itself.
https://docs.gitea.io/en-us/administration/config-cheat-sheet/#server-server
ref: a0311e5107
2023-07-11 17:05:45 +02:00
Sandro
eae22520b9
Merge pull request #237802 from SuperSandro2000/ceph-package-options
...
nixos/ceph: add options to configure package used by each component
2023-07-09 23:38:28 +02:00
Atemu
2616bb762b
nixos/paperless: explain how to set JSON env vars
...
Co-authored-by: Christian Theune <ct@flyingcircus.io>
Co-authored-by: Erik Arvstedt <erik.arvstedt@gmail.com>
2023-07-09 19:52:06 +02:00
Artturin
1b1f25312d
ananicy: unstable-2021-11-05 -> unstable-2023-03-21
...
type's were renamed so this will break some user rules
2023-07-09 00:58:05 +03:00
Artturin
aae2268e0a
nixos/ananicy-cpp: add rulesProvider
2023-07-08 20:28:45 +03:00
Artturin
ff28d7a982
nixos/ananicy: don't error if $out/ananicy-cpp doesn't exist
...
copy new rule
2023-07-08 20:19:13 +03:00
Artturin
b04a04929c
nixos/ananicy: add extraTypes, extraCgroups
2023-07-08 19:42:46 +03:00
Atemu
44f637aa8d
nixos/paperless: use toShellVars for paperless-manage
...
The homebrewed snippet didn't escape vars properly which is an issue because
PAPERLESS_OCR_USER_ARGS requires a JSON string. This also meant a discrepancy
between the services' env vars and paperless-manage's.
Just use the correctly functioning library function for this instead.
2023-07-08 16:03:45 +02:00
K900
9c98b1a744
Merge pull request #233981 from K900/dont-touch-graphical-session-target
...
nixos/x11/display-managers: don't touch graphical-session.target in xsession-wrapper
2023-07-08 16:43:27 +03:00
Ryan Lahfa
7be83143e8
Merge pull request #222536 from oddlama/master
2023-07-08 14:36:18 +02:00
Ryan Lahfa
89d68cebcb
Merge pull request #241126 from RaitoBezarius/fix-plausible-secret-handling
2023-07-08 14:34:20 +02:00
Ryan Lahfa
0d2f526dbb
Merge pull request #241462 from SuperSandro2000/remove-ddclient
2023-07-08 14:33:00 +02:00
K900
d26393d60c
nixos/x11/display-managers: don't touch graphical-session.target in xsession-wrapper if the desktop knows how to handle it
...
This is not correct and will in fact break things because they try to run before the target is reached.
Ideally we'd get rid of it entirely, but WM users rely on this behavior, so allowlist some desktops
to get the sane behavior, and fake the session for the rest until upstreams/NixOS modules catch up.
2023-07-08 15:09:39 +03:00
K900
400aafbdc9
Merge pull request #239389 from K900/sddm-0.20.0
...
sddm: 0.19.0 -> 0.20.0
2023-07-08 11:52:02 +03:00
adisbladis
8062626e0e
lemmy-{server,ui}: 0.18.0 -> 0.18.1
2023-07-08 13:59:30 +12:00
Janik
e46ab54b68
Merge pull request #241783 from gmemstr/n8n-tweaks
2023-07-07 23:04:48 +02:00
Ilan Joselevich
7016b8bf7a
Merge pull request #242076 from Kranzes/nixtmpfilesd
...
nixos/nix-daemon: use tmpfiles from nixPackage when possible
2023-07-07 23:53:27 +03:00
Ilan Joselevich
160edcf2c5
nixos/twingate: add package option and test
2023-07-07 20:03:54 +03:00
Ilan Joselevich
af8206f801
nixos/nix-daemon: use tmpfiles from nixPackage when possible
2023-07-07 17:29:05 +03:00
Pol Dellaiera
764472b473
Merge pull request #233091 from yayayayaka/add-team-gitlab
...
maintainers/team-list: Add team gitlab
2023-07-07 15:19:15 +02:00
Nick Cao
b119b38cc1
Merge pull request #241134 from frederictobiasc/mautrix
...
mautrix-telegram: 0.14.0 -> 0.14.1, python3Packages.mautrix: 0.19.16 -> 0.20.0
2023-07-07 20:41:07 +08:00
K900
c0132f22e9
sddm: 0.19.0 -> 0.20.0
2023-07-07 12:46:59 +03:00
Sandro Jäckel
88d7aa56e1
nixos/nix*: remove not necessary imports
...
We do not really declare module dependencies anywhere else and it would
a nousance to move any file if many other referenced it without being
necessary. Also most higher level modules depend on most of the lower
level ones.
So removing this because it can only potentially cause weird issues.
2023-07-07 11:01:12 +02:00
Robert Hensing
54303b65ef
Merge pull request #241690 from hercules-ci/nixos-nix-modules
...
Split nixos/nix-daemon.nix
2023-07-07 10:29:58 +02:00
Robert Hensing
c83ad0598b
nixos/*nix*: Update module impl docs and link related modules
...
Something extra for the readers.
2023-07-06 20:00:10 +02:00
Robert Hensing
07de9b62cc
nixos/*nix*: Add imports as inherently necessary
...
Albeit not technically necessary because of nixos//module-list.nix
2023-07-06 19:48:22 +02:00
Kevin Boulain
680ee304ca
nixos/usbguard: rename services.usbguard.implictPolicyTarget to services.usbguard.implicitPolicyTarget
2023-07-06 15:34:40 +02:00
Kerstin
ba445ba8bc
Merge pull request #241088 from jooooscha/master
...
maintainers: add joscha
2023-07-06 15:30:28 +02:00
Gabriel Simmer
674de7c287
nixos/n8n: correct configuration, webhookUrl type
...
I realised in NixOS#240189 I made some minor errors in the service definition.
2023-07-05 23:15:52 +01:00
Sandro
5e3022fb17
Merge pull request #240320 from wegank/cdesktopenv-bump
...
cdesktopenv: 2.3.2 -> 2.5.1
2023-07-05 23:41:36 +02:00
Lassulus
f751061a08
Merge pull request #237477 from accelbread/usbguard-dbus-support
...
nixos/usbguard: add USBGuard dbus daemon option
2023-07-05 23:13:10 +02:00
Alexander Sieg
8d80108d6d
nixos/gitlab: configure elasticsearch indexer path
2023-07-05 15:01:31 +02:00
Robert Hensing
0f71c406cf
nixos/nix-daemon: Move to services/system
...
It is now only about the system service.
Granted, it also installs the client package, but that could be
factored out later, with actual test to support such a new type of
configuration.
2023-07-05 14:59:01 +02:00
Robert Hensing
fad172a366
nixos/config/nix-channel: Move NIX_PATH logic
2023-07-05 14:54:29 +02:00
Robert Hensing
5c0c96a828
nixos/config/nix-channel: Factor out root channel initialization
2023-07-05 14:54:29 +02:00
Robert Hensing
1c772cd857
nixos/config/flakes: Factor out
2023-07-05 14:54:28 +02:00
Robert Hensing
d6a68f0542
nixos/config/nix-remote-build: Factor out
2023-07-05 14:54:27 +02:00
Robert Hensing
4bbd44908c
nixos/config/nix: Move extraOptions
2023-07-05 14:54:27 +02:00
Robert Hensing
19e33831c6
nixos/config/nix: Move nix.check*
2023-07-05 14:54:26 +02:00
Robert Hensing
d73da5b868
nixos/config/nix: Move nix.settings
2023-07-05 14:54:26 +02:00
Yaya
71be5933cd
nixos/snipe-it: Use the pinned PHP package
...
As 3bb3859
bumped the default PHP version to 8.2, the snipe-it package
has been pinned to PHP 8.1. This commit changes the php package used in
the module to the one pinned by snipe-it.
2023-07-05 14:47:05 +02:00
Maximilian Bosch
b82c8e13c7
Merge pull request #228508 from SuperSandro2000/gitea-no-recurse
...
nixos/gitea: don't recursively change file owners/permissions
2023-07-05 13:56:46 +02:00
Lassulus
7e37c051c1
Merge pull request #241526 from Mic92/cloud-init
2023-07-05 13:31:27 +02:00
Robert Hensing
6649d1e369
nixos/config/nix: Move nixConf
2023-07-05 13:03:32 +02:00
Robert Hensing
2fa416732c
nixos/config/nix: Move legacyConfMappings
2023-07-05 12:52:56 +02:00
Maximilian Bosch
7f0bc68c32
Merge pull request #237544 from hrdinka/fix_gitea
...
Revert "nixos/gitea: requires database"
2023-07-05 12:09:55 +02:00
Emily
3a79936b45
Merge pull request #217536 from sephii/caddy-reload
...
nixos/caddy: add support for reload
2023-07-04 22:57:24 +02:00
r-vdp
9ef5b7d793
nixos/x11: change the description of the display manager service
...
Currently systemd prints `Starting X11 Server` in the journal, which completely
misled me into searching why my wayland system was starting an X server.
Turns out that what is started is actually the display manager,
so I think it's better to call it like that in the description.
2023-07-04 21:08:13 +02:00
Jörg Thalheim
6f404ed214
cloud-init: add xfs support
2023-07-04 19:27:18 +02:00
Alexander Sieg
8934558abf
nixos/gitlab: fix unit test result display ( #241322 )
...
After the update to GitLab 16 the puma worker needs `gzip` in it's PATH
in order to junit test results.
2023-07-04 18:57:19 +02:00
Atemu
712caf8eb1
Merge pull request #224366 from martinetd/ankisyncd-rs
...
ankisyncd-rs: add package for anki-sync-server-rs
2023-07-04 18:03:19 +02:00
Sandro Jäckel
d35df28f65
ddclient: remove package and module on upstream maintainer request
2023-07-04 16:46:53 +02:00
Herwig Hochleitner
5205c73d93
nixos/gitea: add WORK_PATH to config
...
this is in preparation for 1.20, which needs this option set
2023-07-04 16:05:56 +02:00
Sylvain Fankhauser
27b7132e81
nixos/caddy: remove admin check
...
Since it introduces IFD.
2023-07-04 11:25:08 +02:00
Sylvain Fankhauser
1f0ac736b4
nixos/caddy: add support for reload
2023-07-04 11:25:05 +02:00
Pol Dellaiera
3ede00e4fa
Merge pull request #240571 from gaelreyrol/scaphandre-module-assertions
...
nixos/prometheus/exporters: adjust scaphandre assertions
2023-07-04 11:24:24 +02:00
Dominique Martinet
fbe3e3b44e
replace ankisyncd with ankisyncd-rs
...
- remove old ankisyncd python package
- rename new rust package so it's a drop in replacement
2023-07-04 18:14:18 +09:00
Dominique Martinet
668f528b6c
nixos/ankisyncd: use ankisyncd-rs instead of the old python one
...
Unfortunately the config is not compatible; data itself looks like it was compatible
from an up to date python ankisyncd but I wouldn't assume anything with the older
service (which didn't work for me with either ankidroid or recent desktop version)
2023-07-04 18:14:17 +09:00
Janik
8419b512e6
Merge pull request #240189 from gmemstr/patch-1
...
n8n: add WEBHOOK_URL environment variable
2023-07-04 08:56:36 +02:00
Pascal Bach
fc478ad9ff
nixos/minio: allow distributed nodes
2023-07-03 21:51:02 +02:00
Will Fancher
73a8ca1674
Merge pull request #240601 from lilyinstarlight/fix/lvm-root-sd-stage-1-unhide
...
nixos/*: unhide remaining systemd stage-1 options
2023-07-03 13:38:12 -04:00
Christoph Hrdinka
70cc0d412f
nixos/gitea: only require databases if createDatabase is set
...
Currently the database service (mysql/postgresql) is required by the
gitea service. If none of them exists on the same machine as gitea it
will refuse to start. With this change it is only required if
createDatabase was set to true.
2023-07-03 17:02:12 +02:00
Lily Foster
e9207b0501
nixos/*: unhide remaining systemd stage-1 options
...
These options were missed in NixOS/nixpkgs#226237 , but they all were
specifically added for systemd stage-1.
2023-07-03 08:41:38 -04:00
Janik
565fc74d28
Merge pull request #240954 from michaelshmitty/anuko-time-tracker-fixup
2023-07-03 12:29:43 +02:00
Bobby Rong
dd9fcc40b7
Merge pull request #241131 from ShamrockLee/nix-daemon-gramman
...
nixos/nix-daemon: fix grammatical mistake in description
2023-07-03 16:41:51 +08:00
Michael Smith
65585d6c53
nixos/anuko-time-tracker: improve module options
...
* Remove unsafe dbinstall.php script
* Make Nginx virtualhost configurable
2023-07-03 08:39:17 +02:00
Eric Wolf
ee5cc38432
lemmy: Support secret options
...
This commit implements #101777 by merging
the config with an external file at startup.
2023-07-03 09:12:40 +08:00
Nguyễn Gia Phong
170125ebdb
nixos/ntfy.sh: require base-url setting
...
It is required by attachment-cache-dir whose default is provided.
2023-07-03 08:58:05 +08:00
Ryan Lahfa
9f2cff4e0a
Merge pull request #240913 from gabriel-doriath-dohler/MCHPRS
2023-07-03 01:14:24 +02:00
gabriel-doriath-dohler
04c830db01
nixos/mchprs: init module
...
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
2023-07-02 23:59:59 +00:00
Emily
d8c2229c49
Merge pull request #226684 from srid/patch-8
...
nixos/jenkins-job-builder: Fix link to documentation, use mkEnableOption
2023-07-02 19:49:17 +02:00
Sridhar Ratnakumar
ac4790a84e
nixos/jenkins-job-builder: Fix link to documentation, use mkEnableOption
...
Co-Authored-By: emilylange <git@emilylange.de>
2023-07-02 19:07:44 +02:00
Felix Bühler
e770737241
Update nixos/modules/services/networking/libreswan.nix
...
Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>
2023-07-02 19:03:19 +02:00
Felix Bühler
7cc9ced775
Update nixos/modules/services/misc/cgminer.nix
...
Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>
2023-07-02 19:03:11 +02:00
Frédéric Tobias Christ
bb55edd515
mautrix-telegram: 0.14.0 -> 0.14.1
...
Add new configuration option regarding IPv6 support to the example.
Diff: https://github.com/mautrix/telegram/compare/refs/tags/v0.14.0...v0.14.1
Changelog: https://github.com/mautrix/telegram/releases/tag/v0.14.1
2023-07-02 17:44:51 +02:00
Yueh-Shun Li
a899971599
nixos/nix-daemon: fix grammatical mistake in description
2023-07-02 23:27:09 +08:00
Raito Bezarius
d7e721f614
plausible: fix admin user password seed and SMTP passwords
...
LoadCredential was misused as it is not building any environment variable,
it is the responsibility of our preStart to do it so
Plausible's script can pick it up.
2023-07-02 17:03:53 +02:00
Ryan Lahfa
7672c1e9ae
Merge pull request #201907 from Tom-Hubrecht/fail2ban
2023-07-02 13:57:47 +02:00
oddlama
1fa9f03eec
nixos/hostapd: rewrite to support multi-AP, password from file, and more
...
At this point this is basically a full rewrite of this module, which
is a breaking change and was necessary to properly expose the useful
parts of hostapd's config. The notable changes are:
- `hostapd` is now started with additional systemd sandbox/hardening options
- A single-daemon can now manage multiple distinct radios and BSSs, which is
why all configuration had to be moved into `hostapd.radios`
- By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are
supported, too
- Added passwordFile-like options for wpa and sae
- Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration
- Implements RFC42 as far as reasonable for hostapd
- Removes `with lib;`
2023-07-02 13:32:41 +02:00
Joscha Loos
1130d57afb
gollum: add maintainer
2023-07-02 13:23:05 +02:00
Mac Chaffee
61cb4170fd
nixos/static-web-server: create module which uses upstream systemd units
...
This commit creates a nixos module for static-web-server.
The module uses upstream systemd units to start static-web-server.
It also includes options for configuring static-web-server.
2023-07-01 12:51:13 -04:00
Niklas Hambüchen
080757c6c5
nixos/vaultwarden: Bind to localhost by default. See #100192
2023-07-01 15:35:28 +02:00
TQ Hirsch
dd481f2ee3
pdns: Changed paths in /etc to use pdns instead of powerdns
2023-07-01 18:55:51 +08:00
TQ Hirsch
d25e5e2107
nixos/powerdns, nixos/pdns-recurser: Symlink configuration into /etc
...
This places a symlink to the running configuration where the admin
tools expect it, allowing users to control the powerdns server or
recursor without manually specifying a config file.
2023-07-01 18:55:50 +08:00
Will Fancher
ccaea077e2
Merge pull request #240792 from accelbread/plymoutherror
...
nixos/gdm: fix plymouth-quit bootup error message
2023-07-01 02:38:08 -04:00
Tom Hubrecht
208ee8b2e2
nixos/fail2ban: use attrsets for settings instead of strings
2023-06-30 22:27:40 +02:00
Michele Guerini Rocco
aedc167ecf
Merge pull request #240325 from 999eagle/update/searxng
...
nixos/searx: add configuration for redis and limiter settings
2023-06-30 22:22:43 +02:00
Archit Gupta
36ca205e44
nixos/gdm: fix plymouth-quit bootup error message
...
If plymouth is not enabled, there is no plymouth-quit service created
otherwise, so setting systemd.services.plymouth-quit.wantedBy creates an
empty service which logs an error during bootup. The plymouth fix should
only be applied if plymouth is actually available to prevent a needless
systemd service error on systems with gdm but no plymouth (such as a
default gnome setup).
2023-06-30 13:15:53 -07:00
pennae
05b84a2b83
Merge pull request #240754 from SuperSandro2000/ssh-fix-manpage
...
nixos/{sshd,thelounge,ttyd,proxmox-image}: fix example rendering
2023-06-30 20:24:43 +02:00
Domen Kožar
22deb49735
Merge pull request #240744 from NixOS/pcdcd-plugins-default
...
nixos: append ccid as a plugin
2023-06-30 17:30:56 +01:00
Sandro Jäckel
0000004f80
nixos/ttyd: fix example rendering
2023-06-30 18:14:37 +02:00
Sandro Jäckel
000004d123
nixos/thelounge: fix example rendering
2023-06-30 18:14:24 +02:00
Sandro Jäckel
9999996fd6
nixos/sshd: fix example rendering
2023-06-30 18:14:16 +02:00
Domen Kožar
8079c9ac60
nixos: append ccid as a plugin
2023-06-30 16:21:57 +01:00
Gaël Reyrol
f856229c9a
nixos/prometheus/exporters: adjust scaphandre assertions
2023-06-30 15:10:38 +02:00
Maximilian Bosch
c1ea4ec7a9
Merge pull request #208605 from Izorkin/update-gitea
...
nixos/gitea: update configuration
2023-06-30 11:44:04 +02:00
Sophie Tauchert
0aa5adef62
nixos/searx: add configuration for redis and limiter settings
2023-06-30 07:38:59 +02:00
Bobby Rong
c84b823065
Merge pull request #240261 from bobby285271/upd/pantheon
...
Pantheon updates 2023-06-28
2023-06-29 23:31:46 +08:00
lassulus
345745b6da
nixos/syncthing: fix syncthing-init running by default
...
also remove empty values from the config
2023-06-29 17:57:11 +03:00
lassulus
c42a7b668c
Revert "Merge pull request #233377 from ncfavier/revert-226088"
...
This reverts commit 7b28ea6783
, reversing
changes made to 3009b12817
.
2023-06-29 17:56:30 +03:00
Weijia Wang
a5b7078a2d
cdesktopenv: 2.3.2 -> 2.5.1
2023-06-29 17:18:45 +03:00
Bobby Rong
82970f8b1e
nixos/pantheon: Stop shipping gnome-bluetooth-contract by default
...
The functionality is now covered by wingpanel-indicator-bluetooth 7.0.0.
2023-06-29 20:13:07 +08:00
Kevin Cox
65365bbb83
Merge pull request #240417 from kevincox/minetest-conf
...
nixos.minetest-server: Add option for generating config file and ability to add extra command line flags
2023-06-29 07:36:04 -04:00
Kevin Cox
6cb0b6a4d6
nixos.minetest-server: Add option for generating config file and ability to add extra command line flags
...
This adds two main features:
1. `services.minetest-server.config` is an options object that is automatically serialized into a minetest config file.
2. `services.minetest-server.extraArgs` provides an escape hatch to pass extra arguments.
2023-06-28 17:31:46 -04:00
Izorkin
a0311e5107
nixos/gitea: update sandboxing options
2023-06-28 23:28:56 +03:00
Gaël Reyrol
1a821e7bf5
nixos/prometheus-exporters: add php-fpm
2023-06-28 22:11:36 +02:00
Benjamin Staffin
211d94d70b
nixos/paperless: Enable UMask now that it works ( #240010 )
...
According to
https://github.com/NixOS/nixpkgs/issues/147599#issuecomment-1272286679
the bug that prevented this UMask directive from working has been fixed
in systemd, so it should be safe to use now.
This stops paperless-ngx from making everything world-readable on disk,
but it does not change permissions of any files previously created.
2023-06-28 10:48:25 -04:00
Sandro
0a5cb5c47e
nixos/grafana: disable updater by default ( #240323 )
2023-06-28 14:09:55 +02:00
Gaël Reyrol
3a4e234b07
services/calibre-server: Add new http & auth options ( #216497 )
...
nixos/doc: add calibre-server new options
2023-06-28 14:06:47 +02:00
Pol Dellaiera
e1b3f7b159
Merge pull request #239803 from gaelreyrol/prometheus-scaphandre-exporter-init
...
services/prometheus/exporters: add scaphandre
2023-06-28 09:46:08 +02:00
Leona Maroni
dd05e2a899
nixos/paperless: add leona as maintainer
2023-06-28 08:42:23 +08:00
Gabriel Simmer
3d33c5c7df
n8n: add WEBHOOK_URL environment variable
...
The WEBHOOK_URL options is only able to be set through environment variables. Was considering adding a more generic "environment" parameter but wasn't sure the best way to approach this.
2023-06-27 21:16:33 +01:00
Gaël Reyrol
e11f06a951
services/prometheus/exporters: add scaphandre
2023-06-27 20:50:58 +02:00
Sandro
135fef712e
Merge pull request #232920 from SuperSandro2000/nix-optimise
...
nixos/nix-optimise: persist timer
2023-06-27 18:14:08 +02:00
Kerstin
bc152fd1c1
Merge pull request #203621 from jooooscha/master
...
nixos/gollum: add options for user and group of gollum process
2023-06-27 15:49:45 +02:00
Nick Cao
694de8e63e
Merge pull request #240072 from NickCao/singbox-harden
...
nixos/sing-box: set umask 0077 when generating configuration file
2023-06-27 20:34:18 +08:00
Janik
946c3f8c51
Merge pull request #214063 from michaelshmitty/anuko-timetracker
2023-06-27 13:19:44 +02:00
Michael Smith
7532dbaa32
nixos/anuko-time-tracker: init
2023-06-27 12:30:33 +02:00
NotAShelf
b5fcbad5fb
nixos/lemmy: handle database creation better
2023-06-27 17:46:19 +08:00
Yaya
7d432c1ff9
nixos/gitlab: Add an additional folder to systemd-tmpfiles
2023-06-27 11:39:17 +02:00
Michele Guerini Rocco
3bb07bdf2d
Merge pull request #236322 from rnhmjoj/pr-udev-quiet
...
nixos/udev: silence harmless warnings
2023-06-27 10:28:41 +02:00
Nick Cao
e52b401a95
nixos/sing-box: set umask 0077 when generating configuration file
2023-06-27 16:08:55 +08:00
Janik
23a11416b9
Merge pull request #238307 from pacien/pixelfed-update
2023-06-27 09:55:06 +02:00
Nick Cao
d2483a8cc7
nixos/sing-box: init
2023-06-27 13:58:02 +08:00
Robin Gloster
61f41ba937
Merge pull request #234245 from nbraud/below
...
nixos/below: Add service module
2023-06-26 21:23:36 +02:00
Ryan Lahfa
269144b67b
Merge pull request #239937 from Tom-Hubrecht/pixelfed
2023-06-26 18:00:26 +02:00
Tom Hubrecht
9075cd9e11
nixos/pixelfed: Fix missing php modules for pixelfed-horizon
2023-06-26 15:53:20 +02:00
Luke Granger-Brown
cba7cd9b6d
Merge pull request #233282 from pkern/spamassassin
...
spamassassin: 3.4.6 → 4.0.0
2023-06-25 23:55:34 +01:00
Luke Granger-Brown
58b48cd720
nixos/spamassassin: add DMARC module to default config
2023-06-25 17:35:16 +00:00
Marco Rebhan
af614b53d1
nixos/avahi: Add package option
...
Allows replacing the avahi package (e.g. for debugging) without having
to use an overlay, avoiding unnecessary package rebuilds.
2023-06-25 11:01:58 -03:00
Felix Buehler
6672dde558
treewide: use optionalAttrs instead of 'else {}'
2023-06-25 11:01:34 -03:00
pennae
32deda9ec0
Merge pull request #238222 from mads256h/harden-davmail
...
davmail: enable sandboxing options
2023-06-25 14:57:19 +02:00
Felix Buehler
933a41a73f
treewide: use optional instead of 'then []'
2023-06-25 09:11:40 -03:00
Philipp Kern
0ce6a09235
spamassassin: 3.4.6 → 4.0.0
...
The HashCash module has been removed, so this change also drops it from
the default config for spamassassin.
2023-06-25 09:38:10 +00:00
happysalada
8db05aa52f
nixos/rustus: inital module
2023-06-25 04:26:53 +08:00
Felix Buehler
f3719756b5
treewide: use optionalString instead of 'then ""'
2023-06-24 20:19:19 +02:00
Nick Cao
cca08f710c
Merge pull request #237507 from Alexis211/document-wgautomesh-gossip-secret
...
wgautomesh: clearer documentation for `gossip_secret_file`
2023-06-24 22:48:34 +08:00
Franz Pletz
48d0d69869
Merge pull request #239348 from Ma27/bump-grafana
2023-06-23 23:15:43 +02:00
Naïm Favier
b7098c1239
Merge pull request #239427 from ncfavier/syncthing-escaping
...
nixos/syncthing: fix escaping
2023-06-23 20:29:42 +02:00
Naïm Favier
9a9ded1675
nixos/syncthing: fix escaping
2023-06-23 20:19:51 +02:00
pennae
50a780ce5c
Merge pull request #237824 from drupol/add-guacamole-server-and-client
...
{guacamole-server,guacamole-client}: init at 1.5.2
2023-06-23 15:41:50 +02:00
Maximilian Bosch
6e6c2e6530
nixos/grafana: clarify that there's still a bit of time until notifiers are removed
...
See https://github.com/grafana/grafana/pull/66269
2023-06-23 13:45:56 +02:00
Nick Cao
e844ee1d27
Merge pull request #239208 from jelle-bigbridge/patch-1
...
nixos/vault: set coredump ulimit to 0
2023-06-23 09:57:19 +08:00
Sandro
996d7cabba
Merge pull request #225877 from jappeace/upgrade-keter-2.1
...
nixos/keter: 2.0 -> 2.1
2023-06-22 20:00:22 +02:00
Jelle Besseling
53a3ddfab8
vault: set coredump ulimit to 0
2023-06-22 16:44:30 +02:00
Elis Hirwing
da7b79c90e
Merge pull request #239049 from LeSuisse/php80-removal
...
php: drop PHP 8.0
2023-06-22 08:43:39 +02:00
K900
66cb54c7fc
nixos/supergfxd: add pciutils to path
...
Used for some weird code paths. Fixes #239059 .
2023-06-22 08:27:44 +03:00
Pol Dellaiera
6cc1b175d3
nixos/guacamole-server: init
2023-06-21 22:11:44 +02:00
Thomas Gerbet
84c0cb1471
php: drop PHP 8.0
...
Closes #224505
2023-06-21 22:09:16 +02:00
Pol Dellaiera
a950888024
nixos/guacamole-client: init
2023-06-21 20:47:31 +02:00