31004 Commits

Author	SHA1	Message	Date
Bjørn Forsman	6ecc647b4e	nixos/ups: set env vars in the global environment ... This allows using upsdrvctl interactively, which otherwise tries to use a missing ups.conf in the Nix store, instead of the correct /etc/nut/ups.conf. (cherry picked from commit 1cb392fdcd)	2024-09-14 08:59:39 +02:00
Bjørn Forsman	7ea9a39b4d	nixos/ups: deduplicate environment variables ... No functional change, but more DRY. (cherry picked from commit 801388a6fa)	2024-09-14 08:59:39 +02:00
Peder Bergebakken Sundt	cd51764d0a	[Backport release-24.05] Syncthing: implemented folder type (#340775)	2024-09-13 02:51:44 +02:00
Maximilian Bosch	f3762903d6	nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline ... Since `connectionStringFile` reads the file and puts it into the invocation of the exporter, it's part of the cmdline and thus effectively world-readable. Added a new `connectionEnvFile` which is supposed to be an environment file of the form PGBOUNCER_EXPORTER_CONNECTION_STRING=... that will be added to the systemd service. The exporter will read the connection string from that value. (cherry picked from commit 862ecd674f)	2024-09-09 22:54:13 +02:00
Maximilian Bosch	1a6587231b	nixos/prometheus-exporters: fix assertions declared in exporter modules ... And it turns out, the test was using a removed option all along 🙃 (cherry picked from commit 4980a7d938)	2024-09-09 22:34:44 +02:00
K900	0a00d66fe6	nixos-install: fail if we can't set up bootloader ... (cherry picked from commit fa39e3d642)	2024-09-09 13:22:53 +00:00
Cat	f41a13fc1b	nixos/syncthing: implement folder type (#308832) ... * Syncthing: implemented folder type * Syncthing: fix syntax (via @johnhamelink ) This commit should be rebased/squashed into the previous one if ofborg cleares it! Co-authored-by: John Hamelink <me@johnhame.link> --------- Co-authored-by: John Hamelink <me@johnhame.link> (cherry picked from commit ed1b6699c0)	2024-09-09 13:08:01 +00:00
Peder Bergebakken Sundt	bdb9b5d94a	[Backport release-24.05] docs: fix Nvidia casing to be consistent across different places (#336574)	2024-09-08 00:12:00 +02:00
Florian Agbuya	c2a2bf70c1	flarum: disable automatic DB creation ... (cherry picked from commit 1032b5fa95)	2024-09-07 15:43:50 +00:00
Florian Agbuya	0e59203469	flarum: fix flarum directory permissions ... (cherry picked from commit 249dacfaa8)	2024-09-07 15:43:50 +00:00
Justinas Stankevicius	db4e63a4e2	nixos/prowlarr: set HOME for the service ... (cherry picked from commit 6e14231e83)	2024-09-03 10:08:36 +00:00
Artturin	891f087836	[Backport release-24.05] nixos/telegraf: make sure ping executable is available when trying to ping (#338740)	2024-09-01 21:29:28 +03:00
Sandro	baca75692d	[Backport release-24.05] nixos/tsm-client: Fix multi-value dsm.sys options (#328031)	2024-09-01 18:11:53 +02:00
Shea Levy	fbbd9323de	[Backport release-24.05] nixos/ipu6: Don't build out-of-tree driver for kernels that have it (#332240)	2024-09-01 06:33:05 -04:00
Echo Nolan	43e77c3a5f	nixos/telegraf: make sure ping executable is available when trying to ping ... We need ping to be in PATH of the service otherwise it can't ping. This commit adds it, conditional on one of the inputs being a ping task. (cherry picked from commit 934a337a13)	2024-09-01 04:25:31 +00:00
Will Fancher	d829513235	nixos/iso-image: Compress squashfs with zstd 19 ... (cherry picked from commit 49192ef7a3)	2024-08-31 18:39:20 +00:00
Emily	e2b77fb94c	[24.05] backport fcgiwrap instances fix for local privilege escalation issue (#331465)	2024-08-31 16:38:03 +01:00
euxane	8931f18bfa	nixos/fcgiwrap: add security advisory links to messages	2024-08-31 17:15:42 +02:00
Leona Maroni	cad30495d5	[Backport release-24.05] nixos/varnish: change default stateDir to /run (#337679)	2024-08-28 10:45:53 +02:00
Emery Hemingway	665a1853b5	nixos/eris-server: update comment ... (cherry picked from commit f5b732e9bf)	2024-08-27 19:08:30 +00:00
Will Fancher	4797a40769	[Backport release-24.05] nixos/systemd/initrd: Fix emergencyAccess to work with null. (#336418)	2024-08-27 12:12:12 -04:00
Cosima Neidahl	b316d12227	[Backport release-24.05] lomiri.lomiri-gallery-app: init at 3.0.2 (#336579)	2024-08-27 16:20:44 +02:00
laalsaas	691e09524a	nixos/varnish: change default stateDir to /run ... The stateDir, or as varnish calls it, the workdir should always be a tmpfs. Otherwise, performance issues may occur. See: - https://varnish-cache.org/docs/trunk/reference/varnishd.html#opt-n - https://github.com/varnishcache/varnish-cache/issues/4121 (cherry picked from commit 9e5316a1c5)	2024-08-27 10:22:15 +00:00
rnhmjoj	749b4b36d4	nixos/firewall: fix reverse path check failures with IPsec ... The endpoint of an IPsec tunnel receives encrypted IPsec packets that are first decrypted and then forwarded to the intended destination. The decrypted traffic appears to originate from the same interface it came in from, so in most cases these packets will fail the reverse path check even if legitimate. This change adds an exception to not reject packets that were previously IPsec-encrypted, meaning the have been accepted, decrypted and are in the process of being forwarded to their final destinal. Sources: - https://www.kernel.org/doc/Documentation/networking/xfrm_device.txt - https://git.netfilter.org/nftables/commit/?id=49f6e9a846c6c8325b95debe04d5ebc3c01246fb - https://git.netfilter.org/nftables/commit/?id=8f55ed41d007061bd8aae94fee2bda172c0e8996 - https://thermalcircle.de/doku.php?id=blog:linux:nftables_demystifying_ipsec_expressions (cherry picked from commit 3c12ef3f21)	2024-08-25 13:07:35 +00:00
Bjørn Forsman	53d5d2be6d	nixos/ups: restart upsdrv.service on config changes ... Or else new configuration won't take effect until the next boot (or if the user manually restarts the service). (cherry picked from commit dc7379e04f)	2024-08-23 17:27:36 +02:00
OPNA2608	669d0c9dea	nixos/lomiri: Add gallery app ... (cherry picked from commit 8c1cb41408)	2024-08-22 18:59:56 +02:00
Rafael Fernández López	939643bb33	docs: fix Nvidia casing to be consistent across different places ... (cherry picked from commit 7749696f61)	2024-08-22 16:52:05 +00:00
Eduard Bachmakov	987f6a5bf2	nixos/systemd/initrd: Fix emergencyAccess to work with null. ... Implementation is now compatible with the option's .type already defined. This allows us to pass `config.users.users.<user>.hashedPassword` even if this is null (the default). Before: true => access false => no access hash => access via password null => eval error After: true => access false => no access hash => access via password null => no access (cherry picked from commit b33bf6b99a)	2024-08-21 22:42:12 +00:00
Masum Reza	b538a69ce8	Merge pull request #327380 from NixOS/backport-321010-to-release-24.05 ... [Backport release-24.05] virtualboxKvm: 20240515 -> 20240617	2024-08-21 15:07:44 +05:30
John Titor	acf94f31f7	nixos/hyprland: set systemd environment PATH for versions < 0.41.2 ... Importing PATH into the systemd environment is done by default in Hyprland v0.41.2+ (https://github.com/hyprwm/Hyprland/pull/6640) We soft deprecate this option here for versions >= 0.41.2. (cherry picked from commit ff0738b736)	2024-08-19 10:32:27 +05:30
Reputable2722	86dc9c933c	nixos/hyprland: set path order for systemd user services ... Set PATH order correctly for systemd user services (see NixOS/nixpkgs#320734 Signed-off-by: Reputable2722 <153411261+Reputable2772@users.noreply.github.com> (cherry picked from commit dc423d5c69)	2024-08-19 10:32:26 +05:30
Leon	e8106db723	nixos/hyprland: use lib.mkDefault for enableWlrPortal ... (cherry picked from commit 5b216845b6)	2024-08-19 10:32:26 +05:30
Leon	326d906fc4	nixos/hyprland: enable xdg.portal by default ... (cherry picked from commit 9585e5d3aa)	2024-08-19 10:32:25 +05:30
John Titor	898641392c	nixos/wayland-session: cleanup ... xwayland, wlr-portal -> enable-xwayland, enable-wlr-portal (cherry picked from commit de77718887)	2024-08-19 10:32:25 +05:30
John Titor	ad1684cd48	nixos/wayland-session: force running xdg autostart for WM-only sessions ... (cherry picked from commit 7b2a2824b3)	2024-08-19 10:32:25 +05:30
John Titor	00622e9fcf	nixos/hyprland: add fufexan as maintainer ... Per https://github.com/NixOS/nixpkgs/pull/315827#issuecomment-2139073465 (cherry picked from commit 98f9f9951a)	2024-08-19 10:32:24 +05:30
John Titor	8d03ed3202	nixos/hyprland: disable wlr-portal for Hyprland ... This commit: - Adds wlr-portal override of wayland-session module (enabled by default) - Disable it for hyprland module (cherry picked from commit 0b0b7cefcc)	2024-08-19 10:32:24 +05:30
Thomas Gerbet	4840d50624	openstack-config: remove hardcoded default password for the root account ... (cherry picked from commit 66c0275843)	2024-08-16 18:30:38 +00:00
Cosima Neidahl	3aa0401868	Merge pull request #331273 from NixOS/backport-325639-to-release-24.05 ... [Backport release-24.05] lomiri.lomiri-camera-app: init at 4.0.6	2024-08-14 16:08:23 +02:00
Julien Malka	8be510a4ca	Merge pull request #332702 from sarunint/backport-253260-to-release-24.05 ... [24.05] nixos/systemd-boot: Add reboot-for-bitlocker support	2024-08-10 10:02:50 +02:00
Bjørn Forsman	c8ab0eb08b	nixos/mosquitto: fix "listeners" option default ... The option type is listOf, so the default should be an empty list, not empty attrset. (cherry picked from commit 4265f4354c)	2024-08-09 17:00:38 +02:00
Pol Dellaiera	7b1e9b0807	Merge pull request #332915 from shivaraj-bh/backport-open-webui-latest-to-release-24.05 ... [Backport release-24.05] Update open-webui to 0.3.12	2024-08-08 22:58:02 +02:00
Sandro Jäckel	2c05999807	nixos/redis: remove outdated info in enable option ... Thanks for the heads up @poperigby ! (cherry picked from commit 3e8666bce9)	2024-08-08 18:57:17 +02:00
Robert Hensing	9dd5768c0d	Merge pull request #330623 from NixOS/backport-323613-to-release-24.05 ... [Backport release-24.05] nix-channel: do not set empty nix-path when disabling channels	2024-08-08 18:39:30 +02:00
euxane	fee11ef959	nixos/fcgiwrap: fail eval with security assertion ... This adds a security assertion when using the global instance of fcgiwrap, which is vulnerable to a local privilege escalation. This is in addition to the current evaluation warning, and is more in line with being loud with security issues, similarly to with vulnerable packages. The evaluation failure can nevertheless be bypassed by setting: `services.fcgiwrap.allowGlobalInstanceLocalPrivilegeEscalation = true`.	2024-08-08 02:28:32 +02:00
github-actions[bot]	0935f33279	nixos/tailscale: add extraSetFlags to configure daemon (#333049) ... (cherry picked from commit 81a58be20b) Co-authored-by: Kyungrok Chung <acadx0@gmail.com>	2024-08-07 14:46:41 -04:00
Pol Dellaiera	92cc08eb18	nixos/open-webui: add more default variables ... (cherry picked from commit 028584b548)	2024-08-07 11:57:53 +05:30
Pol Dellaiera	35c839e9b5	nixos/open-webui: update options default values ... (cherry picked from commit 309451127f)	2024-08-07 11:57:53 +05:30
Pol Dellaiera	d350ef8f50	nixos/open-webui: add example in options ... (cherry picked from commit 5664bb7899)	2024-08-07 11:57:52 +05:30
Pol Dellaiera	4583abdd87	nixos/open-webui: remove preStart step ... nixos/open-webui: remove `preStart` step (cherry picked from commit a8670536e5)	2024-08-07 11:57:52 +05:30