Soispha
90e5e88c74
nixos/libreddit: Don't hard code binary name in ExecStart
...
Hard coding the name to `libreddit` makes it impossible to use
this module to run `redlib` (a continued fork of `libreddit`).
As `libreddit` has the `mainProgram` meta attribute set, changing
this to `lib.getExe` should not change the module for `libreddit`,
but allows it to work with the `redlib` package.
2024-03-31 22:57:50 +02:00
Moraxyc
c1a41863db
nixos/nezha-agent: init module
2024-04-01 03:38:51 +08:00
David Knaack
2bde9aa8f8
nixos/kavita: document new tokenKeyFile requirements
2024-03-31 16:11:40 +02:00
Yt
a87b7b96b1
Merge pull request #297014 from onny/davfs2
...
nixos/davfs2: Convert extraConfig to freeform type (RFC42)
2024-03-31 14:01:24 +00:00
Jonas Heinrich
8616aca59a
nixos/davfs2: Convert extraConfig to freeform type
2024-03-31 15:27:21 +02:00
Lin Yinfeng
484c1c1ff8
nixos/hledger-web: fix access control options
2024-03-31 12:50:08 +08:00
Weijia Wang
93a725e1a5
Merge pull request #296361 from bhankas/workout-tracker
...
workout-tracker: init at 0.10.5
2024-03-31 04:50:58 +02:00
K900
ff964811c9
Merge pull request #300234 from SuperSandro2000/partition-plasma6
...
nixos/partition-manager: use qt6 when plasma6 is activated p
2024-03-30 17:27:49 +03:00
Sandro Jäckel
94805a3d21
nixos/partition-manager: use qt6 when plasma6 is activated
...
This also fixes System Settings > Windows Shares complaining about the
wrong QT version under Plasma6.
2024-03-30 14:31:45 +01:00
Maximilian Bosch
5142b7afa8
nixos/postgresql: turn settings into a submodule
...
The main idea behind that was to be able to do more sophisticated
merging for stuff that goes into `postgresql.conf`:
`shared_preload_libraries` is a comma-separated list in a `types.str`
and thus not mergeable. With this change, the option accepts both a
comma-separated string xor a list of strings.
This can be implemented rather quick using `coercedTo` +
freeform modules. The interface still behaves equally, but it allows to
merge declarations for this option together.
One side-effect was that I had to change the `attrsOf (oneOf ...)` part into
a submodule to allow declaring options for certain things. While at it,
I decided to move `log_line_prefix` and `port` into this structure as
well.
2024-03-30 14:23:05 +01:00
Yaya
774056a4e6
nixos/gitlab: Rename workhorse binary
2024-03-30 12:47:30 +01:00
Felix Singer
ddd15dc2d9
nixos/redmine: Allow using SQLite as database backend
...
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-03-30 08:23:20 +01:00
Felix Singer
0b11c8f47c
nixos/redmine: Use attribute set for storing database settings
...
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-03-30 08:21:18 +01:00
Felix Singer
8391b2c6ab
nixos/redmine: Adjust database password conditionally
...
The commands for writing the database password string into the final
configuration file are ran in any case, even if it's not needed. Make
that conditional on if a password file is set.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-03-30 08:21:17 +01:00
lassulus
3cd1103ccd
Merge pull request #299866 from s1ls/invidious-router-module
...
nixos/invidious-router: init module
2024-03-29 22:42:52 +01:00
lassulus
387ef8710b
Merge pull request #277387 from traxys/jitsi_pam
...
nixos/jitsi-meet: allow to customize jitsi auth
2024-03-29 22:29:12 +01:00
Maciej Krüger
c6bad4895a
Merge pull request #296729 from mkg20001/docuum
...
docuum: init at 0.23.1
2024-03-29 19:16:18 +01:00
Silas Schöffel
19b2b8046d
nixos/invidious-router: init module
2024-03-29 19:00:43 +01:00
Bobby Rong
e96d5c13d0
Merge pull request #140429 from bobby285271/pantheon-systemd
...
pantheon: manage user session with systemd
2024-03-29 22:55:39 +08:00
Martin Weinelt
9e29e9c255
Merge pull request #277407 from mweinelt/wyoming-satellite
...
wyoming-satellite: init at 1.2.0
2024-03-29 15:02:50 +01:00
Alessandro Labate
43521f9021
nixos/networkmanager: correct example ( #295439 )
...
The example pertinent to `fccUnlockScripts` contains wrong (maybe old) key names possibly leading to trial/error while configuring the option. This issue can be avoided updating the example.
2024-03-29 14:42:14 +01:00
r-vdp
b9fc0a8f67
nixos/mycelium: allow specifying extra args to mycelium
2024-03-29 13:38:59 +01:00
K900
3c9e0924c4
Merge pull request #299805 from ncfavier/xorg-module-order
...
nixos/xserver: respect module order
2024-03-29 12:47:38 +03:00
Martin Weinelt
b84f4bb54d
nixos/wyoming: move into home-automation category
2024-03-29 03:04:44 +01:00
Martin Weinelt
e0b4ab1a31
nixos/wyoming/satellite: init
2024-03-29 03:04:44 +01:00
Martin Weinelt
eb4113b79c
nixos/homeassistant-satellite: remove in favor of wyoming-satellite
...
The upstream repository was archived mid december 2023.
2024-03-29 03:04:43 +01:00
Naïm Favier
0e347b1a77
nixos/xserver: respect module order
...
Reimplement the `ModulePath` generation logic by only adding the
`/lib/xorg/modules` subpath for each module, in the specified order.
In particular, hardware-specific drivers are listed *before*
`xorgserver`, which fixes https://github.com/NixOS/nixpkgs/issues/299684 .
This also keeps the list reproducible, as wanted by https://github.com/NixOS/nixpkgs/pull/230186 .
I have confirmed that X is able to find `.so` files recursively within
the `ModulePath`, so that there is no need to include subdirectories of
`/lib/xorg/modules`. Furthermore, I don't expect there to be a need to
include directories *outside* of `/lib/xorg/modules`, as the default
`ModulePath` on standard distributions is `/usr/lib/xorg/modules`.
(see https://www.x.org/releases/current/doc/man/man5/xorg.conf.5.xhtml#heading4 )
2024-03-28 23:17:52 +01:00
Bernardo Meurer
813ae91f20
Merge pull request #299755 from Ramblurr/fix/roon-server-pkg
...
nixos/roon-server: add package option
2024-03-28 17:52:45 -04:00
Robert Schütz
7cdbfcbbd2
Merge pull request #278981 from dotlambda/mollysocket-init
...
mollysocket: init at 1.3.0, nixos/mollysocket: init
2024-03-28 18:51:07 +00:00
Robert Hensing
b40caf8c8a
Merge pull request #273769 from Izorkin/update-peertube
...
peertube: 5.2.1 -> 6.0.3
2024-03-28 19:40:42 +01:00
Robert Schütz
078994248a
nixos/mollysocket: init
2024-03-28 09:55:10 -07:00
anna
de9db9a27b
brscan5: fix sane config path
2024-03-28 16:02:51 +01:00
Payas Relekar
466b994af9
nixos/workout-tracker: init
2024-03-28 20:08:28 +05:30
Casey Link
6955b3743c
nixos/roon-server: add package option
...
Upstream updates roon-server frequently, and client apps (iOS, Android,
etc) will stop working with older versions of the roon-server.
We can't always keep the roon-server up to date as fast as upstream
releases, so it is often necessary for users to use an overlay or
provide their own version.
In particular the use case of running NixOS stable channel, but wanting
to use the `pkgs.roon-server` from unstable is one that I want to
support with this simple change.
2024-03-28 14:12:12 +01:00
K900
95318bd0b8
Merge pull request #290122 from FriedrichAltheide/virtualbox-guest-additions-fixes
...
virtualbox: guest additions resize & clipboard fixes
2024-03-28 11:42:22 +03:00
Janne Heß
fcc95ff817
treewide: Fix all Nix ASTs in all markdown files
...
This allows for correct highlighting and maybe future automatic
formatting. The AST was verified to work with nixfmt only.
2024-03-28 09:28:12 +01:00
Janne Heß
bc77c7a973
treewide: Mark Nix blocks in markdown as Nix
...
This should help us with highlighting and future formatting.
2024-03-28 09:28:12 +01:00
yunfachi
c79bb39f81
nixos/archisteamfarm: fix empty check for bots
2024-03-28 08:53:52 +03:00
Sandro
d6411ed8c6
Merge pull request #297346 from codingCoffee/usbguard-fix
...
usbguard: fix policy enums
2024-03-27 18:52:43 +01:00
Bjørn Forsman
db8f2488a8
nixos/pretix: say what it is in the "enable" docstring ( #299540 )
2024-03-27 18:12:38 +01:00
Sandro
f87c956ea7
Merge pull request #281236 from melvyn2/update-kavita
2024-03-27 11:17:39 +01:00
lassulus
e91a1ad1e3
Merge pull request #298737 from MatthewCroughan/mc/scion-modules
...
nixos/scion: init
2024-03-27 10:15:37 +01:00
jxd
88d183af85
init
2024-03-27 12:27:19 +08:00
Yongun Seong
477dce3b9a
nixos/kavita: accept freeform settings, ensure locales in tests
2024-03-26 21:15:29 -07:00
Alex Martens
1dacec9bb9
nixos/llama-cpp: fix example flags
2024-03-26 19:32:13 -07:00
éclairevoyant
eddbb7932f
nixos/wireplumber: reuse local binding to simplify
2024-03-26 16:41:58 -04:00
éclairevoyant
ff77d83327
nixos/wireplumber: provide example for services.pipewire.wireplumber.configPackages
2024-03-26 16:41:57 -04:00
éclairevoyant
f5b680b97c
nixos/wireplumber: update services.pipewire.wireplumber.configPackages description for v0.5
2024-03-26 16:41:57 -04:00
éclairevoyant
3aa01f7f13
nixos/wireplumber: inherit lib functions
2024-03-26 16:41:57 -04:00
éclairevoyant
d2843640cb
nixos/wireplumber: remove lib.mdDoc (no-op)
2024-03-26 16:41:52 -04:00
éclairevoyant
ff8f1a1f4e
nixos/pipewire: document example for services.pipewire.configPackages
2024-03-26 16:41:51 -04:00
éclairevoyant
27a2f2a429
nixos/pipewire: replace with lib; with inherit
2024-03-26 16:41:51 -04:00
éclairevoyant
f3b74afdc7
nixos/pipewire: remove lib.mdDoc (no-op)
2024-03-26 16:41:51 -04:00
Atemu
f54166d281
Merge pull request #299008 from Atemu/paperless-OMP_NUM_THREADS
...
nixos/paperless: set OMP_NUM_THREADS=1 by default
2024-03-26 19:45:45 +00:00
Atemu
70fa188e17
nixos/paperless: set OMP_NUM_THREADS=1 by default
...
Fixes https://github.com/NixOS/nixpkgs/issues/240591
2024-03-26 17:56:01 +01:00
matthewcroughan
99e488e2df
nixos/scion: init
2024-03-26 15:54:09 +00:00
superherointj
6f414604e2
Merge pull request #296852 from Ramblurr/add-microsocks
...
microsocks: init at 1.0.4
2024-03-26 08:34:45 -03:00
Franz Pletz
05677341df
Merge pull request #298956 from ncfavier/nvidia-doc
...
nixos/nvidia: update manual
2024-03-26 12:31:36 +01:00
Friedrich Altheide
f0887fa040
virtualbox: fix guest additions resize support
...
- Build virtualbox guest additions from source and fix paths
- Install VBoxDRMClient to support resizing
- Support resizing on wayland and x11
- Adding multiple new options
- clipboard
- seamless
- Removing x11 option
- Support linux 6.8
2024-03-26 11:47:00 +01:00
Casey Link
cef226e553
nixos/microsocks: init
2024-03-26 07:52:41 +01:00
Sandro
dcbfb2b98a
Merge pull request #262462 from io12/flatpak-fix-fonts-icons
...
nixos/flatpak: pass system icons and fonts
2024-03-25 23:23:09 +01:00
Sandro
c90ed026b7
Merge pull request #281075 from melvyn2/patch-2
...
nixos/slskd: refactor and add config file options
2024-03-25 21:00:01 +01:00
Naïm Favier
fb613a3a41
nixos/nvidia: update manual
...
Remove the `nvidiaLegacy*` video drivers from the manual: not only are
they deprecated, their deprecation notice was removed in
https://github.com/NixOS/nixpkgs/pull/244060 .
2024-03-25 16:56:11 +01:00
Tobias Poschwatta
ee2b899ff7
nixos/nfsd: settings for /etc/nfs.conf
...
services.nfs.settings is added for options that go into /etc/nfs.conf.
There are services.nfs.server.extraNfsdConfig and
services.nfs.extraConfig, but they have drawbacks. They overlap in
scope (nfs.extraConfig can also add nfsd options). They require that one
writes INI syntax. They often produce nfs.conf files with duplicate
section names, which is confusing.
This deprecates services.nfs.server.extraNfsdConfig and
services.nfs.extraConfig.
services.nfs.settings cannot be used together with
services.nfs.server.extraNfsdConfig or services.nfs.extraConfig.
2024-03-25 12:22:48 +01:00
Melvyn
4da76cc6f4
nixos/slskd: refactor and add config file options
2024-03-24 18:26:56 -07:00
Sandro
0e1cac923d
Merge pull request #286685 from max-niederman/photonvision
...
photonvision: init at 2024.2.3
2024-03-24 22:05:36 +01:00
Sandro
76e86c46b2
Merge pull request #273234 from SuperSandro2000/oauth2-proxy-nginx
...
nixos/oauth2_proxy_nginx: allow placing the login page itself under a separate domain
2024-03-24 22:03:10 +01:00
Sandro
dabaa7ac65
Merge pull request #288033 from diogotcorreia/module-dnsproxy
...
nixos/dnsproxy: init module
2024-03-24 21:52:09 +01:00
Felix Bühler
63078e3468
Merge pull request #298168 from ambroisie/improve-tandoor-recipes-manage
...
nixos/tandoor-recipes: improve manage script
2024-03-24 17:06:01 +01:00
Martin Weinelt
3bc33ba58d
nixos/wyoming-faster-whisper: update model option
2024-03-23 23:29:06 +01:00
K900
1b59f54864
Merge pull request #298363 from K900/greetd-alias
...
nixos/greetd: create display-manager.service alias
2024-03-24 01:04:40 +03:00
Maciej Krüger
94d6d4e93a
nixos/docuum: add module for docuum package
...
Co-Authored-By: Martin Weinelt <mweinelt@users.noreply.github.com>
2024-03-23 18:25:55 +01:00
Sandro
9ae4475cff
Merge pull request #291214 from RatCornu/suwayomi-server
...
suwayomi-server: 0.7.0 -> 1.0.0
2024-03-23 17:56:19 +01:00
Marie Ramlow
88daab5195
nixos/prometheus-fritz-exporter: init module
2024-03-23 16:32:25 +01:00
K900
c0949a240a
nixos/greetd: create display-manager.service alias
2024-03-23 16:33:16 +03:00
Florian Klink
21721e4196
nixos/mycelium: description updates
...
- Slight rewordings and typo fixes.
- Use documentation prefixes for addresses, rather than 1.2.3.4, and
add IPv6 examples.
- Fix description for `keyFile` (`/var/lib/mycelium/key{,.bin}`).
- Some formatting by my editor
2024-03-23 12:36:49 +01:00
Bruno BELANYI
af6e257878
nixos/tandoor-recipes: improve manage script
...
This is shamelessly stolen from Photoprism's module, and should allow
executing the manage script without resorting to various tricks due to
relying on transient users.
2024-03-22 20:54:36 +00:00
Bruno BELANYI
6b1e9f77f9
nixos/tandoor-recipes: set service 'Group'
2024-03-22 20:47:55 +00:00
Maximilian Bosch
e7533df80f
nixos/mastodon: stop mastodon-init-db.service if check for seeded DB fails
...
The postgresql runs on a different node than my mastodon itself. Sometimes when
rebooting the entire host it can happen that mastodon gets started
before the DB[1] is up. In that case `mastodon-init-db.service` ran
through with the following log output:
2024-03-07 15:30:56.856
Migrating database (this might be a noop)
2024-03-07 15:30:56.856
/nix/store/xzm7www0qb7jg5zrgg7knynckx5yhki9-unit-script-mastodon-init-db-start/bin/mastodon-init-db-start: line 9: [: -eq: unary operator expected
It seems wrong to me to have this unit pass if the DB isn't even up,
especially with such an error.
This patch now checks if the exit code of the psql check was non-zero
and fails the entire unit. A retry can be implemented e.g. with
Restart/RestartSec then (which is more elegant than adding a while/sleep
loop anyways) like this:
systemd.services.mastodon-init-db = {
serviceConfig = {
Restart = "on-failure";
RestartSec = "5s";
RestartMode = "direct";
RemainAfterExit = true;
};
unitConfig = {
StartLimitBurst = 5;
StartLimitIntervalSec = "60";
};
};
Also using `-t --csv` now to not render the column name and to not
render a table so we don't need to rely on the format of psql (and parse
it with `sed(1)`).
[1] I added a script that blocks until postgres is there in the meantime
though.
2024-03-22 17:51:20 +01:00
Jonathan Davies
50fcbfbe26
nixos/thanos: Added query.grpc-compression and receive.grpc-compression option.
2024-03-22 12:21:15 +00:00
K900
176ee51929
Merge pull request #297806 from andrevmatos/nixos/wireplumber/fix_systemwide_bluetooth
...
nixos/wireplumber: fix systemwide bluetooth integration
2024-03-22 09:47:46 +03:00
Bobby Rong
5cf5dd0fb0
Merge pull request #297727 from bobby285271/upd/budgie-nemo-terminal
...
nixos/budgie: Use gnome-terminal by default
2024-03-22 13:20:40 +08:00
Bobby Rong
414628b4a0
nixos/budgie: Don't enable fprintd by default
...
This is optional for {budgie,gnome}-control-center and is not
enabled in the GNOME module.
To re-enable this fprintd should be unbreak first.
2024-03-22 12:28:17 +08:00
e1mo
bc25c4bd7d
nixos/pretix: raise TimeoutStartSec
...
On some slower systems or ones with a slower database (connection) the
initial migrations can exceed the default 90s timeout.
2024-03-21 21:49:40 +01:00
e1mo
6d5a6cab71
nixos/pretix: Fix pdf generation
...
Previously, pdftk (part of the ticket, badge, ... generation pipeline)
would fail with:
```
Error occurred during initialization of VM
Failed to mark memory page as executable - check if grsecurity/PaX is enabled
```
Thise caused pdf generation to fail.
Since pdftk is a java application and, according to systemd.exec(5),
> Note that [MemoryDenyWriteExecute=] is incompatible with programs and
> libraries that generate program code dynamically at runtime, including
> JIT execution engines, executable stacks, and code "trampoline" featu
> re of various C compilers.
Disabling `MemoryDenyWriteExecute=` fixes it.
2024-03-21 21:49:39 +01:00
K900
ff3d03a15f
Merge pull request #297697 from K900/plasma6-install-kio5
...
plasma6: also install base kio5
2024-03-21 23:05:33 +03:00
André Vitor de Lima Matos
bdc6b3abe0
nixos/wireplumber: fix systemwide bluetooth integration
...
From https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/3828#note_2270701
Broken/removed in #278760
2024-03-21 16:21:59 -03:00
K900
d23f4b140f
Merge pull request #297479 from cab404/raop-firewall
...
nixos/pipewire: raopOpenFirewall option
2024-03-21 18:05:20 +03:00
Bobby Rong
b79ac84d84
nixos/budgie: Use gnome-terminal by default
...
- Both budgie-desktop-view and cinnamon-desktop defaults to gnome-terminal, there
are no clear reason why we don't use the defaults here.
The cinnamon-desktop org.cinnamon.desktop.default-applications.terminal schema
is used in nemo for default emulator, since we use nemo by default this fixes nemo
open in terminal entry without introducing another override.
- There are theming issues with Qogir when opening right-click menu in a second tab.
- Transparency is broken when hovering on other windows, showing only the wallpaper.
This also ensures a stable default for budgie-desktop-view, by using only the
executable name and not a nix store path.
ref: https://github.com/BuddiesOfBudgie/budgie-desktop-view/blob/v1.3/data/org.buddiesofbudgie.budgie-desktop-view.gschema.xml#L60
ref: https://github.com/linuxmint/cinnamon-desktop/blob/6.0.0/schemas/org.cinnamon.desktop.default-applications.gschema.xml.in#L46
ref: https://github.com/linuxmint/nemo/blob/6.0.0/src/nemo-view.c#L7193
2024-03-21 22:16:25 +08:00
Martin Weinelt
3b7d9c77b3
Merge pull request #297622 from mweinelt/kea-exporter-0.7.0
...
kea-exporter: 0.6.1 -> 0.7.0
2024-03-21 14:29:42 +01:00
K900
4e5b7fe664
plasma6: also install base kio5
...
Fixes #295814
2024-03-21 15:19:44 +03:00
Stig
468417b7f3
Merge pull request #296479 from marcusramberg/marcus/nimdow
...
nixos/nimdow: module updates
2024-03-21 12:14:56 +01:00
Doron Behar
2897be360b
Merge pull request #287966 from Guanran928/clash-meta
...
nixos/mihomo: init
2024-03-21 10:40:10 +02:00
Martin Weinelt
c77d192eb4
prometheus-kea-exporter: 0.6.1 -> 0.7.0
...
https://github.com/mweinelt/kea-exporter/blob/v0.7.0/HISTORY
Updates the module to use the target name, because it now supports both
UDS as well as HTTP URLs.
2024-03-21 06:17:59 +01:00
Martin Weinelt
d702c91302
nixos/prometheus/exporters: pass utils into exporter modules
...
This is useful, because it provides escapeSystemdShellArgs.
2024-03-21 05:27:21 +01:00
github-actions[bot]
36232fff71
Merge master into staging-next
2024-03-20 18:01:02 +00:00
Dmitry Bogatov
5bb92281f5
nixos/dnscache: Provide explicit group for "dnscache" user
...
Without this patch the module refuses to evaluate, complaining that
default "nogroup" is no longer supported.
2024-03-20 16:45:50 +01:00
Cabia Rangris
eaf6b74366
nixos/pipewire: raopOpenFirewall option
...
RAOP requires UDP/6001-6002 for timing
information, and won't work with apple devices if
firewall is enabled.
2024-03-20 18:32:01 +03:00
Sandro
50b2e2a029
Merge pull request #296866 from SuperSandro2000/xserver-pinentry
2024-03-20 14:32:44 +01:00
github-actions[bot]
90461ffe37
Merge master into staging-next
2024-03-20 12:01:15 +00:00
Florian Klink
40e49b40ab
Merge pull request #296949 from NixOS/mycelium_service
...
nixos/mycelium: init
2024-03-20 11:50:46 +02:00
Pol Dellaiera
15541288f3
Merge pull request #297133 from trofi/etebase-server-fix-test
...
etebase-server: fix the eval on `null` `cfg.unixSocket`
2024-03-20 07:38:15 +01:00
K900
e240f8bde9
Merge remote-tracking branch 'origin/master' into staging-next
2024-03-20 09:27:30 +03:00
K900
e382906174
Merge pull request #295839 from peterhoeg/m/sddm_kwin
...
nixos/sddm: add support for kwin_wayland
2024-03-20 09:02:52 +03:00
Ameya Shenoy
99c0c32a49
usbguard: fix policy enums
...
The available policies for `InsertedDevicePolicy` and
`ImplicitPolicyTarget` differ from the defined policy enum. This change
is to prevent users from configuring incorrect policies for `usbguard`
Related `usbguard` documentation
https://usbguard.github.io/documentation/configuration.html
Signed-off-by: Ameya Shenoy <shenoy.ameya@gmail.com>
2024-03-20 08:41:21 +05:30
lassulus
b82a5ef764
nixos/mycelium: init
2024-03-20 03:56:58 +01:00
Peter Hoeg
404a2363d1
nixos/plasma6: use kwin with sddm
2024-03-19 21:14:46 +01:00
Peter Hoeg
8c642cd40a
nixos/sddm: add support for kwin_wayland
2024-03-19 20:55:23 +01:00
Martin Weinelt
7762462405
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/flask-security-too/default.nix
2024-03-19 17:30:16 +01:00
Bobby Rong
2dcadb7087
Merge pull request #297072 from FedericoSchonborn/add-federicoschonborn
...
maintainers: Add federicoschonborn back again
2024-03-19 23:12:06 +08:00
ajs124
bdabdf0c16
nixos/gitlab: use workhorse package from option in path
2024-03-19 13:47:55 +01:00
ajs124
1bada61543
nixos/gitlab: switch from sidekiq to sidekiq-cluster
2024-03-19 13:47:55 +01:00
Sandro
4a9a5fab1c
Merge pull request #283501 from SuperSandro2000/hedgedoc-fix-tools-exec
2024-03-19 13:37:46 +01:00
Sergei Trofimovich
5a3bd05394
etebase-server: fix the eval on null cfg.unixSocket
...
Without the change the test eval fails as:
$ nix build --no-link -f. etebase-server.tests
error: cannot coerce null to a string: null
2024-03-19 08:59:57 +00:00
Federico Damián Schonborn
455b915be0
maintainers: Add federicoschonborn back again
...
Signed-off-by: Federico Damián Schonborn <federicoschonborn@disroot.org>
2024-03-18 21:51:28 -03:00
github-actions[bot]
7c0bd382c7
Merge master into staging-next
2024-03-19 00:02:09 +00:00
Lily Foster
e3c0bb4255
Merge pull request #294542 from Janik-Haag/garage
...
nixos/garage: add env-var wrapper for admin cli
2024-03-18 16:10:15 -07:00
Janik H.
9ec0e31f79
nixos/garage: add env-var wrapper for admin cli
2024-03-18 22:53:21 +01:00
maralorn
b6668ded0e
Merge pull request #296977 from slotThe/maintainer
...
Add slotThe as a maintainer
2024-03-18 22:43:38 +01:00
Tony Zorman
240c39ef2e
nixos/xmonad: add slotThe as a maintainer
2024-03-18 20:27:15 +01:00
Martin Weinelt
00e2713c5b
Merge remote-tracking branch 'origin/master' into staging-next
2024-03-18 19:59:23 +01:00
Jon Seager
ffc736695c
Merge pull request #296937 from MinerSebas/scrutiny-collector-ordering
2024-03-18 17:16:40 +00:00
Martin Weinelt
03fcd060ff
Merge pull request #296921 from patka-123/engelsystem-cleanup
...
engelsystem: cleanup
2024-03-18 17:14:59 +01:00
Patka
93aba53a08
engelsystem: cleanup
...
The custom php with extensions is not needed. The default already has all the needed extensions enabled by default.
2024-03-18 17:08:01 +01:00
K900
823897dde8
wireplumber: 0.4.17 -> 0.5.0
2024-03-18 18:57:05 +03:00
MinerSebas
9d384c350b
nixos/scrutiny: Order scrutiny-collector after scrutiny
2024-03-18 16:30:51 +01:00
Sandro
124ec2d9d6
nixos/xserver: don't conflict pinentry package with DEs
2024-03-18 11:22:48 +01:00
github-actions[bot]
819a14ad05
Merge master into staging-next
2024-03-18 06:01:21 +00:00
github-actions[bot]
ac91cf83c1
Merge master into staging-next
2024-03-18 00:02:20 +00:00
Alex Martens
bdb6849a32
nixos/llama-cpp: fix binary path
2024-03-17 16:48:51 -07:00
Sandro
1f212fd6e6
Merge pull request #289025 from tcheronneau/issue-288907
...
nixos/tinyproxy: fix the quotes around the filter path
2024-03-17 23:33:42 +01:00
github-actions[bot]
100b3bb178
Merge master into staging-next
2024-03-17 18:00:54 +00:00
github-actions[bot]
c222aba0b8
Merge master into staging-next
2024-03-17 12:01:55 +00:00
Patka
c4e1ffb96b
engelsystem: 3.4.1 -> 3.5.0
...
Release notes: https://github.com/engelsystem/engelsystem/releases/tag/v3.5.0
2024-03-17 12:24:29 +01:00
Maximilian Bosch
6af7e814af
Merge pull request #292993 from wolfgangwalther/postgresql-refactor
...
postgresql: refactor and cleanup
2024-03-17 10:00:07 +00:00
Sandro
62748bdf42
Merge pull request #295891 from Stzx/pinentry-conflict
...
pinentry: fix DM option and user conflict
2024-03-17 08:50:13 +01:00
Bobby Rong
a4bca9aaef
nixos/pantheon: Add missing gala-daemon systemd services
...
Otherwise it doesn't autostart after user session managed by systemd.
2024-03-17 13:42:33 +08:00
Bobby Rong
0b41a85c95
nixos/display-managers: Don't force graphical-session.target activation for Pantheon
...
See Nixpkgs pull request 233981.
2024-03-17 13:42:33 +08:00
Bobby Rong
7522f97cbe
pantheon: Manage user session with systemd
...
This is now needed as gnome-session 46 drops `--builtin` option.
2024-03-17 13:41:51 +08:00
github-actions[bot]
2178d8d857
Merge master into staging-next
2024-03-17 00:02:17 +00:00
Martin Weinelt
2b003c0269
nixos/pretix: make state directory world-readable
...
Pretix creates static files in its state directory, that nginx needs to
serve, so locking down the permissions that hard is not going to work.
2024-03-16 23:44:37 +01:00
Jon Seager
bfa0fb2dbe
Merge pull request #296463 from MinerSebas/scrutiny-split
2024-03-16 19:41:40 +00:00
Marcus Ramberg
20eec34036
nixos/nimdow: Make package configurable, ensure nimdow can start a terminal in it's default config
2024-03-16 19:32:34 +01:00
github-actions[bot]
60fbf92c10
Merge master into staging-next
2024-03-16 18:01:00 +00:00
Pol Dellaiera
5ebdb3eda7
Merge pull request #296465 from Janik-Haag/networkmanager-ensure-profiles
...
nixos/networkmanager: ensure-profiles, make sure networkmanager is running
2024-03-16 18:46:12 +01:00
Janik H.
847a53742c
nixos/networkmanager: ensure-profiles, make sure networkmanager is running
2024-03-16 18:11:58 +01:00
MinerSebas
2210ac7764
nixos/scrutiny: Order scrutiny.service after influxdb2.service
2024-03-16 18:02:17 +01:00
MinerSebas
7d6917088c
nixos/scrutiny: Dont enable influxdb when only using scrutiny-collector
2024-03-16 18:02:10 +01:00
Guillaume Girol
119099506c
Merge pull request #292477 from nu-nu-ko/nixos-komga-hardening
...
nixos/komga: add service hardening and misc format changes.
2024-03-16 17:34:45 +01:00
Martin Weinelt
fe8d02e2bc
Merge pull request #296180 from mweinelt/pretix
...
pretix: init at 2024.2.0
2024-03-16 17:28:20 +01:00
Manuel Sanchez Pinar
a1301766eb
nixos/silverbullet: init module
2024-03-16 17:11:59 +01:00
MinerSebas
9e1fe5cddd
nixos/restic-rest-server: Make the service socket activated
2024-03-16 17:07:55 +01:00
Martin Weinelt
b05a529fd6
nixos/pretix: init
2024-03-16 14:50:56 +01:00
Bobby Rong
3b48b3aaa9
Merge pull request #289062 from bobby285271/upd/mate
...
MATE 1.28
2024-03-16 21:38:24 +08:00
github-actions[bot]
9db4d84312
Merge master into staging-next
2024-03-16 12:01:19 +00:00
MinerSebas
7762c2233c
nixos/restic-rest-server: Add additional service hardening
2024-03-16 08:18:50 +01:00
Pol Dellaiera
4285a30496
Merge pull request #295837 from abysssol/ollama-env-vars
...
nixos/ollama: add option to set environment variables
2024-03-16 08:02:55 +01:00
github-actions[bot]
7006358e6a
Merge master into staging-next
2024-03-16 00:02:02 +00:00
Pol Dellaiera
21456ee2a7
Merge pull request #296183 from laalsaas/etebase-server-fix
...
etebase-server: create required tmpdir
2024-03-15 22:08:15 +01:00
Wolfgang Walther
4b6bce5c31
postgresql: refactor to remove "this" argument
...
This was proposed by abbradar in #150801 , but left out of the follow up PR
#221851 by Ma27 to reduce the size of the diff. Compared to the initial
proposal this includes the callPackage call in the recursion, which avoids
breaking the withJIT/withoutJIT helpers.
In terms of nixpkgs, this is a pure refactor, no derivations change. However,
this makes downstream expressions like the following possible:
(postgresql.override { jitSupport = true; }).pkgs.postgis
This would have not worked before without passing another "this" argument,
which is error prone as can be seen in this example:
https://github.com/PostgREST/postgrest/pull/3222/files
2024-03-15 21:11:09 +01:00
Wolfgang Walther
14b3ea2789
postgresql: refactor to pass jitSupport/llvm via scope instead of passthru
...
This makes it less error-prone to use the llvm package in extensions, because
it will always match the package used by the postgresql derivation itself.
Previously, you could've accidentally used llvm instead of postgresql.llvm
with a different result.
2024-03-15 21:11:09 +01:00
Maximilian Bosch
0d17fd9524
Merge pull request #292473 from networkException/fix-synapse-unix-socket-permissions
...
nixos/matrix-synapse: allow synapse to write to directories of unix socket paths
2024-03-15 18:53:04 +00:00
github-actions[bot]
00729a3d21
Merge master into staging-next
2024-03-15 18:01:19 +00:00
laalsaas
1d4c8cb0ff
etebase-server: create required tmpdir
2024-03-15 16:52:21 +01:00
Peder Bergebakken Sundt
3399de5396
Merge pull request #295342 from pbsds/spotifyd-url-1710255988
...
nixos/spotifyd: update configuration documentation url
2024-03-15 13:03:01 +01:00
github-actions[bot]
4aac48ff7f
Merge master into staging-next
2024-03-15 06:01:09 +00:00
Bobby Rong
9254f99be6
Merge pull request #296019 from bobby285271/upd/budgie
...
nixos/budgie: Fix default fonts
2024-03-15 08:35:12 +08:00
github-actions[bot]
2bffd64e73
Merge master into staging-next
2024-03-15 00:01:59 +00:00
Bobby Rong
f7f3a3ec53
nixos/budgie: Fix default fonts
...
Always install noto fonts and hack font.
2024-03-15 07:56:02 +08:00
Ilan Joselevich
09078fd022
Merge pull request #295932 from Kranzes/nextcloud
...
nixos/nextcloud: remove opcache.enable_cli=1
2024-03-14 21:36:09 +02:00
Ilan Joselevich
9353fb2309
nixos/nextcloud: remove opcache.enable_cli=1
...
Upstream no longer recommends enabling the opcache cli.
See the following:
- https://github.com/nextcloud/documentation/issues/1439
- https://github.com/nextcloud/server/pull/15468
2024-03-14 18:36:11 +02:00
Bobby Rong
398cce395c
nixos/mate: Add enableWaylandSession option
...
Make this an opt-in for now since the session is in early stage
and introduces a new set of wayfire closure.
2024-03-14 23:34:11 +08:00
Bobby Rong
b45faa9834
nixos/mate: Add extraPanelApplets, extraCajaExtensions option
...
Hopefully this is more user-friendly.
2024-03-14 23:34:10 +08:00
Bobby Rong
a323f4f828
mate: Install mate-panel-with-applets by default
2024-03-14 23:34:06 +08:00
Bobby Rong
c87f6b5591
mate: Install caja-with-extensions by default
2024-03-14 23:34:05 +08:00
Stzx
8bf5cc2666
pinentry: fix DM option and user conflict
2024-03-14 21:54:35 +08:00
abysssol
b5e7a05bb7
nixos/ollama: add option to set environment variables
2024-03-14 04:21:36 -04:00
github-actions[bot]
f4c4bfc9fc
Merge master into staging-next
2024-03-13 18:00:53 +00:00
Sandro
db55012fa3
Merge pull request #291455 from SuperSandro2000/hydra-starman-worker
2024-03-13 13:57:12 +01:00
github-actions[bot]
cecf050e96
Merge master into staging-next
2024-03-13 12:01:25 +00:00
Pol Dellaiera
55251f1ffc
Merge pull request #295547 from Janik-Haag/unbound
...
nixos/unbound: drop networkmanager since it doesn't support unbound anymore
2024-03-13 10:33:52 +01:00
Janik H.
4147e50f18
nixos/unbound: drop networkmanager since it doesn't support unbound anymore
2024-03-13 09:50:56 +01:00
Pol Dellaiera
c35c016e5d
Merge pull request #295529 from Janik-Haag/networkmanager-drop-unbound
...
nixos/networkmanager: drop unbound form dns servers
2024-03-13 09:04:58 +01:00
Pol Dellaiera
6710011819
Merge pull request #295199 from blakesmith/gotosocial_14_2
...
gotosocial 0.14.1 -> 0.14.2
2024-03-13 08:53:37 +01:00
Janik H.
a97e56ae28
nixos/networkmanager: drop unbound form dns servers
...
upstream dropped unbound in 5da17c689b
2024-03-13 08:31:52 +01:00
éclairevoyant
e7db1f299c
nixos/scrutiny: fix timer not auto-starting
2024-03-12 22:25:54 -04:00
Blake Smith
b0529146b9
nixos/gotosocial: add blakesmith as a maintainer
2024-03-12 21:13:22 -05:00
annalee
8e038835fe
Merge remote-tracking branch 'upstream/master' into staging-next
2024-03-13 00:38:07 +00:00
Jörg Thalheim
721c6579d2
Merge pull request #295407 from Stunkymonkey/nixos-murmur-registerPassword-fix
...
nixos/murmur: fix writing registerPassword to config
2024-03-12 22:47:26 +01:00
Fabián Heredia Montiel
da8768347e
Merge pull request #293950 from DCsunset/nixos-hoogle
...
nixos/hoogle: add extraOptions
2024-03-12 14:57:30 -06:00
Felix Buehler
1e22e7d75e
nixos/murmur: fix writing registerPassword to config
2024-03-12 21:19:24 +01:00
github-actions[bot]
6b78f024b2
Merge staging-next into staging
2024-03-12 18:01:46 +00:00
Peder Bergebakken Sundt
285d2dcf3c
nixos/spotifyd: update configuration documentation url
2024-03-12 16:07:48 +01:00
Sandro Jäckel
b07cdeb1b3
nixos/plasma6: move out of x11
...
This release focuses on wayland, lets give that justice
2024-03-12 10:49:42 +01:00
github-actions[bot]
06e5eb63d3
Merge staging-next into staging
2024-03-11 18:01:53 +00:00
emilylange
08c37ba899
nixos/lldap: set service UMask=0027 and StateDirectoryMode=0750
...
While `/var/lib/lldap` isn't technically accessible by unprivileged
users thanks to `DynamicUser=true`, a user might prefer and change it to
`DynamicUser=false`.
There is currently also a PR open that intends to make `DynamicUser`
configurable via module option.
As such, `jwt_secret_file`, if bootstrapped by the service start
procedure, might be rendered world-readable due to its permissions
(`0644/-rw-r--r--`) defaulting to the service's umask (`022`) and
`/var/lib/lldap` to `0755/drwxr-xr-x` due to `StateDirectoryMode=0755`.
This would usually be fixed by using `(umask 027; openssl ...)` instead
of just `openssl ...`.
However, it was found that another file (`users.db`), this time
bootstrapped by `lldap` itself, also had insufficient permissions
(`0644/-rw-r--r--`) inherited by the global umask and would be left
world-readable as well.
Due to this, we instead change the service's to `027`.
And to lower the impact for already bootstrapped files on existing
instances like `users.db`, set `StateDirectoryMode=0750`.
2024-03-11 17:34:29 +01:00
emilylange
61a651e362
nixos/lldap: bootstrap jwt_secret if not provided
...
If not provided, lldap defaults to `secretjwtsecret` as value which is
hardcoded in the code base.
See https://github.com/lldap/lldap/blob/v0.5.0/server/src/infra/configuration.rs#L76-L77
This is really bad, because it is trivially easy to generate an admin
access token/cookie as attacker, if a `jwt_secret` is known.
2024-03-11 17:34:29 +01:00
Sandro Jäckel
4799ffc61d
nixos/vaultwarden: drop lib.mdDoc
2024-03-11 16:32:53 +01:00
Sandro Jäckel
d5ae85691a
nixos/vaultwarden: drop with lib over entire file
2024-03-11 16:32:49 +01:00
Sandro
869ec01e56
Merge pull request #294286 from SuperSandro2000/unbound-remote-config-check
2024-03-11 16:06:31 +01:00
