Commit Graph

1765 Commits

Author SHA1 Message Date
Pablo Ovelleiro Corral
c882d9b673
nixos/screego: init module
Add module for screego
2024-08-01 10:51:38 +02:00
Martin Weinelt
4ba537131f
nixos/pretix: increases startup timeout
Migrations on a busy machine can exceed 5 minutes, which I can reproduce
on a busy builder.
2024-08-01 04:37:20 +02:00
toastal
936a378123 movim service: updates for 0.26 2024-07-31 14:12:14 +07:00
DCsunset
0c2918fc91 nixos/gotify-server: add environment and environmentFiles options 2024-07-30 17:38:00 -04:00
DCsunset
e1ced8b12c nixos/gotify-server: add package option 2024-07-30 17:32:01 -04:00
DCsunset
b5a051f694 nixos/gotify-server: add maintainer 2024-07-30 17:29:55 -04:00
DCsunset
2079eeb882 nixos/gotify-server: clean up and reformat module 2024-07-30 17:28:54 -04:00
DCsunset
05113f61f0 nixos/stirling-pdf: init module 2024-07-26 18:12:50 -04:00
K900
26801aa449 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-26 14:31:21 +03:00
Pol Dellaiera
ceda66b310
Merge pull request #251687 from martinetd/cryptpad
nixos/cryptpad: init, cryptpad: init at 2024.6.0
2024-07-26 09:21:51 +02:00
K900
1410c766c8 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-26 08:41:08 +03:00
Jörg Thalheim
0fbc43eaea
Merge pull request #323641 from XenGi/fix-freshrss
nixos/freshrss: add ability to use socket path
2024-07-26 00:20:49 +02:00
github-actions[bot]
7208220b63
Merge master into staging-next 2024-07-24 18:01:18 +00:00
Dominique Martinet
7c448e8d44 nixos/cryptpad: harden service
cryptpad is not directly exposed to the network, but has plenty that can
be hardened more properly, so fix that.
2024-07-24 16:17:32 +09:00
Dominique Martinet
b846e8762f nixos/cryptpad: init
This is a full rewrite independent of the previously removed cryptpad
module, managing cryptpad's config in RFC0042 along with a shiny test.

Upstream cryptpad provides two nginx configs, with many optimizations
and complex settings; this uses the easier variant for now but
improvements (e.g. serving blocks and js files directly through nginx)
should be possible with a bit of work and care about http headers.

the /checkup page of cryptpad passes all tests except HSTS, we don't
seem to have any nginx config with HSTS enabled in nixpkgs so leave this
as is for now.

Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com>
Co-authored-by: Michael Smith <shmitty@protonmail.com>
2024-07-24 16:17:26 +09:00
Payas Relekar
aebb3d3474 nixos/goatcounter: init 2024-07-24 10:17:44 +05:30
github-actions[bot]
d284ef371e
Merge master into staging-next 2024-07-23 12:01:18 +00:00
Litchi Pi
0fb7268b9b Init IFM service at version 4.0.2
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-07-23 08:44:50 +02:00
bolives-hax
9319cf87b8
Merge branch 'NixOS:master' into add-rutorrent-service 2024-07-22 01:37:39 +02:00
bl0v3
7c1315628b fix exposeInsecureRPC2mount rtorrent group 2024-07-22 01:11:07 +02:00
Martin Weinelt
983077457f
Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
-	pkgs/development/python-modules/uvcclient/default.nix
-	pkgs/development/tools/rust/rust-analyzer/default.nix
2024-07-18 12:35:33 +02:00
Aaron Andersen
2e930eafb9
Merge pull request #318285 from gador/nixos-zabbixWeb-nginx
nixos/zabbixWeb: Add nginx as webserver, add zabbix 6.4
2024-07-17 21:22:13 -04:00
Florian Brandes
7d3b77d66f
nixos/zabbixWeb: format
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-17 22:33:47 +02:00
Florian Brandes
9ca5b84e27
nixos/zabbixWeb: add nginx config
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-17 22:31:50 +02:00
Emily
aef28c7834 nixos/akkoma: unpin ffmpeg_5
Their Dockerfile uses Alpine’s ffmpeg package, which is already
on 6. They just invoke the command‐line tool and nothing they do
looks particularly version‐sensitive.
2024-07-14 08:34:23 +01:00
Masum Reza
025f6d60e3
Merge pull request #326047 from britter/britter/onlyoffice-typos
onlyoffice: typo fixes, remove top level `with lib;`
2024-07-10 15:01:05 +05:30
Benedikt Ritter
57ea5be929
onlyoffice: Remove top-level with lib;
Prepend affected components with `lib.` instead.
2024-07-10 10:42:29 +02:00
lassulus
11dbf85aad
Merge pull request #325637 from Stunkymonkey/jtisi-meet-chmod-chown
nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown'
2024-07-10 09:57:18 +02:00
Benedikt Ritter
d61489db1a
onlyoffice: Fix typos 2024-07-10 09:14:21 +02:00
Pol Dellaiera
db41081a91
Merge pull request #323743 from NixOS/nixos/module/glance-init
nixos/glance: init module
2024-07-09 06:42:22 +02:00
Felix Buehler
87051a8f44 nixos/sogo: prefer 'install' over 'chmod'/'chown' 2024-07-08 22:41:47 +02:00
Felix Buehler
16eb9ced4e nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown' 2024-07-08 22:10:25 +02:00
Pol Dellaiera
00e9e54702
nixos/glance: init module 2024-07-08 13:14:09 +02:00
Sandro
b2a1b6f508
Merge pull request #324924 from SuperSandro2000/mediawiki-syntaxcheck
nixos/mediawiki: check if LocalConfig.php is valid syntax
2024-07-07 15:17:08 +02:00
Sandro Jäckel
313d2ccf83
nixos/mediawiki: check if LocalConfig.php is valid syntax 2024-07-06 02:06:50 +02:00
Maximilian Bosch
a9855af287
Merge pull request #321771 from Mynacol/nextcloud-preserveenv
nixos/nextcloud: Remove --preserve-env in sudo
2024-07-05 21:24:50 +00:00
Jonas Heinrich
e97d5eb3eb
Merge pull request #293210 from onny/eintopf
nixos/eintopf: init; eintopf: init at 0.13.16
2024-07-05 13:12:59 +02:00
Jonas Heinrich
28512d1ba4 nixos/eintopf: init 2024-07-05 13:12:35 +02:00
Weijia Wang
9c1cfad9a0
Merge pull request #307910 from r-ryantm/auto-update/pixelfed
pixelfed: 0.11.13 -> 0.12.1
2024-07-03 00:55:55 +02:00
Mynacol
af072cfb55 nixos/nextcloud: Remove --preserve-env in sudo
This helps supporting sudo-rs, which currently does not implement the
--preserve-env flag and probably won't so in the foreseeable future [1].

The replacement just sets both environment variables behind the sudo
invocation with env, as sudo-rs also doesn't implement env var lists.

The OC_PASS variable is dropped, as it is seemingly unused and would
leak through this approach through /proc.

[1] https://github.com/memorysafety/sudo-rs/issues/129
2024-07-02 11:29:35 +02:00
Felix Buehler
bb33682f3a nixos/freshrss: add extensions 2024-07-01 23:38:56 +02:00
Maximilian Bosch
c2586ca239 nixos/nextcloud: warn about unsafe path transitions
Closes #294588
It _may_ also be an answer to #169733.

See explanation from upstream[1] for further details.

[1] https://github.com/systemd/systemd/issues/19618#issuecomment-843273818
2024-07-01 21:20:12 +02:00
Ricardo Band
96c60c6b09 nixos/freshrss: add ability to use socket path
This change enables server:port combinations like "localhost:5432" but
also socket paths like "/run/postgresql". Without this change a port was
mendatory and attached to the path (/run/postgresql:5432) resulting in
an incorrect socket path. The underlying script already configures paths
correctly, so this small change should be enough.
2024-06-30 20:31:37 +02:00
Jörg Thalheim
d6cf181343 nixos/shiori: fix databaseUrl example 2024-06-30 13:41:38 +02:00
Jörg Thalheim
84a8354c58 nixos/shiori: fix BindPaths conditions if databaseUrl is not set 2024-06-30 13:06:11 +02:00
Jörg Thalheim
992f8bf968 nixos/shiori: fix nixos types for paths 2024-06-30 13:06:11 +02:00
Danilo Reyes
4f021e14a3 shiori: 1.5.5 -> 1.7.0 2024-06-29 15:30:22 -06:00
Kim Lindberger
b75986fd26
Merge pull request #310642 from arcnmx/keycloak-hostname-strict
nixos/keycloak: relax hostname settings assertion
2024-06-29 17:09:02 +02:00
Thomas Gerbet
85be596266
Merge pull request #322585 from wegank/limesurvey-security
nixos/limesurvey: drop default encryption key and nonce
2024-06-28 23:43:24 +02:00
Masum Reza
383744754e
Merge pull request #314798 from yomaq/healthchecks-settingsFile
nixos/healthchecks: add settingsFile option
2024-06-29 00:02:35 +05:30
Masum Reza
8808f7d7fc
Merge pull request #278982 from felbinger/master
python311Packages.mozilla-django-oidc: init at 4.0.1; peering-manager: add oidc support
2024-06-28 23:49:34 +05:30
Weijia Wang
daa81ecb2e nixos/limesurvey: drop default encryption key and nonce
Co-authored-by: Thomas Gerbet <thomas@gerbet.me>
2024-06-28 00:34:00 +02:00
Silvan Mosberger
c8dec6df38
Merge pull request #322801 from eclairevoyant/discourage-mkpackageoptionmd
lib: deprecate mkPackageOptionMD
2024-06-27 20:15:08 +02:00
Jonas Heinrich
77e7768849
Merge pull request #322397 from Ma27/bump-nextcloud
nextcloud: drop 27, 28.0.6 -> 28.0.7, 29.0.2 -> 29.0.3
2024-06-27 14:09:29 +02:00
éclairevoyant
aeee4fc133
treewide: replace mkPackageOptionMD with mkPackageOption 2024-06-26 23:05:42 -04:00
Benno Bielmeier
f99e50320e nixos/wordpress: update .htaccess for httpd
Update standard wordpress .htaccess content if using httpd
according to [1] (as of 2024-06-26)

[1]: https://developer.wordpress.org/advanced-administration/server/web-server/httpd/
2024-06-26 22:23:29 +02:00
Nico Felbinger
c4d2c90da0
nixos/peering-manager: add oidc support
Co-authored-by: Jenny <me@netali.de>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-26 07:45:18 +02:00
Sandro
33f83c6252
Merge pull request #316977 from eclairevoyant/fix-mkEnableOption
treewide: fix mkEnableOption usage
2024-06-25 22:42:16 +02:00
Maximilian Bosch
60657a4591
nextcloud27: remove
Version will be EOL by the end of 2024-06.
2024-06-25 14:08:15 +02:00
bl0v3
9abeee7aab fixed doc 2024-06-25 01:17:47 +02:00
bolives-hax
50d6aae3fe
Merge branch 'NixOS:master' into add-rutorrent-service 2024-06-25 00:04:28 +02:00
arcnmx
a910bc8146 nixos/keycloak: relax hostname settings assertion
The `hostname-strict` setting enables dynamic hostname resolution.
2024-06-23 19:36:36 -07:00
Maximilian Bosch
2ac989c06f
Merge pull request #321931 from Ma27/occ-improvements
nixos/nextcloud: occ improvements
2024-06-23 17:42:42 +00:00
Maximilian Bosch
a71e967ef3
Merge pull request #320983 from Ma27/nc-dbtableprefix
nixos/nextcloud: deprecate dbtableprefix
2024-06-22 16:54:41 +00:00
Maximilian Bosch
50d5306e7c
nixos/nextcloud: use dedicated memory limit for the entire CLI
Originally, I wanted to execute `nextcloud-occ` with a higher memory
limit because I needed to trigger an expensive operation by hand,
regenerating a bunch of previews.

While doing so, I realized how painful it is to put an invocation of
nextcloud-occ together for that, especially when you need to put it
into another systemd unit in Nix code.

That's why I decided to use the memory limit now for every
CLI invocation just in case. The stuff you do in those units (e.g.
running background jobs) is something you can also do by hand with
`nextcloud-occ` and you'll most likely want to have the same memory
limit there.
2024-06-22 18:39:08 +02:00
Maximilian Bosch
ab9b8f8cf4
nixos/nextcloud: services.nextcloud.occ is not internal
This option is actually useful when having a systemd unit invoking
`nextcloud-occ`, then you want to do something like

    path = [ config.services.nextcloud.occ ]

This is possible today, but not documented (and the option completion
from nil doesn't pick it up as a result).
2024-06-22 18:38:04 +02:00
Nick Cao
d10d0fc423
nixos/keycloak: update options for release 25.0.0
Reference: https://www.keycloak.org/docs/25.0.0/upgrading/
2024-06-22 10:23:09 -04:00
Ruby Iris Juric
088b397516 nixos/zitadel: Drop Sorixelle as maintainer 2024-06-21 16:11:10 +02:00
Thomas Gerbet
88130cec79
Merge pull request #321097 from PatrickDaG/firefly-6.1.18
firefly-iii: 6.1.17 -> 6.1.18
2024-06-20 23:03:48 +02:00
Patrick
6154279455
nixos/firefly-iii: enhance provisioning service 2024-06-20 12:16:48 +02:00
Pyrox
d94a39f87d
mealie: 1.7.0 -> 1.9.0
Also fix a small issue with the module not casting the port number
to a string
2024-06-19 20:48:39 -04:00
Maximilian Bosch
45d2b8b536
nixos/nextcloud: deprecated dbtableprefix
Closes #320381

Installation with a custom dbtableprefix is not allowed anymore for a
while[1] and we shouldn't advertise it as such.

The option is deprecated for now since I'm not sure if there are some
weird corner-cases where removing the option directly would break
existing installations from before <20 with a custom dbtableprefix. The
migration-path for such a case is as follows:

* Check if /var/lib/nextcloud/config/config.php has the correct
  dbtableprefix set and if not, take care of it.
* Remove `dbtableprefix` from the NixOS configuration. It's effectively
  state anyways.

After a bit of time to switch (perhaps after the next release
branchoff), the option can be removed.

[1] https://github.com/nextcloud/server/issues/24836
2024-06-19 11:43:33 +02:00
Aria
83b00c3637
akkoma: remove maintainer tcmal (#320858) 2024-06-18 22:33:38 +02:00
Sandro
07f7e6653b
Merge pull request #320593 from onny/invoiceplane-fix
nixos/invoiceplane: Ensure patching index.php
2024-06-18 13:33:06 +02:00
Jonas Heinrich
2a8ccf6144 nixos/invoiceplane: Ensure patching index.php 2024-06-17 20:48:21 +02:00
Martin Weinelt
decdb5e848
Merge pull request #317814 from Eisfunke/fix-pretix-celery-default-text
nixos/pretix: fix defaultText for celery options
2024-06-17 20:39:10 +02:00
Felix Bühler
ec48be343d
Merge pull request #320351 from Stunkymonkey/freshrss-enable-doc-improve
nixos/freshrss: add description about php-fpm
2024-06-16 23:30:26 +02:00
Pol Dellaiera
2754a6f4a8
Merge pull request #319456 from redxtech/fix-nextjs-ollama-llm-ui
nixos/nextjs-ollama-llm-ui: fix for respecting ollamaUrl config option
2024-06-16 22:46:43 +02:00
Felix Buehler
e9d13cc80e nixos/freshrss: add description about php-fpm 2024-06-16 22:14:12 +02:00
Kai Norman Clasen
14b558e094
nixos/firefly-iii: change statedirectory
Set `StateDirectory=firefly-iii` instead of trying to derive it from
`dataDir` + add `dataDir` to `ReadWritePaths`, allowing `dataDir` to be
set to full paths outside of `/var/lib`.
2024-06-14 22:29:09 +02:00
éclairevoyant
7d8742da87
treewide: fix mkEnableOption usage 2024-06-14 02:41:42 -04:00
Gabe Dunn
8b182a177f
nixos/nextjs-ollama-llm-ui: fix for respecting ollamaUrl config option 2024-06-12 21:24:29 -06:00
Felix Buehler
edcdf6ad3b nixos/freshrss: fix reload when config changes 2024-06-10 22:16:20 +02:00
Markus Kowalewski
b98e90213d
Merge pull request #317035 from ck3d/fix-node-red-path
nixos/node-red: fix passthru of PATH
2024-06-09 20:13:58 +00:00
Nicolas Lenz
0b8fdfd917
nixos/pretix: fix defaultText for celery options 2024-06-06 21:37:14 +02:00
Maximilian Bosch
7e2210236e
Merge pull request #316004 from Ma27/nc-memlimit
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
2024-06-04 19:18:03 +00:00
Christian Kögler
966d214719 nixos/node-red: fix passthru of PATH 2024-06-03 23:23:38 +02:00
yomaq
3f0bd8ab85 nixos/healthchecks: add settingsFile option
Single unified env file read by systemd
2024-06-03 08:56:52 -05:00
Sandro Jäckel
41452802cb
treewide: fix all obviously wrong mkEnableOptions 2024-06-03 13:20:32 +02:00
Eric Wolf
7c0937d668
nixos/nextcloud-notify_push: use Type=notify
This prevents the post start script from running
before necessary sockets have been created.

It also prevents an unused shell from being kept around
by using `exec` to make `notify_push` the main process.
2024-06-02 23:19:07 +02:00
Thomas Gerbet
e12faccb31
Merge pull request #313794 from tcmal/akkoma-3.13.2
akkoma: 3.13.1 -> 3.13.2
2024-06-02 12:57:31 +02:00
Weijia Wang
b966c334d7 nixos/pixelfed: default to php82 2024-06-02 00:16:19 +02:00
Peder Bergebakken Sundt
080af6461e
Merge pull request #314294 from james-atkins/mealie-update
mealie: 1.2.0 -> 1.7.0
2024-05-31 20:41:37 +02:00
Yt
6606ce9c0c
Merge pull request #273101 from onny/invoiceplane-settings2
nixos/invoiceplane: Remove deprecated extraConfig
2024-05-31 00:04:34 +00:00
Maximilian Bosch
dddd08d188
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
The memory limit is equal to what's configured in php-fpm. Given that we
run in a different environment, it seems reasonable to allow different
memory contraints here.
2024-05-30 23:38:55 +02:00
Izorkin
8730a7e8d8
nixos/mastodon: optimize systemd startup order block 2024-05-29 13:45:23 +03:00
Izorkin
a05afb1437
nixos/mastodon: update redis host and port configurations 2024-05-29 13:45:17 +03:00
tcmal
7952d92b82 nixos/akkoma: dont disable protectsystem in confinement mode
this works fine since #289593
2024-05-28 15:47:03 +01:00
tcmal
a247fc94b4 nixos/akkoma: deal with $RUNTIME_DIRECTORY containing multiple entries
this fixes issues with confined module tests.

see https://github.com/NixOS/nixpkgs/pull/313794#issuecomment-2126909110
2024-05-28 15:47:03 +01:00
Jonas Heinrich
4217b9cd9a nixos/invoiceplane: Remove deprecated extraConfig 2024-05-28 14:07:44 +02:00