Commit Graph

42189 Commits

Author SHA1 Message Date
Aaron Andersen
a25848c974
Merge pull request #324884 from SuperSandro2000/locate-persist-timer
nixos/locate: persist updatedb timer
2024-07-07 08:28:46 -04:00
Lin Yinfeng
01543e789c
nixos/utils: support JSON secret files in genJqSecretsReplacementSnippet
genJqReplacementSnippet quotes the content of the secret file in the
output json file, which prevents structured secret, such as a list or
an object, from being used.

This commit adds a `quote = true|false` option to the `{ _secret =
"/path/to/secret"; }` attribute set. `quote = true` treats the
content of /path/to/secret as string, while `quote = false` treats
the content of /path/to/secret as a JSON document.

`quote = true` is the default, maintaining backward compatibility.
2024-07-07 19:22:10 +08:00
OPNA2608
c34ee327e6 Revert "lomiri.telephony-service: Mark broken & exclude everywhere"
This reverts commit 3ef60ac499.
2024-07-07 12:58:45 +02:00
Mitchell Skaggs
5e1481ccc7
nixos/systemd-boot: fix invalid escape sequences
This was inadvertently introduced in https://github.com/NixOS/nixpkgs/pull/281639, but was not a loud warning until Python 3.12 made invalid escape sequences a `SyntaxWarning` instead of a `DeprecationWarning` in https://github.com/python/cpython/issues/98401.
2024-07-07 05:37:08 -05:00
Judson Lester
a9c8ff2cee
lorri: 1.6.0 -> 1.7.0 (#322749)
* (lorri): (1.6.0 -> 1.7.0)

1.7.0 supports Flakes

* (lorri) (update tests)

* lorri: 1.6.0 -> 1.7.0

Removing superfluous binding for `gitRev`
2024-07-07 11:16:23 +02:00
Jonathan Davies
008ea18566
nixos/prometheus: Harden alertmanager/webhook-logger/pushgateway systemd definitions 2024-07-07 00:15:57 +01:00
Jonathan Davies
7ce4fe5463
nixos/prometheus: Log systemd-analyze for alertmanager/webhook-logger/pushgateway 2024-07-07 00:15:42 +01:00
OPNA2608
3a788099cd tests/lomiri: Add polkit agent test 2024-07-06 20:05:07 +02:00
OPNA2608
916ba54f24 nixos/lomiri: Add polkit agent 2024-07-06 20:05:06 +02:00
github-actions[bot]
5a601bc241
Merge master into staging-next 2024-07-06 06:01:20 +00:00
Masum Reza
06eb305992
Merge pull request #321649 from Frontear/update-stevenblack-blocklist
stevenblack-blocklist: rev bump and improvements of module + package
2024-07-06 09:45:35 +05:30
Ali Rizvi
ab98e84e0d
nixos/stevenblack: rework to use distinct package outputs 2024-07-05 23:30:26 -04:00
Sandro Jäckel
313d2ccf83
nixos/mediawiki: check if LocalConfig.php is valid syntax 2024-07-06 02:06:50 +02:00
Martin Weinelt
d9610a9f2e
Merge remote-tracking branch 'origin/master' into staging-next 2024-07-06 01:51:14 +02:00
Maximilian Bosch
a9855af287
Merge pull request #321771 from Mynacol/nextcloud-preserveenv
nixos/nextcloud: Remove --preserve-env in sudo
2024-07-05 21:24:50 +00:00
Weijia Wang
93244d111c
Merge pull request #276106 from 9ary/pam_u2f-rfc42
nixos/pam/u2f: implement RFC0042
2024-07-05 23:20:03 +02:00
Maximilian Bosch
c4a59a99ba
Merge pull request #324617 from NotAShelf/271968-take-two
nixos/roundcube: adjust maxAttachmentSize, clarify documentation
2024-07-05 21:16:45 +00:00
Sandro Jäckel
dd743c70ee
nixos/locate: persist updatedb timer 2024-07-05 20:12:15 +02:00
github-actions[bot]
d6339576fb
Merge master into staging-next 2024-07-05 18:01:19 +00:00
0x4A6F
5292f247a1
Merge pull request #324066 from hacklschorsch/gitlab-runner-add-post-get-sources-script
Gitlab-Runner: add postGetSourcesScript
2024-07-05 16:51:56 +02:00
0x4A6F
1c3adad3c4
Merge pull request #324042 from hacklschorsch/gitlab-runner-preclone-is-now-pre-get-sources-script
Gitlab-Runner: preCloneScript is now preGetSourcesScript
2024-07-05 16:50:58 +02:00
novenary
fcccfb9e48 nixos/pam/u2f: implement RFC0042
This module has a lot of options, so it's a good candidate for freeform
settings.
2024-07-05 17:07:02 +03:00
github-actions[bot]
4bba3c5730
Merge master into staging-next 2024-07-05 12:01:14 +00:00
Jonas Heinrich
e97d5eb3eb
Merge pull request #293210 from onny/eintopf
nixos/eintopf: init; eintopf: init at 0.13.16
2024-07-05 13:12:59 +02:00
Jonas Heinrich
325ae12432 nixos/tests/eintopf: init 2024-07-05 13:12:35 +02:00
Jonas Heinrich
28512d1ba4 nixos/eintopf: init 2024-07-05 13:12:35 +02:00
Martin Weinelt
fda13875da Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/deebot-client/default.nix
- pkgs/development/python-modules/pytest-examples/default.nix
- pkgs/development/python-modules/w3lib/default.nix
2024-07-05 13:04:01 +02:00
Peter Bex
1c8fe32195 nixos/doc: remove key management setting in wpa_cli examples
When manually setting the key management, this will actually cause wifi to not connect if a different type is used by the access point.

WPA supplicant typically can detect the key management from the access point's broadcast, and not overriding it has a bigger chance of succeeding.

As a `wpa_cli` newbie, I just followed the instructions in the manual on the minimal install disk and they didn't work. I tried setting `key_mgmt` what was shown in the scan results, but `wpa_cli` barfed at the string (quoted or unquoted). Only when dropping the `set key_mgmt` line entirely, it worked. So I think this would provide a better help for people using the minimal install disk.
2024-07-05 11:05:59 +02:00
Aleksana
71c36a21fe
Merge pull request #322275 from jpds/nixos-tests-graylog-disk-fix
nixos/graylog: Fix disk preflight check
2024-07-05 15:33:03 +08:00
Cosima Neidahl
0b239e51db
Merge pull request #324661 from OPNA2608/fix/lomiri-test-windowclosing-focus
tests/lomiri: Fix OCR detection
2024-07-05 09:08:57 +02:00
Aleksana
573b302094
Merge pull request #324699 from Benjamin-L/drop-benjaminl
maintainers: remove Benjamin-L
2024-07-05 13:04:39 +08:00
tomberek
d9c0b9d611
Merge pull request #324627 from justinas/teleport-16
teleport_16: init at 16.0.4
2024-07-04 23:18:27 -04:00
Aaron Andersen
6fa3ecdc73
Merge pull request #324464 from hraban/cloudflare-dyndns-frequency
cloudflare-dyndns: configurable systemd frequency
2024-07-04 21:02:43 -04:00
Benjamin Lee
c8216ee1e9
maintainers: remove Benjamin-L
nope, absolutely not: <https://discourse.nixos.org/t/nca-member-jonringer-joint-announcement/48231>
2024-07-04 17:11:18 -07:00
github-actions[bot]
30cfd4445f
Merge master into staging-next 2024-07-05 00:02:21 +00:00
❄️
f5c3f086bf
Merge pull request #321015 from Pandapip1/init-envision
envision: init at 0-unstable-2024-06-23
2024-07-04 20:26:56 -03:00
Sandro
ff3896167e
Merge pull request #319743 from azuwis/moonlight-qt
moonlight-qt: 5.0.1 -> 6.0.1, and other enhancements
2024-07-04 21:53:02 +02:00
OPNA2608
ad6c2fc76f tests/lomiri: Fix OCR detection 2024-07-04 21:06:53 +02:00
Franz Pletz
aa8c9e6f2d
Merge pull request #317642 from melvyn2/systemd-networkd-network-options 2024-07-04 20:21:37 +02:00
Justinas Stankevicius
e7e3ca4bb5 teleport_16: init at 16.0.4 2024-07-04 21:04:27 +03:00
Aleksana
1c1df68b1e
Merge pull request #323020 from bjornfor/nixos-dictd-exit-status
nixos/dictd: treat SIGTERM exit status as success
2024-07-05 02:01:21 +08:00
github-actions[bot]
36cbae9ff0
Merge master into staging-next 2024-07-04 18:01:19 +00:00
Martin Weinelt
e0d9110aee
Merge pull request #324600 from erictapen/mastodon
nixos/mastodon: use recurseIntoAttrs for better test ergonomics
2024-07-04 19:47:11 +02:00
NotAShelf
48d1d14633
nixos/roundcube: adjust maxAttachmentSize, clarify documentation 2024-07-04 20:07:19 +03:00
Nicholas Sielicki
56ceae07be
nixos/jellyseerr: add package option (#276616)
Co-authored-by: seth <getchoo@tuta.io>
Co-authored-by: Franz Pletz <fpletz@fnordicwalking.de>
2024-07-04 18:56:38 +02:00
Franz Pletz
a1ecdd6b1a
Merge pull request #276135 from nbdd0121/netdev 2024-07-04 18:35:15 +02:00
Franz Pletz
440ea06e3b
Merge pull request #276507 from clefru/no-hwclock 2024-07-04 18:32:39 +02:00
Masum Reza
9ec0508f83
Merge pull request #171855 from ju1m/prosody
nixos/prosody: support mod_http_file_share
2024-07-04 21:59:29 +05:30
Michael Weiss
10cbea2905
nixos/monetdb, nixos/sks: remove primeos from maintainers (#277366)
Remove myself as maintainer from modules that I don't use anymore
2024-07-04 18:17:43 +02:00
Franz Pletz
d73e618905
Merge pull request #324450 from phfroidmont/patroni-module-remove-raft 2024-07-04 18:16:08 +02:00
Kerstin Humm
d9cec95613
nixos/mastodon: use recurseIntoAttrs for better test ergonomics 2024-07-04 18:07:44 +02:00
❄️
a5dad94280
Merge pull request #324083 from Djabx/fix-config-snapper
nixos/snapper: fix timeline options type
2024-07-04 12:50:01 -03:00
Aleksana
7cf6d9246e
Merge pull request #324565 from Pandapip1/patch-3
nixos/httpd: Use mkEnableOption
2024-07-04 23:45:44 +08:00
David McFarland
b44b62db30
Merge pull request #291640 from tie/sonarr-v4
sonarr: build from source
2024-07-04 12:08:02 -03:00
Gavin John
dffd5b699d
nixos/httpd: Use mkEnableOption 2024-07-04 13:44:24 +00:00
github-actions[bot]
9cede82051
Merge master into staging-next 2024-07-04 12:01:10 +00:00
Sandro
31a8448c93
Merge pull request #279917 from h7x4/nixos-module-update-add-samba-slice 2024-07-04 11:48:27 +02:00
Paul-Henri Froidmont
bca32a4163
nixos/patroni: remove raft 2024-07-04 10:22:19 +02:00
Vladimír Čunát
44b36397c2
Merge branch 'master' into staging-next
Conflicts - GitHub wouldn't auto-resolve them but my local git did:
	pkgs/development/cuda-modules/cuda/overrides.nix
2024-07-04 10:10:22 +02:00
Masum Reza
24ced04659
Merge pull request #324347 from jtojnar/gdm-fingerprint-fix
nixos/gdm: Fix fingerprint auth rules
2024-07-04 10:54:46 +05:30
Aleksana
d5a4f459ea
Merge pull request #304362 from Stunkymonkey/ec2-data-chmod-install
ec2-data: prefer 'install/umask' over 'chmod'
2024-07-04 12:51:53 +08:00
Aaron Andersen
1af787b0e7
Merge pull request #324320 from tomaskala/add-package-option-to-blocky
nixos/blocky: Add an option for the package to be used
2024-07-04 00:25:12 -04:00
Hraban Luyat
406351b470 cloudflare-dyndns: configurable systemd frequency 2024-07-03 22:50:45 -04:00
Jan Tojnar
af0cdb44a0 nixos/gdm: Fix fingerprint auth rules
We introduced the gdm-fingerprint.pam in 9d41fe6fcc.

We used the [upstream Arch config] as a template, which contains an extended control field that jumps over **one** immediately-following `auth` rule unless `pam_gdm.so` succeeds.

But we decided to not include `pam_gnome_keyring.so` so there was no rule to skip over, resulting in a broken control flow and the PAM module failing with “PAM bad jump in stack”, breaking the fingerprint authentication in GDM.

Let’s actually add `pam_gnome_keyring.so`, like the Arch config does. Because we are creating the PAM file using the `text` option, `security.pam.services.gdm-fingerprint.enableGnomeKeyring` does not do anything so we need to do it manually.

For the case where gnome-keyring is not enabled, we could add a no-op rule like `optional pam_permit.so` after `pam_gdm.so` so that the branching always has something to jump over but it will be simpler to just make the both conditional. There are no further `auth` rules that could benefit from `pam_gdm.so` doing something so it should be fine.

Unlike in Arch, we are not going to invoke `pam_gnome_keyring.so` in a `session` rule since that is already done by the included `login` module.

[upstream Arch config]: 81ee658c11/data/pam-arch/gdm-fingerprint.pam
2024-07-03 23:36:52 +02:00
Jan Tojnar
1cf4155498 nixos/gdm: Clean up gdm-fingerprint pam module
The `optional pam_permit.so` comes from the [upstream Arch config] we used as a template in 9d41fe6fcc. But I do not think it does anything in this position – see also the discussion at https://bbs.archlinux.org/viewtopic.php?id=245892 – so let’s just remove it.

Let’s also add a comment about disabling `fprintAuth` and a blank line for clarity.

[upstream Arch config]: 81ee658c11/data/pam-arch/gdm-fingerprint.pam
2024-07-03 23:32:43 +02:00
Felix Buehler
6fd0acb81b ec2-data: prefer 'install/umask' over 'chmod' 2024-07-03 23:18:43 +02:00
Someone
7cdac9fd12
Merge pull request #306730 from ShamrockLee/apptainer-default-path
apptainer, singularity: precede system-level bin paths in `defaultPath` and fix `singularity` image running
2024-07-03 19:56:08 +00:00
Jan Tojnar
68211b3546 Revert "nixos/gnome-keyring: unlock keyring with gdm-password, gdm-autologin"
`gdm-autologin` and `gdm-password` PAM modules are defined using the `text` option, so the option here is a no-op.

Furthermore, `gdm-password` already includes `login` for all module types,
and that invokes `pam_gnome_keyring.so` in the same way Arch’s `gdm-password` module would:
81ee658c11/data/pam-arch/gdm-password.pam

This reverts commit c24c7933ba.
2024-07-03 21:32:34 +02:00
Jan Tojnar
0e83d67373 Revert "nixos/gnome-keyring: enable gnome-keyring for fingerprint authentication'"
`gdm-fingerprint` PAM module is defined using the `text` option, so the option here is a no-op.

This reverts commit 6bb516d45f.
2024-07-03 21:25:17 +02:00
Vladimír Čunát
c76085b3a9
Merge branch 'master' into staging-next 2024-07-03 19:07:35 +02:00
Aleksana
3a96597d4f
Merge pull request #317457 from rawkode/fix/espanso-opts
nixos/espanso: fix wayland option
2024-07-03 23:20:03 +08:00
David Flanagan
f13e08ac0e
nixos/espanso: fix wayland option
Co-authored-by: Aleksana <alexander.huang.y@gmail.com>
2024-07-03 16:17:52 +01:00
Gavin John
2e8c8e4905 nixos/doc/rl-2411: Document programs.envision 2024-07-03 15:12:28 +00:00
Gavin John
454883d85b nixos/envision: init module 2024-07-03 15:12:06 +00:00
OTABI Tomoya
3ca8ba2a73
Merge pull request #324114 from NyCodeGHG/renovate-unix-socket
nixos/renovate: allow AF_UNIX access
2024-07-03 22:40:17 +09:00
Sandro
d47039cd5d
Merge pull request #322597 from tomodachi94/drop/vscode-css-json-html-languageserver-bin 2024-07-03 15:28:49 +02:00
github-actions[bot]
0983fe3e50
Merge master into staging-next 2024-07-03 12:01:17 +00:00
Florian Klink
6413876162
Merge pull request #323728 from michaelfranzl/add-regression-test-libvirt-nss
Regression test for libvirt NSS modules
2024-07-03 14:58:21 +03:00
Alexandre Badez
e37b07ffba nixos/snapper: fix timeline options type 2024-07-03 13:52:34 +02:00
Alexandre Badez
0c80191081 nixos/snapper: add maintainer 2024-07-03 13:52:34 +02:00
Tomas Kala
6930dd3dee nixos/blocky: Add an option for the package to be used
Previously, the blocky package was hardcoded to the one in pkgs. This
change allows to set it, so the user can configure the blocky service to
run blocky from nixpkgs-unstable, for example.
2024-07-03 13:42:34 +02:00
Jonas Chevalier
f2506eaef6
Merge pull request #324102 from johannwagner/fix/cloud-init-fixes
nixos/cloud-init: Bug fix and enhancements
2024-07-03 13:25:09 +02:00
Martin Weinelt
84164bf098
Merge pull request #318659 from mweinelt/fastly-exporter
nixos/prometheus-fastly-exporter: unwrap execstart
2024-07-03 12:40:10 +02:00
github-actions[bot]
6c668cb3e5
Merge master into staging-next 2024-07-03 09:24:52 +00:00
Sandro
4878cc74a4
Merge pull request #318818 from flyingcircusio/acme-accounts-compatibility-hash 2024-07-03 10:43:12 +02:00
matthewcroughan
99f4beaaec nixos/scion: improve robustness testing
Adds random process kills, crashes and reboots etc to the testing of the SCION module
2024-07-03 09:08:58 +02:00
github-actions[bot]
d33a11464d
Merge master into staging-next 2024-07-03 06:01:11 +00:00
Aleksana
2240a1aa31
Merge pull request #324163 from SuperSandro2000/271914
nixos/kmscon: fix eval
2024-07-03 12:38:01 +08:00
github-actions[bot]
d77a3adc09
Merge master into staging-next 2024-07-03 00:02:45 +00:00
Weijia Wang
9c1cfad9a0
Merge pull request #307910 from r-ryantm/auto-update/pixelfed
pixelfed: 0.11.13 -> 0.12.1
2024-07-03 00:55:55 +02:00
Sandro Jäckel
6868a97e5e
nixos/kmscon: fix eval 2024-07-03 00:01:12 +02:00
Ryan Lahfa
d387fafe2f
Merge pull request #324101 from hexchen/drop-hexchen
maintainers: remove myself
2024-07-02 23:38:02 +02:00
Weijia Wang
f5a7e092f3 Merge branch 'master' into staging-next 2024-07-02 22:22:02 +02:00
Thomas Gerbet
8ddb1bb721
Merge pull request #318599 from pacien/nixos-fcgiwrap-isolation
nixos/fcgiwrap: refactor to fix permissions
2024-07-02 21:52:33 +02:00
Sandro
15705830ce
Merge pull request #321061 from SomeoneSerge/prosody-logs
nixos/prosody: provide an (internal) escape hatch for overriding the …
2024-07-02 20:36:07 +02:00
Sandro
230c213fae
Merge pull request #314767 from Guanran928/mihomo
nixos/mihomo: add assertion for configFile
2024-07-02 20:27:36 +02:00
Sandro
bd4241bcc8
Merge pull request #297826 from anthonyroussel/update-tomcat_connectors
apacheHttpdPackages.mod_jk: 1.2.48 -> 1.2.49, rename from tomcat_connectors
2024-07-02 20:26:13 +02:00
Sandro
4f90cfd2f9
Merge pull request #313984 from yayayayaka/gitlab-17.0.1
gitlab: 16.11.5 -> 17.1.1
2024-07-02 20:12:42 +02:00
Marie Ramlow
787354f63c nixos/renovate: allow AF_UNIX access
renovate can update nix dependencies, which results in nix trying to communicate with the nix-daemon over a unix socket.
2024-07-02 20:09:12 +02:00
K900
c7268baf73 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-02 20:59:57 +03:00