Commit Graph

21644 Commits

Author SHA1 Message Date
Kerstin Humm
897954b8ae nixos/open-web-calendar: init module 2024-11-21 16:34:39 +01:00
Adam C. Stephens
63de272302
nixos/kanidm: add provisioning secret directories to BindReadOnlyPaths (#357440) 2024-11-21 09:46:02 -05:00
Aleksana
c1b9d0ce79
nixos/alertmanager: add additional docs about envsubst (#302536) 2024-11-21 21:20:44 +08:00
Aleksana
9612e216ce
nixos/tabby: fix typo (#355223) 2024-11-21 21:01:54 +08:00
Weijia Wang
02287a8c02
kubo-migrator: add migration from 15 to 16 (#344265) 2024-11-21 12:22:45 +01:00
Naïm Camille Favier
6735eef1b1
nixos/libreswan: use environment.etc."ipsec.secrets".text (#357626) 2024-11-21 08:18:24 +01:00
kirillrdy
c8021779cd
amazon-cloudwatch-agent: init at 1.300049.1 (#337212) 2024-11-21 17:18:47 +11:00
Thiago Kenji Okada
778f30c08c
porn-vault: init at 0.30.0-rc.11 (#355785) 2024-11-20 21:52:34 +00:00
Naïm Favier
b294762bb9
nixos/libreswan: use environment.etc."ipsec.secrets".text
This is to ensure compatibility with the networkmanager module, which
uses the `text` option.
2024-11-20 19:59:02 +01:00
Masum Reza
d834b054f4
nixos/scx: init module (#352300) 2024-11-21 00:10:45 +05:30
Luflosi
9e2866d215
kubo-migrator: rewrite
- Migrate to pkgs/by-name
- Format with nixfmt-rfc-style
- Make it possible to remove support for very old migrations in the future by increasing the `minRepoVersion` parameter
- Rename kubo-migrator-all-fs-repo-migrations to kubo-fs-repo-migrations since it may no longer include all migrations
- Add an alias for kubo-migrator-all-fs-repo-migrations to keep backwards compatibility
- Update descriptions to differentiate between kubo-migrator and kubo-migrator-unwrapped and better describe the purpose of the migrator
- Add a description to every individual migration
- Add a description to kubo-fs-repo-migrations
- Fetch the source code of the individual migrations from their specific Git tags, like upstream intends
- Enable tests for some migrations
- Check that the migrations don't crash on startup
- Mark two broken migrations as broken. They are not compatible with the latest Go versions and upstream is not interested in fixing this
- Change code to allow most updates to be done by only changing three lines (add new version and change git tag and hash)
- Add a stub for any disabled or broken migration to prevent downloading unsigned binaries from the internet, see https://github.com/ipfs/fs-repo-migrations/issues/148#issuecomment-2351355627 and https://github.com/ipfs/fs-repo-migrations/issues/188
- Use `lib.getExe` instead of hardcoding the binary name in the kubo NixOS module
- Use `substituteInPlace` with `--replace-fail` instead of `--replace`
2024-11-20 16:17:14 +01:00
TobTobXX
26fbd1adbe
nixos/bind: Fix cacheNetworks option
services.bind.cacheNetworks should only apply to recursive queryies, as
per the option documentation:
> Note that this is for recursive queries – all networks are allowed to
> query zones configured with the zones option by default [...].

This would correspond to the `allow-query-cache` option in named.conf,
as per the BIND docs[1]:
> Specifies which hosts (an IP address list) can access this server’s
> cache and thus effectively controls recursion.

And not `allow-query`, which restricts all requests (including requests
where the server has authority) [2]:
> Specifies which hosts (an IP address list) are allowed to send queries
> to this resolver.
> [...]
> Note:
> `allow-query-cache` is used to specify access to the cache.

[1]: https://bind9.readthedocs.io/en/v9.20.0/reference.html#namedconf-statement-allow-query-cache
[2]: https://bind9.readthedocs.io/en/v9.20.0/reference.html#namedconf-statement-allow-query
2024-11-20 10:47:06 +01:00
oddlama
3e29e0560d
nixos/kanidm: add provisioning secret directories to BindReadOnlyPaths 2024-11-20 01:41:31 +01:00
Luana
cc671e2b6b nixos/porn-vault: init module 2024-11-19 21:11:40 -03:00
Weijia Wang
5bdc0862bf
wordpress: 6.6.2 -> 6.7 (#356449) 2024-11-19 22:44:51 +01:00
Sandro
8bc2cc19bb
nixos/opendkim: modernize, add expandable settings option, put config file under standard location (#333758) 2024-11-19 22:29:49 +01:00
John Titor
3e710e6d15
nixos/scx: init
This adds a `services.scx.enable` option to enable sched-ext schedulers.

Requires a kernel with sched-ext enabled (6.12+) or a kernel with the patchset.

requiredKernelConfigs are taken from https://cateee.net/lkddb/web-lkddb/SCHED_CLASS_EXT.html
2024-11-19 23:09:53 +05:30
Martin Weinelt
fe8fdf8ff2
nixos/snapserver: restart systemd service on failure (#356584) 2024-11-19 15:08:13 +01:00
Jordan Williams
7031d0fdd0
nixos/snapserver: restart the systemd service on failure 2024-11-19 06:52:11 -06:00
Toast
d5808aee19
handheld-daemon-ui: init at 3.2.3 (#305027)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Co-authored-by: Arne Keller <2012gdwu+github@posteo.de>
2024-11-19 11:17:59 +01:00
Sandro
8b230d41d2
python312Packages.magic-wormhole-mailbox-server: 0.4.1 -> 0.5.1 (#354724) 2024-11-19 10:46:25 +01:00
Leona Maroni
3239d863ac
Merge: docs: remove old NixOS version references (#356684) 2024-11-19 09:10:51 +01:00
commiterate
3d0e3156ea amazon-cloudwatch-agent: init at 1.300049.1 2024-11-18 19:19:35 -05:00
Cosima Neidahl
e6b5e795bf
kimai, nixos/kimai: init at 2.24.0 (#353187) 2024-11-19 01:05:53 +01:00
Colin
67fe3c2326
nixos/geoclue2: add package option (#326882) 2024-11-18 22:40:37 +00:00
kirillrdy
16952bdb0c
flarum: fix 'mysql' has been renamed to/replaced by 'mariadb' (#356868) 2024-11-19 08:54:08 +11:00
Cosima Neidahl
1d87ec425f
lomiri.*: OTA-6 (#355289) 2024-11-18 22:40:08 +01:00
Silvan Mosberger
555f0e9f1e
formats.ini: expose INI atom from all ini formats (#354800) 2024-11-18 16:11:51 +01:00
Johannes Kirschbauer
6b53949b0c
formats.ini: expose INI atom from all ini formats 2024-11-18 16:07:22 +01:00
Martin Joerg
0afba0d517 python312Packages.magic-wormhole-mailbox-server: 0.4.1 -> 0.5.1
https://github.com/magic-wormhole/magic-wormhole-mailbox-server/compare/refs/tags/0.4.1...refs/tags/0.5.1
https://github.com/magic-wormhole/magic-wormhole-mailbox-server/blob/0.5.1/NEWS.md

Python 3.12 is now supported
2024-11-18 07:37:49 +00:00
Florian Agbuya
75a6be1684 flarum: fix 'mysql' has been renamed to/replaced by 'mariadb' 2024-11-18 13:03:05 +08:00
Martin Weinelt
ee595b709e
nixos/wyoming-faster-whisper: update CUDA device allowlist
This list can change between driver versions, and it requires an update
now to find my GPU.
2024-11-18 03:21:43 +01:00
Sandro Jäckel
f497159195
nixos/opendkim: put config file under standard location 2024-11-17 22:27:10 +01:00
Sandro Jäckel
1414b222f5
nixos/opendkim: add expandable settings option 2024-11-17 22:27:09 +01:00
Sandro Jäckel
dfac70cb1d
nixos/opendkim: modernize 2024-11-17 22:27:09 +01:00
Ratchanan Srirattanamet
29e586e508 nixos/kimai: init module & add test 2024-11-17 16:20:21 +00:00
Julien Malka
cee07e8dc8 nixos/agorakit: init module 2024-11-17 16:08:58 +01:00
Viorel-Cătălin Răpițeanu
d1da56f629 wordpressPackages: package and theme updates
1. Make twentytwentyfive theme default
2. Update all packages
2024-11-17 15:56:28 +02:00
Masum Reza
9930c0783d
nixos/g810-led: fix module (#356687) 2024-11-17 18:22:07 +05:30
Wolfgang Walther
1dd9c32b18
docs: remove references before 22.11
Stuff that has been in for many years doesn't need to be mentioned
explicitly anymore.
2024-11-17 12:51:09 +01:00
Maximilian Bosch
cdc32ef5a5
Merge: nixos/postgresql: fix warning typo (#356619) 2024-11-17 12:24:19 +01:00
Gaetan Lepage
8fac714b78 nixos/g810-led: fix module 2024-11-17 11:48:24 +01:00
Tom Fitzhenry
a2337e4f6c nixos/spiped: use systemctl restart during activation
As is common with other networking services, stopIfChanged=true (the default) can cause O(seconds) downtime during activation.

Reduce this downtime by disabling stopIfChanged as done in:
* sshd https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/networking/ssh/sshd.nix#L569
* tailscale https://github.com/NixOS/nixpkgs/pull/170210
2024-11-17 20:39:25 +11:00
Tom Fitzhenry
235d103ff7 nixos/clatd: add enableNetworkManagerIntegration option 2024-11-17 20:38:55 +11:00
Ian Kerins
307090125f
nixos/postgresql: fix warning typo 2024-11-16 20:59:04 -05:00
Martin Weinelt
f3a1d218b0
nixos/zigbee2mqtt: only add port to DeviceAllow if it is a device (#356573) 2024-11-16 22:52:47 +01:00
Andrew Marshall
577e162073 nixos/zigbee2mqtt: only add port to DeviceAllow if it is a path
zigbee2mqtt supports having non-device ports (e.g. `tcp://`); those
should not be set in DeviceAllow. No URI will start with `/`, so use
that as the filter that it is a “real” device that needs to be allowed.
2024-11-16 16:47:38 -05:00
Maximilian Bosch
97a911e8fb
Merge: nixos/postgresql: extension based hardening relaxation (#355010) 2024-11-16 22:29:36 +01:00
Martin Weinelt
d370af0785
nixos/postgresql: create infrastructure for relaxing systemd hardening
By matching on the package names of the plugins passed into the package
we can relax the systemd unit hardening as needed.
2024-11-16 17:29:34 +01:00
Masum Reza
f4ae47b33e
nixos/gdm: automatically enable services.displayManager (#353848) 2024-11-16 21:40:04 +05:30