Johan Thomsen
7028fac35b
nixos/kubernetes: use system.path to handle dependency on flannel subnet.env
...
The current postStart step on flannel causes flannel.service to
sometimes hang, even when it's commanded to stop.
2019-02-20 21:08:56 +01:00
Johan Thomsen
466beb0214
nixos/kubernetes: let flannel use kubernetes as storage backend
...
+ isolate etcd on the master node by letting it listen only on loopback
+ enabling kubelet on master and taint master with NoSchedule
The reason for the latter is that flannel requires all nodes to be "registered"
in the cluster in order to setup the cluster network. This means that the
kubelet is needed even at nodes on which we don't plan to schedule anything.
2019-02-20 21:08:56 +01:00
Johan Thomsen
1f49c2160a
nixos/kubernetes: CoreDNS privileges has to be assigned by addon manager bootstrap
...
- because the kube-addon-manager drops most of its privileges after
startup.
2019-02-20 21:08:55 +01:00
Johan Thomsen
6334796370
nixos/kubernetes: use the certmgr-selfsigned variant
2019-02-20 21:08:54 +01:00
Johan Thomsen
e2380e79e1
nixos/kubernetes: major module refactor
...
- All kubernetes components have been seperated into different files
- All TLS-enabled ports have been deprecated and disabled by default
- EasyCert option added to support automatic cluster PKI-bootstrap
- RBAC has been enforced for all cluster components by default
- NixOS kubernetes test cases make use of easyCerts to setup PKI
2019-02-20 21:08:01 +01:00
aanderse
a9358c4356
nixos/httpd: update documentation to reflect changes from https://github.com/NixOS/nixpkgs/pull/54529 ( #56079 )
2019-02-20 14:43:25 +02:00
Robert Klotzner
9f3fe63b5f
Add some hint on howto get valid signing keys.
2019-02-20 12:32:08 +01:00
Vladimír Čunát
32767d139f
Merge branch 'staging-next'
...
This round is without the systemd CVE,
as we don't have binaries for that yet.
BTW, I just ignore darwin binaries these days,
as I'd have to wait for weeks for them.
2019-02-20 09:38:45 +01:00
Elis Hirwing
f342be2c06
Merge pull request #56062 from elseym/jackett-module
...
jackett module: add more options and refactor
2019-02-20 09:14:36 +01:00
Elis Hirwing
66404f0742
Merge pull request #56061 from elseym/radarr-module
...
radarr module: add more options and refactor
2019-02-20 09:14:23 +01:00
Florian Klink
c8b33d15d1
Merge pull request #56076 from telotortium/patch-1
...
tt-rss: Fix syntax error in config.php DB_PASS field
2019-02-20 01:58:28 +01:00
Florian Klink
11699d03bc
Merge pull request #56072 from bgamari/gitlab-database-config
...
nixos/gitlab: Introduce database pool size option
2019-02-20 01:56:28 +01:00
Robert Irelan
7ae4b4897a
tt-rss: Fix syntax error in config.php DB_PASS field
...
Empty password case would write `define('DB_PASS', )` instead of `define('DB_PASS', '')`.
2019-02-19 16:24:17 -08:00
Ben Gamari
bd5ba09b79
nixos/gitlab: Introduce database pool size option
...
As well as a extraDatabaseConfig option.
2019-02-19 17:49:15 -05:00
Dan Callahan
d20ad56ca7
nixos/gnome3: enable bolt by default
...
GNOME's support for Thunderbolt 3 requires the bolt daemon.
Fixes #55938
2019-02-19 20:54:39 +00:00
Dan Callahan
139e12323f
nixos/bolt: init at 0.7
2019-02-19 20:54:38 +00:00
elseym
a73817ed82
jackett module: add more options and refactor
2019-02-19 20:45:00 +01:00
elseym
7b58ca7797
radarr module: add more options and refactor
2019-02-19 20:25:58 +01:00
Matthew Bauer
b1bbd94bb6
Merge remote-tracking branch 'NixOS/master' into staging
2019-02-18 20:36:48 -05:00
Johan Thomsen
f738618637
nixos/kubernetes: dashboard 1.8.3 -> 1.10.1
...
- add option to specify extra cmdline arguments to the dashboard
2019-02-18 17:34:30 +01:00
Johan Thomsen
5af74e19e6
nixos/kubernetes: coredns 1.2.5 -> 1.3.1
2019-02-18 17:34:30 +01:00
Frederik Rietdijk
815b77cbe6
Merge master into staging-next
2019-02-18 14:18:04 +01:00
Silvan Mosberger
a3f85f0dc0
Merge pull request #55410 from aanderse/apache-defaults
...
nixos/httpd: improve security in configuration file
2019-02-18 03:27:18 +01:00
Silvan Mosberger
ac953a4a6b
Merge pull request #55766 from Lucus16/bump-quassel
...
nixos/quassel: Add support for certificate file
2019-02-18 03:04:56 +01:00
rembo10
8e151c1e86
Merge branch 'master' into headphones
2019-02-18 09:14:14 +08:00
Ryan Mulligan
a52d280cc4
Merge pull request #55955 from rnhmjoj/diod
...
Fixes for diod
2019-02-17 14:23:26 -08:00
Ryan Mulligan
c3f9fdbf42
Merge pull request #55957 from dasJ/icingaweb2-module
...
nixos/icingaweb2: Init the module
2019-02-17 11:12:23 -08:00
Janne Heß
1caa886f6c
nixos/icingaweb2: Init the module
...
The module is indeed very large but allows configuring every aspect of
icingaweb2. The built-in monitoring module is in an own file because
there are actually more (third-party) modules and this structure means
every module can get an own file.
2019-02-17 19:08:47 +01:00
rnhmjoj
6871e43937
nixos/diod: fix permissions
2019-02-17 18:26:00 +01:00
Torsten Schmits
97bb693927
nixos/tt-rss: fix syntax error in pre-start script
2019-02-17 10:50:24 +01:00
Frederik Rietdijk
fd48a94b62
Merge staging-next into staging
2019-02-16 09:30:46 +01:00
Frederik Rietdijk
6fe10d2779
Merge master into staging-next
2019-02-16 09:29:54 +01:00
Jan Tojnar
23eff453a2
Merge pull request #55742 from aanderse/php-fpm
...
nixos/phpfpm: allow configuring php.ini files per-pool
2019-02-16 07:28:07 +01:00
Graham Christensen
a1525c5d48
docs: give matomo an ID
2019-02-15 17:51:00 -05:00
Jaka Hudoklin
5ae048071d
Merge pull request #55649 from johanot/flannel-with-kubernetes-backend
...
nixos/flannel: add kubernetes as storage backend (and fix test)
2019-02-15 19:55:56 +01:00
Peter Hoeg
507855e56c
Merge pull request #55667 from amazari/master
...
zoneminder: fix build issue when using createLocally database
2019-02-15 22:00:31 +08:00
Silvan Mosberger
b1bda29f5c
Merge pull request #55517 from florianjacob/cups-fix-ssl-dir
...
nixos/cups: Fix Unable to encrypt connection:
2019-02-14 21:19:57 +01:00
Silvan Mosberger
8a5925b7eb
Merge pull request #55301 from telotortium/tt-rss_disable_automatic_updates
...
Remove option config.services.tt-rss.checkForUpdates (forced to false)
2019-02-14 21:15:30 +01:00
Silvan Mosberger
3df95cfd9a
Merge pull request #55540 from florianjacob/matomo
...
Security: Matomo 3.7.0 -> 3.8.1
2019-02-14 21:13:57 +01:00
Silvan Mosberger
c84488329b
Merge pull request #47747 from florianjacob/matomo-archive-processing-service
...
Matomo archive processing service
2019-02-14 21:05:16 +01:00
Florian Jacob
33b3272692
nixos/cups: Fix Unable to encrypt connection:
...
Unable to create server credentials
by creating /var/lib/cups/ssl directory.
2019-02-14 20:43:26 +01:00
Silvan Mosberger
80480598d4
Merge pull request #55515 from rycee/wpa_supplicant_citerefentry
...
nixos/wpa_supplicant: use `<citerefentry>`
2019-02-14 20:38:05 +01:00
Lars Jellema
85675c139f
nixos/quassel: Add support for certificate file
2019-02-14 14:36:21 +01:00
Frederik Rietdijk
a25d48cd4f
Merge master into staging
2019-02-14 11:35:50 +01:00
Jan Tojnar
606ceda352
gnome3: stop using aliases
2019-02-14 02:31:15 +01:00
Aaron Andersen
5eef3590ae
nixos/phpfpm: allow configuring php.ini files per-pool
2019-02-13 19:58:02 -05:00
Michael Raskin
f539a6a70e
Merge pull request #55138 from oxij/tree/random-fixes
...
random cleanups and a tiny fix
2019-02-13 20:16:07 +00:00
Alex Whitt
58d6951971
nzbget: Fix script for copying default config file template ( #51235 )
...
* nzbget: Fix configFile / dataDir checking in service script
* nzbget: improve the description for the `configFile` option
* nzbget: Add detail to the `configFile` option description
* nzbget: Improve wording of `configFile` option
* nzbget: Refactor dataDir management into systemd config
* nzbget: Remove debug
2019-02-13 17:38:32 +01:00
Johan Thomsen
94136fdc1b
nixos/flannel: node name needs to be configured for flannel to work with kubernetes storage backend
2019-02-13 17:17:52 +01:00
Frederik Rietdijk
7257dedd7c
Merge master into staging-next
2019-02-13 12:33:29 +01:00
Francesco Zanini
ab912cf744
atlassian services: allow overriding package ( #55685 )
2019-02-13 08:08:13 +00:00
Alexandre Mazari
b93ea9c26f
zoneminder: fix build issue when using createLocally database
2019-02-12 22:32:11 +01:00
Johan Thomsen
9522ca5ce9
nixos/flannel: add options to configure kubernetes as config backend for flannel
2019-02-12 18:26:39 +01:00
Franz Pletz
adb837eea7
Merge pull request #55024 from telotortium/airsonic-virtualHost
...
airsonic: Add virtualHost option to set up nginx virtual host
2019-02-12 02:09:25 +00:00
Florian Jacob
faac33bc77
nixos/matomo: 3.8.0 introduces matomo.{php,js} files
2019-02-11 17:33:44 +01:00
Michael Francis
34cf79c6d2
Push plex logs to syslog/journald
2019-02-11 10:47:21 +08:00
Robert Helgesson
488a3f09cd
nixos/wpa_supplicant: use <citerefentry>
...
Fixes #55505
2019-02-10 13:23:28 +01:00
Jörg Thalheim
393b1510c9
Merge pull request #55440 from Mic92/teamspeak
...
nixos/teamspeak: ipv6 support
2019-02-10 09:02:20 +00:00
Jörg Thalheim
d59f9c0e5f
Merge pull request #55432 from Mic92/ttrss
...
ttrss: database.passwordFile, ldap plugin, configureable socket
2019-02-10 09:01:45 +00:00
Lorenzo
1dca9d763c
nixos/xautolock: improve doc of time parameer
...
Specify that the `time` parameter expresses minutes.
2019-02-09 20:47:01 +01:00
Matthew Bauer
5c09d977c7
Merge remote-tracking branch 'origin/master' into staging
2019-02-09 12:14:06 -05:00
Robert Schütz
efe98cbdc8
nixos/home-assistant: make config.http.server_port an integer
2019-02-09 15:26:55 +01:00
Sarah Brofeldt
8049fafb5d
Merge pull request #55443 from ptman/patch-1
...
nixos/docker-registry: fix listenAddress
2019-02-08 20:01:22 +01:00
Maximilian Bosch
6fb825b057
nixos/roundcube: add package option
...
With this option it's possible to specify a custom expression for
`roundcube`, i.e. a roundcube environment with third-party plugins as
shown in the testcase.
2019-02-08 13:35:09 +00:00
Paul Tötterman
23a84e939e
nixos/docker-registry: fix listenAddress
...
listenAddress config option was previously unused in config generation
2019-02-08 14:39:22 +02:00
Jörg Thalheim
6c28dd858b
teamspeak: ipv6 support
...
Unlike the options descriptions the service was not listen to any
IPs because the address family was limited to ipv4.
2019-02-08 10:28:20 +00:00
Jörg Thalheim
f636bb2016
tt-rss: read listen socket from pool
...
This allows to use a different socket.
The configuration was tested on my server.
2019-02-08 07:08:13 +00:00
Jörg Thalheim
367b1e10cb
tt-rss: add database.passwordFile option
2019-02-08 07:08:10 +00:00
Lily Ballard
b0e79359bd
nixos/unifi: Update TCP ports
...
Fixes #55377
2019-02-07 13:18:57 -08:00
Aaron Andersen
1bec75301b
nixos/httpd: don't advertise php
2019-02-07 14:25:55 -05:00
Aaron Andersen
70be5b6bb2
nixos/httpd: disable HTTP TRACE method by default
2019-02-07 14:13:45 -05:00
Aaron Andersen
dd610ce84f
nixos/httpd: disable TLSv1 by default for better security
2019-02-07 14:05:44 -05:00
Léo Gaspard
a59a9a7e60
Merge branch 'pr-55320'
...
* pr-55320:
nixos/release-notes: mention breaking changes with matrix-synapse update
nixos/matrix-synapse: reload service with SIGHUP
nixos/tests/matrix-synapse: generate ca and certificates
nixos/matrix-synapse: use python to launch synapse
pythonPackages.pymacaroons-pynacl: remove unmaintained fork
matrix-synapse: 0.34.1.1 -> 0.99.0
pythonPackages.pymacaroons: init at 0.13.0
2019-02-07 17:12:04 +01:00
Graham Christensen
11a819c724
Manual: make reproducible
2019-02-06 22:35:58 -05:00
Maximilian Bosch
de79d418ba
Merge pull request #53874 from atopuzov/grafana-config
...
Grafana configuration
2019-02-06 23:41:25 +01:00
Ioannis Koutras
6642f3f213
nixos/syncthing: setup user only on system service
2019-02-06 20:23:13 +01:00
nyanloutre
524e26c69a
nixos/matrix-synapse: reload service with SIGHUP
...
This is used to load new certificates without restarting the service
2019-02-06 16:28:18 +01:00
nyanloutre
eb753318b3
nixos/matrix-synapse: use python to launch synapse
...
launch synapse with the python executable because the startup script is
no longer available
2019-02-06 16:21:07 +01:00
Aleksandar Topuzović
092eab7228
nixos/grafana: implement dashboard & datasource provisioning
...
Adds the ability to automatically provision datasources and dashboards.
2019-02-06 12:50:24 +01:00
Robert Irelan
eab69d998b
Remove option config.services.tt-rss.checkForUpdates (forced to false)
...
Force this option to false. Leaving this as true (currently the default)
is dangerous. If the TT-RSS installation upgrades itself to a newer
version requiring a schema update, the installation will break the next
time the TT-RSS systemd service is restarted.
Ideally, the installation itself should be immutable (see
https://github.com/NixOS/nixpkgs/issues/55300 ).
2019-02-05 23:05:23 -08:00
Peter Hoeg
7003a28916
Merge pull request #54541 from dotlambda/home-assistant-0.86
...
home-assistant: 0.85.1 -> 0.86.4
2019-02-06 09:02:28 +08:00
Silvan Mosberger
dfce20e4e3
Merge pull request #51980 from ToxicFrog/munin-plugins
...
nixos/munin: New options (and some bugfixes) for service configuration
2019-02-05 19:35:03 +01:00
aanderse
b8a9c3fbfd
redmine: 3.4.8 -> 4.0.1 ( #55234 )
...
* redmine: 3.4.8 -> 4.0.1
* nixos/redmine: update nixos test to run against both redmine 3.x and 4.x series
* nixos/redmine: default new installs from 19.03 onward to redmine 4.x series, while keeping existing installs on redmine 3.x series
* nixos/redmine: add comment about default redmine package to 19.03 release notes
* redmine: add aandersea as a maintainer
2019-02-05 11:51:33 +00:00
Robert Irelan
027d4188b2
airsonic: Add virtualHost option to set up nginx virtual host
...
Modeled after nixos/modules/services/web-apps/tt-rss.nix. The setup is
slightly non-intuitive, so I think it's worth adding upstream.
2019-02-05 00:15:54 -08:00
Ben Kelly
ace4855cf6
nixos/munin: enable munin_update and disable munin_stats
...
munin_update relies on a stats file that exists, but isn't found in the
default location on NixOS; the appropriate plugin configuration is
added.
munin_stats relies on munin-cron writing a logfile, which the NixOS
build of munin does not. (This is probably fixable in the munin package,
but I don't have time to dig into that right now.)
2019-02-04 20:17:26 -05:00
Ben Kelly
e7c1449ae9
nixos/munin: add types to Munin options
...
Some options were missing their types.
2019-02-04 20:17:26 -05:00
Ben Kelly
c4437fee7e
nixos/munin: add extraCSS option
...
This permits custom styling of the generated HTML without needing to
build your own Munin package from source. Also comes with an example
that works as a passable dark theme for Munin.
2019-02-04 20:17:26 -05:00
Ben Kelly
6c907851f4
nixos/munin: add extraPlugins and extraAutoPlugins options [ #17895 ]
...
extraAutoPlugins lets you list plugins and plugin directories to be
autoconfigured, and extraPlugins lets you enable plugins on a one-by-one
basis. This can be used to enable plugins from contrib (although you'll
need to download and check out contrib yourself, then point these
options at it), or plugins you've written yourself.
2019-02-04 20:17:26 -05:00
Ben Kelly
b5b82b2cae
nixos/munin: require DejaVu fonts if enabled
...
munin-graph is hardcoded to use DejaVu Mono for the graph legends; if it
can't find it, there's no guarantee it finds a monospaced font at all,
and if it can't find a monospaced font the legends come out badly
misformatted.
2019-02-04 20:17:26 -05:00
Ben Kelly
0c3208a8e4
nixos/munin: add disabledPlugins option
...
This is just a set of globs to remove from the active plugins directory
after autoconfiguration is complete.
I also removed the hard-coded disabling of "diskstats", since it seems
to work just fine now.
2019-02-04 20:17:26 -05:00
Ben Kelly
c74abf763a
nixos/munin: add extraPluginConfig option
...
This lets you specify additional plugin-specific configuration to go in
plugin-conf.d, and complements the extraConfig and extraGlobalConfig
options.
2019-02-04 20:17:26 -05:00
Ben Kelly
c02564e37c
nixos/munin: fix documentation links
...
Since this module was written, Munin has moved their documentation from
munin-monitoring.org/wiki to guide.munin-monitoring.org. Most of the
links were broken, and the ones that weren't went to "please use the new
site" pages.
2019-02-04 20:17:26 -05:00
Silvan Mosberger
2d6f84c109
Merge pull request #45412 from costrouc/costrouc/minecraft-server
...
minecraft-server: 1.12.2 -> 1.13.2 + service refactor
2019-02-05 01:49:24 +01:00
Maximilian Bosch
ae7e8c6a2f
Merge pull request #55222 from thefloweringash/nextcloud-nginx-config
...
nixos/nextcloud: use matching nginx package when configuring nginx
2019-02-05 00:46:43 +01:00
Maximilian Bosch
5a3a543078
Merge pull request #55122 from elseym/ndppd-module
...
ndppd module: refactor and fix
2019-02-04 21:51:00 +01:00
Andrew Childs
a7d9dcab7e
nixos/nextcloud: use matching nginx package when configuring nginx
...
NixOS currently defaults services.nginx.package to
nginxStable. Including configuration files from nginxMainline could
potentially cause incompatible configuration.
2019-02-05 02:59:42 +09:00
Michael Raskin
7ff8a16f07
Merge pull request #55050 from aanderse/redmine-extra-env
...
nixos/redmine: add an extraEnv option, enable automatic log rotation
2019-02-04 16:28:58 +00:00
Jan Malakhovski
cefbe69105
nixos: rippled: fix type
...
The old state is clearly a bug.
2019-02-03 20:10:13 +00:00
Jan Malakhovski
08cabdf4a9
nixos: rippled: fix indent
2019-02-03 20:10:11 +00:00
Franz Pletz
2746973061
ndppd: don't use weird upstream systemd service unit
2019-02-03 14:39:28 +01:00