Commit Graph

11917 Commits

Author SHA1 Message Date
Martin
f4d551c0d4 maintainer: add stackshadow 2021-11-01 18:47:04 +01:00
Martin
e620c32e59 code-server: init code-server-module 2021-11-01 18:46:57 +01:00
Niklas Hambüchen
f692dc62c8 nixos/logstash: Add logstashJvmOptionsFile option 2021-11-01 16:21:02 +01:00
oxalica
ad20e87e39
plasma5: set default session to plasma X11
Plasma wayland currently has many tiny bugs hurting user experience.
2021-11-01 18:58:00 +08:00
oxalica
91812b84b8
sddm: respect services.xserver.displayManager.defaultSession 2021-11-01 18:57:59 +08:00
github-actions[bot]
7eaf56d92e
Merge master into staging-next 2021-11-01 00:01:32 +00:00
Sandro
33f7dd3cfd
Merge pull request #143620 from jtojnar/ppd 2021-10-31 22:48:45 +01:00
Sandro
89aa371808
Merge pull request #143745 from jwoudenberg/yubikey-agent-fixes 2021-10-31 21:56:56 +01:00
Guillaume Girol
9545fade8b
Merge pull request #142743 from symphorien/ihm-5-dev-2
python3.pkgs.ihatemoney: 4.2 -> 5.1.1
2021-10-31 19:32:40 +00:00
Sandro Jäckel
c88d7f42cb
nixos/plasma5: fix accounts-daemon can't read profile image from systemsettings5 2021-10-31 19:50:07 +01:00
Sandro Jäckel
19142fd079
nixos/plasma5: enable accounts dbus daemon to beable to modify user settings like Pictures 2021-10-31 19:01:59 +01:00
Sandro Jäckel
22987611d0
nixos/plasma5: assorted manually formatting changes and cleanups + statix
nixos/plasma5: asd
2021-10-31 19:01:58 +01:00
github-actions[bot]
7ca1d48ff2
Merge master into staging-next 2021-10-31 18:01:01 +00:00
Maximilian Bosch
aaeba3c577
Merge pull request #143840 from maralorn/nextcloud-cron
nixos/nextcloud: Adapt cron frequency to changed upstream requirement
2021-10-31 15:50:47 +01:00
Jan Tojnar
ef02a97f27
Merge pull request #142865 from jansol/master
pipewire: 0.3.38 -> 0.3.39
2021-10-31 15:32:20 +01:00
Kerstin Humm
62ab77a322
nixos/borgbackup: specify systemd WorkingDirectory 2021-10-31 13:39:46 +01:00
Kerstin Humm
8d3b180052
nixos/radicale: specify systemd WorkingDirectory 2021-10-31 13:39:18 +01:00
Kerstin Humm
6c8e827c23
nixos/gollum: Specify systemd WorkingDirectory 2021-10-31 13:37:00 +01:00
github-actions[bot]
e4e8cd182e
Merge master into staging-next 2021-10-31 06:01:06 +00:00
Evils
b6ff276fb1 nixos/rasdaemon: init module 2021-10-30 22:22:12 -04:00
Jules Aguillon
b69d9d3c23 xmonad: Don't add ghc to the closure when 'config' is set
When 'services.xserver.windowManager.xmonad.config' is not null, the
restart feature won't work by default and is not desirable unless
specific care is made, as explained by the documentation.

I think it's reasonable to not include the haskell dependencies in the
environment by default. That reduces the size of my system by 2GB.
2021-10-30 21:32:58 +02:00
github-actions[bot]
0fa76ebdca
Merge master into staging-next 2021-10-30 18:00:59 +00:00
Silvan Mosberger
f1447fdaa8
nixos/invidious: init
Co-authored-by: Simon Bruder <simon@sbruder.de>
2021-10-30 16:33:38 +02:00
Malte Brandy
868157b9d6
nixos/nextcloud: Adapt cron frequency to changed upstream requirement
https://docs.nextcloud.com/server/22/admin_manual/configuration_server/background_jobs_configuration.html

Says that the job should be run every 5 minutes.
Nextcloud shows a warning in the settings screen whenever the last run
was more than 10 minutes ago.
2021-10-30 14:22:22 +02:00
github-actions[bot]
846f94d984
Merge master into staging-next 2021-10-30 12:01:09 +00:00
Mario Rodas
e49cd51ebc
Merge pull request #142672 from truh/update/plantuml-server_1.2021.12
plantuml-server: 1.2021.7 -> 1.2021.12
2021-10-30 04:44:16 -05:00
Felix Tenley
f880f906b9
nixos/ddclient: replace password with passwordFile option 2021-10-30 10:26:24 +02:00
github-actions[bot]
227e1c837c
Merge master into staging-next 2021-10-30 06:01:25 +00:00
happysalada
a8f9539d01 lemmy: systemd postgresql setup service cleanup 2021-10-30 09:16:09 +09:00
github-actions[bot]
2d204edb98
Merge master into staging-next 2021-10-30 00:01:30 +00:00
Jasper Woudenberg
810b3b5fcd nixos/yubikey-agent add maintainer jwoudenberg 2021-10-29 23:13:50 +02:00
Jasper Woudenberg
4ceb33b982 nixos/yubikey-agent: start enabled agent on boot
This adds a `wantedBy` clause to the user systemd service for
yubikey-agent, to ensure an enabled agent is started on boot. This
brings the behavior inline with existing documentation.

If the user has selected a graphical pinentry program, then we need to
wait for the graphical environment to exist before starting the
yubikey-agent. I've found that if we start the agent earlier it will
fail when we perform an ssh command later.
2021-10-29 23:13:46 +02:00
Maximilian Bosch
a1eaddd5c5
Merge pull request #139472 from Flakebi/signald
signald: 0.13.1 -> 0.14.1 and add service
2021-10-29 23:09:43 +02:00
Flakebi
cb5186feea
signald: add module
Based on https://gitlab.com/coffeetables/myrdd/-/blob/master/modules/signald.nix
2021-10-29 22:48:10 +02:00
Jan Tojnar
046ec82346 power-profiles-daemon: 0.8.1 → 0.10.1
https://gitlab.freedesktop.org/hadess/power-profiles-daemon/-/blob/0.10.1/NEWS

Requires installing to system for polkit policy.
2021-10-29 09:17:27 +02:00
github-actions[bot]
e7fbce41fc
Merge master into staging-next 2021-10-29 06:01:10 +00:00
Bobby Rong
6629b16e78
nixos/pantheon: install elementary-tasks by default 2021-10-29 09:10:40 +08:00
Martin Weinelt
da1f248229 Merge remote-tracking branch 'origin/master' into staging-next 2021-10-28 19:51:45 +02:00
Guillaume Girol
e28414b63d python3.pkgs.ihatemoney: 4.2 -> 5.1.1 2021-10-28 18:37:11 +02:00
Bobby Rong
d49d9a24b7
nixos/pantheon: mention latest appcenter changes in manual 2021-10-29 00:18:25 +08:00
Bobby Rong
ea8d53ed16
nixos/pantheon: use Inter as default sans-serif font 2021-10-28 18:26:52 +08:00
pennae
0343045a92 nixos/mosquitto: add module documentation 2021-10-28 08:44:32 +02:00
github-actions[bot]
783f3c33e5
Merge master into staging-next 2021-10-28 06:01:14 +00:00
Bobby Rong
8e440f1776
Merge pull request #142810 from bobby285271/pantheon
Pantheon updates 2021-10-25, 2021-10-26
2021-10-28 08:16:34 +08:00
github-actions[bot]
a1e570b43e
Merge master into staging-next 2021-10-28 00:01:36 +00:00
Guillaume Girol
6faa5581fd
Merge pull request #113198 from Izorkin/update-mastodon-mail
nixos/mastodon: fix send e-mail notifications
2021-10-27 18:20:18 +00:00
github-actions[bot]
d33a58f89d
Merge master into staging-next 2021-10-27 12:01:20 +00:00
Maximilian Bosch
55e25f7840
Merge pull request #142800 from Ma27/drop-nextcloud-20
nextcloud20: drop
2021-10-27 13:11:06 +02:00
Maximilian Bosch
04fdff2517
nixos/nextcloud: drop obsolete assertion 2021-10-27 12:54:04 +02:00
github-actions[bot]
23c6bab47e
Merge master into staging-next 2021-10-27 00:01:25 +00:00
eyjhb
75d64a336b nixos/restic: rename s3CredentialsFile to environmentFile
This is done as the s3CredentialsFile specifies the environmentFile
for the systemd service, which can be used for more than just s3.

Co-authored-by: Cole Helbling <cole.e.helbling@outlook.com>
2021-10-26 14:01:32 -07:00
Wei Tang
7c7cd951c5
nixos/step-ca: fix comment typo 2021-10-26 20:47:30 +02:00
github-actions[bot]
9a27efeb34
Merge master into staging-next 2021-10-26 18:01:19 +00:00
Sandro
89a27a2e6f
Merge pull request #119719 from greizgh/seafile 2021-10-26 19:07:00 +02:00
github-actions[bot]
6bb6e64046
Merge master into staging-next 2021-10-26 12:01:25 +00:00
Izorkin
1d948428c8
nixos/mastodon: fix send e-mail notifications 2021-10-26 10:59:39 +03:00
Vladimír Čunát
1f89685452
Merge #142864: nixos/gnome: fix an alias reference 2021-10-26 08:35:22 +02:00
github-actions[bot]
7e0da80ec9
Merge master into staging-next 2021-10-26 06:01:02 +00:00
Cleeyv
29f4cb4b0a nixos/jibri: add nixos test 2021-10-25 20:46:24 -04:00
Cleeyv
917c5fae70 nixos/jibri: fix & docs for enable not via meet 2021-10-25 20:46:24 -04:00
Cleeyv
57bd54d28b nixos/jibri: add finalize script option 2021-10-25 20:46:24 -04:00
Cleeyv
3473cff4b0 nixos/jibri: init at 8.0-93-g51fe7a2
This module was written by @puckipedia for nixcon-video-infra 2020.
Minor changes made by @cleeyv for compat with existing jibri package.
Co-authored-by: Puck Meerburg <puck@puck.moe>
2021-10-25 20:46:24 -04:00
Cleeyv
ff8ed90033 nixos/jitsi-meet: add jibri.enable
This option enables a jibri service on the same host that is running
jitsi-meet. It was written, along with the jibri module, by @puckipedia
for nixcon-video-infra 2020.
Co-authored-by: Puck Meerburg <puck@puck.moe>
2021-10-25 20:46:24 -04:00
Bobby Rong
4780b6df1a
pantheon.elementary-settings-daemon: 1.0.0 -> 1.1.0 2021-10-26 08:42:26 +08:00
Bobby Rong
e26214dd6c
xdg-desktop-portal-pantheon: init at 1.0.0 2021-10-26 08:35:22 +08:00
Jan Solanti
b3bcf51c05 pipewire: 0.3.38 -> 0.3.39
Split pipewire-media-session into its own package
2021-10-25 20:34:40 +03:00
Jan Solanti
b65f74fd98 pipewire-media-session: init at 0.4.0 2021-10-25 20:34:40 +03:00
Jonathan Ringer
569633e41c
nixos/gnome: remove alias reference to source-sans-pro 2021-10-25 08:28:23 -07:00
github-actions[bot]
0336295c41
Merge master into staging-next 2021-10-25 12:01:31 +00:00
Vladimír Čunát
b0d5803400
Merge #142786: plasma5: fix eval without aliases 2021-10-25 11:50:44 +02:00
illustris
91bb2b7016 nixos/hadoop: fix yarn, add more service configuration options 2021-10-25 16:30:19 +09:00
github-actions[bot]
0386c26190
Merge master into staging-next 2021-10-25 06:01:29 +00:00
Izorkin
4c092350ed nixos/peertube: init service
Co-authored-by: Moritz Hedtke <Moritz.Hedtke@t-online.de>
Co-authored-by: Steven Roose <steven@stevenroose.org>
Co-authored-by: Matthias Beyer <mail@beyermatthias.de>
Co-authored-by: Ismaël Bouya <ismael.bouya@normalesup.org>
2021-10-25 13:12:30 +09:00
Maximilian Bosch
e1e15974f8
nextcloud20: drop
The version 20 of Nextcloud will be EOLed by the end of this month[1].

Since the recommended default (that didn't raise an eval-warning) on
21.05 was Nextcloud 21, this shouldn't affect too many people.

In order to ensure that nobody does a (not working) upgrade across
several major-versions of Nextcloud, I replaced the derivation of
`nextcloud20` with a `throw` that provides instructions how to proceed.

The only case that I consider "risky" is a setup upgraded from 21.05 (or
older) with a `system.stateVersion` <21.11 and with
`services.nextcloud.package` not explicitly declared in its config. To
avoid that, I also left the `else-if` for `stateVersion < 21.03` which
now sets `services.nextcloud.package` to `pkgs.nextcloud20` and thus
leads to an eval-error. This condition can be removed
as soon as 21.05 is EOL because then it's safe to assume that only
21.11. is used as stable release where no Nextcloud <=20 exists that can
lead to such an issue.

It can't be removed earlier because then every `system.stateVersion <
21.11` would lead to `nextcloud21` which is a problem if `nextcloud19`
is still used.

[1] https://docs.nextcloud.com/server/20/admin_manual/release_schedule.html
2021-10-25 01:34:47 +02:00
ajs124
76a77c0bfb plasma5: fix evaluation with aliases disabled and thunderbolt enabled 2021-10-24 23:10:52 +02:00
github-actions[bot]
ceea0e5f2a
Merge master into staging-next 2021-10-24 18:00:57 +00:00
Bruno Bigras
69b01e3a22
Merge pull request #141408 from bbigras/openresty-lua
nixos/nginx: disable MemoryDenyWriteExecute for pkgs.openresty
2021-10-24 17:39:27 +00:00
pennae
d09952fea8 nixos/mosquitto: restore passwordless system feature
during the rewrite the checkPasswords=false feature of the old module
was lost. restore it, and with it systems that allow any client to use
any username.
2021-10-24 19:38:51 +02:00
github-actions[bot]
e84dc8ac6b
Merge master into staging-next 2021-10-24 12:01:27 +00:00
Sebastian
dc0769c63c
nixos/bookstack: fix error message output (#142729) 2021-10-24 18:13:54 +08:00
github-actions[bot]
50a5d0f17c
Merge master into staging-next 2021-10-23 18:01:15 +00:00
Jakob Klepp
5d5a5fce90 nixos/plantuml-server: use graphviz instead of graphviz_2_32
The plantuml package made this change as well

e785e1b24b
2021-10-23 17:49:05 +02:00
Alexandre Iooss
8d559672be
nixos/grafana: fix systemd unit
Remove MemoryDenyWriteExecute hardening as it breaks image rendering
plugin. Add CAP_NET_BIND_SERVICE to bind to low ports when needed.
Remove PrivateUsers and ProcSubset as upstream choose to remove it.

Upstream changes: <https://github.com/grafana/grafana/pull/40219>,
<https://github.com/grafana/grafana/pull/40178>,
<https://github.com/grafana/grafana/pull/40339> and
<https://github.com/grafana/grafana/pull/40815>.
2021-10-23 14:33:31 +02:00
Greizgh
7b7f3dfbe4
nixos/seafile: init service 2021-10-23 11:39:08 +02:00
github-actions[bot]
59156778b4
Merge master into staging-next 2021-10-23 06:01:03 +00:00
Artturi
dfad31d753
Merge pull request #142273 from ju1m/display-managers 2021-10-23 03:58:21 +03:00
github-actions[bot]
421a9e648e
Merge master into staging-next 2021-10-23 00:01:46 +00:00
pennae
1fa5e13f30 nixos/borgbackup: allow dump scripts as stdin inputs
borg is able to process stdin during backups when backing up the special path -,
which can be very useful for backing up things that can be streamed (eg database
dumps, zfs snapshots).
2021-10-22 16:31:50 -04:00
pennae
56d0b5cd6a nixos/mosquitto: rewrite the module
mosquitto needs a lot of attention concerning its config because it doesn't
parse it very well, often ignoring trailing parts of lines, duplicated config
keys, or just looking back way further in the file to associated config keys
with previously defined items than might be expected.

this replaces the mosquitto module completely. we now have a hierarchical config
that flattens out to the mosquitto format (hopefully) without introducing spooky
action at a distance.
2021-10-22 16:06:55 -04:00
Jonathan Ringer
fc25d94010
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/python-modules/jupyter-client/default.nix
	pkgs/development/python-modules/jupyterlab-git/default.nix
2021-10-22 09:33:07 -07:00
davidak
6adc2ce335
Merge pull request #142455 from bobby285271/fileroller
pantheon.file-roller: init
2021-10-22 16:21:45 +02:00
Peter Hoeg
d2ed9e4f96 nixos/plasma5: add thunderbolt package if configured 2021-10-22 10:46:16 +08:00
Peter Hoeg
f1a82a2182 nixos/plasma5: make running with systemd configurable 2021-10-22 10:46:16 +08:00
Bobby Rong
73487dee85
nixos/pantheon: prefer pantheon.file-roller 2021-10-22 10:26:27 +08:00
Sandro
4663d3f99f
Merge pull request #142360 from romildo/upd.lumina 2021-10-21 23:45:29 +02:00
Jakub Sokołowski
72d16ac9b5 transmission: add extraFlags configuration option
Makes service more customizeable and makes debuggingin easier through
the use of flags like `--log-debug` or `--dump-settings`.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-10-21 23:36:06 +02:00
Sandro
5d74ff4206
Merge pull request #141443 from jtojnar/blackfire-2 2021-10-21 20:22:09 +02:00
Jan Tojnar
25450f2b29 blackfire: 1.49.4 → 2.5.1
https://blackfire.io/docs/up-and-running/agent-upgrade
2021-10-21 17:40:19 +02:00
Ninjatrappeur
670c69cb9b
Merge pull request #96655 from ju1m/transmission 2021-10-21 12:15:05 +02:00
github-actions[bot]
872437b0f0
Merge master into staging-next 2021-10-21 00:01:47 +00:00
Martin Weinelt
5adcd46bc0
Merge pull request #142109 from mweinelt/prometheus-node-exporter
nixos/prometheus: add hardening exceptions to node-exporter
2021-10-21 01:15:35 +02:00
Maximilian Bosch
3d1350d3f9
Merge pull request #142148 from Ma27/bump-roundcube
roundcube: 1.4.11 -> 1.5.0
2021-10-20 23:47:57 +02:00
José Romildo
247f3876d5 nixos.lumina: give special privilegies to lumina-checkpass 2021-10-20 10:43:25 -03:00
Julien Moutinho
808ad2afe1 nixos/display-managers: fix cross-compiling 2021-10-20 02:29:05 +02:00
Vladimír Čunát
01df3cd7dd
Merge branch 'master' into staging-next 2021-10-19 19:24:43 +02:00
Maciej Krüger
b11e0a853a
Merge pull request #142084 from mkg20001/hedge 2021-10-19 15:23:45 +02:00
Michael Hoang
43d2eefea6 nixos/samba: Add openFirewall option 2021-10-19 19:11:02 +11:00
Maximilian Bosch
4f88fb9331
roundcube: 1.4.11 -> 1.5.0
ChangeLog: https://github.com/roundcube/roundcubemail/releases/tag/1.5.0
2021-10-18 23:27:00 +02:00
Sandro
b775c1f58d
Merge pull request #142108 from Ma27/pi-ldap-proxy-py3 2021-10-18 22:06:22 +02:00
Maximilian Bosch
47fc40d5ab
pythonPackages.privacyidea-ldap-proxy: 0.6.1 -> 0.6.2, switch to python3 2021-10-18 21:14:35 +02:00
Pascal Wittmann
89a0ec8f3c
Merge pull request #142028 from NixOS/bugfix/subsonic-needs-jdk8
nixos/subsonic: use jre8
2021-10-18 20:44:41 +02:00
github-actions[bot]
b0a41194a1
Merge master into staging-next 2021-10-18 18:01:14 +00:00
Julien Moutinho
90877765d3 nixos/transmission: remove SystemCallErrorNumber= to raise errors 2021-10-18 19:35:48 +02:00
Julien Moutinho
aaf21b9636 nixos/transmission: remove InaccessiblePaths= to enable reload, fixes #135695 2021-10-18 19:35:46 +02:00
Julien Moutinho
63e87892ff nixos/transmission: use freeformType on settings 2021-10-18 19:35:41 +02:00
Martin Weinelt
9b46e3084b
nixos/prometheus: add hardening exceptions to node-exporter
Conditionally grants access for the logind, wifi and network_route
collectors.
2021-10-18 19:21:30 +02:00
Sandro
50171477bc
Merge pull request #139128 from HexF/patch-1 2021-10-18 16:15:02 +02:00
Maciej Krüger
cb7459c286
nixos/hedgedoc: add more options for oauth2 2021-10-18 14:20:51 +02:00
github-actions[bot]
8863d12326
Merge master into staging-next 2021-10-18 12:01:18 +00:00
happysalada
af1ac44440 jitsi: add caddy reverse proxy option 2021-10-18 19:11:32 +09:00
Pascal Wittmann
14c5fe8c1b
nixos/subsonic: use jre8
The latest version of Subsonic (6.1.6) does not suport Java SE 9 or later
because it depends on the JAXB APIs. Those are considered to be Java EE
APIs are no longer contained on the default classpath in Java SE 9 and
are completely removed in Java SE 11..
2021-10-17 22:55:05 +02:00
github-actions[bot]
0f92179807
Merge master into staging-next 2021-10-17 18:01:07 +00:00
Bobby Rong
cae293443b
nixos/pantheon: prefer pantheon.evince 2021-10-17 11:42:22 +08:00
Ryan Burns
3220fbe696 Merge branch 'master' into staging-next 2021-10-16 16:07:38 -07:00
Artturi
94da5bc7ad
Merge pull request #141169 from ck3d/fix-cross-nixos-influxdb 2021-10-16 07:03:13 +03:00
Poscat
afd62c2773
nixos/dovecot: use the count backend for quota plugin 2021-10-16 09:52:18 +08:00
Alexandre Macabies
7fb3edb077 nixos/prometheus-rtl_433-exporter: fix systemd hardening
9fea6d4c85 broke rtl_433-exporter by
introducing several hardening options which do not play well with
rtl_433 requiring writing to USB. More precisely, rtl_433 requires
(a) AF_NETLINK to configure the radio; (b) access to the USB device,
but PrivateDevices=true hides them; (c) rw access to the USB device,
but DeviceAllow= block-lists everything.

This commit was tested on real hardware with a standard NixOS setup.
2021-10-16 01:57:50 +02:00
Martin Weinelt
a415d5dd2e Merge remote-tracking branch 'origin/master' into staging-next 2021-10-15 23:10:08 +02:00
pennae
62813808ff nixos/unifi, unifi: add pennae to maintainers 2021-10-15 17:14:33 +02:00
Jan Tojnar
db480ed901
Merge pull request #141770 from lorenz/fix-pulseaudio-warning
nixos/gdm: remove obsolete pulseaudio module
2021-10-15 16:54:41 +02:00
Lorenz Brun
a3d711f4e1 nixos/gdm: remove obsolete pulseaudio module
PulseAudio 14.0 has deprecated that module and moved its functionality into
the core, it does nothing other than
printing an error at every start.
2021-10-15 15:47:31 +02:00
Artturi
3dac8b26d3
Merge pull request #141709 from rembo10/sickbeard-service-fix 2021-10-15 08:45:22 +03:00
rembo10
e8d0afd8d1 nixos/sickbeard: fix the startup command 2021-10-15 08:00:36 +03:00
John Ericson
f2a619bcca
Merge pull request #118960 from kquick/assert_buildmachine_system
nixos/nix-daemon: assert system or systems for buildMachines.
2021-10-14 23:51:58 -04:00
wackbyte
0242265e55 nixos/plasma5: add useQtScaling option
closes #105943
2021-10-15 11:50:17 +08:00
Pasquale
763a0014c8 nixos/plasma: remove dead code 2021-10-15 09:20:13 +08:00
Pasquale
4832352d02 nixos/plasma: use upstream xsession/wayland files 2021-10-15 09:20:13 +08:00
Martin Weinelt
adf4e67dd4 Merge remote-tracking branch 'origin/staging' into staging-next 2021-10-15 01:34:36 +02:00
pennae
300226261f nixos/unifi: fix unifi ExecStop= being incompatible with systemd
unifi does not shut down properly when stopped via systemd (it always exits with
SIGTERM exit status) because systemd wants stop commands to not exit before the
main command is gone and unifi does not comply. the easiest way around this is
to have systemd send an ignored signal after the stop command has exited.

unifi may still throw exceptions during shutdown, but it *does* exit cleanly as
far as systemd is concerned now.
2021-10-14 13:26:14 +02:00
Matthias Treydte
72fbd63c5c nixos/prometheus: fix node exporter timex collector
The timex collector (enabled by default) needs the
adjtimex syscall, which was disabled by
9fea6d4c85.

So allow it unless the timex collector is disabled.
2021-10-14 11:26:29 +02:00
Matthias Treydte
ae7ce180dd nixos/prometheus: fix node exporter systemd collector
The systemd collector needs AF_UNIX to talk to
/var/run/dbus/system_bus_socket, which was broken
with 9fea6d4c85.

This commit allows AF_UNIX when needed.
2021-10-14 11:26:29 +02:00
Graham Christensen
a997f198a3
Merge pull request #139833 from flox/multipath
nixos/multipath: add module for multipath-tools package
2021-10-13 09:58:25 -04:00
Maximilian Bosch
eb3a3725e4
Merge pull request #119638 from beardhatcode/feat/nextcloud-packages
nextcloud: add option to set datadir and extensions
2021-10-13 14:26:41 +02:00
github-actions[bot]
e69f5a133f
Merge staging-next into staging 2021-10-13 00:02:00 +00:00
Bruno Bigras
2ceae2db61 nixos/nginx: disable MemoryDenyWriteExecute for pkgs.openresty
fix #140655

Co-authored-by: Yurii Izorkin <izorkin@elven.pw>
2021-10-12 16:28:53 -04:00
Sandro
3cf6c7ba7c
Merge pull request #141258 from waldheinz/broken-host-keys 2021-10-12 20:42:55 +02:00
github-actions[bot]
0cb186d33d
Merge staging-next into staging 2021-10-12 18:01:50 +00:00
Arseniy Seroka
cd53bf7acc
Merge pull request #140076 from jraygauthier/jrg/96633_fix-teamviewer-client-server-issue
teamviewer: fix #96633, #44307 and #97148 + 15.15.5 -> 15.18.5 -> 15.22.3
2021-10-12 20:58:56 +03:00
Matthias Treydte
97e61a071d nixos/ssh: take care not to accept empty host key files
In case of a power loss shortly after first boot,
the host keys gernerated by ssh-keygen could exist
in the file system but have zero size, preventing
sshd from starting up.

This commit changes the behaviour to generate host
keys if the file either does not exist or has zero
size, fixing the problem on the next boot.

Thanks to @SuperSandro2000 for figuring this out.
2021-10-12 12:25:38 +02:00
github-actions[bot]
5065827878
Merge staging-next into staging 2021-10-12 00:02:05 +00:00
Jan Tojnar
e859225ee5
Merge pull request #139144 from NixOS/gnome-41
GNOME: 40 → 41
2021-10-11 22:59:01 +02:00
github-actions[bot]
d21a1c3fbc
Merge staging-next into staging 2021-10-11 12:02:07 +00:00
Bobby Rong
dd596307b7
Merge pull request #140820 from VergeDX/kippo-remove
kippo: cleanup the corresponding broken module.
2021-10-11 17:19:11 +08:00
github-actions[bot]
03d816e015
Merge staging-next into staging 2021-10-11 00:02:14 +00:00
David Reaver
3d79c9250a nixos/prowlarr: init 2021-10-10 14:05:33 -07:00
Christian Kögler
b154b6f7d8 nixos/influxdb: Fix cross compilation for config.toml 2021-10-10 10:34:55 +02:00
github-actions[bot]
1b2b1c3d56
Merge staging-next into staging 2021-10-10 00:02:14 +00:00
Maximilian Bosch
3498c5ff3c
nixos/nextcloud: build manual without warnings 2021-10-09 22:45:39 +02:00
Maximilian Bosch
1ee008fcb5
nixos/nextcloud: fixup #119638
A few minor changes to get #119638 - nextcloud: add option to set
datadir and extensions - ready:

* `cfg.datadir` now gets `cfg.home` as default to make the type
  non-nullable.
* Enhanced the `basic` test to check the behavior with a custom datadir
  that's not `/var/lib/nextcloud`.
* Fix hashes for apps in option example.
* Simplify if/else for `appstoreenable` in override config.
* Simplify a few `mapAttrsToList`-expressions in
  `nextcloud-setup.service`.
2021-10-09 22:45:31 +02:00
Jan Tojnar
80ea989ac9 xdg-desktop-portal-gtk: 1.8.0 → 1.10.0
https://github.com/flatpak/xdg-desktop-portal-gtk/releases/tag/1.10.0
2021-10-09 21:35:57 +02:00
Jan Tojnar
d106b07997 nixos/gnome: use GNOME xdg portal 2021-10-09 21:35:56 +02:00
Maximilian Bosch
7856e40da6
nixos/nextcloud: fix wording in manual 2021-10-09 20:52:52 +02:00
Robbert Gurdeep Singh
1852212872
nixos/nextcloud: fail systemd-service if apps don't activate 2021-10-09 20:33:17 +02:00
Robbert Gurdeep Singh
18b18929d7
nixos/nextcloud: add settings to manage nextcloud apps
Note the appstoreEnable which will prevent nextcloud form updating
nix-managed apps. This is needed because nextcloud will store an other
version of the app in /var/lib/nextcloud/store-apps and it will
no longer be manageable.
2021-10-09 20:33:16 +02:00
Robbert Gurdeep Singh
7ba02a7b1e
nixos/nextcloud: add services.nextcloud.datadir setting
This option can be used to set an alternative storage location for
files and app metadata.
2021-10-09 20:33:13 +02:00
github-actions[bot]
81e9eafb15
Merge staging-next into staging 2021-10-09 18:01:47 +00:00
Maximilian Bosch
80404a23c9
Merge pull request #140775 from Ma27/nextcloud-docs-and-secrets
nixos/nextcloud: manual improvements & pass secrets via the environment to `nextcloud-occ`
2021-10-09 20:01:15 +02:00
Maximilian Bosch
cbfe4a42f6
Merge pull request #140979 from Ma27/matrix-workers
nixos/matrix-synapse: minor improvements to implement worker-support
2021-10-09 15:24:41 +02:00
github-actions[bot]
73444b1e90
Merge staging-next into staging 2021-10-09 12:01:44 +00:00
Michele Guerini Rocco
46b2a2594a
Merge pull request #140779 from legendofmiracles/wol
nixos/wakeonlan: switch to systemd.link and to nixos/networking
2021-10-09 10:34:26 +02:00
github-actions[bot]
605eb4e1e0
Merge staging-next into staging 2021-10-08 18:01:58 +00:00
Maximilian Bosch
f57bed8832
nixos/nextcloud: drop adminpass/dbpass options entirely 2021-10-08 18:30:57 +02:00
ajs124
ae53e57a7a
Merge pull request #133141 from helsinki-systems/feat/jitsi-meet-websocket
nixos/jitsi-meet: add support for xmpp-websocket
2021-10-08 16:51:00 +02:00
Michael Brantley
121cfd1998 nixos/multipath: add multipath module
The multipath-tools package had existed in Nixpkgs for some time but
without a nixos module to configure/drive it. This module provides
attributes to drive the majority of multipath configuration options
and is being successfully used in stage-1 and stage-2 boot to mount
/nix from a multipath-serviced iSCSI volume.

Credit goes to @grahamc for early contributions to the module and
authoring the NixOS module test.
2021-10-08 09:47:38 -04:00
Graham Christensen
a85dcd9ca3 iscsi root initiator: allow specifying arbitrary iscsi commands too 2021-10-08 09:47:01 -04:00
Maximilian Bosch
b0ab15b0a1
nixos/matrix-synapse: expose rendered config file as readOnly option 2021-10-08 14:51:28 +02:00
github-actions[bot]
5da3c99f54
Merge staging-next into staging 2021-10-08 12:02:03 +00:00
Emil Karlson
d77c75a98e nixos/nix-daemon: Clarify daemonNiceLevel
The option doesn not currently do what some people expect,
clarify the limitations in documentation.
2021-10-08 13:59:35 +03:00
Robert Hensing
4bed9d16cc
Merge pull request #139325 from illdefined/nix-daemon-nice-level
modules/nix-daemon: Explain nice level limitations
2021-10-08 12:12:36 +02:00
Vanilla
75ec332e6a
kippo: cleanup the corresponding broken module. 2021-10-08 14:10:49 +08:00
github-actions[bot]
a9e549579c
Merge staging-next into staging 2021-10-08 06:01:53 +00:00
Bobby Rong
6a1c868a9d
Merge pull request #133700 from poscat0x04/v2ray-add-package-option
nixos/v2ray: add an option for specifying v2ray package used in the systemd service
2021-10-08 12:38:15 +08:00
Poscat
e4dd32f67e
nixos/v2ray: add an option for specifying v2ray package used in the systemd service 2021-10-08 12:02:10 +08:00
github-actions[bot]
b4569f7a81
Merge staging-next into staging 2021-10-08 00:02:10 +00:00
Lassulus
36187264df
Merge pull request #140799 from helsinki-systems/feat/varnish-optional-configcheck
nixos/varnish: add enableConfigCheck
2021-10-08 00:12:11 +02:00
legendofmiracles
31f04fec3c
nixos/wakeonlan: remove 2021-10-07 14:15:26 -06:00
github-actions[bot]
1925039a74
Merge staging-next into staging 2021-10-07 12:01:47 +00:00
Timo Kaufmann
043bc8a984
Merge pull request #139502 from Vodurden/nixos-unstable
Support virtual Nintendo Switch Pro controllers in joycond
2021-10-07 13:54:30 +02:00
Kevin Cox
709b594db4
Merge pull request #137438 from kevincox/mautrix-facebook-module
nixos.mautrix-facebook: init module
2021-10-07 06:36:52 -04:00
Alexandre Iooss
9fea6d4c85 nixos/prometheus: systemd unit hardening of exporters 2021-10-07 10:19:55 +02:00
github-actions[bot]
ae9f8ec1b6
Merge staging-next into staging 2021-10-07 00:02:11 +00:00
John Ericson
cc3f2432d0 nixos/nix-daemon: Add enable option
Don't worry, it's is true by default. But I think this is important to
have because NixOS indeed shouldn't need Nix at run time when the
installation is not being modified, and now we can verify that.

NixOS images that cannot "self-modify" are a legitamate
use-case that this supports more minimally. One should be able to e.g. do a
sshfs mount and use `nixos-install` to modify them remotely, or just
discard them and build fresh ones if they are run VMs or something.

The next step would be to make generations optional, allowing just
baking `/etc` and friends rather than using activation scripts. But
that's more involved so I'm leaving it out.
2021-10-06 16:43:48 -04:00
ajs124
e3ac5e1502 nixos/varnish: add enableConfigCheck 2021-10-06 22:05:46 +02:00
github-actions[bot]
3edaee3ccf
Merge staging-next into staging 2021-10-06 18:01:58 +00:00
Maximilian Bosch
9f37d6aee0
nixos/nextcloud: put secrets into the environment of nextcloud-setup.service
The `$(</path/to/file)`-expansion appears verbatim in the cmdline of
`nextcloud-occ` which means that an unprivileged user could find
sensitive values (i.e. admin password & database password) by monitoring
`/proc/<pid>/cmdline`.

Now, these values don't appear in a command line anymore, but will be
passed as environment variables to `nextcloud-occ`.
2021-10-06 18:18:18 +02:00
Maximilian Bosch
fb40526961
nixos/nextcloud: minor manual improvements
* Linkify documentation about objectstore-feature rather than only
  mentioning it.
* Use `<literal>` where it makes sense.
* Remove unnecessary `Whether to load` from `enableImagemagick` because
  `mkEnableOption` already prepends `Whether to enable` to the given
  description.
2021-10-06 17:33:31 +02:00
Bill Ewanick
cc3b147ed1 nixos/lemmy: init
Co-authored-by: Raphael Megzari <raphael@megzari.com>
2021-10-06 21:02:51 +09:00
github-actions[bot]
ffeeefedb8
Merge staging-next into staging 2021-10-06 12:02:08 +00:00
Michele Guerini Rocco
66b6bd0072
Merge pull request #139765 from eyJhb/bitlbee-user-group
nixos/bitlbee: added bitlbee to bitlbee group
2021-10-06 08:57:33 +02:00
Michele Guerini Rocco
e99b3f242c
Merge pull request #140359 from rnhmjoj/setgid-nobody
nixos: make setgid wrappers root-owned
2021-10-06 08:36:35 +02:00