Commit Graph

2699 Commits

Author SHA1 Message Date
Jenny
61aa4ba718
nixos/open-webui: update doc link url (#354446) 2024-11-25 10:31:04 +01:00
Leona Maroni
1044b2ccdb
nixos/paperless: add environmentFile option (#350944) 2024-11-25 08:51:01 +01:00
Franz Pletz
d4b1fcdbe6
nixos/redlib: format, add maintainer, add cfg.settings, use upstream systemd unit (#345715) 2024-11-24 17:13:16 +01:00
Kaleo
5991ed35da nixos/open-webui: update doc link url 2024-11-24 14:30:42 +08:00
LorenzBischof
c5d7865d83
nixos/etesync-dav: update default apiurl 2024-11-23 11:41:32 +01:00
Guanran Wang
4a0893c186
fixup! nixos/redlib: use upstream systemd service file 2024-11-22 15:24:46 +08:00
tomberek
a42bdea0a7
rfmakecloud: 0.0.18 -> 0.0.21 (#356963) 2024-11-22 00:35:19 -05:00
Aleksana
9612e216ce
nixos/tabby: fix typo (#355223) 2024-11-21 21:01:54 +08:00
Dominique Martinet
64a13b7609 nixos/rmfakecloud: remove outdated note about webui not included
the webui has been built by default for a while
2024-11-18 22:59:41 +09:00
Dominique Martinet
b15ed174fa rmfakecloud: run nixfmt 2024-11-18 22:59:40 +09:00
Sefa Eyeoglu
1d95cb5fa7
nixos/duckdns: init module (#294489) 2024-11-14 17:29:11 +01:00
Sandro
6bfde7268f
evremap: init at 0-unstable-2024-06-17, nixos/evremap: init module (#352720) 2024-11-12 18:41:51 +01:00
Ughur Alakbarov
f21d3a0f07 nixos/tabby: fix typo 2024-11-11 16:26:57 +01:00
Thiago Kenji Okada
44bbe5ddad
nixos/{boinc,guix}: Use exec to start the payload binary of the service (#297526) 2024-11-10 17:35:24 +00:00
Brendan Taylor
d581c42d5d nixos/paperless: add secretsFile option 2024-11-10 08:21:07 -07:00
Wolfgang
9563f469c1 nixos/duckdns: init module 2024-11-09 22:27:14 +01:00
Jozef Hollý
be97874351
Fix: use lib.mkPackageOption 2024-11-09 13:09:08 +01:00
Jozef Hollý
ba83a0dba0
Merge branch 'master' into patch-1 2024-11-09 13:07:47 +01:00
Jozef Hollý
a96dce89d0
PR feedback: Replace pkg variable, move package statement 2024-11-09 13:06:56 +01:00
Sleeping-Donut
df20742283
ombi: allow overriding package in module (#345814)
* ombi: allow overriding package in module

* nixos/ombi: replace explicit bin path with getExe function

Co-authored-by: Anderson Torres <torres.anderson.85@protonmail.com>

---------

Co-authored-by: Anderson Torres <torres.anderson.85@protonmail.com>
2024-11-09 12:05:54 +01:00
Leah Amelia Chen
41e907f884
nixos/evremap: init module 2024-11-08 09:31:27 +01:00
Franz Pletz
0fc41ad977
treewide: Remove ineffective capability grants. (#333533) 2024-11-06 08:12:51 +01:00
Weijia Wang
acf3de8d62
nixos/guix: add declarative substituters option (#353518) 2024-11-04 20:43:41 +01:00
Gabriel Arazas
7095e0f8c1 nixos/guix: add declarative substituters option 2024-11-03 15:12:12 -06:00
Sandro
f5c76ad2b5
nixos/renovate: set service type to simple (#334557) 2024-11-03 16:52:53 +01:00
Felix Bühler
031b2f0a77
nixos/octoprint: fix ipv6 host (#351721) 2024-10-31 21:37:02 +01:00
h7x4
c3632dc3aa
nixos/dysnomia: move into services (#351046) 2024-10-29 01:17:12 +01:00
Sefa Eyeoglu
d8d66448d7
nixos/paperless: fix shellcheck findings with enableStrictShellChecks enabled (#349559) 2024-10-28 21:40:52 +01:00
Aleksana
04af29af29
nixos/klipper: fix serial value inheritance (#308661) 2024-10-28 21:14:03 +08:00
Ayman Bagabas
b6b90562f7 calibre-server: add extraFlags and openFirewall options
This allows users to pass extra flags to the calibre-server command and
open the necessary ports in the firewall for the Calibre Server API.
2024-10-28 08:21:01 +01:00
Sefa Eyeoglu
9bc0084df7
nixos/bazarr: set systemd config KillSignal to SIGINT to fix timeout (#334675) 2024-10-27 20:13:25 +01:00
Felix Buehler
a9413c7794 nixos/octoprint: fix ipv6 host 2024-10-27 19:16:24 +01:00
Jacek Galowicz
2eace81769
nixos/anki-sync-server: add setting (#344724) 2024-10-27 11:09:55 +01:00
Sandro Jäckel
8f96ccf1ff
nixos/dysnomia: move into services 2024-10-26 22:01:19 +02:00
Felix Buehler
ca63cb8a24 nixos/bazarr: normalize description 2024-10-24 22:39:43 +02:00
Jack Wilsdon
464e353fcc nixos/klipper: fix serial value inheritance 2024-10-23 22:32:26 +01:00
Shaurya Shubham
a4b68ba2c4 nixos/nix-gc: Update nix.gc.dates description to be more precise 2024-10-23 22:17:49 +11:00
Sandro
70e46c586f
doc/misc/docker-registry: fix extraConfig docs (#349495) 2024-10-22 21:06:38 +02:00
Pablo Andres Dealbera
24be165be3 nixos/bazarr: add 156 as a valid SuccessExitStatus 2024-10-21 12:34:15 -03:00
Sefa Eyeoglu
05b9e0a09f
bazarr: allow overriding package in module (#334521) 2024-10-20 20:45:57 +02:00
Sandro Jäckel
c4a7c0fae5
nixos/paperless: fix shellcheck findings with enableStrictShellChecks enabled 2024-10-18 17:28:03 +02:00
Rasmus Précenth
00e1112f9b
nixos/docker-registry: fix extraConfig docs
Co-authored-by: teutat3s <10206665+teutat3s@users.noreply.github.com>
2024-10-18 11:45:18 +02:00
Maximilian Bosch
875f00ed40
gogs: remove
Upstream development has stalled and several critical vulnerabilities
that weren't addressed within a year[1][2].

Back then it was fair to mark it as insecure, but given nothing has
happened since, it's time to remove it.

[1] https://forgejo.org/2023-11-release-v1-20-5-1/
[2] https://github.com/gogs/gogs/issues/7777
2024-10-12 10:36:06 +02:00
Ayman Bagabas
762a9d42a1
bazarr: allow overriding package in module 2024-10-10 17:23:51 -04:00
Felix Singer
0f599d1e68 nixos/redmine: Apply initial hardening using the systemd unit
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.

In my tests, Redmine only bound to an IPv4 address and Unix socket,
which is why I restricted the address families to these both.

The command `systemd-analyze security redmine.service` reports an
overall exposure level of 2.9 with this patch.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-05 22:13:37 +02:00
Aaron Andersen
913a23b5e2
nixos/redmine: Allow specifying an IP address Redmine should bind to (#345617) 2024-10-04 18:18:45 -04:00
Bjørn Forsman
48908e5b86 nixos: improve systemd slice names
Following
https://www.freedesktop.org/software/systemd/man/latest/systemd.unit.html#Description=,
update slice names to be short, descriptive and capitalized.
2024-10-02 20:24:13 +02:00
Guanran Wang
4e6df6f865
nixos/redlib: use upstream systemd service file 2024-10-01 22:34:38 +08:00
Guanran Wang
672d7efbd5
nixos/redlib: add cfg.settings 2024-10-01 22:31:13 +08:00
Guanran Wang
a2a4c87cab
{,nixos/,nixosTests/}redlib: add Guanran928 as maintainer 2024-10-01 22:10:27 +08:00