Commit Graph

28648 Commits

Author SHA1 Message Date
Sandro Jäckel
7c1b4b22f9
nixos/paperless: convert extraConfig to freeform type
Co-authored-by: Atemu <atemu.main@gmail.com>
2024-01-04 00:04:38 +01:00
Nick Cao
9eeabd33d2
nixos/zram-generator: do not require zram to be a module 2024-01-03 12:08:30 -05:00
K900
497cb80d55
Merge pull request #278490 from K900/sddm-package
nixos/sddm: add package option
2024-01-03 19:48:58 +03:00
Sefa Eyeoglu
4f70c901dc
nixos/vaultwarden: add example value for backupDir
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-01-03 17:37:37 +01:00
Sefa Eyeoglu
80ea6a21fb
nixos/vaultwarden: create backupDir using tmpfiles.d
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-01-03 17:37:35 +01:00
Nick Cao
fa5ad5c4d0
Merge pull request #278501 from hughobrien/invidious-fix
nixos/invidious: Additional fix for user message on 24.05 changes
2024-01-03 11:03:06 -05:00
Maximilian Bosch
cfd8c0ddd8
Merge pull request #275633 from chreekat/b/sshd-config-check
sshd: Use top-level ports in config check when needed
2024-01-03 16:25:08 +01:00
Hugh O'Brien
e51c00fb23
nixos/invidious: Additional fix for user message on 24.05 changes 2024-01-03 10:17:06 -05:00
nicoo
822c0a86bd nixos/pam: Add sshAgentAuth.authorizedKeysFiles option 2024-01-03 14:49:36 +00:00
nicoo
a46ea51ca3 nixos/pam: Rename option enableSSHAgentAuth to sshAgentAuth.enable 2024-01-03 14:49:36 +00:00
K900
06cc32ffc3 nixos/sddm: add package option 2024-01-03 17:20:10 +03:00
Jonas Heinrich
818fdce3d0 nixos/nextcloud: Fix corrent option name 2024-01-03 14:08:21 +01:00
Will Fancher
05706b850a
Merge pull request #273695 from lopsided98/initrd-systemd-lib-firmware
systemd-stage-1: allow non-existent /lib/firmware
2024-01-03 04:30:27 -05:00
Will Fancher
65f0d24178
Merge pull request #278147 from SuperSandro2000/oomd-followup
nixos/oomd: use mkRenamedOptionModule like mentioned in the changelog, add missing section to use slice
2024-01-03 01:09:47 -05:00
Sandro Jäckel
27468aae96
nixos/oomd: add missing section to use slice 2024-01-03 02:45:38 +01:00
Weijia Wang
3526f2ffec
Merge pull request #274192 from foo-dogsquared/nixos-guix-add-guix-home-support
nixos/guix: add Guix home support
2024-01-03 01:28:11 +01:00
Mario Rodas
7f0a64976d
Merge pull request #270286 from ajs124/ruby_ossl11_cleanup
ruby_2_7: remove
2024-01-02 18:37:18 -05:00
Christian Kögler
7caca1b185 nixos/vdr: add option user/group and more admin control
- Add option to set user and group name
- Set users home to runtime directory, to avoid mixing of temporal files
  like caches
- Allow admin to control LIRC service by avoiding LIRC enabling
- Allow admin to set libDir, by removing setting argument config to default
- Add package to environment, to allow easy access for admins to helper
  tools like svdrpsend and vdr -h
- Cleanup Nix code by avoiding with statement
2024-01-02 23:17:46 +01:00
williamvds
da61f0320f
dnsmasq: Add documentation 2024-01-02 22:07:25 +00:00
Nick Cao
f6a028db30
Merge pull request #276808 from SuperSandro2000/portunus-cookie-secure
nixos/portunus: make sure the cookies are only send over https if it …
2024-01-02 16:54:37 -05:00
ajs124
02ad3159b0 ruby_2_7: remove 2024-01-02 15:30:06 +01:00
Bryan Richter
e797aaea0b
sshd: Use top-level ports in config check when needed
Previously, if a listenAddress was specified without a `port`, the check
would fail.
2024-01-02 12:51:39 +02:00
Patrick Steinhardt
f026ea0db0 nixos/nextcloud: disable output buffering
The Nextcloud admin guide says that output buffering must be turned off
or otherwise PHP will return memory-related errors [1]. As the default
value for this PHP setting is 4096 and thus enabled the Nextcloud setup
is thus misconfigured by default. This misconfiguration will be shown in
the "Security & setup warnings" dialog for the administrator.

Fix this misconfiguration by setting "output_buffering=0" by default.

[1]: https://docs.nextcloud.com/server/stable/admin_manual/configuration_files/big_file_upload_configuration.html#configuring-php
2024-01-02 08:45:42 +01:00
Sandro Jäckel
0a1d1907a5
nixos/oomd: use mkRenamedOptionModule like mentioned in the changelog 2024-01-01 22:33:00 +01:00
Nick Cao
66ea36d4d3
Merge pull request #276159 from AtaraxiaSjel/fix/tor-obfs4proxy
nixos/tor: fix transport plugin exe name
2024-01-01 15:55:04 -05:00
Nick Cao
3d6243a6a9
Merge pull request #276430 from hellodword/patch-1
nixos/tailscale: fix after and wants
2024-01-01 15:52:50 -05:00
Guillaume Girol
38034a860a
Merge pull request #273286 from nh2/sane-backends-package-option
Add hardware.sane.backends-package option.
2024-01-01 21:43:35 +01:00
Maciej Krüger
8f3c9dec12
Merge pull request #278090 from mkg20001/fix-auditd
nixos/auditd: fix typo
2024-01-01 18:35:17 +01:00
Maciej Krüger
4f9e98905e
nixos/auditd: fix typo
Would otherwise fail with

```
       error: A definition for option `systemd.services.auditd.conflicts."[definition 1-entry 1]"' is not of type `string matching the pattern [a-zA-Z0-9@%:_.\-]+[.](service|socket|device|mount|automount|swap|target|path|timer|scope|slice)'. Definition values:
       - In `/nix/store/x2khl2yx0vz2i357x7mz5xm1kagql8ag-source/nixos/modules/security/auditd.nix': "shutdown.target "
```
2024-01-01 17:28:46 +01:00
Ryan Lahfa
10af81720a
Merge pull request #277936 from Izorkin/update-nginx-ktls
nginx: enable ktls support by default
2024-01-01 17:19:11 +01:00
markuskowa
009b625a54
Merge pull request #277792 from ck3d/vdr-updates-2023-12
vdr: updates 2023/12
2024-01-01 16:58:11 +01:00
Guillaume Girol
dece72548e nixseparatedebuginfod: add module and nixos test 2024-01-01 13:42:13 +01:00
Izorkin
10c06cb060
nginx: enable ktls support by default 2024-01-01 12:02:57 +03:00
Robert Hensing
f4525eefb3
Merge pull request #277949 from pennae/lazy-options-arg-list
nixos/doc: avoid bash argument list size limit
2023-12-31 22:04:01 +01:00
Ryan Lahfa
e44341e335
Merge pull request #195805 from Luflosi/grub-use-correct-zfs-version
nixos/grub: use the correct ZFS version
2023-12-31 21:33:37 +01:00
Ryan Lahfa
5ab6191ee5
Merge pull request #276260 from Izorkin/update-nginx-acme-locations
nixos/nginx: change position acmeLocation in nginx configuration
2023-12-31 21:23:17 +01:00
Janik
6be9d4fc21
Merge pull request #266283 from Noodlesalat/ping-exporter-1.1.0
ping_exporter: init at 1.1.0
2023-12-31 20:50:30 +01:00
pennae
4374f2feda nixos/doc: avoid bash argument list size limit
see #277861. as the module list grows the argument size in the
lazy-options nix call grows, eventually reaching a hard limit and
causing the build to fail. writing the list to a file instead and import
it instead of providing it directly circumvents this.
2023-12-31 18:08:46 +01:00
Guillaume Girol
17fc67eb2e
Merge pull request #255464 from georgyo/postfix-dont-use-file-ownership
nixos/postfix: postalias should not use source file permissions
2023-12-31 15:20:48 +01:00
Luflosi
b2f8b846f2
nixos/kubo: increase maximum UDP send buffer size
In addition to increasing the maximum UDP receive buffer size in the Linux kernel, it is now recommended to do the same for the send buffer size.
This is documented in https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes.
The change to the documentation was made in June: 5b5e58d289.

Without this change, the Kubo daemon will output this warning:
```
failed to sufficiently increase send buffer size (was: 208 kiB, wanted: 2048 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details.
```
This can be seen while running the NixOS tests.
2023-12-31 14:09:27 +01:00
Maciej Krüger
2d9d11dee6
Merge pull request #251782 from vifino/thermald_ignore-cpuid-check
thermald: allow ignoring cpuid check
2023-12-31 11:30:50 +01:00
Ilan Joselevich
210ab761b4
Merge pull request #276294 from phaer/cachix-signing-key
cachix-watch-store: allow to set a signing key
2023-12-31 00:20:52 +02:00
nicoo
607679c6d3 nixos/pam: Assert that authorizedKeysFiles is non-empty when using pam_ssh_agent_auth 2023-12-30 22:19:38 +00:00
Christian Kögler
1c326dcb4f nixos/vdr: wait for network 2023-12-30 21:58:24 +01:00
Izorkin
ae5c0c1521
nixos/nginx: skip adding a comment to acmeLocation in nginx configuration 2023-12-30 23:50:02 +03:00
Izorkin
7f1b6d45af
nixos/nginx: change position acmeLocation in nginx configuration 2023-12-30 23:49:58 +03:00
Nick Cao
fb6f005181
Merge pull request #272552 from SuperSandro2000/ghostscript-nox
nixos/no-x-libs: add ghostscript
2023-12-30 13:23:42 -05:00
Philip Taron
da90576aac
nixos/lxd-agent: fix evaluation regression caused by nixos/nixpkgs#271326 2023-12-30 08:45:30 -08:00
Lin Jian
55c1318537
Merge pull request #276180 from linj-fork/pr/kanata-list
nixos/kanata: specify linux-dev as a list
2023-12-29 20:24:56 -06:00
Nick Cao
4a8d35315a
Merge pull request #276407 from sinanmohd/dendrite-sliding-sync
nixos/matrix-sliding-sync: rename, init dendrite
2023-12-29 20:24:47 -05:00
Will Fancher
9cab49c71b
Merge pull request #273921 from SaltyKitkat/oomd
nixos/systemd: update oomd configuration
2023-12-29 18:47:49 -05:00
markuskowa
15b39c2238
Merge pull request #275080 from SomeoneSerge/feat/munge-systemd
nixos/munge: update the systemd service
2023-12-30 00:11:12 +01:00
Maximilian Bosch
d25fdec5b3
Merge pull request #212430 from onny/nextcloud-cleanup
nixos/nextcloud: Move options into now freeForm extraOptions
2023-12-29 23:44:24 +01:00
Maximilian Bosch
a1f20ed672
Merge pull request #277382 from Ma27/fix-nextcloud-app-routing
nixos/nextcloud: fix nginx routing to store and nix apps
2023-12-29 23:44:12 +01:00
Jonas Heinrich
b06d3c3aa6
Merge pull request #277442 from onny/ollama
nixos/ollama: init
2023-12-29 23:00:10 +01:00
Dmitriy Kholkin
0929716b02
nixos/tor: fix transport plugin exe name 2023-12-29 23:20:15 +03:00
Nick Cao
08a62091a1
Merge pull request #277146 from majewsky/portunus-2.0.0
portunus: 1.1.0 -> 2.0.0
2023-12-29 14:53:12 -05:00
sinanmohd
e8e5c07ad0 nixos/matrix-sliding-sync: rename, init dendrite 2023-12-30 00:25:57 +05:30
Maximilian Bosch
bae5e65162
nixos/nextcloud: fix nginx routing to store and nix apps
Closes #277206

The bug mentioned above was a symptom of the issue fixed here: when
opening the `forms` app which is installed via `extraApps` (or the
app store) the site wouldn't work because `.mjs` files had the wrong
Content-Type.

The actual problem got fixed already[1], however this config was not
used for stuff from `/nix-apps` & `/store-apps` which had their own
location section with only a `root ;` statement.

In fact, this setup isn't strictly supported by Nextcloud upstream[2],
so to fix this for good, I decided to follow the upstream suggestion for
app directories outside the server root, i.e. linking them back into the
store path.

This means that the module generates a new derivation now with

* `services.nextcloud.package` linked into it via `lndir`.
* under `nix-apps` is a symlink to the link farm containing all apps
  from `services.nextcloud.extraApps`.
* under `store-apps` is a symlink to `/var/lib/nextcloud/store-apps`.
  Since this is only used in the NixOS module that also configures this
  location for imperatively installed apps, this seems an OK thing to
  do.

Successfully tested the change on a productive Nextcloud 28.0.1 with
several apps installed via `extraApps` (`forms`, `cospend`, `maps`,
`user_saml` and a few more).

[1] 292c74c7a9
[2] https://docs.nextcloud.com/server/28/admin_manual/apps_management.html#using-custom-app-directories
2023-12-29 18:59:18 +01:00
nikstur
5a9c0b7600
Merge pull request #267983 from nikstur/replace-simple-activation-2
nixos: replace activationScripts 2/x
2023-12-29 16:29:11 +01:00
Jonas Heinrich
67a799c40f nixos/ollama: init 2023-12-29 15:19:55 +01:00
K900
0403c41f61 nixos/installer: add a link to how to actually upgrade your system to the stateVersion note 2023-12-29 17:01:04 +03:00
nikstur
0ebd39b541 nixos/nix-channel: remove unused stringAfter 2023-12-29 03:41:45 +01:00
nikstur
3be357b2e7 nixos/binfmt: remove unused stringAfter 2023-12-29 03:41:45 +01:00
nikstur
d0014a531e nixos/wrappers: order service after sysusers service 2023-12-29 03:41:45 +01:00
nikstur
65ff518a0d nixos/ipa: replace activationScript
Replaced with a dedicated systemd service.
2023-12-29 03:41:45 +01:00
nikstur
8d3cf213db nixos/borgbackup: replace activationScript via tmpfiles 2023-12-29 03:41:45 +01:00
nikstur
af87c19427 nixos/yggdrasil: replace activationScript
Replace with separate service because it cannot be moved into the
preStart of the yggdrasil service.
2023-12-29 03:22:27 +01:00
nikstur
9b29bc0010 nixos/trackpoint: replace activationScript
Replace with a separate systemd service ordered before sysinit.target
2023-12-29 03:22:25 +01:00
nikstur
80fa4731f9 nixos/amdgpu-pro: replacce activationScript via tmpfiles 2023-12-29 03:21:32 +01:00
nikstur
994df434ba nixos/ldap: replace activationScript
Replace with a dedicated systemd service.
2023-12-29 03:20:28 +01:00
nikstur
e96cd172fb nixos/logcheck: replace activationScript via tmpfiles 2023-12-29 03:16:03 +01:00
nikstur
682cb1d640 nixos/vmware-host: replace activationScript
Replace with a dedicated system servie ordered before the other VMWare
services.
2023-12-29 03:16:03 +01:00
Luflosi
c71cb77cd6
nixos/grub: use the correct ZFS version
When `config.boot.zfs.enableUnstable` is set to true, grub was built with the `zfs` package even though the rest of the system uses the `zfsUnstable` package.
The effect of this can only be seen when `zfs` and `zfsUnstable` actually differ (which is not currently the case), for example when overriding one of them locally.
2023-12-29 01:53:27 +01:00
Kira Bruneau
017bc47e74
Merge pull request #272943 from kira-bruneau/gamemode
gamemode: 1.7 -> 1.8.1
2023-12-28 19:10:56 -05:00
Jonas Heinrich
dd8c96379f nixos/nextcloud: Move options into now freeForm extraOptions 2023-12-29 01:04:46 +01:00
Martin Weinelt
fba845e36f
Merge pull request #277235 from adamcstephens/lxd-agent/path
nixos/lxd-agent: add system path for exec
2023-12-28 21:28:15 +01:00
Maximilian Bosch
1d17e304ac
Merge pull request #273443 from jpds/thanos-query-replica-label-string
nixos/thanos: Changed query.replica-labels to a list parameter
2023-12-28 20:48:31 +01:00
Adam Stephens
3f8b1d2d26
nixos/lxd-agent: add system path for exec 2023-12-28 14:27:05 -05:00
Daniel Barter
18d65382d6 nixos/cupsd: allow cups package override 2023-12-28 08:58:01 -08:00
Luflosi
f88af99311
nixos/aerospike: use NixOS option instead of custom script
Since 2c5abd89c7 setting the option `boot.kernel.sysctl."net.core.rmem_max"` no longer has any downsides compared to what was previously used. Since 439350753e the same is also true for `boot.kernel.sysctl."net.core.wmem_max"`.
2023-12-28 17:41:59 +01:00
Luflosi
8cdabf9cf8
nixos/sysctl: cleanup
- Use `options = {` instead of repeating `options` for every option
- Change the description of "net.core.rmem_max" slightly to match the kernel documentation
2023-12-28 17:38:33 +01:00
Stefan Majewsky
9ecbdfb5bd portunus: 1.1.0 -> 2.0.0
Changelog: <https://github.com/majewsky/portunus/releases/tag/v2.0.0>
2023-12-27 18:30:32 +01:00
Nick Cao
6248428d28
Merge pull request #277017 from hughobrien/patch-1
nixos/invidious: Fix  user message on 24.05 changes
2023-12-27 10:36:43 -05:00
Kira Bruneau
02d4aa2306 nixos/gamemode: format with nixpkgs-fmt 2023-12-27 08:55:23 -05:00
Yt
bd5ff67266
Merge pull request #261789 from onny/rspamd-trainer
nixos/rspamd-trainer: init; rspamd-trainer: init at unstable-2023-11-27
2023-12-27 11:28:42 +00:00
Alex James
9f32ad8ff8
nixos/transmission: add webHome option 2023-12-27 04:00:43 -06:00
Jonas Heinrich
80d88736da nixos/rspamd-trainer: init; rspamd-trainer: init at unstable-2023-11-27 2023-12-27 10:35:53 +01:00
nikstur
c9569af3e0
Merge pull request #271326 from philiptaron/shutdown.target
treewide: depend on `shutdown.target` if `DefaultDependencies=no` in almost every case
2023-12-27 08:33:26 +01:00
Yt
56b8564a7d
Merge pull request #276525 from scvalex/livebook-configurable-package
livebook: configurable package and extraPackages
2023-12-27 07:30:25 +00:00
Hugh O'Brien
eff6b94cdd
nixos/invidious: Fix user message on 24.05 changes 2023-12-26 20:44:04 -05:00
Martin Weinelt
d4c4e0269d
Merge pull request #274460 from mweinelt/kea-ipc-runtimedir
nixos/kea: return to merged runtime directory; preserve runtime directories
2023-12-27 02:08:14 +01:00
Martin Weinelt
2f8686ce17
nixos/frigate: restart the service on failure
Closes: #266837
2023-12-26 22:33:19 +01:00
Dee Anzorge
b4b9b08426
nixos/prometheus-exporters/kea: run under same user/group as kea
This fixes access to the kea unix sockets, after enabling
RuntimeDirectoryPreserve on the kea units.

https://github.com/NixOS/nixpkgs/pull/274460#issuecomment-1869702893
2023-12-26 21:42:58 +01:00
Nick Cao
5cfba53fc6
Merge pull request #258812 from Izorkin/fix-noxlibs
nixos/no-x-libs: fix build packages
2023-12-26 13:09:23 -05:00
Maciej Krüger
51e1d86766
Merge pull request #225946 from boozedog/boozedog/pgadmin-package
nixos/pgadmin: add package option
2023-12-26 12:38:50 +01:00
boozedog
0b522b2429
nixos/pgadmin: add package option 2023-12-26 11:56:25 +01:00
Sandro Jäckel
64b6b5e787
nixos/portunus: make sure the cookies are only send over https if it is enabled 2023-12-26 00:27:32 +01:00
Linus Heckemann
5494aa21c7
Merge pull request #273308 from Stunkymonkey/install-device-fix-mdadm
nixos/installation-device: remove warning about mdadm
2023-12-25 23:41:10 +01:00
Nick Cao
7d54909829
Merge pull request #253263 from SuperSandro2000/nox-intel-vaapi-driver
nixos/no-x-libs: add intel-vaapi-driver
2023-12-25 17:16:15 -05:00