Commit Graph

29944 Commits

Author SHA1 Message Date
Florian Klink
21721e4196 nixos/mycelium: description updates
- Slight rewordings and typo fixes.
 - Use documentation prefixes for addresses, rather than 1.2.3.4, and
   add IPv6 examples.
 - Fix description for `keyFile` (`/var/lib/mycelium/key{,.bin}`).
 - Some formatting by my editor
2024-03-23 12:36:49 +01:00
Nick Cao
cee0d0bac7
nixos/pam: use services.fprintd.package for fprintd rule 2024-03-22 20:14:49 -04:00
Philip Taron
e2e43f6ce7
nixos/systemd/initrd: make systemd mount root as rw if gpt-auto is set 2024-03-22 16:08:29 -07:00
Bruno BELANYI
af6e257878 nixos/tandoor-recipes: improve manage script
This is shamelessly stolen from Photoprism's module, and should allow
executing the manage script without resorting to various tricks due to
relying on transient users.
2024-03-22 20:54:36 +00:00
Bruno BELANYI
6b1e9f77f9 nixos/tandoor-recipes: set service 'Group' 2024-03-22 20:47:55 +00:00
Vladimír Čunát
e90be8418d
Merge #284149: nixos/kernel: add hid_corsair to initrd modules 2024-03-22 14:59:18 +01:00
K900
176ee51929
Merge pull request #297806 from andrevmatos/nixos/wireplumber/fix_systemwide_bluetooth
nixos/wireplumber: fix systemwide bluetooth integration
2024-03-22 09:47:46 +03:00
Bobby Rong
5cf5dd0fb0
Merge pull request #297727 from bobby285271/upd/budgie-nemo-terminal
nixos/budgie: Use gnome-terminal by default
2024-03-22 13:20:40 +08:00
Bobby Rong
0f150faf98
Merge pull request #297941 from bobby285271/upd/budgie-fprintd
nixos/budgie: Don't enable fprintd by default
2024-03-22 13:00:38 +08:00
Bobby Rong
414628b4a0
nixos/budgie: Don't enable fprintd by default
This is optional for {budgie,gnome}-control-center and is not
enabled in the GNOME module.

To re-enable this fprintd should be unbreak first.
2024-03-22 12:28:17 +08:00
Maciej Krüger
ccf8f3a8fb
Merge pull request #297464 from mkg20001/fcfix
nixos/fcitx5: fix warning about plasma6 option
2024-03-22 01:35:59 +01:00
Adam Stephens
790fb86a7f
nixos/users-groups: move linger to oneshot and add nixos test 2024-03-21 19:51:05 -04:00
Peder Bergebakken Sundt
554f412e2d
Merge pull request #294171 from Noodlez1232/joycond-cemuhook-fix
nixos/joycond-cemuhook: fix missing module
2024-03-22 00:40:59 +01:00
e1mo
bc25c4bd7d
nixos/pretix: raise TimeoutStartSec
On some slower systems or ones with a slower database (connection) the
initial migrations can exceed the default 90s timeout.
2024-03-21 21:49:40 +01:00
e1mo
6d5a6cab71
nixos/pretix: Fix pdf generation
Previously, pdftk (part of the ticket, badge, ... generation pipeline)
would fail with:

```
Error occurred during initialization of VM
Failed to mark memory page as executable - check if grsecurity/PaX is enabled
```
Thise caused pdf generation to fail.

Since pdftk is a java application and, according to systemd.exec(5),

 > Note that [MemoryDenyWriteExecute=] is incompatible with programs and
 > libraries that generate program code dynamically at runtime, including
 > JIT execution engines, executable stacks, and code "trampoline" featu
 > re of various C compilers.

Disabling `MemoryDenyWriteExecute=` fixes it.
2024-03-21 21:49:39 +01:00
K900
ff3d03a15f
Merge pull request #297697 from K900/plasma6-install-kio5
plasma6: also install base kio5
2024-03-21 23:05:33 +03:00
André Vitor de Lima Matos
bdc6b3abe0
nixos/wireplumber: fix systemwide bluetooth integration
From https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/3828#note_2270701
Broken/removed in #278760
2024-03-21 16:21:59 -03:00
Adam Stephens
564c3749d9
nixos/users-groups: fix broken linger 2024-03-21 13:47:15 -04:00
K900
d23f4b140f
Merge pull request #297479 from cab404/raop-firewall
nixos/pipewire: raopOpenFirewall option
2024-03-21 18:05:20 +03:00
Bobby Rong
b79ac84d84
nixos/budgie: Use gnome-terminal by default
- Both budgie-desktop-view and cinnamon-desktop defaults to gnome-terminal, there
  are no clear reason why we don't use the defaults here.
  The cinnamon-desktop org.cinnamon.desktop.default-applications.terminal schema
  is used in nemo for default emulator, since we use nemo by default this fixes nemo
  open in terminal entry without introducing another override.
- There are theming issues with Qogir when opening right-click menu in a second tab.
- Transparency is broken when hovering on other windows, showing only the wallpaper.

This also ensures a stable default for budgie-desktop-view, by using only the
executable name and not a nix store path.

ref: https://github.com/BuddiesOfBudgie/budgie-desktop-view/blob/v1.3/data/org.buddiesofbudgie.budgie-desktop-view.gschema.xml#L60
ref: https://github.com/linuxmint/cinnamon-desktop/blob/6.0.0/schemas/org.cinnamon.desktop.default-applications.gschema.xml.in#L46
ref: https://github.com/linuxmint/nemo/blob/6.0.0/src/nemo-view.c#L7193
2024-03-21 22:16:25 +08:00
Martin Weinelt
3b7d9c77b3
Merge pull request #297622 from mweinelt/kea-exporter-0.7.0
kea-exporter: 0.6.1 -> 0.7.0
2024-03-21 14:29:42 +01:00
K900
4e5b7fe664 plasma6: also install base kio5
Fixes #295814
2024-03-21 15:19:44 +03:00
nikstur
80f60ad1f4
Merge pull request #297224 from WilliButz/repart-image/mkDerivation
nixos/repart-image: refactor to use mkDerivation instead of runCommand
2024-03-21 12:50:17 +01:00
Stig
468417b7f3
Merge pull request #296479 from marcusramberg/marcus/nimdow
nixos/nimdow: module updates
2024-03-21 12:14:56 +01:00
WilliButz
d9264d0568
nixos/repart-image: add myself as maintainer 2024-03-21 11:37:43 +01:00
WilliButz
5282cdd926
nixos/repart-image: add internal option to expose finalPartitions 2024-03-21 11:37:43 +01:00
WilliButz
d7ef2defda
nixos/repart-image: refactor to use mkDerivation
As a follow-up to https://github.com/NixOS/nixpkgs/pull/294096 this
should further improve the flexibility around building OS images with
systemd-repart:

* Previously the attribute set `compression` needed to be fully
  populated, including `algorithm` and `level` because
  `compression.enable` was evaluated by bash, after being interpolated
  as strings into the `buildCommand`. Now it's sufficient to pass
  `compression.enable = false` to the builder, e.g. in `overrideAttrs`,
  to disable the compression.
* Using mkDerivation allows for much more customization than the
  previously used `runCommand`, making use of phases and pre/post hooks.
  This is especially helpful for building multiple images from the same
  system configuration, e.g. to build an image `Y` based on a partially
  built raw image `X`,  by injecting a UKI that depends on `X` into a
  defered ESP.
* Before this change it was non-trivial to conduct further manipulations
  on the amended repart definitions. Now, the definitions that
  systemd-repart uses to build the image can be easily manipulated in
  `postPatch` or `preBuild`.

Aside from this, the build is now executed in the build directory, rather
than `$out`. This allows references to relative paths in the build
environment to be used, especially for `--definitions`, which previously
required an absolute path.
2024-03-21 11:37:43 +01:00
Doron Behar
2897be360b
Merge pull request #287966 from Guanran928/clash-meta
nixos/mihomo: init
2024-03-21 10:40:10 +02:00
Martin Weinelt
c77d192eb4
prometheus-kea-exporter: 0.6.1 -> 0.7.0
https://github.com/mweinelt/kea-exporter/blob/v0.7.0/HISTORY

Updates the module to use the target name, because it now supports both
UDS as well as HTTP URLs.
2024-03-21 06:17:59 +01:00
Martin Weinelt
d702c91302
nixos/prometheus/exporters: pass utils into exporter modules
This is useful, because it provides escapeSystemdShellArgs.
2024-03-21 05:27:21 +01:00
github-actions[bot]
36232fff71
Merge master into staging-next 2024-03-20 18:01:02 +00:00
Dmitry Bogatov
5bb92281f5 nixos/dnscache: Provide explicit group for "dnscache" user
Without this patch the module refuses to evaluate, complaining that
default "nogroup" is no longer supported.
2024-03-20 16:45:50 +01:00
Cabia Rangris
eaf6b74366
nixos/pipewire: raopOpenFirewall option
RAOP requires UDP/6001-6002 for timing
information, and won't work with apple devices if
firewall is enabled.
2024-03-20 18:32:01 +03:00
Maciej Krüger
061b88c7f4
nixos/fcitx5: fix warning about plasma6 option 2024-03-20 15:18:51 +01:00
Sandro
50b2e2a029
Merge pull request #296866 from SuperSandro2000/xserver-pinentry 2024-03-20 14:32:44 +01:00
github-actions[bot]
90461ffe37
Merge master into staging-next 2024-03-20 12:01:15 +00:00
éclairevoyant
debb92775e nixos/starship: cleanup 2024-03-20 21:08:43 +11:00
éclairevoyant
4f9d91e276 nixos/starship: allow setting package 2024-03-20 21:08:43 +11:00
Florian Klink
40e49b40ab
Merge pull request #296949 from NixOS/mycelium_service
nixos/mycelium: init
2024-03-20 11:50:46 +02:00
nikstur
d5d1e6a4fa
Merge pull request #297227 from WilliButz/uki/expose-rendered-config
nixos/uki: add configFile option
2024-03-20 10:41:59 +01:00
Florian Klink
39ebd395cc
Merge pull request #224666 from grindhold/container_underscores
check nixos-container names for underscores
2024-03-20 11:41:34 +02:00
Pol Dellaiera
15541288f3
Merge pull request #297133 from trofi/etebase-server-fix-test
etebase-server: fix the eval on `null` `cfg.unixSocket`
2024-03-20 07:38:15 +01:00
K900
e240f8bde9 Merge remote-tracking branch 'origin/master' into staging-next 2024-03-20 09:27:30 +03:00
K900
e382906174
Merge pull request #295839 from peterhoeg/m/sddm_kwin
nixos/sddm: add support for kwin_wayland
2024-03-20 09:02:52 +03:00
lassulus
b82a5ef764 nixos/mycelium: init 2024-03-20 03:56:58 +01:00
Adam Stephens
deb5be50c4
incus: move wrapper to nixos module 2024-03-19 22:48:07 -04:00
github-actions[bot]
a474411771
Merge master into staging-next 2024-03-20 00:02:08 +00:00
aleksana
b60f6b118b nixos/mandoc: add leading slash to manPath 2024-03-20 00:56:18 +01:00
aleksana
da089cf63a nixos/mandoc: fix invalid manpath directory and add cachePath option 2024-03-20 00:56:18 +01:00
Philip Taron
29a46d2802
nixos/nvidia: Set SidebandSocketPath to a user-writable path in /run
The NVIDIA X driver uses a UNIX domain socket to pass information to
other driver components. If unable to connect to this socket, some
driver features, such as G-Sync, may not work correctly. The socket will
be bound to a file with a name unique to the X server instance created
in the directory specified by this option. Note that on Linux, an
additional abstract socket (not associated with a file) will also be
created, with this pathname socket serving as a fallback if connecting
to the abstract socket fails.

The default, which was in effect prior to this change, was `/var/run`.

The effect of not setting this option was that GDM X sessions
(and other non-root sessions) would see this warning in the log files:

```
   (WW) NVIDIA: Failed to bind sideband socket to
   (WW) NVIDIA:     '/var/run/nvidia-xdriver-b4f69129' Permission denied
```

I don't see any security implications of turning this on universally,
since there already was an abstract socket created according to the
docs.

Documentation:

1. [NVIDIA X Config Options](https://download.nvidia.com/XFree86/Linux-x86_64/440.82/README/xconfigoptions.html#SidebandSocketPath)

Diagnosis:

1. [Arch Linux BBS post](https://bbs.archlinux.org/viewtopic.php?pid=1909115#p1909115)
2024-03-19 16:34:41 -07:00
maxine
b0f45b4837
Merge pull request #295926 from savannidgerinel/savanni/1password-8.10.28-21
_1password-gui_beta: 8.10.28-11 -> 8.10.28-21 + refactor
2024-03-19 23:11:29 +01:00
Savanni D'Gerinel
61b6a6ae6f
_1password-gui-beta: 8.10.28-11 -> 8.10.28-21
- Updating the 1Password beta release to 8.10.28
- Removing the KeyringHelper application.
2024-03-19 23:09:37 +01:00
Silvan Mosberger
308671dbe8 nixos/nix: Fix example for nix.settings option
Attribute sets aren't valid option values, needs to be a list
2024-03-19 22:55:19 +01:00
Peter Hoeg
404a2363d1 nixos/plasma6: use kwin with sddm 2024-03-19 21:14:46 +01:00
Peter Hoeg
8c642cd40a nixos/sddm: add support for kwin_wayland 2024-03-19 20:55:23 +01:00
github-actions[bot]
7338a5dec5
Merge master into staging-next 2024-03-19 18:01:00 +00:00
Will Fancher
f0701b576a
Merge pull request #290061 from SuperSandro2000/kernel-modules-package-name
nixos/boot: move name overwrite to pkgs.aggregateModules to option
2024-03-19 13:04:19 -04:00
WilliButz
e9fa0ec5fe
nixos/uki: add configFile option
This option makes it easier to reuse a system's ukify.conf without the
need for manually calling the generator on `settings` again to receive a
rendered configuration file.

Theoretically, a complete configuration file could now be provided by
users.
2024-03-19 17:58:28 +01:00
Martin Weinelt
7762462405
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/flask-security-too/default.nix
2024-03-19 17:30:16 +01:00
Bobby Rong
2dcadb7087
Merge pull request #297072 from FedericoSchonborn/add-federicoschonborn
maintainers: Add federicoschonborn back again
2024-03-19 23:12:06 +08:00
ajs124
bdabdf0c16 nixos/gitlab: use workhorse package from option in path 2024-03-19 13:47:55 +01:00
ajs124
1bada61543 nixos/gitlab: switch from sidekiq to sidekiq-cluster 2024-03-19 13:47:55 +01:00
Sandro
4a9a5fab1c
Merge pull request #283501 from SuperSandro2000/hedgedoc-fix-tools-exec 2024-03-19 13:37:46 +01:00
Sergei Trofimovich
5a3bd05394 etebase-server: fix the eval on null cfg.unixSocket
Without the change the test eval fails as:

    $ nix build --no-link -f. etebase-server.tests
       error: cannot coerce null to a string: null
2024-03-19 08:59:57 +00:00
Federico Damián Schonborn
455b915be0
maintainers: Add federicoschonborn back again
Signed-off-by: Federico Damián Schonborn <federicoschonborn@disroot.org>
2024-03-18 21:51:28 -03:00
github-actions[bot]
7c0bd382c7
Merge master into staging-next 2024-03-19 00:02:09 +00:00
Lily Foster
e3c0bb4255
Merge pull request #294542 from Janik-Haag/garage
nixos/garage: add env-var wrapper for admin cli
2024-03-18 16:10:15 -07:00
Janik H.
9ec0e31f79
nixos/garage: add env-var wrapper for admin cli 2024-03-18 22:53:21 +01:00
Will Fancher
57f69255d7
Merge pull request #293591 from lf-/jade/fix-luksroot-assert
nixos.luksroot: fix assertion message to name correct option
2024-03-18 17:46:11 -04:00
maralorn
b6668ded0e
Merge pull request #296977 from slotThe/maintainer
Add slotThe as a maintainer
2024-03-18 22:43:38 +01:00
Jade Lovelace
a72afcbc48 nixos.luksroot: fix assertion message to name correct option 2024-03-18 14:41:47 -07:00
Ryan Lahfa
ae07fcb07b
Merge pull request #293271 from nikstur/test-instrumentation-without-usr-bin-env
nixos/test-instrumentation: use full path to env
2024-03-18 13:57:37 -07:00
Tony Zorman
240c39ef2e nixos/xmonad: add slotThe as a maintainer 2024-03-18 20:27:15 +01:00
Martin Weinelt
00e2713c5b
Merge remote-tracking branch 'origin/master' into staging-next 2024-03-18 19:59:23 +01:00
Will Fancher
99587a3411
Merge pull request #209964 from Majiir/fix-initrd-systemd-closure
nixos/systemd/initrd: follow init param symlinks
2024-03-18 14:39:37 -04:00
Florian Klink
70d7abc09c
Merge pull request #296924 from flokli/document-servers-empty-fallback
nixos/timesyncd: further document services.timesyncd.servers
2024-03-18 20:08:22 +02:00
Jon Seager
ffc736695c
Merge pull request #296937 from MinerSebas/scrutiny-collector-ordering 2024-03-18 17:16:40 +00:00
Martin Weinelt
03fcd060ff
Merge pull request #296921 from patka-123/engelsystem-cleanup
engelsystem: cleanup
2024-03-18 17:14:59 +01:00
Patka
93aba53a08
engelsystem: cleanup
The custom php with extensions is not needed. The default already has all the needed extensions enabled by default.
2024-03-18 17:08:01 +01:00
K900
823897dde8 wireplumber: 0.4.17 -> 0.5.0 2024-03-18 18:57:05 +03:00
MinerSebas
9d384c350b nixos/scrutiny: Order scrutiny-collector after scrutiny 2024-03-18 16:30:51 +01:00
Florian Klink
78d8e2ca11 nixos/timesyncd: further document services.timesyncd.servers
Running systemd-timesyncd with an empty list of timeservers to sync from
does not work.

In case an empty list is configured here, systemd will fall back to its
compiled-in defaults, which NixOS sets to `{0..4}.nixos.pool.ntp.org`,
as per https://github.com/systemd/systemd/blob/main/docs/DISTRO_PORTING.md#ntp-pool

This has caused some confusion. Explicitly document this, and describe
how to disable timesyncd.
2024-03-18 17:23:55 +02:00
github-actions[bot]
d5491af22d
Merge master into staging-next 2024-03-18 12:01:22 +00:00
Sandro
124ec2d9d6
nixos/xserver: don't conflict pinentry package with DEs 2024-03-18 11:22:48 +01:00
nikstur
a1c4f0a754
Merge pull request #282022 from ElvishJerricco/gpt-auto-root
nixos: Support systemd-gpt-auto-root
2024-03-18 10:27:22 +01:00
github-actions[bot]
819a14ad05
Merge master into staging-next 2024-03-18 06:01:21 +00:00
github-actions[bot]
ac91cf83c1
Merge master into staging-next 2024-03-18 00:02:20 +00:00
Alex Martens
bdb6849a32 nixos/llama-cpp: fix binary path 2024-03-17 16:48:51 -07:00
Sandro
1f212fd6e6
Merge pull request #289025 from tcheronneau/issue-288907
nixos/tinyproxy: fix the quotes around the filter path
2024-03-17 23:33:42 +01:00
Will Fancher
486e837cbe
Merge pull request #293710 from B4dM4n/networkd-policy-rule-port-range
nixos/networkd: allow RoutingPolicyRule port ranges
2024-03-17 12:36:30 -07:00
github-actions[bot]
100b3bb178
Merge master into staging-next 2024-03-17 18:00:54 +00:00
github-actions[bot]
c222aba0b8
Merge master into staging-next 2024-03-17 12:01:55 +00:00
Patka
c4e1ffb96b
engelsystem: 3.4.1 -> 3.5.0
Release notes: https://github.com/engelsystem/engelsystem/releases/tag/v3.5.0
2024-03-17 12:24:29 +01:00
Maximilian Bosch
6af7e814af
Merge pull request #292993 from wolfgangwalther/postgresql-refactor
postgresql: refactor and cleanup
2024-03-17 10:00:07 +00:00
Sandro
62748bdf42
Merge pull request #295891 from Stzx/pinentry-conflict
pinentry: fix DM option and user conflict
2024-03-17 08:50:13 +01:00
github-actions[bot]
2178d8d857
Merge master into staging-next 2024-03-17 00:02:17 +00:00
Martin Weinelt
2b003c0269
nixos/pretix: make state directory world-readable
Pretix creates static files in its state directory, that nginx needs to
serve, so locking down the permissions that hard is not going to work.
2024-03-16 23:44:37 +01:00
Atemu
44a3dd2ef4
Merge pull request #296009 from Atemu/steamcompattools
proton-ge-bin: init at 9-1, nixos/steam: use steamcompattool output for extraCompatPackages
2024-03-16 20:57:05 +00:00
Jon Seager
bfa0fb2dbe
Merge pull request #296463 from MinerSebas/scrutiny-split 2024-03-16 19:41:40 +00:00
Marcus Ramberg
20eec34036 nixos/nimdow: Make package configurable, ensure nimdow can start a terminal in it's default config 2024-03-16 19:32:34 +01:00