Commit Graph

5843 Commits

Author SHA1 Message Date
Sandro
1813936aff
Merge pull request #272895 from xanderio/wg-access-server-0.10.1
wg-access-server: init at 0.12.1
2024-06-25 21:21:19 +02:00
github-actions[bot]
08b5c3c46a
Merge master into staging-next 2024-06-25 18:01:20 +00:00
Yaya
8e85799e54 nixos/doc/rl-2411: Add a deprecation notice for gitlab-runner 2024-06-25 17:06:45 +02:00
Yaya
95bd18b5c5 nixos/doc/rl-2411: Add a deprecation notice for gitlab 2024-06-25 17:06:45 +02:00
Maximilian Bosch
60657a4591
nextcloud27: remove
Version will be EOL by the end of 2024-06.
2024-06-25 14:08:15 +02:00
Martin Weinelt
de245ec4a5
Merge remote-tracking branch 'origin/master' into staging-next 2024-06-25 13:00:25 +02:00
Alexander Sieg
32f2e9c950
wg-access-server: add release notes entry 2024-06-25 11:03:02 +02:00
Moritz Sanft
43990c5428
nixos/prometheus: remove minio exporter 2024-06-25 11:00:01 +02:00
Mathew Polzin
88d934879a nixos/services.kubernetes.kubelet: handle non-lower case characters in hostname 2024-06-23 14:06:42 -05:00
github-actions[bot]
07b6f9e8ae
Merge staging-next into staging 2024-06-23 18:01:37 +00:00
Artturin
2cfac74be5
Merge pull request #319139 from NyCodeGHG/android-ndks
android-ndks: add 25, 26 ndks, update default ndk and sdk
2024-06-23 20:39:28 +03:00
Martin Weinelt
2096642430
Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
- pkgs/os-specific/windows/mingw-w64/default.nix
2024-06-23 19:09:00 +02:00
Niklas Hambüchen
65378f632a
Merge pull request #321966 from nh2/libe57format-3.1.1
libe57format: 2.2.0 -> 3.1.1
2024-06-23 19:00:23 +02:00
Niklas Hambüchen
dbbaf02a9c release-notes: Mention libe57format upgrade 2024-06-23 16:18:56 +00:00
Yt
12cdce24bb
Merge pull request #317239 from pacien/nixos-stalwart-no-dynamic-user-release-log
doc/release-notes: migration note for stalwart-mail user
2024-06-23 01:13:30 +00:00
Doron Behar
9c7e7d8f18
Merge pull request #258058 from doronbehar/pkg/transmission_4
transmission: sent a warning and alias it to transmission_3
2024-06-23 00:07:37 +03:00
Yueh-Shun Li
657517056c
clang-tools: add release note entry about moving into llvmPackages
Add 24.11 release note entry about moving clang-tools into llvmPackages
and making clang-tools_<version> aliases.
2024-06-23 01:35:02 +05:30
euxane
2d8626bf0a nixos/cgit: configurable user instead of root
This allows running cgit instances using dedicated users instead of
root. This is now set to "cgit" by default.
2024-06-22 19:45:25 +02:00
euxane
51b246a1ac nixos/fcgiwrap: do not run as root by default
Use a dynamic user instead unless one is specified.
2024-06-22 19:45:25 +02:00
euxane
81f72015f0 nixos/fcgiwrap: add unix socket owner, private by default
This adds a few options to properly set the ownership and permissions
on UNIX local sockets, set to private by default.

Previously, the created UNIX local sockets could be used by any local
user. This was especially problematic when fcgiwrap is running as root
(the default).
2024-06-22 19:45:25 +02:00
euxane
41419ca288 nixos/fcgiwrap: refactor for multiple instances
This allows configuring and starting independent instances of the
fgciwrap service, each with their own settings and running user,
instead of having to share a global one.

I could not use `mkRenamedOptionModule` on the previous options
because the aliases conflict with `attrsOf submodule` now defined at
`services.fcgiwrap`. This makes this change not backward compatible.
2024-06-22 19:45:15 +02:00
Benjamin Staffin
e93ccda887
nixos/ipa: Make ipa_hostname configurable (#321588)
Some sites put hosts in domains outside of the IPA server's default
domain, so this needs to be user-configurable.  The default is to use
the system's FQDN if it is configured, otherwise fallback to the
previous default behaviour of assuming the IPA's server's domain.
2024-06-22 11:29:54 -04:00
Nick Cao
d10d0fc423
nixos/keycloak: update options for release 25.0.0
Reference: https://www.keycloak.org/docs/25.0.0/upgrading/
2024-06-22 10:23:09 -04:00
github-actions[bot]
c6707a9686
Merge staging-next into staging 2024-06-21 12:01:53 +00:00
Doron Behar
7645dde059 transmission_3: rename from transmission 2024-06-21 12:33:37 +03:00
Masum Reza
61bf19d81b
Merge pull request #316410 from wegank/release-notes-4
doc/release-notes: fix mention of ankisyncd
2024-06-21 13:46:57 +05:30
h7x4
11c5359c4f
Merge pull request #319516 from r-vdp/wstunnel-init
wstunnel: 9.6.2 -> 9.7.0
2024-06-21 09:17:42 +02:00
github-actions[bot]
667f4bf852
Merge staging-next into staging 2024-06-20 12:01:36 +00:00
K900
5ce022e0e0
Merge pull request #319865 from JohnRTitor/amdgpu-module
nixos/amdgpu: init module
2024-06-20 14:29:01 +03:00
K900
20b7b4f619
Merge pull request #320228 from K900/opengl-cleanups
treewide: big opengl cleanups
2024-06-20 12:37:59 +03:00
Martin Weinelt
af4cfc1e0f Merge remote-tracking branch 'origin/staging-next' into staging 2024-06-19 23:28:26 +02:00
Rick van Schijndel
43ce0f9ee0
Merge pull request #318256 from risicle/ris-stack-clash-protection
cc-wrapper: add stack clash protection hardening flag
2024-06-19 19:54:30 +02:00
Sirio Balmelli
a972071a31
odoo: 16.0.20231024 -> 17.0.20240507
Preserve 'odoo16' on the same pattern as existing 'odoo15'

Signed-off-by: Sirio Balmelli <sirio@b-ad.ch>
2024-06-19 13:35:20 +00:00
github-actions[bot]
446fc5bdf3
Merge staging-next into staging 2024-06-19 00:03:05 +00:00
Martin Weinelt
f822b2ba5c Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
- pkgs/development/python-modules/langsmith/default.nix
- pkgs/development/python-modules/rich-pixels/default.nix
- pkgs/servers/teleport/generic.nix
2024-06-18 20:16:19 +02:00
Thiago Kenji Okada
6b15cd0387 nixos/doc: add services.flood to rl-2411 2024-06-18 08:47:29 -03:00
r-vdp
0faddabc33
nixos/wstunnel: Add a mention in the release notes 2024-06-18 11:07:07 +03:00
John Titor
c508cc5bed
docs/release-notes: 24.05: add amdgpu module 2024-06-18 10:04:04 +05:30
John Titor
4f0fbbd09a
docs/release-notes: 24.11: add amdgpu module 2024-06-18 10:04:03 +05:30
Marie Ramlow
56d1e7a41b lib.systems.examples: update default android sdk to 33, ndk to 26 2024-06-17 09:53:31 +02:00
Sandro
f88f5fec3e
Merge pull request #318933 from mweinelt/vaultharden
nixos/vaultwarden: update state directory name, harden systemd unit
2024-06-16 13:31:10 +02:00
K900
98cef4c273 treewide: big opengl cleanup
- rename hardware.opengl to hardware.graphics
- remove hardware.opengl.driSupport, which does nothing
- remove hardware.opengl.setLdLibraryPath, which should never be done
- rename hardware.opengl.driSupport32Bit to hardware.graphics.enable32Bit
- lost of small docs / formatting cleanups
2024-06-16 14:11:33 +03:00
K900
951601ccab treewide: drop amdgpu-pro
It's dead, Jim.
2024-06-16 13:39:52 +03:00
Pol Dellaiera
31ec299d80
Merge pull request #320194 from numinit/android-studio-full
android-studio-full: fix changelog ordering
2024-06-16 10:11:43 +02:00
Florian Klink
69efc46438
Merge pull request #315205 from widlarizer/tracy-remove-legacy
tracy: fix wayland - remove legacy build, add deps
2024-06-16 10:03:23 +03:00
Morgan Jones
cb452d89b3
android-studio-full: move changelog; fix duplicate merged line 2024-06-16 00:00:19 -07:00
Pol Dellaiera
4b2ef8f2f0
Merge pull request #315233 from numinit/android-studio-full
android-studio-full: init
2024-06-16 08:35:21 +02:00
Martin Weinelt
be53df7236
nixos/vaultwarden: harden systemd unit
Drops the capability to bind to privileged ports.
2024-06-16 01:33:12 +02:00
Emil J. Tywoniak
aefaf8f50b tracy: move to wayland, add tracy-x11 2024-06-15 22:52:03 +02:00
Zach Mitchell
aeba240cf3 moonlight-qt: 5.0.1 -> 6.0.0 2024-06-13 19:11:19 +08:00
github-actions[bot]
aacd9cf894
Merge staging-next into staging 2024-06-13 00:02:48 +00:00
Masum Reza
7082d01967
nixos/amdvlk: init module (#318175) 2024-06-12 22:45:01 +02:00
github-actions[bot]
d4adfab6df
Merge staging-next into staging 2024-06-12 06:01:24 +00:00
OTABI Tomoya
1f278a2082
Merge pull request #318384 from NyCodeGHG/nixos/renovate
nixos/renovate: init
2024-06-12 10:05:27 +09:00
Marie Ramlow
0adb3b8033 nixos/renovate: init 2024-06-11 18:57:04 +02:00
euxane
e23df553b0 doc/release-notes: migration note for stalwart-mail user
This follows 6ee84bcda0.

Here I prefer a simple mention in the release notes instead of some
automatic migration, which could interfere with all the other changes
already potentially requiring some admin interventions.

Co-authored-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2024-06-10 21:03:24 +02:00
github-actions[bot]
afa876d6fe
Merge staging-next into staging 2024-06-09 12:01:33 +00:00
Maximilian Bosch
afa84d8a13
Merge pull request #318061 from PedroRegisPOAR/remove-extra-backtick
Removes extra backtick from manual
2024-06-09 10:48:16 +00:00
github-actions[bot]
507aeeb037
Merge staging-next into staging 2024-06-09 00:03:32 +00:00
github-actions[bot]
26e3a02633
Merge master into haskell-updates 2024-06-08 00:14:17 +00:00
Robert Scott
6375a5878d doc/release-notes: 24.11: addition of stackclashprotection hardening flag 2024-06-07 23:55:33 +01:00
Pedro O. A. Regis
015e29a742 doc: removes extra backtick 2024-06-07 15:21:57 -03:00
github-actions[bot]
ef554485a4
Merge staging-next into staging 2024-06-07 18:01:57 +00:00
Thomas Churchman
d226935fd7 nixos/ddclient: deprecate use, implement use{v4,v6}
Upstream replaced `use` with `use{v4,v6}`:
4a1b06630b/ChangeLog.md (new-features)
2024-06-07 17:28:25 +02:00
Martin Weinelt
7ff8facb8b
Merge remote-tracking branch 'origin/staging-next' into staging 2024-06-07 07:25:52 +02:00
github-actions[bot]
a5d1b908b4
Merge master into haskell-updates 2024-06-07 00:13:56 +00:00
Peder Bergebakken Sundt
4f06a00fa9
Merge pull request #295155 from onemoresuza/hare-hook
hareHook: init
2024-06-06 23:55:33 +02:00
github-actions[bot]
4883735d0c
Merge staging-next into staging 2024-06-06 06:01:40 +00:00
github-actions[bot]
bd4363d68b
Merge master into haskell-updates 2024-06-06 00:13:27 +00:00
Jonathan Davies
7d7cb3e425
doc/release-notes: 24.11: Added Quickwit item to new services. 2024-06-06 00:49:42 +01:00
github-actions[bot]
937c2fa134
Merge staging-next into staging 2024-06-05 18:01:19 +00:00
Adam C. Stephens
af4ac075a3
Merge pull request #312523 from emilylange/nixos-forgejo-secrets
nixos/forgejo: refactor secrets, add `cfg.secrets`, forgejo: build `environment-to-ini`, nixos/tests/forgejo: test `cfg.secrets` using /metrics endpoint
2024-06-05 10:01:37 -04:00
github-actions[bot]
d7993cebbc
Merge staging-next into staging 2024-06-05 12:01:43 +00:00
Thomas Gerbet
ef6fea2d86 openssh: move Kerberos support into a dedicated package
The `openssh` and `openssh_hpn` packages are now built without
the Kerberos support by default in an effort to reduce the attack surface.

The Kerberos support is likely used only by a fraction of the total users
(I'm guessing mainly users integrating SSH in an Active Directory env) so
dropping it should not impact too many users. It should also be noted that
the Kerberos/GSSAPI auth is disabled by default in the configuration.
`opensshWithKerberos` and `openssh_hpnWithKerberos` are added in order
to provide an easy migration path for users needing this support.

The `openssh_gssapi` package is kept untouched.
2024-06-05 19:45:31 +10:00
Jörg Thalheim
9028937bc4
Merge pull request #317347 from Prince213/doc-bootspec
nixos/activation/bootspec: misc fixes
2024-06-05 09:56:54 +02:00
Pol Dellaiera
133aa44c38
Merge pull request #317286 from drupol/open-webui-add-more-env
nixos/{ollama,open-webui}: minor service update
2024-06-05 09:12:28 +02:00
Pol Dellaiera
8ea262601a
nixos/open-webui: add release note entry 2024-06-05 08:05:18 +02:00
Sizhe Zhao
5209c84957
nixos/activation/bootspec: fix style 2024-06-05 11:14:36 +08:00
Sizhe Zhao
4f05b8e213
nixos/activation/bootspec: rephrase 2024-06-05 11:13:43 +08:00
Sizhe Zhao
3a4753867d
nixos/activation/bootspec: no longer experimental 2024-06-05 11:09:55 +08:00
Sizhe Zhao
0aaccaa596
nixos/activation/bootspec: now enabled by default 2024-06-05 11:06:03 +08:00
github-actions[bot]
daadd0b777
Merge master into haskell-updates 2024-06-05 00:13:17 +00:00
github-actions[bot]
1e2381cfc5
Merge staging-next into staging 2024-06-05 00:02:59 +00:00
Coutinho de Souza
b0fcfa88cf
hareHook: init
Co-authored-by: Colin <colin@uninsane.org>
2024-06-04 20:32:51 -03:00
emilylange
ac20219508
nixos/rl-2411: add services.forgejo.secrets
and the accompanying `services.forgejo.mailerPasswordFile` deprecation.
2024-06-05 01:05:47 +02:00
kirillrdy
dfee75c298
Merge pull request #309121 from jlbribeiro/pkgs/zx-8.0.2
zx: 7.2.3 -> 8.1.2
2024-06-05 06:07:55 +10:00
Arian van Putten
f8439331dc doc/release-notes: Add note about backwards compatibility in ACME module
Co-authored-by: Stéphan Kochen <git@stephank.nl>
2024-06-04 20:23:30 +02:00
Thomas Gerbet
71ac0e5f22
Merge pull request #317024 from risicle/ris-zerocallusedregs-default-relnotes
nixos/doc/rl-2411: `zerocallusedregs` hardening flag enabled by default
2024-06-04 12:55:27 +02:00
Morgan Jones
7f03a67b0b
{doc/android,release-notes}: update android-studio and androidenv 2024-06-03 23:01:44 -07:00
github-actions[bot]
14af82271b
Merge master into haskell-updates 2024-06-04 00:13:34 +00:00
José Ribeiro
6fc5c63584
doc(rl-24.11): zx v8 breaking changes 2024-06-03 22:16:55 +01:00
Robert Scott
35b3c16331 nixos/doc/rl-2411: zerocallusedregs hardening flag enabled by default 2024-06-03 22:02:18 +01:00
Sandro
617a79dd10
doc/release-notes: repalce security.pam.enableSSHAgentAuth with security.pam.sshAgentAuth.enable 2024-06-03 13:34:00 +02:00
github-actions[bot]
ac1903efd3
Merge master into haskell-updates 2024-06-03 00:13:54 +00:00
Yueh-Shun Li
dbcf7cf697 apptainer, singularity: add release note entry about systemBinPaths
Add a Nixpkgs 24.05 release note entry explaining the introduction of
`systemBinPaths` argument, the prioritization of the original (FHS)
`defaultPath` values, and the deprecation of arguments `newuidmapPath`,
`newgidmapPath` and NixOS configuration option
`programs.singularity.enableFakeroot`.
2024-06-03 07:53:29 +08:00
Sandro
6f02edec1a
Merge pull request #316358 from majewsky/portunus-remove-libxcrypt-legacy 2024-06-02 23:10:26 +02:00
Vassilis Palassopoulos
f41fc204d6 doc/release-notes: fix option that enables Plasma 6 2024-06-02 13:48:33 +03:00
github-actions[bot]
d865fb67ab
Merge master into haskell-updates 2024-06-02 00:14:43 +00:00
Weijia Wang
9835090379 doc/release-notes: fix mention of ankisyncd 2024-06-01 14:26:51 +02:00
Aleksana
5a7bf1479a
Merge pull request #316270 from wegank/release-notes-3
doc/release-notes: update info on gnome 46
2024-06-01 16:33:46 +08:00