Pascal Bach
03ef04f0a4
install-device: permit root login with password
...
Allow password login to the installation this allows doing remote installation
via SSH. All that need to be done on the local machine is:
1. Boot from the installation media
2. Set a password with passwd
3. Enable SSH with systemctl start sshd
It is safe as root doesn't have a password by default
and SSH is disabled by default.
Fixes #20718
2017-01-25 21:09:31 +01:00
Franz Pletz
516760a6fb
nixos/acme: add random delay to timer
...
This way we behave like good citizens and won't overload Let's Encrypt
with lots of cert renewal requests at the same time.
2017-01-25 19:15:04 +01:00
Vladimír Čunát
278bbe3b33
add kresd service with basic options
...
Still celebrating today's 1.2.0 release!
2017-01-25 18:46:28 +01:00
Bob van der Linden
d9987f360a
nginx: added serverName option for virtualHosts
...
This allows overriding the `server_name` attribute of virtual
hosts. By doing so it is possible to have multiple virtualHost
definitions that share the same `server_name`. This is useful in
particular when you need a HTTP as well as a HTTPS virtualhost: same
server_name, different port.
2017-01-25 14:55:55 +01:00
Franz Pletz
b9b95aa4d4
Merge pull request #22034 from mayflower/conntrack-helpers
...
Disable conntrack helper autoloading by default
2017-01-25 14:18:41 +01:00
Tuomas Tynkkynen
32643dc07d
installer: sd-image-*.nix: Document how to build them
2017-01-25 15:07:37 +02:00
Daniel Peebles
95add2c2f7
Merge pull request #22103 from copumpkin/automatic-kafka-broker-id
...
apache-kafka service: change default brokerId to -1
2017-01-24 22:17:03 -05:00
Tuomas Tynkkynen
0e4c1bfb43
installer: Add SD image expression for Aarch64
...
This one works on the Raspberry Pi 3 so far.
2017-01-25 02:14:47 +02:00
Tuomas Tynkkynen
b29ee6c8ff
U-Boot: Add 64-bit Raspberry Pi 3 build
...
And rename the old ubootRaspberryPi3 to ubootRaspberryPi3_32bit.
2017-01-25 02:14:47 +02:00
Franz Pletz
8322a12ef2
firewall: disable conntrack helper autoloading by default
...
This was disabled in the Linux kernel since 4.7 and poses a security risk
if not configured properly.
https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=486dcf43da7815baa615822f3e46883ccca5400f
2017-01-25 01:14:04 +01:00
Franz Pletz
403fdd737e
linux: remove canDisableNetfilterConntrackHelpers feature
...
This feature is available in all kernels in nixpkgs.
2017-01-25 00:28:55 +01:00
Thomas Tuegel
54df142672
nixos/kde5: use kimpanel with IBus by default
2017-01-24 12:55:06 -06:00
Thomas Tuegel
e38970c60b
nixos/ibus: fix custom panel example
...
The example was missing a `''`, so it did not appear correctly in the
manual. This also caused the manual to retain references inappropriately.
2017-01-24 12:52:39 -06:00
Michael Raskin
ae4f2fd145
Merge pull request #22066 from mbrgm/journalbeat
...
journalbeat service: init at 5.1.2
2017-01-24 17:56:48 +00:00
Michael Raskin
7516dbe35e
Merge pull request #22045 from rnhmjoj/recursor
...
PowerDNS Recursor: add package and service
2017-01-24 17:54:47 +00:00
Michael Raskin
47661c831e
Merge pull request #22028 from MostAwesomeDude/tahoe
...
Tahoe-LAFS version bump
2017-01-24 17:49:00 +00:00
Dan Peebles
eebee95176
apache-kafka service: change default brokerId to -1
...
A default of 0 means that if you deploy two NixOS boxes with the default
configuration, the second will fail because the brokerId was already in
use. Using -1 instead tells it to pick one automatically at first start.
2017-01-24 12:32:22 -05:00
Kai
25d86bdd10
vnstat service: init ( #19809 )
2017-01-24 14:45:01 +01:00
Tristan Helmich
b3b300b6ff
smokeping: setuid for fping6
2017-01-24 12:40:21 +01:00
Vladimír Čunát
fd26ad6f76
nixos programs.man.enable: improve description
2017-01-24 09:59:54 +01:00
Corbin
de4c9e0d15
nixos/services/tahoe: Work around awkward command.
2017-01-23 17:55:41 -08:00
Tuomas Tynkkynen
b63f97c6e6
installer: Include stdenvNoCC
...
And don't include ArchiveCpio as that one is no longer needed after
5a8147479
2017-01-23 23:49:18 +02:00
Marius Bergmann
00444cbf25
journalbeat service: init at 5.1.2
...
Journalbeat is a log shipper from systemd/journald to
Logstash/Elasticsearch. I added a package as well as a NixOS service
module for it.
2017-01-23 18:28:55 +01:00
rnhmjoj
6bcf89f217
pdns-recursor: add service
2017-01-23 17:57:48 +01:00
Jaka Hudoklin
90e0ed32ef
Merge pull request #22043 from rnhmjoj/dnscrypt-wrapper
...
dnscrypt-wrapper: add service
2017-01-23 11:23:28 +01:00
rnhmjoj
9f2bb2ed42
dnscrypt-wrapper: add service
2017-01-23 07:06:07 +01:00
Robert Helgesson
cd9f709582
flannel service: fix enable expression
...
Need to surround the equality check in parentheses.
2017-01-22 21:58:39 +01:00
Franz Pletz
df0301f59b
nixos/networkmanager: trigger assertion instead of error
2017-01-22 20:32:24 +01:00
Charles Strahan
d298a961f1
Merge pull request #21416 from cstrahan/mesos-1.1.0
...
mesos: 1.0.1 -> 1.1.0
2017-01-21 19:05:18 -05:00
Charles Strahan
5b1b089de3
Merge pull request #8642 from cstrahan/slim-console-cmd
...
nixos: provide default console_cmd for slim
2017-01-21 19:01:02 -05:00
Charles Strahan
71f92bc8a3
nixos: provide default console_cmd for slim
...
This provides a default console_cmd for the slim display-manager.
When the user enters "console" as the user name, slim will run this
command.
Having a default is rather important; the virtual terminals don't work
with some display drivers, so having a broken X session can leave you
locked out of your machine.
2017-01-21 18:59:28 -05:00
Franz Pletz
ab90eac835
networking: fix typo in resolvconf option edns0
2017-01-21 20:41:11 +01:00
Daiderd Jordan
1aa77d0519
Merge pull request #19363 from schneefux/gogs-module
...
gogs: init module
2017-01-21 16:25:16 +01:00
Franz Pletz
068dad3a21
systemd-boot: fix evaluation
2017-01-21 14:42:10 +01:00
Linus Heckemann
98bd722d1d
systemd-boot: allow setting editor security option ( #21853 )
2017-01-21 14:24:26 +01:00
schneefux
67c4512060
gogs service: init
2017-01-21 13:38:24 +01:00
Thomas Tuegel
1e266dac0d
ibus: make panel configurable
2017-01-20 18:51:29 -06:00
Daiderd Jordan
2b2b0b566d
Merge pull request #20183 from womfoo/init/netdata-service
...
netdata service: init
2017-01-20 21:05:10 +01:00
Nikolay Amiantov
d75a3cfb29
Merge pull request #21995 from abbradar/opencl
...
Fix OpenCL support
2017-01-20 12:09:17 +03:00
Graham Christensen
c0f3b8d629
wordpress: 4.6.1 -> 4.7.1 for multiple CVEs
...
CVE-2017-5487 CVE-2017-5488 CVE-2017-5489 CVE-2017-5490 CVE-2017-5491 CVE-2017-5492 CVE-2017-5493
2017-01-19 22:53:49 -05:00
Nikolay Amiantov
221685aee9
opengl service: mention that you can add OpenCL drivers
2017-01-20 03:37:51 +03:00
Bjørn Forsman
6a52a130de
nixos/kde5: enable system-config-printer dbus service
...
Without it, the following error is shown in the "Add Printer" window:
Failed to group devices: 'The name org.fedoraproject.Config.Printing was not provided by any .service files'
2017-01-18 20:39:17 +01:00
Robin Gloster
f4f4200d9a
install-devices: add vim
...
This moves vim to the install-device profile to add vim to netboot, too.
Fixes #20013 (see discussion there for further information)
2017-01-18 17:57:31 +01:00
Michael Weiss
460b43dbfe
firewall: Improve the comments (documentation) ( #21862 )
...
* Fix the FW names
FW_REFUSE was removed and nixos-fw-input was renamed to nixos-fw.
* Update the comment (documentation) at the top
Order the chains of the main table alphabetically (like in the rest of
the file) and add nixos-fw-rpfilter (from the raw table) and nixos-drop
(used while reloading the firewall).
* Refactor the module (mainly comments)
- Move some attributes to the top for better visibility (that should
hopefully make it easier to read and understand this module without
jumping around too much).
- Add some missing examples and improve some descriptions.
- Reorder the mkOption attributes for consistency.
- Wrap lines at 72 characters.
- Use two spaces between sentences.
2017-01-18 17:18:11 +01:00
Eelco Dolstra
42a7d906d9
EC2 AMIs: 16.09.666.3738950 -> 16.09.1508.3909827
...
In particular, this includes a fix for using ephemeral disks for /tmp,
and adds AMIs for the new eu-west-2 (London) and us-east-2 (Ohio)
regions.
2017-01-18 12:42:39 +01:00
gnidorah
4a662e5206
nano: add nix syntax hightlight, nano module: provide default ( #21912 )
...
this is awesome! thanks.
2017-01-18 12:05:30 +01:00
Jörg Thalheim
8fa8e4ada9
Merge pull request #21961 from kierdavis/ckb
...
ckb: add to module list
2017-01-18 08:32:02 +01:00
Kier Davis
3aa218edbf
ckb: add to module list
...
Not the first time I've forgotten to do this.
2017-01-17 23:12:21 +00:00
Svein Ove Aas
fec95a40f1
ddclient: Don't include blank server= lines.
2017-01-16 18:54:49 +01:00
Tristan Helmich
e5f353d5cd
couchpotato module: init
2017-01-16 12:54:43 +01:00
Jörg Thalheim
28093e42ec
Merge pull request #21864 from pjones/pjones/dovecot
...
dovecot: Fix sieve scripts
2017-01-16 12:42:06 +01:00
Nicolas B. Pierron
c4e2dc36f2
Fix typo, lib.listOf --> types.listOf
2017-01-16 01:17:33 +01:00
Nicolas B. Pierron
a0615e2a9f
Fix typo in nixpkgs.nix module.
2017-01-16 01:17:33 +01:00
Nicolas B. Pierron
2d6532b330
Update overlay documentation by following nits from aneeshusa.
2017-01-16 01:17:33 +01:00
Nicolas B. Pierron
83f7d5fc0a
Add NixOS option 'nixpkgs.overlays' to set the argument of Nixpkgs.
2017-01-16 01:17:33 +01:00
Bjørn Forsman
4c803b904e
nixos/clamav: set "clamav" user's primary group to "clamav"
...
So that the files created by the clamav service is owned by group
"clamav" instead of "nogroup".
2017-01-15 22:56:34 +01:00
Franz Pletz
30645560cd
Merge pull request #21880 from mguentner/ipfs_empty_repo
...
services: ipfs: add emptyRepo option, refactor
2017-01-15 18:16:00 +01:00
Nikolay Amiantov
3eafa26d75
Merge pull request #21828 from abbradar/hwdb-verify
...
udev service: verify that hwdb is generated without errors
2017-01-15 19:53:53 +03:00
Nikolay Amiantov
70a6628848
Merge pull request #21882 from abbradar/dhcp6
...
DHCPv6 improvements
2017-01-15 19:53:33 +03:00
Nikolay Amiantov
820b4cd067
firewall service: allow DHCPv6 client traffic
2017-01-15 19:38:54 +03:00
Nikolay Amiantov
1158eda66a
dhcpd service: add DHCPv6 support
2017-01-15 19:38:53 +03:00
Maarten Hoogendoorn
69391e3423
kube-controller-manager service: Allow restarts on failure
2017-01-15 13:27:45 +01:00
Jaka Hudoklin
b5f4db2170
Merge pull request #21050 from offlinehacker/nixos/programs/chromium/add
...
chromium module: add support for chromium policies as nixos module
2017-01-15 01:28:34 +01:00
sternenseemann
9f56dd9d63
nixos/pulseaudio: make daemon.conf configurable ( #20888 )
...
This adds pulseaudio.daemon.config, which is a set of keys to values
which are directly translated to keys and values of pulseaudio's
daemon.conf, e. g.
hardware.pulseaudio.daemon.config = { flat-volumes = "no"; }
becomes
flat-volumes=no
in pulse/daemon.conf.
2017-01-14 22:58:16 +01:00
Bjørn Forsman
d2413943fa
nixos/prometheus: add configText option for alertmanager
...
The reason being less mental overhead when reading upstream
documentation. Examples can be pasted right into the configuration
instead of translating to Nix attrset first.
2017-01-14 15:41:05 +01:00
Sheena Artrip
5c5648b1f6
caddy: add package config option
2017-01-13 22:29:26 -05:00
Maximilian Güntner
a541f86f8b
services: ipfs: add emptyRepo option, refactor
2017-01-14 04:01:43 +01:00
Peter Jones
75aaae34a9
dovecot: Fix sieve scripts
...
Make sure that the output of the sieve compiler produces files that
have a newer time stamp than the source sieve script. Otherwise you
get errors in the logs about Dovecot not being able to compile do to a
permission issue.
2017-01-13 14:19:29 -07:00
Pascal Wittmann
d760d9cccc
Merge pull request #21836 from kierdavis/ckb
...
ckb: init at 0.2.6
2017-01-13 21:44:21 +01:00
Eelco Dolstra
96b6968950
nix: 1.11.5 -> 1.11.6
2017-01-13 11:38:09 +01:00
makefu
e9c6cf02e6
services.logstash: rename address to listenAddress
2017-01-13 10:19:32 +01:00
makefu
10303e9e47
services.logstash: update example and default filter
2017-01-13 10:19:19 +01:00
Jörg Thalheim
4b24ec524d
Merge pull request #21835 from volth/miredo-no-checkconf
...
miredo: do not run miredo-checkconf
2017-01-13 00:25:30 +01:00
Kier Davis
ea7a8bf2d9
ckb: init at 0.2.6
...
ckb is a driver for Corsair keyboards/mice. It also contains a graphical tool for configuring their LED backlight settings.
The driver is implemented as a userland daemon. A NixOS module is included that runs this as a systemd service.
2017-01-12 18:25:14 +00:00
Domen Kožar
e5dcce837a
nixos: fix terminal-server, fixes #21834
2017-01-12 16:41:33 +01:00
Volth
ac0b6b9a2c
miredo: do not run miredo-checkconf
2017-01-12 14:30:58 +00:00
Nikolay Amiantov
6dbcf7d2e9
udev service: verify that hwdb is generated without errors
2017-01-12 11:11:59 +03:00
Jörg Thalheim
05a4fbd56d
Merge pull request #21814 from gpyh/zsh-autosuggestions
...
Fix zshrc ordering
2017-01-11 22:29:25 +01:00
Jörg Thalheim
62708c29f8
Merge pull request #21570 from michaelpj/services/arbtt
...
arbtt service: init
2017-01-11 22:27:52 +01:00
gpyh
373e40736a
Fix zshrc ordering
...
The content of programs.zsh.interactiveShellInit was
inserted too soon in the generated zshrc
This caused some settings related to autocompletion to be ignored
2017-01-11 22:03:27 +01:00
Jörg Thalheim
9c8517a9eb
Merge pull request #21788 from Mic92/apparmor
...
apparmor: support for lxc profiles
2017-01-11 08:39:54 +01:00
Yacine Hmito
f88e2fb5f1
zsh-autosuggestions: init at 0.3.3 ( #21792 )
...
Added a related `programs.zsh.enableAutosuggestions` option
2017-01-11 07:00:48 +01:00
Jörg Thalheim
30a554acfb
apparmor: support for lxc profiles
2017-01-10 23:01:03 +01:00
Franz Pletz
e4fb2bb0c5
Revert "nixos/stage2: Check for each special mount individually and mount missing ones. ( #21370 )"
...
This reverts commit 712e62c260
2017-01-10 17:35:38 +01:00
Vladimír Čunát
11696e290d
nixos networking.dnsExtensionMechanism = true; by default
...
https://github.com/NixOS/nixpkgs/issues/12470#issuecomment-266785641
I've been using it for weeks without encountering any problems.
2017-01-10 15:15:01 +01:00
Franz Pletz
88908145ea
nixos installer: don't log refused packets to console
...
Fixes #19764 .
2017-01-09 19:24:41 +01:00
oida
d423567a95
prometheus-snmp-exporter: added nixos module
2017-01-09 18:05:28 +01:00
Robin Gloster
575afe3fa7
prometheus exporter modules: unify firewall handling
2017-01-09 15:31:37 +01:00
Corbin
618b249fc5
prometheus module: add blackboxExporter
2017-01-09 15:20:26 +01:00
Corbin
bd45d5fe8d
prometheus module: add jsonExporter
2017-01-09 15:20:26 +01:00
Corbin
1b839a586b
prometheus module: add varnishExporter
2017-01-09 15:20:26 +01:00
Corbin
363fa27448
promeutheus.nginxExporter: add improvements
...
- use ExecStart and ExecReload
- add extraFlags
2017-01-09 15:20:26 +01:00
Robin Gloster
39e8eaf8b6
prometheus module: add nginxExporter
2017-01-09 15:20:26 +01:00
Peter Hoeg
f1b8c3b119
pulseaudio nixos module: use the units provided by upstream ( #21633 )
...
I have left in 2 NixOS custom config directives, so the configuration
should be the same with the only change in behaviour being that the
service is not eagerly loaded but in fact only socket activated, which
it should be.
2017-01-09 13:47:33 +01:00
Sebastian Hagen
712e62c260
nixos/stage2: Check for each special mount individually and mount missing ones. ( #21370 )
2017-01-09 10:32:23 +01:00
teh
a878365b77
nixos docs: update for Nginx + ACME ( #21320 )
...
Closes #20698 .
2017-01-09 06:39:10 +01:00
Svein Ove Aas
a4fca56897
ddclient: Write /etc/ddclient.conf when requested
...
Fixes #20101
From PR #21417
2017-01-09 06:29:15 +01:00
Daniel Peebles
b0264bb63c
Merge pull request #21703 from copumpkin/httpd-no-mkdir
...
httpd module: don't create documentRoot directory if it doesn't exist
2017-01-09 00:28:41 -05:00
Jörg Thalheim
94c4eab6cc
Merge pull request #21733 from regellosigkeitsaxiom/master
...
Added option networking.wireless.networks.*.priority
2017-01-08 17:45:52 +01:00
florianjacob
ef8fd815cc
update os-release manpage link
...
the old manpage at 0pointer is still there, but does not seem to get updated
2017-01-07 19:57:03 +02:00
