Commit Graph

45703 Commits

Author SHA1 Message Date
Vladimír Čunát
8810e738c8
GNOME: 46 → 47 (#333911) 2024-10-15 18:07:04 +02:00
Michele Guerini Rocco
1063a12f60
nixos/tests/networking: test nameservers via DHCP (#348747) 2024-10-15 15:44:48 +02:00
rnhmjoj
127dcca388
nixos/tests/networking: test nameservers via DHCP 2024-10-15 11:53:05 +02:00
Emily
9c2358e722 python3{11,12}Packages.nose: drop
🎉

This package has been deprecated and unmaintained upstream for almost a
decade, has required extensive patching to keep working on new Python
versions, will inevitably break again with Python 3.13 dropping 2to3,
is lacking a maintainer in Nixpkgs, is now unused in the tree, and
has caused us all far too many headaches lately. Let’s put an end
to this!

Shout‐outs to mweinelt and jchv for dealing with this situation
early on, pyrox0, Sigmanificient, and dotlambda for tackling a bunch
of packages, and natsukium for help with reviews. I never thought this
would get finished so quickly. We’ve collectively handled almost
1½ packages per day in the three months since I first opened the
tracking issue, and sometimes helped move the entire ecosystem forward.

Closes: #326513
2024-10-15 09:34:36 +01:00
Yaya
209b7f634b nixosTests.snipe-it: fix test 2024-10-15 09:11:35 +02:00
Jared Baur
7c828e9e1a
nixosTests.amazon-init-shell: test switching during amazon-init
In order to emulate the `nixos-rebuild switch` that is called if the EC2
user data is a nix expression, run the switch-to-configuration script
for the current running config.
2024-10-14 20:27:16 -07:00
Felix Singer
13f6e2d85f nixos/murmur: Set UMask to 027
Group only needs limited access, while other users don't need access at
all. So set the UMask to 027.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-15 02:43:42 +02:00
github-actions[bot]
31b11f1926
Merge staging-next into staging 2024-10-15 00:14:36 +00:00
Maximilian Bosch
0f1e2a1cd8
nixos/postgresql: MemoryDenyWriteExecute must be off when doing JIT
The test breaks like this otherwise:

    machine # WARNING:  error during JITing: Permission denied
    machine # [   14.012280] postgres[913]: [913] WARNING:  error during JITing: Permission denied
    machine # ERROR:  failed to look up symbol "evalexpr_0_1": Failed to materialize symbols: { (main, { evalexpr_0_1, evalexpr_0_0 }) }
2024-10-14 23:57:39 +02:00
Masum Reza
18760e4c99
{nixos/gpu-screen-recorder,gpu-screen-recorder{-,gtk}}: update to 4.1.11, remove cap_sys_nice (#339874) 2024-10-15 02:16:59 +05:30
Someone
a9b63f037b
nvidia-container-toolkit: add "nvidia" to services.xserver.videoDrivers (#344174) 2024-10-14 19:58:35 +00:00
Pol Dellaiera
242832e023
nixos/nix-fallback-paths: 2.24.8 -> 2.24.9 (#348411) 2024-10-14 21:10:40 +02:00
Artturin
431d0a19ef
xdg-desktop-portal: Fix installedTests (#344743) 2024-10-14 21:36:39 +03:00
github-actions[bot]
873f258025
Merge staging-next into staging 2024-10-14 18:04:57 +00:00
Sandro Jäckel
db12279890
nixos/go-camo: fix shellcheck findings with enableStrictShellChecks enabled 2024-10-14 18:21:30 +02:00
Sandro Jäckel
1ada7c1d36
nixos/nextcloud: fix shellcheck findings with enableStrictShellChecks enabled 2024-10-14 18:20:25 +02:00
Arian van Putten
f167bdaab9
Make arianvp codeowner of aws (#348499) 2024-10-14 16:16:56 +02:00
Michele Guerini Rocco
35618d0b14
nixos/dhcpcd: fix race between namespace setup and resolvconf (#348305) 2024-10-14 15:44:32 +02:00
Adam C. Stephens
86420f4ee8
nixos/atticd: init module (#347749) 2024-10-14 09:33:35 -04:00
Bobby Rong
a506339b29
nixos/localsearch, nixos/tinysparql: Remove some empty lines
As requested by Sandro.
2024-10-14 20:54:19 +08:00
Bobby Rong
e0fab01389
nixos/rl-2411: Mention GNOME 47 2024-10-14 20:54:18 +08:00
Bobby Rong
09918511b8
xdg-user-dirs-gtk: init at 0.11
https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1625#note_2234235
2024-10-14 20:54:17 +08:00
Bobby Rong
8a8d0974b8
nixos/localsearch: Format with nixfmt
As requested by CI.
2024-10-14 20:54:11 +08:00
Bobby Rong
c0a9799ad1
tinysparql: Renamed from tracker
The project renamed in 3.8.

This commit is done by hand.
2024-10-14 20:54:11 +08:00
Bobby Rong
bd9782dc89
localsearch: Renamed from tracker-miners
The project renamed in 3.8.

This commit is done by hand.
2024-10-14 20:54:11 +08:00
Bobby Rong
f65d304316
nixos/tinysparql: Format with nixfmt
As requested by CI.
2024-10-14 20:54:09 +08:00
Bobby Rong
6bfd9413a7
nixos/localsearch: Renamed from tracker-miners module
The project was renamed.
2024-10-14 20:54:09 +08:00
Bobby Rong
faf647b799
nixos/tinysparql: Renamed from tracker module
The project was renamed.
2024-10-14 20:54:09 +08:00
Bobby Rong
f65fd4b0dd
nixos/tracker: Remove subcommandPackages option
The TRACKER_CLI_SUBCOMMANDS_DIR env is superseded by TRACKER_CLI_DIR env in
d14c3bb0af

The TRACKER_CLI_DIR env is then removed in
3a86e86c9d
with the commit message "we do no longer expect this CLI to be extended by external
projects".

Also tracker-miners (localsearch) now provides its own cli tool:
a8989f4378
2024-10-14 20:54:09 +08:00
github-actions[bot]
a445289eb9
Merge staging-next into staging 2024-10-14 12:41:38 +00:00
Martin Weinelt
f4226b78df
knot-dns: 3.4.0 -> 3.4.1 (#348476) 2024-10-14 14:20:26 +02:00
github-actions[bot]
b9f01e6de3
Merge staging-next into staging 2024-10-14 12:06:08 +00:00
Richard Steinmetz
b9ca8498aa nixos/nextcloud-notify_push: fix connecting to mysql via socket 2024-10-14 13:30:05 +02:00
Arian van Putten
0890727868 nixos/ec2-data: Make arianvp maintainer 2024-10-14 12:44:16 +02:00
Maximilian Bosch
782b08ba3d
Merge: percona: update packages, init 8.4 (#346027) 2024-10-14 12:40:48 +02:00
Paul Meyer
2f6e0c8de3 nixos/systemd-initrd: add missing kmod-blacklist src
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-10-14 11:34:27 +02:00
OTABI Tomoya
8f8f0badb3
buildPython*: Deprecate and remove (buildPython* { ... }).override (#333670) 2024-10-14 17:56:43 +09:00
Vladimír Čunát
46954f61c6
nixos/knotd: extend SystemCallFilter
It was breaking knot-dns.tests.knot
New knotd uses fchown to cover cases where user changes during startup.
In typical Linux cases the user is kept the same and there are
capabilities instead, but the syscall still happens and got caught here.
2024-10-14 10:26:46 +02:00
Markus Kowalewski
812640f38a
nixos/saunafs: add module + test (#347337) 2024-10-14 09:24:51 +02:00
Vladimír Čunát
a3c0b3b215
Revert "nixos/tests/networking: test nameservers via DHCP"
This reverts commit bad5251e87.

https://github.com/NixOS/nixpkgs/pull/348305#issuecomment-2410165312
Should've known that commit starting with `bad` will be no good.
Fixes nixosTests.networking.networkd.dhcpSimple
https://hydra.nixos.org/build/274843085/nixlog/8/tail
2024-10-14 08:48:30 +02:00
github-actions[bot]
55382a65b9
Merge staging-next into staging 2024-10-14 06:05:43 +00:00
rnhmjoj
52e2e7027d
dhcpcd: fix race between namespace setup and resolvconf
systemd requires paths in `ReadWritePaths=` to exist before setting up
the service sandbox, so dhcpcd should be ordered after resolvconf.
Making resolvconf a oneshot service ensure `After=resolvconf.service`
works correctly.
2024-10-14 08:02:46 +02:00
Daniel Olsen
0ac0623e15 mjolnir: 1.6.5 -> 1.8.3 2024-10-14 07:43:39 +02:00
Pol Dellaiera
56cbea0d2e
snapweb: init at 0.8.0 (#347536) 2024-10-14 07:14:23 +02:00
zowoq
a87bc99783 nixos/nix-fallback-paths: 2.24.8 -> 2.24.9
https://releases.nixos.org/nix/nix-2.24.9/fallback-paths.nix
2024-10-14 13:00:57 +10:00
Felix Buehler
de810c5163 nixos/freshrss: update de parameters 2024-10-13 23:07:46 +02:00
Oliver Schmidt
6d0da9a167 tests/mysql: properly specify percona packages 2024-10-13 23:04:24 +02:00
Oliver Schmidt
4b5141e018 percona: deprecate innovation/lts release flavours
Percona upstream has decided not to create releases or each MySQL
innovation upstream release, but just for LTS releases.
https://www.percona.com/blog/no-mysql-9-x-innovation-releases-from-percona/
2024-10-13 23:04:24 +02:00
github-actions[bot]
d489b14cea
Merge staging-next into staging 2024-10-13 18:04:18 +00:00
Christian Kögler
5082384e7d networkd: add missing option SendHostname and Hostname for dhcpV6Config 2024-10-13 18:44:25 +02:00
Oliver Schmidt
8315d06e99 percona: release notes for 8.4 LTS release 2024-10-13 18:15:49 +02:00
Bjørn Forsman
97ad9186ca nixos/release-notes: add power.ups entry 2024-10-13 17:55:52 +02:00
Bjørn Forsman
21529d1813 nixos/ups: shutdown UPS at host shutdown
Implement the missing bit of the NUT shutdown design[1]. This ensures
that machines come back up automatically after a power outage. (Without
this change they will only come back up if the UPS completely empties
its battery.)

[1] https://networkupstools.org/docs/user-manual.chunked/Configuration_notes.html#Shutdown_design
2024-10-13 17:55:52 +02:00
Bjørn Forsman
3b781a1e72 nixos/ups: document default upsmon MONITOR value 2024-10-13 17:55:52 +02:00
Bjørn Forsman
2b90f4cdb3 nixos/ups: sort settings attributes
They're listed twice (documentation and implementation) and this change
makes it easier to compare the attrsets.
2024-10-13 17:55:52 +02:00
Martin Weinelt
db13b6d4c4 Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
- pkgs/development/python-modules/mlflow/default.nix
- pkgs/development/python-modules/napari/default.nix
2024-10-13 15:36:55 +02:00
Adam Stephens
8d4f3f2b3e
nixos/atticd: init module
Copied from 1b29816235/nixos/atticd.nix and modified
2024-10-13 08:23:34 -04:00
rnhmjoj
565f972ded
nixos/getty: add option to autologin once per boot, take 2
Another attempt to bring ae48df3e while avoiding the Nix symlink bug[1].
I guess the bug was triggered by the sbin -> bin symlink in util-linux.

[1]: https://github.com/NixOS/nix/issues/9579
2024-10-13 12:45:15 +02:00
Azat Bahawi
cceb5afb5c
nixosTests.endlessh-go: fix to match current module (#347976) 2024-10-13 09:10:04 +00:00
Kirill Radzikhovskyy
df3ae6ee5c nixosTests.timescaledb: fix build, bump postgres version 2024-10-13 19:21:23 +11:00
Robert Schütz
cc4d29d353 nixos/headscale: assert that dns.base_domain is set when using MagicDNS 2024-10-12 18:28:17 -07:00
github-actions[bot]
bf97df9c1c
Merge staging-next into staging 2024-10-13 00:15:51 +00:00
github-actions[bot]
4a5ad0965f
Merge master into staging-next 2024-10-13 00:15:27 +00:00
nikstur
ca8147e42e
qemu-vm: fix case-hack appearing in store image (#347636) 2024-10-12 21:50:11 +02:00
K900
001fb496bf Merge remote-tracking branch 'origin/master' into staging-next 2024-10-12 21:08:11 +03:00
Kerstin
35c52ab030
mastodon: 4.2.13 -> 4.3.0 (#337545) 2024-10-12 19:37:08 +02:00
Markus Kowalewski
2d5bae6932
nixos/release-notes: add saunafs under "New modules" sections 2024-10-12 19:13:03 +02:00
Markus Kowalewski
d22d60f3ac
nixos/saunafs: add module + test 2024-10-12 19:13:00 +02:00
Florian Klink
2afe930c60
ipu6: update packages (#347918) 2024-10-12 19:27:43 +03:00
ghpzin
c14ec3582e nixos/tests/docker-tools-overlay: fix test
- change `virtualisation.docker.storageDriver` from deprecated `overlay`
to `overlay2`. Using `overlay` dockerd fails to start with error:
`ERROR: the overlay storage-driver has been deprecated and removed`
https://docs.docker.com/engine/deprecated/#legacy-overlay-storage-driver
2024-10-12 18:58:25 +03:00
Maximilian Bosch
f840d87a6e
Merge: nixos/nginx: expand proxyResolveWhileRunning's description (#347164) 2024-10-12 17:14:43 +02:00
Cosima Neidahl
e58a261efb
lomiri.*: Updates (#341377) 2024-10-12 16:49:25 +02:00
K900
bf39b439c4
nixos/tests/nixos-rebuild-target-host: fix test (#348044) 2024-10-12 17:47:29 +03:00
github-actions[bot]
f201fe5883
Merge staging-next into staging 2024-10-12 12:05:39 +00:00
github-actions[bot]
4433a315bd
Merge master into staging-next 2024-10-12 12:05:08 +00:00
Michele Guerini Rocco
3106e48fbc
dhcpcd: bring back enablePrivSep option, nixos/release-notes: remove duplicate note (#347578) 2024-10-12 13:01:52 +02:00
Florian Klink
237016d023
gogs: remove (#348053) 2024-10-12 13:13:13 +03:00
Ramses
b1e4854ecb
nixos/automatic-timezoned: set time.timeZone to null to avoid silent overriding (#347217) 2024-10-12 11:12:27 +02:00
Pol Dellaiera
afd96bad04
Bump and fix nextjs-ollama-llm-ui (#347856) 2024-10-12 10:42:53 +02:00
Maximilian Bosch
875f00ed40
gogs: remove
Upstream development has stalled and several critical vulnerabilities
that weren't addressed within a year[1][2].

Back then it was fair to mark it as insecure, but given nothing has
happened since, it's time to remove it.

[1] https://forgejo.org/2023-11-release-v1-20-5-1/
[2] https://github.com/gogs/gogs/issues/7777
2024-10-12 10:36:06 +02:00
K900
ca82458e77 nixos/tests/nixos-rebuild-target-host: fix test
Fixes #348043
2024-10-12 10:32:59 +03:00
Robert Schütz
0673e98248 nixos/headscale: update option descriptions 2024-10-11 20:17:15 -07:00
Robert Schütz
b5cb8fb063 nixos/tests/headscale: set dns.base_domain
Otherwise the test fails with

    dns.base_domain must be set when using MagicDNS
2024-10-11 20:10:31 -07:00
Robert Schütz
dfb0f00fc9 nixos/headscale: don't set deprecated options in config
We cannot use `mkRenamedOptionModule` or `mkRemovedOptionModule` inside
a freeform option. Thus we have to manually assert these deprecated
options aren't used rather than aliasing them to their replacement.
2024-10-11 20:05:29 -07:00
github-actions[bot]
9f6509c682
Merge staging-next into staging 2024-10-12 00:14:07 +00:00
github-actions[bot]
4f2eec3440
Merge master into staging-next 2024-10-12 00:13:45 +00:00
Matej Cotman
f53387e15a ipu6: update packages
This updates the ipu6 driver and firmware to a more recent version,
which seems to at least work in Chrom{e,ium}.

ipu6-drivers now relies on the in-kernel ipu6 kernel driver, so we
update our logic and metadata for it.
2024-10-12 00:45:04 +03:00
Kira Bruneau
79a1c330d3
nixos/gamemode: use listsAsDuplicateKeys for settings (#345121) 2024-10-11 17:36:26 -04:00
Robert Schütz
d4ae06c73b nixos/headscale: assert that server_url does not contain base_domain 2024-10-11 13:29:04 -07:00
Philipp Bartsch
60eaae1d78 nixosTests.endlessh-go: fix to match current module
Tests were not changed according to the new prometheus firewall port
settings.

With this change we now check that the port is not accessible form the
outside, while everything still works from localhost.
2024-10-11 21:30:19 +02:00
Bruno Bigras
986d7cad0d
wakapi: set StateDirectory (#347431) 2024-10-11 14:48:16 -04:00
Atemu
12ef18d2e3
nixos/systemd-boot: Simpler windows dual booting (#344327) 2024-10-11 20:25:08 +02:00
github-actions[bot]
9b6cd89281
Merge staging-next into staging 2024-10-11 18:05:02 +00:00
github-actions[bot]
b415f9c282
Merge master into staging-next 2024-10-11 18:04:32 +00:00
MithicSpirit
08831a7160
nixos/gamemode: use listsAsDuplicateKeys for settings
This allows settings multiple scripts in `.custom.start` and
`.custom.end`, as Gamemode reads them back out into a list.

This is slightly annoying, as *any* duplicate keys will appear multiple
times, while gamemode will only accept the last one for most keys
(clobbering previous ones). Ideally, it would be possible to only enable
`listsAsDuplicateKeys` for scripts, but this does not seem to be
possible in `pkgs.formats.ini`.
2024-10-11 11:41:35 -04:00
Kira Bruneau
77ecd8eaab
formats.ini: disable merging as list by default (#346299) 2024-10-11 10:45:21 -04:00
Florian Klink
7ba149e9d1
nixos/gerrit: Apply initial hardening using the systemd unit (#347661) 2024-10-11 15:16:09 +03:00
github-actions[bot]
a0cb562430
Merge staging-next into staging 2024-10-11 12:06:07 +00:00
github-actions[bot]
ca2d394166
Merge master into staging-next 2024-10-11 12:05:38 +00:00
Sandro
eac17593c1
croc: 10.0.11 -> 10.0.13 (#338918) 2024-10-11 11:38:18 +02:00
Peder Bergebakken Sundt
233d422887 nixos/tailscale: document tailscale-autoconnect 2024-10-11 10:59:49 +02:00
Felix Uhl
73011ba96f nixos/systemd-boot: add windows option for easy dual-booting
When installing NixOS on a machine with Windows, the "easiest" solution
to dual-boot is re-using the existing EFI System Partition (ESP), which
allows systemd-boot to detect Windows automatically.

However, if there are multiple ESPs, maybe even on multiple disks,
systemd-boot is unable to detect the other OSes, and you either have to
use Grub and os-prober, or do a tedious manual configuration as
described in the wiki:
https://wiki.nixos.org/w/index.php?title=Dual_Booting_NixOS_and_Windows&redirect=no#EFI_with_multiple_disks

This commit automates and documents this properly so only a single line
like

    boot.loader.systemd-boot.windows."10".efiDeviceHandle = "HD0c2";

is required.

In the future, we might want to try automatically detecting this
during installation, but finding the correct device handle while the
kernel is running is tricky.
2024-10-11 10:56:02 +02:00
Felix Uhl
f2e5b04c4e nixos/systemd-boot: add edk2-uefi-shell boot option
We already have a edk2-uefi-shell package in nixpkgs, but adding it to
systemd-boot was somewhat tedious. Now it's a single line of nix.
2024-10-11 10:53:42 +02:00
Felix Uhl
548206583d nixos/systemd-boot: autoformat 2024-10-11 10:53:38 +02:00
Kranium Gikos Mendoza
f385d942e1 nextjs-ollama-llm-ui: fix nextjs cache dir (#344316) 2024-10-11 17:35:37 +11:00
github-actions[bot]
a45a33309f
Merge staging-next into staging 2024-10-11 06:05:14 +00:00
github-actions[bot]
e26f69eb82
Merge master into staging-next 2024-10-11 06:04:46 +00:00
Emily
50c2aef3e7
nixos/netboot: Compress squashfs with zstd 19 (#341422) 2024-10-11 05:11:50 +01:00
OPNA2608
1b660ba22a tests/lomiri: Test keymap switch, make keymap OCR more consistent 2024-10-11 05:18:44 +02:00
OPNA2608
6037708c33 lomiri.lomiri-content-hub: Rename from lomiri.content-hub, 1.1.1 -> 2.0.0 2024-10-11 05:17:29 +02:00
oddlama
ae5481883d
nixos/stalwart-mail: fix issue where webadmin interface disappears after some time 2024-10-11 02:30:58 +02:00
github-actions[bot]
aa2334f4a8
Merge master into staging-next 2024-10-11 00:14:02 +00:00
MithicSpirit
e14483d6a6
formats.ini: disable merging as list by default
Previously, setting listsAsDuplicateKeys or listToValue would make it so
merging these treat all values as lists, by coercing non-lists via
lib.singleton. Some programs (such as gamemode; see #345121), allow some
values to be repeated but not others, which can lead to unexpected
behavior when non-list values are merged like this rather than throwing
an error.

This now makes that behavior opt-in via the mergeAsList option. Setting
mergeAsList (to either true or false) without setting either
listsAsDuplicateKeys or listToValue is an error, since lists are
meaningless in this case.
2024-10-10 17:57:41 -04:00
Ayman Bagabas
762a9d42a1
bazarr: allow overriding package in module 2024-10-10 17:23:51 -04:00
h7x4
e49f3574ab
nixos/fedimintd: make nginx url forwarding path configurable (#347604) 2024-10-10 21:14:20 +02:00
Sebastián Zavala Villagómez
8a277a6abf nixos/automatic-timezoned: set time.timeZone to null to avoid silent overriding
Currently if a timezone was selected explicitly, the service will
silently override the value, essentially ignoring what is meant to be a
a deliberate choice of option. This may cause confusion as to why the
option is not doing anything when this service is enabled, particularly
in more complex set-ups after some time.

This will simply make the choice deliberate from the user's part, either
by having to remove the option or lowering its priority as a recognition
that it may be ignored.

This change was inspired by the `services.tzupdate` module, which does
the same.

[1]: <https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/misc/tzupdate.nix#L24>
2024-10-10 14:33:12 -04:00
github-actions[bot]
144082b47e
Merge staging-next into staging 2024-10-10 18:05:19 +00:00
github-actions[bot]
c64ae284c0
Merge master into staging-next 2024-10-10 18:04:46 +00:00
Fabián Heredia Montiel
0cdc526090
deno: 1.46.3 -> 2.0.0, deno_1: init at 1.46.3 (#347484) 2024-10-10 09:36:33 -06:00
Izorkin
36a83a3bf1
mastodon: 4.2.13 -> 4.3.0
Changelog:
https://github.com/mastodon/mastodon/releases/tag/v4.3.0
2024-10-10 16:58:54 +02:00
Mikael Voss
7b3261b5a6
nixos/pam: Strip config in documentation and messages
config can be assumed as the options root and is therefore redundant.
2024-10-10 16:07:36 +02:00
Franz Pletz
262f0e36d5
nixos/pam: add pam_rssh support (#336609) 2024-10-10 15:11:28 +02:00
github-actions[bot]
61a438a474
Merge staging-next into staging 2024-10-10 12:06:10 +00:00
github-actions[bot]
a5883bc172
Merge master into staging-next 2024-10-10 12:05:39 +00:00
Franz Pletz
9958dd2df8
immersed-vr: rename to immersed (#341266) 2024-10-10 13:47:06 +02:00
Franz Pletz
af7b205640
nixos/localtimed: set time.timeZone to null to avoid silent overriding (#347221) 2024-10-10 13:44:36 +02:00
Franz Pletz
1479e0c4de
nixos/frr: refactor (#327099) 2024-10-10 12:55:34 +02:00
06kellyjac
dfce2bc3a7 deno_1: init at 1.46.3
Add a pre v2 copy of deno as deno_1 to provide some stability until our next
release and until 1.46 is fully abandoned soon.
deno_1 is expected to be removed prior to 24.11.
Added a release note.
2024-10-10 11:51:26 +01:00
06kellyjac
43984407b5 deno: 1.46.3 -> 2.0.0
Updates deno to v2.
Slight refactor of fetcher code for grabbing librusty_v8.
Updated the update scripts to use new Deno v2 interfaces and pull latest
toml dependency from jsr rather than the deno.land registry.
Added release note.
2024-10-10 11:51:26 +01:00
Pol Dellaiera
a72a8bcfb3
treewide: fix typo chown -> chmod (#347678) 2024-10-10 10:55:34 +02:00
github-actions[bot]
9dd7231a1d
Merge staging-next into staging 2024-10-10 07:55:12 +00:00
K900
40dd5a1087 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-10 10:49:47 +03:00
r-vdp
30a99334c3
nixos/tmate-ssh-server: Fix typo, chown -> chmod 2024-10-10 09:03:55 +02:00
r-vdp
89abe3c610
nixos/nebula: Fix typo, chown -> chmod 2024-10-10 09:03:29 +02:00
r-vdp
9f1d2e97af
nixos/shorewall: Fix typo, chown -> chmod 2024-10-10 09:02:58 +02:00
r-vdp
11d9033d85
nixos/ec2: Fix typo, chown -> chmod 2024-10-10 09:02:06 +02:00
Masum Reza
cb9ac608fc
nixos/{bcache,lvm}: enable when using systemd in stage 1 initrd (#343760) 2024-10-10 12:16:31 +05:30
Masum Reza
83965777ed
nixos/hypridle: make hypridle start with graphical-session.target (#347662) 2024-10-10 12:14:27 +05:30
Felix Singer
3d30811d4e nixos/gerrit: Apply initial hardening using the systemd unit
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-10 07:12:28 +02:00
John Titor
5eee20f731
nixos/hypridle: make hypridle start with graphical-session.target
If we don't add the dependency explicitly, the service won't be pulled in
at runtime. Link: https://github.com/NixOS/nixpkgs/pull/340874#issuecomment-2365302744

Closes: https://github.com/NixOS/nixpkgs/issues/347651
2024-10-10 10:32:48 +05:30
Emily
e694240f77 Merge staging-next into staging 2024-10-10 01:23:52 +01:00
github-actions[bot]
1404154595
Merge master into staging-next 2024-10-10 00:14:06 +00:00
Aaron Andersen
50a0ea2eb6
nixos/redmine: Apply initial hardening using the systemd unit (#346554) 2024-10-09 18:47:58 -04:00
Dawid Ciężarkiewicz
570454c295
nixos/fedimintd: make nginx url forwarding path configurable
Some users would like to customize it.

Also, in current versions of fedimint p2p port in the URL
must be set, due to some bug, so update the example value
to reflect that.
2024-10-09 14:28:51 -07:00
Frank Doepper
ecdfb14ef9 nixos/frr: refactor
- use upstream service and scripts
- switch to integrated-vtysh-config, abandon per-daemon config
- use always daemon names in options (e.g. ospf -> ospfd)
- zebra, mgmtd and staticd are always enabled
- abandon vtyListenAddress, vtyListenPort options; use
  just "extraOptions" or "options" instead, respectively
- extend test to test staticd
- update release-notes
- pkgs.servers.frr: fix sbindir and remove FHS PATH
- introduce services.frr.openFilesLimit option
2024-10-09 22:49:50 +02:00
Robert Schütz
db4fd8f4e3
nodePackages.npm: drop (#346536) 2024-10-09 12:01:42 -07:00
rnhmjoj
fb28bba040
nixos/release-notes: remove duplicate note
Fix up the merge of the two dhcpcd hardening PRs (#336988 and #208780)
2024-10-09 20:57:17 +02:00
ettom
4a9538bdbf nixos/snapserver: default http.docRoot to snapweb 2024-10-09 21:45:45 +03:00
K900
0717a4da77 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-09 21:08:25 +03:00
Sandro Jäckel
cb097d74cc
nixos/tests/croc: fix --pass argument and code passing 2024-10-09 17:40:39 +02:00
Sandro Jäckel
fc264c25c2
croc: remove inactive maintainer; nixos/tests/croc: match maintainer with package 2024-10-09 17:39:40 +02:00
Franz Pletz
ca912828ba
nixos/dhcpcd: allow jemalloc and mimalloc memory allocators (#346938) 2024-10-09 17:27:26 +02:00
Matthew Croughan
4eb19953b6
node-red: move from nodePackages (#347018) 2024-10-09 16:11:38 +01:00
Franz Pletz
689b9903ac
nixos/tailscale-derper: init (#306533) 2024-10-09 17:05:01 +02:00
Franz Pletz
ae4102c9f3
headscale (module and package): 0.22.3 -> 0.23.0 (#340054) 2024-10-09 17:01:18 +02:00
Franz Pletz
be6a26cae7
nixos/libvirtd: add startDelay and shutdownTimeout option (#347023) 2024-10-09 16:58:16 +02:00
github-actions[bot]
7bcc9dd470
Merge staging-next into staging 2024-10-09 12:07:41 +00:00
github-actions[bot]
0b14a71873
Merge master into staging-next 2024-10-09 12:06:03 +00:00
Florian Klink
c2a2f68c8c nixosTests.openresty-lua: simplify
There's no point for the intermediate `getPath` function calling
`getLuaPath` with the "lua" argument.
There's also no other nginx test this copies code from.

We always call `getLuaPath` with "lua", so constant-propagate it in.

Also, camel-case `lualibs` to `luaLibs.`
2024-10-09 14:12:14 +03:00
Emery Hemingway
7f63bcba36 nixos/nncp: refactor configuration merging
The NNCP utilities have poor support for configuration merging so
use jq and hjson-cli instead.
2024-10-09 09:07:11 +00:00
Bruno Bigras
90f457d197 wakapi: set StateDirectory
fix #347393
2024-10-09 02:54:57 -04:00
github-actions[bot]
4b2bd47103
Merge staging-next into staging 2024-10-09 06:05:20 +00:00
github-actions[bot]
fc5d8c3e7d
Merge master into staging-next 2024-10-09 06:04:53 +00:00
Michael Hoang
b2e9cc6167 qemu-vm: fix case-hack appearing in store image 2024-10-09 16:59:48 +11:00
Silvan Mosberger
c5cea342ce
lib.oldestSupportedReleaseIsAtLeast: rename from bad name (#347258) 2024-10-09 02:20:39 +02:00
github-actions[bot]
96ea2a3c2f
Merge staging-next into staging 2024-10-09 00:14:47 +00:00
github-actions[bot]
b1bc4ea2b5
Merge master into staging-next 2024-10-09 00:14:24 +00:00
Niklas Hambüchen
b061499d34
ceph: 18.2.4 -> 19.2.0 (#344993) 2024-10-09 01:25:14 +02:00
Niklas Hambüchen
b9b23b2a72 rl-2411: Mention Ceph upgrade 2024-10-08 23:18:51 +00:00
Florian Klink
2ec88eb10b
nixos/systemd: allow running shellcheck on generated systemd scripts (#311394) 2024-10-08 22:24:49 +03:00
Gavin John
ab5706b3a5
nixos/programs.immersed-vr: rename to programs.immersed 2024-10-08 11:38:55 -07:00
Felix Buehler
6290926fed nixos/freshrss: fix phpfpm.pool 2024-10-08 20:23:52 +02:00
K900
956f9243c0 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-08 21:15:13 +03:00
github-actions[bot]
4b355c2828
Merge staging-next into staging 2024-10-08 18:04:57 +00:00
Robert Schütz
b129e21ffd node-red: move from nodePackages 2024-10-08 08:29:56 -07:00
Enno Richter
1c01774e61 nixos/oauth2-proxy: fix display-htpasswd-form flag name 2024-10-08 16:25:00 +02:00
K900
1e4c95f332
kdePackages: Plasma 6.1.5 -> 6.2 (#341487) 2024-10-08 16:00:53 +03:00
Vladimír Čunát
a0c9222e11
Merge branch 'master' into staging-next
(a bit older master for now, due to a conflict in dhcpcd service)
2024-10-08 14:59:47 +02:00
K900
bf21badcac nixos/plasma6: adjust for portal config changes 2024-10-08 15:31:24 +03:00
github-actions[bot]
c4edebbe05
Merge staging-next into staging 2024-10-08 12:06:06 +00:00
Sandro Jäckel
a155c718d3
nixos/nginx: expand proxyResolveWhileRunning's description 2024-10-08 13:36:13 +02:00
Izorkin
c3e32a04ae
nixos/dhcpcd: allow jemalloc and mimalloc memory allocators 2024-10-08 14:12:27 +03:00
K900
a3ccb7f562 steam: decimate 2024-10-08 14:00:17 +03:00
Victor Engmark
7d3b47a0fa
nginx: Create cryptographically secure htpasswd file
Requires the `htpasswd` command available from `pkgs.apacheHttpd`.
2024-10-08 23:14:26 +13:00
Victor Engmark
fef047eba5
nginx: Use placeholders which play nicely with Bash
`<` and `>` are redirection operators.
2024-10-08 23:09:47 +13:00
Florian Klink
146e83d76b
dhcpcd: enable sandboxing options (#208780) 2024-10-08 13:09:11 +03:00
Norbert Melzer
8af94f7ca2
rustic: 0.8.1 -> 0.9.1 (#346508) 2024-10-08 12:07:39 +02:00
r-vdp
2b224f0e3c
nixos/systemd: allow using writeShellApplication for systemd unit scripts 2024-10-08 12:01:48 +02:00
e1mo
4f899ed44d
nixos/dokuwiki,nixos/wordpress,nixos/invoiceplane: Remove deprecated isCoercibleToString
Close #292788
2024-10-08 11:53:03 +02:00
Robert Hensing
a034fb50f7 Format 2024-10-08 11:27:01 +02:00
Robert Hensing
729225e355 treewide: lib.isInOldestRelease -> lib.oldestSupportedReleaseIsAtLeast 2024-10-08 11:14:24 +02:00
Robert Hensing
00355648f0 nixos/modules/profiles/macos-builder.nix: Restore as alias 2024-10-08 10:27:11 +02:00
Robert Hensing
4687820524 Document nixos/modules/profiles/nix-builder-vm.nix 2024-10-08 10:27:11 +02:00
Robert Hensing
1d76033154 Rename nixos/modules/profiles/{macos-builder.nix -> nix-builder-vm.nix} 2024-10-08 10:27:11 +02:00
Robert Hensing
2d11924c9a
macos-builder: readd Nix CLI for debugging (#347205) 2024-10-08 09:58:17 +02:00
Sebastián Zavala Villagómez
1c5727cdf7 nixos/localtimed: set time.timeZone to null to avoid silent overriding
Currently if a timezone was selected explicitly, the service will
silently override the value, essentially ignoring what is meant to be a
a deliberate choice of option. This may cause confusion as to why the
option is not doing anything when this service is enabled, particularly
in more complex set-ups after some time.

This will simply make the choice deliberate from the user's part, either
by having to remove the option or lowering its priority as a recognition
that it may be ignored.

This change was inspired by the `services.tzupdate` module, which does
the same.

[1]: <https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/misc/tzupdate.nix#L24>
2024-10-07 23:40:49 -04:00
Michael Hoang
10bad16926 macos-builder: readd Nix CLI for debugging
See https://github.com/NixOS/nixpkgs/pull/268574#discussion_r1788966194
2024-10-08 12:41:55 +11:00
Emily
85faae5e12 Merge staging-next into staging 2024-10-08 01:24:14 +01:00
Emily
df769e85f3 Merge master into staging-next 2024-10-08 01:23:55 +01:00
github-actions[bot]
5a96e99128
Merge staging-next into staging 2024-10-08 00:14:03 +00:00
Thomas Gerbet
16caf1231b cups-filters: remove support for legacy CUPS browsing and for LDAP
Fixes CVE-2024-47176 and CVE-2024-47850. NixOS is not affected by these security issues by
default because we do not ship the default configuration file so it fallbacks to `BrowseRemoteProtocols dnssd`.

631/udp is removed from the open firewall ports, it was by the CUPS
browsing protocol.
2024-10-07 22:28:12 +02:00
K900
0846895fc6 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-07 21:08:55 +03:00
Philip Taron
9f186c2632
srcOnly: Some improvements (#345198) 2024-10-07 10:20:51 -07:00
Yueh-Shun Li
58bfe74123 buildPython*: Deprecate and remove (buildPython* { ... }).override
Deprecate (buildPythonPackage { ... }).override for Python packages in
favour of overridePythonAttrs.

This change does not affect the override interface of most Python
packages, as the override interface is provided by callPackage and
shadows the locally defined override attribute.
2024-10-08 01:09:35 +08:00
Sandro
0538ecd092
rss-bridge: Remove pkg patch, adapt nixos service (#331295) 2024-10-07 18:57:22 +02:00
Peder Bergebakken Sundt
cd9a00431c
ec2: shellcheck fixes (#340489) 2024-10-07 15:39:38 +02:00
github-actions[bot]
a0b1d0baed
Merge staging-next into staging 2024-10-07 12:06:11 +00:00
github-actions[bot]
b33aedbb4d
Merge master into staging-next 2024-10-07 12:05:43 +00:00
Sandro
41dd374aa4
nixosTests: fixup tests/common/resolver to work with a local resolver (#346793) 2024-10-07 10:35:03 +02:00
Cosima Neidahl
a825406b15
lomiri.lomiri: Replace NIXOS_XKB_LAYOUTS envvar with file (#345288) 2024-10-07 09:33:40 +02:00
codgician
2a848b3732
nixos/libvirtd: add startDelay and shutdownTimeout option 2024-10-07 14:43:45 +08:00
Florian Klink
9c13bad7ca
nixos/tmpfiles: only setup nix-related tmpfiles if nix is enabled (#343784) 2024-10-07 09:11:46 +03:00
github-actions[bot]
6c9d940294
Merge staging-next into staging 2024-10-07 06:05:43 +00:00
github-actions[bot]
5fa43e7396
Merge master into staging-next 2024-10-07 06:05:15 +00:00
James Atkins
68483a7bad nixos/networkd: test systemd-creds in WireGuard 2024-10-06 22:27:21 -05:00
Emily
85c36fecfc
xen: nuke, move to by-name. (#345192) 2024-10-07 03:48:37 +01:00
Emily
1a53b400e5
mongodb: mongodb-5_0 -> mongodb-7_0; mongodb-5_0: drop; unifi: unifi7 -> unifi8; unifi{7,-video}: drop (#345625) 2024-10-07 01:38:54 +01:00
github-actions[bot]
7306ea41bd
Merge staging-next into staging 2024-10-07 00:15:20 +00:00
github-actions[bot]
ab0e8e5be7
Merge master into staging-next 2024-10-07 00:14:55 +00:00
Will Fancher
aad455b434
nixos/usbStorage: apply upstream (#284334) 2024-10-06 19:39:07 -04:00
James Atkins
42f5ecde9d nixos/networkd: support systemd-creds in WireGuard
systemd 256 supports network.wireguard.* credentials (https://github.com/systemd/systemd/pull/30826).
Check whether PrivateKey / PresharedKey starts with an @, if so it is a credential.
2024-10-06 18:38:40 -05:00
Emily
086676017e mongodb: mongodb-5_0 -> mongodb-7_0 2024-10-06 22:47:42 +01:00
Emily
b0395df085 unifi7: drop 2024-10-06 22:47:41 +01:00
Will Fancher
c00fc8bd1a
nixos/unl0kr: add settings to the unl0kr module (#339787) 2024-10-06 17:44:55 -04:00
Dionysis Grigoropoulos
8e9ae86774
tailscaled: Add option to disable Taildrop 2024-10-07 00:22:59 +03:00
Izorkin
611b1d53b7
dhcpcd: enable sandboxing options 2024-10-06 23:46:18 +03:00
Fernando Rodrigues
64cc613a0f
release-notes: remove mentions to xen-slim or 4.18
They were removed during the great Xen deletion.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-10-06 20:24:30 +00:00
Fernando Rodrigues
251dc99c70
nixos/xen: simplify package options
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-10-06 20:24:29 +00:00
Fernando Rodrigues
0eaec9f2f3
xen: drop 4.17
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-10-06 15:55:39 -03:00
Kevin Cox
fb9b5c806b
mautrix-meta: drop maintainership Rutherther (#346916) 2024-10-06 14:45:10 -04:00
Kevin Cox
b8fc5855fb
nixos.mautrix-meta: Update config to 0.4 format (#343606) 2024-10-06 14:44:41 -04:00
Rutherther
379ca4e67f mautrix-meta: drop maintainership Rutherther 2024-10-06 20:33:42 +02:00
K900
84fce7e588 Merge remote-tracking branch 'origin/staging-next' into staging 2024-10-06 21:11:05 +03:00
Bjørn Forsman
40bfbe3226 nixos/scrutiny: wait until ready
Add postStart code that waits until Scrutiny has opened its port. This
fixes a race condition against scrutiny-collector, which can start (and
fail) before scrutiny is ready.
2024-10-06 20:07:45 +02:00
github-actions[bot]
7ab01e096c
Merge master into staging-next 2024-10-06 18:03:58 +00:00
Michele Guerini Rocco
7eef63ed98
wpa_supplicant: add patch to fix ext_passwords_file bug (#342792) 2024-10-06 19:15:19 +02:00
Michele Guerini Rocco
463f8b8ed4
nixos/tests/dnsdist: fix dnscrypt test (#346843) 2024-10-06 19:12:07 +02:00
Arthur Gautier
a32dbada18 nixosTests: fixup tests/common/resolver to work with a local resolver
When 757a455dde refactored the zones to go
from a list to a map, this broke the tests/common/resolver helper.

reproduction:
```
let
  pkgs = import <nixpkgs> {};

  testConfig = {
    name = "resolver-repro";
    nodes = {
      acme = { nodes, ... }: {
        imports = [ (pkgs.path + /nixos/tests/common/acme/server) ];
      };
    };

    testScript = ''
    '';
  };
in pkgs.nixosTest testConfig
```
2024-10-06 15:18:45 +00:00
Maximilian Bosch
5ee80e8120
Merge: nixos/nginx: remove shortand from defaultText (#346767) 2024-10-06 17:13:51 +02:00
Emily
92663c9721
ffmpeg_7: 7.0.2 -> 7.1; xeve: 0.5.0 -> 0.5.1 (#346552) 2024-10-06 14:23:19 +01:00
DontEatOreo
7b69d089ca
nixos/gpu-screen-recorder: remove cap_sys_nice
Reason: https://github.com/NixOS/nixpkgs/pull/339874#discussion_r1788687308

Co-authored-by: dec05eba <dec05eba@protonmail.com>
2024-10-06 15:27:45 +03:00
DontEatOreo
8d564190a9
nixos/gpu-screen-recorder: format with nixfmt-rfc-style 2024-10-06 15:27:45 +03:00
Sandro
0cc879fa99
nixos/tests/non-default-filesystems: fix btrfs mount regex (#340702) 2024-10-06 14:08:21 +02:00
Sandro
85100fcc51
nixos/tests/tmate-ssh-server: fix test (#342318) 2024-10-06 14:07:14 +02:00
Sandro
020c26717f
nixos/quorum: fix geth args, fix test (#341181) 2024-10-06 14:06:31 +02:00
github-actions[bot]
f4d64b5b37
Merge staging-next into staging 2024-10-06 12:05:45 +00:00
Sandro
c0ad8503fa
nixos/tests/pgjwt: fix test (#341150) 2024-10-06 14:05:36 +02:00
github-actions[bot]
5c3e5ec59f
Merge master into staging-next 2024-10-06 12:05:15 +00:00
Sandro
00461d0fcb
nixos/nginx: fix double slash in example (#346774) 2024-10-06 13:58:54 +02:00
rnhmjoj
cf614ee789
nixos/tests/dnsdist: fix dnscrypt test 2024-10-06 11:34:57 +02:00
Jonas Heinrich
c566a36839
feishin: 0.9.0 -> 0.10.1 (#344865) 2024-10-06 10:27:49 +02:00
github-actions[bot]
bbea34947c
Merge staging-next into staging 2024-10-06 06:05:02 +00:00
github-actions[bot]
7dc1e4239b
Merge master into staging-next 2024-10-06 06:04:33 +00:00
Sandro Jäckel
dd7ef21afc
nixos/nginx: fix double slash in example 2024-10-06 03:45:51 +02:00
Aaron Andersen
38a589083e
nixos/userborn: fix username typo 2024-10-05 21:40:09 -04:00
Sandro
b64b2d25c2
nixos/nginx: remove shortand from defaultText 2024-10-06 03:19:07 +02:00
Peder Bergebakken Sundt
90c1e58d22
zammad: 6.2.0 -> 6.3.1 (#345456) 2024-10-06 03:00:44 +02:00
github-actions[bot]
480db5cf27
Merge staging-next into staging 2024-10-06 00:15:59 +00:00
github-actions[bot]
ff851b037d
Merge master into staging-next 2024-10-06 00:15:37 +00:00
Nick Cao
9e012ecbf2
nixos/sing-box: generate config file into RuntimeDirectory 2024-10-05 18:18:23 -04:00
Nick Cao
5f821de20c
keycloak: 25.0.6 -> 26.0.0 (#346439) 2024-10-05 18:14:45 -04:00
Felix Singer
0f599d1e68 nixos/redmine: Apply initial hardening using the systemd unit
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.

In my tests, Redmine only bound to an IPv4 address and Unix socket,
which is why I restricted the address families to these both.

The command `systemd-analyze security redmine.service` reports an
overall exposure level of 2.9 with this patch.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-05 22:13:37 +02:00
h7x4
25f2846361
nixos/bind: set type of zones.*.extraConfig to lines (#346424) 2024-10-05 21:07:26 +02:00
h7x4
cc76cf58f8
nixos/uinput: set a static GID for the uinput group (#333762) 2024-10-05 20:59:16 +02:00
Robert Schütz
506df4e38e nodePackages.npm: drop 2024-10-05 11:23:49 -07:00
github-actions[bot]
5c718e11ea
Merge staging-next into staging 2024-10-05 18:04:38 +00:00
github-actions[bot]
653bcc0ea9
Merge master into staging-next 2024-10-05 18:04:03 +00:00
Will Fancher
9f8eb445fa
nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1 (#346547) 2024-10-05 13:44:39 -04:00
Jared Baur
c2621cb78a
nixosTests.nix-upgrade: fix failing test
The test currently fails because we attempt to switch to a NixOS
configuration that is _very_ different from the one we are switching
from (e.g. the new configuration has an entirely empty /etc/fstab,
causing switch-to-configuration to want to start unmounting all
filesystems defined in the old configuration).
2024-10-05 09:51:28 -07:00
Jared Baur
c39781c558
nixos/activation-script: only setup nix tmpfiles if nix is enabled
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
2024-10-05 09:03:19 -07:00
Jared Baur
3d6e7d7b56
nixos/tmpfiles: only setup nix tmpfiles when nix is used
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
2024-10-05 09:01:55 -07:00
Nick Cao
6069dde181
nixos/keycloak: make initialAdminPassword optional 2024-10-05 08:37:41 -04:00
github-actions[bot]
0a3656483e
Merge staging-next into staging 2024-10-05 12:05:57 +00:00
github-actions[bot]
94cb2166da
Merge master into staging-next 2024-10-05 12:05:30 +00:00
r-vdp
94532d1530 nixos/syncthing: remove syncthing-resume service
It was removed upstream in https://github.com/syncthing/syncthing/pull/9611
and the stub generated by nixos now prints an error in the logs due to
it not having a ExecStart line.
2024-10-05 12:55:39 +02:00
r-vdp
70119aa60f
nixis/uinput: use a fixed GID for the uinput group 2024-10-05 10:21:26 +02:00
r-vdp
469f505813
nixos/{uinput,ids}: format 2024-10-05 10:21:01 +02:00
github-actions[bot]
4005eeea1f
Merge staging-next into staging 2024-10-05 06:04:51 +00:00
github-actions[bot]
13400dc754
Merge master into staging-next 2024-10-05 06:04:21 +00:00
Brendan Taylor
cb31bd4755 nixos/redis: add option services.redis.servers.*.group
previously if you set the "user" option and did not create a group
account with the same name the module would create a service that would
fail to start.

with this change:
- the module is more explicit about this behaviour
- you can configure the group directly, so that you're not forced to a
  particular user/group structure
- you can read the group name used by the redis service. this is useful
  for giving other services permission to use the redis socket.
2024-10-04 21:12:38 -06:00
Nick Cao
937d3964c9
nixos/keycloak: raise memory size in tests to 2047M 2024-10-04 21:43:19 -04:00
Bobby Rong
f594475564
nixos/xfce: Fix ambiguous with (#346528) 2024-10-05 09:03:18 +08:00
Sandro Jäckel
9b996f7396
nixos/xfce: Fix ambiguous with
Pull request 345352 introduces `pkgs.exo`, don't pick up that package.
2024-10-05 08:43:24 +08:00
Nick Cao
05caac302f
nixos/keycloak: fixup login test after ui change 2024-10-04 20:39:55 -04:00
Emily
7ad7e69aa8 ffmpeg_7: 7.0.2 -> 7.1 2024-10-05 01:34:12 +01:00
Nick Cao
0cdc3e2a0b
nixos/keycloak: drop removed proxy option
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#proxy-option-removed
2024-10-04 20:20:46 -04:00
github-actions[bot]
32379e1a0b
Merge staging-next into staging 2024-10-05 00:14:22 +00:00
github-actions[bot]
e9c8665026
Merge master into staging-next 2024-10-05 00:14:01 +00:00
Nick Cao
16cd47369f
nixos/keycloak: KEYCLOAK_ADMIN{,PASSWORD} -> KC_BOOTSTRAP_ADMIN_{USERNAME,PASSWORD}
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#admin-bootstrapping-and-recovery
2024-10-04 20:08:06 -04:00
Nick Cao
d2ec2d3c29
nixos/keycloak: link $out/lib to KC_HOME_DIR to fix loading optimized app image
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#additional-validations-on-the-optimized-startup-option
2024-10-04 20:06:08 -04:00
Will Fancher
3e90d5a2bc nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1 2024-10-04 19:50:46 -04:00
jade
f0ce0e71c3
Remove the revCount attribute from the generated flake registry (#316225) 2024-10-04 15:25:55 -07:00
Aaron Andersen
913a23b5e2
nixos/redmine: Allow specifying an IP address Redmine should bind to (#345617) 2024-10-04 18:18:45 -04:00
h7x4
c38aa540ba
nixos/networking: fix macvlan service description (#346507) 2024-10-04 23:20:09 +02:00
h7x4
639922811e
apfsprogs: unstable-2023-11-30 -> 0-unstable-2024-09-27 (#346422) 2024-10-04 23:05:15 +02:00
David Knaack
81f3c68b92 rustic: 0.8.1 -> 0.9.1 2024-10-04 22:25:08 +02:00
Anthony Roussel
17fd7e3eea
nixos/gns3-server: fix ubridge support (#303442) 2024-10-04 22:16:13 +02:00
Bjørn Forsman
20a3012813 nixos/networking: improve vlan service description
VLAN is an abbreviation, so let's not write Vlan.
2024-10-04 22:09:01 +02:00
Bjørn Forsman
e8da2c8981 nixos/networking: fix macvlan service description
Fix copy pasta from the vlan service: Vlan -> MACVLAN
2024-10-04 22:08:40 +02:00
Artturin
f6d0724717 xdg-desktop-portal: Fix installedTests 2024-10-04 22:06:22 +03:00
github-actions[bot]
f197602956
Merge staging-next into staging 2024-10-04 18:05:00 +00:00
github-actions[bot]
fb53f9f64b
Merge master into staging-next 2024-10-04 18:04:31 +00:00
Peder Bergebakken Sundt
986e6d4e3d
tsm-client: 8.1.23.0 -> 8.1.24.0 (#345039) 2024-10-04 18:25:37 +02:00
Ramses
2d809488f7
nixos/containers: Fix shellcheck issues (#346131) 2024-10-04 18:19:19 +02:00
K900
d5f1752ca9
xdg-desktop-portal-gtk: Enable all default portals unconditionally (#345979) 2024-10-04 18:29:33 +03:00
nicoo
6f26c88376
nixos/macos-builder: pin stateVersion (#342380)
Closes #325610, #325674
2024-10-04 16:09:56 +02:00
Luflosi
7a12fe7b2f
apfsprogs: unstable-2023-11-30 -> 0-unstable-2024-09-27
Diff: 990163894d...f31d7c2d69

This adds `apfs-label`, a new utility, so add a small test for it.
2024-10-04 15:50:10 +02:00
Peder Bergebakken Sundt
f0ad87bdd7 nixos/resilio: add package option 2024-10-04 15:13:04 +02:00
Mynacol
aa0fc3e8b8 rss-bridge: Remove pkg patch, adapt nixos service
The rss-bridge service changes introduced in f2201789fe
resp. https://github.com/NixOS/nixpkgs/pull/223148 removes the need for
the package patch. This commit removes the patch to ease updating and
maintenance.
Relevant service functionality was also removed (e.g. the setting of
RSSBRIDGE_DATA).

The explicit definition of FileCache.path so users can easily see its
default value and change it, requires to use a freeformType to let users
freely add potentially upcoming config options. This type is restricted
to ini types (although we coerce them to environment variables).
This however makes the list of enabled_bridges impossible. That was
fixed by explicitly introducing this option with a type allowing lists.
The default value however should be unset, which is expressed as `null`,
which further spurred a change in the environment variable generation to
ignore null values (instead of coercing them to an empty string).

A breaking change note was added to highlight this change. A check that
warns users of the not-application of their existing config file is
not easily possible, as people could have only added or changed the
config.ini.php file on the file system without changing a nix variable.
2024-10-04 14:58:15 +02:00
Felix Stupp
6de4d04fdb
nixos/bind: set type of zones.*.extraConfig to lines
allowing multiple definitions of that option to be merged, because:
- their order should be irrelevant
- it might make sense to declare multiples of them at different locations
2024-10-04 14:49:12 +02:00
github-actions[bot]
483deb3a04
Merge staging-next into staging 2024-10-04 12:06:05 +00:00
github-actions[bot]
5942e21e4e
Merge master into staging-next 2024-10-04 12:05:36 +00:00
h7x4
d783411040
nixos: improve systemd slice names (#345990) 2024-10-04 12:08:36 +02:00
Ivan Mincik
e478171269
postgis: 3.4.3 -> 3.5.0 (#346151) 2024-10-04 08:30:34 +00:00
Pol Dellaiera
2199b69a7a
nixos/privatebin: init module & privatebin: init at 1.7.4 (#344014) 2024-10-04 09:51:40 +02:00
Paul Meyer
3e9b0cdf35
go_1_21/buildGo121Module: remove (#344622) 2024-10-04 08:29:15 +02:00
github-actions[bot]
9f5cd0f47b
Merge staging-next into staging 2024-10-04 06:05:14 +00:00
github-actions[bot]
61f961f1f6
Merge master into staging-next 2024-10-04 06:04:48 +00:00
Sandro
e00cc9f2fa
openwebrx: remove alias alsaUtils -> alsa-utils (#346259) 2024-10-04 02:21:40 +02:00
github-actions[bot]
19ddd24728
Merge staging-next into staging 2024-10-04 00:14:46 +00:00
github-actions[bot]
579054c806
Merge master into staging-next 2024-10-04 00:14:14 +00:00
Adam C. Stephens
acc3335fa4
rl-notes/24.11: Add note about ZFS import being in postResumeCommands (#346247) 2024-10-03 19:07:55 -04:00
Astro
48b4aa8eae openwebrx: s/alsaUtils/alsa-utils/
allows running with allowAliases = false
2024-10-03 23:53:56 +02:00
h7x4
c760c830d4
nixos/fedimintd: init service (#322815) 2024-10-03 23:53:30 +02:00
Bjørn Forsman
e6d7bbf71d nixos/prometheus-dnsmasq-exporter: use a working default leasesPath
dnsmasq dhcp-leasefile defaults to /var/lib/dnsmasq/dnsmasq.leases, so
use that as the default for the exporter too. Curiously, the example was
using the working path, so this patch simply swaps "example" and
"default" values.
2024-10-03 23:06:09 +02:00
Will Fancher
10dbb88971 rl-notes/24.11: Add note about ZFS import being in postResumeCommands 2024-10-03 17:06:02 -04:00
Nico Felbinger
924ee0c2bc nixos/suricata: init module 2024-10-03 22:50:30 +02:00
Dawid Ciężarkiewicz
ba727987d4
nixos/fedimintd: init services 2024-10-03 13:05:12 -07:00
Sandro Jäckel
d82d689716
nixos/tailscale-derper: init 2024-10-03 22:04:40 +02:00
github-actions[bot]
ae87c79207
Merge staging-next into staging 2024-10-03 18:05:09 +00:00
github-actions[bot]
192fd67cc3
Merge master into staging-next 2024-10-03 18:04:30 +00:00
Augustin Trancart
406609b044 postgresqlPackages.postgis: add more nixos tests 2024-10-03 19:31:10 +02:00
Christina Sørensen
e7602822bc
nixos/terminfo, contour: mark contour broken, remove from enableAllTerminfo (#345827) 2024-10-03 19:00:56 +02:00
h7x4
5190ddc27d
treewide: \xc2\xa0 -> (#345898) 2024-10-03 18:23:59 +02:00
r-vdp
cc28f2bef5
nixos/containers: Fix shellcheck issues 2024-10-03 17:57:41 +02:00
h7x4
75b209227d
wstunnel: 10.1.1 -> 10.1.3 (#346011) 2024-10-03 17:28:05 +02:00
Domen Kožar
e873268a35
nixos/datadog-agent: fix deprecated trace agent option (#336546) 2024-10-03 16:15:08 +01:00
Emily
7dc35d8704
cudaPackages_{10*,11*}: warn about upcoming removal (#342112) 2024-10-03 13:48:13 +01:00
github-actions[bot]
6a5c2ed1b9
Merge staging-next into staging 2024-10-03 12:06:10 +00:00
github-actions[bot]
ca0b5f7edc
Merge master into staging-next 2024-10-03 12:05:39 +00:00
r-vdp
bf8c66fc22
wstunnel: run the VM test on Linux only 2024-10-03 11:50:43 +02:00
Florian Klink
3ae3a4fb69
nixos/tests/acme: Better error handling (#250260) 2024-10-03 11:41:53 +03:00
Florian Klink
3398bb12a9
nixos/tests/acme: Fix fullchain validation (#346023) 2024-10-03 11:39:19 +03:00
Bjørn Forsman
2a13d67dcc nixosTests.scrutiny: remove explicit wait for influxdb2
Explicitly waiting for influxdb2 in the test, instead of fixing the
underlying issue[1], was hiding a real bug[2]. Now that the bug has been
fixed we can remove the wait code.

[1] Commit 732d36522f ("nixos/influxdb2: wait until service is ready")
[2] https://github.com/NixOS/nixpkgs/issues/317017 ("Scrutiny tries to start before influxdb has started")
2024-10-03 08:10:56 +02:00
github-actions[bot]
38b6c1568f
Merge staging-next into staging 2024-10-03 00:14:32 +00:00
github-actions[bot]
0e9a6f22a1
Merge master into staging-next 2024-10-03 00:14:11 +00:00
Lucas Savva
ffc9bf1882 nixos/tests/acme: Better error handling
Added a decorator function to handle any
exceptions generated by test functions and
apply some retry logic with backoff.

Also wrapped the unwrapped add-a curl which
was causing some fails.
2024-10-02 23:07:37 +01:00
Lucas Savva
b2758880b3 nixos/tests/acme: Fix fullchain validation
In the next release of Pebble, the certificate
subject is no longer populated with a useful domain name.
This change will refactor the fullchain validation assertions
to avoid checking the subject line.
2024-10-02 23:02:51 +01:00
lassulus
def08aa2e3
jitsi-meet: Default NAT harvester, Excalidraw Caddy, Prosody lockdown (#280615) 2024-10-02 21:08:06 +01:00
Bjørn Forsman
48908e5b86 nixos: improve systemd slice names
Following
https://www.freedesktop.org/software/systemd/man/latest/systemd.unit.html#Description=,
update slice names to be short, descriptive and capitalized.
2024-10-02 20:24:13 +02:00
github-actions[bot]
9b7fb37f2f
Merge staging-next into staging 2024-10-02 18:05:16 +00:00
github-actions[bot]
b90a808faa
Merge master into staging-next 2024-10-02 18:04:34 +00:00
7c6f434c
5a0b6741b8
fuse: split outputs and clean up (#209128) 2024-10-02 18:02:52 +00:00
Jan Tojnar
c85360e799 nixos/gnome: Enable all x-d-p-gtk portals
This will fix the conflict when another DE using the full `xdg-desktop-portal-gtk` is enabled simultaneously with GNOME.
There will not be conflicts at runtime since the portals have been configured by `gnome-session` in `xdg.portal.configPackages` for a while now.
There will be minimal effect on system closure as all the extra x-d-p dependencies are also used by GNOME platform.
2024-10-02 18:54:06 +02:00
Jan Tojnar
0b5c9469bb nixos/deepin: Enable all x-d-p-gtk portals
This will fix the conflict when another DE using the full `xdg-desktop-portal-gtk` is enabled simultaneously with Deepin.
Currently, our Deepin uses `gtk` as the preferred default implementation for all portals so presumably the duplicate portals should not have been disabled anyway.
The added closure size should be negligible, as most of the packages are probably also used by Deepin transitively.
2024-10-02 18:49:42 +02:00
Jan Tojnar
ef3e98107f nixos/cinnamon: Enable all x-d-p-gtk portals
This will fix the conflict when another DE using the full `xdg-desktop-portal-gtk` is enabled simultaneously with Cinnamon.
There will no longer be conflicts at runtime since the portals are now configured by `cinnamon-common` in `xdg.portal.configPackages`.
The added closure size should be negligible, as most of the packages are also used by Cinnamon.
2024-10-02 18:44:58 +02:00
Emily
7033ba8331
switch-to-configuration-ng: update rust-ini to support multi-line INI… (#343145) 2024-10-02 16:04:20 +01:00
Sandro
d44717c448
nixos/binfmt: Add option to use static emulators when available (#334859) 2024-10-02 15:51:30 +02:00
Peder Bergebakken Sundt
3100acba08 treewide: \xc2\xa0 ->
I have no idea what this escape sequence even is, but it breaks the nix parser with cryptic errors if not used in a comment.
A friend let me know MacOS is prone to input weird spaces, not sure if that is the source.

Candidates were located and created with:

    chr="$(echo -e '\xc2\xa0')"; rg -F "$chr" -l | xe sd -F "$chr" " "

There are some examples left, most being example output from `tree` in various markdown documents, some patches which we can't really touch, and `pkgs/tools/nix/nixos-render-docs/src/tests/test_commonmark.py` which I'm not sure if should be addressed
2024-10-02 15:33:06 +02:00
github-actions[bot]
514c3e33c0
Merge staging-next into staging 2024-10-02 12:06:13 +00:00
github-actions[bot]
58677f23e2
Merge master into staging-next 2024-10-02 12:05:45 +00:00
Atemu
b12b45ea63
nixos/i2pd: fix build (#345879) 2024-10-02 13:03:18 +02:00
Peder Bergebakken Sundt
93da11def1 nixos/tests/mihomo: implement check correctly, fix target value 2024-10-02 11:18:29 +02:00
Pol Dellaiera
075be3e70b
nixos/gatus: init module (#294469) 2024-10-02 11:08:14 +02:00
Peder Bergebakken Sundt
ed72e91db1 nixos/mihomo: fix option type 2024-10-02 10:57:28 +02:00
h7x4
d5a0693815
nixos/veilid: add release notes (#345847) 2024-10-02 10:34:56 +02:00
Weijia Wang
e687c4933e
doc/release-notes: fix typos (#345864) 2024-10-02 10:16:13 +02:00
Daniel Nagy
1d8136e1ae
nixos/i2pd: fix build 2024-10-02 09:45:00 +02:00
figboy9
cb736cfc9f nixos/veilid: add release notes 2024-10-02 15:57:57 +09:00
Doron Behar
cb793d5383
nextflow: 22.10.6 -> 24.08.0-edge + remove buildFHSEnv + compile from source + add tests (#339197) 2024-10-02 09:36:29 +03:00
Bruno Bigras
3d0b31ec79 doc/release-notes: fix typos 2024-10-02 02:19:34 -04:00
Christina Sørensen
c911876981
nixos/terminfo: remove broken package contour
Contour was broken for aarch64 in #253334, and completely broke
in #344788 for all platforms.

This removes the broken package, and adds a notice to remove broken
packages in the future. aarch64 users have waited a year for this to be
fixed, so I think we should lean to be more eager to remove in general,
and then the fix can come when it is ready, instead of letting it block
this.

Resolves: #258515
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-10-02 05:56:13 +02:00
github-actions[bot]
c519d3f284
Merge staging-next into staging 2024-10-02 00:14:49 +00:00
github-actions[bot]
5810844b9c
Merge master into staging-next 2024-10-02 00:14:22 +00:00
Zhaofeng Li
fc0cc3fe27 nixos/tests/systemd-binfmt: Add chroot test 2024-10-02 08:48:09 +09:00
Sandro Jäckel
55dd113034
nixos/release-notes: add entry for headscale 0.23.0 2024-10-01 21:53:33 +02:00
Kristoffer Dalby
abb3b0089b
nixos/headscale: update module to headscale 0.23.0
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
2024-10-01 21:53:33 +02:00
h7x4
6a0de76511
qbittorrent: 4.6.7 -> 5.0.0 (#345595) 2024-10-01 21:40:58 +02:00
Kristoffer Dalby
5dd728a081
nixos/headscale: modernize
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
2024-10-01 20:40:19 +02:00
h7x4
cd9c62afca nixos/graphite: add systemd slice
Co-authored-by: Bjørn Forsman <bjorn.forsman@gmail.com>
2024-10-01 20:15:22 +02:00
github-actions[bot]
2dcb5af1fb
Merge staging-next into staging 2024-10-01 18:05:10 +00:00
github-actions[bot]
c3c8b24e1c
Merge master into staging-next 2024-10-01 18:04:42 +00:00
h7x4
ed45f4b166 nixos/phpfpm: phpfpm.slice -> system-phpfpm.slice 2024-10-01 20:03:08 +02:00
Nick Cao
89284118a9
nixos/sing-box: test distribution specific features (#343641) 2024-10-01 13:42:59 -04:00
Emily
4ec4146f54 unifi-video: drop
EOL since January 2021.
2024-10-01 15:58:19 +01:00
Maximilian Bosch
25fe330bc9
Merge: nextcloud30: init at 30.0.0; nextcloud30Packages: init (#342521) 2024-10-01 14:51:56 +02:00
K900
e3bf09623f Merge remote-tracking branch 'origin/master' into staging-next 2024-10-01 15:09:28 +03:00
Florian Klink
b66c0f2e99
nixos/systemd: let systemd setup /etc/machine-id (#327552) 2024-10-01 15:05:59 +03:00
Savyasachee Jha
2a06cac30a nixos/tests/privatebin: init 2024-10-01 17:12:42 +05:30
Maximilian Bosch
07c824db7f
Merge: nixos/nextcloud: re-add declarative-redis-and-secrets to matrix (#345592) 2024-10-01 13:42:39 +02:00
Maximilian Bosch
55a45406a6
nixos/nextcloud: update relatedPackages 2024-10-01 13:36:16 +02:00
Maximilian Bosch
20ed9ccd88
nextcloud: correct stateversion logic 2024-10-01 12:48:47 +02:00
Jonas Heinrich
1b121c1ea2
nextcloud30: init at 30.0.0 2024-10-01 12:48:45 +02:00
Paul Meyer
6e839b8f99 go_1_21/buildGo121Module: remove
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-10-01 12:43:42 +02:00
Ryan Lahfa
29d56eea7e
nixos/repart-image: pass partition attrs to builder instead of JSON file (#345524) 2024-10-01 11:38:07 +02:00
Maximilian Bosch
f800d8e42b
nixos/postgresql: enable private /tmp & private mounts; fix wal-receiver test
The issue was that the old test-case used `/tmp` to share data. Using
`JoinsNamespaceOf=` wasn't a real workaround since the private `/tmp` is
recreated when a service gets stopped/started which is the case here, so
the wals were still lost.

To keep the test building with `PrivateTmp=yes`, create a dedicated
directory in `/var/cache` with tmpfiles and allow the hardened
`postgresql.service` to access it via `ReadWritePaths`.
2024-10-01 10:31:20 +02:00
Martin Weinelt
2ebffcc4c7
nixos/postgresql: set up sandboxing
Reduces the general exposure of the postgresql.service through systemd
hardening options.
2024-10-01 10:31:20 +02:00
Zhaofeng Li
b8c1ef98e4 nixos/binfmt: Add option to use static emulators when available
The fixBinary flag will be enabled if a static emulator is in use.
2024-10-01 15:05:32 +09:00
github-actions[bot]
910adea78f
Merge staging-next into staging 2024-10-01 06:05:25 +00:00
K900
3f7da3dfa9 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-01 08:44:24 +03:00
José Ribeiro
4cf117d25c
nixos/rl-2411: feishin requirements for Navidrome
More in https://github.com/jeffvli/feishin/releases/tag/v0.10.0
2024-10-01 06:13:05 +01:00
Felix Singer
5f14c876bd nixos/redmine: Allow specifying an IP address Redmine should bind to
In order to not expose Redmine over all interfaces, allow configuring an
IP address it should bind to. Listen to 0.0.0.0 by default.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-01 06:16:42 +02:00
seth
0539d522be
doc/release-notes: add section on cargo-tauri.hook 2024-09-30 20:14:36 -04:00
hellodword
10fb67f966
nixos/sing-box: test distribution specific features 2024-10-01 00:09:01 +00:00
h7x4
0d67767718
nixos/networkd: add DHCPv4 - IPv6OnlyMode toggle (#343605) 2024-10-01 01:33:24 +02:00
h7x4
da8a5a1f77
healthchecks: 3.4 -> 3.6 (#345283) 2024-10-01 01:26:14 +02:00
h7x4
ed96650379
skkDictionaries: split up skk-dicts (#266144) 2024-10-01 00:55:16 +02:00
melvyn
fcdc65bc1a
qbittorrent: 4.6.7 -> 5.0.0 2024-09-30 18:39:31 -04:00
Nick Cao
5aa3097833
nixos/hatsu: init module (#345102) 2024-09-30 18:35:12 -04:00
h7x4
636185e25a
seafile: 10.0.1 -> 11.0.12 (#318727) 2024-09-30 23:53:02 +02:00
Pol Dellaiera
abbc4cb34c
nixos/open-webui: fix opensearch (#345529) 2024-09-30 23:28:21 +02:00
WilliButz
93c61c1e58
nixos/repart-verity-store: include original roothashes in repart-output.json 2024-09-30 22:45:05 +02:00
Maximilian Bosch
02be206846
nixos/nextcloud: add nc version to drv name of mysql & declarative redis test 2024-09-30 22:21:29 +02:00
Maximilian Bosch
cd6157bea4
nixos/nextcloud: re-add declarative-redis-and-secrets to matrix
Just noticed that I apparently disabled this test while restructuring
the Nextcloud tests[1] effectively disabling the test.

This patch re-adds it and adjusts the code accordingly.

I also noticed that the old check whether the cache is actually used
(`test "[]" = "$(redis-cli --json KEYS "*")"`) was broken because the
`nextcloud.fail()` hid the fact that the `redis-cli` invocation was
failing due to a missing password. Fixed the subtest accordingly.

[1] 0b31ada92b
2024-09-30 22:15:03 +02:00
oxalica
f534f74249
nixos/security/wrappers: fix fuse path 2024-09-30 15:26:51 -04:00
Masum Reza
afab97c863
nixos/wayland: add gtk portal to all applicable compositors (#342646) 2024-10-01 00:23:28 +05:30
WilliButz
3f1f20b2a7
nixos/repart-image: pass partition attrs to builder instead of JSON file
Having access to the original Nix partition definitions in the builder
should make it a bit easier to manipulate them and still provide access
to the manipulated results.
2024-09-30 20:10:51 +02:00
github-actions[bot]
4a1f411e5d
Merge staging-next into staging 2024-09-30 18:05:14 +00:00
K900
b29cb6c1f9 Merge remote-tracking branch 'origin/master' into staging-next 2024-09-30 20:23:25 +03:00
midchildan
c2b4a5dc17
mikutter: remove
This package was broken and had no maintainers.
2024-10-01 02:00:52 +09:00
藍+85CD
2f15b523d9
nixos/hatsu: init module 2024-10-01 00:33:38 +08:00
midchildan
c3d1c9cdf5
skkDictionaries: replace skk-dicts 2024-10-01 01:24:28 +09:00
Erin Yuki Schlarb
56581588c3 jitsi-meet: Add option to disable Prosody services not used by Jitsi Meet
The default Prosody config assumes that Prosody will be used as a federated
XMPP server, while the usecase for Jitsi Meet is much narrower.
2024-09-30 18:19:34 +02:00
Erin Yuki Schlarb
7ab8f255b9 jitsi-meet: Restrict jitsi-excalidraw systemd service to the minimum requried 2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
9e8b3f97cc jitsi-meet: Also forward Excalidraw connections when using Caddy as web server 2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
61cf88212d jitsi-videobridge: Set configurable default NAT harvester address to make the
service work behind NAT without additional manual configuration
2024-09-30 18:19:33 +02:00
h7x4
11f77694ac
nixos/bluemap: move to web-apps (#345353) 2024-09-30 17:53:27 +02:00
Erin Yuki Schlarb
67e261beb5 jitsi-meet: Set internal MUC options set in official Docker image 2024-09-30 17:31:04 +02:00
pinage404
83b1350904 nixos/open-webui: fix opensearch
When [adding Open WebUI as search engine in Firefox](https://docs.openwebui.com/tutorials/integrations/browser-search-engine/#for-firefox) it always links to `http://localhost:3000` instead of the configured port

It is because [the response use `WEBUI_URL` environment variable](1d225dd804/backend/open_webui/main.py (L2370)) which [is set by default to `1d225dd804/backend/open_webui/env.py (L106))
2024-09-30 17:28:11 +02:00
Maximilian Bosch
1e746f0030
Merge: nixos/postgresql: escape initdbArgs (#345341) 2024-09-30 17:04:10 +02:00
Ali Rizvi
9020d82c70
nixos/wayland: add gtk portal by default 2024-09-30 09:54:19 -04:00
Martin Weinelt
b47b572e21
nixos/freeradius: fix group assignment for radius user 2024-09-30 15:50:13 +02:00
github-actions[bot]
50b103c35a
Merge staging-next into staging 2024-09-30 12:06:12 +00:00
github-actions[bot]
d7d44ff498
Merge master into staging-next 2024-09-30 12:05:43 +00:00
Martin Weinelt
4ca03e3a11
nixos/logrotate: allow sending signal to arbitrary processes
Various postrotate scripts send e.g. SIGHUP to processes, to have them
reload their config or reopen their logfile.
2024-09-30 13:30:38 +02:00
Martin Weinelt
2dabc4fce1
nixos/logrotate: reorder setuid syscall group
Relevant parts of @setuid are in @privileged, so we need to flip the
order around, to grant @setuid in spite of denying @privileged.
2024-09-30 13:26:14 +02:00
Florian Klink
9ff2ff44f8
nixos/garage: fix StateDirectory check to work with multiple data_dirs (#342903) 2024-09-30 12:27:06 +02:00
Pol Dellaiera
c82e57f79b
nixos: enable fstrim by default (#345285) 2024-09-30 11:52:13 +02:00
Rolf Schröder
9cd78fd3a6 tests/nextflow: restrict to x86_64-linux
The docker image hash seems to differ on different systems.
See https://github.com/NixOS/nixpkgs/pull/339197#discussion_r1779927407
2024-09-30 11:20:18 +02:00
Quentin Smith
ea044760ce
zammad: 6.2.0 -> 6.3.1
This also fixes the build with the current version of Ruby.
2024-09-30 04:01:28 -04:00
github-actions[bot]
eea46ac5bd
Merge staging-next into staging 2024-09-30 00:15:14 +00:00
github-actions[bot]
09f18b89af
Merge master into staging-next 2024-09-30 00:14:50 +00:00
Weijia Wang
aa4c638b89
wordpressPackages: packages, language and theme updates (#345359) 2024-09-29 23:44:35 +02:00
Viorel-Cătălin Răpițeanu
db71929224 wordpressPackages: update packages, add ru_RU lang, make twentytwentyfour default 2024-09-29 23:09:33 +03:00
Gavin John
2402f64fe9
doc/rl-2411: Document srcOnly changes 2024-09-29 12:51:42 -07:00
h7x4
c25213a9bd
nixos/bluemap: move to web-apps 2024-09-29 21:40:39 +02:00
Maximilian Bosch
11d1f8776c
nixos/postgresql: escape initdbArgs
It doesn't look correct that this isn't the case already.
2024-09-29 21:03:52 +02:00
Maximilian Bosch
0e78dc369c
Merge: doc: use initdbArgs in example postgresql upgrade script (#302823) 2024-09-29 20:39:05 +02:00
Alyssa Ross
ac037f0b18
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/compilers/llvm/common/default.nix
2024-09-29 20:10:12 +02:00
Masum Reza
007e91615b
waybar: add systemdSupport input (#345107) 2024-09-29 23:28:25 +05:30