Commit Graph

32442 Commits

Author SHA1 Message Date
github-actions[bot]
0a1ac11214
Merge master into staging-next 2024-08-13 00:02:23 +00:00
Will Fancher
bcd1d9cf54
Merge pull request #312755 from tomfitzhenry/systemd-dhcp108
nixos/networkd: allow IPv6OnlyPreferredSec in networkd.conf
2024-08-12 19:19:34 -04:00
Tom McLaughlin
81c0783c0e nixos/k3s: add containerdConfigTemplate option 2024-08-12 14:58:18 -07:00
github-actions[bot]
62f43c3094
Merge master into staging-next 2024-08-12 18:02:11 +00:00
Philip Taron
c44e170e3f
nixos/proxmox-lxc: lib.mdDoc is deprecated 2024-08-12 08:02:57 -07:00
Philip Taron
5c21c35835
nixos/borgmatic: lib.mdDoc is deprecated 2024-08-12 08:02:10 -07:00
Florian
20d3d501ad
Merge pull request #290913 from flandweber/borgmatic-improvement
nixos/borgmatic: added test
2024-08-12 15:37:12 +02:00
Sandro
e32c796ff7
Merge pull request #332541 from SuperSandro2000/mailman-relay-assert
nixos/mailman: allow setting relay domains with services.postfix.conf…
2024-08-12 14:37:53 +02:00
github-actions[bot]
8674a36b01
Merge master into staging-next 2024-08-12 12:01:27 +00:00
Florian Klink
fc35704bc8
Merge pull request #333952 from r-vdp/specialisation-name-regex
specialisation: limit the allowed characters in specialisation names
2024-08-12 13:30:54 +03:00
github-actions[bot]
dc79586bdf
Merge master into staging-next 2024-08-12 00:02:44 +00:00
Gavin John
80656f196d
nixos/chromium: Update description for programs.chromium.enable 2024-08-11 19:37:51 -04:00
Jan Tojnar
54b056a950 nixos/metacity: Avoid top-level with 2024-08-12 00:29:13 +02:00
Jan Tojnar
f192bd9e5c metacity: Move from gnome scope to top-level 2024-08-12 00:29:13 +02:00
Jan Tojnar
64438363f5 gnome-shell-extensions: Move from gnome scope to top-level 2024-08-12 00:29:11 +02:00
Jan Tojnar
a0d15e0d04 gdm: Move from gnome scope to top-level 2024-08-12 00:29:11 +02:00
Jan Tojnar
db9ae25dca gnome-initial-setup: Move from gnome scope to top-level 2024-08-12 00:29:11 +02:00
Jan Tojnar
d364738c76 quadrapassel: Move from gnome scope to top-level 2024-08-12 00:29:10 +02:00
Jan Tojnar
1f3f0c2e4b tali: Move from gnome scope to top-level 2024-08-12 00:29:10 +02:00
Jan Tojnar
077dd2b94c swell-foop: Move from gnome scope to top-level 2024-08-12 00:29:08 +02:00
Jan Tojnar
5db162af3a lightsoff: Move from gnome scope to top-level 2024-08-12 00:29:07 +02:00
Jan Tojnar
31a54e038c iagno: Move from gnome scope to top-level 2024-08-12 00:29:07 +02:00
Jan Tojnar
8c4f0fc73e hitori: Move from gnome scope to top-level 2024-08-12 00:29:06 +02:00
Jan Tojnar
e0795cb2de gnome-tetravex: Move from gnome scope to top-level 2024-08-12 00:29:06 +02:00
Jan Tojnar
f26fb6acad gnome-taquin: Move from gnome scope to top-level 2024-08-12 00:29:06 +02:00
Jan Tojnar
d988332cd4 gnome-sudoku: Move from gnome scope to top-level 2024-08-12 00:29:05 +02:00
Jan Tojnar
82a1d2ed24 gnome-robots: Move from gnome scope to top-level 2024-08-12 00:29:05 +02:00
Jan Tojnar
b76db173df gnome-nibbles: Move from gnome scope to top-level 2024-08-12 00:29:04 +02:00
Jan Tojnar
3811546639 gnome-mines: Move from gnome scope to top-level 2024-08-12 00:29:04 +02:00
Jan Tojnar
828635c725 gnome-mahjongg: Move from gnome scope to top-level 2024-08-12 00:29:04 +02:00
Jan Tojnar
b4e480f919 gnome-klotski: Move from gnome scope to top-level 2024-08-12 00:29:03 +02:00
Jan Tojnar
fa58a27b35 gnome-chess: Move from gnome scope to top-level 2024-08-12 00:29:03 +02:00
Jan Tojnar
076fe09eeb four-in-a-row: Move from gnome scope to top-level 2024-08-12 00:29:02 +02:00
Jan Tojnar
31b95b8251 five-or-more: Move from gnome scope to top-level 2024-08-12 00:29:02 +02:00
Jan Tojnar
fcd5e77e53 atomix: Move from gnome scope to top-level 2024-08-12 00:29:02 +02:00
Jan Tojnar
659c2ac87e aisleriot: Move from gnome scope to top-level 2024-08-12 00:29:01 +02:00
Jan Tojnar
18859a6bad gnome-remote-desktop: Move from gnome scope to top-level 2024-08-12 00:29:01 +02:00
Jan Tojnar
967bb64c16 gnome-software: Move from gnome scope to top-level 2024-08-12 00:29:00 +02:00
Jan Tojnar
138941d672 gnome-color-manager: Move from gnome scope to top-level 2024-08-12 00:28:59 +02:00
Jan Tojnar
6e8760f7f7 gnome-backgrounds: Move from gnome scope to top-level 2024-08-12 00:28:58 +02:00
Jan Tojnar
572d0e4403 gnome-contacts: Move from gnome scope to top-level 2024-08-12 00:28:57 +02:00
Jan Tojnar
bb4d62ac72 gnome-weather: Move from gnome scope to top-level 2024-08-12 00:28:54 +02:00
r-vdp
d38257b024
systemd-boot-builder: allow underscores in the specialisation name 2024-08-11 23:33:18 +02:00
Martin Weinelt
038dfb6969
Merge remote-tracking branch 'origin/master' into staging-next 2024-08-11 21:20:35 +02:00
Pol Dellaiera
71daf1a037
Merge pull request #333643 from eduarrrd/initrd-ids
nixos/systemd/initrd: Set /etc/hostname in the initrd.
2024-08-11 20:32:20 +02:00
K900
12aa5ec0a9
Merge pull request #333947 from timschumi/rpi3-sd-dtbs
sd-image-aarch64: add dtbs for the bcm2710 raspberries
2024-08-11 21:29:45 +03:00
github-actions[bot]
a473a12c7d
Merge master into staging-next 2024-08-11 18:01:11 +00:00
r-vdp
57a30e4cbd
specialisation: limit the allowed characters in specialisation names
Since the systemd boot counting PR was merged, dashes in specialisation
names cause issues when installing the boot loader entries, since dashes
are also used as separator for the different components of the file name
of the boot loader entries on disk.

The assertion avoids this footgun which is pretty annoying to recover
from.
2024-08-11 19:07:44 +02:00
Jan Tojnar
9ec24b9c32 gnome-music: Move from gnome scope to top-level 2024-08-11 18:53:26 +02:00
Jan Tojnar
a6cc36c235 gnome-maps: Move from gnome scope to top-level 2024-08-11 18:53:26 +02:00
Jan Tojnar
2d62b2f940 gnome-logs: Move from gnome scope to top-level 2024-08-11 18:53:25 +02:00
Jan Tojnar
dcfb124855 gnome-clocks: Move from gnome scope to top-level 2024-08-11 18:53:25 +02:00
Jan Tojnar
c9550b704d gnome-characters: Move from gnome scope to top-level 2024-08-11 18:53:25 +02:00
Jan Tojnar
16b5886034 gnome-boxes: Move from gnome scope to top-level 2024-08-11 18:53:25 +02:00
Tim Schumacher
794d005bdd sd-image-aarch64: add dtbs for the bcm2710 raspberries
This appears to cover the BCM2836, BCM2837 and BCM2837B0 families of
devices.
2024-08-11 18:39:15 +02:00
ettom
75682f11c6 nixos/snapserver: Fix per-stream sampleFormat/codec opts 2024-08-11 18:32:06 +02:00
Jan Tojnar
ef660a9c86 gnome.gnome-online-miners: Remove
It is abandoned upstream, it is mostly broken and has been removed from GNOME:
https://gitlab.gnome.org/GNOME/gnome-build-meta/-/merge_requests/1748
2024-08-11 18:20:32 +02:00
Florian
1cc84c4999
Merge pull request #332162 from imlonghao/borgmatic/default-value
nixos/borgmatic: change the default value
2024-08-11 15:52:24 +02:00
Martin Weinelt
182792a514 Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/laundrify-aio/default.nix
2024-08-11 13:56:09 +02:00
Adam C. Stephens
0536436018
Merge pull request #316466 from uninsane/rebrand-trust-dns
hickory-dns: rename from trust-dns
2024-08-11 07:35:03 -04:00
Martin Zacho
45b7c17ba5
maintainers: add mzacho 2024-08-11 12:09:16 +02:00
Martin Zacho
91e1c5349e
nixos/modules/services/mail: add protonmail-bridge 2024-08-11 12:09:09 +02:00
Colin
f9df9508f4 hickory-dns: rename from trust-dns 2024-08-11 07:59:32 +00:00
Atemu
d6150339fc nixos/gdm: refactor file-global with 2024-08-11 09:28:25 +02:00
Thiago Kenji Okada
b6144020d1 nixos/sx: add thiagokokada as maintainer 2024-08-10 19:45:08 +01:00
Thiago Kenji Okada
187a07a96e nixos/sx: add addAsSession option 2024-08-10 19:45:07 +01:00
Thiago Kenji Okada
6a18ff9098 nixos/sx: add package option 2024-08-10 19:45:07 +01:00
Thiago Kenji Okada
b01dbc6e72 nixos/sx: nixpkgs-rfc-style formatting and remove top-level with lib 2024-08-10 19:45:07 +01:00
github-actions[bot]
45080a9559
Merge master into staging-next 2024-08-10 18:01:08 +00:00
Adam Stephens
ac18c4d1e9
treewide: remove lxc team from lxd packages and modules
LXD is not under the LXC project any longer
2024-08-10 13:23:38 -04:00
Adam Stephens
094f2b6c9d
nixos/incus: add incus-only vm and container images 2024-08-10 13:23:36 -04:00
Adam Stephens
293c17926d
nixos/incus-agent: init 2024-08-10 12:08:33 -04:00
Litchi Pi
0ec7dd5011 fix: replace relative paths in sources with nix store paths
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-08-10 16:23:27 +02:00
Eduard Bachmakov
7cc66df3ec nixos/systemd/initrd: Set /etc/hostname in the initrd.
With the the Systemd-based initrd, systemd-journald is doing the logging.
One of Journald's Trusted Journal Fields is `_HOSTNAME` (systemd.journal-fields(7)).
Without explicitly setting the hostname via this file or the kernel cmdline, `localhost` is used and captured in the journal.
As a result, a boot's log references multiple hostnames.
With centralized log collection this breaks filtering (more so when logs from multiple Systemd-based initrds are streaming in simultaneously.

Fixes #318907.
2024-08-10 11:16:25 +02:00
github-actions[bot]
68894e5504
Merge master into staging-next 2024-08-10 00:02:11 +00:00
Rob Sears
bdcd19eff5
package reference was removed in 03d57d7 (#333504) 2024-08-09 21:42:42 +02:00
github-actions[bot]
03e2e79ded
Merge master into staging-next 2024-08-09 18:01:11 +00:00
Sandro
03d57d7420
Merge pull request #332806 from isabelroses/fix/wpa_supplicant 2024-08-09 18:19:56 +02:00
Donovan Glover
0c4a828b0d
Merge pull request #332061 from emilazy/push-lyoruqmmrqzx
hydron: drop
2024-08-09 15:40:54 +00:00
Cosima Neidahl
5244f79d35
Merge pull request #332220 from OPNA2608/update/lomiri/OTA-5
lomiri.*: OTA-5
2024-08-09 17:37:39 +02:00
Luflosi
d80d811a6f
nixos/iperf3: add package option 2024-08-09 16:01:01 +02:00
Sandro Jäckel
96790120df
nixos/pam: fix writeFile no longer taking null as an argument warning
> evaluation warning: pkgs.writeText "motd": The second argument should be a string, but it's a null instead, which is deprecated. Use `toString` to convert the value to a string first.
2024-08-09 14:20:47 +02:00
Sandro
ac1702d768
Merge pull request #332757 from errnoh/goxlr-fix-launcher 2024-08-09 14:17:31 +02:00
github-actions[bot]
7b86eb63e7
Merge master into staging-next 2024-08-09 12:01:12 +00:00
Rick van Schijndel
8c6460bb75
Merge pull request #333317 from bjornfor/nixos-mosquitto-fix-option-default
nixos/mosquitto: fix "listeners" option default
2024-08-09 08:29:15 +02:00
Rick van Schijndel
0a21feb643
Merge pull request #327842 from cafkafk/kubernetes-feature-gate-refactor
nixos/kubernetes: refactor feature gates to attrsOf bool, making it possible to disable featureGates
2024-08-09 08:24:47 +02:00
Martin Weinelt
1e25330d41
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/libraries/SDL2/default.nix
2024-08-09 02:18:56 +02:00
Bjørn Forsman
4265f4354c nixos/mosquitto: fix "listeners" option default
The option type is listOf, so the default should be an empty list, not
empty attrset.
2024-08-08 23:59:36 +02:00
Pol Dellaiera
b6132318aa
Merge pull request #333240 from Pandapip1/why-tf-didnt-chromium-enable-install-chrome
nixos/chromium: Make programs.chromium.enable install chromium
2024-08-08 22:55:56 +02:00
Patrick
f8639ea08d
nixos/homebox: init 2024-08-08 20:01:46 +02:00
github-actions[bot]
d3ef01201e
Merge master into staging-next 2024-08-08 18:01:35 +00:00
Pogobanane
8ccab48f1c gitlab-shell: rename bin/{install, check} to gitlab-shell-{install, check} 2024-08-08 17:41:20 +02:00
Sandro Jäckel
3e8666bce9 nixos/redis: remove outdated info in enable option
Thanks for the heads up @poperigby !
2024-08-08 17:25:16 +02:00
Gavin John
93b6400ff5
nixos/chromium: Make programs.chromium.enable install chromium 2024-08-08 16:15:14 +01:00
OPNA2608
ce6dff1fdd nixos/ayatana-indicators: nixfmt 2024-08-08 17:10:12 +02:00
OPNA2608
25625d78e4 nixos/ayatana-indicators: Add systemd target for Lomiri
Lomiri now uses a separate systemd user target for all indicators that should start under Lomiri, because some Ayatana-like indicators do not make sense on non-Lomiri desktops.

Probably temporary, as we should instead encode this data from every indicator's service file into some passthru attribute.
2024-08-08 17:10:12 +02:00
Erno Hopearuoho
eb8268e6cb goxlr-utility: 1.1.1 -> 1.1.1-unstable-2024-08-06
fixes #331319 where user expects xdg desktop entry to continue work as a launcher
hopefully also helps with #332957
2024-08-08 14:20:38 +03:00
Florian Klink
bccb2f7c84 buildkite-agent: 3.76.2 -> 3.77.0
We can also drop the workaround included in the bump to 3.76.1, as
upstream reverted that behavorial change.
2024-08-08 13:24:15 +03:00
github-actions[bot]
4f6f7d0791
Merge master into staging-next 2024-08-08 10:12:08 +00:00
nikstur
fa12935a32
Merge pull request #333006 from nikstur/static-mtab
nixos/systemd-tmpfiles: create /etc/mtab via environmemt.etc instead of tmpfiles
2024-08-08 12:00:07 +02:00
Ivan Trubach
63caf38e33 nixos/prometheus.exporters.pgbouncer: fix escaping connectionStringFile in shell arguments 2024-08-08 05:54:45 +03:00
Ivan Trubach
6008ed89f6 nixos/prometheus.exporters.pgbouncer: do not assume that pgbouncer runs on localhost
PgBouncer instance running on localhost may not be the on being
monitored in connectionString. Remove checks that forbid valid
configuration from being used and instead document requirements for
PgBouncer configuration when used with the exporter.
2024-08-08 05:54:45 +03:00
Ivan Trubach
bfb9d1825d nixos/pgbouncer: add services.pgbouncer.settings option
This change adds services.pgbouncer.settings option as per [RFC 0042]
and deprecates other options that were previously used to generate
configuration file.

In addition to that, we also place the configuration file under
environment.etc to allow reloading configuration without service
restart.

[RFC 0042]: https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md
2024-08-08 05:54:26 +03:00
nikstur
9e720a5881 nixos/systemd-tmpfiles: create /etc/mtab via environmemt.etc instead of tmpfiles
This enables an immutable /etc via `system.etc.overlay.mutable = false`.
2024-08-07 16:12:37 +02:00
github-actions[bot]
addc823ceb
Merge master into staging-next 2024-08-07 12:01:21 +00:00
Sam Grimee
b5d6de74ed nixos/librenms: fix lnms wrapper to ensure run by correct user
Complementary to the fix for #322344
2024-08-07 11:32:04 +02:00
Sam Grimee
4397a6d0a6 nixos/librenms: fix artisan wrapper
Fixes how the librenms-artisan wrapper passes arguments to allow invocations with multiple complex parameters to work.
2024-08-07 11:32:04 +02:00
Sam Grimee
dc6c6e42e4 nixos/librenms: add socket auth for mysql
This allows librenms to use socket authentication to the mysql package out of the box if installed under
the same username, avoiding complex DB password initialization steps.
2024-08-07 11:32:04 +02:00
K900
2cd35e2b45 nixos/vaultwarden: fix eval 2024-08-07 09:42:01 +03:00
github-actions[bot]
e80257fbed
Merge master into staging-next 2024-08-07 00:02:22 +00:00
isabel
78a5508605
nixos/wpa_supplicant: don't use removed wpa_supplicant_ro_ssids 2024-08-06 20:33:23 +01:00
Thiago Kenji Okada
cb91750451
Merge pull request #297434 from Vonfry/init-ly-module
add nixos/ly module and package update
2024-08-06 19:32:22 +01:00
github-actions[bot]
5ca6720152
Merge master into staging-next 2024-08-06 18:01:00 +00:00
Masum Reza
d1cde1b920
nixos/ananicy: fix typo (#332771) 2024-08-06 23:07:39 +05:30
Franz Pletz
481d7272d1
Merge pull request #201202 from m-bdf/sdboot-infinite-timeout 2024-08-06 16:25:25 +02:00
Sandro
31a02bb482
Merge pull request #332554 from SuperSandro2000/postfix-config-int 2024-08-06 14:17:10 +02:00
Franz Pletz
9854339a8f
Merge pull request #327913 from eclairevoyant/wl-enable-xdg-icons 2024-08-06 14:06:43 +02:00
Sandro
5d43833452
Merge pull request #325861 from Scrumplex/nixos/vaultwarden/fix-backup-24.11 2024-08-06 14:02:56 +02:00
github-actions[bot]
6c87856002
Merge staging-next into staging 2024-08-06 12:01:45 +00:00
Franz Pletz
97ebf11501
Merge pull request #319422 from jmbaur/systemd-boot-devicetree 2024-08-06 13:39:29 +02:00
Fea
0c9cb0041b nixos/misskey: init 2024-08-06 12:24:15 +02:00
Sandro
b67ad15b55
Merge pull request #318635 from SuperSandro2000/nix-trusted-user 2024-08-06 11:40:00 +02:00
github-actions[bot]
eddd97e1fd
Merge staging-next into staging 2024-08-06 06:01:44 +00:00
Florian
b929a6c31d
Merge pull request #330840 from erictapen/gollum
gollum: 5.3.3 -> 6.0.1
2024-08-06 07:27:50 +02:00
éclairevoyant
3ec1eb4f2c
nixos/plasma5: enable xdg.icons 2024-08-06 00:09:46 -04:00
éclairevoyant
761a8023c4
nixos/plasma6: enable xdg.icons 2024-08-06 00:09:46 -04:00
éclairevoyant
28f1933286
nixos/wayland-session: enable xdg.icons 2024-08-06 00:09:46 -04:00
éclairevoyant
100d5e4c17
nixos/wayfire: enable xdg.icons 2024-08-06 00:09:44 -04:00
éclairevoyant
e4582da985
nixos/miriway: enable xdg.icons 2024-08-06 00:08:29 -04:00
Anna Aurora
dfd120537d
nixos/meme-bingo-web: fixed documentation, service description and did further hardening 2024-08-06 03:14:22 +02:00
Sandro Jäckel
2862350f61
nixos/postfix: allow int in config
eg. unknown_local_recipient_reject_code can be set to 550 which toString
can stringify
2024-08-05 21:18:40 +02:00
Sandro Jäckel
0bf368c8ac
nixos/mailman: allow setting relay domains with services.postfix.config.relay_domains 2024-08-05 21:15:28 +02:00
github-actions[bot]
cf88251824
Merge staging-next into staging 2024-08-05 18:01:40 +00:00
Masum Reza
0a7eaa55cc
Merge pull request #331722 from JohnRTitor/ananicy-cpp
nixos/ananicy: disable ananicy-cpp's BPF on hardened kernels, cleanup
2024-08-05 22:55:31 +05:30
Martin Weinelt
2eb23c4472
Merge pull request #332507 from mweinelt/pretix-fixes
pretix: variouss fixes
2024-08-05 19:07:34 +02:00
Sandro
8b43ee5545
Merge pull request #330522 from xokdvium/dev/init-rathole
nixos/rathole: init module
2024-08-05 18:07:25 +02:00
Martin Weinelt
3dfb2c685a
nixos/pretix: restart web and worker unit on failure
Found a few instances, where celery intermittently complained about a
misconfigured redis instance and exited.

> redis.exceptions.ResponseError: MISCONF Redis is configured to save RDB
> snapshots, but it's currently unable to persist to disk. Commands that
> may modify the data set are disabled, because this instance is
> configured to report errors during writes if RDB snapshotting fails
> (stop-writes-on-bgsave-error option). Please check the Redis logs for
> details about the RDB error.
2024-08-05 17:37:12 +02:00
Florian Klink
a9f1cb6e2f
Merge pull request #253260 from thblt/systemd-bitlocker
Create boot.loader.systemd-boot.rebootForBitlocker option
2024-08-05 17:03:13 +03:00
github-actions[bot]
b4c408518b
Merge staging-next into staging 2024-08-05 12:01:48 +00:00
Florian Klink
a5265503e6
Merge pull request #327506 from ElvishJerricco/systemd-initrd-merge-sbin
systemd-stage-1: Use common bin for /sbin
2024-08-05 14:18:51 +03:00
Thibault Polge
a68b81c429 nixos/systemd-boot: Add reboot-for-bitlocker support
Windows with BitLocker and TPM enabled doesn't support boot chaining.
This option activates a special experimental mode in systemd-boot that
tries to detect such systems and, if detected and selected by the user
at the boot menu, set the BootNext EFI variable to it before resetting.
2024-08-05 13:17:25 +03:00
Vladimír Čunát
d4720e9c1e
Merge branch 'staging-next' into staging
There was a nontrivial conflict in pkgs/stdenv/linux/bootstrap-tools*
(reorganizing code vs. modifying it)  I hope I really got it right.
2024-08-05 11:05:55 +02:00
Maëlys Bras de fer
7ae6219163 nixos/systemd-boot: fix infinite timeout 2024-08-05 08:48:54 +00:00
Martin Weinelt
3a719e06c7
nixos/mediawiki: move to php 8.2
There is breakage on PHP 8.1 since the last staging cycle.
2024-08-04 18:51:41 +02:00
Johannes Jöns
79723dbb2a
Merge pull request #331358 from pinpox/init-screego-module
nixos/screego: init module
2024-08-04 18:34:51 +02:00
Shea Levy
a9f862f7ab
Merge remote-tracking branch 'shlevy/ipu6-upstream' 2024-08-04 09:11:17 -04:00
Aleksana
e38e6a4490
Merge pull request #328164 from truh/docs/oci-containers-firewall-bypass
nixos/oci-containers: document firewall bypass
2024-08-04 16:35:23 +08:00
imlonghao
4a03ff8bc8
nixos/borgmatic: change the default value 2024-08-04 11:56:25 +08:00
Aleksana
98a8833482
Merge pull request #332045 from wegank/wordpress-php
nixos/wordpress: unpin php81 in check phase
2024-08-04 09:56:25 +08:00
RatCornu
924437f5de
nixos/pingvin-share: init at 0.29.0 2024-08-04 01:18:03 +02:00
Emily
7ec755257a hydron: drop
This package was marked as vulnerable in
<https://github.com/NixOS/nixpkgs/pull/255959>, almost a year ago and
over a year after the project was archived upstream. The package and
module are unusable without bypassing a security warning in 23.05,
23.11, and 24.05.

Given that the package is intended as an organizer for
potentially‐untrusted media files, the vulnerability is critical and
leads to remote code execution, and there is basically no prospect
of upstream releasing a fix, remove the package and module entirely
for 24.11.
2024-08-03 20:27:19 +01:00
Winter
6c11488ce0 Revert "nixos/podman: use given package for dockerCompat"
This reverts commit df74ebcabb, which breaks
eval when Podman is enabled due to infinite recursion [0] [1].

I take full responsibility for merging this without looking too closely
nor running the NixOS test.

[0]: df74ebcabb (commitcomment-145003824)
[1]: https://github.com/NixOS/nixpkgs/pull/267321#issuecomment-2267076978
2024-08-03 15:13:24 -04:00
Weijia Wang
ec581817ca nixos/wordpress: unpin php81 in check phase 2024-08-03 20:24:27 +02:00
Sandro
03dfa4c1da
Merge pull request #330260 from Luflosi/add/eg25-manager
eg25-manager: init at 0.4.6
2024-08-03 18:23:27 +02:00
Sandro
377e40297c
Merge pull request #330046 from DCsunset/stirling-pdf-module-init
nixos/stirling-pdf: init module
2024-08-03 18:22:02 +02:00
7c6f434c
da64ac6beb
Merge pull request #310807 from Naxdy/work/improve-btrfs-autoscrub
nixos/btrfs: refactor & improve device selection for autoScrub
2024-08-03 15:31:32 +00:00
Aleksana
280d879751
Merge pull request #331993 from networkException/configurable-flatpak-package
nixos/flatpak: add package option
2024-08-03 23:14:34 +08:00
Chris Maniewski
df74ebcabb nixos/podman: use given package for dockerCompat
Defining a package that isn't the default results in podman-compat linking to a different version of podman (always the default one). This PR changes the behavior so that the given alternative package is used for the dockerCompat option as well. This could technically break things for people who rely on this quirk, albeit the previous behavior is probably not what one would expect.

Co-authored-by: Winter <winter@winter.cafe>
2024-08-03 10:54:26 -04:00
Sandro
cfd25f7c6a
Merge pull request #322403 from dadada/dev/gitlab-runner-podman
nixos/gitlab-runner: allow access to podman socket
2024-08-03 16:48:09 +02:00
Aleksana
7e5d233658
Merge pull request #320274 from honnip/update-firefox-lang
nixos/firefox: add missing language packs
2024-08-03 22:37:22 +08:00
Aleksana
ff7af032a0
Merge pull request #330424 from panchoh/master
nixos/kmscon: fix cfgfile missing trailing newline
2024-08-03 22:32:12 +08:00
networkException
af69223f46
nixos/flatpak: add package option
this patch adds the `services.flatpak.package` option to
allow overriding the package added by this module to
`environment.systemPackages` and the likes.

This is useful in scenarios where applications call the
flatpak binary to query information like writable directories
and there is a custom package returning different results
from the vanilla binary.

See https://github.com/crabdancing/nixpak-flatpak-wrapper
2024-08-03 15:49:33 +02:00
github-actions[bot]
41e708f4b7
Merge staging-next into staging 2024-08-03 12:01:32 +00:00
Vonfry
0849e0fe7a
nixos/ly: init module 2024-08-03 19:56:25 +08:00
Lin Jian
48966eacad
Merge pull request #328365 from Guanran928/cloudflare-dyndns
nixos/cloudflare-dyndns: introduce package option
2024-08-03 15:10:25 +08:00
github-actions[bot]
746071163c
Merge staging-next into staging 2024-08-03 06:01:24 +00:00
Lin Jian
7b9ef31afd
Merge pull request #331800 from Guanran928/treewide/remove-periods-from-lib-mkenableoption
treewide: remove periods from lib.mkEnableOption
2024-08-03 12:53:41 +08:00
github-actions[bot]
81cddc1677
Merge staging-next into staging 2024-08-03 00:02:50 +00:00
Shea Levy
3bfeae1428
ipu6: Don't build out-of-tree driver for kernels that have it 2024-08-02 17:30:42 -04:00
Felix Uhl
57d30c7a61
nixos/wg-quick: add generatePrivateKeyFile option (#331253)
This option is already present in the wireguard module, but missing from
the wg-quick module. This is very annoying, because it means you can't
easily get a safe and valid configuration on first boot when using
wg-quick.

This change adds the same option with the same description text and the
same script, but instead of generating an entire systemd unit dedicated
to creating the key file, it adds the script as a PreUp script, which
is a much simpler solution.

I've tested this in my own configuration, and it does indeed work.
wg-quick allows multiple PreUp scripts, which are run in order, and
all PreUp scripts are run before the private key is read from disk,
see `man wg-quick`.
2024-08-03 00:07:27 +04:00
Florian Klink
129558261d
buildkite-agent: 3.59.0 -> 3.76.1 (#331340)
* buildkite-agent: 3.59.0 -> 3.76.1

* nixos/buildkite-agent: put each agent in its own private /tmp

Workaround for https://github.com/buildkite/agent/issues/2916, but
probably still a good idea.
2024-08-02 21:59:32 +02:00
github-actions[bot]
931cf50e01
Merge staging-next into staging 2024-08-02 18:01:49 +00:00
Emily
ecf7c683c2
Merge pull request #319807 from hellodword/nixos-restic-add-unlock
nixos/restic: ensure newline in --files-from
2024-08-02 18:18:47 +02:00
Guanran Wang
ea6f4d5e86
treewide: remove periods from lib.mkEnableOption
Co-authored-by: éclairevoyant <848000+eclairevoyant@users.noreply.github.com>
2024-08-02 23:55:32 +08:00
❄️
778a8d30c8
Merge pull request #330838 from rorosen/k3s-images-archive
k3s: add airgap images to passthru attributes
2024-08-02 11:23:15 -03:00
github-actions[bot]
78947ebef4
Merge staging-next into staging 2024-08-02 12:01:52 +00:00
Jörg Thalheim
b475b0c767
Merge pull request #331712 from Mic92/fix-netboot
Fix netboot
2024-08-02 12:34:54 +02:00
John Titor
2cf5032969
nixos/ananicy: disable ananicy-cpp's BPF on hardened kernels 2024-08-02 15:06:35 +05:30
John Titor
d626da64ec
nixos/ananicy: format with nixfmt-rfc-style 2024-08-02 14:52:53 +05:30
John Titor
4c55a97341
nixos/ananicy: use lib. explicitly 2024-08-02 14:34:14 +05:30
Jörg Thalheim
d79b03a59c fix netboot image 2024-08-02 10:24:34 +02:00
tomberek
3758fa1f50
Merge pull request #299339 from teto/teto/wireguard-compact-unit
networking.wireguard: generate leaner units
2024-08-02 03:18:16 -04:00
Maximilian Bosch
7b01c5da3c
Merge pull request #329611 from Ma27/pg16
postgresql: 15 -> 16 for 24.11+
2024-08-02 07:09:50 +00:00
tomberek
7d29722746
Merge pull request #322035 from jpds/nixos-nats-validate-config
nixos/nats: Implemented configuration verification
2024-08-02 02:37:48 -04:00
Masum Reza
1318ddf6f3
Merge pull request #326385 from Pandapip1/init-nixos-immersed-vr
nixos/immersed-vr: init module
2024-08-02 11:30:57 +05:30
Maximilian Bosch
759d375844
Merge pull request #329262 from frantisekhanzlikbl/allow-mask-in-networkd-routing-policy-rule-fwmark
nixos/networkd: allow specifying FirewallMark mask
2024-08-01 22:40:09 +00:00
Felix Bühler
04101568c0
Merge pull request #325644 from Stunkymonkey/sogo-chmod-install
nixos/sogo: prefer 'install' over 'chmod'/'chown'
2024-08-01 23:25:37 +02:00
František Hanzlík
8b4cd01f90
nixos/networkd: allow specifying FirewallMark mask 2024-08-01 22:22:01 +02:00
Jared Baur
fca8ee915d
nixos/systemd-boot: add support for devicetree entry
The [Boot Loader Specification](https://uapi-group.org/specifications/specs/boot_loader_specification/)
allows for using a key called "devicetree" for specifying which
devicetree the bootloader should use during boot. With regards to
systemd-boot, this key is used to specify which file should be picked up
from the ESP to install to the EFI DTB Configuration Table. Linux then uses
this Configuration Table to setup the machine. This change is similar to
the one done in https://github.com/NixOS/nixpkgs/pull/295096, where that
change was for adding DTB support to systemd-stub, and this is for
systemd-boot.
2024-08-01 11:15:15 -07:00
Franz Pletz
1d42bdaa68
Merge pull request #330715 from hxtmdev/tmux-fix-history-limit 2024-08-01 18:09:40 +02:00
Bjørn Forsman
849492e6e2 nixos/deconz: mention RaspBee hardware 2024-08-01 16:48:38 +02:00
Bjørn Forsman
aeaf887dcb nixos/deconz: update URL to hardware products
There are multiple products/versions, so replace the "version 2" URL
with a landing page for all products.
2024-08-01 16:48:38 +02:00
Emily
accd3aa082
Merge pull request #331187 from emilylange/forgejo
forgejo: refactor to support multiple versions, 7.0.5 -> 8.0.0, forgejo-lts: init at 7.0.6
2024-08-01 15:07:21 +02:00
Daniel Höxtermann
12e6440b46 nixos/tmux: fix historyLimit when used with newSession
When `history-limit` appears after `new-session` it does not have any
effect.
2024-08-01 13:36:57 +02:00
Daniel Höxtermann
da6200c3b6 nixos/tmux: add hxtmdev as maintainer 2024-08-01 13:36:56 +02:00
Martin Weinelt
7b07f5371f
Merge pull request #331406 from mweinelt/pretix-2024.7.0
pretix: 2024.6.0 -> 2024.7.0
2024-08-01 13:04:29 +02:00
lassulus
35ac2fed3e
Merge pull request #330946 from toastal/movim-0.26
movim: 0.25.1 → 0.26
2024-08-01 11:39:13 +02:00
Pablo Ovelleiro Corral
c882d9b673
nixos/screego: init module
Add module for screego
2024-08-01 10:51:38 +02:00
Michele Guerini Rocco
de8d752e98
Merge pull request #319188 from buckley310/2024-06-11-wpa-supplicant
nixos/wireless: fix quotes in config path
2024-08-01 09:32:05 +02:00
K900
b2dbd6bf70
Merge pull request #331278 from thefossguy/master
nixos/pam: kwallet: add the `forceRun` option
2024-08-01 09:30:19 +03:00
Christina Sørensen
32ca66f3ed
nixos/kubernetes: refactor feature gates to attrsOf bool, making it possible to disable featureGates
This is a breaking change, requiring users of `featureGates` to change
from a `listOf str` to `attrsOf bool`.

Before:
```nix
featureGates = [ "EphemeralContainers" ];
extraOpts = pkgs.lib.concatStringsSep " " (
[
  "--container-runtime=remote"
  ''--feature-gates="CSIMigration=false"''
});
```

After:
```nix
featureGates = {EphemeralContainers = true; CSIMigration=false;};
```

This is much nicer, and sets us up for later work of migrating to
configuration files for other services, like e.g. has been happening
with kubelet (see: #290119).

Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-08-01 07:51:34 +02:00
Pratham Patel
4074853391
nixos/pam: kwallet: add the forceRun option 2024-08-01 09:51:31 +05:30
Martin Weinelt
4ba537131f
nixos/pretix: increases startup timeout
Migrations on a busy machine can exceed 5 minutes, which I can reproduce
on a busy builder.
2024-08-01 04:37:20 +02:00
hellodword
e4a4da8794
nixos/restic: ensure newline in --files-from 2024-08-01 02:07:38 +00:00
Arian van Putten
cd90d5e20a
Merge pull request #331248 from arianvp/systemd-unified-only
Remove support for legacy cgroup hierachy
2024-07-31 18:28:17 +02:00
Arian van Putten
85e4fc50db nixos/ananicy: force unified cgroup hierachy
This breaks the functionality of this module but I don't see a way around it
as 256 dropped support.

https://gitlab.com/ananicy-cpp/ananicy-cpp/-/issues/40
2024-07-31 14:38:51 +02:00
Sandro
46784713e5
Merge pull request #325639 from OPNA2608/init/lomiri/lomiri-camera-app 2024-07-31 13:59:03 +02:00
Arian van Putten
def27f6680 nixos/benchexec: remove superfluous assertion for cgroups 2024-07-31 13:49:58 +02:00
Arian van Putten
4e4b14e3f6 nixos/lxd: delegate cgroup to lxd
Just doing what arch does as well: https://gitlab.archlinux.org/archlinux/packaging/packages/lxd/-/blob/main/lxd.service?ref_type=heads

Also container managers should always have this option set. See https://systemd.io/CONTAINER_INTERFACE/
2024-07-31 13:49:58 +02:00
Arian van Putten
ee81fdfa56 nixos/lxd: use unified cgroup hierachy 2024-07-31 13:49:58 +02:00
Arian van Putten
45e041902f nixos/systemd: drop support for legacy cgroup hierachy 2024-07-31 13:49:58 +02:00
Sandro
3a6a3f6f90
Merge pull request #330787 from Naxdy/work/remove-gtkuseportal 2024-07-31 13:23:46 +02:00
Sandro
e4a6568004
Merge pull request #312403 from alois31/rtw88 2024-07-31 13:14:18 +02:00
Naxdy
632da75711
nixos/xdg/portal: remove deprecated option gtkUsePortal 2024-07-31 11:27:11 +02:00
euxane
fcb2a4a5ff nixos/zoneminder: set fcgiwrap socket owner 2024-07-31 11:03:06 +02:00
euxane
efc7aebda7 nixos/fcgiwrap: require explicit owner for UNIX sockets
The default in the previous option documentation was incorrect,
resulting in the UNIX socket to be unreachable except by root by
default.

This fixes the documentation and requires consumers to set values
explicitly for the socket's owning user and group.
2024-07-31 11:03:06 +02:00
euxane
4f2da6c9c1 nixos/fcgiwrap: add option migration instruction errors
This adds migration instructions for the removed global shared instance
configuration of fcgiwrap.

Adding those explicit messages to the previous options requires moving
the newly defined options from `services.fcgiwrap.*` to
`services.fcgiwrap.instances.*` due to an option namespace clash.

`mkRenamedOptionModule` was not used because the previous options do
not directly map to the new ones. In particular, `user` and `group`
were described as setting the socket's permission, but were actually
setting the process' running user.

Co-authored-by: Minijackson <minijackson@riseup.net>
2024-07-31 11:02:37 +02:00
Peter Hoeg
c3392ad349 nixos/prometheus-smartctl-exporter: providing the path to the binary is no longer needed 2024-07-31 10:48:38 +02:00
Alois Wohlschlager
ec60e56b26
rtw88-firmware: drop
It's all part of linux-firmware now.
2024-07-31 10:26:51 +02:00
zimbatm
5a353f15cc nixos/nar-serve: add domain option 2024-07-31 09:57:37 +02:00
zimbatm
ed47bba9ad nixos/nar-serve: add package option 2024-07-31 09:57:36 +02:00
Bruno BELANYI
e20e12a9c7
Merge pull request #330956 from DCsunset/gotify-module-update
nixos/gotify-server: support all config options and custom package
2024-07-31 08:22:23 +01:00
toastal
936a378123 movim service: updates for 0.26 2024-07-31 14:12:14 +07:00
Masum Reza
184957277e
Merge pull request #322282 from tylerjl/tylerjl/print-host-key-soft-fail
nixos/ec2-data: skip unrecognized keys in print-host-keys
2024-07-31 10:59:10 +05:30
Masum Reza
2800d05b88
Merge pull request #314791 from uninsane/pr-pam-package
nixos/pam: add `security.pam.package` option
2024-07-31 10:20:33 +05:30
emilylange
e271e748c9
nixos/forgejo: default to forgejo-lts 2024-07-31 03:59:11 +02:00
DCsunset
0c2918fc91 nixos/gotify-server: add environment and environmentFiles options 2024-07-30 17:38:00 -04:00
DCsunset
e1ced8b12c nixos/gotify-server: add package option 2024-07-30 17:32:01 -04:00
DCsunset
b5a051f694 nixos/gotify-server: add maintainer 2024-07-30 17:29:55 -04:00
DCsunset
2079eeb882 nixos/gotify-server: clean up and reformat module 2024-07-30 17:28:54 -04:00
Robert Rose
3ac993566c nixos/k3s: add test for airgap images import
Add a nixos test that imports the airgap images
archive and checks whether all expected images are
successfully loaded by k3s.
2024-07-30 21:14:25 +02:00
Masum Reza
cb27644348
Merge pull request #310661 from somasis/boot.plymouth.font
nixos/boot.plymouth.font: escape font path
2024-07-31 00:39:11 +05:30
Emily
d21a082a4d
Merge pull request #296691 from helsinki-systems/feat/restic-systemd-inhibit
nixos/restic: add option to inhibit going to sleep
2024-07-30 20:45:56 +02:00
Colin
7306423158
nixos/pam: fully-qualify modulePath
this ensures PAM users always get the intended version of a module when
multiple versions of the same module exist on a system.

most packages which consume `pam` and link against `libpam.so` do so only
to access its API, and not because they care about the specific
`pam_<xyz>.so` modules provided by that `pam`. but when specifying
modules by name only, PAM-capable applications may well load the
`pam_<xyz>.so` from the `pam` they were compiled against instead of the
pam declared in `security.pam.package`. by fully qualifying `modulePath`
we ensure that users can actually swap out pam modules without rebuilding
the world.
2024-07-30 23:53:58 +05:30
Colin
7511ed266c
nixos/pam: add security.pam.package option
this can be used to swap out which pam package is actually used by the
system for things like `pam_limits`, `pam_tty_audit`, etc, without forcing
a mass rebuild the way an overlay would.
2024-07-30 23:53:57 +05:30
Víctor Martínez
bbb542ea66
nixos/ollama: add missing nvidia device group name (#331125)
Fixes: #331069
2024-07-30 19:03:08 +02:00
Sandro Jäckel
280e9a5ca4
nixos/nix: move trusted-user to config
This avoids having to define root when trying to add another user as
trusted user, similar to the other options.
2024-07-30 18:18:57 +02:00
Jonathan Zielinski
42e7fd46e7 nixos/nvidia-container-toolkit: add device-name-strategy option
Containerd will fail to inject CDI devices if you've been using the
uuid naming strategy rather than the default one.
2024-07-30 15:25:48 +00:00
OPNA2608
826486cd2f nixos/lomiri: Add camera app 2024-07-30 13:26:09 +02:00
Masum Reza
15aa26cee0
Merge pull request #318815 from OPNA2608/init/miracle-wm
miracle-wm: init at 0.3.0
2024-07-30 14:56:47 +05:30
K900
7f2ec487cc nixos/i2pd: actually fix, clean up a little bit 2024-07-30 11:07:37 +03:00
Masum Reza
d2f7731666
Merge pull request #322312 from 71rd/wayfire-fix
nixos/wayfire: fix import file with settings required to start service
2024-07-30 12:58:15 +05:30
K900
268299ad04 nixos/i2pd: fix warning 2024-07-29 23:36:08 +03:00
git@71rd.net
2483ea35cd modules/wayfire: nixfmt
Signed-off-by: git@71rd.net <git@71rd.net>
2024-07-29 16:13:55 +00:00
git@71rd.net
3f55cc361c nixos/wayfire: fix import file with settings required to start service
Wayfire does not start without further configuration, when
programs.wayfire.enable is the only wayland wm enabled. When sway or a
similar program is also enabled that program imports wayland-session.nix
hiding the problem.

This imports wayland-session.nix and adds the option xwayland.enable to
pass to the file
2024-07-29 14:24:26 +00:00
OPNA2608
ed443c58a8 nixos/miracle-wm: init 2024-07-29 15:09:17 +02:00
Kerstin Humm
ceb54bc2a7
nixos/gollum: format with nixfmt 2024-07-29 12:49:44 +02:00
Kerstin Humm
d6b9fb9ba3
gollum: 5.3.3 -> 6.0.1
Changelog: https://github.com/gollum/gollum/releases
2024-07-29 12:49:43 +02:00
Franz Pletz
1e00e90307
Merge pull request #329450 from Kiskae/nvidia/560.28.03 2024-07-29 09:19:52 +02:00
Aleksana
a07da9722d
Merge pull request #330664 from Mic92/empty-with
treewide: remove unused `with` statements from maintainer lists
2024-07-29 15:01:57 +08:00