Commit Graph

21068 Commits

Author SHA1 Message Date
Pol Dellaiera
2199b69a7a
nixos/privatebin: init module & privatebin: init at 1.7.4 (#344014) 2024-10-04 09:51:40 +02:00
Paul Meyer
3e9b0cdf35
go_1_21/buildGo121Module: remove (#344622) 2024-10-04 08:29:15 +02:00
Sandro
e00cc9f2fa
openwebrx: remove alias alsaUtils -> alsa-utils (#346259) 2024-10-04 02:21:40 +02:00
Astro
48b4aa8eae openwebrx: s/alsaUtils/alsa-utils/
allows running with allowAliases = false
2024-10-03 23:53:56 +02:00
h7x4
c760c830d4
nixos/fedimintd: init service (#322815) 2024-10-03 23:53:30 +02:00
Bjørn Forsman
e6d7bbf71d nixos/prometheus-dnsmasq-exporter: use a working default leasesPath
dnsmasq dhcp-leasefile defaults to /var/lib/dnsmasq/dnsmasq.leases, so
use that as the default for the exporter too. Curiously, the example was
using the working path, so this patch simply swaps "example" and
"default" values.
2024-10-03 23:06:09 +02:00
Nico Felbinger
924ee0c2bc nixos/suricata: init module 2024-10-03 22:50:30 +02:00
Dawid Ciężarkiewicz
ba727987d4
nixos/fedimintd: init services 2024-10-03 13:05:12 -07:00
Sandro Jäckel
d82d689716
nixos/tailscale-derper: init 2024-10-03 22:04:40 +02:00
h7x4
5190ddc27d
treewide: \xc2\xa0 -> (#345898) 2024-10-03 18:23:59 +02:00
Domen Kožar
e873268a35
nixos/datadog-agent: fix deprecated trace agent option (#336546) 2024-10-03 16:15:08 +01:00
lassulus
def08aa2e3
jitsi-meet: Default NAT harvester, Excalidraw Caddy, Prosody lockdown (#280615) 2024-10-02 21:08:06 +01:00
Bjørn Forsman
48908e5b86 nixos: improve systemd slice names
Following
https://www.freedesktop.org/software/systemd/man/latest/systemd.unit.html#Description=,
update slice names to be short, descriptive and capitalized.
2024-10-02 20:24:13 +02:00
Jan Tojnar
c85360e799 nixos/gnome: Enable all x-d-p-gtk portals
This will fix the conflict when another DE using the full `xdg-desktop-portal-gtk` is enabled simultaneously with GNOME.
There will not be conflicts at runtime since the portals have been configured by `gnome-session` in `xdg.portal.configPackages` for a while now.
There will be minimal effect on system closure as all the extra x-d-p dependencies are also used by GNOME platform.
2024-10-02 18:54:06 +02:00
Jan Tojnar
0b5c9469bb nixos/deepin: Enable all x-d-p-gtk portals
This will fix the conflict when another DE using the full `xdg-desktop-portal-gtk` is enabled simultaneously with Deepin.
Currently, our Deepin uses `gtk` as the preferred default implementation for all portals so presumably the duplicate portals should not have been disabled anyway.
The added closure size should be negligible, as most of the packages are probably also used by Deepin transitively.
2024-10-02 18:49:42 +02:00
Jan Tojnar
ef3e98107f nixos/cinnamon: Enable all x-d-p-gtk portals
This will fix the conflict when another DE using the full `xdg-desktop-portal-gtk` is enabled simultaneously with Cinnamon.
There will no longer be conflicts at runtime since the portals are now configured by `cinnamon-common` in `xdg.portal.configPackages`.
The added closure size should be negligible, as most of the packages are also used by Cinnamon.
2024-10-02 18:44:58 +02:00
Peder Bergebakken Sundt
3100acba08 treewide: \xc2\xa0 ->
I have no idea what this escape sequence even is, but it breaks the nix parser with cryptic errors if not used in a comment.
A friend let me know MacOS is prone to input weird spaces, not sure if that is the source.

Candidates were located and created with:

    chr="$(echo -e '\xc2\xa0')"; rg -F "$chr" -l | xe sd -F "$chr" " "

There are some examples left, most being example output from `tree` in various markdown documents, some patches which we can't really touch, and `pkgs/tools/nix/nixos-render-docs/src/tests/test_commonmark.py` which I'm not sure if should be addressed
2024-10-02 15:33:06 +02:00
Atemu
b12b45ea63
nixos/i2pd: fix build (#345879) 2024-10-02 13:03:18 +02:00
Pol Dellaiera
075be3e70b
nixos/gatus: init module (#294469) 2024-10-02 11:08:14 +02:00
Daniel Nagy
1d8136e1ae
nixos/i2pd: fix build 2024-10-02 09:45:00 +02:00
Kristoffer Dalby
abb3b0089b
nixos/headscale: update module to headscale 0.23.0
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
2024-10-01 21:53:33 +02:00
Kristoffer Dalby
5dd728a081
nixos/headscale: modernize
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
2024-10-01 20:40:19 +02:00
h7x4
cd9c62afca nixos/graphite: add systemd slice
Co-authored-by: Bjørn Forsman <bjorn.forsman@gmail.com>
2024-10-01 20:15:22 +02:00
h7x4
ed45f4b166 nixos/phpfpm: phpfpm.slice -> system-phpfpm.slice 2024-10-01 20:03:08 +02:00
Emily
4ec4146f54 unifi-video: drop
EOL since January 2021.
2024-10-01 15:58:19 +01:00
Maximilian Bosch
55a45406a6
nixos/nextcloud: update relatedPackages 2024-10-01 13:36:16 +02:00
Maximilian Bosch
20ed9ccd88
nextcloud: correct stateversion logic 2024-10-01 12:48:47 +02:00
Jonas Heinrich
1b121c1ea2
nextcloud30: init at 30.0.0 2024-10-01 12:48:45 +02:00
Paul Meyer
6e839b8f99 go_1_21/buildGo121Module: remove
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-10-01 12:43:42 +02:00
Felix Singer
5f14c876bd nixos/redmine: Allow specifying an IP address Redmine should bind to
In order to not expose Redmine over all interfaces, allow configuring an
IP address it should bind to. Listen to 0.0.0.0 by default.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-01 06:16:42 +02:00
Nick Cao
5aa3097833
nixos/hatsu: init module (#345102) 2024-09-30 18:35:12 -04:00
h7x4
636185e25a
seafile: 10.0.1 -> 11.0.12 (#318727) 2024-09-30 23:53:02 +02:00
Pol Dellaiera
abbc4cb34c
nixos/open-webui: fix opensearch (#345529) 2024-09-30 23:28:21 +02:00
藍+85CD
2f15b523d9
nixos/hatsu: init module 2024-10-01 00:33:38 +08:00
Erin Yuki Schlarb
56581588c3 jitsi-meet: Add option to disable Prosody services not used by Jitsi Meet
The default Prosody config assumes that Prosody will be used as a federated
XMPP server, while the usecase for Jitsi Meet is much narrower.
2024-09-30 18:19:34 +02:00
Erin Yuki Schlarb
7ab8f255b9 jitsi-meet: Restrict jitsi-excalidraw systemd service to the minimum requried 2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
9e8b3f97cc jitsi-meet: Also forward Excalidraw connections when using Caddy as web server 2024-09-30 18:19:33 +02:00
Erin Yuki Schlarb
61cf88212d jitsi-videobridge: Set configurable default NAT harvester address to make the
service work behind NAT without additional manual configuration
2024-09-30 18:19:33 +02:00
h7x4
11f77694ac
nixos/bluemap: move to web-apps (#345353) 2024-09-30 17:53:27 +02:00
Erin Yuki Schlarb
67e261beb5 jitsi-meet: Set internal MUC options set in official Docker image 2024-09-30 17:31:04 +02:00
pinage404
83b1350904 nixos/open-webui: fix opensearch
When [adding Open WebUI as search engine in Firefox](https://docs.openwebui.com/tutorials/integrations/browser-search-engine/#for-firefox) it always links to `http://localhost:3000` instead of the configured port

It is because [the response use `WEBUI_URL` environment variable](1d225dd804/backend/open_webui/main.py (L2370)) which [is set by default to `1d225dd804/backend/open_webui/env.py (L106))
2024-09-30 17:28:11 +02:00
Maximilian Bosch
1e746f0030
Merge: nixos/postgresql: escape initdbArgs (#345341) 2024-09-30 17:04:10 +02:00
Martin Weinelt
b47b572e21
nixos/freeradius: fix group assignment for radius user 2024-09-30 15:50:13 +02:00
Martin Weinelt
4ca03e3a11
nixos/logrotate: allow sending signal to arbitrary processes
Various postrotate scripts send e.g. SIGHUP to processes, to have them
reload their config or reopen their logfile.
2024-09-30 13:30:38 +02:00
Martin Weinelt
2dabc4fce1
nixos/logrotate: reorder setuid syscall group
Relevant parts of @setuid are in @privileged, so we need to flip the
order around, to grant @setuid in spite of denying @privileged.
2024-09-30 13:26:14 +02:00
Florian Klink
9ff2ff44f8
nixos/garage: fix StateDirectory check to work with multiple data_dirs (#342903) 2024-09-30 12:27:06 +02:00
Pol Dellaiera
c82e57f79b
nixos: enable fstrim by default (#345285) 2024-09-30 11:52:13 +02:00
Weijia Wang
aa4c638b89
wordpressPackages: packages, language and theme updates (#345359) 2024-09-29 23:44:35 +02:00
Viorel-Cătălin Răpițeanu
db71929224 wordpressPackages: update packages, add ru_RU lang, make twentytwentyfour default 2024-09-29 23:09:33 +03:00
h7x4
c25213a9bd
nixos/bluemap: move to web-apps 2024-09-29 21:40:39 +02:00
Maximilian Bosch
11d1f8776c
nixos/postgresql: escape initdbArgs
It doesn't look correct that this isn't the case already.
2024-09-29 21:03:52 +02:00
Maximilian Bosch
0e78dc369c
Merge: doc: use initdbArgs in example postgresql upgrade script (#302823) 2024-09-29 20:39:05 +02:00
Savyasachee Jha
22e2e02118 nixos/privatebin: init 2024-09-29 23:02:19 +05:30
Naïm Camille Favier
7cba8410f7
nixos/networkmanager: set up /etc/ipsec.secrets as required by the L2TP plugin (#340325) 2024-09-29 18:56:59 +02:00
Martin Weinelt
6710d0dd01
nixos/logrotate: relax hardening (#345275) 2024-09-29 16:24:34 +02:00
Weijia Wang
27e93e3061
go-ethereum: 1.14.8 -> 1.14.9 (#342934) 2024-09-29 16:21:23 +02:00
Franz Pletz
273796ebd7
nixos/upower: update percentage defaults (#344839) 2024-09-29 15:39:41 +02:00
OPNA2608
85e63d0540 lomiri.lomiri: Replace NIXOS_XKB_LAYOUTS envvar with file
This only ever worked for the session, not for the greeter. Writing the information out to a file should be more consistent.

To make sure that this works, and continues working, for the greeter & session, also add a new VM test.
2024-09-29 14:51:04 +02:00
h7x4
8b62732138
bluemap: 3.21 -> 5.4 (#332245) 2024-09-29 14:05:29 +02:00
Jörg Thalheim
7d8f1572d1 nixos: enable fstrim by default
The majority of users these days will install NixOS on SSD/NVME based
storage. Enabling fstrim ensures that the TRIM operation on this type of
storage is run at least once a week. This will improve performance and
life time of said devices. This also works in virtual machines as
formats such as qcow2 or vmdk support TRIM.
Ubuntu has a similar systemd timer also for quite a while enabled by
default.
Enabling this service will not increase the dependency closure as
util-linux is already part of the base system.
In case only filesystems that are not supported by fstrim are used, the
overhead is negelible as fstrim run in less than a second once a week.
2024-09-29 14:04:18 +02:00
Martin Weinelt
d3e0a89ca6
nixos/logrotate: relax hardening
The previous hardening change restricted the unit too much, breaking
legitimate functionality of logrotate.

Unfortunately this was not covered by our NixOS test.
2024-09-29 12:29:19 +02:00
Doron Behar
4fcd6b86ee
nixos/tzupdate: make it actually work (#343748) 2024-09-29 12:56:06 +03:00
K900
3951cf36e1
nixos/xdg/icons: add fallbackThemes option (#345057) 2024-09-29 12:17:57 +03:00
Bruno Bigras
1336b64235
Add veilid module (#330585) 2024-09-29 04:30:44 -04:00
Michele Guerini Rocco
a08c2e29b9
nixos/monero: remove with lib; (#343474) 2024-09-29 09:36:21 +02:00
K900
ce7068660a nixos/xdg/icons: add fallbackThemes option 2024-09-29 08:42:20 +03:00
melvyn
073099d0f7
nixos/seafile: add persistent user, configurable storage path, gc service 2024-09-28 19:09:58 -04:00
melvyn
d3b5dc8da1
nixos/seafile: add persistent user, configurable storage path, gc service 2024-09-28 17:57:02 -04:00
Franz Pletz
e8486ebc7f
freeradius: add option to compile with postgres (#265762) 2024-09-28 22:56:08 +02:00
Daniel Nagy
6512103dfe
nixos/monero: remove with lib; 2024-09-28 22:30:00 +02:00
K900
1228db540d
nixos/plasma6: use xwayland module (#345122) 2024-09-28 22:14:43 +03:00
Leona Maroni
a23db91282
nixos/immich: add option database.port (#345094) 2024-09-28 18:01:08 +02:00
Yaroslav Bolyukin
fba92705b0
nixos/plasma6: use xwayland module
For ability to override used xwayland package
2024-09-28 17:27:22 +02:00
Franz Pletz
79a01a8631
pleroma: 2.6.3 -> 2.7.0 (#333283) 2024-09-28 15:36:27 +02:00
Franz Pletz
1ee99a4837
tailscaled: after NetworkManager-wait-online (#344678) 2024-09-28 15:26:00 +02:00
Franz Pletz
a3f79b7d63
tailscale: add su to path (#344947) 2024-09-28 15:22:40 +02:00
Franz Pletz
ef1ecffdbe
nixos/gitlab: add systemd slice (#343523) 2024-09-28 15:12:58 +02:00
h7x4
dd7a192b4f
nixos/gitlab: add services to systemd slice
Co-authored-by: Bjørn Forsman <bjorn.forsman@gmail.com>
2024-09-28 11:27:05 +02:00
Jörg Thalheim
076f2f69f3
sshd: fix shellcheck warnings in prestart script (#340484) 2024-09-28 09:49:25 +02:00
Yarny0
f748ccc318 tsm-client: 8.1.23.0 -> 8.1.24.0
Also, all URLs in package and module comments are updated.

At the time of this writing, the "Update History" page
(release notes) for tsm-client >=8.1.19 does not list any
"APARs" ("Authorized Program Analysis Reports") for 8.1.24.0.
2024-09-28 08:48:41 +02:00
Mikilio
938d190ed2
tailscale: add su to path
this adds access to `su` via security wrappers
2024-09-27 23:05:20 +02:00
Atemu
3913c72204
nixos/jenkinsSlave: remove with lib; (#343514) 2024-09-27 21:59:45 +02:00
Atemu
e8d40a7f34
nixos/i2pd: remove with lib; (#343476) 2024-09-27 21:58:59 +02:00
Gary Guo
162f0719e9 nixos/freeradius: fix radius group
A group must be selected since it no longer defaults to nogroup
2024-09-27 20:11:57 +01:00
Gary Guo
d0481239c1 nixos/freeradius: add option to override package 2024-09-27 20:11:56 +01:00
Picnoir
50ffaf03bb nixos/pleroma: format module with nixfmt 2024-09-27 19:30:14 +02:00
Picnoir
aa666ce8f1 nixos/pleroma: move migrations to their own systemd unit
Running the migrations in a systemd execStartPre was a mistake. The
migrations can be pretty long to run and easily time-out.

Moving this to a proper oneshot service solves this issue and makes
this fits better the systemd execution model. We can now easily filter
the migrations logs.
2024-09-27 19:29:41 +02:00
Sandro
0151acc48e
nixos/gotenberg: Fix coredumps on service start (#344770) 2024-09-27 17:22:10 +02:00
Tom Vincent
069e6f3262
nixos/upower: update percentage defaults
Current defaults were added in aecfea0, which were in turn based on upstream:
28bd86c181/etc/UPower.conf.

Current upstream config:
94c91f93f1/etc/UPower.conf
2024-09-27 09:41:55 +01:00
7c6f434c
c87aad4296
Add Collabora Online (#330708) 2024-09-27 08:33:57 +00:00
K900
1e15add1c2
xwaylandvideobridge refactor + default in Plasma (#344808) 2024-09-27 10:03:24 +03:00
oddlama
d229011025 nixos/influxdb2: fix service startup reliablility 2024-09-27 08:14:27 +02:00
Gaute Ravndal
e9860fa6a9 nixos/snapper: use more precise type definition 2024-09-27 07:40:06 +02:00
K900
e23ad5ca0e nixos/plasma6: install xwaylandvideobridge by default 2024-09-27 08:16:56 +03:00
K900
15200e9966 nixos/plasma6: install baloo-widgets by default
Needed for indexer metadata in Dolphin.
2024-09-27 08:05:05 +03:00
Pyrox
e2c5983f40
nixos/gotenberg: Fix coredumps on service start 2024-09-26 21:37:41 -04:00
Weijia Wang
63ab048916 nixos/geth: add holesky testnet 2024-09-27 01:17:21 +02:00
Gaute Ravndal
6ce7db1126 nixos/snapper: fix timeline option types
These can be either an integer or a range.

Range options are necessary for `FREE_LIMIT` to take effect when used in
conjunction with `TIMELINE_LIMIT_*`.
2024-09-26 21:55:23 +02:00
Martin Weinelt
e04b941dfb
nixos/printing: add option to disable browsed daemon (#344702) 2024-09-26 20:44:57 +02:00
Thomas Gerbet
981a63b005 nixos/printing: add option to disable browsed daemon
It is currently tied to `services.avahi.enable` which might not be
desirable.

With this change it is possible to disable the service with
`services.printing.browsed.enable = false`
2024-09-26 20:11:14 +02:00