Martin Weinelt
b96c4a67b9
nixos/frigate: add support for Coral devices
2024-11-22 17:59:35 +01:00
Martin Weinelt
2b2a669741
nixos/coral: init
...
Provides a small wrapper to enable support for Coral USB and PCIe
devices.
2024-11-22 17:59:34 +01:00
Maximilian Bosch
2995b3825e
nixos/pgbouncer: rework RFC42 integration
...
Commit bfb9d1825d
added RFC42 support
which is a good thing in general, but this implementation has the
following flaws:
* `services.pgbouncer.logFile` was not renamed to `[...].log_file`, but
to `[...].logfile`. Also the use of `mkRenamedOptionModule` is
inappropriate here because the two options are not equivalent: the old
option took a path relative to the home directory, the new an absolute
path.
* Using `mkRenamedOptionModule` with options that don't exist (but are
keys in a freeform attr-set or an `attrsOf X`), you get the following
error when referencing an option you didn't declare:
error: evaluation aborted with the following error message: 'Renaming error: option `services.pgbouncer.settings.pgbouncer.listen_port' does not exist.'
This error is pretty bad because it's not actionable for an end-user of
the module. A possible use-case is doing
networking.firewall.allowedTCPPorts = [ config.services.pgbouncer.listenPort ];
without specifying a custom listen port. This is an example of why you
want to keep options, they already contain defaults and you can re-use
those defaults in other parts of your system configuration.
I decided to re-add a bunch of options where I figured that it's
either useful to be able to address those in the NixOS configuration
or having documentation directly in the options' reference in the
NixOS manual.
I didn't add all options, I'll leave that to the maintainers of
pgbouncer.
2024-11-22 17:01:36 +01:00
Nick Cao
172a35f8ce
nixos/test-driver: target python 3.12
2024-11-22 10:49:32 -05:00
Nick Cao
e23f1733c6
nixos/test-driver: use ruff format in place of black
2024-11-22 10:49:31 -05:00
Nick Cao
ef2d3c542a
nixos/test-driver: modernize
2024-11-22 10:49:31 -05:00
Nick Cao
42d4046e94
nixos/test-driver: format with nixfmt
2024-11-22 10:49:30 -05:00
Nick Cao
b25360a7e5
nixos/test-driver: apply ruff check suggestions
2024-11-22 10:49:30 -05:00
Sandro
3156de49ba
nixos/postgresql: update docs with extraPlugins to extensions rename
2024-11-22 15:48:08 +01:00
Sefa Eyeoglu
baa412f46d
nixos/kanidm: allow origin url ending without slash ( #355216 )
2024-11-22 13:44:09 +01:00
Rémi NICOLE
a25e476c6a
nixos/netbox: clear old static files on upgrade ( #354036 )
2024-11-22 10:19:21 +01:00
Guanran Wang
0f77709e0f
nixosTests.redlib: test settings mechanic
2024-11-22 15:42:09 +08:00
Guanran Wang
4a0893c186
fixup! nixos/redlib: use upstream systemd service file
2024-11-22 15:24:46 +08:00
tomberek
a42bdea0a7
rfmakecloud: 0.0.18 -> 0.0.21 ( #356963 )
2024-11-22 00:35:19 -05:00
tomberek
b2d5ac855d
technium-dns-server: 13.0.2 -> 13.2 ( #356520 )
2024-11-22 00:24:16 -05:00
Emily
e3d26a1815
cudaPackages_10{,_0,_1,_2}: drop
2024-11-21 23:09:53 +00:00
Florian Klink
653b603cef
notmuch: move the vim plugin to another output ( #353500 )
2024-11-22 00:18:24 +02:00
Jared Baur
6e192c4489
nixos/activation: Add pre-switch checks
...
Add an option for shell script fragments that are ran before switching
to a new NixOS system configuration (pre installation of bootloader or
system activation). Also add a new subcommand for
switch-to-configuration called "check" that will cause the program to
always exit after checks are ran.
2024-11-21 13:02:54 -08:00
Kerstin Humm
ff2f00d425
nixos/canaille: init module
...
Co-Authored-By: Janik <80165193+Janik-Haag@users.noreply.github.com>
2024-11-21 20:28:03 +01:00
Emery Hemingway
50bbfb5788
nixos/nncp: recursively merge configurations
2024-11-21 18:31:13 +00:00
Luflosi
5742cb2a48
kubo: 0.29.0 -> 0.30.0
...
https://github.com/ipfs/kubo/releases/tag/v0.30.0
2024-11-21 19:12:27 +01:00
Sandro
4c79ccf34d
nixos/luksroot: make it harder to accidentially break cryptsetup ( #355464 )
2024-11-21 18:38:55 +01:00
Sandro
b3ac2f4ead
nixos/meilisearch: fix disabling analytics ( #356614 )
2024-11-21 17:15:13 +01:00
Kerstin Humm
897954b8ae
nixos/open-web-calendar: init module
2024-11-21 16:34:39 +01:00
Adam C. Stephens
63de272302
nixos/kanidm: add provisioning secret directories to BindReadOnlyPaths ( #357440 )
2024-11-21 09:46:02 -05:00
Aleksana
c1b9d0ce79
nixos/alertmanager: add additional docs about envsubst ( #302536 )
2024-11-21 21:20:44 +08:00
Aleksana
9612e216ce
nixos/tabby: fix typo ( #355223 )
2024-11-21 21:01:54 +08:00
Weijia Wang
02287a8c02
kubo-migrator: add migration from 15 to 16 ( #344265 )
2024-11-21 12:22:45 +01:00
Naïm Camille Favier
6735eef1b1
nixos/libreswan: use environment.etc."ipsec.secrets".text
( #357626 )
2024-11-21 08:18:24 +01:00
kirillrdy
c8021779cd
amazon-cloudwatch-agent: init at 1.300049.1 ( #337212 )
2024-11-21 17:18:47 +11:00
TheRealGramdalf
bfc160a84c
nixos/netbird: fix port conflict on metrics endpoint
2024-11-21 05:31:53 +00:00
Thiago Kenji Okada
778f30c08c
porn-vault: init at 0.30.0-rc.11 ( #355785 )
2024-11-20 21:52:34 +00:00
Maximilian Bosch
f10fc704df
Merge: postgresqlPackages.timescaledb: 2.14.2 -> 2.17.2; adopt, nixfmt; postgresqlPackages.timescaledb_toolkit: 1.18.0 -> 1.19.0 ( #348223 )
2024-11-20 22:25:14 +01:00
Sefa Eyeoglu
91fee43100
nixos/monado: add forceDefaultRuntime option
...
This option replaces the active runtime manifest in the user directory.
Games running through Steam's Pressure Vessel cannot read /etc so
forcefully overriding the file every time the service starts, will allow
those games to use Monado.
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-11-20 21:42:06 +01:00
Naïm Favier
b294762bb9
nixos/libreswan: use environment.etc."ipsec.secrets".text
...
This is to ensure compatibility with the networkmanager module, which
uses the `text` option.
2024-11-20 19:59:02 +01:00
Masum Reza
d834b054f4
nixos/scx: init module ( #352300 )
2024-11-21 00:10:45 +05:30
Luflosi
9e2866d215
kubo-migrator: rewrite
...
- Migrate to pkgs/by-name
- Format with nixfmt-rfc-style
- Make it possible to remove support for very old migrations in the future by increasing the `minRepoVersion` parameter
- Rename kubo-migrator-all-fs-repo-migrations to kubo-fs-repo-migrations since it may no longer include all migrations
- Add an alias for kubo-migrator-all-fs-repo-migrations to keep backwards compatibility
- Update descriptions to differentiate between kubo-migrator and kubo-migrator-unwrapped and better describe the purpose of the migrator
- Add a description to every individual migration
- Add a description to kubo-fs-repo-migrations
- Fetch the source code of the individual migrations from their specific Git tags, like upstream intends
- Enable tests for some migrations
- Check that the migrations don't crash on startup
- Mark two broken migrations as broken. They are not compatible with the latest Go versions and upstream is not interested in fixing this
- Change code to allow most updates to be done by only changing three lines (add new version and change git tag and hash)
- Add a stub for any disabled or broken migration to prevent downloading unsigned binaries from the internet, see https://github.com/ipfs/fs-repo-migrations/issues/148#issuecomment-2351355627 and https://github.com/ipfs/fs-repo-migrations/issues/188
- Use `lib.getExe` instead of hardcoding the binary name in the kubo NixOS module
- Use `substituteInPlace` with `--replace-fail` instead of `--replace`
2024-11-20 16:17:14 +01:00
Masum Reza
e1cedaabe5
nixos/obs-studio: nullable package ( #356845 )
2024-11-20 18:47:47 +05:30
TobTobXX
26fbd1adbe
nixos/bind: Fix cacheNetworks option
...
services.bind.cacheNetworks should only apply to recursive queryies, as
per the option documentation:
> Note that this is for recursive queries – all networks are allowed to
> query zones configured with the zones option by default [...].
This would correspond to the `allow-query-cache` option in named.conf,
as per the BIND docs[1]:
> Specifies which hosts (an IP address list) can access this server’s
> cache and thus effectively controls recursion.
And not `allow-query`, which restricts all requests (including requests
where the server has authority) [2]:
> Specifies which hosts (an IP address list) are allowed to send queries
> to this resolver.
> [...]
> Note:
> `allow-query-cache` is used to specify access to the cache.
[1]: https://bind9.readthedocs.io/en/v9.20.0/reference.html#namedconf-statement-allow-query-cache
[2]: https://bind9.readthedocs.io/en/v9.20.0/reference.html#namedconf-statement-allow-query
2024-11-20 10:47:06 +01:00
kirillrdy
a7d1482799
nixos/goatcounter: Fix typo in link ( #357451 )
2024-11-20 17:41:22 +11:00
Kirill Radzikhovskyy
1f2ee293c6
nixos/doc/rl-2505: mention timescaledb
2024-11-20 17:23:20 +11:00
Victor Engmark
9256f91881
nixos/goatcounter: Fix typo in link
2024-11-20 15:20:57 +13:00
oddlama
3e29e0560d
nixos/kanidm: add provisioning secret directories to BindReadOnlyPaths
2024-11-20 01:41:31 +01:00
Luana
cc671e2b6b
nixos/porn-vault: init module
2024-11-19 21:11:40 -03:00
Weijia Wang
5bdc0862bf
wordpress: 6.6.2 -> 6.7 ( #356449 )
2024-11-19 22:44:51 +01:00
Sandro
8bc2cc19bb
nixos/opendkim: modernize, add expandable settings option, put config file under standard location ( #333758 )
2024-11-19 22:29:49 +01:00
Marcus Ramberg
258174aead
nixos/pay-respects: actually import the module ( #356231 )
2024-11-19 20:56:02 +01:00
Matthieu C.
0082fde43d
notmuch: move the vim plugin to another output
...
I wondered why my neovim was slow. Turned out notmuch.vim loading took >
500ms to load (ruby and all). And I dont even use it !
I suspect the plugin could be improved to lazyload more stuff but I
think it's ok to have the vim plugin installer be a user decision as well.
I moved it to a new "vim" output : you can install the plugin via
"notmuch.vim"
2024-11-19 20:53:26 +01:00
John Titor
d19bc236cf
nixos/release-notes-24.11: add scx module
2024-11-19 23:09:54 +05:30
John Titor
3e710e6d15
nixos/scx: init
...
This adds a `services.scx.enable` option to enable sched-ext schedulers.
Requires a kernel with sched-ext enabled (6.12+) or a kernel with the patchset.
requiredKernelConfigs are taken from https://cateee.net/lkddb/web-lkddb/SCHED_CLASS_EXT.html
2024-11-19 23:09:53 +05:30
Pol Dellaiera
d6a0449d10
freecad: make customizable ( #347776 )
2024-11-19 18:04:16 +01:00
Sefa Eyeoglu
969ad19f9d
nixos/monado: nixfmt
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-11-19 17:00:50 +01:00
Aleksana
0ecc88f77d
buildGoPackage
: remove (#349478 )
2024-11-19 22:41:50 +08:00
Martin Weinelt
fe8fdf8ff2
nixos/snapserver: restart systemd service on failure ( #356584 )
2024-11-19 15:08:13 +01:00
Paul Grandperrin
853d34898d
nixos-containers: fix enableTun option
...
When using private users, `mknod /dev/net/tun` is run from the guest and therefor needs the `m` modifier.
2024-11-19 14:43:02 +01:00
Emily
f65de0f46a
nixos/doc/rl-2411: add highlight for the Darwin changes ( #356689 )
2024-11-19 13:25:06 +00:00
Emily
5113c488af
nixos/doc/rl-2411: add highlight for the Darwin changes
2024-11-19 13:04:45 +00:00
Jordan Williams
7031d0fdd0
nixos/snapserver: restart the systemd service on failure
2024-11-19 06:52:11 -06:00
Emily
60b321b6a3
nixos/acme: make address families in systemd service less restrictive ( #357124 )
2024-11-19 10:36:41 +00:00
Toast
d5808aee19
handheld-daemon-ui: init at 3.2.3 ( #305027 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Co-authored-by: Arne Keller <2012gdwu+github@posteo.de>
2024-11-19 11:17:59 +01:00
Sandro
eaeca4c794
nixos/arp-scan: init, nixos/tcpdump: init ( #356994 )
2024-11-19 11:03:46 +01:00
Sandro
8b230d41d2
python312Packages.magic-wormhole-mailbox-server: 0.4.1 -> 0.5.1 ( #354724 )
2024-11-19 10:46:25 +01:00
OTABI Tomoya
55f94d9fda
python3Packages: Fix and document the removal of the local .overrideAttrs
attribute ( #350127 )
2024-11-19 17:45:32 +09:00
Leona Maroni
3239d863ac
Merge: docs: remove old NixOS version references ( #356684 )
2024-11-19 09:10:51 +01:00
Will Fancher
9100366975
nixos/network-interfaces-systemd: improve default ethernet network matching ( #347283 )
2024-11-18 21:18:19 -08:00
Will Fancher
a599ce82dd
nixos/networkd: warn about naively replacing IPForward ( #356955 )
2024-11-18 20:10:52 -08:00
Will Fancher
768f628de7
nixos/systemd-stage-1: nixos-find-nixos-closure before initrd.target ( #357135 )
2024-11-18 19:33:21 -08:00
Will Fancher
af8279fe38
nixos/systemd-stage-1: nixos-find-nixos-closure before initrd.target
...
Without this, boot could proceed to the initrd cleanup step before the
closure was found, killing the service and breaking boot.
2024-11-18 21:14:51 -05:00
Malte Voos
d9bf91700e
nixos/acme: make address families in systemd service less restrictive
...
This change is to support LEGO's capability to spawn an external process that
solves the DNS-01 challenge. In particular, this enables a setup where LEGO
runs a shell script that uses nsd-control to add an appropriate zone to a
local NSD instance.
2024-11-19 01:40:59 +01:00
David McFarland
b0d941edb4
dotnet: november 2024 upgrades and infrastructure changes ( #355753 )
2024-11-18 20:20:45 -04:00
commiterate
3d0e3156ea
amazon-cloudwatch-agent: init at 1.300049.1
2024-11-18 19:19:35 -05:00
Cosima Neidahl
e6b5e795bf
kimai, nixos/kimai: init at 2.24.0 ( #353187 )
2024-11-19 01:05:53 +01:00
Colin
67fe3c2326
nixos/geoclue2: add package option ( #326882 )
2024-11-18 22:40:37 +00:00
kirillrdy
16952bdb0c
flarum: fix 'mysql' has been renamed to/replaced by 'mariadb' ( #356868 )
2024-11-19 08:54:08 +11:00
Cosima Neidahl
1d87ec425f
lomiri.*: OTA-6 ( #355289 )
2024-11-18 22:40:08 +01:00
Francesco Gazzetta
dca9282154
libresprite: 1.0 -> 1.1 ( #356557 )
2024-11-18 21:22:07 +00:00
MithicSpirit
d14392eaf6
nixos/obs-studio: nullable package
...
Allows setting `programs.obs-studio.package = null`, which is useful in
case the user wants the appropriate kernel modules from
`programs.obs-studio.enableVirtualCamera`, but does not wish to install
obs system-wide with nixos (e.g., because they want to install it just
for their user with home-manager or maybe via flatpak).
2024-11-18 11:33:43 -05:00
K900
45533e4b16
nixos/tools: add enable options to manual ( #356992 )
2024-11-18 19:03:51 +03:00
Sandro Jäckel
b4d622fd7a
nixos/{arp-scan,iftop,tcpdump,traceroute}: format
2024-11-18 16:47:56 +01:00
Sandro Jäckel
a6ee554a67
nixos/traceroute: use lib.getExe
2024-11-18 16:47:56 +01:00
Sandro Jäckel
4fae28967b
nixos/iftop: improve description, use lib.getExe
2024-11-18 16:47:55 +01:00
Sandro Jäckel
eb42ef0c24
nixos/tcpdump: init
2024-11-18 16:47:55 +01:00
Sandro Jäckel
2829181316
nixos/arp-scan: init
2024-11-18 16:40:20 +01:00
Maximilian Bosch
859c76c505
nixos/tools: add enable options to manual
...
E.g. when overriding `nix` with `pkgs.lix`, `nixos-option` will fail.
Given that I haven't used it in a very long time, I wanted to disable
it, but finding an option to turn off `nixos-option` is kinda hard given
that the options are generated here using `mkToolModule`.
I assumed that this isn't possible until I learned that
`system.tools.X.enable` exists. To me, this is a clear sign that these
shouldn't be internal.
2024-11-18 16:22:41 +01:00
Silvan Mosberger
555f0e9f1e
formats.ini: expose INI atom from all ini formats ( #354800 )
2024-11-18 16:11:51 +01:00
Johannes Kirschbauer
6b53949b0c
formats.ini: expose INI atom from all ini formats
2024-11-18 16:07:22 +01:00
Dominique Martinet
f27f1e0931
nixos/tests/rmfakecloud: new test
2024-11-18 22:59:41 +09:00
Dominique Martinet
64a13b7609
nixos/rmfakecloud: remove outdated note about webui not included
...
the webui has been built by default for a while
2024-11-18 22:59:41 +09:00
Dominique Martinet
b15ed174fa
rmfakecloud: run nixfmt
2024-11-18 22:59:40 +09:00
Paul Meyer
2ac1f685b6
docs: update Go section after buildGoPackage removal
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-11-18 14:36:08 +01:00
Maximilian Bosch
06f50f4adf
nixos/networkd: warn about naively replacing IPForward
...
See https://github.com/systemd/systemd/issues/33414 .
The way this was phrased sounded like a dumb search/replace operation to
me. This resulted in random parts of my routing being broken (forward
from if X -> Y being fine, but the opposite direction being broken).
This change makes it explicit that it's a little more complicated and
you should really consult the docs before making that change.
2024-11-18 14:16:38 +01:00
Yury Shvedov
a7ab6aa51a
doc: notice freecad customization an changelog
...
Change-Id: If019f12696db1c1661580e51b1920e637c52efec
2024-11-18 12:24:26 +03:00
Martin Joerg
0afba0d517
python312Packages.magic-wormhole-mailbox-server: 0.4.1 -> 0.5.1
...
https://github.com/magic-wormhole/magic-wormhole-mailbox-server/compare/refs/tags/0.4.1...refs/tags/0.5.1
https://github.com/magic-wormhole/magic-wormhole-mailbox-server/blob/0.5.1/NEWS.md
Python 3.12 is now supported
2024-11-18 07:37:49 +00:00
Paul Meyer
4ad10975ec
buildGoPackage: remove
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-11-18 07:51:19 +01:00
Florian Agbuya
75a6be1684
flarum: fix 'mysql' has been renamed to/replaced by 'mariadb'
2024-11-18 13:03:05 +08:00
Martin Weinelt
ee595b709e
nixos/wyoming-faster-whisper: update CUDA device allowlist
...
This list can change between driver versions, and it requires an update
now to find my GPU.
2024-11-18 03:21:43 +01:00
David McFarland
bfaca46529
dotnet-sdk/runtime/aspnetcore: 6.0 -> 8.0
2024-11-17 18:35:19 -04:00
Patrick
6728211ec8
nixos/kanidm: allow origin url ending without slash
2024-11-17 23:21:07 +01:00
Sandro Jäckel
f497159195
nixos/opendkim: put config file under standard location
2024-11-17 22:27:10 +01:00
Sandro Jäckel
1414b222f5
nixos/opendkim: add expandable settings option
2024-11-17 22:27:09 +01:00
Sandro Jäckel
dfac70cb1d
nixos/opendkim: modernize
2024-11-17 22:27:09 +01:00
David McFarland
42d69ab59a
dotnet: move dotnet_root to $out/share/dotnet
2024-11-17 14:19:23 -04:00
David McFarland
ddd08e404f
dotnet: split setup hooks into wrapper for runtime/sdk
2024-11-17 14:19:22 -04:00
Ratchanan Srirattanamet
986a0381df
nixos/doc/rl: mention added module Kimai
2024-11-17 16:21:19 +00:00
Ratchanan Srirattanamet
29e586e508
nixos/kimai: init module & add test
2024-11-17 16:20:21 +00:00
Julien Malka
891bfded62
nixos/tests/agorakit: init test
2024-11-17 16:08:58 +01:00
Julien Malka
cee07e8dc8
nixos/agorakit: init module
2024-11-17 16:08:58 +01:00
Marcin Serwin
6fa830fc0d
libresprite: 1.0 -> 1.1
2024-11-17 15:07:57 +01:00
Viorel-Cătălin Răpițeanu
d1da56f629
wordpressPackages: package and theme updates
...
1. Make twentytwentyfive theme default
2. Update all packages
2024-11-17 15:56:28 +02:00
Viorel-Cătălin Răpițeanu
5705ab5bc5
wordpress: 6.6.2 -> 6.7
...
Update the package to the latest version.
2024-11-17 15:56:09 +02:00
Masum Reza
9930c0783d
nixos/g810-led: fix module ( #356687 )
2024-11-17 18:22:07 +05:30
Leona Maroni
84ad4442b0
nixos/gotosocial: fix failing tests ( #353901 )
2024-11-17 13:38:30 +01:00
Wolfgang Walther
7076d32d23
nixos/yabar: remove reference to nixos 18.03
...
No need to mention that anymore - it's just a fact by now.
2024-11-17 13:06:11 +01:00
Wolfgang Walther
1dd9c32b18
docs: remove references before 22.11
...
Stuff that has been in for many years doesn't need to be mentioned
explicitly anymore.
2024-11-17 12:51:09 +01:00
Emily
6cf76dce17
nixos: remove boot.loader.raspberryPi ( #356688 )
2024-11-17 11:49:35 +00:00
Wolfgang Walther
8ca24a7a2b
nixos: remove boot.loader.raspberryPi
...
This has been announced for 24.11 in #241534 , so let's follow through.
2024-11-17 12:33:57 +01:00
Maximilian Bosch
cdc32ef5a5
Merge: nixos/postgresql: fix warning typo ( #356619 )
2024-11-17 12:24:19 +01:00
Gaetan Lepage
8fac714b78
nixos/g810-led: fix module
2024-11-17 11:48:24 +01:00
Masum Reza
e13831335f
treewide: stdenv.is -> stdenv.hostPlatform.is ( #356363 )
...
* treewide: stdenv.is -> stdenv.hostPlatform.is
* treewide: nixfmt due to ci error
2024-11-17 16:11:54 +05:30
Tom Fitzhenry
a2337e4f6c
nixos/spiped: use systemctl restart during activation
...
As is common with other networking services, stopIfChanged=true (the default) can cause O(seconds) downtime during activation.
Reduce this downtime by disabling stopIfChanged as done in:
* sshd https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/networking/ssh/sshd.nix#L569
* tailscale https://github.com/NixOS/nixpkgs/pull/170210
2024-11-17 20:39:25 +11:00
Tom Fitzhenry
235d103ff7
nixos/clatd: add enableNetworkManagerIntegration option
2024-11-17 20:38:55 +11:00
Ian Kerins
307090125f
nixos/postgresql: fix warning typo
2024-11-16 20:59:04 -05:00
PapayaJackal
4a42682ff8
nixos/meilisearch: fix disabling analytics
2024-11-17 01:34:29 +00:00
Martin Weinelt
f3a1d218b0
nixos/zigbee2mqtt: only add port to DeviceAllow if it is a device ( #356573 )
2024-11-16 22:52:47 +01:00
Andrew Marshall
577e162073
nixos/zigbee2mqtt: only add port to DeviceAllow if it is a path
...
zigbee2mqtt supports having non-device ports (e.g. `tcp://`); those
should not be set in DeviceAllow. No URI will start with `/`, so use
that as the filter that it is a “real” device that needs to be allowed.
2024-11-16 16:47:38 -05:00
Maximilian Bosch
97a911e8fb
Merge: nixos/postgresql: extension based hardening relaxation ( #355010 )
2024-11-16 22:29:36 +01:00
Leona Maroni
3013234aef
druid: 30.0.0 -> 31.0.0 ( #351877 )
2024-11-16 22:20:41 +01:00
Maximilian Bosch
6306bb79b8
Merge: nixos/rl-2411: fix version Grafana has been updated to ( #356528 )
2024-11-16 21:21:28 +01:00
Maximilian Bosch
68d9643388
nixos/tests/postgresql: test plv8 hardening on non-JIT variants only
...
PostgreSQL with JIT support enabled doesn't work with plv8. Hence, we'd
get an evaluation failure for each
`nixosTests.postgresql.postgresql.postgresql_jit_X`.
This should be restructured in the future (less VM tests for custom
extensions, but a single VM test for this case to cover). For now, we
should get this fix out and this is a good-enough approach.
2024-11-16 21:16:06 +01:00
Masum Reza
e6914ee14c
nixos/hyprland: adds programs.hyprland.withUWSM option ( #355959 )
2024-11-17 00:41:49 +05:30
Maximilian Bosch
3bad58ed01
nixos/rl-2411: fix version Grafana has been updated to
2024-11-16 18:57:15 +01:00
Tim Häring
7550580e19
technium-dns-server: 13.0.2 -> 13.2
2024-11-16 18:31:39 +01:00
Martin Weinelt
e198536d26
nixosTests.postgresql: test hardening gets relaxed
...
The plv8 plugin requires access to pkey syscalls. The execution will
crash hard when it is not allowed by the syscall filter.
Co-Authored-By: Jan Tojnar <jtojnar@gmail.com>
2024-11-16 17:29:34 +01:00
Martin Weinelt
d370af0785
nixos/postgresql: create infrastructure for relaxing systemd hardening
...
By matching on the package names of the plugins passed into the package
we can relax the systemd unit hardening as needed.
2024-11-16 17:29:34 +01:00
Masum Reza
f4ae47b33e
nixos/gdm: automatically enable services.displayManager ( #353848 )
2024-11-16 21:40:04 +05:30
Martin Weinelt
223a6c6ed0
nixos/postgresql: rename extraPlugins to extensions
...
This is the upstream lingo, and it makes everything slightly less
confusing.
2024-11-16 14:46:16 +01:00
Guillaume Girol
8bb2a40c90
sgx-psw+aesmd: 2.24 -> 2.25 ( #353041 )
2024-11-16 12:21:10 +01:00
jopejoe1
7b47ad2dfd
vscode-extensions: set pname
2024-11-16 09:50:13 +01:00
Marcus Ramberg
0aa644e317
k3s_1_31: 1.31.1+k3s1 -> 1.31.2+k3s1 ( #352182 )
2024-11-16 09:42:43 +01:00
Emily
fbd635df5d
nixos/doc/rl-2505: add more comments about ordering
...
This looks a little ridiculous right now, but my experience is that
it’s common to find the beginning or end of a section and add more
things there without seeing the comments. We should probably move
to a one file per release note system, but in the meantime this is
a low‐cost way to help reduce merge conflicts.
2024-11-16 06:48:00 +00:00
Emily
71e6c012dc
nixos/doc/rl-2505: fix quotes
...
Fixes: a836397580
2024-11-16 06:47:32 +00:00
Adam C. Stephens
7ea9ba60d8
nixos/incus: add incus-user service and socket ( #355645 )
2024-11-15 23:34:21 -05:00
Adam Stephens
0214dd4ef2
nixos/tests/incus: test incus-user
2024-11-15 23:32:16 -05:00
jopejoe1
95b30da133
nixos/shairport-sync: add package option ( #355985 )
2024-11-16 03:12:02 +01:00
Lin Jian
8ebe7dbb74
kanata: 1.7.0-prerelease-1 -> 1.7.0 ( #356078 )
2024-11-16 09:20:36 +08:00
Felix Bühler
8a95f3f42b
nixos/mopidy: fix Python dependency collisions between extensions ( #354069 )
2024-11-16 00:59:30 +01:00
Gaétan Lepage
34dd7c3f68
nixos/auto-upgrade: Format ( #356091 )
2024-11-16 00:41:13 +01:00
Fernando Rodrigues
c346fd5125
nixos/pay-respects: fix interactiveShellInit for fish and zsh
...
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-11-15 17:56:54 +00:00
Fernando Rodrigues
3cd382262c
nixos/pay-respects: actually import the module
...
I am unbelievably stupid sometimes.
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-11-15 17:31:17 +00:00
Weijia Wang
cedd087b81
globalprotect-openconnect: Reinstate v1 ( #355758 )
2024-11-15 18:25:57 +01:00
Colin
c00cdccd00
nixos/teleport: add required utils to path ( #332810 )
2024-11-15 13:16:39 +00:00
GetPsyched
5b8a714968
nixos-render-docs: init redirects system
...
Co-authored-by: Valentin Gagarin <valentin@gagarin.work>
2024-11-15 14:09:21 +01:00
Masum Reza
2435883703
nixos/g810-led: add to modules-list.nix ( #356164 )
2024-11-15 18:27:50 +05:30
Jordan Williams
697fa78c9a
nixos/shairport-sync: add package option
2024-11-15 06:47:24 -06:00
John Titor
0388195e8a
nixos/release-notes-24.11: add g810-led
2024-11-15 17:58:12 +05:30
John Titor
059a8da6b1
nixos/g810-led: add to modules-list.nix
2024-11-15 17:53:14 +05:30
Maximilian Bosch
5c01691cf2
Merge: postgresql_12: remove ( #353158 )
2024-11-15 12:07:14 +01:00
K900
1bc481ce87
nixos/plasma6: add qtimageformats to the requiredPackages ( #306227 )
2024-11-15 13:20:59 +03:00
John Titor
04f223946c
nixos/hyprland: adds programs.hyprland.withUWSM option
...
Bool: controls whether Hyprland is configured with UWSM or not.
Upstream recommends using UWSM for better compatibility with systemd integration.
https://wiki.hyprland.org/Useful-Utilities/Systemd-start/
2024-11-15 14:32:29 +05:30
Dmitry Chermnykh
8abd7b3220
nixos/plasma6: add qtimageformats to the requiredPackages
...
This is needed for qt6 apps to be able to work with certain image formats such as .webp and .avif
Closes https://github.com/NixOS/nixpkgs/issues/304523
2024-11-15 13:27:05 +05:00
Maximilian Bosch
0b3eef7441
postgresql_12: remove
...
This will be EOL at the end of November, so there's little reason to
keep it in 24.11[1]. As discussed, we'd like to keep it for as long as
possible to make sure there's a state in nixpkgs that has the latest
minor of postgresql_12 available with the most recent CVEs fixed for
people who cannot upgrade[2].
This aspect has been made explicit in the manual now for the next .11
release.
During the discussions it has been brought up that if people just do
`services.postgresql.enable = true;` and let the code decide the
postgresql version based on `system.stateVersion`, there's a chance that
such EOL dates will be missed. To make this harder, a warning will now
be raised when using the stateVersion-condition and the oldest still
available major is selected.
Additionally regrouped the postgresql things in the release notes to
make sure these are all shown consecutively. Otherwise it's a little
hard to keep track of all the changes made to postgresql in 24.11.
[1] https://endoflife.date/postgresql
[2] https://github.com/NixOS/nixpkgs/pull/353158#issuecomment-2453056692
2024-11-15 09:17:06 +01:00
liberodark
b9956ceb87
nixos/auto-upgrade: Format
2024-11-15 08:36:15 +01:00
Colin
9bd0271b22
nixos/minidlna: add package option ( #345770 )
2024-11-15 06:29:43 +00:00
Lin Jian
6915a163f3
doc/release-notes: change "New Services" to "New Modules" ( #356080 )
2024-11-15 14:03:24 +08:00
Masum Reza
b90d2b442b
nixos/soteria: init module ( #355924 )
2024-11-15 11:32:05 +05:30
Lin Jian
6a4d0b34e4
doc/release-notes: change "New Services" to "New Modules"
2024-11-15 13:56:35 +08:00
Lin Jian
719cc9e742
kanata: 1.7.0-prerelease-1 -> 1.7.0
...
https://github.com/jtroo/kanata/compare/v1.7.0-prerelease-1...v1.7.0
2024-11-15 13:46:40 +08:00
Norbert Melzer
5193297a6c
nixos/dashy: import nixosModule ( #355979 )
2024-11-15 06:43:49 +01:00
Masum Reza
c04b381470
nixos/g810-led: init ( #355884 )
2024-11-15 10:03:47 +05:30
Marcus Ramberg
360e88231c
nixos/k3s: use same k3s package in multi-node test ( #355964 )
2024-11-14 23:36:23 +01:00
Austin Horstman
57533f358a
pingvin-share: 1.1.3 -> 1.2.4 ( #354105 )
2024-11-14 13:40:09 -06:00
TheRealGramdalf
ee070b132a
nixos/dashy: import nixosModule
2024-11-14 19:10:32 +00:00
Robert Rose
2a79402b1e
nixos/k3s: use same k3s package in multi-node test
...
The test previously violated the Kubernetes version skew policy by
deploying a kubelet of hte most recent version in a cluster with an
older apiserver.
2024-11-14 16:04:29 -03:00
John Titor
48da44a481
nixos/hyprland: format with nixfmt rfc style
2024-11-14 23:47:26 +05:30
John Titor
3259761b00
nixos/release-notes-24.11: add soteria module
2024-11-14 23:23:20 +05:30
John Titor
53712fa4a1
nixos/soteria: init module
2024-11-14 23:23:20 +05:30
Rahul Rameshbabu
b6bac07973
globalprotect-openconnect: Reformat expressions using RFC style
...
The original work did not use the new nixfmt style.
Signed-off-by: Rahul Rameshbabu <sergeantsagara@protonmail.com>
2024-11-14 09:28:04 -08:00
Tristan Ross
a836397580
release-notes: update 25.05 from 24.11 init
2024-11-14 09:23:26 -08:00
Sandro
12afb73784
nixos/virtualisation: fix rendering of example in diskSize
2024-11-14 18:12:16 +01:00
Tristan Ross
90fcf3aa7e
25.05 is Warbler
2024-11-14 09:10:54 -08:00
Tristan Ross
f49e820fbc
24.11 beta release
2024-11-14 09:02:09 -08:00
matthewcroughan
5c5390796b
matrix-sliding-sync: improve assertion/deprecation message
2024-11-14 16:49:38 +00:00
Sefa Eyeoglu
1d95cb5fa7
nixos/duckdns: init module ( #294489 )
2024-11-14 17:29:11 +01:00
Weijia Wang
9c631cfd4a
nixos/nixosTests.kerberos: add test suite for LDAP backend ( #337719 )
2024-11-14 17:26:05 +01:00
Sefa Eyeoglu
b22d375301
cargo-tauri: 1.7.1-unstable-2024-08-16 -> 2.1.0 ( #346277 )
2024-11-14 17:12:42 +01:00
Gaetan Lepage
a5f34daeeb
nixos/g810-led: init
2024-11-14 13:49:40 +01:00
Marcus Ramberg
703675fc50
pay-respects: init at 0.4.18; nixos/pay-respects: init module ( #355694 )
2024-11-14 08:37:28 +01:00
seth
36118d8a35
doc/release-notes: document cargo-tauri v2
2024-11-14 02:27:57 -05:00
Pol Dellaiera
cf69fc271d
nixos/glances: init ( #303320 )
2024-11-14 05:47:04 +01:00
Rahul Rameshbabu
0b399eef24
Revert "nixos/globalprotect: mention removal"
...
This reverts commit 2b0ff836a9
.
Signed-off-by: Rahul Rameshbabu <sergeantsagara@protonmail.com>
2024-11-13 13:46:19 -08:00
Rahul Rameshbabu
8f2fa04fd9
Revert "globalprotect-openconnect: remove deprecated 1.x package"
...
This reverts commit b08d6a664f
.
Signed-off-by: Rahul Rameshbabu <sergeantsagara@protonmail.com>
2024-11-13 13:41:34 -08:00
Yorick
97dfe7efe4
maintainers: Remove mkaito ( #355650 )
2024-11-13 19:57:30 +01:00
Fernando Rodrigues
a1af0bc137
nixos/pay-respects: init module
...
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-11-13 16:15:10 +00:00
Sandro
a9db65e0dd
nixos/firefox: dedupe identically nativeMessageHosts packages ( #335253 )
2024-11-13 17:04:55 +01:00
Maximilian Bosch
0524f3b302
Merge: nixosTests.postgresql: run tests with JIT as well ( #355502 )
2024-11-13 16:13:01 +01:00
Nessdoor
005ec27097
nixos/nixosTests.kerberos: add test suite for LDAP backend
2024-11-13 14:42:06 +01:00
Christian Höppner
8feba149a0
mkaito: Remove
2024-11-13 12:03:00 +00:00
Dawid Dziurla
ea9923c62f
nixos/incus: add incus-user service and socket
2024-11-13 12:25:40 +01:00
Pol Dellaiera
e92d5eb308
nixos/protonmail-bridge: fix typo ( #355520 )
2024-11-13 07:56:04 +01:00
Claes Hallström
d174bf438b
nixos/glances: init module
2024-11-13 00:06:47 +01:00
ginkogruen
aa79218b2c
nixos/protonmail-bridge: fix typo
...
protonmail-bride's --> protonmail-bridge's
2024-11-12 21:55:34 +01:00
Wolfgang Walther
9486472352
nixosTests.postgresql: run tests with JIT as well
...
This was intended for quite some time already, but ever since enableJIT
was changed to be the source of truth of JIT-iness for the PostgreSQL
module, this hasn't worked for the tests anymore.
2024-11-12 21:04:41 +01:00
Maximilian Bosch
dbd8326b7f
Merge: wordpress: drop unmaintained release ( #355291 )
2024-11-12 19:20:25 +01:00
Sandro
681bc920f8
nixos/libvirt: fix shellcheck findings with enableStrictShellChecks enabled ( #349620 )
2024-11-12 19:18:26 +01:00
Sandro
1556ad266a
nixos/changedetection-io: fix creation of data dir ( #318666 )
2024-11-12 19:10:53 +01:00
Sandro
6bfde7268f
evremap: init at 0-unstable-2024-06-17, nixos/evremap: init module ( #352720 )
2024-11-12 18:41:51 +01:00
Sandro Jäckel
18135de79a
nixos/firefox: dedupe identically nativeMessageHosts packages
2024-11-12 18:00:50 +01:00
Sandro
b861831405
nixos/luksroot: make it harder to accidentially break cryptsetup
2024-11-12 16:53:46 +01:00
Sandro
c9428444e2
nixos/fail2ban: fix typo ( #355328 )
2024-11-12 16:12:18 +01:00
Florian Klink
cb88cda0d4
nixos/systemd-stage-1: Do not run code from stage 2 until it's actually time to switch-root. ( #355166 )
2024-11-12 12:04:54 +01:00
Valentin Gagarin
50ff833cd8
devmode: move to pkgs/by-name
...
now one can use `devmode` from anywhere Nixpkgs is available:
devmode = pkgs.devmode.override {
buildArgs = toString ./.;
open = "/index.html";
};
2024-11-12 10:16:58 +01:00
Valentin Gagarin
b94f54b7a0
devmode: make reusable
...
the `devmode` helper made for the Nixpkgs/NixOS manual was exposed wrapped
in `mkShell`, which made it impossible to reuse.
this change strips that wrapper and reproduces it at the call site.
now one can use `devmode` from anywhere Nixpkgs is available:
devmode = pkgs.callPackage "${pkgs.path}/pkgs/tools/nix/web-devmode.nix" {
buildArgs = toString ./.;
open = "/index.html";
};
2024-11-12 10:16:58 +01:00
Paul Meyer
b4fda70c49
nixos/athens: update docs ( #354508 )
2024-11-12 08:28:14 +01:00
K900
5703364874
nixos/graphics: clarify assertion message for enable32Bit configuration ( #355033 )
2024-11-12 06:17:47 +03:00
Cryolitia PukNgae
8b1cd0960b
nixos/graphics: clarify assertion message for enable32Bit configuration
...
The original message is really confusing, when you wrongly enable it on aarch64.
2024-11-12 11:15:26 +08:00
Noah Gitsham
bc5033805a
nixos/fail2ban: fix typo
...
bellow -> below
2024-11-12 01:52:37 +00:00
Yt
c0c77416ac
vector: fix service using pkgs.vector regardless package option ( #354316 )
2024-11-11 19:09:22 -05:00
Weijia Wang
40d6aaaeb1
wordpress: drop unmaintained release
2024-11-11 23:26:22 +01:00
OPNA2608
87d70198ea
lomiri.lomiri-history-service: Rename from lomiri.history-service
2024-11-11 22:52:42 +01:00
Cosima Neidahl
e1b70fb061
nixos/lomiri: Better support stand-alone greeter usage ( #352425 )
2024-11-11 20:00:29 +01:00
Artturin
3a7266fcef
mutmut: 2.2.0 -> 3.2.0 ( #350120 )
2024-11-11 19:28:05 +02:00
Ughur Alakbarov
f21d3a0f07
nixos/tabby: fix typo
2024-11-11 16:26:57 +01:00
Sandro
ba2f9f2fff
nixos/grafana: fix evaluation when no settings is defined ( #354361 )
2024-11-11 15:00:45 +01:00
Sandro
3d5dcee08a
nixos/udisks2: add package option ( #293495 )
2024-11-11 14:57:07 +01:00
Will Fancher
6cfd95fc8c
nixos/systemd-stage-1: Order nixos activation after initrd-switch-root.target
...
Now it's placed between initrd-switch-root.target and
initrd-switch-root.service, meaning it is truly the last thing to
happen before switch-root, as it should be.
2024-11-11 05:52:18 -05:00
Will Fancher
f065a81ab4
nixos/systemd-stage-1: Use chroot-realpath
2024-11-11 05:52:18 -05:00
Aleksana
dbed5a6265
nixos/mysql: fix permission error during first startup ( #331296 )
2024-11-11 18:49:32 +08:00
Paul Meyer
ed5d274df7
nixos/athens: update docs
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-11-11 11:42:08 +01:00
Franz Pletz
f1b26f503a
nitrokey-udev-rules: init at 1.0.0 ( #352481 )
2024-11-11 10:54:55 +01:00
h7x4
97ca8ccb15
nixos/roundcube: add example for database.passwordFile
( #348166 )
2024-11-11 08:27:50 +01:00
Victor Engmark
4b610f43ae
mutmut: 2.2.0 -> 3.2.0
...
With dependencies from the upstream requirements file
<https://github.com/boxed/mutmut/blob/3.2.0/requirements.txt >.
2024-11-11 13:48:37 +13:00
Weijia Wang
99ad7da9e3
nixosTests.frr: fix node.router.config warning ( #354710 )
2024-11-11 00:54:13 +01:00
Martin Weinelt
20ee593171
nixos/frigate: Set SyslogIdentifier for better log entries ( #355088 )
2024-11-11 00:23:54 +01:00
Andrew Marshall
dac96aac49
nixos/frigate: Set SyslogIdentifier for better log entries
...
Systemd defaults to the name of the exec-ed process, which in this case
is python. That's not so helpful when looking through syslog, so adjust
accordingly.
2024-11-10 17:49:20 -05:00
K900
871087c18d
nixos/acme: do not limit credentials functionality to DNS/S3 config ( #348344 )
2024-11-11 01:43:53 +03:00
Sandro
8c164faef4
nixos/nextcloud-notify_push: fix defaultText rendering ( #352479 )
2024-11-10 23:42:18 +01:00
Thiago Kenji Okada
44bbe5ddad
nixos/{boinc,guix}: Use exec to start the payload binary of the service ( #297526 )
2024-11-10 17:35:24 +00:00
Austin Horstman
f5f87e7240
dashy-ui: init at 3.1.1-unstable-2024-07-14 ( #349149 )
2024-11-10 09:35:31 -06:00
Brendan Taylor
d581c42d5d
nixos/paperless: add secretsFile option
2024-11-10 08:21:07 -07:00
Maximilian Bosch
9a333460f5
Merge: postgresql: improve passthru.tests ( #352966 )
2024-11-10 15:34:04 +01:00
Weijia Wang
5b916fd897
nixos/openvpn3: add /etc/openvpn3/configs
to systemd.tmpfiles
( #353832 )
2024-11-10 13:00:09 +01:00
Sefa Eyeoglu
e9c53bdf9a
nixos/localsend: add package option & allow udp port ( #333485 )
2024-11-10 12:47:30 +01:00
Florian
07ca74e134
teamviewer: add services.teamviewer.package Option + misc improvemens ( #346365 )
2024-11-10 11:44:54 +01:00
Winter
f0000fe56d
lib/minver: bump to 2.3.17 ( #354586 )
2024-11-09 21:32:02 -05:00
TheRealGramdalf
7f76ced733
nixos/dashy: init module
2024-11-10 00:04:25 +00:00
Robert Schütz
06be8564e5
immich: 1.119.1 -> 1.120.1 ( #354083 )
2024-11-09 14:53:47 -08:00
Robert Schütz
ee1cffa25c
immich: 1.119.1 -> 1.120.1
...
Changelog: https://github.com/immich-app/immich/releases/tag/v1.120.0
https://github.com/immich-app/immich/releases/tag/v1.120.1
2024-11-09 14:44:21 -08:00
Wolfgang
9563f469c1
nixos/duckdns: init module
2024-11-09 22:27:14 +01:00
Wolfgang Walther
45cef36e39
nixosTests.postgresql: run nixfmt
...
Because with as many changes as in here anybody working on those test
files will have merge conflicts anyway.
2024-11-09 18:24:52 +01:00
Wolfgang Walther
128244b598
nixosTests.postgresql: use a common pattern throughout all tests
...
Avoiding "with", using the same names and basic structure in each test.
Consistency is key!
2024-11-09 18:24:52 +01:00