Sarah Brofeldt
c267e823b7
Merge pull request #289227 from JorisBolsens/patch-3
...
nixos/kubernetes: set k8 home permissions correctly
2024-02-16 19:34:14 +01:00
Izorkin
cf62e3257f
nixos/mastodon: redis now uses unix socket by default
2024-02-16 16:39:31 +03:00
Joris Bolsens
81391bd22f
nixos/kubernetes: set k8 home permissions correctly
2024-02-15 23:11:59 -08:00
Felix Bühler
60abd7c1f9
Merge pull request #288138 from ambroisie/tandoor-recipes-manage-script
...
nixos/tandoor-recipes: improve manage script
2024-02-15 20:26:03 +01:00
Felix Bühler
27f19c1efd
Merge pull request #288622 from Stunkymonkey/photoprism-manage-script
...
nixos/photoprism: improve manage script
2024-02-15 20:18:42 +01:00
Sarah Brofeldt
ed0bc642b7
Merge pull request #288466 from JorisBolsens/patch-2
...
nixos/kubernetes: don't delete the apitoken after its created
2024-02-15 18:20:24 +01:00
Vladimír Čunát
aaca7a186f
Merge #286596 : nixos/knot: add support for XDP setups
2024-02-15 09:19:59 +01:00
Yt
f13f90978a
Merge pull request #288638 from ThyMYthOS/update-stalwart
...
stalwart-mail: fix default configuration and test
2024-02-14 21:42:46 +00:00
Michele Guerini Rocco
f74d88a6f1
Merge pull request #281162 from kennycallado/master
...
nixos/icewm: Update icewm start command
2024-02-14 18:17:27 +01:00
maxine
8c8cc53769
Merge pull request #288531 from chewblacka/update-undervolt
...
undervolt: 0.3.0 -> 0.4.0
2024-02-14 17:30:53 +01:00
Michele Guerini Rocco
cd02351ae0
Merge pull request #233017 from koenw/libreswan-StateDirectory
...
nixos/libreswan: Use StateDirectory to setup ipsec/nss
2024-02-14 14:36:43 +01:00
Michele Guerini Rocco
bac2597d26
Merge pull request #270737 from bramd/brltty-6.6
...
Update BRLTTY to 6.6
2024-02-14 14:10:32 +01:00
Michele Guerini Rocco
dc91f91987
Merge pull request #286393 from oddlama/fix-hostapd-utf8-ssid
...
nixos/hostapd: fix utf8Ssid setting not properly honored
2024-02-14 14:08:46 +01:00
Manuel Stahl
cd8aad903c
stalwart-mail: fix default configuration and test
2024-02-13 20:34:22 +01:00
emilylange
993083f0ab
nixos/garage: allow all available log levels in cfg.logLevel
...
`error` and `warn` have always been valid log levels.
But because the upstream docs never mentioned those, we simply didn't
add them to the enum of our module option.
The upstream docs have been updated and now mention `error` and `warn`
as well.
Upstream PR: https://git.deuxfleurs.fr/Deuxfleurs/garage/pulls/716
2024-02-13 20:26:29 +01:00
Peder Bergebakken Sundt
bf7c95ce73
Merge pull request #285314 from pbsds/ttyd-1706718068
...
nixos/ttyd: add `entrypoint` and `writable` option
2024-02-13 19:41:11 +01:00
Felix Buehler
9db5906a6f
nixos/photoprism: improve manage script
2024-02-13 18:51:30 +01:00
John Garcia
eaa1034a80
nixos/undervolt: add turbo option
2024-02-13 13:38:22 +00:00
Martin Weinelt
ec89463a61
nixos/knot: refactor
...
- Stop using `with lib`
- Drop `lib.mdDoc`
- Use `escaepSystemdExecArgs` for escaping
2024-02-13 13:44:32 +01:00
Martin Weinelt
d1d8dd3e55
nixos/knot: add support for XDP setups
...
The Express Data Path (XDP) is a way to circumvent the traditional Linux
networking stack and instead run an eBPF program on your NIC, that makes
the decision to provide Knot with certain packets. This is way faster
and more scalable but comes at the cost of reduced introspection.
Unfortunately the `knotc conf-check` command fails hard with missing
interfaces or IP addresses configured in `xdp.listen`, so we disable it
for now, once the `xdp` config section is set. We also promote the config
check condition to a proper option, so our conditions become public
documentation, and we allow users to deal with corner cases, that we have
not thought of yet.
We follow the pre-requisites documented in the Knot 3.3 manual, and set
up the required capabilities and allow the AF_XDP address family.
But on top of that, due to our strict hardening, we found two more
requirements, that were communicated upstream while debugging this.
- There is a requirement on AF_NETLINK, likely to query for and configure
the relevant network interface
- Running eBPF programs requires access to the `bpf` syscall, which we
deny through the `~@privileged` configuration.
In summary We now conditionally loosen the hardening of the unit once we
detect that an XDP configuration is wanted. And since we cannot
introspect arbitrary files from the `settingsFiles` option, we expose XDP
support through the `enableXDP` toggle option on the module.
2024-02-13 13:44:31 +01:00
Yt
971fbfd00a
Merge pull request #276468 from onny/opensnitch-update4
...
opensnitch: 1.6.4 -> 1.6.5, opensnitch-ui: 1.6.4 -> 1.6.5
2024-02-13 10:46:01 +00:00
Joris Bolsens
6a11b7a777
nixos/kubernetes: don't delete the apitoken after its created
...
This was breaking the nixos-kubernetes-node-join script
the token gets copied, and then immediately overridden with /dev/null when certmgr restarts.
2024-02-12 22:50:27 -08:00
Janik
29f575d7e6
Merge pull request #288284 from NetaliDev/rustdesk-extra-args
...
nixos/rustdesk-server: add extra args options for hbbr and hbbs
2024-02-12 16:52:01 +01:00
Pol Dellaiera
2d627a2a70
Merge pull request #277220 from nu-nu-ko/nixos-jellyfin-dirs
...
nixos/jellyfin: add directory options
2024-02-12 14:06:46 +01:00
Jennifer Graul
c412263319
nixos/rustdesk-server: add extra args options for hbbr and hbbs
2024-02-12 13:41:08 +01:00
Jonas Heinrich
31b9a9d18c
opensnitch: 1.6.4 -> 1.6.5, opensnitch-ui: 1.6.4 -> 1.6.5.1
2024-02-12 11:58:44 +01:00
Bruno BELANYI
5e43c70867
nixos/tandoor-recipes: improve manage script
...
This is mirroring the way the manage script is created in the paperless
module, which is more robust to special characters.
2024-02-11 21:21:02 +00:00
maxine
9b52568c86
Merge pull request #288122 from amaxine/fwupd-internal-tests
2024-02-11 21:15:52 +01:00
Maxine Aubrey
4a4904c2b2
nixos/fwupd: make test option internal, be explicit about removal
2024-02-11 20:27:02 +01:00
kirillrdy
76d14d166c
Merge pull request #287708 from JorisBolsens/patch-1
...
nixos/kubernetes: use correct -o option with bash install when copying certs in cfssl prestart script
2024-02-12 06:14:44 +11:00
Maximilian Bosch
417fdb06d7
Merge pull request #287856 from emilylange/nixos-gitea-package-forgejo-warning
...
nixos/gitea: warn when using `services.gitea` with forgejo
2024-02-11 18:06:05 +01:00
Aaron Andersen
e163373592
Merge pull request #284814 from yaxitech/github-runner-module-update
...
nixos/github-runners: remove single runner module, rework default name, add `noDefaultLabels`
2024-02-11 06:10:56 -08:00
Martin Weinelt
18899b0c58
Merge pull request #287926 from mweinelt/home-assistant-2024.2.0-fixes
...
home-assistant: fixes for 2024.2.0
2024-02-11 04:35:53 +01:00
Martin Weinelt
055a8f709a
nixos/home-assistant: always add dependencies for default integrations
...
These are loaded unconditionally during bootstrap, and home-assistant
will now fail to start, if these aren't provided.
2024-02-11 04:09:52 +01:00
Lin Jian
f3a93440fb
Merge pull request #285813 from jerrita/nft-precheck-flatten
...
nixos/nftables: add option for flattening rulesetFile
2024-02-11 10:41:17 +08:00
Martin Weinelt
aeea37e779
Merge pull request #287480 from NixOS/home-assistant
...
home-assistant: 2024.1.6 -> 2024.2.1
2024-02-11 01:18:04 +01:00
emilylange
ca3cfc841a
nixos/gitea: warn when using services.gitea with forgejo
...
since this is no longer supported and we have a dedicated module for
forgejo for quite some time now.
Such warning is, however, becoming more and more important, since
forgejo is no longer a soft-fork of gitea, but rather a hard-fork.
And as such, it will slowly but surely no longer be a drop-in
replacement.
Additionally, I hope that this warning will prevent users from
reporting issues with forgejo to nixos/gitea maintainers.
The accompanying forgejo.md, from which the manual section is created,
will be updated over the next few weeks when forgejo officially
publishes their blog post about all this and the way forward, so we can
link to it.
2024-02-10 20:47:04 +01:00
tomberek
6e60c8526b
Merge pull request #286993 from christoph-heiss/srht-updates-next-round
...
sourcehut: update all components
2024-02-10 11:52:53 -05:00
Sandro
756e574ebd
Merge pull request #282971 from wegank/restya-board-drop
...
restya-board: drop
2024-02-10 17:28:05 +01:00
Peder Bergebakken Sundt
40cb108adf
Merge pull request #232528 from SuperSandro2000/chromium-kde
...
nixos/chromium: add enablePlasmaBrowserIntegration option
2024-02-10 17:15:14 +01:00
Peder Bergebakken Sundt
6f55f021df
Merge pull request #287304 from ambroisie/pyload-user-group
...
nixos/pyload: add user/group options
2024-02-10 14:59:23 +01:00
Maximilian Bosch
66a0b77a78
Merge pull request #286394 from SuperSandro2000/nextcloud-timer
...
nixos/nextcloud: don't execute cron when in maintenace/upgrade, don't kill cgroup
2024-02-10 12:48:05 +01:00
Peder Bergebakken Sundt
5caded32fe
Merge pull request #277189 from anpin/fix/cloudflared-service
...
cloudflared: fixed missing configuration options
2024-02-10 12:45:08 +01:00
maxine
53f6fedd04
Merge pull request #287512 from r-vdp/fwupd_1_9_13
...
fwupd: 1.9.12 -> 1.9.13
2024-02-10 11:05:51 +01:00
Joris Bolsens
1856e7e4b1
nixos/kubernetes: use correct -o option with bash install when copying certs in cfssl prestart script
2024-02-10 01:46:00 -08:00
Martin Weinelt
3d67816966
home-assistant: 2024.1.6 -> 2024.2.1
...
https://www.home-assistant.io/blog/2024/02/07/release-20242/
https://github.com/home-assistant/core/releases/tag/2024.2.1
2024-02-10 04:15:41 +01:00
Silvan Mosberger
11cd405226
Merge pull request #280322 from h7x4/add-hocon-format-generator
...
pkgs.formats: Add HOCON format generator
2024-02-10 03:07:51 +01:00
Silvan Mosberger
5de4385620
Merge pull request #285833 from 360ied/murmur-hardened
...
nixos/murmur: systemd service hardening
2024-02-10 02:48:46 +01:00
github-actions[bot]
b64b4f2d6a
Merge master into staging-next
2024-02-09 18:01:06 +00:00
Will Fancher
0cf1e24f32
Merge pull request #284627 from Trundle/nftables-ordering
...
nixos/nftables: remove default systemd dependencies
2024-02-09 12:29:24 -05:00
