Commit Graph

17276 Commits

Author SHA1 Message Date
nicoo
9aee9b163e nixos/akkoma: Do not warn under sudo-rs 2023-11-05 18:40:33 +00:00
github-actions[bot]
bb38778356
Merge master into staging-next 2023-11-05 18:00:55 +00:00
Jonas Heinrich
35128eb6f8
nixos/printing: Add openFirewall option (#176539) 2023-11-05 16:01:20 +01:00
Aaron Andersen
a707831d98
Merge pull request #256738 from toastal/prosody-libevent-deprecated
prosody: remove deprecated libevent
2023-11-05 08:36:25 -05:00
github-actions[bot]
2ecaf22639
Merge master into staging-next 2023-11-05 12:01:15 +00:00
Leah Amelia Chen
30f2f955fe nixos/greetd: autostart GNOME Keyring when enabled
The PAM service `greetd` creates now autostarts GNOME Keyring when it is
enabled via `services.gnome.gnome-keyring.enable`.

Should cause a lot fewer headaches for people like me who didn't know
why GNOME Keyring was complaining that it was never supplied with login details.

Fixes #246197
2023-11-05 12:22:52 +01:00
Weijia Wang
9627659c22 Merge branch 'master' into staging-next 2023-11-04 17:27:09 +01:00
K900
ea9372de82
Merge pull request #265482 from alois31/plasma-setuid
nixos/plasma5: fix mismatch between nix and module system
2023-11-04 19:08:55 +03:00
Alois Wohlschlager
dee9519abe
nixos/plasma5: fix mismatch between nix and module system
In https://github.com/NixOS/nixpkgs/pull/254071, a mismatch between usage of
the Nix language and the NixOS module system was introduced. By merging the
kwin_wayland wrapper attrset into the mkIf representation, the former was
effectively ignored.
As a result, the capability wrapper for kwin_wayland stopped being installed,
leading to realtime scheduling being disabled. The issue was not detected
because the behavioral change is very subtle.

By consistently using language-level constructs, this mismatch is resolved.
The capability wrapper is thus installed again and realtime scheduling is
restored.
2023-11-04 16:33:38 +01:00
Felix Bühler
85f1ba3e51
Merge pull request #263173 from r-ryantm/auto-update/freshrss
freshrss: 1.21.0 -> 1.22.1
2023-11-04 13:09:36 +01:00
github-actions[bot]
2c3155e94d
Merge master into staging-next 2023-11-04 12:00:55 +00:00
Maximilian Bosch
845cf9943c
Merge pull request #264582 from FliegendeWurst/throttled-modprobe
nixos/throttled: load required kernel module
2023-11-04 12:27:38 +01:00
github-actions[bot]
3c43b804d4
Merge master into staging-next 2023-11-03 18:01:23 +00:00
Michele Guerini Rocco
5654dea8a5
Merge pull request #264787 from katexochen/feat/xkb-extralayouts
nixos/x11: move extraLayouts into xkb attrset
2023-11-03 13:49:14 +01:00
github-actions[bot]
db0a71076b
Merge master into staging-next 2023-11-03 12:01:07 +00:00
Peter Hoeg
f4856b55dd nixos/fwupd: make auto-refresh run (and work) 2023-11-03 10:54:41 +01:00
github-actions[bot]
75a11d85b8
Merge master into staging-next 2023-11-03 00:02:23 +00:00
Alexandru Scvortov
cbbe57bc52 elixir: make 1.15 default and pin existing pkgs to 1.14 2023-11-02 20:16:00 +00:00
github-actions[bot]
29efc257c0
Merge master into staging-next 2023-11-02 18:01:07 +00:00
Janik H.
15babfbc12
nixos/woodpecker-server: fix environmentFile example 2023-11-02 18:14:46 +01:00
Janik
8a897821fe
Merge pull request #262781 from Janik-Haag/woodpecker
nixos/woodpecker-server: change type of environmentFile to list of paths
2023-11-02 17:40:07 +01:00
Maximilian Bosch
dbb68f0b49
Merge pull request #263558 from Ma27/fix-image-renderer-callback
nixos/grafana-image-renderer: use Grafana's http_addr rather than localhost
2023-11-02 15:49:23 +01:00
Anthony Roussel
efdbdab8b5
nixos/ocsinventory-agent: init 2023-11-02 14:20:45 +01:00
Graham Bennett
b2fccae809 zwave-js: module init, zwave-js-server: init at 1.33.0
Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
Co-authored-by: h7x4 <h7x4@nani.wtf>
2023-11-02 08:21:09 +00:00
github-actions[bot]
e67e95c1d1
Merge master into staging-next 2023-11-02 06:01:16 +00:00
Martin Weinelt
0b2ab262bc
home-assistant: 2023.10.5 -> 2023.11.0
https://www.home-assistant.io/blog/2023/11/01/release-202311/
2023-11-01 22:28:12 +01:00
Stephen Huan
09cc3285cc
nixos/mullvad-vpn: use resolvconf if enabled 2023-11-01 16:47:11 -04:00
Robert Obryk
536401e90a nixos/restic: fix #264696 and add a regression test
Make sure that preStart and postStop are included in all cases when they are nonempty.
2023-11-01 21:18:56 +01:00
github-actions[bot]
4a533d29ce
Merge master into staging-next 2023-11-01 12:01:10 +00:00
Martin Weinelt
05e8361387
Merge pull request #261867 from matrss/set-paperless-secret-key
nixos/paperless: set PAPERLESS_SECRET_KEY
2023-11-01 12:33:23 +01:00
Felix Buehler
29d41b7fd2 nixos/freshrss: migrate to DATA_PATH 2023-11-01 12:31:42 +01:00
Paul Meyer
143680787e nixos/x11: move extraLayouts into xkb attrset
[Motivation](NixOS#257817 (comment))

`extraLayouts` was missed in #259891, so moving it to the other xkb
options with this PR.

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-11-01 11:55:25 +01:00
github-actions[bot]
0d2063b693
Merge master into staging-next 2023-11-01 00:02:16 +00:00
Guillaume DELVIT
043522789b nixos/services/netdata: add systemd-journald plugin as a privileged wrapper
https://learn.netdata.cloud/docs/logs/systemd-journal/
need acces to

    Kernel Logs (dmesg):
        Capability: CAP_SYSLOG
        Description: This capability allows the program to read kernel logs using the dmesg command or by reading the /dev/kmsg file.

    System Logs (e.g., /var/log/syslog):
        Capability: CAP_DAC_READ_SEARCH
        Description: This capability allows the program to read system logs located in directories such as /var/log/.

    User Logs (e.g., /var/log/auth.log):
        Capability: CAP_DAC_READ_SEARCH
        Description: This capability allows the program to read user logs located in directories such as /var/log/.
2023-11-01 00:16:30 +01:00
Robert Hensing
29697af6ae
Merge pull request #258068 from Izorkin/update-peertube
peertube: 5.1.0 -> 5.2.1
2023-10-31 23:44:14 +01:00
FliegendeWurst
1391725fb5 nixos/throttled: load required kernel module 2023-10-31 22:14:02 +01:00
github-actions[bot]
81270bbdcf
Merge master into staging-next 2023-10-31 18:01:02 +00:00
Robin Gloster
7e2992c01b
Merge pull request #264584 from Ma27/drop-privacyidea
privacyidea: remove
2023-10-31 16:46:37 +01:00
Janik H.
8e5729517e
nixos/woodpecker-server: change type of environmentFile to list of paths 2023-10-31 15:46:53 +01:00
K900
46bc9e79a9
Merge pull request #259765 from 70m6/bugfix/bitcoind-enable
bugfix/bitcoind-enable
2023-10-31 17:35:10 +03:00
Tom Barrett
a4b31637b5 bitcoind: only use enabled services 2023-10-31 15:29:17 +01:00
Maximilian Bosch
5927d55685
privacyidea: remove
Related to #262907 (Django3 removal from nixpkgs).

This package already required an unreasonable amount of maintenance
regularly for a such small leaf-package. It has a few highly outdated
dependencies (e.g. flask 1, jinja2 2.11, sqlalchemy 1.3).

After at least each Python package-set update one had to fix up a lot of
dependencies to fix the package itself, so it was only useful on stable
branches. And having so much outdated software in a security-sensitive
piece of software seems questionable.

Finally, globin and I won't be available for maintaining this now that
Mayflower is migrating to another solution (and we'll do that as well)
and I'd expect this to bitrot extremely quick if we both bail out.
2023-10-31 14:17:48 +01:00
github-actions[bot]
2fd5f8dd7a
Merge master into staging-next 2023-10-31 12:01:11 +00:00
Alexandru Scvortov
fa54eeea5c livebook: add systemd user service, test, and docs
Co-authored-by: Yt <happysalada@tuta.io>
2023-10-31 07:31:18 +00:00
github-actions[bot]
97868dae8e
Merge master into staging-next 2023-10-31 06:00:58 +00:00
Mario Rodas
1122fb5123
Merge pull request #264250 from Ma27/rm-postgres-11
postgresql_11: remove
2023-10-30 21:36:56 -05:00
github-actions[bot]
135430eb60
Merge master into staging-next 2023-10-31 00:02:27 +00:00
Martin Weinelt
e3647a1769
nixos/wyoming/openwakeword: fix typo in attribute name 2023-10-31 00:42:04 +01:00
Martin Weinelt
5da8c00f11
Merge pull request #264404 from mweinelt/wyoming-openwakeword-1.8.1
wyoming-openwakeword: 1.5.1 -> 1.8.1
2023-10-30 22:53:25 +01:00
Martin Weinelt
3f224f0607
Merge pull request #264214 from mweinelt/wyoming-faster-whisper-device-param
nixos/wyoming/faster-whisper: pass device config to executable
2023-10-30 22:27:24 +01:00
github-actions[bot]
931938d1df
Merge master into staging-next 2023-10-30 18:01:02 +00:00
Lin Jian
bb3474f826
Merge pull request #264008 from arcnmx/xmrig-mainProgram
xmrig: add meta.mainProgram
2023-10-31 01:21:25 +08:00
K900
7bc18b63da
Merge pull request #227633 from ElvishJerricco/systemd-stage-1-fix-initrd-commands
Systemd stage 1 assert initrd commands are empty
2023-10-30 20:03:44 +03:00
Martin Weinelt
e458280606
nixos/wyoming/openwakeword: update for 1.8.1
Remove the deprecated --models option, as models are now discovered
and loaded dynamically from all configured model dirs at runtime.

Allow setting up custom model directories, so wake words other than the
built-in ones can be used, e.g. from
https://github.com/fwartner/home-assistant-wakewords-collection.
2023-10-30 18:00:28 +01:00
Martin Weinelt
0d34502fe3
nixos/wyoming/openwakeword: relax model selection
The wyoming-openwakeword supports a custom model directory, which cannot
be used when the the model list is constrained to the builtin ones.
2023-10-30 16:21:58 +01:00
Will Fancher
cca22054c0 systemd-stage-1: Add assertions for unsupported options. 2023-10-30 12:15:58 +01:00
Maximilian Bosch
1220a4d4dd
postgresql_11: remove
As described in the release lifecycle docs from postgresql[1], v11 will
stop receiving fixes as of Nov 9 2023. This means it's EOL throughout
the entire lifetime of 23.11, so let's drop it now.

A lot of examples are also referencing postgresql_11. Where it's
sensible, use postgresql_15 as example now to avoid confusion.

This is also handy because the LLVM 16 fix for postgresql is not
available for postgresql 11 ;-)

[1] https://www.postgresql.org/support/versioning/
2023-10-30 10:41:16 +01:00
Vladimír Čunát
5c89ba8ab4
Merge branch 'master' into staging-next 2023-10-30 06:12:04 +01:00
Martin Weinelt
4f971ebf3c
nixos/wyoming/faster-whisper: pass device config to executable
The device could previously be configured but wasn't wired up to do
anything meaningful and as such always defaulted to CPU.
2023-10-30 00:45:17 +01:00
Michele Guerini Rocco
800965ce8c
Merge pull request #245855 from rnhmjoj/pr-sslh
nixos/sslh: update and refactor for RFC42
2023-10-29 23:19:38 +01:00
Jakub Sokołowski
c7b3a19df6 erigon: add package option to override default version
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-10-29 18:27:13 +00:00
github-actions[bot]
64070c2fda
Merge master into staging-next 2023-10-29 18:01:23 +00:00
Rémy Grünblatt
c9e3cc43c7
nixos: fix iproute2 invocations (#263976)
When using iproute2's ip binary, you can omit the dev parameter, e.g. ip link set up eth0 instead of ip link set up dev eth0.

This breaks if for some reason your device is named e.g. he, hel, … because it is interpreted as ip link set up help.

I just encountered this bug using networking.bridges trying to create an interface named he.

I used a grep on nixpkgs to try to find iproute2 invocations using variables without the dev keyword, and found a few, and fixed them by providing the dev keyword.

I merely fixed what I found, but the use of abbreviated commands makes it a bit hard to be sure everything has been found (e.g. ip l set … up instead of ip link set … up).
2023-10-29 18:27:16 +01:00
rnhmjoj
7ecac99da7
sslh: 1.22c -> 2.0.0 2023-10-29 18:13:37 +01:00
rnhmjoj
3728338d40
nixos/sslh: refactor for RFC42 2023-10-29 18:13:37 +01:00
Aaron Andersen
3b848391b6
Merge pull request #227442 from christoph-heiss/openssh/allowusers
openssh: add {Allow,Deny}{Users,Groups} settings
2023-10-29 08:20:22 -04:00
github-actions[bot]
571f1df5e4
Merge master into staging-next 2023-10-29 12:00:57 +00:00
Guillaume Girol
98b63514f0
Merge pull request #261862 from vifino/syslog-ng-4.4.0
syslogng: Late cleanup
2023-10-29 09:51:02 +01:00
github-actions[bot]
3f274c7328
Merge master into staging-next 2023-10-29 06:01:18 +00:00
Peder Bergebakken Sundt
37c7104f53
Merge pull request #262915 from chayleaf/certspotter
certspotter: init at 0.17.0; nixos/certspotter: init
2023-10-29 05:10:04 +01:00
github-actions[bot]
954eb09381
Merge master into staging-next 2023-10-29 00:02:24 +00:00
Weijia Wang
eaf8053ad5
Merge pull request #264036 from wegank/unifi-hotfix
nixos/unifi: fix use of optionalString
2023-10-29 00:33:19 +02:00
Weijia Wang
88e82879f4 nixos/unifi: fix use of optionalString 2023-10-28 23:01:44 +02:00
arcnmx
0711d3d69b xmrig: add meta.mainProgram
See #246386
2023-10-28 11:21:57 -07:00
Christoph Heiss
cc8ba21629
nixos/sshd: add comment explaining different list option types
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-10-28 20:13:26 +02:00
github-actions[bot]
52b6b90243
Merge master into staging-next 2023-10-28 18:00:57 +00:00
Weijia Wang
66ab26fce8
Merge pull request #262084 from imlonghao/borgmatic/fix-262020
borgmatic: fix deprecation warning check failed
2023-10-28 15:33:39 +02:00
github-actions[bot]
519b7ea0c3
Merge master into staging-next 2023-10-28 12:01:19 +00:00
Linus Heckemann
8670794565
Merge pull request #263203 from nikstur/replace-activation
Replace simple activationScripts
2023-10-28 10:17:15 +02:00
chayleaf
f4aeeb9e81
nixos/certspotter: init 2023-10-28 14:19:36 +07:00
github-actions[bot]
81ed2302dc
Merge master into staging-next 2023-10-28 06:00:57 +00:00
Peder Bergebakken Sundt
dc42e2603b
Merge pull request #263335 from anthonyroussel/nixos-goss
nixos/goss: init
2023-10-28 06:36:43 +02:00
imlonghao
88bc98a073
borgmatic: fix deprecation warning check failed 2023-10-28 11:32:38 +08:00
github-actions[bot]
4791949f6a
Merge master into staging-next 2023-10-28 00:02:23 +00:00
Peder Bergebakken Sundt
a9d001fd4a
Merge pull request #260877 from moritzrickert/plausible-registration-invite-only
nixos/plausible: add invite only registrations
2023-10-27 23:49:49 +02:00
Artturi
61f2bd3178
Merge pull request #254386 from erikarvstedt/nginx-js-mime-type 2023-10-27 23:32:20 +03:00
Matthias Riße
63ef033992 nixos/paperless: set PAPERLESS_SECRET_KEY
If the PAPERLESS_SECRET_KEY environment variable is left unset
paperless-ngx defaults to a well-known value, which is insecure.

Co-authored-by: Erik Arvstedt <erik.arvstedt@gmail.com>
2023-10-27 21:11:01 +02:00
tomf
d18f272a39
Merge pull request #262408 from evandeaubl/master
nixos/tailscale: add openFirewall option
2023-10-28 05:19:41 +11:00
github-actions[bot]
4c838ddf14
Merge master into staging-next 2023-10-27 18:01:08 +00:00
tomf
b42ca6b992
Merge pull request #260346 from l0b0/feat/shiori-webroot
nixos/shiori: add web root option
2023-10-28 04:25:40 +11:00
Emily
f4e67057e8
Merge pull request #263234 from CobaltCause/garage-statedirectory
nixos/garage: set `StateDirectory` if used at all
2023-10-27 17:26:39 +02:00
Alyssa Ross
44ff5dfca2 nixos/restic: remove s3CredentialsFile option
This has been deprecated since 2021, so all users should have seen the
warning and migrated by now.
2023-10-27 12:31:54 +00:00
Anthony Roussel
3a2d3bc3d8
nixos/goss: init 2023-10-27 08:00:48 +02:00
github-actions[bot]
f0ebfe8b52
Merge master into staging-next 2023-10-27 00:02:24 +00:00
Pol Dellaiera
aaccf42b1b
Merge pull request #261432 from yayayayaka/snipe-it-convert-to-buildComposerProject
snipe-it: convert to buildComposerProject
2023-10-27 01:36:34 +02:00
Peder Bergebakken Sundt
e8ff5952f6
Merge pull request #258558 from hmenke/c2FmZQ
c2FmZQ: init at 0.4.8
2023-10-26 20:33:51 +02:00
github-actions[bot]
96132a216a
Merge master into staging-next 2023-10-26 18:01:02 +00:00
Peder Bergebakken Sundt
adcaf3962d
Merge pull request #212087 from robryk/resticpaths
nixos/backups/restic: handle cases when both dynamicFileFrom and paths are set
2023-10-26 19:35:22 +02:00
Yaya
d91c530a55
snipe-it: Convert to php.buildComposerPackage 2023-10-26 18:51:05 +02:00
Peder Bergebakken Sundt
4d6d43f444
Merge pull request #263460 from arcuru/rename-arcuru
treewide: rename handle/GH account patricksjackson to arcuru
2023-10-26 18:46:42 +02:00
Henri Menke
e0cebb254e
nixos/c2fmzq-server: init module
Co-authored-by: Peder Bergebakken Sundt <pbsds@hotmail.com>
Co-authored-by: Anselm Schüler <mail@anselmschueler.com>
Co-authored-by: h7x4 <h7x4@nani.wtf>
2023-10-26 17:27:51 +02:00
Moritz Rickert
09794b1ee4 nixos/plausible: add invite only registrations 2023-10-26 16:54:25 +02:00
Martin Weinelt
b501176d83
nixos/wyoming-faster-whisper: update model enum
The medium model was never provided due to its extensive size.
2023-10-26 15:56:17 +02:00
Maximilian Bosch
15e17917fc
nixos/grafana-image-renderer: use Grafana's http_addr rather than localhost
Otherwise the callback won't work Grafana is configured to listen on a
different IP address by default.
2023-10-26 12:57:39 +02:00
Vladimír Čunát
d811555465
Merge branch 'staging' into staging-next 2023-10-26 10:36:50 +02:00
nikstur
b16365b393 nixos/iscsi: replace activationScript
Move the functionality into preStart of the systemd service.
2023-10-26 01:51:07 +02:00
nikstur
6987ff3a4f nixos/spiped: replace activationScript via tmpfiles 2023-10-26 01:44:21 +02:00
nikstur
f18ff2ec0b nixos/mlmmj: replace activationScript 2023-10-26 01:44:21 +02:00
nikstur
d5a96d508b nixos/stargazer: replace activationScript via tmpfiles 2023-10-26 01:44:21 +02:00
nikstur
6c800013bf nixos/strongswan-swanctl: replace activationScripts via tmpfiles 2023-10-26 01:44:20 +02:00
nikstur
168b967b32 nixos/mattermost: replace activationScript via tmpfiles 2023-10-26 01:43:56 +02:00
Patrick Jackson
4a938cc665 treewide: rename handle/GH account patricksjackson to arcuru 2023-10-25 15:42:48 -07:00
nikstur
1b2b1364de nixos/ups: replace activationScript via tmpfiles 2023-10-25 23:44:01 +02:00
Martin Weinelt
2bb79db3e2
Merge pull request #263315 from chayleaf/kea
kea: use separate runtime directories for each service
2023-10-25 22:29:31 +02:00
chayleaf
413011ddf4 kea: use separate runtime directories for each service
Kea may clean the runtime directory when starting (or maybe systemd does
it). I ran into this issue when restarting Kea after changing its
configuration, so I think the fact it normally doesn't clean it is a
race condition (it's cleaned on service start, and normally all Kea
services start at roughly the same time).
2023-10-26 02:51:43 +07:00
Lin Jian
2a27bf588f
Merge pull request #261733 from nbdd0121/hass
nixos/home-assistant: use runCommandLocal for configuration.yaml
2023-10-26 02:23:21 +08:00
Mario Rodas
84a877ed30
Merge pull request #261722 from anthonyroussel/ssm-agent-rename
amazon-ssm-agent: rename from ssm-agent
2023-10-25 04:18:24 -05:00
Stig
a99cbd99e1
Merge pull request #255715 from TomaSajt/lanraragi
lanraragi: init at 0.8.90
2023-10-25 10:54:27 +02:00
digital
a6253e6b12
nixos/syncthing: support syncthing gui and api over unix sockets (#247343) 2023-10-25 09:18:42 +02:00
Rebecca Kelly
855223de8f nixos/munin: fix internAndFixPlugins mangling store paths
The previous implementation works fine when the plugins do not already
contain store paths, which is the case for stuff from munin-contrib.
However, for plugins generated via nix (e.g. with writeShellScriptBin),
it tries to fix the paths in it which already point to the nix store,
ruining everything.
2023-10-25 09:00:45 +02:00
Rebecca Kelly
0f7fb5cdcf nixos/munin: fix key-context error when using extraAutoPlugins
If extraAutoPlugins contains values that carry context (e.g. it comes
from a flake input), the keys generated from them using baseNameOf
inherit that context and the config doesn't compile.

This doesn't actually need to be an attrset anyways, so a bit of
internal refactoring lets us fix this without changing the visible API.
2023-10-25 09:00:45 +02:00
Charles Hall
f5dcc015b9
nixos/garage: set StateDirectory if used at all
Changes the `mkIf` to trigger if *either* `data_dir`/`metadata_dir` use
`/var/lib/garage`, not only if both do. This is useful to me because I
want to store metadata in `/var/lib/garage` but I also want to store
data in a different mountpoint (via `data_dir` and `ReadWritePaths`).
2023-10-24 22:03:21 -07:00
TomaSajt
8e18ff0c24
nixos/lanraragi: init 2023-10-25 01:14:59 +02:00
Janik
e46b352ac4
Merge pull request #231065 from yu-re-ka/fnm-advanced-module
nixos/fastnetmon-advanced: init
2023-10-24 21:43:26 +02:00
Emily
702853c61a
Merge pull request #263046 from emilylange/nixos-forgejo
nixosTests.forgejo: test backup/dump service; nixos/forgejo: pass {env}`GIT_PROTOCOL` via ssh to forgejo; nixosTests.forgejo: test git wire protocol version
2023-10-24 19:40:20 +02:00
K900
d0d6219c42
Merge pull request #262265 from chayleaf/akkoma-extra
nixos/akkoma: add services.akkoma.dist.extraFlags
2023-10-24 18:30:24 +03:00
Tom Fitzhenry
9e7c877de7 nixos/hostapd: remove managementFrameProtection 2023-10-24 23:54:44 +11:00
Tom Fitzhenry
9f7335d449 nixos/hostapd: document that legacy example should have optional MFP
Thinkpad x230, for example, is unable to connect to the legacy example
if managementFrameProtection is required.
2023-10-24 23:46:57 +11:00
Robin Gloster
e5d552f5b9
treewide: update globin's maintainership 2023-10-24 13:09:45 +02:00
emilylange
402b5c67a8
nixos/forgejo: pass {env}GIT_PROTOCOL via ssh to forgejo
when using the host's openssh service (not the builtin golang one).

This enables the use of the much faster and more efficient wire protocol
version 2.
See https://git-scm.com/docs/protocol-v2
2023-10-24 03:27:20 +02:00
Janik
a5b74d45bd
Merge pull request #262978 from JulienMalka/ferretdb-docs
nixos/ferretdb: fix broken link to documentation
2023-10-23 22:53:21 +02:00
Yureka
bf5f01ee52 nixos/fastnetmon-advanced: init 2023-10-23 22:51:19 +02:00
Domen Kožar
4e95cbe36e
Merge pull request #246081 from therealr5/bacula-fix
nixos/bacula: fix postgresql config and remove unneeded quotation marks
2023-10-23 21:42:11 +01:00
Lorenz Leutgeb
cc6c2d32f2
rosenpass: refactor, add module and test (#254813) 2023-10-23 19:29:30 +02:00
Julien Malka
5237796f2b nixos/ferretdb: fix broken link to documentation 2023-10-23 16:48:31 +00:00
Maximilian Bosch
3ad1ebe9ff
Merge pull request #258047 from mweinelt/knot-exporter
prometheus-knot-exporter: 2021-08-21 -> 3.3.1; python310Packages.libknot: init at 3.3.1
2023-10-23 15:01:06 +02:00
github-actions[bot]
2c2c0379b7
Merge staging-next into staging 2023-10-23 12:02:04 +00:00
Martin Weinelt
589ccfdac1
nixos/prometheus-exporters/knot: update for new exporter
The new exporter has proper console scripts definition, that sets up
another executable name.

The package now also shells out to pidof, which is why we require procps
in the unit PATH.
2023-10-23 13:19:52 +02:00
Ryan Lahfa
d1ee91c22d
Merge pull request #262796 from SuperSandro2000/patch-1
nixos/nginx: document implicit default port 80
2023-10-23 11:04:54 +01:00
Martin Weinelt
6ddb74a81a
Merge pull request #262542 from yu-re-ka/matrix-synapse-opentracing
matrix-synapse: remove opentracing optional dependencies
2023-10-23 11:22:25 +02:00
K900
a52abd4ccb
Merge pull request #262623 from K900/continued-firefox-cleanups
firefox: start killing all the per-extension options
2023-10-23 10:25:37 +03:00
github-actions[bot]
df9eab6771
Merge staging-next into staging 2023-10-23 00:03:00 +00:00
Martin Weinelt
3244b1eaef
Merge pull request #262678 from plumelo/feat/esphome-proc-subset
esphome: remove ProcSubset from serviceConfig
2023-10-23 00:46:21 +02:00
Anthony Roussel
ccf080ee05
amazon-ssm-agent: rename from ssm-agent 2023-10-22 22:04:09 +02:00
Sandro
f4d631c3d1
nixos/nginx: document implicit default port 80 2023-10-22 21:32:50 +02:00
Emily
a61c6b478d
Merge pull request #262741 from emilylange/nixos-forgejo-postgres15
nixos/forgejo: work around permissions error on `postgresql_15`
2023-10-22 21:04:41 +02:00
github-actions[bot]
3d9ca9d8e3
Merge staging-next into staging 2023-10-22 18:01:34 +00:00
Robert Schütz
80f59b1626
Merge pull request #261135 from dotlambda/nixos-iptsd-init
nixos/iptsd: init
2023-10-22 09:48:37 -07:00
Artturi
b2426befa0
Merge pull request #259784 from dmytrokyrychuk/init-spice-autorandr
spice-autorandr: init at 0.0.2
2023-10-22 18:52:10 +03:00
Martin Weinelt
410ccec99c
Merge pull request #261931 from mweinelt/homeassistant-satellite
homeassistant-satellite: init at 2.3.0
2023-10-22 16:53:03 +02:00
K900
60421a1622 firefox: start killing all the per-extension options 2023-10-22 17:13:42 +03:00
Meghea Iulian
bff068e514
esphome: remove ProcSubset from serviceConfig
Remove ProcSubset from esphome serviceConfig because esphome/bwrap needs to
access it.
According to
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProcSubset=
ProcSubset isn't even recommended for most programs.
Fixes #262674
2023-10-22 17:09:00 +03:00
Dmytro Kyrychuk
d147d7feed nixos/spice-autorandr: init 2023-10-22 13:45:56 +00:00
emilylange
b8585a119c
nixos/forgejo: work around permissions error on postgresql_15
From `postgresql_15`'s release notes:
> PostgreSQL 15 also revokes the CREATE permission from all users except
a database owner from the public (or default) schema.

https://www.postgresql.org/about/news/postgresql-15-released-2526/

This directly affects `services.postgresql.ensureUsers` in NixOS,
leading to
> permission denied for schema public

`postgresql_15` is now the default for stateVersion `23.11`/`unstable`.

So until this is resolved globally, we work around this issue.
2023-10-22 15:25:34 +02:00
Yureka
0288685a4d nixos/matrix-synapse: remove opentracing options 2023-10-22 14:15:39 +02:00
github-actions[bot]
4312247c19
Merge staging-next into staging 2023-10-22 12:01:52 +00:00
Ryan Lahfa
efccbbab5b
Merge pull request #258994 from lorenzleutgeb/msr
nixos/hardware/cpu/x86/msr: init
2023-10-22 10:24:12 +01:00
Lin Jian
c132df63df
Merge pull request #250792 from ckiee/init-rkvm
{,nixos/}rkvm: init
2023-10-22 17:11:12 +08:00
Lorenz Leutgeb
62c63f746a nixos/undervolt: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
84803308bf nixos/xmrig: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
b70a63a910 nixos/tlp: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
b893b67028 nixos/throttled: Use hardware.cpu.x86.msr 2023-10-22 09:40:59 +02:00
github-actions[bot]
09fabcdc4e
Merge staging-next into staging 2023-10-22 00:03:08 +00:00
github-actions[bot]
1cf369a0dd
Merge master into staging-next 2023-10-22 00:02:31 +00:00
Peder Bergebakken Sundt
d2af1eb6ff
Merge pull request #256449 from illustris/hadoop
hadoop: 3.3.5 -> 3.3.6, build container executor from source
2023-10-22 01:40:19 +02:00
Janik
abca224ce4
Merge pull request #242467 from dadada/dev/dadada/init-nixos-soft-serve
nixos/soft-serve: init
2023-10-21 21:58:47 +02:00
github-actions[bot]
f4afba2014
Merge staging-next into staging 2023-10-21 18:01:53 +00:00
Alyssa Ross
83b8726e5f
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/python-modules/velbus-aio/default.nix
2023-10-21 17:24:16 +00:00
nikstur
95e6dfd5d9
Merge pull request #260275 from thillux/jitterentropy-rngd
jitterentropy-rngd: init at 1.2.8
2023-10-21 19:10:51 +02:00
Ryan Lahfa
c5442c247f
Merge pull request #257262 from dongcarl/2023-09-nginx-fixes
nixos/nginx: Allow empty port for listen directive (for unix socket)
2023-10-21 17:26:57 +01:00
dadada
77f7b5a3e5
nixos/soft-serve: init
This adds a NixOS module for Soft Serve, a tasty, self-hostable Git
server for the command line. The module has a test that checks some
basic things like creating users, creating a repo and cloning it.

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-10-21 17:51:42 +02:00
Ryan Lahfa
0b0440e028
Merge pull request #254647 from Janik-Haag/networkManagerEnsureProfiles
nixos/networkmanager: add declarative profiles
2023-10-21 15:06:41 +01:00
github-actions[bot]
682b6995b4
Merge staging-next into staging 2023-10-21 12:01:45 +00:00
github-actions[bot]
0c34dab04f
Merge master into staging-next 2023-10-21 12:01:08 +00:00
Sandro Jäckel
b11e3eb7d1 nixos/asf: update hardening options to match upstream 2023-10-21 13:50:05 +02:00
github-actions[bot]
e5968ce788
Merge staging-next into staging 2023-10-21 06:01:24 +00:00
github-actions[bot]
1c4183d88a
Merge master into staging-next 2023-10-21 06:00:57 +00:00
Sandro Jäckel
7f94b9e9c6
nixos/fail2ban: change bantime default to not be config breaking 2023-10-21 02:38:29 +02:00
github-actions[bot]
613d60266a
Merge staging-next into staging 2023-10-21 00:02:49 +00:00
github-actions[bot]
fb3e2499b7
Merge master into staging-next 2023-10-21 00:02:17 +00:00
Evan Deaubl
9407ed628d nixos/tailscale: add openFirewall option 2023-10-20 15:57:40 -07:00
Janik H
a316aa58d9
nixos/networkmanager: add declarative profiles 2023-10-21 00:20:36 +02:00
Bjørn Forsman
5c78e5b4aa nixos/ddclient: simplify with lib.getExe 2023-10-20 23:49:18 +02:00
Bjørn Forsman
8a8ec36615 Revert "ddclient: remove package and module on upstream maintainer request"
This reverts commit d35df28f65.

Upstream ddclient has new maintainers and made a new release (update in
next commit(s)).
2023-10-20 23:49:18 +02:00
Dmitry Kalinkin
6392f18258
Merge pull request #262351 from h7x4/remove-nix-exec-bits
treewide: remove execute bit for non-executable `*.nix` files
2023-10-20 14:45:16 -04:00
github-actions[bot]
02a21c89b8
Merge staging-next into staging 2023-10-20 18:01:21 +00:00
github-actions[bot]
cfc75eec46
Merge master into staging-next 2023-10-20 18:00:54 +00:00
h7x4
e6321d2788
treewide: remove execute bit for non-executable *.nix files 2023-10-20 19:55:39 +02:00
K900
0cc634901e
Merge pull request #262148 from K900/pipewire-0.3.83
Pipewire 0.3.83
2023-10-20 19:59:36 +03:00
Vladimír Čunát
9320d9e7bc
Merge #260527: Mailman fixes
...into staging-next
2023-10-20 18:56:03 +02:00
Martin Weinelt
95856e526e
nixos/homeassistant-satellite: init 2023-10-20 17:26:10 +02:00
Bjørn Forsman
142074c2a8 nixos: fix bad mkEnableOption descriptions
Fix descriptions that don't account for (1) the "Whether to enable"
prefix or (2) the automatically added trailing dot.
2023-10-20 16:22:40 +01:00
Pol Dellaiera
fdecb1dabf
Merge pull request #244941 from h7x4/reduce-options-in-hedgedoc-module
nixos/hedgedoc: refactor to reduce option count
2023-10-20 16:07:16 +02:00
github-actions[bot]
b0ec8bbe1d
Merge staging-next into staging 2023-10-20 12:01:55 +00:00
github-actions[bot]
d7e9da1742
Merge master into staging-next 2023-10-20 12:01:24 +00:00
chayleaf
e2b6ff8384 nixos/akkoma: add services.akkoma.dist.extraFlags
This allows configuring Erlang flags
2023-10-20 17:34:14 +07:00
Cabia Rangris
585a8b12b1
Merge pull request #258853 from SuperSandro2000/dex
nixos/dex: fix start with latest systemd update
2023-10-20 09:59:21 +00:00
nikstur
f0154409a1 nixos/nix-daemon: remove activationScript
The activationScript does not seem to be necessary anymore as the paths
are created anyways.
2023-10-20 10:26:32 +02:00
Markus Theil
e98a8367ec jitterentropy-rngd: init at 1.2.8
Add jitterentropy-rngd, a tool similar to rng-tools.
While not necessarily needed, it is useful for those
who want to strengthen their kernel entropy input pool
by periodic insertion of an independent source.

The entropy source is a NIST SP800-90B compliant
non-physical true RNG source on most systems.
See the jitterentropy documentation for details
(http://chronox.de/jent/doc/CPU-Jitter-NPTRNG.pdf).

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2023-10-20 10:04:11 +02:00
K900
30e8b8e18d nixos/pipewire: simplify pw-pulse disabling 2023-10-20 10:22:53 +03:00