Franz Pletz
d4b1fcdbe6
nixos/redlib: format, add maintainer, add cfg.settings, use upstream systemd unit ( #345715 )
2024-11-24 17:13:16 +01:00
LorenzBischof
c5d7865d83
nixos/etesync-dav: update default apiurl
2024-11-23 11:41:32 +01:00
Guanran Wang
4a0893c186
fixup! nixos/redlib: use upstream systemd service file
2024-11-22 15:24:46 +08:00
tomberek
a42bdea0a7
rfmakecloud: 0.0.18 -> 0.0.21 ( #356963 )
2024-11-22 00:35:19 -05:00
Aleksana
9612e216ce
nixos/tabby: fix typo ( #355223 )
2024-11-21 21:01:54 +08:00
Dominique Martinet
64a13b7609
nixos/rmfakecloud: remove outdated note about webui not included
...
the webui has been built by default for a while
2024-11-18 22:59:41 +09:00
Dominique Martinet
b15ed174fa
rmfakecloud: run nixfmt
2024-11-18 22:59:40 +09:00
Sefa Eyeoglu
1d95cb5fa7
nixos/duckdns: init module ( #294489 )
2024-11-14 17:29:11 +01:00
Sandro
6bfde7268f
evremap: init at 0-unstable-2024-06-17, nixos/evremap: init module ( #352720 )
2024-11-12 18:41:51 +01:00
Ughur Alakbarov
f21d3a0f07
nixos/tabby: fix typo
2024-11-11 16:26:57 +01:00
Thiago Kenji Okada
44bbe5ddad
nixos/{boinc,guix}: Use exec to start the payload binary of the service ( #297526 )
2024-11-10 17:35:24 +00:00
Wolfgang
9563f469c1
nixos/duckdns: init module
2024-11-09 22:27:14 +01:00
Jozef Hollý
be97874351
Fix: use lib.mkPackageOption
2024-11-09 13:09:08 +01:00
Jozef Hollý
ba83a0dba0
Merge branch 'master' into patch-1
2024-11-09 13:07:47 +01:00
Jozef Hollý
a96dce89d0
PR feedback: Replace pkg variable, move package statement
2024-11-09 13:06:56 +01:00
Sleeping-Donut
df20742283
ombi: allow overriding package in module ( #345814 )
...
* ombi: allow overriding package in module
* nixos/ombi: replace explicit bin path with getExe function
Co-authored-by: Anderson Torres <torres.anderson.85@protonmail.com>
---------
Co-authored-by: Anderson Torres <torres.anderson.85@protonmail.com>
2024-11-09 12:05:54 +01:00
Leah Amelia Chen
41e907f884
nixos/evremap: init module
2024-11-08 09:31:27 +01:00
Franz Pletz
0fc41ad977
treewide: Remove ineffective capability grants. ( #333533 )
2024-11-06 08:12:51 +01:00
Weijia Wang
acf3de8d62
nixos/guix: add declarative substituters option ( #353518 )
2024-11-04 20:43:41 +01:00
Gabriel Arazas
7095e0f8c1
nixos/guix: add declarative substituters option
2024-11-03 15:12:12 -06:00
Sandro
f5c76ad2b5
nixos/renovate: set service type to simple ( #334557 )
2024-11-03 16:52:53 +01:00
Felix Bühler
031b2f0a77
nixos/octoprint: fix ipv6 host ( #351721 )
2024-10-31 21:37:02 +01:00
h7x4
c3632dc3aa
nixos/dysnomia: move into services ( #351046 )
2024-10-29 01:17:12 +01:00
Sefa Eyeoglu
d8d66448d7
nixos/paperless: fix shellcheck findings with enableStrictShellChecks enabled ( #349559 )
2024-10-28 21:40:52 +01:00
Aleksana
04af29af29
nixos/klipper: fix serial value inheritance ( #308661 )
2024-10-28 21:14:03 +08:00
Ayman Bagabas
b6b90562f7
calibre-server: add extraFlags and openFirewall options
...
This allows users to pass extra flags to the calibre-server command and
open the necessary ports in the firewall for the Calibre Server API.
2024-10-28 08:21:01 +01:00
Sefa Eyeoglu
9bc0084df7
nixos/bazarr: set systemd config KillSignal to SIGINT to fix timeout ( #334675 )
2024-10-27 20:13:25 +01:00
Felix Buehler
a9413c7794
nixos/octoprint: fix ipv6 host
2024-10-27 19:16:24 +01:00
Jacek Galowicz
2eace81769
nixos/anki-sync-server: add setting ( #344724 )
2024-10-27 11:09:55 +01:00
Sandro Jäckel
8f96ccf1ff
nixos/dysnomia: move into services
2024-10-26 22:01:19 +02:00
Felix Buehler
ca63cb8a24
nixos/bazarr: normalize description
2024-10-24 22:39:43 +02:00
Jack Wilsdon
464e353fcc
nixos/klipper: fix serial value inheritance
2024-10-23 22:32:26 +01:00
Shaurya Shubham
a4b68ba2c4
nixos/nix-gc: Update nix.gc.dates description to be more precise
2024-10-23 22:17:49 +11:00
Sandro
70e46c586f
doc/misc/docker-registry: fix extraConfig docs ( #349495 )
2024-10-22 21:06:38 +02:00
Pablo Andres Dealbera
24be165be3
nixos/bazarr: add 156 as a valid SuccessExitStatus
2024-10-21 12:34:15 -03:00
Sefa Eyeoglu
05b9e0a09f
bazarr: allow overriding package in module ( #334521 )
2024-10-20 20:45:57 +02:00
Sandro Jäckel
c4a7c0fae5
nixos/paperless: fix shellcheck findings with enableStrictShellChecks enabled
2024-10-18 17:28:03 +02:00
Rasmus Précenth
00e1112f9b
nixos/docker-registry: fix extraConfig docs
...
Co-authored-by: teutat3s <10206665+teutat3s@users.noreply.github.com>
2024-10-18 11:45:18 +02:00
Maximilian Bosch
875f00ed40
gogs: remove
...
Upstream development has stalled and several critical vulnerabilities
that weren't addressed within a year[1][2].
Back then it was fair to mark it as insecure, but given nothing has
happened since, it's time to remove it.
[1] https://forgejo.org/2023-11-release-v1-20-5-1/
[2] https://github.com/gogs/gogs/issues/7777
2024-10-12 10:36:06 +02:00
Ayman Bagabas
762a9d42a1
bazarr: allow overriding package in module
2024-10-10 17:23:51 -04:00
Felix Singer
0f599d1e68
nixos/redmine: Apply initial hardening using the systemd unit
...
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.
In my tests, Redmine only bound to an IPv4 address and Unix socket,
which is why I restricted the address families to these both.
The command `systemd-analyze security redmine.service` reports an
overall exposure level of 2.9 with this patch.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-05 22:13:37 +02:00
Aaron Andersen
913a23b5e2
nixos/redmine: Allow specifying an IP address Redmine should bind to ( #345617 )
2024-10-04 18:18:45 -04:00
Bjørn Forsman
48908e5b86
nixos: improve systemd slice names
...
Following
https://www.freedesktop.org/software/systemd/man/latest/systemd.unit.html#Description= ,
update slice names to be short, descriptive and capitalized.
2024-10-02 20:24:13 +02:00
Guanran Wang
4e6df6f865
nixos/redlib: use upstream systemd service file
2024-10-01 22:34:38 +08:00
Guanran Wang
672d7efbd5
nixos/redlib: add cfg.settings
2024-10-01 22:31:13 +08:00
Guanran Wang
a2a4c87cab
{,nixos/,nixosTests/}redlib: add Guanran928 as maintainer
2024-10-01 22:10:27 +08:00
Guanran Wang
e286b91ebc
{nixos,nixosTests}/redlib: format with nixfmt
2024-10-01 22:07:58 +08:00
Felix Singer
5f14c876bd
nixos/redmine: Allow specifying an IP address Redmine should bind to
...
In order to not expose Redmine over all interfaces, allow configuring an
IP address it should bind to. Listen to 0.0.0.0 by default.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-01 06:16:42 +02:00
pinage404
83b1350904
nixos/open-webui: fix opensearch
...
When [adding Open WebUI as search engine in Firefox](https://docs.openwebui.com/tutorials/integrations/browser-search-engine/#for-firefox ) it always links to `http://localhost:3000 ` instead of the configured port
It is because [the response use `WEBUI_URL` environment variable](1d225dd804/backend/open_webui/main.py (L2370)1d225dd804/backend/open_webui/env.py (L106)
2024-09-30 17:28:11 +02:00
Jörg Thalheim
7d8f1572d1
nixos: enable fstrim by default
...
The majority of users these days will install NixOS on SSD/NVME based
storage. Enabling fstrim ensures that the TRIM operation on this type of
storage is run at least once a week. This will improve performance and
life time of said devices. This also works in virtual machines as
formats such as qcow2 or vmdk support TRIM.
Ubuntu has a similar systemd timer also for quite a while enabled by
default.
Enabling this service will not increase the dependency closure as
util-linux is already part of the base system.
In case only filesystems that are not supported by fstrim are used, the
overhead is negelible as fstrim run in less than a second once a week.
2024-09-29 14:04:18 +02:00
