misuzu
d5bb5259e4
nixos/netbird: allow configuring dns
2023-04-20 14:22:19 +03:00
Ryan Lahfa
2fa5e844de
Merge pull request #223749 from Alexis211/add-wgautomesh
...
wgautomesh: init at 0.1.0
2023-04-19 08:26:09 +02:00
Sandro
ce4159b4cd
Merge pull request #226514 from AtaraxiaSjel/update/ivpn
2023-04-19 00:57:19 +02:00
Dmitriy Kholkin
706060e47d
nixos/ivpn: init
2023-04-18 22:11:10 +03:00
Artturin
eac28f38d6
treewide: fix lints
...
Arg to lib.optional is a list
build time tool in buildInputs
*Flags not a list
https://github.com/nix-community/nixpkgs-lint
2023-04-18 20:20:56 +03:00
Alex Auvolat
a727a3d676
nixos/wgautomesh: init at 0.1.0
2023-04-17 12:37:18 +02:00
Sandro
d85555f9ac
Merge pull request #224996 from SuperSandro2000/smokeping-ln-f
2023-04-16 23:05:25 +02:00
Janne Heß
ee0bfeddf7
Merge pull request #226010 from helsinki-systems/drop/deprecated-ssh-files
...
nixos/openssh: Drop deprecated locations
2023-04-15 11:41:16 +02:00
Aidan Gauland
0135b7a556
nixos/peroxide: correct option doc
...
Correct the description for the option services.peroxide.enable.
2023-04-14 14:47:55 +02:00
Janne Heß
98c3d190b2
nixos/openssh: Drop deprecated locations
...
The changelog entry should give a good indication why I don't think this
is necessary anymore.
2023-04-13 20:31:18 +02:00
Martin Weinelt
130be87c8d
Merge pull request #224549 from mweinelt/go-neb-unit-permissions
...
nixos/go-neb: Replace PermissionsStartOnly with executable prefix
2023-04-12 22:59:41 +02:00
Sandro Jäckel
fdbd0834b2
nixos/smokeping: use ln with -f
2023-04-12 22:47:21 +02:00
Martin Weinelt
7a5a2fa8a4
Merge pull request #225785 from helsinki-systems/warn-dhcpd-eol
...
nixos/dhcpd: warn of pending removal
2023-04-12 00:08:42 +02:00
ajs124
e3702c0788
nixos/dhcpd: warn of pending removal
2023-04-11 23:47:40 +02:00
Sandro
fd04c0caf0
Merge pull request #221380 from Majiir/ddclient-fix-permissions
2023-04-11 01:31:53 +02:00
mrobbetts
3c1c5600e8
bind: replace hard-coded allow-query
zone setting with a real zone parameter. ( #224776 )
2023-04-07 06:55:09 +02:00
alyaeanyx
bd573376ad
nixos/wstunnel: init
2023-04-06 09:51:30 +02:00
Florian Klink
aa158ed243
Merge pull request #219496 from f2k1de/smokeping-css-js-fix
...
smokeping: fix css and js symlink
2023-04-05 21:56:33 +02:00
Florian Klink
ea7dd83b0d
Merge pull request #224833 from flokli/smokeping-config
...
nixos/smokeping: use /etc/smokeping.conf
2023-04-05 21:54:57 +02:00
Florian Klink
9de75c8bbe
nixos/smokeping: use /etc/smokeping.conf
...
This allows other services to refer to the generated smokeping config,
which is e.g. necessary to run smokeping with nginx as frontend, rather
than thttpd.
2023-04-05 16:51:26 +02:00
Yureka
53c20eae38
Revert "bind: remove hard-coded allow-query
config setting"
2023-04-04 23:35:11 +02:00
Martin Weinelt
34464d6044
nixos/go-neb: Replace PermissionsStartOnly with executable prefix
...
This should work as a drop-in replacement and satisfy #53852 .
2023-04-04 01:01:49 +02:00
Kerstin Humm
0b0cc93e79
remove myself (erictapen) from packages which I don't use anymore
2023-04-03 17:07:16 +02:00
Sandro
ef6206c3ee
Merge pull request #224170 from mvnetbiz/ddclient
2023-04-02 01:29:59 +02:00
Izorkin
3ab26f9f00
nixos/dhcpcd: add IPv6rs option
2023-04-01 13:52:38 +03:00
Matt Votava
ee88bac7be
nixos/ddclient: add iproute2 to unit path if using "if" method
2023-03-31 21:54:21 -07:00
Peter Simons
7942e2e38f
Merge pull request #221108 from mrobbetts/bind_remove_allow_query
...
bind: remove hard-coded `allow-query` config setting
2023-03-29 07:50:47 +02:00
Christoph Heiss
c9c9abc608
openssh: fix 'undefined variable' error
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-03-22 22:38:14 +01:00
Ryan Lahfa
5b88469c21
Merge pull request #217366 from puppe/fix-yggdrasil
...
nixos/yggdrasil: fix configFile option
2023-03-22 20:18:25 +01:00
K900
d0f7d224da
nixos/firewall-nftables: avoid using wildcards
...
Those were added in kernel 5.13, which is newer than our oldest supported.
2023-03-22 17:45:05 +03:00
K900
5bf9765c0a
Merge pull request #217482 from motiejus/headscale_oidc_client_secret
...
headscale: natively support oidc.client_secret_path
2023-03-22 14:30:03 +03:00
Aidan Gauland
7fb4aae81f
nixos/peroxide: add module for peroxide service
2023-03-18 07:43:59 +13:00
Sandro
7ec767ff54
Merge pull request #173697 from jmbaur/avahi-daemon-deny-interfaces
...
nixos/avahi: add denyInterfaces option
2023-03-17 17:11:49 +01:00
Weijia Wang
32f39395a7
Merge pull request #210101 from helsinki-systems/upd/jitsi
...
Update of all Jitsi Meet components
2023-03-17 12:23:14 +02:00
Bernardo Meurer
6e55733359
Merge pull request #219747 from Stunkymonkey/deprecate-isNull
2023-03-16 11:10:22 -03:00
Majiir Paktu
1021a7d928
nixos/ddclient: fix permissions warning
2023-03-15 17:47:08 -04:00
Matthew Robbetts
f5b754881d
bind: remove hard-coded allow-query
config file entry, so it can be customized via extraConfig
2023-03-13 20:47:02 -07:00
Lassulus
47233b27c9
Merge pull request #167319 from schnusch/cgit
2023-03-13 09:51:08 +07:00
Ben Wolsieffer
b92dae961c
nixos/chrony: allow @chown syscall set
...
The module was allowing specific chown syscalls, which is brittle because
there are several and different ones are used by glibc on different
architectures. For example, fchownat was already added to the allowlist for
aarch64, while on armv6l chrony crashes because chown32 is not in the
allowlist.
systemd provides the @chown syscall set, which includes all the chown
syscalls and avoids this brittleness. I believe the syscalls would all be
equivalent from an attacker's perspective, so there is unlikely to be any
security impact.
2023-03-12 18:10:56 -05:00
Jonas Heinrich
9f10a2e82a
Merge pull request #218633 from onny/networkd-dispatcher-rules
...
nixos/networkd-dispatcher: add rules option
2023-03-08 20:41:06 +01:00
K900
23b0152ffb
Merge pull request #218530 from K900/murmur-dbus
...
nixos/murmur: expose dbus
2023-03-08 18:35:56 +03:00
K900
d8d8b55e7d
nixos/murmur: expose dbus
2023-03-08 18:03:51 +03:00
Motiejus Jakštys
2b168ba3f0
headscale: rename oidc.client_secret_file to oidc.client_secret_path
...
Headscale now supports passing the OIDC client secret via a file, as
added in [juanfont/headscale#1127 ][1127]. Lets use that.
The headscale option is `client_secret_path`; let's make it consistent
and rename the Nix option to this. Note that I wasn't able to do this:
mkRenamedOptionModule [ ... "client_secret_file" ] [ ... "client_secret_path" ]
I get such error:
error: evaluation aborted with the following error message: 'cannot find attribute `services.headscale.settings.oidc.client_secret_file''
[1127]: https://github.com/juanfont/headscale/pull/1127
2023-03-08 11:26:45 +02:00
Jonas Heinrich
26e14e57af
nixos/networkd-dispatcher: add rules option
2023-03-08 10:20:47 +01:00
Felix Buehler
d10e69c86b
treewide: deprecate isNull
...
https://nixos.org/manual/nix/stable/language/builtins.html#builtins-isNull
2023-03-06 22:40:04 +01:00
SEIAROTg
5a4dc2128e
nixos/wireguard: fix mtu after switching netns.
...
mtu is set after switching netns and thus the new netns should be used.
2023-03-04 18:51:12 +00:00
Isa
8225d6db3a
smokeping: fix css and js symlink
2023-03-04 14:39:43 +01:00
K900
18f85de76d
nixos/firewall: assert that the kernel supports conntrack helper auto-loading
2023-03-04 10:53:47 +03:00
Arian van Putten
17ca3dd2a6
Merge pull request #217852 from justinas/teleport-12
...
teleport: 11.3.4 -> 12.0.2, reintroduce teleport_11
2023-03-02 11:18:24 +01:00
Yureka
55da71c10e
nixos/nftables: add checkRuleset option ( #216531 )
...
* nixos/nftables: add checkRuleset option
* lkl: 2022-05-18 -> 2023-01-27
2023-03-02 10:28:01 +01:00