Commit Graph

27694 Commits

Author SHA1 Message Date
Matthias Riße
63ef033992 nixos/paperless: set PAPERLESS_SECRET_KEY
If the PAPERLESS_SECRET_KEY environment variable is left unset
paperless-ngx defaults to a well-known value, which is insecure.

Co-authored-by: Erik Arvstedt <erik.arvstedt@gmail.com>
2023-10-27 21:11:01 +02:00
tomf
d18f272a39
Merge pull request #262408 from evandeaubl/master
nixos/tailscale: add openFirewall option
2023-10-28 05:19:41 +11:00
tomf
b42ca6b992
Merge pull request #260346 from l0b0/feat/shiori-webroot
nixos/shiori: add web root option
2023-10-28 04:25:40 +11:00
Emily
f4e67057e8
Merge pull request #263234 from CobaltCause/garage-statedirectory
nixos/garage: set `StateDirectory` if used at all
2023-10-27 17:26:39 +02:00
Herwig Hochleitner
a5e03844dc
Merge pull request #260091 from bendlas/fix-cdemu-service
cdemu: fix service setup
2023-10-27 14:46:57 +02:00
Alyssa Ross
44ff5dfca2 nixos/restic: remove s3CredentialsFile option
This has been deprecated since 2021, so all users should have seen the
warning and migrated by now.
2023-10-27 12:31:54 +00:00
K900
6f06066e94 nixos/containers: use latest stateVersion as example
Hopefully this way we don't confuse people into thinking you have to set it to 21.05.
2023-10-27 12:56:12 +03:00
K900
118694944d nixos/virtualbox-demo: use latest stateVersion
Just like we do for the other live images
2023-10-27 12:56:12 +03:00
Anthony Roussel
3a2d3bc3d8
nixos/goss: init 2023-10-27 08:00:48 +02:00
Pol Dellaiera
aaccf42b1b
Merge pull request #261432 from yayayayaka/snipe-it-convert-to-buildComposerProject
snipe-it: convert to buildComposerProject
2023-10-27 01:36:34 +02:00
nicoo
6e15779fda nixos/sudo: fix security.sudo.package 2023-10-26 19:00:25 +00:00
Peder Bergebakken Sundt
e8ff5952f6
Merge pull request #258558 from hmenke/c2FmZQ
c2FmZQ: init at 0.4.8
2023-10-26 20:33:51 +02:00
Martin Weinelt
33ddec070e
Merge pull request #262767 from andresilva/iproute-6.5.0-fix
iproute2: stateless configuration
2023-10-26 20:08:12 +02:00
Peder Bergebakken Sundt
adcaf3962d
Merge pull request #212087 from robryk/resticpaths
nixos/backups/restic: handle cases when both dynamicFileFrom and paths are set
2023-10-26 19:35:22 +02:00
Nick Cao
020adc777c
Merge pull request #263492 from aschleck/patch-1
nixos/networkd: fix typoed hairpin option name
2023-10-26 13:28:52 -04:00
April Schleck
13956f7f1f nixos/networkd: fix typoed hairpin option name
You can see in https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html that
this should be "HairPin" not "Hairpin". Using "Hairpin" results in

```
Oct 25 18:55:03 my-host systemd-networkd[843736]: /etc/systemd/network/10-bridge.network:11:
    Unknown key name 'Hairpin' in section 'Bridge', ignoring.
```
2023-10-26 10:26:04 -07:00
Will Fancher
63429f43ca
Merge pull request #263627 from colemickens/systemd-stage1-fix-dosfstools
nixos/fs/vfat: fix inclusion in systemd stage1
2023-10-26 12:56:33 -04:00
Yaya
d91c530a55
snipe-it: Convert to php.buildComposerPackage 2023-10-26 18:51:05 +02:00
Peder Bergebakken Sundt
4d6d43f444
Merge pull request #263460 from arcuru/rename-arcuru
treewide: rename handle/GH account patricksjackson to arcuru
2023-10-26 18:46:42 +02:00
Cole Mickens
8c7908acc8
nixos/fs/vfat: fix inclusion in systemd stage1 2023-10-26 18:44:02 +02:00
nikstur
b3c1d8c9ae nixos: add system.switch.enable flag
This flag allows the user to optionally exclude
switch-to-confguration.pl from toplevel.

This is interesting for appliance images where you don't want to re-build
the system. This flag is called `rebuildable` because the standard
interface to do this is `nixos-rebuild` which will not work anymore with
this change.
2023-10-26 17:47:35 +02:00
Henri Menke
e0cebb254e
nixos/c2fmzq-server: init module
Co-authored-by: Peder Bergebakken Sundt <pbsds@hotmail.com>
Co-authored-by: Anselm Schüler <mail@anselmschueler.com>
Co-authored-by: h7x4 <h7x4@nani.wtf>
2023-10-26 17:27:51 +02:00
Moritz Rickert
09794b1ee4 nixos/plausible: add invite only registrations 2023-10-26 16:54:25 +02:00
Martin Weinelt
b501176d83
nixos/wyoming-faster-whisper: update model enum
The medium model was never provided due to its extensive size.
2023-10-26 15:56:17 +02:00
Maximilian Bosch
15e17917fc
nixos/grafana-image-renderer: use Grafana's http_addr rather than localhost
Otherwise the callback won't work Grafana is configured to listen on a
different IP address by default.
2023-10-26 12:57:39 +02:00
K900
5438b83028
nixos/acme: fix assertion, add actual values to message (#263543) 2023-10-26 11:28:43 +02:00
Lassulus
95a366309a
Merge pull request #262731 from Lassulus/tmpfiles
nixos/systemd-tmpfiles: add settings option
2023-10-26 09:29:46 +01:00
nikstur
d300940637 nixos/network-interfaces: replace hostname and domain activationScript
The hostname is already set by systemd
https://www.freedesktop.org/software/systemd/man/latest/hostname.html#Hostname%20semantics

Create a separate service that registers the domainname.
2023-10-26 01:51:08 +02:00
nikstur
b5617e0575 nixos/mysql: replace activationScripts via preStart 2023-10-26 01:51:07 +02:00
nikstur
47ff8d20d7 nixos/duosec: replace activationScript
Replace with a separate systemd service.
2023-10-26 01:51:07 +02:00
nikstur
b16365b393 nixos/iscsi: replace activationScript
Move the functionality into preStart of the systemd service.
2023-10-26 01:51:07 +02:00
nikstur
256956e34d nixos/activation: link gcroot with tmpfiles instead of in activation 2023-10-26 01:44:21 +02:00
nikstur
6987ff3a4f nixos/spiped: replace activationScript via tmpfiles 2023-10-26 01:44:21 +02:00
nikstur
f18ff2ec0b nixos/mlmmj: replace activationScript 2023-10-26 01:44:21 +02:00
nikstur
d5a96d508b nixos/stargazer: replace activationScript via tmpfiles 2023-10-26 01:44:21 +02:00
nikstur
6c800013bf nixos/strongswan-swanctl: replace activationScripts via tmpfiles 2023-10-26 01:44:20 +02:00
nikstur
168b967b32 nixos/mattermost: replace activationScript via tmpfiles 2023-10-26 01:43:56 +02:00
André Silva
0f13df156e
iproute2: stateless configuration
0a0a8f12fa
2023-10-26 00:41:40 +01:00
Patrick Jackson
4a938cc665 treewide: rename handle/GH account patricksjackson to arcuru 2023-10-25 15:42:48 -07:00
nikstur
1b2b1364de nixos/ups: replace activationScript via tmpfiles 2023-10-25 23:44:01 +02:00
nikstur
88f63d1165 nixos/binfmt: replace activationScript via tmpfiles 2023-10-25 23:44:01 +02:00
nikstur
cb08d3dd72 nixos/nix-channel: replace activationScript via tmpfiles 2023-10-25 23:43:58 +02:00
Martin Weinelt
2bb79db3e2
Merge pull request #263315 from chayleaf/kea
kea: use separate runtime directories for each service
2023-10-25 22:29:31 +02:00
chayleaf
413011ddf4 kea: use separate runtime directories for each service
Kea may clean the runtime directory when starting (or maybe systemd does
it). I ran into this issue when restarting Kea after changing its
configuration, so I think the fact it normally doesn't clean it is a
race condition (it's cleaned on service start, and normally all Kea
services start at roughly the same time).
2023-10-26 02:51:43 +07:00
h7x4
8c2f678ff6 nixos/cardboard: use mkPackageOptionMD 2023-10-25 16:19:26 -03:00
Yureka
8b37735e0e
nixos/acme: add s3Bucket option (#262806) 2023-10-25 21:08:05 +02:00
Lin Jian
2a27bf588f
Merge pull request #261733 from nbdd0121/hass
nixos/home-assistant: use runCommandLocal for configuration.yaml
2023-10-26 02:23:21 +08:00
Anderson Torres
6b2f0db256 nixos/cardboard: init
Copy-inspired from river.
2023-10-25 13:26:38 -03:00
Mario Rodas
84a877ed30
Merge pull request #261722 from anthonyroussel/ssm-agent-rename
amazon-ssm-agent: rename from ssm-agent
2023-10-25 04:18:24 -05:00
Stig
a99cbd99e1
Merge pull request #255715 from TomaSajt/lanraragi
lanraragi: init at 0.8.90
2023-10-25 10:54:27 +02:00
Alyssa Ross
a3ba049545 nixos/nixpkgs.nix: use less confusing example systems
system and config shouldn't both be specified — each will be filled in
based on the other when the system is elaborated.
2023-10-25 08:33:14 +00:00
digital
a6253e6b12
nixos/syncthing: support syncthing gui and api over unix sockets (#247343) 2023-10-25 09:18:42 +02:00
Rebecca Kelly
855223de8f nixos/munin: fix internAndFixPlugins mangling store paths
The previous implementation works fine when the plugins do not already
contain store paths, which is the case for stuff from munin-contrib.
However, for plugins generated via nix (e.g. with writeShellScriptBin),
it tries to fix the paths in it which already point to the nix store,
ruining everything.
2023-10-25 09:00:45 +02:00
Rebecca Kelly
0f7fb5cdcf nixos/munin: fix key-context error when using extraAutoPlugins
If extraAutoPlugins contains values that carry context (e.g. it comes
from a flake input), the keys generated from them using baseNameOf
inherit that context and the config doesn't compile.

This doesn't actually need to be an attrset anyways, so a bit of
internal refactoring lets us fix this without changing the visible API.
2023-10-25 09:00:45 +02:00
Charles Hall
f5dcc015b9
nixos/garage: set StateDirectory if used at all
Changes the `mkIf` to trigger if *either* `data_dir`/`metadata_dir` use
`/var/lib/garage`, not only if both do. This is useful to me because I
want to store metadata in `/var/lib/garage` but I also want to store
data in a different mountpoint (via `data_dir` and `ReadWritePaths`).
2023-10-24 22:03:21 -07:00
TomaSajt
8e18ff0c24
nixos/lanraragi: init 2023-10-25 01:14:59 +02:00
nikstur
a8f50f9919 nixos/activation: remove specialfs activationScript
The stage-2-init.sh script has the same functionality hardcoded so we do
not need it in the activationScript again.
2023-10-25 00:48:37 +02:00
nikstur
59e3726755 nixos/activation: replace var activationScript via tmpfiles 2023-10-25 00:48:37 +02:00
Julian Stecklina
3c1c4b65e9 nixos/timesyncd: replace activationScript via ExecPreStart 2023-10-25 00:48:35 +02:00
nikstur
f827f7ad7b nixos/wrappers: replace activationScript
Create the wrappers via a separate systemd service.
2023-10-24 23:51:37 +02:00
Timothy DeHerrera
f06b975898
Merge pull request #262135 from Kiskae/nvidia-udev-fix
nixos/nvidia: partially revert #181674
2023-10-24 13:58:22 -06:00
Janik
e46b352ac4
Merge pull request #231065 from yu-re-ka/fnm-advanced-module
nixos/fastnetmon-advanced: init
2023-10-24 21:43:26 +02:00
Kanashimia
952bb841ae
Revert "nixos/sway: add enableRealtime option" 2023-10-24 21:38:32 +03:00
Emily
702853c61a
Merge pull request #263046 from emilylange/nixos-forgejo
nixosTests.forgejo: test backup/dump service; nixos/forgejo: pass {env}`GIT_PROTOCOL` via ssh to forgejo; nixosTests.forgejo: test git wire protocol version
2023-10-24 19:40:20 +02:00
K900
d0d6219c42
Merge pull request #262265 from chayleaf/akkoma-extra
nixos/akkoma: add services.akkoma.dist.extraFlags
2023-10-24 18:30:24 +03:00
Maximilian Bosch
e4c369b443
Merge pull request #263146 from globin/globin-maintainership
treewide: update globin's maintainership
2023-10-24 16:45:43 +02:00
Tom Fitzhenry
9e7c877de7 nixos/hostapd: remove managementFrameProtection 2023-10-24 23:54:44 +11:00
Tom Fitzhenry
9f7335d449 nixos/hostapd: document that legacy example should have optional MFP
Thinkpad x230, for example, is unable to connect to the legacy example
if managementFrameProtection is required.
2023-10-24 23:46:57 +11:00
Robert Hensing
5dfc78a8ad
Merge pull request #262021 from Enzime/linux-builder-cross
linux-builder: support `x86_64-linux` on `aarch64`
2023-10-24 14:34:29 +02:00
Michael Hoang
ab1f45f3d3 linux-builder: support x86_64-linux on aarch64 2023-10-24 13:35:37 +02:00
Robin Gloster
e5d552f5b9
treewide: update globin's maintainership 2023-10-24 13:09:45 +02:00
emilylange
402b5c67a8
nixos/forgejo: pass {env}GIT_PROTOCOL via ssh to forgejo
when using the host's openssh service (not the builtin golang one).

This enables the use of the much faster and more efficient wire protocol
version 2.
See https://git-scm.com/docs/protocol-v2
2023-10-24 03:27:20 +02:00
Maciej Krüger
1ecbbb6e3f
Merge pull request #260595 from adamcstephens/lxc/squashfs
lxc-container: add squashfs image support and release output
2023-10-24 02:06:36 +02:00
Will Fancher
99a47a5e35 systemd-stage-1: Enable more encrypted installer tests 2023-10-23 17:40:34 -04:00
Janik
a5b74d45bd
Merge pull request #262978 from JulienMalka/ferretdb-docs
nixos/ferretdb: fix broken link to documentation
2023-10-23 22:53:21 +02:00
Yureka
bf5f01ee52 nixos/fastnetmon-advanced: init 2023-10-23 22:51:19 +02:00
Domen Kožar
4e95cbe36e
Merge pull request #246081 from therealr5/bacula-fix
nixos/bacula: fix postgresql config and remove unneeded quotation marks
2023-10-23 21:42:11 +01:00
Lorenz Leutgeb
cc6c2d32f2
rosenpass: refactor, add module and test (#254813) 2023-10-23 19:29:30 +02:00
Julien Malka
5237796f2b nixos/ferretdb: fix broken link to documentation 2023-10-23 16:48:31 +00:00
Maximilian Bosch
3ad1ebe9ff
Merge pull request #258047 from mweinelt/knot-exporter
prometheus-knot-exporter: 2021-08-21 -> 3.3.1; python310Packages.libknot: init at 3.3.1
2023-10-23 15:01:06 +02:00
Martin Weinelt
589ccfdac1
nixos/prometheus-exporters/knot: update for new exporter
The new exporter has proper console scripts definition, that sets up
another executable name.

The package now also shells out to pidof, which is why we require procps
in the unit PATH.
2023-10-23 13:19:52 +02:00
Ryan Lahfa
d1ee91c22d
Merge pull request #262796 from SuperSandro2000/patch-1
nixos/nginx: document implicit default port 80
2023-10-23 11:04:54 +01:00
Martin Weinelt
6ddb74a81a
Merge pull request #262542 from yu-re-ka/matrix-synapse-opentracing
matrix-synapse: remove opentracing optional dependencies
2023-10-23 11:22:25 +02:00
Ryan Lahfa
b9337215cd
Merge pull request #229035 from NixOS/qemu-vm/tpm
qemu-vm: support TPM usecases
2023-10-23 10:10:27 +01:00
K900
a52abd4ccb
Merge pull request #262623 from K900/continued-firefox-cleanups
firefox: start killing all the per-extension options
2023-10-23 10:25:37 +03:00
Martin Weinelt
0e4b63f713 Revert "nixos/systemd-boot: Avoid remote mypy executions"
This reverts commit ea0dcd0ae1.
2023-10-23 03:38:13 +02:00
Will Fancher
0425c4de6d systemd-stage-1: bcachefs decryption 2023-10-22 20:07:55 -04:00
Arthur Gautier
08f4fe2087 qemu-vm: stop the swtpm once qemu stops
The idea is to run an async process waiting for swtpm
and we have to ensure that `FD_CLOEXEC` is cleared on this process'
stdin file descriptor, we use `fdflags` for this, a loadable builtin in
Bash ≥ 5.

The async process when exited will terminate `swtpm`, we bind the
termination of the async process to the termination of QEMU by virtue of
having `qemu` exec in that Bash script.

Signed-off-by: Arthur Gautier <baloo@superbaloo.net>
Co-authored-by: Raito Bezarius <masterancpp@gmail.com>
2023-10-23 01:02:24 +02:00
Atemu
e0417d79ff
Merge pull request #262574 from Atemu/installer-no-powersave-governor
installer/nixos-generate-config: don't set powersave cpuFreqGovernor
2023-10-23 00:59:19 +02:00
Martin Weinelt
3244b1eaef
Merge pull request #262678 from plumelo/feat/esphome-proc-subset
esphome: remove ProcSubset from serviceConfig
2023-10-23 00:46:21 +02:00
DavHau
cae154a67e nixos/systemd-tmpfiles: add settings option 2023-10-23 00:34:23 +02:00
Anthony Roussel
ccf080ee05
amazon-ssm-agent: rename from ssm-agent 2023-10-22 22:04:09 +02:00
Sandro
f4d631c3d1
nixos/nginx: document implicit default port 80 2023-10-22 21:32:50 +02:00
Emily
a61c6b478d
Merge pull request #262741 from emilylange/nixos-forgejo-postgres15
nixos/forgejo: work around permissions error on `postgresql_15`
2023-10-22 21:04:41 +02:00
Will Fancher
13f325005c
Merge pull request #262740 from ElvishJerricco/systemd-stage-1-improve-udhcpc-assertion
systemd-stage-1: Improve udhcpc assertion
2023-10-22 13:46:38 -04:00
Robert Schütz
80f59b1626
Merge pull request #261135 from dotlambda/nixos-iptsd-init
nixos/iptsd: init
2023-10-22 09:48:37 -07:00
Artturi
b2426befa0
Merge pull request #259784 from dmytrokyrychuk/init-spice-autorandr
spice-autorandr: init at 0.0.2
2023-10-22 18:52:10 +03:00
Martin Weinelt
410ccec99c
Merge pull request #261931 from mweinelt/homeassistant-satellite
homeassistant-satellite: init at 2.3.0
2023-10-22 16:53:03 +02:00
K900
60421a1622 firefox: start killing all the per-extension options 2023-10-22 17:13:42 +03:00
Meghea Iulian
bff068e514
esphome: remove ProcSubset from serviceConfig
Remove ProcSubset from esphome serviceConfig because esphome/bwrap needs to
access it.
According to
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProcSubset=
ProcSubset isn't even recommended for most programs.
Fixes #262674
2023-10-22 17:09:00 +03:00
Raito Bezarius
25872524f0 nixos/qemu-vm: add virtualisation.tpm for running TPM in QEMU infrastructure 2023-10-22 16:01:37 +02:00
Dmytro Kyrychuk
d147d7feed nixos/spice-autorandr: init 2023-10-22 13:45:56 +00:00
emilylange
b8585a119c
nixos/forgejo: work around permissions error on postgresql_15
From `postgresql_15`'s release notes:
> PostgreSQL 15 also revokes the CREATE permission from all users except
a database owner from the public (or default) schema.

https://www.postgresql.org/about/news/postgresql-15-released-2526/

This directly affects `services.postgresql.ensureUsers` in NixOS,
leading to
> permission denied for schema public

`postgresql_15` is now the default for stateVersion `23.11`/`unstable`.

So until this is resolved globally, we work around this issue.
2023-10-22 15:25:34 +02:00
Will Fancher
1a6c2e4837 systemd-stage-1: Improve udhcpc assertion 2023-10-22 09:12:34 -04:00
Yureka
0288685a4d nixos/matrix-synapse: remove opentracing options 2023-10-22 14:15:39 +02:00
Will Fancher
a662970807
Merge pull request #262167 from jakubgs/systemd/fix-autofs-config
systemd: rename required AUTOFS4_FS to AUTOFS_FS
2023-10-22 08:08:11 -04:00
Maciej Krüger
49bc1a76e0
Merge pull request #261692 from josephst/fix-lxc-container-bootloader
nixos/lxc-container: use absolute path for ln in install-lxc-sbin-init.sh
2023-10-22 13:47:14 +02:00
nikstur
9b20e22b88
Merge pull request #262573 from ElvishJerricco/systemd-repart-stage-1-assertion
nixos/systemd-repart: Add assertion requiring systemd in initrd
2023-10-22 11:53:59 +02:00
Ryan Lahfa
efccbbab5b
Merge pull request #258994 from lorenzleutgeb/msr
nixos/hardware/cpu/x86/msr: init
2023-10-22 10:24:12 +01:00
Lin Jian
23203f8e12
Merge pull request #262666 from SuperSandro2000/patch-1
nixos/acme: fix upstream documentation link
2023-10-22 17:13:26 +08:00
Lin Jian
c132df63df
Merge pull request #250792 from ckiee/init-rkvm
{,nixos/}rkvm: init
2023-10-22 17:11:12 +08:00
Lorenz Leutgeb
62c63f746a nixos/undervolt: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
84803308bf nixos/xmrig: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
b70a63a910 nixos/tlp: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
b893b67028 nixos/throttled: Use hardware.cpu.x86.msr 2023-10-22 09:40:59 +02:00
Lorenz Leutgeb
a98c933412 nixos/hardware/cpu/intel/msr: init 2023-10-22 09:40:59 +02:00
Sandro
4a97d6181c
nixos/acme: fix upstream documentation link 2023-10-22 05:47:45 +02:00
Joseph Stahl
d156ab6c9c nixos/lxc-container: use absolute path for ln in install-lxc-sbin-init.sh
Recent change to nixos-rebuild (https://github.com/NixOS/nixpkgs/pull/258571)
adds systemd-run, which brings with it a cleaner environment
(ie $PATH not available).
Workaround: use absolute path for ln to avoid command-not-found error
2023-10-22 03:18:15 +03:00
github-actions[bot]
1cf369a0dd
Merge master into staging-next 2023-10-22 00:02:31 +00:00
Peder Bergebakken Sundt
d2af1eb6ff
Merge pull request #256449 from illustris/hadoop
hadoop: 3.3.5 -> 3.3.6, build container executor from source
2023-10-22 01:40:19 +02:00
K900
c92fb2994f
Merge pull request #262617 from aij/fix/programs.firefox.enable
nixos/firefox: Fix package references
2023-10-22 01:22:16 +03:00
Ivan Jager
57436cf549 nixos/firefox: Fix package references
https://github.com/NixOS/nixpkgs/pull/262017 removed `with pkgs;` so setting
`programs.firefox.enable = true` resulted in evaluation errors like
`error: undefined variable 'ff2mpv'`

This still doesn't fix https://github.com/NixOS/nixpkgs/issues/262600
2023-10-21 16:53:32 -05:00
Rishi Desai
d1df9108ba nixos/fanout: init fanout oneshot module 2023-10-21 17:31:14 -03:00
Janik
abca224ce4
Merge pull request #242467 from dadada/dev/dadada/init-nixos-soft-serve
nixos/soft-serve: init
2023-10-21 21:58:47 +02:00
Robert Hensing
0987120ad2
Merge pull request #262582 from hercules-ci/nixos-test-rename-store-image
nixos/qemu-vm: Rename nixos-disk-image -> nix-store-image
2023-10-21 20:46:23 +02:00
Will Fancher
22325ce016 systemd-stage-1: Support for user shells 2023-10-21 13:24:16 -04:00
Alyssa Ross
83b8726e5f
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/python-modules/velbus-aio/default.nix
2023-10-21 17:24:16 +00:00
Robert Hensing
7096340f9e nixos/qemu-vm: Rename nixos-disk-image -> nix-store-image
For the image that's actually a store image only.
Helps with visibility. The name "nixos-disk-image" has no special
significance, by grepping nixpkgs.
2023-10-21 19:13:58 +02:00
nikstur
95e6dfd5d9
Merge pull request #260275 from thillux/jitterentropy-rngd
jitterentropy-rngd: init at 1.2.8
2023-10-21 19:10:51 +02:00
Ryan Lahfa
e6ade691a5
Merge pull request #259347 from ElvishJerricco/systemd-stage-1-zfs-sysusr-dependency
systemd 254: ZFS /usr fix with systemd-stage-1
2023-10-21 18:04:13 +01:00
Will Fancher
b57c850790 nixos/systemd-repart: Add assertion requiring systemd in initrd 2023-10-21 12:29:34 -04:00
Atemu
fb602e5608 installer/nixos-generate-config: don't set powersave cpuFreqGovernor
This script would always "detect" the "powersave" governor as it is available on
practically all CPUs while the "ondemand" governor is only available on some old
CPUs.

IME the "powersave" governor barely provides any power savings but introduces
massive performance deficits, including noticable stuttering. This is not the
default experience we should offer users, even for those who use laptops.

Use the kernel default (currently "performance", CPU makers may change it in
future) instead.
2023-10-21 18:29:25 +02:00
Ryan Lahfa
c5442c247f
Merge pull request #257262 from dongcarl/2023-09-nginx-fixes
nixos/nginx: Allow empty port for listen directive (for unix socket)
2023-10-21 17:26:57 +01:00
dadada
77f7b5a3e5
nixos/soft-serve: init
This adds a NixOS module for Soft Serve, a tasty, self-hostable Git
server for the command line. The module has a test that checks some
basic things like creating users, creating a repo and cloning it.

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-10-21 17:51:42 +02:00
Atemu
5a137cf607 nixos/hardware: use mkEnableOption
Also made the default of hardware.wirelessRegulatoryDatabase part of the option
declaration, not the implementation.
2023-10-21 17:30:36 +02:00
Ryan Lahfa
0b0440e028
Merge pull request #254647 from Janik-Haag/networkManagerEnsureProfiles
nixos/networkmanager: add declarative profiles
2023-10-21 15:06:41 +01:00
github-actions[bot]
0c34dab04f
Merge master into staging-next 2023-10-21 12:01:08 +00:00
Sandro Jäckel
b11e3eb7d1 nixos/asf: update hardening options to match upstream 2023-10-21 13:50:05 +02:00
nikstur
6958acea7e
Merge pull request #262179 from ElvishJerricco/systemd-stage-1-specific-fs-packages
systemd-stage-1: Use specific fs packages
2023-10-21 13:25:42 +02:00
K900
186cd78231
Merge pull request #262017 from K900/firefox-preserve-old-args
nixos/firefox: preserve old wrapper args when overriding
2023-10-21 11:46:40 +03:00
github-actions[bot]
1c4183d88a
Merge master into staging-next 2023-10-21 06:00:57 +00:00
Sandro Jäckel
7f94b9e9c6
nixos/fail2ban: change bantime default to not be config breaking 2023-10-21 02:38:29 +02:00
github-actions[bot]
fb3e2499b7
Merge master into staging-next 2023-10-21 00:02:17 +00:00
Evan Deaubl
9407ed628d nixos/tailscale: add openFirewall option 2023-10-20 15:57:40 -07:00
Janik H
a316aa58d9
nixos/networkmanager: add declarative profiles 2023-10-21 00:20:36 +02:00
Bjørn Forsman
5c78e5b4aa nixos/ddclient: simplify with lib.getExe 2023-10-20 23:49:18 +02:00
Bjørn Forsman
8a8ec36615 Revert "ddclient: remove package and module on upstream maintainer request"
This reverts commit d35df28f65.

Upstream ddclient has new maintainers and made a new release (update in
next commit(s)).
2023-10-20 23:49:18 +02:00
Dmitry Kalinkin
6392f18258
Merge pull request #262351 from h7x4/remove-nix-exec-bits
treewide: remove execute bit for non-executable `*.nix` files
2023-10-20 14:45:16 -04:00
github-actions[bot]
cfc75eec46
Merge master into staging-next 2023-10-20 18:00:54 +00:00
h7x4
e6321d2788
treewide: remove execute bit for non-executable *.nix files 2023-10-20 19:55:39 +02:00
Vladimír Čunát
9320d9e7bc
Merge #260527: Mailman fixes
...into staging-next
2023-10-20 18:56:03 +02:00
Martin Weinelt
95856e526e
nixos/homeassistant-satellite: init 2023-10-20 17:26:10 +02:00
Bjørn Forsman
142074c2a8 nixos: fix bad mkEnableOption descriptions
Fix descriptions that don't account for (1) the "Whether to enable"
prefix or (2) the automatically added trailing dot.
2023-10-20 16:22:40 +01:00
Pol Dellaiera
fdecb1dabf
Merge pull request #244941 from h7x4/reduce-options-in-hedgedoc-module
nixos/hedgedoc: refactor to reduce option count
2023-10-20 16:07:16 +02:00
nikstur
feb3b2522f
Merge pull request #262292 from helsinki-systems/feat/stc-no-filter-units
nixos/switch-to-configuration: Allow not filtering units
2023-10-20 16:04:32 +02:00
Janne Heß
a1012b2160
nixos/switch-to-configuration: Allow not filtering units 2023-10-20 15:45:43 +02:00
github-actions[bot]
d7e9da1742
Merge master into staging-next 2023-10-20 12:01:24 +00:00
chayleaf
e2b6ff8384 nixos/akkoma: add services.akkoma.dist.extraFlags
This allows configuring Erlang flags
2023-10-20 17:34:14 +07:00
Cabia Rangris
585a8b12b1
Merge pull request #258853 from SuperSandro2000/dex
nixos/dex: fix start with latest systemd update
2023-10-20 09:59:21 +00:00
Arian van Putten
0257e9f13a
Merge pull request #261449 from arianvp/growpart-online
nixos/grow-partition: Resize partition online instead of in initrd
2023-10-20 09:25:31 +00:00
nikstur
f0154409a1 nixos/nix-daemon: remove activationScript
The activationScript does not seem to be necessary anymore as the paths
are created anyways.
2023-10-20 10:26:32 +02:00
Markus Theil
e98a8367ec jitterentropy-rngd: init at 1.2.8
Add jitterentropy-rngd, a tool similar to rng-tools.
While not necessarily needed, it is useful for those
who want to strengthen their kernel entropy input pool
by periodic insertion of an independent source.

The entropy source is a NIST SP800-90B compliant
non-physical true RNG source on most systems.
See the jitterentropy documentation for details
(http://chronox.de/jent/doc/CPU-Jitter-NPTRNG.pdf).

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2023-10-20 10:04:11 +02:00
Artturin
3342d1a9a9 Merge branch 'master' into staging-next 2023-10-20 09:29:36 +03:00
Fabián Heredia Montiel
6b29b95a75
Merge pull request #261975 from R-VdP/rvdp/fish_status_subcommands
fish: use the subcommand style for the status command
2023-10-19 22:01:56 -06:00
Will Fancher
18013cc71e systemd-stage-1: Use specific fs packages 2023-10-19 21:13:22 -04:00
Jakub Sokołowski
26c4e35cea
systemd: rename required AUTOFS4_FS to AUTOFS_FS
The `AUTOFS4_FS` name appears to be a legacy naming stub:

>Ok, I ran the script, and also decided that we might as well remove
>the AUTOFS4 legacy naming stub entry by now.
>
>It has been five years, and people will have either picked up the new
>name with 'make oldconfig', or they just don't use 'make oldconfig' at
>all.

https://lore.kernel.org/lkml/CAHk-=wgK9-Tx4BxYMrc0pg==mcaz3cjWF6-CBwVpM_BZAmf4JQ@mail.gmail.com/#r

That has been remove in 6.6 kernel and results in a failure:
```
error:
       Failed assertions:
       - CONFIG_AUTOFS4_FS is not enabled!
```

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-10-20 01:44:13 +02:00
Martin Weinelt
d042a29613
Merge pull request #253764 from linj-fork/fix-ping-wrapper
nixos/network-interfaces: stop wrapping ping with cap_net_raw
2023-10-20 00:57:55 +02:00
Thiago Kenji Okada
bcdd2da2dc
Merge pull request #262051 from thiagokokada/qt-module-fixes
nixos/qt: multiple fixes
2023-10-19 23:34:24 +01:00
Emily
4d0db3bfee
Merge pull request #259254 from Tom-Hubrecht/nixos-outline
nixos/outline: Add the possibility of using local storage instead of S3
2023-10-20 00:10:40 +02:00
Martin Weinelt
bb8f272106
nixos/wyoming-openwakeword: allow access to /proc/cpuinfo
Required somewhere in tensorflow, likely for CPU feature discovery.
2023-10-19 23:11:14 +02:00
Thiago Kenji Okada
38623a8003 nixos/qt: improve module documentation 2023-10-19 21:54:22 +01:00
Thiago Kenji Okada
39250f5df5 nixos/qt: multiple fixes
- Removal of top-level `with lib`
- Allow usage of module without setting `platformTheme`, so we can set
  the QT_PLUGIN_PATH/QML2_IMPORT_PATH paths without theming
- Add support for kvantum and some other styles
- Add myself as maintainer
2023-10-19 21:54:22 +01:00
nicoo
ea0dcd0ae1 nixos/systemd-boot: Avoid remote mypy executions 2023-10-19 20:58:52 +01:00
Kiskae
e24d43a18c nixos/nvidia: partially revert #181674
nvidia has changed the name of the chardev in the latest beta driver.
Match the behavior of `nvidia-modprobe` and hardcode the major number.
2023-10-19 21:57:35 +02:00
github-actions[bot]
0bcaa2f556
Merge master into staging-next 2023-10-19 18:00:54 +00:00
Thiago Kenji Okada
24a1589ebf
Merge pull request #251996 from surfaceflinger/microbin
microbin: add service
2023-10-19 18:36:02 +01:00
Thiago Kenji Okada
383389d086
Merge pull request #254582 from oluceps/dae-fix-overr
nixos/dae: fix override existed config issue
2023-10-19 18:34:30 +01:00
Bjørn Forsman
cc7791cfd9 nixos/lighttpd: add reload support
Allow reloading the webserver, which is useful when e.g there are new
certificates available that we want lighttpd to use, but don't want to
completely shut down the server.
2023-10-19 19:23:04 +02:00
Arian van Putten
8caf3dcf34
Merge pull request #261505 from philiptaron/wlanConfig
systemd.network.netdev: add support for WLAN devices
2023-10-19 16:33:30 +00:00
Christoph Heiss
a077b7fadb
openssh: add {Allow,Deny}{Users,Groups} settings
`settingsFormat` unfortunaly needed a bit of a rework, see also
discussion in #227442.

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-10-19 18:30:51 +02:00
Tom Hubrecht
be68df309d nixos/outline: Add the possibility of using local storage instead of S3 2023-10-19 17:58:27 +02:00
Arian van Putten
80a578580f nixos/grow-partition: Resize partition online instead of in initrd
There's no reason to do this in initrd. Partitions can be resized online.
We just have to make sure it happens before we resize the file system.

This also makes grow-partition work with systemd-initrd
2023-10-19 12:34:27 +00:00
github-actions[bot]
25bcfa6c2f
Merge master into staging-next 2023-10-19 12:01:00 +00:00
Robert Hensing
4b5b27c7ca
Merge pull request #260770 from hercules-ci/darwin-builder-observable
`darwin.linux-builder`: Make more observable
2023-10-19 13:26:22 +02:00
K900
23704cce1f nixos/firefox: preserve old wrapper args when overriding
Also some drive-by cleanups
2023-10-19 13:10:22 +03:00
r-vdp
97e3336a5b
fish: use the subcommand style for the status command
The flag style has been deprecated and will eventually be removed.
2023-10-19 08:40:56 +02:00
github-actions[bot]
4b9cf6ff6e
Merge master into staging-next 2023-10-19 00:02:21 +00:00
the-furry-hubofeverything
ac30ac808a nixos/virt-manager: init 2023-10-18 21:02:37 +02:00
Maximilian Bosch
2ee12a93de treewide: remove myself (ma27) from a few packages
It's time again, I guess :>

Main motivation is to stop being pinged about software that I maintained
for work now that I'm about to switch jobs. There's no point in pinging
me to review/test updates or to debug issues in e.g. the Atlassian stack
or on mailman since I use neither personally.

But there's also a bunch of other stuff that I stopped using personally. While
at it I realized that I'm still maintainer of a few tests & modules related to
packages I stopped maintaining in the past already.
2023-10-18 15:47:20 -03:00
github-actions[bot]
de8dd334ab
Merge master into staging-next 2023-10-18 18:01:05 +00:00
Maximilian Bosch
bbcc14f34b
Merge pull request #261816 from Ma27/regreet-cage-args
nixos/regreet: make `cage(1)` args configurable
2023-10-18 19:44:44 +02:00
Florian Klink
770d1c5bcd nixos/garage: drop default package
This gives better control over what package of garage is running, and
makes upgrades a conscious decision.
2023-10-18 19:20:03 +02:00
Florian Klink
5b80b755aa nixos/garage: nixpkgs-fmt 2023-10-18 19:20:03 +02:00
Adrian Pistol
1916a0cb9e syslogng: clean up build 2023-10-18 17:51:04 +02:00
Maximilian Bosch
89ec004f59
nixos/regreet: make cage(1) args configurable
In my case I'd like to be able to add `-m last` to `cage` to make sure
that the login form from regreet isn't displayed half on my external
monitor and half on my laptop screen, but on the last connected monitor
only.

That's basically the issue described in #226586, though it's not a
proper fix since the login form is shown on one monitor only.
2023-10-18 14:01:32 +02:00
github-actions[bot]
8e8fc73296
Merge master into staging-next 2023-10-18 12:01:25 +00:00
Pol Dellaiera
2898e563b4
Merge pull request #261772 from NixOS/projecteur/add-nixos-module-erratum
nixos/modules: add missing projecteur entry
2023-10-18 10:06:46 +02:00
Pol Dellaiera
ace2bcc2d2
nixos/modules: add missing projecteur entry 2023-10-18 09:09:15 +02:00
ckie
f3ad4def37
nixos/rkvm: init
Co-authored-by: Lin Jian <me@linj.tech>
2023-10-18 06:21:40 +03:00
github-actions[bot]
35eee590be
Merge master into staging-next 2023-10-18 00:02:17 +00:00