Joachim Fasting
d6575c96fb
transmission service: robust lib references in apparmor profile
2016-05-22 20:01:29 +02:00
Arnold Krille
bf0e745597
unbound service: do not initialize root cert
...
When enableRootTrustAnchor is set to false, there is really no point in
initializing the root key before starting unbound.
Fixes #15605 .
2016-05-21 22:27:27 +02:00
Ben Smith
3a1beb6347
redis service: add firewall and VM overcommit options
...
- Add vm.over_commit setting for background saving
- Add openFirewall setting
Closes #10193
2016-05-21 18:17:36 +02:00
Bjørn Forsman
c7db50e24f
Revert "network-manager: multiple outputs"
...
This reverts commit c25907d072
.
I think this commit broke the NixOS service for NetworkManager. At least
with this, and the two previous reverts, everything is back to normal.
(With multiple-outputs split, it would have reduced the closure size by
3 MiB.)
2016-05-21 13:12:44 +02:00
Bjørn Forsman
167272f01d
Revert "networkmanager service: fixup"
...
This reverts commit 7ac1ef05fa
.
One of a few reverts needed to unbreak networkmanager NixOS service
since the multiple-output split (to save 3 MiB of closure size).
2016-05-21 13:12:44 +02:00
Bjørn Forsman
d1463ac750
Revert "nixos/networkmanager: fix syntax error"
...
This reverts commit 2875293615
.
One of a few reverts needed to unbreak networkmanager NixOS service
since the multiple-output split (to save 3 MiB of closure size).
2016-05-21 13:12:44 +02:00
Nikolay Amiantov
53b8852498
initrd-ssh service: add assertions for host keys
2016-05-20 23:34:28 +03:00
Joachim Fasting
d12e9c1a30
Merge pull request #15365 from bendlas/fix-gnome-keyring
...
gnome-keyring: add gcr dependency to service
2016-05-20 15:18:11 +02:00
Domen Kožar
2a3c0ca3d5
command-not-found: disable module until it's fixed again
...
See https://github.com/NixOS/nixos-channel-scripts/issues/4
2016-05-19 20:02:06 +01:00
Tuomas Tynkkynen
2132c86c45
nixos/dbus: Reference correct output of 'dbus'
2016-05-18 22:58:00 +03:00
Peter Hoeg
60025e3524
tmux module: add additional variables for configuring tmux
...
Also wraps the tmux binary, so that sockets are stored under /run
2016-05-18 19:24:03 +08:00
Joachim Fasting
cf5e07ca5b
Merge pull request #15471 from telotortium/subsonic
...
subsonic: change NixOS home directory config
2016-05-18 04:01:32 +02:00
Robert Irelan
cf14dad167
Add script to move /var/subsonic to cfg.home
2016-05-16 14:42:22 -07:00
Robert Irelan
40d4f6df81
Move from ExecStart{,Pre} to systemd.nix attributes
2016-05-16 14:08:32 -07:00
Ricardo Ardissone
6067eddf83
minetest-server module: fix executable path
2016-05-15 18:46:45 -03:00
Joachim Fasting
3ad0276e7e
Merge pull request #15435 from mayflower/nzbget_no_config
...
nzbget: 16.4 -> 17.0-r1686 and nzbget service
2016-05-15 14:05:31 +02:00
Joachim Fasting
fbdb82cc17
Merge pull request #15473 from romildo/fix.xfce4-screenshooter
...
xfce4: rename application xfce4screenshooter to xfce4-screenshooter
2016-05-15 12:17:32 +02:00
José Romildo Malaquias
44d347aba5
xfce4: rename application xfce4screenshooter to xfce4-screenshooter
2016-05-15 06:56:46 -03:00
Joachim Fasting
b740e046ab
dnscrypt-proxy service: robust lib references in apparmor profile
...
Use getLib to avoid future problems caused by re-ordering outputs.
2016-05-15 11:55:17 +02:00
Rok Garbas
03b115f8e0
nixos/i3lock-color: added to pam
2016-05-15 07:47:31 +02:00
Robert Irelan
a712d8ff0b
subsonic: change NixOS home directory config
...
Move Subsonic state directory from `/var/subsonic` to
`/var/lib/subsonic`, since the general convention is for each
application to put its state directory there.
Also, automatically set the home directory of the `subsonic` user to the
value of `config.services.subsonic.home`, rather than setting it to a
value hardcoded in the module. This keeps the home directory of the
`subsonic` user and the state directory for the Subsonic application in
sync.
2016-05-14 14:13:30 -07:00
Tuomas Tynkkynen
0561e14c3b
bind: Split into multiple outputs
...
A patch is needed to make bind not print its configure flags on
'named -V'.
2016-05-14 22:12:59 +03:00
Joachim Fasting
4e9833d9e8
Merge pull request #15384 from Shados/fix-preshell-terminfo
...
nixos: ensure TERMINFO is set before user shells are run
2016-05-14 06:21:25 +02:00
Nikolay Amiantov
cd5dd9f82e
udev service: fix packages' paths
2016-05-14 05:12:52 +03:00
Nikolay Amiantov
5c39f28a9f
Merge pull request #15024 from abbradar/xfce-no-desktop
...
xfce service: add noDesktop option
2016-05-14 04:55:27 +03:00
Tristan Helmich
36f8b3cad1
nzbget: 16.4 -> 17.0-r1686 and nzbget service
2016-05-13 18:56:39 +02:00
Franz Pletz
939c80c26f
jenkins module: Check for 200 & 403 response codes
...
The new jenkins version shows a setup wizard on first startup that will
throw a 403 HTTP response code instead of 200.
2016-05-13 17:45:39 +02:00
Vladimír Čunát
3e387c3e00
Merge branch 'staging'
...
Darwin isn't in a perfect state, in particular its bootstrap tools won't
build which will block nixpkgs channel. But on the whole it seems
acceptable.
2016-05-13 10:14:53 +02:00
Franz Pletz
df8958435e
grafana: 2.6.0 -> 3.0.1 ( #15395 )
...
* grafana: 2.6.0 -> 3.0.1
* grafana module: Fix anonymous auth & add analytics config
2016-05-13 02:28:24 +02:00
Данило Глинський (Danylo Hlynskyi)
bc2fe9f2cd
typo in authorizedKeysFiles
2016-05-12 18:01:17 +03:00
Joachim Fasting
639dcffa0b
Merge pull request #15403 from Shados/maintain-teamspeak-server
...
teamspeak-server package & module maintenance
2016-05-12 13:01:38 +02:00
Alexei Robyn
11b0972544
teamspeak-server module: Create data directory by
...
leveraging users.users.<user>.createHome instead of a preStart script.
preStart script is still required to ensure proper creation of logging
directory.
2016-05-12 20:49:17 +10:00
Domen Kožar
25e3c091a0
Revert "nixos/nat: Allow nat without an externalInterface"
...
This reverts commit 431a98b12b
.
Breaks nixos tests: http://hydra.nixos.org/build/35538207
2016-05-12 11:04:06 +01:00
Joachim Fasting
1aff127b56
Merge pull request #10988 from Shados/improve-rsnapshot-service
...
rsnapshot service: Avoid package rebuild, create+use /etc/rsnapshot.conf
2016-05-12 05:24:01 +02:00
Vladimír Čunát
6c2fbfbd77
Merge branch 'master' into staging
2016-05-12 04:53:38 +02:00
Franz Pletz
431a98b12b
nixos/nat: Allow nat without an externalInterface
2016-05-12 01:52:13 +02:00
Alexei Robyn
1e2ec5817c
rsnapshot module: Enable manual rsnapshot usage with module config.
2016-05-12 09:27:59 +10:00
Alexei Robyn
c90d5eb298
rsnapshot module: Avoid package rebuild, pass config file explicitly.
2016-05-12 09:27:52 +10:00
Nikolay Amiantov
700e2952be
Merge pull request #15012 from abbradar/unixodbc
...
UnixODBC updates
2016-05-11 17:42:33 +03:00
Joachim Fasting
a0e8d542c7
Merge pull request #15377 from womfoo/sniproxy
...
sniproxy: init at 0.4.0 with dependency udns: init at 0.4
2016-05-11 15:14:33 +02:00
Shea Levy
67d430096f
Add kerberos mappings for MIT exchange server
2016-05-11 09:09:24 -04:00
Alexei Robyn
ce7a544b92
nixos: ensure TERMINFO is set before user shells are run
2016-05-11 22:16:38 +10:00
Domen Kožar
ccbcf1b6c2
nixos: require pkgs.which
...
This properly implements revert in
0729f60697
.
We used to have which='type -P' alias, but really it's best to just
rely on which package, only 88K in size.
cc @edolstra
2016-05-11 10:37:46 +01:00
Kranium Gikos Mendoza
356f1bdac8
sniproxy service: init
2016-05-11 13:27:28 +08:00
Herwig Hochleitner
2d280840f8
gnome-keyring: add gcr dependency to service
...
gcr is used to provide the popup dialog, this fixes gnome-keyring for
non-gnome sessions
2016-05-10 19:53:33 +02:00
Joachim Fasting
d4d7bfe07b
grsecurity: add option to disable chroot caps restriction
...
The chroot caps restriction disallows chroot'ed processes from running
any command that requires `CAP_SYS_ADMIN`, breaking `nixos-rebuild`. See
e.g., https://github.com/NixOS/nixpkgs/issues/15293
This significantly weakens chroot protections, but to break
nixos-rebuild out of the box is too severe.
2016-05-10 16:17:08 +02:00
Joachim Fasting
e38e3dcdb6
dnscrypt-proxy service: allow user to specify their own resolver list
2016-05-10 07:08:37 +02:00
Joachim Fasting
bd448b7139
dnscrypt-proxy service: use up-to-date dnscrypt-resolvers list
...
The list of public proxies is updated now and again and it's probably a
good idea to always work from the most recent list, rather than the one
that is shipped with the release. This can be crucial in case of
resolvers that are revealed to have gone rogue or otherwise have been
compromised.
2016-05-10 07:07:58 +02:00
rnhmjoj
e8fff51947
unclutter: prevent service restarting too soon
2016-05-09 23:28:30 +02:00
Vladimír Čunát
65a9fa8cdc
Merge branch 'master' into staging
2016-05-08 21:24:48 +02:00