Ryan Lahfa
d9e7a2a88a
Merge pull request #286857 from RaitoBezarius/cacerts
...
nixos/security/ca: enable support for compatibility bundles
2024-02-11 19:44:02 +01:00
Maximilian Bosch
417fdb06d7
Merge pull request #287856 from emilylange/nixos-gitea-package-forgejo-warning
...
nixos/gitea: warn when using `services.gitea` with forgejo
2024-02-11 18:06:05 +01:00
Raito Bezarius
19159a2349
nixos/security/ca: enable support for compatibility bundles
...
Certain software stacks have no support for OpenSSL non-standard PEM format and will fail to use
our NixOS CA bundle.
For this, it is necessary to fallback on a 'compatibility' bundle which will contain no additional
trust rules.
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2024-02-11 17:51:00 +01:00
Aaron Andersen
e163373592
Merge pull request #284814 from yaxitech/github-runner-module-update
...
nixos/github-runners: remove single runner module, rework default name, add `noDefaultLabels`
2024-02-11 06:10:56 -08:00
Martin Weinelt
18899b0c58
Merge pull request #287926 from mweinelt/home-assistant-2024.2.0-fixes
...
home-assistant: fixes for 2024.2.0
2024-02-11 04:35:53 +01:00
Will Fancher
d4ee957afa
Merge pull request #287445 from fricklerhandwerk/qemu-env-vars
...
doc: expand on parameters passed to QEMU VMs
2024-02-10 22:12:06 -05:00
Martin Weinelt
055a8f709a
nixos/home-assistant: always add dependencies for default integrations
...
These are loaded unconditionally during bootstrap, and home-assistant
will now fail to start, if these aren't provided.
2024-02-11 04:09:52 +01:00
Lin Jian
f3a93440fb
Merge pull request #285813 from jerrita/nft-precheck-flatten
...
nixos/nftables: add option for flattening rulesetFile
2024-02-11 10:41:17 +08:00
Martin Weinelt
aeea37e779
Merge pull request #287480 from NixOS/home-assistant
...
home-assistant: 2024.1.6 -> 2024.2.1
2024-02-11 01:18:04 +01:00
emilylange
ca3cfc841a
nixos/gitea: warn when using services.gitea with forgejo
...
since this is no longer supported and we have a dedicated module for
forgejo for quite some time now.
Such warning is, however, becoming more and more important, since
forgejo is no longer a soft-fork of gitea, but rather a hard-fork.
And as such, it will slowly but surely no longer be a drop-in
replacement.
Additionally, I hope that this warning will prevent users from
reporting issues with forgejo to nixos/gitea maintainers.
The accompanying forgejo.md, from which the manual section is created,
will be updated over the next few weeks when forgejo officially
publishes their blog post about all this and the way forward, so we can
link to it.
2024-02-10 20:47:04 +01:00
tomberek
6e60c8526b
Merge pull request #286993 from christoph-heiss/srht-updates-next-round
...
sourcehut: update all components
2024-02-10 11:52:53 -05:00
Sandro
756e574ebd
Merge pull request #282971 from wegank/restya-board-drop
...
restya-board: drop
2024-02-10 17:28:05 +01:00
Peder Bergebakken Sundt
40cb108adf
Merge pull request #232528 from SuperSandro2000/chromium-kde
...
nixos/chromium: add enablePlasmaBrowserIntegration option
2024-02-10 17:15:14 +01:00
Peder Bergebakken Sundt
c43fd32e03
Merge pull request #248315 from apeschar/oci-containers-backend-stop
...
nixos/oci-containers: stop container using backend
2024-02-10 17:12:56 +01:00
Peder Bergebakken Sundt
6f55f021df
Merge pull request #287304 from ambroisie/pyload-user-group
...
nixos/pyload: add user/group options
2024-02-10 14:59:23 +01:00
Maximilian Bosch
66a0b77a78
Merge pull request #286394 from SuperSandro2000/nextcloud-timer
...
nixos/nextcloud: don't execute cron when in maintenace/upgrade, don't kill cgroup
2024-02-10 12:48:05 +01:00
Peder Bergebakken Sundt
5caded32fe
Merge pull request #277189 from anpin/fix/cloudflared-service
...
cloudflared: fixed missing configuration options
2024-02-10 12:45:08 +01:00
maxine
53f6fedd04
Merge pull request #287512 from r-vdp/fwupd_1_9_13
...
fwupd: 1.9.12 -> 1.9.13
2024-02-10 11:05:51 +01:00
Martin Weinelt
3d67816966
home-assistant: 2024.1.6 -> 2024.2.1
...
https://www.home-assistant.io/blog/2024/02/07/release-20242/
https://github.com/home-assistant/core/releases/tag/2024.2.1
2024-02-10 04:15:41 +01:00
Silvan Mosberger
11cd405226
Merge pull request #280322 from h7x4/add-hocon-format-generator
...
pkgs.formats: Add HOCON format generator
2024-02-10 03:07:51 +01:00
Silvan Mosberger
5de4385620
Merge pull request #285833 from 360ied/murmur-hardened
...
nixos/murmur: systemd service hardening
2024-02-10 02:48:46 +01:00
github-actions[bot]
b64b4f2d6a
Merge master into staging-next
2024-02-09 18:01:06 +00:00
Bernardo Meurer
f459aeeb8d
Merge pull request #287528 from arianvp/amazon-image-maintainer
...
nixos/amazon-image: Take over maintainership
2024-02-09 12:33:11 -05:00
Will Fancher
0cf1e24f32
Merge pull request #284627 from Trundle/nftables-ordering
...
nixos/nftables: remove default systemd dependencies
2024-02-09 12:29:24 -05:00
Arian van Putten
a1232992ac
nixos/amazon-image: Take over maintainership
...
I am actively working on bringing back Amazon Images for 24.05.
Please track progress in https://github.com/nixos/amis
2024-02-09 18:02:40 +01:00
Maximilian Bosch
bd8acd0141
Merge pull request #286172 from mweinelt/matrix-uds-listeners
...
nixos/matrix-synapse: Add UNIX domain socket listener support
2024-02-09 17:58:41 +01:00
Vincent Haupert
6d8391a3ce
nixos/github-runners: add a group option to set the executing group
...
Similar to the `user` option, the added `group` option sets the group of
the executing process. If not `null`, it also sets `DynamicUser=false`.
In case `user` is set to `null` (the default), systemd would run the
service as root implicitly. As this is dangerous and most certainly not
what users want, we force them to set `user = "root"` explicitly if
that's really their intention. That's achieved through an assertion.
2024-02-09 16:58:09 +01:00
r-vdp
12de1b3a38
fwupd: 1.9.12 -> 1.9.13
...
Changelog: https://github.com/fwupd/fwupd/releases/tag/1.9.13
2024-02-09 16:45:09 +01:00
h7x4
39a779e269
treewide: use formats.hocon
2024-02-09 16:40:22 +01:00
Vincent Haupert
35df23c07d
nixos/github-runners: set DynamicUser=false if user not null
2024-02-09 16:19:23 +01:00
Vincent Haupert
3f13f8d85e
nixos/github-runners: align nodeRuntimes option with package
...
The `github-runner` package only supports `nodejs_20` since `nodejs_16`
was removed in a2976db919
2024-02-09 16:19:23 +01:00
Vincent Haupert
782b164523
nixos/github-runners: rework name default
2024-02-09 16:19:19 +01:00
Martin Weinelt
91d9c159da
nixos/matrix-synapse: fix recursive filtering of null values
...
Using `filterAttrsRecursive` is not sufficient to account for a nested
attribute set with list values, like used for listeners.
2024-02-09 16:05:05 +01:00
Martin Weinelt
143d266f0d
nixos/matrix-synapse: add UNIX domain socket listener support
...
Exposes two options, `path` and `mode`, to configure the location and
permissions on the socket file.
The `mode` needs to be specified as string in octal and will be converted
into a decimal integer, so it correctly passes through the YAML parser
and arrives at the `os.chmod` call in the Twisted codebase. What a fun
detour.
Adds an assertion, that either `path` or `bind_addresses` and `port` are
configured on every listener.
Migrates the default replication listener of the main instance to a UNIX
domain socket, because it is more efficient.
Introduces the `enableRegistrationScript` option, to gracefully disable
the user registration script, when the client listener listens on a UNIX
domain socket, which is something the script does not support.
2024-02-09 16:05:05 +01:00
Valentin Gagarin
e385b36a32
Merge pull request #287438 from fricklerhandwerk/qemu-docs-link
2024-02-09 15:37:35 +01:00
Vincent Haupert
9ad02c831a
nixos/github-runner: deprecate module in favor of github-runners.*
2024-02-09 15:14:32 +01:00
Vincent Haupert
ab57ba24cf
nixos/github-runners: document new runner registrations
...
Make the documentation of the options `workDir` and `ephemeral` reflect
that changing these options will trigger a new runner registration.
2024-02-09 15:14:32 +01:00
Vincent Haupert
a9c807496f
nixos/github-runners: add noDefaultLabels option
...
Add option `noDefaultLabels` which controls the `--no-default-labels`
switch passed to the configure script.
2024-02-09 15:14:32 +01:00
Vincent Haupert
ae140cd468
nixos/github-runners: remove superfluous usages of lib
2024-02-09 15:14:31 +01:00
github-actions[bot]
a7f4ae0644
Merge master into staging-next
2024-02-09 12:01:11 +00:00
nikstur
8a3e1cf40a
Merge pull request #287013 from WilliButz/qemu-vm/tmpfiles-settings
...
nixos/qemu-vm: convert tmpfiles rules to settings
2024-02-09 11:42:17 +01:00
Valentin Gagarin
85f4b05e39
doc: add link to QEMU reference documentation in QEMU module
2024-02-09 11:21:07 +01:00
Valentin Gagarin
11c26d4cc5
use code for env var notation
2024-02-09 11:16:28 +01:00
Valentin Gagarin
d9009e0028
doc: expand on parameters passed to QEMU VMs
2024-02-09 10:48:52 +01:00
Valentin Gagarin
b1f6e08177
doc: add link to Nix manual
2024-02-09 10:47:08 +01:00
Linus Heckemann
4916e22812
Merge pull request #286176 from nikstur/writable-overlays
...
nixos/filesystems: init overlayfs
2024-02-09 08:22:09 +01:00
github-actions[bot]
592e5dab71
Merge master into staging-next
2024-02-09 00:02:27 +00:00
Bruno BELANYI
c14f029dae
nixos/pyload: add user/group options
2024-02-08 20:27:14 +00:00
nikstur
4d2c5b722a
Merge pull request #285114 from WilliButz/improve-uki-settings-merging
...
nixos/boot.uki: allow partial overrides of default UKI settings
2024-02-08 21:15:08 +01:00
github-actions[bot]
13d222c591
Merge master into staging-next
2024-02-08 18:01:04 +00:00
