talyz
df607c1d1f
nixos/bookstack: Make the hostname configurable...
...
...and set a reasonable default `appURL` based on it.
This is pretty much required when configuring ACME, and useful in
general.
2022-01-18 15:16:11 +01:00
talyz
e7fa7fdffc
nixos/bookstack: Clear the cache more reliably
...
When upgrading bookstack, if something in the cache conflicts with the
new installation, the artisan commands might fail. To solve this, make
the cache lifetime bound to the setup service. This also removes the
`cacheDir` option, since the path is now handled automatically by
systemd.
2022-01-18 15:16:04 +01:00
Franz Pletz
70630b4a19
Merge pull request #155299 from numinit/mattermost-6.3
2022-01-18 14:27:54 +01:00
pennae
363577461d
Merge pull request #153346 from Stunkymonkey/borg-persistent
...
nixos/borgbackup: Add a persistentTimer option.
2022-01-18 12:29:17 +00:00
Janne Heß
44cb0a4c67
Merge pull request #155443 from vs49688/sy
...
nixos/modules/syncthing: add 22000/udp to firewall
2022-01-18 13:27:06 +01:00
Franz Pletz
76aa0af628
Merge branch 'master' into mattermost-6.3
2022-01-18 13:23:38 +01:00
Felix Buehler
7caa6f4de4
nixos/borgbackup: move systemd.timers logic into single block
2022-01-18 12:53:36 +01:00
pennae
42d6774dc7
Merge pull request #155295 from InternetUnexplorer/nix-serve-open-firewall
...
nixos/nix-serve: add openFirewall option
2022-01-18 09:36:12 +00:00
Artturi
78ff70f529
Merge pull request #153762 from Artturin/ananicymod1
2022-01-18 10:49:13 +02:00
Zane van Iperen
f533a6d2bd
nixos/modules/syncthing: add 22000/udp to firewall
2022-01-18 11:40:06 +10:00
piegames
71358dd070
Merge pull request #154659 : nixos/heisenbridge: Improve hardening
2022-01-18 01:30:12 +01:00
InternetUnexplorer
ecda6429f2
nixos/nix-serve: add openFirewall option
2022-01-17 15:14:02 -08:00
Martin Weinelt
e5b47c5c21
Merge pull request #155407 from pennae/mosquitto-startup
2022-01-17 21:29:37 +01:00
pennae
dc101d9fef
nixos/mosquitto: wait for network-online.target, not network.target
...
network.target is reached earlier, but with much fewer services
available. DNS is likely to be not functional before
network-online.target, so waiting for that seems better for that reason
alone. the existing backends for network-online.target all seem to do
reasonable things (wait until all links are in *some* stable state), so
we shouldn't lose anything from waiting.
2022-01-17 20:58:50 +01:00
legendofmiracles
59a07c683a
Merge pull request #154791 from CRTified/fix-154775-adguardhome-settings
2022-01-17 12:45:24 -06:00
Felix Buehler
91dfaa5453
nixos/borgbackup: start remote backup only if network is available
2022-01-17 15:42:39 +01:00
blargg
697198834c
nixos/borgbackup: Add a persistentTimer option.
...
Persistent starts the backup service on power on if it was missed while
the system was powered down, for example.
2022-01-17 15:42:37 +01:00
Morgan Jones
9db1fb4772
nixos/mattermost: update release notes
2022-01-16 22:34:37 -07:00
Justin Bedo
0fe0153003
nixos/rstudio-server: init
2022-01-17 10:24:38 +11:00
pennae
e65df99e39
Merge pull request #155260 from ncfavier/fix-prosody-filer
...
nixos/prosody-filer: remove usage of literalExample
2022-01-16 21:36:40 +00:00
Naïm Favier
bbfca6b6b9
nixos/prosody-filer: remove usage of literalExample
2022-01-16 22:10:47 +01:00
pennae
4a44a5f126
Merge pull request #154061 from winterqt/borgbackup-empty-archive-base-name
...
nixos/borgbackup: allow empty archive base name
2022-01-16 18:11:37 +00:00
Sandro
55c5f68771
Merge pull request #152246 from pasqui23/beesd
2022-01-16 18:08:54 +01:00
Winter
2104608642
nixos/borgbackup: allow empty archive base name
2022-01-16 10:41:04 -05:00
Kim Lindberger
cdd600c430
Merge pull request #154193 from abbradar/keycloak-changes
...
keycloak: 15.1.0 -> 16.1.0 + module improvements
2022-01-16 11:27:29 +01:00
Nikolay Amiantov
97a0cf62f0
keycloak service: allow to set empty frontend URL
...
This together with extraConfig:
{
"subsystem=undertow"."server=default-server"."http-listener=default"."proxy-address-forwarding" = true;
"subsystem=undertow"."server=default-server"."https-listener=https"."proxy-address-forwarding" = true;
}
Allows to run Keycloak behind a reverse proxy that provides
X-Forwarded-* headers.
2022-01-16 11:41:50 +03:00
Nikolay Amiantov
84f70eefd1
keycloak service: add themes support
...
Custom themes can be packaged and then added using `themes` config
attribute.
2022-01-16 11:41:50 +03:00
Nikolay Amiantov
a42abe27c0
keycloak service: use 'attrsOf anything' for extraConfig
2022-01-16 11:25:44 +03:00
Nikolay Amiantov
827267a27f
keycloak service: update HTTPS configuration
...
Keycloak 16.1.0 uses different way to configure HTTPS.
This requires us to order commands correctly, otherwise linked
objects will fail.
2022-01-16 11:25:44 +03:00
Nikolay Amiantov
3c7e78cc6a
keycloak service: ordering for CLI script
...
Allow update commands in the script to be ordered using `mkOrder`.
If we encounter ordered sub-objects we sort them by priority.
To implement this we now explicitly pass current node in `recurse`,
which also allows us to clean up edge case for top-level node.
Also refactor `recurse` to avoid passing result text argument; we
weren't tail recursive before anyway.
2022-01-16 11:25:44 +03:00
Jörg Thalheim
d4846c4526
Merge pull request #155075 from Mic92/ddclient
...
nixos/ddclient: don't chown secrets until dynamicuser issue is resolved
2022-01-16 06:23:28 +00:00
Martin Weinelt
369db3b2f3
mailpile, nixos/mailpile: drop
...
Still actively developed and yet stuck on python2. Also marked as
vulnerable and their issue tracker contains yet another security issue
reported in 2021/10 that the upstream hasn't acknowledged yet.
Mind blown.
Closes : #135543 , #97274 , #97275
2022-01-16 02:36:20 +01:00
Bernardo Meurer
7b0e7dcb39
Merge pull request #155142 from rapenne-s/thermald_no_net
...
thermald: disable network access
2022-01-16 00:36:11 +00:00
Solene Rapenne
f3516813d8
thermald: disable network access
...
Use systemd PrivateNetwork feature to prevent thermald daemon to have
network capabilities.
2022-01-15 19:33:06 +01:00
Jonas Heinrich
75d417c267
nixos/dokuwiki: Drop deprecated old interface ( #152676 )
2022-01-16 02:38:20 +09:00
Jörg Thalheim
e91ed60026
Merge pull request #154805 from Lassulus/ergochat
...
ergochat: init at 2.9.1 (+ module/test)
2022-01-15 12:15:46 +00:00
Matthias Beyer
1f10b0434f
timetagger: Make enable option with mkOption
...
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
2022-01-15 09:07:54 +01:00
Matthias Beyer
a24dc8d2ef
timetagger: Use default value for package option
...
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
Suggested-by: Aaron Andersen <aaron@fosslib.net>
2022-01-15 09:07:52 +01:00
Matthias Beyer
f3eaf66882
Add service module for timetagger
...
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
2022-01-15 09:07:52 +01:00
Jörg Thalheim
63971d1fda
nixos/ddclient: don't chown secrets until dynamicuser issue is resolved
...
revert if https://github.com/NixOS/nixpkgs/pull/154928 or a similar fix gets applied
2022-01-15 07:21:05 +01:00
lassulus
eaf8890a6c
nixos/ergochat: init
2022-01-14 23:33:23 +01:00
CRTified
cbbabaddf9
nixos/adguardhome: Fix #154775 by checking for settings
2022-01-14 01:54:41 +01:00
piegames
d9172e7a1a
fixup! nixos/heisenbridge: Improve hardening
2022-01-13 23:33:23 +01:00
Jörg Thalheim
dfdf225a98
Merge pull request #154550 from veehaitch/sgx-compat-udev
...
nixos/intel-sgx: add option for Intel SGX DCAP compatibility
2022-01-13 14:55:08 +00:00
piegames
4b165e7675
nixos/heisenbridge: Fix/improve enable option description
...
See https://github.com/NixOS/nixpkgs/pull/154831#discussion_r783858597 for context
2022-01-13 13:28:31 +01:00
piegames
854a65fd47
nixos/heisenbridge: Improve hardening
...
Systemd score is "1.6 OK 🙂 "
2022-01-13 13:28:03 +01:00
adisbladis
4271f3728e
Merge pull request #154831 from adisbladis/heisenbridge-modules-list
...
nixos/heisenbridge: Add to modules-list.nix
2022-01-13 23:21:53 +12:00
Michele Guerini Rocco
d516b7f14f
Merge pull request #154538 from rnhmjoj/pr-mpd-units
...
nixos/mpd: use upstream units
2022-01-13 10:33:58 +01:00
adisbladis
72908cb5a8
services.heisenbridge: Don't use lt/gt signs in mkEnableOption
...
It breaks the XML manual generation.
2022-01-13 13:38:24 +12:00
0x4A6F
1e0d877e1d
Merge pull request #151946 from mweinelt/frr
...
frr: init at 8.1; libyang: init at 2.0.112
2022-01-12 20:51:12 +01:00