Commit Graph

33510 Commits

Author SHA1 Message Date
Felix Buehler
939ba8a2c3 nixos/services.blockbook-frontend: remove with lib; 2024-09-15 10:43:52 +02:00
Felix Buehler
d9c47dac16 nixos/services.bitlbee: remove with lib; 2024-09-15 10:43:52 +02:00
Felix Buehler
416649cbe6 nixos/services.birdwatcher: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
c666e7b2dd nixos/services.bird-lg: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
9ce866bc9b nixos/services.bind: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
42facf73b7 nixos/services.biboumi: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
6bf37cd201 nixos/services.bee: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
7da36d70ff nixos/services.babeld: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
eb8d4ed264 nixos/services.avahi: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
d861803952 nixos/services.autossh: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
06032d6956 nixos/services.atftpd: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
681161adb6 nixos/services.asterisk: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
d63146859b nixos/services.amule: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
46dc82d477 nixos/services.alice-lg: remove with lib; 2024-09-15 10:43:51 +02:00
Felix Buehler
b1bbe81c8d nixos/services.adguardhome: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
02bb53fbc3 nixos/services._3proxy: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
76831f7a1b nixos/services.yandex-disk: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
bc58f67812 nixos/services.xtreemfs: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
9ffa253b87 nixos/services.webdav: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
e71c09b8f8 nixos/services.webdav-server-rs: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
43235a1a61 nixos/services.u9fs: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
443dc608d2 nixos/services.tahoe: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
f0f841be80 nixos/services.samba: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
4174027fe9 nixos/services.samba-wsdd: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
442fa2e366 nixos/services.rsyncd: remove with lib; 2024-09-15 10:43:50 +02:00
Felix Buehler
23fed458df nixos/services.orangefs.server: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
6f4eeb7722 nixos/services.orangefs.client: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
e14a371aac nixos/services.nfs.server: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
808c6a991b nixos/services.netatalk: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
fb9b81cec5 nixos/services.moosefs: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
6bf4d51606 nixos/services.litestream: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
8f72002794 nixos/services.kubo: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
c51036c276 nixos/services.kbfs: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
d70aff4804 nixos/services.gogs: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
691cc4462a nixos/services.gitolite: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
a19107dd8a nixos/services.rss2email: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
4b4b2cca1b nixos/services.rspamd-trainer: remove with lib; 2024-09-15 10:43:49 +02:00
Felix Buehler
9faf712298 nixos/services.bamf: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
13c9b59247 nixos/services.accounts-daemon: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
7d32787294 nixos/services.etcd: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
d43e1678e7 nixos/services.buildbot-master: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
2dc19bf4e0 nixos/services.torque.server: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
5b4982c0e0 nixos/services.torque.mom: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
7108ded8fe nixos/services.slurm: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
af42ae4352 nixos/services.foldingathome: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
c37db9c3ee nixos/services.boinc: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
400d31aeb5 nixos/services.spark: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
7e25c525fe nixos/services.rke2: remove with lib; 2024-09-15 10:43:48 +02:00
Felix Buehler
92566faf1c nixos/services.patroni: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
7b141e6b8f nixos/services.pacemaker: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
980a655feb nixos/services.kubernetes.addons.dns: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
6ebec4f097 nixos/services.k3s: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
1a519763fb nixos/services.lighthouse: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
1674361601 nixos/services.geth: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
bf759e5dd4 nixos/services.erigon: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
561d58c49c nixos/services.zrepl: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
8a7d699812 nixos/services.zfs.autoReplication: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
e53c595a18 nixos/services.tarsnap: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
8442ed34ac nixos/services.syncoid: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
48d46271cb nixos/services.snapraid: remove with lib; 2024-09-15 10:43:47 +02:00
Felix Buehler
4682ba9d88 nixos/services.sanoid: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
dfb290a6c6 nixos/services.rsnapshot: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
27f54eb43e nixos/services.restic.backups: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
9ad1866434 nixos/services.restic.server: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
dee892a446 nixos/services.postgresqlWalReceiver: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
5c0e7f70a5 nixos/services.postgresqlBackup: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
02145eb692 nixos/services.mysqlBackup: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
5e67f3e4c8 nixos/services.pgadmin: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
b0d554537c nixos/security.pam: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
c99cbe65c4 nixos/security: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
30c85fe74d nixos/wordlist: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler
609e57485d nixos/nixpkgs: remove with lib; 2024-09-15 10:43:45 +02:00
Felix Buehler
6af918a564 nixos/flake: remove with lib; 2024-09-15 10:43:45 +02:00
Felix Buehler
de2bbebb7f nixos/installer.scan: remove with lib; 2024-09-15 10:43:45 +02:00
Felix Buehler
e6da97a160 nixos/installation-cd-graphical-base: remove with lib; 2024-09-15 10:43:45 +02:00
Felix Buehler
a15394d51a nixos/iso-image: remove with lib; 2024-09-15 10:43:45 +02:00
Arjan Schrijver
ca139acf0e nixos/ly: unlock gnome-keyring on login when enabled 2024-09-14 20:44:41 +02:00
Julien Malka
d9d07251f1
nixos/systemd-boot: Fix regression in builder script (#323962) 2024-09-14 19:15:42 +02:00
rnhmjoj
016f6f9f58
dnscrypt-wrapper: remove package and NixOS modules 2024-09-14 17:22:48 +02:00
Pascal Bach
b6c754755c nixos/paperless: fix documentation url
The original paperless project is archived

Co-authored-by: Antoine Martin <antoine97.martin@gmail.com>
2024-09-14 14:19:17 +02:00
Tomodachi94
b86ba024bd nixos/paperless: add system-paperless.slice
Non-breaking change.

Part of #279915.
2024-09-14 14:19:17 +02:00
Aleksana
36316edca3
nixos/samba: accept lists (#341244) 2024-09-14 09:30:23 +08:00
Adam C. Stephens
cc94fb3033
nixos/profiles/minimal: drop noXLibs (#341681) 2024-09-13 20:40:36 -04:00
Yt
2ac0a6697a
nixos/windmill: add database.url option and defaults (#341675) 2024-09-13 23:07:19 +00:00
Sandro
da1b2b5adb
nixos/profiles/minimal: drop noXLibs
noXLibs is an advanced option for advanced users which know how to recognize and debug build failures which might be caused by the added overlays.

The minimal profile should be minimal but also save to use for many people and not cause build failures in packages it really shouldn't.
2024-09-14 00:59:14 +02:00
Robert Schütz
4c8a43881f nixos/samba: accept lists 2024-09-13 15:33:49 -07:00
tmarkov
b44fdbfc11 nixos/windmill: add database.url option and defaults 2024-09-14 00:36:55 +03:00
Felix Bühler
17c73de8dc
nixos/services.xserver.desktopManager.phosh: remove with lib; (#341243) 2024-09-13 22:15:01 +02:00
eyjhb
7c545e26a3 nixos/neo4j: always set http values, even when disabled 2024-09-13 15:22:34 +02:00
Parker Hoyes
c960ba48d1
nixos/nix-daemon: Enable cgroups delegation (#339310)
When `use-cgroups` is enabled, the nix daemon creates sub-cgroups for the build processes (and itself if NixOS/nix#11412 is merged, see NixOS/nix#9675). `Delegate` should be set to prevent systemd from messing with the nix service's cgroups (https://github.com/systemd/systemd/blob/main/docs/CGROUP_DELEGATION.md) and ensure the OOM killer only targets the offending derivation and not the entire service (NixOS/nix#10374).
2024-09-13 16:08:29 +03:00
Robert Hensing
ac849e5658 nixos/nix-fallback-paths: 2.24.2 -> 2.24.6 2024-09-13 13:37:46 +02:00
Weijia Wang
7cd6534e42
linuxPackages_latest.prl-tools: 19.4.1-54985 -> 20.0.0-55653 (#341283) 2024-09-13 11:50:54 +02:00
K900
b1239b59f9
nixos/installer/cd-dvd: use EFI/BOOT and EFI/BOOT/BOOT$ARCH.EFI for paths (#287798) 2024-09-13 12:11:21 +03:00
Raito Bezarius
4a94f45bb4 nixos/installer/cd-dvd: use EFI/BOOT and EFI/BOOT/BOOT$ARCH.EFI rather than lowercase
Reported in https://discourse.nixos.org/t/nix-iso-unable-to-boot-in-uefi-mode-but-other-distros-can/16473/24

There seems to be weird situations with casing and FAT8.3 filenames, UEFI firmwares and what not.
To increase our compatibility, let's ensure we have the critical stuff (the bootable) in uppercase.

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2024-09-13 04:23:53 -04:00
Peder Bergebakken Sundt
c3dabc54aa
security/dhparams: shellcheck fixes (#340492) 2024-09-13 02:52:09 +02:00
Pascal Bach
e7bcab801c nixos/samba: ensure global section is always first
The order of the [global] section matters as settings
defined there are only applied to shares that are defines
after it.
2024-09-12 21:08:24 +02:00
codgician
0d25a978f2
parallels-guest: remove autoMountShares 2024-09-13 00:47:01 +08:00
K900
9d3c35b682
nixos/qemu-vm: force enable switch-to-configuration when installing bootloader (#341288) 2024-09-12 19:10:53 +03:00
Michael Hoang
d25d241e38
Update nixos/modules/services/networking/tailscale.nix
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-09-12 23:06:23 +10:00
Gaétan Lepage
d4474ed33b
nixos/invidious: add options for configuring inv-sig-helper (#340748) 2024-09-12 14:57:57 +02:00
K900
5cef278170 nixos/qemu-vm: expose installBootLoader as an option, assert when it's enabled without stc
We need stc to actually, well, install the bootloader.
2024-09-12 15:43:28 +03:00
Aaron Andersen
768f41fcf0
Revert "nixos/openvpn: add extraArgs option" (#341223) 2024-09-12 06:34:16 -04:00
Florian Agbuya
317a52a757 flarum: fix installation and migration logic 2024-09-12 16:14:41 +08:00
⛧-440729 [sophie]
81b0701a4d
nixos/invidious: add options for configuring inv-sig-helper 2024-09-12 09:08:02 +02:00
Aleksana
5126cb8d1f
ankisyncd: remove (#333609) 2024-09-12 09:13:29 +08:00
Jean-François Roche
251b0c958f nixos/systemd-boot: Fix regression in builder script
Avoid running Python scripts in the root of the package, as this
triggers `os.listdir` on the Nix store directory during import. This
operation can be time-consuming on large store directories
(see issue #283795 for more details).

The issue was initially fixed in #284153 but was reverted in #306339.

Co-authored-by: Sönke Hahn <soenkehahn@gmail.com>
2024-09-12 01:29:32 +02:00
nikstur
24526ed710
nixos/userborn: respect createHome and convert home from path to string (#341180) 2024-09-11 23:44:34 +02:00
Felix Buehler
2b6ef00729 nixos/services.xserver.desktopManager.phosh: remove with lib; 2024-09-11 22:25:00 +02:00
Bjørn Forsman
1cb392fdcd nixos/ups: set env vars in the global environment
This allows using upsdrvctl interactively, which otherwise tries to use
a missing ups.conf in the Nix store, instead of the correct
/etc/nut/ups.conf.
2024-09-11 21:14:48 +02:00
Bjørn Forsman
801388a6fa nixos/ups: deduplicate environment variables
No functional change, but more DRY.
2024-09-11 21:14:48 +02:00
Michele Guerini Rocco
b94f259714
nixos/wireless: reimplement secrets using ext_password_backend (#180872) 2024-09-11 19:58:36 +02:00
Aaron Andersen
45dd09667f
Revert "nixos/openvpn: add extraArgs option" 2024-09-11 12:59:03 -04:00
Felix Bühler
686fa55f27
nixos/iso-image: remove with lib; (#339102) 2024-09-11 18:57:35 +02:00
Felix Bühler
3884721bad
nixos/services.mpd: remove with lib; (#339100) 2024-09-11 17:22:14 +02:00
Lin Yinfeng
33e796b66f
nixos/userborn: convert users.users.<name>.home to string
If `opts.home` is not a string, an evaluation failure occurs in
`mapAttrs'`. Converting `opts.home` to string solves this issue.

The type of `users.users.<name>.home` is `lib.types.path`. Values
other than strings, e.g., derivations can also have the type
`lib.types.path`.
2024-09-11 18:28:58 +08:00
Lin Yinfeng
d3fdfb473d
nixos/userborn: support users.users.<name>.createHome 2024-09-11 18:09:29 +08:00
John Titor
1c7e6a2de9
nixos/shairport-sync: Add pulse group also for pipewire
Works according to https://github.com/mikebrady/shairport-sync/issues/1171

From 0e4664b497
2024-09-11 15:21:14 +05:30
Robert Cambridge
08afe03265 fix bug where nix store DB would not be loadable if root was not mounted on / 2024-09-11 09:59:22 +02:00
Robert Cambridge
52bb3ddb86 fix bug where sdImage.expandOnBoot=false would prevent nix-store from loading DB 2024-09-11 09:59:10 +02:00
Dominique Martinet
2b5ca0f433 ankisyncd: remove 2024-09-11 13:53:06 +08:00
Josh Hoffer
d308cfcb38 nixos/netboot: mount squashfs with threads=multi 2024-09-10 22:02:20 -07:00
Josh Hoffer
ff8b2d5162 nixos/iso-image: mount squashfs with threads=multi 2024-09-10 22:01:39 -07:00
Aaron Andersen
7398438255
nixos/openvpn: add extraArgs option (#339016) 2024-09-10 19:36:32 -04:00
Emily
1a55636200
nixos/dokuwiki: don’t use lib.escapeShellArg (#340309) 2024-09-11 00:34:05 +01:00
Robert Hensing
2e702d07bb nix: nix_2_18 -> nix_2_24 2024-09-10 23:20:48 +02:00
Felix Bühler
c4dd50a721
nixos/services.snapserver: remove with lib; (#339099) 2024-09-10 22:17:09 +02:00
Felix Bühler
6cc52ec011
nixos/services.graphite: remove with lib; (#339095) 2024-09-10 22:15:56 +02:00
Rick van Schijndel
cbf48cea2d
activation: avoid error due to unset PATH variable (#340488) 2024-09-10 21:58:24 +02:00
Felix Bühler
dc5ff75973
nixos/services.portunus: remove with lib; (#339097) 2024-09-10 21:41:55 +02:00
Felix Bühler
9ac4d48271
nixos/services.borgbackup: remove with lib; (#339098) 2024-09-10 21:41:29 +02:00
Felix Bühler
2954826541
nixos/services.taskserver: remove with lib; (#339104) 2024-09-10 21:41:05 +02:00
Felix Buehler
674e5ad68a nixos/services.mpd: remove with lib; 2024-09-10 21:40:16 +02:00
Felix Buehler
e3ee1a97d4 nixos/iso-image: remove with lib; 2024-09-10 21:36:16 +02:00
Felix Bühler
7a46626d03
nixos/services.rippled: remove with lib; (#339106) 2024-09-10 21:35:12 +02:00
Adam C. Stephens
fbbafbb834
nixos/services.radicle: remove with lib; (#339105) 2024-09-10 12:00:35 -04:00
Artturin
95db943c8d
nixos/teeworlds: add option environmentFile for injecting secrets (#334590) 2024-09-10 18:30:00 +03:00
Aleksana
1579b92dd4
todesk: init at 4.7.2.0 (#310474) 2024-09-10 21:42:59 +08:00
r-vdp
a03d5e6f56
waybar: the systemd unit is coming from the package now 2024-09-10 14:12:45 +02:00
Kerstin
5a39b9e407
Gancio service fixes (#340782) 2024-09-10 13:34:07 +02:00
Jean-Baptiste Giraudeau
3a33b6c3a8
nixos/gancio: set default value for settings.baseurl 2024-09-10 13:13:32 +02:00
Jean-Baptiste Giraudeau
432bfec026
nixos/gancio: use unix socket between nginx and gancio 2024-09-10 13:13:28 +02:00
nicoo
9e5a44bcfc
nixos/podman: set preferLocalBuild on trivial runCommands (#340980) 2024-09-10 10:53:46 +00:00
eyjhb
a719f91a85
nixos/teeworlds: use lib.getExe instead of hardcoded path 2024-09-10 11:40:24 +02:00
eyjhb
e233e7d385
nixos/teeworlds: add option environmentFile for injecting secrets 2024-09-10 11:39:55 +02:00
h7x4
c2090cb303
wstunnel: the ping frequency can now also be configured for the server (#339232) 2024-09-10 10:27:42 +02:00
Vladimír Čunát
28e9b6d60f
Merge staging-next 2024-09-01 (#338840) 2024-09-10 07:42:45 +02:00
Maximilian Bosch
86af11a626
Merge: prometheus-pgbouncer-exporter: 0.8.0 -> 0.9.0, fix secrets handling (#340852) 2024-09-10 07:23:10 +02:00
Martin Weinelt
4cec81a995
Revert "modules/virtualisation: add shared options, merge various diskSize options" (#340894)
Breaks evaluation of all nixos tests, and is therefore a channel blocker.
2024-09-10 03:12:55 +02:00
github-actions[bot]
6811659137
Merge master into staging-next 2024-09-10 00:13:21 +00:00
Artturin
833c74afa4
kexec: fix shellcheck issues (#340487) 2024-09-09 23:38:36 +03:00
Jonas Chevalier
7c4dde339a
modules/virtualisation: add shared options, merge various diskSize options (#339535) 2024-09-09 21:23:11 +02:00
Maximilian Bosch
862ecd674f
nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline
Since `connectionStringFile` reads the file and puts it into the
invocation of the exporter, it's part of the cmdline and thus
effectively world-readable.

Added a new `connectionEnvFile` which is supposed to be an environment
file of the form

  PGBOUNCER_EXPORTER_CONNECTION_STRING=...

that will be added to the systemd service. The exporter will read the
connection string from that value.
2024-09-09 21:08:17 +02:00
Maximilian Bosch
4980a7d938
nixos/prometheus-exporters: fix assertions declared in exporter modules
And it turns out, the test was using a removed option all along 🙃
2024-09-09 21:08:17 +02:00
Martin Weinelt
58aa6d56f6
nixos/matrix-appservice-irc: allow disabling the ttl by setting it to 0 (#340841) 2024-09-09 20:58:45 +02:00
Martin Weinelt
420398889e
nixos/matrix-appservice-irc: allow disabling media lifetime
Posting media URLs to IRC that vanish, when they can be refetched from
the remote server they were originated from is not great UX.
2024-09-09 20:35:13 +02:00
Rick van Schijndel
f6b2548c60
nixos/hydra: unset SSL_CERT_FILE (#338536) 2024-09-09 20:29:36 +02:00
github-actions[bot]
a90b3d5ddb
Merge master into staging-next 2024-09-09 18:05:44 +00:00
Rick van Schijndel
0eb77d8da5
nixos/hydra: add system-hydra.slice, fix typo (#338532) 2024-09-09 19:47:21 +02:00
Felix Bühler
3ffbdee67c
nixos/services.snapper: remove with lib; (#339096) 2024-09-09 18:36:49 +02:00
github-actions[bot]
f3e8528ff7
Merge master into staging-next 2024-09-09 14:31:17 +00:00
Jean-Baptiste Giraudeau
58ec286785
nixos/gancio: actually enable ssl by default. 2024-09-09 15:48:52 +02:00
K900
cb1b8436a3
nixos-install: fail if we can't set up bootloader (#340522) 2024-09-09 16:21:54 +03:00
K900
a9c0a2e2a1
nixos/tests: don't include switch-to-configuration in DUT by default (#340445) 2024-09-09 16:20:41 +03:00
github-actions[bot]
90a93f92bb
Merge master into staging-next 2024-09-09 12:05:58 +00:00
Jacek Galowicz
5aae39d683
nixos/testing: Fix graphical tty output (#339730) 2024-09-09 10:23:37 +02:00
github-actions[bot]
92d531057e
Merge master into staging-next 2024-09-09 06:05:06 +00:00
Aleksana
12f0b2ff82
systemd-boot: Add option for consoleMode to support SteamDeck (#340597) 2024-09-09 12:10:20 +08:00
Aleksana
03e62e5bc3
podman: drop slirp4netns which has been replaced by passt (#313670) 2024-09-09 09:53:33 +08:00
Pol Dellaiera
bcb04b0967
open-webui: Add environmentFile option (#334830) 2024-09-09 03:28:37 +02:00
Martin Weinelt
01d0b0b683
nixos/logrotate: harden systemd unit
Logrotate is a service that runs as root and moves logfiles around while
keeping ownership of these files intact. This means we can and should
severely limit the scope of what can be done during its runtime.
2024-09-09 02:53:36 +02:00
github-actions[bot]
f2b767ea43
Merge master into staging-next 2024-09-09 00:14:38 +00:00
Anthony ROUSSEL
603159799c nixos/samba: revert default values 2024-09-08 23:43:10 +02:00
Kerstin
e248589c0f
gancio: init at 1.19.0 (#279011) 2024-09-08 22:51:23 +02:00
Petr Hodina
a9f77c2fb0 systemd-boot: Add option for consoleMode to support SteamDeck 2024-09-08 22:48:21 +02:00
Sarah Brofeldt
8a508485c4
nixos/kubernetes: add extraConfig to kubelet config (#338526) 2024-09-08 20:35:46 +02:00
github-actions[bot]
3b1652aad3
Merge master into staging-next 2024-09-08 18:04:04 +00:00
Peder Bergebakken Sundt
b7bb0f2190 nixos/ttyd: reduce inherit (lib) 2024-09-08 19:00:53 +02:00
Peder Bergebakken Sundt
a02d94279b nixos/ttyd: allow caFile=null when enableSSL=true
Co-authored-by: Douglas Mayle <douglas@mayle.org>
2024-09-08 18:55:44 +02:00
Jean-Baptiste Giraudeau
f5e44554c4
nixos/gancio: init module 2024-09-08 18:09:57 +02:00
Emily
2d562e9175
security/acme: shellcheck fixes (#340491) 2024-09-08 16:27:17 +01:00
K900
7771e0b943 nixos/specialisation: add isSpecialisation option to know if we're a specialisation 2024-09-08 17:04:44 +03:00
phaer
37cf9cbb22
security/dhparams: shellcheck fixes 2024-09-08 12:31:15 +02:00
phaer
22794b93e0
security/acme: shellcheck fixes 2024-09-08 12:29:58 +02:00
r-vdp
e2db383cb6
activation: avoid error due to unset PATH variable 2024-09-08 12:27:06 +02:00
r-vdp
955e3cd8fe
kexec: fix shellcheck issues 2024-09-08 12:26:22 +02:00
K900
fa39e3d642 nixos-install: fail if we can't set up bootloader 2024-09-08 11:05:59 +03:00
Guanran Wang
bde8f99741
nixos/amd-microcode: remove alias 2024-09-08 15:15:12 +08:00
Guanran Wang
a55aaa547c
nixos/intel-microcode: remove alias 2024-09-08 15:11:50 +08:00
github-actions[bot]
69276ad883
Merge master into staging-next 2024-09-08 06:04:18 +00:00
Yuxuan Shui
036d05a466 nixos/samba: fix migration guide for securityType 2024-09-08 00:26:27 +01:00
github-actions[bot]
5a5ebe5a1c
Merge master into staging-next 2024-09-07 18:04:01 +00:00
Martin Weinelt
458c073712
neard: 0.18 -> 0.19-unstable-2024-07-02 (#337524) 2024-09-07 18:00:14 +02:00
Florian Klink
3aca239152
nixos/caddy: restart caddy on config change when "enableReload" is turned off (#335983) 2024-09-07 22:22:24 +07:00
ash
2bab9e4eba nixos/dokuwiki: factor out toPhpString 2024-09-07 15:30:54 +01:00
K900
d1c49286e9
nixos/samba: fix conditional activation of samba services (#340272) 2024-09-07 16:53:16 +03:00
ash
345c8a7310 nixos/dokuwiki: don’t use lib.escapeShellArg
PHP strings don't obey shell quoting rules. See #333744.
2024-09-07 14:39:07 +01:00
Weijia Wang
bad886d556
ayatana-indicator-bluetooth: init at 24.5.0 (#336982) 2024-09-07 14:46:32 +02:00
github-actions[bot]
de15243c9a
Merge master into staging-next 2024-09-07 12:04:51 +00:00
Azat Bahawi
3f2297f073
nixos/endlessh-go: fix firewall bugs (#339701) 2024-09-07 10:22:25 +00:00
Aleksana
b4b441a852
nixos/matterbridge: add services.matterbridge.package option (#340180) 2024-09-07 16:27:52 +08:00
Anthony ROUSSEL
1938960bfe nixos/samba: fix conditional activation of samba services 2024-09-07 10:16:03 +02:00
K900
f7e4fc6e56
Wireplumber 0.5.6 (#340154) 2024-09-07 09:46:17 +03:00
github-actions[bot]
b6b2ac4f61
Merge master into staging-next 2024-09-07 00:12:59 +00:00
kirillrdy
5f4c0543d2
Flarum: fix installation and client interface issues (#339202) 2024-09-07 06:32:54 +10:00
Leona Maroni
7d414ecebb
sway: integrate with systemd (#323670) 2024-09-06 22:25:11 +02:00
Gabriel Fontes
13f6e6da35
nixos/matterbridge: add services.matterbridge.package option 2024-09-06 17:07:41 -03:00
Will Fancher
3f4b9096f6
nixos/zfs: mitigate data loss issues when resuming from hibernate (#208037) 2024-09-06 14:50:59 -04:00
github-actions[bot]
079813d5c4
Merge master into staging-next 2024-09-06 18:03:54 +00:00
K900
a0134dd1d8 nixos/wireplumber: drop hack for systemwide setups
Should not be necessary with 0.5.6.
2024-09-06 20:58:12 +03:00
Aaron Ecay
345618de26
nixos/zfs: mitigate data loss issues when resuming from hibernation 2024-09-06 13:39:21 -04:00
Bjørn Forsman
4861c28956 homebox: update URLs in documentation
https://github.com/hay-kot/homebox was archived on 2024-06-12 and we use
the https://github.com/sysadminsmedia/homebox fork since the beginning,
in commit 4be8e799db
("homebox: init at 0.13.0").

Update the documentation to be in sync with the source we build from.
2024-09-06 19:34:15 +02:00
Anthony Roussel
56ae1fb452 nixos/samba: split and sync SystemD services with upstream 2024-09-06 17:53:22 +02:00
Anthony Roussel
ac29b192d8 nixos/samba: use mkEnableOption when possible 2024-09-06 17:53:22 +02:00
Anthony Roussel
3f0b4964c3 nixos/samba: add documentation to systemd.services 2024-09-06 17:53:22 +02:00
Anthony Roussel
7a3bba220d nixos/samba: add services.samba.smbd.enable option 2024-09-06 17:53:22 +02:00
Anthony Roussel
ee6c8db585 nixos/samba: reorganize and rename module options 2024-09-06 17:53:22 +02:00
Anthony Roussel
3b48a7e013 nixos/samba: add documentation 2024-09-06 17:53:22 +02:00
Anthony Roussel
988c598106 nixos/samba: migrate to structural settings (RFC42) 2024-09-06 17:53:22 +02:00
laalsaas
a89b885ae9 sway: integrate with systemd
see: https://github.com/swaywm/sway/wiki/Systemd-integration
2024-09-06 15:59:37 +02:00
github-actions[bot]
bd4b5a5be6
Merge master into staging-next 2024-09-06 12:05:08 +00:00
ajs124
54604767a2
remove myself from maintainer list of packages I don't use anymore (#339910) 2024-09-06 13:05:55 +02:00
OPNA2608
132b5ce9d3 nixos/lomiri: Add bluetooth indicator 2024-09-06 12:08:10 +02:00
Emily
866a8e220c nixos/perlless: remove redundant system.switch.enableNg
This is now on by default.
2024-09-06 08:35:43 +01:00
Emily
56dea6da87 nixos: switch to switch-to-configuration-ng by default
The Rust `switch-to-configuration-ng` rewrite was carefully written
to be compatible with the original Perl script, has been checked
against NixOS VM tests, and has been available on an opt‐in basis
for testing for the 24.05 release cycle.

The next step towards replacing the Perl script entirely is to
switch it on by default so that we can get real‐world testing from
a much greater number of users. Maintaining two implementations in
parallel is becoming a burden; we are having to adjust the systemd
service activation behaviour slightly to fix a long‐standing bug,
and backporting the changes to the Perl script is an unpleasant
process. We will do it anyway to ensure that the Rust and Perl
implementations keep parity with each other throughout the 24.11
release cycle, but we think the time has come to flip the switch.

Taking this step now will give us two to three months to test this in
the wild before the 24.11 release and gain confidence that there are
no regressions. If any non‐trivial problems arise before the final
release, we will revert to the Perl implementation by default. Doing
this switch ASAP will help to disentangle any problems that might
arise from the Rust implementation from problems that arise from the
systemd service activation changes, or the upcoming switch to using
systemd in stage 1 by default.

The main concern that was raised about replacing the Perl script in the
PR that added `switch-to-configuration-ng` was that it is currently
possible to run NixOS on systems that cannot natively host a Rust
compiler. This does not apply to any platforms that have official
support from NixOS, and as far as I know we do not know of any such
systems with users that are not cross‐compiling anyway.

My understanding is that these systems are already broken by default
anyway, as `systemd.shutdownRamfs.enable` is on by default and uses
`make-initrd-ng`, which is also written in Rust. Switching the default
while keeping the Perl implementation around will give us at least
an entire release cycle to find out if there are any users that will
be affected by this and decide what to do about it if so.

There is currently one known inconsistency between
the Perl and Rust implementations, as documented in
<https://github.com/NixOS/nixpkgs/issues/312297>; the Rust
implementation has more accurate handling of failed systemd units.

We slightly adjust the semantics of `system.switch.enable{,Ng}` to
not conflict with each other, so that `system.switch.enableNg` is
on by default, but turning off `system.switch.enable` still results
in no `switch-to-configuration` implementation being used. This
won’t break the configuration of anyone who already opted in to
`system.switch.enableNg` and is probably how the option should have
worked to begin with.
2024-09-06 08:35:43 +01:00
github-actions[bot]
6802206bcc
Merge master into staging-next 2024-09-06 06:04:31 +00:00
Kier Davis
3732e94603
maintainers: remove kierdavis 2024-09-06 07:01:02 +01:00
Aleksana
3be36da2d2
unl0kr: remove tomfitzhenry@ as maintainer (#333616) 2024-09-06 12:50:55 +08:00
Yt
fcc6387b76
nixos/stalwart-mail: package and configure webadmin (#314820) 2024-09-06 01:03:27 +00:00
github-actions[bot]
25ef10109d
Merge master into staging-next 2024-09-06 00:13:20 +00:00
Felix Bühler
d7a108054a
nixos/security.acme: remove with lib; (#339101) 2024-09-06 00:08:41 +02:00
Will Fancher
a96e54fe52
initrd: use the new tmpfiles options to create tmpfiles config (#339503) 2024-09-05 17:02:30 -04:00
Will Fancher
5a575e88b6
Revert "nixos: support dm-verity" 2024-09-05 15:56:49 -04:00
Nick Cao
8edc668914
matrix: migrated links to new element-hq org (#339817) 2024-09-05 15:56:44 -04:00
Philip Taron
2dd2a33447
nixos/installer: drop support for ReiserFS and JFS (#339821) 2024-09-05 11:30:06 -07:00
Martin Weinelt
cd601fe2ed
matrix-appservice-irc: 2.0.1 -> 3.0.0 (#339603) 2024-09-05 20:08:28 +02:00
github-actions[bot]
769b11176d
Merge master into staging-next 2024-09-05 18:03:49 +00:00
Philip Taron
9c5c04ca43
nixos/services.ceph: remove with lib; (#339093) 2024-09-05 10:38:52 -07:00
Emily
7b9bb0a9a1 nixos/installer: drop support for ReiserFS and JFS
ReiserFS has not been actively maintained for many years. It has been
marked as obsolete since Linux 6.6, and is scheduled for removal
in 2025. A warning is logged informing users of this every time a
ReiserFS file system is mounted. It suffers from unfixable issues
like the year 2038 problem.

JFS is a slightly more ambiguous case. It also has not been actively
maintained for years; even in 2008 questions were being raised
about its maintenance state  and IBM’s commitment to it, and some
enterprise distributions were opting not to ship support for it as
a result. It will [indefinitely postpone journal writes], leading
to data loss over potentially arbitrary amounts of time. Kernel
developers [considered marking it as deprecated] last year, but
no concrete decision was made. There have been [occasional fixes]
to the code since then, but even the developer of much of those was
not opposed to deprecating it.

[considered marking it as deprecated]: https://lore.kernel.org/lkml/Y8DvK281ii6yPRcW@infradead.org/
[indefinitely postpone journal writes]: https://www.usenix.org/legacy/events/usenix05/tech/general/full_papers/prabhakaran/prabhakaran.pdf
[occasional fixes]: https://www.phoronix.com/news/JFS-Linux-6.7-Improvements

Regardless of whether JFS should be removed from the kernel, with all
the implications for existing installations that entails, I think
it’s safe to say that no new Linux installation should be using
either of these file systems, and that it’s a waste of space and
potential footgun to be shipping support for them on our standard
installation media. We’re lagging behind other distributions on
this decision; neither is supported by Fedora’s installation media.

(It also just so happens that `jfsutils` is the one remaining package
in the minimal installer ISO that has reproducibility issues, due to
some cursed toolchain bug, but I’m not trying to Goodhart’s law
this or anything. I just think we shouldn’t be shipping it anyway.)
2024-09-05 16:00:35 +01:00
paumr
0088e7d130 matrix: migrated links to new element-hq org
The vector-im GitHub organisation has been renamed to element-hq:
1d586281f0/profile/README.md
2024-09-05 16:40:06 +02:00
phaer
b6114fd1d5 hyperv-image: double default size 2024-09-05 15:56:25 +02:00
phaer
3a505620ec hyperv-image: use virtualisation.diskSize 2024-09-05 15:56:25 +02:00
phaer
f8a876644b virtualbox-image: use virtualisation.diskSize 2024-09-05 15:56:25 +02:00
phaer
a4b1638f7f azure-image: use virtualisation.diskSize 2024-09-05 15:56:25 +02:00
phaer
d223461d54 digital-ocean-image: use virtualisation.diskSize
This makes negative diskSizes, that were previously allowed illegal.
2024-09-05 15:56:25 +02:00
phaer
d37a3ea1ef promox-image: use virtualisation.diskSize 2024-09-05 15:56:24 +02:00
phaer
9e18e9fedc google-compute-image: use virtualisation.diskSize 2024-09-05 15:56:24 +02:00
phaer
048599f0d7 linode-image: use virtualisation.diskSize 2024-09-05 15:56:24 +02:00
phaer
564b6ce153 oci-{options,image}: use virtualisation.diskSize 2024-09-05 15:56:24 +02:00
phaer
94634e82f8 macos-builder: use virtualisation.diskSize...
...and drop virtualisation.darwin-builder.diskSize.

This makes negative diskSizes illegal.
2024-09-05 15:56:24 +02:00
phaer
39df221e77 virtualisation-options: init
see header comment in virtualisation-options.nix
2024-09-05 15:56:24 +02:00
phaer
04fadac429 run nixfmt-rfc-style 2024-09-05 15:56:22 +02:00
Emily
8b16862469
brightboxImage: remove, as it seems unmaintained (#339790) 2024-09-05 14:20:39 +01:00
phaer
74180c6159 brightboxImage: remove, as it seems unmaintained
...and is broken/flaky on master, due to custom script with mknod usage.
2024-09-05 14:40:29 +02:00
github-actions[bot]
37c947df6c
Merge master into staging-next 2024-09-05 12:05:31 +00:00
K900
1e41473cf0
nixos/orca: init, enable by default on Plasma (#339069) 2024-09-05 14:01:33 +03:00
nikstur
f349590f46
auditd: fix service ordering (#339465) 2024-09-05 11:19:14 +02:00
Frédéric Christ
6aba98aefd nixos/testing: Fix tty output
Prior to this contribution, the Kernel's frame buffer output
boot log wasn't visible on the graphical console.

Now, we can also test applications with graphical output that run
during the boot process.
2024-09-05 10:54:55 +02:00
K900
5a4ee0a587 nixos/pantheon: switch to Orca module 2024-09-05 11:52:53 +03:00
K900
69d2dc4d43 nixos/gnome: switch to Orca module 2024-09-05 11:52:53 +03:00
K900
029879164d nixos/cinnamon: switch to Orca module 2024-09-05 11:48:46 +03:00
Ryan Horiguchi
737d1ffb22 netdata: 1.46.1 -> 1.47.0 2024-09-05 10:19:35 +02:00
Tom Fitzhenry
752afd12e7 unl0kr: remove tomfitzhenry@ as maintainer 2024-09-05 18:10:59 +10:00
r-vdp
38d73e0c07
auditd: add a dependency on systemd-tmpfiles-setup
This is needed so that:
- users have been created (when using systemd-sysusers or userborn)
- /run and /var/run exist
2024-09-05 10:05:18 +02:00
K900
cda3c82d92 nixos/plasma5: enable Orca by default 2024-09-05 10:55:34 +03:00
K900
0f03350dc9 nixos/plasma6: enable Orca by default 2024-09-05 10:55:34 +03:00
K900
64da401049 nixos/orca: init very simple module 2024-09-05 10:55:34 +03:00
r-vdp
6ccc6bf4d2
initrd: emit a warning when tmpfiles config is created manually 2024-09-05 09:55:29 +02:00
Azat Bahawi
187f4340c6
nixos/endlessh-go: allow overriding package (#339459) 2024-09-05 07:48:21 +00:00
Moritz Sanft
d0213a75e0
nixos: support dm-verity 2024-09-05 08:42:53 +02:00
Jonas Heinrich
880bd89c4d nixos/stalwart-mail: package and configure webadmin 2024-09-05 08:33:58 +02:00
github-actions[bot]
b00b35b402
Merge master into staging-next 2024-09-05 06:04:41 +00:00
Vivek Revankar
15b474ae05 nixos/endlessh-go: allow overriding package
allow overriding the endlessh-go package used in the service
2024-09-04 22:28:54 -07:00
Vivek
17a46028b9 nixos/endlessh-go: fix firewall bugs
this change fixes 2 major bugs in the endlessh-go service's firewall options:

1. prometheus port unexpectedly allowed through firewall (services.endlessh-go.openFirewall)

the description of the option is "Whether to open a firewall port for the SSH listener." however as we can see, both the ssh listener AND the prometheus listener have their ports opened. this is especially troublesome because endlessh-go (i guess as an artifact of being developed for docker) defaults the prometheus listener to 0.0.0.0.

2. the prometheus port unexpectedly allowed through firewall when prometheus is disabled (services.endlessh-go.prometheus.enable)

even when prometheus is disabled, its port is allowed through the firewall
2024-09-04 20:32:47 -07:00
rewine
0daec7844f
deepin desktop environment: 2024.09 update (#338402) 2024-09-05 10:08:27 +08:00
Martin Weinelt
ad601344e1
Revert "nixos/version: validate system.stateVersion" (#339671)
This broke the eval of the ISOs on nixos/unstable-small and likely nixos/trunk-combined. See #339671 for details.
2024-09-05 03:22:20 +02:00
github-actions[bot]
74cdd9c9b1
Merge master into staging-next 2024-09-05 00:13:11 +00:00
Felix Buehler
03a0f9debe nixos/security.acme: remove with lib; 2024-09-05 00:28:18 +02:00
Felix Bühler
d7ed3794f0
nixos/services.unpoller: remove with lib; (#339094) 2024-09-04 23:52:53 +02:00
Emily
42e6ee04b1
nixos/*: use pipewire by default (#339209) 2024-09-04 22:42:18 +01:00
Martin Weinelt
d3df411913
nixos/matrix-appservice-irc: media proxying support
Adds required options for serving authenticated media and the key
generation logic.
2024-09-04 21:05:50 +02:00
Johannes Jöns
3df1783166
nixos/version: validate system.stateVersion (#317858) 2024-09-04 18:09:57 +00:00
github-actions[bot]
563bb0fbc2
Merge master into staging-next 2024-09-04 18:04:23 +00:00
Philip Taron
271d117596
treewide: fix eval related to with lib; removal (#339356) 2024-09-04 09:42:58 -07:00
Maciej Krüger
bf757cefa9
Revert "nixos/firewall: fix reverse path check failures with IPsec" (#339393) 2024-09-04 18:39:17 +02:00
éclairevoyant
f6306c0961
treewide: fix eval related to with lib; removal 2024-09-04 12:21:09 -04:00
Florian Klink
bcc7693c76
nixos/timesyncd: allow NTP servers advertised by DHCP to be used (#335755) 2024-09-04 22:53:48 +07:00
Aleksana
43aabb266d
nixos/github-runner: fix build failure (#339452) 2024-09-04 22:15:57 +08:00
r-vdp
d558554243
initrd: use the new tmpfiles options to create tmpfiles config
Otherwise we get a clash when generating the initrd since the initrd tmpfiles
options create a symlink at /etc/tmpfiles.d/ and any subsequent writes inside
this directory because of initrd.systemd.contents will cause a permission denied
error.
2024-09-04 14:39:03 +02:00
github-actions[bot]
4be617cf77
Merge master into staging-next 2024-09-04 12:06:17 +00:00
K900
e90bac5a65 nixos/plasma5: clean up pulseaudio-related things 2024-09-04 13:56:51 +03:00
K900
5a0ceb9243 nixos/pantheon: don't enable Pulseaudio 2024-09-04 13:56:50 +03:00
K900
c6777a9dd8 nixos/lomiri: don't enable Pulseaudio 2024-09-04 13:56:50 +03:00
K900
78d6adf386 nixos/installer: don't enable Pulseaudio 2024-09-04 13:56:50 +03:00
K900
644cf688b3 nixos/graphical: don't enable Pulseaudio 2024-09-04 13:56:42 +03:00
K900
2ed8e5f614 nixos/gnome: don't enable Pulseaudio 2024-09-04 13:56:42 +03:00
K900
8c2dd1b1be nixos/deepin: don't enable Pulseaudio 2024-09-04 13:56:42 +03:00
K900
6bd9daa1c6 nixos/cinnamon: don't enable Pulseaudio 2024-09-04 13:56:42 +03:00
K900
80a7f7effd nixos/budgie: don't enable Pulseaudio 2024-09-04 13:56:42 +03:00
K900
438fd16359 nixos/graphical-desktop: enable Pipewire audio by default 2024-09-04 13:56:42 +03:00
K900
dcd4151fd6 nixos/steam: also enable 32-bit Pipewire plugins 2024-09-04 13:56:42 +03:00