Commit Graph

33510 Commits

Author SHA1 Message Date
K900
5cef278170 nixos/qemu-vm: expose installBootLoader as an option, assert when it's enabled without stc
We need stc to actually, well, install the bootloader.
2024-09-12 15:43:28 +03:00
Aaron Andersen
768f41fcf0
Revert "nixos/openvpn: add extraArgs option" (#341223) 2024-09-12 06:34:16 -04:00
Florian Agbuya
317a52a757 flarum: fix installation and migration logic 2024-09-12 16:14:41 +08:00
⛧-440729 [sophie]
81b0701a4d
nixos/invidious: add options for configuring inv-sig-helper 2024-09-12 09:08:02 +02:00
Aleksana
5126cb8d1f
ankisyncd: remove (#333609) 2024-09-12 09:13:29 +08:00
Jean-François Roche
251b0c958f nixos/systemd-boot: Fix regression in builder script
Avoid running Python scripts in the root of the package, as this
triggers `os.listdir` on the Nix store directory during import. This
operation can be time-consuming on large store directories
(see issue #283795 for more details).

The issue was initially fixed in #284153 but was reverted in #306339.

Co-authored-by: Sönke Hahn <soenkehahn@gmail.com>
2024-09-12 01:29:32 +02:00
nikstur
24526ed710
nixos/userborn: respect createHome and convert home from path to string (#341180) 2024-09-11 23:44:34 +02:00
Felix Buehler
2b6ef00729 nixos/services.xserver.desktopManager.phosh: remove with lib; 2024-09-11 22:25:00 +02:00
Bjørn Forsman
1cb392fdcd nixos/ups: set env vars in the global environment
This allows using upsdrvctl interactively, which otherwise tries to use
a missing ups.conf in the Nix store, instead of the correct
/etc/nut/ups.conf.
2024-09-11 21:14:48 +02:00
Bjørn Forsman
801388a6fa nixos/ups: deduplicate environment variables
No functional change, but more DRY.
2024-09-11 21:14:48 +02:00
Michele Guerini Rocco
b94f259714
nixos/wireless: reimplement secrets using ext_password_backend (#180872) 2024-09-11 19:58:36 +02:00
Aaron Andersen
45dd09667f
Revert "nixos/openvpn: add extraArgs option" 2024-09-11 12:59:03 -04:00
Felix Bühler
686fa55f27
nixos/iso-image: remove with lib; (#339102) 2024-09-11 18:57:35 +02:00
Felix Bühler
3884721bad
nixos/services.mpd: remove with lib; (#339100) 2024-09-11 17:22:14 +02:00
Lin Yinfeng
33e796b66f
nixos/userborn: convert users.users.<name>.home to string
If `opts.home` is not a string, an evaluation failure occurs in
`mapAttrs'`. Converting `opts.home` to string solves this issue.

The type of `users.users.<name>.home` is `lib.types.path`. Values
other than strings, e.g., derivations can also have the type
`lib.types.path`.
2024-09-11 18:28:58 +08:00
Lin Yinfeng
d3fdfb473d
nixos/userborn: support users.users.<name>.createHome 2024-09-11 18:09:29 +08:00
John Titor
1c7e6a2de9
nixos/shairport-sync: Add pulse group also for pipewire
Works according to https://github.com/mikebrady/shairport-sync/issues/1171

From 0e4664b497
2024-09-11 15:21:14 +05:30
Robert Cambridge
08afe03265 fix bug where nix store DB would not be loadable if root was not mounted on / 2024-09-11 09:59:22 +02:00
Robert Cambridge
52bb3ddb86 fix bug where sdImage.expandOnBoot=false would prevent nix-store from loading DB 2024-09-11 09:59:10 +02:00
Dominique Martinet
2b5ca0f433 ankisyncd: remove 2024-09-11 13:53:06 +08:00
Josh Hoffer
d308cfcb38 nixos/netboot: mount squashfs with threads=multi 2024-09-10 22:02:20 -07:00
Josh Hoffer
ff8b2d5162 nixos/iso-image: mount squashfs with threads=multi 2024-09-10 22:01:39 -07:00
Aaron Andersen
7398438255
nixos/openvpn: add extraArgs option (#339016) 2024-09-10 19:36:32 -04:00
Emily
1a55636200
nixos/dokuwiki: don’t use lib.escapeShellArg (#340309) 2024-09-11 00:34:05 +01:00
Robert Hensing
2e702d07bb nix: nix_2_18 -> nix_2_24 2024-09-10 23:20:48 +02:00
Felix Bühler
c4dd50a721
nixos/services.snapserver: remove with lib; (#339099) 2024-09-10 22:17:09 +02:00
Felix Bühler
6cc52ec011
nixos/services.graphite: remove with lib; (#339095) 2024-09-10 22:15:56 +02:00
Rick van Schijndel
cbf48cea2d
activation: avoid error due to unset PATH variable (#340488) 2024-09-10 21:58:24 +02:00
Felix Bühler
dc5ff75973
nixos/services.portunus: remove with lib; (#339097) 2024-09-10 21:41:55 +02:00
Felix Bühler
9ac4d48271
nixos/services.borgbackup: remove with lib; (#339098) 2024-09-10 21:41:29 +02:00
Felix Bühler
2954826541
nixos/services.taskserver: remove with lib; (#339104) 2024-09-10 21:41:05 +02:00
Felix Buehler
674e5ad68a nixos/services.mpd: remove with lib; 2024-09-10 21:40:16 +02:00
Felix Buehler
e3ee1a97d4 nixos/iso-image: remove with lib; 2024-09-10 21:36:16 +02:00
Felix Bühler
7a46626d03
nixos/services.rippled: remove with lib; (#339106) 2024-09-10 21:35:12 +02:00
Adam C. Stephens
fbbafbb834
nixos/services.radicle: remove with lib; (#339105) 2024-09-10 12:00:35 -04:00
Artturin
95db943c8d
nixos/teeworlds: add option environmentFile for injecting secrets (#334590) 2024-09-10 18:30:00 +03:00
Aleksana
1579b92dd4
todesk: init at 4.7.2.0 (#310474) 2024-09-10 21:42:59 +08:00
r-vdp
a03d5e6f56
waybar: the systemd unit is coming from the package now 2024-09-10 14:12:45 +02:00
Kerstin
5a39b9e407
Gancio service fixes (#340782) 2024-09-10 13:34:07 +02:00
Jean-Baptiste Giraudeau
3a33b6c3a8
nixos/gancio: set default value for settings.baseurl 2024-09-10 13:13:32 +02:00
Jean-Baptiste Giraudeau
432bfec026
nixos/gancio: use unix socket between nginx and gancio 2024-09-10 13:13:28 +02:00
nicoo
9e5a44bcfc
nixos/podman: set preferLocalBuild on trivial runCommands (#340980) 2024-09-10 10:53:46 +00:00
eyjhb
a719f91a85
nixos/teeworlds: use lib.getExe instead of hardcoded path 2024-09-10 11:40:24 +02:00
eyjhb
e233e7d385
nixos/teeworlds: add option environmentFile for injecting secrets 2024-09-10 11:39:55 +02:00
h7x4
c2090cb303
wstunnel: the ping frequency can now also be configured for the server (#339232) 2024-09-10 10:27:42 +02:00
Vladimír Čunát
28e9b6d60f
Merge staging-next 2024-09-01 (#338840) 2024-09-10 07:42:45 +02:00
Maximilian Bosch
86af11a626
Merge: prometheus-pgbouncer-exporter: 0.8.0 -> 0.9.0, fix secrets handling (#340852) 2024-09-10 07:23:10 +02:00
Martin Weinelt
4cec81a995
Revert "modules/virtualisation: add shared options, merge various diskSize options" (#340894)
Breaks evaluation of all nixos tests, and is therefore a channel blocker.
2024-09-10 03:12:55 +02:00
github-actions[bot]
6811659137
Merge master into staging-next 2024-09-10 00:13:21 +00:00
Artturin
833c74afa4
kexec: fix shellcheck issues (#340487) 2024-09-09 23:38:36 +03:00
Jonas Chevalier
7c4dde339a
modules/virtualisation: add shared options, merge various diskSize options (#339535) 2024-09-09 21:23:11 +02:00
Maximilian Bosch
862ecd674f
nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline
Since `connectionStringFile` reads the file and puts it into the
invocation of the exporter, it's part of the cmdline and thus
effectively world-readable.

Added a new `connectionEnvFile` which is supposed to be an environment
file of the form

  PGBOUNCER_EXPORTER_CONNECTION_STRING=...

that will be added to the systemd service. The exporter will read the
connection string from that value.
2024-09-09 21:08:17 +02:00
Maximilian Bosch
4980a7d938
nixos/prometheus-exporters: fix assertions declared in exporter modules
And it turns out, the test was using a removed option all along 🙃
2024-09-09 21:08:17 +02:00
Martin Weinelt
58aa6d56f6
nixos/matrix-appservice-irc: allow disabling the ttl by setting it to 0 (#340841) 2024-09-09 20:58:45 +02:00
Martin Weinelt
420398889e
nixos/matrix-appservice-irc: allow disabling media lifetime
Posting media URLs to IRC that vanish, when they can be refetched from
the remote server they were originated from is not great UX.
2024-09-09 20:35:13 +02:00
Rick van Schijndel
f6b2548c60
nixos/hydra: unset SSL_CERT_FILE (#338536) 2024-09-09 20:29:36 +02:00
github-actions[bot]
a90b3d5ddb
Merge master into staging-next 2024-09-09 18:05:44 +00:00
Rick van Schijndel
0eb77d8da5
nixos/hydra: add system-hydra.slice, fix typo (#338532) 2024-09-09 19:47:21 +02:00
Felix Bühler
3ffbdee67c
nixos/services.snapper: remove with lib; (#339096) 2024-09-09 18:36:49 +02:00
github-actions[bot]
f3e8528ff7
Merge master into staging-next 2024-09-09 14:31:17 +00:00
Jean-Baptiste Giraudeau
58ec286785
nixos/gancio: actually enable ssl by default. 2024-09-09 15:48:52 +02:00
K900
cb1b8436a3
nixos-install: fail if we can't set up bootloader (#340522) 2024-09-09 16:21:54 +03:00
K900
a9c0a2e2a1
nixos/tests: don't include switch-to-configuration in DUT by default (#340445) 2024-09-09 16:20:41 +03:00
github-actions[bot]
90a93f92bb
Merge master into staging-next 2024-09-09 12:05:58 +00:00
Jacek Galowicz
5aae39d683
nixos/testing: Fix graphical tty output (#339730) 2024-09-09 10:23:37 +02:00
github-actions[bot]
92d531057e
Merge master into staging-next 2024-09-09 06:05:06 +00:00
Aleksana
12f0b2ff82
systemd-boot: Add option for consoleMode to support SteamDeck (#340597) 2024-09-09 12:10:20 +08:00
Aleksana
03e62e5bc3
podman: drop slirp4netns which has been replaced by passt (#313670) 2024-09-09 09:53:33 +08:00
Pol Dellaiera
bcb04b0967
open-webui: Add environmentFile option (#334830) 2024-09-09 03:28:37 +02:00
Martin Weinelt
01d0b0b683
nixos/logrotate: harden systemd unit
Logrotate is a service that runs as root and moves logfiles around while
keeping ownership of these files intact. This means we can and should
severely limit the scope of what can be done during its runtime.
2024-09-09 02:53:36 +02:00
github-actions[bot]
f2b767ea43
Merge master into staging-next 2024-09-09 00:14:38 +00:00
Anthony ROUSSEL
603159799c nixos/samba: revert default values 2024-09-08 23:43:10 +02:00
Kerstin
e248589c0f
gancio: init at 1.19.0 (#279011) 2024-09-08 22:51:23 +02:00
Petr Hodina
a9f77c2fb0 systemd-boot: Add option for consoleMode to support SteamDeck 2024-09-08 22:48:21 +02:00
Sarah Brofeldt
8a508485c4
nixos/kubernetes: add extraConfig to kubelet config (#338526) 2024-09-08 20:35:46 +02:00
github-actions[bot]
3b1652aad3
Merge master into staging-next 2024-09-08 18:04:04 +00:00
Peder Bergebakken Sundt
b7bb0f2190 nixos/ttyd: reduce inherit (lib) 2024-09-08 19:00:53 +02:00
Peder Bergebakken Sundt
a02d94279b nixos/ttyd: allow caFile=null when enableSSL=true
Co-authored-by: Douglas Mayle <douglas@mayle.org>
2024-09-08 18:55:44 +02:00
Jean-Baptiste Giraudeau
f5e44554c4
nixos/gancio: init module 2024-09-08 18:09:57 +02:00
Emily
2d562e9175
security/acme: shellcheck fixes (#340491) 2024-09-08 16:27:17 +01:00
K900
7771e0b943 nixos/specialisation: add isSpecialisation option to know if we're a specialisation 2024-09-08 17:04:44 +03:00
phaer
37cf9cbb22
security/dhparams: shellcheck fixes 2024-09-08 12:31:15 +02:00
phaer
22794b93e0
security/acme: shellcheck fixes 2024-09-08 12:29:58 +02:00
r-vdp
e2db383cb6
activation: avoid error due to unset PATH variable 2024-09-08 12:27:06 +02:00
r-vdp
955e3cd8fe
kexec: fix shellcheck issues 2024-09-08 12:26:22 +02:00
K900
fa39e3d642 nixos-install: fail if we can't set up bootloader 2024-09-08 11:05:59 +03:00
Guanran Wang
bde8f99741
nixos/amd-microcode: remove alias 2024-09-08 15:15:12 +08:00
Guanran Wang
a55aaa547c
nixos/intel-microcode: remove alias 2024-09-08 15:11:50 +08:00
github-actions[bot]
69276ad883
Merge master into staging-next 2024-09-08 06:04:18 +00:00
Yuxuan Shui
036d05a466 nixos/samba: fix migration guide for securityType 2024-09-08 00:26:27 +01:00
github-actions[bot]
5a5ebe5a1c
Merge master into staging-next 2024-09-07 18:04:01 +00:00
Martin Weinelt
458c073712
neard: 0.18 -> 0.19-unstable-2024-07-02 (#337524) 2024-09-07 18:00:14 +02:00
Florian Klink
3aca239152
nixos/caddy: restart caddy on config change when "enableReload" is turned off (#335983) 2024-09-07 22:22:24 +07:00
ash
2bab9e4eba nixos/dokuwiki: factor out toPhpString 2024-09-07 15:30:54 +01:00
K900
d1c49286e9
nixos/samba: fix conditional activation of samba services (#340272) 2024-09-07 16:53:16 +03:00
ash
345c8a7310 nixos/dokuwiki: don’t use lib.escapeShellArg
PHP strings don't obey shell quoting rules. See #333744.
2024-09-07 14:39:07 +01:00
Weijia Wang
bad886d556
ayatana-indicator-bluetooth: init at 24.5.0 (#336982) 2024-09-07 14:46:32 +02:00
github-actions[bot]
de15243c9a
Merge master into staging-next 2024-09-07 12:04:51 +00:00
Azat Bahawi
3f2297f073
nixos/endlessh-go: fix firewall bugs (#339701) 2024-09-07 10:22:25 +00:00
Aleksana
b4b441a852
nixos/matterbridge: add services.matterbridge.package option (#340180) 2024-09-07 16:27:52 +08:00
Anthony ROUSSEL
1938960bfe nixos/samba: fix conditional activation of samba services 2024-09-07 10:16:03 +02:00
K900
f7e4fc6e56
Wireplumber 0.5.6 (#340154) 2024-09-07 09:46:17 +03:00
github-actions[bot]
b6b2ac4f61
Merge master into staging-next 2024-09-07 00:12:59 +00:00
kirillrdy
5f4c0543d2
Flarum: fix installation and client interface issues (#339202) 2024-09-07 06:32:54 +10:00
Leona Maroni
7d414ecebb
sway: integrate with systemd (#323670) 2024-09-06 22:25:11 +02:00
Gabriel Fontes
13f6e6da35
nixos/matterbridge: add services.matterbridge.package option 2024-09-06 17:07:41 -03:00
Will Fancher
3f4b9096f6
nixos/zfs: mitigate data loss issues when resuming from hibernate (#208037) 2024-09-06 14:50:59 -04:00
github-actions[bot]
079813d5c4
Merge master into staging-next 2024-09-06 18:03:54 +00:00
K900
a0134dd1d8 nixos/wireplumber: drop hack for systemwide setups
Should not be necessary with 0.5.6.
2024-09-06 20:58:12 +03:00
Aaron Ecay
345618de26
nixos/zfs: mitigate data loss issues when resuming from hibernation 2024-09-06 13:39:21 -04:00
Bjørn Forsman
4861c28956 homebox: update URLs in documentation
https://github.com/hay-kot/homebox was archived on 2024-06-12 and we use
the https://github.com/sysadminsmedia/homebox fork since the beginning,
in commit 4be8e799db
("homebox: init at 0.13.0").

Update the documentation to be in sync with the source we build from.
2024-09-06 19:34:15 +02:00
Anthony Roussel
56ae1fb452 nixos/samba: split and sync SystemD services with upstream 2024-09-06 17:53:22 +02:00
Anthony Roussel
ac29b192d8 nixos/samba: use mkEnableOption when possible 2024-09-06 17:53:22 +02:00
Anthony Roussel
3f0b4964c3 nixos/samba: add documentation to systemd.services 2024-09-06 17:53:22 +02:00
Anthony Roussel
7a3bba220d nixos/samba: add services.samba.smbd.enable option 2024-09-06 17:53:22 +02:00
Anthony Roussel
ee6c8db585 nixos/samba: reorganize and rename module options 2024-09-06 17:53:22 +02:00
Anthony Roussel
3b48a7e013 nixos/samba: add documentation 2024-09-06 17:53:22 +02:00
Anthony Roussel
988c598106 nixos/samba: migrate to structural settings (RFC42) 2024-09-06 17:53:22 +02:00
laalsaas
a89b885ae9 sway: integrate with systemd
see: https://github.com/swaywm/sway/wiki/Systemd-integration
2024-09-06 15:59:37 +02:00
github-actions[bot]
bd4b5a5be6
Merge master into staging-next 2024-09-06 12:05:08 +00:00
ajs124
54604767a2
remove myself from maintainer list of packages I don't use anymore (#339910) 2024-09-06 13:05:55 +02:00
OPNA2608
132b5ce9d3 nixos/lomiri: Add bluetooth indicator 2024-09-06 12:08:10 +02:00
Emily
866a8e220c nixos/perlless: remove redundant system.switch.enableNg
This is now on by default.
2024-09-06 08:35:43 +01:00
Emily
56dea6da87 nixos: switch to switch-to-configuration-ng by default
The Rust `switch-to-configuration-ng` rewrite was carefully written
to be compatible with the original Perl script, has been checked
against NixOS VM tests, and has been available on an opt‐in basis
for testing for the 24.05 release cycle.

The next step towards replacing the Perl script entirely is to
switch it on by default so that we can get real‐world testing from
a much greater number of users. Maintaining two implementations in
parallel is becoming a burden; we are having to adjust the systemd
service activation behaviour slightly to fix a long‐standing bug,
and backporting the changes to the Perl script is an unpleasant
process. We will do it anyway to ensure that the Rust and Perl
implementations keep parity with each other throughout the 24.11
release cycle, but we think the time has come to flip the switch.

Taking this step now will give us two to three months to test this in
the wild before the 24.11 release and gain confidence that there are
no regressions. If any non‐trivial problems arise before the final
release, we will revert to the Perl implementation by default. Doing
this switch ASAP will help to disentangle any problems that might
arise from the Rust implementation from problems that arise from the
systemd service activation changes, or the upcoming switch to using
systemd in stage 1 by default.

The main concern that was raised about replacing the Perl script in the
PR that added `switch-to-configuration-ng` was that it is currently
possible to run NixOS on systems that cannot natively host a Rust
compiler. This does not apply to any platforms that have official
support from NixOS, and as far as I know we do not know of any such
systems with users that are not cross‐compiling anyway.

My understanding is that these systems are already broken by default
anyway, as `systemd.shutdownRamfs.enable` is on by default and uses
`make-initrd-ng`, which is also written in Rust. Switching the default
while keeping the Perl implementation around will give us at least
an entire release cycle to find out if there are any users that will
be affected by this and decide what to do about it if so.

There is currently one known inconsistency between
the Perl and Rust implementations, as documented in
<https://github.com/NixOS/nixpkgs/issues/312297>; the Rust
implementation has more accurate handling of failed systemd units.

We slightly adjust the semantics of `system.switch.enable{,Ng}` to
not conflict with each other, so that `system.switch.enableNg` is
on by default, but turning off `system.switch.enable` still results
in no `switch-to-configuration` implementation being used. This
won’t break the configuration of anyone who already opted in to
`system.switch.enableNg` and is probably how the option should have
worked to begin with.
2024-09-06 08:35:43 +01:00
github-actions[bot]
6802206bcc
Merge master into staging-next 2024-09-06 06:04:31 +00:00
Kier Davis
3732e94603
maintainers: remove kierdavis 2024-09-06 07:01:02 +01:00
Aleksana
3be36da2d2
unl0kr: remove tomfitzhenry@ as maintainer (#333616) 2024-09-06 12:50:55 +08:00
Yt
fcc6387b76
nixos/stalwart-mail: package and configure webadmin (#314820) 2024-09-06 01:03:27 +00:00
github-actions[bot]
25ef10109d
Merge master into staging-next 2024-09-06 00:13:20 +00:00
Felix Bühler
d7a108054a
nixos/security.acme: remove with lib; (#339101) 2024-09-06 00:08:41 +02:00
Will Fancher
a96e54fe52
initrd: use the new tmpfiles options to create tmpfiles config (#339503) 2024-09-05 17:02:30 -04:00
Will Fancher
5a575e88b6
Revert "nixos: support dm-verity" 2024-09-05 15:56:49 -04:00
Nick Cao
8edc668914
matrix: migrated links to new element-hq org (#339817) 2024-09-05 15:56:44 -04:00
Philip Taron
2dd2a33447
nixos/installer: drop support for ReiserFS and JFS (#339821) 2024-09-05 11:30:06 -07:00
Martin Weinelt
cd601fe2ed
matrix-appservice-irc: 2.0.1 -> 3.0.0 (#339603) 2024-09-05 20:08:28 +02:00
github-actions[bot]
769b11176d
Merge master into staging-next 2024-09-05 18:03:49 +00:00
Philip Taron
9c5c04ca43
nixos/services.ceph: remove with lib; (#339093) 2024-09-05 10:38:52 -07:00
Emily
7b9bb0a9a1 nixos/installer: drop support for ReiserFS and JFS
ReiserFS has not been actively maintained for many years. It has been
marked as obsolete since Linux 6.6, and is scheduled for removal
in 2025. A warning is logged informing users of this every time a
ReiserFS file system is mounted. It suffers from unfixable issues
like the year 2038 problem.

JFS is a slightly more ambiguous case. It also has not been actively
maintained for years; even in 2008 questions were being raised
about its maintenance state  and IBM’s commitment to it, and some
enterprise distributions were opting not to ship support for it as
a result. It will [indefinitely postpone journal writes], leading
to data loss over potentially arbitrary amounts of time. Kernel
developers [considered marking it as deprecated] last year, but
no concrete decision was made. There have been [occasional fixes]
to the code since then, but even the developer of much of those was
not opposed to deprecating it.

[considered marking it as deprecated]: https://lore.kernel.org/lkml/Y8DvK281ii6yPRcW@infradead.org/
[indefinitely postpone journal writes]: https://www.usenix.org/legacy/events/usenix05/tech/general/full_papers/prabhakaran/prabhakaran.pdf
[occasional fixes]: https://www.phoronix.com/news/JFS-Linux-6.7-Improvements

Regardless of whether JFS should be removed from the kernel, with all
the implications for existing installations that entails, I think
it’s safe to say that no new Linux installation should be using
either of these file systems, and that it’s a waste of space and
potential footgun to be shipping support for them on our standard
installation media. We’re lagging behind other distributions on
this decision; neither is supported by Fedora’s installation media.

(It also just so happens that `jfsutils` is the one remaining package
in the minimal installer ISO that has reproducibility issues, due to
some cursed toolchain bug, but I’m not trying to Goodhart’s law
this or anything. I just think we shouldn’t be shipping it anyway.)
2024-09-05 16:00:35 +01:00
paumr
0088e7d130 matrix: migrated links to new element-hq org
The vector-im GitHub organisation has been renamed to element-hq:
1d586281f0/profile/README.md
2024-09-05 16:40:06 +02:00
phaer
b6114fd1d5 hyperv-image: double default size 2024-09-05 15:56:25 +02:00
phaer
3a505620ec hyperv-image: use virtualisation.diskSize 2024-09-05 15:56:25 +02:00
phaer
f8a876644b virtualbox-image: use virtualisation.diskSize 2024-09-05 15:56:25 +02:00
phaer
a4b1638f7f azure-image: use virtualisation.diskSize 2024-09-05 15:56:25 +02:00
phaer
d223461d54 digital-ocean-image: use virtualisation.diskSize
This makes negative diskSizes, that were previously allowed illegal.
2024-09-05 15:56:25 +02:00
phaer
d37a3ea1ef promox-image: use virtualisation.diskSize 2024-09-05 15:56:24 +02:00
phaer
9e18e9fedc google-compute-image: use virtualisation.diskSize 2024-09-05 15:56:24 +02:00
phaer
048599f0d7 linode-image: use virtualisation.diskSize 2024-09-05 15:56:24 +02:00
phaer
564b6ce153 oci-{options,image}: use virtualisation.diskSize 2024-09-05 15:56:24 +02:00
phaer
94634e82f8 macos-builder: use virtualisation.diskSize...
...and drop virtualisation.darwin-builder.diskSize.

This makes negative diskSizes illegal.
2024-09-05 15:56:24 +02:00
phaer
39df221e77 virtualisation-options: init
see header comment in virtualisation-options.nix
2024-09-05 15:56:24 +02:00
phaer
04fadac429 run nixfmt-rfc-style 2024-09-05 15:56:22 +02:00
Emily
8b16862469
brightboxImage: remove, as it seems unmaintained (#339790) 2024-09-05 14:20:39 +01:00
phaer
74180c6159 brightboxImage: remove, as it seems unmaintained
...and is broken/flaky on master, due to custom script with mknod usage.
2024-09-05 14:40:29 +02:00
github-actions[bot]
37c947df6c
Merge master into staging-next 2024-09-05 12:05:31 +00:00
K900
1e41473cf0
nixos/orca: init, enable by default on Plasma (#339069) 2024-09-05 14:01:33 +03:00
nikstur
f349590f46
auditd: fix service ordering (#339465) 2024-09-05 11:19:14 +02:00
Frédéric Christ
6aba98aefd nixos/testing: Fix tty output
Prior to this contribution, the Kernel's frame buffer output
boot log wasn't visible on the graphical console.

Now, we can also test applications with graphical output that run
during the boot process.
2024-09-05 10:54:55 +02:00
K900
5a4ee0a587 nixos/pantheon: switch to Orca module 2024-09-05 11:52:53 +03:00
K900
69d2dc4d43 nixos/gnome: switch to Orca module 2024-09-05 11:52:53 +03:00
K900
029879164d nixos/cinnamon: switch to Orca module 2024-09-05 11:48:46 +03:00
Ryan Horiguchi
737d1ffb22 netdata: 1.46.1 -> 1.47.0 2024-09-05 10:19:35 +02:00
Tom Fitzhenry
752afd12e7 unl0kr: remove tomfitzhenry@ as maintainer 2024-09-05 18:10:59 +10:00
r-vdp
38d73e0c07
auditd: add a dependency on systemd-tmpfiles-setup
This is needed so that:
- users have been created (when using systemd-sysusers or userborn)
- /run and /var/run exist
2024-09-05 10:05:18 +02:00
K900
cda3c82d92 nixos/plasma5: enable Orca by default 2024-09-05 10:55:34 +03:00
K900
0f03350dc9 nixos/plasma6: enable Orca by default 2024-09-05 10:55:34 +03:00
K900
64da401049 nixos/orca: init very simple module 2024-09-05 10:55:34 +03:00
r-vdp
6ccc6bf4d2
initrd: emit a warning when tmpfiles config is created manually 2024-09-05 09:55:29 +02:00
Azat Bahawi
187f4340c6
nixos/endlessh-go: allow overriding package (#339459) 2024-09-05 07:48:21 +00:00
Moritz Sanft
d0213a75e0
nixos: support dm-verity 2024-09-05 08:42:53 +02:00
Jonas Heinrich
880bd89c4d nixos/stalwart-mail: package and configure webadmin 2024-09-05 08:33:58 +02:00
github-actions[bot]
b00b35b402
Merge master into staging-next 2024-09-05 06:04:41 +00:00
Vivek Revankar
15b474ae05 nixos/endlessh-go: allow overriding package
allow overriding the endlessh-go package used in the service
2024-09-04 22:28:54 -07:00
Vivek
17a46028b9 nixos/endlessh-go: fix firewall bugs
this change fixes 2 major bugs in the endlessh-go service's firewall options:

1. prometheus port unexpectedly allowed through firewall (services.endlessh-go.openFirewall)

the description of the option is "Whether to open a firewall port for the SSH listener." however as we can see, both the ssh listener AND the prometheus listener have their ports opened. this is especially troublesome because endlessh-go (i guess as an artifact of being developed for docker) defaults the prometheus listener to 0.0.0.0.

2. the prometheus port unexpectedly allowed through firewall when prometheus is disabled (services.endlessh-go.prometheus.enable)

even when prometheus is disabled, its port is allowed through the firewall
2024-09-04 20:32:47 -07:00
rewine
0daec7844f
deepin desktop environment: 2024.09 update (#338402) 2024-09-05 10:08:27 +08:00
Martin Weinelt
ad601344e1
Revert "nixos/version: validate system.stateVersion" (#339671)
This broke the eval of the ISOs on nixos/unstable-small and likely nixos/trunk-combined. See #339671 for details.
2024-09-05 03:22:20 +02:00
github-actions[bot]
74cdd9c9b1
Merge master into staging-next 2024-09-05 00:13:11 +00:00
Felix Buehler
03a0f9debe nixos/security.acme: remove with lib; 2024-09-05 00:28:18 +02:00
Felix Bühler
d7ed3794f0
nixos/services.unpoller: remove with lib; (#339094) 2024-09-04 23:52:53 +02:00
Emily
42e6ee04b1
nixos/*: use pipewire by default (#339209) 2024-09-04 22:42:18 +01:00
Martin Weinelt
d3df411913
nixos/matrix-appservice-irc: media proxying support
Adds required options for serving authenticated media and the key
generation logic.
2024-09-04 21:05:50 +02:00
Johannes Jöns
3df1783166
nixos/version: validate system.stateVersion (#317858) 2024-09-04 18:09:57 +00:00
github-actions[bot]
563bb0fbc2
Merge master into staging-next 2024-09-04 18:04:23 +00:00
Philip Taron
271d117596
treewide: fix eval related to with lib; removal (#339356) 2024-09-04 09:42:58 -07:00
Maciej Krüger
bf757cefa9
Revert "nixos/firewall: fix reverse path check failures with IPsec" (#339393) 2024-09-04 18:39:17 +02:00
éclairevoyant
f6306c0961
treewide: fix eval related to with lib; removal 2024-09-04 12:21:09 -04:00
Florian Klink
bcc7693c76
nixos/timesyncd: allow NTP servers advertised by DHCP to be used (#335755) 2024-09-04 22:53:48 +07:00
Aleksana
43aabb266d
nixos/github-runner: fix build failure (#339452) 2024-09-04 22:15:57 +08:00
r-vdp
d558554243
initrd: use the new tmpfiles options to create tmpfiles config
Otherwise we get a clash when generating the initrd since the initrd tmpfiles
options create a symlink at /etc/tmpfiles.d/ and any subsequent writes inside
this directory because of initrd.systemd.contents will cause a permission denied
error.
2024-09-04 14:39:03 +02:00
github-actions[bot]
4be617cf77
Merge master into staging-next 2024-09-04 12:06:17 +00:00
K900
e90bac5a65 nixos/plasma5: clean up pulseaudio-related things 2024-09-04 13:56:51 +03:00
K900
5a0ceb9243 nixos/pantheon: don't enable Pulseaudio 2024-09-04 13:56:50 +03:00
K900
c6777a9dd8 nixos/lomiri: don't enable Pulseaudio 2024-09-04 13:56:50 +03:00
K900
78d6adf386 nixos/installer: don't enable Pulseaudio 2024-09-04 13:56:50 +03:00
K900
644cf688b3 nixos/graphical: don't enable Pulseaudio 2024-09-04 13:56:42 +03:00
K900
2ed8e5f614 nixos/gnome: don't enable Pulseaudio 2024-09-04 13:56:42 +03:00
K900
8c2dd1b1be nixos/deepin: don't enable Pulseaudio 2024-09-04 13:56:42 +03:00
K900
6bd9daa1c6 nixos/cinnamon: don't enable Pulseaudio 2024-09-04 13:56:42 +03:00
K900
80a7f7effd nixos/budgie: don't enable Pulseaudio 2024-09-04 13:56:42 +03:00
K900
438fd16359 nixos/graphical-desktop: enable Pipewire audio by default 2024-09-04 13:56:42 +03:00
K900
dcd4151fd6 nixos/steam: also enable 32-bit Pipewire plugins 2024-09-04 13:56:42 +03:00
Kerstin Humm
21ac7729ae nixos/weblate: add borgbackup to path 2024-09-04 12:54:31 +02:00
datafoo
24e08d0e9b nixos/timesyncd: allow NTP servers advertised by DHCP to be used
- add option `fallbackServers` with default to `networking.timeServers`
- option `servers` now default to null

Fix #335050
2024-09-04 12:17:39 +02:00
datafoo
b4cd57870d nixos/timesyncd: allow null for option servers
This gives the ability to not write `NTP=` to the `timesyncd.conf` file
(servers = null) as opposed to writing `NTP=` (servers = []) which is
interpreted slightly differently by systemd:

> When the empty string is assigned, the list of NTP servers is reset,
and all prior assignments will have no effect.
2024-09-04 12:14:24 +02:00
datafoo
34efcf8aef nixos/timesyncd: minor refactoring 2024-09-04 12:14:24 +02:00
datafoo
45c0d04735 nixos/timesyncd: minor refactoring 2024-09-04 12:14:24 +02:00
Luflosi
93fb96ecde
nixos/generic-extlinux-compatible: add mirroredBoots option
Analogous to `boot.loader.grub.mirroredBoots`.
This allows installing the configuration files to multiple locations.
2024-09-04 12:02:57 +02:00
Florian Agbuya
1032b5fa95 flarum: disable automatic DB creation 2024-09-04 16:33:30 +08:00
Florian Agbuya
249dacfaa8 flarum: fix flarum directory permissions 2024-09-04 16:33:18 +08:00
r-vdp
544c97226d
auditd: remove with lib 2024-09-04 10:00:07 +02:00
r-vdp
0cb37347c6
auditd: format with nixfmt 2024-09-04 10:00:07 +02:00
Doron Behar
024357143a
nixos/samba: add mount.cifs +s wrapper (#328901) 2024-09-04 07:55:39 +00:00
Sirio Balmelli
dc700df6b2
nixos/github-runner: fix build failure
Shellcheck complains:

       > args=(
       >      ^-- SC2054 (warning): Use spaces, not commas, to separate array elements.

Add a comment disabling shellcheck in this case and annotating why.

Signed-off-by: Sirio Balmelli <sirio@b-ad.ch>
2024-09-04 09:20:11 +02:00
K900
23b4832da0 Merge remote-tracking branch 'origin/master' into staging-next 2024-09-04 08:53:48 +03:00
rewine
29d62536b9 deepin.nix: install dde-api-proxy 2024-09-04 10:16:56 +08:00
rewine
60348797ee deepin.dde-dock: remove 2024-09-04 10:16:54 +08:00
Sachi King
361fde84f9 Revert "nixos/firewall: fix reverse path check failures with IPsec"
The inclusion of the "meta ipsec" rule in the default reverse path
filtering breaks systems not built with specific XFRM kernel config
options.  Specifically CONFIG_XFRM must be set, which gets selected
by CONFIG_NFT_XFRM, which is hidden behind CONFIG_XFRM_USER.

These options are not selected by default in most defconfig's provided
by the kernel with the exception of some device-specific defconfigs.

These options are not set by the nix kernel common_config, and I would
argue that IPSec support does not belong in a minimal kernel as that
elevates its support status above other in-kernel VPN interfaces.

The contributor of this feature does not seem interested in working
towards a solution that does not break systems running kernels built
with "autoModules = false" while supporting this feature, and as this
silently breaks firewalls into an insecure state and poses an immediate
security issue I propose this be reverted until a solution that does not
break such systems is proposed.
https://github.com/NixOS/nixpkgs/pull/310857#discussion_r1742834970

Devices used as firewalls, if they do not have the required kernel
config, will fail to load the new firewall rules and will upon boot pass
traffic without any filtering into the internal network.

Devices exposed directly to the internet, after reboot, will boot
without filtering potentially exposing services not intended to be
exposed to the internet, such as databases.

The following platforms in nixpkgs appear to be impacted:
 - pc_simplekernel
 - pogoplug4
 - sheevaplug
 - zero-gravitas
 - zero-sugar
 - utilite
 - guruplug
 - beaglebone
 - fuloong2f_n32

References to hardware without autoModules can be found in
nixos-hardware, as well as in active third-party repos on github.

I suspect there are other users impacted that do not have their configurations
public, as autoModules = true leads to long compile times when targeting
kernels to less standard hardware or hardware with quirks that require
patches that cannot be upstreamed.

This reverts commit 3c12ef3f21.
2024-09-04 11:51:15 +10:00
Philip Taron
9e244d3d92
nixos/services.factorio: fix escapeShellArg (#339115) 2024-09-03 13:32:36 -07:00
Sandro
6e055283a9
virtualisation/azure-images: drop outdated list... (#338426) 2024-09-03 21:16:39 +02:00
Maximilian Bosch
6cc3e274c9
prometheus-openldap-exporter: remove (#338824) 2024-09-03 19:57:31 +02:00
Artturin
74065337aa
mouse-actions-gui: init at 0.4.4 (#269518) 2024-09-03 19:33:49 +03:00
Philip Taron
7f1830f117
nixos/services.thinkfan: fix undefined variables (#338951) 2024-09-03 09:18:28 -07:00
Maximilian Bosch
40012de7de
mautrix-signal: 0.6.3 -> 0.7.0 (#337534) 2024-09-03 17:18:01 +02:00
Aleksana
43b54f4834
nixos/services.bees: Fix evaluation (#339185) 2024-09-03 20:36:36 +08:00
Aleksana
5624b8e352
nixos/foot: fix bash script (#339077) 2024-09-03 20:06:00 +08:00
github-actions[bot]
9b619f2f77
Merge master into staging-next 2024-09-03 12:05:18 +00:00
Bruno BELANYI
4d1e8c93a6
nixos/prowlarr: set HOME for the service (#317554) 2024-09-03 11:08:10 +01:00
Sandro
3bd4ec61c2
nixos/stargazer: module bug fix and hardening (#294795) 2024-09-03 11:56:05 +02:00
Benno Bielmeier
b8c7d88784 nixos/services.thinkfan: fix undefined variables
In d9dc50dc11 the usage of `with lib;` has
been removed from thinkfan.nix. Unfortunately, adjusting the check line
and its usage of the functions all,id,zipListsWith has not been updated
resulting in evaluation errors complaining about "undefined variable".
Update: partly covered in 0646a0771b of #339084

rel: #208242
2024-09-03 10:42:28 +02:00
r-vdp
20291241fd
wstunnel: the ping frequency can now also be configured for the server
See: https://github.com/erebe/wstunnel/pull/338
2024-09-03 10:38:43 +02:00
Pol Dellaiera
930e12b9e8
nixos/services.openssh: remove with lib; (#339092) 2024-09-03 10:18:32 +02:00
K900
878922a902 nixos/installation-device: use a bigger hammer
Untrimmed mbrola-voices is leaking into the installer images again.
Instead of trying to manually squash every path it could possibly
leak through, use a very big hammer.
2024-09-03 10:53:25 +03:00
Jon Seager
d6834ede48
nixos/vmware.guest: disable xf86inputvmmouse on aarch64 (#326395) 2024-09-03 08:02:55 +01:00
Christina Sørensen
ed1dc0d441
nixos/kubernetes: amend dns addon clusterDns list (#338801) 2024-09-03 09:01:25 +02:00
Jörg Thalheim
a9034a9c35
nixos/grub: fix value precedence with optional -> mkIf (#338773) 2024-09-03 08:29:25 +02:00
github-actions[bot]
b7b46e40c2
Merge master into staging-next 2024-09-03 06:04:33 +00:00
Emily
2419b85a5e
nixos/syncplay: add missing options (#338579) 2024-09-03 04:36:51 +01:00
Assistant
8119ec6478 nixos/syncplay: add missing options
Exposes all currently available command-line arguments that were
missing, including some that were impossible to use with the catch-all
option `extraArgs` alone, requiring changes to other parts of the
system.
Those are now all self-contained in the module.
The service now uses systemd's `DynamicUsers`.
2024-09-02 22:26:11 -04:00
Bernardo Meurer
fc13b0acdb
Merge branch 'master' into add-rutorrent-service 2024-09-03 01:18:16 +00:00
github-actions[bot]
a07f612219
Merge master into staging-next 2024-09-03 00:13:11 +00:00
Felix Buehler
e1281c7a9d nixos/services.factorio: fix escapeShellArg 2024-09-02 23:47:15 +02:00
Felix Buehler
5f8696e39c nixos/services.openssh: remove with lib; 2024-09-02 22:31:36 +02:00
Felix Buehler
31c38324dd nixos/services.ceph: remove with lib; 2024-09-02 22:30:59 +02:00
Felix Buehler
f57a188819 nixos/services.unpoller: remove with lib; 2024-09-02 22:30:26 +02:00
Felix Buehler
4f6d325a8a nixos/services.graphite: remove with lib; 2024-09-02 22:29:51 +02:00
Felix Buehler
d37789ce5d nixos/services.taskserver: remove with lib; 2024-09-02 22:29:22 +02:00
Felix Buehler
3687224301 nixos/services.snapper: remove with lib; 2024-09-02 22:28:48 +02:00
Felix Buehler
9ed63429ab nixos/services.rippled: remove with lib; 2024-09-02 22:28:20 +02:00
Felix Buehler
11dd437b65 nixos/services.radicle: remove with lib; 2024-09-02 22:27:51 +02:00
Felix Buehler
cd7695ae97 nixos/services.portunus: remove with lib; 2024-09-02 22:27:08 +02:00
Felix Buehler
f51cd10816 nixos/services.borgbackup: remove with lib; 2024-09-02 22:26:34 +02:00
Felix Buehler
60e8c03c9b nixos/services.snapserver: remove with lib; 2024-09-02 22:25:44 +02:00
Felix Bühler
1f34eeb672
nixos/services.thinkfan: fix all & id (#339084) 2024-09-02 22:21:06 +02:00
Felix Bühler
8dd85c637c
nixos/services.zammad: remove with lib; (#338051) 2024-09-02 21:42:59 +02:00
Felix Buehler
0646a0771b nixos/services.thinkfan: fix all & id 2024-09-02 21:12:56 +02:00
Frédéric Christ
aab2bd233c nixos/mautrix-signal: Adapt to new configuration
With mautrix-signal v0.7.0 the bridge is built upon the bridgev2
architecture. With this, the configuration file was slightly rearranged.
Options like login_shared_secret_map and double_puppet_server_map were
dropped.
2024-09-02 20:47:10 +02:00
Frédéric Christ
e38c90b7c9 nixos/mautrix-signal: Reformat code 2024-09-02 20:40:36 +02:00
linsui
d572c865ad nixos/foot: fix bash script 2024-09-03 02:27:22 +08:00
Aaron Andersen
5e8cc27962 nixos/openvpn: add extraArgs option 2024-09-02 09:49:02 -04:00
github-actions[bot]
4aa8416117
Merge master into staging-next 2024-09-02 12:05:34 +00:00
Zhong Jianxin
422ae9928a nixos/services.bees: Fix evaluation
```
error: undefined variable 'mod'
```
2024-09-02 19:23:52 +08:00
phaer
53df1e4ece virtualisation/qemu-vm: disallow nullable diskSize
Because `virtualisation.diskSize = null` does result in a broken vm runner,
see https://github.com/NixOS/nixpkgs/issues/292901.

diskSize was declared to be nullable when it first got types in a
tree-wide commit:
30f0faac22

But it seemingly never actually supported it, as "${cfg.diskSize}M" is
passed to qemu-img create, which doesn't allow an empty size parameter.

closes: https://github.com/NixOS/nixpkgs/issues/292901
2024-09-02 12:09:15 +02:00
github-actions[bot]
d834278999
Merge master into staging-next 2024-09-02 00:13:57 +00:00
Felix Bühler
06aee405da
nixos/services.neo4j: remove with lib; (#338049) 2024-09-01 20:52:52 +02:00
Felix Buehler
6747d84812 nixos/services.kanata: fix utils 2024-09-01 19:42:03 +02:00
Jan Tojnar
e9179b4fa3 Merge branch 'master' into staging-next 2024-09-01 19:04:04 +02:00
Maximilian Bosch
735662bf16
prometheus-openldap-exporter: remove
2.3.0 is the final release, the repo is now archived.

Also I don't use it anymore for quite a while, so it didn't have a real
nixpkgs maintainer either.

Closes #338712
2024-09-01 16:47:45 +02:00
Étienne Simon
b5574c71be
Fix nested quotes in fontconfig.nix
A sed with nested double quotes is inserting malformed XML into /etc/fonts/fonts.conf, this commit put the sed command into single quotes to properly insert double quotes to enclose the XML attribute.
2024-09-01 15:55:12 +02:00
Sarah Brofeldt
a1863c871e nixos/kubernetes: amend dns addon clusterDns list
With 24.11, this is the required type, and we rely on this for the NixOS
tests
2024-09-01 15:13:11 +02:00
Sarah Brofeldt
1860dfed71
nixos/kubernetes: allow setting multiple kubelet dns resolvers (#338523) 2024-09-01 15:07:08 +02:00
Jan Tojnar
58bf5606fb gnome-flashback: Move from gnome scope to top-level 2024-09-01 14:16:31 +02:00
Jan Tojnar
b37f158fb0 gnome-applets: Move from gnome scope to top-level 2024-09-01 14:16:31 +02:00
Jan Tojnar
e1093690a8 gnome-panel: Move from gnome scope to top-level 2024-09-01 14:16:31 +02:00
Jan Tojnar
a110f292a1 gnome-control-center: Move from gnome scope to top-level 2024-09-01 14:16:31 +02:00
Jan Tojnar
c2f1fa833e gnome-session: Move from gnome scope to top-level 2024-09-01 14:16:31 +02:00
Jan Tojnar
ca9576c81d gnome-shell: Move from gnome scope to top-level 2024-09-01 14:16:31 +02:00
Jan Tojnar
7f387d6bf9 mutter{,43}: Move from gnome scope to top-level 2024-09-01 14:16:31 +02:00
Jan Tojnar
d2da9a19c4 gnome-settings-daemon{,43}: Move from gnome scope to top-level 2024-09-01 14:16:31 +02:00
Jan Tojnar
b4c59a979a gnome-bluetooth{,_1_0}: Move to by-name 2024-09-01 14:16:31 +02:00
zimbatm
1ea32d4f69 nixos/grub: fix value precendence with optional -> mkIf
When using `lib.optionals`, the return value of both branches of the
condition get set as a value to the option.

When using `lib.mkIf`, only the positive condition gets set as a value
to the option.

This small distinction is important when dealing with precedence. For
example here, we wanted to set a boot.grub.devices default value with
lib.mkDefault, and that was getting overridden with the empty value of
`lib.optional (cfg.device != "") cfg.device`.

See https://github.com/nix-community/srvos/pull/491#discussion_r1738827651

The general conclusion is that using `lib.mkIf` is preferable to
`lib.optional` or `lib.optionals` when setting values in the NixOS
module system.
2024-09-01 12:13:15 +02:00
wxt
1c77c14c21 nixos/todesk: init 2024-09-01 17:19:09 +08:00
github-actions[bot]
1fdf4b61a4
Merge staging-next into staging 2024-09-01 00:16:33 +00:00
Artturin
9ef8a9cd56
nixos/telegraf: make sure ping executable is available when trying to ping (#338673) 2024-08-31 23:52:58 +03:00
Felix Bühler
7f62309646
nixos/fonts.fontconfig: remove with lib; (#338042) 2024-08-31 22:52:12 +02:00
Tomodachi94
50afd1e1d3
nixos/bacula: add system-bacula.slice
Part of #279915
2024-08-31 12:53:52 -07:00
Echo Nolan
934a337a13 nixos/telegraf: make sure ping executable is available when trying to ping
We need ping to be in PATH of the service otherwise it can't ping. This commit
adds it, conditional on one of the inputs being a ping task.
2024-08-31 15:29:04 -04:00
Will Fancher
811ee8ab2e
nixos/iso-image: Compress squashfs with zstd 19 (#338652) 2024-08-31 14:38:47 -04:00
github-actions[bot]
f20de6f5f1
Merge staging-next into staging 2024-08-31 18:04:19 +00:00
Will Fancher
49192ef7a3 nixos/iso-image: Compress squashfs with zstd 19 2024-08-31 12:21:36 -04:00
Nick Cao
38cabf32f8
nixos/fcitx5: fix evaluation 2024-08-31 09:20:31 -04:00
Martin Weinelt
62a52a1b3c
frigate: 0.13.2 -> 0.14.1
https://github.com/blakeblackshear/frigate/releases/tag/v0.14.0
https://github.com/blakeblackshear/frigate/releases/tag/v0.14.1
2024-08-31 13:49:32 +02:00
Tomodachi94
2ae2834863
nixos/ups: add system-ups.slice
Part of #279915
2024-08-30 23:10:01 -07:00
Tomodachi94
2d8f095ab1
nixos/hydra: unset SSL_CERT_FILE
An ancient comment says to unset this variable after 16.03. Considering
we've just gotten past 24.05, I think it's safe to remove this finally.

Tests still pass after this change.
2024-08-30 21:26:59 -07:00
Tomodachi94
d464996f3f
nixos/hydra: fix typo 2024-08-30 21:11:17 -07:00
Tomodachi94
386a1d5d06
nixos/hydra: add system-hydra.slice
Part of #279915
2024-08-30 21:09:00 -07:00
Tristan Gosselin-Hane
2d54b2b048 nixos/kubernetes: allow setting multiple kubelet dns resolvers
The current kubernetes module only allows you to set a single DNS
resolver for the kubelet. Historically, this has not mattered as the
value was passed to a cli argument as a string and as per the kubelet's
configuration parsing mechanism, multiple values could be passed as a
comma-delimited string. However, recently, the module was refactored to
make configure kubernetes components via configuration files rather than
the deprecated command-line arguments. These files more strongly-typed
than CLI arguments and to pass multiple values, one must define a list
in the file. When this change was made, an incorrect assumption was made
that only a single DNS server could be specified and forced a
single-item list into this configuration file. We need to introduce a
breaking change to the module in order to allow the user to supply their
own list with however many dns resolvers they wish to use.
2024-08-30 22:17:00 -04:00
Tristan Gosselin-Hane
5a03aa5a45 nixos/kubernetes: add extraConfig to kubelet config
Every now and then, kubernetes adds new configuration parameters to the
kubelet configuration. Since this is defined using a nix attrset which
is then converted to json/yaml, it would be nice to have an escape hatch
similar to the extraOpts one that exists for additional CLI arguments.
The typical use case would be to configure new settings before they are
officially supported in the nixos module.
2024-08-30 22:12:40 -04:00
github-actions[bot]
fab50d5f8d
Merge staging-next into staging 2024-08-31 00:13:46 +00:00
github-actions[bot]
dcad9b571a
Merge master into staging-next 2024-08-31 00:13:18 +00:00
Philip Taron
9916dc8728
treewide/nixos: remove with lib; part 2 (#335618) 2024-08-30 15:56:57 -07:00
Philip Taron
4710721d41
nixos: Support fileSystems.<name>.depends with fstab-generator (#233707) 2024-08-30 15:55:39 -07:00
Felix Bühler
30eba5df55
nixos/services.libinput: remove with lib; (#338054) 2024-08-30 23:15:31 +02:00
Felix Buehler
dcb2e4eba4 nixos/services.xe-guest-utilities: remove with lib; 2024-08-30 23:01:45 +02:00
Felix Buehler
3e5d6ba7df nixos/virtualisation.vmware.image: remove with lib; 2024-08-30 23:01:45 +02:00
Felix Buehler
cd197cebdf nixos/system.autoUpgrade: remove with lib; 2024-08-30 23:01:45 +02:00
Felix Buehler
10e8c2cecd nixos/environment.etc: remove with lib; 2024-08-30 23:01:45 +02:00
Felix Buehler
f3dd1a8bd5 nixos/services.logind: remove with lib; 2024-08-30 23:01:45 +02:00
Felix Buehler
69ca7aa56f nixos/services.journald: remove with lib; 2024-08-30 23:01:42 +02:00
Felix Buehler
97070a2ea6 nixos/services.libreswan: remove with lib; 2024-08-30 23:01:18 +02:00
Felix Buehler
92f17f012d nixos/services.kresd: remove with lib; 2024-08-30 23:01:16 +02:00
Felix Buehler
5960372742 nixos/services.kea: remove with lib; 2024-08-30 23:00:56 +02:00
Felix Buehler
717fa0dea5 nixos/services.dnscrypt-wrapper: remove with lib; 2024-08-30 23:00:56 +02:00
Felix Buehler
0846124d8b nixos/services.owncast: remove with lib; 2024-08-30 23:00:55 +02:00
Felix Buehler
20496ce388 nixos/services.osrm: remove with lib; 2024-08-30 23:00:55 +02:00
Felix Buehler
eddc7384db nixos/services.ombi: remove with lib; 2024-08-30 23:00:55 +02:00
Felix Buehler
d40cf96f75 nixos/services.octoprint: remove with lib; 2024-08-30 23:00:55 +02:00
Felix Buehler
a99bf84530 nixos/services.nzbhydra2: remove with lib; 2024-08-30 23:00:54 +02:00
Felix Buehler
2da17447da nixos/services.nzbget: remove with lib; 2024-08-30 23:00:54 +02:00
Felix Buehler
457b7563d4 nixos/services.ntfy-sh: remove with lib; 2024-08-30 23:00:54 +02:00
Felix Buehler
eeed115e37 nixos/services.novacomd: remove with lib; 2024-08-30 23:00:54 +02:00
Felix Buehler
b48bee9985 nixos/nix.sshServe: remove with lib; 2024-08-30 23:00:54 +02:00
Felix Buehler
42bdc30f19 nixos/services.n8n: remove with lib; 2024-08-30 23:00:53 +02:00
Felix Buehler
e00ab2106a nixos/services.moonraker: remove with lib; 2024-08-30 23:00:53 +02:00
Felix Buehler
a4db992d51 nixos/services.mbpfan: remove with lib; 2024-08-30 23:00:53 +02:00
Felix Buehler
68fd69371f nixos/services.mame: remove with lib; 2024-08-30 23:00:53 +02:00
Felix Buehler
a11ac85d65 nixos/services.logkeys: remove with lib; 2024-08-30 23:00:53 +02:00
Felix Buehler
25e0bc25f6 nixos/services.lifecycled: remove with lib; 2024-08-30 23:00:52 +02:00
Felix Buehler
d562492115 nixos/services.lidarr: remove with lib; 2024-08-30 23:00:52 +02:00
Felix Buehler
4e1b387f24 nixos/services.leaps: remove with lib; 2024-08-30 23:00:52 +02:00
Felix Buehler
118d8962d3 nixos/services.languagetool: remove with lib; 2024-08-30 23:00:52 +02:00
Felix Buehler
14f18ffb06 nixos/services.klipper: remove with lib; 2024-08-30 23:00:52 +02:00
Felix Buehler
cac7b5e266 nixos/services.jellyseerr: remove with lib; 2024-08-30 23:00:51 +02:00
Felix Buehler
2fbd333075 nixos/services.jackett: remove with lib; 2024-08-30 23:00:51 +02:00
Felix Buehler
a442c73bff nixos/services.irkerd: remove with lib; 2024-08-30 23:00:51 +02:00
Felix Buehler
bd471d7eb1 nixos/services.input-remapper: remove with lib; 2024-08-30 23:00:51 +02:00
Felix Buehler
7065336804 nixos/services.ihaskell: remove with lib; 2024-08-30 23:00:50 +02:00
Felix Buehler
2270873952 nixos/services.heisenbridge: remove with lib; 2024-08-30 23:00:50 +02:00
Felix Buehler
0205ba83ab nixos/services.headphones: remove with lib; 2024-08-30 23:00:50 +02:00
Felix Buehler
a40bb4329a nixos/services.greenclip: remove with lib; 2024-08-30 23:00:50 +02:00
Felix Buehler
01533f55c4 nixos/services.gpsd: remove with lib; 2024-08-30 23:00:50 +02:00
Felix Buehler
22d14ed8a2 nixos/services.gollum: remove with lib; 2024-08-30 23:00:49 +02:00
Felix Buehler
9358cb9b7d nixos/services.gitweb: remove with lib; 2024-08-30 23:00:49 +02:00
Felix Buehler
301dbd7fdf nixos/services.fstrim: remove with lib; 2024-08-30 23:00:49 +02:00
Felix Buehler
1c84189d82 nixos/services.freeswitch: remove with lib; 2024-08-30 23:00:49 +02:00
Felix Buehler
df4cacf262 nixos/services.felix: remove with lib; 2024-08-30 23:00:49 +02:00
Felix Buehler
9d570bce41 nixos/services.evdevremapkeys: remove with lib; 2024-08-30 23:00:48 +02:00
Felix Buehler
4233be955d nixos/services.etesync-dav: remove with lib; 2024-08-30 23:00:48 +02:00
Felix Buehler
ea8485f6c9 nixos/services.etebase-server: remove with lib; 2024-08-30 23:00:48 +02:00
Felix Buehler
0971178e73 nixos/services.errbot: remove with lib; 2024-08-30 23:00:48 +02:00
Felix Buehler
57c0e18882 nixos/services.dysnomia: remove with lib; 2024-08-30 23:00:41 +02:00
Felix Buehler
078a6f8d49 nixos/services.dwm-status: remove with lib; 2024-08-30 23:00:17 +02:00
Felix Buehler
df640cd6ad nixos/services.duckling: remove with lib; 2024-08-30 23:00:17 +02:00
Felix Buehler
393ce48b20 nixos/services.domoticz: remove with lib; 2024-08-30 23:00:17 +02:00
Felix Buehler
3b6190d10d nixos/services.docker-registry: remove with lib; 2024-08-30 23:00:17 +02:00
Felix Buehler
7a6ef913b7 nixos/services.disnix: remove with lib; 2024-08-30 23:00:17 +02:00
Felix Buehler
8b9a5020db nixos/services.dictd: remove with lib; 2024-08-30 23:00:16 +02:00
Felix Buehler
c4c90f5fbe nixos/services.devpi-server: remove with lib; 2024-08-30 23:00:16 +02:00
Felix Buehler
94b5a13466 nixos/services.devmon: remove with lib; 2024-08-30 23:00:16 +02:00
Felix Buehler
ea5f93bf13 nixos/services.cpuminer-cryptonight: remove with lib; 2024-08-30 23:00:16 +02:00
Felix Buehler
f57be92dcb nixos/services.confd: remove with lib; 2024-08-30 23:00:16 +02:00
Felix Buehler
4948e0be37 nixos/services.clipmenu: remove with lib; 2024-08-30 23:00:15 +02:00
Felix Buehler
1315c69dfe nixos/services.clipcat: remove with lib; 2024-08-30 23:00:15 +02:00
Felix Buehler
c3ef67ff5b nixos/services.cgminer: remove with lib; 2024-08-30 23:00:15 +02:00
Felix Buehler
9c487f98b9 nixos/services.cfdyndns: remove with lib; 2024-08-30 23:00:15 +02:00
Felix Buehler
3c2fff40ba nixos/services.canto-daemon: remove with lib; 2024-08-30 23:00:14 +02:00
Felix Buehler
5e8ed975ef nixos/services.calibre-server: remove with lib; 2024-08-30 23:00:14 +02:00
Felix Buehler
02617d5a2a nixos/services.bepasty: remove with lib; 2024-08-30 23:00:14 +02:00
Felix Buehler
a2e269bc37 nixos/services.bees: remove with lib; 2024-08-30 23:00:14 +02:00
Felix Buehler
5a7fba4027 nixos/services.beanstalkd: remove with lib; 2024-08-30 23:00:14 +02:00
Felix Buehler
11c69dd99f nixos/services.bcg: remove with lib; 2024-08-30 23:00:13 +02:00
Felix Buehler
b8142ce7ca nixos/services.bazarr: remove with lib; 2024-08-30 23:00:13 +02:00
Felix Buehler
686be24d1b nixos/services.autofs: remove with lib; 2024-08-30 23:00:13 +02:00
Felix Buehler
62e1675246 nixos/services.apache-kafka: remove with lib; 2024-08-30 23:00:13 +02:00
Felix Buehler
febc5406d8 nixos/services.ankisyncd: remove with lib; 2024-08-30 23:00:13 +02:00
Felix Buehler
542c628204 nixos/services.amazon-ssm-agent: remove with lib; 2024-08-30 23:00:12 +02:00
Felix Buehler
774f8cd090 nixos/services.airsonic: remove with lib; 2024-08-30 23:00:12 +02:00
Felix Buehler
0a78cd4f73 nixos/services.pantalaimon-headless: remove with lib; 2024-08-30 23:00:12 +02:00
Felix Buehler
ec70164f24 nixos/services.mx-puppet-discord: remove with lib; 2024-08-30 23:00:12 +02:00
Felix Buehler
0f517df99c nixos/services.mjolnir: remove with lib; 2024-08-30 23:00:11 +02:00
Felix Buehler
167cad7457 nixos/services.mautrix-telegram: remove with lib; 2024-08-30 23:00:11 +02:00
Felix Buehler
3bc24ab5d9 nixos/services.mautrix-facebook: remove with lib; 2024-08-30 23:00:11 +02:00
Felix Buehler
24edb42066 nixos/services.matrix-conduit: remove with lib; 2024-08-30 23:00:11 +02:00
Felix Buehler
ca941e19f3 nixos/services.matrix-appservice-irc: remove with lib; 2024-08-30 23:00:11 +02:00
Felix Buehler
0db184a132 nixos/services.matrix-appservice-discord: remove with lib; 2024-08-30 22:59:29 +02:00
Felix Buehler
5b2cfbc969 nixos/services.zeyple: remove with lib; 2024-08-30 22:59:28 +02:00
Felix Buehler
6d0e431080 nixos/services.stalwart-mail: remove with lib; 2024-08-30 22:59:28 +02:00
Felix Buehler
3d0cdfa3c5 nixos/services.spamassassin: remove with lib; 2024-08-30 22:59:28 +02:00
Felix Buehler
bd62173106 nixos/services.roundcube: remove with lib; 2024-08-30 22:59:28 +02:00
Felix Buehler
47626f0fc8 nixos/services.postsrsd: remove with lib; 2024-08-30 22:59:28 +02:00
Felix Buehler
dae6c6c58a nixos/services.postfixadmin: remove with lib; 2024-08-30 22:59:27 +02:00
Felix Buehler
8491fdcc31 nixos/services.pfix-srsd: remove with lib; 2024-08-30 22:59:27 +02:00
Felix Buehler
1fbae04bff nixos/services.opensmtpd: remove with lib; 2024-08-30 22:59:27 +02:00
Felix Buehler
eb261c5c91 nixos/services.opendkim: remove with lib; 2024-08-30 22:59:27 +02:00
Felix Buehler
02299617cd nixos/services.offlineimap: remove with lib; 2024-08-30 22:59:27 +02:00
Felix Buehler
e75cd5f98a nixos/services.nullmailer: remove with lib; 2024-08-30 22:59:26 +02:00
Felix Buehler
2f79bd3b5c nixos/services.mlmmj: remove with lib; 2024-08-30 22:59:26 +02:00
Felix Buehler
0d8ce0d47c nixos/services.mailhog: remove with lib; 2024-08-30 22:59:26 +02:00
Felix Buehler
b75b87803a nixos/services.mail: remove with lib; 2024-08-30 22:59:26 +02:00
Felix Buehler
aa0f147937 nixos/services.maddy: remove with lib; 2024-08-30 22:59:26 +02:00
Felix Buehler
3c36a6c44e nixos/services.listmonk: remove with lib; 2024-08-30 22:59:25 +02:00
Felix Buehler
fb9694eb65 nixos/services.goeland: remove with lib; 2024-08-30 22:59:25 +02:00