Commit Graph

20118 Commits

Author SHA1 Message Date
Alexandru Scvortov
f147a306d5 livebook: add munksgaard and scvalex as maintainers 2024-07-25 17:17:41 +01:00
❄️
5f2a6de6f9
Merge pull request #328385 from rorosen/k3s-kubelet-config
nixos/k3s: add options for graceful node shutdown and kubelet config
2024-07-25 10:19:16 -03:00
github-actions[bot]
12ea252962
Merge master into staging-next 2024-07-25 06:01:22 +00:00
github-actions[bot]
94c17d2caa
Merge master into staging-next 2024-07-25 00:02:30 +00:00
abysssol
084f6a3e26 nixos/ollama: make rocmOverrideGfx backward compatible
The initial version of `rocmOverrideGfx` incorrectly used `lib.mkIf`
in an attempt to prevent interference with previous uses of
`environmentVariables.HSA_OVERRIDE_GFX_VERSION`.

However, the effect was actually to simply erase existing definitions of
`HSA_OVERRIDE_GFX_VERSION` until `rocmOverrideGfx` was set,
which was the situation I was trying to avoid in the first place.

This fixes the bug by switching from `lib.mkIf` to `lib.optionalAttrs`.
2024-07-24 16:11:09 -04:00
abysssol
246d1ee533 nixos/ollama: reformat with nixfmt-rfc-style 2024-07-24 16:09:56 -04:00
Julien Moutinho
43c36273b2 nixos/radicle: fix support of absolute file paths for SSH keys 2024-07-24 22:07:53 +02:00
Guillaume Girol
bbd80e97f9
Merge pull request #328459 from onny/sane-backends-fix
sane-backends: 1.2.1 -> 1.3.1
2024-07-24 20:40:47 +02:00
github-actions[bot]
7208220b63
Merge master into staging-next 2024-07-24 18:01:18 +00:00
Emily
477c3c6d5e
Merge pull request #307962 from jpds/restic-snapshot-list-only-latest
nixos/restic: Use cat config in pre-start repo initialization check
2024-07-24 17:13:38 +02:00
Masum Reza
81cb83b07f
Merge pull request #290008 from eum3l/add-opengfw
opengfw: init at 0.4.0 (+NixOS module)
2024-07-24 20:39:41 +05:30
Bobby Rong
3a422267eb
Merge pull request #329199 from bobby285271/upd/cinnamon-by-name
Move all packages out of cinnamon scope
2024-07-24 22:04:34 +08:00
Peder Bergebakken Sundt
24899eea99
Merge pull request #327184 from bhankas/goatcounter
nixos/goatcounter: init
2024-07-24 15:38:27 +02:00
eum3l
86ae0fca93 nixos/opengfw: init 2024-07-24 15:11:23 +02:00
github-actions[bot]
8402add1f4
Merge master into staging-next 2024-07-24 12:01:12 +00:00
Silvan Mosberger
473e469d5a
Merge pull request #328381 from tie/map-attrs-flatten 2024-07-24 13:32:34 +02:00
Yaya
feeb53a430 nixos/gitlab: Replace git package with bundled git
This commit switches gitaly's git package from `pkgs.git` to the bundled
`git` package in order to maintain compatibility with the supported git
release by gitaly.
2024-07-24 10:51:55 +02:00
Maximilian Bosch
bf2d040432
postgresql: 15 -> 16 for 24.11+
Upgrade default postgresql for stateVersion >=24.11.
This also rebuilds all packages linking against `libpq.so` to use
postgresql 16.

After re-reading https://www.postgresql.org/docs/16/release-16.html
I don't see any major risks about doing that.
2024-07-24 10:43:02 +02:00
TheRealGramdalf
d66d94b37b
nixos/caddy: fix group option description (#328034) 2024-07-24 16:40:07 +08:00
Sven Slootweg
51a72a8271
nixos/caddy: fix module docs for new root syntax (#328444)
Old syntax no longer works; `root` now takes two arguments. Updated example in module documentation to reflect this.
2024-07-24 16:38:48 +08:00
Dominique Martinet
7c448e8d44 nixos/cryptpad: harden service
cryptpad is not directly exposed to the network, but has plenty that can
be hardened more properly, so fix that.
2024-07-24 16:17:32 +09:00
Dominique Martinet
b846e8762f nixos/cryptpad: init
This is a full rewrite independent of the previously removed cryptpad
module, managing cryptpad's config in RFC0042 along with a shiny test.

Upstream cryptpad provides two nginx configs, with many optimizations
and complex settings; this uses the easier variant for now but
improvements (e.g. serving blocks and js files directly through nginx)
should be possible with a bit of work and care about http headers.

the /checkup page of cryptpad passes all tests except HSTS, we don't
seem to have any nginx config with HSTS enabled in nixpkgs so leave this
as is for now.

Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com>
Co-authored-by: Michael Smith <shmitty@protonmail.com>
2024-07-24 16:17:26 +09:00
Vladimír Čunát
cd346565bb
Merge branch 'master' into staging-next 2024-07-24 07:19:19 +02:00
Payas Relekar
aebb3d3474 nixos/goatcounter: init 2024-07-24 10:17:44 +05:30
Franz Pletz
b865ea167d
Merge pull request #321644 from pedorich-n/netdata-146 2024-07-23 23:23:30 +02:00
Franz Pletz
e6ae50bb83
Merge pull request #327986 from 7596ff/7596ff/airsonic-context-path 2024-07-23 23:15:27 +02:00
Franz Pletz
f1f5d9433b
Merge pull request #329014 from n8henrie/n8henrie-espanso-maintainer 2024-07-23 23:14:53 +02:00
Jan Tojnar
3178439a4e
Merge pull request #282317 from dawidd6/gdm-autologin-unlocks-keyring
nixos/gdm: autologin unlocks keyring when possible
2024-07-23 21:04:35 +02:00
Bobby Rong
d2ec434026
nixos/cinnamon: Fix excludePackages example
We don't ship blueberry and blueberry is in top-level.
2024-07-23 22:12:42 +08:00
Bobby Rong
22b54a6e7f
cinnamon-gsettings-overrides: Move from cinnamon scope to top-level 2024-07-23 22:12:42 +08:00
Bobby Rong
ab6606dfb8
cinnamon-screensaver: Move from cinnamon scope to top-level 2024-07-23 22:12:42 +08:00
Bobby Rong
d1a7acfc47
cinnamon-common: Move from cinnamon scope to top-level 2024-07-23 22:12:41 +08:00
Bobby Rong
6fd4a53e3e
cinnamon-control-center: Move from cinnamon scope to top-level 2024-07-23 22:12:41 +08:00
Bobby Rong
bf4ffb38d0
cinnamon-session: Move from cinnamon scope to top-level 2024-07-23 22:12:41 +08:00
Bobby Rong
f3d0454e4a
nemo-with-extensions: Move from cinnamon scope to top-level 2024-07-23 22:12:40 +08:00
Bobby Rong
925db507a8
nemo: Move from cinnamon scope to top-level 2024-07-23 22:00:19 +08:00
Bobby Rong
e5373c3e6c
cinnamon-settings-daemon: Move from cinnamon scope to top-level 2024-07-23 22:00:18 +08:00
Bobby Rong
e8fd435f36
cinnamon-translations: Move from cinnamon scope to top-level 2024-07-23 22:00:18 +08:00
Bobby Rong
6f102799e7
cinnamon-menus: Move from cinnamon scope to top-level 2024-07-23 22:00:18 +08:00
Bobby Rong
3fba5befb1
cinnamon-desktop: Move from cinnamon scope to top-level 2024-07-23 22:00:18 +08:00
github-actions[bot]
d284ef371e
Merge master into staging-next 2024-07-23 12:01:18 +00:00
Florian
a161b380a9
Merge pull request #328205 from litchipi/ifm
ifm: init at 4.0.2
2024-07-23 09:35:56 +02:00
Dawid Dziurla
097b63d424
nixos/gdm: autologin unlocks keyring when possible 2024-07-23 09:34:19 +02:00
Litchi Pi
0fb7268b9b Init IFM service at version 4.0.2
Signed-off-by: Litchi Pi <litchi.pi@proton.me>
2024-07-23 08:44:50 +02:00
github-actions[bot]
09a27d5bc1
Merge master into staging-next 2024-07-23 00:02:18 +00:00
Franz Pletz
b12aaa9f9b
Merge pull request #316139 from Luflosi/bind-service-wait-for-ready-status 2024-07-23 00:19:53 +02:00
Pol Dellaiera
771c4624ed
Merge pull request #328713 from mweinelt/ollama-sandbox-issue
nixos/ollama: replace flawed sandboxing option
2024-07-22 22:21:16 +02:00
Artturin
60e9cffe2c Merge branch 'master' into staging-next 2024-07-22 22:53:31 +03:00
Bruno BELANYI
87a80cdaf9
Merge pull request #329112 from ambroisie/tandoor-module
nixos/tandoor-recipes: revert 'GUNICORN_MEDIA=1'
2024-07-22 15:48:52 +01:00
Jonas Heinrich
4edef1362f sane-backends: configure and use lock dir 2024-07-22 16:46:30 +02:00
Bobby Rong
3e9b9159cb
Merge pull request #327144 from bobby285271/upd/cinnamon-xapps-by-name
Move various packages out of cinnamon scope
2024-07-22 21:33:16 +08:00
Martin Weinelt
fe58e8856f
nixos/ollama: make host example dualstack wildcard
Binding to IPv6 wildcard generally binds dual-stack, which is also a
better example because the way to specify it is not always very clear.
2024-07-22 14:51:40 +02:00
Martin Weinelt
12897b37a8
nixos/ollama: harden systemd unit
Tested with CPU and CUDA acceleration. Researched for ROCm, but I have no
compatible card to test it with.
2024-07-22 14:51:40 +02:00
Martin Weinelt
be7bce879f
nixos/ollama: remove writablePaths option
Making the models directory always writable is much simpler, than having
to watch out for an option to facilitate that.
2024-07-22 14:51:39 +02:00
Martin Weinelt
809ea5c6bd
nixos/ollama: replace flawed sandboxing option
The ollama module in its default configuration relies on systemd's
`DynamicUser=` feature for user allocation. In #305076 that allocation
was made conditional and tied to the `sandboxing` option, that was
intended to fix access to model directories outside the allocated state
directory.

However, by disabling sandboxing ollama would inadvertently run as root,
given that `User=` and `Group=` are not required to be set.

The correct way to grant access to other paths is to allocate static
user and group, and grant permissions to the destination path to that
allocation.

We therefore replace the sandboxing option user and group options, that
default to `null`, which means they default to `DynamicUser=`, but can
be replaced with a statically allocated user/group, and thereby a stable
uid/gid.

Fixes: 552eb759 ("nixos/ollama: add options to bypass sandboxing")
2024-07-22 14:51:39 +02:00
Bruno BELANYI
c8f2bb1b65 nixos/tandoor-recipes: revert 'GUNICORN_MEDIA=1'
Quoting from upstream's documentation [1]:

> Basically everyone recommends not doing this. Please use [a webserver]
> to handle media file serving.

Given that this commit broke the module for unrelated reasons, I've
decided to just revert it and let downstream users make the choice of
easy vs. secure.

[1]: https://docs.tandoor.dev/system/configuration/#gunicorn-media

This reverts commit e8c56de827.
2024-07-22 09:17:41 +00:00
PopeRigby
a5eaa1df10
nixos/scrutiny: enable collector by default if scrutiny is enabled (#329069) 2024-07-22 07:38:45 +01:00
Nathan Henrie
de322fa088 nixos/espanso: add n8henrie to maintainers
I help maintain espanso and would like to help maintain both the package
and the module.
2024-07-21 17:08:24 -06:00
Bobby Rong
d114d56aad
nixos/cinnamon: Do not use "with pkgs.cinnamon"
Otherwise with allowAliases enabled, the aliases are preferred and used,
spamming deprecation warnings.
2024-07-22 01:02:17 +08:00
Bobby Rong
508637b0e3
xapp: Move from cinnamon scope to top-level
* The timeshift changes are used to make by-name check happy.
* More by-name changes in the next commit.
2024-07-22 01:02:16 +08:00
Sandro
4cc8b29327
Merge pull request #299599 from SuperSandro2000/kde-pim
programs/kde-pim: init
2024-07-21 16:26:01 +02:00
Bobby Rong
350a70036a
mint-themes: Move from cinnamon scope to top-level 2024-07-21 21:17:11 +08:00
Bobby Rong
2359076f1f
mint-y-icons: Move from cinnamon scope to top-level 2024-07-21 21:17:10 +08:00
Bobby Rong
c09bdb5d5e
mint-cursor-themes: Move from cinnamon scope to top-level 2024-07-21 21:17:09 +08:00
Jörg Thalheim
f09ab69a7e nixos/zerotierone: clean up local.conf symlinks unconditionally 2024-07-20 16:39:56 +02:00
Vladimír Čunát
577f40b8a9
Merge branch 'staging' into staging-next 2024-07-20 16:12:24 +02:00
K900
5e13e3e566
Merge pull request #324894 from paveloom/flaresolverr
flaresolverr: init at 3.3.21 + nixos/flaresolverr: initial commit
2024-07-20 11:06:18 +03:00
Robert Rose
c58c1e8f55 nixos/k3s: add options for graceful node shutdown and kubelet config
Allow to set kubelet configuration parameters
via an option. Additionally, expose the
respective options for graceful node
shutdown directly, as it is anticipated to
be used frequently.
2024-07-19 20:28:00 +02:00
github-actions[bot]
637b531dcf
Merge staging-next into staging 2024-07-19 18:01:40 +00:00
Pavel Sobolev
c9c14f86db
nixos/flaresolverr: initial commit 2024-07-19 20:55:21 +03:00
OPNA2608
c768ee4aa3 nixos/lomiri: ubuntu_font_family -> ubuntu-classic 2024-07-19 19:20:59 +02:00
Peder Bergebakken Sundt
b2a54feb35
Merge pull request #279408 from alyssais/mailman-nginx-timeout
nixos/mailman: increase nginx proxy timeout
2024-07-19 17:56:07 +02:00
github-actions[bot]
a6c20a7387
Merge staging-next into staging 2024-07-19 12:01:49 +00:00
Sandro
89d95fb2bc
Merge pull request #327939 from Guanran928/libreddit 2024-07-19 13:47:14 +02:00
Sarah Brofeldt
54fbcf1be8
Merge pull request #321632 from PedroRegisPOAR/kubernetes-mkCert-drops-nogroup-as-default
nixos/kubernetes: adds argument to mkCert defaulting to kubernetes group
2024-07-19 12:49:49 +02:00
Jonas Chevalier
676e42a45e
Merge pull request #327729 from zimbatm/odoo-fixes
odoo fixes
2024-07-19 12:35:03 +02:00
Sirio Balmelli
85761ade56 modules/odoo: add autoInitExtraFlags
Allow module user to specify additional flags to be passed on autoInit

Signed-off-by: Sirio Balmelli <sirio@b-ad.ch>
2024-07-19 11:51:57 +02:00
Sirio Balmelli
67bcb287ec modules/odoo: execute autoInit only once
Signed-off-by: Sirio Balmelli <sirio@b-ad.ch>
2024-07-19 11:51:52 +02:00
Ivan Trubach
7919709a23 nixos/modules: use mapAttrsToList instead of mapAttrsFlatten 2024-07-19 11:39:39 +03:00
Guanran Wang
782e8513d3
nixos/cloudflare-dyndns: introduce package option 2024-07-19 14:45:09 +08:00
github-actions[bot]
f6ed4c2f35
Merge staging-next into staging 2024-07-19 06:01:45 +00:00
Matthew Croughan
be9599e3d4
nixos/scion: introduce package option (#327765) 2024-07-19 02:30:10 +02:00
github-actions[bot]
f316203fda
Merge staging-next into staging 2024-07-19 00:03:05 +00:00
lassulus
3575fad9da
Merge pull request #323466 from andersk/grep-stray
nixos/udev: Fix `grep: warning: stray \ before /`
2024-07-18 23:02:07 +02:00
github-actions[bot]
401d4660b3
Merge staging-next into staging 2024-07-18 18:01:57 +00:00
Krzysztof Nazarewski
676a51c41f nixos/hardware.display: init 2024-07-18 16:57:40 +03:00
Martin Weinelt
983077457f
Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
-	pkgs/development/python-modules/uvcclient/default.nix
-	pkgs/development/tools/rust/rust-analyzer/default.nix
2024-07-18 12:35:33 +02:00
Aaron Andersen
2e930eafb9
Merge pull request #318285 from gador/nixos-zabbixWeb-nginx
nixos/zabbixWeb: Add nginx as webserver, add zabbix 6.4
2024-07-17 21:22:13 -04:00
Martin Weinelt
bf8439efae
Merge pull request #311927 from mweinelt/music-assistant
music-assistant: init at 2.0.7
2024-07-18 02:31:18 +02:00
Darragh Elliott
61820de2d4 ddns-updater: Add module, test, update script 2024-07-17 21:56:05 +00:00
Florian Brandes
7d3b77d66f
nixos/zabbixWeb: format
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-17 22:33:47 +02:00
Florian Brandes
9ca5b84e27
nixos/zabbixWeb: add nginx config
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-17 22:31:50 +02:00
Martin Weinelt
76442766ea
nixos/music-assistant: init 2024-07-17 22:29:38 +02:00
Johannes Jöns
3f7fcbb2f9
Merge pull request #290014 from jopejoe1/ubuntu-font
ubuntu-sans{,-mono}: rename from ubuntu_font_family, 0.83 -> 1.004
2024-07-17 18:46:36 +00:00
Kira Bruneau
b37088de74
Merge pull request #326894 from kira-bruneau/replay-sorcery
replay-sorcery: remove as it is unmaintained upstream
2024-07-17 14:37:51 -04:00
Artturin
20cf80e167 Merge branch 'staging-next' into staging 2024-07-17 21:29:37 +03:00
Pol Dellaiera
74d05311fd
Merge pull request #327886 from drupol/nixos-tika-module-add-options
nixos/tika: add `enableOcr` option
2024-07-17 20:10:06 +02:00
Cassandra McCarthy
c6ba378b7b
airsonic: update context-path directive
This line has been broken since the service file was created. According
to the [spring docs] that Airsonic uses, server.context-path is what
should be here. I've tested this by manually setting it as an extra JVM
option on my machine, and it works.

[spring docs]: https://docs.spring.io/spring-boot/docs/1.4.5.RELEASE/reference/htmlsingle/#common-application-properties
2024-07-17 13:23:19 -04:00
Sandro
1607a42b49
Merge pull request #290452 from flandweber/borgmatic-exporter
borgmatic-exporter: init at 0.2.5
2024-07-17 19:08:28 +02:00
Nicolas Mémeint
1ceb55d4b9 nixos/authelia: Remove options incompatible with new settings
- Remove settings.server.{host,port} options
  - Replaced by settings.server.address
  - If any of settings.server.{host,port,path} are specified in the
    configuration, a warning is displayed and these values will be used
    instead of settings.server.address

- Change what secrets.oidcIssuerPrivateKeyFile maps to
  - Previously: AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE
  - Now: identity_providers.oidc.jwks[0].key
    - Not done directly in the NixOS settings config but as a separate
      YAML config file
    - Done that way because Go templates are not correctly handled by
      the YAML generator (#319716)

- Change secrets.jwtSecretFile env variable mapping
  - Previously: AUTHELIA_JWT_SECRET_FILE
  - Now: AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE
2024-07-17 17:26:46 +02:00
Guanran Wang
f7a0c71b61
libreddit: remove as unmaintained upstream 2024-07-17 23:03:14 +08:00
Aleksana
a9a4e171c7
Merge pull request #327032 from danc86/push-krkxkxtnruqp
nixos/sssd: fix KCM to use new krb5 settings
2024-07-17 22:29:09 +08:00
Pol Dellaiera
6b3c00c65a
nixos/tika: add enableOcr option 2024-07-17 13:14:35 +02:00
Weijia Wang
078fdedf26 Merge branch 'staging-next' into staging 2024-07-17 13:10:23 +02:00
Sandro
51fcc2c92e
Merge pull request #314440 from ju1m/radicle 2024-07-17 13:04:06 +02:00
Kartik Gokte
dbba11e241 nixos/prometheus-pve-exporter: added new options introduced in v3.4.3 2024-07-17 16:09:11 +05:30
zimbatm
d11a54cb2f nixos/odoo: set data_dir explicitly
Don't hide the data is a private sub-folder.

Before:
* /var/lib/private/odoo/.local/share/Odoo/
After:
* /var/lib/private/odoo/data
2024-07-17 10:59:01 +02:00
Pyrox
a24fa6098d
nixos/gotenberg: init 2024-07-17 10:37:35 +02:00
OTABI Tomoya
43d306e7db
Merge pull request #326398 from phaer/etebase-python
etebase-server: use buildPythonApplication, default to withLdap = false
2024-07-17 10:00:42 +09:00
zimbatm
c570314635 nixos/odoo: add autoInit option
When enabled, Odoo will automatically initialize the database on
startup.
2024-07-16 21:55:13 +02:00
zimbatm
750f1478fc nixos/odoo: use env vars to configure Odoo
This allows running multiple commands with the same settings.
2024-07-16 21:55:13 +02:00
phaer
c437fb23e1 etebase-server: use buildPythonApplication...
...not pythonPackage. This is an app, living in pkgs/servers, so
we just use callPackage in all-packages and drop the python module.

python3.pkgs.toPythonModule could be used if a python module was needed.
Before that change legacyPackages.x86_64-linux.python311.pkgs.etebase-server.python
would give a python 3.12 release, and was therefore broken.

etebase-server = toPythonModule (pkgs.etebase-server.override {
  python3 = python;
});

would now be correct
2024-07-16 20:20:29 +02:00
github-actions[bot]
df8055b727
Merge staging-next into staging 2024-07-16 18:01:37 +00:00
Artturin
a516ea8c99 Merge branch 'staging-next' into staging 2024-07-16 19:07:48 +03:00
❄️
930b0dca59
Merge pull request #327476 from rorosen/k3s-extra-flags-list
nixos/k3s: accept a list of extraFlags
2024-07-16 09:27:19 -03:00
Sandro
0397741f8a
Merge pull request #324698 from bbenno/graylog-6_0 2024-07-16 14:24:21 +02:00
Kira Bruneau
c0c8a36716 replay-sorcery: remove as it is unmaintained upstream 2024-07-16 07:29:07 -04:00
Atemu
aba669227b
Merge pull request #326618 from emilazy/drop-ffmpeg-5
ffmpeg_5: drop
2024-07-16 13:06:36 +02:00
Finn Landweber
0d58b75cba
added prometheus-borgmatic-exporter module 2024-07-16 12:17:49 +02:00
Sandro
10635f7d2a
Merge pull request #202068 from justinas/nginxlog-exporter-typed-options 2024-07-16 11:07:18 +02:00
Aleksana
ae5d2af73e
Merge pull request #327288 from Mic92/xmr-stak
xmr-stak: remove
2024-07-16 16:37:20 +08:00
Robert Rose
cc2790ff1e nixos/k3s: accept a list of extraFlags
Accept a list of strings for the extraFlags
option in addition to the previous single
string.
2024-07-16 08:20:32 +02:00
Bobby Rong
d4f7ad898f
Merge pull request #326687 from getchoo/pkgs/budgie/by-name
move all packages from budgie & budgiePlugins scopes
2024-07-15 22:41:54 +08:00
Weijia Wang
97381b7b83
Merge pull request #322106 from codyps/lighthouse-5.2.0
lighthouse: 4.6.0 → 5.2.0
2024-07-15 16:21:56 +02:00
K900
c3391ff001 nixos-alsa: remove with lib;, fix undefined references 2024-07-15 10:33:34 +03:00
Jörg Thalheim
fdfe59f7b3 xmr-stak: remove 2024-07-15 09:30:59 +02:00
Masum Reza
a14c5d651c
Merge pull request #306516 from gador/init-blenderfarm
blendfarm: init at 1.1.6; nixos/blendfarm: init
2024-07-15 09:37:31 +05:30
seth
731fb7477c
budgie-analogue-clock-applet: move from budgiePlugins scope to top-level 2024-07-14 15:37:52 -04:00
seth
fef55ad1ca
magpie: move from budgie scope to top-level 2024-07-14 15:33:01 -04:00
seth
50124d6c9f
budgie-session: move from budgie scope to top-level 2024-07-14 15:33:01 -04:00
seth
228edade41
budgie-screensaver: move from budgie scope to top-level 2024-07-14 15:33:00 -04:00
seth
51bfa7985c
budgie-gsettings-override: move from budgie scope to top-level 2024-07-14 15:33:00 -04:00
seth
9bfabc5a06
budgie-desktop-view: move from budgie scope to top-level 2024-07-14 15:32:59 -04:00
seth
417179abbd
budgie-desktop{,with-plugins}: move from budgie scope to top-level 2024-07-14 15:32:58 -04:00
seth
96bab1b8b0
budgie-control-center: move from budgie scope to top-level 2024-07-14 15:32:57 -04:00
seth
ba97c97f32
budgie-backgrounds: move from budgie scope to top-level 2024-07-14 15:32:57 -04:00
Sefa Eyeoglu
1d5188b3b4
nixos/vaultwarden: assert valid backupDir path
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-07-14 19:54:27 +02:00
Sandro
3c2e182677
Merge pull request #318897 from symphorien/btrbk_undeprecate_extraPackages
nixos/btrbk: undeprecate extraPackages
2024-07-14 19:13:55 +02:00
Sandro
77ee426a4d
Merge pull request #324663 from OPNA2608/init/lomiri/teleports
lomiri.teleports: init at 1.20
2024-07-14 18:47:54 +02:00
Florian Brandes
f312bdb5d7
nixos/blendfarm: init
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-07-14 21:01:04 +05:30
Sandro
8f24fa52bb
Merge pull request #317488 from asbish/master
nixos/prometheus-snmp-exporter: add environmentFile option
2024-07-14 16:17:05 +02:00
Shiva Kaul
04967c307f nixos/spiped: remove broken chmod's from preStart
Remove `chmod`s which were (1) broken and (2) no longer considered good Nix practice.
2024-07-14 22:04:53 +10:00
Pol Dellaiera
1a8e33d451
Merge pull request #326532 from drupol/module/add-tika
nixos/tika: init module
2024-07-14 12:27:27 +02:00
Emily
aef28c7834 nixos/akkoma: unpin ffmpeg_5
Their Dockerfile uses Alpine’s ffmpeg package, which is already
on 6. They just invoke the command‐line tool and nothing they do
looks particularly version‐sensitive.
2024-07-14 08:34:23 +01:00
Emily
b801dc2813 nixos/frigate: unpin ffmpeg_5
It just uses the command‐line tool, and the test passes.
2024-07-14 08:34:23 +01:00
Dan Callaghan
375ef3c127 nixos/sssd: fix KCM to use new krb5 settings
krb5.libdefaults moved to security.krb5.settings.libdefaults in PR #243169.
2024-07-14 16:43:56 +10:00
lassulus
ee2d97a3ce
Merge pull request #323604 from LennyPenny/patch-1
nixos/tandoor-recipes: enable serving of media files by default
2024-07-13 21:36:17 +02:00
K900
3eeff54780 nixos/alsa: kill sound.enable and friends with fire 2024-07-13 13:56:18 +03:00
OPNA2608
77aaa0695f nixos/lomiri: Add teleports 2024-07-13 10:45:42 +02:00
Pol Dellaiera
c8bf7321a9
nixos/tika: init module 2024-07-12 18:46:53 +02:00
superherointj
bbc168ab4c k3s: use team for maintainers 2024-07-12 09:30:38 -03:00
Martin Weinelt
e62de266ad
Merge pull request #326149 from mguentner/remove_mxisd_ma1sd
nixos/mxisd: remove module
2024-07-12 13:15:11 +02:00
Marcus Ramberg
72249a0d35
Merge pull request #275180 from rorosen/extend-k3s-module 2024-07-12 12:02:32 +02:00
Maximilian Güntner
23e62062bc
nixos/mxisd: remove module
mxisd and ma1sd are both unmaintained
2024-07-12 11:44:59 +02:00
Florian Klink
a307e5d76b
Merge pull request #326068 from phozzy/Feat/Add-syslog-capabilities-4-opentelemetry-collector
Feat/add syslog capabilities 4 opentelemetry collector
2024-07-11 15:10:43 +03:00
Jonas Chevalier
87fa27e3aa
Merge pull request #321410 from mogeko/rke2
rke2: add killall script
2024-07-11 12:15:24 +02:00
Masum Reza
ae20d8d61a
Merge pull request #325951 from mjoerg/magic-wormhole-python-3.12
magic-wormhole: make usable with Python 3.12
2024-07-11 15:32:13 +05:30
Sandro
24cefb01b3
Merge pull request #284419 from ocfox/realm 2024-07-11 10:46:47 +02:00
Artur Faizullin
4e3c5fb713 nixos/opentelemetry-collector: Avoid using a fixed hardcoded path
Follow the boyscout rule.
2024-07-11 08:27:29 +02:00
Artur Faizullin
40013729d3 nixos/opentelemetry-collector: Use SupplementaryGroups to add the dynamic user to systemd-journal group
OpenTelemetry collector's Journald Receiver has not enough permissions
2024-07-11 08:23:20 +02:00
Artur Faizullin
e304e2ee59 nixos/opentelemetry-collector: Accept changes from linter
Follow the boyscout rule.
2024-07-11 08:19:48 +02:00
Masum Reza
341ef0e80b
Merge pull request #321142 from treyfortmuller/tff/cloudflare-warp-module
nixos/cloudflare-warp: init module
2024-07-11 09:28:09 +05:30
Nick Cao
5df12940bd
nixos/udev: remove rules for /dev/kvm
Permissions on /dev/kvm are already specified by tmpfiles.d rules

Reference: https://github.com/systemd/systemd/blob/v255/tmpfiles.d/static-nodes-permissions.conf.in#L18
2024-07-10 21:06:01 -04:00
Peder Bergebakken Sundt
26b1af9155
Merge pull request #318543 from TomaSajt/terraria-kill-service
nixos/terraria: kill session when stopping without world selected
2024-07-11 01:38:35 +02:00
Aaron Andersen
6c4182b0c2
Merge pull request #325957 from mibmo/module/clamav/package-option
nixos/clamav: add package option
2024-07-10 17:18:41 -04:00
Trey Fortmuller
7b32ea9abb
nixos/cloudflare-warp: init
Co-authored-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
removed `with lib;` at the top level
cleanup
2024-07-10 22:48:57 +05:30
Peder Bergebakken Sundt
447ca95585
Merge pull request #320277 from Yarny0/tsm-client-update
tsm-client: update and migrate to by-name and finalAttrs
2024-07-10 19:00:24 +02:00
ocfox
86ce0733d2
nixos/realm: init
Co-authored-by: Nick Cao <nickcao@nichi.co>
Co-authored-by: oluceps <i@oluceps.uk>
2024-07-10 16:43:17 +02:00
Masum Reza
025f6d60e3
Merge pull request #326047 from britter/britter/onlyoffice-typos
onlyoffice: typo fixes, remove top level `with lib;`
2024-07-10 15:01:05 +05:30
Benedikt Ritter
57ea5be929
onlyoffice: Remove top-level with lib;
Prepend affected components with `lib.` instead.
2024-07-10 10:42:29 +02:00
lassulus
11dbf85aad
Merge pull request #325637 from Stunkymonkey/jtisi-meet-chmod-chown
nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown'
2024-07-10 09:57:18 +02:00
Benedikt Ritter
d61489db1a
onlyoffice: Fix typos 2024-07-10 09:14:21 +02:00
Martin Joerg
a85c314882 nixos/magic-wormhole-mailbox-server: use Python 3.11, adopt
magic-wormhole-mailbox-server is not yet supported with Python 3.12.
https://github.com/magic-wormhole/magic-wormhole-mailbox-server/issues/41
2024-07-09 22:22:56 +00:00
Martin Joerg
12de9a7469 nixos/magic-wormhole-mailbox-server: nixfmt 2024-07-09 22:22:56 +00:00
mib
8eac966310 nixos/clamav: add package option 2024-07-10 00:00:01 +02:00
Justinas Stankevicius
a572d5151c nixos/prometheus-nginxlog-exporter: define types of inner options 2024-07-09 23:12:33 +03:00
Franz Pletz
c7ee75329f
Merge pull request #325247 from OPNA2608/fix/lomiri/revert-glib-workarounds
lomiri.*: Revert GLib workarounds
2024-07-09 17:51:49 +02:00
Franz Pletz
f1d54d49b9
Merge pull request #325459 from numinit/nebula-module-tweaks
nixos/nebula: support non-path host keys
2024-07-09 16:59:35 +02:00
Franz Pletz
b9db8b7c16
Merge pull request #325589 from wskeele/duplicity-include-filelist
nixos/duplicity: Add support for --include-filelist / --exclude-filelist
2024-07-09 16:45:35 +02:00
Franz Pletz
31c99a61da
Merge pull request #325286 from bjornfor/nixos-deconz-fix-service-stop
nixos/deconz: treat SIGTERM exit status as success
2024-07-09 15:07:36 +02:00
Pol Dellaiera
db41081a91
Merge pull request #323743 from NixOS/nixos/module/glance-init
nixos/glance: init module
2024-07-09 06:42:22 +02:00
Felix Buehler
87051a8f44 nixos/sogo: prefer 'install' over 'chmod'/'chown' 2024-07-08 22:41:47 +02:00
Felix Buehler
16eb9ced4e nixos/jitsi-meet: prefer 'serviceConfig' over 'chmod'/'chown' 2024-07-08 22:10:25 +02:00
Pol Dellaiera
ed24a0baf3
Merge pull request #317107 from ibizaman/deluge_exporter_init
prometheus-deluge-exporter: init at 2.4.0-unstable-2024-06-02
2024-07-08 20:09:50 +02:00
Sandro
e08b520450
Merge pull request #323469 from OPNA2608/init/lomiri/lomiri-clock-app 2024-07-08 17:47:39 +02:00
wskeele
fff878e7c6 nixos/duplicity: Add support for --include-filelist / --exclude-filelist 2024-07-08 17:02:42 +02:00
OPNA2608
2204726a6d nixos/lomiri: Add clock 2024-07-08 16:02:09 +02:00
matthewcroughan
c53e5201f4 nixos/scion: make storing path database optional
Storing the SCION path sqlite databases persistently on disk is a valid
setup that improves performance, but may have outstanding bugs that need
to be investigated, so this makes persisent storage optional, off by
default.
2024-07-08 13:26:30 +02:00
Pol Dellaiera
00e9e54702
nixos/glance: init module 2024-07-08 13:14:09 +02:00
Morgan Jones
de5e0cf11b
nixos/nebula: add numinit as maintainer
I maintain the package and coauthored this module, so should be on it.
:-)
2024-07-08 01:06:58 -07:00
Morgan Jones
95f1ebd2aa
nixos/nebula: loosen ProtectSystem
"strict" may be too strict for some PKCS#11 providers.
2024-07-08 01:04:15 -07:00
Morgan Jones
b81827b992
nixos/nebula: allow string or path for keys
Nebula will be getting PKCS#11 support soon, and this will allow
keys to be specified as PKCS#11 URIs instead of paths.
2024-07-08 01:03:40 -07:00
Max Hausch
a8038698d3
nixos/restic: add option to inhibit going to sleep 2024-07-08 09:43:27 +02:00
Sandro
9d33b8d690
Merge pull request #321046 from OPNA2608/init/lomiri/lomiri-calculator-app
lomiri.lomiri-calculator-app: init at 4.0.2
2024-07-08 00:30:19 +02:00
Aaron Andersen
aa3e6fadd2
Merge pull request #325133 from jpds/nixos-prometheus-hardening
nixos/prometheus: systemd hardening for alertmanager/pushgateway
2024-07-07 16:22:35 -04:00
Jörg Thalheim
ef1670eee9
Merge pull request #325291 from Stunkymonkey/bee-umask-chmod
nixos/bee: prefer 'install' over 'chmod'
2024-07-07 21:49:17 +02:00
Felix Buehler
72a4f148f9 nixos/bee: prefer 'install' over 'chmod' 2024-07-07 17:47:28 +02:00
Sandro
ebd625a22a
Merge pull request #276692 from dani0854/nixos/languagetool/add_jvm_options
nixos/languagetool: add jvm options
2024-07-07 16:41:41 +02:00
Bjørn Forsman
5aab6344c2 nixos/deconz: treat SIGTERM exit status as success
deconz doesn't handle SIGTERM and terminates with code 143 (128 + 15
(SIGTERM) instead of 0. This results in systemd marking the service as
failed when a user stops it (with `systemctl stop deconz`). Fix it by
treating code 143 as success.
2024-07-07 16:11:11 +02:00
Sandro
b2a1b6f508
Merge pull request #324924 from SuperSandro2000/mediawiki-syntaxcheck
nixos/mediawiki: check if LocalConfig.php is valid syntax
2024-07-07 15:17:08 +02:00
OPNA2608
c34ee327e6 Revert "lomiri.telephony-service: Mark broken & exclude everywhere"
This reverts commit 3ef60ac499.
2024-07-07 12:58:45 +02:00
Yu Ishii
f210aaf4ca nixos/prometheus-snmp-exporter: add a parameter implicitly
Change to adding `--config.expand-environment-variables` parameter to
`ExecStart` if `environmentFile` option is set.
2024-07-07 16:49:31 +09:00
Yu Ishii
839bbc1700 nixos/prometheus-snmp-exporter: add environmentFile option
Prometheus snmp-exporter has support to pass sensitive data as environment
variables. Since other exporter configurations for NixOS have
environmentFile option, the same option is added to snmp-exporter.
2024-07-07 14:28:37 +09:00
Jonathan Davies
008ea18566
nixos/prometheus: Harden alertmanager/webhook-logger/pushgateway systemd definitions 2024-07-07 00:15:57 +01:00
OPNA2608
916ba54f24 nixos/lomiri: Add polkit agent 2024-07-06 20:05:06 +02:00
Sandro Jäckel
313d2ccf83
nixos/mediawiki: check if LocalConfig.php is valid syntax 2024-07-06 02:06:50 +02:00
Maximilian Bosch
a9855af287
Merge pull request #321771 from Mynacol/nextcloud-preserveenv
nixos/nextcloud: Remove --preserve-env in sudo
2024-07-05 21:24:50 +00:00
Maximilian Bosch
c4a59a99ba
Merge pull request #324617 from NotAShelf/271968-take-two
nixos/roundcube: adjust maxAttachmentSize, clarify documentation
2024-07-05 21:16:45 +00:00
Julien Moutinho
88fb6d37e3 nixos/radicle: init services 2024-07-05 22:07:32 +02:00
0x4A6F
5292f247a1
Merge pull request #324066 from hacklschorsch/gitlab-runner-add-post-get-sources-script
Gitlab-Runner: add postGetSourcesScript
2024-07-05 16:51:56 +02:00
0x4A6F
1c3adad3c4
Merge pull request #324042 from hacklschorsch/gitlab-runner-preclone-is-now-pre-get-sources-script
Gitlab-Runner: preCloneScript is now preGetSourcesScript
2024-07-05 16:50:58 +02:00
Jonas Heinrich
e97d5eb3eb
Merge pull request #293210 from onny/eintopf
nixos/eintopf: init; eintopf: init at 0.13.16
2024-07-05 13:12:59 +02:00
Jonas Heinrich
28512d1ba4 nixos/eintopf: init 2024-07-05 13:12:35 +02:00
Aaron Andersen
6fa3ecdc73
Merge pull request #324464 from hraban/cloudflare-dyndns-frequency
cloudflare-dyndns: configurable systemd frequency
2024-07-04 21:02:43 -04:00
Benno Bielmeier
ed904c256f nixos/graylog: add option dataDir
in order to use this nixos module with Graylog 6.0, in which

> the default value for the data_dir configuration option has been
> removed and must be specified in graylog.conf [1].
> -- https://go2docs.graylog.org/current/upgrading_graylog/upgrading_to_graylog_6.0.x.htm

The value set by default is the same as before introducing this option.
See also [1,2]

[1]: https://go2docs.graylog.org/current/setting_up_graylog/server.conf.html
[2]: https://go2docs.graylog.org/5-2/setting_up_graylog/server.conf.html
2024-07-05 01:49:12 +02:00
Aleksana
1c1df68b1e
Merge pull request #323020 from bjornfor/nixos-dictd-exit-status
nixos/dictd: treat SIGTERM exit status as success
2024-07-05 02:01:21 +08:00
NotAShelf
48d1d14633
nixos/roundcube: adjust maxAttachmentSize, clarify documentation 2024-07-04 20:07:19 +03:00
Nicholas Sielicki
56ceae07be
nixos/jellyseerr: add package option (#276616)
Co-authored-by: seth <getchoo@tuta.io>
Co-authored-by: Franz Pletz <fpletz@fnordicwalking.de>
2024-07-04 18:56:38 +02:00
Masum Reza
9ec0508f83
Merge pull request #171855 from ju1m/prosody
nixos/prosody: support mod_http_file_share
2024-07-04 21:59:29 +05:30
Michael Weiss
10cbea2905
nixos/monetdb, nixos/sks: remove primeos from maintainers (#277366)
Remove myself as maintainer from modules that I don't use anymore
2024-07-04 18:17:43 +02:00
Franz Pletz
d73e618905
Merge pull request #324450 from phfroidmont/patroni-module-remove-raft 2024-07-04 18:16:08 +02:00
❄️
a5dad94280
Merge pull request #324083 from Djabx/fix-config-snapper
nixos/snapper: fix timeline options type
2024-07-04 12:50:01 -03:00
Aleksana
7cf6d9246e
Merge pull request #324565 from Pandapip1/patch-3
nixos/httpd: Use mkEnableOption
2024-07-04 23:45:44 +08:00
David McFarland
b44b62db30
Merge pull request #291640 from tie/sonarr-v4
sonarr: build from source
2024-07-04 12:08:02 -03:00
Nikita Pedorich
cba1e458a8
netdata: 1.45.4 -> 1.46.1 2024-07-04 23:00:09 +09:00
Gavin John
dffd5b699d
nixos/httpd: Use mkEnableOption 2024-07-04 13:44:24 +00:00
Sandro
31a8448c93
Merge pull request #279917 from h7x4/nixos-module-update-add-samba-slice 2024-07-04 11:48:27 +02:00
Paul-Henri Froidmont
bca32a4163
nixos/patroni: remove raft 2024-07-04 10:22:19 +02:00
Masum Reza
24ced04659
Merge pull request #324347 from jtojnar/gdm-fingerprint-fix
nixos/gdm: Fix fingerprint auth rules
2024-07-04 10:54:46 +05:30
Aaron Andersen
1af787b0e7
Merge pull request #324320 from tomaskala/add-package-option-to-blocky
nixos/blocky: Add an option for the package to be used
2024-07-04 00:25:12 -04:00
Hraban Luyat
406351b470 cloudflare-dyndns: configurable systemd frequency 2024-07-03 22:50:45 -04:00
Sandro Jäckel
4169ba8920
nixos/plasma6: enable programs.kde-pim by default 2024-07-04 00:18:34 +02:00
Jan Tojnar
af0cdb44a0 nixos/gdm: Fix fingerprint auth rules
We introduced the gdm-fingerprint.pam in 9d41fe6fcc.

We used the [upstream Arch config] as a template, which contains an extended control field that jumps over **one** immediately-following `auth` rule unless `pam_gdm.so` succeeds.

But we decided to not include `pam_gnome_keyring.so` so there was no rule to skip over, resulting in a broken control flow and the PAM module failing with “PAM bad jump in stack”, breaking the fingerprint authentication in GDM.

Let’s actually add `pam_gnome_keyring.so`, like the Arch config does. Because we are creating the PAM file using the `text` option, `security.pam.services.gdm-fingerprint.enableGnomeKeyring` does not do anything so we need to do it manually.

For the case where gnome-keyring is not enabled, we could add a no-op rule like `optional pam_permit.so` after `pam_gdm.so` so that the branching always has something to jump over but it will be simpler to just make the both conditional. There are no further `auth` rules that could benefit from `pam_gdm.so` doing something so it should be fine.

Unlike in Arch, we are not going to invoke `pam_gnome_keyring.so` in a `session` rule since that is already done by the included `login` module.

[upstream Arch config]: 81ee658c11/data/pam-arch/gdm-fingerprint.pam
2024-07-03 23:36:52 +02:00
Jan Tojnar
1cf4155498 nixos/gdm: Clean up gdm-fingerprint pam module
The `optional pam_permit.so` comes from the [upstream Arch config] we used as a template in 9d41fe6fcc. But I do not think it does anything in this position – see also the discussion at https://bbs.archlinux.org/viewtopic.php?id=245892 – so let’s just remove it.

Let’s also add a comment about disabling `fprintAuth` and a blank line for clarity.

[upstream Arch config]: 81ee658c11/data/pam-arch/gdm-fingerprint.pam
2024-07-03 23:32:43 +02:00
Jan Tojnar
68211b3546 Revert "nixos/gnome-keyring: unlock keyring with gdm-password, gdm-autologin"
`gdm-autologin` and `gdm-password` PAM modules are defined using the `text` option, so the option here is a no-op.

Furthermore, `gdm-password` already includes `login` for all module types,
and that invokes `pam_gnome_keyring.so` in the same way Arch’s `gdm-password` module would:
81ee658c11/data/pam-arch/gdm-password.pam

This reverts commit c24c7933ba.
2024-07-03 21:32:34 +02:00
Jan Tojnar
0e83d67373 Revert "nixos/gnome-keyring: enable gnome-keyring for fingerprint authentication'"
`gdm-fingerprint` PAM module is defined using the `text` option, so the option here is a no-op.

This reverts commit 6bb516d45f.
2024-07-03 21:25:17 +02:00
Aleksana
3a96597d4f
Merge pull request #317457 from rawkode/fix/espanso-opts
nixos/espanso: fix wayland option
2024-07-03 23:20:03 +08:00
David Flanagan
f13e08ac0e
nixos/espanso: fix wayland option
Co-authored-by: Aleksana <alexander.huang.y@gmail.com>
2024-07-03 16:17:52 +01:00
OTABI Tomoya
3ca8ba2a73
Merge pull request #324114 from NyCodeGHG/renovate-unix-socket
nixos/renovate: allow AF_UNIX access
2024-07-03 22:40:17 +09:00
Alexandre Badez
e37b07ffba nixos/snapper: fix timeline options type 2024-07-03 13:52:34 +02:00
Alexandre Badez
0c80191081 nixos/snapper: add maintainer 2024-07-03 13:52:34 +02:00
Tomas Kala
6930dd3dee nixos/blocky: Add an option for the package to be used
Previously, the blocky package was hardcoded to the one in pkgs. This
change allows to set it, so the user can configure the blocky service to
run blocky from nixpkgs-unstable, for example.
2024-07-03 13:42:34 +02:00
Jonas Chevalier
f2506eaef6
Merge pull request #324102 from johannwagner/fix/cloud-init-fixes
nixos/cloud-init: Bug fix and enhancements
2024-07-03 13:25:09 +02:00
Martin Weinelt
84164bf098
Merge pull request #318659 from mweinelt/fastly-exporter
nixos/prometheus-fastly-exporter: unwrap execstart
2024-07-03 12:40:10 +02:00
Aleksana
2240a1aa31
Merge pull request #324163 from SuperSandro2000/271914
nixos/kmscon: fix eval
2024-07-03 12:38:01 +08:00
Weijia Wang
9c1cfad9a0
Merge pull request #307910 from r-ryantm/auto-update/pixelfed
pixelfed: 0.11.13 -> 0.12.1
2024-07-03 00:55:55 +02:00
Sandro Jäckel
6868a97e5e
nixos/kmscon: fix eval 2024-07-03 00:01:12 +02:00
Thomas Gerbet
8ddb1bb721
Merge pull request #318599 from pacien/nixos-fcgiwrap-isolation
nixos/fcgiwrap: refactor to fix permissions
2024-07-02 21:52:33 +02:00
Sandro
15705830ce
Merge pull request #321061 from SomeoneSerge/prosody-logs
nixos/prosody: provide an (internal) escape hatch for overriding the …
2024-07-02 20:36:07 +02:00
Sandro
230c213fae
Merge pull request #314767 from Guanran928/mihomo
nixos/mihomo: add assertion for configFile
2024-07-02 20:27:36 +02:00
Sandro
bd4241bcc8
Merge pull request #297826 from anthonyroussel/update-tomcat_connectors
apacheHttpdPackages.mod_jk: 1.2.48 -> 1.2.49, rename from tomcat_connectors
2024-07-02 20:26:13 +02:00
Sandro
4f90cfd2f9
Merge pull request #313984 from yayayayaka/gitlab-17.0.1
gitlab: 16.11.5 -> 17.1.1
2024-07-02 20:12:42 +02:00
Marie Ramlow
787354f63c nixos/renovate: allow AF_UNIX access
renovate can update nix dependencies, which results in nix trying to communicate with the nix-daemon over a unix socket.
2024-07-02 20:09:12 +02:00
K900
caff135cb1
Merge pull request #323419 from Ma27/bump-grafana
grafana: 11.0.0 -> 11.1.0
2024-07-02 20:59:21 +03:00
Felix Bühler
4b015946c9
Merge pull request #307459 from Stunkymonkey/freshrss-extensions
freshrss-extensions: init
2024-07-02 19:43:22 +02:00
Johann Wagner
49d137a967 nixos/cloud-init: Allow additional packages in cloud-init module 2024-07-02 19:19:56 +02:00
Johann Wagner
33c55024dc nixos/cloud-init: Allow systemd.network to be enabled if cloud-init.network is disabled 2024-07-02 19:12:30 +02:00
Florian Sesser
828eb8c574 Gitlab-Runner: Add --post-get-sources-script
`--post-get-sources-script` has been added a while ago.  This
makes it available via the nix configuration.

See https://about.gitlab.com/blog/2023/03/27/changes-to-the-preclonescript/
2024-07-02 14:46:48 +00:00
Florian Sesser
42a2c268f6 preCloneScript is now preGetSourcesScript
The --pre-clone-script service configuration has been deprecated (https://docs.gitlab.com/ee/update/deprecations.html#deprecation-and-planned-removal-for-ci_pre_clone_script-variable-on-gitlab-saas) and replaced by --pre-get-sources-script (https://about.gitlab.com/blog/2023/03/27/changes-to-the-preclonescript/).
2024-07-02 13:23:30 +00:00
Cat
ed1b6699c0
nixos/syncthing: implement folder type (#308832)
* Syncthing: implemented folder type

* Syncthing: fix syntax (via @johnhamelink )

This commit should be rebased/squashed into the previous one if ofborg cleares it!

Co-authored-by: John Hamelink <me@johnhame.link>

---------

Co-authored-by: John Hamelink <me@johnhame.link>
2024-07-02 19:49:03 +08:00
Mynacol
af072cfb55 nixos/nextcloud: Remove --preserve-env in sudo
This helps supporting sudo-rs, which currently does not implement the
--preserve-env flag and probably won't so in the foreseeable future [1].

The replacement just sets both environment variables behind the sudo
invocation with env, as sudo-rs also doesn't implement env var lists.

The OC_PASS variable is dropped, as it is seemingly unused and would
leak through this approach through /proc.

[1] https://github.com/memorysafety/sudo-rs/issues/129
2024-07-02 11:29:35 +02:00
Jonas Heinrich
c0b4d43442
Merge pull request #314525 from onny/stalwart-openfirewall
nixos/stalwart-mail: add openFirewall option
2024-07-02 10:00:46 +02:00
Jan Tojnar
0f56e32213
Merge pull request #319659 from jtojnar/gnome-extract
Move various packages out of gnome scope
2024-07-02 08:03:53 +02:00
ckie
7d34b64eca maintainers: remove ckie
well, we failed. we have not saved nix together[0], and today's show of
utter incompetence[1] has pushed me over the edge along with many others[2]

it's been good. a lot of PRs. a lot of endless reviews.
some new friends, some old friends converted :P

cya in the next world, cuties <3

[0] https://save-nix-together.org/
[1] https://discourse.nixos.org/t/nca-member-jonringer-joint-announcement/48231
[2] https://github.com/NixOS/nixpkgs/issues?q=label%3A%228.has%3A+maintainer-list+%28update%29%22+remove+in%3Atitle+created%3A%3C2024-07-10
2024-07-02 02:40:02 +02:00
Janik H.
76cd1d2211 maintainers: drop janik
I guess my time has come as well...

With this commit, I'm not just dropping my maintainer entry, but I'm also
resigning from my duties as a board observer and NixCon project lead.
I also terminated my Summer of Nix contract today.
I'll also stop hosting the local NixOS meetup.

The only "project" I'll finish under the NixOS Foundation umbrella is
Google Summer of Code because the mentees aren't even remotely
responsible for why I'm leaving, and it would be unfair to leave them
hanging.

I'm grateful for all the things I was able to learn, for all the experiences
I could gather, and for all the friends I made along the way.
NixOS is what makes computers bearable for me, so I'll go and work on
some fork (*something something* you always meet twice in life).
2024-07-02 02:36:42 +02:00
Jasper Woudenberg
71e88077ca maintainers: remove jwoudenberg 2024-07-02 01:35:17 +02:00
Marcus Ramberg
a449a2a14a
Merge pull request #321079 from res0Nanz/master
nixos/cloudflared: fix links in doc
2024-07-01 23:39:57 +02:00
Felix Buehler
bb33682f3a nixos/freshrss: add extensions 2024-07-01 23:38:56 +02:00
Guillaume Girol
3b82fcc6c3
Merge pull request #318826 from NorfairKing/borgbackup-requiremount
borgbackup: Use RequiresMountsFor to require that the repo is mounted
2024-07-01 22:03:55 +02:00
Maximilian Bosch
c2586ca239 nixos/nextcloud: warn about unsafe path transitions
Closes #294588
It _may_ also be an answer to #169733.

See explanation from upstream[1] for further details.

[1] https://github.com/systemd/systemd/issues/19618#issuecomment-843273818
2024-07-01 21:20:12 +02:00
pennae
5c5aaaaaae maintainers: remove pennae
https://discourse.nixos.org/t/nca-jonringer-joint-announcement/48231
https://web.archive.org/web/20240701165505/https://discourse.nixos.org/t/nca-jonringer-joint-announcement/48231

we had little faith in the NCA process, but this is going deep, *deep*
into the territory of wilfully insulting all those had placed even a
modicum of trust in that process.

have you fucking nazi bar.
2024-07-01 18:56:40 +02:00
Jonas Heinrich
f45e645e92 nixos/stalwart-mail: add openFirewall option 2024-07-01 14:10:11 +02:00
Jörg Thalheim
c08bd9add4
Merge pull request #307123 from CaptainJawZ/shiori
shiori: 1.5.5 -> 1.7.0
2024-07-01 13:46:24 +02:00
Thiago Kenji Okada
7fb13d1dff
Merge pull request #285299 from loispostula/patch-1
nixos/rtorrent: rpcsock perm should reflect provided options
2024-07-01 10:55:55 +00:00
Someone
9c1849ebd0
Merge pull request #323249 from abysssol/ollama-driver-runpath
ollama: remove dependency on`linuxPackages.nvidia_x11`, use `autoAddDriverRunpath` instead
2024-07-01 10:41:42 +00:00
B4rc1
814ed4b9e5
herbstluftwm: fix unable to be started (#271198)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-07-01 11:11:46 +02:00
abysssol
bf91b72c06 nixos/ollama: remove linuxPackages override
`linuxPackages.nvidia_x11` is no longer used by the `ollama` package.
2024-07-01 04:50:19 -04:00
Jan Tojnar
1369411184 gnome-keyring: Move from gnome scope to top-level
It is on the way out.
2024-07-01 09:35:26 +02:00
Jan Tojnar
71750a5e1d gnome-disk-utility: Move from gnome scope to top-level 2024-07-01 09:35:26 +02:00
Jan Tojnar
e3a06d65ff gnome-themes-extra: Move from gnome scope to top-level
Upstream archived.
2024-07-01 08:26:49 +02:00
Jan Tojnar
6d725135fe gnome-font-viewer: Move from gnome scope to top-level 2024-07-01 08:26:49 +02:00
Jan Tojnar
598a574e08 totem: Move from gnome scope to top-level 2024-07-01 08:26:49 +02:00
Jan Tojnar
2bb2f5742a sushi: Move from gnome scope to top-level 2024-07-01 08:26:49 +02:00
Jan Tojnar
4f71ac5153 gnome-system-monitor: Move from gnome scope to top-level 2024-07-01 08:26:49 +02:00
Jan Tojnar
433464eb6a dconf-editor: Move from gnome scope to top-level 2024-07-01 08:26:48 +02:00
Jan Tojnar
23f2529ffc gpaste: Move from gnome scope to top-level
Not really a GNOME project.
2024-07-01 08:26:48 +02:00
Jan Tojnar
20d5442d8e devhelp: Move from gnome scope to top-level 2024-07-01 08:26:48 +02:00
Jan Tojnar
24f2cf4b4f yelp: Move from gnome scope to top-level 2024-07-01 08:26:48 +02:00
Jan Tojnar
33da2d9416 epiphany: Move from gnome scope to top-level 2024-07-01 08:26:47 +02:00
Jan Tojnar
4380c1aa38 baobab: Move from gnome scope to top-level 2024-07-01 08:26:47 +02:00
Jan Tojnar
b69ed4249d zenity: Move from gnome scope to top-level
It is widely used outside gnome, not much inside.
2024-07-01 08:26:47 +02:00
Jan Tojnar
2adc7d7340 geary: Move from gnome scope to top-level 2024-07-01 08:26:46 +02:00
Jan Tojnar
5c5c20919b adwaita-icon-theme: Move from gnome scope to top-level
It is widely used outside gnome – although it probably should not be.
2024-07-01 08:26:46 +02:00
Jan Tojnar
545822250c rygel: Move from gnome scope to top-level 2024-07-01 08:26:46 +02:00
Jan Tojnar
fedc161645 simple-scan: Move from gnome scope to top-level 2024-07-01 08:26:45 +02:00
Jan Tojnar
f622b52aaa seahorse: Move from gnome scope to top-level 2024-07-01 08:26:45 +02:00
Jan Tojnar
0daa38a8fc gnome-calendar: Move from gnome scope to top-level 2024-07-01 08:26:45 +02:00
Jan Tojnar
66c4983d67 gnome-calculator: Move from gnome scope to top-level 2024-07-01 08:26:45 +02:00
Jan Tojnar
5482d7417b evince: Move from gnome scope to top-level 2024-07-01 08:26:44 +02:00
Jan Tojnar
85a1179dab file-roller: Move from gnome scope to top-level 2024-07-01 08:26:44 +02:00
Jan Tojnar
b91d4ead2a gnome-terminal: Move from gnome scope to top-level 2024-07-01 08:26:44 +02:00
Jan Tojnar
2be24442bb nautilus: Move from gnome scope to top-level 2024-07-01 08:26:44 +02:00
Jan Tojnar
e124f51ee1 gnome-user-share: Move from gnome scope to top-level 2024-07-01 08:15:53 +02:00
Someone Serge
12c6d79e72 nixos/prosody: provide an escape hatch for overriding the logging configuration 2024-07-01 01:24:19 +00:00
Tom Sydney Kerckhove
edb707e3b5 borgbackup: Use RequiresMountsFor to require that the repo is mounted 2024-06-30 21:33:13 +02:00
Ricardo Band
96c60c6b09 nixos/freshrss: add ability to use socket path
This change enables server:port combinations like "localhost:5432" but
also socket paths like "/run/postgresql". Without this change a port was
mendatory and attached to the path (/run/postgresql:5432) resulting in
an incorrect socket path. The underlying script already configures paths
correctly, so this small change should be enough.
2024-06-30 20:31:37 +02:00
Franz Pletz
3d7a9d1e5d
Merge pull request #321981 from fgaz/nixos/smartd/systembus-notify 2024-06-30 19:41:05 +02:00
Lenny
e8c56de827
nixos/tandoor-recipes: enable serving of media files by default
Fixes 404 when tandoor is trying to serve recipe images.
2024-06-30 14:47:21 +00:00
Jörg Thalheim
d6cf181343 nixos/shiori: fix databaseUrl example 2024-06-30 13:41:38 +02:00
Jörg Thalheim
84a8354c58 nixos/shiori: fix BindPaths conditions if databaseUrl is not set 2024-06-30 13:06:11 +02:00
Jörg Thalheim
992f8bf968 nixos/shiori: fix nixos types for paths 2024-06-30 13:06:11 +02:00
Doron Behar
3063d28384
Merge pull request #271914 from kingarrrt/kmscon
kmscon: configure keymap from xserver xkb config
2024-06-30 10:53:15 +03:00
h7x4
f4ebfc297c
Merge pull request #200654 from aacebedo/aacebedo/playerctld
playerctl: add daemon service
2024-06-30 03:41:17 +02:00
tomberek
079457313a
Merge pull request #321930 from jtbx-prs/oink-after-network
nixos/oink: wait for network.target
2024-06-29 20:42:03 -04:00
Arthur Noel
6447fae5d0 kmscon: configure keymap from xserver xkb config 2024-06-30 00:29:16 +01:00
Anders Kaseorg
1e68bdf3a4 nixos/udev: Fix grep: warning: stray \ before /
This reverts commit dbe2325603, which
was mistaken: `/` matches exactly the same things matched by `\/` but
without the warning.

Fixes #316561.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2024-06-29 17:38:25 -04:00
Danilo Reyes
4f021e14a3 shiori: 1.5.5 -> 1.7.0 2024-06-29 15:30:22 -06:00
Eman Lear
6c00b71662
Merge branch 'master' into master 2024-06-30 02:19:21 +08:00
Maximilian Bosch
8511063014
grafana: 11.0.0 -> 11.1.0
ChangeLog: https://github.com/grafana/grafana/releases/tag/v11.1.0

A few additional changes were necessary:

* Grafana now refuses to listen on non-IP values and aborts with

    Error: ✗ *apiserver.service run error: invalid IP address: localhost

* packages/grafana-e2e doesn't exist anymore, so the build fixes for
  that could be removed.

* Make sure we always compile the binary parts of cypress.

* Grafana tends to set the minimum Go version to the latest Go version
  available now[1].

* The `url` of a datasource was set to `localhost` by default. I don't
  expect anybody to have not set it when needed, also Grafana aborts now
  if `url` is non-empty for a random walk datasource (which broke the VM
  tests).

[1] https://github.com/grafana/grafana/pull/88794#discussion_r1630563467
2024-06-29 19:09:05 +02:00
Kim Lindberger
b75986fd26
Merge pull request #310642 from arcnmx/keycloak-hostname-strict
nixos/keycloak: relax hostname settings assertion
2024-06-29 17:09:02 +02:00
Nick Cao
690518e966
Merge pull request #321982 from Moraxyc/update-nezha-agent
nezha-agent: 0.17.0 -> 0.17.2
2024-06-29 09:02:54 -04:00
Bjørn Forsman
7db3dc0fa4 nixos/dictd: treat SIGTERM exit status as success
dictd doesn't handle SIGTERM and terminates with code 143 (128 + 15
(SIGTERM) instead of 0. This results in systemd marking the service as
failed when a user stops it (with `systemctl stop dictd`). Fix it by
treating code 143 as success.
2024-06-29 13:40:49 +02:00
Thomas Gerbet
85be596266
Merge pull request #322585 from wegank/limesurvey-security
nixos/limesurvey: drop default encryption key and nonce
2024-06-28 23:43:24 +02:00
Sandro
0cbf178ddb
Merge pull request #322508 from MarcelCoding/hound
hound: convert to use freeform type
2024-06-28 22:57:59 +02:00
Matthew Croughan
d76ad79b4d
nixos/scion: use RuntimeDirectory instead of StateDirectory (#323200)
It was wrong to use StateDirectory to keep the scion-control and
scion-router runtime databases on disk for the next run. I observed that
doing this means a reboot, or power outage can corrupt the temporary
runtime databases for the next service start, leading scion ping and
other functionality to stop working permanently, since those files are
not managed in an atomic manner by the golang code.
2024-06-28 22:16:36 +02:00
Masum Reza
383744754e
Merge pull request #314798 from yomaq/healthchecks-settingsFile
nixos/healthchecks: add settingsFile option
2024-06-29 00:02:35 +05:30
Masum Reza
8808f7d7fc
Merge pull request #278982 from felbinger/master
python311Packages.mozilla-django-oidc: init at 4.0.1; peering-manager: add oidc support
2024-06-28 23:49:34 +05:30
Bobby Rong
3901dc7822
Merge pull request #323159 from bobby285271/upd/xfce-colord
nixos/xfce: Enable colord by default
2024-06-28 23:00:08 +08:00
Bobby Rong
6c6614ada8
nixos/xfce: Enable colord by default
Goes with #323010.
2024-06-28 21:42:06 +08:00
Moraxyc
f852b38c42
nixos/nezha-agent: add gpu monitoring option 2024-06-28 16:18:40 +08:00
Weijia Wang
daa81ecb2e nixos/limesurvey: drop default encryption key and nonce
Co-authored-by: Thomas Gerbet <thomas@gerbet.me>
2024-06-28 00:34:00 +02:00
Sandro Jäckel
ccd042b969
nixos/hound: set reasonable default for dbpath 2024-06-27 21:59:15 +02:00
Marcel
d7977717ac
nixos/hound: remove with lib; 2024-06-27 21:59:07 +02:00
Marcel
e6979857a3
nixos/hound: convert config to free-form type, add config check 2024-06-27 21:56:18 +02:00
Marcel
73e7708bee
nixos/hound: cleanup services.hound.enable 2024-06-27 21:56:18 +02:00
Silvan Mosberger
c8dec6df38
Merge pull request #322801 from eclairevoyant/discourage-mkpackageoptionmd
lib: deprecate mkPackageOptionMD
2024-06-27 20:15:08 +02:00
Yaya
b4d242907c nixos/gitlab: Add missing state folder 2024-06-27 19:52:03 +02:00
Yaya
59583de9d1 nixos/gitlab: Assert PostgreSQL >= 14.9
Support for PostgreSQL 13 has been removed in GitLab 17.0. [1]
Module users should upgrade their database installation to
PostgreSQL >= 14.9.

[1]: https://docs.gitlab.com/ee/update/deprecations.html#postgresql-13-no-longer-supported
2024-06-27 19:52:03 +02:00
Niklas Hambüchen
1032399f52
Merge pull request #322782 from DCsunset/quickwit-fix
nixos/quickwit: fix service ReadWritePaths
2024-06-27 14:39:11 +02:00
Jonas Heinrich
77e7768849
Merge pull request #322397 from Ma27/bump-nextcloud
nextcloud: drop 27, 28.0.6 -> 28.0.7, 29.0.2 -> 29.0.3
2024-06-27 14:09:29 +02:00
Sandro
f6fb5b4f20
Merge pull request #322216 from Pandapip1/patch-3
services/localtimed: Allow configuring packages
2024-06-27 12:58:20 +02:00
matthewcroughan
23c24527dc nixos/scion: add scion package when scion.enable = true 2024-06-27 11:52:04 +02:00
matthewcroughan
973108d3ed nixos/scion: use recursiveUpdate instead of // 2024-06-27 11:51:28 +02:00
éclairevoyant
aeee4fc133
treewide: replace mkPackageOptionMD with mkPackageOption 2024-06-26 23:05:42 -04:00
DCsunset
05b67b87b7 nixos/quickwit: fix service ReadWritePaths 2024-06-26 20:47:00 -04:00
Pol Dellaiera
908c90cd18
Merge pull request #313606 from drupol/ollama-add-preLoadedModels
nixos/ollama: add `loadModels` config option
2024-06-26 22:56:56 +02:00
Benno Bielmeier
f99e50320e nixos/wordpress: update .htaccess for httpd
Update standard wordpress .htaccess content if using httpd
according to [1] (as of 2024-06-26)

[1]: https://developer.wordpress.org/advanced-administration/server/web-server/httpd/
2024-06-26 22:23:29 +02:00
Alexandre Acebedo
14422223df
playerctl: add daemon service 2024-06-26 21:33:46 +02:00
Pol Dellaiera
f6727a9e3e nixos/ollama: add loadModels config option
Allows users to download model files upon service startup,
instead of at the first use of the model, improving percieved startup latency.
2024-06-26 15:11:37 -04:00
Masum Reza
44f79e5bf0
Merge pull request #321591 from JohnRTitor/gdm-fingerprint-auth
nixos/gdm: allow logging in via fingerprint
2024-06-26 23:08:16 +05:30