Nick Cao
b05dfbcc3e
[Backport release-24.11] nixos/postgresql: fix warning typo ( #356695 )
2024-11-17 09:01:01 -05:00
Masum Reza
37debf5e7d
[Backport release-24.11] nixos/hyprland: adds programs.hyprland.withUWSM option ( #356542 )
2024-11-17 17:37:31 +05:30
Wolfgang Walther
a2b914e6e3
nixos: remove boot.loader.raspberryPi
...
This has been announced for 24.11 in #241534 , so let's follow through.
(cherry picked from commit 8ca24a7a2b
2024-11-17 11:50:01 +00:00
Maximilian Bosch
de06be4658
Merge: [Backport release-24.11] nixos/postgresql: extension based hardening relaxation ( #356574 )
2024-11-17 12:39:37 +01:00
Ian Kerins
25cd23219c
nixos/postgresql: fix warning typo
...
(cherry picked from commit 307090125f
2024-11-17 11:25:02 +00:00
Maximilian Bosch
0bd7e8585f
nixos/tests/postgresql: test plv8 hardening on non-JIT variants only
...
PostgreSQL with JIT support enabled doesn't work with plv8. Hence, we'd
get an evaluation failure for each
`nixosTests.postgresql.postgresql.postgresql_jit_X`.
This should be restructured in the future (less VM tests for custom
extensions, but a single VM test for this case to cover). For now, we
should get this fix out and this is a good-enough approach.
(cherry picked from commit 68d9643388
2024-11-16 21:30:02 +00:00
Martin Weinelt
830116313f
nixosTests.postgresql: test hardening gets relaxed
...
The plv8 plugin requires access to pkey syscalls. The execution will
crash hard when it is not allowed by the syscall filter.
Co-Authored-By: Jan Tojnar <jtojnar@gmail.com>
(cherry picked from commit e198536d26
2024-11-16 21:30:02 +00:00
Martin Weinelt
210f9b1546
nixos/postgresql: create infrastructure for relaxing systemd hardening
...
By matching on the package names of the plugins passed into the package
we can relax the systemd unit hardening as needed.
(cherry picked from commit d370af0785
2024-11-16 21:30:02 +00:00
Martin Weinelt
7d07116532
nixos/postgresql: rename extraPlugins to extensions
...
This is the upstream lingo, and it makes everything slightly less
confusing.
(cherry picked from commit 223a6c6ed0
2024-11-16 21:30:02 +00:00
Maximilian Bosch
4e88b60fe7
nixos/rl-2411: fix version Grafana has been updated to
...
(cherry picked from commit 3bad58ed01
2024-11-16 20:26:41 +00:00
jopejoe1
001f7f088e
[Backport release-24.11] nixos/shairport-sync: add package option ( #356417 )
2024-11-16 20:16:53 +01:00
John Titor
eb5f38ea46
nixos/hyprland: adds programs.hyprland.withUWSM option
...
Bool: controls whether Hyprland is configured with UWSM or not.
Upstream recommends using UWSM for better compatibility with systemd integration.
https://wiki.hyprland.org/Useful-Utilities/Systemd-start/
(cherry picked from commit 04f223946c
2024-11-16 19:12:15 +00:00
John Titor
fa4cacd136
nixos/hyprland: format with nixfmt rfc style
...
(cherry picked from commit 48da44a481
2024-11-16 19:12:15 +00:00
Colin
fdf985b33a
[Backport release-24.11] nixos/teleport: add required utils to path ( #356200 )
2024-11-16 17:55:57 +00:00
Gaétan Lepage
fefa64906a
[Backport release-24.11] nixos/g810-led: init ( #356226 )
2024-11-16 17:17:29 +01:00
Jordan Williams
ad01009efb
nixos/shairport-sync: add package option
...
(cherry picked from commit 697fa78c9a
2024-11-16 09:28:18 +00:00
Maximilian Bosch
04e2ecac22
Merge: [Backport release-24.11] postgresql_12: remove ( #356146 )
2024-11-15 23:55:39 +01:00
John Titor
7f9fac3e4a
nixos/release-notes-24.11: add g810-led
...
(cherry picked from commit 0388195e8a
2024-11-15 22:59:22 +05:30
John Titor
513ea90392
nixos/g810-led: add to modules-list.nix
...
(cherry picked from commit 059a8da6b1
2024-11-15 22:59:22 +05:30
Gaetan Lepage
2775c851ea
nixos/g810-led: init
...
(cherry picked from commit a5f34daeeb
2024-11-15 17:08:28 +00:00
Justinas Stankevicius
487678fa97
nixos/teleport: add required utils to path
...
(cherry picked from commit 3fa182e7ec
2024-11-15 15:38:03 +00:00
Maximilian Bosch
022c3e8ad0
postgresql_12: remove
...
This will be EOL at the end of November, so there's little reason to
keep it in 24.11[1]. As discussed, we'd like to keep it for as long as
possible to make sure there's a state in nixpkgs that has the latest
minor of postgresql_12 available with the most recent CVEs fixed for
people who cannot upgrade[2].
This aspect has been made explicit in the manual now for the next .11
release.
During the discussions it has been brought up that if people just do
`services.postgresql.enable = true;` and let the code decide the
postgresql version based on `system.stateVersion`, there's a chance that
such EOL dates will be missed. To make this harder, a warning will now
be raised when using the stateVersion-condition and the oldest still
available major is selected.
Additionally regrouped the postgresql things in the release notes to
make sure these are all shown consecutively. Otherwise it's a little
hard to keep track of all the changes made to postgresql in 24.11.
[1] https://endoflife.date/postgresql
[2] https://github.com/NixOS/nixpkgs/pull/353158#issuecomment-2453056692
(cherry picked from commit 0b3eef7441
2024-11-15 11:07:42 +00:00
John Titor
47d66ff8f9
nixos/release-notes-24.11: add soteria module
...
(cherry picked from commit 3259761b00
2024-11-15 08:58:37 +00:00
John Titor
a9e48492ae
nixos/soteria: init module
...
(cherry picked from commit 53712fa4a1
2024-11-15 08:58:37 +00:00
TheRealGramdalf
86e3b483c6
nixos/dashy: import nixosModule
...
(cherry picked from commit ee070b132a
2024-11-15 05:44:19 +00:00
Tristan Ross
8b27c1239e
24.11 beta release
2024-11-14 08:57:15 -08:00
Sefa Eyeoglu
1d95cb5fa7
nixos/duckdns: init module ( #294489 )
2024-11-14 17:29:11 +01:00
Weijia Wang
9c631cfd4a
nixos/nixosTests.kerberos: add test suite for LDAP backend ( #337719 )
2024-11-14 17:26:05 +01:00
Sefa Eyeoglu
b22d375301
cargo-tauri: 1.7.1-unstable-2024-08-16 -> 2.1.0 ( #346277 )
2024-11-14 17:12:42 +01:00
Marcus Ramberg
703675fc50
pay-respects: init at 0.4.18; nixos/pay-respects: init module ( #355694 )
2024-11-14 08:37:28 +01:00
seth
36118d8a35
doc/release-notes: document cargo-tauri v2
2024-11-14 02:27:57 -05:00
Pol Dellaiera
cf69fc271d
nixos/glances: init ( #303320 )
2024-11-14 05:47:04 +01:00
Yorick
97dfe7efe4
maintainers: Remove mkaito ( #355650 )
2024-11-13 19:57:30 +01:00
Fernando Rodrigues
a1af0bc137
nixos/pay-respects: init module
...
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-11-13 16:15:10 +00:00
Sandro
a9db65e0dd
nixos/firefox: dedupe identically nativeMessageHosts packages ( #335253 )
2024-11-13 17:04:55 +01:00
Maximilian Bosch
0524f3b302
Merge: nixosTests.postgresql: run tests with JIT as well ( #355502 )
2024-11-13 16:13:01 +01:00
Nessdoor
005ec27097
nixos/nixosTests.kerberos: add test suite for LDAP backend
2024-11-13 14:42:06 +01:00
Christian Höppner
8feba149a0
mkaito: Remove
2024-11-13 12:03:00 +00:00
Pol Dellaiera
e92d5eb308
nixos/protonmail-bridge: fix typo ( #355520 )
2024-11-13 07:56:04 +01:00
Claes Hallström
d174bf438b
nixos/glances: init module
2024-11-13 00:06:47 +01:00
ginkogruen
aa79218b2c
nixos/protonmail-bridge: fix typo
...
protonmail-bride's --> protonmail-bridge's
2024-11-12 21:55:34 +01:00
Wolfgang Walther
9486472352
nixosTests.postgresql: run tests with JIT as well
...
This was intended for quite some time already, but ever since enableJIT
was changed to be the source of truth of JIT-iness for the PostgreSQL
module, this hasn't worked for the tests anymore.
2024-11-12 21:04:41 +01:00
Maximilian Bosch
dbd8326b7f
Merge: wordpress: drop unmaintained release ( #355291 )
2024-11-12 19:20:25 +01:00
Sandro
681bc920f8
nixos/libvirt: fix shellcheck findings with enableStrictShellChecks enabled ( #349620 )
2024-11-12 19:18:26 +01:00
Sandro
1556ad266a
nixos/changedetection-io: fix creation of data dir ( #318666 )
2024-11-12 19:10:53 +01:00
Sandro
6bfde7268f
evremap: init at 0-unstable-2024-06-17, nixos/evremap: init module ( #352720 )
2024-11-12 18:41:51 +01:00
Sandro Jäckel
18135de79a
nixos/firefox: dedupe identically nativeMessageHosts packages
2024-11-12 18:00:50 +01:00
Sandro
c9428444e2
nixos/fail2ban: fix typo ( #355328 )
2024-11-12 16:12:18 +01:00
Florian Klink
cb88cda0d4
nixos/systemd-stage-1: Do not run code from stage 2 until it's actually time to switch-root. ( #355166 )
2024-11-12 12:04:54 +01:00
Valentin Gagarin
50ff833cd8
devmode: move to pkgs/by-name
...
now one can use `devmode` from anywhere Nixpkgs is available:
devmode = pkgs.devmode.override {
buildArgs = toString ./.;
open = "/index.html";
};
2024-11-12 10:16:58 +01:00
