Alex Brandt
fdebbce726
nixos/modules/services/scheduling/fcron: add setuid to fcrontab
...
Without fcrontab being setuid, every attempt by an user in the fcron
group to edit their own crontab (via `fcrontab -e`) results in the
following error:
```
2018-05-06 11:29:07 ERROR could not change euid to 273: Operation not permitted
2018-05-06 11:29:07 ERROR fcron child aborted: this does not affect the main fcron daemon, but this may prevent a job from being run or an email from being sent.
```
Adding setuid by hand has resolved this issue and aligns with the way
fcrontab is installed on other distributions.
2018-05-06 11:24:09 -07:00
Joachim F
e97d8fc0cb
Merge pull request #39455 from Ekleog/matterbridge-configfile
...
matterbridge module: add configPath option as a workaround, waiting for nix encryption
2018-05-06 17:29:43 +00:00
Tristan Helmich
560e91f1a7
nixos/matrix-synapse service: url_preview_url_blacklist fix ( #40027 )
...
Moved list of ip ranges to url_preview_ip_range_blacklist defaults.
Fixes #40017
2018-05-06 09:49:04 +00:00
xeji
cd960b965f
Merge pull request #38622 from obadz/minidlna-module
...
nixos/minidlna: add loglevel config
2018-05-06 00:13:39 +02:00
xeji
76c8e5ea3b
Merge pull request #39055 from abbradar/reload-stop
...
firewall service: run stop commands in reload
2018-05-05 22:13:15 +02:00
Jaka Hudoklin
3ec4528dcf
Merge pull request #39991 from xeji/remove-fleet
...
fleet, panamax: remove
2018-05-05 08:07:14 +02:00
gnidorah
9f1da66587
ndppd module: init ( #35533 )
2018-05-05 00:33:20 -05:00
bricewge
21b926003d
sshguard: service creates /var/lib/sshguard
2018-05-05 00:29:44 -05:00
Uli Baum
c3eefe801a
fleet: remove package, module, test
...
deprecated and unmaintained upstream
2018-05-05 00:28:16 +02:00
Uli Baum
f039bf9abc
panamax: remove packages, module and test
...
was broken and depends on (deprecated) fleet
packages: panamax_api, panamax_ui
2018-05-05 00:27:15 +02:00
Pascal Bach
7f53ee8412
restic-rest-server module: init
2018-05-04 16:55:06 +02:00
WilliButz
27eb2859f2
prometheus-nginx-exporter: fix bool to string coercion
2018-05-02 16:18:20 +02:00
Robin Gloster
fe9096ef09
Merge branch 'master' into docker-registry-enhancements
2018-05-02 13:12:57 +02:00
Samuel Leathers
78f09c9102
nixos/prometheus-surfboard-exporter: add new module
2018-05-02 13:04:34 +02:00
Austin Seipp
5a24d99fa6
foundationdb: split into multiple, major-versioned packages to make upgrades user-controllable
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-05-01 15:47:36 -05:00
Austin Seipp
55eec81118
nixos: add TLS support to FoundationDB module, and tweak setup a bit
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-05-01 15:47:36 -05:00
Austin Seipp
ed5cbbbc44
foundationdb: install the java client library
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-05-01 15:47:36 -05:00
WilliButz
cb4c2834ef
nixos/prometheus-varnish-exporter: update module
2018-05-01 18:00:53 +02:00
Matthew Justin Bauer
4e58e23262
Merge pull request #39478 from pngwjpgh/infinoted
...
nixos/infinoted: Abstract over libinfinity version
2018-05-01 10:22:25 -05:00
Michael Weiss
1b8642dff6
nixos/monetdb: init ( #39812 )
2018-05-01 16:44:12 +02:00
WilliButz
de60146f59
nixos/promtheus-nginx-exporter: update module
2018-05-01 15:45:48 +02:00
Michele Catalano
afd3136e8e
nixos/docker-registry: Add support for garbage collector to docker registry
2018-05-01 15:23:47 +02:00
Maximilian Bosch
593dc45141
nixos/docker-registry: cleanup module definition & enhance testcase
...
The following changes have been applied:
- the property `http.headers.X-Content-Type-Options` must a list of
strings rather than a serialized list
- instead of `/etc/docker/registry/config.yml` the configuration will be
written with `pkgs.writeText` and the store path will be used to run
the registry. This reduces the risk of possible impurities by relying
on the Nix store only.
- cleaned up the property paths to easy readability and reduce the
verbosity.
- enhanced the testcase to ensure that digests can be deleted as well
- the `services.docker-registry.extraConfig` object will be merged with
`registryConfig`
/cc @ironpinguin
2018-05-01 15:23:39 +02:00
Michele Catalano
f5c0b3f887
nixos/docker-registry: add more configuration options for docker-registry
2018-05-01 14:53:50 +02:00
Graham Christensen
5d03cce7ed
Merge pull request #38351 from grahamc/user-channels
...
Add user channels to the default nix path
2018-05-01 07:19:38 -04:00
Graham Christensen
8ab8d9cb74
Add user channels to the default nix path
2018-05-01 06:30:31 -04:00
Julien Langlois
519b64592d
hitch: init at 1.4.8 + service + test ( #39358 )
...
Add the Hitch TLS reverse proxy as an option for TLS termination.
2018-05-01 10:36:36 +01:00
Graham Christensen
d1165dba99
Merge pull request #38831 from rdnetto/improve-cross-refs
...
Improve cross referencing in NixOS Manual
2018-04-30 21:30:20 -04:00
Milo
b405a6537c
nixos/bspwm: spawn bpswm process in the background and properly set waiPID ( #39707 )
2018-04-30 17:03:05 +00:00
Peter Hoeg
3c63bda681
Merge pull request #39137 from peterhoeg/m/lcd
...
nixos lcdproc: module for lcdd/lcdproc
2018-04-28 22:57:59 +00:00
Jörg Thalheim
f9fe798f95
Merge pull request #39612 from bgamari/cupsd-loglevel
...
cupsd: Introduce services.printing.logLevel option
2018-04-28 12:50:48 +01:00
Badi Abdul-Wahid
df3566c956
unifi, nixos/unifi: support LTS (5.6.36) and release (5.7.20)
...
Ubiquiti has both a LTS and current version of their Unifi controller software.
The latter adds new features, but may drop support for some devices.
This adds the capability to use either for the unifi module but defaults
to the LTS version, which was the previous behavior.
2018-04-28 00:27:33 +02:00
Jörg Thalheim
468f3ce0ed
nixos/xserver: remove nvidiaLegacy173 from videoDrivers.examples
...
see 92265e807e (commitcomment-28773179)
2018-04-27 23:02:09 +01:00
Yegor Timoshenko
6e33df0f6f
Merge pull request #39008 from serokell/youtrack
...
Youtrack package and service
2018-04-27 22:16:57 +03:00
Yegor Timoshenko
e71c36369f
Merge pull request #39002 from serokell/oauth2_proxy_mod
...
oauth2_proxy: refactor service
2018-04-27 22:15:50 +03:00
Jan Malakhovski
92265e807e
nixos: xserver: add related packages
2018-04-27 18:10:04 +01:00
Jan Malakhovski
5ec94de03c
nixos: alsa: better docstring
2018-04-27 18:07:19 +01:00
Ben Gamari
192352ff2f
nixos/cupsd: Introduce services.printing.logLevel option
...
Previously we indirectly suggested that the user use
services.printing.extraConf to set this, but this doesn't work with the
default merge ordering. Fix this by making it an independent option.
Fixes #39611 .
2018-04-27 16:41:49 +00:00
Yorick van Pelt
000482ffc4
youtrack: add service
2018-04-27 17:33:41 +02:00
Yorick van Pelt
048c991eb0
oauth2_proxy: use explicit upstream default for setXauthrequest
2018-04-27 16:45:38 +02:00
Rodney Lorrimar
3e446ecd56
nixos/buildkite-agent: fix variable expansion in hook scripts
...
@cleverca found this bug in the declarative hooks config. Any shell
variables referenced in a hook script would get expanded by the hooks
directory builder.
Prevent variable expansion by quoting the here doc limit string.
2018-04-27 12:17:40 +01:00
Franz Pletz
dc62e8509a
nixos/caddy: fix ca api endpoint, now uses v2
2018-04-27 01:11:54 +02:00
Nikolay Amiantov
b827307c52
dante service: default for logoutput
...
Log to journald via syslog by default; also improve option type.
2018-04-26 13:57:11 +03:00
Nikolay Amiantov
bd140fb41d
dante service: restart only on failure
...
Normal exit code shouldn't result in a restart.
2018-04-26 13:57:11 +03:00
Gregor Kleen
274579cc95
nixos/infinoted: Abstract over libinfinity version
2018-04-26 08:35:00 +02:00
Robin Gloster
783fb86de4
gitlab module: update to gitlab 10.7
2018-04-26 00:15:24 +02:00
Matthew Justin Bauer
e4d2d32a32
Merge pull request #33679 from flokli/deluge-module
...
Deluge: use mkEnableOption, add test
2018-04-25 14:54:34 -05:00
Matthew Justin Bauer
a4a2626cd9
Merge pull request #35280 from markus1189/logkeys
...
Logkeys: Update and add `device` option to service
2018-04-25 14:48:29 -05:00
Peter Hoeg
077811ebe3
nixos lcdproc: module for lcdd/lcdproc
2018-04-25 22:16:07 +08:00
Ben Wolsieffer
4d40adb86d
nginx: allow basic auth passwords to be specified in a file
2018-04-25 15:37:09 +02:00