Commit Graph

41997 Commits

Author SHA1 Message Date
Sandro
ff3896167e
Merge pull request #319743 from azuwis/moonlight-qt
moonlight-qt: 5.0.1 -> 6.0.1, and other enhancements
2024-07-04 21:53:02 +02:00
Franz Pletz
aa8c9e6f2d
Merge pull request #317642 from melvyn2/systemd-networkd-network-options 2024-07-04 20:21:37 +02:00
Aleksana
1c1df68b1e
Merge pull request #323020 from bjornfor/nixos-dictd-exit-status
nixos/dictd: treat SIGTERM exit status as success
2024-07-05 02:01:21 +08:00
Martin Weinelt
e0d9110aee
Merge pull request #324600 from erictapen/mastodon
nixos/mastodon: use recurseIntoAttrs for better test ergonomics
2024-07-04 19:47:11 +02:00
Nicholas Sielicki
56ceae07be
nixos/jellyseerr: add package option (#276616)
Co-authored-by: seth <getchoo@tuta.io>
Co-authored-by: Franz Pletz <fpletz@fnordicwalking.de>
2024-07-04 18:56:38 +02:00
Franz Pletz
a1ecdd6b1a
Merge pull request #276135 from nbdd0121/netdev 2024-07-04 18:35:15 +02:00
Franz Pletz
440ea06e3b
Merge pull request #276507 from clefru/no-hwclock 2024-07-04 18:32:39 +02:00
Masum Reza
9ec0508f83
Merge pull request #171855 from ju1m/prosody
nixos/prosody: support mod_http_file_share
2024-07-04 21:59:29 +05:30
Michael Weiss
10cbea2905
nixos/monetdb, nixos/sks: remove primeos from maintainers (#277366)
Remove myself as maintainer from modules that I don't use anymore
2024-07-04 18:17:43 +02:00
Franz Pletz
d73e618905
Merge pull request #324450 from phfroidmont/patroni-module-remove-raft 2024-07-04 18:16:08 +02:00
Kerstin Humm
d9cec95613
nixos/mastodon: use recurseIntoAttrs for better test ergonomics 2024-07-04 18:07:44 +02:00
❄️
a5dad94280
Merge pull request #324083 from Djabx/fix-config-snapper
nixos/snapper: fix timeline options type
2024-07-04 12:50:01 -03:00
Aleksana
7cf6d9246e
Merge pull request #324565 from Pandapip1/patch-3
nixos/httpd: Use mkEnableOption
2024-07-04 23:45:44 +08:00
David McFarland
b44b62db30
Merge pull request #291640 from tie/sonarr-v4
sonarr: build from source
2024-07-04 12:08:02 -03:00
Gavin John
dffd5b699d
nixos/httpd: Use mkEnableOption 2024-07-04 13:44:24 +00:00
Sandro
31a8448c93
Merge pull request #279917 from h7x4/nixos-module-update-add-samba-slice 2024-07-04 11:48:27 +02:00
Paul-Henri Froidmont
bca32a4163
nixos/patroni: remove raft 2024-07-04 10:22:19 +02:00
Masum Reza
24ced04659
Merge pull request #324347 from jtojnar/gdm-fingerprint-fix
nixos/gdm: Fix fingerprint auth rules
2024-07-04 10:54:46 +05:30
Aleksana
d5a4f459ea
Merge pull request #304362 from Stunkymonkey/ec2-data-chmod-install
ec2-data: prefer 'install/umask' over 'chmod'
2024-07-04 12:51:53 +08:00
Aaron Andersen
1af787b0e7
Merge pull request #324320 from tomaskala/add-package-option-to-blocky
nixos/blocky: Add an option for the package to be used
2024-07-04 00:25:12 -04:00
Jan Tojnar
af0cdb44a0 nixos/gdm: Fix fingerprint auth rules
We introduced the gdm-fingerprint.pam in 9d41fe6fcc.

We used the [upstream Arch config] as a template, which contains an extended control field that jumps over **one** immediately-following `auth` rule unless `pam_gdm.so` succeeds.

But we decided to not include `pam_gnome_keyring.so` so there was no rule to skip over, resulting in a broken control flow and the PAM module failing with “PAM bad jump in stack”, breaking the fingerprint authentication in GDM.

Let’s actually add `pam_gnome_keyring.so`, like the Arch config does. Because we are creating the PAM file using the `text` option, `security.pam.services.gdm-fingerprint.enableGnomeKeyring` does not do anything so we need to do it manually.

For the case where gnome-keyring is not enabled, we could add a no-op rule like `optional pam_permit.so` after `pam_gdm.so` so that the branching always has something to jump over but it will be simpler to just make the both conditional. There are no further `auth` rules that could benefit from `pam_gdm.so` doing something so it should be fine.

Unlike in Arch, we are not going to invoke `pam_gnome_keyring.so` in a `session` rule since that is already done by the included `login` module.

[upstream Arch config]: 81ee658c11/data/pam-arch/gdm-fingerprint.pam
2024-07-03 23:36:52 +02:00
Jan Tojnar
1cf4155498 nixos/gdm: Clean up gdm-fingerprint pam module
The `optional pam_permit.so` comes from the [upstream Arch config] we used as a template in 9d41fe6fcc. But I do not think it does anything in this position – see also the discussion at https://bbs.archlinux.org/viewtopic.php?id=245892 – so let’s just remove it.

Let’s also add a comment about disabling `fprintAuth` and a blank line for clarity.

[upstream Arch config]: 81ee658c11/data/pam-arch/gdm-fingerprint.pam
2024-07-03 23:32:43 +02:00
Felix Buehler
6fd0acb81b ec2-data: prefer 'install/umask' over 'chmod' 2024-07-03 23:18:43 +02:00
Someone
7cdac9fd12
Merge pull request #306730 from ShamrockLee/apptainer-default-path
apptainer, singularity: precede system-level bin paths in `defaultPath` and fix `singularity` image running
2024-07-03 19:56:08 +00:00
Jan Tojnar
68211b3546 Revert "nixos/gnome-keyring: unlock keyring with gdm-password, gdm-autologin"
`gdm-autologin` and `gdm-password` PAM modules are defined using the `text` option, so the option here is a no-op.

Furthermore, `gdm-password` already includes `login` for all module types,
and that invokes `pam_gnome_keyring.so` in the same way Arch’s `gdm-password` module would:
81ee658c11/data/pam-arch/gdm-password.pam

This reverts commit c24c7933ba.
2024-07-03 21:32:34 +02:00
Jan Tojnar
0e83d67373 Revert "nixos/gnome-keyring: enable gnome-keyring for fingerprint authentication'"
`gdm-fingerprint` PAM module is defined using the `text` option, so the option here is a no-op.

This reverts commit 6bb516d45f.
2024-07-03 21:25:17 +02:00
Aleksana
3a96597d4f
Merge pull request #317457 from rawkode/fix/espanso-opts
nixos/espanso: fix wayland option
2024-07-03 23:20:03 +08:00
David Flanagan
f13e08ac0e
nixos/espanso: fix wayland option
Co-authored-by: Aleksana <alexander.huang.y@gmail.com>
2024-07-03 16:17:52 +01:00
OTABI Tomoya
3ca8ba2a73
Merge pull request #324114 from NyCodeGHG/renovate-unix-socket
nixos/renovate: allow AF_UNIX access
2024-07-03 22:40:17 +09:00
Sandro
d47039cd5d
Merge pull request #322597 from tomodachi94/drop/vscode-css-json-html-languageserver-bin 2024-07-03 15:28:49 +02:00
Florian Klink
6413876162
Merge pull request #323728 from michaelfranzl/add-regression-test-libvirt-nss
Regression test for libvirt NSS modules
2024-07-03 14:58:21 +03:00
Alexandre Badez
e37b07ffba nixos/snapper: fix timeline options type 2024-07-03 13:52:34 +02:00
Alexandre Badez
0c80191081 nixos/snapper: add maintainer 2024-07-03 13:52:34 +02:00
Tomas Kala
6930dd3dee nixos/blocky: Add an option for the package to be used
Previously, the blocky package was hardcoded to the one in pkgs. This
change allows to set it, so the user can configure the blocky service to
run blocky from nixpkgs-unstable, for example.
2024-07-03 13:42:34 +02:00
Jonas Chevalier
f2506eaef6
Merge pull request #324102 from johannwagner/fix/cloud-init-fixes
nixos/cloud-init: Bug fix and enhancements
2024-07-03 13:25:09 +02:00
Martin Weinelt
84164bf098
Merge pull request #318659 from mweinelt/fastly-exporter
nixos/prometheus-fastly-exporter: unwrap execstart
2024-07-03 12:40:10 +02:00
Sandro
4878cc74a4
Merge pull request #318818 from flyingcircusio/acme-accounts-compatibility-hash 2024-07-03 10:43:12 +02:00
matthewcroughan
99f4beaaec nixos/scion: improve robustness testing
Adds random process kills, crashes and reboots etc to the testing of the SCION module
2024-07-03 09:08:58 +02:00
Aleksana
2240a1aa31
Merge pull request #324163 from SuperSandro2000/271914
nixos/kmscon: fix eval
2024-07-03 12:38:01 +08:00
Weijia Wang
9c1cfad9a0
Merge pull request #307910 from r-ryantm/auto-update/pixelfed
pixelfed: 0.11.13 -> 0.12.1
2024-07-03 00:55:55 +02:00
Sandro Jäckel
6868a97e5e
nixos/kmscon: fix eval 2024-07-03 00:01:12 +02:00
Ryan Lahfa
d387fafe2f
Merge pull request #324101 from hexchen/drop-hexchen
maintainers: remove myself
2024-07-02 23:38:02 +02:00
Thomas Gerbet
8ddb1bb721
Merge pull request #318599 from pacien/nixos-fcgiwrap-isolation
nixos/fcgiwrap: refactor to fix permissions
2024-07-02 21:52:33 +02:00
Sandro
15705830ce
Merge pull request #321061 from SomeoneSerge/prosody-logs
nixos/prosody: provide an (internal) escape hatch for overriding the …
2024-07-02 20:36:07 +02:00
Sandro
230c213fae
Merge pull request #314767 from Guanran928/mihomo
nixos/mihomo: add assertion for configFile
2024-07-02 20:27:36 +02:00
Sandro
bd4241bcc8
Merge pull request #297826 from anthonyroussel/update-tomcat_connectors
apacheHttpdPackages.mod_jk: 1.2.48 -> 1.2.49, rename from tomcat_connectors
2024-07-02 20:26:13 +02:00
Sandro
4f90cfd2f9
Merge pull request #313984 from yayayayaka/gitlab-17.0.1
gitlab: 16.11.5 -> 17.1.1
2024-07-02 20:12:42 +02:00
Marie Ramlow
787354f63c nixos/renovate: allow AF_UNIX access
renovate can update nix dependencies, which results in nix trying to communicate with the nix-daemon over a unix socket.
2024-07-02 20:09:12 +02:00
K900
caff135cb1
Merge pull request #323419 from Ma27/bump-grafana
grafana: 11.0.0 -> 11.1.0
2024-07-02 20:59:21 +03:00
Felix Bühler
4b015946c9
Merge pull request #307459 from Stunkymonkey/freshrss-extensions
freshrss-extensions: init
2024-07-02 19:43:22 +02:00