Commit Graph

42181 Commits

Author SHA1 Message Date
Benedikt Ritter
57ea5be929
onlyoffice: Remove top-level with lib;
Prepend affected components with `lib.` instead.
2024-07-10 10:42:29 +02:00
Benedikt Ritter
d61489db1a
onlyoffice: Fix typos 2024-07-10 09:14:21 +02:00
Tom Butler
e7e8ad1e35
nixos: Set home directory parent tree permissions to 0755
When the user's home directory is created using `createHome` e.g.

```
users.users.alice = {
    home = "/users/alice";
    createHome = true;
};
```

The `/users` directory was created with the same permissions as `/users/alice`, `0700` by default.

The parent directory `/users` permissions results in `createHome` creating a home directory that is inaccessible to the user:

```
$ su alice
$ cd /user/alice
cd: permission denied: /users/alice
```

The underlying cause is `make_path($u->{home}, { mode => oct($u->{homeMode}) })` which sets, in the example above`, `/users` to `0700`. Instead it should be `0755` like other system directories `/var`, `/dev`, etc.
2024-07-09 23:09:09 +02:00
Franz Pletz
c7ee75329f
Merge pull request #325247 from OPNA2608/fix/lomiri/revert-glib-workarounds
lomiri.*: Revert GLib workarounds
2024-07-09 17:51:49 +02:00
Franz Pletz
f1d54d49b9
Merge pull request #325459 from numinit/nebula-module-tweaks
nixos/nebula: support non-path host keys
2024-07-09 16:59:35 +02:00
Franz Pletz
b9db8b7c16
Merge pull request #325589 from wskeele/duplicity-include-filelist
nixos/duplicity: Add support for --include-filelist / --exclude-filelist
2024-07-09 16:45:35 +02:00
Franz Pletz
a88ac08475
Merge pull request #325377 from hughobrien/hetzner-virtio_gpu
profiles/qemu_guest: add virtio_gpu to initrd
2024-07-09 15:47:21 +02:00
Franz Pletz
31c99a61da
Merge pull request #325286 from bjornfor/nixos-deconz-fix-service-stop
nixos/deconz: treat SIGTERM exit status as success
2024-07-09 15:07:36 +02:00
Emily Trau
5fbd57aebc
Merge pull request #325738 from Enzime/drop/Enzime
maintainers: remove Enzime
2024-07-09 16:00:59 +10:00
Pol Dellaiera
db41081a91
Merge pull request #323743 from NixOS/nixos/module/glance-init
nixos/glance: init module
2024-07-09 06:42:22 +02:00
Michael Hoang
eb725313bc treewide: remove Enzime 2024-07-09 14:32:33 +10:00
Martin Weinelt
5a82f82cc5
Merge pull request #325594 from mweinelt/firefox-128.0
Firefox: 127.0.2 -> 128.0; 115.12.0esr -> 115.13.0esr; init 128.0esr
2024-07-09 01:38:57 +02:00
Will Fancher
21aed90c1e
Merge pull request #325348 from JulienMalka/remove-uefi-large-file-test
nixos/tests/systemd-boot: remove uefiLargeFileWorkaround test
2024-07-08 18:49:47 -04:00
Pol Dellaiera
ed24a0baf3
Merge pull request #317107 from ibizaman/deluge_exporter_init
prometheus-deluge-exporter: init at 2.4.0-unstable-2024-06-02
2024-07-08 20:09:50 +02:00
Martin Weinelt
6d85f70d35
firefox-esr-128-unwrapped: init at 128.0esr 2024-07-08 19:41:05 +02:00
Sandro
e08b520450
Merge pull request #323469 from OPNA2608/init/lomiri/lomiri-clock-app 2024-07-08 17:47:39 +02:00
wskeele
fff878e7c6 nixos/duplicity: Add support for --include-filelist / --exclude-filelist 2024-07-08 17:02:42 +02:00
OPNA2608
2204726a6d nixos/lomiri: Add clock 2024-07-08 16:02:09 +02:00
OPNA2608
3efabb3359 tests/lomiri-clock-app: init 2024-07-08 16:02:09 +02:00
matthewcroughan
c53e5201f4 nixos/scion: make storing path database optional
Storing the SCION path sqlite databases persistently on disk is a valid
setup that improves performance, but may have outstanding bugs that need
to be investigated, so this makes persisent storage optional, off by
default.
2024-07-08 13:26:30 +02:00
Pol Dellaiera
00e9e54702
nixos/glance: init module 2024-07-08 13:14:09 +02:00
Aleksana
81c768e223
Merge pull request #324757 from sjamaan/remove-key-mgmt-from-wpa-cli-examples
Remove key management setting in wpa_cli examples
2024-07-08 18:13:46 +08:00
Morgan Jones
de5e0cf11b
nixos/nebula: add numinit as maintainer
I maintain the package and coauthored this module, so should be on it.
:-)
2024-07-08 01:06:58 -07:00
Morgan Jones
95f1ebd2aa
nixos/nebula: loosen ProtectSystem
"strict" may be too strict for some PKCS#11 providers.
2024-07-08 01:04:15 -07:00
Morgan Jones
b81827b992
nixos/nebula: allow string or path for keys
Nebula will be getting PKCS#11 support soon, and this will allow
keys to be specified as PKCS#11 URIs instead of paths.
2024-07-08 01:03:40 -07:00
Hugh O'Brien
66b896630d
profiles/qemu_guest: add virtio_gpu to initrd 2024-07-07 19:35:32 -04:00
Sandro
9d33b8d690
Merge pull request #321046 from OPNA2608/init/lomiri/lomiri-calculator-app
lomiri.lomiri-calculator-app: init at 4.0.2
2024-07-08 00:30:19 +02:00
Julien Malka
107fe87209 nixos/tests/systemd-boot: remove uefiLargeFileWorkaround test 2024-07-07 20:44:21 +00:00
Aaron Andersen
aa3e6fadd2
Merge pull request #325133 from jpds/nixos-prometheus-hardening
nixos/prometheus: systemd hardening for alertmanager/pushgateway
2024-07-07 16:22:35 -04:00
Aaron Andersen
b9ada94572
Merge pull request #325062 from matteo-pacini/nzbhydra2
nzbhydra2: 4.7.6 -> 7.2.3, add maintainer
2024-07-07 16:00:06 -04:00
Jörg Thalheim
ef1670eee9
Merge pull request #325291 from Stunkymonkey/bee-umask-chmod
nixos/bee: prefer 'install' over 'chmod'
2024-07-07 21:49:17 +02:00
Julien Malka
6701c2c867
Merge pull request #323421 from Mic92/systemd-boot-builder 2024-07-07 19:36:09 +02:00
Jörg Thalheim
c7411f7d53
Merge pull request #277579 from nikstur/openssh-tests-in-separate-derivation
openssh: put tests into passthru
2024-07-07 19:10:35 +02:00
Matteo Pacini
146fa6b114 nzbhydra2: changed test maintainers
Removed jamiemagee from maintainers.
Added myself as maintainer.
2024-07-07 17:37:56 +01:00
Felix Buehler
72a4f148f9 nixos/bee: prefer 'install' over 'chmod' 2024-07-07 17:47:28 +02:00
Jörg Thalheim
d1b9c95fdf
Merge pull request #325284 from trueNAHO/docs-fix-broken-nix-dev-urls
treewide: fix broken `nix.dev` URLs
2024-07-07 17:41:07 +02:00
Julien Malka
777cdce1de
Merge pull request #325231 from magneticflux-/python312-invalid-escape-seq 2024-07-07 17:23:47 +02:00
NAHO
a7cc1dcd68
treewide: fix broken 'nix.dev' URLs 2024-07-07 17:15:35 +02:00
Sandro
ebd625a22a
Merge pull request #276692 from dani0854/nixos/languagetool/add_jvm_options
nixos/languagetool: add jvm options
2024-07-07 16:41:41 +02:00
Bjørn Forsman
5aab6344c2 nixos/deconz: treat SIGTERM exit status as success
deconz doesn't handle SIGTERM and terminates with code 143 (128 + 15
(SIGTERM) instead of 0. This results in systemd marking the service as
failed when a user stops it (with `systemctl stop deconz`). Fix it by
treating code 143 as success.
2024-07-07 16:11:11 +02:00
Lin Jian
ec44ccbf6b
Merge pull request #325217 from linyinfeng/json-secrets
nixos/utils: support JSON secret files in genJqSecretsReplacementSnippet
2024-07-07 21:46:13 +08:00
Sandro
b2a1b6f508
Merge pull request #324924 from SuperSandro2000/mediawiki-syntaxcheck
nixos/mediawiki: check if LocalConfig.php is valid syntax
2024-07-07 15:17:08 +02:00
Aaron Andersen
a25848c974
Merge pull request #324884 from SuperSandro2000/locate-persist-timer
nixos/locate: persist updatedb timer
2024-07-07 08:28:46 -04:00
Lin Yinfeng
01543e789c
nixos/utils: support JSON secret files in genJqSecretsReplacementSnippet
genJqReplacementSnippet quotes the content of the secret file in the
output json file, which prevents structured secret, such as a list or
an object, from being used.

This commit adds a `quote = true|false` option to the `{ _secret =
"/path/to/secret"; }` attribute set. `quote = true` treats the
content of /path/to/secret as string, while `quote = false` treats
the content of /path/to/secret as a JSON document.

`quote = true` is the default, maintaining backward compatibility.
2024-07-07 19:22:10 +08:00
OPNA2608
c34ee327e6 Revert "lomiri.telephony-service: Mark broken & exclude everywhere"
This reverts commit 3ef60ac499.
2024-07-07 12:58:45 +02:00
Mitchell Skaggs
5e1481ccc7
nixos/systemd-boot: fix invalid escape sequences
This was inadvertently introduced in https://github.com/NixOS/nixpkgs/pull/281639, but was not a loud warning until Python 3.12 made invalid escape sequences a `SyntaxWarning` instead of a `DeprecationWarning` in https://github.com/python/cpython/issues/98401.
2024-07-07 05:37:08 -05:00
Judson Lester
a9c8ff2cee
lorri: 1.6.0 -> 1.7.0 (#322749)
* (lorri): (1.6.0 -> 1.7.0)

1.7.0 supports Flakes

* (lorri) (update tests)

* lorri: 1.6.0 -> 1.7.0

Removing superfluous binding for `gitRev`
2024-07-07 11:16:23 +02:00
Jonathan Davies
008ea18566
nixos/prometheus: Harden alertmanager/webhook-logger/pushgateway systemd definitions 2024-07-07 00:15:57 +01:00
Jonathan Davies
7ce4fe5463
nixos/prometheus: Log systemd-analyze for alertmanager/webhook-logger/pushgateway 2024-07-07 00:15:42 +01:00
OPNA2608
3a788099cd tests/lomiri: Add polkit agent test 2024-07-06 20:05:07 +02:00