Maciej Krüger
6ba04cc302
Merge pull request #270876 from gador/pgadmin-check-pw
...
nixos/pgadmin: add minimumPasswordLength setting and check
2024-01-12 21:00:40 +01:00
Ryan Lahfa
08d0afbbdf
Merge pull request #239028 from chayleaf/miniupnpd
...
miniupnpd-nftables: init at 2.3.3
2024-01-12 20:17:33 +01:00
Raito Bezarius
4c84c9c1c3
nixos/mail/listmonk: fix hardening directives
...
For some reason, I don't know why I missed those, but
I didn't look at my logs for a while.
It would be nice if we could catch those statically kinda (?) in CI.
2024-01-12 20:14:52 +01:00
Ryan Lahfa
724d5348a6
Merge pull request #272794 from dcarosone/zpool-import-d
...
nixos/zfs: check pool state with -d, like import
2024-01-12 20:07:24 +01:00
Ryan Lahfa
1b2aeec40a
Merge pull request #275031 from 2xsaiko/outgoing/sieve
...
nixos/dovecot: add support for sieve extensions, in particular imapsieve and pipe
2024-01-12 20:05:45 +01:00
Ryan Lahfa
6d8630efda
Merge pull request #270270 from SuperSandro2000/nginx-fastopen
...
nixos/nginx: filter more options when listening has quic
2024-01-12 20:01:29 +01:00
Ryan Lahfa
3287441158
Merge pull request #275484 from Izorkin/update-nginx-http3
...
nixos/nginx: disable automatic advertise of HTTP/3 protocol support
2024-01-12 19:49:18 +01:00
Maciej Krüger
c0ef1f9479
nixos/network-interfaces: add assertion if used in after or wants
2024-01-12 17:29:05 +01:00
Niko
9e2cd6f872
nixos/network-interfaces: remove network-interfaces.target
...
Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
2024-01-12 17:29:03 +01:00
K900
e7b611e59d
Merge remote-tracking branch 'origin/master' into staging-next
2024-01-12 13:59:54 +03:00
Martin Ertsås
3e3fea8653
nixos/modemmanager: Add qmicli and mbimcli when using fccUnlockScripts
...
The ModemManager shipped fccUnlockScripts are using either qmicli or
mbimcli, to unlock wwan modems. These needs to be available for
ModemManager if you set the fccUnlockScripts link, so instead of having
every user than needs it pull it inn in different ways, we should just
provide the tools if we think they might be needed.
https://modemmanager.org/docs/modemmanager/fcc-unlock
2024-01-12 11:53:44 +01:00
Raito Bezarius
3ecaad0e0e
nixos/networking/keepalived: do not emit unicastPeers when there are none
...
In the past, we emitted `unicast_peer` block even with empty unicast peers list.
This now results in:
```
Keepalived_vrrp[392762]: A unicast keyword has been specified without any unicast peers. Defaulting to multicast. This usage is deprecated - please update your configuration.
```
We do not emit it anymore to avoid this warning.
2024-01-12 03:52:39 +01:00
Yureka
1a1c53c271
Revert "nixos/gitlab: Add CI database connection for >=15.9" ( #280395 )
2024-01-12 02:03:23 +01:00
Yureka
29bc446b5c
Revert "nixos/gitlab: fix database config when no passwordfile is defined" ( #280392 )
2024-01-12 02:00:49 +01:00
Peder Bergebakken Sundt
f489e99576
Merge pull request #277925 from Izorkin/update-nginx-http2
...
nixos/nginx: use new variant of http2 option for angie package
2024-01-12 01:40:18 +01:00
Lin Jian
52bd30d5c5
Merge pull request #279274 from MarcelCoding/patch-1
...
nixos/pgadmin: disable upgrade check
2024-01-12 08:16:16 +08:00
Ryan Lahfa
56df644cb4
Revert "nixVersions.stable: 2.18.1 -> 2.19.2"
...
This version does not pass our NixOS tests, e.g. `nixosTests.misc` and
potentially other fundamental tests such as lib-tests.
2024-01-11 19:15:07 +01:00
Marcel
0be0d8a860
nixos/pgadmin: disable upgrade check
2024-01-11 16:22:28 +01:00
github-actions[bot]
5ee7600250
Merge master into staging-next
2024-01-11 12:01:18 +00:00
Florian Klink
3d1fe1445c
Merge pull request #279433 from wentasah/nsswitch-mdns
...
nixos/avahi-daemon: let nssmdns{4,6} options affect also non-minimal …
2024-01-11 13:21:24 +02:00
Florian Brandes
bc21d288f4
nixos/pgadmin: apply review suggestions
...
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-01-11 11:32:32 +01:00
Jared Baur
d177e2ef06
nixos/sysupdate: fix example text
...
The example systemd-sysupdate transfer name has a ".conf" suffix,
although the files on the final system are already appended with this
suffix, so the file ends up being "transfer-name.conf.conf". Remove the
suffix in the example so that users will get a transfer filename they
expect.
2024-01-11 01:47:36 -08:00
Patrik Keller
30b25fa102
nixos/netdata: add missing dependency for syslog alarms
...
Netdata depends on the `logger` utility for dispatching health alarms to
syslog. This dependency was missing in the systemd units environment.
Issue: https://github.com/NixOS/nixpkgs/issues/272702
Docs: https://learn.netdata.cloud/docs/alerting/notifications/agent-dispatched-notifications/syslog
Docs, archived: https://archive.is/mkQa4
2024-01-11 08:38:52 +01:00
github-actions[bot]
28d4a2210a
Merge master into staging-next
2024-01-11 06:01:20 +00:00
Someone
7953a78641
Merge pull request #280076 from SomeoneSerge/fix/apptainer-nv-cherry
...
apptainer: unbreak --nv (userns+nvliblist.conf variant)
2024-01-11 00:51:23 +00:00
Ryan Lahfa
176e84d44f
Revert "nixos/systemd-boot: init boot counting"
2024-01-11 01:00:43 +01:00
Ryan Lahfa
a6303da3a7
Merge pull request #273062 from JulienMalka/systemd-boot-counting
...
nixos/systemd-boot: init boot counting
2024-01-11 00:40:07 +01:00
Weijia Wang
2f9e98ccf3
Merge branch 'master' into staging-next
2024-01-10 23:12:44 +01:00
Bernardo Meurer
ca25692e79
Merge pull request #280092 from eclairevoyant/nix-stable
...
nixVersions.stable: 2.18.1 -> 2.19.2
2024-01-10 18:06:22 -03:00
Someone Serge
35de6f1c4e
nixos/singularity: disable setuid for apptainer
...
(cherry picked from commit 5f4b6ea5dde8b0153f416c78519d877ab1224f91)
2024-01-10 20:47:57 +00:00
maxine
3534a235f1
Merge pull request #278941 from amaxine/drop-gnome-themes-extra
...
gnome: don't include gnome-themes-extra by default
2024-01-10 21:07:06 +01:00
Peder Bergebakken Sundt
dff635f38d
Merge pull request #243169 from 2xsaiko/outgoing/krb5
...
nixos/krb5: cleanup, fix and RFC42-ify
2024-01-10 21:06:15 +01:00
éclairevoyant
c27bc49c43
nixVersions.stable: 2.18.1 -> 2.19.2
2024-01-10 14:04:30 -05:00
Martin Weinelt
10b01dcc89
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/types-setuptools/default.nix
2024-01-10 16:09:52 +01:00
Tom Siewert
890ffaa1ae
nixos/gitlab: fix database config when no passwordfile is defined
...
In commit 41ca9c1, the database config got an additional config entry
for a separate CI database connection [1]. Unfortunately, the main connection
must always be the first entry. The fix for this was only applied when
databasePasswordFile has been set.
This commit fixes the order of the config for deployments without a databasePasswordFile.
[1] https://docs.gitlab.com/ee/update/deprecations.html#single-database-connection-is-deprecated
2024-01-10 14:35:57 +01:00
Jonas Heinrich
cb919df382
Merge pull request #279887 from onny/dokuwiki-cleanup
...
nixos/dokuwiki: Remove old migration warnings
2024-01-10 14:04:20 +01:00
github-actions[bot]
d9ad8d1e35
Merge master into staging-next
2024-01-10 06:01:12 +00:00
Franz Pletz
078c5755a9
Merge pull request #277912 from Luflosi/kubo-send-buffer-size
2024-01-10 02:09:45 +01:00
github-actions[bot]
122355be99
Merge master into staging-next
2024-01-10 00:02:18 +00:00
digital
39fd0c3fe3
nixos/ntfy-sh: clean up DynamicUser workarounds
...
this commit removes the static assignments for the ntfy-sh user and
group. furthermore, it removes some tmpfiles.d rules which where
initially put in place by https://github.com/NixOS/nixpkgs/pull/234811 .
these are however not required, as ntfy-sh will automatically create the
required files and systemd automatically handles the migration process.
A nixosTest is added to demonstrate that the migration is working
reliably.
This also fixes an issue with where systemd would sometimes not start
ntfy-sh. The tmpfiles rules in combination with impermanence caused `/
var/lib/ntfy-sh` to be a directory when it should have been a symlink.
2024-01-10 00:15:50 +01:00
Peder Bergebakken Sundt
92327152cd
Merge pull request #274813 from pbsds/lxd-package-option-fix
...
nixos/lxd: convert cfg.package and company to mkPackageOption
2024-01-09 23:36:42 +01:00
Peder Bergebakken Sundt
7bb62b90ef
Merge pull request #274807 from danielbarter/nixos-printing-cups-override
...
cupsd: allow cups package override
2024-01-09 22:30:34 +01:00
Peder Bergebakken Sundt
3bf05ba941
Merge pull request #271481 from eliandoran/feature/snmpd
...
nixos/snmpd: init
2024-01-09 21:32:27 +01:00
Jonas Heinrich
6707b97f00
nixos/nextcloud: Remove old migration warnings
2024-01-09 20:59:03 +01:00
Jonas Heinrich
d71dc05e82
nixos/dokuwiki: Remove old migration warnings
2024-01-09 20:51:12 +01:00
K900
838aefefc3
Merge remote-tracking branch 'origin/master' into staging-next
2024-01-09 22:42:37 +03:00
José Romildo Malaquias
3ab8dd6bf4
Merge pull request #278819 from romildo/upd.labwc
...
nixos/labwc: init
2024-01-09 12:36:11 -03:00
Nick Cao
01db22092a
Merge pull request #276773 from SuperSandro2000/gjs-nox
...
gjs: remove dependency on gtk3 when tests are disabled; nixos/no-x-libs: add gjs
2024-01-09 10:33:42 -05:00
K900
bff9ee8862
Merge remote-tracking branch 'origin/master' into staging-next
2024-01-09 13:03:34 +03:00
Sandro Jäckel
6b73be0ca5
nixos/no-x-libs: add gjs
2024-01-08 23:54:58 +01:00
Will Fancher
9127f63b94
Merge pull request #265030 from bb2020/usbstor
...
nixos/usbStorage: update device flag
2024-01-08 17:03:25 -05:00
Maciej Krüger
c92e12d81e
Merge pull request #279650 from nbraud/nixos/pam/ssh-agent-auth
...
nixos/pam: Fix use of renamed `enableSSHAgentAuth` option
2024-01-08 19:21:03 +01:00
nicoo
0e5c95035d
nixos/pam: Fix use of renamed enableSSHAgentAuth option
2024-01-08 18:13:46 +00:00
github-actions[bot]
6bf0bf35bb
Merge master into staging-next
2024-01-08 18:00:58 +00:00
Nick Cao
c360b49704
Merge pull request #259849 from Scrumplex/nixos/vaultwarden/backupDirCreate
...
nixos/vaultwarden: create backupDir using tmpfiles.d
2024-01-08 12:30:03 -05:00
Tom Siewert
838a2b54ed
nixos/gitlab: Add CI database connection for >=15.9
...
Starting with GitLab 15.9, single connections were deprecated [1] and
will be removed in GitLab 17.0.
[1] https://docs.gitlab.com/ee/update/deprecations.html#single-database-connection-is-deprecated
2024-01-08 18:14:06 +01:00
Maciej Krüger
b5b2f6bec4
Merge pull request #277620 from nbraud/nixos/pam/ssh-agent-auth-31611
...
nixos/pam: Add option for ssh-agent auth's trusted authorized_keys files
2024-01-08 17:42:02 +01:00
Martin Weinelt
ef1898454c
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/aiohappyeyeballs/default.nix
2024-01-08 16:34:52 +01:00
K900
b43946170e
Merge pull request #279531 from K900/linux-6.7
...
linux_6_7: init at 6.7
2024-01-08 16:17:12 +03:00
K900
8c56a751cb
Merge pull request #279422 from wegank/partition-manager-kde
...
libsForQt5.kpmcore, partition-manager: move to applications/kde
2024-01-08 15:40:06 +03:00
Weijia Wang
788c45eb57
partition-manager: move to aliases.nix
2024-01-08 13:36:56 +01:00
K900
ef190570b8
nixos/bcachefs: use linuxPackages_latest
2024-01-08 10:47:51 +03:00
Cole Mickens
5a718794d0
nixos/lib/make-squashfs.nix: allow disabling compression
2024-01-07 22:46:20 -06:00
github-actions[bot]
f85fe5fc29
Merge master into staging-next
2024-01-07 18:00:54 +00:00
Michal Sojka
e23da86b18
nixos/avahi-daemon: let nssmdns{4,6} options affect also non-minimal mdns source
...
This is a followup to commit bba808dbfa#258424 ). mdns occurs twice in /etc/nsswitch.conf but
that commit changed only the first one (mdns_minimal, before resolve).
This commits ensures that both occurrences are set consistently.
This is not only consistent with upstream example[1] but it also
fixes #118628 -- a longstanding issue with CUPS and printer detection.
[1] https://github.com/avahi/nss-mdns#activation
2024-01-07 18:16:40 +01:00
Guillaume Girol
db0f76e8c9
Merge pull request #271030 from symphorien/nixseparatedebuginfod
...
nixseparatedebuginfod: init at 0.3.0, plus module and nixos test
2024-01-07 17:45:13 +01:00
Nick Cao
59eabdc943
Merge pull request #275637 from SuperSandro2000/firefox-app-update
...
nixos/firefox: disable updates when policies when programs.firefox.policies is defined
2024-01-07 10:29:43 -05:00
Nick Cao
0b88c3d297
Merge pull request #265783 from Silver-Golden/bitwarden-directory-connector_pkgs
...
Bitwarden directory connector: init
2024-01-07 10:28:04 -05:00
Jan Tojnar
ff42d23313
Merge branch 'master' into staging-next
...
Conflicts:
pkgs/development/python-modules/dbt-core/default.nix
pkgs/development/python-modules/dbt-semantic-interfaces/default.nix
Still broken by pydantic 2 bump, though.
2024-01-07 16:14:41 +01:00
Maciej Krüger
c931d73fba
Merge pull request #276499 from nbraud/nixos/pam/ssh-agent-auth
...
nixos/pam: Add assertion for SSH-agent auth
2024-01-07 13:54:27 +01:00
github-actions[bot]
9f96550945
Merge master into staging-next
2024-01-07 12:01:24 +00:00
Julien Malka
eb435897a6
nixos/systemd-boot: init boot counting
2024-01-07 11:34:09 +00:00
Brendan Golden
f7c25138ea
nixos/bitwarden-directory-connector: init at version
...
Added the module to use bitwarden-directory-connector.
2024-01-07 11:22:31 +00:00
Jörg Thalheim
db59d03371
Merge branch 'master' into pr/bcachefs
2024-01-07 11:40:30 +01:00
Martin Weinelt
0161570089
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/archspec/default.nix
2024-01-07 01:31:56 +01:00
Guillaume Girol
73f0f9c21c
Merge pull request #275902 from williamvds/dnsmasq_docs
...
nixos/dnsmasq: Add documentation
2024-01-06 23:04:40 +01:00
Lin Jian
3179a4e209
Merge pull request #278536 from newAM/llama-cpp-server
...
nixos/llama-cpp: init
2024-01-07 03:58:38 +08:00
Lin Jian
c55537aa04
Merge pull request #278500 from Ten0/fix_avahi_ipv6_defaultText
...
nixos/avahi: fix incorrect defaultText of nixos option services.avahi.ipv6
2024-01-07 02:54:04 +08:00
Alex Martens
d8bb8a6417
nixos/llama-cpp: init
2024-01-06 10:42:55 -08:00
github-actions[bot]
17cf061755
Merge master into staging-next
2024-01-06 18:01:15 +00:00
Maximilian Bosch
e55b4c1ec7
Merge pull request #278493 from marrobHD/patch-1
...
nixos/nextcloud: fix dbport in config.php
2024-01-06 16:26:15 +01:00
Sandro Jäckel
eceb5b2f8c
nixos/installation-cd-minimal: allow overwriting isoImage.edition with mkForce like other options
...
For good measure also changed fontconfig
2024-01-06 15:52:15 +01:00
Thiago Kenji Okada
a0d94113e8
Merge pull request #278975 from lucasew/fix/transmission-web
...
nixos/transmission: fix webui if no custom webui is specified
2024-01-06 14:16:49 +00:00
Christian Kögler
93ae65d7dd
Merge pull request #278366 from ck3d/nixos-vdr-updates
...
nixos/vdr: add option user/group and more admin control
2024-01-06 13:01:13 +01:00
lucasew
82723d0494
nixos/transmission: fix webui if no custom webui is specified
...
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-01-05 16:24:24 -03:00
github-actions[bot]
76201c62e0
Merge master into staging-next
2024-01-05 18:00:58 +00:00
Benedikt Tissot
c1d8fd1a89
nixos/ddclient: make ExecStartPre a list
...
this enables to exetend ExecStartPre while keeping the default inplace.
2024-01-05 16:36:45 +01:00
Maxine Aubrey
c3d027f9ce
gnome: don't include gnome-themes-extra by default
...
Upstream moved gnome-themes-extra to world 3 years ago
8b1708c38b
2024-01-05 16:01:12 +01:00
Thomas BESSOU
a85739af7e
nixos/avahi: Fix incorrect defaultText of services.avahi.ipv6
...
This seems to have been forgotten in bba808dbfa
2024-01-05 15:29:22 +01:00
Sandro
9272b8ef79
nixos/miniflux: allow members of miniflux group to read runtime directory
...
Otherwise a proxy server that has the miniflux group cannot read files in the runtime directory like a socket miniflux can listen on.
2024-01-05 15:01:04 +01:00
José Romildo
42c74f2067
nixos/labwc: init
2024-01-05 10:59:13 -03:00
Jared Baur
1dad7f6821
nixos/repart: add loop module to initrd
...
Systemd-repart will use loopback devices for partition creation if it is
able to, and will fallback to doing "offline" partition creation writing
data directly to files. From what I see looking at the repart code,
there are specific features that cannot be taken advantage of when not
using loopback devices (e.g. no BTRFS subvolumes in systemd v255) and in
certain places they have to perform some manual re-sizing work that can
otherwise be avoided.
2024-01-05 01:04:30 -08:00
github-actions[bot]
340cf4304d
Merge master into staging-next
2024-01-05 06:01:12 +00:00
zowoq
3d0b034e87
maintainers/teams: add buildbot
2024-01-05 11:41:19 +10:00
github-actions[bot]
1e290d634f
Merge master into staging-next
2024-01-05 00:02:27 +00:00
Julien Malka
7afe9bc384
Merge pull request #278609 from RaitoBezarius/initrd-secrets
2024-01-04 23:45:39 +01:00
Raito Bezarius
7c6f64914f
system/activation/bootspec: do not synthesize initrdSecrets if unneeded
...
We should not always create an appender script if we have no secret, this has no usefulness whatsover.
2024-01-04 23:11:23 +01:00
Raito Bezarius
b3d998e7ea
boot/loader/systemd-boot: BootSpec makes initrdSecrets optional
...
A bootspec could remove the `initrdSecrets` attribute and is a perfectly valid bootspec, as can be seen
in the bootspec.cue.
This makes the builder not fail upon missing `initrdSecrets`.
2024-01-04 23:11:22 +01:00
Nick Cao
75b9953daf
nixos/fcitx5: allow using the wayland frontend instead of the fcitx5 one
2024-01-04 15:06:58 -05:00
github-actions[bot]
065e28482b
Merge master into staging-next
2024-01-04 18:00:54 +00:00
nicoo
2eac5106f1
nixos/sudo: Remove unused enableSSHAgentAuth let-binding
2024-01-04 17:30:09 +00:00
nicoo
9ed1423dcf
nixos/pam: Warn on insecure sshAgentAuth configurations
2024-01-04 17:30:09 +00:00
Nick Cao
b391da91be
Merge pull request #278523 from NickCao/zram-generator
...
nixos/zram-generator: do not require zram to be a module
2024-01-04 11:25:34 -05:00
Vladimír Čunát
8a839514de
Merge branch 'master' into staging-next
2024-01-04 15:07:44 +01:00
Lin Jian
b05d9c12d9
Merge pull request #237904 from SuperSamus/libinput-description
...
nixos/libinput: update horizontalScrolling description
2024-01-04 19:55:53 +08:00
May
5be349d0be
nixos/nextcloud: remove dbport
...
To specify a port for the database host, `host:port` format has to be used [1].
[1]: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/config_sample_php_parameters.html#dbhost
2024-01-04 12:34:24 +01:00
Martino Fontana
d6022b39ee
nixos/libinput: update horizontalScrolling description
2024-01-04 11:34:25 +01:00
Atemu
94e446c260
Merge pull request #277019 from SuperSandro2000/paperless-freeform
...
nixos/paperless: convert extraConfig to freeform type
2024-01-04 09:33:54 +01:00
Emery Hemingway
b736a8a801
eris-go: 20231119 -> 20231219
2024-01-04 06:24:03 +00:00
Sandro Jäckel
7c1b4b22f9
nixos/paperless: convert extraConfig to freeform type
...
Co-authored-by: Atemu <atemu.main@gmail.com>
2024-01-04 00:04:38 +01:00
Sandro Jäckel
2db74e8339
nixos/display-managers: only link desktop derivation if sessionPackages is not empty
...
On a headless system there are no entries and we do not need to add it
to XDG_DATA_DIRS.
2024-01-03 23:48:54 +01:00
Maximilian Bosch
7e45990c06
nixos/sshd: fix socket activated ports when using ListenAddress
...
Noticed that issue while reviewing #275633 : when declaring
`ListenAddress host` without a port, all ports declared by
`Port`/`cfg.ports` will be used with `host` according to
`sshd_config(5)`.
However, if this is done and socket activation is used, only a socket
for port 22 is created instead of a sockets for each port from
`Port`/`cfg.ports`. This patch corrects that behavior.
Also added a regression test for this case.
2024-01-03 19:42:45 +01:00
illustris
d6baaf1c42
nixos/cloud-init: fix DHCP race condition
2024-01-03 23:50:30 +05:30
github-actions[bot]
307002948d
Merge master into staging-next
2024-01-03 18:00:57 +00:00
Nick Cao
9eeabd33d2
nixos/zram-generator: do not require zram to be a module
2024-01-03 12:08:30 -05:00
K900
497cb80d55
Merge pull request #278490 from K900/sddm-package
...
nixos/sddm: add package option
2024-01-03 19:48:58 +03:00
Sefa Eyeoglu
4f70c901dc
nixos/vaultwarden: add example value for backupDir
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-01-03 17:37:37 +01:00
Sefa Eyeoglu
80ea6a21fb
nixos/vaultwarden: create backupDir using tmpfiles.d
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-01-03 17:37:35 +01:00
Nick Cao
fa5ad5c4d0
Merge pull request #278501 from hughobrien/invidious-fix
...
nixos/invidious: Additional fix for user message on 24.05 changes
2024-01-03 11:03:06 -05:00
Maximilian Bosch
cfd8c0ddd8
Merge pull request #275633 from chreekat/b/sshd-config-check
...
sshd: Use top-level ports in config check when needed
2024-01-03 16:25:08 +01:00
Hugh O'Brien
e51c00fb23
nixos/invidious: Additional fix for user message on 24.05 changes
2024-01-03 10:17:06 -05:00
nicoo
822c0a86bd
nixos/pam: Add sshAgentAuth.authorizedKeysFiles option
2024-01-03 14:49:36 +00:00
nicoo
a46ea51ca3
nixos/pam: Rename option enableSSHAgentAuth to sshAgentAuth.enable
2024-01-03 14:49:36 +00:00
K900
06cc32ffc3
nixos/sddm: add package option
2024-01-03 17:20:10 +03:00
Jonas Heinrich
818fdce3d0
nixos/nextcloud: Fix corrent option name
2024-01-03 14:08:21 +01:00
github-actions[bot]
dc84f21849
Merge master into staging-next
2024-01-03 12:01:04 +00:00
Will Fancher
05706b850a
Merge pull request #273695 from lopsided98/initrd-systemd-lib-firmware
...
systemd-stage-1: allow non-existent /lib/firmware
2024-01-03 04:30:27 -05:00
Will Fancher
65f0d24178
Merge pull request #278147 from SuperSandro2000/oomd-followup
...
nixos/oomd: use mkRenamedOptionModule like mentioned in the changelog, add missing section to use slice
2024-01-03 01:09:47 -05:00
Weijia Wang
eb5334c27d
Merge branch 'master' into staging-next
2024-01-03 03:22:40 +01:00
Sandro Jäckel
27468aae96
nixos/oomd: add missing section to use slice
2024-01-03 02:45:38 +01:00
Weijia Wang
3526f2ffec
Merge pull request #274192 from foo-dogsquared/nixos-guix-add-guix-home-support
...
nixos/guix: add Guix home support
2024-01-03 01:28:11 +01:00
Mario Rodas
7f0a64976d
Merge pull request #270286 from ajs124/ruby_ossl11_cleanup
...
ruby_2_7: remove
2024-01-02 18:37:18 -05:00
Christian Kögler
7caca1b185
nixos/vdr: add option user/group and more admin control
...
- Add option to set user and group name
- Set users home to runtime directory, to avoid mixing of temporal files
like caches
- Allow admin to control LIRC service by avoiding LIRC enabling
- Allow admin to set libDir, by removing setting argument config to default
- Add package to environment, to allow easy access for admins to helper
tools like svdrpsend and vdr -h
- Cleanup Nix code by avoiding with statement
2024-01-02 23:17:46 +01:00
williamvds
da61f0320f
dnsmasq: Add documentation
2024-01-02 22:07:25 +00:00
Nick Cao
f6a028db30
Merge pull request #276808 from SuperSandro2000/portunus-cookie-secure
...
nixos/portunus: make sure the cookies are only send over https if it …
2024-01-02 16:54:37 -05:00
ajs124
02ad3159b0
ruby_2_7: remove
2024-01-02 15:30:06 +01:00
Bryan Richter
e797aaea0b
sshd: Use top-level ports in config check when needed
...
Previously, if a listenAddress was specified without a `port`, the check
would fail.
2024-01-02 12:51:39 +02:00
K900
887e96e875
Merge remote-tracking branch 'origin/master' into staging-next
2024-01-02 10:55:23 +03:00
Patrick Steinhardt
f026ea0db0
nixos/nextcloud: disable output buffering
...
The Nextcloud admin guide says that output buffering must be turned off
or otherwise PHP will return memory-related errors [1]. As the default
value for this PHP setting is 4096 and thus enabled the Nextcloud setup
is thus misconfigured by default. This misconfiguration will be shown in
the "Security & setup warnings" dialog for the administrator.
Fix this misconfiguration by setting "output_buffering=0" by default.
[1]: https://docs.nextcloud.com/server/stable/admin_manual/configuration_files/big_file_upload_configuration.html#configuring-php
2024-01-02 08:45:42 +01:00
sinanmohd
8314af158f
nixos/network-interfaces: fix implicit dependency on underlying device
...
the bug causes a hard dependency on an underlying device which might not be
valid for all interfaces, also broke the example for networking.sits. this is
due to calling hasAttr first and checking for null afterwards, the bug was
made more apparent in commit 76a3c30
2024-01-02 12:03:29 +05:30
Gutyina Gergő
3306755683
nixos/c2fmzq-server: allow multiple freeform settings
2024-01-01 22:50:16 +01:00
Sandro Jäckel
0a1d1907a5
nixos/oomd: use mkRenamedOptionModule like mentioned in the changelog
2024-01-01 22:33:00 +01:00
Nick Cao
66ea36d4d3
Merge pull request #276159 from AtaraxiaSjel/fix/tor-obfs4proxy
...
nixos/tor: fix transport plugin exe name
2024-01-01 15:55:04 -05:00
Nick Cao
3d6243a6a9
Merge pull request #276430 from hellodword/patch-1
...
nixos/tailscale: fix after and wants
2024-01-01 15:52:50 -05:00
Guillaume Girol
38034a860a
Merge pull request #273286 from nh2/sane-backends-package-option
...
Add hardware.sane.backends-package option.
2024-01-01 21:43:35 +01:00
Maciej Krüger
8f3c9dec12
Merge pull request #278090 from mkg20001/fix-auditd
...
nixos/auditd: fix typo
2024-01-01 18:35:17 +01:00
Maciej Krüger
4f9e98905e
nixos/auditd: fix typo
...
Would otherwise fail with
```
error: A definition for option `systemd.services.auditd.conflicts."[definition 1-entry 1]"' is not of type `string matching the pattern [a-zA-Z0-9@%:_.\-]+[.](service|socket|device|mount|automount|swap|target|path|timer|scope|slice)'. Definition values:
- In `/nix/store/x2khl2yx0vz2i357x7mz5xm1kagql8ag-source/nixos/modules/security/auditd.nix': "shutdown.target "
```
2024-01-01 17:28:46 +01:00
Ryan Lahfa
10af81720a
Merge pull request #277936 from Izorkin/update-nginx-ktls
...
nginx: enable ktls support by default
2024-01-01 17:19:11 +01:00
markuskowa
009b625a54
Merge pull request #277792 from ck3d/vdr-updates-2023-12
...
vdr: updates 2023/12
2024-01-01 16:58:11 +01:00
Guillaume Girol
dece72548e
nixseparatedebuginfod: add module and nixos test
2024-01-01 13:42:13 +01:00
Izorkin
10c06cb060
nginx: enable ktls support by default
2024-01-01 12:02:57 +03:00
github-actions[bot]
e61ae81f8f
Merge master into staging-next
2024-01-01 00:02:16 +00:00
Izorkin
2fb0b52c50
nixos/nginx: disable automatic advertise of HTTP/3 protocol support
...
Automatic advertise in the `http` block about support of HTTP/3
protocol makes it difficult to automatically configure services
to work with it.
HTTP/3 availability must be manually advertised, preferably in
each location block.
2024-01-01 02:29:01 +03:00
Robert Hensing
f4525eefb3
Merge pull request #277949 from pennae/lazy-options-arg-list
...
nixos/doc: avoid bash argument list size limit
2023-12-31 22:04:01 +01:00
Ryan Lahfa
e44341e335
Merge pull request #195805 from Luflosi/grub-use-correct-zfs-version
...
nixos/grub: use the correct ZFS version
2023-12-31 21:33:37 +01:00
Ryan Lahfa
5ab6191ee5
Merge pull request #276260 from Izorkin/update-nginx-acme-locations
...
nixos/nginx: change position acmeLocation in nginx configuration
2023-12-31 21:23:17 +01:00
Janik
6be9d4fc21
Merge pull request #266283 from Noodlesalat/ping-exporter-1.1.0
...
ping_exporter: init at 1.1.0
2023-12-31 20:50:30 +01:00
github-actions[bot]
65cbf5e637
Merge master into staging-next
2023-12-31 18:01:09 +00:00
pennae
4374f2feda
nixos/doc: avoid bash argument list size limit
...
see #277861 . as the module list grows the argument size in the
lazy-options nix call grows, eventually reaching a hard limit and
causing the build to fail. writing the list to a file instead and import
it instead of providing it directly circumvents this.
2023-12-31 18:08:46 +01:00
Guillaume Girol
17fc67eb2e
Merge pull request #255464 from georgyo/postfix-dont-use-file-ownership
...
nixos/postfix: postalias should not use source file permissions
2023-12-31 15:20:48 +01:00
Izorkin
d11fe979a2
nixos/nginx: use new variant of http2 option for angie package
2023-12-31 16:52:08 +03:00
Luflosi
b2f8b846f2
nixos/kubo: increase maximum UDP send buffer size
...
In addition to increasing the maximum UDP receive buffer size in the Linux kernel, it is now recommended to do the same for the send buffer size.
This is documented in https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes .
The change to the documentation was made in June: 5b5e58d289https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details.
```
This can be seen while running the NixOS tests.
2023-12-31 14:09:27 +01:00
github-actions[bot]
dc1ce0d685
Merge staging-next into staging
2023-12-31 12:01:23 +00:00
Martin Weinelt
f142aeb3a2
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/scikit-build-core/default.nix
2023-12-31 12:00:30 +01:00
Maciej Krüger
2d9d11dee6
Merge pull request #251782 from vifino/thermald_ignore-cpuid-check
...
thermald: allow ignoring cpuid check
2023-12-31 11:30:50 +01:00
github-actions[bot]
a9cb88c7ae
Merge staging-next into staging
2023-12-31 06:01:28 +00:00
Jan Tojnar
80020c7db4
Merge branch 'master' into staging-next
...
; Conflicts:
; pkgs/development/lua-modules/generated-packages.nix
; pkgs/development/lua-modules/overrides.nix
2023-12-31 02:31:32 +01:00
Ilan Joselevich
210ab761b4
Merge pull request #276294 from phaer/cachix-signing-key
...
cachix-watch-store: allow to set a signing key
2023-12-31 00:20:52 +02:00
nicoo
607679c6d3
nixos/pam: Assert that authorizedKeysFiles is non-empty when using pam_ssh_agent_auth
2023-12-30 22:19:38 +00:00
Christian Kögler
1c326dcb4f
nixos/vdr: wait for network
2023-12-30 21:58:24 +01:00
Izorkin
ae5c0c1521
nixos/nginx: skip adding a comment to acmeLocation in nginx configuration
2023-12-30 23:50:02 +03:00
Izorkin
7f1b6d45af
nixos/nginx: change position acmeLocation in nginx configuration
2023-12-30 23:49:58 +03:00
Nick Cao
fb6f005181
Merge pull request #272552 from SuperSandro2000/ghostscript-nox
...
nixos/no-x-libs: add ghostscript
2023-12-30 13:23:42 -05:00
Philip Taron
da90576aac
nixos/lxd-agent: fix evaluation regression caused by nixos/nixpkgs#271326
2023-12-30 08:45:30 -08:00
Kiara Grouwstra
bdbd8f703b
fix sample value for option services.wordpress.sites.<name>.languages
2023-12-30 16:26:01 +01:00
Izorkin
7ead602f93
nixos/roundcube: add configureNginx option
2023-12-30 15:01:13 +03:00
Izorkin
3b74d8781f
nixos/roundcube: update nginx configuration
2023-12-30 15:01:12 +03:00
Lin Jian
55c1318537
Merge pull request #276180 from linj-fork/pr/kanata-list
...
nixos/kanata: specify linux-dev as a list
2023-12-29 20:24:56 -06:00
Nick Cao
4a8d35315a
Merge pull request #276407 from sinanmohd/dendrite-sliding-sync
...
nixos/matrix-sliding-sync: rename, init dendrite
2023-12-29 20:24:47 -05:00
Will Fancher
9cab49c71b
Merge pull request #273921 from SaltyKitkat/oomd
...
nixos/systemd: update oomd configuration
2023-12-29 18:47:49 -05:00
markuskowa
15b39c2238
Merge pull request #275080 from SomeoneSerge/feat/munge-systemd
...
nixos/munge: update the systemd service
2023-12-30 00:11:12 +01:00
Maximilian Bosch
d25fdec5b3
Merge pull request #212430 from onny/nextcloud-cleanup
...
nixos/nextcloud: Move options into now freeForm extraOptions
2023-12-29 23:44:24 +01:00
Maximilian Bosch
a1f20ed672
Merge pull request #277382 from Ma27/fix-nextcloud-app-routing
...
nixos/nextcloud: fix nginx routing to store and nix apps
2023-12-29 23:44:12 +01:00
Jonas Heinrich
b06d3c3aa6
Merge pull request #277442 from onny/ollama
...
nixos/ollama: init
2023-12-29 23:00:10 +01:00
Dmitriy Kholkin
0929716b02
nixos/tor: fix transport plugin exe name
2023-12-29 23:20:15 +03:00
Nick Cao
08a62091a1
Merge pull request #277146 from majewsky/portunus-2.0.0
...
portunus: 1.1.0 -> 2.0.0
2023-12-29 14:53:12 -05:00
sinanmohd
e8e5c07ad0
nixos/matrix-sliding-sync: rename, init dendrite
2023-12-30 00:25:57 +05:30
github-actions[bot]
294b981465
Merge staging-next into staging
2023-12-29 18:01:23 +00:00
github-actions[bot]
f50aae4fb1
Merge master into staging-next
2023-12-29 18:00:57 +00:00
Maximilian Bosch
bae5e65162
nixos/nextcloud: fix nginx routing to store and nix apps
...
Closes #277206
The bug mentioned above was a symptom of the issue fixed here: when
opening the `forms` app which is installed via `extraApps` (or the
app store) the site wouldn't work because `.mjs` files had the wrong
Content-Type.
The actual problem got fixed already[1], however this config was not
used for stuff from `/nix-apps` & `/store-apps` which had their own
location section with only a `root ;` statement.
In fact, this setup isn't strictly supported by Nextcloud upstream[2],
so to fix this for good, I decided to follow the upstream suggestion for
app directories outside the server root, i.e. linking them back into the
store path.
This means that the module generates a new derivation now with
* `services.nextcloud.package` linked into it via `lndir`.
* under `nix-apps` is a symlink to the link farm containing all apps
from `services.nextcloud.extraApps`.
* under `store-apps` is a symlink to `/var/lib/nextcloud/store-apps`.
Since this is only used in the NixOS module that also configures this
location for imperatively installed apps, this seems an OK thing to
do.
Successfully tested the change on a productive Nextcloud 28.0.1 with
several apps installed via `extraApps` (`forms`, `cospend`, `maps`,
`user_saml` and a few more).
[1] 292c74c7a9https://docs.nextcloud.com/server/28/admin_manual/apps_management.html#using-custom-app-directories
2023-12-29 18:59:18 +01:00
nikstur
5a9c0b7600
Merge pull request #267983 from nikstur/replace-simple-activation-2
...
nixos: replace activationScripts 2/x
2023-12-29 16:29:11 +01:00
Jonas Heinrich
67a799c40f
nixos/ollama: init
2023-12-29 15:19:55 +01:00
K900
0403c41f61
nixos/installer: add a link to how to actually upgrade your system to the stateVersion note
2023-12-29 17:01:04 +03:00
Vladimír Čunát
de84adb292
Merge branch 'master' into staging-next
2023-12-29 14:00:30 +01:00
nikstur
0ebd39b541
nixos/nix-channel: remove unused stringAfter
2023-12-29 03:41:45 +01:00
nikstur
3be357b2e7
nixos/binfmt: remove unused stringAfter
2023-12-29 03:41:45 +01:00
nikstur
d0014a531e
nixos/wrappers: order service after sysusers service
2023-12-29 03:41:45 +01:00
nikstur
65ff518a0d
nixos/ipa: replace activationScript
...
Replaced with a dedicated systemd service.
2023-12-29 03:41:45 +01:00
nikstur
8d3cf213db
nixos/borgbackup: replace activationScript via tmpfiles
2023-12-29 03:41:45 +01:00
nikstur
af87c19427
nixos/yggdrasil: replace activationScript
...
Replace with separate service because it cannot be moved into the
preStart of the yggdrasil service.
2023-12-29 03:22:27 +01:00
