Commit Graph

43116 Commits

Author SHA1 Message Date
Martin Weinelt
2eb23c4472
Merge pull request #332507 from mweinelt/pretix-fixes
pretix: variouss fixes
2024-08-05 19:07:34 +02:00
Sandro
8b43ee5545
Merge pull request #330522 from xokdvium/dev/init-rathole
nixos/rathole: init module
2024-08-05 18:07:25 +02:00
Martin Weinelt
a1842b95db
nixos/tests/pretix: include zugferd plugin
Germany from 2025 requires invoice with digital embeds, that are provided
by the zugferd plugin.
2024-08-05 17:43:45 +02:00
Martin Weinelt
3dfb2c685a
nixos/pretix: restart web and worker unit on failure
Found a few instances, where celery intermittently complained about a
misconfigured redis instance and exited.

> redis.exceptions.ResponseError: MISCONF Redis is configured to save RDB
> snapshots, but it's currently unable to persist to disk. Commands that
> may modify the data set are disabled, because this instance is
> configured to report errors during writes if RDB snapshotting fails
> (stop-writes-on-bgsave-error option). Please check the Redis logs for
> details about the RDB error.
2024-08-05 17:37:12 +02:00
Florian Klink
a9f1cb6e2f
Merge pull request #253260 from thblt/systemd-bitlocker
Create boot.loader.systemd-boot.rebootForBitlocker option
2024-08-05 17:03:13 +03:00
github-actions[bot]
b4c408518b
Merge staging-next into staging 2024-08-05 12:01:48 +00:00
Maximilian Bosch
d8446a5095
Merge pull request #332226 from dotlambda/nextcloud
fetchNextcloudApp: use fetchurl by default
2024-08-05 11:37:14 +00:00
Florian Klink
a5265503e6
Merge pull request #327506 from ElvishJerricco/systemd-initrd-merge-sbin
systemd-stage-1: Use common bin for /sbin
2024-08-05 14:18:51 +03:00
Robert Schütz
da8b0f0621 fetchNextcloudApp: use fetchurl by default 2024-08-05 03:53:38 -07:00
Thibault Polge
a68b81c429 nixos/systemd-boot: Add reboot-for-bitlocker support
Windows with BitLocker and TPM enabled doesn't support boot chaining.
This option activates a special experimental mode in systemd-boot that
tries to detect such systems and, if detected and selected by the user
at the boot menu, set the BootNext EFI variable to it before resetting.
2024-08-05 13:17:25 +03:00
Vladimír Čunát
284db721b3
Merge #332339: nixos/release-small: stop building amazon image 2024-08-05 11:11:59 +02:00
Vladimír Čunát
d4720e9c1e
Merge branch 'staging-next' into staging
There was a nontrivial conflict in pkgs/stdenv/linux/bootstrap-tools*
(reorganizing code vs. modifying it)  I hope I really got it right.
2024-08-05 11:05:55 +02:00
Maëlys Bras de fer
7ae6219163 nixos/systemd-boot: fix infinite timeout 2024-08-05 08:48:54 +00:00
Martin Weinelt
9426d90c67
nixos/release-small: stop building amazon image
Rebuilding images multiple times on the small channels is too expensive
and makes them slower than they could be. Consuming the image from the
full release channel is probably good enough.
2024-08-04 23:50:46 +02:00
Dan Nixon
2f2010f63c
msmtp: 1.8.22 -> 1.8.25
msmtpq patches had to be recreated:

- removal of the executable check and addition of systemd logging were
  kept and split into two patches.
- renaming of queue and log files was removed as the upstream script had
  renamed these to add the `MSMTPQ_` prefix (noted as a backwards
  incompatible change).
2024-08-04 22:08:56 +02:00
Martin Weinelt
3a719e06c7
nixos/mediawiki: move to php 8.2
There is breakage on PHP 8.1 since the last staging cycle.
2024-08-04 18:51:41 +02:00
Johannes Jöns
79723dbb2a
Merge pull request #331358 from pinpox/init-screego-module
nixos/screego: init module
2024-08-04 18:34:51 +02:00
Shea Levy
a9f862f7ab
Merge remote-tracking branch 'shlevy/ipu6-upstream' 2024-08-04 09:11:17 -04:00
Maximilian Bosch
bddcfadca9
Merge pull request #292324 from motiejus/compress-drv
init compressDrv and compressDrvWeb
2024-08-04 12:18:03 +00:00
Aleksana
322ec69494
Merge pull request #331790 from RaitoBezarius/drop-pixelfed-mtn
pixelfed: drop raitobezarius as a maintainer
2024-08-04 19:24:51 +08:00
Aleksana
a2424528a5
nixosTests.pixelfed: remove unused function argument 2024-08-04 17:52:17 +08:00
Aleksana
e38e6a4490
Merge pull request #328164 from truh/docs/oci-containers-firewall-bypass
nixos/oci-containers: document firewall bypass
2024-08-04 16:35:23 +08:00
Motiejus Jakštys
bbd0655ae8 add compressDrv and compressDrvWeb
*compressDrv* compresses files in a given derivation.

*compressDrvWeb* compresses a derivation for a loosely-defined
pre-compressed "web server" usage.

This intends to replace the `passthru.data-compressed` derivations that
have accumulated in nixpkgs with something more reusable.
2024-08-04 10:10:16 +03:00
imlonghao
4a03ff8bc8
nixos/borgmatic: change the default value 2024-08-04 11:56:25 +08:00
Aleksana
98a8833482
Merge pull request #332045 from wegank/wordpress-php
nixos/wordpress: unpin php81 in check phase
2024-08-04 09:56:25 +08:00
RatCornu
109219f369
nixos/pingvin-share: add release note 2024-08-04 01:30:14 +02:00
RatCornu
712a04c693
nixos/pingvin-share: add nixos test 2024-08-04 01:30:12 +02:00
RatCornu
924437f5de
nixos/pingvin-share: init at 0.29.0 2024-08-04 01:18:03 +02:00
RatCornu
90e293d122
pingvin-share: init at 0.29.0 2024-08-04 01:17:32 +02:00
Emily
7ec755257a hydron: drop
This package was marked as vulnerable in
<https://github.com/NixOS/nixpkgs/pull/255959>, almost a year ago and
over a year after the project was archived upstream. The package and
module are unusable without bypassing a security warning in 23.05,
23.11, and 24.05.

Given that the package is intended as an organizer for
potentially‐untrusted media files, the vulnerability is critical and
leads to remote code execution, and there is basically no prospect
of upstream releasing a fix, remove the package and module entirely
for 24.11.
2024-08-03 20:27:19 +01:00
Winter
6c11488ce0 Revert "nixos/podman: use given package for dockerCompat"
This reverts commit df74ebcabb, which breaks
eval when Podman is enabled due to infinite recursion [0] [1].

I take full responsibility for merging this without looking too closely
nor running the NixOS test.

[0]: df74ebcabb (commitcomment-145003824)
[1]: https://github.com/NixOS/nixpkgs/pull/267321#issuecomment-2267076978
2024-08-03 15:13:24 -04:00
Weijia Wang
ec581817ca nixos/wordpress: unpin php81 in check phase 2024-08-03 20:24:27 +02:00
Sandro
03dfa4c1da
Merge pull request #330260 from Luflosi/add/eg25-manager
eg25-manager: init at 0.4.6
2024-08-03 18:23:27 +02:00
Sandro
377e40297c
Merge pull request #330046 from DCsunset/stirling-pdf-module-init
nixos/stirling-pdf: init module
2024-08-03 18:22:02 +02:00
Kaleb Olson
3f9a325954 remove NIX_PATH from nixos-install step 2024-08-03 18:07:41 +02:00
Kaleb Olson
f6c6c6203f Set literal NIX_PATH in 'other distro' docs
Setting `NIX_PATH="$NIX_PATH"` doesn't work in this context.
As of NixOS/nix@ec9dd9a , nix is no longer setting NIX_PATH on non-nixOS distros.
2024-08-03 18:07:41 +02:00
7c6f434c
da64ac6beb
Merge pull request #310807 from Naxdy/work/improve-btrfs-autoscrub
nixos/btrfs: refactor & improve device selection for autoScrub
2024-08-03 15:31:32 +00:00
Aleksana
db9f79b8f9
Merge pull request #331682 from trofi/nixosTests.bittorrent-no-alias
nixosTests.bittorrent: avoid use of an alias
2024-08-03 23:25:38 +08:00
Aleksana
280d879751
Merge pull request #331993 from networkException/configurable-flatpak-package
nixos/flatpak: add package option
2024-08-03 23:14:34 +08:00
Chris Maniewski
df74ebcabb nixos/podman: use given package for dockerCompat
Defining a package that isn't the default results in podman-compat linking to a different version of podman (always the default one). This PR changes the behavior so that the given alternative package is used for the dockerCompat option as well. This could technically break things for people who rely on this quirk, albeit the previous behavior is probably not what one would expect.

Co-authored-by: Winter <winter@winter.cafe>
2024-08-03 10:54:26 -04:00
Sandro
cfd25f7c6a
Merge pull request #322403 from dadada/dev/gitlab-runner-podman
nixos/gitlab-runner: allow access to podman socket
2024-08-03 16:48:09 +02:00
Aleksana
7e5d233658
Merge pull request #320274 from honnip/update-firefox-lang
nixos/firefox: add missing language packs
2024-08-03 22:37:22 +08:00
Aleksana
ff7af032a0
Merge pull request #330424 from panchoh/master
nixos/kmscon: fix cfgfile missing trailing newline
2024-08-03 22:32:12 +08:00
Alyssa Ross
ba0d495264
linux_6_8,linux_6_9: remove
EOL upstream.

This seems to mean we no longer need any patches to support modern
Rust versions in the kernel!
2024-08-03 16:28:30 +02:00
networkException
af69223f46
nixos/flatpak: add package option
this patch adds the `services.flatpak.package` option to
allow overriding the package added by this module to
`environment.systemPackages` and the likes.

This is useful in scenarios where applications call the
flatpak binary to query information like writable directories
and there is a custom package returning different results
from the vanilla binary.

See https://github.com/crabdancing/nixpak-flatpak-wrapper
2024-08-03 15:49:33 +02:00
github-actions[bot]
41e708f4b7
Merge staging-next into staging 2024-08-03 12:01:32 +00:00
Vonfry
0849e0fe7a
nixos/ly: init module 2024-08-03 19:56:25 +08:00
Lin Jian
48966eacad
Merge pull request #328365 from Guanran928/cloudflare-dyndns
nixos/cloudflare-dyndns: introduce package option
2024-08-03 15:10:25 +08:00
github-actions[bot]
746071163c
Merge staging-next into staging 2024-08-03 06:01:24 +00:00
Lin Jian
7b9ef31afd
Merge pull request #331800 from Guanran928/treewide/remove-periods-from-lib-mkenableoption
treewide: remove periods from lib.mkEnableOption
2024-08-03 12:53:41 +08:00
github-actions[bot]
81cddc1677
Merge staging-next into staging 2024-08-03 00:02:50 +00:00
Shea Levy
3bfeae1428
ipu6: Don't build out-of-tree driver for kernels that have it 2024-08-02 17:30:42 -04:00
Felix Uhl
57d30c7a61
nixos/wg-quick: add generatePrivateKeyFile option (#331253)
This option is already present in the wireguard module, but missing from
the wg-quick module. This is very annoying, because it means you can't
easily get a safe and valid configuration on first boot when using
wg-quick.

This change adds the same option with the same description text and the
same script, but instead of generating an entire systemd unit dedicated
to creating the key file, it adds the script as a PreUp script, which
is a much simpler solution.

I've tested this in my own configuration, and it does indeed work.
wg-quick allows multiple PreUp scripts, which are run in order, and
all PreUp scripts are run before the private key is read from disk,
see `man wg-quick`.
2024-08-03 00:07:27 +04:00
Florian Klink
129558261d
buildkite-agent: 3.59.0 -> 3.76.1 (#331340)
* buildkite-agent: 3.59.0 -> 3.76.1

* nixos/buildkite-agent: put each agent in its own private /tmp

Workaround for https://github.com/buildkite/agent/issues/2916, but
probably still a good idea.
2024-08-02 21:59:32 +02:00
github-actions[bot]
931cf50e01
Merge staging-next into staging 2024-08-02 18:01:49 +00:00
Emily
ecf7c683c2
Merge pull request #319807 from hellodword/nixos-restic-add-unlock
nixos/restic: ensure newline in --files-from
2024-08-02 18:18:47 +02:00
Guanran Wang
ea6f4d5e86
treewide: remove periods from lib.mkEnableOption
Co-authored-by: éclairevoyant <848000+eclairevoyant@users.noreply.github.com>
2024-08-02 23:55:32 +08:00
Raito Bezarius
77a4902508 pixelfed: drop raitobezarius as a maintainer
I'm not using seriously Pixelfed those days, this software is
non-trivial and the NixOS module seems to have some sharp edges.

Change-Id: Ie93df9dcb00d0a58bd5e4165e377979c489af0b0
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2024-08-02 16:47:09 +02:00
❄️
778a8d30c8
Merge pull request #330838 from rorosen/k3s-images-archive
k3s: add airgap images to passthru attributes
2024-08-02 11:23:15 -03:00
github-actions[bot]
78947ebef4
Merge staging-next into staging 2024-08-02 12:01:52 +00:00
Jörg Thalheim
b475b0c767
Merge pull request #331712 from Mic92/fix-netboot
Fix netboot
2024-08-02 12:34:54 +02:00
John Titor
2cf5032969
nixos/ananicy: disable ananicy-cpp's BPF on hardened kernels 2024-08-02 15:06:35 +05:30
John Titor
d626da64ec
nixos/ananicy: format with nixfmt-rfc-style 2024-08-02 14:52:53 +05:30
John Titor
4c55a97341
nixos/ananicy: use lib. explicitly 2024-08-02 14:34:14 +05:30
Jörg Thalheim
d79b03a59c fix netboot image 2024-08-02 10:24:34 +02:00
tomberek
3758fa1f50
Merge pull request #299339 from teto/teto/wireguard-compact-unit
networking.wireguard: generate leaner units
2024-08-02 03:18:16 -04:00
Maximilian Bosch
7b01c5da3c
Merge pull request #329611 from Ma27/pg16
postgresql: 15 -> 16 for 24.11+
2024-08-02 07:09:50 +00:00
tomberek
7d29722746
Merge pull request #322035 from jpds/nixos-nats-validate-config
nixos/nats: Implemented configuration verification
2024-08-02 02:37:48 -04:00
github-actions[bot]
fe3585d6db
Merge staging-next into staging 2024-08-02 06:01:37 +00:00
Masum Reza
1318ddf6f3
Merge pull request #326385 from Pandapip1/init-nixos-immersed-vr
nixos/immersed-vr: init module
2024-08-02 11:30:57 +05:30
Sergei Trofimovich
cdc9919a56 nixosTests.bittorrent: avoid use of an alias
By default the use of alias generates warning:

    $ nix build --no-link -f. nixosTests.bittorrent
    evaluation warning: transmission has been renamed to transmission_3 since transmission_4 is also available. Note that upgrade caused data loss for some users so backup is recommended (see NixOS 24.11 release notes for details)

When alaises are disabled that causes the eval failure:

       error: attribute 'transmission' missing
       at /home/slyfox/dev/git/nixpkgs/nixos/tests/bittorrent.nix:24:36:
           23|   transmissionConfig = { ... }: {
           24|     environment.systemPackages = [ pkgs.transmission ];
             |                                    ^
           25|     services.transmission = {
       Did you mean one of transmission_3 or transmission_4?
2024-08-02 06:53:04 +01:00
github-actions[bot]
203fa1d4a2
Merge staging-next into staging 2024-08-02 00:02:35 +00:00
Maximilian Bosch
759d375844
Merge pull request #329262 from frantisekhanzlikbl/allow-mask-in-networkd-routing-policy-rule-fwmark
nixos/networkd: allow specifying FirewallMark mask
2024-08-01 22:40:09 +00:00
Felix Bühler
04101568c0
Merge pull request #325644 from Stunkymonkey/sogo-chmod-install
nixos/sogo: prefer 'install' over 'chmod'/'chown'
2024-08-01 23:25:37 +02:00
František Hanzlík
8b4cd01f90
nixos/networkd: allow specifying FirewallMark mask 2024-08-01 22:22:01 +02:00
Jared Baur
22199c70d4
nixos/systemd-boot: add test for devicetree 2024-08-01 11:18:32 -07:00
Jared Baur
fca8ee915d
nixos/systemd-boot: add support for devicetree entry
The [Boot Loader Specification](https://uapi-group.org/specifications/specs/boot_loader_specification/)
allows for using a key called "devicetree" for specifying which
devicetree the bootloader should use during boot. With regards to
systemd-boot, this key is used to specify which file should be picked up
from the ESP to install to the EFI DTB Configuration Table. Linux then uses
this Configuration Table to setup the machine. This change is similar to
the one done in https://github.com/NixOS/nixpkgs/pull/295096, where that
change was for adding DTB support to systemd-stub, and this is for
systemd-boot.
2024-08-01 11:15:15 -07:00
github-actions[bot]
6005fb81f3
Merge staging-next into staging 2024-08-01 18:01:28 +00:00
Franz Pletz
1d42bdaa68
Merge pull request #330715 from hxtmdev/tmux-fix-history-limit 2024-08-01 18:09:40 +02:00
Bjørn Forsman
849492e6e2 nixos/deconz: mention RaspBee hardware 2024-08-01 16:48:38 +02:00
Bjørn Forsman
aeaf887dcb nixos/deconz: update URL to hardware products
There are multiple products/versions, so replace the "version 2" URL
with a landing page for all products.
2024-08-01 16:48:38 +02:00
Emily
accd3aa082
Merge pull request #331187 from emilylange/forgejo
forgejo: refactor to support multiple versions, 7.0.5 -> 8.0.0, forgejo-lts: init at 7.0.6
2024-08-01 15:07:21 +02:00
github-actions[bot]
b0709876cb
Merge staging-next into staging 2024-08-01 12:01:44 +00:00
Daniel Höxtermann
12e6440b46 nixos/tmux: fix historyLimit when used with newSession
When `history-limit` appears after `new-session` it does not have any
effect.
2024-08-01 13:36:57 +02:00
Daniel Höxtermann
da6200c3b6 nixos/tmux: add hxtmdev as maintainer 2024-08-01 13:36:56 +02:00
Martin Weinelt
7b07f5371f
Merge pull request #331406 from mweinelt/pretix-2024.7.0
pretix: 2024.6.0 -> 2024.7.0
2024-08-01 13:04:29 +02:00
lassulus
35ac2fed3e
Merge pull request #330946 from toastal/movim-0.26
movim: 0.25.1 → 0.26
2024-08-01 11:39:13 +02:00
Pablo Ovelleiro Corral
c882d9b673
nixos/screego: init module
Add module for screego
2024-08-01 10:51:38 +02:00
Michele Guerini Rocco
de8d752e98
Merge pull request #319188 from buckley310/2024-06-11-wpa-supplicant
nixos/wireless: fix quotes in config path
2024-08-01 09:32:05 +02:00
K900
b2dbd6bf70
Merge pull request #331278 from thefossguy/master
nixos/pam: kwallet: add the `forceRun` option
2024-08-01 09:30:19 +03:00
K900
a4a42b3aec Merge remote-tracking branch 'origin/staging-next' into staging 2024-08-01 08:57:50 +03:00
Christina Sørensen
32ca66f3ed
nixos/kubernetes: refactor feature gates to attrsOf bool, making it possible to disable featureGates
This is a breaking change, requiring users of `featureGates` to change
from a `listOf str` to `attrsOf bool`.

Before:
```nix
featureGates = [ "EphemeralContainers" ];
extraOpts = pkgs.lib.concatStringsSep " " (
[
  "--container-runtime=remote"
  ''--feature-gates="CSIMigration=false"''
});
```

After:
```nix
featureGates = {EphemeralContainers = true; CSIMigration=false;};
```

This is much nicer, and sets us up for later work of migrating to
configuration files for other services, like e.g. has been happening
with kubelet (see: #290119).

Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-08-01 07:51:34 +02:00
Pratham Patel
4074853391
nixos/pam: kwallet: add the forceRun option 2024-08-01 09:51:31 +05:30
Martin Weinelt
4ba537131f
nixos/pretix: increases startup timeout
Migrations on a busy machine can exceed 5 minutes, which I can reproduce
on a busy builder.
2024-08-01 04:37:20 +02:00
hellodword
e4a4da8794
nixos/restic: ensure newline in --files-from 2024-08-01 02:07:38 +00:00
Will Fancher
2818172c0a
Merge pull request #331186 from ElvishJerricco/systemd-256.4
systemd: 256.2 -> 256.4, bootctl update regression fix
2024-07-31 12:37:04 -04:00
Arian van Putten
cd90d5e20a
Merge pull request #331248 from arianvp/systemd-unified-only
Remove support for legacy cgroup hierachy
2024-07-31 18:28:17 +02:00
Julien Malka
f240543c7f
nixos/tests/systemd-boot: fix option bootCounting test evaluation 2024-07-31 17:13:06 +02:00
Arian van Putten
85e4fc50db nixos/ananicy: force unified cgroup hierachy
This breaks the functionality of this module but I don't see a way around it
as 256 dropped support.

https://gitlab.com/ananicy-cpp/ananicy-cpp/-/issues/40
2024-07-31 14:38:51 +02:00
github-actions[bot]
bcb5e2eebe
Merge staging-next into staging 2024-07-31 12:01:52 +00:00
Sandro
46784713e5
Merge pull request #325639 from OPNA2608/init/lomiri/lomiri-camera-app 2024-07-31 13:59:03 +02:00
Arian van Putten
def27f6680 nixos/benchexec: remove superfluous assertion for cgroups 2024-07-31 13:49:58 +02:00
Arian van Putten
4e4b14e3f6 nixos/lxd: delegate cgroup to lxd
Just doing what arch does as well: https://gitlab.archlinux.org/archlinux/packaging/packages/lxd/-/blob/main/lxd.service?ref_type=heads

Also container managers should always have this option set. See https://systemd.io/CONTAINER_INTERFACE/
2024-07-31 13:49:58 +02:00
Arian van Putten
ee81fdfa56 nixos/lxd: use unified cgroup hierachy 2024-07-31 13:49:58 +02:00
Arian van Putten
eabd328ae3 docs/release-notes: 24.11: add note about removal of systemd.enableUnifiedCgroupHierarchy 2024-07-31 13:49:58 +02:00
Arian van Putten
45e041902f nixos/systemd: drop support for legacy cgroup hierachy 2024-07-31 13:49:58 +02:00
Sandro
3a6a3f6f90
Merge pull request #330787 from Naxdy/work/remove-gtkuseportal 2024-07-31 13:23:46 +02:00
Sandro
e4a6568004
Merge pull request #312403 from alois31/rtw88 2024-07-31 13:14:18 +02:00
Naxdy
632da75711
nixos/xdg/portal: remove deprecated option gtkUsePortal 2024-07-31 11:27:11 +02:00
euxane
fcb2a4a5ff nixos/zoneminder: set fcgiwrap socket owner 2024-07-31 11:03:06 +02:00
euxane
efc7aebda7 nixos/fcgiwrap: require explicit owner for UNIX sockets
The default in the previous option documentation was incorrect,
resulting in the UNIX socket to be unreachable except by root by
default.

This fixes the documentation and requires consumers to set values
explicitly for the socket's owning user and group.
2024-07-31 11:03:06 +02:00
euxane
4f2da6c9c1 nixos/fcgiwrap: add option migration instruction errors
This adds migration instructions for the removed global shared instance
configuration of fcgiwrap.

Adding those explicit messages to the previous options requires moving
the newly defined options from `services.fcgiwrap.*` to
`services.fcgiwrap.instances.*` due to an option namespace clash.

`mkRenamedOptionModule` was not used because the previous options do
not directly map to the new ones. In particular, `user` and `group`
were described as setting the socket's permission, but were actually
setting the process' running user.

Co-authored-by: Minijackson <minijackson@riseup.net>
2024-07-31 11:02:37 +02:00
Peter Hoeg
c3392ad349 nixos/prometheus-smartctl-exporter: providing the path to the binary is no longer needed 2024-07-31 10:48:38 +02:00
Alois Wohlschlager
ec60e56b26
rtw88-firmware: drop
It's all part of linux-firmware now.
2024-07-31 10:26:51 +02:00
zimbatm
5a353f15cc nixos/nar-serve: add domain option 2024-07-31 09:57:37 +02:00
zimbatm
ed47bba9ad nixos/nar-serve: add package option 2024-07-31 09:57:36 +02:00
Bruno BELANYI
e20e12a9c7
Merge pull request #330956 from DCsunset/gotify-module-update
nixos/gotify-server: support all config options and custom package
2024-07-31 08:22:23 +01:00
toastal
936a378123 movim service: updates for 0.26 2024-07-31 14:12:14 +07:00
K900
4f29b5a16b Merge remote-tracking branch 'origin/staging-next' into staging 2024-07-31 08:57:17 +03:00
Masum Reza
184957277e
Merge pull request #322282 from tylerjl/tylerjl/print-host-key-soft-fail
nixos/ec2-data: skip unrecognized keys in print-host-keys
2024-07-31 10:59:10 +05:30
Masum Reza
2800d05b88
Merge pull request #314791 from uninsane/pr-pam-package
nixos/pam: add `security.pam.package` option
2024-07-31 10:20:33 +05:30
Masum Reza
324f3f75f3
Merge pull request #316823 from numinit/armagetronad-fix-install-check
armagetronad: update 0.4; fix possible problem in installCheckPhase
2024-07-31 10:20:18 +05:30
Will Fancher
424415e756 nixos/systemd-boot: Fix 'bootctl update' regression
https://github.com/systemd/systemd/issues/33392
2024-07-30 22:53:14 -04:00
emilylange
bde28ca593
nixos/tests/forgejo: add forgejo-lts variant 2024-07-31 03:59:13 +02:00
emilylange
e271e748c9
nixos/forgejo: default to forgejo-lts 2024-07-31 03:59:11 +02:00
Morgan Jones
d968402cd5
tests/armagetronad: increase timeout for busy Hydra server 2024-07-30 16:49:58 -07:00
DCsunset
a191e88a1a nixos/gotify-server: update test 2024-07-30 17:40:17 -04:00
DCsunset
0c2918fc91 nixos/gotify-server: add environment and environmentFiles options 2024-07-30 17:38:00 -04:00
DCsunset
e1ced8b12c nixos/gotify-server: add package option 2024-07-30 17:32:01 -04:00
DCsunset
b5a051f694 nixos/gotify-server: add maintainer 2024-07-30 17:29:55 -04:00
DCsunset
2079eeb882 nixos/gotify-server: clean up and reformat module 2024-07-30 17:28:54 -04:00
Robert Rose
3ac993566c nixos/k3s: add test for airgap images import
Add a nixos test that imports the airgap images
archive and checks whether all expected images are
successfully loaded by k3s.
2024-07-30 21:14:25 +02:00
Robert Rose
eeacf85fb9 k3s: add airgap images to passthru attributes
The k3s update script filters the assets of a
corresponding release for airgap images archives
and provides these as passthru attributes of the
k3s derivation. We use zstd archives, as these
offer the best compression ratios and decompression
speed. Furthermore, the `airgapImages` passthru
provides the images archive that matches the host
platform architecture, however, this only works
for aarch64 and x86_64. In addition, a txt file
listing all container images of a release is made
available via a passthru attribute. The airgap
images archives can be combined nicely with the
`services.k3s.images` option, e.g. to pre-provision
k3s nodes for environments without Internet
connectivity.
2024-07-30 21:14:17 +02:00
Masum Reza
cb27644348
Merge pull request #310661 from somasis/boot.plymouth.font
nixos/boot.plymouth.font: escape font path
2024-07-31 00:39:11 +05:30
Emily
d21a082a4d
Merge pull request #296691 from helsinki-systems/feat/restic-systemd-inhibit
nixos/restic: add option to inhibit going to sleep
2024-07-30 20:45:56 +02:00
Morgan Jones
da4c9eb47b
tests/armagetronad: increase memory allocation 2024-07-30 11:32:13 -07:00
Colin
7306423158
nixos/pam: fully-qualify modulePath
this ensures PAM users always get the intended version of a module when
multiple versions of the same module exist on a system.

most packages which consume `pam` and link against `libpam.so` do so only
to access its API, and not because they care about the specific
`pam_<xyz>.so` modules provided by that `pam`. but when specifying
modules by name only, PAM-capable applications may well load the
`pam_<xyz>.so` from the `pam` they were compiled against instead of the
pam declared in `security.pam.package`. by fully qualifying `modulePath`
we ensure that users can actually swap out pam modules without rebuilding
the world.
2024-07-30 23:53:58 +05:30
Colin
7511ed266c
nixos/pam: add security.pam.package option
this can be used to swap out which pam package is actually used by the
system for things like `pam_limits`, `pam_tty_audit`, etc, without forcing
a mass rebuild the way an overlay would.
2024-07-30 23:53:57 +05:30
Víctor Martínez
bbb542ea66
nixos/ollama: add missing nvidia device group name (#331125)
Fixes: #331069
2024-07-30 19:03:08 +02:00
Sandro Jäckel
280e9a5ca4
nixos/nix: move trusted-user to config
This avoids having to define root when trying to add another user as
trusted user, similar to the other options.
2024-07-30 18:18:57 +02:00
Jonathan Zielinski
42e7fd46e7 nixos/nvidia-container-toolkit: add device-name-strategy option
Containerd will fail to inject CDI devices if you've been using the
uuid naming strategy rather than the default one.
2024-07-30 15:25:48 +00:00
Sigmanificient
aab1113d4a treewide: normalize maintainers list formatting
grep -rP 'maintainers = \[\];'
2024-07-30 16:26:22 +02:00
OPNA2608
6e42f74cf9 tests/lomiri: Drop OCR for starter content
It has started to take 10 minutes to get a match, and we open the starter more than once.

Let's just drop this check, ydotool helps alot with getting it open more reliably.
2024-07-30 13:26:09 +02:00
OPNA2608
826486cd2f nixos/lomiri: Add camera app 2024-07-30 13:26:09 +02:00
OPNA2608
b45fe2e63c tests/lomiri-camera-app: init 2024-07-30 13:26:09 +02:00
Masum Reza
15aa26cee0
Merge pull request #318815 from OPNA2608/init/miracle-wm
miracle-wm: init at 0.3.0
2024-07-30 14:56:47 +05:30
K900
7f2ec487cc nixos/i2pd: actually fix, clean up a little bit 2024-07-30 11:07:37 +03:00
Masum Reza
d2f7731666
Merge pull request #322312 from 71rd/wayfire-fix
nixos/wayfire: fix import file with settings required to start service
2024-07-30 12:58:15 +05:30
Yt
12b71d62f9
Merge pull request #330922 from jpds/vector-0.40.0
vector: 0.39.0 → 0.40.0
2024-07-30 00:28:08 +00:00
Jonathan Davies
382f37aa40
nixos/vector: Delete superfluous host field from demo_logs source in Quickwit test 2024-07-29 21:51:02 +01:00
K900
268299ad04 nixos/i2pd: fix warning 2024-07-29 23:36:08 +03:00
Philip Taron
4c7b49613a nixcfg-azure-devenv: avoid top-level with in shell.nix 2024-07-29 19:46:18 +02:00
Philip Taron
2b67819d55 nixos-test-driver: avoid top-level with in shell.nix 2024-07-29 19:46:18 +02:00
git@71rd.net
2483ea35cd modules/wayfire: nixfmt
Signed-off-by: git@71rd.net <git@71rd.net>
2024-07-29 16:13:55 +00:00
git@71rd.net
3f55cc361c nixos/wayfire: fix import file with settings required to start service
Wayfire does not start without further configuration, when
programs.wayfire.enable is the only wayland wm enabled. When sway or a
similar program is also enabled that program imports wayland-session.nix
hiding the problem.

This imports wayland-session.nix and adds the option xwayland.enable to
pass to the file
2024-07-29 14:24:26 +00:00
OPNA2608
5659ea3d6b tests/miracle-wm: init 2024-07-29 15:19:47 +02:00
OPNA2608
ed443c58a8 nixos/miracle-wm: init 2024-07-29 15:09:17 +02:00
Sandro
f22c61e419
Merge pull request #330109 from teutat3s/default-docker-27
docker: move default from 24.x to 27.x, docker_24 mark as vulnerable, docker_{25,26}: bump
2024-07-29 13:48:20 +02:00
Kerstin Humm
ceb54bc2a7
nixos/gollum: format with nixfmt 2024-07-29 12:49:44 +02:00
Kerstin Humm
d6b9fb9ba3
gollum: 5.3.3 -> 6.0.1
Changelog: https://github.com/gollum/gollum/releases
2024-07-29 12:49:43 +02:00
Robert Hensing
c38f9ee113
Merge pull request #324789 from NixOS/devShellTools-env
`devShellTools`: add environment functions
2024-07-29 10:00:40 +02:00
Franz Pletz
1e00e90307
Merge pull request #329450 from Kiskae/nvidia/560.28.03 2024-07-29 09:19:52 +02:00
Aleksana
a07da9722d
Merge pull request #330664 from Mic92/empty-with
treewide: remove unused `with` statements from maintainer lists
2024-07-29 15:01:57 +08:00
github-actions[bot]
d0b2f51f0f
Merge staging-next into staging 2024-07-29 06:01:55 +00:00
Jörg Thalheim
5356420466 treewide: remove unused with statements from maintainer lists
$ find -type f -name '*.nix' -print0 | xargs -P "$(nproc)" -0 sed -i \
  -e 's!with lib.maintainers; \[ *\];![ ];!' \
  -e 's!with maintainers; \[ *\];![ ];!'
2024-07-29 10:06:20 +08:00
github-actions[bot]
2b898b30ea
Merge staging-next into staging 2024-07-29 00:03:08 +00:00
oddlama
c15eea348d
nixos/nvidia: fix potential null value in versionOlder check 2024-07-29 01:58:55 +02:00
Sandro
bf5f4549e1
Merge pull request #300201 from schuetzm/mysqlbackup-rsyncable 2024-07-29 01:29:33 +02:00
Robert Hensing
1a70c803cb Format 2024-07-29 00:23:05 +02:00
Robert Hensing
b5389e2ae9 nixosTests.docker-tools-nix-shell: Enable on aarch64-linux
The docker-tools test, where this originates, was not run on aarch64-linux, but this is an artifact of its age more so than anything else.

Co-authored-by: Ivan Trubach <mr.trubach@icloud.com>
2024-07-29 00:23:05 +02:00
Robert Hensing
6881d9b181 nixosTests.docker-tools-nix-shell: Extract
These tests should run as part of the `tests.devShellTools` suite,
and they're a significant portion of the general docker tools test
duration.
2024-07-28 23:19:56 +02:00
Sandro
244f70eaa4
Merge pull request #330455 from SuperSandro2000/nvidia-vaapi-driver-32-bit 2024-07-28 21:37:20 +02:00
Robert Scott
48bde3a189 cc-wrapper: add support for pacret hardening flag on aarch64 2024-07-28 19:27:14 +01:00
Emily
8a837af302
Merge pull request #326819 from risicle/ris-shadowstack
cc-wrapper: add support for `shadowstack` hardening flag
2024-07-28 19:07:52 +01:00
github-actions[bot]
9f368dc2ef
Merge staging-next into staging 2024-07-28 18:01:25 +00:00
Florian Klink
bc83c7cf57
Merge pull request #330448 from flokli/wvdial
wvdial, wvstreams: init
2024-07-28 19:49:33 +03:00
Robert Hensing
70d94d8360
Merge pull request #330434 from ShamrockLee/test-overriding-attrs
tests.overriding: structure tests as an attribut set
2024-07-28 15:13:32 +02:00
github-actions[bot]
38b57cc2a9
Merge staging-next into staging 2024-07-28 12:01:38 +00:00
Vladimír Čunát
a5b2fe7374
Merge #328673: staging-next 2024-07-20 2024-07-28 13:45:55 +02:00
Robert Hensing
4ca52fdf5f
Merge pull request #323613 from CyberShadow/fix-nix-path-without-channels-v2
nix-channel: do not set empty nix-path when disabling channels
2024-07-28 13:31:10 +02:00
Someone
cabb09a289
Merge pull request #330617 from ereslibre/fix-nvidia-warnings
virtualisation/{docker,podman}: update nvidia-ctk warning
2024-07-28 14:24:50 +03:00
Rafael Fernández López
3d2a21eddf virtualisation/{docker,podman}: update nvidia-ctk warning
Warnings and descriptions for `virtualisation.docker.enableNvidia` and
`virtualisation.podman.enableNvidia` point erroneously to set
`virtualisation.containers.cdi.dynamic.nvidia.enable`. This NixOS
option has been deprecated and the recommended NixOS option is
`hardware.nvidia-container-toolkit.enable`.
2024-07-28 13:12:27 +02:00
Vladimír Čunát
ca0d8e592b
Merge #330440: nixos/speechd: avoid by default on headless systems
...into staging-next
2024-07-28 12:50:17 +02:00
Franz Pletz
ba4b2978e8
Merge pull request #330498 from Gerg-L/direnv 2024-07-28 12:17:16 +02:00
Vladimír Čunát
1e9b3c1af1
nixos/speechd: avoid by default on headless systems
Incidentally this also fixes tests like nixosTests.installer.simple
/cc PR #329658
2024-07-28 12:16:12 +02:00
Marc Schütz
9be35dff51 mysqlBackup: use rsyncable compression 2024-07-28 11:03:13 +02:00
Florian
2c5b304712
Merge pull request #219942 from vsharathchandra/druid_nix_module
nixos/druid: init module and package
2024-07-28 11:02:06 +02:00
sharath.v
99438044e7 druid: add passthru test 2024-07-28 07:20:16 +00:00
sharath.v
4bfc173d8f nixos/druid: init module 2024-07-28 06:54:13 +00:00
github-actions[bot]
e26c2ed42f
Merge staging-next into staging 2024-07-28 06:01:29 +00:00
github-actions[bot]
384d08d20d
Merge master into staging-next 2024-07-28 06:01:00 +00:00
Gerg-L
ee3da00d59
nixos/direnv: add enable{Bash,Fish,Zsh}Integrations
use shorthand function for enabled by default options
2024-07-28 01:09:11 -04:00
Franz Pletz
985acc7254
Merge pull request #326224 from NickCao/udev-kvm 2024-07-28 07:01:48 +02:00
github-actions[bot]
f8a6105aee
Merge staging-next into staging 2024-07-28 00:03:18 +00:00
Sergei Zimmerman
e3e6e94010
nixos/rathole: init module
Adds a module for rathole package. The package itself
and this module is very similar to frp, so the options
and tests are not very far off from those for frp.
2024-07-28 01:25:01 +03:00
K900
24076029d2 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-28 01:04:35 +03:00
Gerg-L
008173588b
nixos/direnv: remove old option removal error 2024-07-27 15:37:11 -04:00
Gerg-L
c6f73686d6
nixos/direnv: stop uneccesary build 2024-07-27 15:36:24 -04:00
Gerg-L
9183b7d82b
nixos/direnv: add gerg-l to maintainers 2024-07-27 15:33:39 -04:00
Gerg-L
b99fff4723
nixos/direnv: format with nixfmt 2024-07-27 15:32:31 -04:00
Sandro
2ae7003371
Merge pull request #330187 from SuperSandro2000/archisteamfarm 2024-07-27 21:00:45 +02:00
Julien Malka
3d3c0f4d34
Merge pull request #330017 from Mic92/boot-counting
nixos/systemd-boot: init boot counting
2024-07-27 19:53:49 +02:00
Sandro Jäckel
83c0ed1fe8
nixos/nvidia: drop nvidia-vaapi-driver from 32bit drivers
nvidia-vaapi-driver is designed to work with firefox which is 64bit
only. On my system this adds almost 600 MiB closure size.
2024-07-27 18:31:03 +02:00
Florian Klink
21e3a4214f nixos/wvdial: init module 2024-07-27 19:11:02 +03:00
Yueh-Shun Li
fdd16729a2 tests.overriding: structure tests as an attribut set
Make individual tests accessible via tests.override.tests.<name>
2024-07-27 22:42:30 +08:00
Nick Cao
c8789dfa2b
Merge pull request #330198 from r-ryantm/auto-update/restic-rest-server
restic-rest-server: 0.12.1 -> 0.13.0
2024-07-27 10:38:03 -04:00
pancho horrillo
1f88956b95
nixos/kmscon: fix cfgfile missing trailing newline
Currently, the `kmscon.conf` file that is generated is missing a
trailing newline.  This breaks `kmscon`, since its parser assumes
well-formedness.

I noticed this while trying to specify a font, whose spec ended up on
the last line, but without the trailing newline, `kmscon` would not honor it.
2024-07-27 15:54:41 +02:00
github-actions[bot]
4007341b1f
Merge staging-next into staging 2024-07-27 12:01:37 +00:00
github-actions[bot]
614efe64e8
Merge master into staging-next 2024-07-27 12:01:12 +00:00
Robert Schütz
3e4e2db2d7 restic-rest-server: 0.12.1 -> 0.13.0
Diff: https://github.com/restic/rest-server/compare/v0.12.1...v0.13.0

Changelog: https://github.com/restic/rest-server/blob/v0.13.0/CHANGELOG.md
2024-07-27 02:34:16 -07:00
Luflosi
a61d4728e8
nixos/eg25-manager: init 2024-07-27 10:42:45 +02:00
Florian
bfe7a4a3ee
Merge pull request #330294 from ju1m/radicle
nixos/radicle: fix support for encrypted privateKeyFile
2024-07-27 09:35:28 +02:00
Vladimír Čunát
64c6a981fe
Merge branch 'master' into staging-next 2024-07-27 09:18:58 +02:00
Bobby Rong
eb084d18d3
Merge pull request #330174 from bobby285271/upd/pantheon
Pantheon updates 2024-07-26
2024-07-27 12:38:35 +08:00
Bobby Rong
759ee151e7
nixosTests.pantheon: Disable flaky test for closing multitasking view
org.freedesktop.DBus.Error.NoReply sometimes.
2024-07-27 11:32:27 +08:00
Silvan Mosberger
b6a3ee75cd
Merge pull request #324688 from philiptaron/__attrsFailEvaluation/linuxKernel
linuxPackages: remove __attrsFailEvaluation since the attrset evaluates
2024-07-27 02:28:35 +02:00
Julien Moutinho
db44a65a61 nixos/radicle: fix support for encrypted privateKeyFile 2024-07-27 01:48:51 +02:00
Nick Cao
84fa4de5d8
Merge pull request #328728 from NickCao/keycloak-metrics-spi
keycloak.plugins.keycloak-metrics-spi: 5.0.0 -> 6.0.0
2024-07-26 19:21:59 -04:00
Silvan Mosberger
d2a2dbc063
Merge pull request #311459 from philiptaron/doc-in-pkgs
nixpkgs-manual: init
2024-07-27 01:05:09 +02:00
DCsunset
05113f61f0 nixos/stirling-pdf: init module 2024-07-26 18:12:50 -04:00
Philip Taron
849cf13725
web-devmode: call as package 2024-07-26 13:43:59 -07:00
nicoo
9587ddd261
nixos/nix-channel: don't set nix-path (#327683)
Otherwise, the empty path in `nix.conf` takes precedence over `NIX_PATH`,
and by extension the `nix.nixPath` configuration option.

Introduced in 61afc4d166.
2024-07-26 19:19:38 +00:00
teutat3s
b381163c0b
docker: move default from 24.x to 27.x
24.x is no longer maintained as of February 1, 2024[1].
It did not (yet?) receive a fix for CVE-2024-41110.

[1] https://github.com/moby/moby/pull/46772#discussion_r1686464084
2024-07-26 20:57:43 +02:00
Jörg Thalheim
ed2202e9e6
Merge pull request #328130 from Enzime/add/regreet-themes
regreet: add options for controlling theming
2024-07-26 20:30:57 +02:00
Jörg Thalheim
11067484e9
Merge pull request #328722 from Cottand/update-nomad2
nomad: update 1.6 and 1.8, build with go 1.22 for 1.8 and 1.6, deprecate 1.5
2024-07-26 20:29:41 +02:00
Jörg Thalheim
cd8166ed1c
Merge pull request #329731 from ju1m/radicle
nixos/radicle: fix support of absolute file paths for SSH keys
2024-07-26 20:25:23 +02:00
Florian
6d0f55ef84
Merge pull request #328148 from NukaDuka/prometheus-pve-exporter
prometheus-pve-exporter: 3.2.4 -> 3.4.3
2024-07-26 20:21:21 +02:00
Julien Malka
64edc7f00f nixos/systemd-boot: init boot counting
Update nixos/modules/system/boot/loader/systemd-boot/boot-counting.md

Co-authored-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-07-26 20:04:37 +02:00
github-actions[bot]
8c2e73a4ed
Merge staging-next into staging 2024-07-26 18:01:39 +00:00
github-actions[bot]
c708f59661
Merge master into staging-next 2024-07-26 18:01:11 +00:00
Martin Weinelt
0196cfe7f3
Merge pull request #330152 from dotlambda/home-assistant
nixos/home-assistant: customComponents must use buildHomeAssistantComponent
2024-07-26 19:15:11 +02:00
K900
c32b73a2d6 nixos/plasma6: add libplasma to SDDM wrapper
It's actually required.
2024-07-26 19:20:02 +03:00
Martin Weinelt
93f4195fe0
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/applications/graphics/seamly2d/default.nix
2024-07-26 18:05:04 +02:00
Aleksana
577a9c43f3
Merge pull request #330042 from Sigmanificient/remove-leading-space-description
treewide: remove trailing space in description
2024-07-26 23:48:02 +08:00
Robert Schütz
a5f8d3fe02 nixos/home-assistant: customComponents must use buildHomeAssistantComponent 2024-07-26 07:33:40 -07:00
Sandro Jäckel
316e779538
Revert "nixos/archisteamfarm: fix crash when web-ui is disabled"
This reverts commit 02e9c36e59.
2024-07-26 16:27:19 +02:00
Dennis Stengele
6f3ba8d714
nixos/zeronsd: init module and package (#253610)
* zeronsd: init at 0.5.2

* nixos/zeronsd: init at 0.5.2

This is the module for the new zeronsd package.
2024-07-26 15:20:56 +02:00
K900
fd662230c4 nixos/installer: ship only one mbrola voice per language
This reduces the size of mbrola-voices by 387M (647M -> 260M) for all
installers that ship with speechd, to make sure that they fit the output
limits of hydra while not compromising too much on accessbility.

Co-authored-by: Martin Weinelt <hexa@darmstadt.ccc.de>
2024-07-26 16:12:55 +03:00
Robert Hensing
433a0e68f6
Merge pull request #327801 from Sigmanificient/unused-args-lib
treewide: remove unused lib (and other) arguments
2024-07-26 15:11:08 +02:00
K900
04d010a9af nixos/speechd: init 2024-07-26 16:10:16 +03:00
github-actions[bot]
df41014acf
Merge staging-next into staging 2024-07-26 12:01:48 +00:00
K900
26801aa449 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-26 14:31:21 +03:00
Sigmanificient
6dd44107ac treewide: remove unused lib (and other) arguments 2024-07-26 11:18:09 +02:00
Johannes Jöns
349c98e888
Merge pull request #330083 from doronbehar/nixos/neovim-pathsToLink
nixos/neovim: add /share/nvim to pathsToLink
2024-07-26 11:17:41 +02:00
Pol Dellaiera
ceda66b310
Merge pull request #251687 from martinetd/cryptpad
nixos/cryptpad: init, cryptpad: init at 2024.6.0
2024-07-26 09:21:51 +02:00
Doron Behar
91fb48da75 nixos/neovim: add /share/nvim to pathsToLink 2024-07-26 09:20:50 +03:00
github-actions[bot]
09de87d288
Merge staging-next into staging 2024-07-26 06:01:50 +00:00
K900
1410c766c8 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-26 08:41:08 +03:00
Aleksana
19276533a7
Merge pull request #329968 from carbolymer/jackett-configurable-port
nixos/jackett: add configurable port
2024-07-26 11:23:05 +08:00
Aleksana
f6dda3bfc8
Merge pull request #330021 from ju1m/radicle-fix-node-listenAddress
nixos/radicle: fix node.listenAddress to support both IPv4 and IPv6
2024-07-26 11:18:10 +08:00
Sigmanificient
543cd40ecc treewide: remove trailing space in description
Done using `grep -rP 'description\s+=\s+"[^"]+[ ]";' | cut -d ':' -f 1 |
xargs -i nvim {}` and sorting the opened files by hand, avoiding
generated packages list
2024-07-26 03:38:50 +02:00
Philip Taron
38ffd739cf
linuxPackages: remove __attrsFailEvaluation since the attrset evaluates 2024-07-25 17:32:14 -07:00
Julien Moutinho
d8401bc577 nixos/radicle: add a settings example 2024-07-26 01:15:03 +02:00
Peder Bergebakken Sundt
99dec1f6b0 treewide: fix doc typos
Done with `fd \\\.md$ . --type f -x typos --write-changes`
2024-07-26 00:55:13 +02:00
Yt
60bee661ea
Merge pull request #329905 from scvalex/livebook-without-cookie
livebook: fix service not starting when LIVEBOOK_COOKIE was not set
2024-07-25 22:42:05 +00:00
Jörg Thalheim
0fbc43eaea
Merge pull request #323641 from XenGi/fix-freshrss
nixos/freshrss: add ability to use socket path
2024-07-26 00:20:49 +02:00
Julien Moutinho
5f335cfb8f nixos/radicle: fix node.listenAddress to support both IPv4 and IPv6 2024-07-25 23:46:16 +02:00
Mateusz Galazyn
a0906cbd16
nixos/jackett: add configurable port 2024-07-25 20:33:39 +02:00
github-actions[bot]
fea99da2bd
Merge staging-next into staging 2024-07-25 18:01:26 +00:00
github-actions[bot]
2567b049bd
Merge master into staging-next 2024-07-25 18:00:59 +00:00
éclairevoyant
9aeb620274
Merge pull request #329940 from antonmosich/grammar-fix
nixos/system: fix grammatical error in docs
2024-07-25 17:19:18 +00:00
Anton Mosich
bc1c51d6d0
nixos/system: fix grammatical error in docs 2024-07-25 18:19:35 +02:00
Alexandru Scvortov
742ee97845 livebook: fix service not starting when LIVEBOOK_COOKIE was not set 2024-07-25 17:17:41 +01:00
Alexandru Scvortov
f147a306d5 livebook: add munksgaard and scvalex as maintainers 2024-07-25 17:17:41 +01:00
❄️
5f2a6de6f9
Merge pull request #328385 from rorosen/k3s-kubelet-config
nixos/k3s: add options for graceful node shutdown and kubelet config
2024-07-25 10:19:16 -03:00
github-actions[bot]
087683291a
Merge staging-next into staging 2024-07-25 06:01:50 +00:00
github-actions[bot]
12ea252962
Merge master into staging-next 2024-07-25 06:01:22 +00:00
github-actions[bot]
b204bd7963
Merge staging-next into staging 2024-07-25 00:02:56 +00:00
github-actions[bot]
94c17d2caa
Merge master into staging-next 2024-07-25 00:02:30 +00:00
abysssol
084f6a3e26 nixos/ollama: make rocmOverrideGfx backward compatible
The initial version of `rocmOverrideGfx` incorrectly used `lib.mkIf`
in an attempt to prevent interference with previous uses of
`environmentVariables.HSA_OVERRIDE_GFX_VERSION`.

However, the effect was actually to simply erase existing definitions of
`HSA_OVERRIDE_GFX_VERSION` until `rocmOverrideGfx` was set,
which was the situation I was trying to avoid in the first place.

This fixes the bug by switching from `lib.mkIf` to `lib.optionalAttrs`.
2024-07-24 16:11:09 -04:00
abysssol
246d1ee533 nixos/ollama: reformat with nixfmt-rfc-style 2024-07-24 16:09:56 -04:00
Julien Moutinho
43c36273b2 nixos/radicle: fix support of absolute file paths for SSH keys 2024-07-24 22:07:53 +02:00
Guillaume Girol
bbd80e97f9
Merge pull request #328459 from onny/sane-backends-fix
sane-backends: 1.2.1 -> 1.3.1
2024-07-24 20:40:47 +02:00
github-actions[bot]
a4b184a41e
Merge staging-next into staging 2024-07-24 18:01:51 +00:00
github-actions[bot]
7208220b63
Merge master into staging-next 2024-07-24 18:01:18 +00:00
Emily
477c3c6d5e
Merge pull request #307962 from jpds/restic-snapshot-list-only-latest
nixos/restic: Use cat config in pre-start repo initialization check
2024-07-24 17:13:38 +02:00
Masum Reza
81cb83b07f
Merge pull request #290008 from eum3l/add-opengfw
opengfw: init at 0.4.0 (+NixOS module)
2024-07-24 20:39:41 +05:30
Bobby Rong
3a422267eb
Merge pull request #329199 from bobby285271/upd/cinnamon-by-name
Move all packages out of cinnamon scope
2024-07-24 22:04:34 +08:00
Robert Hensing
c5e5aa7266
Merge pull request #308822 from yorickvP/yorickvp/streamLayeredImage-overridable
dockerTools.streamLayeredImage: add includeNixDB argument, expose conf and streamScript
2024-07-24 16:02:35 +02:00
Peder Bergebakken Sundt
24899eea99
Merge pull request #327184 from bhankas/goatcounter
nixos/goatcounter: init
2024-07-24 15:38:27 +02:00
eum3l
86ae0fca93 nixos/opengfw: init 2024-07-24 15:11:23 +02:00
github-actions[bot]
df499e467c
Merge staging-next into staging 2024-07-24 12:01:42 +00:00
github-actions[bot]
8402add1f4
Merge master into staging-next 2024-07-24 12:01:12 +00:00
Silvan Mosberger
473e469d5a
Merge pull request #328381 from tie/map-attrs-flatten 2024-07-24 13:32:34 +02:00
Ivan Trubach
b9c51260d0 lib/deprecated: print deprecation warning for mapAttrsFlatten 2024-07-24 13:23:16 +03:00
Yaya
9ea48560ad nixos/doc/rl-2411: Mention a change in nixos/gitlab
`gitaly` is now using the bundled git package instead of `pkgs.git`
internally to maintain compatibility with GitLab.
2024-07-24 10:51:55 +02:00
Yaya
66f9d60dd7 nixosTests.gitlab: add git package 2024-07-24 10:51:55 +02:00
Yaya
feeb53a430 nixos/gitlab: Replace git package with bundled git
This commit switches gitaly's git package from `pkgs.git` to the bundled
`git` package in order to maintain compatibility with the supported git
release by gitaly.
2024-07-24 10:51:55 +02:00
Maximilian Bosch
bf2d040432
postgresql: 15 -> 16 for 24.11+
Upgrade default postgresql for stateVersion >=24.11.
This also rebuilds all packages linking against `libpq.so` to use
postgresql 16.

After re-reading https://www.postgresql.org/docs/16/release-16.html
I don't see any major risks about doing that.
2024-07-24 10:43:02 +02:00
TheRealGramdalf
d66d94b37b
nixos/caddy: fix group option description (#328034) 2024-07-24 16:40:07 +08:00
Sven Slootweg
51a72a8271
nixos/caddy: fix module docs for new root syntax (#328444)
Old syntax no longer works; `root` now takes two arguments. Updated example in module documentation to reflect this.
2024-07-24 16:38:48 +08:00
Dominique Martinet
7c448e8d44 nixos/cryptpad: harden service
cryptpad is not directly exposed to the network, but has plenty that can
be hardened more properly, so fix that.
2024-07-24 16:17:32 +09:00
Dominique Martinet
b846e8762f nixos/cryptpad: init
This is a full rewrite independent of the previously removed cryptpad
module, managing cryptpad's config in RFC0042 along with a shiny test.

Upstream cryptpad provides two nginx configs, with many optimizations
and complex settings; this uses the easier variant for now but
improvements (e.g. serving blocks and js files directly through nginx)
should be possible with a bit of work and care about http headers.

the /checkup page of cryptpad passes all tests except HSTS, we don't
seem to have any nginx config with HSTS enabled in nixpkgs so leave this
as is for now.

Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com>
Co-authored-by: Michael Smith <shmitty@protonmail.com>
2024-07-24 16:17:26 +09:00
Thomas Gerbet
e54753495c
linux/common-config: restrict access to dmesg
`SECURITY_DMESG_RESTRICT` is enabled by default by a lot of
other distributions for a quite a while now, NixOS is a bit of an outlier.
The main justification to enable it is that kernel log might leak kernel
pointers which can then be used by exploits to defeat KASLR (NixOS also
enables `kernel.kptr_restrict` by default since 2013).
2024-07-24 12:06:04 +05:30
Vladimír Čunát
cd346565bb
Merge branch 'master' into staging-next 2024-07-24 07:19:19 +02:00
Payas Relekar
aebb3d3474 nixos/goatcounter: init 2024-07-24 10:17:44 +05:30
Masum Reza
13da3c09fb
Merge pull request #327499 from max-privatevoid/pam-kanidm-package-option
nixos/pam: use Kanidm's package option
2024-07-24 09:24:09 +05:30
Franz Pletz
b865ea167d
Merge pull request #321644 from pedorich-n/netdata-146 2024-07-23 23:23:30 +02:00
Franz Pletz
e6ae50bb83
Merge pull request #327986 from 7596ff/7596ff/airsonic-context-path 2024-07-23 23:15:27 +02:00
Franz Pletz
f1f5d9433b
Merge pull request #329014 from n8henrie/n8henrie-espanso-maintainer 2024-07-23 23:14:53 +02:00