nix-community/srvos
1
1
Fork 0
mirror of https://github.com/nix-community/srvos.git synced 2024-09-11 14:17:02 +03:00
Code Issues Packages Projects Releases Wiki Activity
831 Commits 7 Branches 0 Tags 6.1 MiB
27dbc69093
Commit Graph

162 Commits

Author SHA1 Message Date
zowoq
1844f1a15e Revert "common/openssh: apply workaround for CVE-2024-6387" 
This reverts commit b742b86532.
 2024-07-03 10:08:11 +10:00
Jörg Thalheim
14b3b0aa48
Merge pull request #449 from nix-community/openssh-workaround 
common/openssh: apply workaround for CVE-2024-6387
 2024-07-01 13:59:46 +02:00
Jörg Thalheim
036ab1a01e nixos/nix-experimental: drop stabilized discard-references 2024-07-01 11:55:55 +00:00
Jörg Thalheim
b742b86532 common/openssh: apply workaround for CVE-2024-6387 2024-07-01 13:53:43 +02:00
Jörg Thalheim
22155bc768
Merge pull request #441 from nix-community/darwin-support 
Darwin support
 2024-06-30 15:10:14 +02:00
Jörg Thalheim
ea3d082265 allow exposeModules to be shared 2024-06-27 11:29:21 +02:00
zowoq
b724a9ad24 remove 24.05 2024-06-15 13:56:40 +00:00
zowoq
34a9390047 remove 23.11 2024-06-15 13:56:40 +00:00
Jörg Thalheim
4098b95dde
amazon: drop redundant cloud-init.enable (#438) 2024-06-10 18:19:36 +02:00
Jörg Thalheim
f912140df9 common: fix accidentially disabling switch on old nixos versions 2024-05-30 10:34:07 +02:00
Jörg Thalheim
b42461b481 common: use new rust-based switch script 
This implementation is meant to replace switch-to-configuration.pl with
a rust version.
 2024-05-29 17:19:03 +02:00
Sam Lehman
b18e74f224 fix: Remove Nix experiemental-feature repl-flake after v2.22 
Only set `nix.settings.experimental-features = ["repl-flake"]` when `config.nix.package.version` is older than version `2.22`. 

`repl-flake` was removed as an experimental feature and automatically enabled when using experimental feature: `flakes`
 2024-04-30 02:39:02 +00:00
Jörg Thalheim
71a8e8ab6e update comment for boot.growPartition and boot.initrd.systemd.enable 2024-04-26 16:52:43 +02:00
Jörg Thalheim
d8945920cb
mdns: don't enable it if we already have avahi (#417) 2024-04-19 15:31:53 +02:00
Jörg Thalheim
a5cc8d86c4 enable multicast dns for desktop machines 
It's quite cool if you can just ping machines by hostname.
 2024-04-17 18:02:33 +02:00
Jörg Thalheim
e663d1890e add digitalocean 2024-04-12 17:30:26 +00:00
Enno Richter
8a4c3ea645 hetzner-cloud/arm: remove boot.loader.timeout 2024-04-12 16:48:44 +00:00
Jörg Thalheim
2d627b9d37
Merge pull request #405 from elohmeier/telegraf-prometheus-list 
telegraf: use list for inputs.prometheus
 2024-04-12 18:35:14 +02:00
a-kenji
e4252aa777
docs: fix wiki links (#411) 2024-04-10 01:17:28 +02:00
Enno Richter
3e8526c54a telegraf: use list for inputs.prometheus 2024-04-02 15:16:50 +02:00
Guanran928
e4ea26262b
treewide: fix typo using typos (#400) 2024-03-20 18:29:05 +01:00
Jörg Thalheim
83eef007bb openssh: move StreamLocalBindUnlink to settings 2024-03-17 08:35:22 +00:00
Jonas Chevalier
434ad8453d
fixup! vultr: disable srvos.boot.consoles (#392) 
This also fixes the Hetzner-online profile which wasn't tested before
 2024-03-08 11:44:00 +01:00
zimbatm
fda52d3209 vultr: disable srvos.boot.consoles 
Reviewed-By: mic92
 2024-03-06 13:23:54 +01:00
Jörg Thalheim
91028aa396 fix supportedFilesystems not beeing an attrset 2024-03-01 13:49:19 +00:00
Jörg Thalheim
8e1328f734 zfs: remove udev scheduler rule 
This is part of NixOS now:

https://github.com/NixOS/nixpkgs/pull/250308
 2024-03-01 10:58:08 +00:00
Ingolf Wagner
72956bfcd1 update SATA HDDs comment on kernel modules 2024-02-28 22:14:28 +00:00
zowoq
8d159ac5bb
no stub (#387) 
* Revert "no stub: <insert TLC song> (#383)"

This reverts commit c26b531a3c.

* no stub
 2024-02-23 09:27:52 +01:00
Jonas Chevalier
c26b531a3c
no stub: <insert TLC song> (#383) 
This feature was introduced in
https://github.com/NixOS/nixpkgs/pull/269551 and is mostly useful for
servers.

Saves around 80MiB of evaluation on x86_64 due to the extra i686 nixpkgs
instance.
 2024-02-15 13:01:51 +01:00
zimbatm
0a0f4f441b cloud-init: don't flush the host's ssh keys 
Fixes #148
 2024-01-25 19:13:27 +00:00
Jörg Thalheim
8c9b9b1d27 telegraf: ignore efivars 2024-01-13 10:27:26 +00:00
Jörg Thalheim
341c142aad
Merge pull request #354 from nix-community/rx170 
add hardware-hetzner-online-arm
 2024-01-04 09:34:56 +01:00
zowoq
dbc61568e1 add hardware-hetzner-online-arm 2024-01-04 18:27:51 +10:00
Jörg Thalheim
e5eecdf21b only enable configurable-impure-env in nix 2.19 or newer 2024-01-02 14:10:20 +00:00
zowoq
23c8e6a9ca
cloud-init: set network config to silence warning (#347) 2023-12-31 11:18:29 +01:00
Philipp Riegger
7afef00cd6 openssh: don't force authorizedKeysFiles if forgejo is enabled 2023-12-11 23:28:45 +00:00
Enno Richter
34d5a2527c hardware-hetzner-cloud-arm: enable early console 2023-12-11 23:02:03 +00:00
Jörg Thalheim
eacbc85e04
Merge pull request #327 from nix-community/nix-experimental 
nix-experimental: enable configurable-impure-env, fetch-closure, recursive-nix
 2023-12-07 10:30:38 +01:00
Jörg Thalheim
cdc612b37a
Merge pull request #315 from nix-community/nix-daemon 
nix-daemon: set oomscoreadjust
 2023-12-06 21:50:00 +01:00
Jörg Thalheim
43ee0a6414
Update nixos/common/nix.nix 
Co-authored-by: zowoq <59103226+zowoq@users.noreply.github.com>
 2023-12-06 21:48:12 +01:00
Jörg Thalheim
bd074019fc nix-experimental: enable configurable-impure-env, fetch-closure, recursive-nix 2023-12-06 21:46:57 +01:00
Jörg Thalheim
838660fbfe nix-experimental: disable impure derivations 
This feature also needs ca-derivation to be enabled and enabling this currently deadlocks without reboot
 2023-12-06 21:46:30 +01:00
r-vdp
1e41661042
Don't set nixpkgs.config, it breaks some setups. 
Since 23.11 it is no longer allowed to set nixpkgs.config when nixpkgs.pkgs is also set.
 2023-11-30 13:44:19 +01:00
Jörg Thalheim
396f6d3fa4
serial: fix shebang in resize script (#318) 2023-11-24 09:46:37 +01:00
Jörg Thalheim
b41442d517 boot.initrd.systemd: also enable if initrd networkd is used 2023-11-22 08:55:59 +00:00
Jörg Thalheim
5bb2b3153c nix-daemon: set oomscoreadjust 2023-11-20 20:09:41 +01:00
Jörg Thalheim
6cdb43f8f1 telegraf: replace sudo with setuid wrapper for telegraf 2023-11-12 21:31:14 +10:00
Jörg Thalheim
533a8681bb
sudo: drop explicit sudo enable (#304) 
This makes it harder to replace sudo with sudo-rs
 2023-11-12 11:27:36 +01:00
zowoq
a0d29fdb2f
prometheus: add mkDefault to checkConfig (#299) 2023-11-09 14:51:33 +01:00
zowoq
27f80f3b13 prometheus: fix typo 2023-11-08 07:37:55 +10:00