Sandro Jäckel
4396fd615c
nixos/systemd-boot: remove default log message if nothing changes
2022-07-17 21:46:50 +02:00
Sandro
0890c4aef1
Merge pull request #168879 from aidalgol/pass-secret-service-systemd-unit
2022-07-17 16:45:27 +02:00
Bjørn Forsman
0080a93cdf
nixos/jenkins-job-builder: create secret file with umask 0077
...
IOW, don't make it world readable.
2022-07-17 15:24:48 +02:00
Sandro
04a5c30245
Merge pull request #179582 from catap/prl-tools
2022-07-17 01:41:46 +02:00
Sandro
769329f5f8
Merge pull request #172058 from midchildan/improvement/1pw-gid
...
nixos/_1password{,-gui}: use a static gid
2022-07-17 01:21:42 +02:00
Sivizius
5e941caa0d
nixos/cri-o: removed defaultText of internal package-option
2022-07-17 08:04:15 +10:00
Kim Lindberger
d012de5b1d
Merge pull request #181401 from yayayayaka/gitlab-bump-git-to-2.35.4
...
nixos/gitlab: Bump git to 2.35.4
2022-07-16 13:37:16 +02:00
Bjørn Forsman
50eaf82b6f
nixos/jenkins-job-builder: fix jenkins authentication
...
The current authentication code is broken against newer jenkins:
jenkins-job-builder-start[1257]: Asking Jenkins to reload config
jenkins-start[789]: 2022-07-12 14:34:31.148+0000 [id=17] WARNING hudson.security.csrf.CrumbFilter#doFilter: Found invalid crumb 31e96e52938b51f099a61df9505a4427cb9dca7e35192216755659032a4151df. If you are calling this URL with a script, please use the API Token instead. More information: https://www.jenkins.io/redirect/crumb-cannot-be-used-for-script
jenkins-start[789]: 2022-07-12 14:34:31.160+0000 [id=17] WARNING hudson.security.csrf.CrumbFilter#doFilter: No valid crumb was included in request for /reload by admin. Returning 403.
jenkins-job-builder-start[1357]: curl: (22) The requested URL returned error: 403
Fix it by using `jenkins-cli` instead of messing with `curl`.
This rewrite also prevents leaking the password in process listings. (We
could probably do it without `replace-secret`, assuming `printf` is a
shell built-in, but this implementation should be safe even with shells
not having a built-in `printf`.)
Ref https://github.com/NixOS/nixpkgs/issues/156400 .
2022-07-16 12:30:41 +02:00
Arian van Putten
55bd770662
Merge pull request #167514 from shimunn/pam_u2f_module
...
nixos/security/pam: added `origin` option to pamu2f
2022-07-16 10:56:26 +02:00
Vladimír Čunát
7fbdf335d8
Merge #180368 : nixos/i18n: normalise locale names
2022-07-16 09:01:42 +02:00
Sandro
2d0f98389f
Merge pull request #175738 from SuperSamus/plasma
2022-07-16 00:56:08 +02:00
Bernardo Meurer
ed0e38f28d
Merge pull request #181625 from lovesegfault/nix-2.10.3
...
nix: 2.10.2 -> 2.10.3
2022-07-15 15:28:41 -07:00
Aaron Andersen
9b01242132
Merge pull request #131261 from bb2020/dlna
...
nixos/minidlna: convert to structural settings
2022-07-15 21:28:19 +02:00
Bernardo Meurer
ea8a1ac198
nix-fallback-paths: 2.10.2 -> 2.10.3
2022-07-15 12:00:56 -07:00
shimun
327d99c0ca
nixos/security/pam: added origin
option to pamu2f
2022-07-15 20:38:24 +02:00
Sandro
8e45a79ab1
Merge pull request #181579 from NixOS/netdata-module-startpost
...
netdata: fix post start for module
2022-07-15 16:20:55 +02:00
Sandro
475b23340b
Merge pull request #181410 from lilyinstarlight/fix/greetd-default-user
...
nixos/greetd: fix minor typo for default user
2022-07-15 16:12:09 +02:00
Lucas Eduardo
e13404895a
nixos/label: add validation for system.nixos.label ( #181479 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-07-15 11:45:25 +02:00
Wout Mertens
7f55ee3a53
netdata: fix post start for module
2022-07-15 09:57:13 +02:00
zowoq
e2659eea36
nixos/kubernetes: use copyToRoot
instead of deprecated contents
2022-07-15 10:23:06 +10:00
Nick Cao
c543c996a9
nix-fallback-paths.nix: Update to 2.10.2
2022-07-14 23:53:44 +08:00
Elis Hirwing
e4d73b8bdd
Merge pull request #181474 from etu/drop-some-maintainerships
...
treewide: Drop myself as maintainer for some packages I don't use
2022-07-14 15:08:07 +02:00
Elis Hirwing
729fb87ae3
treewide: Drop myself as maintainer for some packages I don't use
2022-07-14 14:39:58 +02:00
github-actions[bot]
e0608ddfd9
Merge master into haskell-updates
2022-07-14 00:15:36 +00:00
Lily Foster
6f5c1bcf7b
nixos/greetd: fix minor typo for default user
...
It has been like this since the module was added, but it hasn't caused
problems because greetd assumes a default user of "greeter"[1] when it
isn't found anyway
[1]: d700309623/item/greetd/src/config/mod.rs (L127)
2022-07-13 18:11:16 -04:00
M. A
61e3490c1c
nixos/gitlab: Bump git to 2.35.4
...
Resolves CVE-2022-29187
2022-07-13 21:03:46 +00:00
Domen Kožar
c46a3dc50a
cachix-agent: allow restarts now that deployments are subprocesses
2022-07-13 11:40:54 -05:00
Sandro
a959a2cd26
Merge pull request #180992 from romildo/new.xdg.portal.lxqt
2022-07-13 14:15:09 +02:00
illustris
f60f165501
nixos/proxmox-image: use qemu 6.2 for building VMA
2022-07-13 10:44:41 +02:00
José Romildo
7e30ebb2c2
nixos/lxqt: add a module for the lxqt portal
2022-07-12 17:17:39 -03:00
Sandro
78fff7ed35
Merge pull request #181197 from bjornfor/fix-ddclient-password-leak
2022-07-12 15:13:43 +02:00
Martin Weinelt
b7dc3d66c2
Merge pull request #181184 from kittywitch/ha-empty-config-fix
...
nixos/home-assistant: make the reload triggers dependent upon cfg.config
2022-07-12 11:39:39 +02:00
Bjørn Forsman
e0f2f7f9ea
nixos/ddclient: don't leak password in process listings
...
...by using `replace-secret` instead of `sed` when injecting the
password into the ddclient config file. (Verified with `execsnoop`.)
Ref https://github.com/NixOS/nixpkgs/issues/156400 .
2022-07-12 10:23:40 +02:00
Pascal Wittmann
6d1cabe9d9
Merge pull request #158346 from kurnevsky/i2pd-yggdrasil
...
i2pd: add yggdrasil settings
2022-07-12 10:19:18 +02:00
Alyssa Ross
c3fafea4ed
nixos: remove unused "system tarball" modules
...
This has all been commented in nixos/release.nix since at least 2015,
so it's not doing us any good to keep it around.
2022-07-12 07:34:20 +00:00
Aaron Andersen
bf57026e6a
Merge pull request #179511 from jian-lin/fix-force-caddy-reload-config
...
nixos/caddy: force caddy to reload config in ExecReload
2022-07-12 04:53:45 +02:00
Aidan Gauland
d9119dbbdf
pass-secret-service: unstable-2020-04-12 -> unstable-2022-03-21
...
* Update to the latest upstream version of pass-secret-service that includes
systemd service files.
* Add patch to fix use of a function that has been removed from the Python
Cryptography library in NixOS 22.05
* Install systemd service files in the Nix package.
* Add NixOS test to ensure the D-Bus API activates the service unit.
* Add myself as a maintainer to the package and NixOS test.
* Use checkTarget instead of equivalent custom checkPhase.
2022-07-12 07:33:26 +12:00
Sandro Jäckel
af66b47b3a
nixos/postgresql-backup: allow setting compression level
2022-07-11 21:28:22 +02:00
Gaute Ravndal
cc0d38b58e
nixos/i18n: normalise locale codeset names in supportedLocales
2022-07-11 20:17:50 +02:00
Kat Inskip
8f2c49ece6
nixos/home-assistant: make the reload triggers dependent upon cfg.config
2022-07-11 08:19:25 -07:00
Sandro
e2f14dd31a
Merge pull request #181026 from queezle42/pipewire-systemwide-bluetooth
...
pipewire: fix bluetooth for system-wide configuration
2022-07-11 15:38:55 +02:00
Jens Nolte
61c9f44a1d
pipewire: fix bluetooth for system-wide configuration
2022-07-11 02:35:36 +02:00
Bernardo Meurer
c6b0888a86
Merge pull request #180991 from aij/raspberrypi-bootloader-config.txt
...
raspberrypi-bootloader: Update doc URL for config.txt options
2022-07-10 14:09:43 -07:00
Guillaume Girol
e21a770188
Merge pull request #180933 from yuuyins/nvidia-busidtype
...
hardware/nvidia: add @ to constraint on busIDType
2022-07-10 20:00:30 +00:00
Sandro
366683965e
Merge pull request #166308 from ncfavier/wg-resolvconf
...
nixos/resolvconf: allow different implementations
2022-07-10 21:00:00 +02:00
Shawn8901
98ac43a1cf
zrepl: add package option to module ( #179189 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-07-10 20:32:27 +02:00
Martin Weinelt
0044b4fa22
Merge pull request #180950 from alyssais/graphite
2022-07-10 17:22:45 +02:00
Martin Weinelt
f8137a54eb
Merge pull request #153445 from erdnaxe/prometheus_protecthome
...
nixos/prometheus-node-exporter: do not protect home
2022-07-10 17:21:44 +02:00
Emery Hemingway
429fc9aaf7
nixos/hedgedoc: convert to settings-style configuration
...
Replace "services.hedgedoc.configuration" with ".settings" to be
consistent with RFC0042. This allows control of settings not
declared in the module.
2022-07-10 08:07:14 -05:00
Ivan Jager
34aa4fe7a9
raspberrypi-bootloader: Update doc URL for config.txt options
...
The old URL was redirecting to more generic Rasbperry Pi documentation.
2022-07-10 06:58:32 -05:00