Commit Graph

34735 Commits

Author SHA1 Message Date
Eric Wolf
318d8cc4c5 nixos/lemmy: limit impurity by secrets
Split `services.lemmy.secretFile` into
multiple options to allow only secrets.
2023-07-28 07:49:27 +00:00
Daniel Carosone
4ffc1c82c6 zfs: 'want', don't 'require', systemd-udev-settle
This completes changes in #227208
Fixes: #244737, #245089.
2023-07-28 16:57:12 +10:00
Janik
6a830314d4
Merge pull request #243947 from totoroot/update/cloud-sql-proxy-2.5.0 2023-07-27 22:55:49 +02:00
Emily
49c07cd259
Merge pull request #238735 from MayNiklas/proxmox-image-settings
nixos/proxmox-image: add additionalSpace, bootSize and diskSize options
2023-07-27 22:17:42 +02:00
Thiago Kenji Okada
a6096c235c
Merge pull request #245571 from Misterio77/qt6gtk2
qt6Packages.qt6gtk2: init at 0.2
2023-07-27 19:13:29 +00:00
Gabriel Fontes
ff8b69941a
nixos/qt: install qt6gtk2 when using gtk2
Now qt6 apps are correctly themed when using platformTheme gtk2.
2023-07-27 15:39:30 -03:00
Martin Weinelt
3086313e4c
nixos/frigate: fix recording and serving of clips/recordings
Frigate does string prefix matching for paths, which isn't exactly
compatible with dynamically provisioned directories of systemd, where
/var/cache/frigate is actually a symlink to /var/cache/private/frigate.

Because we are unlikely to get this fixed upstream, this is one of the
reason we should stop using DynamicUser= here.

The other being, that nginx needs to be able to serve clips and
recordings from both the CacheDirectory and the StateDirectory, and
nginx being a member on a group that may only exist after it was started
up doesn't work reliably.

This is also why we relax the umask to allow g+r/g+rx for newly created
files. Existing installs may need the following permissions fix to get
things going.

```
find /var/lib/frigate/recordings -type d -exec chmod g+rx {} \;
find /var/lib/frigate/recordings -type f -exec chmod g+r {} \;
find /var/cache/frigate -type f -exec chmod g+r {} \;
```

Co-Authored-By: Daniel Barlow <dan@telent.net>
2023-07-27 18:36:25 +02:00
Matthieu Coudron
6774f3fc04 services.postgresql: fix example 2023-07-27 11:35:55 -05:00
Ryan Lahfa
7d053c812b
Merge pull request #245250 from nikstur/images 2023-07-27 17:00:13 +02:00
Silvan Mosberger
a7e5800273
Merge pull request #243062 from mobusoperandi/doc_watchexec
nixpkgs/NixOS manuals: devmode feature
2023-07-27 16:11:18 +02:00
oddlama
cbdaab0f17
nixos/nginx: remove unnecessary acme locations to allow double proxied setups 2023-07-27 15:30:38 +02:00
ajs124
1d64486ba7 nixos/tests/jenkins: fix deprecation warning 2023-07-27 15:18:11 +02:00
Bobby Rong
69a7cd6718
Merge pull request #245481 from bobby285271/upd/pantheon
Pantheon updates 2023-07-26
2023-07-27 16:04:25 +08:00
Bobby Rong
497229d3c2
nixos/pantheon: Install orca
ref: ec0eb37689
2023-07-27 14:08:53 +08:00
rewine
d9f707f795 nixos/wayfire: init 2023-07-27 00:04:03 -03:00
Nick Cao
8f7b4e8894
Merge pull request #245564 from eliasp/paperless-docs-url
nixos/paperless: update URL to docs
2023-07-26 17:52:39 -06:00
Eric Bailey
8c068dfddb helmfile-wrapped: init
nixos/doc/manual: add release notes for helmfile-wrapped
2023-07-26 16:59:16 -05:00
nikstur
cb2d047c57 nixos/image: add repart builder docs 2023-07-26 23:36:18 +02:00
nikstur
87ecda9a21 nixos/tests/appliance-repart-image: init 2023-07-26 23:33:33 +02:00
nikstur
ec8d30cc50 nixos/image: add repart builder 2023-07-26 23:33:14 +02:00
nikstur
a662dc8b73 nixos/lib: systemd definition files function
Add a re-usable function that converts an attrset to a directory
containing systemd definition files.
2023-07-26 23:30:08 +02:00
nikstur
e6862fae8f nixos/tests/systemd-sysupdate: init 2023-07-26 20:33:33 +02:00
nikstur
9b4d3b840e nixos/systemd-sysupdate: init 2023-07-26 20:33:31 +02:00
nikstur
5750660f25 nixos/tests: use sensible key type for gpg keyring
If someone blindly copies this code, at least they have a sensible key
type.
2023-07-26 20:32:51 +02:00
nikstur
7e522a81ef nixos/tests: refactor gpg-keyring test utility 2023-07-26 20:32:51 +02:00
Elias Probst
2b0545b423
nixos/paperless: update URL to docs 2023-07-26 19:02:29 +02:00
pennae
e2a43fbfb3
Merge pull request #244356 from datafoo/mosquitto-systemd-credentials
nixos/mosquitto: leverage systemd credentials
2023-07-26 18:23:06 +02:00
lewo
9a98962714
Merge pull request #245545 from nlewo/osquery-disable-database
nixos/osquery: do not use the local database for osqueryi
2023-07-26 17:58:09 +02:00
Florian Klink
7539b8f2d7
Merge pull request #244841 from flokli/networkmanager-fix-ppp-plugin
nixos/networkmanager: create pppd lock directory
2023-07-26 17:44:35 +02:00
Antoine Eiche
8af1d49858 nixos/osquery: do not use the local database for osqueryi
Because the local database is used by the osquery deamon, running
osqueri fails with:

    IO error: While lock file: /var/lib/osquery/osquery.db/LOCK:    Resource temporarily unavailable
2023-07-26 17:22:22 +02:00
Pol Dellaiera
d242834675
Merge pull request #230109 from vdot0x23/docker-extraPackages
nixos/docker: add extraPackages option
2023-07-26 15:14:13 +02:00
Pol Dellaiera
5763cc6221
Merge pull request #232491 from 6t8k/20230517_nixos_manual_installing_partitioning
nixos/manual: rectify partitioning commands for UEFI/GPT
2023-07-26 15:12:51 +02:00
ajs124
c9cf0708f0
Merge pull request #229271 from markus-heinrich/submit/sogo
nixos/sogo: fix nginx proxy_buffer config
2023-07-26 12:39:51 +02:00
Nick Cao
9ae5c2de7f
Merge pull request #244572 from MinerSebas/usb-modeswitch-module-rename
nixos/usb-modeswitch: Rename module from usbWwan
2023-07-25 19:24:14 -06:00
Nick Cao
76025b299f
Merge pull request #245454 from 2xsaiko/outgoing/emacs-env
nixos/emacs: don't set EDITOR to store path
2023-07-25 19:19:56 -06:00
Nick Cao
e3696d3a5d
Merge pull request #245399 from mweinelt/conduit-chmod-umask
nixos/conduit: improve state directory permissions
2023-07-25 18:50:03 -06:00
Marco Rebhan
b72044c113
nixos/emacs: don't set EDITOR to store path
Use emacseditor in PATH instead of using the absolute path to prevent
old path from sticking around when switching configurations.
2023-07-26 00:52:03 +02:00
Sandro
492860f609
Merge pull request #245380 from SuperSandro2000/fonts-typo
nixos/packages: fix typo preventing mkRenamedOptionModule from working
2023-07-25 18:56:44 +02:00
oddlama
0ac2ba763f
nixos/hostapd: fix regression after refactoring to RFC42.
Switching from submodule notation from ({name, ...}: {}) to (submob: {}) seems to require a different accessing scheme.
2023-07-25 18:40:51 +02:00
MinerSebas
7c309898bc nixos/usb-modeswitch: Rename module from usbWwan 2023-07-25 17:07:00 +02:00
Martin Weinelt
18733782ad
nixos/conduit: improve state directory permissions
Allow only the conduit user to access its database files, and make sure
to create all new files with 0600 (o+rw).
2023-07-25 16:54:39 +02:00
Aaron Andersen
8d85dcea22
Merge pull request #215247 from evan-goode/evdevremapkeys
nixos/evdevremapkeys: init
2023-07-25 08:45:54 -04:00
Sandro Jäckel
4c07356e3d
nixos/packages: fix typo preventing mkRenamedOptionModule from working 2023-07-25 14:43:40 +02:00
Martin Weinelt
6847465f6f
Merge pull request #242275 from Atemu/nixos/paperless-manage-toShellVars
nixos/paperless: use toShellVars for paperless-manage
2023-07-25 12:26:32 +02:00
Shahar "Dawn" Or
a064709342 nixpkgs/NixOS manuals: devmode feature
Co-authored-by: Alejandro Sanchez Medina <alejandrosanchzmedina@gmail.com>
2023-07-25 17:03:15 +07:00
Alejandro Sanchez Medina
a49d40a005 nixos manual: extract some build paths
Co-authored-by: Shahar "Dawn" Or <mightyiampresence@gmail.com>
2023-07-25 17:03:12 +07:00
Robert Hensing
c9f9df2f8e
Merge pull request #245038 from R-VdP/fix_nix_channel
nixos/nix-channel: only try to remove the nix-channel binary if it exists
2023-07-25 11:25:15 +02:00
asymmetric
46df012d2a
Merge pull request #244332 from SuperSandro2000/fonts-fonts
nixos/fonts: rename fonts.fonts option to fonts.packages, other cleanups
2023-07-25 09:49:25 +02:00
Bobby Rong
34d40c6f20
Merge pull request #245105 from thoughtfull-systems/xfce-exclude-packages
nixos/xfce: add environment.xfce.excludePackages option
2023-07-25 11:39:30 +08:00
Pol Dellaiera
07fd6694b5
Merge pull request #236368 from SuperSandro2000/etc-dir-names
nixos/etc: keep directories in derivation name
2023-07-25 03:02:47 +02:00
Sandro Jäckel
83793ca898
nixos/fonts: rename fonts.enableDefaultFonts to fonts.enableDefaultPackages
to better fit the renamed fonts.packages
2023-07-25 00:55:25 +02:00
Sandro
dfcffbd74f
Merge pull request #225055 from jtrees/update-wooting-udev-rules
wooting: update udev rules
2023-07-24 23:56:31 +02:00
Joshua Trees
12ad49a130 wooting: clarify requirements for hardware option to work 2023-07-24 22:34:52 +02:00
Gianmarco Gargiulo
b34a51f5a7
nixos/gogs: fix deprecations for 0.13.0
Changed APP_NAME to BRAND_NAME, DB_TYPE to TYPE and PASSWD to PASSWORD.
2023-07-24 19:41:52 +00:00
Eric Bailey
3e36355e44
kops: 1.26.4 -> 1.27.0 (#245208)
- Drop kops_1_24
- kops_1_26: 1.26.4 -> 1.26.5
- Update 23.11 release notes
2023-07-24 20:07:52 +02:00
Jacek Galowicz
f59913bad8
Merge pull request #241949 from R-VdP/nixos_test_busybox
nixos/test-driver: use the short form argument to base64 for busybox compatibility.
2023-07-24 18:05:06 +02:00
Sandro Jäckel
f9fdeb2dbc
nixos/ghostscript: evaporate the extra whitespace 2023-07-24 17:34:39 +02:00
Sandro Jäckel
b0c67b4b6e
treewide: rename fonts.fonts to fonts.packages 2023-07-24 17:34:39 +02:00
Sandro Jäckel
5162df3239
nixos/fonts: rename fonts.fonts option to fonts.packages, other cleanups
fonts.fonts is not a great name and this also resolves a TODO.
2023-07-24 17:34:37 +02:00
Paul Stadig
cb2f531332 nixos/xfce: allow exclusion of xfce4-notifyd
Use `environment.xfce.excludePackages` with `systemd.packages` so `xfce4-notifyd` can be excluded
from installation.
2023-07-24 07:55:10 -04:00
datafoo
533ff8546b nixos/mosquitto: leverage systemd credentials
Use systemd credentials for all variations of user passwords.
Password files do not need special permissions anymore.
2023-07-24 11:37:30 +02:00
r-vdp
b825f65c90
nixos/nix-channel: only try to remove the nix-channel binary if it exists
It may not be there if `system.disableInstallerTools = true`.
2023-07-24 10:34:48 +02:00
Lassulus
ceaab39b40
Merge pull request #230196 from doronbehar/nixos/syncthing
nixos/syncthing: Use API to merge / override configurations
2023-07-24 08:38:50 +02:00
github-actions[bot]
aae1f8ef06
Merge master into staging-next 2023-07-24 06:01:13 +00:00
Stzx
e196c81a23
udisks2: fix conf file loading warnings 2023-07-24 11:41:50 +08:00
Pol Dellaiera
a30cc10e7f
Merge pull request #242703 from jwygoda/tailscaled-autoconnect
nixos/tailscale: add authKeyFile option
2023-07-24 04:48:42 +02:00
Nick Cao
e598d5b773
Merge pull request #244953 from tomfitzhenry/less-maintainership
remove tomfitzhenry@ as maintainer for some packages
2023-07-23 18:57:35 -06:00
github-actions[bot]
449a683b10
Merge master into staging-next 2023-07-24 00:02:26 +00:00
Sandro
9ca0bd9db3
Merge pull request #244467 from wamserma/tarsnap-add-package-option
tarsnap: add package option
2023-07-24 00:46:24 +02:00
Robert Hensing
35a0bd36d0
Merge pull request #244653 from bjornfor/nixos-generate-config-emit-lib
nixos-generate-config: add 'lib' arg to configuration.nix
2023-07-24 00:03:26 +02:00
Ryan Lahfa
bba6788b37
Merge pull request #244702 from RaitoBezarius/nginx-maintenance 2023-07-23 23:53:17 +02:00
Paul Stadig
1c5e23c405 nixos/xfce: add environment.xfce.excludePackages option
Packages in environment.xfce.excludePackages will be excluded from the default environment.

Fixes #91169
2023-07-23 17:52:41 -04:00
Emily
2d83cbda63
Merge pull request #244463 from mattmelling/cloudlog-pin-php8
cloudlog: pin php version
2023-07-23 23:09:50 +02:00
Will Fancher
df59d8c0b7
Merge pull request #227208 from ElvishJerricco/zfs-systemd-target-ordering
zfs: Relate import services to zfs-import.target instead of local-fs
2023-07-23 16:58:25 -04:00
Sandro
1d1fe1fe14
Merge pull request #245063 from SuperSandro2000/remove-maintainer
treewide: reduce packages I maintainer
2023-07-23 21:28:26 +02:00
Will Fancher
0ddc9d0250 zfs: Relate import services to zfs-import.target instead of local-fs
Being wanted by and ordered before local-fs.target isn't strictly
correct. And in systemd initrd, it's very incorrect because
local-fs.target is for the initrd file system, not the real root file
system.
2023-07-23 14:12:53 -04:00
github-actions[bot]
6afe543aec
Merge master into staging-next 2023-07-23 18:01:33 +00:00
Sandro Jäckel
cf6c96533b
treewide: reduce packages I maintainer 2023-07-23 19:30:22 +02:00
7c6f434c
b02fd49f16
Merge pull request #194310 from lilyinstarlight/pkg/curl-impersonate
curl-impersonate: init at 0.5.4 and replace curl-impersonate-bin
2023-07-23 17:00:17 +00:00
Doron Behar
047fa8dbdf nixos/syncthing: Use API to merge / override configurations
If one sets either of `override{Device,folder}s` to false, the jq `*`
operator doesn't merge well the devices and folders, creating duplicate
IDs for folders as observed in #230146. This PR makes the script iterate
via Nix / Bash loop the devices and folders IDs and merges the keys
using upstream's `curl -X POST` support for single objects.

Hence this commit fixes #230146.
2023-07-23 18:22:33 +03:00
r-vdp
668e2dafb6
nixos/nix-channel: fix editorconfig warnings and apply nixpkgs-fmt 2023-07-23 15:39:32 +02:00
Ilan Joselevich
383dc75dd7
Merge pull request #244949 from FlafyDev/fix/nix-daemon-if
nixos/nix-daemon: change regular if to mkIf
2023-07-23 16:02:33 +03:00
github-actions[bot]
10af23a180
Merge master into staging-next 2023-07-23 12:01:27 +00:00
Robert Hensing
864404dcc1
Merge pull request #244993 from Enzime/fix/linux-builder
linux-builder: fix eval failure
2023-07-23 11:59:03 +02:00
Michael Hoang
1deed6cd12 linux-builder: fix eval failure 2023-07-23 18:07:48 +10:00
github-actions[bot]
a0c327d315
Merge master into staging-next 2023-07-23 06:01:17 +00:00
Tom Fitzhenry
cb470d61c3 remove tomfitzhenry@ as maintainer for some packages
Motivation: Over the foreseeable future I'll have less time to do
maintenance, so I'm reducing the set of packages I maintain to just
those that I use.
2023-07-23 12:39:57 +10:00
FlafyDev
519a71edc3 nixos/nix-daemon: change regular if to mkIf 2023-07-23 04:16:04 +03:00
Ilan Joselevich
ef91cf7ecb
Merge pull request #244919 from fufexan/hyprland
nixos/hyprland: apply config options to package
2023-07-23 04:01:02 +03:00
github-actions[bot]
86a73bdb86
Merge master into staging-next 2023-07-23 00:02:31 +00:00
Ilan Joselevich
e29e8a71c8
nixos/twingate: improve test 2023-07-23 01:24:51 +03:00
Mihai Fufezan
e9f270f1f0
nixos/hyprland: apply config options to package 2023-07-23 01:15:59 +03:00
Fabián Heredia Montiel
ffba10cd9a linux_6_3: drop as EOL 2023-07-22 12:46:17 -06:00
github-actions[bot]
41e6556ad3
Merge master into staging-next 2023-07-22 18:01:06 +00:00
Ryan Lahfa
c4ae17443e
Merge pull request #244233 from oddlama/init-typesense-bin 2023-07-22 18:47:45 +02:00
oddlama
234dd85da0
nixos/typesense: init at 0.24.1 2023-07-22 16:38:13 +02:00
Raito Bezarius
44aee34594 Revert "nixos/gitea: set service type to notify"
This reverts commit b61919e5e0.

As it breaks Forgejo who does not support this feature yet.
2023-07-22 16:12:36 +02:00
Florian Klink
02a5e9c933 nixos/networkmanager: create pppd lock directory
I digged up some 3G stick, which uses ppp to set up the connection.

It failed to spin up ppp, because ppp failed to find the directory it wants to create its lockfiles in:

```
Jul 22 16:47:49 tp ModemManager[926779]: <info>  [modem1] state changed (connected -> disconnecting)
Jul 22 16:47:49 tp ModemManager[926779]: <info>  [modem1] simple connect started...
Jul 22 16:47:49 tp ModemManager[926779]: <info>  [modem1] simple connect state (4/10): wait to get fully enabled
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] state changed (disconnecting -> registered)
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (5/10): wait after enabled
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1/bearer0] connection #11 finished: duration 1s
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (6/10): register
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (7/10): wait to get packet service state attached
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (8/10): bearer
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (9/10): connect
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] state changed (registered -> connecting)
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] state changed (connecting -> connected)
Jul 22 16:47:50 tp ModemManager[926779]: <info>  [modem1] simple connect state (10/10): all done
Jul 22 16:47:50 tp pppd[1576260]: Plugin /nix/store/yqdqzz6y6agcmrfj8b6pwqhjcjyb3ypr-networkmanager-1.42.6/lib/pppd/2.5.0/nm-pppd-plugin.so loaded.
Jul 22 16:47:50 tp NetworkManager[1576260]: Plugin /nix/store/yqdqzz6y6agcmrfj8b6pwqhjcjyb3ypr-networkmanager-1.42.6/lib/pppd/2.5.0/nm-pppd-plugin.so loaded.
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: initializing
Jul 22 16:47:50 tp pppd[1576260]: pppd 2.5.0 started by root, uid 0
Jul 22 16:47:50 tp pppd[1576260]: Can't create lock file /var/run/pppd/lock/LCK..ttyUSB0: No such file or directory
Jul 22 16:47:50 tp NetworkManager[1576260]: Can't create lock file /var/run/pppd/lock/LCK..ttyUSB0: No such file or directory
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: status 2 / phase 'serial connection'
Jul 22 16:47:50 tp pppd[1576260]: Exit.
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: status 0 / phase 'dead'
Jul 22 16:47:50 tp pppd[1576260]: nm-ppp-plugin: cleaning up
```

Creating the directories via tmpfiles.d got the connection to succeed,
and might also fix other connections using PPP.
2023-07-22 17:00:17 +03:00
github-actions[bot]
045f0259fe
Merge master into staging-next 2023-07-22 12:01:28 +00:00
Felix Bühler
0a2745684e
Merge pull request #239624 from Stunkymonkey/use-optionalString-then
treewide: use optionalString instead of 'then ""'
2023-07-22 13:02:47 +02:00