Commit Graph

41841 Commits

Author SHA1 Message Date
Marie Ramlow
dd8e2c72ad nixosTests.renovate: init vm test 2024-06-11 18:57:09 +02:00
Marie Ramlow
0adb3b8033 nixos/renovate: init 2024-06-11 18:57:04 +02:00
Sandro
5428ca74ce
Merge pull request #318924 from SuperSandro2000/317188
nixos/nvidia: fix eval with virtualisation.docker.enableNvidia enabled
2024-06-11 18:05:00 +02:00
Sandro Jäckel
319c97cfcb
nixos/nvidia: fix eval with virtualisation.docker.enableNvidia enabled 2024-06-11 16:02:24 +02:00
Sandro
7b48659268
Merge pull request #318919 from SuperSandro2000/locate-env
nixos/locate: only set LOCATE_PATH for findutils locate
2024-06-11 15:48:01 +02:00
Luflosi
4f8d158986
kubo: 0.28.0 -> 0.29.0
https://github.com/ipfs/kubo/releases/tag/v0.29.0

The FUSE mount functionality is no longer completely broken, so reenable the NixOS test.
2024-06-11 15:47:09 +02:00
h7x4
d952db86c9
nixos/vaultwarden: add test for backup script, fix flaky sqlite test 2024-06-11 13:10:44 +02:00
Maximilian Bosch
6ecafb1c38
nixos/nextcloud: fix objectstore/s3 test
* Make sure `withRcloneEnv` actually invokes the command it gets as
  `argv`. Until no, nothing was uploaded. This mistake was copied from
  the MySQL test that appears to have the same issue (will be addressed
  in the next commit).

* Test upload/download through with rclone once to see if Nextcloud
  interaction with S3 works fine.

* Make sure we actually have something in the bucket (until now with an
  `ls` and no real check, will do some larger cleanups and make this
  better in the next commit).

* Use actual AWS-style access keys.
2024-06-11 12:37:42 +02:00
Nguyễn Gia Phong
14c57ce7f7 nixos/public-inbox: make coderepo paths accessible
Fix typo in 03216e705c.
2024-06-11 19:32:59 +10:00
Ming-Chuan
9f488f27d7 nixos/initrd-ssh: Fix ignoreEmptyHostKeys description 2024-06-11 19:31:21 +10:00
Tom Fitzhenry
edd19efe4e nixos/shadow: clean up module 2024-06-11 19:28:32 +10:00
Tom Fitzhenry
725777250b nixos/shadow: introduce security.shadow.enable
Allow users to disable the shadow authentication suite.

My primary motivation is to reduce the attack surface via setuid
binaries, which shadow understandably introduces many. I realised,
however, that I don't use any of these.

The test demonstrates login working without needing the shadow suite.
2024-06-11 19:28:32 +10:00
rewine
cab913114a deepin: new deepin 23 components 2024-06-11 17:05:53 +08:00
rewine
ccbf715d43 deepin: don't install deepin-turbo as it's unmaintained 2024-06-11 17:05:53 +08:00
Jon Seager
5b403d5f9c
Merge pull request #318866 from f0x52/patch-3
nixos/scrutiny: Default collector API url to configured host + port
2024-06-11 08:46:03 +01:00
Jared Baur
d4d5fd718d
nixos/clatd: make client fetch PLAT prefix dynamically
We can expose the PLAT prefix to the client via DNS64 so clatd is able
to determine the prefix dynamically. We can also test that some
systemd-networkd PREF64 settings work as expected when exposed on the
router.
2024-06-11 00:41:10 -07:00
Sandro
4a77c223c9
Merge pull request #269460 from tie/pghero
pghero: init at 3.4.1
2024-06-11 01:00:56 +02:00
Sandro Jäckel
8e66b653e8
nixos/locate: drop with lib{,.types}, misc cleanup 2024-06-11 00:44:19 +02:00
Sandro Jäckel
dec5ef74b0
nixos/locate: only set LOCATE_PATH for findutils locate
For plocate/mlocate it causes the results to be printed twice.
2024-06-11 00:10:09 +02:00
Felix Buehler
edcdf6ad3b nixos/freshrss: fix reload when config changes 2024-06-10 22:16:20 +02:00
euxane
e23df553b0 doc/release-notes: migration note for stalwart-mail user
This follows 6ee84bcda0.

Here I prefer a simple mention in the release notes instead of some
automatic migration, which could interfere with all the other changes
already potentially requiring some admin interventions.

Co-authored-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2024-06-10 21:03:24 +02:00
f0x52
5c922605bb
nixos/scrutiny: Default collector API url to configured host + port 2024-06-10 19:52:03 +02:00
Florian Klink
d2d2467118
Merge pull request #318306 from flokli/grafana-alloy-module
grafana-alloy: add NixOS module
2024-06-10 19:36:36 +03:00
Sandro
3d057cef0e
Merge pull request #316519 from michaelBelsanti/espanso
nixos/espanso: fix espanso options
2024-06-10 17:11:39 +02:00
Emmanuel Rosa
f06a960824
nixos/nvidia: optionally disable setup commands for reverse sync (#318521)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-10 16:57:45 +02:00
Sandro
da3214b120
Merge pull request #309551 from aca/master 2024-06-10 15:48:32 +02:00
Matthias Beyer
8a9a6c764e
Merge pull request #314422 from eclairevoyant/journalwatch-fix-module
nixos/journalwatch: add package option
2024-06-10 15:26:15 +02:00
Arjan Schrijver
50643d3a98 qtile: use proper session .desktop files 2024-06-10 14:34:23 +02:00
Jonas Heinrich
de1f4538e8
nixos/tests/nextcloud: Add test for object store 2024-06-10 13:52:55 +02:00
Sandro
b8d6d611c6
Merge pull request #315380 from lucasew/20240528-fix-loki
nixos/loki: add network.target to after
2024-06-10 13:47:21 +02:00
Sandro
41386672b7
Merge pull request #286099 from Cynerd/mqtt2influxdb-package-fix
nixos/mqtt2influxdb: add missing package option
2024-06-10 13:46:24 +02:00
Sandro
0a8b4b05f2
Merge pull request #317188 from SuperSandro2000/nvidia-module 2024-06-10 13:16:42 +02:00
Weijia Wang
9520d06979
Merge pull request #266450 from CRTified/adguardhome-fix-246461
nixos/adguardhome: run --check-config before merging
2024-06-10 12:46:26 +02:00
Guanran928
e27092e106
metacubexd: init at 1.140.0 (#297721)
* metacubexd: init at 1.140.0

* nixos/mihomo: add example for cfg.webui
2024-06-10 12:45:19 +02:00
Florian Klink
1fa96ce4df grafana-alloy, nixos/alloy: add hbjydev to maintainers 2024-06-10 13:40:45 +03:00
Florian Klink
c12da48755 nixosTests.alloy: init VM test
This adds a VM test, starting up Grafana Alloy and ensuring it comes
up healthy.
2024-06-10 13:35:33 +03:00
Florian Klink
486f515d47 nixos/alloy: init module
This adds a NixOS module for Grafana Alloy.

I started from the grafana-agent one but dropped all settings and config
management whatsoever.

Grafana Alloy uses its own Alloy config format (similar to HCL), which
is not really possible to express in Nix.
Simply pointing to a path in `/etc`, and leaving it up to the user to configure
it via `environment.etc` allows the user to arrange config files however
it makes most sense for them.

The module, systemd unit etc is called "alloy", not "grafana-alloy" to
follow the way it's packaged on other distros, to follow POLA.
2024-06-10 13:32:40 +03:00
Sandro Jäckel
e40abba1ed
nixos/nvidia: minor cleanups 2024-06-10 12:06:42 +02:00
Christian Kögler
3844793c02
Merge pull request #318449 from ck3d/nixos-test-machinectl-cgroup2
nixos/tests/machinectl: add workaround for nix-build
2024-06-10 07:43:49 +02:00
Christian Kögler
181e82f4b2 nixos/tests/machinectl: add workaround for nix-build 2024-06-10 07:42:21 +02:00
Jared Baur
b867cc215f
nixos/systemd-networkd: add PREF64 related options 2024-06-09 20:41:32 -07:00
Mario Rodas
cfbeda848e
Merge pull request #318588 from 1sixth/fix-mpv-test
nixos/tests/mpv: adapt to the new mpv wrapper
2024-06-09 21:49:59 -05:00
1sixth
f862ae2e31
nixos/tests/mpv: adapt to the new mpv wrapper 2024-06-10 09:34:50 +08:00
Markus Kowalewski
b98e90213d
Merge pull request #317035 from ck3d/fix-node-red-path
nixos/node-red: fix passthru of PATH
2024-06-09 20:13:58 +00:00
Moritz Sanft
1ddd2fa945
grafana-reporter: migrate to buildGoModule
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-06-09 21:50:26 +02:00
Maximilian Bosch
1fca5674cc
Merge pull request #318282 from Ma27/fix-zabbix-proxy-option
nixos/zabbix-proxy: fix option default
2024-06-09 11:13:19 +00:00
Maximilian Bosch
afa84d8a13
Merge pull request #318061 from PedroRegisPOAR/remove-extra-backtick
Removes extra backtick from manual
2024-06-09 10:48:16 +00:00
Francesco Gazzetta
4085796c8c nixosTests.ladybird: use programs.ladybird option 2024-06-09 08:18:31 +00:00
Sandro Jäckel
e64cfbbf99
ArchiSteamFarm: 6.0.1.24 -> 6.0.3.4, switch to generic upstream variant to support Monitoring Plugin 2024-06-09 04:51:37 +02:00
Sandro
1acd99478c
Merge pull request #308539 from SuperSandro2000/gdk-pixbuf-xserver
nixos/gdk-pixbuf: move out of xserver
2024-06-09 02:08:30 +02:00
Pol Dellaiera
64e5a329cb
Merge pull request #316108 from comfysage/nixos/alsa-fix-restore
nixos/alsa: fix audio state loading on system start
2024-06-08 23:52:54 +02:00
h7x4
195d155a1c
nixos/kerberos_server: use krb format generator, plus misc cleanup
- Introduce more possible options by using the krb format generator.
- Enforce package choice is using a correct package.
- Use meta attribute to decide implementation, allows for overriding the
  package.
- Make necessary changes to the format, to allow for multiple ACL files in
  heimdal.
- Add systemd target and slice for both implementations.
- Move state to `/var/lib`
- Add documentation
2024-06-08 23:29:53 +02:00
Sandro Jäckel
131ef6d2ed
nixos/no-x-libs: fix gjs
Due to the switch to finalAttrs, we now need to properly disable installTests.
2024-06-08 21:46:14 +02:00
Sandro Jäckel
b939c54015
nixos/gdk-pixbuf: move out of xserver 2024-06-08 21:26:28 +02:00
Stu Small
12bd55a1a3 nixos/power-profiles-daemon: Add assertion with auto-cpufreq
auto-cpufreq is similar to tlp in that it shouldn't be run with
power-profiles-daemon.  There functionality can conflict and bugs can
show up.  On my system this materialized by auto-cpufreq frequently
shutting down, but there may be other consequences.

This change follows the same pattern as the tlp assertion
2024-06-08 13:01:08 -06:00
sternenseemann
50848d126c Merge branch master into haskell-updates 2024-06-08 17:32:17 +02:00
Maximilian Bosch
c323ea63f0
nixos/zabbix-proxy: fix option default
Apparently I forgot to test this one while developing
5142b7afa8 ("nixos/postgresql: turn
settings into a submodule").

Apologies!
2024-06-08 15:40:26 +02:00
Florian Klink
6a3a382d5b nixos/mycelium: add mycelium binary to systemPackages
It's now possible to invoke `mycelium {routes,peers} list`.
2024-06-08 15:01:32 +03:00
Kira Bruneau
783a966a20
Merge pull request #318092 from aidalgol/libxnvctrl-pure
Use libXNVCtrl purely
2024-06-08 06:35:15 -04:00
Pol Dellaiera
a7049a06b7
Merge pull request #318099 from drupol/open-webui-add-more-env-vars
nixos/open-webui: add more default variables
2024-06-08 08:56:37 +02:00
Tom Fitzhenry
54332f47ce nixos/initrd-ssh: set KexAlgorithms/Ciphers/MACs only if non-null
Prior to this commit, if services.openssh.settings.Macs is null, then
initrd-ssh.nix would fail to build.

Same for KexAlgorithms and Ciphers.

Noticed by @SuperSandro2000: https://github.com/NixOS/nixpkgs/pull/316934#issuecomment-2149659873
2024-06-08 15:14:26 +10:00
Tom Fitzhenry
9e4e5d96f1 tests/openssh: use upstream's algorithms in "no openssl" example
When I initially wrote this test, I wasn't aware that services.openssh
could opt into using OpenSSH's default algorithms by just setting the
relevant settings to null.

That's a better approach since:
* it's a simpler setting for this test to have to worry about
* it introduces test coverage for the null case
* the null case should be demonstrated as an example for those that
  want to compile without OpenSSL
2024-06-08 15:03:08 +10:00
Yt
9109eb1779
Merge pull request #316845 from onny/davfs2-cleanup
nixos/davfs2: Remove deprecated extraConfig
2024-06-08 00:48:17 +00:00
github-actions[bot]
26e3a02633
Merge master into haskell-updates 2024-06-08 00:14:17 +00:00
Martin Weinelt
121ba21838
Merge pull request #286999 from SuperSandro2000/acme-check-account-hash
tests/acme: check consistent account hash
2024-06-07 23:57:20 +02:00
Pol Dellaiera
028584b548
nixos/open-webui: add more default variables 2024-06-07 23:15:54 +02:00
Aidan Gauland
19960c426d
nixos/nvidia: revert libXNVCtrl changes
This library does not actually need to match the Nvidia driver version,
so we do not need to make it available impurely.

This reverts the following commits.
9b3461e7ae
4e353b67f6
2024-06-08 08:00:55 +12:00
Pedro O. A. Regis
015e29a742 doc: removes extra backtick 2024-06-07 15:21:57 -03:00
Cosima Neidahl
5b3b5d79aa
Merge pull request #316275 from OPNA2608/fix/lomiri-xkb-layout
lomiri.lomiri: Try to consider services.xserver.xkb.layout
2024-06-07 19:49:31 +02:00
Thomas Churchman
d226935fd7 nixos/ddclient: deprecate use, implement use{v4,v6}
Upstream replaced `use` with `use{v4,v6}`:
4a1b06630b/ChangeLog.md (new-features)
2024-06-07 17:28:25 +02:00
Pol Dellaiera
1905dcb574
Merge pull request #316240 from OPNA2608/init/lomiri/lomiri-filemanager-app
lomiri.lomiri-filemanager-app: init at 1.0.4
2024-06-07 14:33:41 +02:00
Jörg Thalheim
29327b68dd
Merge pull request #312863 from Mic92/netboot
netboot: drop syslinux and grub (10% savings for nixos-anywhere images)
2024-06-07 13:00:41 +02:00
OPNA2608
6477cb49a5 nixos/lomiri: Add file manager 2024-06-07 11:37:53 +02:00
OPNA2608
4a495ec755 tests/lomiri-filemanager-app: init 2024-06-07 11:37:49 +02:00
Karel Kočí
4ace1c0faf
nixos/mqtt2influxdb: add missing package option
This is used in the module but option wasn't defined at all.
2024-06-07 11:37:04 +02:00
K900
902ca5b470 nixos/opengl: fix typo 2024-06-07 12:06:26 +03:00
Keith Pine
6fda200fa4 nixos/inadyn: fix cache directory path
The CacheDirectory subdirectory is already part of $CACHE_DIRECTORY.
2024-06-07 09:03:24 +02:00
Anthony Roussel
46db91c0d7
nixos/samba: only create /etc/samba/smb.conf when samba is enabled 2024-06-07 08:44:21 +02:00
github-actions[bot]
a5d1b908b4
Merge master into haskell-updates 2024-06-07 00:13:56 +00:00
PatrickDaG
0fdf6e2917
nixos/netbird: fix defaults (#314656)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-07 00:02:06 +02:00
Peder Bergebakken Sundt
4f06a00fa9
Merge pull request #295155 from onemoresuza/hare-hook
hareHook: init
2024-06-06 23:55:33 +02:00
Nicolas Lenz
0b8fdfd917
nixos/pretix: fix defaultText for celery options 2024-06-06 21:37:14 +02:00
ajs124
2bcef047dc
Merge pull request #317087 from baloo/baloo/nixosTest.lvm2/stage1-xfs
nixosTests.lvm2: stage1 tests use xfs
2024-06-06 20:58:45 +02:00
Florian Klink
610a87e260
Merge pull request #317785 from drupol/nixos-boot-use-replace-fail
nixos/boot: use `--replace-fail`
2024-06-06 20:54:18 +02:00
ajs124
84cb7f5eb5
Merge pull request #317084 from baloo/baloo/kvdo/kernel-5.17
kvdo: build is broken on kernel < 5.17
2024-06-06 19:42:32 +02:00
K900
b02badf4fd
Merge pull request #317585 from SuperSandro2000/opengl-tmpfiles-settings
nixos/opengl: use systemd.tmpfiles.settings
2024-06-06 19:41:38 +03:00
Pol Dellaiera
f2318b9d58
nixos/boot: use --replace-fail 2024-06-06 18:33:30 +02:00
Bobby Rong
48deaba189
Merge pull request #317047 from bobby285271/upd/pantheon-unset-qt-env
nixos/pantheon: Do not set QT_QPA_PLATFORMTHEME
2024-06-06 22:56:02 +08:00
Arnout Engelen
2389f5fdc3
virtualbox guest module: draganddrop became dragAndDrop (#317756)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-06 16:48:47 +02:00
Sandro
345330c768
Merge pull request #291552 from SuperSandro2000/bash-completion-package-option 2024-06-06 15:22:21 +02:00
K900
7bf4340e73
Merge pull request #317582 from mweinelt/test-driver-subtest-return-type
nixos/test-driver: fix return value of subtest function
2024-06-06 08:21:14 +03:00
Sandro Jäckel
1c60f0a9a0 nixos/bash-completion: move options to programs.bash.completion, add package option, drop with lib
This allows to easily test bash-completion updates without triggering a mass rebuild locally.
2024-06-06 02:51:06 +02:00
github-actions[bot]
bd4363d68b
Merge master into haskell-updates 2024-06-06 00:13:27 +00:00
Jonathan Davies
7d7cb3e425
doc/release-notes: 24.11: Added Quickwit item to new services. 2024-06-06 00:49:42 +01:00
Jonathan Davies
c31c69206f
nixos/vector: Added syslog→Quickwit testcase 2024-06-06 00:49:39 +01:00
Jonathan Davies
237353040e
nixos/quickwit: Added testcase 2024-06-06 00:49:38 +01:00
Jonathan Davies
2ef778f69a
nixos/quickwit: init module 2024-06-06 00:49:37 +01:00
Martin Weinelt
ab897a8c62
nixos/test-driver: fix return value of subtest function
Mypy since version 1.10.0 complains about this:

> test_driver/driver.py:109: error: No return value expected  [return-value]
2024-06-06 01:07:39 +02:00
Sandro Jäckel
576e94f8c8 nixos/opengl: use systemd.tmpfiles.settings
I want to use the final symlinked package in system.checks and need to
access that somehow. Instead of adding a new option, we might as well
convert tmpfiles to the new structure.
2024-06-06 00:55:31 +02:00
Sandro Jäckel
0898fee0de nixos/opengl: remove with lib over entire file 2024-06-06 00:35:29 +02:00
tomf
b2b3f5d68d
nixos/oci-containers: add preRunExtraOptions (#315356)
`podman --help` and `docker --help` each have global options, that
must be specified before `run`.
2024-06-05 18:18:37 -04:00
Vladimír Čunát
bb0a4e8786
nixos/release-combined: fix evaluation 2024-06-05 17:50:37 +02:00
Bobby Rong
a53e9cab22
Merge pull request #317428 from a-kenji/virtualbox-host-typo
nixos/virtualbox-host: fix typo in assertion
2024-06-05 22:11:14 +08:00
Adam C. Stephens
af4ac075a3
Merge pull request #312523 from emilylange/nixos-forgejo-secrets
nixos/forgejo: refactor secrets, add `cfg.secrets`, forgejo: build `environment-to-ini`, nixos/tests/forgejo: test `cfg.secrets` using /metrics endpoint
2024-06-05 10:01:37 -04:00
a-kenji
406e613b95 nixos/virtualbox-host: fix typo in assertion 2024-06-05 14:04:03 +02:00
Thomas Gerbet
ef6fea2d86 openssh: move Kerberos support into a dedicated package
The `openssh` and `openssh_hpn` packages are now built without
the Kerberos support by default in an effort to reduce the attack surface.

The Kerberos support is likely used only by a fraction of the total users
(I'm guessing mainly users integrating SSH in an Active Directory env) so
dropping it should not impact too many users. It should also be noted that
the Kerberos/GSSAPI auth is disabled by default in the configuration.
`opensshWithKerberos` and `openssh_hpnWithKerberos` are added in order
to provide an easy migration path for users needing this support.

The `openssh_gssapi` package is kept untouched.
2024-06-05 19:45:31 +10:00
Florian Klink
40066ba0d8
Merge pull request #316168 from dawidd6/systemd-user-generators
nixos/systemd: link user-generators
2024-06-05 09:59:29 +02:00
Jörg Thalheim
7d98bbfcd5
Merge pull request #315827 from JohnRTitor/hyprland-module
nixos/{hyprland, wayland-common}: disable wlr portal for hyprland, enable xdg autostart for all wayland compositors
2024-06-05 09:57:53 +02:00
Jörg Thalheim
9028937bc4
Merge pull request #317347 from Prince213/doc-bootspec
nixos/activation/bootspec: misc fixes
2024-06-05 09:56:54 +02:00
Pol Dellaiera
133aa44c38
Merge pull request #317286 from drupol/open-webui-add-more-env
nixos/{ollama,open-webui}: minor service update
2024-06-05 09:12:28 +02:00
Pol Dellaiera
309451127f
nixos/open-webui: update options default values 2024-06-05 08:05:19 +02:00
Pol Dellaiera
5664bb7899
nixos/open-webui: add example in options 2024-06-05 08:05:18 +02:00
Pol Dellaiera
a8670536e5
nixos/open-webui: remove preStart step
nixos/open-webui: remove `preStart` step
2024-06-05 08:05:18 +02:00
Pol Dellaiera
61ab4de94c
nixos/open-webui: update option and service descriptions 2024-06-05 08:05:18 +02:00
Pol Dellaiera
709eb8ebaf
nixos/open-webui: add openFirewall option 2024-06-05 08:05:18 +02:00
Pol Dellaiera
8ea262601a
nixos/open-webui: add release note entry 2024-06-05 08:05:18 +02:00
Pol Dellaiera
c54890e226
nixos/ollama: update port option, use types.port 2024-06-05 08:05:18 +02:00
Pol Dellaiera
cb8670469b
nixos/ollama: add openFirewall option 2024-06-05 07:09:13 +02:00
Sizhe Zhao
5209c84957
nixos/activation/bootspec: fix style 2024-06-05 11:14:36 +08:00
Sizhe Zhao
4f05b8e213
nixos/activation/bootspec: rephrase 2024-06-05 11:13:43 +08:00
Sizhe Zhao
3a4753867d
nixos/activation/bootspec: no longer experimental 2024-06-05 11:09:55 +08:00
Sizhe Zhao
0aaccaa596
nixos/activation/bootspec: now enabled by default 2024-06-05 11:06:03 +08:00
github-actions[bot]
daadd0b777
Merge master into haskell-updates 2024-06-05 00:13:17 +00:00
Coutinho de Souza
b0fcfa88cf
hareHook: init
Co-authored-by: Colin <colin@uninsane.org>
2024-06-04 20:32:51 -03:00
emilylange
ac20219508
nixos/rl-2411: add services.forgejo.secrets
and the accompanying `services.forgejo.mailerPasswordFile` deprecation.
2024-06-05 01:05:47 +02:00
emilylange
fd58d2299b
nixos/tests/forgejo: test cfg.secrets using /metrics endpoint
Heavily inspired by b59e5a34e7 (gitea).
2024-06-05 00:46:00 +02:00
emilylange
694db856ed
nixos/forgejo: refactor secrets, add cfg.secrets
This is not a breaking change. Existing setups continue to work as-is.

Users of `cfg.mailerPasswordFile` will get an option rename/deprecation
warning, but that's it (assuming there is no regression).

This adds `cfg.secrets`, which is a wrapper over systemd's
`LoadCredential=` leveraging Forgejo's `environment-to-ini`.

`environment-to-ini` is intended for configuring Forgejo in OCI
containers.

It requires some fairly annoying escaping of the section names to fit
into the allowed environment variable charset.

E.g. `"log.console".COLORIZE = false` becomes
`FORGEJO__LOG_0x2E_CONSOLE__COLORIZE=false`.

 - `.` needs to be replaced with `_0X2E_` and
 - `-` needs to be replaced with `_0X2D_`

Those are simply the hex representation of each char from an ASCII
table:

. = ASCII 46 = 46 (decimal) = 2E (hex) = 0x2E = _OX2E_

To make interacting with `environment-to-ini` less annoying, we template
and escape the sections/keys in nix:

`cfg.secrets` takes the same free-form sections/keys as `cfg.settings`.
Meaning there is now a generalized abstraction for all keys, not just
those that have been manually implemented in the past.

It goes as far as theoretically allowing one to have `DEFAULT.APP_NAME`
read from a secret file.

I don't know why one would want to do that, but it has been made
possible by this :^)

More reasonable examples are listed in the `cfg.secrets` option example.

We also continue to bootstrap a handful of secrets like
`security.SECRET_KEY`. This is done is a sort of sidecar bootstrap unit
fittingly called `forgejo-secrets.service`.

Overriding those is, just like before, not really intended and requires
the use of `lib.mkForce` and might lead to breakage. But it is, in a
way, more possible than before.
2024-06-05 00:45:59 +02:00
nikstur
1baf7d7e4e
Merge pull request #314890 from danielbarter/repart-image-fix
repart-image: remove --map-root-user flag from unshare
2024-06-04 22:28:05 +02:00
Nick Cao
5032dc9bc3
Merge pull request #317038 from abmantis/patch-5
nixos/nvidia-optimus: add nvidia-modeset to blacklist
2024-06-04 16:10:52 -04:00
kirillrdy
dfee75c298
Merge pull request #309121 from jlbribeiro/pkgs/zx-8.0.2
zx: 7.2.3 -> 8.1.2
2024-06-05 06:07:55 +10:00
Arian van Putten
605418f9b1
Merge pull request #317257 from arianvp/stephank-fix-acme2
nixos/acme: allow setting security.acme.defaults.server = null to keep old accounts directory
2024-06-04 21:58:25 +02:00
K900
840914c324
Merge pull request #317268 from SuperSandro2000/plasma6-cups
nixos/plasma6: make print-manager depend on cups
2024-06-04 22:18:59 +03:00
Maximilian Bosch
7e2210236e
Merge pull request #316004 from Ma27/nc-memlimit
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
2024-06-04 19:18:03 +00:00
Sandro Jäckel
7c39d372f7 nixos/plasma6: make print-manager depend on cups 2024-06-04 20:50:06 +02:00
Arian van Putten
f8439331dc doc/release-notes: Add note about backwards compatibility in ACME module
Co-authored-by: Stéphan Kochen <git@stephank.nl>
2024-06-04 20:23:30 +02:00
Stéphan Kochen
d1f07e6382 nixos/acme: allow setting security.acme.defaults.server = null to keep old accounts directory
The accounts directory is based on the hash of the settings.

https://github.com/NixOS/nixpkgs/pull/270221 changed the  default of
security.acme.defaults.server from null to the default letsencrypt URL
however as an unwanted side effect this means the accounts directory
changes and the ACME module will create a new a new account.

This can cause issues with people using CAA records that pin the
account ID or people who have datacenter-scale NixOS deployments

We allow setting this option to null again for people who want
to keep the old account and migrate at their own leisure.

Fixes https://github.com/NixOS/nixpkgs/issues/316608

Co-authored-by: Arian van Putten <arian.vanputten@gmail.com>
2024-06-04 20:09:46 +02:00
Pol Dellaiera
6b6d4aeb35
Merge pull request #316248 from shivaraj-bh/open-webui
open-webui: init at 0.2.4
2024-06-04 15:47:03 +02:00
Jörg Thalheim
f3ad1f2937 nixos-small: fix eval 2024-06-04 14:07:11 +02:00
shivaraj-bh
f66cb82fef nixos/open-webui: init 2024-06-04 16:46:19 +05:30
Jörg Thalheim
c71ebe0dc8 netboot: drop syslinux and grub
The comment says this is required by other modules but to be honest, I
cannot see where. Bootloaders will be included automatically by nixos
generation if their `installBootLoader` attribute references it.

This helps us to make kexec images even smaller espeically when
combined with the perlless profile.
2024-06-04 10:35:20 +02:00
Jörg Thalheim
7c503a8a9d
Merge pull request #315927 from Artturin/movetestsnix1
nixosTests.nix-misc: split from nixosTests.misc
2024-06-04 10:18:25 +02:00
Morgan Jones
7f03a67b0b
{doc/android,release-notes}: update android-studio and androidenv 2024-06-03 23:01:44 -07:00
Bobby Rong
6051698052
Merge pull request #314695 from nonetrix/patch-1
nixos/xdg/portal: Fix typo
2024-06-04 13:27:16 +08:00
Adam C. Stephens
72f73120fc
Merge pull request #316162 from adamcstephens/lxd/vm-cfg-rw
lxd-virtual-machine-image: install initial configuration read-write
2024-06-04 00:16:12 -04:00
Arthur Gautier
70fcd3ebf6 nixosTests.lvm2: stage1 tests use xfs 2024-06-03 20:50:39 -07:00
Arthur Gautier
265f31677e kvdo: build is broken on kernel < 5.17
complete_and_exit has been renamed to kthread_complete_and_exit
2024-06-03 20:48:47 -07:00
Daniel Barter
d7a9d49c42 repart-image: removing unshare (and util-linux dep) form systemd-repart invocation
..
2024-06-03 17:48:27 -07:00
github-actions[bot]
14af82271b
Merge master into haskell-updates 2024-06-04 00:13:34 +00:00
Bobby Rong
36bc3f46ba
nixos/pantheon: Do not set QT_QPA_PLATFORMTHEME
7aa79d47f7

Closes #316991
2024-06-04 07:37:56 +08:00
Abílio Costa
79cd2f9738
nixos/nvidia-optimus: add nvidia-modeset to blacklist
The nvidia-modeset module is loaded, which in turn pulls in the nvidia module. This makes bbswitch fail to turn off the card since it would be in use by the module.
2024-06-03 23:18:34 +01:00
Christian Kögler
966d214719 nixos/node-red: fix passthru of PATH 2024-06-03 23:23:38 +02:00
José Ribeiro
6fc5c63584
doc(rl-24.11): zx v8 breaking changes 2024-06-03 22:16:55 +01:00
Jonathan Davies
2c6830c47e
nixos/prometheus: Move config reload test to subtest 2024-06-03 20:33:28 +01:00
Jonathan Davies
0c99c5f8b7
nixos/prometheus: Added Alertmanager test case 2024-06-03 20:33:28 +01:00
Jonathan Davies
571db45269
nixos/alertmanager-webhook-logger: init module 2024-06-03 20:33:27 +01:00
Jonathan Davies
38495e1ec0
nixos/prometheus: Added federation test case 2024-06-03 20:33:24 +01:00
Jonathan Davies
87cb2d582e
nixos/prometheus: Added pushgateway test case 2024-06-03 20:33:23 +01:00
Jonathan Davies
61e7915267
nixos/prometheus: Added remote-write test case 2024-06-03 20:33:22 +01:00
Jonathan Davies
d6296eceaf
nixos/prometheus: Added simple two Prometheus server testcase 2024-06-03 20:33:21 +01:00
Jonathan Davies
d276f0573b
nixos/prometheus: Renamed existing Prometheus test to Thanos. 2024-06-03 20:33:13 +01:00
Doron Behar
459335513a
Merge pull request #315555 from doronbehar/pkg/musescore
musescore: 4.3.0 -> 4.3.1
2024-06-03 21:20:15 +03:00
Thomas Gerbet
8359a1c6f7
Merge pull request #316884 from NixOS/enableSSHAgentAuth
doc/release-notes: repalce security.pam.enableSSHAgentAuth with secur…
2024-06-03 20:11:30 +02:00
Sandro
43b5ccde57
Merge pull request #316879 from SuperSandro2000/mkEnableOption 2024-06-03 19:03:12 +02:00
Sandro Jäckel
1c2132f714
nixos/installation-cd-plasma5: fix even more aliases 2024-06-03 16:26:54 +02:00
K900
2e8de9bd1a
Merge pull request #316929 from SuperSandro2000/cd-konsole
nixos/installation-cd-plasma5: don't use alias for konsole
2024-06-03 17:25:12 +03:00
Sandro
a88fb925bb
nixos/installation-cd-plasma5: don't use alias for konsole 2024-06-03 16:22:12 +02:00
yomaq
3f0bd8ab85 nixos/healthchecks: add settingsFile option
Single unified env file read by systemd
2024-06-03 08:56:52 -05:00
Michele Guerini Rocco
9e97770a19
Merge pull request #312317 from tom-kuca/replace-existing-network-addresses
nixos/network-interfaces: prevent failure when a network address already exists
2024-06-03 15:30:13 +02:00
Sandro
617a79dd10
doc/release-notes: repalce security.pam.enableSSHAgentAuth with security.pam.sshAgentAuth.enable 2024-06-03 13:34:00 +02:00
Sandro Jäckel
41452802cb
treewide: fix all obviously wrong mkEnableOptions 2024-06-03 13:20:32 +02:00
Sandro
0387dede7c
Merge pull request #316732 from SuperSandro2000/tailscale-auth 2024-06-03 12:49:31 +02:00
Jonas Heinrich
4ce2189082 nixos/davfs2: Remove deprecated extraConfig 2024-06-03 11:36:14 +02:00
Dawid Dziurla
fbbc41f7da
nixos/systemd: simplify hooks function 2024-06-03 11:15:59 +02:00
Florian Klink
c149b8818b
Merge pull request #316836 from srhb/fix-garage-assert
nixos/garage: fix replication 1.0 assertion
2024-06-03 11:14:03 +03:00
Sarah Brofeldt
f7393d13fe nixos/garage: fix replication 1.0 assertion
Use the `cfg.package.version` (string) instead of the entire package so
users don't see  `error: value is a set while a string was expected`
instead of the intended assertion message.
2024-06-03 09:56:42 +02:00
Florian Klink
77a51024c0
Merge pull request #316697 from bbenno/fix-gollum
nixos/gollum: fix systemd tempfile permission
2024-06-03 08:25:04 +03:00
John Titor
de77718887
nixos/wayland-session: cleanup
xwayland, wlr-portal ->
 enable-xwayland, enable-wlr-portal
2024-06-03 09:28:00 +05:30
Doron Behar
138ad7b73a nixos.tests.musescore: fix and improve
- Use the print dialog to create a sample score.
- Copy also the sample score from the vm to $out of the test.
- Create a bit more screenshots
- Only use machine.wait_for_window, never machine.wait_for_text which
  requires OCR which is slow.
- Set XDG_RUNTIME_DIR so it won't dump core.
2024-06-03 03:16:47 +03:00
github-actions[bot]
ac1903efd3
Merge master into haskell-updates 2024-06-03 00:13:54 +00:00
illustris
da799551a4
nixos/proxmox-lxc: fix console access (#307163)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-03 00:15:27 +02:00
Sandro
1e8d02875f
Merge pull request #307287 from illustris/proxmox-vma 2024-06-03 00:12:40 +02:00
Sandro
729002e6ce
Merge pull request #264635 from baloo/baloo/amazon-image/pkg-reimport 2024-06-02 23:42:06 +02:00
Someone
e7139eb386
Merge pull request #316516 from aidalgol/libxnvctrl-nixos-fix
nixos/nvidia: add missing check for nvidia settings enabled
2024-06-02 21:32:56 +00:00
Eric Wolf
7c0937d668
nixos/nextcloud-notify_push: use Type=notify
This prevents the post start script from running
before necessary sockets have been created.

It also prevents an unused shell from being kept around
by using `exec` to make `notify_push` the main process.
2024-06-02 23:19:07 +02:00
Sandro
6f02edec1a
Merge pull request #316358 from majewsky/portunus-remove-libxcrypt-legacy 2024-06-02 23:10:26 +02:00
Sandro
fa7656236f
Merge pull request #299995 from tie/centrifugo-tests-fix-shards 2024-06-02 23:09:48 +02:00
Sandro
9cce101bf1
Merge pull request #316636 from palasso/patch-1 2024-06-02 22:41:19 +02:00
Sandro Jäckel
f643e4fa5b
nixos/tailscale-auth: fix enable option description 2024-06-02 22:30:42 +02:00
Ryan Horiguchi
ea63e59edc nixos/adguardhome: fix typo 2024-06-02 21:01:11 +02:00
h7x4
850cbdd97d
Merge pull request #316648 from s1ls/invidious-router-descfix
nixos/invidious-router: remove redundant "Enables" in description
2024-06-02 19:28:19 +02:00
Benno Bielmeier
b5c7987b52 nixos/gollum: fix systemd tempfile permission
When services.gollum.{user,group} was specified a value other than its
default (i.e. "gollum"), the build failed due to referencing a
non-existing user.
2024-06-02 18:00:19 +02:00
Sandro
56744fd9ee
Merge pull request #312261 from Yarny0/ensure-printers-fix-options 2024-06-02 17:59:01 +02:00
Onur C. Cakmak
b3f70c29d5
nixos/containerd: remove LimitNOFILE from service (#313507) 2024-06-02 17:51:10 +02:00
Sandro
c6c60cca65
Merge pull request #315112 from sikmir/git-daemon 2024-06-02 17:08:43 +02:00
Silas Schöffel
37afbbb602
nixos/invidious-router: remove redundant "Enables" in description 2024-06-02 13:27:22 +02:00
Thomas Gerbet
e12faccb31
Merge pull request #313794 from tcmal/akkoma-3.13.2
akkoma: 3.13.1 -> 3.13.2
2024-06-02 12:57:31 +02:00
Vassilis Palassopoulos
f41fc204d6 doc/release-notes: fix option that enables Plasma 6 2024-06-02 13:48:33 +03:00
Lin Jian
0dd47a00b7
Merge pull request #316500 from acid-bong/emacs
nixos/emacs: simplify the service's ExecStart line
2024-06-02 14:42:35 +08:00
Acid Bong
eacb151e5d
nixos/emacs: simplify the service's ExecStart line
The upstream service just executes `emacs --fg-daemon`.
2024-06-02 09:24:31 +03:00
github-actions[bot]
d865fb67ab
Merge master into haskell-updates 2024-06-02 00:14:43 +00:00
michaelBelsanti
7f447ce0f8
nixos/espanso: fix espanso options 2024-06-01 18:04:04 -04:00
Aidan Gauland
9b3461e7ae
nixos/nvidia: add missing check for nvidia settings enabled 2024-06-02 09:08:22 +12:00
Guillaume Girol
6ca2cfd75b
Merge pull request #313485 from tpwrules/copytoram-notif
nixos/stage-1-init: notify during copytoram
2024-06-01 21:06:33 +02:00
John Titor
7b2a2824b3
nixos/wayland-session: force running xdg autostart for WM-only sessions 2024-06-01 22:30:19 +05:30
Weijia Wang
9835090379 doc/release-notes: fix mention of ankisyncd 2024-06-01 14:26:51 +02:00
Arnout Engelen
61c1d28215
Merge pull request #303790 from FriedrichAltheide/cleanup-virtualbox
virtualbox & virtualboxGuestAdditions: cleanup
2024-06-01 13:42:14 +02:00
Aleksana
5a7bf1479a
Merge pull request #316270 from wegank/release-notes-3
doc/release-notes: update info on gnome 46
2024-06-01 16:33:46 +08:00
Stefan Majewsky
d11d18df30 portunus: remove libxcrypt-legacy usage 2024-06-01 10:28:21 +02:00
Silvan Mosberger
72ca766b70
Merge pull request #316207 from infinisil/release-notes-lib 2024-06-01 08:58:07 +02:00
github-actions[bot]
26c4820adb
Merge master into haskell-updates 2024-06-01 00:14:21 +00:00
OPNA2608
2735184f6d lomiri.lomiri: Try to consider services.xserver.xkb.layout
Propagate the configuration setting through an envvar, check the envvar in the compositor.
Needed because querying AccountsSettings for this information fails, due to Ubuntu-only
"InputSources" interface. So you're stuck on US layout without this hack.
2024-06-01 00:26:25 +02:00
Weijia Wang
6fd5c54452 doc/release-notes: update info on gnome 46 2024-06-01 00:05:54 +02:00
Yt
e45abe6d47
Merge pull request #313634 from onny/stalwart-systemd
stalwart-mail: package und use upstream systemd unit
2024-05-31 21:11:45 +00:00
Peder Bergebakken Sundt
080af6461e
Merge pull request #314294 from james-atkins/mealie-update
mealie: 1.2.0 -> 1.7.0
2024-05-31 20:41:37 +02:00
Weijia Wang
d95b1060ca
Release NixOS 24.05 2024-05-31 20:17:44 +02:00
Silvan Mosberger
2906c69534 doc/release-notes: Add section on lib 2024-05-31 18:37:30 +02:00
Azat Bahawi
4a9b788bf5
Merge pull request #315749 from Sigmanificient/qtile-vm-fix
nixos/tests/qtile: run only on linux
2024-05-31 18:31:08 +03:00
Adam Stephens
dfd0d14efc
lxd-virtual-machine-image: install initial configuration read-write 2024-05-31 10:19:37 -04:00
Dawid Dziurla
0133e21626
nixos/tests/podman: add test for rootless quadlet 2024-05-31 16:02:15 +02:00
WilliButz
4726504fea
Merge pull request #315656 from nikstur/os-release-remove-type-constraints
nixos/version: remove strict type constraints from image options
2024-05-31 14:51:20 +02:00
Maximilian Bosch
66e93e7e43
Merge pull request #316128 from NixOS/revert-315921-networkd-simplify-mkif
Revert "nixos/networking: use mkIfs on the inner attributes"
2024-05-31 12:39:12 +00:00
Francesco Gazzetta
3da336fc79 nixos/ladybird: init 2024-05-31 12:11:43 +00:00
Maximilian Bosch
3cf4304692
Revert "nixos/networking: use mkIfs on the inner attributes" 2024-05-31 13:05:19 +02:00
Thomas Gerbet
4e2290525d
Merge pull request #314618 from gaykitty/stargazer-1.2.1
stargazer: 1.1.0 -> 1.2.1
2024-05-31 12:57:03 +02:00
sternenseemann
c2b48909d6 Merge master into haskell-updates 2024-05-31 12:49:29 +02:00
robin
4b0fd37990
nixos/alsa: fix audio state loading on system start 2024-05-31 11:55:11 +02:00
taku0
49032a79e4
Merge pull request #311669 from Nydragon/add-thunderbird-policies 2024-05-31 18:20:59 +09:00
Martin Weinelt
85cdd3a849
Merge pull request #316026 from wegank/release-notes-2
doc/release-notes: highlight desktop environment updates
2024-05-31 10:24:10 +02:00
Jonas Heinrich
336232debd stalwart-mail: package upstream systemd unit 2024-05-31 10:22:15 +02:00
John Titor
2c8ad1d1eb
nixos/gnome/gnome-keyring: rewrite the implementation 2024-05-31 13:52:12 +05:30
Jonas Heinrich
dfa130e828 nixos/stalwart-mail: use upstream systemd unit 2024-05-31 10:20:47 +02:00
Tom Fitzhenry
f1c7c63c69 Remove tomfitzhenry@ from some maintainership
I don't use these programs anymore, sadly.
2024-05-31 10:47:29 +10:00
Weijia Wang
8c58b05881 doc/release-notes: highlight desktop environment updates 2024-05-31 02:13:24 +02:00
Yt
6606ce9c0c
Merge pull request #273101 from onny/invoiceplane-settings2
nixos/invoiceplane: Remove deprecated extraConfig
2024-05-31 00:04:34 +00:00
Maximilian Bosch
dddd08d188
nixos/nextcloud: make memory_limit of nextcloud-cron configurable
The memory limit is equal to what's configured in php-fpm. Given that we
run in a different environment, it seems reasonable to allow different
memory contraints here.
2024-05-30 23:38:55 +02:00
Maximilian Bosch
a8377e1b0f
Merge pull request #314828 from peterablehmann/prometheus
nixos/prometheus: add query_log_file option
2024-05-30 21:37:26 +00:00
Yt
0509bb8779
Merge pull request #315908 from pacien/nixos-stalwart-default-rocksdb
nixos/stalwart-mail: rocksdb as default storage
2024-05-30 21:31:59 +00:00
Yt
782f9a832e
Merge pull request #315697 from pacien/nixos-stalwart-no-dynamicuser
nixos/stalwart-mail: do not use DynamicUser
2024-05-30 21:27:34 +00:00
Maximilian Bosch
ab294204ba
Merge pull request #315921 from lheckemann/networkd-simplify-mkif
nixos/networking: use mkIfs on the inner attributes
2024-05-30 18:11:51 +00:00
Artturin
413707f484 nixos/release-combined: add nixosTests.nix-misc to blockers 2024-05-30 21:00:12 +03:00
Dawid Dziurla
25ad0cdbfc
nixos/systemd: link user-generators 2024-05-30 19:52:22 +02:00
Dawid Dziurla
156757eaf7
nixos/systemd-user: add generators option 2024-05-30 19:51:42 +02:00
Maximilian Bosch
83db4d8162
Merge pull request #315307 from Ma27/kernel-generic-test
nixos/tests/kernel-generic: add linux_rt_6_6
2024-05-30 17:30:03 +00:00
Artturin
e60c483eb9 nixosTests.misc: Remove nix tests
Moved to `nixosTests.nix-misc`
2024-05-30 19:11:27 +03:00
Artturin
53a2215917 nixosTests.misc: Revert nix changes
nix tests now moved to `nixosTests.nix-misc`

Revert "nixos/tests/misc: support old and new path-info output structure"

This reverts commit 903f315fe5.

Revert "nixos/tests/misc: call the tester `test` to be `callTest`-ed"

This reverts commit b35ccb7fda.

Revert "nixos/tests/misc: rework and take ownership"

This reverts commit 81854ca604.
2024-05-30 19:11:27 +03:00
Artturin
e124b02edd nixosTests.nix-misc: Split from nixosTests.misc
Bit weird to have nix tests in misc

Add `artturin` to maintainers
2024-05-30 19:11:27 +03:00
euxane
0174aa1c56 nixos/stalwart-mail: rocksdb as default storage
This sets RocksDB as the default storage backend for `stateVersion` >=
24.11. For previous `stateVersion`s, the structured data and blobs
remain on SQLite and the filesystem respectively.

This is closer to the suggested upstream configuration for fully local
storage.
2024-05-30 16:22:03 +02:00
Jörg Thalheim
5da922e0d7
Merge pull request #315857 from mweinelt/misc-test-pathinfo-variants
nixos/tests/misc: support old and new path-info output structure
2024-05-30 16:05:06 +02:00
Martin Weinelt
4c43cdf564
Merge pull request #315855 from mweinelt/networkd-dhcp-server-static-reliable-client
nixos/tests/networkd: make client reliable in dhcpserver-static-leases test
2024-05-30 13:55:26 +02:00
Seaver Thorn
90b70f368d
nixos/xone: fixed a typo in the option description (#310419) 2024-05-30 14:53:04 +03:00
Martin Weinelt
903f315fe5
nixos/tests/misc: support old and new path-info output structure 2024-05-30 13:02:44 +02:00
Martin Weinelt
884a0835ef
nixos/tests/networkd: make client reliable in dhcpserver-static-leases test
Migrate the client to a native networkd configuration and reduce
unrelated log spam.
2024-05-30 12:29:36 +02:00
John Titor
98f9f9951a
nixos/hyprland: add fufexan as maintainer
Per https://github.com/NixOS/nixpkgs/pull/315827#issuecomment-2139073465
2024-05-30 14:25:36 +05:30
Sandro
357ccb3199
Merge pull request #314418 from SuperSandro2000/mopidy-online
nixos/mopidy: add wants network-online.target to fix warning
2024-05-30 10:16:35 +02:00
John Titor
0b0b7cefcc
nixos/hyprland: disable wlr-portal for Hyprland
This commit:
- Adds wlr-portal override of wayland-session module (enabled by default)
- Disable it for hyprland module
2024-05-30 13:30:41 +05:30
Jonas Heinrich
0ef99565a9
Merge pull request #315745 from pacien/nixos-stalwart-default-directory-db
nixos/stalwart-mail: add default account directory
2024-05-30 09:37:30 +02:00
Jonas Heinrich
dfad9bb515
Merge pull request #315710 from pacien/nixos-stalwart-log-update
nixos/stalwart-mail: migrate logging config
2024-05-30 09:34:28 +02:00
Francesco Gazzetta
ce3303220a domination: 1.2.9 -> 1.3.0 2024-05-30 07:28:44 +00:00
Niklas Hambüchen
1be34af9f9
Merge pull request #315499 from nh2/turbovnc-fix-negative-test
turbovnc.tests: Fix negative test
2024-05-30 02:46:23 +00:00
Franz Pletz
4e1b4397d9
Merge pull request #312472 from Ma27/networkd-option-rename
nixos/networkd: get rid of *Config attributes in lists
2024-05-30 04:06:01 +02:00
Franz Pletz
6584af7321
Merge pull request #315743 from mweinelt/kea-2.6.0
kea: 2.4.1 -> 2.6.0
2024-05-30 03:59:49 +02:00
Martin Weinelt
e0f4e4b535
Merge pull request #274425 from woffs/fix-274286
nixos/frr: adapt to frr-9
2024-05-30 02:33:26 +02:00
Sigmanificient
e4764987ce nixos/tests/qtile: Run only on linux 2024-05-30 02:24:26 +02:00
github-actions[bot]
7476d0d0c9
Merge master into haskell-updates 2024-05-30 00:13:58 +00:00
euxane
ddcbe4c369 nixos/stalwart-mail: add default account directory
This configures a default account directory for the Stalwart service.
It uses the default common database which was already configured.

Without this directory, admins could not manage users and groups using
the `stalwart-cli` tools.
2024-05-30 02:07:17 +02:00
Martin Weinelt
bff993871e
nixos/tests/systemd-networkd-ipv6-prefix-delegation: set kea subnet id
Kea since version 2.6.0 requires it to be set.
2024-05-30 01:37:53 +02:00
Martin Weinelt
cecc91b1b4
nixos/test/kea: set subnet id
They have become mandatory as of Kea 2.6.0.
2024-05-30 01:36:58 +02:00
lassulus
d6f07be682
Merge pull request #314889 from DavHau/pr_sshd
nixos/openssh: allow removing settings
2024-05-30 01:01:07 +02:00
euxane
6ee84bcda0 nixos/stalwart-mail: do not use DynamicUser
This service stores a large number of files for its blob store and some
of its databases. This is not compatible with `DynamicUser`, which
`chown`s everything in the state directory every time the service is
started. Therefore, we now use a static system user and group instead.

See https://github.com/NixOS/nixpkgs/pull/313634#discussion_r1609960417
2024-05-30 00:40:12 +02:00
euxane
824949f300 nixos/stalwart-mail: migrate logging config
The logging configuration keys have changed,
which caused this config to be ignored.
2024-05-29 22:17:59 +02:00
Jade Lovelace
83eba84f9e
Merge pull request #315580 from lf-/jade/remove-old-nix-workaround
tree-wide: remove --build-users-group '' workaround for 10 year old Nix bug
2024-05-29 13:05:01 -06:00
Kerstin
daa52e1d9e
Merge pull request #289582 from Izorkin/update-mastodon-redis
nixos/mastodon: update redis host and port configurations
2024-05-29 18:41:20 +02:00
Cosima Neidahl
0db9149e2a
Merge pull request #315627 from OPNA2608/fix/coolercontrold-nvidia-package
nixos/coolercontrol: Use user-preferred nvidia package
2024-05-29 16:44:07 +02:00
nikstur
acba687721 nixos/version: remove strict type constraints from image options
This constraints aren't super useful because they arent really enforced
by the software, so it's hard to get them right and we've gotten them
wrong multiple times in the past. It's better to remove them altogether
in the spirit of RFC 42.
2024-05-29 16:13:41 +02:00
Sandro
9584ef2c26
Merge pull request #315189 from SuperSandro2000/gitea-maint 2024-05-29 15:49:00 +02:00
OPNA2608
07b369b5aa nixos/coolercontrol: Use user-preferred nvidia package 2024-05-29 15:21:41 +02:00
Someone
7781c1a927
Merge pull request #303682 from SomeoneSerge/feat/imgui-cmake
imgui: ship vcpkg' (cmake) distribution info
2024-05-29 12:48:33 +00:00
Izorkin
8730a7e8d8
nixos/mastodon: optimize systemd startup order block 2024-05-29 13:45:23 +03:00
Izorkin
a05afb1437
nixos/mastodon: update redis host and port configurations 2024-05-29 13:45:17 +03:00
Jade Lovelace
e60c7e080d nixos/systemd-boot-builder: remove workaround for 10 year old Nix bug
This was originally introduced in 9245516b46,
which reveals it is a workaround for a Nix bug from 10 years ago that
was *fixed* 10 years ago.

References:
https://github.com/NixOS/nix/pull/425
https://github.com/NixOS/nixpkgs/issues/5494
2024-05-29 02:52:47 -07:00
Frank Doepper
4df955130e nixos/frr: adapt to frr-9
- fix #274286
- remove `-f configfile` from ExecStart
- use /etc/frr/${service}d.conf
- enable mgmtd when staticd is enabled
- don't frr-reload.py mgmtd
- remove obsolete lib.mdDoc
2024-05-29 11:07:39 +02:00
Giel van Schijndel
83b38c6d30 nixos/netboot: only install syslinux on platforms where it's available
Instead of maintaining an inevitably incomplete list of unsupported
architectures.

I discovered this while building for armv7-linux (32-bit ARM).
2024-05-29 10:28:03 +02:00
Cosima Neidahl
33ce263359
Merge pull request #315117 from OPNA2608/fix/lomiri-24.05-buildable
lomiri.*: Make buildable while waiting for GLib fix
2024-05-29 08:43:42 +02:00
Niklas Hambüchen
613d50c1d5 turbovnc.tests: Replace comment link by newer NixOS manual link 2024-05-29 03:15:44 +00:00
Niklas Hambüchen
cd519b6101 turbovnc.tests: Don't override already-empty password to empty 2024-05-29 03:12:28 +00:00
Niklas Hambüchen
1f77a3c14b turbovnc.tests: Fix passwordless test VM root login 2024-05-29 03:08:47 +00:00
Niklas Hambüchen
1be779cf3c turbovnc.tests: Fix negative test failing due to string grep 2024-05-29 03:07:43 +00:00
Lin Jian
ad57eef4ef
Merge pull request #315149 from Cryolitia/ghostscript
nixos/steam: fix evaluation failure when `fonts.packages` contains path
2024-05-29 10:06:23 +08:00
Ivan Trubach
a5499ee535 nixos/pghero: init 2024-05-29 03:40:48 +03:00
github-actions[bot]
a3713f011c
Merge master into haskell-updates 2024-05-29 00:14:23 +00:00
Someone Serge
fdf0e19b73 imgui: mention cmake integration in release notes 2024-05-28 19:58:02 +00:00
Jörg Thalheim
bbead9b118
Merge pull request #315387 from jacg/release-notes
Release note tweaks
2024-05-28 19:31:20 +02:00
Christina Rust
343ddd9f4b
Merge pull request #315263 from srhb/devpi-loadcredential
nixos/devpi-server: fix loading credentials as DynamicUser
2024-05-28 19:22:40 +02:00
abysssol
c01818d57c
Merge pull request #314722 from abysssol/ollama-split-listenaddress
nixos/ollama: split `listenAddress` into `host` and `port`
2024-05-28 15:37:51 +00:00
Jacek Generowicz
9c6861249c Further tweaks to release notes 2024-05-28 17:28:29 +02:00
Jacek Generowicz
005ef76e9e Consistently use capitalized Nix in plain text 2024-05-28 17:28:29 +02:00
Jacek Generowicz
9708aca853 Various tweaks to release notes 2024-05-28 17:28:29 +02:00
Jacek Generowicz
e36f83eac4 Clean up the curious dwarf-fortress note 2024-05-28 17:28:28 +02:00
lucasew
4c621ef886 nixos/loki: add network.target to after
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-05-28 12:02:04 -03:00
tcmal
7952d92b82 nixos/akkoma: dont disable protectsystem in confinement mode
this works fine since #289593
2024-05-28 15:47:03 +01:00
tcmal
a247fc94b4 nixos/akkoma: deal with $RUNTIME_DIRECTORY containing multiple entries
this fixes issues with confined module tests.

see https://github.com/NixOS/nixpkgs/pull/313794#issuecomment-2126909110
2024-05-28 15:47:03 +01:00
Someone
93b5069466
Merge pull request #314840 from ereslibre/cdi-fix-egl
hardware/nvidia-container-toolkit: mount `nvidia-driver/share`
2024-05-28 12:50:40 +00:00
Jonas Heinrich
4217b9cd9a nixos/invoiceplane: Remove deprecated extraConfig 2024-05-28 14:07:44 +02:00
Maximilian Bosch
7ee58e38d3
nixos/tests/kernel-generic: add linux_rt_6_6
Noticed while reviewing #315121.
2024-05-28 11:38:06 +02:00
Jan Tojnar
d552665012
Merge pull request #315046 from honnip/fix-gnome-extensions-test
nixosTests.gnome-extensions: fix test
2024-05-28 09:46:45 +02:00
Jonas Chevalier
5d6d058646
Merge pull request #308090 from mogeko/service-rke2
nixos/rke2: add rke2 service
2024-05-28 09:36:03 +02:00
Jörg Thalheim
7475325763
Merge pull request #315040 from JohnRTitor/hyprlock-module
nixos/hyprlock, nixos/hypridle: init module
2024-05-28 09:03:48 +02:00
Sarah Brofeldt
4d4571b20a nixos/devpi-server: fix loading credentials as DynamicUser 2024-05-28 08:58:24 +02:00
Mogeko
b8e5799a63
nixos/tests/rke2: add tests for single-node and multi-node
For multi-node test, create a 3-node cluster (2 server nodes and 1 agent node) to test the connection between nodes.

Setup `passthru.tests`.
2024-05-28 12:39:38 +08:00
Mogeko
a642efcdab
nixos/rke2: add rke2 service
Set assertions to avoid obvious errors.

Eliminate the conflict between default CNI (`cana`) and `NetworkManager`.

Determine whether optional can be used for agent.

Add the option `cisHardening` to enable CIS Hardening.

Set kernel parameters by `boot.kernel.sysctl`.

Using `lib.escapeShellArgs` to make `ExecStart` more resilient to escaping issues.

Using a list of `str` to extra flags.
2024-05-28 12:39:30 +08:00
北雁 Cryolitia
1652a914fd
nixos/steam: fix evaluation failure when fonts.packages contains path 2024-05-28 12:05:43 +08:00
github-actions[bot]
0cad2ef6d6
Merge master into haskell-updates 2024-05-28 00:13:28 +00:00
Tom Fitzhenry
25193bdc60 nixos/less: introduce programs.less.package
Allow users to set the package, e.g. to override withSecure to true.
2024-05-28 08:34:45 +10:00
Rafael Fernández López
79c79671a7 hardware/nvidia-container-toolkit: mount nvidia-driver/share 2024-05-27 23:44:32 +02:00
Sandro Jäckel
73c11de701
gitea,nixos/gitea: add SuperSandro2000 as maintainer, remove inactive maintainers, unify maintainers 2024-05-27 22:48:14 +02:00
Rebecca Turner
d2618822ab haskell.lib.compose.justStaticExecutables: Forbid references to GHC
This makes `justStaticExecutables` error if the produced store path
contains references to GHC. This is almost always erroneous and due to
the generated `Paths_*` module being imported. This helps prevent
`justStaticExecutables` from producing binaries with closure sizes in
the gigabytes.

See: https://github.com/NixOS/nixpkgs/issues/164630

Co-authored-by: sternenseemann <sternenseemann@systemli.org>
2024-05-27 21:08:16 +02:00
OPNA2608
3ef60ac499 lomiri.telephony-service: Mark broken & exclude everywhere
Needs a GLib change to be fixed, which needs a staging cycle, which I was told won't happen in time anymore.
Luckily it's not a crucial component for the desktop mode.
2024-05-27 17:08:53 +02:00
Nikolay Korotkiy
ecddd99c6a
nixos/gitDaemon: add package option 2024-05-27 18:50:15 +04:00
John Titor
353aa12446
nixos/hypridle: init 2024-05-27 17:41:36 +05:30
Sandro
77e9384f0f
Merge pull request #314428 from SuperSandro2000/nox-gst 2024-05-27 14:03:46 +02:00
John Titor
07a0b79ed1
nixos/hyprlock: init module 2024-05-27 17:32:22 +05:30
Honnip
b2069e7fc7
nixosTests.gnome-extensions: ENABLED and DISABLED states are renamed
01e9724d75
Fix the test failure caused by the renaming of the states name from `ENABLED`, `DISABLED` to `ACTIVE` and `INACTIVE`
2024-05-27 18:04:55 +09:00
Sandro
99d60e5489
Merge pull request #314948 from Izorkin/update-pinentry-tty 2024-05-27 11:04:18 +02:00
Honnip
d7062ba870
nixosTests.gnome-extensions: emoji-selector has been removed 2024-05-27 17:57:48 +09:00
Thomas Gerbet
00015f3ef9
Merge pull request #309036 from tomfitzhenry/sshd-package
nixos/ssh: add services.openssh.package
2024-05-27 09:40:31 +02:00
Will Fancher
0415aec200
Merge pull request #297250 from NickCao/sysuser
nixos/systemd-sysusers: make uid/gid allocation stable
2024-05-26 20:17:06 -04:00
Franz Pletz
e047b23254
Merge pull request #313844 from superherointj/nginx-libgd-optional 2024-05-27 02:10:55 +02:00
Robert Scott
d7ac3b8504
Merge pull request #314573 from justinas/teleport-15-3-7
teleport_15: 15.2.2 -> 15.3.7,  teleport_14: 14.3.0 -> 14.3.20, teleport_13: remove
2024-05-26 22:44:01 +01:00
Izorkin
3381fdd745
nixos/no-x-libs: add pinentry-tty 2024-05-27 00:22:07 +03:00
Maximilian Bosch
a5f800ab48
Merge pull request #311701 from Ma27/bump-grafana
grafana: 10.4.2 -> 11.0.0
2024-05-26 20:47:56 +00:00
Justinas Stankevicius
07709ea936 teleport_13: remove 2024-05-26 23:43:40 +03:00
Jörg Thalheim
f33f71f6f6
Merge pull request #240989 from m-bdf/hyprland-wayland-session
nixos/{sway,river,hyprland}: improve common wayland-session module
2024-05-26 22:06:53 +02:00
Sandro Jäckel
db66127c5b
nixos/no-x-libs: make sure gst-plugins-base has enableGl disabled 2024-05-26 20:51:00 +02:00
Sandro Jäckel
cb58275dc6
nixos/no-x-libs: build gst-plugins-rs without gtk 2024-05-26 20:51:00 +02:00
DavHau
3fe773a174 nixos/openssh: allow removing settings
# Motivation
So far it was not possible to configure sshd to allow password authentication only for a specific user. This is because in the generated config a `Match User xxx` section would be required before the global `PasswordAuthentication` is defined, as otherwise the global option always takes precedence.
The same problem occurs with multiple other options under `settings`.

# Done
This PR fixes that issue for all settings by simply allowing them to be overridden with `null`, which leads to a removal of that setting from the config.
The user can then correctly configure user specific settings using extraConfig, like this:
```
    Match User user1
    PasswordAuthentication yes
    Match all
    PasswordAuthentication no
```
2024-05-26 18:46:27 +02:00
北雁 Cryolitia
164f66169a
nixos/steam: add option fontPackages
fix #178121
2024-05-26 22:55:38 +08:00
北雁 Cryolitia
efef69a51d
nixos/steam: add option extraPackages 2024-05-26 22:03:50 +08:00
Pol Dellaiera
017ee1411d
Merge pull request #314433 from SuperSandro2000/mpv-nox
nixos/no-x-libs: fix mpv build
2024-05-26 07:56:52 +02:00
abysssol
428e60cad9 nixos/ollama: split listenAddress into host and port
breaking change; do not backport
2024-05-25 21:22:15 -04:00
fuggy
ef5ff2a075
nixos/xdg/portal: Fix typo
There was a typo that misspelled /etc/ as /etx/
2024-05-25 17:26:15 -05:00
superherointj
f2a202ff38 nixos/doc/rl-2411: nginx now has gd, geoip as an optional 2024-05-25 12:12:50 -03:00
Peter Lehmann
09be64ecc8
nixos/prometheus: Add query_log_file option 2024-05-25 17:03:24 +02:00
gaykitty
43b1df204b stargazer: 1.1.0 -> 1.2.1 2024-05-25 10:38:39 -04:00
ivan770
1b288bca00
nixos/etc: support direct symlinks with etc overlay 2024-05-25 08:41:24 -04:00
sodiboo
0fa287f2ff nixos/invidious-router: maintianers.s1ls -> maintainers.sils 2024-05-25 13:10:20 +02:00
Arian van Putten
2eee7f2352
Merge pull request #314523 from arianvp/update-ami-docs
nixos/amazon-image:  Drop create-amis.sh script and update docs
2024-05-25 12:55:52 +02:00
Pol Dellaiera
d091b7f681
Merge pull request #313112 from savyajha/firefly-iii
firefly-iii: 6.1.15 -> 6.1.16
2024-05-25 10:41:44 +02:00
Arian van Putten
a48cd7d56f nixos/amazon-image: Drop create-amis.sh script and update docs
We replaced this with automation in https://github.com/NixOS/amis

Also add some docs how you can build the image yourself
2024-05-25 10:01:02 +02:00
Yt
1777f06494
Merge pull request #314244 from onny/stalwart-cleanup
stalwart-mail_0_6: drop
2024-05-25 01:59:37 +00:00
Sandro Jäckel
b9ec2c14d8
nixos/no-x-libs: fix mpv build by disabling drmSupport, disable more GUI only relevant features 2024-05-25 02:36:13 +02:00