Maximilian Bosch
8678ac57d7
Merge pull request #135891 from Ma27/mautrix-telegram-perm-startup
...
nixos/mautrix-telegram: loosen umask to keep `config.json` writable
2021-08-29 00:06:06 +02:00
Philippe Hürlimann
4fecb8b2d0
nixos/airsonic: make path to war file and jre configurable ( #135709 )
...
* nixos/airsonic: make path to war file and jre configurable
* Apply suggestions from code review
Co-authored-by: Sumner Evans <me@sumnerevans.com>
Co-authored-by: Sumner Evans <me@sumnerevans.com>
2021-08-28 14:26:03 -04:00
Andreas Rammhold
137147c826
Merge pull request #135442 from em0lar/paperless-ng-fix-web-file-upload
...
nixos/paperless-ng: fix web file upload
2021-08-28 12:50:34 +02:00
Leo Maroni
2148272432
nixos/paperless-ng: fix web file upload
2021-08-28 12:22:52 +02:00
talyz
3dd17ae22f
gitlab: Enable puma's systemd notify support
2021-08-27 17:38:40 +02:00
Maximilian Bosch
bae65a3c06
nixos/mautrix-telegram: loosen umask to keep config.json
writable
...
This is needed because `mautrix-telegram --generate-registration`
appears to need write-access to `config.json` as well.
Closes #135884
2021-08-27 11:41:30 +02:00
talyz
99387372d5
gitlab: 14.1.2 -> 14.2.1
2021-08-26 19:01:22 +02:00
Martin Weinelt
a90373118d
Merge pull request #135492 from mweinelt/octoprint
...
nixos/octoprint: allow access to serial devices
2021-08-25 18:07:12 +02:00
Martin Weinelt
3c8a09364d
home-assistant: allow serial access when using deconz
2021-08-24 12:09:12 +02:00
Martin Weinelt
f8df760668
nixos/octoprint: allow access to serial devices
...
Printers are usually connected over USB to serial interfaces that are
mounted as tty character devices owned by the dialout group. Add our
octoprint service to this group at runtime to allow access to these
printers.
2021-08-24 03:00:39 +02:00
Leo Maroni
fa80ed695b
nixos/paperless-ng: allow using postgresql via a unix socket
2021-08-23 22:44:36 +02:00
Andreas Rammhold
ae61a14242
Merge pull request #123046 from Flakebi/paperless
...
paperless-ng: init at 1.4.5
2021-08-18 14:39:03 +02:00
Aaron Andersen
0798ed1abf
nixos/nzbget: add settings option
2021-08-17 09:19:22 -04:00
Robert Hensing
fbafeb7ad5
treewide: runCommandNoCC -> runCommand
...
This has been synonymous for ~5y.
2021-08-15 17:36:41 +02:00
Andreas Rammhold
6e1421013a
paperless: remove package & module as it has been superseded by paperless-ng
...
The paperless project has moved on to paperless-ng and the original
paperless package in Nixpkgs has stopped working recently (due to
version incompatibility with the providede Django package).
Instead of investing more time into the old module we should migrate all
users to the new module instead.
2021-08-14 10:10:44 +02:00
Flakebi
95f2dc650d
paperless-ng: init at 1.4.5
2021-08-14 10:10:43 +02:00
Sandro
3e80403848
Merge pull request #133436 from nagy/port-types
...
treewide: Port type adaptations
2021-08-11 10:54:27 +02:00
Emery Hemingway
0ac49d7c7b
nixos: rewrite uhub module
...
* Support for hosting multiple hubs
* Using "settings" style configuration
* Remove "uhub" user, use DynamicUser
* Configuration reloading
2021-08-11 09:51:23 +02:00
Daniel Nagy
79a86e7ef5
treewide: Port type adaptations
2021-08-11 00:45:08 +02:00
Alexandre Iooss
9898f7e072
nixos/nitter: systemd unit hardening
2021-08-08 15:28:27 +02:00
Zane van Iperen
99d8d553da
nixos/gitea: init/migrate db in startup script
2021-08-08 12:48:15 +09:00
Bernardo Meurer
64a2790e99
Merge pull request #130617 from zhaofengli/moonraker
...
moonraker: init at unstable-2021-07-18, nixos/moonraker: init
2021-08-05 02:59:59 +00:00
Zhaofeng Li
5fbdf2ef1f
nixos/moonraker: init
2021-08-04 19:48:58 -07:00
Guillaume Girol
2eb2a255b9
Merge pull request #131255 from erdnaxe/nitter
...
nitter: init at unstable-2021-07-18
2021-08-04 20:25:22 +00:00
Zhaofeng Li
fd435bdab7
nixos/klipper: Add default value for apiSocket
2021-08-04 12:09:15 -07:00
Ben Siraphob
c8a731593b
Merge pull request #113185 from fabaff/libreddit
...
libreddit: init at 0.10.1
2021-08-02 17:05:00 +07:00
Robert Hensing
151c2f5a20
Merge pull request #131814 from blaggacao/fix-nix-daemon-registry-type-unspecified-error
...
nixos/nix-daemon: fix registry flake type
2021-08-01 22:43:34 +02:00
Aaron Andersen
7841f5f4eb
Merge pull request #129861 from vs49688/giteafix
...
modules/gitea: use gitea to refresh hooks and keys
2021-08-01 15:57:11 -04:00
David Arnold
ecae25c3ef
nixos/nix-daemon: fix registry flake type
...
Before this commit, the `flake` option was typed with `types.unspecified`.
This type get's merged via [`mergeDefaultOption`](ebb592a04c/lib/options.nix (L119-L128)
), which has a line
```nix
else if all isFunction list then x: mergeDefaultOption loc (map (f: f x) list)
```
`lib.isFunction` detects an attrs in the shape of `{__functor = ...}` as
a function and hence this line substitutes such attrs with a function
(f: f x).
If now, a flake input has a `__functor` as it's output, this will
coerce the once attrs to a function. This breaks a lot of things later
in the stack, for example a later `lib.filterAttrs seive <LAMBDA>` will
fail for obious reasons.
According to @infinisil, `types.unspecified` is due to deprecation. In
the meantime this PR provides a specific fix for the specific problem
discovered.
2021-08-01 14:56:13 -05:00
Alexandre Iooss
534dbcb28f
nixos/nitter: init module and test
2021-07-30 15:19:49 +02:00
Gauvain 'GovanifY' Roussel-Tarbouriech
040129fa31
nixos/mx-puppet-discord: add module
2021-07-28 23:30:24 +02:00
Zhaofeng Li
34d2b83291
nixos/klipper: Allow lists as values for gcode_macro
2021-07-22 22:01:44 -07:00
Martin Weinelt
a284c01d2a
nixos/home-assistant: allow serial access for the zwave component
2021-07-23 00:27:16 +02:00
Gürkan Gür
d3c568e16a
nixos/clipcat: add user service module
2021-07-20 21:40:58 +02:00
Zhaofeng Li
0c83078825
nixos/klipper: Allow configuring --input-tty and --api-server
...
This also makes it easy for other modules to get the correct
path to the virtual printer.
2021-07-19 02:30:25 -07:00
Zhaofeng Li
11313bc65d
nixos/klipper: Allow overriding the Klipper package
2021-07-19 02:30:25 -07:00
Zhaofeng Li
94536fd6e3
nixos/klipper: Allow specifying arbitrary user/group
...
This paves the way for alternative integrations such as
Moonraker.
2021-07-19 02:30:25 -07:00
Yureka
c5a0551dc4
nixos/gitlab: improve psql assertion message
2021-07-12 14:20:20 +02:00
Zane van Iperen
c854b85702
nixos/gitea: use gitea to refresh hooks and keys
...
Gitea now provides this functionality as an admin command.
Is significantly faster, especially on slow disks.
2021-07-11 12:48:10 +10:00
Maciej Krüger
ae54500506
Merge pull request #126253 from mkg20001/fc-gitlab
2021-07-06 20:58:12 +02:00
github-actions[bot]
4147e7d4a9
Merge master into staging-next
2021-07-02 18:01:01 +00:00
Kim Lindberger
90ed906797
Merge pull request #126058 from talyz/geoip-fixes
...
nixos/geoipupdater: Fix initial setup, add stricter security, fix a filename
2021-07-02 14:30:49 +02:00
github-actions[bot]
947012b992
Merge staging-next into staging
2021-06-26 00:09:11 +00:00
github-actions[bot]
f15360e6a4
Merge master into staging-next
2021-06-26 00:09:07 +00:00
Alexandru Scvortov
e08b3f0c85
etcd: fix old aliased package name to make tests pass
2021-06-25 23:45:12 +01:00
github-actions[bot]
be086cc67b
Merge staging-next into staging
2021-06-25 12:06:08 +00:00
github-actions[bot]
bae6b2055f
Merge master into staging-next
2021-06-25 12:06:04 +00:00
Yureka
2297eb35e5
nixos/gitlab: require at least postgresql 12
2021-06-25 01:21:19 +02:00
github-actions[bot]
222489e4be
Merge staging-next into staging
2021-06-19 00:08:40 +00:00
github-actions[bot]
d0cc21f4bd
Merge master into staging-next
2021-06-19 00:08:37 +00:00
Martin Weinelt
af664bf942
Merge pull request #127127 from mweinelt/home-assistant
...
nixos/home-assistant: update hardening
2021-06-18 20:15:05 +02:00
Daniel Nagy
5940259a21
nixos/mwlib: use port
type
2021-06-18 17:31:44 +02:00
Daniel Nagy
34b4df8993
nixos/subsonic: use port
type
2021-06-18 17:30:56 +02:00
Daniel Nagy
50ba0ac3d6
nixos/dockerRegistry: use port
type
2021-06-18 17:30:11 +02:00
Daniel Nagy
a8808784e5
nixos/leaps: use port
type
2021-06-18 17:29:44 +02:00
Daniel Nagy
50af10e205
nixos/gpsd: use port
type
2021-06-18 17:29:24 +02:00
Daniel Nagy
864dabf232
nixos/paperless: use port
type
2021-06-18 17:29:15 +02:00
Daniel Nagy
bc87386ac1
nixos/redmine: use port
type
2021-06-18 17:29:05 +02:00
Daniel Nagy
c726455687
nixos/octoprint: use port
type
2021-06-18 17:27:16 +02:00
Daniel Nagy
ab5d317d51
nixos/gitea: use port
type
2021-06-18 17:27:06 +02:00
Martin Weinelt
36659d1efa
nixos/home-assistant: update hardening
...
This makes access to serial devices contingent on using certain
components and restricts the default setup even further.
2021-06-16 21:31:24 +02:00
github-actions[bot]
8b9fa8d446
Merge staging-next into staging
2021-06-16 18:04:48 +00:00
Jan Tojnar
e3dfa79441
Merge branch 'staging-next' into staging
...
Regenerated pkgs/servers/x11/xorg/default.nix to resolve the conflict.
2021-06-16 19:59:05 +02:00
Sandro
22a29f491a
Merge pull request #124566 from mweinelt/synapse-jemalloc
2021-06-16 17:52:56 +02:00
Martin Weinelt
fb49094c3f
nixos/home-assistant: NixOS is an unsupported installation method
...
Trying to steer NixOS users away from reporting bugs to the upstream,
when they don't have the capacity to support bugs that could be the
result of our downstreaming setup.
2021-06-15 15:31:01 +02:00
github-actions[bot]
de8250217d
Merge staging-next into staging
2021-06-13 00:10:27 +00:00
Sandro
3d6416cc20
nixos/synergy: add encryption support to server ( #125002 )
...
Co-authored-by: Joshua Trees <me@jtrees.io>
2021-06-12 21:35:04 +02:00
github-actions[bot]
8f3ead7190
Merge staging-next into staging
2021-06-11 18:05:09 +00:00
misuzu
ad502ab5c5
nixos/sourcehut: automatically build and import qemu image for docker
2021-06-11 11:48:49 -04:00
Joshua Trees
706ce9e230
nixos/synergy: add encryption support
...
Make it possible to use the Synergy server with TLS encryption without
resorting to the GUI.
2021-06-11 14:52:34 +02:00
Maciej Krüger
f4ddc02b0e
nixos/gitlab: add container registry
2021-06-09 23:19:25 +02:00
github-actions[bot]
cf8441dd85
Merge staging-next into staging
2021-06-09 18:14:53 +00:00
talyz
8f16b16291
gitlab: Make sure the FOSS version isn't identified as EE
2021-06-09 17:50:45 +02:00
Sandro
c6a306d19e
Merge pull request #125810 from ElXreno/package-bees-0.6.5
2021-06-09 12:47:33 +02:00
Maciej Krüger
7135ac0e00
nixos/gitlab: add extraEnv option
...
This allows users to define custom environment variables for gitlab,
without having to modify the service file directly
2021-06-08 21:29:18 +02:00
talyz
7cc39b13b0
nixos/geoipupdate: Add stricter service security
2021-06-07 14:19:57 +02:00
talyz
41c82cd570
nixos/geoipupdate: Run the service right away one time
...
We don't want to have to wait for the timer to expire for the updater
to make its first run. This adds a timer unit which triggers the
geoipupdate.service unit immediately, but only runs if the configured
DatabaseDirectory doesn't exist yet.
2021-06-07 13:08:59 +02:00
talyz
ba4d2bd03c
nixos/geoipupdate: Create database directory in a separate unit
...
The database directory needs to be created before the
geoipupdate.service unit is activated; otherwise, systemd will not be
able to set up the mount namespacing to grant the service read-write
access.
2021-06-07 13:01:49 +02:00
talyz
7cf55d1f4e
nixos/geoipupdate: Add myself to maintainers
2021-06-07 09:44:05 +02:00
talyz
99454b6f77
nixos/geoipupdate: Fix config filename copy-paste fail
2021-06-07 09:29:21 +02:00
github-actions[bot]
500db2661d
Merge staging-next into staging
2021-06-06 00:15:23 +00:00
tomberek
157aee00a5
nixos/sourcehut: init ( #113244 )
...
* nixos/sourcehut: init
* sourcehut: default nginx setup
* sourcehut: documentation
* sourcehut: re-structure settings
* sourcehut: tests
* nixos/sourcehut: adopt StateDirectory
* Apply suggestions from code review
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
Co-authored-by: Thibaut Marty <github@thibautmarty.fr>
Co-authored-by: malte-v <34393802+malte-v@users.noreply.github.com>
* nixos/sourcehut: PR suggestions
* nixos/sourcehut: malte-v patch
* nixos/sourcehut: add base virtualhost
* nixos/sourcehut: remove superfluous key
* nixos/sourcehut: use default from cfg
* nixos/sourcehut: use originBase for logs
* nixos/sourcehut: use toPythonApplication in systemPackages
* nixos/sourcehut: directly use ExecStart
* nixos/sourcehut: update docs
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
Co-authored-by: Thibaut Marty <github@thibautmarty.fr>
Co-authored-by: malte-v <34393802+malte-v@users.noreply.github.com>
2021-06-05 14:42:51 -04:00
ElXreno
7b9df38982
bees: 0.6.3 -> 0.6.5
...
Change-Id: I1866eab9c348d9c10219290ecba698121a32d128
2021-06-05 17:39:12 +03:00
ElXreno
a3fa2cf7c2
bees: nixpkgs-fmt
...
Change-Id: If4e9431dad00ffade3316cf22235d8d44d12d149
2021-06-05 17:39:12 +03:00
github-actions[bot]
b511c637c8
Merge staging-next into staging
2021-06-03 19:52:05 +00:00
talyz
f5f8341c76
nixos/geoipupdate: Replace the old geoip-updater
module
...
Our old bespoke GeoIP updater doesn't seem to be working
anymore. Instead of trying to fix it, replace it with the official
updater from MaxMind.
2021-06-03 20:57:25 +02:00
Martin Weinelt
01f8f4f074
nixos/matrix-synapse: allow preloading jemalloc
...
This is the default in the upstreams docker image and claims to reduce
memory fragmentation and usage.
2021-06-03 05:16:45 +02:00
Daniel Nagy
cc5517da4c
nixos/gitlab: set port type to types.port
2021-05-30 14:38:20 +02:00
Daniel Nagy
8e760f4858
nixos/matrix-synapse: set port type to types.port
2021-05-30 14:38:19 +02:00
pmenke
9e0ed182aa
sdrplay: init at 3.07.1
...
this adds support for software defined radio (SDR) devices by SDRplay.
SDRplay provides an unfree binary library and api-service as well
as a MIT licensed adapter library for SoapySDR for integration
with many popular SDR applications.
2021-05-28 15:40:04 +02:00
regnat
113823669b
Revert "nixos/nix-daemon: fix sandbox-paths option"
...
This reverts commit aeeee447bc
.
2021-05-24 10:51:02 +02:00
Maximilian Bosch
278bcdce1f
Merge pull request #123941 from mweinelt/matrix-synapse
...
nixos/matrix-synapse: protect created files
2021-05-22 22:20:16 +02:00
Martin Weinelt
79e675444c
nixos/matrix-synapse: protect created files
...
Enforce UMask on the systemd unit to restrict the permissions of files
created. Especially the homeserver signing key should not be world
readable, and media is served through synapse itself, so no other user
needs access to these files.
Use a prestart chmod to fixup the permissions on the signing key.
2021-05-22 20:30:49 +02:00
Vika
aeeee447bc
nixos/nix-daemon: fix sandbox-paths option
...
In newer versions of Nix (at least on 2.4pre20201102_550e11f) the
`extra-` prefix for config options received a special meaning and the
option `extra-sandbox-paths` isn't recognized anymore. This commit fixes
it.
It doesn't cause a behavior change when using older versions of Nix but
does cause an extra newline to appear in the config, thus changing the
hash.
2021-05-22 05:14:56 +00:00
Martin Weinelt
446c97f96f
Merge pull request #123355 from Ma27/bump-matrix-synapse
2021-05-19 18:12:14 +02:00
talyz
7842e89bfc
nixos/gitlab: Use replace-secret to avoid leaking secrets
...
Using `replace-literal` to insert secrets leaks the secrets through
the `replace-literal` process' `/proc/<pid>/cmdline`
file. `replace-secret` solves this by reading the secret straight from
the file instead, which also simplifies the code a bit.
2021-05-19 09:32:12 +02:00
Maximilian Bosch
2addab5fd6
nixos/matrix-synapse: room_invite_state_types
was deprecated and room_prejoin_state
is used now
...
See https://github.com/matrix-org/synapse/blob/release-v1.34.0/UPGRADE.rst#upgrading-to-v1340
2021-05-17 13:45:28 +02:00
Jörg Thalheim
b900661f6e
Merge pull request #122825 from Izorkin/update-duplicates-systemcallfilters
...
treewide: remove duplicates SystemCallFilters
2021-05-17 12:06:06 +01:00
Sandro
700942d2a5
Merge pull request #121119 from SuperSandro2000/remove-gnidorah
...
treewide: remove gnidorah
2021-05-17 02:42:24 +02:00
Izorkin
feebe402f5
treewide: remove duplicates SystemCallFilters
2021-05-13 15:44:56 +03:00