dev/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
290,145 Commits 3 Branches 0 Tags 4.3 GiB
700942d2a5
Commit Graph

10574 Commits

Author SHA1 Message Date
Felix Tenley
410d181739 nixos/etebase-server: add missing static directory setup 2021-03-30 23:32:26 +02:00
Felix Tenley
dccd915adf nixos/etebase-server: replace customIni with more flexible settings option 
Fixes #112834 where incorrect documentation of options was reported.

customIni used to replace the entire default configuration while the
new settings option is merged in with the default configuration
and still allows overriding options when needed.
 2021-03-30 23:32:26 +02:00
talyz
abba76a3b9
nixos/gitlab: Document automatic backups 2021-03-30 19:15:33 +02:00
talyz
7b5cbde81f
nixos/gitlab: Gitlab -> GitLab 2021-03-30 19:13:43 +02:00
talyz
3fb04ca505
nixos/gitlab: Introduce automatic backup support 
Add support for automatically backing up GitLab state, both locally
and to remote locations.
 2021-03-30 19:13:31 +02:00
Sandro
7d0dad76ef
Merge pull request #116936 from hercules-ci/logstash-jdk 2021-03-30 17:22:21 +02:00
Aaron Andersen
31f9775f20 nixos/kodi: add package option 2021-03-29 16:47:30 -04:00
Doron Behar
c2b66f2702
Merge pull request #98734 from ju1m/zerobin 2021-03-29 17:18:29 +00:00
Leo Maroni
c162597465
nixos/grafana: add socket configuration option 2021-03-29 15:59:24 +02:00
Luke Granger-Brown
309e836c33 nixos/tests/pomerium: init 2021-03-29 10:41:41 +00:00
Luke Granger-Brown
cb2f1df034 nixos/pomerium: init 2021-03-29 10:41:41 +00:00
Jörg Thalheim
96e4052d70
nixos/hydra: gc-check-reachability no longer exists in nix 2.4 (#117925) 
* nixos/hydra: gc-check-reachability no longer exists in nix 2.4

fixup! nixos/hydra: gc-check-reachability no longer exists in nix 2.4

* Update nixos/modules/services/continuous-integration/hydra/default.nix

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2021-03-29 11:14:16 +02:00
Peter Hoeg
860e87d363 nixos/geoclue2: do not start geoclue agent for system users 2021-03-29 16:57:49 +08:00
Maximilian Bosch
c2836eb953
Merge pull request #117809 from mayflower/graylog-4 
graylog: improve JRE handling
 2021-03-28 23:47:26 +02:00
Doron Behar
9d47c33ee0
Merge pull request #82005 from esclear/mpd-socket 
nixos/mpd: allow autostart when listening for unix socket
 2021-03-28 20:04:31 +00:00
Sander van der Burg
13b367df5f nixos/dysnomia: configure systemd unit path 2021-03-28 21:39:23 +02:00
Sander van der Burg
4ae1fa61ad Revert "nixos/dysnomia nixos/disnix: Drop modules" 
This reverts commit a3f4db8679.
 2021-03-28 21:37:43 +02:00
Xinglu Chen
273f5c38a3
nixos/privoxy: add missing "/" to "forward-socks5" option 
Without this, Privoxy will silently fail, meaning that no traffic
would be routed through Tor, giving users a false sense of privacy.
 2021-03-28 21:16:55 +02:00
Vladimír Čunát
56f308bb2f
nixos/kresd: trivial cleanup 2021-03-28 21:01:50 +02:00
Vladimír Čunát
6e562fd6a7
Merge #101043: nixos/kresd: Listen on IPv4 wildcard, too 
This makes sense to me.  I can't see any reference (incl. PR #78628)
why that commit of mine (ae74a0e27c) used 127.0.0.1 instead of 0.0.0.0
 2021-03-28 20:53:33 +02:00
Vladimír Čunát
0032a3fc81
Merge #100592: nixos/kresd: Fix unportable regex 2021-03-28 20:27:49 +02:00
Aaron Andersen
d6fd7c6613 nixos/zabbixAgent: add a few minor tweaks to make configuration file compatible with both zabbix agent 1 and 2 2021-03-28 13:35:21 -04:00
Linus Heckemann
22de3c19e7 graylog: improve JRE handling 
Since the upstream graylogctl script will prefer finding its java
executable based on JAVA_HOME, we now set this instead of PATH in
order to allow it to find the JRE. By setting it conditionally on it
not already being set, we allow selecting a different JRE at runtime.

We also explicitly use openjdk11, which supports the
UseConcMarkSweepGC option which graylog insists on using.
 2021-03-28 14:37:28 +02:00
Maximilian Bosch
ae73ec2b68
Merge pull request #116738 from Ma27/wiki-js 
wiki-js: init at 2.5.191
 2021-03-27 22:03:35 +01:00
Michele Guerini Rocco
b01e00ba8f
Merge pull request #114688 from rnhmjoj/tcsd-no-udev-settle 
nixos/tcsd: several improvements and fixes
 2021-03-27 16:31:17 +01:00
Pavel Borzenkov
58ce51ed06 nixos/calibre-web: init module 2021-03-27 14:43:33 +03:00
Justin Humm
347a9168ae nixos/hledger-web: set capabilites as boolean 2021-03-26 13:45:13 +01:00
Justin Humm
569940b9fd nixos/hledger-web: add stateDir, use own user, fix ExecStart 
This allows for shared hledger installations, where the web interface is
available via network and multiple user share a SSH access to the
hledger user.

Also added `--serve` to the CLI options, as hledger-web tries to open a
webbrowser otherwise:

hledger-web: xdg-open: rawSystem: runInteractiveProcess: exec: does not
exist (No such file or directory)

Co-authored-by: Aaron Andersen <aaron@fosslib.net>
 2021-03-26 13:45:13 +01:00
Maciej Krüger
c8d2f4a3a8 cjdns: reduce password length to 32 
Maximum password length per cjdns code is somehwhere less than that, see
ecd01e7681/client/AdminClient.c (L80)

Currently we generate 96 char long passwords that don't work

This changes it so password length is just 32 chars long
 2021-03-26 11:35:09 +01:00
Florian Klink
f3fa3a38a9
Merge pull request #116743 from flokli/bird-check-config-disable 
nixos/bird*: enable config files outside the store, propagate reload errors to systemd
 2021-03-25 23:01:09 +01:00
Alexandre Macabies
f5b0542cb1 nixos/snapserver: add support for meta stream type introduced in 0.23.0 2021-03-25 04:05:50 +01:00
Izorkin
f3a032dee5 nixos/mastodon: enable sandbox mode 2021-03-24 17:28:50 +01:00
Maximilian Bosch
0ad1d526dc
Merge pull request #117454 from dotlambda/wireguard-noalias 
nixos/wireguard: don't use alias
 2021-03-24 11:43:13 +01:00
Robert Schütz
683f374529 nixos/wireguard: don't use alias 2021-03-24 11:27:36 +01:00
Robert Hensing
e7e6e8d5c3 nixos/logstash: Don't set unnecessary JAVA_HOME 2021-03-23 14:42:40 +01:00
Profpatsch
c25ffa8b76
Merge pull request #117073 from sternenseemann/inspircd-3.9.0 
inspircd: init at 3.9.0
 2021-03-23 11:25:58 +01:00
Bernardo Meurer
9334a29720
Merge pull request #116811 from jansol/pipewire 
pipewire: 0.3.23 -> 0.3.24
 2021-03-22 17:34:48 +00:00
sternenseemann
76d9fe7629 !fixup add myself as maintainer for the module 2021-03-22 15:19:49 +01:00
sternenseemann
4048b39fc1 nixos/modules/inspircd: add simplistic module and nixos test 2021-03-22 14:38:57 +01:00
Matt McHenry
13bee29b9b restic: allow prune without backup 
fixes #97820
 2021-03-21 18:47:52 -07:00
Guillaume Girol
584f971216
Merge pull request #113707 from symphorien/sane-backends-udpate 
sane-backends: 1.0.30 -> 1.0.32
 2021-03-21 11:03:04 +00:00
Symphorien Gibol
c20cd1834f sane-backends: 1.0.30 -> 1.0.32 
sane-backends-git: remove, it's not updated often enough to be useful
 2021-03-21 11:07:14 +01:00
Sandro
c10752cc4f
Merge pull request #113722 from rgrunbla/galene-03 
galene: 0.2 -> 0.3 and bugfix of the associated module
 2021-03-21 05:31:30 +01:00
Maximilian Bosch
de98a184f5
wiki-js: init at 2.5.191 2021-03-20 20:43:21 +01:00
Milan
58804b24bc
nixos/gitlab: add option for tls wrapper-mode smtp (#116801) 2021-03-20 15:05:29 +01:00
Frederik Rietdijk
1ecb97eae9 Merge master into staging-next 2021-03-19 18:17:01 +01:00
edef
7ea4ee71c9
Merge pull request #112822 from deviant/localtime-user-allocation 
nixos/localtime: make localtimed a system user
 2021-03-19 12:45:58 +00:00
Jan Solanti
fbdb248e54 pipewire: 0.3.23 -> 0.3.24 2021-03-19 05:14:44 +02:00
Jan Tojnar
2445e9a681
Merge branch 'master' into staging-next 2021-03-18 19:24:39 +01:00
markuskowa
2af233afac
Merge pull request #115839 from markuskowa/fix-slurm 
nixos/slurm: expose to path config files
 2021-03-18 14:48:28 +01:00
Florian Klink
2b03d3a1cf nixos/bird: check config during reload 
`birdc configure` seems to not return a nonzero exit code if the reload
failed.

Context: https://bird.network.cz/pipermail/bird-users/2018-January/011858.html

Co-Authored-By: Puck Meerburg <puck@puck.moe>
 2021-03-18 14:25:44 +01:00
Florian Klink
7d266264ce nixos/bird: add services.bird*.checkConfig option 
This is useful when the config doesn't entirely live in the Nix store,
but is configured to include mutable config files written at runtime.

Co-Authored-By: Puck Meerburg <puck@puck.moe>
 2021-03-18 14:24:55 +01:00
Jan Tojnar
0136206b12
Merge branch 'master' into staging-next 2021-03-18 13:35:59 +01:00
Aaron Andersen
7cdd6238dd
Merge pull request #109711 from ymarkus/bookstack 
bookstack: init at 0.31.7, nixos/bookstack: init
 2021-03-17 20:37:03 -04:00
Raphael Megzari
f295110b26
prometheus-postgres-exporter: add environment file (#116373) 
* prometheus-postgres-exporter: add environment file

* Update nixos/modules/services/monitoring/prometheus/exporters/postgres.nix

Co-authored-by: WilliButz <WilliButz@users.noreply.github.com>
 2021-03-17 01:36:31 +01:00
github-actions[bot]
e0a6159fc6
Merge master into staging-next 2021-03-16 18:18:29 +00:00
ajs124
08ebda1a17
Merge pull request #115655 from helsinki-systems/upd/nginx 
nginxMainline: 1.19.7 -> 1.19.8
 2021-03-16 16:31:55 +01:00
github-actions[bot]
d18aaddde4
Merge master into staging-next 2021-03-16 00:39:08 +00:00
jali-clarke
cc582f1f59 nixos/kubernetes: import all platforms for seeded images 
This fixes a class of errors seen on aarch64 during coredns import where content was seen to be missing ("digest xxx not found") or "failed to get reader from content store" depending on which coredns version was being imported.
 2021-03-15 09:03:40 -04:00
github-actions[bot]
8fa4dca9b5
Merge master into staging-next 2021-03-15 00:40:27 +00:00
Sarah Brofeldt
8c5e702875
Merge pull request #116084 from jonringer/bump-factorio 
factorio: 1.1.26 -> 1.1.27
 2021-03-14 19:51:42 +01:00
github-actions[bot]
c7b23f6440
Merge master into staging-next 2021-03-14 18:17:08 +00:00
Sandro
5caaae33fb
Merge pull request #116303 from samuelgrf/printing-related-refactors 2021-03-14 17:49:41 +01:00
Samuel Gräfenstein
87f4d7a07a
nixos/printing: simplify filterGutenprint function 2021-03-14 11:59:00 +01:00
Jan Tojnar
01a4d350c7
Merge branch 'master' into staging-next 
Reverted https://github.com/NixOS/nixpkgs/pull/115228 for kodi to avoid conflict.

It does not look like unzip would be used but not investigating now to speed up merge conflict resolution.
 2021-03-13 19:16:43 +01:00
Maximilian Bosch
22b61e5263
nixos/prometheus/exporters: fix eval if only openFirewall = true; is set 
If `openFirewall = true`, but no `firewallFilter` is set, the evaluation
fails with the following error:

    The option `services.prometheus.exporters.node.firewallFilter` is defined both null and
    not null, in `/home/ma27/Projects/nixpkgs/nixos/modules/services/monitoring/prometheus/exporters.nix'
    and `/home/ma27/Projects/nixpkgs/nixos/modules/services/monitoring/prometheus/exporters.nix'.

Originally introduced by me in #115185. The problem is that
`mkOptionDefault` has - as its name suggests - the same priority as the
default-value of the option `firewallFilter` and thus it conflicts if
this declaration and the actual default value are set which is the case
if `firewallFilter` isn't specified somewhere else.
 2021-03-13 15:21:55 +01:00
Milan
24133ead28
nixos/mautrix-telegram: substitute secrets in config file at runtime (#112966) 
In the latest release of mautrix-telegram not all secrets can be set
using environment variables (see https://github.com/tulir/mautrix-telegram/issues/584).
This change allows these secret values to be set without ending up in
the Nix store.
 2021-03-13 13:56:17 +01:00
WilliButz
3971cda05f
Merge pull request #116037 from petabyteboy/feature/jitsi-exporter 
prometheus-jitsi-exporter: init at 0.2.18
 2021-03-13 13:37:10 +01:00
Julien Moutinho
a9ce4c4a0e zerobin: 20160108 -> 1.0.5 2021-03-13 13:06:06 +01:00
github-actions[bot]
4181409166
Merge master into staging-next 2021-03-13 06:17:31 +00:00
Aaron Andersen
5a24206e17
Merge pull request #111030 from cript0nauta/miniflux-sudo 
nixos/miniflux: don't depend on sudo
 2021-03-12 20:42:09 -05:00
Aaron Andersen
47c5175f0c
Merge pull request #93629 from ju1m/croc 
nixos/croc: init
 2021-03-12 20:34:33 -05:00
Jonathan Ringer
d980362a95 nixos/factorio: add nonBlockingSaving option 2021-03-12 10:34:59 -08:00
Yannick Markus
951f41fd41
nixos/bookstack: init 2021-03-12 16:59:06 +01:00
Milan Pässler
b2bebd7cd5
nixos/prometheus-jitsi-exporter: init 2021-03-12 11:11:16 +01:00
github-actions[bot]
d6257d451b
Merge master into staging-next 2021-03-11 18:23:54 +00:00
WilliButz
f5c01cf9d4
Merge pull request #113370 from chkno/prometheus-systemd-exporter-no-flags 
prometheus-systemd-exporter: Init at 0.4.0
 2021-03-11 19:18:29 +01:00
WilliButz
3ceef8186c
Merge pull request #115185 from Ma27/knot-exporter 
prometheus-knot-exporter: init at 2021-01-30; minor module improvements
 2021-03-11 18:58:59 +01:00
WilliButz
902a479225
Merge pull request #111364 from lbpdt/feature/prometheus-artifactory-exporter 
nixos/prometheus-exporters/artifactory: init at 1.9.0
 2021-03-11 18:44:03 +01:00
github-actions[bot]
b4d5951d9e
Merge master into staging-next 2021-03-11 12:21:28 +00:00
Maximilian Bosch
7ecc3b0684
Merge pull request #115372 from BBBSnowball/pr-add-config-nextcloud-imagick 
nixos/nextcloud: Conditionally enable ImageMagick PHP extension
 2021-03-11 12:45:17 +01:00
rnhmjoj
7962df46fe
nixos/privoxy: make certificate-directory optional 
The tmpfiles.d rule should only be added if inspectHttps is enabled.
 2021-03-11 08:17:50 +01:00
github-actions[bot]
0a8ec23e51
Merge master into staging-next 2021-03-11 00:39:21 +00:00
Markus Kowalewski
c923b4c71b
nixos/slurm: expose to path config files 
This adds a new internal option, services.slurm.etcSlurm such
that other modules can access slurm's config files. This is
needed, for example, when a service wants to run a slurm command.
 2021-03-10 23:12:47 +01:00
Sarah Brofeldt
33d6e71133
Merge pull request #98446 from srhb/fix-kafka 
apache-kafka: Fix, update and adjust JRE/JVM
 2021-03-10 20:25:13 +01:00
github-actions[bot]
6a3a358b0d
Merge master into staging-next 2021-03-10 18:23:15 +00:00
Léo Gaspard
4ee87cfead
Merge pull request #113620 from imlonghao/borgmatic 
borgmatic: init at 1.5.12
 2021-03-10 18:13:04 +01:00
Cabia Rangris
352405c0f6 nixos.spotifyd: fixed file not found error 
When using password_cmd, there's a 'file not found' error due to missing sh binary in path.
For some reason, adding `path = [ "/bin" ]` doesn't fix the issue, but setting `SHELL` does.
Related documentation: https://spotifyd.github.io/spotifyd/config/File.html#shell-used-to-run-commands-indicated-by-password_cmd-or-on_song_changed_hook----omit-in-toc---
 2021-03-10 13:26:10 +01:00
Sarah Brofeldt
fd02940262 nixos/apache-kafka: Use version-matched jre 2021-03-10 08:10:30 +01:00
Sarah Brofeldt
08ef827056 nixos/apache-kafka: Drop default jvmOptions 2021-03-10 08:09:34 +01:00
github-actions[bot]
149a81c88d
Merge master into staging-next 2021-03-10 00:39:07 +00:00
ajs124
2d3200e010 nixos/nginx: fix eval for tengine 2021-03-10 01:23:11 +01:00
Sandro
7a4d404e0f
Merge pull request #112689 from iblech/patch-whitebophir180 2021-03-09 22:12:24 +01:00
rnhmjoj
df6d7f3142
nixos/privoxy: document repeated settings 2021-03-09 17:59:12 +01:00
github-actions[bot]
5d13702776
Merge master into staging-next 2021-03-09 12:25:54 +00:00
rnhmjoj
8e21a1c51b
nixos/privoxy: set temporary directory 
This is needed for working external filters, otherwise privoxy will fail
without a clear error message.
 2021-03-09 11:02:59 +01:00
rnhmjoj
3673ded392
nixos/privoxy: add https and settings options 
This is a major rewrite of the Privoxy module:

- As per RFC0042, remove privoxy.extraConfig and replace it
  with a privoxy.settings option, which maps a NixOS freeform
  submodule to the Privoxy configuration format.

- Move all top-level options that mirrored a setting to
  the real ones in privoxy.settings. This still keeps the
  type-checking, default values and examples in places.

- Add two convenience options: userActions and userFilters, which
  simplify the operation of creating a file with pkgs.writeText,
  converting it to a string and adding it to the actionsfile/
  filterfile list.

- Add a privoxy.inspectHttps option to automagically setup TLS
  decryption support. I don't know how long have been waiting
  for this feature: can't believe it has just happened.

- Also add a privoxy.certsLifetime to control the periodical
  cleanup of the temporary certificates generate by Privoxy.
 2021-03-09 11:02:59 +01:00
Michele Guerini Rocco
af6037b338
Merge pull request #111551 from xaverdh/xserver-modern-drivers 
nixos/xserver: use modern video drivers
 2021-03-09 08:14:24 +01:00
Benjamin Koch
6e6f5f0923 nixos/nextcloud: Rename option to services.nextcloud.disableImagemagick 
... as was suggested in the related issue
 2021-03-09 00:38:39 +01:00
Frederik Rietdijk
277d488026 Merge staging into staging-next 2021-03-08 19:20:18 +01:00
Robert Schütz
6692b32105
Merge pull request #112125 from dotlambda/alerta 
alerta: move to all-packages.nix and use buildPythonApplication
 2021-03-08 10:09:30 +01:00
Julien Moutinho
be6463cd9d nixos/croc: init 2021-03-08 01:34:32 +01:00
Benjamin Koch
e30311bc68 nixos/nextcloud: Conditionally enable ImageMagick PHP extension 2021-03-08 01:06:48 +01:00
Maximilian Bosch
bd54f78047
Merge pull request #114383 from Anderssorby/acs/fix-minetest-port-option-coercion 
nixos/minetest-server: Fix port coercion
 2021-03-07 21:37:49 +01:00
github-actions[bot]
dcea8212b5
Merge staging-next into staging 2021-03-07 12:20:40 +00:00
Jörg Thalheim
413b44590f
Merge pull request #114482 from jansol/pipewire 2021-03-07 09:34:42 +00:00
github-actions[bot]
65cddb74d7
Merge staging-next into staging 2021-03-07 06:17:25 +00:00
Johan Thomsen
7b5c38e973 nixos/kubernetes: docker -> containerd 
also, nixos/containerd: module init
 2021-03-07 12:51:14 +10:00
Yurii Matsiuk
7da62867be nixos/kubernetes: adapt module and test cases to fit kubernetes v1.20.X as well as coredns v1.7.X 2021-03-07 12:50:39 +10:00
Jan Tojnar
1465e8e397
Merge branch 'staging-next' into staging 2021-03-06 19:56:45 +01:00
John Ericson
f5a7d8bb41
Merge pull request #115228 from siraben/unzip-buildInputs 
treewide: unzip buildInputs to nativeBuildInputs (2)
 2021-03-06 13:30:43 -05:00
Martin Weinelt
b349460dd8
Merge pull request #115016 from mweinelt/home-assistant 2021-03-06 19:26:20 +01:00
Léo Gaspard
393d300055
xfce module: enable notification daemon by default (#115130) 
The notification daemon is just one part of XFCE that is, to the best of
my understanding, not particularly related to it being desktop or not —
for instance, not more related than the session manager or the like.
 2021-03-06 19:04:15 +01:00
Ben Siraphob
4f0cdb68d7 treewide: unzip buldInputs to nativeBuildInputs (2) 2021-03-06 15:18:05 +07:00
TredwellGit
e3d705e601 nixos/xserver: use modern video drivers 
cirrus is obsolete: https://www.vintage3d.org/cirrus.php
nv is obsolete: https://www.phoronix.com/scan.php?page=article&item=nvidia_kills_nv&num=1
vesa is obsolete: https://www.phoronix.com/scan.php?page=news_item&px=Nzc3Nw
ati and ati_unfree are superseded by amdgpu and amdgpu-pro: https://wiki.gentoo.org/wiki/ATI_FAQ#Is_my_AMD.2FATI_board_supported.3F
nouveau and fbdev added for better fallback support.
 2021-03-06 08:47:18 +01:00
Martin Weinelt
1050f1487b
nixos/home-assistant: disable tests on the package by default 
We are running over 6000 tests by now and they take around 5 minutes
on faster machines and tests alot of components that endusers will not
actually be using. It is sufficient if we run them on package upgrades
and in the passthrough test.
 2021-03-06 03:02:06 +01:00
Maximilian Bosch
2838365903
nixos/prometheus/exporters: assert that openFirewall is true if firewallFilter is declared 2021-03-05 13:35:16 +01:00
Maximilian Bosch
b4bd584b64
nixos/prometheus/exporters/knot: init 2021-03-05 13:13:46 +01:00
Maximilian Bosch
d65d9dea2c
nixos/prometheus/exporters: use types.port for port option 2021-03-05 13:06:03 +01:00
Tim Van Baak
002fe4f19d nixos/nebula: Add final newline to module and test 2021-03-04 21:39:04 -08:00
Tim Van Baak
e3f113abc2 nixos/nebula: Update systemd service to be more like the source repo's 2021-03-04 21:36:05 -08:00
Jan Solanti
b012ecaae7 pipewire: 0.3.22 -> 0.3.23 2021-03-05 00:41:02 +02:00
Jan Solanti
78bfbdd77a pipewire: 0.3.21 -> 0.3.22 2021-03-05 00:39:32 +02:00
Maximilian Bosch
594eff1d59
Merge pull request #113958 from Ma27/nextcloud21 
nextcloud21: init at 21.0.0, set as default version
 2021-03-04 21:47:26 +01:00
Maximilian Bosch
690449f3ae
nixos/nextcloud: enable apc cache for cli if apcu is enabled 
As described in the admin manual[1] of Nextcloud.

[1] https://docs.nextcloud.com/server/21/admin_manual/configuration_server/caching_configuration.html#id1
 2021-03-04 21:13:51 +01:00
davidak
00b47419c6
Merge pull request #103705 from freezeboy/add-plik 
plik: init at 1.3.1
 2021-03-04 20:28:34 +01:00
Lassulus
6402bee9d4
Merge pull request #113203 from leonardp/ceph-fix 
nixos/ceph: fix ceph.client.extraOptions type
 2021-03-04 20:13:36 +01:00
imlonghao
c026da4056 borgmatic: init at 1.5.12 2021-03-04 13:01:03 +08:00
Cole Helbling
10d513e633
nixos/hydra: append application_name to HYDRA_DBI 
This will make it easier to track specifically where queries are being
made from (assuming a `log_line_prefix` that includes `%a` in the
postgres configuration).
 2021-03-03 16:04:00 -08:00
Cole Helbling
c89117997d nixos/lifecycled: init 2021-03-03 11:15:35 -08:00
Milan Pässler
507b66a5e5
nixos/grafana: create directory for notifiers provisioning 2021-03-03 20:11:25 +01:00
Aaron Andersen
9798ed1a3d
Merge pull request #111011 from waldheinz/nginx-mem-write-exec 
nixos/nginx: fix MemoryDenyWriteExecute not being disabled when needed
 2021-03-03 07:19:35 -05:00
taku0
61706fc470
Merge pull request #114853 from lourkeur/fix-string-escaping 
nixos/kresd, nixos/dokuwiki, tests/fpm, build-bazel-package, libcutl: fix string escaping
 2021-03-03 19:35:16 +09:00
Isaac van Bakel
3e4499519d Add trailing periods to all Grafana option descriptions 2021-03-03 03:59:39 -05:00
Isaac van Bakel
f689b8a65f Add notifier configs to grafana provisioning 
Similar to dashboards and datasources, notifiers in Grafana can also be
provisioned. This adds them to the Grafana service definition.
 2021-03-03 03:59:39 -05:00
Kim Lindberger
8eea5d0fbd
Merge pull request #114592 from etu/php-minor-fixes 
php: various fixes
 2021-03-02 09:41:15 +01:00
Elis Hirwing
1216baaee1
nixos/httpd: Fix httpd module for php8 2021-03-02 09:22:32 +01:00
Tim Van Baak
17430ea40a nixos/nebula: Remove default punch option in favor of setting it through the settings option 2021-03-01 20:21:27 -08:00
Kim Lindberger
e72375464b
Merge pull request #113635 from talyz/gitlab-improvements 
nixos/gitlab: Clean config dir, switch to puma, split PreStart script and more
 2021-03-01 13:37:53 +01:00
Tim Van Baak
511465ade0 nixos/nebula: Remove unnecessary package from service user 2021-02-28 18:35:16 -08:00
Tim Van Baak
9f1ebd0c10 nixos/nebula: Refactor module to allow for multiple nebula services on the same machine 2021-02-28 18:31:42 -08:00
rnhmjoj
538312709e
nixos/tcsd: several improvements and fixes 
- Actually run tcsd as tss/tss
- Install a udev rule to set /dev/tpm* permissions
- Remove systemd-udev-settle dependency, use dev-tpm0.device instead
- Use systemd-tmpfiles to set up the state directory
- Add documentation URI to tcsd.service

This module cannot be easily tested with a NixOS test due to the TPM
dependency. Technically, one could be emulated using swtpm[1], but this
is not packaged in Nixpkgs. If you computer has a real TPM you can do a
passthrough in Qemu, but this requires running the VM as root and of
course it's not determinstic:

    $ nix build -f nixos vm --arg configuration '
      {
        virtualisation.qemu.options = [
          "-tpmdev passthrough,id=tpm0,path=/dev/tpm0,cancel-path=/sys/class/tpm/tpm0/cancel"
          "-device tpm-tis,tpmdev=tpm0"
        ];
        users.users.root.hashedPassword = "";
        services.tcsd.enable = true;
      }'

After starting the VM, log in as root, you can check the service has
started with `systemctl status tcsd`.

[1]: https://github.com/stefanberger/swtpm
 2021-02-28 19:54:19 +01:00
Anderson Torres
e753d4c226
Merge pull request #95019 from SFrijters/xsession-env-vars 
nixos/x11: Respect XCOMPOSECACHE/XDG_DATA_HOME if set in xsession-wrapper
 2021-02-28 13:08:34 -03:00
Robert Schütz
336c114214 alerta: move to all-packages.nix and use buildPythonApplication 2021-02-28 12:25:52 +01:00
Robert Schütz
3fcd9361b5 alerta-server: move to all-packages.nix and use buildPythonApplication 2021-02-28 12:25:47 +01:00
Milan Svoboda
df3d560999 nixos/nix-gc: add persistent and randomizeDelaySec options 2021-02-28 04:21:21 -05:00
Michele Guerini Rocco
f3ae13d608
Merge pull request #114568 from rnhmjoj/acpid-no-udev-settle 
nixos/acpid: clean up the module
 2021-02-28 09:19:14 +01:00
Michael Weiss
18df480d9b gollum: Transfer maintainership to erictapen 
I'm not using Gollum anymore while Justin still uses it and has also
written the NixOS module. So it makes perfect sense to pass it on :)
 2021-02-27 21:39:16 +01:00
Stefan Frijters
580cf02c19
nixos/x11: Be more defensive when removing XCOMPOSECACHE 2021-02-27 17:55:58 +01:00
Stefan Frijters
ee713d36bc
nixos/x11: Respect XCOMPOSECACHE/XDG_DATA_HOME if set 2021-02-27 17:55:48 +01:00
Stefan Frijters
37460768e2
nixos/x11: Source .xprofile earlier in xsession-wrapper 
This allows users to set e.g. XCOMPOSECACHE before it's used.
 2021-02-27 17:55:47 +01:00
rnhmjoj
8e016023f8
nixos/acpid: clean up the module 
- Use --netlink to avoid systemd-udev-settle[1]

- Run daemon in foreground which is preferred with systemd

- Add unit documentation

- Write ExecStart directly, no need for a script

[1]: 52bbd2b80b
 2021-02-27 16:18:32 +01:00
Pavol Rusnak
01f1773e8e
trezord: don't trigger systemd-udev-settle 2021-02-27 12:35:04 +01:00
Matthew Bauer
c168e05c7e
Merge pull request #86239 from tathougies/patch-2 
[nixos/prometheus] promTypes.filter.value -> promTypes.filter.values
 2021-02-26 19:28:18 -06:00
Florian Klink
43f83f9c45
Merge pull request #75866 from Sohalt/spnav 
libspnav: init at 2.3.0
 2021-02-26 22:21:21 +01:00
talyz
ca725e7fcd
nixos/gitlab: Add gitlab.target 
To make it easier to start and stop all GitLab services, introduce
`gitlab.target` which wants all services (meaning they will start with
it) and which all services are part of (meaning they will stop with
it).
 2021-02-26 19:54:23 +01:00
talyz
9d4e76dd46
nixos/gitlab: Make gitlab.service's PreStart into two new services 
Make the config initialization script run in gitlab.service's PreStart
section into two new services, `gitlab-config.service` and
`gitlab-db-config.service`. Other services can then depend on the
config scripts they need instead of unnecessarily depending on
`gitlab.service`. This makes the reason for the configured service
dependencies much clearer and should also reduce the restart time of
the `gitlab` service quite a lot, when triggered manually.

Also, set up stricter service dependencies, using `bindsTo`, to ensure
that if a service fails or is stopped, its dependants are also
stopped. For example, if we're using the `postgresql` service and it's
stopped, `gitlab.service` and `gitlab-sidekiq.service`, which depend on
it to function, should also be stopped.
 2021-02-26 19:54:05 +01:00
Naïm Favier
302fcc4674
nixos/getty: add services.getty.extraArgs 2021-02-26 13:17:04 +01:00
Anders Christiansen Sørby
a4cbbc027f
nixos/minetest-server: Fix port coercion 
Fix coercion of minetest-server port.
 2021-02-25 19:03:13 +01:00
Aaron Andersen
890327d751
Merge pull request #106698 from aanderse/nixos/clamav 
nixos/clamav: add settings options to replace extraConfig options
 2021-02-24 22:57:41 -05:00
Maximilian Bosch
797721423c
nixos/nextcloud: update nginx config 
Please note that I didn't use the current nginx config from the
administration manual as this would've broken ACME challenges[1].

Also added a fix for Microsoft clients.

[1] https://github.com/nextcloud/documentation/pull/5825#issuecomment-783977761
 2021-02-24 23:01:14 +01:00
Maximilian Bosch
b1f65920c3
nixos/nextcloud: add defaultPhoneRegion option for v21 2021-02-24 22:27:39 +01:00
Cole Helbling
1b37f66fc1 nixos/zrepl: init 
zrepl is a ZFS backup and replication tool written in Go.
 2021-02-24 11:56:02 -08:00
talyz
53d9ec83ff
nixos/gitlab: postgresql: Make PSQL a function, run as superUser 
A function is more appropriate for this use. See
http://mywiki.wooledge.org/BashFAQ/050 for reference.

Also, we don't need to run the service as root: since we essentially
run all commands as `services.postgresql.superUser` anyway, the whole
service can just run as that user instead.
 2021-02-24 18:32:31 +01:00
talyz
2b3800b9c7
nixos/gitlab: Change default SMTP port, enable postfix only if used 
Change the default SMTP port to `25`, to better match the default
address `localhost`. This gets rid of some error outputs in the test,
where it fails to connect to localhost:465.

Also, don't enable postfix by default unless it's actually useful to
us.
 2021-02-24 18:32:24 +01:00
talyz
f8ab43ef7b
nixos/gitlab: Switch from unicorn to puma 
Puma is the new upstream default server since GitLab 13.
 2021-02-24 18:31:30 +01:00
talyz
2ec397ff9f
nixos/gitlab: Clean up the config dir more thoroughly 
This removes all the subdirectories in `config` on start.

From one version of GitLab to the next, the files in the `config`
directory changes. Since we're only overwriting the existing files
with ones from the repo, cruft sometimes gets left behind,
occationally causing issues.

Ideally, all configuration put in the `config` directory is declared
by NixOS options and we could just remove the whole directory on
start, but I'm not sure if that's the case. It would also require a
little bit of additional rework and testing. The subdirectories,
however, should seldom contain user configuration and the ones that
frequently does, `initializers`, is already removed on start.
 2021-02-24 18:31:24 +01:00
Aaron Andersen
fbecdac147
Merge pull request #113487 from aanderse/nixos/galera 
nixos/mysql: properly configure mariadb for galera recovery
 2021-02-24 08:49:54 -05:00
Pascal Bach
3ec9637a05 nixos/geth: initial service 2021-02-23 19:28:51 +01:00
freezeboy
fc2ae7d79e nixos/plikd: Add new service module 2021-02-23 15:35:16 +01:00
Maximilian Bosch
f7011c70f3
nextcloud21: init at 21.0.0, set as default version 
ChangeLog: https://nextcloud.com/changelog/#latest21

* Packaged 21.0.0, test-deployed it to my personal instance and tested
  the most basic functionality (`davfs2`-mount, {card,cal}dav sync, file
  management).

* Bumped the default version for unstable/21.05 to `nextcloud21`. Since
  `nextcloud20` was added after the release of 20.09 (and thus the
  default on 20.09 is still `nextcloud19`), it's now needed to upgrade
  across two majors.

  This is not a problem though since it's possible to upgrade to v20 on
  20.09 already and if not, the module will guard the administrator
  through the upgrade with eval warnings as it's the case since 20.03.

* Dropped `nextcloud17` attribute and marked `nextcloud18` as EOL.
 2021-02-22 13:04:42 +01:00
Jörg Thalheim
a9bf245393
Merge pull request #113772 from Mic92/pipewire 
nixos/pipewire: only enable media-session if pipewire is enabled
 2021-02-21 21:21:51 +00:00
WORLDofPEACE
4287f5adfa
Merge pull request #100569 from andersk/gdm-plymouth 
nixos/gdm: Conflict plymouth-quit, but more carefully
 2021-02-21 11:03:18 -05:00
Guillaume Girol
aed173ff97
Merge pull request #113904 from ju1m/dnscrypt-proxy2 
nixos/dnscrypt-proxy2: reallow @sync syscalls
 2021-02-21 14:17:24 +00:00
Julien Moutinho
862481560c nixos/dnscrypt-proxy2: reallow @sync syscalls 2021-02-21 14:53:54 +01:00
Guillaume Girol
1d55adbce8
Merge pull request #113237 from jflanglois/fix-kmscon 
nixos/services/kmscon: fix systemd configuration
 2021-02-21 13:43:31 +00:00
Michele Guerini Rocco
19d715c573
Merge pull request #107382 from rnhmjoj/no-udev-settle 
nixos/{networkd,dhcpcd}: remove udev-settle hack
 2021-02-20 20:49:19 +01:00
Jörg Thalheim
f3918b4bc3
nixos/pipewire: only enable media-session if pipewire is enabled 2021-02-20 13:42:18 +01:00
Sandro
38769f8a26
Merge pull request #113715 from vojta001/miniflux-docs 
miniflux: fix link to docs
 2021-02-20 06:09:00 +01:00
Aaron Andersen
cb2bce709f
Merge pull request #83479 from matt-snider/nixos/etesync-dav 
nixos/etesync-dav: init module
 2021-02-19 19:02:37 -05:00
Rémy Grünblatt
8f84dab8a1 galene: 0.2 -> 0.3 and bugfix of the associated module 2021-02-19 21:26:08 +01:00
Vojtěch Káně
d51ec7e83d miniflux: fix link to docs 2021-02-19 20:14:14 +01:00
Symphorien Gibol
c64fb5000b nixos/sane: allow to disable enabled-by-default plugins 
use case: disabling v4l plugin because I don't use my webcam as a
scanner.
 2021-02-19 16:52:26 +01:00
Sandro
4b694d5e3d
Merge pull request #113674 from SuperSandro2000/fix-collection16 2021-02-19 13:27:03 +01:00
rnhmjoj
8e59a682a5
nixos/udev: add option to install rules in initrd 
Note: this moves the example rule used to rename network interfaces in
the new udev.initrdRules option, which is required since 115cdd1c.
 2021-02-19 09:26:13 +01:00
rnhmjoj
15d6eacb15
nixos/{networkd,dhcpcd}: remove udev-settle hack 
systemd-udev-settle is a terrible hack[1] and should never[2] ever[3]
used, seriously it's very bad. It was used as a stop-gap solution for
issue #39069, but thanks to PR #79532 it can be removed now.

[1]: https://github.com/systemd/systemd/issues/7293#issuecomment-592941764
[2]: https://github.com/NixOS/nixpkgs/issues/73095
[3]: https://github.com/NixOS/nixpkgs/issues/107341
 2021-02-18 22:07:00 +01:00
Chuck
83de9e2d12 prometheus-systemd-exporter: Init at 0.4.0 2021-02-18 09:56:45 -08:00
Daniël de Kok
6e10cf2c1c
Merge pull request #108045 from mmilata/moinmoin-module-fix 
nixos/moinmoin: fix module by switching to eventlet worker
 2021-02-18 16:13:22 +01:00
Peter Hoeg
c382780e9b nixos/bluetooth: fix more stupidity on my part 
Say this 10 times so I don't forget:

 - just because something has been tested and confirmed working, doesn't
   mean that a trivial change can go in without testing simply because
   it looks OK. test, test, test.
 - just because something has been tested and confirmed working, doesn't
   mean that a trivial change can go in without testing simply because
   it looks OK. test, test, test.
 - just because something has been tested and confirmed working, doesn't
   mean that a trivial change can go in without testing simply because
   it looks OK. test, test, test.
 - just because something has been tested and confirmed working, doesn't
   mean that a trivial change can go in without testing simply because
   it looks OK. test, test, test.
 - just because something has been tested and confirmed working, doesn't
   mean that a trivial change can go in without testing simply because
   it looks OK. test, test, test.
 - just because something has been tested and confirmed working, doesn't
   mean that a trivial change can go in without testing simply because
   it looks OK. test, test, test.
 - just because something has been tested and confirmed working, doesn't
   mean that a trivial change can go in without testing simply because
   it looks OK. test, test, test.
 - just because something has been tested and confirmed working, doesn't
   mean that a trivial change can go in without testing simply because
   it looks OK. test, test, test.
 - just because something has been tested and confirmed working, doesn't
   mean that a trivial change can go in without testing simply because
   it looks OK. test, test, test.
 - just because something has been tested and confirmed working, doesn't
   mean that a trivial change can go in without testing simply because
   it looks OK. test, test, test.

I'm sorry guys.
 2021-02-18 14:54:19 +00:00
sohalt
725966b870 nixos/spacenavd: init 2021-02-18 15:08:20 +01:00
Sandro Jäckel
754a8db42d
nixos/printing: remove google cloud print 2021-02-18 02:21:38 +01:00
Aaron Andersen
4b9262786d nixos/mysql: properly configure mariadb for galera recovery 2021-02-17 15:50:20 -05:00
Maximilian Bosch
910e103fcb
Merge pull request #113323 from witchof0x20/nextcloud_redirect_fix 
nixos/nextcloud: DAV .well-known redirect fix
 2021-02-17 17:23:35 +01:00
Francesco Gazzetta
d56f72178e nixos/mlmmj: use appropriate postfix options 
instead of extra*

should make the module more interoperable with others
 2021-02-17 16:00:59 +00:00
Francesco Gazzetta
7596e7a495 nixos/mlmmj: add more list headers 
since we already add a couple of default headers, it makes sense to have
a sensible default and add the unsubscribe header and friends
 2021-02-17 15:59:06 +00:00
Justin Humm
40f60919ab nixos/mastodon: fix group membership for nginx 
4255954d97 set the StateDirectory to 0750,
but nginx wasn't in the Mastodon group. This commit also deletes a line,
that probably was intended to serve this purpose, but makes no sense.
Why should the Mastodon user be added as an extraGroup to the nginx
user?
 2021-02-17 15:16:14 +01:00
Matt Snider
58058515a3
nixos/etesync-dav: init module 2021-02-17 10:43:08 +01:00
Jörg Thalheim
9783fa9554
Merge pull request #110615 from jansol/pipewire 2021-02-17 07:41:27 +00:00
Peter Hoeg
bf11a28bd3 nixos/bluetooth: hotfix for stupidity 2021-02-17 05:58:08 +00:00
Peter Hoeg
1a4c039432 nixos/bluetooth: add support for disabling plugins 2021-02-17 02:40:59 +00:00
WORLDofPEACE
8a2bd1342e
Merge pull request #113064 from worldofpeace/fix-108124 
nixos/tools: make desktopConfiguation types.listOf types.lines
 2021-02-16 15:16:53 -05:00
Jade
f83d4f86d5
Nextcloud redirect fix 2021-02-16 11:58:38 -05:00
Izorkin
96f0c2c191 mastodon, nixos/mastodon: use the same nodejs package in package and module 2021-02-16 17:57:31 +01:00
Julien Langlois
f3828c53c9
nixos/services/kmscon: fix systemd configuration 
This fixes https://github.com/NixOS/nixpkgs/issues/112616
 2021-02-15 16:58:54 -05:00
Maximilian Bosch
274109a8d6
Merge pull request #113108 from Ma27/nextcloud-acme 
nixos/nextcloud: fix regex to not return 404 on ACME challenges
 2021-02-15 18:53:35 +01:00
Maximilian Bosch
31864de85d
Merge pull request #113187 from Ma27/nextcloud-dav 
nixos/nextcloud: redirect /.well-known/*dav to https url
 2021-02-15 18:53:19 +01:00
Leonard Pollak
a9a100adf6 nixos/ceph: fix ceph.client.extraOptions type 2021-02-15 14:56:26 +01:00
Izorkin
e3a7270e3d nixos/mastodon: fix mastodon-init-db script 2021-02-15 11:43:03 +01:00
Izorkin
4255954d97 nixos/mastodon: optimize permissions 2021-02-15 11:43:03 +01:00
Izorkin
424e7b0f5d nixos/mastodon: use unix socket to default 2021-02-15 11:43:03 +01:00
Izorkin
f1adea1a94 nixos/mastodon: add option trustedProxy 2021-02-15 11:43:03 +01:00
Maximilian Bosch
f89652a23e
nixos/nextcloud: redirect /.well-known/*dav to https url 
Fixes #113155
 2021-02-15 11:03:12 +01:00
Jan Solanti
3d69688289 pipewire: rename pwms to media-session 2021-02-14 23:54:23 +02:00
Jan Solanti
b9b9fff6d6 pipewire: use strictly upstream defaults 2021-02-14 23:54:17 +02:00
Aaron Andersen
796e3d6ff6
Merge pull request #111695 from jansol/xow 
xow: fix service
 2021-02-14 13:32:55 -05:00
Jean-Paul Calderone
9338023577
Fix typo in the GitLab smtp auth options docs 2021-02-14 09:55:54 -05:00
Maximilian Bosch
055b7e2a5d
nixos/nextcloud: fix regex to not return 404 on ACME challenges 
Fixes #113027
 2021-02-14 12:23:16 +01:00
WORLDofPEACE
452f7e14d4 nixos/tools: generate an xserver config 
The desktop configuration won't enable xserver.
If there's multiple desktops enabled they will now evaluate properly.
 2021-02-13 18:46:01 -05:00
WORLDofPEACE
94f0210e60 nixos/tools: make desktopConfiguation types.listOf types.lines 
This fixes #108124.
 2021-02-13 18:45:27 -05:00
Milan
3b77e7c967
nixos/jitsi-videobridge: add apis option (#112960) 
The `--apis=` command line parameter passed to Jitsi Videobridge is
required to monitor a Jitsi Meet instance for example via the prometheus
exporter [jitsiexporter](https://git.xsfx.dev/prometheus/jitsiexporter).
 2021-02-13 15:04:58 +01:00
Luke Granger-Brown
cfed3b8b22 treewide: update 21.03 to 21.05 
The NixOS 21.03 release has been delayed to 21.05. See NixOS/rfcs#80.

There are two instances of 21.03 which have been left as is, since they
are in stateVersion comparisons. This will ensure that existing user
configurations which refer to 21.03 will continue to work.
 2021-02-12 14:12:48 -08:00
erictapen
b2dbb4f50e
nixos/mastodon: set environment for mastodon-init-dirs (#112917) 
mastodon-init-dirs should have the same environment as the other
services, as it also calls rake. Especially RAILS_ENV was missing.
 2021-02-12 20:31:44 +01:00
Milan Pässler
4d6bfa473a
nixos/mastodon: init 
Co-authored-by: Happy River <happyriver93@runbox.com>
Co-authored-by: ash lea <ashkitten@users.noreply.github.com>
Co-authored-by: Justin Humm <justin.humm@posteo.de>
 2021-02-12 15:37:15 +00:00
V
0268691925 nixos/localtime: make localtimed a system user 
Currently, a user is created in the 1000-29999 range. This is incorrect,
as localtimed is a system service and not a user.
 2021-02-11 22:36:37 +01:00
Louis Blin
458fafa8fc nixos/prometheus-exporters/artifactory: init at 1.9.0 
Adds a Prometheus exporter to scrape metrics from the API of JFrog
Artifactory instances.
 2021-02-11 15:56:58 +00:00
Daniel Nagy
7c121e60c5
nixos/httpd: fix lua paths 
Account for the fact that, when creating a lua package without the
"withPackages" helper, we dont get an extra "lua" attribute in the
package.

Therefore we need to distinguish between the "withPackages" case and the
direct ( or "empty" ) lua package.

For example with this nixos config:

```nix
{
  services.httpd = {
      enable = true;
      package = pkgs.apacheHttpd.override {
        luaSupport = true;
        lua5 = pkgs.lua5_3.withPackages (ps: with ps; [ luafilesystem ] );
      };
    };
}
```

Here we say that we want to have apache to use a lua, packaged with the
`luafilesystem` module so that we can `require` that in scripts to
render http responses. There, the set that gets assigned to `lua5 ` does
not have a `luaversion` attribute, rather it has a `lua` attribute
wherein lies a `luaversion` attribute. If we dont package additional
modules, then we dont have that `lua` attribute in between and rather
directly have to use `luaversion` directly.
 2021-02-11 11:56:06 +01:00
Philipp Kern
8854b82511 nixos/spamassassin: Handle return codes correctly 
For sa-update we care about two successful codes:

 * 1 -> no updates available: exit successfully
 * 0 -> updates have been installed: run sa-compile and pass
   through its return code
 2021-02-11 10:12:16 +01:00
Philipp Kern
c86b339491 nixos/spamassassin: Only run sa-compile when updates have been installed 2021-02-11 10:12:15 +01:00
Philipp Kern
cc625c968d nixos/spamassassin: Run sa-compile after updating the rules 
sa-compile speeds up processing the rules by compiling them from Perl to
C.  This needs to be run after every update and is saved in the local
state directory by Perl and SpamAssassin version.
 2021-02-11 10:12:15 +01:00
Philipp Kern
624cc51bad nixos/spamassassin: Simplify services by using StateDirectory 
Let systemd create SpamAssassin's state directory and populate it using the
regular updater service. Depend on the updater service on boot but do not
propagate failure to the main service.

spamd's commands to start and reload the service are still executed as
root but user/group are set to properly chown the state directory to the
target user. spamd drops privileges itself for its runner children but
preserves root on the main daemon (to listen and re-exec).
 2021-02-11 10:09:45 +01:00
Philipp Kern
1db74d1150 nixos/spamassassin: Fix network requirement on boot 
sa-update currently runs as part of the pre-start script of spamd. The
network is not guaranteed to be online at that point and even if we
were to depend on that, it makes the bootup brittle, as there is a
reliance on SpamAssassin's update server as a startup dependency on
boot.

Refactor the setup to move the pre-start script into its own unit.
This allows to perform the setup task only once. Continuous updates
are already done by sa-update.service triggered by sa-update.timer.
Only run sa-update in case /var/lib/spamassassin is empty.

While we are on it, let sa-update.service depend on the network being
online.
 2021-02-11 10:09:45 +01:00
Ingo Blechschmidt
b481663125 nixos/whitebophir: expose new option provided by whitebophir 1.8.0 2021-02-10 23:33:02 +01:00
Finn Behrens
92859ff489 nixos/prometheus-flow-exporter: init module 2021-02-10 14:29:05 +01:00
Robert Hensing
696294ea9f Improve todo 2021-02-10 10:36:00 +01:00
Robert Hensing
460ba46a4a nixos/hercules-ci-agent: Add myself to meta.maintainers 2021-02-10 09:50:27 +01:00
Robert Hensing
0c22957751 nixos/hercules-ci-agent: Improve concurrentTasks option doc 2021-02-10 09:49:57 +01:00
Robert Hensing
fbabab7b16 nixos/hercules-ci-agent: Format with nixpkgs-fmt 2021-02-10 09:49:21 +01:00
Aaron Andersen
9f9e7c181c nixos/nebula: conditionally provision the nebula user 2021-02-09 20:48:23 -05:00
Aaron Andersen
b52a8f67dd nixos/nebula: simply service user logic 2021-02-09 20:45:17 -05:00
Aaron Andersen
e8eaea9627 nixos/nebula: replace extraConfig option with a settings option 2021-02-09 20:42:33 -05:00
Aaron Andersen
5473527775
Merge pull request #111312 from fdietze/patch-2 
herbstluftwm: Add option to specify package
 2021-02-09 20:13:03 -05:00
Felix Dietze
5a827051aa herbstluftwm: Add option to specify package 2021-02-09 08:51:21 -01:00
Martin Weinelt
2b454fcefd
Merge pull request #112391 from serokell/zhenya/oauth2-proxy-multiple-hosts 
nixos/oauth2_proxy_nginx: specify hostname in X-Auth-Request-Redirect
 2021-02-09 02:37:03 +01:00
Bernardo Meurer
c83a3d6fa7
Merge pull request #112335 from lovesegfault/firefox-no-flash 
treewide: cleanup Adobe Flash Player
 2021-02-09 01:35:24 +00:00
Martin Weinelt
47901b544c
Merge pull request #111302 from fooker/pr/nginx-default-type 
nixos/nginx: serve unknown MIME-Types as binary
 2021-02-09 01:44:47 +01:00
Jan Tojnar
faf133f854
Merge pull request #97972 from mvnetbiz/power-profiles-daemon 2021-02-09 01:41:04 +01:00
Matt Votava
9a3190a960
power-profiles-daemon: init at 0.1, add service module 2021-02-09 01:25:56 +01:00
Guillaume Girol
2630a2df91
Merge pull request #108238 from snicket2100/more-dnscrypt-proxy-hardening 
nixos/dnscrypt-proxy2: more service hardening
 2021-02-08 19:22:44 +00:00
Robert Hensing
094362a35a
Merge pull request #112154 from hercules-ci/nixos-hercules-ci-agent-remove-patchNix 
nixos/hercules-ci-agent: Remove patchNix
 2021-02-08 19:21:00 +01:00
Bernardo Meurer
ecaefda84a
nixos.flashpolicyd: drop 2021-02-08 09:38:48 -08:00
Zhenya Vinogradov
cc26d8592f nixos/oauth2_proxy_nginx: specify hostname in X-Auth-Request-Redirect 
Fixes redirection after signing in when you use a single oauth2_proxy
instance for multiple domains.

X-Auth-Request-Redirect header is used to decide which URL to redirect
to after signing in. Specifying `request_uri` is enough in case you
need to redirect to the same domain that serves oauth2 callback
endpoint, but with multiple domains the you should include the scheme
and the host.
 2021-02-08 15:28:52 +03:00
Michele Guerini Rocco
c9f6a7f349
Merge pull request #111624 from rnhmjoj/thinkfan 
nixos/thinkfan: rewrite for 1.2 update
 2021-02-08 12:20:07 +01:00
WilliButz
bfa15ad956
Merge pull request #112351 from logan12358/prometheus-nginx-exporter-service 
nixos/prometheus-nginx-exporter: only create service if nginx exporter is enabled
 2021-02-08 11:54:13 +01:00
Logan Glasson
c6ec272c78 nixos/prometheus-nginx-exporter: only create service if nginx exporter is enabled 
On a system with nginx enabled but the prometheus exporter not enabled,
the prometheus-nginx-exporter service should not be created.
 2021-02-08 13:17:56 +13:00
Eric Bailey
35056b3b61 maintainers/teams: add beam team 2021-02-07 13:01:11 -06:00
Sandro
a64370c164
Merge pull request #112295 from thelegy/snapserver-fix-buffer-options 
nixos/snapserver: Fix buffer options not coercible to str
 2021-02-07 17:10:34 +01:00
rnhmjoj
02b872310d
nixos/thinkfan: rewrite for 1.2 update 
Thinkfan underwent some major changes and the config file
is now based on YAML. This commit contains a number of changes:

- rewrite the module to output the new format;
- add a `settings` option, following RFC 0042[1];
- add fancy type-checking for the most critical options
- use upstream systemd units (which fix the resume issue)

[1]: https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md
 2021-02-07 14:35:36 +01:00
Jan Beinke
58d49db69d nixos/snapserver: Fix buffer options not coercible to str 2021-02-07 12:53:27 +01:00
Maximilian Bosch
31b1137c1d
Merge pull request #112013 from Ma27/nextcloud-file-check 
nixos/nextcloud: fail early if {admin,db}passFile is not readable
 2021-02-06 21:56:03 +01:00
Robert Hensing
c808983caa nixos/hercules-ci-agent: Remove patchNix 2021-02-06 15:35:42 +01:00
Michael Raskin
e248519cb9
Merge pull request #104003 from felschr/feat/etebase-server 
etebase-server: init at 0.7.0
 2021-02-05 21:37:34 +00:00
Alexandre Macabies
255882fbcc nixos/snapserver: add AF_NETLINK to allowed address families 
This is necessary for Librespot, which is spawned by snapserver in the
same cgroup. Librespot requires querying local ip links and addresses
for MDNS (Zeroconf/Avahi), and does so through NETLINK interface.
 2021-02-05 19:23:25 +01:00
Alexandre Macabies
a36cc03d96 nixos/snapserver: update available stream types for v0.21.0 
* Add 'librespot' (new name for 'spotify'), 'alsa', 'tcp'.
* Add a warning about the spotify -> librespot rename.
* Fix the deprecated example `mode = "listen"` for type 'pipe'.
* Update the tests to include a straightforward 'tcp' test.
 2021-02-05 19:23:24 +01:00
Kevin Cox
48f6dbe1f8
Merge pull request #109065 from Technical27/add-auto-cpufreq-module 
nixos/auto-cpufreq: init module
 2021-02-05 13:15:13 -05:00
takagiy
875e1f0853 nixos/wmderland: init at 2020-07-17 2021-02-06 02:36:52 +09:00
Maximilian Bosch
778238c6b1
Merge pull request #109144 from sephalon/nextcloud-service-doc 
nixos/nextcloud: document adminpassFile permissions
 2021-02-05 12:54:59 +01:00
Maximilian Bosch
f4817027c1
nixos/nextcloud: fail early if {admin,db}passFile is not readable 
Otherwise `nextcloud-setup.service` fails during the installation and
thus leaves a corrupted state.
 2021-02-05 12:34:08 +01:00
Scriptkiddi
5ac119043d nixos/oauth2_proxy: add extraConfig type 2021-02-03 16:24:36 -08:00
Fritz Otlinghaus
d7ee2a16bd nixos/resilio: add sharedFolders type 2021-02-03 16:17:37 -08:00
Jan Solanti
0fd29f6ce0 pipewire: move pipewire-media-session to its own output and module 2021-02-03 23:54:32 +02:00
Jan Solanti
c41cf93b67 pipewire: 0.3.20 -> 0.3.21 2021-02-03 20:18:12 +02:00
Jan Solanti
9de9f6062c xow: fix service 
Enable service when services.xow.enable is set to true.
Load xow's modprobe blacklist to make sure the dongle isn't captured by the wrong driver.
 2021-02-03 16:18:29 +02:00
Peter Hoeg
c9091a9def nixos/pykms: fix launcher 2021-02-03 15:59:17 +08:00
Jan Solanti
ae89df8fca pipewire: 0.3.18 -> 0.3.20 2021-02-03 02:16:41 +02:00
Sandro
e9876afb9c
Merge pull request #109414 from rgrunbla/galene 
galene: init at 0.2
 2021-02-02 20:00:09 +01:00
Felix Tenley
348f2d8e9c
nixos/etebase-server: add NixOS module 2021-02-02 17:13:50 +01:00
Sandro
7c5064e14a
Merge pull request #111153 from helsinki-systems/hadoop 
nixos/hadoop: add types
 2021-02-02 14:14:41 +01:00
Jörg Thalheim
57cfa03b03
Merge pull request #111591 from Mic92/zfs-kube 2021-02-02 11:56:58 +00:00
Sandro
449b698a0b
Merge pull request #111435 from helsinki-systems/sabnzbd 
nixos/sabnzbd: add types
 2021-02-01 20:07:39 +01:00
Jörg Thalheim
df3df8c0e0
Merge pull request #111505 from lopsided98/buildbot-python-packages-type 2021-02-01 17:48:51 +00:00
Jörg Thalheim
63178ae561
nixos/kubernetes: add zfs to path 2021-02-01 17:59:18 +01:00
Fritz Otlinghaus
9b6afb66c7
Revert "nixos/hoogle: add type" 2021-02-01 17:39:08 +01:00
Jan Tojnar
54f4529aec
Merge pull request #111519 from siraben/xdg-utils-naming 2021-02-01 17:18:57 +01:00
Fritz Otlinghaus
91b0341b53
Revert "nixos/xmonad: add haskellPackages type" 2021-02-01 16:59:07 +01:00
Sandro
457ff6d28e
Merge pull request #111422 from helsinki-systems/mysqlBackup 
nixos/mysqlBackup: add types
 2021-02-01 12:39:53 +01:00
Sandro
d76eec858c
Merge pull request #111427 from helsinki-systems/postgresql 2021-02-01 12:39:20 +01:00
Attila Lendvai
c61c0cc04f nixos/bee-clef: init at 0.4.7 2021-02-01 10:56:04 +01:00
Attila Lendvai
35a9d23b82 nixos/bee: init at 0.4.2 2021-02-01 10:56:04 +01:00
Ben Siraphob
a6ac3eedbd treewide: xdg_utils -> xdg-utils 2021-02-01 15:05:09 +07:00
Tim Van Baak
35d79e894c nixos/nebula: add basic module 2021-01-31 18:42:57 -08:00
Ben Wolsieffer
945a461ac2 nixos/buildbot: fix type for pythonPackages 
The pythonPackages option is a function that returns a list of packages, but the
type was specified as just a list of packages.
 2021-01-31 17:40:12 -05:00
Ben Wolsieffer
d877c9b39c nixos/buildbot: add lopsided98 as maintainer 2021-01-31 17:40:11 -05:00
Luflosi
e31dc1c5f6
nginx module: fix typo in proxyWebsockets description 2021-01-31 18:09:41 +01:00
Sandro
2dfbfa3b45
Merge pull request #111438 from helsinki-systems/synergy 
nixos/synergy: add types
 2021-01-31 18:06:36 +01:00
Sandro
a0829b1df8
Merge pull request #111455 from helsinki-systems/yandex 
nixos/yandex-disk: add types
 2021-01-31 15:25:10 +01:00
Sandro
1c71af8fd7
Merge pull request #111454 from helsinki-systems/xtreemfs 
nixos/xtreemfs: add types
 2021-01-31 15:24:55 +01:00
Sandro
a68c03eb14
Merge pull request #111451 from helsinki-systems/xmonad 
nixos/xmonad: add haskellPackages type
 2021-01-31 15:22:06 +01:00
Sandro
4d2b0ebe18
Merge pull request #111450 from helsinki-systems/exwm 
nixos/exwm: add loadScript type
 2021-01-31 15:21:46 +01:00
Sandro
094c85ece5
Merge pull request #111449 from helsinki-systems/xserver 
nixos/xserver: add serverFlagsSection type
 2021-01-31 15:21:34 +01:00
Sandro
79021a2383
Merge pull request #111448 from helsinki-systems/gtk 
nixos/lightdm-greeters/gtk: add type
 2021-01-31 15:21:22 +01:00
Sandro
a6551d1aac
Merge pull request #111446 from helsinki-systems/pantheon 
nixos/pantheon: add sessionPath type
 2021-01-31 15:20:49 +01:00
Sandro
26249e6312
Merge pull request #111445 from helsinki-systems/gnome3 
nixos/gnome3: add sessionPath type
 2021-01-31 15:20:38 +01:00
Sandro
6e2b7d0d77
Merge pull request #111444 from helsinki-systems/cinnamon 
nixos/cinnamon: add sessionPath type
 2021-01-31 15:20:17 +01:00
Sandro
428f2084cf
Merge pull request #111443 from helsinki-systems/weechat 
nixos/weechat: add binary
 2021-01-31 15:19:10 +01:00
Sandro
2c748ee8a4
Merge pull request #111439 from helsinki-systems/unit 
nixos/unit: add stateDir and logDir types
 2021-01-31 15:18:08 +01:00
Sandro
197cfaba57
Merge pull request #111437 from helsinki-systems/svnserve 
nixos/svnserve: add svnBaseDir type
 2021-01-31 15:17:24 +01:00
Sandro
4bb7e4fb63
Merge pull request #111470 from helsinki-systems/bind2 
nixos/bind: update zone file type
 2021-01-31 15:14:02 +01:00
Sandro
75281960c0
Merge pull request #111436 from helsinki-systems/shairport 
nixos/shairport-sync: add types
 2021-01-31 15:13:33 +01:00
Sandro
f6b78c163c
Merge pull request #111433 from helsinki-systems/rippled 
nixos/rippled: add extraConfig type
 2021-01-31 15:12:52 +01:00
Fritz Otlinghaus
929bf6e678
nixos/postgresqlBackup: add types 2021-01-31 15:08:12 +01:00
Fritz Otlinghaus
b9d5ecf80b
nixos/mysqlBackup: add types 2021-01-31 15:06:50 +01:00
Sandro
1b77b735ea
Merge pull request #111428 from helsinki-systems/prayer 
nixos/prayer: Add port type
 2021-01-31 15:05:59 +01:00
Sandro
cc80d6d5d4
Merge pull request #111425 from helsinki-systems/openafs 
nixos/openafs: add types
 2021-01-31 15:05:21 +01:00
Sandro
53f4c40d39
Merge pull request #111424 from helsinki-systems/nginx 
nixos/nginx: add logError type
 2021-01-31 15:05:02 +01:00
Sandro
ab61ee3563
Merge pull request #111423 from helsinki-systems/netatalk 
nixos/netatalk: add types
 2021-01-31 15:04:52 +01:00
Sandro
5008c20426
Merge pull request #111421 from helsinki-systems/mediawiki 
nixos/mediawiki: add name type
 2021-01-31 15:04:14 +01:00
Sandro
49f5e8799b
Merge pull request #111420 from helsinki-systems/mailpile 
nixos/mailpile add types switch port to port type
 2021-01-31 15:04:01 +01:00
Sandro
60b597ad3b
Merge pull request #111419 from helsinki-systems/lshd 
nixos/lshd: add types
 2021-01-31 15:03:45 +01:00
Sandro
0fc3bc21ab
Merge pull request #111418 from helsinki-systems/k3s 
nixos/k3s: add extraFlags type
 2021-01-31 15:02:31 +01:00
Sandro
af78f11035
Merge pull request #111417 from helsinki-systems/ircd-hybrid 
nixos/ircd-hybrid: add types
 2021-01-31 15:02:07 +01:00
Fritz Otlinghaus
58ab3a3249
nixos/bind: update zone file type 2021-01-31 14:59:54 +01:00
Fritz Otlinghaus
54e7528009
nixos/radvd: add type (#111430) 2021-01-31 13:54:30 +01:00
Fritz Otlinghaus
8de8e40d64
nixos/postfix: add types (#111426) 2021-01-31 13:52:46 +01:00
Fritz Otlinghaus
821f19a975
nixos/quassel: add types (#111429) 2021-01-31 13:46:29 +01:00
Lassulus
4c181d179b
Merge pull request #110131 from helsinki-systems/bind_types 
bind: Add types for options
 2021-01-31 13:44:14 +01:00
Fritz Otlinghaus
4e353723d6
nixos/unit: add stateDir and logDir types 2021-01-31 13:41:53 +01:00
Fritz Otlinghaus
9489f3450c
nixos/xtreemfs: add types 2021-01-31 13:23:26 +01:00
Fritz Otlinghaus
3ecf072d9b
nixos/yandex-disk: add types 2021-01-31 13:10:20 +01:00
Fritz Otlinghaus
1bf9ebc8b2
nixos/weechat: add binary 2021-01-31 12:59:04 +01:00
Fritz Otlinghaus
37f575cd7e
nixos/xmonad: add haskellPackages type 2021-01-31 12:57:14 +01:00
Fritz Otlinghaus
234f4fe5c4
nixos/exwm: add loadScript type 2021-01-31 12:55:40 +01:00
Fritz Otlinghaus
8f261f1552
nixos/xserver: add serverFlagsSection type 2021-01-31 12:53:41 +01:00
Fritz Otlinghaus
c44f508e3e
nixos/lightdm-greeters/gtk: add type 2021-01-31 12:41:17 +01:00
Fritz Otlinghaus
1307b605d7
nixos/gnome3: add sessionPath type 2021-01-31 12:40:13 +01:00
Fritz Otlinghaus
ccd2965c70
nixos/pantheon: add sessionPath type 2021-01-31 12:39:07 +01:00
Fritz Otlinghaus
b9f972a5d8
nixos/cinnamon: add sessionPath type 2021-01-31 12:36:30 +01:00
Fritz Otlinghaus
3fc73679c0
nixos/synergy: add types 2021-01-31 12:17:41 +01:00
Fritz Otlinghaus
02c592efff
nixos/svnserve: add svnBaseDir type 2021-01-31 12:15:45 +01:00
Fritz Otlinghaus
a94c7ef24e
nixos/shairport-sync: add types 2021-01-31 12:14:01 +01:00
Fritz Otlinghaus
14a8446dc1
nixos/sabnzbd: add types 2021-01-31 12:12:59 +01:00
Fritz Otlinghaus
c3edcddb5e
nixos/rippled: add extraConfig type 2021-01-31 12:10:14 +01:00
Fritz Otlinghaus
f0932a6c41
nixos/prayer: Add port type 2021-01-31 12:01:41 +01:00
Fritz Otlinghaus
b0113ee268
nixos/openafs: add types 2021-01-31 11:56:52 +01:00
Fritz Otlinghaus
a55d0b80ff
nixos/nginx: add logError type 2021-01-31 11:37:38 +01:00
Fritz Otlinghaus
74cfc4d692
nixos/netatalk: add types 2021-01-31 11:31:24 +01:00
Fritz Otlinghaus
e67b6193aa
nixos/mediawiki: add name type 2021-01-31 11:28:04 +01:00
Fritz Otlinghaus
295de63e90
nixos/lshd: add types 2021-01-31 11:27:20 +01:00
Fritz Otlinghaus
f50a26d257
nixos/mailpile add types switch port to port type 2021-01-31 11:26:07 +01:00
Fritz Otlinghaus
3c7c9a43dc
nixos/k3s: add extraFlags type 2021-01-31 11:21:54 +01:00
Fritz Otlinghaus
adacfb44cc
nixos/ircd-hybrid: add types 2021-01-31 11:17:03 +01:00
Dmitry Kalinkin
efda1be800
Merge pull request #99314 from eadwu/clight/fix-config-file 
nixos/clight: fix config file generation
 2021-01-30 22:10:13 -05:00
Elias Probst
27da11972d nixos/restic: correct location of cache directory 
By default, restic determines the location of the cache based on the XDG
base dir specification, which is `~/.cache/restic` when the environment
variable `$XDG_CACHE_HOME` isn't set.
As restic is executed as root by default, this resulted in the cache being
written to `/root/.cache/restic`, which is not quite right for a system
service and also meant, multiple backup services would use the same cache
directory - potentially causing issues with locking, data corruption,
etc.

The goal was to ensure, restic uses the correct cache location for a
system service - one cache per backup specification, using `/var/cache`
as the base directory for it.

systemd sets the environment variable `$CACHE_DIRECTORY` once
`CacheDirectory=` is defined, but restic doesn't change its behavior
based on the presence of this environment variable.
Instead, the specifier [1] `%C` can be used to point restic explicitly
towards the correct cache location using the `--cache-dir` argument.

Furthermore, the `CacheDirectoryMode=` was set to `0700`, as the default
of `0755` is far too open in this case, as the cache might contain
sensitive data.

[1] https://www.freedesktop.org/software/systemd/man/systemd.unit.html#Specifiers
 2021-01-30 18:24:51 -08:00
Sandro
fccda5aae6
Merge pull request #108819 from SuperSandro2000/nginx-module 2021-01-30 21:46:35 +01:00
Dustin Frisch
891d1aa885
nixos/nginx: serve unknown MIME-Types as binary 
The built-in default for unknown MIME-Types is `text/plain` whereas the
upstream default config changes it to `application/octet-stream`. By
changing the default tpye, unknown files will be downloaded by browsers
instead of being displayed.
 2021-01-30 12:52:02 +01:00
Silvan Mosberger
45a7914186
Merge pull request #109035 from turion/dev_nextcloud_php 
Nextcloud: Add phpExtraExtensions
 2021-01-30 02:41:13 +01:00
Sandro
548dc3cc62
Merge pull request #111125 from helsinki-systems/gocd-agent 
nixos/gocd-agent nixos/gocd-server: add types
 2021-01-30 02:22:03 +01:00
Silvan Mosberger
aa48e205a2
Merge pull request #110787 from tfc/cartesian-product 
lib/attrsets: add cartesianProductOfSets function
 2021-01-29 20:22:12 +01:00
Sandro
532dd98cdb
Merge pull request #111155 from helsinki-systems/hostapd 
nixos/hostapd: add interface type
 2021-01-29 17:47:39 +01:00
Sandro
32fb3b7bc3
Merge pull request #111154 from helsinki-systems/hoogle 
nixos/hoogle: add type
 2021-01-29 17:47:26 +01:00
WORLDofPEACE
3eae73d862
Merge pull request #97618 from lf-/fix-bad-caddy-configs 
nixos/caddy: fix overwriting of tls settings in config
 2021-01-29 10:08:46 -05:00
Scriptkiddi
679e369ba2
nixos/hostapd: add interface type 2021-01-29 13:04:50 +01:00
Scriptkiddi
3f41fbc8e8
nixos/hoogle: add type 2021-01-29 13:03:37 +01:00
Scriptkiddi
0cbbc2dfcd
nixos/hadoop: add types 2021-01-29 13:01:42 +01:00
Scriptkiddi
c1b25f2529
nixos/gocd-agent nixos/gocd-server: add types 2021-01-29 12:59:55 +01:00
Gabriel Gonzalez
80f6769ebc
Don't createHome for the hydra user (#110722) 
Co-authored-by: Cole Helbling <cole.e.helbling@outlook.com>
 2021-01-29 09:22:49 +00:00
Sandro
1f730f2918
Merge pull request #111126 from helsinki-systems/gogoclient 
nixos/gogoclient: add types
 2021-01-29 09:52:35 +01:00
Scriptkiddi
5f40e68c9c nixos/consul: add types 2021-01-29 00:32:32 -08:00
Scriptkiddi
f2764e1f71
nixos/gogoclient: add types 2021-01-29 08:39:51 +01:00
Jacek Galowicz
001ba3934e Use lib.cartesianProducOfSets where lib.crossLists was used 2021-01-28 23:49:05 +01:00
Scriptkiddi
624b5608c4 nixos/deluge: add type 2021-01-28 14:30:23 -08:00
Scriptkiddi
1d22f05d64 nixos/fprot: add type 2021-01-28 14:12:15 -08:00
Scriptkiddi
103ea99b99 nixos/gvpe: add types 2021-01-28 13:58:33 -08:00
Matías Lang
dac07be800 nixos/miniflux: don't depend on sudo 
The miniflux service should work when sudo is not available in the
system.
 2021-01-28 15:09:31 -03:00
Marijan Petričević
f56089ded5 nixos/hledger-web: init module and test 2021-01-28 15:29:53 +01:00
Matthias Treydte
7d2829c0a0 nixos/nginx: fix MemoryDenyWriteExecute not being disabled when needed 
The expression should check if the actually used nginx package
needes write+execute rights, not the default pkgs.nginx (which
has no modules unless overridden in an overlay).

Having MemoryDenyWriteExecute always true causes e.g. the Lua
module to fail (because JIT compilation).
 2021-01-28 13:13:31 +01:00
Emery Hemingway
f32d7e4e03 nixos: add services.rsyncd.socketActivated option 
Define systemd-socket activation using the upstream configuration
files as a reference. The "rsyncd" systemd unit has been renamed
to "rsync" for consistency with upstream.
 2021-01-28 11:22:31 +01:00
Scriptkiddi
f697a31b93 nixos/elasticsearch-curator: add type 2021-01-27 11:50:19 -08:00
Scriptkiddi
f8236681be nixos/felix: add types 2021-01-27 11:44:59 -08:00
Scriptkiddi
f2ce0f543d nixos/flashpolicyd: add types 2021-01-27 11:44:15 -08:00
Sandro
b237f724fc
Merge pull request #110799 from helsinki-systems/dysnomia_drop 
nixos/disnix nixos/dysnomia: drop modules
 2021-01-27 17:53:59 +01:00
Ninjatrappeur
ab224b550c
Merge pull request #103138 from NinjaTrappeur/nin-pleroma 2021-01-27 13:28:44 +01:00
Scriptkiddi
a3f4db8679
nixos/dysnomia nixos/disnix: Drop modules 2021-01-27 11:27:09 +01:00
Manuel Bärenz
0ff63a3fa6 nixos/nextcloud: Conditionally enable caching PHP extensions 2021-01-27 11:05:08 +01:00
Manuel Bärenz
6cf2b5466d nixos/nextcloud: add documentation for phpExtraExtensions option 2021-01-27 11:05:07 +01:00
Aaron Andersen
f72c123b6e nixos/nextcloud: remove duplicate php.ini entries 2021-01-27 11:05:07 +01:00
Aaron Andersen
434a2783b8 nixos/nextcloud: add phpExtraExtensions option 2021-01-27 11:05:00 +01:00
Robert Hensing
d2a41be2f3
Merge pull request #110707 from Infinisil/functionTo 
Bring back `types.functionTo`
 2021-01-27 10:50:13 +01:00
Scriptkiddi
26c4dcf8fa nixos/babeld: add type extraConfig 2021-01-26 20:06:29 -08:00
WORLDofPEACE
ebc22e9921
Merge pull request #93372 from bb2020/oss 
nixos/alsa: disable OSSEmulation by default
 2021-01-26 19:39:42 -05:00
Scriptkiddi
5f472181f2 nixos/cntlm: add types 2021-01-26 13:17:19 -08:00
Félix Baylac-Jacqué
231c5a576a
nixos/pleroma: init 
Adding a new pleroma NixOS module and its associated documentation.

co-authored-by: duponin <duponin@locahlo.st>
 2021-01-26 18:11:38 +01:00
bb2020
603e14c793 nixos/alsa: disable OSSEmulation by default 
OSS Emulation is considered incomplete so disabling it by default.
Using user level alsa-oss library (nix-env -iA nixos.alsaOss) over
this kernel module is recommended.
 2021-01-26 15:06:33 +03:00
Julien Moutinho
39a5e2c76b nixos/freeciv: init 2021-01-26 12:33:59 +01:00
Fritz Otlinghaus
d40f7dcb31 nixos/cgminer: add types 2021-01-26 12:24:48 +01:00
misuzu
1e38f0bdf9
nixos/gitlab-runner: add support for 'docker+machine' and 'docker-ssh+machine' executors (#108763) 2021-01-26 00:01:54 +00:00
Fritz Otlinghaus
41f4784e65
bacula: add types 2021-01-25 19:00:01 +01:00
Florian Klink
b2f3bd4d79
Merge pull request #100155 from primeos/nixos-add-fqdn-option 
nixos/networking: Add a read-only option for the FQDN
 2021-01-25 16:45:45 +01:00
Aamaruvi Yogamani
30b4f71c15
nixos/auto-cpufreq: init module 2021-01-25 09:24:07 -05:00
rnhmjoj
f62d2652e2
nixos/uwsgi: set up the default runtime directory 
Fix issue #110691
 2021-01-25 14:05:39 +01:00
Bernardo Meurer
105b9eb1b8
Merge pull request #109768 from cpcloud/nomad-datadir-cleanup 
nixos/nomad: enforce specific data_dir semantics
 2021-01-24 18:20:08 +00:00
Bas van Dijk
8ac4b251c8
nixos: use functionTo to prevent evaluation errors while merging 
Without this patch merging options like
services.xserver.windowManager.xmonad.extraPackages
results in the evaluation error:

  error: value is a list while a set was expected, at nixpkgs/lib/options.nix:77:23

With this patch we get the desired merging behaviour that just concatenates the
resulting package lists.

(cherry picked from commit 6e99f9fdecb1f28308c8e0aed0fc851737354864)

Co-Authored-By: Silvan Mosberger <contact@infinisil.com>
 2021-01-24 17:18:37 +01:00
Sandro
81e3b9d15b
Merge pull request #110670 from siraben/double-quotes-fix 
treewide: fix double quoted strings in one-liners
 2021-01-24 16:17:14 +01:00
Sandro
0dd579a3e6
Merge pull request #110686 from helsinki-systems/chrony_types 
nixos/chrony: add types
 2021-01-24 14:18:51 +01:00
volth
bc0d605cf1 treewide: fix double quoted strings in meta.description 
Signed-off-by: Ben Siraphob <bensiraphob@gmail.com>
 2021-01-24 19:56:59 +07:00
Sandro
513a3ea665
Merge pull request #110680 from helsinki-systems/amuled_types 2021-01-24 13:52:02 +01:00
Fritz Otlinghaus
31345193f0
nixos/chrony: add types 2021-01-24 13:50:35 +01:00
Robert Hensing
530df49d7a
Merge pull request #108411 from hercules-ci/vault-multiple-config-files 
vault: Support multiple config files (no secrets in store)
 2021-01-24 13:49:06 +01:00
Sandro
0a81d0846a
Merge pull request #110682 from helsinki-systems/buildbot_types 
nixos/buildbot: add pythonPackages type
 2021-01-24 13:45:05 +01:00
Fritz Otlinghaus
6054aa2bc1
nixos/amuled: add types 2021-01-24 13:37:09 +01:00
Fritz Otlinghaus
72691e14ec
nixos/buildbot: add pythonPackages type 2021-01-24 13:20:35 +01:00
Fritz Otlinghaus
91311fcb46
nixos/autofs: add timeout type 2021-01-24 13:17:07 +01:00
Phillip Cloud
c7c3b9e4ae nixos/nomad: remove User setting entirely 2021-01-23 19:44:37 -05:00
Phillip Cloud
2a3cb407b0 nixos/nomad: only set User if privileges are dropped 2021-01-23 19:44:37 -05:00
Phillip Cloud
5ce4ce6174 nixos/nomad: make formatting consistent in mkMerge call 2021-01-23 19:44:37 -05:00
Phillip Cloud
12b9249cf3 nixos/nomad: unconditionally set user to nomad 2021-01-23 19:44:37 -05:00
Phillip Cloud
5d0b3b7228 nixos/nomad: fix markup and remove suggestion 2021-01-23 19:44:37 -05:00
Phillip Cloud
bddb7ac406 nixos/nomad: fix typo and spell out ExecStartPre usage 2021-01-23 19:44:37 -05:00
Phillip Cloud
b72a46713f nixos/nomad: reformat SupplementaryGroups expression 2021-01-23 19:44:37 -05:00
Phillip Cloud
b80c454459 nixos/nomad: add mkIf for StateDirectory 2021-01-23 19:44:37 -05:00
Phillip Cloud
58fe45936e nixos/nomad: move serviceConfig into mkMerge and mkIf for docker SupplementaryGroups 2021-01-23 19:44:37 -05:00
Phillip Cloud
f3aa71b7ec nixos/nomad: describe the nomad cluster manager responsibilities 2021-01-23 19:44:37 -05:00
Phillip Cloud
3e00482ba8 nixos/nomad: add assertion for the value of dropPrivileges and its relation to data_dir 2021-01-23 19:44:37 -05:00
Phillip Cloud
f1778cd90e
nixos/nomad: add extraSettingsFiles option to nomad service (#109761) 2021-01-23 23:52:19 +01:00
John Ericson
12881a7aa7
Merge pull request #110544 from Ericson2314/no-platform 
top-level, lib: Remove platform attribute of platforms
 2021-01-23 16:32:36 -05:00
Phillip Cloud
2861d26df5 nixos/nomad: move data_dir default setting to allow propagation of default 2021-01-23 12:50:01 -05:00
Phillip Cloud
0bbed1c273 nixos/nomad: add newline 2021-01-23 12:50:01 -05:00
John Ericson
9c213398b3 lib: Clean up how linux and gcc config is specified 
Second attempt of 8929989614589ee3acd070a6409b2b9700c92d65; see that
commit for details.

This reverts commit 0bc275e634.
 2021-01-23 10:01:28 -05:00
Michael Weiss
237c20ac61
nixos/smokeping: Replace the tabs in cfg.targetConfig 
This was inconsistent with the rest of the module.
 2021-01-23 14:03:16 +01:00
Michael Weiss
87fb5d381f
nixos/smokeping: Add a PoC for using networking.fqdn 2021-01-23 14:03:16 +01:00
Jonathan Ringer
0bc275e634
Revert "lib: Clean up how linux and gcc config is specified" 
This is a stdenv-rebuild, and should not be merged
into master

This reverts commit 8929989614.
 2021-01-22 14:07:06 -08:00
John Ericson
d95aebbe0e
Merge pull request #107214 from Ericson2314/linux-config-cleanup 
lib: Clean up how linux and gcc config is specified
 2021-01-22 15:15:58 -05:00
Fritz Otlinghaus
0a38f6da4f
nixos/tomcat: add extraGroups type (#110486) 2021-01-22 16:22:06 +01:00
Rémy Grünblatt
cea5fca275 galene: init at 0.2 2021-01-22 15:56:05 +01:00
Anderson Torres
0f31f03f22
Merge pull request #108578 from ctem/feature/chrony 
nixos/chrony: add support for Network Time Security (NTS) authentication
 2021-01-22 09:36:08 -03:00
Florian Klink
ad87ca737d
Merge pull request #110403 from thiagokokada/fix-renamed-option 
nixos/libinput: add missing renamed module
 2021-01-22 12:25:44 +01:00
Fritz Otlinghaus
c1efc32740
nixos/module/jboss: Add types to options (#110451) 2021-01-22 11:11:40 +01:00
Fritz Otlinghaus
332a53728c
activemq: add type to configurationDir (#110450) 2021-01-22 11:11:05 +01:00
Fritz Otlinghaus
800b90ea3f
nixos/bitlbee: Add types to options (#110446) 2021-01-22 11:07:29 +01:00
John Ericson
8929989614 lib: Clean up how linux and gcc config is specified 
The `platform` field is pointless nesting: it's just stuff that happens
to be defined together, and that should be an implementation detail.

This instead makes `linux-kernel` and `gcc` top level fields in platform
configs. They join `rustc` there [all are optional], which was put there
and not in `platform` in anticipation of a change like this.

`linux-kernel.arch` in particular also becomes `linuxArch`, to match the
other `*Arch`es.

The next step after is this to combine the *specific* machines from
`lib.systems.platforms` with `lib.systems.examples`, keeping just the
"multiplatform" ones for defaulting.
 2021-01-21 22:44:09 -05:00
Thiago Kenji Okada
c6cf9bcf0b nixos/libinput: add missing renamed module 
Related PR #108909.
 2021-01-21 19:52:57 -03:00
Guillaume Girol
7ed3d2df76
Merge pull request #103135 from symphorien/pr/92775 
Evolution ews: wrap evolution and evolution data server, fix nixos module.
 2021-01-21 19:42:45 +00:00
Linus Heckemann
5153deedd8
Merge pull request #108909 from thiagokokada/libinput-by-device-type 
nixos/libinput: separate settings by mouse/touchpad
 2021-01-21 10:43:44 +01:00
Symphorien Gibol
f45f22d519 nixos/evolution: enable gnome-keyring 2021-01-20 19:51:32 +01:00
Scriptkiddi
2800882b4b
bind: Add types for options 2021-01-20 14:34:34 +01:00
Scriptkiddi
1572940688
networking, chrony, ntpd, timesyncd: add timeServers option type 2021-01-20 10:54:24 +01:00
Robert Hensing
d51d15e1cf
Merge pull request #109665 from prusnak/stdenv-lib-nixos 
nixos/modules: stdenv.lib -> lib
 2021-01-19 23:50:30 +01:00
Robert Hensing
04946f4246 nixos/vault: extraConfigPaths -> extraSettingsPaths 
Align with RFC42 language, even if in advance of the actual settings
attribute.
 2021-01-19 18:14:29 +01:00
Jonathan Ringer
e2fcf81d2a nixos/modules: pkgconfig -> pkg-config 2021-01-19 01:16:25 -08:00
Christian Kampka
f0ec10a829
treewide: remove kampka as maintainer (#109813) 2021-01-18 21:23:49 +01:00
Maximilian Bosch
2abfc93a68
nixos/grafana-image-renderer: typo fix 
Since the service doesn't do a strict config check, this worked fine
before, however the settings in the block never applied properly.
 2021-01-18 18:44:58 +01:00