Commit Graph

15605 Commits

Author SHA1 Message Date
Sandro
84653ac6c7
Merge pull request #226150 from SuperSandro2000/lorri-direnv
nixos/lorri: install direnv
2023-04-20 10:49:23 +02:00
Flakebi
603e89eef9 kanidm: BindMount certificate paths
Bind mount the base dirs of the tls key and chain into the service.

Make sure to bind every directory just once. The test failed on ofborg
when /nix/store and the certificate path in /nix/store/<some path> were
bound.
2023-04-20 02:32:37 +02:00
Artturi
496c532a03
Merge pull request #105694 from laikq/master 2023-04-19 23:38:05 +03:00
datafoo
3403ee0602 nixos/fail2ban: add bantime option 2023-04-19 19:18:31 +02:00
Ryan Lahfa
8ef336e870
Merge pull request #224491 from LeSuisse/moodle-php-81
nixos/moodle: use PHP 8.1
2023-04-19 08:35:32 +02:00
Ryan Lahfa
2fa5e844de
Merge pull request #223749 from Alexis211/add-wgautomesh
wgautomesh: init at 0.1.0
2023-04-19 08:26:09 +02:00
laikq
376e02c721 nixos/cupsd: add udev rules of driver packages 2023-04-19 03:38:02 +03:00
Sandro
349ec9c376
Merge pull request #226689 from tyxieblub/plausible 2023-04-19 01:26:22 +02:00
Sandro
ce4159b4cd
Merge pull request #226514 from AtaraxiaSjel/update/ivpn 2023-04-19 00:57:19 +02:00
Dmitriy Kholkin
706060e47d
nixos/ivpn: init 2023-04-18 22:11:10 +03:00
Artturi
9a1f5d4248
Merge pull request #226889 from Artturin/fixlints2 2023-04-18 21:52:21 +03:00
Artturin
eac28f38d6 treewide: fix lints
Arg to lib.optional is a list

build time tool in buildInputs

*Flags not a list

https://github.com/nix-community/nixpkgs-lint
2023-04-18 20:20:56 +03:00
Domen Kožar
31a3e311da
Merge pull request #226831 from domenkozar/cachix-watch-store-restarts
cachix-watch-store: restart indefinitely
2023-04-18 16:26:25 +01:00
Sandro
4f6b51d99c
Merge pull request #224212 from Guekka/monica
monica: init at 4.0.0 & nixos-module
2023-04-18 16:58:42 +02:00
Sandro
ed7dd78b3f
Merge pull request #225274 from tie/nixos-pufferpanel
nixos/pufferpanel: init
2023-04-18 16:57:14 +02:00
Domen Kožar
1d85cfbd77 cachix-watch-store: restart indefinitely 2023-04-18 10:58:33 +01:00
Linus Heckemann
b14aded48a
Merge pull request #222617 from oddlama/esphome
nixos/esphome: init module
2023-04-18 06:45:40 +02:00
tyxieblub
efde50d9f5 nixos/plausible: add package option 2023-04-17 21:20:03 +02:00
imlonghao
bc07f0ac31
borgmatic: fix timer wantedBy 2023-04-17 23:10:23 +08:00
Alex Auvolat
a727a3d676 nixos/wgautomesh: init at 0.1.0 2023-04-17 12:37:18 +02:00
Weijia Wang
4c3edba856
Merge pull request #225750 from r-ryantm/auto-update/rtsp-simple-server
rtsp-simple-server: 0.21.6 -> 0.22.0
2023-04-17 10:28:44 +03:00
Sandro
d85555f9ac
Merge pull request #224996 from SuperSandro2000/smokeping-ln-f 2023-04-16 23:05:25 +02:00
Guillaume Girol
40bbc9ae53
Merge pull request #225285 from symphorien/ihm-remove
python3.pkgs.ihatemoney: remove
2023-04-16 19:23:00 +00:00
Guillaume Girol
3cc8b4477e python3.pkgs.ihatemoney: remove
sqlalchemy and flask releases break ihatemoney faster than upstream
updates, so the maintenance burden increases over time.
2023-04-16 16:04:35 +02:00
Ivan Trubach
4bbe09068a nixos/pufferpanel: init 2023-04-16 15:41:24 +03:00
Atemu
445ef28548
Merge pull request #225748 from Atemu/buildFHSEnvBubblewrap-by-default
buildFHSEnv: use bubblewrap by default
2023-04-16 13:03:36 +02:00
Edgar B
33a7f368b4 nixos/monica: init 2023-04-16 11:24:00 +02:00
Atemu
f63a12f296 tree-wide: buildFHSUserEnv -> buildFHSEnv 2023-04-16 10:15:13 +02:00
Ryan Lahfa
b914dffe7e
Merge pull request #224494 from LeSuisse/roundcube-php81
nixos/roundcube: use PHP 8.1
2023-04-15 22:12:31 +02:00
John Ericson
0794f40589
Merge pull request #226288 from Luflosi/kubo-better-api-access
nixos/kubo: improve API access
2023-04-15 15:07:01 -04:00
happysalada
0cdd78126c qdrant: module increase limitnofile 2023-04-15 13:45:38 -04:00
Luflosi
f2be3ae30d
nixos/kubo: restrict access to the API to users in a group by default 2023-04-15 15:25:20 +02:00
Luflosi
7ceebbb35b
nixos/kubo: allow multiple API and Gateway addresses
The daemon allows specifying an array of multiaddrs for Addresses.API and Addresses.Gateway, so the NixOS module should allow that as well.
2023-04-15 15:25:06 +02:00
Luflosi
929a00bd84
nixos/kubo: give normal users access to the daemon by default
Fixes https://github.com/NixOS/nixpkgs/issues/223289.

This doesn't reduce the security in any way since it was already possible for normal users to do what I do here and create such a fake repo for themselves and set their $IPFS_PATH variable to it. It was and still is also possible to just use the --api CLI option.
This change just removes the manual setup that would otherwise be required.

We wouldn't need this workaround if https://github.com/ipfs/kubo/pull/9366 was merged but the fix seems to have been ignored upstream. Patching it ourselves seems like a bad idea since the patch has security implications.
2023-04-15 15:24:58 +02:00
Janne Heß
ee0bfeddf7
Merge pull request #226010 from helsinki-systems/drop/deprecated-ssh-files
nixos/openssh: Drop deprecated locations
2023-04-15 11:41:16 +02:00
Sandro
1c5ca89f42
nixos/lorri: install direnv
direnv is required to allow files to be run by lorri, so it should be installed, too.
2023-04-14 15:19:34 +02:00
Aidan Gauland
0135b7a556 nixos/peroxide: correct option doc
Correct the description for the option services.peroxide.enable.
2023-04-14 14:47:55 +02:00
Sandro
f9e70759cd
Merge pull request #213816 from karmanyaahm/karmanyaahm/nixos/kubo 2023-04-14 00:48:37 +02:00
Janne Heß
98c3d190b2
nixos/openssh: Drop deprecated locations
The changelog entry should give a good indication why I don't think this
is necessary anymore.
2023-04-13 20:31:18 +02:00
ajs124
6fc4e722c4 nixos/prometheus-smartctl-exporter: fix evaluation after adding cfg.extraFlags
was done in 3c61665b7f but does not evaluate
error: value is a string with context while a list was expected
2023-04-13 17:32:50 +02:00
Florian Klink
4496a91077
Merge pull request #225973 from IndeedNotJames/grafana-agent
grafana-agent: 0.30.2 -> 0.32.1, remove obsolete test fix; nixos/grafana-agent: use `lib.getExe`
2023-04-13 17:29:48 +02:00
Jonas Heinrich
86a685ceb1 nixos/maddy: Add option ensureCredentials 2023-04-13 09:36:54 -04:00
IndeedNotJames
845a6e9784
nixos/grafana-agent: use lib.getExe as binary names changed between updates
and `lib.getExe` allows a safe handling and potential backport of this.
But for that to work it would require 22.11 to set `pkgs.grafana-agent.meta.mainProgram = "agent"`

Relevant upstream release: https://github.com/grafana/agent/releases/tag/v0.31.0
2023-04-13 10:43:02 +02:00
Karmanyaah Malhotra
6086d85777 nixos/kubo: documentation suggestions
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-04-13 03:14:59 -05:00
Karmanyaah Malhotra
4bd622cd9d nixos/kubo: unmount on service stop
When kubo is force killed with `pkill -KILL ipfs` or by systemd-oomd,
it doesn't unmount /ipfs and /ipns. That prevents it
from starting up the next time. So, unmount on postStop.
2023-04-13 03:14:59 -05:00
Martin Weinelt
f0e4bd26bd
Merge pull request #225943 from jakubgs/smartctl-exporter/fix-extra-flags
nixos/prometheus-smartctl-exporter: support extraFlags
2023-04-13 07:37:28 +02:00
Jakub Sokołowski
3c61665b7f
nixos/prometheus-smartctl-exporter: support extraFlags
Seems to be ignored currently. Useful for `-verbose` flag.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-04-12 23:56:32 +02:00
Johan Thomsen
0b57240111 nixos/kubernetes: kubelet --container-runtime flag has been removed 2023-04-13 07:21:56 +10:00
Martin Weinelt
130be87c8d
Merge pull request #224549 from mweinelt/go-neb-unit-permissions
nixos/go-neb: Replace PermissionsStartOnly with executable prefix
2023-04-12 22:59:41 +02:00
Sandro Jäckel
fdbd0834b2
nixos/smokeping: use ln with -f 2023-04-12 22:47:21 +02:00