dev/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
475,462 Commits 3 Branches 0 Tags 4.3 GiB
84653ac6c7
Commit Graph

15605 Commits

Author SHA1 Message Date
Arjan Schrijver
1addf91b0b qtile: add more options and expose unwrapped package 2023-03-19 19:43:32 +01:00
Ryan Lahfa
49966f2c71
Merge pull request #221642 from Izorkin/fix-roundcube-tmp 
nixos/roundcube: add tmp directory
 2023-03-19 19:16:05 +01:00
Maximilian Bosch
8c118951d5
nixos/doc: fix .well-known example for matrix-synapse 
I'm using this config on my homeserver and while trying out alternative
Matrix clients I discovered (pun intended) that the auto-discovery of my
homeserver is broken. While investigating I found out that neither the
JS nor the Rust SDK (tested via element-web and fractal) are happy about
an empty `m.identity_server`-block. Removing this part fixed the problem
for me.
 2023-03-19 17:38:32 +01:00
mdarocha
4062f28a76 baget: remove due to upstream being unmaintained 2023-03-19 14:19:49 +01:00
github-actions[bot]
7c9f4934b8
Merge master into staging-next 2023-03-19 12:01:32 +00:00
Bjørn Forsman
48b0aa7164 nixos/sssd: create symlinks in /etc to fix sssctl 
Without this, sssctl fails to read its configuration. Update the NixOS
test to ensure sssctl doesn't regress.
 2023-03-19 09:28:35 +01:00
github-actions[bot]
c70342c89c
Merge master into staging-next 2023-03-19 00:02:27 +00:00
Alois Wohlschlager
efd23ff1c8
nixos/gdk-pixbuf: move GDK_PIXBUF_MODULE_FILE to sessionVariables 
Some environments do not load /etc/profile, so environment.variables do
not work. In particular, this is the case for Plasma Wayland.

Use environment.sessionVariables for setting that variable instead,
which is handled by PAM and hence more reliable.
 2023-03-18 20:19:01 +01:00
Jörg Thalheim
2c19718bee dendrite: 0.11.0 -> 0.12.0 
Diff: https://github.com/matrix-org/dendrite/compare/v0.12.0...v0.12.0

Changelog: https://github.com/matrix-org/dendrite/releases/tag/v0.12.0
 2023-03-18 15:35:47 +01:00
github-actions[bot]
a912b83051
Merge master into staging-next 2023-03-18 12:01:30 +00:00
talyz
ccaa6078ba
nixos/gitlab: Fix error when GitLab Pages is not enabled 
Even if GitLab is used without Pages, some of its settings are still
used in the gitlab.yml file, resulting in errors such as

error: The option `services.gitlab.pages.settings.pages-domain' is used but not defined.

To fix this, make the settings' usage conditional on Pages being
enabled.
 2023-03-18 11:34:51 +01:00
Atemu
bd7309c5a3
Merge pull request #221469 from wegank/solr-drop 
solr: drop
 2023-03-18 10:17:43 +01:00
github-actions[bot]
36748936f9
Merge master into staging-next 2023-03-18 06:01:16 +00:00
Sandro
8aedbfa038
Merge pull request #181013 from aidalgol/peroxide 2023-03-18 01:55:30 +01:00
github-actions[bot]
2c8e6963dc
Merge master into staging-next 2023-03-18 00:02:30 +00:00
K900
38d9db299e nixos/plasma5: remove supportDDC option 
The code for this was actually removed in #172078.
 2023-03-17 23:39:08 +03:00
Aidan Gauland
7fb4aae81f
nixos/peroxide: add module for peroxide service 2023-03-18 07:43:59 +13:00
github-actions[bot]
d761f69867
Merge master into staging-next 2023-03-17 17:57:00 +00:00
Izorkin
6263c45580
nixos/roundcube: add tmp directory 2023-03-17 19:40:23 +03:00
Sandro
7ec767ff54
Merge pull request #173697 from jmbaur/avahi-daemon-deny-interfaces 
nixos/avahi: add denyInterfaces option
 2023-03-17 17:11:49 +01:00
github-actions[bot]
2394986204
Merge master into staging-next 2023-03-17 12:01:17 +00:00
Weijia Wang
32f39395a7
Merge pull request #210101 from helsinki-systems/upd/jitsi 
Update of all Jitsi Meet components
 2023-03-17 12:23:14 +02:00
github-actions[bot]
6746017444
Merge master into staging-next 2023-03-17 00:02:33 +00:00
Pascal Bach
7c166f412b
Merge pull request #221096 from awakesecurity/minio-paths 
nixos/minio: gracefully handle root credentials file
 2023-03-16 20:56:37 +01:00
github-actions[bot]
455127ad5e
Merge master into staging-next 2023-03-16 18:01:20 +00:00
John Soo
740fea3edd
fixup! nixos/minio: activate/restart service on credentials path changes 2023-03-16 09:45:09 -07:00
Weijia Wang
c24a8ccc98 solr: drop 2023-03-16 16:17:04 +02:00
Bernardo Meurer
6e55733359
Merge pull request #219747 from Stunkymonkey/deprecate-isNull 2023-03-16 11:10:22 -03:00
Majiir Paktu
1021a7d928 nixos/ddclient: fix permissions warning 2023-03-15 17:47:08 -04:00
github-actions[bot]
795332a826
Merge staging-next into staging 2023-03-15 18:01:44 +00:00
Martin Weinelt
578fb7fd1f
Merge pull request #220557 from mweinelt/libxcrypt-strong 
libxcrypt: Build only with strong hashes
 2023-03-15 16:43:12 +00:00
Sandro
fbeb9b9a96
Merge pull request #215835 from illustris/hbase 
nixos/hbase: add thrift and rest servers
 2023-03-15 16:55:36 +01:00
Charles Hall
65c6ffaae9 don't enable lightdm if greetd is enabled 2023-03-15 13:26:41 +01:00
github-actions[bot]
a3b786aa94
Merge staging-next into staging 2023-03-15 00:03:06 +00:00
Janik H
dafedbbba6 nixos/woodpecker: init 2023-03-14 20:31:39 +01:00
github-actions[bot]
9feb9fda3e
Merge staging-next into staging 2023-03-14 18:02:00 +00:00
K900
1fab86929f nixos/pipewire: spring cleaning 
- drop media-session (rip 💀)
- stop trying to let people override default configs, those never got merged correctly
- drop all the complexity arising from having to vendor default config files
- build docs in sandbox as we no longer recurse
 2023-03-14 20:31:32 +03:00
K900
b8ac3f9a93 pipewire: 0.3.66 -> 0.3.67 2023-03-14 20:31:03 +03:00
Kasper Gałkowski
e5eb0322a2 merge master 2023-03-14 17:07:39 +01:00
Sandro
66e0910e86
Merge pull request #199729 from peat-psuwit/zoneminder-1.36.31 
zoneminder, nixos/zoneminder: 1.36.28 -> 1.36.31, fix issues relating to upgrade
 2023-03-14 17:02:05 +01:00
Domen Kožar
c08c079893
Merge pull request #216635 from DavHau/patch-4 
services.cachix-watch-store: fix description of compressionLevel
 2023-03-14 13:44:58 +00:00
Thomas Dy
fbb554fa58 nixos/kubernetes: update coredns 1.7.1 -> 1.10.1 2023-03-14 22:15:43 +10:00
Franz Pletz
bc0a1dd982
Merge pull request #220461 from SuperSandro2000/prometheus 
prometheus: 2.41.0 -> 2.42.0, split outputs, other cleanups
 2023-03-14 05:28:59 +01:00
Matthew Robbetts
f5b754881d bind: remove hard-coded allow-query config file entry, so it can be customized via extraConfig 2023-03-13 20:47:02 -07:00
John Soo
e30469a37b
nixos/minio: activate/restart service on credentials path changes 
Otherwise the `minio.service` service will fail either:

* with a message that the EnvironmentFile does not exist
* or silently with potentially stale credentials
 2023-03-13 17:43:19 -07:00
John Soo
7f85002ec0
nixos/minio: format with nixpkgs-fmt 2023-03-13 17:36:52 -07:00
Artturi
b978bf0f0f
Merge pull request #220570 from Artturin/fixlints1 2023-03-14 02:15:55 +02:00
Marcus Ramberg
f834dfad8f nimdow: Add nixos windowmanager option 2023-03-13 11:37:32 -05:00
Martin Weinelt
4472cf44eb
treewide: Make yescrypt the default algorithm for pam_unix.so 
This ensures `passwd` will default to yescrypt for newly generated
passwords.
 2023-03-13 07:54:27 +01:00
Elis Hirwing
ce76a6838c
Merge pull request #203487 from jocelynthode/init-readarr 
readarr: init at 0.1.4.1596
 2023-03-13 06:56:35 +01:00
Lassulus
47233b27c9
Merge pull request #167319 from schnusch/cgit 2023-03-13 09:51:08 +07:00
Ben Wolsieffer
b92dae961c nixos/chrony: allow @chown syscall set 
The module was allowing specific chown syscalls, which is brittle because
there are several and different ones are used by glibc on different
architectures. For example, fchownat was already added to the allowlist for
aarch64, while on armv6l chrony crashes because chown32 is not in the
allowlist.

systemd provides the @chown syscall set, which includes all the chown
syscalls and avoids this brittleness. I believe the syscalls would all be
equivalent from an attacker's perspective, so there is unlikely to be any
security impact.
 2023-03-12 18:10:56 -05:00
Jocelyn Thode
e7f54823b1
readarr: init at 0.1.4.1596 2023-03-12 20:54:23 +01:00
Janne Heß
6798068e84
Merge pull request #220555 from lilyinstarlight/feature/fwupd-uefi-capsule 
nixos/fwupd: add settings option for uefi_capsule.conf
 2023-03-11 20:04:32 +01:00
Jonas Heinrich
161a1ca129
Merge pull request #191974 from tu-maurice/btrbk-doas 
btrbk: Use sudo or doas based on configuration
 2023-03-11 16:10:50 +01:00
nachoslover813260
4b0bc9ea72 nixos/plasma5: add ark as an optional package instead 2023-03-11 21:29:24 +08:00
nachoslover813260
9e8f51fc6c Adding Ark as a file archiver 
Since the default plasma desktop already got dolphin-plugins adding ark for archiving would make plasma desktop more complete as well
 2023-03-11 21:29:24 +08:00
Alvar Penning
adafbeff4a nixos/restic: generalize cache configuration 
The restic repository cache location defaults to ~/.cache/restic when
not overwritten either by the --cache-dir command line parameter or the
universal RESTIC_CACHE_DIR environment variable.

Currently, the --cache-dir variable is set to only some restic commands,
but, e.g., not to the unit's preStart command for the module's
initialize option. This results in two distinct cache locations, one at
~/.cache/restic for the initialize commands and one at the configured
--cache-dir location for the restic backup command.

By explicitly setting RESTIC_CACHE_DIR for the unit, only one cache at
the correct location will be used.

https://restic.readthedocs.io/en/v0.15.1/manual_rest.html#caching
 2023-03-11 12:59:10 +01:00
Mario Rodas
2ce9b9842b
Merge pull request #219355 from tomfitzhenry/phosh-0.25.1 
phosh: 0.23 -> 0.25.1
 2023-03-10 21:03:33 -05:00
Artturin
cab4a24c34 treewide: fix lints 
Arg to lib.optional is a list

build time tool in buildInputs
 2023-03-11 00:55:17 +02:00
Lily Foster
6e6d31f4bc
nixos/fwupd: add settings option for uefi_capsule.conf 2023-03-10 15:25:41 -05:00
genesis
cab32f0f86 nixos/jellyseerr: init 2023-03-10 16:18:00 +01:00
Yureka
7efee351ec
Merge branch 'gitlab-pages' of github.com:talyz/nixpkgs into HEAD 2023-03-10 14:36:25 +01:00
Sandro Jäckel
da2f281453
prometheus: split doc and cli into extra outputs 2023-03-10 11:45:45 +01:00
Sandro
bca9ab3d26
Merge pull request #205060 from jslight90/patch-8 
nixos/prometheus: Add new relabel_configs actions
 2023-03-10 11:19:31 +01:00
Stanisław Pitucha
5496585eb8
Merge pull request #186076 from viraptor/gemstash-service 
nixos/gemstash: init module
 2023-03-10 14:21:53 +11:00
Rick van Schijndel
8d8f5ede91
Merge pull request #216451 from Mindavi/hydra/systemd-target 
nixos/hydra: wait for network-online before evaluator start
 2023-03-09 20:53:21 +01:00
Domen Kožar
6a231a6eb7
Merge pull request #197613 from shyim/add-coder 
coder: fix web frontend building
 2023-03-09 12:04:16 +04:00
Jonas Heinrich
9f10a2e82a
Merge pull request #218633 from onny/networkd-dispatcher-rules 
nixos/networkd-dispatcher: add rules option
 2023-03-08 20:41:06 +01:00
K900
23b0152ffb
Merge pull request #218530 from K900/murmur-dbus 
nixos/murmur: expose dbus
 2023-03-08 18:35:56 +03:00
K900
d8d8b55e7d nixos/murmur: expose dbus 2023-03-08 18:03:51 +03:00
Motiejus Jakštys
2b168ba3f0 headscale: rename oidc.client_secret_file to oidc.client_secret_path 
Headscale now supports passing the OIDC client secret via a file, as
added in [juanfont/headscale#1127][1127]. Lets use that.

The headscale option is `client_secret_path`; let's make it consistent
and rename the Nix option to this. Note that I wasn't able to do this:

    mkRenamedOptionModule [ ... "client_secret_file" ] [ ... "client_secret_path" ]

I get such error:

    error: evaluation aborted with the following error message: 'cannot find attribute `services.headscale.settings.oidc.client_secret_file''

[1127]: https://github.com/juanfont/headscale/pull/1127
 2023-03-08 11:26:45 +02:00
Jonas Heinrich
26e14e57af nixos/networkd-dispatcher: add rules option 2023-03-08 10:20:47 +01:00
Rick van Schijndel
60446dda1f nixos/hydra: wait for network-online before evaluator start 
This prevents issues I'm seeing with the hydra I'm running on my laptop.
Every time I reboot it I see eval errors like this:

```
error fetching latest change from git repo at `https://github.com/nixos/nixpkgs.git':
fatal: unable to access 'https://github.com/nixos/nixpkgs.git/': Could not resolve host: github.com
```

This is because the evaluator already starts before the network is
actually online. It should wait until the network is fully online before
starting evaluation to prevent evaluation errors like above.
 2023-03-07 21:58:23 +01:00
Izorkin
5eb5d881a4
nixos/nginx: add defaultMimeTypes option 2023-03-07 19:37:18 +03:00
Stanisław Pitucha
70073985ae nixos/gemstash: init module 2023-03-07 15:56:56 +11:00
Felix Buehler
d10e69c86b treewide: deprecate isNull 
https://nixos.org/manual/nix/stable/language/builtins.html#builtins-isNull
 2023-03-06 22:40:04 +01:00
Ilan Joselevich
edff57cff4
Merge pull request #218455 from veehaitch/gh-runner-builddotnet 
github-runner: switch to `buildDotnetModule`
 2023-03-06 19:11:06 +02:00
Naïm Favier
6082d5bd0a
Merge pull request #219549 from SEIAROTg/master 
nixos/wireguard: fix mtu after switching netns.
 2023-03-05 22:56:29 +01:00
Ryan Lahfa
c91b85416b
Merge pull request #216015 from r-ryantm/auto-update/dolibarr 
dolibarr: 16.0.3 -> 16.0.4
 2023-03-05 21:19:46 +01:00
SEIAROTg
5a4dc2128e
nixos/wireguard: fix mtu after switching netns. 
mtu is set after switching netns and thus the new netns should be used.
 2023-03-04 18:51:12 +00:00
Isa
8225d6db3a smokeping: fix css and js symlink 2023-03-04 14:39:43 +01:00
Naïm Favier
45e44c56f1
Merge pull request #217342 from pennae/nrd-html-manual 
nixos-render-docs: add manual html renderer, use it for the nixos manual
 2023-03-04 12:58:38 +01:00
Ryan Lahfa
fd09c1bdc5
Merge pull request #214759 from Tom-Hubrecht/borgmatic 
nixos/borgmatic: Allow defining multiple configurations
 2023-03-04 11:38:39 +01:00
Raito Bezarius
51b00a5e89 nixos/web-apps/dolibarr: lib.optionalAttr -> lib.optionalAttrs typo 2023-03-04 11:31:28 +01:00
K900
18f85de76d nixos/firewall: assert that the kernel supports conntrack helper auto-loading 2023-03-04 10:53:47 +03:00
Sandro
2665f5e379
Merge pull request #178447 from Francesco149/dendrite-prestart 2023-03-03 18:45:09 +01:00
Tom Fitzhenry
2455dfab0d phosh: 0.23.0 -> 0.25.1 2023-03-04 00:38:29 +11:00
Maximilian Bosch
72f45f225f
Merge pull request #218269 from theHedgehog0/gitea-module-getexe 
nixos/gitea: Move to lib.getExe
 2023-03-02 19:46:45 +01:00
Kasper Gałkowski
e141ed8312 stumpwm: fix after major changes to lisp-modules 2023-03-02 19:04:47 +01:00
Pyrox
98dd7f5307
nixos/gitea: Move to lib.getExe 
This makes it so that alternative packages, such as `pkgs.forgejo` are
able to be used instead of the default `pkgs.gitea`.

Also adds myself as a maintainer of the module.

The varible `gitea`, which was used instead of `cfg.package`, has been
replaced with the variable `exe`, and is instead the value of the main
executable, as gotten from `lib.getExe`. `cfg.package` is used when this
value is not appropriate.
 2023-03-02 12:16:30 -05:00
Maximilian Bosch
f8bbedfcac
Merge pull request #219073 from IndeedNotJames/gitea-gpg 
nixos/gitea: fix commit signing (`gpg`) core dump, add nixos test
 2023-03-02 17:24:02 +01:00
Arian van Putten
17ca3dd2a6
Merge pull request #217852 from justinas/teleport-12 
teleport: 11.3.4 -> 12.0.2, reintroduce teleport_11
 2023-03-02 11:18:24 +01:00
Luke Granger-Brown
b3c09089e4
Merge pull request #215750 from puppe/fix-paperless 
nixos/paperless: download NLTK data
 2023-03-02 10:00:46 +00:00
illustris
653d1f0534
nixos/hbase: add examples for options 2023-03-02 15:03:10 +05:30
Yureka
55da71c10e
nixos/nftables: add checkRuleset option (#216531) 
* nixos/nftables: add checkRuleset option

* lkl: 2022-05-18 -> 2023-01-27
 2023-03-02 10:28:01 +01:00
Bobby Rong
3374c1ab48
Merge pull request #219004 from bobby285271/fix/pantheon-add-mutter-udev 
nixos/pantheon: add mutter to services.udev.packages
 2023-03-02 09:55:20 +08:00
IndeedNotJames
93c1d370db
nixos/gitea: fix commit signing (gpg) core dump 
Gitea spawns `gpg` processes for commit signing related actions.
Those `gpg` processes need `mlock` (probably to prevent secrets
in the memory to swap).
Blocking it (as part of the `@memlock` preset) causes any
commit signing related actions to error out as http/500
 2023-03-01 23:44:21 +01:00
K900
1e00e82f9d
Merge pull request #218437 from K900/x11-default-modesetting 
nixos/x11: default to the modesetting driver
 2023-03-01 17:51:04 +03:00
Sandro
86053e5ec2
dgraph: use --prefix to prefix PATH 
This is more robust in case PATH is empty or otherwise weird.
 2023-03-01 13:55:30 +01:00
Bobby Rong
1f9308f005
nixos/pantheon: add mutter to services.udev.packages 
For ./lib/udev/rules.d/61-mutter.rules

Same as d1eeb64. This is forgotten in PR 130380.
 2023-03-01 10:00:53 +08:00
Justinas Stankevicius
31b5597cbd nixos/teleport: add "package" option 2023-02-28 13:22:50 +02:00
Luke Granger-Brown
997d8d5870
Merge pull request #218618 from dali99/headscale-openid 
nixos/headscale: update oidc options
 2023-02-28 00:21:04 +00:00
Jared Baur
ea0dc2c5eb
nixos/avahi: add denyInterfaces option 2023-02-27 15:41:53 -08:00
Stefan Frijters
2af041ab44 nixos/gitlab-runner: do not pull in Docker if gitlab-runner-clear-docker-cache is disabled 
Only create the service if the option is enabled and if any docker executors exist.
 2023-02-27 22:24:14 +01:00
Luke Granger-Brown
f43347d8a3
Merge pull request #214346 from SFrijters/postfix-ipv4 
nixos/postfix: restrict inet_protocols to ipv4 when ipv6 is disabled
 2023-02-27 18:24:53 +00:00
Cabia Rangris
f8b026c478
Merge pull request #218637 from Luflosi/klipper-fix-typo 
nixos/klipper: fix assert message to match actual assertion
 2023-02-27 21:17:18 +04:00
Soner Sayakci
ff7dfcba57 nixos/opensearch: fix opensearch startup 2023-02-27 16:07:12 +00:00
Luflosi
2378d1a214
nixos/klipper: fix assert message to match actual assertion 
This error was introduced in 849c40b5f5.
 2023-02-27 17:04:48 +01:00
Daniel Olsen
ea31ef91af nixos/headscale: update oidc options 2023-02-27 15:17:16 +01:00
Riley
c713217380
nixos/k3s: add environmentFile as an option 
* k3s: add environmentFile option

Enabling to include secrets through configuration such as 'sops'

* Update nixos/doc/manual/release-notes/rl-2305.section.md

Co-authored-by: Jairo Llopis <973709+yajo@users.noreply.github.com>
 2023-02-27 08:15:25 -03:00
schnusch
bbc988ba00 nixos/matrix-synapse: fix .well-known delegation of federated traffic 
Synapse is reverse-proxied on ${fqdn} not ${config.networking.domain} and
the .well-known delegation info must point to the domain on which synapse
is hosted, see https://matrix-org.github.io/synapse/latest/delegate.html
 2023-02-27 02:02:35 +01:00
Robert Schütz
9e1d4dff3e nixos/openvpn: use writeShellScript 
Previously the upScript would fail with

    Syntax error: "(" unexpected (expecting "done")

on line 7 if /bin/sh is not bash.
 2023-02-26 10:12:28 -08:00
Vincent Haupert
137db83090 nixos/github-runners: use Runner.Listener directly for registration 
Nothing the script `config.sh` does prior to the final call to
`Runner.Listener configure` is relevant for the systemd service.
Particularly, we don't need (nor want) any of the artifacts the `env.sh`
script creates.
 2023-02-26 15:39:19 +01:00
K900
82964d1694 nixos/x11: default to the modesetting driver 
The upstream drivers are very dead:
- nouveau:
   - https://gitlab.freedesktop.org/xorg/driver/xf86-video-nouveau/-/commits/master
   - last meaningful change in August 2020
- ati (aka radeon):
   - https://gitlab.freedesktop.org/xorg/driver/xf86-video-ati/-/commits/master
   - last meaningful change in April 2020
- amdgpu:
   - https://gitlab.freedesktop.org/xorg/driver/xf86-video-amdgpu/-/commits/master
   - barely alive, mostly thanks to Valve people

Modesetting isn't even the future, it's the now, especially with Wayland.
We should embrace it.
 2023-02-26 16:11:13 +03:00
Aaron Andersen
d8c0a9204a
Merge pull request #217834 from yaxitech/gh-runner-workdir-clean 
nixos/github-runners: clean `workDir` as root
 2023-02-26 08:05:05 -05:00
Vladimír Čunát
30e272bc04
Merge #216499: staging-next 2023-02-15 2023-02-26 10:11:50 +01:00
happysalada
8872f52732 qdrant: service module init 2023-02-26 01:33:15 -05:00
Nicola Squartini
a2eeaddea2
nixos/nextcloud: support SSE-C for S3 primary storage 
Add configuration option to enable [server-side encryption with
customer-provided keys][1] (SSE-C) when using S3 as primary storage in
Nextcloud.

[1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html
 2023-02-24 16:59:41 +01:00
github-actions[bot]
2384cd723b
Merge master into staging-next 2023-02-24 12:01:20 +00:00
Sandro
83b8193be9
Merge pull request #201780 from helsinki-systems/init/nextcloud-notify-push 
nextcloud-notify-push: init at 0.5.0
 2023-02-24 12:10:02 +01:00
Martin Puppe
ebdfdae156 nixos/paperless: download NLTK data 
Since version 1.10.0 paperless-ngx depends on the NLTK library which is
used to pre-process data for machine learning. NLTK needs certain
data for stemming, stopword removal etc. This data has to be downloaded
first. This commit introduces a new systemd service that does the
downloading.
 2023-02-23 21:34:49 +01:00
Alyssa Ross
52c286ee5b
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
	pkgs/development/libraries/pmdk/default.nix
 2023-02-23 13:51:34 +00:00
Naïm Favier
129b6f7812
Merge pull request #216504 from ncfavier/unbound-state-dir-writable 
nixos/unbound: make stateDir writable
 2023-02-23 14:23:53 +01:00
github-actions[bot]
390b789c39
Merge master into staging-next 2023-02-23 12:01:07 +00:00
Profpatsch
d316c28a30 modules/github-runner: Improve tokenFile docs 
We’ve been having trouble figuring out which kind of token to use and
why our setup would break every few system updates.

This should clarify which options there are, and which ones lead to
better results.

Ideally there would be a manual section that has a step-by-step guide
on how to set up the github runner, with screenshots and everything.
 2023-02-23 12:37:30 +01:00
Vincent Haupert
36949b9718 nixos/github-runners: clean workDir as root 
Purge contents of `workDir` as root to also allow the removal of files
marked as read-only. It is easy to create read-only files in `workDir`,
e.g., by copying files from the Nix store.
 2023-02-23 09:05:27 +01:00
github-actions[bot]
010946fcbd
Merge master into staging-next 2023-02-23 06:01:03 +00:00
Robert Schütz
89c8ef30a6 nixos/imaginary: bind to localhost by default 2023-02-22 17:37:36 -08:00
Henri Menke
64be5cc145
nixos/alps: fix embarrasing typo 2023-02-22 20:41:17 +01:00
github-actions[bot]
68dd6912f3
Merge master into staging-next 2023-02-22 18:01:07 +00:00
K900
8a678a16f8
Merge pull request #217578 from eduarrrd/pam 
PAM service fixups for plasma5 and sddm
 2023-02-22 16:30:02 +03:00
Sandro Jäckel
5e5a84b193
nixos/nginx: add recommendedZstdSettings 2023-02-22 13:59:53 +01:00
github-actions[bot]
77f501b5df
Merge master into staging-next 2023-02-22 06:01:21 +00:00
github-actions[bot]
3cd1b92b06
Merge master into staging-next 2023-02-22 00:02:34 +00:00
Luflosi
e5ffc94ea9
nixos/mautrix-facebook: fix copy&paste error 
Closes https://github.com/NixOS/nixpkgs/issues/166312.
 2023-02-22 00:03:19 +01:00
Sandro
5b7d323435
Merge pull request #216909 from emilytrau/tailscale-tweaks 2023-02-21 23:21:09 +01:00
Eduard Bachmakov
45a6488f9c nixos/sddm + nixos/plasma5: switch PAM service to login. 
GDM and LightDM are already using this approach. It also allows us to
enable Kwallet integration more globally without generating stray PAM
services.

The default configuration of login service includes both options sddm
was setting explicitly.
 2023-02-21 22:48:09 +01:00
Eduard Bachmakov
2ca5a88f8e nixos/plasma5: remove non-existant/unused PAM service configs. 
This removes two unused service configs from /etc/pam.d/ and, more
importantly, reduces confusion.

* kdm no longer exists in nixpkgs
* `pam.d/gdm` is not used by gdm
* `pam.d/lightdm` IS used by lightdm but hardcoded using .text rather
  than attrset+template.
 2023-02-21 22:28:32 +01:00
pennae
3794c04d79 nixos/manual: fix manpage links 
{manpage} already exapnds to a link but akkoma wants to link to
a specific setting. split the mention for clarity.

networkd just straight up duplicated what {manpage} generates anyway, so
that link can go away completely.
 2023-02-21 18:26:39 +01:00
ajs124
bdb0566f8b nixos/nextcloud-notify_push: use lib.genAttrs 2023-02-21 15:53:27 +01:00
ajs124
6c24a28ea6 nixos/nextcloud-notify_push: add some restart config to the service 2023-02-21 15:05:17 +01:00
ajs124
671bd1ef7a nixos/nextcloud-notify_push: add database options 2023-02-21 15:05:16 +01:00
ajs124
1f0aa74c8f nixos/nextcloud-notify_push: init 2023-02-21 15:05:16 +01:00
github-actions[bot]
a160ec1116
Merge master into staging-next 2023-02-21 12:01:36 +00:00
Martin Weinelt
0663b90f54
Merge pull request #213232 from mweinelt/tts-module 
nixos/tts: init
 2023-02-21 11:33:20 +00:00
Martin Weinelt
198713cf82
nixos/tts: init 
Provide a module to configure Coqui TTS, available as `tts` in nixpkgs
for a few releases already.

The module supports multiple servers in parallel, so multiple languages
and testing scenarios can be covered, without affecting any production
usage.
 2023-02-21 11:59:17 +01:00
Sandro
7606d0e004
Merge pull request #199798 from j2ghz/patch-1 
Add package override to mimir
 2023-02-21 09:37:57 +01:00
github-actions[bot]
af79979d58
Merge master into staging-next 2023-02-21 06:01:00 +00:00
Aaron Andersen
ab8815a4b6
Merge pull request #215789 from bb2020/mbpfan 
nixos/mbpfan: add aggressive option
 2023-02-20 22:24:11 -05:00
Martin Weinelt
d92d6030be
Merge pull request #217089 from mweinelt/hass-pythonpath 
home-assistant: Load optional deps from PYTHONPATH
 2023-02-21 00:52:47 +00:00
Martin Puppe
8bc615d0e0 nixos/yggdrasil: correct documentation 
The option `LinkLocalTCPPort` does not exist anymore in recent versions
of Yggdrasil. The port for incoming link-local connections is now
configured as part of the `MulticastInterfaces` option. Our
documentation should reflect that.
 2023-02-20 23:10:54 +01:00
Martin Puppe
cf8b1fb85e nixos/yggdrasil: support HJSON files as configFile 
Yggdrasil uses HJSON as its configuration file format. The NixOS module
meanwhile only supports pure JSON. This commit adds support for HJSON
files.
 2023-02-20 23:10:54 +01:00
Martin Puppe
78ac812356 nixos/yggdrasil: fix configFile option 
As far as I can tell the configFile option cannot have worked as
intended. The Yggdrasil systemd service uses a dynamic user. As it was,
there was no way to set the correct permissions on a config file
beforehand which would allow the dynamic user to read the config file
without making it readable for all users. But since the config file can
contain a private key it *must not* be world-readable.

The file must only be readable by root. The file has to be copied and
the permissions have to be fixed during service startup. This can either
be done in a ExecStartPre directive with the '+' prefix (which executes
that command with elevated privileges), or it can be done more
declarative with the LoadCredential directive. I have chosen the latter
approach because it delegates more work to systemd itself. It should be
noted that this has the minor tradeoff that the config file must not be
larger than 1 MB. This is a limit which systemd imposes on credential
files. But I think 1 MB ought to be enough for anybody ;).
 2023-02-20 23:04:24 +01:00
Martin Puppe
9b2e2e8006 nixos/yggdrasil: nixpkgs-fmt 2023-02-20 22:02:59 +01:00
github-actions[bot]
08d46af354
Merge master into staging-next 2023-02-20 18:01:32 +00:00
Martin Weinelt
e01ccd6245
home-assistant: Inject extra dependencies through PYTHONPATH 
Injecting configuration specific dependencies into the
propagatedBuildInputs of the home-assistant package forces alot of
rebuilds while setting up home-assistant, which is annoying.

By passing optional dependencies into home-assistant via the systemd
units PYTHONPATH environment variable, only he concatenation of
library paths in the systemd unit requires a rebuild.

This also means users can rely heavily on the cached home-assistant
package and will rarely have to build from source, if ever.
 2023-02-20 18:37:20 +01:00
Joachim Breitner
20c135b191 docs: borg expects --rsh, not -rsh 2023-02-20 18:02:28 +01:00
Kim Lindberger
e0c0a6c80c
Merge pull request #215523 from talyz/discourse-3.1.0.beta2 
discourse: 2.9.0.beta14 -> 3.1.0.beta2
 2023-02-20 13:58:05 +01:00
github-actions[bot]
b629ad5e83
Merge master into staging-next 2023-02-20 06:01:33 +00:00
Nick Cao
902b5229e2
Merge pull request #216922 from NickCao/mautrix-telegram 
mautrix-telegram: unstable-2023-01-28 -> unstable-2023-02-16, with dependency and module updates
 2023-02-20 08:56:43 +08:00
bb2020
1e75de336c nixos/mbpfan: add aggressive option 2023-02-19 16:57:07 +03:00
github-actions[bot]
85ba84c218
Merge master into staging-next 2023-02-19 12:01:25 +00:00
Jonas Heinrich
553c376a49 nixos/networkd-dispatcher: init 2023-02-19 04:42:25 -05:00
Nick Cao
a1291d0d02
Merge pull request #205784 from Eliot00/v2raya-fix 
v2raya: v2rayA should start after nftables
 2023-02-19 15:08:29 +08:00
github-actions[bot]
a1eb3e0b3e
Merge master into staging-next 2023-02-19 00:02:27 +00:00
Kim Lindberger
30ed4863cd
Merge pull request #209147 from vojta001/parsedmarc_grafana 
nixos/parsedmarc: fix Grafana provisioning
 2023-02-18 23:38:33 +01:00
Sandro
6c611e8ff0
Merge pull request #216159 from Cynerd/gitlab-runner-bash-quote 2023-02-18 19:54:37 +01:00
Nick Cao
2cf8e2f7ad
nixos/mautrix-telegram: add ffmpeg-full to path 
Used for converting tgs to webm and webp format, as well as generating
video thumbnails. Using ffmpeg-full for webp support.
 2023-02-18 15:40:55 +08:00
Emily Trau
949b1df785 nixos/tailscale: fix config priority conflict 2023-02-18 13:28:04 +11:00
github-actions[bot]
69a8c9e227
Merge master into staging-next 2023-02-18 00:02:21 +00:00
Jonas Heinrich
13ff144c70 nixos/maddy: Add option ensureAccounts 2023-02-17 17:42:27 -05:00
Lin Jian
405919c6c9 nixos/kanata: misc improvements 
- simplify some descriptions
- use getExe instead of hardcoding a binary path
- remove a unneeded "lib."
 2023-02-17 22:34:38 +01:00
Lin Jian
46122183b5 nixos/kanata: remove a limit that number of devices cannot be 0 
Since 1.0.8, kanata can automatically detect keyboard devices if
linux-dev is not in config.
 2023-02-17 22:34:38 +01:00
Lin Jian
f34917b128 nixos/kanata: do not use path activation 
Since 1.2.0, kanata handles missing keyboards well:
- only one keyboard need to be present when kanata starts;
- if linux-continue-if-no-devs-found is set to yes, all keyboards can
be missing at the beginning;
- all keyboards can be (un)pluged when kanata is running.

For simplicity, linux-continue-if-no-devs-found is set to yes and
systemd patch activation is removed.
 2023-02-17 22:34:38 +01:00
github-actions[bot]
1c50878b7b
Merge master into staging-next 2023-02-17 18:01:15 +00:00
Sandro
4fba4ceab7
Merge pull request #215407 from aopom/onlyoffice-mergeable-execstartpre 
nixos/onlyoffice: allow ExecStartPre additions
 2023-02-17 13:37:39 +01:00
K900
218b28191a pipewire: 0.3.65 -> 0.3.66 
Also enable libmysofa
 2023-02-17 13:15:16 +03:00
pennae
122a7435fb Revert "nixos/jellyseerr: init" 
This reverts commit 2ca375abdc.
 2023-02-16 18:03:55 +01:00
genesis
2ca375abdc nixos/jellyseerr: init 2023-02-16 17:27:17 +01:00
DavHau
731053d8aa
services.cachix-watch-store: fix description of compressionLevel 
By now, zstd is the default.
 2023-02-16 19:25:18 +07:00
pennae
047bd73c5e nixos/wireguard: make publicKeys singleLineStrs 
using readFile instead of fileContents (or using indented strings) can
leave a trailing newline that causes build errors in systemd units and
has previously caused runtime errors in wireguard scripts. use
singleLineStr to strip a trailing newline if it exists, and to fail if
more than one is present.
 2023-02-16 11:56:12 +01:00
Naïm Favier
5cf311c036
nixos/unbound: make stateDir writable 2023-02-15 18:14:58 +01:00
Kim Lindberger
ad36a97de0
Merge pull request #175000 from shyim/add-opensearch 
opensearch: init at 2.5.0
 2023-02-15 18:11:53 +01:00
talyz
9e9007e45f
nixos/opensearch: Use DynamicUser and StateDirectory by default 
...but still allow for setting `dataDir` to a custom path. This gets
rid of the use of the deprecated option PermissionsStartOnly. Also, add
the ability to customize user and group, since that could be useful
with a custom `dataDir`.
 2023-02-15 16:38:24 +00:00
Flakebi
12db8314d7
fail2ban: 0.11.2 -> 1.0.2 
Update to 1.0.2: https://github.com/fail2ban/fail2ban/blob/1.0.2/ChangeLog#ver-102-20221109---finally-war-game-test-tape-not-a-nuclear-alarm
1.0.1 contained a few breaking changes, but I think they have little
impact.

I changed the module to use the systemd service shipping with fail2ban
(now added to the package).
 2023-02-15 10:11:38 +01:00
Sandro
b2cf9511b3
Merge pull request #211547 from yater/patch-3 2023-02-14 22:32:47 +01:00
Soner Sayakci
d7eb44a421
nixos/opensearch: init module 2023-02-14 20:00:27 +00:00
K900
03ce4617e8
Merge pull request #216072 from illdefined/akkoma 
akkoma: 3.5.0 → 3.6.0
 2023-02-14 22:43:49 +03:00
K900
0059f767b9
Merge pull request #211767 from K900/plasma-5.27 
Plasma 5.27
 2023-02-14 22:12:28 +03:00
Mikael Voss
507c66f5b1
pleroma-fe: Rename to akkoma-fe 2023-02-14 20:05:08 +01:00
K900
34f3085148
Merge pull request #201963 from zhaofengli/moonraker-2022-11-18 
moonraker: unstable-2022-04-23 -> unstable-2022-11-18, nixos/moonraker: fixes
 2023-02-14 21:00:44 +03:00
Maximilian Bosch
3d53723112
Merge pull request #186660 from aopom/clickhouse-conf 
Change clickhouse's module conf directory to permit overrides
 2023-02-14 15:58:09 +01:00
K900
8474716356 nixos/plasma5: install flatpak-kcm if needed 2023-02-14 14:15:57 +03:00
Karel Kočí
116872aedd
nixos/gitlab-runner: fix shell syntax preventing build 
The build fails when configFile is provided because of shellcheck
detects missing quotes here.
 2023-02-13 13:20:26 +01:00
Nick Cao
48d6418a2e
Merge pull request #215696 from fee1-dead-contrib/matrix-appservice-discord.customize-package 
nixos/appservice-discord: customizable `package`
 2023-02-13 09:50:52 +08:00
Tom Hubrecht
919f2b2b62 nixos/borgmatic: Allow defining multiple configurations 2023-02-12 19:12:34 +01:00
Robert Schütz
7b60fce843
Merge pull request #215222 from dotlambda/nixos-imaginary-init 
nixos/imaginary: init
 2023-02-12 08:42:19 -08:00
Nick Cao
3bd8cc7a90
Merge pull request #215795 from e1mo/fix-dokuwiki-acluse 
nixos/dokuwiki: remove last reference to aclUse
 2023-02-12 09:06:24 +08:00
Nick Cao
a9335078db
Merge pull request #215740 from supermarin/patch-3 
nixos/yubikey-agent: Add dependency to pcsd.service
 2023-02-12 06:20:55 +08:00
Andreas Stührk
8dade1f713 nixos/envoy: add option requireValidConfig to make config validation errors non-fatal 
Co-authored-by: Vincent Haupert <vincent@yaxi.tech>
 2023-02-11 18:21:21 +01:00
Vincent Haupert
84220a7098 nixos/envoy: add package option 2023-02-11 18:21:21 +01:00
Vincent Haupert
3c3da8768b nixos/envoy: further service hardening 2023-02-11 18:21:21 +01:00
Vincent Haupert
8fff553f7e nixos/envoy: sort serviceConfig entries 2023-02-11 18:21:21 +01:00
Vincent Haupert
989a1a6ef5 nixos/envoy: use lists in serviceConfig where appropriate 
Using type `list` instead of `str` in `serviceConfig` entries which
accept multiple values allows easier extension of the unit
configuration.
 2023-02-11 18:21:21 +01:00
Robert Schütz
efee1b5234 nixos/imaginary: init 2023-02-11 09:18:42 -08:00
illustris
8f1c823ab0
nixos/hbase: add thrift and rest servers 2023-02-11 20:07:28 +05:30
Marin
785cd824a3 nixos/yubikey-agent: Add dependency to pcsd.service 
Issue: after installing, running `yubikey-agent -setup` produces the
following error:
```
nixOS: Failed to connect to the YubiKey: connecting to pscs: the Smart
card resource manager is not running
```

More on this issue: https://github.com/FiloSottile/yubikey-agent/issues/137
 2023-02-11 09:32:24 -05:00
Naïm Favier
86a387351a
Merge branch 'master' into nixos/hostapd 2023-02-11 14:03:56 +01:00
Moritz 'e1mo' Fromm
e8b59a1e2e
nixos/dokuwiki: remove last reference to aclUse 
This was overlooked in #209299, but will throw a trace when building a
system even when the setting was not set.
 2023-02-11 11:12:51 +01:00
Martin Puppe
fa7fbe565d nixos/paperless: apply nixpkgs-fmt 2023-02-10 23:55:30 +01:00
Sandro
9ee0410a57
Merge pull request #214702 from Tom-Hubrecht/onlyoffice 2023-02-10 23:07:32 +01:00
Tom Hubrecht
405984ac13 nixos/onlyoffice: Fix initial permissions for the documentserver data 2023-02-10 19:16:19 +01:00
Deadbeef
e391cf368a nixos/appservice-discord: customizable package 2023-02-11 01:08:46 +08:00
Anderson Torres
e1ffcb46cd
Merge pull request #153098 from bb2020/udisks 
nixos/udisks2: add mountOnMedia option
 2023-02-10 13:50:57 -03:00
bb2020
61219651fe nixos/udisks2: add mountOnMedia option 2023-02-10 16:38:05 +03:00
1sixth
06972ea1fe nixos/nitter: add replaceReddit option 2023-02-10 09:28:17 +01:00
Aaron Andersen
ce81c3ab72
Merge pull request #215554 from bb2020/dlna 
nixos/minidlna: minor changes
 2023-02-09 21:45:59 -05:00
Nick Cao
4ba33a758f
Merge pull request #215489 from Alper-Celik/master 
nixos/plasma5: use vlc phonon backend by default
 2023-02-10 09:27:37 +08:00
bb2020
76bf633dc2 nixos/minidlna: minor changes 2023-02-09 21:11:20 +03:00
Alvar Penning
63dd9fb5c8 nixos/ympd: Unit hardening 
Next to some systemd unit hardening, the nobody user isn't used anymore,
as suggested in #55370.
 2023-02-09 19:10:19 +01:00
talyz
8fb5bab784
discourse: 2.9.0.beta14 -> 3.1.0.beta2 2023-02-09 17:36:29 +01:00
Alper Çelik
0b74f9829f
nixos/plasma5: use vlc phonon backend by default 2023-02-09 13:53:28 +03:00
IndeedNotJames
f5a06f7150
nixos/caddy: fix caddy fmt for caddy v2.6.3 
The nixos module uses `caddy fmt` to *format* the generated Caddyfile.
v2.6.3 slightly altered `caddy fmt`'s behavior.

Excerpt from https://github.com/caddyserver/caddy/releases/tag/v2.6.3
> cmd: caddy fmt return code is 1 if not formatted
> cmd: fmt exit successfully after overwriting config file

Which is why the internal `Caddyfile-formatted` now uses `cp` and `caddy fmt --overwrite` instead
 2023-02-09 03:36:10 +01:00
ppom
5a1ba62841 onlyoffice: allow ExecStartPre additions 2023-02-09 00:56:08 +01:00
pennae
bf4c0c1900 nixos/*: remove trailing period in mkEnableOptions 
those are added by mkEnableOption, and .. is replaced to … by markdown
processing.
 2023-02-08 15:23:34 +01:00
pennae
2f9d71afdb nixos/x11: fix some docs links 
the docbook stylesheets duplicated the target of these untitled links
into their label, but we should do that in markdown instead.
 2023-02-08 15:23:34 +01:00
K900
4a514c6754 nixos/plasma5: install kio-admin for desktop 2023-02-08 12:38:14 +03:00
Will Fancher
1406dd02a9 sshd: Cyphers -> Ciphers 2023-02-07 13:54:36 -05:00
Maximilian Bosch
298148f714
Merge pull request #214973 from paumr/roundcube_bugfix_nginx 
nixos/roundcube: fixed nginx configuration
 2023-02-07 14:01:49 +01:00
Nick Cao
8f3021c728
Merge pull request #214868 from VergeDX/pykms 
nixos/pykms: rename systemd deprecated `MemoryLimit` to `MemoryMax` with option.
 2023-02-07 10:08:23 +08:00
Vanilla
0b426cd8e2
nixos/pykms: rename systemd deprecated MemoryLimit to MemoryMax. 2023-02-07 10:04:24 +08:00
Sandro
98a5726add
Merge pull request #204390 from gbtb/openvpn_client_restart_after_suspend 
Resolves https://github.com/NixOS/nixpkgs/issues/52528
 2023-02-07 01:06:24 +01:00
Matthieu Coudron
ef5da70d66
services.openssh: rename several settings (#211991) 
* services.openssh: rename several settings

... to match the sshd config format (makes transition smoother), namely:
services.openssh.forwardX11 -> services.openssh.settings.X11Forwarding
services.openssh.cyphers -> services.openssh.settings.Cyphers
services.openssh.macs -> services.openssh.settings.Macs
services.openssh.kexAlgorithms -> services.openssh.settings.KexAlgorithms
services.openssh.gatewayPorts -> services.openssh.settings.GatewayPorts

* release-notes: mention openssh renaming

* chore: regenerated release-notes
 2023-02-07 00:11:18 +01:00
Sandro
6cdec6d1b8
nixos/nginx: add comment about clearing Connection header (#214211) 2023-02-06 23:37:38 +01:00
Sandro
d47709d1ef
Merge pull request #208189 from numinit/update-nebula-module 2023-02-06 23:14:58 +01:00
Jozef Hollý
3cb385953b mimir: add package override 2023-02-06 21:49:23 +01:00
Maximilian Bosch
9402c27069
Merge pull request #208289 from Ma27/bump-privacyidea 
privacyidea: 3.7.4 -> 3.8
 2023-02-06 21:37:24 +01:00
Thomas Gerbet
e7e447a185 meilisearch: 0.30.5 -> 1.0.0 
https://github.com/meilisearch/meilisearch/releases/tag/v1.0.0
 2023-02-06 14:30:08 -05:00
Maximilian Bosch
918c22bd5f
privacyidea: fix build 
The previous changes for the 3.8 update are ready, but staging got
merged into master, so there are a few more challenges to tackle:

* Use python 3.10 now since it's actually supported and less effort to
  build (3.9 isn't recursed into anymore).
* sphinx doesn't build with these overrides, so patch it out entirely
  (i.e. drop `sphinxHook` where it's causing problems).
* backport a few jinja2 fixes for python 3.10 that were fixed in later
  versions, but break because this env is stuck to 2.11.
 2023-02-06 20:28:26 +01:00
Anderson Torres
f7e045e149
Merge pull request #209192 from lucasew/cockpit 
cockpit: init at 284
 2023-02-06 16:02:27 -03:00
paumr
9d4fdb9685 nixos/roundcube: fixed nginx configuration 
the changes are required for oauth setups,
and are based on:
https://github.com/roundcube/roundcubemail/issues/8191#issuecomment-919850328
 2023-02-06 18:11:42 +01:00
Maximilian Bosch
f6c8d04d11
nixos/privacyidea: fix db uri 
Fixes db migration on 3.8. See also https://github.com/privacyidea/privacyidea/issues/3447
 2023-02-06 17:29:47 +01:00
Soner Sayakci
56ecab709a
nixos/coder: init module 2023-02-06 13:15:00 +01:00
Nick Cao
701390c82b
Merge pull request #214809 from drupol/fix/update-pihole-exporter 
fix: `pihole-exporter` NixOS module
 2023-02-06 18:37:11 +08:00
Pol Dellaiera
4e7f20ade9 nixos/prometheus-pihole-exporter: update configuration options 
The `interval` configuration option doesn't exist and has been removed.
The `timeout` configuration option has been added.
 2023-02-06 11:35:51 +01:00
Robert Obryk
0a6dd02620 nixos/firefox-syncserver: enable recommendedProxySettings 
The syncserver requires a Host header identical to the one provided by
the client.
 2023-02-05 23:47:19 +01:00
Malte Voos
3449f83618 maintainers/malvo: update information 2023-02-05 15:05:51 +01:00
Morgan Jones
e99f342f11 nixos/nebula: harden systemd unit 2023-02-04 16:24:45 -08:00
Morgan Jones
9d649fd78c nixos/nebula: add tests for relays; clean up nebula passthru test 2023-02-04 16:24:45 -08:00