dev/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
695,980 Commits 3 Branches 0 Tags 4.3 GiB
a9f08a2b87
Commit Graph

45325 Commits

Author SHA1 Message Date
Florian Klink
7ba149e9d1
nixos/gerrit: Apply initial hardening using the systemd unit (#347661) 2024-10-11 15:16:09 +03:00
github-actions[bot]
a0cb562430
Merge staging-next into staging 2024-10-11 12:06:07 +00:00
github-actions[bot]
ca2d394166
Merge master into staging-next 2024-10-11 12:05:38 +00:00
Sandro
eac17593c1
croc: 10.0.11 -> 10.0.13 (#338918) 2024-10-11 11:38:18 +02:00
Felix Uhl
73011ba96f nixos/systemd-boot: add windows option for easy dual-booting 
When installing NixOS on a machine with Windows, the "easiest" solution
to dual-boot is re-using the existing EFI System Partition (ESP), which
allows systemd-boot to detect Windows automatically.

However, if there are multiple ESPs, maybe even on multiple disks,
systemd-boot is unable to detect the other OSes, and you either have to
use Grub and os-prober, or do a tedious manual configuration as
described in the wiki:
https://wiki.nixos.org/w/index.php?title=Dual_Booting_NixOS_and_Windows&redirect=no#EFI_with_multiple_disks

This commit automates and documents this properly so only a single line
like

    boot.loader.systemd-boot.windows."10".efiDeviceHandle = "HD0c2";

is required.

In the future, we might want to try automatically detecting this
during installation, but finding the correct device handle while the
kernel is running is tricky.
 2024-10-11 10:56:02 +02:00
Felix Uhl
f2e5b04c4e nixos/systemd-boot: add edk2-uefi-shell boot option 
We already have a edk2-uefi-shell package in nixpkgs, but adding it to
systemd-boot was somewhat tedious. Now it's a single line of nix.
 2024-10-11 10:53:42 +02:00
Felix Uhl
548206583d nixos/systemd-boot: autoformat 2024-10-11 10:53:38 +02:00
Kranium Gikos Mendoza
f385d942e1 nextjs-ollama-llm-ui: fix nextjs cache dir (#344316) 2024-10-11 17:35:37 +11:00
github-actions[bot]
a45a33309f
Merge staging-next into staging 2024-10-11 06:05:14 +00:00
github-actions[bot]
e26f69eb82
Merge master into staging-next 2024-10-11 06:04:46 +00:00
Emily
50c2aef3e7
nixos/netboot: Compress squashfs with zstd 19 (#341422) 2024-10-11 05:11:50 +01:00
OPNA2608
1b660ba22a tests/lomiri: Test keymap switch, make keymap OCR more consistent 2024-10-11 05:18:44 +02:00
OPNA2608
6037708c33 lomiri.lomiri-content-hub: Rename from lomiri.content-hub, 1.1.1 -> 2.0.0 2024-10-11 05:17:29 +02:00
oddlama
ae5481883d
nixos/stalwart-mail: fix issue where webadmin interface disappears after some time 2024-10-11 02:30:58 +02:00
github-actions[bot]
aa2334f4a8
Merge master into staging-next 2024-10-11 00:14:02 +00:00
MithicSpirit
e14483d6a6
formats.ini: disable merging as list by default 
Previously, setting listsAsDuplicateKeys or listToValue would make it so
merging these treat all values as lists, by coercing non-lists via
lib.singleton. Some programs (such as gamemode; see #345121), allow some
values to be repeated but not others, which can lead to unexpected
behavior when non-list values are merged like this rather than throwing
an error.

This now makes that behavior opt-in via the mergeAsList option. Setting
mergeAsList (to either true or false) without setting either
listsAsDuplicateKeys or listToValue is an error, since lists are
meaningless in this case.
 2024-10-10 17:57:41 -04:00
h7x4
e49f3574ab
nixos/fedimintd: make nginx url forwarding path configurable (#347604) 2024-10-10 21:14:20 +02:00
Sebastián Zavala Villagómez
8a277a6abf nixos/automatic-timezoned: set time.timeZone to null to avoid silent overriding 
Currently if a timezone was selected explicitly, the service will
silently override the value, essentially ignoring what is meant to be a
a deliberate choice of option. This may cause confusion as to why the
option is not doing anything when this service is enabled, particularly
in more complex set-ups after some time.

This will simply make the choice deliberate from the user's part, either
by having to remove the option or lowering its priority as a recognition
that it may be ignored.

This change was inspired by the `services.tzupdate` module, which does
the same.

[1]: <https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/misc/tzupdate.nix#L24>
 2024-10-10 14:33:12 -04:00
github-actions[bot]
144082b47e
Merge staging-next into staging 2024-10-10 18:05:19 +00:00
github-actions[bot]
c64ae284c0
Merge master into staging-next 2024-10-10 18:04:46 +00:00
Fabián Heredia Montiel
0cdc526090
deno: 1.46.3 -> 2.0.0, deno_1: init at 1.46.3 (#347484) 2024-10-10 09:36:33 -06:00
Izorkin
36a83a3bf1
mastodon: 4.2.13 -> 4.3.0 
Changelog:
https://github.com/mastodon/mastodon/releases/tag/v4.3.0
 2024-10-10 16:58:54 +02:00
Franz Pletz
262f0e36d5
nixos/pam: add pam_rssh support (#336609) 2024-10-10 15:11:28 +02:00
github-actions[bot]
61a438a474
Merge staging-next into staging 2024-10-10 12:06:10 +00:00
github-actions[bot]
a5883bc172
Merge master into staging-next 2024-10-10 12:05:39 +00:00
Franz Pletz
9958dd2df8
immersed-vr: rename to immersed (#341266) 2024-10-10 13:47:06 +02:00
Franz Pletz
af7b205640
nixos/localtimed: set time.timeZone to null to avoid silent overriding (#347221) 2024-10-10 13:44:36 +02:00
Franz Pletz
1479e0c4de
nixos/frr: refactor (#327099) 2024-10-10 12:55:34 +02:00
06kellyjac
dfce2bc3a7 deno_1: init at 1.46.3 
Add a pre v2 copy of deno as deno_1 to provide some stability until our next
release and until 1.46 is fully abandoned soon.
deno_1 is expected to be removed prior to 24.11.
Added a release note.
 2024-10-10 11:51:26 +01:00
06kellyjac
43984407b5 deno: 1.46.3 -> 2.0.0 
Updates deno to v2.
Slight refactor of fetcher code for grabbing librusty_v8.
Updated the update scripts to use new Deno v2 interfaces and pull latest
toml dependency from jsr rather than the deno.land registry.
Added release note.
 2024-10-10 11:51:26 +01:00
Pol Dellaiera
a72a8bcfb3
treewide: fix typo chown -> chmod (#347678) 2024-10-10 10:55:34 +02:00
github-actions[bot]
9dd7231a1d
Merge staging-next into staging 2024-10-10 07:55:12 +00:00
K900
40dd5a1087 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-10 10:49:47 +03:00
r-vdp
30a99334c3
nixos/tmate-ssh-server: Fix typo, chown -> chmod 2024-10-10 09:03:55 +02:00
r-vdp
89abe3c610
nixos/nebula: Fix typo, chown -> chmod 2024-10-10 09:03:29 +02:00
r-vdp
9f1d2e97af
nixos/shorewall: Fix typo, chown -> chmod 2024-10-10 09:02:58 +02:00
r-vdp
11d9033d85
nixos/ec2: Fix typo, chown -> chmod 2024-10-10 09:02:06 +02:00
Masum Reza
cb9ac608fc
nixos/{bcache,lvm}: enable when using systemd in stage 1 initrd (#343760) 2024-10-10 12:16:31 +05:30
Masum Reza
83965777ed
nixos/hypridle: make hypridle start with graphical-session.target (#347662) 2024-10-10 12:14:27 +05:30
Felix Singer
3d30811d4e nixos/gerrit: Apply initial hardening using the systemd unit 
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
 2024-10-10 07:12:28 +02:00
John Titor
5eee20f731
nixos/hypridle: make hypridle start with graphical-session.target 
If we don't add the dependency explicitly, the service won't be pulled in
at runtime. Link: https://github.com/NixOS/nixpkgs/pull/340874#issuecomment-2365302744

Closes: https://github.com/NixOS/nixpkgs/issues/347651
 2024-10-10 10:32:48 +05:30
Emily
e694240f77 Merge staging-next into staging 2024-10-10 01:23:52 +01:00
github-actions[bot]
1404154595
Merge master into staging-next 2024-10-10 00:14:06 +00:00
Aaron Andersen
50a0ea2eb6
nixos/redmine: Apply initial hardening using the systemd unit (#346554) 2024-10-09 18:47:58 -04:00
Dawid Ciężarkiewicz
570454c295
nixos/fedimintd: make nginx url forwarding path configurable 
Some users would like to customize it.

Also, in current versions of fedimint p2p port in the URL
must be set, due to some bug, so update the example value
to reflect that.
 2024-10-09 14:28:51 -07:00
Frank Doepper
ecdfb14ef9 nixos/frr: refactor 
- use upstream service and scripts
- switch to integrated-vtysh-config, abandon per-daemon config
- use always daemon names in options (e.g. ospf -> ospfd)
- zebra, mgmtd and staticd are always enabled
- abandon vtyListenAddress, vtyListenPort options; use
  just "extraOptions" or "options" instead, respectively
- extend test to test staticd
- update release-notes
- pkgs.servers.frr: fix sbindir and remove FHS PATH
- introduce services.frr.openFilesLimit option
 2024-10-09 22:49:50 +02:00
Robert Schütz
db4fd8f4e3
nodePackages.npm: drop (#346536) 2024-10-09 12:01:42 -07:00
rnhmjoj
fb28bba040
nixos/release-notes: remove duplicate note 
Fix up the merge of the two dhcpcd hardening PRs (#336988 and #208780)
 2024-10-09 20:57:17 +02:00
ettom
4a9538bdbf nixos/snapserver: default http.docRoot to snapweb 2024-10-09 21:45:45 +03:00
K900
0717a4da77 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-09 21:08:25 +03:00
Sandro Jäckel
cb097d74cc
nixos/tests/croc: fix --pass argument and code passing 2024-10-09 17:40:39 +02:00
Sandro Jäckel
fc264c25c2
croc: remove inactive maintainer; nixos/tests/croc: match maintainer with package 2024-10-09 17:39:40 +02:00
Franz Pletz
ca912828ba
nixos/dhcpcd: allow jemalloc and mimalloc memory allocators (#346938) 2024-10-09 17:27:26 +02:00
Matthew Croughan
4eb19953b6
node-red: move from nodePackages (#347018) 2024-10-09 16:11:38 +01:00
Franz Pletz
689b9903ac
nixos/tailscale-derper: init (#306533) 2024-10-09 17:05:01 +02:00
Franz Pletz
ae4102c9f3
headscale (module and package): 0.22.3 -> 0.23.0 (#340054) 2024-10-09 17:01:18 +02:00
Franz Pletz
be6a26cae7
nixos/libvirtd: add startDelay and shutdownTimeout option (#347023) 2024-10-09 16:58:16 +02:00
github-actions[bot]
7bcc9dd470
Merge staging-next into staging 2024-10-09 12:07:41 +00:00
github-actions[bot]
0b14a71873
Merge master into staging-next 2024-10-09 12:06:03 +00:00
Florian Klink
c2a2f68c8c nixosTests.openresty-lua: simplify 
There's no point for the intermediate `getPath` function calling
`getLuaPath` with the "lua" argument.
There's also no other nginx test this copies code from.

We always call `getLuaPath` with "lua", so constant-propagate it in.

Also, camel-case `lualibs` to `luaLibs.`
 2024-10-09 14:12:14 +03:00
Emery Hemingway
7f63bcba36 nixos/nncp: refactor configuration merging 
The NNCP utilities have poor support for configuration merging so
use jq and hjson-cli instead.
 2024-10-09 09:07:11 +00:00
Bruno Bigras
90f457d197 wakapi: set StateDirectory 
fix #347393
 2024-10-09 02:54:57 -04:00
github-actions[bot]
4b2bd47103
Merge staging-next into staging 2024-10-09 06:05:20 +00:00
github-actions[bot]
fc5d8c3e7d
Merge master into staging-next 2024-10-09 06:04:53 +00:00
Michael Hoang
b2e9cc6167 qemu-vm: fix case-hack appearing in store image 2024-10-09 16:59:48 +11:00
Silvan Mosberger
c5cea342ce
lib.oldestSupportedReleaseIsAtLeast: rename from bad name (#347258) 2024-10-09 02:20:39 +02:00
github-actions[bot]
96ea2a3c2f
Merge staging-next into staging 2024-10-09 00:14:47 +00:00
github-actions[bot]
b1bc4ea2b5
Merge master into staging-next 2024-10-09 00:14:24 +00:00
Niklas Hambüchen
b061499d34
ceph: 18.2.4 -> 19.2.0 (#344993) 2024-10-09 01:25:14 +02:00
Niklas Hambüchen
b9b23b2a72 rl-2411: Mention Ceph upgrade 2024-10-08 23:18:51 +00:00
Florian Klink
2ec88eb10b
nixos/systemd: allow running shellcheck on generated systemd scripts (#311394) 2024-10-08 22:24:49 +03:00
Gavin John
ab5706b3a5
nixos/programs.immersed-vr: rename to programs.immersed 2024-10-08 11:38:55 -07:00
Felix Buehler
6290926fed nixos/freshrss: fix phpfpm.pool 2024-10-08 20:23:52 +02:00
K900
956f9243c0 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-08 21:15:13 +03:00
github-actions[bot]
4b355c2828
Merge staging-next into staging 2024-10-08 18:04:57 +00:00
Robert Schütz
b129e21ffd node-red: move from nodePackages 2024-10-08 08:29:56 -07:00
K900
1e4c95f332
kdePackages: Plasma 6.1.5 -> 6.2 (#341487) 2024-10-08 16:00:53 +03:00
Vladimír Čunát
a0c9222e11
Merge branch 'master' into staging-next 
(a bit older master for now, due to a conflict in dhcpcd service)
 2024-10-08 14:59:47 +02:00
K900
bf21badcac nixos/plasma6: adjust for portal config changes 2024-10-08 15:31:24 +03:00
github-actions[bot]
c4edebbe05
Merge staging-next into staging 2024-10-08 12:06:06 +00:00
Sandro Jäckel
a155c718d3
nixos/nginx: expand proxyResolveWhileRunning's description 2024-10-08 13:36:13 +02:00
Izorkin
c3e32a04ae
nixos/dhcpcd: allow jemalloc and mimalloc memory allocators 2024-10-08 14:12:27 +03:00
K900
a3ccb7f562 steam: decimate 2024-10-08 14:00:17 +03:00
Florian Klink
146e83d76b
dhcpcd: enable sandboxing options (#208780) 2024-10-08 13:09:11 +03:00
Norbert Melzer
8af94f7ca2
rustic: 0.8.1 -> 0.9.1 (#346508) 2024-10-08 12:07:39 +02:00
r-vdp
2b224f0e3c
nixos/systemd: allow using writeShellApplication for systemd unit scripts 2024-10-08 12:01:48 +02:00
e1mo
4f899ed44d
nixos/dokuwiki,nixos/wordpress,nixos/invoiceplane: Remove deprecated isCoercibleToString 
Close #292788
 2024-10-08 11:53:03 +02:00
Robert Hensing
a034fb50f7 Format 2024-10-08 11:27:01 +02:00
Robert Hensing
729225e355 treewide: lib.isInOldestRelease -> lib.oldestSupportedReleaseIsAtLeast 2024-10-08 11:14:24 +02:00
Robert Hensing
00355648f0 nixos/modules/profiles/macos-builder.nix: Restore as alias 2024-10-08 10:27:11 +02:00
Robert Hensing
4687820524 Document nixos/modules/profiles/nix-builder-vm.nix 2024-10-08 10:27:11 +02:00
Robert Hensing
1d76033154 Rename nixos/modules/profiles/{macos-builder.nix -> nix-builder-vm.nix} 2024-10-08 10:27:11 +02:00
Robert Hensing
2d11924c9a
macos-builder: readd Nix CLI for debugging (#347205) 2024-10-08 09:58:17 +02:00
Sebastián Zavala Villagómez
1c5727cdf7 nixos/localtimed: set time.timeZone to null to avoid silent overriding 
Currently if a timezone was selected explicitly, the service will
silently override the value, essentially ignoring what is meant to be a
a deliberate choice of option. This may cause confusion as to why the
option is not doing anything when this service is enabled, particularly
in more complex set-ups after some time.

This will simply make the choice deliberate from the user's part, either
by having to remove the option or lowering its priority as a recognition
that it may be ignored.

This change was inspired by the `services.tzupdate` module, which does
the same.

[1]: <https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/misc/tzupdate.nix#L24>
 2024-10-07 23:40:49 -04:00
Michael Hoang
10bad16926 macos-builder: readd Nix CLI for debugging 
See https://github.com/NixOS/nixpkgs/pull/268574#discussion_r1788966194
 2024-10-08 12:41:55 +11:00
Emily
85faae5e12 Merge staging-next into staging 2024-10-08 01:24:14 +01:00
Emily
df769e85f3 Merge master into staging-next 2024-10-08 01:23:55 +01:00
github-actions[bot]
5a96e99128
Merge staging-next into staging 2024-10-08 00:14:03 +00:00
Thomas Gerbet
16caf1231b cups-filters: remove support for legacy CUPS browsing and for LDAP 
Fixes CVE-2024-47176 and CVE-2024-47850. NixOS is not affected by these security issues by
default because we do not ship the default configuration file so it fallbacks to `BrowseRemoteProtocols dnssd`.

631/udp is removed from the open firewall ports, it was by the CUPS
browsing protocol.
 2024-10-07 22:28:12 +02:00
K900
0846895fc6 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-07 21:08:55 +03:00
Philip Taron
9f186c2632
srcOnly: Some improvements (#345198) 2024-10-07 10:20:51 -07:00
Yueh-Shun Li
58bfe74123 buildPython*: Deprecate and remove (buildPython* { ... }).override 
Deprecate (buildPythonPackage { ... }).override for Python packages in
favour of overridePythonAttrs.

This change does not affect the override interface of most Python
packages, as the override interface is provided by callPackage and
shadows the locally defined override attribute.
 2024-10-08 01:09:35 +08:00
Sandro
0538ecd092
rss-bridge: Remove pkg patch, adapt nixos service (#331295) 2024-10-07 18:57:22 +02:00
Peder Bergebakken Sundt
cd9a00431c
ec2: shellcheck fixes (#340489) 2024-10-07 15:39:38 +02:00
github-actions[bot]
a0b1d0baed
Merge staging-next into staging 2024-10-07 12:06:11 +00:00
github-actions[bot]
b33aedbb4d
Merge master into staging-next 2024-10-07 12:05:43 +00:00
Sandro
41dd374aa4
nixosTests: fixup tests/common/resolver to work with a local resolver (#346793) 2024-10-07 10:35:03 +02:00
Cosima Neidahl
a825406b15
lomiri.lomiri: Replace NIXOS_XKB_LAYOUTS envvar with file (#345288) 2024-10-07 09:33:40 +02:00
codgician
2a848b3732
nixos/libvirtd: add startDelay and shutdownTimeout option 2024-10-07 14:43:45 +08:00
Florian Klink
9c13bad7ca
nixos/tmpfiles: only setup nix-related tmpfiles if nix is enabled (#343784) 2024-10-07 09:11:46 +03:00
github-actions[bot]
6c9d940294
Merge staging-next into staging 2024-10-07 06:05:43 +00:00
github-actions[bot]
5fa43e7396
Merge master into staging-next 2024-10-07 06:05:15 +00:00
James Atkins
68483a7bad nixos/networkd: test systemd-creds in WireGuard 2024-10-06 22:27:21 -05:00
Emily
85c36fecfc
xen: nuke, move to by-name. (#345192) 2024-10-07 03:48:37 +01:00
Emily
1a53b400e5
mongodb: mongodb-5_0 -> mongodb-7_0; mongodb-5_0: drop; unifi: unifi7 -> unifi8; unifi{7,-video}: drop (#345625) 2024-10-07 01:38:54 +01:00
github-actions[bot]
7306ea41bd
Merge staging-next into staging 2024-10-07 00:15:20 +00:00
github-actions[bot]
ab0e8e5be7
Merge master into staging-next 2024-10-07 00:14:55 +00:00
Will Fancher
aad455b434
nixos/usbStorage: apply upstream (#284334) 2024-10-06 19:39:07 -04:00
James Atkins
42f5ecde9d nixos/networkd: support systemd-creds in WireGuard 
systemd 256 supports network.wireguard.* credentials (https://github.com/systemd/systemd/pull/30826).
Check whether PrivateKey / PresharedKey starts with an @, if so it is a credential.
 2024-10-06 18:38:40 -05:00
Emily
086676017e mongodb: mongodb-5_0 -> mongodb-7_0 2024-10-06 22:47:42 +01:00
Emily
b0395df085 unifi7: drop 2024-10-06 22:47:41 +01:00
Will Fancher
c00fc8bd1a
nixos/unl0kr: add settings to the unl0kr module (#339787) 2024-10-06 17:44:55 -04:00
Izorkin
611b1d53b7
dhcpcd: enable sandboxing options 2024-10-06 23:46:18 +03:00
Fernando Rodrigues
64cc613a0f
release-notes: remove mentions to xen-slim or 4.18 
They were removed during the great Xen deletion.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2024-10-06 20:24:30 +00:00
Fernando Rodrigues
251dc99c70
nixos/xen: simplify package options 
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2024-10-06 20:24:29 +00:00
Fernando Rodrigues
0eaec9f2f3
xen: drop 4.17 
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2024-10-06 15:55:39 -03:00
Kevin Cox
fb9b5c806b
mautrix-meta: drop maintainership Rutherther (#346916) 2024-10-06 14:45:10 -04:00
Kevin Cox
b8fc5855fb
nixos.mautrix-meta: Update config to 0.4 format (#343606) 2024-10-06 14:44:41 -04:00
Rutherther
379ca4e67f mautrix-meta: drop maintainership Rutherther 2024-10-06 20:33:42 +02:00
K900
84fce7e588 Merge remote-tracking branch 'origin/staging-next' into staging 2024-10-06 21:11:05 +03:00
Bjørn Forsman
40bfbe3226 nixos/scrutiny: wait until ready 
Add postStart code that waits until Scrutiny has opened its port. This
fixes a race condition against scrutiny-collector, which can start (and
fail) before scrutiny is ready.
 2024-10-06 20:07:45 +02:00
github-actions[bot]
7ab01e096c
Merge master into staging-next 2024-10-06 18:03:58 +00:00
Michele Guerini Rocco
7eef63ed98
wpa_supplicant: add patch to fix ext_passwords_file bug (#342792) 2024-10-06 19:15:19 +02:00
Michele Guerini Rocco
463f8b8ed4
nixos/tests/dnsdist: fix dnscrypt test (#346843) 2024-10-06 19:12:07 +02:00
Arthur Gautier
a32dbada18 nixosTests: fixup tests/common/resolver to work with a local resolver 
When 757a455dde refactored the zones to go
from a list to a map, this broke the tests/common/resolver helper.

reproduction:
```
let
  pkgs = import <nixpkgs> {};

  testConfig = {
    name = "resolver-repro";
    nodes = {
      acme = { nodes, ... }: {
        imports = [ (pkgs.path + /nixos/tests/common/acme/server) ];
      };
    };

    testScript = ''
    '';
  };
in pkgs.nixosTest testConfig
```
 2024-10-06 15:18:45 +00:00
Maximilian Bosch
5ee80e8120
Merge: nixos/nginx: remove shortand from defaultText (#346767) 2024-10-06 17:13:51 +02:00
Emily
92663c9721
ffmpeg_7: 7.0.2 -> 7.1; xeve: 0.5.0 -> 0.5.1 (#346552) 2024-10-06 14:23:19 +01:00
DontEatOreo
7b69d089ca
nixos/gpu-screen-recorder: remove cap_sys_nice 
Reason: https://github.com/NixOS/nixpkgs/pull/339874#discussion_r1788687308

Co-authored-by: dec05eba <dec05eba@protonmail.com>
 2024-10-06 15:27:45 +03:00
DontEatOreo
8d564190a9
nixos/gpu-screen-recorder: format with nixfmt-rfc-style 2024-10-06 15:27:45 +03:00
Sandro
0cc879fa99
nixos/tests/non-default-filesystems: fix btrfs mount regex (#340702) 2024-10-06 14:08:21 +02:00
Sandro
85100fcc51
nixos/tests/tmate-ssh-server: fix test (#342318) 2024-10-06 14:07:14 +02:00
Sandro
020c26717f
nixos/quorum: fix geth args, fix test (#341181) 2024-10-06 14:06:31 +02:00
github-actions[bot]
f4d64b5b37
Merge staging-next into staging 2024-10-06 12:05:45 +00:00
Sandro
c0ad8503fa
nixos/tests/pgjwt: fix test (#341150) 2024-10-06 14:05:36 +02:00
github-actions[bot]
5c3e5ec59f
Merge master into staging-next 2024-10-06 12:05:15 +00:00
Sandro
00461d0fcb
nixos/nginx: fix double slash in example (#346774) 2024-10-06 13:58:54 +02:00
rnhmjoj
cf614ee789
nixos/tests/dnsdist: fix dnscrypt test 2024-10-06 11:34:57 +02:00
Jonas Heinrich
c566a36839
feishin: 0.9.0 -> 0.10.1 (#344865) 2024-10-06 10:27:49 +02:00
github-actions[bot]
bbea34947c
Merge staging-next into staging 2024-10-06 06:05:02 +00:00
github-actions[bot]
7dc1e4239b
Merge master into staging-next 2024-10-06 06:04:33 +00:00
Sandro Jäckel
dd7ef21afc
nixos/nginx: fix double slash in example 2024-10-06 03:45:51 +02:00
Aaron Andersen
38a589083e
nixos/userborn: fix username typo 2024-10-05 21:40:09 -04:00
Sandro
b64b2d25c2
nixos/nginx: remove shortand from defaultText 2024-10-06 03:19:07 +02:00
Peder Bergebakken Sundt
90c1e58d22
zammad: 6.2.0 -> 6.3.1 (#345456) 2024-10-06 03:00:44 +02:00
github-actions[bot]
480db5cf27
Merge staging-next into staging 2024-10-06 00:15:59 +00:00
github-actions[bot]
ff851b037d
Merge master into staging-next 2024-10-06 00:15:37 +00:00
Nick Cao
5f821de20c
keycloak: 25.0.6 -> 26.0.0 (#346439) 2024-10-05 18:14:45 -04:00
Felix Singer
0f599d1e68 nixos/redmine: Apply initial hardening using the systemd unit 
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.

In my tests, Redmine only bound to an IPv4 address and Unix socket,
which is why I restricted the address families to these both.

The command `systemd-analyze security redmine.service` reports an
overall exposure level of 2.9 with this patch.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
 2024-10-05 22:13:37 +02:00
h7x4
25f2846361
nixos/bind: set type of zones.*.extraConfig to lines (#346424) 2024-10-05 21:07:26 +02:00
h7x4
cc76cf58f8
nixos/uinput: set a static GID for the uinput group (#333762) 2024-10-05 20:59:16 +02:00
Robert Schütz
506df4e38e nodePackages.npm: drop 2024-10-05 11:23:49 -07:00
github-actions[bot]
5c718e11ea
Merge staging-next into staging 2024-10-05 18:04:38 +00:00
github-actions[bot]
653bcc0ea9
Merge master into staging-next 2024-10-05 18:04:03 +00:00
Will Fancher
9f8eb445fa
nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1 (#346547) 2024-10-05 13:44:39 -04:00
Jared Baur
c2621cb78a
nixosTests.nix-upgrade: fix failing test 
The test currently fails because we attempt to switch to a NixOS
configuration that is _very_ different from the one we are switching
from (e.g. the new configuration has an entirely empty /etc/fstab,
causing switch-to-configuration to want to start unmounting all
filesystems defined in the old configuration).
 2024-10-05 09:51:28 -07:00
Jared Baur
c39781c558
nixos/activation-script: only setup nix tmpfiles if nix is enabled 
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
 2024-10-05 09:03:19 -07:00
Jared Baur
3d6e7d7b56
nixos/tmpfiles: only setup nix tmpfiles when nix is used 
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
 2024-10-05 09:01:55 -07:00
Nick Cao
6069dde181
nixos/keycloak: make initialAdminPassword optional 2024-10-05 08:37:41 -04:00
github-actions[bot]
0a3656483e
Merge staging-next into staging 2024-10-05 12:05:57 +00:00
github-actions[bot]
94cb2166da
Merge master into staging-next 2024-10-05 12:05:30 +00:00
r-vdp
94532d1530 nixos/syncthing: remove syncthing-resume service 
It was removed upstream in https://github.com/syncthing/syncthing/pull/9611
and the stub generated by nixos now prints an error in the logs due to
it not having a ExecStart line.
 2024-10-05 12:55:39 +02:00
r-vdp
70119aa60f
nixis/uinput: use a fixed GID for the uinput group 2024-10-05 10:21:26 +02:00
r-vdp
469f505813
nixos/{uinput,ids}: format 2024-10-05 10:21:01 +02:00
github-actions[bot]
4005eeea1f
Merge staging-next into staging 2024-10-05 06:04:51 +00:00
github-actions[bot]
13400dc754
Merge master into staging-next 2024-10-05 06:04:21 +00:00
Brendan Taylor
cb31bd4755 nixos/redis: add option services.redis.servers.*.group 
previously if you set the "user" option and did not create a group
account with the same name the module would create a service that would
fail to start.

with this change:
- the module is more explicit about this behaviour
- you can configure the group directly, so that you're not forced to a
  particular user/group structure
- you can read the group name used by the redis service. this is useful
  for giving other services permission to use the redis socket.
 2024-10-04 21:12:38 -06:00
Nick Cao
937d3964c9
nixos/keycloak: raise memory size in tests to 2047M 2024-10-04 21:43:19 -04:00
Bobby Rong
f594475564
nixos/xfce: Fix ambiguous with (#346528) 2024-10-05 09:03:18 +08:00
Sandro Jäckel
9b996f7396
nixos/xfce: Fix ambiguous with 
Pull request 345352 introduces `pkgs.exo`, don't pick up that package.
 2024-10-05 08:43:24 +08:00
Nick Cao
05caac302f
nixos/keycloak: fixup login test after ui change 2024-10-04 20:39:55 -04:00
Emily
7ad7e69aa8 ffmpeg_7: 7.0.2 -> 7.1 2024-10-05 01:34:12 +01:00
Nick Cao
0cdc3e2a0b
nixos/keycloak: drop removed proxy option 
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#proxy-option-removed
 2024-10-04 20:20:46 -04:00
github-actions[bot]
32379e1a0b
Merge staging-next into staging 2024-10-05 00:14:22 +00:00
github-actions[bot]
e9c8665026
Merge master into staging-next 2024-10-05 00:14:01 +00:00
Nick Cao
16cd47369f
nixos/keycloak: KEYCLOAK_ADMIN{,PASSWORD} -> KC_BOOTSTRAP_ADMIN_{USERNAME,PASSWORD} 
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#admin-bootstrapping-and-recovery
 2024-10-04 20:08:06 -04:00
Nick Cao
d2ec2d3c29
nixos/keycloak: link $out/lib to KC_HOME_DIR to fix loading optimized app image 
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#additional-validations-on-the-optimized-startup-option
 2024-10-04 20:06:08 -04:00
Will Fancher
3e90d5a2bc nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1 2024-10-04 19:50:46 -04:00
jade
f0ce0e71c3
Remove the revCount attribute from the generated flake registry (#316225) 2024-10-04 15:25:55 -07:00
Aaron Andersen
913a23b5e2
nixos/redmine: Allow specifying an IP address Redmine should bind to (#345617) 2024-10-04 18:18:45 -04:00
h7x4
c38aa540ba
nixos/networking: fix macvlan service description (#346507) 2024-10-04 23:20:09 +02:00
h7x4
639922811e
apfsprogs: unstable-2023-11-30 -> 0-unstable-2024-09-27 (#346422) 2024-10-04 23:05:15 +02:00
David Knaack
81f3c68b92 rustic: 0.8.1 -> 0.9.1 2024-10-04 22:25:08 +02:00
Anthony Roussel
17fd7e3eea
nixos/gns3-server: fix ubridge support (#303442) 2024-10-04 22:16:13 +02:00
Bjørn Forsman
20a3012813 nixos/networking: improve vlan service description 
VLAN is an abbreviation, so let's not write Vlan.
 2024-10-04 22:09:01 +02:00
Bjørn Forsman
e8da2c8981 nixos/networking: fix macvlan service description 
Fix copy pasta from the vlan service: Vlan -> MACVLAN
 2024-10-04 22:08:40 +02:00
Artturin
f6d0724717 xdg-desktop-portal: Fix installedTests 2024-10-04 22:06:22 +03:00
github-actions[bot]
f197602956
Merge staging-next into staging 2024-10-04 18:05:00 +00:00
github-actions[bot]
fb53f9f64b
Merge master into staging-next 2024-10-04 18:04:31 +00:00
Peder Bergebakken Sundt
986e6d4e3d
tsm-client: 8.1.23.0 -> 8.1.24.0 (#345039) 2024-10-04 18:25:37 +02:00
Ramses
2d809488f7
nixos/containers: Fix shellcheck issues (#346131) 2024-10-04 18:19:19 +02:00