Commit Graph

15336 Commits

Author SHA1 Message Date
Artturi
b978bf0f0f
Merge pull request #220570 from Artturin/fixlints1 2023-03-14 02:15:55 +02:00
Marcus Ramberg
f834dfad8f nimdow: Add nixos windowmanager option 2023-03-13 11:37:32 -05:00
Elis Hirwing
ce76a6838c
Merge pull request #203487 from jocelynthode/init-readarr
readarr: init at 0.1.4.1596
2023-03-13 06:56:35 +01:00
Lassulus
47233b27c9
Merge pull request #167319 from schnusch/cgit 2023-03-13 09:51:08 +07:00
Ben Wolsieffer
b92dae961c nixos/chrony: allow @chown syscall set
The module was allowing specific chown syscalls, which is brittle because
there are several and different ones are used by glibc on different
architectures. For example, fchownat was already added to the allowlist for
aarch64, while on armv6l chrony crashes because chown32 is not in the
allowlist.

systemd provides the @chown syscall set, which includes all the chown
syscalls and avoids this brittleness. I believe the syscalls would all be
equivalent from an attacker's perspective, so there is unlikely to be any
security impact.
2023-03-12 18:10:56 -05:00
Jocelyn Thode
e7f54823b1
readarr: init at 0.1.4.1596 2023-03-12 20:54:23 +01:00
Janne Heß
6798068e84
Merge pull request #220555 from lilyinstarlight/feature/fwupd-uefi-capsule
nixos/fwupd: add settings option for uefi_capsule.conf
2023-03-11 20:04:32 +01:00
Jonas Heinrich
161a1ca129
Merge pull request #191974 from tu-maurice/btrbk-doas
btrbk: Use sudo or doas based on configuration
2023-03-11 16:10:50 +01:00
nachoslover813260
4b0bc9ea72 nixos/plasma5: add ark as an optional package instead 2023-03-11 21:29:24 +08:00
nachoslover813260
9e8f51fc6c Adding Ark as a file archiver
Since the default plasma desktop already got dolphin-plugins adding ark for archiving would make plasma desktop more complete as well
2023-03-11 21:29:24 +08:00
Mario Rodas
2ce9b9842b
Merge pull request #219355 from tomfitzhenry/phosh-0.25.1
phosh: 0.23 -> 0.25.1
2023-03-10 21:03:33 -05:00
Artturin
cab4a24c34 treewide: fix lints
Arg to lib.optional is a list

build time tool in buildInputs
2023-03-11 00:55:17 +02:00
Lily Foster
6e6d31f4bc
nixos/fwupd: add settings option for uefi_capsule.conf 2023-03-10 15:25:41 -05:00
genesis
cab32f0f86 nixos/jellyseerr: init 2023-03-10 16:18:00 +01:00
Yureka
7efee351ec
Merge branch 'gitlab-pages' of github.com:talyz/nixpkgs into HEAD 2023-03-10 14:36:25 +01:00
Sandro
bca9ab3d26
Merge pull request #205060 from jslight90/patch-8
nixos/prometheus: Add new relabel_configs actions
2023-03-10 11:19:31 +01:00
Stanisław Pitucha
5496585eb8
Merge pull request #186076 from viraptor/gemstash-service
nixos/gemstash: init module
2023-03-10 14:21:53 +11:00
Rick van Schijndel
8d8f5ede91
Merge pull request #216451 from Mindavi/hydra/systemd-target
nixos/hydra: wait for network-online before evaluator start
2023-03-09 20:53:21 +01:00
Domen Kožar
6a231a6eb7
Merge pull request #197613 from shyim/add-coder
coder: fix web frontend building
2023-03-09 12:04:16 +04:00
Jonas Heinrich
9f10a2e82a
Merge pull request #218633 from onny/networkd-dispatcher-rules
nixos/networkd-dispatcher: add rules option
2023-03-08 20:41:06 +01:00
K900
23b0152ffb
Merge pull request #218530 from K900/murmur-dbus
nixos/murmur: expose dbus
2023-03-08 18:35:56 +03:00
K900
d8d8b55e7d nixos/murmur: expose dbus 2023-03-08 18:03:51 +03:00
Jonas Heinrich
26e14e57af nixos/networkd-dispatcher: add rules option 2023-03-08 10:20:47 +01:00
Rick van Schijndel
60446dda1f nixos/hydra: wait for network-online before evaluator start
This prevents issues I'm seeing with the hydra I'm running on my laptop.
Every time I reboot it I see eval errors like this:

```
error fetching latest change from git repo at `https://github.com/nixos/nixpkgs.git':
fatal: unable to access 'https://github.com/nixos/nixpkgs.git/': Could not resolve host: github.com
```

This is because the evaluator already starts before the network is
actually online. It should wait until the network is fully online before
starting evaluation to prevent evaluation errors like above.
2023-03-07 21:58:23 +01:00
Izorkin
5eb5d881a4
nixos/nginx: add defaultMimeTypes option 2023-03-07 19:37:18 +03:00
Stanisław Pitucha
70073985ae nixos/gemstash: init module 2023-03-07 15:56:56 +11:00
Ilan Joselevich
edff57cff4
Merge pull request #218455 from veehaitch/gh-runner-builddotnet
github-runner: switch to `buildDotnetModule`
2023-03-06 19:11:06 +02:00
Naïm Favier
6082d5bd0a
Merge pull request #219549 from SEIAROTg/master
nixos/wireguard: fix mtu after switching netns.
2023-03-05 22:56:29 +01:00
Ryan Lahfa
c91b85416b
Merge pull request #216015 from r-ryantm/auto-update/dolibarr
dolibarr: 16.0.3 -> 16.0.4
2023-03-05 21:19:46 +01:00
SEIAROTg
5a4dc2128e
nixos/wireguard: fix mtu after switching netns.
mtu is set after switching netns and thus the new netns should be used.
2023-03-04 18:51:12 +00:00
Naïm Favier
45e44c56f1
Merge pull request #217342 from pennae/nrd-html-manual
nixos-render-docs: add manual html renderer, use it for the nixos manual
2023-03-04 12:58:38 +01:00
Ryan Lahfa
fd09c1bdc5
Merge pull request #214759 from Tom-Hubrecht/borgmatic
nixos/borgmatic: Allow defining multiple configurations
2023-03-04 11:38:39 +01:00
Raito Bezarius
51b00a5e89 nixos/web-apps/dolibarr: lib.optionalAttr -> lib.optionalAttrs typo 2023-03-04 11:31:28 +01:00
K900
18f85de76d nixos/firewall: assert that the kernel supports conntrack helper auto-loading 2023-03-04 10:53:47 +03:00
Sandro
2665f5e379
Merge pull request #178447 from Francesco149/dendrite-prestart 2023-03-03 18:45:09 +01:00
Tom Fitzhenry
2455dfab0d phosh: 0.23.0 -> 0.25.1 2023-03-04 00:38:29 +11:00
Maximilian Bosch
72f45f225f
Merge pull request #218269 from theHedgehog0/gitea-module-getexe
nixos/gitea: Move to lib.getExe
2023-03-02 19:46:45 +01:00
Pyrox
98dd7f5307
nixos/gitea: Move to lib.getExe
This makes it so that alternative packages, such as `pkgs.forgejo` are
able to be used instead of the default `pkgs.gitea`.

Also adds myself as a maintainer of the module.

The varible `gitea`, which was used instead of `cfg.package`, has been
replaced with the variable `exe`, and is instead the value of the main
executable, as gotten from `lib.getExe`. `cfg.package` is used when this
value is not appropriate.
2023-03-02 12:16:30 -05:00
Maximilian Bosch
f8bbedfcac
Merge pull request #219073 from IndeedNotJames/gitea-gpg
nixos/gitea: fix commit signing (`gpg`) core dump, add nixos test
2023-03-02 17:24:02 +01:00
Arian van Putten
17ca3dd2a6
Merge pull request #217852 from justinas/teleport-12
teleport: 11.3.4 -> 12.0.2, reintroduce teleport_11
2023-03-02 11:18:24 +01:00
Luke Granger-Brown
b3c09089e4
Merge pull request #215750 from puppe/fix-paperless
nixos/paperless: download NLTK data
2023-03-02 10:00:46 +00:00
Yureka
55da71c10e
nixos/nftables: add checkRuleset option (#216531)
* nixos/nftables: add checkRuleset option

* lkl: 2022-05-18 -> 2023-01-27
2023-03-02 10:28:01 +01:00
Bobby Rong
3374c1ab48
Merge pull request #219004 from bobby285271/fix/pantheon-add-mutter-udev
nixos/pantheon: add mutter to services.udev.packages
2023-03-02 09:55:20 +08:00
IndeedNotJames
93c1d370db
nixos/gitea: fix commit signing (gpg) core dump
Gitea spawns `gpg` processes for commit signing related actions.
Those `gpg` processes need `mlock` (probably to prevent secrets
in the memory to swap).
Blocking it (as part of the `@memlock` preset) causes any
commit signing related actions to error out as http/500
2023-03-01 23:44:21 +01:00
K900
1e00e82f9d
Merge pull request #218437 from K900/x11-default-modesetting
nixos/x11: default to the modesetting driver
2023-03-01 17:51:04 +03:00
Bobby Rong
1f9308f005
nixos/pantheon: add mutter to services.udev.packages
For ./lib/udev/rules.d/61-mutter.rules

Same as d1eeb64. This is forgotten in PR 130380.
2023-03-01 10:00:53 +08:00
Justinas Stankevicius
31b5597cbd nixos/teleport: add "package" option 2023-02-28 13:22:50 +02:00
Luke Granger-Brown
997d8d5870
Merge pull request #218618 from dali99/headscale-openid
nixos/headscale: update oidc options
2023-02-28 00:21:04 +00:00
Stefan Frijters
2af041ab44 nixos/gitlab-runner: do not pull in Docker if gitlab-runner-clear-docker-cache is disabled
Only create the service if the option is enabled and if any docker executors exist.
2023-02-27 22:24:14 +01:00
Luke Granger-Brown
f43347d8a3
Merge pull request #214346 from SFrijters/postfix-ipv4
nixos/postfix: restrict inet_protocols to ipv4 when ipv6 is disabled
2023-02-27 18:24:53 +00:00