Gary Guo
c70614c0a4
nixos/unbound: fix wrong syscall filter
...
This changes the syscall filter to match that of upstream. Note that
SystemCallFilter=~foo bar
is completely different from
SystemCallFilter=~foo
SystemCallFilter=bar
The former one means that foo and bar are forbidden, and the latter
one means foo is forbidden and bar is granted!
2023-11-05 20:32:51 +00:00
Aaron Andersen
a707831d98
Merge pull request #256738 from toastal/prosody-libevent-deprecated
...
prosody: remove deprecated libevent
2023-11-05 08:36:25 -05:00
K900
46bc9e79a9
Merge pull request #259765 from 70m6/bugfix/bitcoind-enable
...
bugfix/bitcoind-enable
2023-10-31 17:35:10 +03:00
Tom Barrett
a4b31637b5
bitcoind: only use enabled services
2023-10-31 15:29:17 +01:00
Will Fancher
cca22054c0
systemd-stage-1: Add assertions for unsupported options.
2023-10-30 12:15:58 +01:00
Michele Guerini Rocco
800965ce8c
Merge pull request #245855 from rnhmjoj/pr-sslh
...
nixos/sslh: update and refactor for RFC42
2023-10-29 23:19:38 +01:00
Rémy Grünblatt
c9e3cc43c7
nixos: fix iproute2 invocations ( #263976 )
...
When using iproute2's ip binary, you can omit the dev parameter, e.g. ip link set up eth0 instead of ip link set up dev eth0.
This breaks if for some reason your device is named e.g. he, hel, … because it is interpreted as ip link set up help.
I just encountered this bug using networking.bridges trying to create an interface named he.
I used a grep on nixpkgs to try to find iproute2 invocations using variables without the dev keyword, and found a few, and fixed them by providing the dev keyword.
I merely fixed what I found, but the use of abbreviated commands makes it a bit hard to be sure everything has been found (e.g. ip l set … up instead of ip link set … up).
2023-10-29 18:27:16 +01:00
rnhmjoj
7ecac99da7
sslh: 1.22c -> 2.0.0
2023-10-29 18:13:37 +01:00
rnhmjoj
3728338d40
nixos/sslh: refactor for RFC42
2023-10-29 18:13:37 +01:00
Aaron Andersen
3b848391b6
Merge pull request #227442 from christoph-heiss/openssh/allowusers
...
openssh: add {Allow,Deny}{Users,Groups} settings
2023-10-29 08:20:22 -04:00
Weijia Wang
eaf8053ad5
Merge pull request #264036 from wegank/unifi-hotfix
...
nixos/unifi: fix use of optionalString
2023-10-29 00:33:19 +02:00
Weijia Wang
88e82879f4
nixos/unifi: fix use of optionalString
2023-10-28 23:01:44 +02:00
Christoph Heiss
cc8ba21629
nixos/sshd: add comment explaining different list option types
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-10-28 20:13:26 +02:00
Linus Heckemann
8670794565
Merge pull request #263203 from nikstur/replace-activation
...
Replace simple activationScripts
2023-10-28 10:17:15 +02:00
tomf
d18f272a39
Merge pull request #262408 from evandeaubl/master
...
nixos/tailscale: add openFirewall option
2023-10-28 05:19:41 +11:00
nikstur
b16365b393
nixos/iscsi: replace activationScript
...
Move the functionality into preStart of the systemd service.
2023-10-26 01:51:07 +02:00
nikstur
6987ff3a4f
nixos/spiped: replace activationScript via tmpfiles
2023-10-26 01:44:21 +02:00
nikstur
6c800013bf
nixos/strongswan-swanctl: replace activationScripts via tmpfiles
2023-10-26 01:44:20 +02:00
Patrick Jackson
4a938cc665
treewide: rename handle/GH account patricksjackson to arcuru
2023-10-25 15:42:48 -07:00
chayleaf
413011ddf4
kea: use separate runtime directories for each service
...
Kea may clean the runtime directory when starting (or maybe systemd does
it). I ran into this issue when restarting Kea after changing its
configuration, so I think the fact it normally doesn't clean it is a
race condition (it's cleaned on service start, and normally all Kea
services start at roughly the same time).
2023-10-26 02:51:43 +07:00
digital
a6253e6b12
nixos/syncthing: support syncthing gui and api over unix sockets ( #247343 )
2023-10-25 09:18:42 +02:00
Janik
e46b352ac4
Merge pull request #231065 from yu-re-ka/fnm-advanced-module
...
nixos/fastnetmon-advanced: init
2023-10-24 21:43:26 +02:00
Robin Gloster
e5d552f5b9
treewide: update globin's maintainership
2023-10-24 13:09:45 +02:00
Yureka
bf5f01ee52
nixos/fastnetmon-advanced: init
2023-10-23 22:51:19 +02:00
Lorenz Leutgeb
cc6c2d32f2
rosenpass: refactor, add module and test ( #254813 )
2023-10-23 19:29:30 +02:00
Ryan Lahfa
0b0440e028
Merge pull request #254647 from Janik-Haag/networkManagerEnsureProfiles
...
nixos/networkmanager: add declarative profiles
2023-10-21 15:06:41 +01:00
Evan Deaubl
9407ed628d
nixos/tailscale: add openFirewall option
2023-10-20 15:57:40 -07:00
Janik H
a316aa58d9
nixos/networkmanager: add declarative profiles
2023-10-21 00:20:36 +02:00
Bjørn Forsman
5c78e5b4aa
nixos/ddclient: simplify with lib.getExe
2023-10-20 23:49:18 +02:00
Bjørn Forsman
8a8ec36615
Revert "ddclient: remove package and module on upstream maintainer request"
...
This reverts commit d35df28f65
.
Upstream ddclient has new maintainers and made a new release (update in
next commit(s)).
2023-10-20 23:49:18 +02:00
Bjørn Forsman
142074c2a8
nixos: fix bad mkEnableOption descriptions
...
Fix descriptions that don't account for (1) the "Whether to enable"
prefix or (2) the automatically added trailing dot.
2023-10-20 16:22:40 +01:00
Thiago Kenji Okada
383389d086
Merge pull request #254582 from oluceps/dae-fix-overr
...
nixos/dae: fix override existed config issue
2023-10-19 18:34:30 +01:00
Christoph Heiss
a077b7fadb
openssh: add {Allow,Deny}{Users,Groups} settings
...
`settingsFormat` unfortunaly needed a bit of a rework, see also
discussion in #227442 .
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-10-19 18:30:51 +02:00
Bjørn Forsman
4164383dd4
nixos/deconz: init
...
Add a NixOS module for the deCONZ Zigbee gateway service.
2023-10-16 20:49:41 +02:00
Vojtěch Káně
b8624bd312
nixos/firefox-syncserver: fix and update the docs and options descriptions
2023-10-15 13:33:40 +02:00
toastal
ccb0f87129
prosody: use default network, remove libevent, config deprecated
...
`use_libevent` config option has been deprecated as there are 3
networking back-ends (see: https://prosody.im/doc/network_backend ). It
is probably unwise to stray from the defaults (epoll).
Review instructed to flat-out remove it versus previously making it opt-in.
2023-10-15 10:02:50 +07:00
Doron Behar
79c78d68c6
nixos/syncthing: get API key for every curl request
...
Fixes #260262 .
2023-10-15 02:04:52 +03:00
Weijia Wang
c3a3b38cb9
Merge pull request #258813 from SuperSandro2000/drop-searx
...
searx: drop
2023-10-12 19:55:39 +02:00
Aaron Andersen
bae7820f02
Merge pull request #259425 from aanderse/nixos/openssh-authorized-principals
...
nixos/openssh: add support for authorized principals
2023-10-12 10:30:52 -04:00
Sandro Jäckel
e793d18455
nixos/searx: little makeover
2023-10-11 23:48:29 +02:00
Sandro Jäckel
ad1f57095f
searx: drop
...
searx has been removed as it is unmaintained. Please switch to searxng.
2023-10-11 23:48:28 +02:00
Doron Behar
6843abd5fb
Merge pull request #231152 from tcheronneau/nixos.tinyproxy
...
Adding tinyproxy service to NixOS
2023-10-09 23:53:58 +03:00
Anderson Torres
52058530ce
nixos/connman: refactor
2023-10-09 17:49:02 -03:00
Vladimír Zahradník
9053490648
nixos/netclient: init
2023-10-09 15:58:05 +02:00
Doron Behar
50a077328a
Merge pull request #259259 from Lassulus/syncthing_stale
...
nixos/syncthing: match stale ids by subtracting in jq
2023-10-08 12:53:34 +03:00
Vladimír Čunát
2ec92384d7
Merge #258361 : nixos/knot: compatibility with 23.05 config
2023-10-08 10:16:06 +02:00
Vladimír Čunát
6b66e2fc9c
nixos/knot: compatibility with 23.05 config
...
- run conf-check iff keyFiles == [] (like in 23.05; this was my bug)
- support extraConfig + keyFiles
- but warning will still be shown if extraConfig is used,
and it might be slightly confusing
2023-10-08 10:14:54 +02:00
Lin Jian
4a5f3d5a50
Merge pull request #259228 from nbdd0121/patch-1
...
nixos/dnsmasq: allow custom package
2023-10-07 21:04:22 +08:00
Gary Guo
7094f1ec0e
nixos/dnsmasq: allow custom package
...
Allow a custom package to be used for dnsmasq service.
2023-10-07 11:53:25 +01:00
Lin Jian
272dba1e31
Merge pull request #257415 from ehmry/yggdrasil
...
nixos/yggdrasil: add extraArgs option
2023-10-07 02:05:36 +08:00