dev/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
498,723 Commits 3 Branches 0 Tags 4.3 GiB
d2483a8cc7
Commit Graph

16033 Commits

Author SHA1 Message Date
Aaron Andersen
d098eec2da nixos/vmalert: init 2023-05-30 07:41:00 -04:00
Jonas Heinrich
63f73b3295
nixos/maddy: change secrets option to accept a list of paths 2023-05-30 12:41:07 +08:00
3JlOy_PYCCKUI
22c8251d7f nixos/dk: init 2023-05-29 19:05:55 +00:00
Julien Malka
9631553153 Revert "nixos/ntfy-sh: add defaults, use dynamic user" 
This reverts commit 3dcca62a5e.
 2023-05-29 11:11:32 -04:00
Weijia Wang
4387329d8f
Merge pull request #234729 from tie/pufferpanel-doc-fhsenv 
nixos/pufferpanel: buildFHSUserEnv -> buildFHSEnv
 2023-05-29 10:56:11 +03:00
Ivan Trubach
0143b16935 nixos/pufferpanel: buildFHSUserEnv -> buildFHSEnv 
The pufferpanel module (#225274) was merged shortly after the tree-wide
rename f63a12f296 (#225748), so the use of
deperecated buildFHSUserEnv in the docs slipped through review 😅
 2023-05-29 07:08:19 +03:00
happysalada
3dcca62a5e nixos/ntfy-sh: add defaults, use dynamic user 2023-05-28 21:17:14 -04:00
Lin Jian
0ae9df6c5e
nixos/murmur: make it be after network.target again 
network.target was changed to network-online.target in this PR[1] to
workaround an issue[2].

The murmur version in Nixpkgs has fixed that issue[2].

[1]: https://github.com/NixOS/nixpkgs/pull/42860
[2]: https://github.com/mumble-voip/mumble/issues/1629
 2023-05-28 21:03:40 +08:00
Bobby Rong
838dad5de9
Merge pull request #234231 from bobby285271/add/xdg-desktop-portal-xapp 
xdg-desktop-portal-xapp: init at 1.0.0
 2023-05-28 10:52:30 +08:00
Thomas Gerbet
a24848c470 nixos/etcd: allow to choose the package 2023-05-28 08:04:43 +10:00
Victor Freire
77520d39ce nixos/legit: init 2023-05-27 16:20:05 +00:00
nicoo
942f0a01fe nixos/below: Explicitely mark descriptions as using Markdown 2023-05-27 11:52:07 +00:00
nicoo
405e1f1e54 nixos/below: Add service module 2023-05-27 11:52:07 +00:00
Nick Cao
cf58ff13a3
Merge pull request #234254 from kevincox/mautrix-facebook-appservice-id 
nixos.mautrix-facebook: Fix appservice name
 2023-05-26 19:48:00 -06:00
Raito Bezarius
69bb0f94de nixos/nginx: first-class PROXY protocol support 
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.

Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.

It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.

An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.

Finally, the tests covers:

- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
  (sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;

In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.

For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
 2023-05-26 19:48:26 +02:00
Kevin Cox
5242aea64f
nixos.mautrix-facebook: Fix appservice name 
It appears that newer mautrix-facebook versions default to the appservice name `facebook`. This was breaking our registration and causing mautrix-facebook to fail to start. This changes the name back and makes the registration generated match whatever the setting in the app is.
 2023-05-26 12:39:37 -04:00
Bobby Rong
36abd7c9f8
nixos/cinnamon: enable portals by default 2023-05-26 23:53:15 +08:00
Pol Dellaiera
2c95ebadf3
nixos/code-server: add more command line options 2023-05-26 09:51:33 +02:00
Yaya
f63f781063 nixos/sftpgo: init 
A fully featured and highly configurable SFTP server with optional
HTTP/S, FTP/S and WebDAV support.

https://github.com/drakkan/sftpgo
 2023-05-25 22:46:15 +02:00
Sandro
ef2a17c946
Merge pull request #232339 from bl1nk/bl1nk/thelounge-package-option 
nixos/thelounge: add package option
 2023-05-25 22:04:22 +02:00
Sandro
1b40315504
Merge pull request #233092 from midchildan/chore/mirakurun/node18 2023-05-25 14:47:50 +02:00
nyanotech
3aad03a464 nixos/sshd: detect duplicate config keys 2023-05-25 00:01:03 +02:00
midchildan
c3346f87c4
mirakurun: use node 18 
Relates to #229910.
 2023-05-25 03:44:13 +09:00
Maximilian Bosch
40dcc3375c
Merge pull request #232837 from emilylange/nixos/synapse 
nixos/synapse: allow omitting `trusted_key_servers[].verify_keys`
 2023-05-24 16:28:03 +02:00
Tomas Kala
37c95bc868
nixos/self-deploy: set after to requires, type to 
... oneshot, remove wantedBy
 2023-05-24 14:05:17 +02:00
Ryan Lahfa
078d3ebcaa
Merge pull request #232235 from cyberus-technology/outline-0.69.2 
outline: 0.68.1 -> 0.69.2
 2023-05-23 15:14:18 +02:00
Robert Hensing
983bf78c16
Merge pull request #233397 from Kranzes/hci-module 
nixos/hercules-ci-agent: sync module with upstream
 2023-05-23 14:17:28 +02:00
Alexander Sieg
74bc42615c
outline: 0.68.1 -> 0.69.2 2023-05-23 10:44:02 +02:00
Maximilian Bosch
c0bbecef87
Merge pull request #232276 from LeSuisse/broken-php80-packages 
grocy, limesurvey: mark as broken due to lack of PHP 8.1 compatibility
 2023-05-23 07:19:17 +02:00
Sandro
493c6d8505
Merge pull request #233053 from midchildan/chore/epgstation/node18 
epgstation: use node18 + other fixes
 2023-05-23 01:48:26 +02:00
0x4A6F
afad0c152b
Merge pull request #214428 from mweinelt/frigate-init 
frigate: init at 0.12.0
 2023-05-22 18:29:37 +02:00
Ryan Lahfa
2e1e1f8765
Merge pull request #231502 from SuperSandro2000/portunus-openldap 
nixos/portunus: use openldap compiled with libxcrypt-legacy
 2023-05-22 18:20:52 +02:00
Naïm Favier
7b28ea6783
Merge pull request #233377 from ncfavier/revert-226088 
Revert "nixos/syncthing: use rfc42 style settings"
 2023-05-22 16:35:04 +02:00
Martin Weinelt
f11d33afb7
nixos/frigate: init 2023-05-22 16:29:54 +02:00
Martin Weinelt
958fc81472
Merge pull request #216786 from mweinelt/go2rtc 
go2rtc: init at 1.5.0
 2023-05-22 16:00:54 +02:00
Ilan Joselevich
ebafd551d7
nixos/hercules-ci-agent: sync module with upstream 2023-05-22 15:05:16 +03:00
Naïm Favier
d5e090d2d8
Revert "nixos/syncthing: use rfc42 style settings" 
This reverts commit 32866f8d58.
This reverts commit 40a2df0fb0.
This reverts commit 4762932601.
 2023-05-22 10:29:52 +02:00
Ryan Lahfa
0e662e669a
Merge pull request #227642 from Flakebi/powerdns-admin2 
powerdns-admin: 0.3.0 -> 0.4.1
 2023-05-22 09:30:24 +02:00
Martin Weinelt
eae2018b54
nixos/go2rtc: init 2023-05-22 03:48:47 +02:00
Flakebi
1a13b4c0f9
powerdns-admin: 0.3.0 -> 0.4.1 
- Fix with flask-migrate 4+
- Update to 0.4.1
- Improve the test to check that using the database works
 2023-05-22 00:39:58 +02:00
midchildan
94eb60a7d2
nixos/epgstation: add a new option 'ffmpeg' 
Closes #187120.
 2023-05-22 05:24:19 +09:00
midchildan
059006b84b
nixos/epgstation: add required directories to tmpfiles.d 2023-05-22 05:24:18 +09:00
Aaron Andersen
9889d76032
Merge pull request #232607 from plumelo/feat/redmine-5 
redmine: 4.2.10 -> 5.0.5
 2023-05-21 14:33:01 -04:00
Sandro Jäckel
0000000324
nixos/portunus: use openldap compiled with libxcrypt-legacy 
It hardcodes sha256 crypt and the managed slapd crash loops otherwise.
 2023-05-21 18:54:56 +02:00
Sandro
a74a4a2f32
Merge pull request #232534 from teutat3s/zhf/fix-prometheus-exporter-jitsi 
jitsi-videobridge: refactor broken `apis` option to `colibriRestApi`
 2023-05-21 18:43:59 +02:00
Sandro
59cb287790
Merge pull request #231260 from Luflosi/update/kubo 
kubo: 0.19.2 -> 0.20.0
 2023-05-21 17:15:22 +02:00
pennae
727086540f
Merge pull request #233238 from emilylange/username-change 
maintainers: rename indeednotjames to emilylange
 2023-05-21 17:07:05 +02:00
Sandro
b34c560d19
Merge pull request #186582 from midchildan/fix/epgstation-var-empty 
nixos/epgstation: fix startup issue
 2023-05-21 16:57:54 +02:00
emilylange
b0e7f7f5db
maintainers: rename indeednotjames to emilylange 2023-05-21 16:01:35 +02:00
teutat3s
cb81bd9340
jitsi-videobridge: refactor broken apis option to 
colibriRestApi

Refactor option to use jvb.conf and convert to boolean. Using the CLI
argument broke a while ago and is deprecated by upstream since 2021:
https://github.com/jitsi/jitsi-videobridge/pull/1738/files#diff-d9f589d2aae1673693461d7c3b9214324201ca1f43db63a3c773d4acfc52bc81

This fixes the currently broken test:
nixosTests.prometheus-exporters.jitsi
 2023-05-21 15:31:14 +02:00
figsoda
701bcdbead nixos: fix typos 2023-05-19 22:31:04 -04:00
IndeedNotJames
d212ec13b8
nixos/synapse: allow omitting trusted_key_servers[].verify_keys 
Synapse does not require the `verify_keys` attr/object to be set.
It made sense back in the day, when federation traffic used to use self-signed certificates. But this is no longer the case.

The previous `types.nullOr` didn't actually allow omitting `verify_keys` because Synapse's config parser is unable to parse that.

Not a breaking change.

Upstream docs: https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html?highlight=verify_keys#trusted_key_servers
 2023-05-19 15:46:53 +02:00
Alyssa Ross
7ddca49451 nixos/mailman: set RemainAfterExit for settings 
This seems to be required to have the unit re-run if
services.mailman.restApiPassFile gets set.
 2023-05-19 12:03:41 +02:00
Alyssa Ross
43465c94d4 nixos/mailman: randomly generate REST API token 2023-05-19 12:03:41 +02:00
Yureka
97c8817371
nixos/clickhouse: Notify systemd about successful startup (#232443) 
https://github.com/ClickHouse/ClickHouse/pull/43400
https://github.com/ClickHouse/ClickHouse/pull/46613
 2023-05-19 00:24:20 +02:00
Sandro
58f987450c
Merge pull request #226116 from erdnaxe/nitter-update-module 
nixos/nitter: update module options
 2023-05-18 23:45:39 +02:00
Naïm Favier
84f249a0c4
Merge pull request #232582 from Lassulus/syncthing-folder-fix 
nixos/syncthing: fix disabled folders
 2023-05-18 22:19:36 +02:00
Lily Foster
3e014434a7
Merge pull request #230876 from purin-aurelia/nixos-openrgb-fix 
nixos/openrgb: fix data dir & amd i2c
 2023-05-18 15:00:13 -04:00
Meghea Iulian
eb222f0f97
redmine: upgrade start command 2023-05-18 14:35:38 +03:00
K900
b451cc7668 nixos/libinput: only enable when X11 is enabled 2023-05-18 13:58:18 +03:00
lassulus
4762932601 nixos/syncthing: fix disabled folders 2023-05-18 11:06:57 +02:00
Martin Weinelt
a919e81dbf
Merge pull request #231512 from n0emis/zammad-5.4.1 
zammad: 5.1.1 -> 5.4.1
 2023-05-17 18:36:29 +02:00
Markus Cisler
a0b7802372 nixos/thelounge: add package option 
Adds a package option to the thelounge NixOS module.
 2023-05-17 08:34:18 -07:00
Naïm Favier
40a2df0fb0
nixos/syncthing: fixup #226088 2023-05-17 16:53:01 +02:00
Ember Keske
8c5087c1f6 zammad: link test in passthru.tests 2023-05-17 16:06:50 +02:00
K900
86c366b440
nixos/grafana-agent: remove deprecated option (#232375) 
Deprecated in version 0.21: 323c1eb36d/docs/sources/static/upgrade-guide.md (L417)
 2023-05-17 11:21:27 +02:00
Lassulus
52bbee772a
Merge pull request #232019 from 4z3/master-wireguard 2023-05-16 22:29:17 +02:00
Thomas Gerbet
bc48fa8f5e limesurvey: mark as broken 
limesurvey is not yet compatible with PHP 8.1.
 2023-05-16 19:18:22 +02:00
Thomas Gerbet
314c64c409 grocy: mark as broken 
grocy is not yet compatible with PHP 8.1
 2023-05-16 19:13:00 +02:00
Alexandre Iooss
1ab4e66b79 nixos/nitter: remove replaceInstagram option 2023-05-16 18:54:17 +02:00
Alexandre Iooss
d1d81f1866 nixos/nitter: add new upstream options 2023-05-16 18:54:02 +02:00
Sandro
efb55108b3
Merge pull request #231435 from drupol/openvscode-server/systemd-service 2023-05-16 14:14:29 +02:00
Sandro
bcd46a36a7
Merge pull request #227338 from erictapen/mastodon 2023-05-16 13:52:28 +02:00
Doron Behar
9b0a03fc88
Merge pull request #226088 from Xyz00777/master 
nixos/syncthing: applied rfc42 and added some additional options
 2023-05-16 13:29:36 +03:00
tv
50b845c5a6 nixos/wireguard: allow customizing peer unit name 2023-05-16 10:28:24 +02:00
Martin Weinelt
d38127eb13
Merge pull request #232017 from NickCao/mjolnir 
mjolnir: 1.5.0 -> 1.6.4, build with mkYarnPackage
 2023-05-16 01:37:54 +02:00
Robert Hensing
25f227fc67
Merge pull request #231316 from hercules-ci/nixos-system.checks 
NixOS: add `system.checks`
 2023-05-15 23:16:29 +02:00
Pol Dellaiera
1d37fe1526
nixos/openvscode-server: init 2023-05-15 21:48:08 +02:00
Jonas Heinrich
8a4f016281 nixos/maddy: tls.loader add acme support, add secrets option 2023-05-15 15:00:16 -04:00
K900
d5c292af6b
Merge pull request #197524 from f2k1de/graylog4 
graylog: init at 4.0.8, 4.3.9, 5.0.2
 2023-05-15 19:42:04 +03:00
Sandro
872c89e5a7
Merge pull request #221750 from rhendric/rhendric/nixos/snapper 2023-05-15 17:24:25 +02:00
Nick Cao
dde3cb6977
Merge pull request #232007 from Janik-Haag/restic 
restic: add persistent default for timer unit
 2023-05-15 07:37:51 -06:00
woojiq
2ee66a3000 keyd: run systemd service as root user 2023-05-15 15:28:34 +02:00
Sandro
5bb17df552
Merge pull request #231705 from ambroisie/add-vikunja-port 2023-05-15 15:27:31 +02:00
Janik H
95e1099d2a restic: add persistent default for timer unit 2023-05-15 15:16:58 +02:00
Xyz00777
32866f8d58 nixos/syncthing: use rfc42 style settings 2023-05-15 14:38:56 +02:00
nikstur
6852dc2359 nixos/rshim: fix shell escape 
Using escapeShellArg does not make sense here because (a) it turned the
list into a string, so the entire service failed and (b) because systemd
does not use the same escaping mechanism as bash.
 2023-05-15 14:06:26 +02:00
Nick Cao
c256ecf7a3
nixos/mjolnir: explicitly set --mjolnir-config 2023-05-15 18:40:57 +08:00
Ryan Lahfa
fa06a3b646
Merge pull request #230888 from Misterio77/nextcloud-createlocally-optin 
nixos/nextcloud: default createLocally to false
 2023-05-15 09:28:15 +02:00
Maximilian Nitsch
25f3323d60 nixos/etcd: Fix mapping of clientCertAuth option 
The clientCertAuth option must be mapped to the etcd environment
variable ETCD_CLIENT_CERT_AUTH and the peerClientCertAuth option to
ETCD_PEER_CLIENT_CERT_AUTH.

Signed-off-by: Maximilian Nitsch <maximilian.nitsch@d3tn.com>
 2023-05-15 09:11:41 +02:00
Ryan Lahfa
feb7fcde4b
Merge pull request #231481 from nikstur/rshim-user-space 
rshim for Nvidia BlueField
 2023-05-15 09:03:50 +02:00
Ryan Lahfa
e3bd7faa18
Merge pull request #226830 from Janik-Haag/birdwatcher 
birdwatcher: init at 2.2.4, alice-lg: init at 6.0.0, nixos/birdwatcher: init, nixos/alice-lg: init
 2023-05-15 08:42:10 +02:00
Janik H
40136a1f7f nixos/birdwatcher: init 2023-05-15 02:52:06 +02:00
Janik H
8ed86700a2 nixos/alice-lg: init 2023-05-15 02:52:06 +02:00
nikstur
5435eaaa4d nixos/rshim: init 2023-05-15 01:24:48 +02:00
Bernardo Meurer
d8b94f5b2c
Merge pull request #231881 from lovesegfault/klipper-log 2023-05-14 16:48:48 -04:00
Jonas Chevalier
9c63dd372d
cloud-init module: fix default settings (#231867) 
The `//` operator doesn't do deep merge so it was overriding the first
attrset and not recording the defaults.
 2023-05-14 22:35:06 +02:00
Bernardo Meurer
570fff5e92
nixos/klipper: add logFile option 2023-05-14 13:02:08 -04:00
Bernardo Meurer
7a5f684ffd
nixos/klipper: use klippy from $out/bin 2023-05-14 13:02:06 -04:00
Jörg Thalheim
fc8c839fe8
Merge pull request #231841 from Ma27/wikijs-node18 
wiki-js: use nodejs18
 2023-05-14 16:22:56 +01:00
Gabriel Fontes
f9f76529cd
nixos/nextcloud: default createLocally to false 2023-05-14 12:09:50 -03:00
Ryan Lahfa
8ef486b60e
Merge pull request #207194 from RaitoBezarius/pixelfed-module 
pixelfed: init at 0.11.5, module, tests
 2023-05-14 17:09:19 +02:00
Sophie Tauchert
8af23590d3 nixos/borgbackup: fix extraCompactArgs 
Fixes the extraCompactArgs introduced with #224072 as the variable
currently isn't added to the script's environment.
 2023-05-14 16:51:24 +02:00
Maximilian Bosch
577ffe768c
wiki-js: use nodejs18 
Part of #229910.

Unfortunately this is a little hacky because upstream doesn't intend to
support it for 2.5, but only for 3.0 which isn't out yet, however nodejs-16
will get out of maintenance during the support-span of NixOS 23.05[1].

The only breaking change is that `extract-files` uses a deprecated way
of exposing modules, I went through the list of other breaking
changes in v17 and v18[2][3] and couldn't spot any usage of removed
features, also local testing didn't reveal further issues.

Unfortunately fixing that breakage turned out to be non-trivial.
Currently, `extract-files@9.0.0` is used with the problematic portions
in its `package.json`, however it's only a transitive dependency of
`@graphql-tools/url-loader` & `apollo-upload-client`. Unfortunately, the
versions of that in use require v9 and don't work with a newer version of
`extract-files` with the problem fixed[4]. Also, upgrading the
dependencies in question is not a feasible option because `graphql-tools`
was split up into multiple smaller packages in v8 and also some of the
APIs in use in `wiki.js` were dropped there[5], so this would also be
very time-consuming and non-trivial to fix.

Since this was the only issue, I decided to go down the hacky route and
patch the problem in `package.json` of `extract-files` manually during
our `patchPhase`.

[1] https://github.com/requarks/wiki/discussions/6388
[2] https://nodejs.org/en/blog/release/v17.0.0
[3] https://nodejs.org/en/blog/release/v18.0.0
[4] Upon local testing, this broke with the following error:

        Error [ERR_PACKAGE_PATH_NOT_EXPORTED]: Package subpath './public/extractFiles' is not defined by "exports" in /wiki/node_modules/extract-files/package.json
[5] For instance `SchemaDirectiveVisitor` in
  `server/graph/directives/auth`.
 2023-05-14 14:25:33 +02:00
Jonas Heinrich
9241cee3c4
Merge pull request #224274 from SuperSandro2000/nixos/nextcloud-notify_push 
nixos/nextcloud: add configureRedis option; nixos/nextcloud-notify_push: add bendDomainToLocalhost
 2023-05-14 10:35:57 +02:00
Bruno BELANYI
f3f709af74 nixos/vikunja: add 'port' option 2023-05-13 18:01:36 +01:00
ajs124
831e41f469
Merge pull request #231629 from Izorkin/update-unit 
unit: 1.29.1 -> 1.30.0
 2023-05-13 19:01:33 +02:00
Izorkin
baa5550162
unit: 1.29.1 -> 1.30.0 2023-05-13 16:55:47 +03:00
Bobby Rong
ea11a3977f
Merge pull request #231378 from FedericoSchonborn/budgie-plugins 
Add `budgiePlugins` set, init `budgie-user-indicator-redux` at 1.0.1
 2023-05-13 17:08:10 +08:00
Martin Weinelt
557f89f5d1
Merge pull request #228492 from LeSuisse/tt-rss-2023-04-13-php81 
tt-rss: unstable-2022-10-15 -> unstable-2023-04-13, module use PHP 8.1
 2023-05-13 02:17:24 +02:00
Isa
c7629a78b7 graylog: let the user decide which version of graylog to use 2023-05-12 20:43:03 +02:00
Katze
dfb8a2a7c4
nixos/syncplay: add saltFile and extraArgs option (#220096) 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2023-05-12 18:01:33 +02:00
Martin Weinelt
1c80c494ca
Merge pull request #228422 from mweinelt/gitea-actions-runner-module 
nixos/gitea-actions-runner: init
 2023-05-12 17:54:16 +02:00
K900
b136129246
Merge pull request #231293 from K900/libinput-default 
nixos/x11/hardware/libinput: enable by default
 2023-05-12 09:42:23 +03:00
Federico Damián Schonborn
8e01b9d98c
nixos/budgie: Update description for sessionPath, add example for extraPlugins 
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
 2023-05-11 21:35:27 -03:00
Martin Weinelt
3c09f66193
Merge pull request #231096 from kai-tub/vector/add-pkg-opt 
vector: add `package` Option
 2023-05-11 22:10:20 +02:00
Robert Hensing
2e2f0d28ea nixos: Use checks instead of extraDependencies 
... as appropriate.

This drops a few unnecessary store paths from the system closure.
 2023-05-11 21:18:38 +02:00
Kai Norman Clasen
8989ea2778 nixos/vector: add package Option 2023-05-11 19:44:50 +02:00
K900
9fec1a09bd nixos/x11/hardware/libinput: enable by default 
Basically everything Wayland uses this, it's much more actively
maintained than xf86-input-evdev, and we should really be shipping
it by default.
 2023-05-11 16:49:10 +03:00
Martin Weinelt
537d611a75 nixos/sshd: Remove algorithms that do MAC-then-encrypt 
Algorithms with the -etm suffix calculate the MAC after encryption,
which is generally considered safer.
 2023-05-11 12:54:32 +02:00
ajs124
fbfa1ec989
Merge pull request #231190 from aanderse/nixos/automysqlbackup 
nixos/automysqlbackup: add some missing permissions
 2023-05-11 12:47:39 +02:00
Aaron Andersen
55b3b7029d nixos/automysqlbackup: rename config option to settings 2023-05-10 20:00:09 -04:00
Aaron Andersen
a73e7383c0 nixos/automysqlbackup: add some missing permissions 2023-05-10 19:57:48 -04:00
Ilan Joselevich
7ecf20b490
nixos/harmonia: adjust module and test to upstream 2023-05-10 22:28:03 +03:00
Luflosi
ada7f14219
kubo: 0.19.2 -> 0.20.0 
https://github.com/ipfs/kubo/releases/tag/v0.20.0

When creating a repository with `ipfs init`, `--empty-repo=true` is now the default according to the changelog. Modify the NixOS module to reflect this change and fix the `emptyRepo` setting to work with this change.
 2023-05-10 19:50:46 +02:00
Sandro
84b4373d8c
Merge pull request #230550 from Mic92/harmonia 2023-05-10 16:55:06 +02:00
happysalada
47bedc81f8 uptime-kuma: add defaults for simpler initial setup 2023-05-10 09:54:56 -04:00
Jörg Thalheim
76ffeaf06c nixos/harmonia: init service 2023-05-10 14:52:31 +02:00
Sandro
7b22f5b4a2
Merge pull request #215494 from poelzi/webdav-server-rs-debug 2023-05-10 14:29:26 +02:00
asonix
cb2941db79 pict-rs: 0.3.0-alpha.37 -> 0.3.3 2023-05-09 15:24:54 -04:00
Weijia Wang
419d7f9c8d
Merge pull request #230753 from fetsorn/typos 
several typos
 2023-05-09 19:16:12 +03:00
Sandro
d199137345
Merge pull request #230560 from legendofmiracles/upddate-nodjs-asf 2023-05-09 16:58:52 +02:00
fetsorn
1a4e993104 nixos/prometheus: fix typo 
"nixpgs" -> "nixpkgs"
 2023-05-09 18:02:17 +04:00
fetsorn
f035683f55 nixos/matomo: fix typo 
"suported" -> "supported"
 2023-05-09 18:02:17 +04:00
fetsorn
d1398dd05c nixos/deluge: fix typo 
"secuerly" -> "securely"
 2023-05-09 18:02:17 +04:00
purin
9595113480 nixos/openrgb: fix data dir & amd i2c 2023-05-10 01:34:21 +12:00
Martin Weinelt
35a73717df
Merge pull request #218599 from Izorkin/update-peertube 
peertube: 5.0.0 -> 5.1.0
 2023-05-09 14:37:44 +02:00
lom
ea1cef8c00 ArchiSteamFarm.ui: use buildNpmPackage 2023-05-08 20:34:21 -04:00
Aaron Andersen
cf0327810b
Merge pull request #207093 from ymarkus/alertmanager 
nixos/alertmanager: add checkConfig option
 2023-05-08 20:15:17 -04:00
Izorkin
1afcb4c6ef
nixos/peertube: update nginx configuration 2023-05-08 23:49:03 +03:00
Izorkin
8d76c0b6fb
peertube: 5.0.0 -> 5.1.0 2023-05-08 23:48:32 +03:00
Raito Bezarius
16658f7634 nixos/netdata: introduce deadlineBeforeStopSec 
Previously, we hardcoded a 60 second timer to stop netdata if we didn't have any answer back.
This is wrong and can cause data loss because the SIGTERM sent by systemd can sometimes be not honored.
Which in turn becomes a SIGKILL, causing potential data loss / corruption.

Offer a flag to users and bump the deadline to 2 minutes.
 2023-05-08 19:29:13 +02:00
Sandro
6197953fb6
Merge pull request #207106 from autrimpo/gonic-module 
nixos/gonic: init
 2023-05-08 01:28:24 +02:00
Michal Koutenský
8118e3de43 nixos/gonic: init 2023-05-07 22:43:23 +02:00
Bernardo Meurer
3cf3f4395a
Merge pull request #230449 from lovesegfault/mainsail-module 2023-05-07 11:49:59 -04:00
Naïm Favier
0767f800e0
Merge pull request #224688 from Izorkin/add-nginx-upstream-timeout 
nixos/nginx: allow arbitrary parameters in upstream servers
 2023-05-07 11:43:39 +02:00
Izorkin
2809915f19
nixos/nginx: allow arbitrary parameters in upstream servers 
Adds a `freeformType` to `services.nginx.upstreams.<name>.servers` to
allow setting arbitrary parameters.
 2023-05-07 11:17:49 +02:00
Bernardo Meurer
4804f7a09b
nixos/mainsail: init 2023-05-07 01:41:03 -04:00
Martin Weinelt
f4ca022023
Merge pull request #229999 from ambroisie/update-tandoor-recipes 
tandoor-recipes: 1.4.4 -> 1.4.9
 2023-05-06 21:58:04 +02:00
Jonas Chevalier
d3ff0e4114
Merge pull request #229111 from zimbatm/cloud-init-settings 
cloud-init module: adopt the settings format
 2023-05-06 21:34:11 +02:00
Gabriel Fontes
16b3b0c53b nixos/tests/kavita: init 2023-05-06 13:57:53 -03:00
Gabriel Fontes
e2854d332d nixos/kavita: init 2023-05-06 13:57:53 -03:00
Martin Weinelt
1c963cea48
nixos/gitea-actions-runner: init 2023-05-06 17:34:15 +02:00
Bruno BELANYI
9650310348 nixos/tandoor-recipes: disable debug toolbar 2023-05-06 14:22:17 +01:00
Bruno Adelé
7af8ace239
nixos/smokeping: Format smokeping source code 2023-05-05 22:46:30 +02:00
Pierre Bourdon
2ddbabec4d
nixos/xserver: fix xserver.conf reproducibility (sort ModulePath entries) 2023-05-05 22:33:09 +02:00
Jonas Chevalier
db8b28dc5d
Update nixos/modules/services/monitoring/netdata.nix 
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
 2023-05-05 18:41:56 +02:00
Jonas Chevalier
14793fac6c
Update nixos/modules/services/monitoring/netdata.nix 
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
 2023-05-05 18:41:51 +02:00
Emily Lange
549bee9851
nixos/grafana-agent: add extraFlags option (#228883) 2023-05-05 15:14:41 +02:00
Martin Weinelt
6d934088ea
nixos/home-assistant: update bluetooth components 2023-05-04 07:33:32 +02:00
Sandro Jäckel
da15c5054e
nixos/nextcloud-notify_push: add bendDomainToLocalhost 2023-05-03 22:41:23 +02:00
Sandro Jäckel
546d4d4b76
nixos/nextcloud: add configureRedis option 2023-05-03 22:40:41 +02:00
pennae
aad25290ee nixos/emacs: restore example markup 
these examples were turned into untitle anchors previously because at
the time supporting examples was not deemed necessary or useful. now
that we have them we can restore them though.
 2023-05-03 19:58:21 +02:00
Michael Livshin
11b851718e system76-scheduler: don't enable unconditionally 
Oops :(
 2023-05-03 10:34:32 +03:00
Izorkin
edb40b3e4f nixos/fail2ban: others small update 2023-05-03 08:45:26 +02:00
Izorkin
544ebba973 nixos/fail2ban: update bantime options 2023-05-03 08:45:26 +02:00
Bernardo Meurer
b04b3345f1
Merge pull request #195082 from cmm/system76-scheduler 2023-05-02 09:25:05 -07:00
Artturi
2d256ca7c2
Merge pull request #227499 from tollb/w20230421d_use_systemd_hwdb_to_build_udev_hwdb 2023-05-02 19:04:06 +03:00
Robert Hensing
c4793e85f1
Merge pull request #229427 from Mic92/hercules-ci-agent 
nixos/hercules-ci-agent: increase stack limit
 2023-05-02 13:42:42 +02:00
Michael Livshin
549fd53520 system76-scheduler: add config module 2023-05-02 13:43:36 +03:00
Martin Weinelt
826418fc35
Merge pull request #227990 from Mic92/mediawiki-webserver 
nixos/mediawiki: make apache2 optional
 2023-05-02 12:39:10 +02:00
Jörg Thalheim
301d6bb9c2 nixos/hercules-ci-agent: increase stack limit 
see https://github.com/hercules-ci/hercules-ci-agent/pull/451 for context
 2023-05-02 09:53:41 +02:00
Jonas Heinrich
d932d6929b
Merge pull request #227401 from onny/maddytls2 
nixos/maddy: Add tls option
 2023-05-02 07:32:56 +02:00
Sandro
7b02d16807
Merge pull request #227973 from tensor5/nixos/nextcloud--fix-notify_push-configuration-parse-error 2023-05-02 01:05:02 +02:00
figsoda
ed153ccbfd
Merge pull request #229209 from Misterio77/navidrome-cfg-package 
nixos/navidrome: add package option
 2023-05-01 18:31:34 -04:00
Gabriel Fontes
1c3c2c8203
nixos/navidrome: add package option 2023-05-01 16:29:17 -03:00
Jörg Thalheim
077e950f7a nixos/mediawiki: also test fcgi socket 2023-05-01 20:51:11 +02:00
Jörg Thalheim
d309952a5d nixos/mediawiki: make apache optional 2023-05-01 20:51:11 +02:00
Jonas Heinrich
fcf6662fb5
Merge pull request #229159 from Misterio77/refactor-nextcloud-createlocally 
nixos/nextcloud: refactor database.createLocally
 2023-05-01 20:04:20 +02:00
Jonas Heinrich
616ba4ae5c nixos/maddy: Add tls option 2023-05-01 19:12:26 +02:00
Gabriel Fontes
fddf531c6f
nixos/nextcloud: refactor database.createLocally 
Fixes https://github.com/NixOS/nixpkgs/issues/228971
 2023-05-01 12:20:40 -03:00
Matthieu Coudron
7fe4909bee
services.datadog: remove python2 from systemd service (#228312) 
which caused a security warning. seems to work without it so let's ditch it
 2023-05-01 16:37:34 +02:00
Nick Cao
cb6c1de07d
Merge pull request #229138 from exzombie/fix/fstrim-interval 
nixos/fstrim: fix overriding the timer interval
 2023-05-01 17:23:36 +08:00
K900
5c95114a2f
Merge pull request #228951 from aacebedo/aacebedo/asusctl_4.6.2 
asusctl: 4.5.8 -> 4.6.2
 2023-05-01 12:08:37 +03:00
Alexandre Acebedo
576d7d34c4 asusctl: 4.5.8 -> 4.6.2 2023-05-01 11:07:39 +02:00
Weijia Wang
b87aa62298
Merge pull request #227936 from wineee/dde 
nixos/deepin: init
 2023-05-01 08:38:45 +03:00
Kira Bruneau
50200de3f4
Merge pull request #216230 from tcheronneau/master 
nixos/{consul-template,vault-agent}: init
 2023-04-30 13:53:57 -04:00
gaykitty
3056e9c395 nixos/stargazer: remove with lib 2023-04-30 13:05:34 -03:00
gaykitty
d4f3dd4f71 nixos/stargazer: fix route ordering 2023-04-30 13:05:34 -03:00
Jure Varlec
44438e0dcd nixos/fstrim: fix overriding the timer interval 
The OnCalendar systemd setting is additive. To clear the setting defined
by the pre-existing unit file, it has to be set first to an empty
string, then to the desired value.
 2023-04-30 17:36:49 +02:00
zimbatm
406a6dfa26 cloud-init module: adopt the settings format 
This makes it easier to for example set `datasource_list = [ "Vultr" ];`
so that cloud-init doesn't scan trough all of the datasources when you
know on which target the system is going to be deployed.

Previously, one had to copy-paste the default config and adapt it.
 2023-04-30 15:08:10 +02:00
zimbatm
4a1fd4afe0 cloud-init module: remove superfluous lib. prefixes 2023-04-30 14:59:16 +02:00
zimbatm
de8b1cf647 cloud-init module: format with nixpkgs-fmt 2023-04-30 14:58:29 +02:00
Nick Cao
1acfbbb2e7
Merge pull request #125865 from eliasp/restic-private-tmp 
nixos/restic: use private tmp for service unit
 2023-04-30 20:37:07 +08:00
Maximilian Bosch
5c9977a524
Merge pull request #224891 from KFearsoff/fix-grafana-assertions-in-yaml 
nixos/grafana: fix assertions leaking into YAML
 2023-04-30 11:39:48 +02:00
Elias Probst
3bd1c64a5b
nixos/restic: use private tmp for service unit 
To reduce the danger of accidentally exposing sensitive files processed
by a restic backup to other services/users, enable the `PrivateTmp=`
feature of restic service units, which provides a per service isolation
of `/tmp` and `/var/tmp`.

Co-authored-by: Daniel Nagy <danielnagy@posteo.de>
 2023-04-30 10:39:29 +02:00
Sandro
5d0d352833
Merge pull request #220761 from elesiuta/picosnitch-init 2023-04-30 01:52:10 +02:00
Weijia Wang
acb0a2c266
Merge pull request #228225 from LeSuisse/strongswan-5.9.10 
strongswan: 5.9.8 -> 5.9.10
 2023-04-29 23:08:09 +03:00
Kira Bruneau
f81a619c91
Merge pull request #227916 from IndeedNotJames/lldap 
lldap: init at 0.4.3; nixos/lldap: init; nixosTests.lldap: init
 2023-04-29 15:24:12 -04:00
IndeedNotJames
87ccd1a47b
nixos/lldap: init 
Co-authored-by: LongerHV <46924944+LongerHV@users.noreply.github.com>
 2023-04-29 21:14:25 +02:00