Commit Graph

40567 Commits

Author SHA1 Message Date
K900
ea525d3d11 nixos/oauth2_proxy_nginx: allow passing parameters to auth endpoint 2024-04-26 15:48:40 +03:00
Aleksana
c1c2a084c7
Merge pull request #306761 from Cryolitia/sunshine
nixos/sunshine: add autoStart attr
2024-04-26 16:49:15 +08:00
Thomas Gerbet
f8deac79ef
Merge pull request #305155 from Mynacol/akkoma-fix-proxy
nixos/akkoma: Fix media proxy URLs after upgrade
2024-04-26 00:39:11 +02:00
Someone
5e05a5e3c9
Merge pull request #306656 from ShamrockLee/apptainer-format
apptainer, singularity: format Nix expression according to Nix RFC 166
2024-04-25 19:45:51 +00:00
Martin Weinelt
a1030cf5ac
Merge pull request #306640 from pyrox0/prometheus-exporter-with-removal
nixos/prometheus/exporters: Remove all `with lib;` usage
2024-04-25 17:25:34 +02:00
Nick Cao
2a3398e198
Merge pull request #306468 from nat-418/fix-update-conduit-doc-link
matrix-conduit: update link to config docs
2024-04-25 09:34:18 -04:00
Someone
6628d21457
Merge pull request #306337 from ereslibre/add-docker-daemon-cdi-flag
nixos/nvidia-container-toolkit: enable CDI in docker settings
2024-04-25 09:04:43 +00:00
北雁 Cryolitia
13e6ece470
nixos/sunshine: add autoStart attr 2024-04-25 16:53:24 +08:00
Yueh-Shun Li
54e547ff5d nixos/singularity: format using nixfmt (Nix RFC 166) 2024-04-25 14:06:25 +08:00
Mario Rodas
183a604e7a
Merge pull request #305572 from wolfgangwalther/remove-promscale-pgx
promscale_extension,buildPgxExtension: remove
2024-04-24 22:11:14 -05:00
éclairevoyant
cae565a58e
Merge pull request #306349 from pyrox0/pyrox-maintainer
maintainers: thehedgeh0g -> pyrox0
2024-04-24 23:23:22 +00:00
Maximilian Bosch
e59f7ab9ef
Merge pull request #278152 from ckiee/roundcube-fix-postgresql-package-ref
nixos/roundcube: eliminate extra postgres package for local databases
2024-04-24 21:33:54 +00:00
Pyrox
b4fd1b4fe2
nixos/tests/prometheus-exporters: Fix test failure
This fixes an issue with the test where olcDbDirectory must be a
subdirectory of /var/lib/openldap, but is not configured as such, so the
test fails.

All other tests pass properly.
2024-04-24 17:13:51 -04:00
Atemu
2432c6b829
Merge pull request #271071 from pbsds/wrapAppImage-pname-redux
appimageTools.wrapAppImage: remove version from `pname`
2024-04-24 21:48:19 +02:00
ckie
bdde259862
nixos/roundcube: eliminate extra postgres package for local databases 2024-04-24 22:45:37 +03:00
Pyrox
ae359d1ef2
nixos/prometheus/exporters: Remove all with lib; usage
Fixes issues described in #208242 for this part of the nixpkgs tree.

There are no behavioral changes in this, it only adjusts the code so
that it is easier to understand.
2024-04-24 14:42:16 -04:00
Tom Hubrecht
5ad0ea1aaf nixos/netbird: Fix configuration of coturn server 2024-04-24 20:35:32 +02:00
Maciej Krüger
657e5c43be
Merge pull request #283298 from mkg20001/rustdesk-dynamic
rustdesk-server: use DynamicUser
2024-04-24 20:03:44 +02:00
Maciej Krüger
9c565e0e69
rustdesk-server: use DynamicUser
this was a suggestion on #272501
2024-04-24 19:00:37 +02:00
Pyrox
11255ef03c
maintainers: thehedgeh0g -> pyrox0
Also updates my information and contact info.

I no longer use The Hedgehog as my github username or online presence
username, so this fixes that. It also matches my github username, so it
should be easier for others to mention me if needed.
2024-04-24 12:53:58 -04:00
Rafael Fernández López
eb59699fbb hardware/nvidia-container-toolkit: enable CDI on virtualisation.docker.daemon.settings 2024-04-24 18:08:04 +02:00
Austin Horstman
91322305eb
wshowkeys: add cfg.package option 2024-04-24 08:47:38 -05:00
Peder Bergebakken Sundt
340d601e84 appimage: avoid setting name 2024-04-24 15:26:52 +02:00
Peder Bergebakken Sundt
90622c10bd appimageTools.wrapAppImage: passthru pname and version 2024-04-24 15:26:52 +02:00
networkException
3dd970f993
nixos/vaultwarden: drop outdated ownership requirements for environmentFile (#304825)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-04-24 15:19:33 +02:00
Sandro
212e6522de
Merge pull request #305563 from birkb/drbd-kernel-module 2024-04-24 14:25:12 +02:00
Martin Weinelt
cfa475854a
nixos/evcc: restart on failure 2024-04-24 12:36:21 +02:00
Thomas Gerbet
ecd2d35be0
Merge pull request #305742 from tomfitzhenry/ssh-no-pam
nixos/ssh: expose UsePAM and PrintMotd as options
2024-04-24 09:40:24 +02:00
Marie Ramlow
86913e049d gauge: add wrapper
Adds a wrapper to the gauge package, which allows installing plugins declaratively with nix.
2024-04-24 09:22:38 +02:00
nat-418
d24376448b
docs(conduit): update link to config docs 2024-04-24 09:11:03 +02:00
Lin Jian
8c6ccd9a8f
Merge pull request #305370 from stuebinm/docs-remove-emacs-docbook-section
nixos/emacs: remove docbook section in the documentation
2024-04-24 08:48:42 +08:00
Adam Stephens
6c359d6488
forgejo: 1.21.11-1 -> 7.0.0 2024-04-23 19:04:25 -04:00
stuebinm
5996290676 nixos/emacs: remove docbook section in emacs documentation
Since with the completion of the docbook migration) it seems unclear
what relevance editing xml in generall and docbook in particular with
Emacs still has to NixOS at all, and people interested in the topic
will presumably look to other resources elsewhere (e.g. to the nXML
mode's actual documenation).
2024-04-23 23:18:33 +02:00
Someone
7035968845
Merge pull request #290979 from ereslibre/cdi-add-nvidia-docker-1-directories
CDI: Add `mount-nvidia-binaries` and `mount-nvidia-docker-1-directories` options
2024-04-23 19:55:41 +00:00
Jörg Thalheim
a4a18f7b92 nixos/systemd-boot: avoid expensive mypy builds on configuration changes
* Mypy dependencies pull in quite a few packages, which makes it harder to create offline installers.
2024-04-23 20:05:26 +02:00
Adam C. Stephens
d274696071
Merge pull request #306239 from mweinelt/incus-vtpm
nixos/incus: add support for software TPMs
2024-04-23 09:24:21 -04:00
Tom Fitzhenry
3fd9ef4b40 nixos/ssh: allow PrintMotd to be enabled 2024-04-23 22:53:09 +10:00
Tom Fitzhenry
2e51a2fd03 nixos/ssh: allow UsePAM to be disabled 2024-04-23 22:40:58 +10:00
Tom Fitzhenry
41911ed9d2 tests/openssh: tidy up tests
This test renames server_allowedusers to server-allowed-users.

As a side-effect, since IPs are allocated to machines in alphabetical order,
the IP assigned to server-lazy-socket changed, so the corresponding test had
its IP updated.
2024-04-23 22:39:02 +10:00
Rafael Fernández López
de3ce5ffa7 nixos/nvidia-container-toolkit: add mount-nvidia-executables and mount-nvidia-docker-1-directories options
- `mount-nvidia-binaries`: this option allows users to avoid mounting
nvidia binaries on the container.

- `mount-nvidia-docker-1-directories`: this option allows users to
avoid mounting `/usr/local/nvidia/lib{,64}` on containers.
2024-04-23 12:31:45 +02:00
Rafael Fernández López
471ff2c33c nixos/nvidia-container-toolkit: rename from virtualisation.containers.cdi.dynamic.nvidia.enable
Add the NixOS option `hardware.nvidia-container-toolkit-cdi-generator.enable`.

This enables the ability to expose GPU's in containers for container
runtimes that support the Container Device Interface (CDI)

Remove `cdi.static` and `cdi.dynamic.nvidia.enable` attributes.
2024-04-23 12:26:00 +02:00
Jörg Thalheim
0b4cb020ff
Merge pull request #306076 from mrgiles/mediawiki_explicit_admin_username
mediawiki: update passwordfile description field
2024-04-23 12:16:29 +02:00
Martin Weinelt
8541ec6d85
nixos/incus: add support for software TPMs
Was previously broken due to a missing runtime dependency.

> Error: Failed to start device "vtpm": Failed to validate environment: Required tool 'swtpm' is missing
2024-04-23 12:04:14 +02:00
Florian Klink
5a2d4496d3
Merge pull request #297726 from r-vdp/systemd-unit-names
systemd: add a name option to all systemd units
2024-04-23 12:58:51 +03:00
Kyle Carberry
68a917dc64
nixos/coder: fix broken service by referencing proper env (#305993) 2024-04-23 06:06:25 -03:00
Paul Meyer
ceead2d7e4 azure-cli: document extensions in description, fix release notes
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-04-22 16:03:54 -07:00
Jacek Generowicz
e683bf0c60
First update to release notes (#305965)
* Change spelling: freeform -> free-form

* Rejoin nginx message split by bacula

* Fix typos and trivial rewording

* Move package/service names to start of notes

* Switch package/service names to code font

* Reword some release notes

* Update nixos/doc/manual/release-notes/rl-2405.section.md

Co-authored-by: Jonathan Ringer <jonringer@users.noreply.github.com>

---------

Co-authored-by: Jonathan Ringer <jonringer@users.noreply.github.com>
2024-04-22 11:50:31 -07:00
Marcelo Giles
ac259c3a59
mediawiki: update passwordfile description field 2024-04-22 11:02:52 -07:00
Sigmanificient
1cdb19472c qtile: add passthru tests 2024-04-22 19:00:41 +02:00
misuzu
1c99cea684 castopod: remove misuzu from maintainers 2024-04-22 19:19:48 +03:00
misuzu
4146e6ea38 gotosocial: remove misuzu from maintainers 2024-04-22 19:19:01 +03:00
Maximilian Bosch
e8e9c5c3b1
Merge pull request #305837 from Ma27/roundcube-php83
nixos/roundcube: use php 8.3
2024-04-22 13:43:17 +00:00
Sandro Jäckel
8db512dae8 nixos/nginx: update ciphers list 2024-04-22 23:08:14 +10:00
Adam Stephens
f171f4ffd4
nixos/lxc: add package option and use for incus/lxd 2024-04-22 08:31:05 -04:00
Sergei Trofimovich
57d31b8c54 redlib.tests: fix eval
Without the change the eval fails as:

    $ nix build --no-link -f. redlib.tests
    error: attribute 'redlib' missing
       at pkgs/by-name/re/redlib/package.nix:50:26:
           49|   passthru.tests = {
           50|     inherit (nixosTests) redlib;
             |                          ^
           51|   };
       Did you mean redis?
2024-04-22 07:32:22 +01:00
Anders Johan Jamtli
cb46e6864b
nixos/qemu-vm: set secrurity model for 'shared' and 'certs' directories to 'none' 2024-04-22 05:55:58 +02:00
Anders Johan Jamtli
7aa7920fb0
Revert "nixos/qemu-vm: set security model for 'xchg' directory to 'none'"
This reverts commit c16ff7f9f3.
2024-04-22 05:49:11 +02:00
Anders Johan Jamtli
c16ff7f9f3
nixos/qemu-vm: set security model for 'xchg' directory to 'none'
Co-authored-by: Michele Guerini Rocco <rnhmjoj@users.noreply.github.com>
2024-04-22 05:41:11 +02:00
Vir Chaudhury
4a0a12efc2 nixos/isolate: add tests 2024-04-22 10:19:42 +08:00
Vir Chaudhury
4ca92fb6ec nixos/isolate: init module 2024-04-22 10:19:09 +08:00
Weijia Wang
5cb9d83fb8
Merge pull request #305826 from KamilaBorowska/maintainers-remove-kamilaborowska
maintainers: remove KamilaBorowska
2024-04-22 04:02:28 +02:00
Robert Schütz
926d688d04
Merge pull request #300556 from dotlambda/python3Packages.recurring-ical-events
python312Packages.recurring-ical-events: 2.1.3 -> 2.2.0
2024-04-22 01:48:51 +00:00
Emily
d5b37040b5
Merge pull request #305842 from Ma27/fix-manual-build
nixos: fix manual build
2024-04-22 00:43:17 +02:00
Ryan Hendrickson
61153af068
Merge pull request #298983 from illustris/mysql
nixos/systemd-lib: fix restart/reloadTriggers when passing paths
2024-04-21 17:45:16 -04:00
Maximilian Bosch
2ee96a1738
nixos: fix manual build
`mdDoc` is deprecated!
2024-04-21 23:28:46 +02:00
Maximilian Bosch
7bb471b3e8
nixos/roundcube: use php 8.3
Upstream claims that 1.6 works fine with PHP 8.3[1]. Also PHP 8.1 is in
the security-only phase already, so we'll need to change sooner or later
anyways.

[1] https://github.com/roundcube/roundcubemail/issues/9339
2024-04-21 23:18:41 +02:00
Pol Dellaiera
95d8be4d3c
Merge pull request #301514 from r-vdp/nftables-rpfilter-extra-rules
nixos/firewall-nftables: allow adding additional rules to the rpfilter chain
2024-04-21 23:02:01 +02:00
Sandro
9edb990e0e
Merge pull request #295261 from SuperSandro2000/pretalx-media
nixos/pretalx: fix /media/ nginx location block
2024-04-21 22:45:17 +02:00
Kamila Borowska
0d3b34f45a maintainers: remove KamilaBorowska 2024-04-21 22:26:12 +02:00
Jörg Thalheim
d285a49ffa
Merge pull request #305637 from schra/fix-grub-device
digital-ocean: revert "make it easier to use disko"
2024-04-21 22:22:58 +02:00
birkb
e475ed648e
drbd driver: 9.2.7 -> 9.2.8
- xz compression added for module files
- no support for kernel 6.8 or newer
- sri format used for hash
- release notes for 24.05 updated

Signed-off-by: birkb <birk@batchworks.de>
2024-04-21 21:50:16 +02:00
Sandro
04a3a2a8fe
Merge pull request #260962 from lunik1/inadyn-module
nixos/inadyn: init
2024-04-21 21:38:22 +02:00
Basti
19081514c2
Merge pull request #304608 from tmuehlbacher/fix-fzf-bash-completions
nixos/fzf: fix bash with `fuzzyCompletion`
2024-04-21 18:37:01 +00:00
Hans Christian Schmitz
72ed33777c
nixos/wireplumber: add extraConfig/extraScripts options
Follow-up to #282377. #282377 broke `environment.etc."wireplumber<...>"`,
however WirePlumber did not yet have `extraConfig` style options for
configuring it ergonomically outside of `environment.etc`. This has
caused issues for people who had custom config files for WirePlumber, as
having to create a config package just to edit some settings is not as
ergonomic or discoverable as with a proper `extraConfig` style option.

This commit fixes this issue by adding the `extraConfig` option for
additional config file and the `extraScripts` option for additional
scripts to be used by config files.

With WirePlumber 0.5 it is possible to supply config files and scripts
via the `XDG_DATA_DIRS` variable to the WirePlumber daemon. This is how
the new options and with this change also the `configPackages` option
expose their files to the daemon. This way
`environment.etc."wireplumber"` works again for user configuration and
breakage of old configs from 23.11 to 24.05 should be limited to those
caused by the change in the config format from WirePlumber 0.4 to 0.5.
2024-04-21 20:34:37 +02:00
Thomas Mühlbacher
dd64d62858 nixos/fzf: fix bash with fuzzyCompletion
put all of fzf initialization after the bash-completions initialization
in bashrc, as the upstream project suggests in
https://github.com/junegunn/fzf/issues/72

Fixes: #303195
2024-04-21 20:33:03 +02:00
Sandro
a3739c2563
Merge pull request #303224 from 0z13/oauth2_proxy-add-issuer-url
nixos/oauth2_proxy: add oidc-issuer-url flag
2024-04-21 19:49:59 +02:00
pennae
67dfd15302
Merge pull request #305767 from emilylange/nixos-manual-abort-on-warn
nixos/manual: apply `documentation.nixos.options.warningsAreErrors` to nix eval as well
2024-04-21 18:56:54 +02:00
Julien Malka
7a85b7bc35
Merge pull request #304334 from JulienMalka/limesurvey-package
nixos/limesurvey: allow package to be customized
2024-04-21 18:53:26 +02:00
emilylange
2872e10333
nixos/manual: apply cfg.warningsAreErrors to nix eval as well
This change makes `baseOptionsJSON` (`lazy-option.json`) take
our existing `documentation.nixos.options.warningsAreErrors` option into
account to then set the `NIX_ABORT_ON_WARN` environment variable within
its build sandbox accordingly.

Given `documentation.nixos.options.warningsAreErrors` default to true,
our nixpkgs CI check that builds the NixOS manual for each PR, will now
fail when something raises a warning, e.g. as part of the `lib.mdDoc`
deprecation.

This should prevent new PRs with lib.mdDoc from getting merged.

Previously, the manual would build successfully, even if an eval warning
was raised.
2024-04-21 18:01:26 +02:00
Victor Engmark
c11815167f nixos/duosec: Split mkdir mode into chmod command for clarity
As recommended by ShellCheck
<https://github.com/koalaman/shellcheck/wiki/SC2174>.
2024-04-22 01:40:55 +10:00
Weijia Wang
d9ad2e5a1a
Merge pull request #305379 from stuebinm/fcast-receiver-mdDoc
nixos/fcast-receiver: remove uses of lib.mdDoc
2024-04-21 17:19:33 +02:00
Tom Fitzhenry
00ad4eba21 nixos/tests/phosh: check phosh-mobile-settings starts 2024-04-22 00:56:03 +10:00
Michele Guerini Rocco
8b93a430dc
Merge pull request #305689 from rnhmjoj/pr-fix-wpa-secrets
nixos/wireless: correctly handle secrets containing &
2024-04-21 16:07:42 +02:00
Michele Guerini Rocco
23fc571cc3
Merge pull request #305649 from rnhmjoj/pr-fix-wpa-aux
nixos/wireless: create empty config for imperative setup
2024-04-21 16:06:57 +02:00
Preston Hunt
b87790536d nixos/greenclip: restart daemon if it exits 2024-04-21 23:58:10 +10:00
André Schröder
168793f151 digital-ocean: revert "make it easier to use disko"
This reverts parts of commit d87c4e1a72 from @Mic92

After switching from nixos-23.11 to nixos-unstable, I got the following error:

```
$ nixos-rebuild switch --flake nixos/#digitalocean
...
error:
Failed assertions:
- You must set the option ‘boot.loader.grub.devices’ or 'boot.loader.grub.mirroredBoots' to make the system bootable.
```

In my nixos config I don't set boot.loader.grub.devices or boot.loader.grub.mirroredBoots explicitly.

It seems like the values are not really defaulted via mkDefault? I am still relatively new to Nix, not sure how to fix this properly, so I am proposing to revert this change.
2024-04-21 11:36:17 +02:00
rnhmjoj
89a1bde018
nixos/wireless: correctly handle secrets containing &
In the replacement arg of gsub() the & symbol is a special character
that need to be escaped. To avoid this, and further issues due to the
variable name possibly being interpreted as a regex, we do a normal
substring replacement.

This fixes issues #279803.
2024-04-21 09:58:26 +02:00
rnhmjoj
4d2f457f6e
nixos/tests/wpa_supplicant: test allowAuxiliaryImperativeNetworks 2024-04-21 09:53:59 +02:00
Anders Johan Jamtli
11dfebc306
nixos/qemu-vm: set security model 'none' for shared xchg directory
Co-authored-by: Michele Guerini Rocco <rnhmjoj@users.noreply.github.com>
2024-04-21 07:35:44 +02:00
illustris
7862480ab0
Update nixos/doc/manual/release-notes/rl-2405.section.md
Co-authored-by: Ryan Hendrickson <ryan.hendrickson@alum.mit.edu>
2024-04-21 10:27:33 +05:30
illustris
4a9c962aca
nixos/systemd-lib: fix restart/reloadTriggers when passing paths
When passing a path to restartTriggers or reloadTriggers, X-Restart/Reload-Triggers
will get populated by the absolute path of the file on the machine where the
config is evaluated. This patch corrects this behavior.
2024-04-21 09:40:17 +05:30
rnhmjoj
4fa107f1c9
nixos/wireless: create empty config for imperative setup
If allowAuxiliaryImperativeNetworks is enabled, the wpa_supplicant
daemon complains fails to start if /etc/wpa_supplicant.conf does not
exist. As this can be created using wpa_cli (or similar) later, it
shouldn't matter, so let's create an empty one.

This fixes issues #157537, #299466.
2024-04-21 02:10:32 +02:00
Weijia Wang
20e0c45c7a
Merge pull request #304527 from atorres1985-contrib/earlyoom
earlyoom: 1.7 -> 1.8
2024-04-20 23:06:06 +02:00
Martin Weinelt
d68481224a
nixos/release-small: fix eval
Provide nixpkgs.release-checks, which has been extracted out of the
tarball job into a dedicated one.
2024-04-20 22:51:19 +02:00
Sandro
5bfe2b6964
Merge pull request #294641 from devusb/sunshine-module
nixos/sunshine: init
2024-04-20 21:32:50 +02:00
Sandro
decb1678b6
Merge pull request #197193 from onny/manticore-service
nixos/manticore: init module
2024-04-20 20:31:03 +02:00
Bjørn Forsman
c7ab550bbc nixos/deconz: fix curl redirect option in postStart
It should be curl -L (follow redirects), not curl -l (FTP directory
listing option). I know because it's my mistake.

Fixes: d4b989cafc ("nixos/deconz: delay signalling service readiness until it's actually up")
2024-04-20 20:24:39 +02:00
Wolfgang Walther
945a3bbb8b
postgresqlPackages.promscale_extension: remove deprecated and broken package
postgresql14Packages.promscale_extension breaks with:

  Error:
    0: `pgx-0.6.1` shouldn't be used with `cargo-pgx-0.7.4`,
    please use `pgx = "~0.7.4"` in your `Cargo.toml`.

However, pinning cargo-pgx to 0_6_1 via the following

  buildPgxExtension.override { cargo-pgx = cargo-pgx_0_6_1; }

does not work either, because the build then fails with:

  thread 'main' panicked at /build/promscale_extension-0.8.0-vendor.tar.gz/proc-macro2/src/fallback.rs:756:9:
  "__mbstate_t_union_(unnamed_at_/nix/store/ij144ma6vs8acil8r9hgr8xkb1dp9azg-glibc-2_39-5-dev/include/bits/types/__mbstate_t_h_16_3)" is not a valid Ident

This seems to be related to [1], which indicates that this is a
problem with newer LLVM / clang toolchains.

At the same time th upstream package is deprecated / archived since
the 2nd of April 2024 [2]. Additionally this package is unfree and
thus very unlikely to be forked. Since we can't expect this to be
fixed, the only sensible thing to do is to remove the package.

[1]: https://github.com/rust-lang/rust-bindgen/issues/2312
[2]: https://github.com/timescale/promscale/issues/1836
2024-04-20 20:10:13 +02:00
Pol Dellaiera
e540698524
Merge pull request #302136 from savyajha/firefly-iii
firefly-iii: init at 6.1.13, nixos/firefly-iii: init
2024-04-20 13:56:08 +02:00
K900
8f9e7071ff
Merge pull request #304730 from K900/bigger-paralleler
pkgs/top-level: split release-checks into a separate job
2024-04-20 12:47:13 +03:00