Commit Graph

25189 Commits

Author SHA1 Message Date
Moritz 'e1mo' Fromm
a2e2972ff3 nixos/bird-lg: Add maintainers 2023-04-25 10:41:35 +02:00
Moritz 'e1mo' Fromm
b63e0d77b8 nixos/bird-lg: Rework command attribute generation
Prior to this change, arguments were not escaped nor was the possiblity
for arguments to be empty accounted for. This led to a kinda broken
startup script were arguments were "shifted", e.g. leaving allowedIPs
empty in order to use the default would cause `--bird` (the following
arguments key) to be used as the value. This was also observable when
e.g. the navbarBrand had a space in it where only everything until the
first space would show up.

With the new approach, all arguments are consistently escaped and empty
ones left out.

`extraConfig` now supports and prefers lists of strings instead of
lines (still supported but warned). This is due to the fragility with
respect to e.g. forgetting trailing backslashes after each line.
`frontend.{servers,domain}` are unset by default since the frontend
needs (the upstream project itself has no empty defaults here) needs
them to be set. If not set, an error is caused at build-time.

`proxy.birdSocket` has a new default: The projects README[^1] states
`/var/run/bird/bird.ctl` as the current default value. And bird2 on
NixOS does use this path too.

[^1]: https://github.com/xddxdd/bird-lg-go#proxy
2023-04-25 10:41:35 +02:00
gaykitty
c251c021fe nixos/stargazer: init 2023-04-24 21:52:19 -03:00
Guillaume Girol
884ac29401
Merge pull request #227782 from everlanes/roundcube_bugfix_postgresql_passwd
nixos/roundcube: fix remote postgresql server
2023-04-24 18:53:21 +00:00
Ryan Lahfa
7812abd3d0
Merge pull request #227881 from NixOS/qemu-vm/mount-host-nix-store
nixos/qemu-vm: introduce `virtualisation.mountHostNixStore` option
2023-04-24 19:39:54 +02:00
Thomas
4e8bde773f
nixos/{consul-template,vault-agent}: init 2023-04-24 06:55:57 +02:00
Nick Cao
3e3d82f42c
Merge pull request #227232 from datafoo/nixos-acme-fix-options-type
nixos/acme: fix options type
2023-04-24 10:01:04 +08:00
Raito Bezarius
0df5257b82 nixos/qemu-vm: introduce virtualisation.mountHostNixStore option
Now that `useBootLoader` produces a full system image, moving disk
images can be slow because they have a full Nix store in them.

It does not make sense to keep the 9p mountpoint to shadow the
/nix/store of the VM.

We disable it if we have `useBootLoader` and introduce an option for
easy overrides.
2023-04-23 23:58:46 +02:00
Sandro
90e2a0670d
Merge pull request #225829 from IndeedNotJames/nixos.consul 2023-04-23 23:50:14 +02:00
Andreas Brinner
9d5dba7170 nixos/roundcube: read only first line of password file
Only read the first line of the password file, if has multiple lines.
Mention that behaviour in options documentation.
2023-04-23 21:05:48 +02:00
Federico Damián Schonborn
3c0f50b28c
nixos/budgie: Add services.xserver.desktopManager.budgie.extraPlugins option
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-23 10:39:37 -03:00
Andreas Brinner
78fb35ce39 nixos/roundcube: extend documentation for passwordFile
The passwordFile must be formatted correctly. Added some information
about how the file content should look like.
2023-04-23 14:05:40 +02:00
Andreas Brinner
279eeae178 nixos/roundcube: fix roundcube-setup start
When using Roundcube with a non local PostgreSQL database wait for
network start before running roundcube-setup.service
Otherwise the database is not reachable and the service fails.
2023-04-23 13:11:28 +02:00
Andreas Brinner
2af4a9bc09 nixos/roundcube: fix PostgreSQL password
Extract PostgreSQL database password for Roundcube from .pgpass file.
The password file is used in two locations:

  1. in the Roundcube config.php
  2. in the systemd setup service that initializes the roundcube
     database

These two services need the password in different formats.

Keep the password file in PostgreSQL standard format and extract the
password for the Roundcube config (see #215986).
2023-04-23 13:11:28 +02:00
Will Fancher
e56084d2a0 systemd-stage-1: Revert assertions about initrd commands 2023-04-22 10:25:16 -04:00
Martin Weinelt
f9391cf538
Merge pull request #227557 from davidkna/patch-4
nixos/gitea: remove extra `"` in prestart
2023-04-22 15:49:55 +02:00
Florian Klink
7ad24e96ea
Merge pull request #226237 from ElvishJerricco/systemd-stage-1-unhide-docs
Systemd stage 1: Unhide docs and round out assertions about unsupported features.
2023-04-22 10:02:23 +02:00
Florian Klink
d6eb7caaa1
Merge pull request #227354 from flokli/firefox-web-eid
nixos/firefox: add config option for Web eID support
2023-04-22 09:32:06 +02:00
David Knaack
3856e84b79 nixos/gitea: remove extra " in prestart 2023-04-22 09:12:02 +02:00
Will Fancher
1598338521 systemd-stage-1: Make networkd options shallow 2023-04-21 21:52:38 -04:00
Federico Damián Schonborn
375079d28c
nixos/budgie: Make default backgrounds available in Budgie Control Center
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-21 21:40:13 -03:00
Will Fancher
5c46e6f4e3 systemd-stage-1: Add assertions for unsupported options. 2023-04-21 13:05:12 -04:00
Will Fancher
8f9416e9e3 systemd-stage-1: Unhide documentation 2023-04-21 13:04:15 -04:00
Florian Klink
6b27ed3229
Merge pull request #169116 from ElvishJerricco/systemd-stage-1-networkd
Systemd stage 1 networkd
2023-04-21 18:40:59 +02:00
Jan Tojnar
e25dc4a95e nixos/nginx: Fix listen string generation
This regressed in 327b0cff7a breaking nixosTests.php, among other things.
2023-04-21 17:18:45 +02:00
Raito Bezarius
614b83a328 nixos/virtualisation/qemu-vm: remove persistBootDevice option
This option has been introduced in 678eed323f without realizing there was this
PR inflight, unfortunately, it collide with what this PR does and make
it irrelevant.

Therefore, I remove it here.
2023-04-21 13:00:19 +02:00
Raito Bezarius
76c7b656bf nixos/qemu-vm: refactor bootDisk generation using make-disk-image 2023-04-21 13:00:18 +02:00
Maximilian Bosch
636e9f7418
Merge pull request #227235 from Ma27/bump-nextcloud
nextcloud: 25.0.5 -> 25.0.6, 26.0.0 -> 26.0.1, remove nc24
2023-04-21 11:14:29 +02:00
Weijia Wang
e2d6255e9e
Merge pull request #226882 from wegank/parallels-guests-final
systemd.services.prlshprint: fix type
2023-04-21 10:37:11 +03:00
Nick Cao
515da5b664
Merge pull request #227243 from misuzu/netbird-update
netbird: 0.14.6 -> 0.16.0
2023-04-21 13:55:29 +08:00
IndeedNotJames
6ad64af778
nixos/consul: use lib.getExe where possible
which allows the use of custom packages, that may not have binaries called `consul` or `consul-alerts` in their `/bin/*` (though arguably pretty unlikely to be ever used)
2023-04-21 03:46:54 +02:00
IndeedNotJames
9c1f292155
nixos/consul: fix package reference in service $PATH 2023-04-21 03:46:54 +02:00
Timothy DeHerrera
e30dafc09b
nixos: add module for GameScope 2023-04-20 17:12:21 -06:00
Florian Klink
effa05c052 nixos/firefox: add config option for Web eID support
This allows users to set
`programs.firefox.nativeMessagingHosts.euwebid = true` to make the
native companion app available in Firefox.

It's used by the Web eID browser extension
(https://addons.mozilla.org/en/firefox/addon/web-eid-webextension/),
which can be tried out at https://web-eid.eu/ - pressing the
"Authenticate" button there should open a new window.
2023-04-21 00:25:44 +02:00
Tom Hubrecht
e41c569429 nixos/authelia: Allow using Unix sockets 2023-04-20 23:53:16 +02:00
datafoo
066166cf49 nixos/fail2ban: add extraSettings option 2023-04-20 16:57:24 +02:00
Robert Hensing
73d2aeacf5
Merge pull request #206179 from ThinkChaos/refactor/gitea-settings
gitea: new options and settings refactor
2023-04-20 16:53:51 +02:00
Artturi
b83db86a9e
Merge pull request #222080 from Stunkymonkey/nixos-optionalString 2023-04-20 16:07:30 +03:00
misuzu
d5bb5259e4 nixos/netbird: allow configuring dns 2023-04-20 14:22:19 +03:00
Maximilian Bosch
0abc5bcc7e
nixos/nextcloud: for nc26 it's not necessary anymore to set enableBrokenCiphersForSSE to false 2023-04-20 12:20:52 +02:00
datafoo
2890af5e4b nixos/acme: fix options type
null is a possible default so the type must reflect that.
2023-04-20 11:52:57 +02:00
Maximilian Bosch
430f1dcdbd
nextcloud: remove nextcloud24, 25.0.5 -> 25.0.6, 26.0.0 -> 26.0.1 2023-04-20 11:34:54 +02:00
K900
449e8cd8d1 nixos/plasma5: install kde-inotify-survey 2023-04-20 11:54:06 +03:00
Sandro
84653ac6c7
Merge pull request #226150 from SuperSandro2000/lorri-direnv
nixos/lorri: install direnv
2023-04-20 10:49:23 +02:00
Flakebi
603e89eef9 kanidm: BindMount certificate paths
Bind mount the base dirs of the tls key and chain into the service.

Make sure to bind every directory just once. The test failed on ofborg
when /nix/store and the certificate path in /nix/store/<some path> were
bound.
2023-04-20 02:32:37 +02:00
Artturi
496c532a03
Merge pull request #105694 from laikq/master 2023-04-19 23:38:05 +03:00
Luke Granger-Brown
9ae46a7cf4
Merge pull request #123357 from R-VdP/virtio_scsi_vendor
nixos/nixos-generate-config: include new device ID for virtio_scsi
2023-04-19 18:51:05 +01:00
datafoo
3403ee0602 nixos/fail2ban: add bantime option 2023-04-19 19:18:31 +02:00
ThinkChaos
70cf02924e
nixos/gitea: convert more simple settings to freeform
Also update `settings.server.PROTOCOL` to use non deprecated values.
2023-04-19 12:18:47 -04:00
ThinkChaos
2901c2f94e
nixos/gitea: quote paths in preStart script 2023-04-19 12:18:47 -04:00
ThinkChaos
eba0db3c1c
nixos/gitea: add customDir option
Use case is storing secrets in a non persistent directory as I manage
them separately from this module.
2023-04-19 12:18:47 -04:00
ThinkChaos
f7b9a1c561
nixos/gitea: disable LFS related code when it is not configured 2023-04-19 12:18:47 -04:00
ThinkChaos
184131f50d
nixos/gitea: make service group configurable 2023-04-19 12:18:46 -04:00
ThinkChaos
f8d5d6cd02
nixos/gitea: disable createDatabase assert when using sqlite
Assert doesn't make sense in that case since `database.user` isn't used.
2023-04-19 12:18:46 -04:00
Ryan Lahfa
645bc49f34
Merge pull request #225981 from jnsgruk/multipass-wait-online
multipass: don't start until online
2023-04-19 18:04:47 +02:00
Ryan Lahfa
8ef336e870
Merge pull request #224491 from LeSuisse/moodle-php-81
nixos/moodle: use PHP 8.1
2023-04-19 08:35:32 +02:00
Ryan Lahfa
2fa5e844de
Merge pull request #223749 from Alexis211/add-wgautomesh
wgautomesh: init at 0.1.0
2023-04-19 08:26:09 +02:00
laikq
376e02c721 nixos/cupsd: add udev rules of driver packages 2023-04-19 03:38:02 +03:00
Sandro
349ec9c376
Merge pull request #226689 from tyxieblub/plausible 2023-04-19 01:26:22 +02:00
Sandro
ce4159b4cd
Merge pull request #226514 from AtaraxiaSjel/update/ivpn 2023-04-19 00:57:19 +02:00
linsui
7b6d5d4158
nixos/neovim: add runtime file to etc/xdg/nvim (#221832)
Else the files in the runtime can't be accessed from the vimrc. I also remove the /etc. I thought it's a leftover of the old runtime implementation which is replaced in 307b125.

Co-authored-by: linsui <linsui555@gmail.com>
2023-04-18 23:20:54 +02:00
Dmitriy Kholkin
706060e47d
nixos/ivpn: init 2023-04-18 22:11:10 +03:00
Artturi
9a1f5d4248
Merge pull request #226889 from Artturin/fixlints2 2023-04-18 21:52:21 +03:00
R-VdP
3078cdb780 nixos/nixos-generate-config: include new device ID for virtio_scsi
Device IDs found here:
https://devicehunt.com/view/type/pci/vendor/1AF4/device/1048
2023-04-18 18:05:53 +00:00
Artturin
eac28f38d6 treewide: fix lints
Arg to lib.optional is a list

build time tool in buildInputs

*Flags not a list

https://github.com/nix-community/nixpkgs-lint
2023-04-18 20:20:56 +03:00
Maurice Zhou
bcccfee659 tmux: add note for tmux-direct in module option
Signed-off-by: Maurice Zhou <yuchen@apvc.uk>
2023-04-18 18:21:15 +02:00
Weijia Wang
8eb15c5320 systemd.services.prlshprint: fix type 2023-04-18 18:55:47 +03:00
Domen Kožar
31a3e311da
Merge pull request #226831 from domenkozar/cachix-watch-store-restarts
cachix-watch-store: restart indefinitely
2023-04-18 16:26:25 +01:00
Sandro
4f6b51d99c
Merge pull request #224212 from Guekka/monica
monica: init at 4.0.0 & nixos-module
2023-04-18 16:58:42 +02:00
Sandro
ed7dd78b3f
Merge pull request #225274 from tie/nixos-pufferpanel
nixos/pufferpanel: init
2023-04-18 16:57:14 +02:00
Domen Kožar
1d85cfbd77 cachix-watch-store: restart indefinitely 2023-04-18 10:58:33 +01:00
Linus Heckemann
b14aded48a
Merge pull request #222617 from oddlama/esphome
nixos/esphome: init module
2023-04-18 06:45:40 +02:00
Will Fancher
3cb9534df6 systemd-initrd: Flush networkd 2023-04-17 16:41:36 -04:00
Will Fancher
8598234651 systemd-initrd: dbus 2023-04-17 16:41:36 -04:00
Will Fancher
834ec135ce systemd-initrd: OpenVPN 2023-04-17 16:41:35 -04:00
Will Fancher
0698a1cf04 systemd-initrd: sshd 2023-04-17 16:41:35 -04:00
Will Fancher
748f1329fc systemd-initrd: Automatically configure networking.interfaces 2023-04-17 16:41:35 -04:00
Will Fancher
dd392d7c76 systemd-initrd: networkd 2023-04-17 16:41:34 -04:00
tyxieblub
efde50d9f5 nixos/plausible: add package option 2023-04-17 21:20:03 +02:00
imlonghao
bc07f0ac31
borgmatic: fix timer wantedBy 2023-04-17 23:10:23 +08:00
Alex Auvolat
a727a3d676 nixos/wgautomesh: init at 0.1.0 2023-04-17 12:37:18 +02:00
Weijia Wang
4c3edba856
Merge pull request #225750 from r-ryantm/auto-update/rtsp-simple-server
rtsp-simple-server: 0.21.6 -> 0.22.0
2023-04-17 10:28:44 +03:00
Sandro
d85555f9ac
Merge pull request #224996 from SuperSandro2000/smokeping-ln-f 2023-04-16 23:05:25 +02:00
lewo
ff24a05847
Merge pull request #206445 from nlewo/ssytemd-boot-fail
systemd-boot-builder only ignores OSError "invalid argument"
2023-04-16 22:17:28 +02:00
Guillaume Girol
40bbc9ae53
Merge pull request #225285 from symphorien/ihm-remove
python3.pkgs.ihatemoney: remove
2023-04-16 19:23:00 +00:00
Guillaume Girol
3cc8b4477e python3.pkgs.ihatemoney: remove
sqlalchemy and flask releases break ihatemoney faster than upstream
updates, so the maintenance burden increases over time.
2023-04-16 16:04:35 +02:00
Ivan Trubach
4bbe09068a nixos/pufferpanel: init 2023-04-16 15:41:24 +03:00
Atemu
445ef28548
Merge pull request #225748 from Atemu/buildFHSEnvBubblewrap-by-default
buildFHSEnv: use bubblewrap by default
2023-04-16 13:03:36 +02:00
Edgar B
33a7f368b4 nixos/monica: init 2023-04-16 11:24:00 +02:00
Atemu
f63a12f296 tree-wide: buildFHSUserEnv -> buildFHSEnv 2023-04-16 10:15:13 +02:00
Sandro
893f073fe1
Merge pull request #224171 from alan-strohm/master
nixos/proxmox-image: don't assume virtio0 is using local-lvm storage
2023-04-16 03:30:46 +02:00
Ryan Lahfa
14577497e1
Merge pull request #223214 from Izorkin/update-zsh-hostname
nixos/zsh: allow fqdn hostname output
2023-04-15 22:23:31 +02:00
Ryan Lahfa
b914dffe7e
Merge pull request #224494 from LeSuisse/roundcube-php81
nixos/roundcube: use PHP 8.1
2023-04-15 22:12:31 +02:00
Ryan Lahfa
096ad89a8c
Merge pull request #222826 from Peter015/patch-1
regreet: run through dbus
2023-04-15 22:02:19 +02:00
John Ericson
0794f40589
Merge pull request #226288 from Luflosi/kubo-better-api-access
nixos/kubo: improve API access
2023-04-15 15:07:01 -04:00
happysalada
0cdd78126c qdrant: module increase limitnofile 2023-04-15 13:45:38 -04:00
Nick Cao
7a2fcddf52
Merge pull request #223730 from zendo/clash-verge-module
nixos/clash-verge: init module
2023-04-15 22:00:55 +08:00
Luflosi
f2be3ae30d
nixos/kubo: restrict access to the API to users in a group by default 2023-04-15 15:25:20 +02:00
Luflosi
7ceebbb35b
nixos/kubo: allow multiple API and Gateway addresses
The daemon allows specifying an array of multiaddrs for Addresses.API and Addresses.Gateway, so the NixOS module should allow that as well.
2023-04-15 15:25:06 +02:00
Luflosi
929a00bd84
nixos/kubo: give normal users access to the daemon by default
Fixes https://github.com/NixOS/nixpkgs/issues/223289.

This doesn't reduce the security in any way since it was already possible for normal users to do what I do here and create such a fake repo for themselves and set their $IPFS_PATH variable to it. It was and still is also possible to just use the --api CLI option.
This change just removes the manual setup that would otherwise be required.

We wouldn't need this workaround if https://github.com/ipfs/kubo/pull/9366 was merged but the fix seems to have been ignored upstream. Patching it ourselves seems like a bad idea since the patch has security implications.
2023-04-15 15:24:58 +02:00