Florian Jacob
14571f5ed0
nixos/mysql: fix initialScript option
...
which was wrongly specified as types.lines
Prevent it from getting copied to nix store as people might use it for
credentials, and make the tests cover it.
2019-04-01 21:08:47 +02:00
Florian Jacob
77978c1518
nixos/mysql: fix support for non-specified database schema
...
and increase test coverage to catch this
2019-04-01 20:01:29 +02:00
Silvan Mosberger
81e2fb5303
Merge pull request #58458 from worldofpeace/colord/no-root
...
nixos/colord: don't run as root
2019-03-30 04:06:55 +01:00
worldofpeace
f22fbe1175
nixos/colord: don't run as root
...
Using systemd.packages because there's
a system colord service and colord-session user service
included.
2019-03-29 20:56:06 -04:00
Florian Klink
aa2878cfcf
Merge pull request #58284 from bgamari/gitlab-rails
...
nixos/gitlab: Package gitlab-rails
2019-03-28 21:12:15 +01:00
Silvan Mosberger
9d4a6cceb7
Merge pull request #57550 from florianjacob/typed-mysql-options
...
nixos/mysql: specify option types, add tests
2019-03-28 18:55:53 +01:00
Ben Gamari
af909b3238
nixos/gitlab: Package gitlab-rails
...
This utility (particularly `gitlab-rails console`) is packaged by GitLab
Omnibus and is used for diagnostics and maintenance operations.
2019-03-28 11:45:31 -04:00
Ben Gamari
b90f5f03c2
nixos/gitaly: Run gitaly with procps in scope
...
Gitaly uses `ps` to track the RSS of `gitlab-ruby` and kills it when it
detects excessive memory leakage. See
https://gitlab.com/gitlab-org/gitaly/issues/1562 .
2019-03-28 10:48:51 -04:00
Maximilian Bosch
3fc3096da8
Merge pull request #58432 from aanderse/mailcatcher
...
nixos/mailcatcher: init module for existing package
2019-03-27 16:11:15 +01:00
Aaron Andersen
395ec8c0d4
nixos/mailcatcher: init module for existing package
2019-03-27 09:15:47 -04:00
Benjamin Hipple
8b3500c650
nixos.cron: fix docstring sentence
2019-03-26 23:22:20 -04:00
Daiderd Jordan
018d329dbc
Merge pull request #57928 from averelld/plex-update
...
plex: 1.14.1.5488 -> 1.15.1.791
2019-03-26 20:22:34 +01:00
Florian Klink
476760bfeb
Merge pull request #57578 from bgamari/gitlab-extra-initializers
...
nixos/gitlab: Allow configuration of extra initializers
2019-03-26 11:08:11 +01:00
Matthew Bauer
d468f4b27e
Merge pull request #57139 from delroth/firewall-dedup
...
nixos/firewall: canonicalize ports lists
2019-03-25 22:15:17 -04:00
Ben Gamari
f2bdc91b35
nixos/gitlab: Allow configuration of extra initializers
...
This adds a configuration option allowing the addition of additional
initializers in config/extra-gitlab.rb.
2019-03-25 15:18:35 -04:00
Danylo Hlynskyi
40cc269561
Merge branch 'master' into postgresql-socket-in-run
2019-03-25 01:06:59 +02:00
Dmitry Kalinkin
cf7f234ff5
Merge pull request #57527 from Chiiruno/dev/meguca
...
Init: statik, Update: easyjson, quicktemplate, meguca, hydron
2019-03-24 15:26:37 -04:00
worldofpeace
ffe35f3f76
nixos/pantheon: add meta.maintainers
2019-03-24 07:04:28 -04:00
worldofpeace
f812cba2cf
nixos/pantheon/files: add meta.maintainers
2019-03-24 07:04:28 -04:00
worldofpeace
415bceed8e
nixos/pantheon/contractor: add meta.maintainers
2019-03-24 07:04:28 -04:00
worldofpeace
3565b1775a
nixos/gsignond: add meta.maintainers
2019-03-24 07:04:28 -04:00
Dmitry Kalinkin
6f95ac3588
Merge pull request #57988 from lopsided98/buildbot-update
...
buildbot: 1.8.1 -> 2.1.0
2019-03-23 20:38:20 -04:00
markuskowa
d71472beaf
Merge pull request #57434 from ck3d/user-dwm
...
nixos dwm: start user installed dwm if available
2019-03-23 23:49:34 +01:00
Ben Gamari
2036550a46
nixos/docker-registry: Allow use of non-filesystem storage
...
Previously this module precluded use of storage backends other than
`filesystem`. It is now possible to configure another storage backend
manually by setting `services.dockerRegistry.storagePath` to `null` and
configuring the other backend via `extraConfig`.
2019-03-23 10:32:56 +00:00
Okina Matara
40d7079f79
nixos/meguca: Add videoPaths, set postgresql version to 11
2019-03-23 01:19:29 -05:00
Ben Wolsieffer
b2e11e0cdf
buildbot: 1.8.1 -> 2.1.0
2019-03-22 18:43:15 -04:00
Averell Dalton
028a4b6a53
plex: 1.14.1.5488 -> 1.15.2.793
2019-03-22 20:33:22 +01:00
Sarah Brofeldt
78c95f561f
Merge pull request #58031 from dotlambda/elasticsearch-curator-application
...
elasticsearch-curator: add top-level package using older click
2019-03-22 20:11:54 +01:00
Dmitry Kalinkin
0e57b98b2c
Merge pull request #57596 from artemist/nginx-return
...
nixos/nginx: add return option to location
2019-03-22 14:08:33 -04:00
Vladimír Čunát
4c3ec0e325
nixos docs: run the formatting tool (no content change)
...
As documented in the docs themselves :-)
2019-03-22 14:44:11 +01:00
Vladimír Čunát
11d204a9c4
nixos docs: improve GPU driver documentation
...
I'm not 100% sure about the incompatibility lines,
but I believe it's better to discourage these anyway.
If you find better information, feel free to amend...
The 32-bit thing is completely GPU-agnostic, so I can't see why we had
it separately for proprietary drivers and missing for the rest.
2019-03-22 14:31:17 +01:00
Robert Schütz
c0409de98d
elasticsearch-curator: add top-level package using older click
...
See https://github.com/NixOS/nixpkgs/pull/58023 for a discussion
of why this is necessary. The upstream issue can be found at
https://github.com/elastic/curator/pull/1280 .
2019-03-21 11:53:32 +01:00
Samuel Leathers
cafd07a54e
Merge pull request #56423 from Izorkin/nginx-unit
...
unit: add service unit and update package
2019-03-20 13:08:05 -04:00
Yurii Izorkin
f56d507e06
nixos/datadog-agent: change start command ( #57871 )
2019-03-18 13:31:04 -07:00
Izorkin
42a99b1be2
nixos/unit: init service unit
2019-03-16 19:54:21 +03:00
Vladimír Čunát
3aecf21239
Merge #56922 : nixos/knot: init basic service + tests
2019-03-16 09:17:15 +01:00
Florian Jacob
5bec5e8cb1
nixos/mysql: specify option types
2019-03-15 16:32:36 +01:00
Silvan Mosberger
f8de52a2fe
Revert "nixos/nginx: support h2c"
2019-03-15 14:31:11 +01:00
Ryan Mulligan
4b6a41a939
Merge pull request #57077 from callahad/brother-dsseries
...
dsseries: init at 1.0.5-1
2019-03-14 21:17:31 -07:00
aszlig
ef553788d0
postgresql: Move socket dir to /run/postgresql
...
The default, which is /tmp, has a few issues associated with it:
One being that it makes it easy for users on the system to spoof a
PostgreSQL server if it's not running, causing applications to connect
to their provided sockets instead of just failing to connect.
Another one is that it makes sandboxing of PostgreSQL and other services
unnecessarily difficult. This is already the case if only PrivateTmp is
used in a systemd service, so in order for such a service to be able to
connect to PostgreSQL, a bind mount needs to be done from /tmp to some
other path, so the service can access it. This pretty much defeats the
whole purpose of PrivateTmp.
We regularily run into issues with this in the past already (one example
would be https://github.com/NixOS/nixpkgs/pull/24317 ) and with the new
systemd-confinement mode upcoming in
https://github.com/NixOS/nixpkgs/pull/57519 , it makes it even more
tedious to sandbox services.
I've tested this change against all the postgresql NixOS VM tests and
they still succeed and I also grepped through the source tree to replace
other occasions where we might have /tmp hardcoded. Luckily there were
very few occasions.
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @ocharles, @thoughtpolice, @danbst
2019-03-15 04:52:35 +01:00
Silvan Mosberger
fb879ae920
Merge pull request #57174 from worldofpeace/pantheon/cleanup
...
nixos/pantheon cleanup
2019-03-15 01:26:49 +01:00
Matthew Bauer
b703c4d998
plasma5: fix typo from pr #57037
...
Thanks @Yarny0
2019-03-14 14:09:13 -04:00
Martin Weinelt
a978d3dcd2
nixos/knot: init
2019-03-14 01:28:53 +01:00
Artemis Tosini
fee854ed01
nixos/nginx: add return option to location
2019-03-13 17:31:01 +00:00
Andrew Childs
c53703a6b2
nixos/prometheus: use append instead of insert for opening firewalls ( #55224 )
...
Inserting with `-I` causes the rules to placed before `ctstate`
tracking, while `-A` places them alongside all other allow rules.
2019-03-13 12:44:36 +02:00
Markus
7e71cd8292
nixos/flannel: Add iptables package to service path
2019-03-12 15:30:33 +00:00
Johan Thomsen
292c1ce7ff
nixos/gitlab: added gzip and bzip2 as dependencies for gitaly
2019-03-12 15:04:45 +00:00
Matthew Bauer
7890494813
Merge pull request #57037 from matthewbauer/remove-xdg-desktop-menu-dummy
...
plasma: handle kbuildsycoca5 better
2019-03-11 22:58:40 -04:00
Christian Kögler
9f7f16cd7b
nixos dwm: start user installed dwm if available
...
dwm has no configuration file. The user has to install his own version.
2019-03-11 20:18:08 +01:00
worldofpeace
36d4dba317
nixos/pantheon: more mkDefault
2019-03-09 17:29:29 -05:00