Peter Hoeg
d44916d12f
nixos/activation: allowed quoted values in /etc/os-release
2022-03-09 17:07:48 +08:00
Bernardo Meurer
e3a73aed43
Merge pull request #163255 from NickCao/nix
...
nixVersions.stable: 2.6.1 -> 2.7.0
2022-03-08 10:22:51 -08:00
Nick Cao
3c09fec700
nix-fallback-paths.nix: Update to 2.7.0
2022-03-08 22:40:16 +08:00
Sandro
a879922e62
Merge pull request #163208 from Izorkin/fix-modsecurity-nginx
2022-03-08 13:11:42 +01:00
Sandro
e9183df241
Merge pull request #157923 from tim-tx/update/dendrite-0.6.0
2022-03-08 12:51:04 +01:00
Sandro
1a0b804799
Merge pull request #162866 from euank/k3s-unified-cgroups
2022-03-08 12:39:37 +01:00
Sandro
0ffade9012
Merge pull request #162214 from ncfavier/redis-bind-localhost
2022-03-08 12:38:39 +01:00
Izorkin
b672e4dd2c
nginxModules: add option disableIPC
...
The disableIPC option is required to checking enabled nginxModules
and disable the SystemCallFilter IPC filter.
2022-03-08 14:37:11 +03:00
Artturi
5cd34745f0
Merge pull request #161701 from RyanGibb/zsh-autosuggest-strategy-array
2022-03-08 12:01:07 +02:00
Kim Lindberger
b71a8e2383
Merge pull request #162095 from midchildan/fix/keycloak-mysql
...
nixos/keycloak: fix database provisioning issues
2022-03-07 20:13:01 +01:00
Timo Kaufmann
94ea3a8899
Merge pull request #160777 from LunNova/improve-input-remapper-module
...
nixos/input-remapper: Fix missing [], add more options, add test
2022-03-07 18:51:08 +01:00
Maciej Krüger
75ea3ea9b8
Merge pull request #157438 from sbruder/nitter-package-option
2022-03-07 18:50:27 +01:00
Luna Nova
865e0df2fc
nixos/input-remapper: add nixos test for input-remapper
2022-03-07 08:31:40 -08:00
Luna Nova
d8cb494765
nixos/input-remapper: Fix missing [] for package, add enableUdevRules and serviceWantedBy options, add meta.maintainers
2022-03-07 08:31:40 -08:00
Ryan Gibb
34b5dd453b
nixos/zsh-autosuggestions: ZSH_AUTOSUGGEST_STRATEGY array
...
zsh-autosuggestions supports having fallback strategies expressed
through the ZSH_AUTOSUGGEST_STRATEGY array. For example,
`ZSH_AUTOSUGGEST_STRATEGY=(history completion)`. We should also support
this.
2022-03-07 16:29:00 +00:00
Sandro
652aa6df2c
Merge pull request #158015 from j0hax/kclockd-integration
2022-03-07 17:21:08 +01:00
Euan Kemp
e6d1c597f1
nixos/k3s: use the systemd driver for docker + unified cgroups
...
This is necessary for it to work at all. The single-node-docker test
will fail without this change.
Also add a release note for it.
2022-03-05 11:30:53 -08:00
tim-tx
5a6b36e498
dendrite: 0.5.1 -> 0.6.5
2022-03-05 11:41:31 -05:00
Martin Weinelt
5556fc8f8f
Merge pull request #162407 from mweinelt/zigbee2mqtt
2022-03-05 15:33:57 +01:00
piegames
be4a0e6e40
Merge pull request #158605 from mweinelt/synapse-rfc42
...
nixos/matrix-synapse: migrate to rfc42 settings and formatter
2022-03-05 15:23:52 +01:00
piegames
cd7e516b26
Merge pull request #156858 : nixos/polkit: don't enable by default
2022-03-05 14:48:35 +01:00
Martin Weinelt
8a95d9fede
nixos/flatpak: enable polkit
...
via https://github.com/NixOS/nixpkgs/pull/156858#issuecomment-1022254342
2022-03-05 13:57:30 +01:00
Johannes Arnold
e21874098d
nixos/kclock: integrate with dbus
2022-03-05 12:38:36 +01:00
ngerstle
8aaa0699db
k3s: enable enableUnifiedCgroupHierarchy
2022-03-05 00:18:17 -08:00
Sandro
13c9be5066
Merge pull request #160482 from jansol/pipewire
2022-03-05 03:08:25 +01:00
Martin Weinelt
f799a02bca
nixos/synapse: move into matrix category
2022-03-04 23:57:35 +01:00
Martin Weinelt
a483264931
nixos/matrix-synapse: fix registerNewMatrixUser script
2022-03-04 23:57:34 +01:00
Martin Weinelt
d918011885
nixos/matrix-synapse: update manual with settings option
2022-03-04 23:57:29 +01:00
Martin Weinelt
f7286992d2
nixos/matrix-synapse: migrate to rfc42 settings and formatter
2022-03-04 23:57:28 +01:00
Pascal Bach
b5fa1aa46f
Merge pull request #162496 from Baughn/master
...
pam: Fix google-authenticator reference
2022-03-04 17:18:17 +01:00
Yaya
38246ed194
nixos/snowflake-proxy: init
...
This commit introduces snowflake-proxy [1], a system to circumvent internet
censorship.
[1] https://snowflake.torproject.org/
2022-03-04 08:41:38 -06:00
Naïm Favier
2e46cc1f00
nixos/earlyoom: remove useKernelOOMKiller
...
This option is deprecated and ignored by earlyoom since 1.2.
2022-03-04 13:04:24 +00:00
Janne Heß
803f7d4af5
Merge pull request #161838 from helsinki-systems/feat/stc-less-socket-restarts
...
nixos/switch-to-configuration: Document and test handling of socket-activated services
2022-03-04 09:32:55 +01:00
Jonas Heinrich
9a30f53ffe
nixos/firejail: Fix order of extrsArgs before profile wrappedBinaries option
2022-03-03 21:35:37 -05:00
Peter Hoeg
bae181d3f0
nixos/os-release: generate from attrset
2022-03-04 09:36:40 +08:00
Janne Heß
1def557525
nixos/switch-to-configuration: Document and test socket-activated services
2022-03-03 20:49:20 +01:00
Jonas Heinrich
764670261a
nixos/opensnitch: Add options to configure daemon
2022-03-02 18:38:56 -05:00
Renaud
671a068a01
Remove F-PROT package and service module (EoL) ( #160372 )
2022-03-02 21:51:47 +02:00
aszlig
7286be7e81
nixos/systemd-confinement: Allow shipped unit file
...
In issue #157787 @martined wrote:
Trying to use confinement on packages providing their systemd units
with systemd.packages, for example mpd, fails with the following
error:
system-units> ln: failed to create symbolic link
'/nix/store/...-system-units/mpd.service': File exists
This is because systemd-confinement and mpd both provide a mpd.service
file through systemd.packages. (mpd got updated that way recently to
use upstream's service file)
To address this, we now place the unit file containing the bind-mounted
paths of the Nix closure into a drop-in directory instead of using the
name of a unit file directly.
This does come with the implication that the options set in the drop-in
directory won't apply if the main unit file is missing. In practice
however this should not happen for two reasons:
* The systemd-confinement module already sets additional options via
systemd.services and thus we should get a main unit file
* In the unlikely event that we don't get a main unit file regardless
of the previous point, the unit would be a no-op even if the options
of the drop-in directory would apply
Another thing to consider is the order in which those options are
merged, since systemd loads the files from the drop-in directory in
alphabetical order. So given that we have confinement.conf and
overrides.conf, the confinement options are loaded before the NixOS
overrides.
Since we're only setting the BindReadOnlyPaths option, the order isn't
that important since all those paths are merged anyway and we still
don't lose the ability to reset the option since overrides.conf comes
afterwards.
Fixes: https://github.com/NixOS/nixpkgs/issues/157787
Signed-off-by: aszlig <aszlig@nix.build>
2022-03-02 11:42:44 -08:00
Martin Weinelt
d78f8c588d
nixos/udisks2: enable polkit
2022-03-02 17:38:36 +01:00
Kevin Cox
79862ae905
Merge pull request #161008 from rhysmdnz/xone
...
xone: init package and module
2022-03-02 11:26:51 -05:00
Svein Ove Aas
cf0f406ed6
pam: Fix google-authenticator reference
2022-03-02 15:18:58 +00:00
Martin Weinelt
accca0bd6e
nixos/zigbee2mqtt: move into home-automation category
2022-03-01 19:19:31 +01:00
Maximilian Bosch
199d4224e9
Merge pull request #155207 from rapenne-s/freshclam_when_internet
...
clamav: start freshclan after network-online target
2022-03-01 11:14:30 +01:00
Solene Rapenne
317ca6bb4e
clamav: remove freshclam service dependency
2022-02-28 22:51:07 +01:00
Naïm Favier
6e4f5f9aee
nixos/redis: bind on localhost by default
2022-02-28 13:37:47 +01:00
Janne Heß
d32ba3f4b0
Merge pull request #161929 from martinetd/switchTest
...
logrotate: do not enable logrotate.service itself
2022-02-28 10:19:25 +01:00
Rok Garbas
993c35991b
Merge pull request #157693 from Radvendii/zammad
...
zammad: init at 5.0.2
2022-02-28 00:57:11 +01:00
zowoq
177281ad00
nixos/amazon-image: use 5_10 kernel and add assert
2022-02-27 15:04:37 -08:00
Janne Heß
5ec0477dfc
Merge pull request #161059 from hercules-ci/fix-nix-daemon-socket-availability
...
nixos/nix-daemon: Ensure continued availability of daemon socket
2022-02-27 17:57:57 +01:00