Sandro Jäckel
3920bb41f2
nixos/searx: improve searxng compatibility
2022-07-17 21:45:30 +02:00
Sandro
0890c4aef1
Merge pull request #168879 from aidalgol/pass-secret-service-systemd-unit
2022-07-17 16:45:27 +02:00
Bjørn Forsman
0080a93cdf
nixos/jenkins-job-builder: create secret file with umask 0077
...
IOW, don't make it world readable.
2022-07-17 15:24:48 +02:00
Kim Lindberger
d012de5b1d
Merge pull request #181401 from yayayayaka/gitlab-bump-git-to-2.35.4
...
nixos/gitlab: Bump git to 2.35.4
2022-07-16 13:37:16 +02:00
Bjørn Forsman
50eaf82b6f
nixos/jenkins-job-builder: fix jenkins authentication
...
The current authentication code is broken against newer jenkins:
jenkins-job-builder-start[1257]: Asking Jenkins to reload config
jenkins-start[789]: 2022-07-12 14:34:31.148+0000 [id=17] WARNING hudson.security.csrf.CrumbFilter#doFilter: Found invalid crumb 31e96e52938b51f099a61df9505a4427cb9dca7e35192216755659032a4151df. If you are calling this URL with a script, please use the API Token instead. More information: https://www.jenkins.io/redirect/crumb-cannot-be-used-for-script
jenkins-start[789]: 2022-07-12 14:34:31.160+0000 [id=17] WARNING hudson.security.csrf.CrumbFilter#doFilter: No valid crumb was included in request for /reload by admin. Returning 403.
jenkins-job-builder-start[1357]: curl: (22) The requested URL returned error: 403
Fix it by using `jenkins-cli` instead of messing with `curl`.
This rewrite also prevents leaking the password in process listings. (We
could probably do it without `replace-secret`, assuming `printf` is a
shell built-in, but this implementation should be safe even with shells
not having a built-in `printf`.)
Ref https://github.com/NixOS/nixpkgs/issues/156400 .
2022-07-16 12:30:41 +02:00
Sandro
2d0f98389f
Merge pull request #175738 from SuperSamus/plasma
2022-07-16 00:56:08 +02:00
Aaron Andersen
9b01242132
Merge pull request #131261 from bb2020/dlna
...
nixos/minidlna: convert to structural settings
2022-07-15 21:28:19 +02:00
Sandro
8e45a79ab1
Merge pull request #181579 from NixOS/netdata-module-startpost
...
netdata: fix post start for module
2022-07-15 16:20:55 +02:00
Sandro
475b23340b
Merge pull request #181410 from lilyinstarlight/fix/greetd-default-user
...
nixos/greetd: fix minor typo for default user
2022-07-15 16:12:09 +02:00
Wout Mertens
7f55ee3a53
netdata: fix post start for module
2022-07-15 09:57:13 +02:00
zowoq
e2659eea36
nixos/kubernetes: use copyToRoot
instead of deprecated contents
2022-07-15 10:23:06 +10:00
github-actions[bot]
e0608ddfd9
Merge master into haskell-updates
2022-07-14 00:15:36 +00:00
Lily Foster
6f5c1bcf7b
nixos/greetd: fix minor typo for default user
...
It has been like this since the module was added, but it hasn't caused
problems because greetd assumes a default user of "greeter"[1] when it
isn't found anyway
[1]: d700309623/item/greetd/src/config/mod.rs (L127)
2022-07-13 18:11:16 -04:00
M. A
61e3490c1c
nixos/gitlab: Bump git to 2.35.4
...
Resolves CVE-2022-29187
2022-07-13 21:03:46 +00:00
Domen Kožar
c46a3dc50a
cachix-agent: allow restarts now that deployments are subprocesses
2022-07-13 11:40:54 -05:00
Sandro
a959a2cd26
Merge pull request #180992 from romildo/new.xdg.portal.lxqt
2022-07-13 14:15:09 +02:00
José Romildo
7e30ebb2c2
nixos/lxqt: add a module for the lxqt portal
2022-07-12 17:17:39 -03:00
Sandro
78fff7ed35
Merge pull request #181197 from bjornfor/fix-ddclient-password-leak
2022-07-12 15:13:43 +02:00
Martin Weinelt
b7dc3d66c2
Merge pull request #181184 from kittywitch/ha-empty-config-fix
...
nixos/home-assistant: make the reload triggers dependent upon cfg.config
2022-07-12 11:39:39 +02:00
Bjørn Forsman
e0f2f7f9ea
nixos/ddclient: don't leak password in process listings
...
...by using `replace-secret` instead of `sed` when injecting the
password into the ddclient config file. (Verified with `execsnoop`.)
Ref https://github.com/NixOS/nixpkgs/issues/156400 .
2022-07-12 10:23:40 +02:00
Pascal Wittmann
6d1cabe9d9
Merge pull request #158346 from kurnevsky/i2pd-yggdrasil
...
i2pd: add yggdrasil settings
2022-07-12 10:19:18 +02:00
Aaron Andersen
bf57026e6a
Merge pull request #179511 from jian-lin/fix-force-caddy-reload-config
...
nixos/caddy: force caddy to reload config in ExecReload
2022-07-12 04:53:45 +02:00
Aidan Gauland
d9119dbbdf
pass-secret-service: unstable-2020-04-12 -> unstable-2022-03-21
...
* Update to the latest upstream version of pass-secret-service that includes
systemd service files.
* Add patch to fix use of a function that has been removed from the Python
Cryptography library in NixOS 22.05
* Install systemd service files in the Nix package.
* Add NixOS test to ensure the D-Bus API activates the service unit.
* Add myself as a maintainer to the package and NixOS test.
* Use checkTarget instead of equivalent custom checkPhase.
2022-07-12 07:33:26 +12:00
Sandro Jäckel
af66b47b3a
nixos/postgresql-backup: allow setting compression level
2022-07-11 21:28:22 +02:00
Kat Inskip
8f2c49ece6
nixos/home-assistant: make the reload triggers dependent upon cfg.config
2022-07-11 08:19:25 -07:00
Sandro
e2f14dd31a
Merge pull request #181026 from queezle42/pipewire-systemwide-bluetooth
...
pipewire: fix bluetooth for system-wide configuration
2022-07-11 15:38:55 +02:00
Jens Nolte
61c9f44a1d
pipewire: fix bluetooth for system-wide configuration
2022-07-11 02:35:36 +02:00
Sandro
366683965e
Merge pull request #166308 from ncfavier/wg-resolvconf
...
nixos/resolvconf: allow different implementations
2022-07-10 21:00:00 +02:00
Shawn8901
98ac43a1cf
zrepl: add package option to module ( #179189 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-07-10 20:32:27 +02:00
Martin Weinelt
0044b4fa22
Merge pull request #180950 from alyssais/graphite
2022-07-10 17:22:45 +02:00
Martin Weinelt
f8137a54eb
Merge pull request #153445 from erdnaxe/prometheus_protecthome
...
nixos/prometheus-node-exporter: do not protect home
2022-07-10 17:21:44 +02:00
Emery Hemingway
429fc9aaf7
nixos/hedgedoc: convert to settings-style configuration
...
Replace "services.hedgedoc.configuration" with ".settings" to be
consistent with RFC0042. This allows control of settings not
declared in the module.
2022-07-10 08:07:14 -05:00
Janne Heß
9412f62782
Merge pull request #180536 from SuperSandro2000/hydra-runuser
...
nixos/hydra: use runuser like hydra flake
2022-07-10 13:30:42 +02:00
K900
d2b579b23e
Merge pull request #178254 from K900/update-tempo
...
tempo: 1.1.0 -> 1.4.1, add NixOS module
2022-07-10 14:01:30 +03:00
Alyssa Ross
1f18d44106
python3.pkgs.graphite_api: remove
...
Due to lack of maintenance. It doesn't build, the last upstream
commit was in 2017, and last significant change in Nixpkgs was in
2018.
2022-07-10 09:46:20 +00:00
Alyssa Ross
ada1d87767
python3.pkgs.graphite_beacon: remove
...
Due to lack of maintenance. It is not compatible with the default
Python version (due to the tornado 5) dependency, and doesn't look
like it will be any time soon.
2022-07-10 09:17:23 +00:00
Dominique Martinet
fd701a9cd1
logrotate: fix config check without sandbox
...
make logrotate not try to write to /var/lib/logrotate.status by
using an alternate path.
Also avoid /tmp and use build CWD
Fixes #180734
2022-07-09 09:55:03 +09:00
Martino Fontana
5e84f7899e
nixos/plasma5: expose qdbus in PATH
2022-07-08 23:33:19 +02:00
Martino Fontana
7a4e909905
nixos/plasma5: enable power-profiles-daemon by default
2022-07-08 23:32:51 +02:00
K900
512a26ae13
Merge pull request #177389 from K900/plasma-exclude-packages
...
nixos/plasma5: add excludePackages option
2022-07-08 21:33:35 +03:00
K900
03dd01dd2f
nixos: add module for tempo
...
It's very barebones but should be OK for now.
2022-07-08 21:33:17 +03:00
Peder Bergebakken Sundt
50dd61a9ba
nixos/polaris: init
2022-07-08 12:27:48 -04:00
Sandro Jäckel
90761632ae
nixos/hydra: use runuser like hydra flake
2022-07-07 22:37:51 +02:00
Sandro
de9a1f4e81
Merge pull request #180039 from astro/openwebrx
2022-07-07 14:48:48 +02:00
Astro
10565fccde
m17-cxx-demod: init at 2.3, add to nixos/openwebrx
2022-07-07 00:41:30 +02:00
ajs124
2837f807c9
Merge pull request #180066 from helsinki-systems/rem/nodejs-12_x
...
nodejs-12_x: remove
2022-07-06 23:09:28 +02:00
Kevin Cox
0b257763d2
Merge pull request #180135 from kevincox/redis-save
...
nixos.redis: Fix disabling of RDB persistence.
2022-07-05 20:58:27 -04:00
Maximilian Bosch
9f12b04a0f
Merge pull request #180265 from Ma27/bump-privacyidea
...
privacyidea: 3.7.1 -> 3.7.2
2022-07-05 22:48:50 +02:00
Robin Gloster
ab6c8fcdc5
Merge pull request #180159 from mayflower/upstream-mailman-ldap
...
nixos/mailman: LDAP integration
2022-07-05 22:14:37 +02:00
Maximilian Bosch
000d72eb7f
nixos/privacyidea: pin python to 3.9
...
Otherwise `pi-manage` doesn't work inside the Python env (which is 3.10
whereas privacyidea requires 3.9).
Failing Hydra build: https://hydra.nixos.org/build/182734928
2022-07-05 19:38:54 +02:00