alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity
392698 commits 217 branches 121 tags 4.5 GiB
Commit graph

1712 commits

Author SHA1 Message Date
Jörg Thalheim 9a020f31aa
Merge pull request #175439 from Mic92/jellyfin 
nixos/jellyfin: better defaults for hardware acceleration
 2022-07-18 12:51:54 +01:00
M. A 61e3490c1c nixos/gitlab: Bump git to 2.35.4 
Resolves CVE-2022-29187
 2022-07-13 21:03:46 +00:00
Peder Bergebakken Sundt 50dd61a9ba nixos/polaris: init 2022-07-08 12:27:48 -04:00
WilliButz fbaae54932
Merge pull request #170947 from dpausp/gitlab-registry-cert-fix-path-condition 
nixos/gitlab: fix gitlab-registry-cert path condition
 2022-07-04 18:39:42 +02:00
Jörg Thalheim d09303b31d
Update nixos/modules/services/misc/jellyfin.nix 2022-07-04 13:25:43 +01:00
7c6f434c 8d002d4a47
Merge pull request #179442 from alyssais/dictd 
nixos/dictd: make dict use local server
 2022-07-01 16:52:54 +00:00
Alyssa Ross 4684ff771e
nixos/dictd: make dict use local server 
Seems silly to install this for use with the local server, but to not
configure it to use the local server.  Otherwise, out of the box we
just get an error about no server being configured.
 2022-06-28 12:22:45 +00:00
Kim Lindberger 8b404a1617
Merge pull request #177783 from talyz/parsedmarc-secrets 
parsedmarc, geoipupdate: Improve secrets handling and more
 2022-06-27 15:26:10 +02:00
Sandro 2cf13724e1
Merge pull request #168141 from mausch/radarr 2022-06-27 01:06:15 +02:00
Erik Arvstedt 1a32663efc
treewide: rename maintainer earvstedt -> erikarvstedt 
The maintainer name now matches the Github username, which simplifies
maintainer notifications.
 2022-06-26 19:12:18 +02:00
Kim Lindberger 5710bac2b4
nixos/gitlab: Use Git 2.35.x to work around git bug (#177776) 
Git 2.36.1 seemingly contains a commit-graph related bug which is
easily triggered through GitLab, so let's downgrade it to 2.35.x until
this issue is solved. See
https://gitlab.com/gitlab-org/gitlab/-/issues/360783#note_992870101.
 2022-06-25 21:22:53 +02:00
Jörg Thalheim 4258952dc6
nixos/jellyfin: sync up with hardening provided in upstream 2022-06-18 17:09:31 +02:00
Sandro 0e6db671a0
Merge pull request #178009 from bbenno/update-gollum 
gollum: 5.2.3 -> 5.3.0
 2022-06-17 21:08:57 +02:00
Benno Bielmeier be0e2db8b9 nixos/gollum: add option local-time 
This feature was introduced in gollum v5.3.0
 2022-06-17 12:50:47 +02:00
Benno Bielmeier 9434ac0963 nixos/gollum: improve description of user-icons option 2022-06-17 12:50:13 +02:00
talyz 4dddca8240
nixos/geoipupdate: Improve secret handling 
Make secret replacement more robust and futureproof:

- Allow any attribute in `services.geoipupdate.settings` to be a
  secret if set to `{ _secret = "/path/to/secret"; }`.

- Hash the license key path before using it as a placeholder in the
  config file to minimize the risk of conflicting file paths being
  replaced instead.
 2022-06-15 20:14:57 +02:00
talyz 23c15323ce
nixos/geoipupdate: Add error handling to scripts 2022-06-15 17:18:50 +02:00
piegames 4ebc288038
Merge #172819: nixos: move matrix services into their category 2022-06-10 10:54:18 +02:00
Julien Moutinho 17c6f62503 nixos/sourcehut: some settings became mandatory upstream 2022-06-08 19:46:04 -04:00
Julien Moutinho f34d654860 nixos/sourcehut: increase RestartSec to better avoid degraded states 2022-06-08 19:46:04 -04:00
Julien Moutinho cd6808ba9f sourcehut: fix Unix socket support for Redis 2022-06-08 19:46:04 -04:00
Julien Moutinho 43b5dcd60c nixos/sourcehut: remove forgotten unused files 2022-06-08 19:46:04 -04:00
Julien Moutinho 876f3a8bf0 sourcehut.todosrht: 0.67.2 -> 0.71.0 2022-06-08 19:46:04 -04:00
Julien Moutinho bcb91bbeb7 sourcehut.metasrht: 0.57.5 -> 0.58.8 2022-06-08 19:46:04 -04:00
Julien Moutinho 59d8439966 sourcehut.listssrht: 0.51.7 -> 0.51.9 2022-06-08 19:46:04 -04:00
Julien Moutinho 658d8f1240 sourcehut.hgsrht: 0.29.4 -> 0.31.2 2022-06-08 19:46:04 -04:00
Julien Moutinho b57ed0fa1d sourcehut.gitsrht: 0.77.3 -> 0.78.18 2022-06-08 19:46:04 -04:00
Julien Moutinho 43f856ab2c sourcehut.buildsrht: 0.75.2 -> 0.79.1 2022-06-08 19:46:04 -04:00
Martin Weinelt e0169d7a9d
Merge pull request #176558 from Artturin/bumpnofileinfinity 2022-06-08 12:03:01 +02:00
lodi 3f1ec25f90 persistent-evdev: init at unstable-2022-01-14 2022-06-07 13:20:52 -04:00
Artturin c8f5b17a98 nixos/nix-daemon: set LimitNOFILE to 1048576 
fixes 'too many open files'
 2022-06-06 21:16:47 +03:00
Nguyễn Gia Phong 22f3d4e4db
nixos: move matrix services into their category 2022-06-06 13:50:58 +09:00
Emery Hemingway 2d012163f2 nixos/uhub: fix plugins, set CAP_NET_BIND_SERVICE 
Fix generation of the plugins configuration and allow binding to
"privileged" ports.
 2022-06-05 13:58:26 -05:00
Martin Weinelt 5a188dfbca
Merge pull request #175729 from DeterminateSystems/jellyfin-fix 2022-06-01 17:19:49 +02:00
Linus Heckemann 7eab23d517 jellyfin: fix permissions on state directory 
Previously, all configuration and state data was accessible to all
users on the system running jellyfin. This included user passwords in
the Jellyfin database, as well as credentials for LDAP if configured.
The exact set of accessible data depends on system configuration.

Thanks to Sofie Finnes Øvrelid for reporting this issue.

Fixes: CVE-2022-32198

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
 2022-06-01 12:31:23 +02:00
Sandro 8d8e031d25
Merge pull request #133771 from erdnaxe/libreddit_fix 
nixos/libreddit: service hardening and test
 2022-05-31 21:53:51 +02:00
linj 37792e5766 nixos/dendrite: add an option loadCredential 
systemd-247 provides a mechanism called LoadCredential for secrets and
it is better than environment file. See the section of Environment=
in the manual of systemd.exec for more information.

Some options in config.yaml need values to be strings, which currently
can be used with environmentFile but not loadCredential. But it's
possible to use loadCredential for those options, e.g. we can
substitute their values in ExecStart, but not in ExecStartPre due to
[1].

[1]: https://github.com/systemd/systemd/issues/19604
 2022-05-29 13:34:14 -07:00
Benno Bielmeier d156db7d17 nixos/gollum: add option 'no-edit' 2022-05-22 15:06:00 +02:00
Benno Bielmeier 8e7b82be49 nixos/gollum: add option 'user-icons' 2022-05-22 15:06:00 +02:00
Benno Bielmeier 8a770f06a2 gollum: refactor package 
use `bundlerApp` in preference to `stdenv.mkDerivation`
 2022-05-22 15:06:00 +02:00
Yureka 821724b184 nixos/gitlab: support 15.x 2022-05-22 13:09:36 +02:00
Ian Kerins 560ca02280 nixos/nitter: update example configuration file URL 
It was moved.
 2022-05-16 10:16:06 -05:00
Aaron Andersen 82716bddb5
Merge pull request #170079 from bb2020/mbpfan 
nixos/mbpfan: minor changes
 2022-05-14 22:13:05 -04:00
Nick Cao 82f0b53588
dendrite: 0.8.1 -> 0.8.4 2022-05-11 18:40:05 +08:00
bb2020 8bdcffc4fe nixos/mbpfan: minor changes 2022-05-10 15:40:17 +03:00
Martin Weinelt e237f3e459
Merge pull request #171716 from piegamesde/heisenbridge-module 2022-05-05 23:30:09 +02:00
piegames 6b1dcbb1db nixos/heisenbridge: Fix stupid typo 2022-05-05 23:26:01 +02:00
Robert Hensing e4054fe0a9
Merge pull request #169310 from Xiami2012/zookeeper-jre 
nixos/zookeeper: Take the same JRE we build zookeeper with by default
 2022-05-02 10:51:42 +02:00
Tobias Stenzel 0c4f8e78b5 nixos/gitlab: fix gitlab-registry-cert path condition 
`ConditionPathExists` belongs in the [Unit] section, not [Service].
The unit now properly checks if the cert file already
exists before activating so certs will not be overwritten anymore.
 2022-04-29 23:57:57 +02:00
Xiami b43999bea0
nixos/zookeeper: Remove .passthru as suggested 2022-04-26 18:44:37 +08:00