3
0
Fork 0
forked from mirrors/nixpkgs
Commit graph

28413 commits

Author SHA1 Message Date
Maximilian Bosch dd4b6b81fa
nixos/mailman: implement LDAP support for postorius 2022-07-04 21:15:53 +02:00
Luflosi 320e4dbcc3
nixos/nginx: fix broken listenAddresses example
When using the example without the square brackets, nginx fails to start:
```
nginx-pre-start: nginx: [emerg] invalid port in "::1:80" of the "listen" directive in /nix/store/xyz-nginx.conf:29
nginx-pre-start: nginx: configuration file /nix/store/xyz-nginx.conf test failed
```
2022-07-04 19:46:18 +02:00
WilliButz fbaae54932
Merge pull request #170947 from dpausp/gitlab-registry-cert-fix-path-condition
nixos/gitlab: fix gitlab-registry-cert path condition
2022-07-04 18:39:42 +02:00
Maximilian Bosch 4f2a86a43a
Merge pull request #178858 from Ma27/matrix-docs
nixos/matrix-synapse: update docs
2022-07-04 16:56:27 +02:00
ajs124 1c0cc017b5 nixos/cryptpad: remove 2022-07-04 15:33:59 +02:00
Astro 242090860a nixos/openwebrx: add codec2, js8call 2022-07-04 15:06:10 +02:00
Jörg Thalheim d09303b31d
Update nixos/modules/services/misc/jellyfin.nix 2022-07-04 13:25:43 +01:00
Maximilian Bosch 899a37d190
nixos/matrix-synapse: update docs
* Update attribute names in code examples (* -> settings.*).
* Use `nix-shell -p` rather than `nix run` because the example won't
  work with the current default Nix.
* Update config values for `element-web`.
* Fix link to `element-web` security considerations.
* Make the synapse expression even smaller and use callout-lists to
  explain the code.
* Document how to correctly deploy the shared registration secret.

[1] https://spec.matrix.org/latest/client-server-api/#getwell-knownmatrixclient
2022-07-04 12:13:57 +02:00
Linus Heckemann 0808ed8252
Merge pull request #176796 from erikarvstedt/improve-netboot-initrd
nixos/netboot: use `makeInitrdNG` to shrink ramdisk size
2022-07-04 09:23:38 +02:00
Robert Hensing d3e7ff2a70
Merge pull request #178531 from T0astBread/nixostest-custom-partitions
nixos/qemu-vm: allow custom partition- and filesystem layouts
2022-07-04 08:27:53 +02:00
Ryan Burns 3854cf7eeb
Merge pull request #173127 from aidalgol/teensy-udev-rules
teensy-udev-rules: init at version 2022-05-15
2022-07-03 14:05:07 -07:00
Guillaume Girol dbc86c1be8
Merge pull request #176595 from symphorien/appimage-run-doc
nixos/doc: explain how to run appimages
2022-07-03 20:36:21 +00:00
Kier Davis 5f14f77bf2
ckb-next: remove myself from maintainers (#179573)
* ckb-next: remove kierdavis and add superherointj as maintainer

Co-authored-by: superherointj <5861043+superherointj@users.noreply.github.com>
2022-07-03 16:07:34 -03:00
Lassulus 92c4b16caf
Merge pull request #171401 from klemensn/filesystems-zfs
Small ZFS handling improvements
2022-07-03 18:07:53 +02:00
7c6f434c d77afe094c
Merge pull request #179055 from Izorkin/update-nginx
update nginx
2022-07-03 06:43:26 +00:00
Jan Tojnar 6a7da5b520 geocode-glib: fix installed tests 2022-07-02 20:14:11 +02:00
Et7f3 6b820ecfab
nixos: systemd: add missing sliceToUnit (#179841)
Seem to be omitted in 022b4209a3 (diff-5ea4693beb4bdd8f7efcdd3204ceea67c86f59b3d1c28cde063ddf03e1d20fbfL29).
2022-07-02 18:56:53 +03:00
T0astBread 5249031660
nixos/tests: add swap-partition test 2022-07-02 15:37:08 +02:00
T0astBread 4c77ffb38f
nixos/tests: add non-default-filesystems test 2022-07-02 15:37:08 +02:00
T0astBread 87cd533a32
nixos/qemu-vm: allow custom partitions and filesystems in VM
Potential use cases for disabling `useDefaultFilesystems` include:

  - Testing with uncommon filesystem layouts
  - Testing scenarios where swapping occurs
  - Testing with LUKS-encrypted disks

Closes #177963
2022-07-02 15:37:08 +02:00
Jan Tojnar f58225ffd4
Merge pull request #179849 from jtojnar/gnome
GNOME updates
2022-07-02 15:07:52 +02:00
Mario Rodas 10dde21ef6
Merge pull request #178852 from NickCao/maddy
maddy: 0.5.4 -> 0.6.2
2022-07-01 22:54:01 -05:00
Nick Cao 5aebd3c2f7
maddy: 0.5.4 -> 0.6.2 2022-07-02 09:38:23 +08:00
Artturin 7141ab0f0b release: add tests.packageTestsForChannelBlockers.curl.withCheck as a channel blocker
we can't add 'nixpkgs.curl.tests' to hydra jobs due to 'tests' (and 'passthru') being stripped

TODO: add a function in lib-release.nix to get derivations and add `.x86_64-linux` to them
then we can just point release files to nixpkgs.tests.packageTestsForChannelBlockers instead of
nixpkgs.tests.packageTestsForChannelBlockers.curl.withCheck
2022-07-02 03:38:15 +03:00
Jan Tojnar fb2877c36f geocode-glib: 3.26.2 → 3.26.3
https://gitlab.gnome.org/GNOME/geocode-glib/-/compare/3.26.2...3.26.3

- Add support for linking against libsoup 3 (incompatible ABI).
- Format the expression.
- Register installed tests (currently broken).
2022-07-02 02:23:00 +02:00
Martin Weinelt c0d1de14b3
Merge pull request #179291 from dotlambda/utillinux-alias
treewide: don't use utillinux alias
2022-07-02 00:05:54 +02:00
James Hannah c6e76ab7c9 nixos/radvd: add package option
Allow package users to override the package for radvd.
2022-07-01 21:11:46 +02:00
Silvan Mosberger 9b68a413da
Merge pull request #179796 from klemensn/desktop-manager-literal-newline
nixos/desktop-manager: Use literal newline to fix shell syntax
2022-07-01 20:32:00 +02:00
7c6f434c 8d002d4a47
Merge pull request #179442 from alyssais/dictd
nixos/dictd: make dict use local server
2022-07-01 16:52:54 +00:00
7c6f434c 95d4ce2175
Merge pull request #164048 from hqurve/jupyter-extra-paths
Jupyter kernel: link extra paths and fix missing docs in sagemath jupyter
2022-07-01 16:43:02 +00:00
Klemens Nanni 987400b848 nixos/desktop-manager: Use literal newline to fix shell syntax
Running `nixos/tests/keepassxc.nix` shows:
```
machine # [   18.705390] xsession[985]: /nix/store/2g2jx5c6x3p152wbiijr0rmky7byqivc-xsession: line 13: nn: command not found
```

This garbled bash script runs without `set -o errexit` and thus skips
"\n\n" as invalid command:
```
$ cat -n /nix/store/2g2jx5c6x3p152wbiijr0rmky7byqivc-xsession
...
\n\n
            if [ -e $HOME/.background-image ]; then
              /nix/store/wq1d1ph8wj4alpx78akvpbd0a0m9qkd1-feh-3.8/bin/feh --bg-scale  $HOME/.background-image
            fi
...
```

KeePassXC uses it through
`nixos/modules/services/x11/display-managers/default.nix`:
```
...
        # Script responsible for starting the window manager and the desktop manager.
        xsession = dm: wm: pkgs.writeScript "xsession" ''
          #! ${pkgs.bash}/bin/bash

          # Legacy session script used to construct .desktop files from
          # `services.xserver.displayManager.session` entries. Called from
          # `sessionWrapper`.

          # Start the window manager.
          ${wm.start}

          # Start the desktop manager.
          ${dm.start}
...
        '';
...
```

The bogus line was introduced in PR #160752:
```
commit 0bc0dc8090
Author: Shaw Vrana <shaw@vranix.com>
Date:   Fri Feb 18 11:27:42 2022 -0800

    desktop manager script: start properly

    Adds a missing line feed when X is enabled to the start script name
    and the appended if check. Resolves #160735
```

I have not tried to reproduce the original issue and thus don't know
why "\n\n" apparently gets interpreted fine in one place but remains
literal the `xsession` case.

However, using a literal newline must be valid for all cases and
certainly fixes the warning seen in KeePassXC tests.

Furthermore, starting the nix string (`''`) with a newline as usual also
fixes its overall indentation.
2022-07-01 16:30:47 +04:00
Sandro 911a73340c
Merge pull request #175335 from wyndon/init-lokinet 2022-07-01 11:54:38 +02:00
bb2020 7113eb5574 nixos/minidlna: convert to structural settings 2022-07-01 11:05:38 +03:00
bb2020 449d6ce32b nixos/minidlna: add more configuration options 2022-07-01 11:05:38 +03:00
stuebinm c3e03d1199
Merge branch 'master' into nextcloud-secrets 2022-06-30 22:24:44 +02:00
stuebinm ef75aab612 services/nextcloud: more consistent code 2022-06-30 22:21:43 +02:00
ckie a8c2879f43
Merge pull request #179425 from McSinyx/phylactery
phylactery: init at 0.1.1
2022-06-30 18:29:19 +03:00
Domen Kožar 989565d676 cachix-agent: expose verbose option 2022-06-30 09:56:28 -05:00
wyndon 69e1e00ebb
nixos/lokinet: init 2022-06-30 16:01:50 +02:00
Nguyễn Gia Phong ce910fca88
nixos/tests: add phlactery 2022-06-30 22:50:08 +09:00
Nguyễn Gia Phong f5f338c846
nixos/phylactery: init 2022-06-30 22:50:08 +09:00
José Romildo Malaquias f72be3af76
Merge pull request #179220 from romildo/fix.xfconf
nixos/xfconf: init
2022-06-30 07:39:27 -03:00
Florian Klink f5b87a8203
Merge pull request #179487 from catap/parallels-virt
nixos-generate-config: detects parallels virtualization
2022-06-30 10:04:03 +07:00
Domen Kožar 5a14883a5f
Merge pull request #179634 from domenkozar/cachix-agent-avoid-restarts
cachix-agent: properly handle not restarting the service
2022-06-29 17:37:00 -05:00
Domen Kožar c7b135ac8e cachix-agent: properly handle not restarting the service 2022-06-29 17:17:35 -05:00
Sandro a59be4f6c8
Merge pull request #175919 from phaer/phaer-healthchecks
healthchecks: init at 2.2.1
2022-06-29 23:15:35 +02:00
Izorkin f169a1af97
nixos/tests: small update nginx-http3 test 2022-06-29 22:39:14 +03:00
ajs124 15e41e3edf
Merge pull request #179358 from helsinki-systems/upd/jitsi
jitsi: update
2022-06-29 21:09:19 +02:00
Kai Wohlfahrt 60d1c1d9ad openldap: change runtime directory
Use `openldap` for consistency between `/var/lib` and `/run`.
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt 334d622ec7 openldap: test starting with empty DB
This addresses the original concern behind #92544
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt 8a7193fc0a openldap: test and fix mutable config 2022-06-29 19:59:29 +02:00
Kai Wohlfahrt ad5acb9b0e openldap: use specialisations for tests
This speeds up tests a bit. Also, ensure that mutable config works for
manual config dir.
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt fd7d901133 openldap: run under systemd-defined user/group
This improves security, by starting the service as an unprivileged user,
rather than starting as root and relying on the service to drop
privileges. This requires a significant cleanup of pre-init scripts, to
make use of StateDirectory and RuntimeDirectory for permissions.
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt 38ead944ce openldap: run in foreground
Now that we use notify daemon type, this works safely and simplifies
configuration.
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt d72f89a8fc openldap: Allow notify outside of main thread
This fixes a bug I observed in deployment on a RPi, but not able to
reproduce in tests.
2022-06-29 19:59:28 +02:00
Kai Wohlfahrt d1f55ce0a4 openldap: change default ldapi directory
By default, this is /run/ldapi, which is not compatible with systemd's
runtime directories. Change it to /run/slapd/ldapi (in library and
server). This makes `ldapi:///` work as a default socket again.
2022-06-29 19:59:06 +02:00
Kai Wohlfahrt 6e6f33ad83 openldap: remove deprecated options 2022-06-29 19:59:06 +02:00
Kirill A. Korinsky 08ddd8a5fc
nixos-generate-config: detect parallels virtualization 2022-06-29 16:01:08 +02:00
Jan Tojnar ce28c99140
Merge pull request #179204 from jtojnar/no-gtk-xdg-use-portal
nixos/xdg.portal: deprecate gtkUsePortal option
2022-06-29 14:24:43 +02:00
Lin Jian d1b90cf540
nixos/caddy: force caddy to reload config in ExecReload
This patch follows an upstream commit[1].

Before this patch, if acme module is used, caddy will still use an old
cert even a new one is available. The cause is that without --force
flag, caddy will not reload an unchanged config.

Refer to that commit[1] message for more information.

[1]: 979e498d6d
2022-06-29 10:36:24 +08:00
Aidan Gauland 0cb24e2d32
teensy-udev-rules: init at version 2022-05-15
Add udev rules for the Teensy family of microcontrollers so that they can be
flashed as non-root users.
2022-06-29 11:45:50 +12:00
ajs124 a0718341e6 maintainers: remove volth
github account deleted
2022-06-29 00:52:12 +02:00
ajs124 729764a32d nixos/tests/jitsi-meet: remove grep for successfull health check
afaict, it doesn't log this anymore after https://github.com/jitsi/jitsi-videobridge/pull/1188
2022-06-29 00:32:53 +02:00
ajs124 aea940da63 nixos/jitsi-meet: move prosodyctl calls into prosody preStart 2022-06-29 00:19:57 +02:00
Alex Wied 4d269d11e3 nixos/doc: Fix typo in activation-script.md 2022-06-28 17:46:16 -04:00
Artturi 3cff3f75b4
Merge pull request #166340 from max-privatevoid/patch-6 2022-06-28 19:55:10 +03:00
pennae fe62b1b20f
Merge pull request #179440 from alyssais/ids-typo
nixos/ids: fix typo in comment
2022-06-28 15:47:35 +00:00
Alyssa Ross 4684ff771e
nixos/dictd: make dict use local server
Seems silly to install this for use with the local server, but to not
configure it to use the local server.  Otherwise, out of the box we
just get an error about no server being configured.
2022-06-28 12:22:45 +00:00
Alyssa Ross 0a2337c4da
nixos/ids: fix typo in comment 2022-06-28 11:58:47 +00:00
Sandro 6dce91f57b
Merge pull request #178336 from astro/openwebrx 2022-06-28 11:36:27 +02:00
phaer 12d45dc313 healthchecks: init at 2.2.1 2022-06-28 10:28:46 +02:00
happysalada b90fa9940b dgraph: add module 2022-06-28 02:34:54 -04:00
Astro 9123ed5f36 openwebrx: 1.1.0 -> 1.2.0 2022-06-28 00:46:32 +02:00
Robert Hensing 47dd5d15c1
Merge pull request #179351 from hercules-ci/option-docs-improvements
Option docs improvements
2022-06-27 22:51:22 +02:00
Pascal Bach 13df7151e1
Merge pull request #178783 from greizgh/fix-syncthing-doc
nixos/syncthing: fix services.syncthing.folders description
2022-06-27 22:37:56 +02:00
Robert Hensing 7c81905344 nixos/make-options-doc: Support Nix-provided declaration locations
Feature was introduced in https://github.com/NixOS/nixpkgs/pull/174460,
but wasn't supported in `mergeJSON.py` yet.
2022-06-27 22:07:20 +02:00
Martin Weinelt 9525331e5a
Merge pull request #179322 from mweinelt/mozilla 2022-06-27 20:52:02 +02:00
Robert Hensing 8bff3fef40 nixos/make-options-doc: Support block quotes
Our tooling would trip without the inner <para>, despite the docbook
docs suggesting that <para> occurs in <blockquote> and vice versa.
2022-06-27 17:41:32 +02:00
Robert Hensing e04aa1bcd9 nixos/make-options-doc: Escape inline code and code blocks 2022-06-27 17:41:32 +02:00
Robert Hensing f900ed1749 nixos/make-options-doc: Support newline md node
This occurs in the ast generated for blockquotes.
2022-06-27 17:41:32 +02:00
Robert Hensing bccc3e747b nixos/make-options-doc: Fix exception handler for arity /= 1 methods 2022-06-27 17:41:32 +02:00
Robert Hensing aff2dbbc82 make-options-doc: Make variablelist id configurable
I've tried XInclude set-xml-id first, but our tooling did not pick up on it.
2022-06-27 17:41:32 +02:00
Robert Hensing 49237015d6 nixos/doc: Make nixos-manual-combined fail easy to inspect
By writing the unchecked outputs before checking them, they will
be written to a store path, which appears in the log, and which
sticks around even if the build fails. Eventually it is GCed, but
until then, you can open the file.

If you run it in a terminal+editor combination like VSCode, the
failure location is just one Ctrl+click away.
2022-06-27 17:41:32 +02:00
Kim Lindberger 8b404a1617
Merge pull request #177783 from talyz/parsedmarc-secrets
parsedmarc, geoipupdate: Improve secrets handling and more
2022-06-27 15:26:10 +02:00
Profpatsch 0e444785a1 installer/tools/get-version-suffix: set --git-dir
The `nixos-rebuild` tool calls `get-version-suffix` to figure out the
git revision of the nixpkgs directory if there is a .git.

https://nvd.nist.gov/vuln/detail/CVE-2022-24765 made git throw an
error if the .git search logic is not turned off and a user
tries to access a `.git` directory they don’t own (otherwise a
different user could trick them into setting arbitrary git config).

So from now on we should always explicitely set `--git-dir`, which
turns this search logic (and thus the security check) off.
2022-06-27 14:28:03 +02:00
Martin Weinelt 1832364599
firefox-esr-102-unwrapped: init at 102.0esr
https://www.mozilla.org/en-US/firefox/102.0/releasenotes/
2022-06-27 14:20:47 +02:00
Maximilian Bosch ec5b885d95
Merge pull request #179236 from winterqt/nextcloud-improvements
nixos/nextcloud: some small improvements
2022-06-27 13:42:44 +02:00
Florian Klink f72ea3ceea
Merge pull request #179235 from alyssais/virtualbox-test
nixosTests.virtualbox: fix
2022-06-27 14:53:25 +07:00
Alyssa Ross a2b3b2a1b6
nixosTests.virtualbox: fix on AMD 2022-06-27 07:49:25 +00:00
Robert Schütz 40990c3586 treewide: don't use utillinux alias 2022-06-27 04:55:23 +00:00
Florian Klink 4c6b6482f9
Merge pull request #178841 from Madouura/dev/zfs
release-notes: move zfs update from 22.11 to 22.05
2022-06-27 10:12:02 +07:00
Alexandre Macabies 32964dd23d pykms: switch to maintained fork, fix PYTHONPATH, add test
I have read the full diff[0] between the previous owner and the new
maintained fork that I'm switching to, and could not find any suspicious
code. The new fork includes fixes that are otherwise crashing as of
Python 3.10.

This commit also fixes the PYTHONPATH which prevents the client from
starting.

This commit also adds a test that the client can successfully query the
server, testing the two components at once.

[0] https://github.com/SystemRage/py-kms/compare/master...Py-KMS-Organization:master
2022-06-27 09:14:57 +08:00
Sandro 2cf13724e1
Merge pull request #168141 from mausch/radarr 2022-06-27 01:06:15 +02:00
Jan Tojnar ebde08adf3 nixos/xdg.portal: deprecate gtkUsePortal option
It was never meant to be used for anything other than testing
and setting it globally can cause weird loops in GTK-based portals,
where the portal will end up waiting for itself until it times out.

https://github.com/NixOS/nixpkgs/issues/135898

Or it can mess up fonts:

https://github.com/NixOS/nixpkgs/issues/155291#issuecomment-1166199585

Having the option in NixOS makes it look like it is okay or even
desirable to enable, when in fact it is a hack that can subtly break apps.

Some apps allow opting into using portal-based APIs, e.g. for Firefox,
you can set `widget.use-xdg-desktop-portal.file-picker` to `1` in about:config.
Otherwise, you can set the `GTK_USE_PORTAL` environment variable to 1
for individual apps.

People who really want it and aware of the downsides can just set
`environment.sessionVariables.GTK_USE_PORTAL = "1";` NixOS option
directly to set the environment variable globally.
2022-06-27 00:33:59 +02:00
Kevin Cox 3f13b3fb7e
Merge pull request #179194 from gravndal/supportedLocales
nixos/i18n: include locales from extraLocaleSettings in supportedLocales
2022-06-26 18:03:55 -04:00
Gaute Ravndal d534fa7085 nixos/i18n: include locales from extraLocaleSettings in supportedLocales 2022-06-27 00:02:04 +02:00
Aaron Andersen e3e82b92e8
Merge pull request #177106 from martinetd/logrotate
logrotate: do not add mail if 'mail = false' is specified
2022-06-26 23:39:38 +02:00
Aaron Andersen bf5781e639
Merge pull request #151642 from antifuchs/fix-151550
navidrome: Allow read access to /etc
2022-06-26 23:32:18 +02:00
Aaron Andersen 28562b800e
Merge pull request #178154 from aanderse/nixos/prosody
nixos/prosody: conditionally provision required directories with StateDirectory
2022-06-26 22:45:18 +02:00
Winter d6f59779c6 nixos/nextcloud: remove extraneous nginx config directive 2022-06-26 14:30:59 -04:00
Winter e54ddddd2a nixos/nextcloud: make all services run after nextcloud-setup 2022-06-26 14:29:59 -04:00
Winter 6be3ce36b6 nixos/nextcloud: use mkOption.default for datadir 2022-06-26 14:27:03 -04:00
Alyssa Ross 253fa03ea9
nixosTests.virtualbox.net-hostonlyif: use dhcpcd
dhclient is no longer built by default in the dhcp package, so this
test has been broken since that change was made.  To fix, switch to
dhcpcd.  dhcpcd insists on writing into /var/run, so we need to ensure
that exists.

Fixes: a2c379d4b6 ("dhcp: make client and relay component optional")
2022-06-26 18:12:13 +00:00
Alyssa Ross 34ec11729e
nixosTests.virtualbox: fix for blocking stdout
Fixes: 1640359f33 ("nixos/test-runner: Fix execute() flakiness")
2022-06-26 18:12:12 +00:00
Alyssa Ross e2617706ed
nixosTests.virtualbox: fix logging service
This used to be StandardOutput=syslog, which was removed because
syslog is deprecated, but that caused the test to fail.  So bring it
back, but set it to the non-deprecated "journal" value instead (which
is what systemd interprets "syslog" as now anyway).

Fixes: 962e15aebc ("nixos: remove StandardOutput=syslog, StandardError=syslog lines")
2022-06-26 18:12:11 +00:00
Alyssa Ross 17b0079436
nixosTests.virtualbox: create shared dir before VM
Otherwise, since the update to Virtualbox 6.1.22, the test would fail
due to the shared directory not existing.

Fixes: ba0da8a076 ("virtualbox: 6.1.18 -> 6.1.22")
2022-06-26 18:12:09 +00:00
Alyssa Ross ecaa6f5c60
nixosTests.virtualbox.host-usb-permissions: import sys
Otherwise, sys.stderr is not defined.

Fixes: db614e11d6 ("nixos/tests/test-driver: better control test env symbols")
2022-06-26 18:12:08 +00:00
Alyssa Ross 6ce4afce63
nixosTests.virtualbox: always use nested KVM
Nested KVM has been enabled by default on Linux on Intel for a long
time now, and since Virtualbox 6.1.0, the test won't run without it
because Virtualbox now only supports running hardware-accelerated VMs.

Additionally, this means we can 64-bit guests by default.  The 32-bit
guest additions don't currently build, so this is important to have
the tests work with the default options.
2022-06-26 18:12:07 +00:00
José Romildo d18aeb6351 nixos/xfconf: init
- Add a module for xfconf, the Xfce configuration storage system.
2022-06-26 14:29:01 -03:00
Erik Arvstedt 1a32663efc
treewide: rename maintainer earvstedt -> erikarvstedt
The maintainer name now matches the Github username, which simplifies
maintainer notifications.
2022-06-26 19:12:18 +02:00
Lassulus ea532fe833
Merge pull request #179168 from yayayayaka/revert-177536-hedgedoc-fix-statedirectory 2022-06-26 19:05:04 +02:00
José Romildo Malaquias c7c3c6586c
Merge pull request #179108 from romildo/fix.thunar
nixos/thunar: init
2022-06-26 13:22:15 -03:00
José Romildo bb5ec4625a nixos/thunar: init
- Add a module for the thunar file manager, which depends on the xfconf dbus service, and also has a dbus service and a systemd unit.

- Renames the option services.xserver.desktopManager.xfce.thunarPlugins to programs.thunar.plugins.
2022-06-26 12:22:07 -03:00
Matthias Thym 48ee6e1663 Merge branch 'master' into update/bsp-layout-unstable-2022-06-19 2022-06-26 14:06:53 +02:00
Thiago Kenji Okada 659096dd89 nixos/fontconfig: add fonts.fontconfig.hinting.style option 2022-06-26 12:19:04 +01:00
Yaya 57617daaff
Revert "nixos/hedgedoc: Do not set StateDirectory to an absolute path" 2022-06-26 12:06:36 +02:00
Michael Livshin cd13a2074b nixos/network-interfaces-scripted: don't bindTo absent network-setup.service 2022-06-26 11:03:57 +03:00
Bernardo Meurer 83801da137
Merge pull request #176979 from winterqt/nginx-per-location-recommended-proxy-settings
nixos/nginx: allow recommended proxy settings to be enabled per location
2022-06-25 23:48:29 -07:00
Maximilian Bosch cb009ecbc7
Merge pull request #178842 from Ma27/vrf-test-json
nixos/systemd-networkd-vrf: check routing tables via `ip --json`
2022-06-26 00:25:08 +02:00
piegames aa3641fa90
Merge pull request #178838 from mweinelt/matrix-appservice-irc
nixos/matrix-appservice-irc: wait for postgres to start
2022-06-25 23:09:36 +02:00
Thomas Depierre fc658c86f7 riak, nixos/riak: remove
Riak have been updated a lot since the version 2.2 (now 3.0.10) but
has seen no updated to the package. This is at this point
a problem forcing us to maintain old versions of erlang.

We would be happy to re accept a newer version of Riak if someone want
to spend the time to set it up.
2022-06-25 15:51:18 -04:00
Kim Lindberger 5710bac2b4
nixos/gitlab: Use Git 2.35.x to work around git bug (#177776)
Git 2.36.1 seemingly contains a commit-graph related bug which is
easily triggered through GitLab, so let's downgrade it to 2.35.x until
this issue is solved. See
https://gitlab.com/gitlab-org/gitlab/-/issues/360783#note_992870101.
2022-06-25 21:22:53 +02:00
Klemens Nanni 30c36b4706 nixos/systemd-stage-1: use types.passwdEntry in emergencyAccess
`boot.initrd.systemd.emergencyAccess` expects passwd(5) formatted
strings, hence `singleLineStr` is too broad.

Use the same type as `users.users.*.hashedPassword` to ensure
consistency across all options where password hashes are used.

From `modules/config/users-groups.nix`:
```
       hashedPassword = mkOption {
         type = with types; nullOr (passwdEntry str);
       ...
       };
```
2022-06-25 16:34:49 +04:00
Klemens Nanni 574a90771f lib.types, nixos/users: Make passwdEntry available
More nixpkgs code such as `boot.initrd.systemd.emergencyAccess` defines
options that takes hashed passwords, so move the type definition from
modules/ into lib/.

The type definition itself stays unchanged.
2022-06-25 16:34:47 +04:00
Thiago Kenji Okada 66e8dceabc
Merge pull request #167907 from Misterio77/argonone-module
nixos/argonone: init
2022-06-25 10:48:22 +01:00
Christian Burger e2610640c4 nixos/release.nix: fixed commands in comment
Proposed commands to execute tests were not working anymore.
2022-06-25 11:13:24 +02:00
K900 9ce75f675e nixos/doc: regenerate
Fixes whatever happened there.
2022-06-25 11:58:44 +03:00
Robert Hensing 1d43ea01da
Merge pull request #178958 from hercules-ci/fix-installer-tests
nixos/nixpkgs.nix: Ignore the default system in check
2022-06-25 10:48:29 +02:00
Robert Hensing 985b6812d6 nixos/nixpkgs.nix: Ignore the default system in check
We might want to make this more strict at some point.
2022-06-25 10:40:41 +02:00
Vladimír Čunát 24b43564ff
Merge #177318: nixos/i18n: reduce default supportedLocales 2022-06-25 10:29:27 +02:00
Mario Rodas 9d6c025ad9
Merge pull request #176079 from aaronjheng/traefik
traefik: 2.6.3 -> 2.7.1
2022-06-24 21:34:05 -05:00
Gabriel Fontes 17fc78ea58
nixos/argonone: init 2022-06-24 21:20:32 -03:00
ajs124 5c39c81260
Merge pull request #176702 from Mic92/tt-rss
tt-rss: downgrade to php 8.0
2022-06-25 00:29:11 +02:00
Martin Weinelt a24431e56f
Merge pull request #162808 from mweinelt/schleuder
schleuder: init
2022-06-24 21:38:22 +02:00
Linus Heckemann e608c54d58 rl-2211: document schleuder addition 2022-06-24 15:30:16 -04:00
Linus Heckemann 1dabedae3e nixos/schleuder: init module and accompanying test
Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
Co-Authored-By: Cole Helbling <cole.helbling@determinate.systems>
2022-06-24 15:30:16 -04:00
Sandro 5c92665484
Merge pull request #177679 from fgaz/vengi-tools/0.0.20 2022-06-24 21:27:56 +02:00
Sandro 74ea995b11
Merge pull request #174446 from jsimonetti/routedns-init
routedns: init at 0.1.5
2022-06-24 16:31:03 +02:00
Madoura 93b55ffb00
release-notes: move zfs update from 22.11 to 22.05 2022-06-24 03:07:06 -05:00
Maximilian Bosch 9f7b0d8f0c
nixos/systemd-networkd-vrf: check routing tables via ip --json
The original implementation did a simple string-comparison against the
output of `ip route`. This is problematic because

* if the details in the string-output change, the test breaks. This is
  less likely with JSON because the relevant values (i.e. destination,
  interface etc) aren't supposed to be changed.
* this is causing issues with formatters[1][2].

[1] #161703
[2] #154818
2022-06-24 09:58:40 +02:00
Martin Weinelt e215af7113
nixos/tests/matrix-appservice-irc: fix typing mismatch 2022-06-24 08:52:46 +02:00
Martin Weinelt 6c1f44b3f1
nixos/matrix-appservice-irc: wait for postgres to start
Closes: #178692
2022-06-24 08:37:43 +02:00
Florian Klink 477964801a
Merge pull request #178632 from Madouura/dev/zfs
zfs: 2.1.4 -> 2.1.5
2022-06-24 11:54:17 +07:00
Lassulus ab4af8e8a1
Merge pull request #161703 from kamadorueda/formatting-preparation
nixos/systemd: prepare tests for formatters
2022-06-24 00:31:12 +02:00
Lassulus 8c2e25e98e
Merge pull request #177081 from azahi/trickster
trickster: 0.1.10 -> 1.1.5
2022-06-23 22:24:54 +02:00
Madoura 8cfcee74b1
zfs: 2.1.4 -> 2.1.5 2022-06-23 15:04:46 -05:00
Greizgh ac1e34f0fe
nixos/syncthing: fix services.syncthing.folders description
It was improperly referencing overrideDevices instead of overrideFolders.
2022-06-23 20:44:59 +02:00
Bernardo Meurer c7eacbf87e
Merge pull request #177672 from hercules-ci/nixos-generate-config-add-nixpkgs.system
nixos-generate-config: Add nixpkgs.hostPlatform to hardware-configuration.nix
2022-06-23 12:18:20 -04:00
Bernardo Meurer 5332bc174a
Merge pull request #178483 from twitchyliquid64/tailscale-networkd
tailscale: ignore tailscale link when using networkd
2022-06-23 12:10:14 -04:00
Maximilian Bosch 046fcb0f8b
Merge pull request #178709 from Ma27/kernel-updates
Linux kernel updates 2022-06-23
2022-06-23 17:07:32 +02:00
Bobby Rong 045b9096ac
Merge pull request #176896 from theHedgehog0/xplr-0-19-update
xplr: 0.18.0 -> 0.19.0
2022-06-23 19:20:17 +08:00
Maximilian Bosch f0e3e98377
linux_5_17: remove 2022-06-23 11:09:16 +02:00
pennae db0dcf15c6
Merge pull request #177379 from hercules-ci/markdown-cassandra
nixos/cassandra: Convert option docs to markdown
2022-06-23 08:43:35 +00:00
Jan Tojnar 5d5c2ef49b nixos/xdg.portal: avoid with statement 2022-06-22 21:26:53 +02:00
ajs124 6c189d264e
Merge pull request #177077 from Lassulus/bitlbee_cfgdir
nixos/bitlbee: allow writing to configDir
2022-06-22 19:27:59 +02:00
Martin Weinelt b15badc6c9
Merge pull request #151241 from andir/hass-reload-on-config-changes 2022-06-22 17:20:43 +02:00
Martin Weinelt d26a6e377d
nixos/tests/home-assistant: stop printing log
With multiple specialization changes this isn't very helpful anymore,
but no biggie since we check the log for errors anyway and the log is
not too verbose anyway.
2022-06-22 17:02:48 +02:00
Andreas Rammhold cfbcf381c2
nixos/home-assistant: reload the daemon when configuration changed
Reload the service when configuration changes. This means that we don't
have a potentially slow startup for every small configuration change.
2022-06-22 16:20:11 +02:00
Robert Hensing fa9c83ca7f
Merge pull request #174460 from hercules-ci/module-docs-Nix-driven-location-links
make-options-doc: Support Nix-provided declaration links
2022-06-22 15:48:46 +02:00
Robert Hensing 9d92bee00a
Merge pull request #175474 from hercules-ci/issue-148456-dockerTools-example-etc
dockerTools: Add example of using NixOS' etc
2022-06-22 15:43:29 +02:00
Lassulus 773cbfbd28
Merge pull request #151633 from wucke13/sd-image-experiment
honor `sdImage.compressImage` also in the build process
2022-06-22 14:48:21 +02:00
Lassulus 5308b5b44a
Merge pull request #178194 from spacekitteh/patch-35
xpra: Add the ability to perform a start-desktop
2022-06-22 14:41:15 +02:00
oxalica 3562c1d5c6 nixos/console: add required store paths to initrd for systemd stage 1
`console.{font,keyMap}` may be a path or a string to a store path,
which should be added to initrd for `systemd-vconsole-setup` before
the prompt for the LUKS password.
2022-06-22 11:55:58 +08:00
Naïm Favier 4af5c46faa
nixos/dhcpcd: use networking.resolvconf.package
Allow using the appropriate resolver implementation to set DNS entries
(typically systemd-resolved instead of openresolv).
2022-06-21 22:58:44 +02:00
Naïm Favier 953a5bd3dd
nixos/tailscale: use networking.resolvconf.package
Allow using the appropriate resolver implementation to set DNS entries
(typically systemd-resolved instead of openresolv).
2022-06-21 22:58:44 +02:00
Naïm Favier 458ac47a1d
nixos/wg-quick: improve usage with systemd-networkd
Use `networking.resolvconf.package` to allow DNS entries to be set using
the system-wide resolver implementation instead of hardcoding systemd or
openresolv.

Extend the tests by adding DNS entries and making one of the peers use
systemd-networkd (hence systemd-resolved).

Also add a few `networkd`-specific settings.
2022-06-21 22:58:44 +02:00
Naïm Favier 203696f098
nixos/resolvconf: add package
Expose the package that provides the system-wide `resolvconf` command
(either openresolv or systemd) to allow implementation-agnostic modules.
2022-06-21 22:58:43 +02:00
Tom 3b8a162680 tailscale: ignore tailscale link when using networkd 2022-06-21 13:23:28 -07:00
Naïm Favier e1c1fdd8c2
nixos/networkd: add IPv6PrivacyExtensions=kernel for default networks
Maybe this could go in `genericNetwork`, but I don't know if it makes
sense for bridges, bonds etc. and I don't want to break anything.
2022-06-21 17:12:01 +02:00
Naïm Favier f8a83b4260
nixos/networkd: make default networks RequiredForOnline when possible
When `systemd.network.wait-online.anyInterface` is enabled,
`RequiredForOnline` really means "sufficient for online", so enable it.
2022-06-21 17:12:01 +02:00
Robert Hensing 82da0794c2 nixos-generate-config: Make robust against missing newline
The substr solution assumed a newline to be present.
The new solution will not remove the newline if it goes missing in the future.

Apparently this is idiomatic perl.

Thanks pennae for the suggestion!
2022-06-21 14:37:16 +02:00
Robert Hensing 1b4f4ddb5b release-notes: Add nixpkgs.hostPlatform changes 2022-06-21 14:22:37 +02:00
Robert Hensing fc0971f436 nixos-generate-config: nixpkgs.system -> nixpkgs.hostPlatform 2022-06-21 14:22:36 +02:00
Robert Hensing c9fea8c03c nixos: Add simplified nixpkgs.{hostSystem,buildSystem} 2022-06-21 14:22:36 +02:00
Robert Hensing a234fb2a5b nixos-generate-config: Add nixpkgs.system to hardware-config.nix 2022-06-21 14:21:17 +02:00
Robert Hensing fe11145ec9 nixos/cassandra: Convert option docs to markdown 2022-06-21 13:20:13 +02:00
Robert Hensing e2c261f2c0
Merge pull request #176146 from pennae/module-docs-markdown
treewide: markdown option docs
2022-06-21 13:16:02 +02:00
tljuniper 84f1f79a8d nixos/doc: test-driver: Note on skipTypeCheck with extraPythonPackages 2022-06-21 09:05:24 +02:00
Maximilian Bosch 5ab65d9cd1 nixos/prometheus-postfix-exporter: fixes for systemd integration
* Allow the service to read from the journal w/systemd.enable
* Ensure that the service is started after postfix.service
2022-06-20 19:30:59 +02:00
pennae 9e109ffdb5
Merge pull request #178110 from pennae/fix-networkd-gateways
nixos/networking: fix v4+v6 default gateways with networkd
2022-06-20 14:17:41 +00:00
Sandro b3df41c011
Merge pull request #177913 from Yarny0/clickshare
{nixos/,}clickshare-csc1: remove (qt4)
2022-06-20 15:55:24 +02:00
Matthias Thym caed3fca4b bsp-layout: add breaking change to 22.11 release notes 2022-06-19 15:20:37 +02:00
Lassulus eb013128da
Merge pull request #178195 from dnr/pipewire-systemwide
nixos/pipewire: fix wireplumber with system-wide
2022-06-19 12:42:37 +02:00
Florian Klink 8b926cad93 nixos/tests/grafana-agent: update port
We now don't explicitly configure a self-chosen port, but use the
default port choosen by grafana, 12345.
2022-06-19 12:23:06 +02:00
Florian Klink 5f297c164e nixos/grafana-agent: add myself as maintainer 2022-06-19 11:50:32 +02:00
Florian Klink b09836593e nixos/grafana-agent: move remote write config from integrations.prometheus_remote_write to metrics.global.remote_write
remote_write config in integrations.prometheus_remote_write is only
applied for integrations, so static configurations won't get written
anywhere.
2022-06-19 11:50:32 +02:00
Florian Klink e578b4d3ed nixos/grafana-agent: drop server.{grpc,http}_listen_address,http_listen_port
According to https://grafana.com/docs/agent/latest/upgrade-guide/#v0240,
this has been deprecated/moved to -server.http.address and
-server.grpc.address (accepting ip and port) config options in v0.24.0,
and already listens on localhost and not port 80 by default.
2022-06-19 11:50:31 +02:00
Florian Klink 2cca676e69 nixos/grafana-agent: replace settings.prometheus with settings.metrics
According to https://github.com/grafana/agent/pull/1540, -prometheus.*
flages were deprecated in 0.19.0 in favor of the -metrics.*
counterparts. Same applies to `loki` being renamed to `logs`.

I'm not sure if the config file format is still supported (it could be),
but we shouldn't use deprecated configs.
2022-06-19 11:50:31 +02:00
Florian Klink 4386cb104e
Merge pull request #178200 from lopsided98/device-tree-preprocessor
nixos/device-tree: preprocess overlays before compiling
2022-06-19 11:13:54 +02:00
Sophie Taylor 62494281d8
xpra: fix whitespace 2022-06-19 18:26:10 +10:00
Jörg Thalheim 96b227697f
Merge pull request #177785 from Mic92/navidrome
nixos/navidrome: fixes missing ssl certficates
2022-06-19 07:07:41 +01:00
Jörg Thalheim f5ca531054
Merge pull request #158602 from hercules-ci/systemd-unit-mixed-list-error
nixos/systemd: Custom error when mixing list/non-list defs
2022-06-19 07:05:04 +01:00
Ben Wolsieffer 754005bf48 nixos/device-tree: preprocess overlays before compiling
Run the device tree overlays through the preprocessor before compiling it, as
is done in the kernel. This helps make overlays easier to understand, and
improves compatibility with those found in the wild.

I found the correct command line by running the kernel build with V=1, and then
removing all the arguments related to dependency tracking.
2022-06-18 22:24:30 -04:00
Ben Wolsieffer 8e4b3323d1 nixos/device-tree: use new overlay syntax in example
Since dtc 1.4.7 (released in 2018), there has been a much nicer syntax for
device tree overlays. This commit converts the dtsText example to use this
syntax.
2022-06-18 22:24:30 -04:00
David Reiss 33163bd0ef nixos/pipewire: fix wireplumber with system-wide 2022-06-18 18:46:41 -07:00
Sophie Taylor f13c61a3b9
xpra: Add the ability to perform a start-desktop 2022-06-19 11:40:41 +10:00
Sandro 861771aac2
Merge pull request #177174 from fgaz/zeronet-conservancy/0.7.6
zeronet-conservancy: 0.7.5 -> 0.7.6, add nixos test
2022-06-19 01:34:44 +02:00
Francesco Gazzetta 3cfdd35ff6 zeronet-conservancy: add nixos test 2022-06-18 22:06:55 +02:00
Jörg Thalheim 4258952dc6
nixos/jellyfin: sync up with hardening provided in upstream 2022-06-18 17:09:31 +02:00
Aaron Andersen 078a53824e nixos/prosody: provide additional details in the user and group options description 2022-06-18 10:08:08 -04:00
Aaron Andersen 79bfd3c0d0 nixos/prosody: conditionally provision required directories with StateDirectory 2022-06-18 10:05:15 -04:00
Yarny0 bd86db1833 {nixos/,}clickshare-csc1: remove (prepare Qt4 removal)
Qt4 is on it's way out, according to

https://github.com/NixOS/nixpkgs/pull/174634

Barco's ClickShare driver/client requires Qt4;
an update isn't in sight anywhere.

To prepare for the removal of Qt4,
the commit at hand removes the
ClickShare package and its NixOS module.
The release notes are appended with a hint about the
removal and some alternatives that might help users
that are still in need of the driver/client functionality.
2022-06-18 11:47:08 +02:00
Martin Weinelt 86c4f203c1
Merge pull request #176475 from vlinkz/calamaresupdates 2022-06-18 10:11:06 +02:00
pennae da28b26d64 nixos/networking: fix v4+v6 default gateways with networkd
fixes #178078
2022-06-18 09:33:35 +02:00
Kevin Cox b2537dc430
Merge pull request #177561 from max-privatevoid/ipfs-dont-leak-config
nixos/ipfs: do not leak config to journal on startup
2022-06-17 19:37:33 -04:00
Max 2a8bf9777d nixos/ipfs: do not leak config to journal on startup
The preStart script for the IPFS service will print parts of the configuration
to stdout (and therefore, the journal) when applying profiles on startup. This
may lead to unwanted disclosure of private information, such as remote pinning
service API keys. Fix by sending stdout to /dev/null.
2022-06-17 23:41:27 +02:00
Sandro 8effa309cc
Merge pull request #176379 from SuperSandro2000/network-setup
nixos/network-interfaces-scripted: remove network-setup unit if unused
2022-06-17 22:36:45 +02:00
Sandro 0e6db671a0
Merge pull request #178009 from bbenno/update-gollum
gollum: 5.2.3 -> 5.3.0
2022-06-17 21:08:57 +02:00
Maciej Krüger fc996dab2f
Merge pull request #178039 from adamcstephens/lxc-template-docs 2022-06-17 20:37:02 +02:00
Sandro 558031dcf7
Merge pull request #178041 from vcunat/p/annoying-tests
nixos/tests/fcitx: disable
2022-06-17 20:20:52 +02:00
Thiago Kenji Okada 4cf04594a9
Merge pull request #172660 from NickCao/nvidia-open
nvidia-open: init at 515.43.04
2022-06-17 18:59:32 +01:00
Vladimír Čunát 7e2a357edb
nixos/tests/fcitx: disable
It never worked on 21.11 and still does not:
https://hydra.nixos.org/job/nixos/release-21.11/nixos.tests.fcitx.x86_64-linux/all
https://hydra.nixos.org/job/nixos/trunk-combined/nixos.tests.fcitx.x86_64-linux/all
and it frequently makes big channels wait (same on aarch64-linux).
2022-06-17 18:16:12 +02:00
Adam Stephens 2e090e0d60 nixos/lxc-container: improve template example 2022-06-17 11:42:16 -04:00
Benno Bielmeier be0e2db8b9 nixos/gollum: add option local-time
This feature was introduced in gollum v5.3.0
2022-06-17 12:50:47 +02:00
Benno Bielmeier 9434ac0963 nixos/gollum: improve description of user-icons option 2022-06-17 12:50:13 +02:00
Robert Hensing 3624bb535f nixosTests.convos: Fix missing port variable 2022-06-17 12:24:52 +02:00
Robert Hensing 2c8bbf33fd nixos/test-driver: Support mypy through regular mechanisms 2022-06-17 12:22:57 +02:00
Robert Hensing 152736d39e nixosTests.acme: Fix typechecking, avoiding type reassignment 2022-06-17 11:45:19 +02:00
Jörg Thalheim 5d54641d7f
Merge pull request #177790 from superherointj/package-k3s-1.24.1+k3s1
k3s: 1.23.6+k3s1 -> 1.24.1+k3s1
2022-06-17 08:38:10 +01:00
talyz 858a0c3fa6
nixos/parsedmarc: Improve secret handling
Make secret replacement more robust and futureproof:

- Allow any attribute in `services.parsedmarc.settings` to be a
  secret if set to `{ _secret = "/path/to/secret"; }`.

- Hash secret file paths before using them as a placeholders in the
  config file to minimize the risk of conflicting file paths being
  replaced instead.
2022-06-16 13:58:20 +02:00
Lily Foster b5818b7a30 nixos/pipewire: only add pipewire-pulse.conf conditionally 2022-06-15 15:05:44 -07:00
Lily Foster 1e3747b98b nixos/pipewire: add pkgs.pulseaudio to pipewire-pulse user unit path 2022-06-15 15:05:44 -07:00
superherointj a6a0c44760 k3s: remove docker support 2022-06-15 16:40:29 -03:00
Jörg Thalheim c772b13ee7 nixos/navidrome: fixes missing ssl certficates 2022-06-15 20:40:07 +02:00
talyz 32e057881a
nixos/parsedmarc: Remove kafka support
It's broken (see https://github.com/domainaware/parsedmarc/issues/243)
and providing settings for it is therefore misleading.
2022-06-15 20:15:09 +02:00
talyz 6686a3115c
nixos/parsedmarc: Fix compatibility with recent versions of grafana 2022-06-15 20:15:03 +02:00
talyz 4dddca8240
nixos/geoipupdate: Improve secret handling
Make secret replacement more robust and futureproof:

- Allow any attribute in `services.geoipupdate.settings` to be a
  secret if set to `{ _secret = "/path/to/secret"; }`.

- Hash the license key path before using it as a placeholder in the
  config file to minimize the risk of conflicting file paths being
  replaced instead.
2022-06-15 20:14:57 +02:00
talyz 23c15323ce
nixos/geoipupdate: Add error handling to scripts 2022-06-15 17:18:50 +02:00
Jonas Chevalier 9c587c51ac
Merge pull request #177743 from zimbatm/grafana-agent-module
nixos: add grafana-agent module
2022-06-15 16:22:54 +02:00
Bobby Rong 284ccb5f4d
Merge pull request #177111 from samuela/upkeep-bot/vscodium-1.68.0-1654822313
vscodium: 1.67.2 -> 1.68.0
2022-06-15 22:13:41 +08:00
Bobby Rong fe1f4564af
nixos/tests/vscodium: skip type check for now 2022-06-15 22:01:04 +08:00
Silvan Mosberger 8f8db59c0e
Merge pull request #163617 from hercules-ci/lib-types-deferredModule
lib.types: Add deferredModule
2022-06-15 13:23:43 +02:00
zimbatm 31b47913f3
nixos: add grafana-agent module
Easily ship logs and metrics to Grafana Cloud and other similar targets.
2022-06-15 12:59:06 +02:00
Bobby Rong 6d1779c567
Merge pull request #175620 from bobby285271/nixos-pantheon
nixos/pantheon: make it possible to remove core packages
2022-06-15 18:49:37 +08:00
Lassulus a632afba6d
Merge pull request #177536 from yayayayaka/hedgedoc-fix-statedirectory
nixos/hedgedoc: Do not set StateDirectory to an absolute path
2022-06-15 11:25:04 +02:00
M. A becff58579 nixos/hedgedoc: Do not set StateDirectory to an absolute path
Commit 8109d8a set the `StateDirectory=` option of the systemd service
configuration to the value of `cfg.workDir` which is wrong, according
to dasJ [1]. This commit resolves this issue by stripping the
`/var/lib/` prefix from `cfg.workDir`.

[1] https://github.com/NixOS/nixpkgs/pull/172824#issuecomment-1130350412
2022-06-15 08:58:52 +00:00
Andreas c028f5569b kcheckpass is gone(?) 2022-06-15 14:53:40 +08:00
Jeroen Simonetti 829167bd27
nixos/routedns: init
Signed-off-by: Jeroen Simonetti <jeroen@simonetti.nl>
2022-06-15 08:33:46 +02:00
Sandro f7251ca210
Merge pull request #168505 from brhoades/brhoades/ngrok-bump-v3
ngrok: 2.3.40 -> 3.0.4
2022-06-15 01:30:17 +02:00
Niklas Hambüchen 0652ef9a64
Merge pull request #176903 from nh2/vaultwarden-service-better-example
nixos/vaultwarden: Make example more detailed.
2022-06-15 01:21:40 +02:00
Robert Hensing cee66a8cd5 make-options-doc: Support Nix-provided declaration links
Previously, the location logic was hardcoded, supporting only
Nixpkgs and NixOps properly, leaving other uses of the module
system without good location support.
2022-06-15 00:45:05 +02:00
Robert Hensing d9dccae07c nixos/doc: Hold off on NixOps 2 info until released 2022-06-14 23:23:41 +02:00
Robert Hensing dfd98a5da2 lib.deferredModule: Make it properly singular 2022-06-14 23:01:27 +02:00
Robert Hensing 4746f6d03e lib.types: Add deferredModule 2022-06-14 23:01:23 +02:00
Francesco Gazzetta 5e52fdf6f6 vengi-tools: 0.0.18 -> 0.0.20 2022-06-14 22:23:50 +02:00
Azat Bahawi 82497b0e9f
trickster: 0.1.10 -> 1.1.5 2022-06-14 01:51:45 +03:00
Robert Hensing 5f2eb57725
Merge pull request #177461 from leungbk/mypy-terminal-emulator
tests/terminal-emulators: comply with mypy typecheck
2022-06-14 00:34:16 +02:00
Benjamin Asbach 6b913c40f0 gitea: bugfix: add check for empty file for secrets
There are some cases were the files are present but not filled with secrets. In these cases the service fails to startup.

This fixes #175967
2022-06-14 01:09:14 +03:00
Billy J Rhoades II 8e97f29c01 ngrok: 2.3.40 -> 3.0.4
ngrok 3 was released this morning. Changelog from v2 is here:

https://ngrok.com/docs/ngrok-agent/changelog

And a detailed upgrade guide is here:

https://ngrok.com/docs/guides/upgrade-v2-v3

Notably, arguments must now be double hyphens: `--token`. Previously,
single hyphens were accepted but those invocations will now error.
2022-06-13 14:53:58 -07:00
Pascal Bach 0d27868e91
Merge pull request #144082 from jojosch/jellyfin-10.8.0
jellyfin{,-web}: 10.7.7 -> 10.8.0
2022-06-13 23:35:36 +02:00
Johannes Schleifenbaum b1ff292b1a
nixos/tests/jellyfin: fix type errors in test script
Co-authored-by: Minijackson <minijackson@riseup.net>
2022-06-13 21:58:48 +02:00
Max 664dab9574
nixos/tests/ipfs: Simplify FUSE test
Co-authored-by: Luflosi <Luflosi@users.noreply.github.com>
2022-06-13 21:01:32 +02:00
Brian Leung b8df14aec0
tests/terminal-emulators: comply with mypy typecheck
Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>
2022-06-13 07:53:43 -07:00
Aaron Jheng c3c876462b
traefik: 2.6.3 -> 2.7.1 2022-06-13 14:30:08 +00:00
Léo Gaspard 02cd48717d
nixos/openldap: fix systemd rejecting notification (#177084)
On one of the two machines I have running openldap, openldap failed to start due to a "timeout". Increasing the allowed startup delay didn't help.

I noticed the following in logs:
```
openldap.service: Got notification message from PID 5224, but reception only permitted for main PID 5223
```

It turns out that on this machine at least, openldap apparently sends the notification from a non-main process, which means that we need this NotifyAccess setting for systemd to record that it successfully started. Without it, after 30 seconds systemd kills the process because it didn't receive the sd_notify call.

Somehow the other machine I have on nixos running ldap works fine even without this, but I could not figure out what changes the behavior.

Given that AFAIU NotifyAccess still restricts to "from the cgroup of the service", I think this change should be safe.
2022-06-13 15:28:12 +02:00
Matthieu Coudron a1ad235743
vimUtils: deprecate configure.pathogen (#154814)
pathogen does not bring any value compared to vim native packages so
remove it to ease maintainance burden.
2022-06-13 15:25:46 +02:00
Maximilian Bosch 7f9a78e197
Merge pull request #175330 from jtojnar/grafana-uid
nixos/grafana: Allow setting UID for datasource
2022-06-13 07:01:19 +02:00
Maximilian Bosch 5203011e4e
Merge pull request #177430 from Ma27/fix-wireguard-exporter
nixos/prometheus-wireguard-exporter: fix broken options
2022-06-13 06:14:30 +02:00
Aaron Andersen 37b6b161e5
Merge pull request #177321 from rnhmjoj/pr-fix-mpd
mpd: fix socket activation
2022-06-12 22:26:53 -04:00
Dominique Martinet f878c8994f logrotate: do not add mail if 'mail = false' is specified
Reported-by: Ricardo M. Correia <rcorreia@wizy.org>
2022-06-13 08:57:49 +09:00
Winter 6c53004840 nixos/nginx: allow recommended proxy settings to be enabled per location 2022-06-12 19:52:35 -04:00
Mario Rodas cc73dc83b3
Revert "nixos/security/wrappers: use an assertion for the existence check" 2022-06-12 15:38:05 -05:00
Maximilian Bosch e03d41fb6b
nixos/prometheus-wireguard-exporter: fix broken options
This is apparently a breaking change in a patch-level release[1] where
it's now necessary to specify values for each CLI argument.

[1] https://github.com/MindFlavor/prometheus_wireguard_exporter/releases/tag/3.6.1
2022-06-12 20:27:25 +02:00
Maximilian Bosch 6717faa02c
Merge pull request #177216 from amarshall/linux-kernel-updates
Linux kernel updates 2022-06-10
2022-06-12 19:52:57 +02:00
Michele Guerini Rocco 2b6c834377
Merge pull request #177336 from ncfavier/wrappers-source-check
nixos/security/wrappers: use an assertion for the existence check
2022-06-12 18:07:40 +02:00
Maximilian Bosch fd2a89b983
nixos/wpa_supplicant: don't log that wpa_supplicant.conf is ignored with allowAuxiliaryImperativeNetworks = true
The warning is wrong with `allowAuxiliaryImperativeNetworks`[1] being
set to `true` because both files are included in this case with `-c` and
`-I`.

[1] https://nixos.org/manual/nixos/stable/options.html#opt-networking.wireless.allowAuxiliaryImperativeNetworks
2022-06-12 17:07:36 +02:00
K900 a5f11a6938 nixos/tests/plasma5: also test excludePackages works as expected 2022-06-12 17:48:09 +03:00
K900 6350d8d9b3 nixos/plasma5: add excludePackages option
This is a pretty straightforward port of #151005.
More things can probably be made optional, I've only added ones
that I'm confident in.
2022-06-12 14:39:59 +03:00
pennae 320aa2a791 treewide: attempt at markdown option docs 2022-06-12 12:44:38 +02:00
Florian Klink f9b0f5d09c
Merge pull request #177048 from NixOS/packages-systemd
nixos/systemd: use cfg.package in systemPackages to avoid confusion
2022-06-12 10:20:51 +02:00
Florian Klink 2b9be3117e
Merge pull request #177010 from flokli/make-kexec
nixos/modules/installer/kexec/kexec-boot.nix: move into nixos/lib, expose `kexec` nixos/release.nix
2022-06-12 10:07:35 +02:00
Bobby Rong 2375fac93d
nixos/pantheon: treat evince and file-roller as optional app 2022-06-12 13:12:15 +08:00
Bobby Rong 860781d909
nixos/pantheon: allow disabling pantheon-agent-geoclue2 2022-06-12 13:11:58 +08:00
Timothy DeHerrera ec4e23d4e9
Merge pull request #171155 from cab404/wg-quick-files
nixos/wg-quick: added support for configuration files
2022-06-11 22:00:45 -07:00
Bobby Rong 1097e3e80c
nixos/pantheon: make it possible to remove core packages 2022-06-12 11:39:05 +08:00
Bobby Rong c1559a07fe
nixos/pantheon: switch to xdg.icons.enable 2022-06-12 11:39:04 +08:00
Bobby Rong 9ca889d0fb
nixos/pantheon: switch to xdg.mime.enable 2022-06-12 11:39:01 +08:00
ckie 4af74fa1fb
Merge pull request #173937 from KFearsoff/openvpn3-master
openvpn3: refactor the build
2022-06-12 02:46:08 +03:00
Sandro Jäckel 515b36c093
nixos/i18n: don't build all supportedLocales by default 2022-06-11 23:29:29 +02:00
Naïm Favier 39a56c7696
nixos/security/wrappers: use an assertion for the existence check
A simpler implementation of 7d8b303e3f
that uses an assertion instead of a derivation.

`pathHasContext` seems a bit better than `hasPrefix storeDir` because it
avoids a string comparison, and catches nonsense like
`"foo${pkgs.hello}bar"`.
2022-06-11 23:22:03 +02:00
Robert Hensing 89690dcb46
Merge pull request #177278 from rnhmjoj/pr-fix-wait-port
nixos/tests: fix type mismatch in wait_for_open_port
2022-06-11 22:56:52 +02:00
KFears 49834aef6c nixos/openvpn3: add enable option 2022-06-12 01:19:51 +05:00
Jan Tojnar c397df20d1
Merge pull request #151005 from rhoriguchi/gnome
nixos/gnome: make it possible to remove core packages
2022-06-11 21:40:35 +02:00
rnhmjoj 7149c5cb60
mpd: fix socket activation
Apparently since systemd v250 a `ListenStream` in an override file won't
override the unit, but will be appended to a list of socket addresses.
The socket unit fails if two or more addresses have the same port,
probably because two systemd processes try to listen to it at once.
The solution is to add an empty `ListenStream=` to reset all previous
definitions.

Fix #175478.
2022-06-11 20:56:19 +02:00
Rick van Schijndel 5bc0350e7c
Merge pull request #177256 from rnhmjoj/pr-picom
nixos/picom: remove deprecated refreshRate option
2022-06-11 20:09:28 +02:00
Sandro d06755d422
Merge pull request #165780 from OPNA2608/init/haguichi
haguichi: init at 1.4.5
2022-06-11 19:02:06 +02:00
Guillaume Girol 419e07c382
Merge pull request #174218 from NickCao/fcitx5-qt6
fcitx5-qt: add support for qt6 applications
2022-06-11 16:20:20 +00:00
rnhmjoj 5803706662
nixos/tests: fix type mismatch in wait_for_open_port
Fix some fallout from de3e423 (PR #171280).
2022-06-11 14:22:53 +02:00
Soham Sen feff6ddbe7 expressvpn: init at 3.25.0.13 2022-06-11 17:10:33 +05:30
rnhmjoj 26526f02ad
nixos/picom: remove deprecated refreshRate option
Fix #175765
2022-06-11 08:59:20 +02:00
Andrew Marshall a2c6e4372a linux/hardened/patches/5.18: init at 5.18.3-hardened1 2022-06-10 17:22:33 -04:00
Robert Hensing 9970c0b874
Merge pull request #174470 from hercules-ci/module-docs-visibility-override
make-options-doc: Allow transformOptions to override visibility
2022-06-10 14:27:58 +02:00
piegames 4ebc288038
Merge #172819: nixos: move matrix services into their category 2022-06-10 10:54:18 +02:00
Elis Hirwing 7afff45088
Merge pull request #174555 from etu/php-drop-php74
php: Drop PHP 7.4
2022-06-10 10:43:31 +02:00
Martin Weinelt 7b3e907a6f
Merge pull request #176561 from K900/pipewire-create-home 2022-06-10 09:25:41 +02:00
zowoq f063970e50 nixos/podman: add user socket/service 2022-06-10 07:21:56 +10:00
Sandro Jäckel 3df045e6d5
nixos/systemd: use cfg.package in systemPackages to avoid confusion 2022-06-09 22:44:28 +02:00
lassulus a12e525410 nixos/bitlbee: allow writing to configDir 2022-06-09 21:05:16 +02:00
Florian Klink 06aa64684c nixos/doc: document how to use kexecTree
This documents how to build kexec artifacts.
2022-06-09 20:08:34 +02:00
Florian Klink cdaaf95e20 nixos/release.nix: expose a kexec.$system attribute 2022-06-09 20:00:26 +02:00
Florian Klink 50648f568d nixos/…/kexec-boot.nix: move into netboot.nix, rename to kexecTree
`nixos/modules/installer/kexec/kexec-boot.nix` doesn't contain any
custom NixOS config, other than importing `netboot-minimal.nix` (which
imports `netboot-base.nix`, which imports `netboot.nix`.

`netboot.nix` really is just describing a self-contained system config,
running entirely off kernel and initrd, so we might as well move the
kexec script generation there as well.

`netboot.nix` already contains some `system.build` attributes.
Provide a `system.build.kexecTree` attribute (and `kexecScript` for
composability).
2022-06-09 19:59:03 +02:00
Domen Kožar f38fd46992 cachix-agent: set USER to please cachix 2022-06-09 17:07:28 +01:00
Jan Tojnar c60d526995
Merge pull request #176881 from jian-lin/fix-nixos/ibus-gnome-autostart
nixos/ibus: don't use xdg autostart for Gnome
2022-06-09 14:59:05 +02:00
Ryan Horiguchi 42ceb20d29 nixos/gnome: make it possible to remove core packages
Co-Authored-By: Jan Tojnar <jtojnar@gmail.com>
2022-06-09 13:09:55 +02:00
Jan Tojnar ca23e42105 nixos/gnome: Move sessionPath to core-shell group
This will allow people to disable these packages.
2022-06-09 13:04:20 +02:00
Jan Tojnar 016b99dce6 nixos/gnome: drop hicolor-icon-theme
It is already installed by xdg.icons.enable.

Let’s also enable that option explicitly to prevent users from accidentally
disabling it since GNOME will be severely broken without it.
2022-06-09 13:04:20 +02:00
Jan Tojnar 7f0ce26bbd nixos/xdg/icons: Install hicolor-icon-theme
While the package contains no icons, it includes an `index.theme` file
describing directories where toolkits should look for icons installed by apps.
2022-06-09 13:04:20 +02:00
Jan Tojnar aad39fe41a nixos/gnome: drop shared-mime-info
It is already installed by xdg.mime.enable.

Let’s also enable that option explicitly to prevent users from accidentally
disabling it since GNOME will be severely broken without it.
2022-06-09 13:04:19 +02:00
Rick van Schijndel 05eb6570c0
Merge pull request #176801 from K900/upd8n
n8n: update, fix tests
2022-06-09 07:49:37 +02:00
K900 c54c71b4ec n8n: fix test 2022-06-09 08:19:42 +03:00
Julien Moutinho 9d69ea4b7f nixos/sourcehut: improve testing 2022-06-08 19:46:04 -04:00
Julien Moutinho 17c6f62503 nixos/sourcehut: some settings became mandatory upstream 2022-06-08 19:46:04 -04:00
Julien Moutinho f34d654860 nixos/sourcehut: increase RestartSec to better avoid degraded states 2022-06-08 19:46:04 -04:00
Julien Moutinho cd6808ba9f sourcehut: fix Unix socket support for Redis 2022-06-08 19:46:04 -04:00
Julien Moutinho 43b5dcd60c nixos/sourcehut: remove forgotten unused files 2022-06-08 19:46:04 -04:00
Julien Moutinho 876f3a8bf0 sourcehut.todosrht: 0.67.2 -> 0.71.0 2022-06-08 19:46:04 -04:00
Julien Moutinho bcb91bbeb7 sourcehut.metasrht: 0.57.5 -> 0.58.8 2022-06-08 19:46:04 -04:00
Julien Moutinho 59d8439966 sourcehut.listssrht: 0.51.7 -> 0.51.9 2022-06-08 19:46:04 -04:00
Julien Moutinho 658d8f1240 sourcehut.hgsrht: 0.29.4 -> 0.31.2 2022-06-08 19:46:04 -04:00
Julien Moutinho b57ed0fa1d sourcehut.gitsrht: 0.77.3 -> 0.78.18 2022-06-08 19:46:04 -04:00
Julien Moutinho 43f856ab2c sourcehut.buildsrht: 0.75.2 -> 0.79.1 2022-06-08 19:46:04 -04:00
Eelco Dolstra 0e51dce778 nix-fallback-paths.nix: Update to 2.9.1 2022-06-09 09:00:27 +10:00
Sandro acbfbd0d86 nixos/kdeconnect: remove alias from default package 2022-06-08 23:11:44 +02:00
linj cdfd2b9f57 nixos/ibus: don't use xdg autostart for Gnome
Gnome uses systemd to start ibus.
2022-06-08 18:37:42 +02:00
Elis Hirwing e91811bbe1
php74: Drop PHP 7.4 and add aliases throwing an error 2022-06-08 18:11:55 +02:00
Elis Hirwing da19e4ae97
nixos/snipe-it: Upgrade to PHP 8.1
They state that they support PHP 8.1:
https://snipe-it.readme.io/docs/requirements
2022-06-08 18:09:15 +02:00
Elis Hirwing d7f000b98b
nixos/moodle: Upgrade to PHP 8.1 2022-06-08 18:09:11 +02:00
Elis Hirwing d0862b0ed9
nixos/nextcloud: Upgrade to PHP 8.0 2022-06-08 18:09:07 +02:00
Elis Hirwing a69ba21a29
nixos/invoiceplan: Upgrade to PHP 8.1
They seem to be working to get PHP 8.1 support:
https://github.com/InvoicePlane/InvoicePlane/issues/798
2022-06-08 18:09:03 +02:00
Elis Hirwing f822b894c5
nixos/dokuwiki: Upgrade to PHP 8.1
They seem to run tests against 8.1 since this commit:
7aee97ee81
2022-06-08 18:08:59 +02:00
Elis Hirwing c53c34ee72
nixos/postfixadmin: Upgrade to PHP 8.1 2022-06-08 18:08:56 +02:00
Elis Hirwing 4580a63bc4
nixos/grocy: Upgrade to PHP 8.0 2022-06-08 18:08:52 +02:00
Bernardo Meurer 1430c4b0ed
Merge pull request #176904 from alyssais/localtime
nixos/localtime: add missing mkRenamedOptionModule
2022-06-08 11:53:50 -04:00
Janne Heß 4a77546116
Merge pull request #175655 from AmineChikhaoui/ec2-amis-22.05
ec2-amis: add release 22.05
2022-06-08 17:39:36 +02:00
Niklas Hambüchen 5683c6e03b nixos/vaultwarden: Make example more detailed.
It took me a while to figure out how to correctly setup
vaultwarden on NixOS.
I hope that this more detailed example will help others.
2022-06-08 17:03:53 +02:00
Alyssa Ross c0b05f106f
nixos/localtime: add missing mkRenamedOptionModule
Fixes: ffae8569b0 ("nixos/localtimed: hopefully fix geoclue")
2022-06-08 13:46:26 +00:00
Mr Hedgehog 276699cdac
xplr: 0.18.0 -> 0.19.0 2022-06-08 08:48:29 -04:00
linj 34b85dfb85 nixos/ibus: fix services.dbus.package 2022-06-08 14:37:59 +02:00
Martin Weinelt e0169d7a9d
Merge pull request #176558 from Artturin/bumpnofileinfinity 2022-06-08 12:03:01 +02:00
Sandro be96e24124
Merge pull request #163226 from lodi/persistent-evdev
persistent-evdev: init at unstable-2022-01-14
2022-06-07 23:46:13 +02:00
sohalt f1669775bc nixos/headscale: do not run gin webframework in debug mode 2022-06-07 23:22:05 +02:00
sohalt 18c899d963 nixos/headscale: only set oidc secret if not null 2022-06-07 23:21:13 +02:00
Ben Siraphob 033da0465f
Merge pull request #176418 from Yureien/init/dragonflydb
dragonflydb: init at 0.1.0
2022-06-07 14:02:26 -07:00
Erik Arvstedt 64589bcefa
nixos/netboot: use makeInitrdNG to shrink ramdisk size
Previously, `makeInitrd` added the whole closure of the squashfs
derivation to initrd.
This closure contains the squashfs.img and some store paths which are
still referenced by the compressed squashfs.img.
These extra store paths are unused in stage 1.

With `makeInitrdNG` only the squashfs.img is added to the initrd.
(`makeInitrdNG` only resolves shared library references instead of the
whole closure).

This shrinks the netboot ramdisk by ~6% for a minimal system and
significantly decreases the size of the uncompressed root filesystem
in stage 1.
2022-06-07 22:34:30 +02:00
lodi 3f1ec25f90 persistent-evdev: init at unstable-2022-01-14 2022-06-07 13:20:52 -04:00
Sandro 2d399082aa
Merge pull request #176723 from SuperSandro2000/runCommandNoCC
treewide: remove usage of runCommandNoCC aliases
2022-06-07 19:03:22 +02:00
Sandro Jäckel 43d4ddf28e
treewide: remove usage of runCommandNoCC aliases 2022-06-07 16:57:06 +02:00
Daniel Poelzleithner e78c2d05da hedgedoc: ensure upload directory exists
Upload directory is not created when uploading, but will fail silently.
Ensure the upload directory is created.
2022-06-07 09:06:56 -05:00
Jörg Thalheim 70b31373b4
tt-rss: downgrade to php 8.0 2022-06-07 14:24:07 +02:00
happysalada f5ef819e24 mimir: switch pname to mimir 2022-06-07 06:53:15 -04:00
cab 8de1e9e2f8
nixos/wg-quick: added support for configuration files 2022-06-07 01:28:50 +04:00
Martin Weinelt b981c4217f
Merge pull request #176626 from winterqt/bump-radarr
radarr: 4.0.5.5981 -> 4.1.0.6175
2022-06-06 23:12:26 +02:00
Winter c08942e1ad nixos/tests/radarr: fix type of argument in test script 2022-06-06 16:39:55 -04:00
Leona Maroni 0eaa72390b maintainers: rename to leona 2022-06-06 22:20:31 +02:00
Rick van Schijndel 3037752d1d
Merge pull request #175961 from helsinki-systems/rem/broken
remove some packages marked broken for over 1.5 years
2022-06-06 20:44:39 +02:00
Sebastien Bourdeauducq 6cecab9cd8 hydra: create runcommand-logs directory 2022-06-06 11:36:58 -07:00
Artturin c8f5b17a98 nixos/nix-daemon: set LimitNOFILE to 1048576
fixes 'too many open files'
2022-06-06 21:16:47 +03:00
Robert Hensing 03bcd6fd64 nixos/release.nix: Add nixos.tests.allDrivers 2022-06-06 19:25:04 +02:00
Robert Hensing 51224f522f nixosTests.allDrivers: Move logic to all-packages.nix
Bring it in line with release.nix
2022-06-06 19:24:30 +02:00
K900 955d1a6dde pipewire: create home directory for the pipewire user when running systemwide
wireplumber wants to store state there
2022-06-06 18:06:38 +03:00
Martin Weinelt 6edccf1278
Merge pull request #176541 from mweinelt/firefox-test-typing 2022-06-06 14:50:53 +02:00
Sandro d8fad83d2c
Merge pull request #176133 from SuperSandro2000/asf-2 2022-06-06 14:34:44 +02:00
Sandro 2cdcb50406
Merge pull request #176049 from LunNova/lunnova/memtest-update
memtest86+: 5.01-coreboot-002 -> 6.00-beta2
2022-06-06 14:29:51 +02:00
Guillaume Girol fd3fc309f4 nixos/doc: explain how to run appimages 2022-06-06 12:00:00 +00:00
Martin Weinelt 0be108df2e
nixos/tests/firefox: fix return type typing 2022-06-06 13:29:09 +02:00
Nguyễn Gia Phong 22f3d4e4db
nixos: move matrix services into their category 2022-06-06 13:50:58 +09:00
zowoq e9f4412eb4 docker-edge: remove 2022-06-06 14:06:39 +10:00
Soham Sen 109e13db24 dragonflydb: init at 0.1.0 2022-06-06 04:05:48 +05:30
Victor Fuentes 54fcba5b3b
installation-cd: prevent gnome from sleeping 2022-06-05 14:10:37 -07:00
Luna Nova 8487b21ffb
memtest86+: 5.01-coreboot-002 -> 6.00-beta2
The previous version from review.coreboot.org is no longer available at
that address. This reverts to using the upstream, which is also a
rewrite and currently in beta. The full release is expected before
22.11.
2022-06-05 13:24:15 -07:00
Emery Hemingway 2d012163f2 nixos/uhub: fix plugins, set CAP_NET_BIND_SERVICE
Fix generation of the plugins configuration and allow binding to
"privileged" ports.
2022-06-05 13:58:26 -05:00
Robert Hensing bad676c7ed
Merge pull request #174441 from tljuniper/172325-nixostest-override-python-pkgs-additional-param
nixos/test-driver: additional Python packages in test driver
2022-06-05 20:46:01 +02:00
Guillaume Girol 7548b71138
Merge pull request #171778 from zhaofengli/infnoise-0.3.2
infnoise: unstable-2019-08-12 -> 0.3.2, nixos/infnoise: init
2022-06-05 17:30:34 +00:00
Anderson Torres 9648de3055
Merge pull request #176341 from erdnaxe/nitter_test_fix
nixos/nitter: fix wait_for_open_port
2022-06-05 09:03:06 -03:00
Sandro Jäckel ec00b4bb11
nixos/network-interfaces-scripted: remove network-setup unit if unused 2022-06-05 13:35:55 +02:00
Anders Kaseorg b362ef4eff pipewire: Never set an empty LD_LIBRARY_PATH
An empty LD_LIBRARY_PATH may confuse some applications into appending
:, creating an empty segment that insecurely refers to the current
directory, not the absence of directories.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2022-06-05 13:34:35 +02:00
Wout Mertens 949e1e5277
Merge pull request #176075 from NixOS/netdata-poststart
netdata: started when service can be pinged
2022-06-05 13:10:37 +02:00
Robert Hensing fddafcc062
Merge pull request #176099 from hercules-ci/nixosTests.allDrivers
`nixosTests`: Add `allDrivers` for development purposes
2022-06-05 12:13:40 +02:00
Alexandre Iooss 053e10dfbc nixos/nitter: fix wait_for_open_port 2022-06-05 09:35:48 +02:00
pennae 4a9708930d
Merge pull request #176116 from pennae/unifi-remove-deprecated
nixos/unifi: change deprecated default for openFirewall
2022-06-04 20:52:34 +00:00
lom 0df7cba1b0 nixos/asf: ipcPasswordFile use nullOr 2022-06-04 12:00:45 -06:00
pennae 18cce1008e
Merge pull request #175743 from scvalex/add-route-type-option
nixos/network-interfaces: add networking.interfaces.<name>.ipv[46].routes.type
2022-06-04 15:41:03 +00:00
Guillaume Girol ed883bbfd9
Merge pull request #173881 from symphorien/ihm-fix-test
nixos/tests/ihatemoney: fix test
2022-06-04 12:04:02 +00:00
Robert Hensing 81128707bf
Merge pull request #176182 from bobby285271/test-driver
nixos/test-driver: fix type hint for send_chars
2022-06-04 13:32:11 +02:00
sternenseemann 1dc61f76fb Merge remote-tracking branch 'origin/master' into haskell-updates 2022-06-04 10:57:30 +02:00
Bobby Rong 41cd411c03
nixos/tests/sway: skip type check for now 2022-06-04 13:55:01 +08:00
Bobby Rong 906b0b2e87
nixos/tests: fix all tests that uses wait_until_tty_matches 2022-06-04 12:22:03 +08:00
Bobby Rong 9d2a8e3190
nixos/test-driver: fix type hint for send_chars 2022-06-04 12:05:47 +08:00
Martin Weinelt 417419a5c9 nixos/tests/home-assistant: assert regex match
Fixes type checking done against the test driver.
2022-06-03 18:56:11 -07:00
github-actions[bot] 9ebf890b3f
Merge master into haskell-updates 2022-06-04 00:13:01 +00:00
Sandro 4c7a9aae7b
Merge pull request #176052 from LunNova/lunnova/rl-2211.section.md
manual: Fix 22.11 Other Notable Changes bullet point style
2022-06-04 00:23:46 +02:00
Sandro Jäckel 032f15e566
nixos/asf: add me as maintainer 2022-06-03 18:52:48 +02:00
Sandro Jäckel d8cd684b62
nixos/asf: restart when self restarting 2022-06-03 18:52:47 +02:00
Sandro Jäckel 4de6a81193
nixos/asf: fix state directory permissions, for real 2022-06-03 18:52:47 +02:00
Sandro Jäckel 28379c3a51
Revert "nixos/asf: set restrictive home permissions"
This reverts commit 16f28933e7.
2022-06-03 18:52:46 +02:00
Thiago Kenji Okada 44b5c8b6a7
Merge pull request #175965 from otavio/topic/nixos-restic
Add new restic options for NixOS module
2022-06-03 16:19:55 +01:00
Otavio Salvador d9e3b1fafe nixos/restic: add backup{Prepare,Cleanup}Command options
The backupPrepareCommand and backupCleanupCommand options offer a way to
run a script to prepare for backup and then cleanup it once finish.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2022-06-03 11:22:22 -03:00
Otavio Salvador deae887c5a nixos/restic: add new repositoryFile option
Allow providing the repository as a file, useful when we don't want it
being stored in the Git repository as plain text.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2022-06-03 11:21:37 -03:00
pennae e21c4d67d5 nixos/unifi: change deprecated default for openFirewall
this was deprecated 6 months ago in unstable for removal in 22.11,
so now seems like a good point to change the default.
2022-06-03 15:59:41 +02:00
Robert Hensing 481ef8ddd6 nixosTests: Add allDrivers for development purposes 2022-06-03 14:34:29 +02:00
Robert Hensing 793180cf55
Merge branch 'master' into 172325-nixostest-override-python-pkgs-additional-param 2022-06-03 14:22:13 +02:00
Robert Hensing de3e423178
Merge pull request #171280 from m1-s/fix_mypy2
nixos/test-driver: Typecheck TestScript
2022-06-03 14:19:21 +02:00
Michael Schneider fd4ebd8990 add opt out flag for type checking 2022-06-03 13:37:04 +02:00
Sandro c09782950f
Merge pull request #176030 from SuperSandro2000/asf 2022-06-03 12:12:23 +02:00
Sandro Jäckel e438fad5e9
nixos/asf: format 2022-06-03 11:41:40 +02:00
Sandro Jäckel 17ec7e4401
nixos/asf: remove subdirectories from bot config 2022-06-03 11:41:38 +02:00
Sandro Jäckel 16f28933e7
nixos/asf: set restrictive home permissions 2022-06-03 11:41:37 +02:00
Sandro Jäckel 48b21f661c
nixos/asf: add ipcPasswordFile option, only delete bot configs when managed by nixos, make preStart clearer 2022-06-03 11:41:36 +02:00
Wout Mertens 7f025e2b34
netdata: started when service can be pinged 2022-06-03 10:45:27 +02:00
Luna Nova 9e95ee79d4
manual: Fix 22.11 Other Notable Changes bullet point style
Every other release uses "-" instead of "*", which results in
spacing=compact being added to the xml unexpectedly.
2022-06-02 20:58:54 -07:00
Nick Cao e84828b973
nixos/nvidia: add option hardware.nvidia.open for selecting the opensource kernel driver 2022-06-03 10:50:33 +08:00
Nick Cao 94f5bd2051
nvidia_x11: init opensource kernel driver 2022-06-03 10:50:33 +08:00
github-actions[bot] 1a2bb9918a
Merge master into haskell-updates 2022-06-03 00:11:59 +00:00
Otavio Salvador 082a4184ec nixos/restic: reformat
Apply nixpkgs-fmt on file prior doing changes.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2022-06-02 16:48:43 -03:00
Rick van Schijndel ef895f6b43
Merge pull request #173239 from jojosch/mjolnir-update
mjolnir: 1.4.1 -> 1.4.2
2022-06-02 21:40:53 +02:00
Rick van Schijndel d93d4a5820
Merge pull request #175872 from uninsane/colinsane/phosh-phoc-scale
phosh: allow fractional scaling
2022-06-02 20:54:41 +02:00
Sandro b450c76786
Merge pull request #175607 from robintown/matrix-synapse
matrix-synapse: 1.59.1 -> 1.60.0
2022-06-02 20:32:04 +02:00
Lassulus 8cea5e2fa1
Merge pull request #173664 from Izorkin/peertube-redis-server
nixos/peertube: use redis.servers
2022-06-02 20:26:29 +02:00
Alexandru Scvortov 3a09010b9d nixos/network-interfaces: add networking.interfaces.<name>.ipv[46].routes.type 2022-06-02 19:16:25 +01:00
Thiago Kenji Okada 679197e9ff
Merge pull request #174058 from jian-lin/fix-nvidia.powerManagement.finegrained-only-apply-workarounds-when-needed
nixos/nvidia: only apply workarounds for finegrained when needed
2022-06-02 17:55:23 +01:00
Thiago Kenji Okada 64870a0c57
Merge pull request #174259 from schuelermine/add-nixos-option/hardware.nvidia.forceFullCompositionPipeline
nixos/nvidia: add hardware.nvidia.forceFullCompositionPipeline
2022-06-02 17:50:50 +01:00
Thiago Kenji Okada 3ead2b58f5
Merge pull request #174057 from jian-lin/fix-nvidia.powerManagement.finegrained-remove-useless-setting
nixos/nvidia: remove a useless option
2022-06-02 17:32:24 +01:00
ajs124 5bb61d6a25 syslogng_incubator: remove after being marked broken for over 18 months
It was marked in commit 6d797c8462 by Jörg Thalheim on 2018-08-27 (commited on 2018-08-27)
2022-06-02 18:03:52 +02:00
sternenseemann 0d9edbcdd0 Merge remote-tracking branch 'origin/master' into haskell-updates 2022-06-02 10:48:49 +02:00
colin 1d0649f929 phosh: restrict the scale config value to strictly positive values or null 2022-06-02 01:46:08 -07:00
Michael Schneider 814027378b nixos/test-driver: Typecheck TestScript 2022-06-02 10:05:45 +02:00
MatthiasBenaets 9a5c77c581 nixos/new-lg4ff: fix kernel selection 2022-06-02 08:27:42 +02:00
github-actions[bot] a52fa8397a
Merge master into haskell-updates 2022-06-02 00:16:40 +00:00
colin cabf369f83 phosh: allow fractional scaling 2022-06-01 15:44:12 -07:00
Bernardo Meurer f4d4b16d71
Merge pull request #175831 from lovesegfault/fix-localtime
nixos/localtimed: hopefully fix geoclue
2022-06-01 14:38:29 -07:00
lom ec9204d732 nixos/new-lg4ff: respect enable option 2022-06-01 15:09:24 -06:00
Bernardo Meurer ffae8569b0 nixos/localtimed: hopefully fix geoclue 2022-06-01 13:20:16 -07:00
sternenseemann 38c31bdbe5 Merge remote-tracking branch 'origin/master' into haskell-updates 2022-06-01 19:08:57 +02:00
Martin Weinelt 5a188dfbca
Merge pull request #175729 from DeterminateSystems/jellyfin-fix 2022-06-01 17:19:49 +02:00
Sandro ba4c03124f
Merge pull request #174956 from MatthiasBenaets/new-lg4ff
new-lg4ff: init at 0.3.3
2022-06-01 16:42:55 +02:00
MatthiasBenaets 8dcba104aa new-lg4ff: init at 0.3.3 2022-06-01 14:31:52 +02:00
Linus Heckemann 7eab23d517 jellyfin: fix permissions on state directory
Previously, all configuration and state data was accessible to all
users on the system running jellyfin. This included user passwords in
the Jellyfin database, as well as credentials for LDAP if configured.
The exact set of accessible data depends on system configuration.

Thanks to Sofie Finnes Øvrelid for reporting this issue.

Fixes: CVE-2022-32198

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2022-06-01 12:31:23 +02:00
Martin Weinelt 5b8a2ab169
Merge pull request #175611 from waldheinz/systemd-boot-builder-does-not-update
nixos/systemd-boot: fix systemd-boot-builder refusing to update
2022-06-01 12:22:11 +02:00
Matthias Treydte ff24f484af nixos/systemd-boot: fix systemd-boot-builder refusing to update
Handling of the string length condition in should_update
was broken, as evident with the log message

> leaving systemd-boot 246 in place (250.4 is not newer)

Discussion with @mweinelt came to the conclusion
that Python's "<" operator already does what we need,
so the should_update function can be dropped.

Fixes a30de3b849
2022-06-01 11:49:07 +02:00
Aaron Andersen 18a07645e5
Merge pull request #174959 from MoritzBoehme/openconnect-auto-start
nixos/openconnect: add autoStart option
2022-05-31 23:05:25 -04:00
github-actions[bot] 68b515131f
Merge master into haskell-updates 2022-06-01 00:15:07 +00:00
Martin Weinelt 02e44ee3be
Merge pull request #174804 from dotlambda/prometheus-dmarc-exporter-no-poetry2nix 2022-06-01 01:46:30 +02:00
Robert Schütz aff15c41fc dmarc-metrics-exporter: rename from prometheus-dmarc-exporter
Also stop using poetry2nix.
2022-05-31 23:25:18 +00:00
AmineChikhaoui 3909226544
ec2-amis: add release 22.05 2022-05-31 18:43:58 -04:00
7c6f434c 39e6b1a240
Merge pull request #175558 from klemensn/atop-convert-logs-fix-startup
nixos/atop: Convert log format to fix service start
2022-05-31 20:37:23 +00:00
Sandro 8d8e031d25
Merge pull request #133771 from erdnaxe/libreddit_fix
nixos/libreddit: service hardening and test
2022-05-31 21:53:51 +02:00
Robin Townsend d0eda68f5b matrix-synapse: Warn about state_group_edges changes in release notes 2022-05-31 13:54:58 -04:00
Maximilian Bosch 185ee01e80
Merge pull request #173273 from kfollesdal/grafana-azuread
nixos/grafana: add new options to grafana module
2022-05-31 19:24:33 +02:00
Robert Hensing c5d82eb1ab
Merge pull request #174939 from FliegendeWurst/nixos-tests
nixos/tests: various fixes
2022-05-31 16:31:06 +02:00
Robert Hensing 53326189ba
Merge pull request #174829 from blaggacao/fix/cleanup-nixpkgs-initial-system
nixos: remove effect-less nixpgks.initialSystem
2022-05-31 16:26:25 +02:00