Robert Hensing
1d76033154
Rename nixos/modules/profiles/{macos-builder.nix -> nix-builder-vm.nix}
2024-10-08 10:27:11 +02:00
Robert Hensing
2d11924c9a
macos-builder: readd Nix CLI for debugging ( #347205 )
2024-10-08 09:58:17 +02:00
Michael Hoang
10bad16926
macos-builder: readd Nix CLI for debugging
...
See https://github.com/NixOS/nixpkgs/pull/268574#discussion_r1788966194
2024-10-08 12:41:55 +11:00
Thomas Gerbet
16caf1231b
cups-filters: remove support for legacy CUPS browsing and for LDAP
...
Fixes CVE-2024-47176 and CVE-2024-47850. NixOS is not affected by these security issues by
default because we do not ship the default configuration file so it fallbacks to `BrowseRemoteProtocols dnssd`.
631/udp is removed from the open firewall ports, it was by the CUPS
browsing protocol.
2024-10-07 22:28:12 +02:00
Sandro
0538ecd092
rss-bridge: Remove pkg patch, adapt nixos service ( #331295 )
2024-10-07 18:57:22 +02:00
Peder Bergebakken Sundt
cd9a00431c
ec2: shellcheck fixes ( #340489 )
2024-10-07 15:39:38 +02:00
Cosima Neidahl
a825406b15
lomiri.lomiri: Replace NIXOS_XKB_LAYOUTS envvar with file ( #345288 )
2024-10-07 09:33:40 +02:00
Florian Klink
9c13bad7ca
nixos/tmpfiles: only setup nix-related tmpfiles if nix is enabled ( #343784 )
2024-10-07 09:11:46 +03:00
Emily
85c36fecfc
xen: nuke, move to by-name. ( #345192 )
2024-10-07 03:48:37 +01:00
Emily
1a53b400e5
mongodb: mongodb-5_0 -> mongodb-7_0; mongodb-5_0: drop; unifi: unifi7 -> unifi8; unifi{7,-video}: drop ( #345625 )
2024-10-07 01:38:54 +01:00
Will Fancher
aad455b434
nixos/usbStorage: apply upstream ( #284334 )
2024-10-06 19:39:07 -04:00
Emily
b0395df085
unifi7: drop
2024-10-06 22:47:41 +01:00
Will Fancher
c00fc8bd1a
nixos/unl0kr: add settings to the unl0kr module ( #339787 )
2024-10-06 17:44:55 -04:00
Fernando Rodrigues
251dc99c70
nixos/xen: simplify package options
...
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-10-06 20:24:29 +00:00
Kevin Cox
fb9b5c806b
mautrix-meta: drop maintainership Rutherther ( #346916 )
2024-10-06 14:45:10 -04:00
Kevin Cox
b8fc5855fb
nixos.mautrix-meta: Update config to 0.4 format ( #343606 )
2024-10-06 14:44:41 -04:00
Rutherther
379ca4e67f
mautrix-meta: drop maintainership Rutherther
2024-10-06 20:33:42 +02:00
Bjørn Forsman
40bfbe3226
nixos/scrutiny: wait until ready
...
Add postStart code that waits until Scrutiny has opened its port. This
fixes a race condition against scrutiny-collector, which can start (and
fail) before scrutiny is ready.
2024-10-06 20:07:45 +02:00
Maximilian Bosch
5ee80e8120
Merge: nixos/nginx: remove shortand from defaultText ( #346767 )
2024-10-06 17:13:51 +02:00
Sandro
020c26717f
nixos/quorum: fix geth args, fix test ( #341181 )
2024-10-06 14:06:31 +02:00
Sandro
00461d0fcb
nixos/nginx: fix double slash in example ( #346774 )
2024-10-06 13:58:54 +02:00
Sandro Jäckel
dd7ef21afc
nixos/nginx: fix double slash in example
2024-10-06 03:45:51 +02:00
Sandro
b64b2d25c2
nixos/nginx: remove shortand from defaultText
2024-10-06 03:19:07 +02:00
Nick Cao
5f821de20c
keycloak: 25.0.6 -> 26.0.0 ( #346439 )
2024-10-05 18:14:45 -04:00
h7x4
25f2846361
nixos/bind: set type of zones.*.extraConfig to lines ( #346424 )
2024-10-05 21:07:26 +02:00
h7x4
cc76cf58f8
nixos/uinput: set a static GID for the uinput group ( #333762 )
2024-10-05 20:59:16 +02:00
Will Fancher
9f8eb445fa
nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1 ( #346547 )
2024-10-05 13:44:39 -04:00
Jared Baur
c39781c558
nixos/activation-script: only setup nix tmpfiles if nix is enabled
...
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
2024-10-05 09:03:19 -07:00
Jared Baur
3d6e7d7b56
nixos/tmpfiles: only setup nix tmpfiles when nix is used
...
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
2024-10-05 09:01:55 -07:00
Nick Cao
6069dde181
nixos/keycloak: make initialAdminPassword optional
2024-10-05 08:37:41 -04:00
r-vdp
94532d1530
nixos/syncthing: remove syncthing-resume service
...
It was removed upstream in https://github.com/syncthing/syncthing/pull/9611
and the stub generated by nixos now prints an error in the logs due to
it not having a ExecStart line.
2024-10-05 12:55:39 +02:00
r-vdp
70119aa60f
nixis/uinput: use a fixed GID for the uinput group
2024-10-05 10:21:26 +02:00
r-vdp
469f505813
nixos/{uinput,ids}: format
2024-10-05 10:21:01 +02:00
Bobby Rong
f594475564
nixos/xfce: Fix ambiguous with
( #346528 )
2024-10-05 09:03:18 +08:00
Sandro Jäckel
9b996f7396
nixos/xfce: Fix ambiguous with
...
Pull request 345352 introduces `pkgs.exo`, don't pick up that package.
2024-10-05 08:43:24 +08:00
Nick Cao
0cdc3e2a0b
nixos/keycloak: drop removed proxy option
...
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#proxy-option-removed
2024-10-04 20:20:46 -04:00
Nick Cao
16cd47369f
nixos/keycloak: KEYCLOAK_ADMIN{,PASSWORD} -> KC_BOOTSTRAP_ADMIN_{USERNAME,PASSWORD}
...
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#admin-bootstrapping-and-recovery
2024-10-04 20:08:06 -04:00
Nick Cao
d2ec2d3c29
nixos/keycloak: link $out/lib to KC_HOME_DIR to fix loading optimized app image
...
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#additional-validations-on-the-optimized-startup-option
2024-10-04 20:06:08 -04:00
Will Fancher
3e90d5a2bc
nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1
2024-10-04 19:50:46 -04:00
jade
f0ce0e71c3
Remove the revCount attribute from the generated flake registry ( #316225 )
2024-10-04 15:25:55 -07:00
Aaron Andersen
913a23b5e2
nixos/redmine: Allow specifying an IP address Redmine should bind to ( #345617 )
2024-10-04 18:18:45 -04:00
h7x4
c38aa540ba
nixos/networking: fix macvlan service description ( #346507 )
2024-10-04 23:20:09 +02:00
Anthony Roussel
17fd7e3eea
nixos/gns3-server: fix ubridge support ( #303442 )
2024-10-04 22:16:13 +02:00
Bjørn Forsman
20a3012813
nixos/networking: improve vlan service description
...
VLAN is an abbreviation, so let's not write Vlan.
2024-10-04 22:09:01 +02:00
Bjørn Forsman
e8da2c8981
nixos/networking: fix macvlan service description
...
Fix copy pasta from the vlan service: Vlan -> MACVLAN
2024-10-04 22:08:40 +02:00
Peder Bergebakken Sundt
986e6d4e3d
tsm-client: 8.1.23.0 -> 8.1.24.0 ( #345039 )
2024-10-04 18:25:37 +02:00
Ramses
2d809488f7
nixos/containers: Fix shellcheck issues ( #346131 )
2024-10-04 18:19:19 +02:00
K900
d5f1752ca9
xdg-desktop-portal-gtk: Enable all default portals unconditionally ( #345979 )
2024-10-04 18:29:33 +03:00
nicoo
6f26c88376
nixos/macos-builder: pin stateVersion
( #342380 )
...
Closes #325610 , #325674
2024-10-04 16:09:56 +02:00
Mynacol
aa0fc3e8b8
rss-bridge: Remove pkg patch, adapt nixos service
...
The rss-bridge service changes introduced in f2201789fe
resp. https://github.com/NixOS/nixpkgs/pull/223148 removes the need for
the package patch. This commit removes the patch to ease updating and
maintenance.
Relevant service functionality was also removed (e.g. the setting of
RSSBRIDGE_DATA).
The explicit definition of FileCache.path so users can easily see its
default value and change it, requires to use a freeformType to let users
freely add potentially upcoming config options. This type is restricted
to ini types (although we coerce them to environment variables).
This however makes the list of enabled_bridges impossible. That was
fixed by explicitly introducing this option with a type allowing lists.
The default value however should be unset, which is expressed as `null`,
which further spurred a change in the environment variable generation to
ignore null values (instead of coercing them to an empty string).
A breaking change note was added to highlight this change. A check that
warns users of the not-application of their existing config file is
not easily possible, as people could have only added or changed the
config.ini.php file on the file system without changing a nix variable.
2024-10-04 14:58:15 +02:00