mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-12-25 03:17:13 +00:00
Code Issues Wiki Activity
295311 commits 204 branches 125 tags 10 GiB
Commit graph

1337 commits

Author SHA1 Message Date
Lassulus 4165f9869e
Merge pull request #91586 from manveru/amazon-ssm-agent-2.3.1319.0 
ssm-agent: 2.0.633.0 -> 2.3.1319.0
 2020-08-23 08:48:16 +02:00
Justin Humm 6a7b11055c
Merge pull request #93532 from erictapen/gollum-h1-title 
nixos/gollum: introduce --h1-title option
 2020-08-22 22:45:43 +02:00
Jörg Thalheim b6e2e4c777
Merge pull request #93425 from helsinki-systems/feat/gitlab-shell-config 2020-08-21 19:20:42 +01:00
Janne Heß ae1dada42f
nixos/gitlab: Support incoming mail 
When incoming mails are enabled, an extra service is needed.
Closes #36125.
 2020-08-21 18:56:20 +02:00
Anderson Torres e7139f46cd
Merge pull request #93654 from Church-/jellyfin_10.6.0 
jellyfin 10.5.5 -> 10.6.0
 2020-08-19 10:21:16 -03:00
Florian Klink 16fc531784
Merge pull request #95505 from flokli/remove-mathics 
mathics: remove package, module and test
 2020-08-16 18:42:10 +02:00
Noah Hendrickson ce9f0c42f9 nixos/jellyfin: added a package option to the options section, defaults to using the default jellyfin package if nixos version is 20.09 or greater, otherwise will default to using the new jellyfin_10_5 derivation for older systems. 2020-08-16 11:41:41 -04:00
Florian Klink b2f3bbd3fb
Merge pull request #95507 from flokli/remove-mesos 
mesos: remove package, module and test (and chronos/marathon which depends on it)
 2020-08-16 14:46:24 +02:00
Florian Klink 01684d6e9b nixos/mathics: remove module 2020-08-15 20:16:13 +02:00
Florian Klink b7be00ad5e
Merge pull request #93358 from helsinki-systems/fix/gitlab-customrb 
nixos/gitlab: Fix extra-gitlab.rb
 2020-08-15 20:13:28 +02:00
Florian Klink 34d91a8cba nixos/mesos*: remove 
The mesos package has been broken for >9 months.
 2020-08-15 16:59:37 +02:00
Martin Weinelt f1efdd2c0b
Merge pull request #89444 from mweinelt/pinnwand-module 
nixos/pinnwand: init; steck: init at 0.5.0; nixos/tests/pinnwand: init
 2020-08-14 22:09:33 +02:00
Justin Humm 90ed2c01f0
Merge pull request #95266 from Lassulus/gollum-text 
nixos/gollum: replace toFile with writeText
 2020-08-12 19:28:41 +02:00
lassulus 957da625c5 nixos/gollum: replace toFile with writeText 2020-08-12 19:16:05 +02:00
Jörg Thalheim dc255dcac0
Merge pull request #94291 from Izorkin/gitea 2020-08-12 12:23:05 +01:00
Martin Weinelt 8774b9090d
nixos/pinnwand: init 2020-08-09 01:52:22 +02:00
Jörg Thalheim ba930d8679
nixos/modules: remove trailing whitespace 
This leads to ci failure otherwise if the file gets changed.
git-blame can ignore whitespace changes.
 2020-08-07 14:45:39 +01:00
Aaron Andersen 69eb22e4cd nixos/gitlab: fix module after #94454 2020-08-06 22:37:48 -04:00
volth 5c384e1268
nix-daemon: platform.gcc.arch is not x86 specific 2020-08-05 17:03:45 +00:00
volth 707e43b961
nix-daemon: platform.gcc.arch is not x86 specific 2020-08-05 17:02:30 +00:00
volth cf7b63df5b gcc.arch: refactor, move tables under lib/ 2020-08-05 11:18:26 +00:00
Izorkin 31ce2636a4 nixos/gitea: add lfs options 2020-08-05 11:19:33 +03:00
Izorkin 6c258a7c21 nixos/gitea: add ssh options 2020-08-05 11:19:32 +03:00
Izorkin dfd32f11f3 nixos/gitea: update sandboxing options 2020-08-05 11:19:32 +03:00
Izorkin 6a0fd33b4c nixos/gitea: add support socket connection 2020-08-05 11:19:32 +03:00
Izorkin 1a0e633c60 nixos/gitea: enable pid file 2020-08-05 11:19:32 +03:00
Izorkin 4e68da6337 nixos/gitea: add 'backupDir' option 2020-08-05 11:19:32 +03:00
Izorkin f77e28d83d nixos/gitea: enable data access only for 'gitea' group 2020-08-05 11:19:32 +03:00
Matthew Bauer 67b6e56391 nixos/nix-daemon.nix: fix nix.distributedBuilds assertion 2020-07-30 21:38:24 -05:00
Matthew Bauer ed1423b03c
Merge pull request #92415 from matthewbauer/nix-daemon-distributed-builds 
Add assertion on distributedBuilds & buildMachines != []
 2020-07-30 19:56:23 -05:00
Matthew Bauer 250885d0ca nixos/nix-daemon.nix: assert distributedBuilds and buildMachines!=[] 
Without distributedBuilds, you can’t use buildMachines flag.

Fixes #56593
 2020-07-30 19:55:12 -05:00
Milan Pässler 2d819e968e nixos/mautrix-telegram: fix base-config path 2020-07-29 16:34:30 +02:00
Florian Klink 80c2d2e2af
Merge pull request #93423 from helsinki-systems/feat/gitlab-redis-url 
nixos/gitlab: Make redis URL configurable
 2020-07-22 19:05:28 +02:00
Lassulus 72f66e7e42
Merge pull request #72320 from sweber83/sw-zigbee2mqtt 
zigbee2mqtt package & module
 2020-07-21 05:23:43 +02:00
Simon Weber 1af8759693 nixos/zigbee2mqtt: init 2020-07-20 21:48:14 +02:00
Justin Humm d6f6424ac8
nixos/gollum: introduce --h1-title option 2020-07-20 16:15:18 +02:00
Janne Heß f459122ea3
nixos/gitlab: Support extra config for shell 2020-07-18 16:46:33 +02:00
Janne Heß e9bf4ca80f
nixos/gitlab: Make redis URL configurable 
We run Redis via Unix socket
 2020-07-18 16:28:59 +02:00
Janne Heß 026b4eb3ae
nixos/gitlab: Drop sidekiq PID file 
> WARNING: PID file creation will be removed in Sidekiq 6.0, see #4045.
Please use a proper process supervisor to start and manage your
services

Since NixOS uses a proper process supervisor AND does not use the PID
file anywhere, we can just drop it to be upwards compatible and fix that
warning.
 2020-07-18 16:00:04 +02:00
Janne Heß 25bad1f9b8
nixos/gitlab: Fix extra-gitlab.rb 
Line 794 removes the entire directory, rendering the tmpfiles rule
useless.

cc @bgamari @talyz
 2020-07-17 19:34:49 +02:00
claudiiii 2d468be964 nixos/matrix-synapse: update documentation 2020-07-17 16:28:12 +02:00
Aaron Andersen 5e32ec39ca nixos/gitolite: provision data directory only before service begins 2020-07-12 09:19:00 -04:00
Vincent Breitmoser 5395397fd6 nixos/nix-daemon: work on buildMachines submodule 2020-07-05 16:51:55 +02:00
John Ericson 1ed248eac2 nixos/nix-daemon: Organize buildMachine options with a submodule 2020-07-05 16:51:55 +02:00
Michael Fellinger d1c4bf967b
ssm-agent: 2.0.633.0 -> 2.3.1319.0 2020-06-26 12:43:27 +02:00
Jörg Thalheim 26e9a3498b
nixos/home-assistant: make service reloadable 
This allows quick reloads using the following trick:

$(nix-build --show-trace --no-out-link \
  -E '(with import <nixpkgs/nixos> {};
       pkgs.writeScript "update-hass-config"
       config.systemd.services.home-assistant.preStart)')
systemctl reload home-assistant
 2020-06-20 10:31:27 +01:00
Maximilian Bosch 650617253e
maintainers/teams: add matrix team 2020-06-17 21:55:29 +02:00
zimbatm 9494fdeeb3
Merge pull request #70327 from abbradar/synapse-plugins 
Refactor Synapse plugins, add matrix-synapse-pam
 2020-06-09 23:54:54 +02:00
Janne Heß 644f9e74e7
nixos/freeswitch: Unit improvements and add fs_cli 
This switches the unit to Restart=on-failure and switches the CPU policy
to fifo (the daemon tries to do that itself, but is denied permission).

Also add the package to $PATH to be able to use fs_cli easily.
 2020-06-05 20:16:43 +02:00
Eelco Dolstra b00463d406
Merge pull request #89479 from edolstra/nix-2.4-completion 
Don't enable nix-bash-completions when using Nix 2.4
 2020-06-05 13:29:10 +02:00
Robin Gloster 79454f15ac
gitlab: 12.10.8 -> 13.0.3 
https://about.gitlab.com/releases/2020/05/22/gitlab-13-0-released/
https://about.gitlab.com/releases/2020/05/27/security-release-13-0-1-released/
https://about.gitlab.com/releases/2020/05/29/gitlab-13-0-3-released/

The gitaly gitlab-shell config has moved into gitaly.toml. See
https://gitlab.com/gitlab-org/gitaly/-/issues/2182 for more info.
 2020-06-04 14:32:39 +02:00
Eelco Dolstra bbfc47326b Don't enable nix-bash-completions when using Nix 2.4 
2.4 has its own completion script which collides with
nix-bash-completions.
 2020-06-04 14:18:18 +02:00
Martin Weinelt da6b277f96
nixos/home-assistant: allow arbitrary yaml functions 2020-06-02 15:51:35 +02:00
Notkea ab327b27a1
nixos/mautrix-telegram: add module (#63589) 2020-06-01 08:45:04 +00:00
Notkea 523743157a
matrix-appservice-discord: init at 0.5.2 (#62744) 
* matrix-appservice-discord: init at 0.5.2

* nixos/matrix-appservice-discord: add module
 2020-06-01 08:43:38 +00:00
Nikolay Amiantov cd92184f3d
matrix-synapse service: add plugins option 2020-06-01 10:30:22 +02:00
Robin Gloster b64205d164
Merge pull request #85293 from petabyteboy/feature/gitlab-12-9-x 
gitlab: 12.8.10 -> 12.10.6
 2020-05-31 06:10:29 +02:00
rnhmjoj aee614c996
treewide: replace bazaar with breezy 2020-05-25 09:22:54 +02:00
David Terry 8724c96e71 nixos/bazarr: init 2020-05-22 11:23:31 +02:00
Florian Klink 73392b748f nixos/freeswitch: always run systemctl of the currently running systemd 2020-05-21 10:29:52 +02:00
Florian Klink 8aaca0addc nixos/docker-registry: always run systemctl of the currently running systemd 2020-05-21 10:29:37 +02:00
Milan Pässler 47c8e52a22 nixos/gitlab: use new structure.sql 
According to https://gitlab.com/gitlab-org/gitlab/-/issues/211487
 2020-05-19 01:28:06 +02:00
Daniel Fullmer e958afa0a9 nixos/zoneminder: fix evaluation with php refactor 2020-05-17 13:42:42 -04:00
Ed Cragg c768364652 domoticz: add module 2020-05-17 14:20:09 +01:00
Florian Klink 90bc3ec9b9 nixos/sssd remove redundant condition 
This is all inside a global cfg.enable conditional, so we don't need to
check here again.
 2020-05-11 16:14:51 +02:00
Florian Klink 0f6f544aaf nixos/sssd: drop assertion 
This is now already triggered by the nsswitch module, as we set
system.nssModules.
 2020-05-11 16:14:51 +02:00
Florian Klink ecf327d697 nixos/sssd: add to system.nssDatabases.group too 
nixos/modules/config/nsswitch.nix uses `passwdArray` for both `passwd`
and `group`, but when moving this into the sss module in
edddc7c82a, it didn't get split
appropriately.
 2020-05-11 16:14:50 +02:00
Eelco Dolstra 9bf75a27f4
Revert "nix-daemon.nix: Use 'nix ping-store' to initialize directories" 
This reverts commits 9d0de0dc57,
27d2857a99. 'nix ping-store' is an
experimental command so it doesn't work in Nix 2.4 unless you set
'experimental-features = nix-command' in nix.conf.
 2020-05-07 12:39:22 +02:00
Frederik Rietdijk 9875bbae75 Merge master into staging-next 2020-05-05 19:51:09 +02:00
Aaron Andersen 39a0020c8f
Merge pull request #85904 from aanderse/gitea 
nixos/gitea: add settings option
 2020-05-04 23:01:12 -04:00
Pavol Rusnak 7b0167204d treewide: use https for nixos.org and hydra.nixos.org 
tarballs.nixos.org is omitted from the change because urls from there
are always hashed and checked
 2020-05-03 22:14:21 -07:00
Gabriel Ebner a4f60b72e9 Merge branch 'master' into octoprint 2020-05-03 11:37:52 +02:00
Jan Tojnar 2874eebfd2
Merge branch 'staging-next' into staging 2020-04-29 08:35:47 +02:00
Pavel Goran c678d68cdb nixos/pykms: add SyslogIdentifier 2020-04-29 03:53:47 +00:00
Florian Klink c01ac3ed12
Merge pull request #85998 from helsinki-systems/make-nsswitch-more-flexible 
nixos/nsswitch: Make databases more configurable
 2020-04-29 01:28:33 +02:00
Thibaut Marty 4a0beed5c0 treewide: fix modules options types where the default is null 
They can be caught with `nixos-option -r` on an empty ({...}:{}) NixOS
configuration.
 2020-04-28 19:13:59 +02:00
Janne Heß edddc7c82a
nixos/sss: Move nsswitch config into the module 2020-04-28 17:02:46 +02:00
zowoq c59c4e3589 nixos/*: use $out instead of $bin with buildGoPackage 2020-04-28 20:30:29 +10:00
talyz c0a838df38
nixos/gitlab: Fix services.gitlab.enableStartTLSAuto 
'toString false' results in an empty string, which, in this context,
is a syntax error. Use boolToString instead.

Fixes #86160
 2020-04-28 09:05:26 +02:00
Dominik Xaver Hörl c10d82358f treewide: add types to boolean / enable options or make use of mkEnableOption 2020-04-27 09:32:01 +02:00
Aaron Andersen 218049c5c2 nixos/gitea: add settings option 2020-04-23 21:06:26 -04:00
Dominik Xaver Hörl 0412bde942 treewide: add bool type to enable options, or make use of mkEnableOption 
Add missing type information to manually specified enable options or replace them by mkEnableOption where appropriate.
 2020-04-21 08:55:36 +02:00
Michael Weiss 0e4417f118
Revert "nixos: Introduce nix.buildLocation option" 
This reverts commit 5291925fd2.
Reason: This started to cause severe regressions, see:
- https://github.com/NixOS/nixpkgs/issues/85552
- https://github.com/NixOS/nixpkgs/pull/83166#pullrequestreview-395960588
Fixes #85552.
 2020-04-19 15:16:08 +02:00
Jörg Thalheim 35eb7793a3
Merge pull request #83166 from avnik/nix-build-location 2020-04-18 18:37:15 +01:00
Alexander V. Nikolaev 5291925fd2 nixos: Introduce nix.buildLocation option 
Allow to specify where package build will happens.
It helps big packages (like browsers) not to overflow tmpfs.
 2020-04-18 20:31:04 +03:00
Pavol Rusnak fadcfc3ea4
treewide: per RFC45, remove more unquoted URLs 2020-04-18 14:04:37 +02:00
Maximilian Bosch 74d6e86ec2
nixos/doc: fix database-setup example for matrix-synapse 
Closes #85327
 2020-04-16 11:38:15 +02:00
Michele Guerini Rocco da232ea497
Merge pull request #78129 from flyfloh/airsonic-vhost 
airsonic: fix virtualHost option
 2020-04-15 09:18:28 +02:00
Sander van der Burg 0ffb720e8c nixos/dysnomia: fix documentRoot property 2020-04-14 14:31:13 +02:00
Michael Reilly 84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
Jörg Thalheim e6a15db534
nixos: default nix.maxJobs to auto 
Instead of making the configuration less portable by hard coding the number of
jobs equal to the cores we can also let nix set the same number at runtime.
 2020-04-07 08:45:56 +01:00
Martin Milata 2acddcb28f nixos/matrix-synapse: remove web_client option 
Removed in matrix-synapse-0.34.
 2020-04-04 14:05:08 +02:00
Eelco Dolstra 74e7ef35fe nix-daemon.nix: Add option nix.registry 
This allows you to specify the system-wide flake registry. One use is
to pin 'nixpkgs' to the Nixpkgs version used to build the system:

  nix.registry.nixpkgs.flake = nixpkgs;

where 'nixpkgs' is a flake input. This ensures that commands like

  $ nix run nixpkgs#hello

pull in a minimum of additional store paths.

You can also use this to redirect flakes, e.g.

  nix.registry.nixpkgs.to = {
    type = "github";
    owner = "my-org";
    repo = "my-nixpkgs";
  };
 2020-04-02 19:38:00 +02:00
Eelco Dolstra bd379be538
Remove unused 'rogue' service 2020-03-24 15:25:20 +01:00
Eelco Dolstra aebf9a4709
services/misc/nixos-manual.nix: Remove 
Running the manual on a TTY is useless in the graphical ISOs and not
particularly useful in non-graphical ISOs (since you can also run
'nixos-help').

Fixes #83157.
 2020-03-24 15:25:20 +01:00
Maximilian Bosch 849e16888f
nixos/doc/matrix-synapse: refactor 
* Linkify all service options used in the code-examples.
* Demonstrated the use of `riot-web.override {}`.
* Moved the example how to configure a postgresql-database for
  `matrix-synapse` to this document from the 20.03 release-notes.
 2020-03-16 10:39:42 +01:00
Maximilian Bosch 8be61f7a36
matrix-synapse: 1.9.1 -> 1.11.1 
https://github.com/matrix-org/synapse/releases/tag/v1.10.0
https://github.com/matrix-org/synapse/releases/tag/v1.10.1
https://github.com/matrix-org/synapse/releases/tag/v1.11.0
https://github.com/matrix-org/synapse/releases/tag/v1.11.1
 2020-03-15 17:09:51 +01:00
Frederik Rietdijk 7066dc85ba octoprint-plugins: use same python as octoprint, use overlays 
- ensure the plugins use the same python as octoprint
- overlay of overriding plugins
- drop octoprint-plugins attribute
 2020-03-15 13:48:22 +01:00
Florian Klink 74f451b851
Merge pull request #82413 from aanderse/authorized-keys-command 
nixos/sshd: add authorizedKeysCommand and authorizedKeysCommandUser options
 2020-03-14 23:58:47 +01:00
zimbatm 001be890f7 folding@home: 6.02 -> 7.5.1 
The v7 series is very different.

This commit introduces the 3 packages: fahclient, fahcontrol and
fahviewer. It also rebuilds the NixOS module to map better with the new
client.
 2020-03-14 13:01:26 -07:00
Aaron Andersen dbe59eca84 nixos/sshd: add authorizedKeysCommand and authorizedKeysCommandUser options 2020-03-12 21:00:12 -04:00
Léo Gaspard 06bdfc5e32
Merge pull request #82185 from matt-snider/master 
ankisyncd, nixos/ankisyncd: init at 2.1.0
 2020-03-12 11:47:42 +01:00
Maximilian Bosch b7cdb64ac2
treewide: remove myself from a few packages I don't use anymore 2020-03-11 22:29:30 +01:00
Matt Snider acba458b7e nixos/ankisyncd: init at 2.1.0 2020-03-10 22:45:33 +01:00
Dmitry Kalinkin 93745d243b
Merge pull request #79488 from danielfullmer/zoneminder-1.34.2 
zoneminder: 1.32.3 -> 1.34.3
 2020-03-07 13:25:17 -05:00
Daniel Fullmer cb5da4eacb nixos/zoneminder: update on startup if needed 2020-03-07 12:59:39 -05:00
David Guibert bbc2cd89ef users.groups.disnix instead of a list 
related to #63103.
 2020-03-05 09:08:40 +01:00
Florian 519d4f8e33 airsonic: enable nginx.recommendedProxySettings with virtualHost 
This fixes music playback when using the `services.airsonic.virtualHost`
option.
 2020-02-28 19:38:58 +01:00
Jörg Thalheim ee2ea82a68
nixos/home-assistant: make config deep mergeable 
This make it possible to split the home-assistant configuration
across multiple files and nix will merge the option in an intuitive
way.
 2020-02-28 15:32:03 +00:00
Martin Milata 9b0a9577f7 nixos/parsoid: enable systemd sandboxing 2020-02-25 01:32:31 +01:00
Martin Milata 3b27f4d945 nixos/parsoid: fix package name 
Original package was removed in 2b8cde0ce2.
 2020-02-25 01:32:30 +01:00
Silvan Mosberger 2118cddc82
nixos/freeswitch: init (#76821) 
nixos/freeswitch: init
 2020-01-30 16:45:47 +01:00
misuzu 0a43e431ca nixos/freeswitch: init 2020-01-30 17:16:49 +02:00
Cole Mickens 90d297c4cd nixos: home-assistant: can dial out 2020-01-19 00:03:44 -08:00
markuskowa 9bedc18507
Merge pull request #77553 from c0deaddict/fix/gitea-typo 
nixos/gitea: fix typo
 2020-01-13 09:29:08 +01:00
Erik Arvstedt 9ed03f2103 nixos/paperless: fix tmpfiles rules 
Previously, the service expected the paperless user to have a group with
the user's name. This is not necessarily the case for custom users.
 2020-01-13 02:01:23 +00:00
Erik Arvstedt 5ad5d2321f nixos/paperless: don't use deprecated types.loaOf 
This removes a warning.
 2020-01-13 02:01:23 +00:00
Jos van Bakel a171244455
nixos/gitea: fix typo 2020-01-12 12:51:01 +01:00
Jörg Thalheim 283e3e7218
nixos/home-assistant: support for secrets 2020-01-09 10:39:50 +00:00
Pascal Bach 76506ae42f nixos/matrix-synapse: fix empty user name 2020-01-08 23:18:26 +01:00
rnhmjoj 1d61efb7f1 treewide: use attrs instead of list for types.loaOf options 2020-01-06 10:39:18 -05:00
Bernardo Meurer d80570f3f5
rogue: boot.extraTTYs -> console.extraTTYs 2020-01-02 16:59:43 -08:00
Bernardo Meurer 992245f844
nixos-manual: boot.extraTTYs -> console.extraTTYs 2020-01-02 16:53:15 -08:00
zimbatm ab64518d0f
nixos/redmine: update example to more recent Ruby 2020-01-01 00:27:14 +00:00
Fernando J Pando 90ee16dbfc nixos/ethminer: always restart 2019-12-25 10:33:50 -05:00
Lassulus f061413686
Merge pull request #74722 from gnidorah/mame 
mame: 0.215 -> 0.216
 2019-12-17 07:57:54 +01:00
Christian Kampka b2d67c08d0
matrix-synapse: Use postgres service to create database and user 2019-12-13 21:22:27 +01:00
gnidorah cc54e5a685 nixos/mame: init 2019-12-10 19:53:43 +03:00
Silvan Mosberger 4ee3e8b21d
nixos/treewide: Move rename.nix imports to their respective modules 
A centralized list for these renames is not good because:
- It breaks disabledModules for modules that have a rename defined
- Adding/removing renames for a module means having to find them in the
central file
- Merge conflicts due to multiple people editing the central file
 2019-12-10 02:51:19 +01:00
Aaron Andersen 9abf0a1664
Merge pull request #75182 from clefru/typofix 
apache-kafka.nix: Add missing quote inside tmpfiles rule
 2019-12-07 22:50:50 -05:00
Clemens Fruhwirth 39cd4574aa apache-kafka.nix: Add missing quote inside tmpfiles rule 2019-12-07 23:59:10 +01:00
Sarah Brofeldt 218fe53e24 nixos/gitea: Add srhb as maintainer 2019-12-02 21:45:06 +01:00
Sarah Brofeldt 1573102a89 nixos/gitea: Fix startup 2019-12-02 21:45:06 +01:00
Janne Heß e42036ee0e nixos/gitea: Sandbox the systemd service 2019-12-01 10:18:48 +01:00
Aaron Andersen 7b9c17c475 nixos/beanstalkd: keep jobs in persistent storage (#73884) 2019-11-22 09:27:32 +00:00
Peter Hoeg d2f083160f
Merge pull request #65971 from jb55/zoneminder-fix 
zoneminder: fix nginx config
 2019-11-08 17:05:27 +08:00
Aaron Andersen c22e76e450
Merge pull request #71605 from aanderse/redmine-cleanup 
redmine: drop 3.4.x package, 4.0.4 -> 4.0.5
 2019-11-06 18:02:48 -05:00
Maximilian Bosch abe853b84c
Merge pull request #70336 from abbradar/synapse-ipv6 
matrix-synapse service: blacklist local IPv6 addresses by default
 2019-11-06 13:14:04 +01:00
Silvan Mosberger dd0a47e7ae
treewide: Switch to system users (#71055) 
treewide: Switch to system users
 2019-11-01 13:26:43 +01:00
talyz d5db11ccbd nixos/gitlab: Remove the old lib symlink in the state directory 
Also, remove the old and unused PermissionsStartOnly definition in the
gitlab-workhorse systemd service.
 2019-10-28 14:56:37 +01:00
talyz 041cbd860d nixos/gitlab: Abort on error and use of unset variables 
Default behavior is to continue executing the script even when one or
multiple steps fail. We want to abort early if any part of the
initialization fails to not run with a partially initialized state.

Default behavior also allows dereferencing non-existent variables,
potentially resulting in hard-to-find bugs.
 2019-10-28 14:56:37 +01:00
Aaron Andersen 50e5139893 redmine: drop 3.4.x package 2019-10-26 10:40:16 -04:00
Eelco Dolstra 52e739cc58 nix-daemon.nix: Fix checkConfig 2019-10-23 21:30:28 +02:00
Aaron Andersen 43a3d8dc29
Merge pull request #71461 from etu/lidarr-specify-datadir-option 
nixos/lidarr: Add dataDir option
 2019-10-22 05:07:49 -04:00
Florian Klink 1125fb02cc
Merge pull request #71428 from talyz/gitlab-already-initialized-constant 
gitlab: Get rid of most 'already initialized constant'-warnings
 2019-10-21 20:52:54 +02:00
edef 0599c89d58
Merge pull request #71338 from edef1c/nix-daemon-opt-aliases 
nixos/nix-daemon: don't refer to deprecated option aliases
 2019-10-21 09:59:13 +00:00
Elis Hirwing 9319dd17d8
nixos/lidarr: Add dataDir option 
This will bring this module to a state to be consistent with how the
other forks (sonarr & radarr) works.
 2019-10-20 21:20:53 +02:00
talyz ed4a09c6f3 gitlab: Get rid of most 'already initialized constant'-warnings 
On start, unicorn, sidekiq and other parts running ruby code emits
quite a few warnings similar to

/var/gitlab/state/config/application.rb:202: warning: already initialized constant Gitlab::Application::LOOSE_EE_APP_ASSETS
/nix/store/ysb0lgbzxp7a9y4yl8d4f9wrrzy9kafc-gitlab-ee-12.3.5/share/gitlab/config/application.rb:202: warning: previous definition of LOOSE_EE_APP_ASSETS was here
/var/gitlab/state/lib/gitlab.rb:38: warning: already initialized constant Gitlab::COM_URL
/nix/store/ysb0lgbzxp7a9y4yl8d4f9wrrzy9kafc-gitlab-ee-12.3.5/share/gitlab/lib/gitlab.rb:38: warning: previous definition of COM_URL was here

This seems to be caused by the same ruby files being evaluated
multiple times due to the paths being different - sometimes they're
loaded using the direct path and sometimes through a symlink, due to
our split between config and package data. To fix this, we make sure
that the offending files in the state directory always reference the
store path, regardless of that being the real file or a symlink.
 2019-10-19 19:30:28 +02:00
edef a68219b79b nixos/nix-daemon: don't refer to deprecated option aliases 
The `gc-` prefixed versions of these options have been
deprecated since Nix 2.0.
 2019-10-18 12:27:43 +00:00
talyz 201cca9a04 Revert "nixos/gitlab: properly clear out initializers" 
This reverts commit 2ee14c34ed.

This caused the initializers directory to be cleaned out while gitlab
was running in some instances. We clean out the directory on the
preStart stage already, so ensuring existance and permissions should
suffice.
 2019-10-18 08:00:56 +02:00
Maximilian Bosch 7774945b70
Merge pull request #70469 from Vskilet/matrix-synapse-update 
matrix-synapse: 1.3.1 -> 1.4.0
 2019-10-15 01:31:21 +02:00
Victor SENE 372422390f
matrix-synapse: 1.3.1 -> 1.4.0 
Bumps `matrix-synapse` to version 1.4.0[1]. With this version the
following changes in the matrix-synapse module were needed:

* Removed `trusted_third_party_id_servers`: option is marked as deprecated
  and ignored by matrix-synapse[2].
* Added `account_threepid_delegates` options as replacement for 3rdparty
  server features[3].
* Added `redaction_retention_period` option to configure how long
  redacted options should be kept in the database.
* Added `ma27` as maintainer for `matrix-synapse`.

Co-Authored-By: Notkea <pacien@users.noreply.github.com>
Co-authored-by: Maximilian Bosch <maximilian@mbosch.me>

[1] https://matrix.org/blog/2019/10/03/synapse-1-4-0-released
[2] https://github.com/matrix-org/synapse/pull/5875
[3] https://github.com/matrix-org/synapse/pull/5876
 2019-10-15 01:11:18 +02:00
Janne Heß d6c08776ba treewide: Switch to system users 2019-10-12 22:25:28 +02:00
Florian Klink 1aad3acf15
nixos/gitlab: Don't print sensitive data to log on startup (#70861) 
nixos/gitlab: Don't print sensitive data to log on startup
 2019-10-11 18:10:16 +02:00
Eelco Dolstra 9d0de0dc57
nix-daemon.nix: Shut up warning 2019-10-10 16:24:33 +02:00
Eelco Dolstra 27d2857a99
nix-daemon.nix: Use 'nix ping-store' to initialize directories 2019-10-10 16:24:33 +02:00
Eelco Dolstra 4b950c42cd
nix-daemon.nix: Drop Nix 1.x compatibility 
Probably didn't work anyway anymore.
 2019-10-10 16:24:33 +02:00
Eelco Dolstra 4e0d6a5ff8
Don't create /nix/var/nix/{gcroots,per-user}/per-user with 1777 permission 
In fact, don't create them at all because Nix does that automatically.

Also remove modules/programs/shell.nix because everything it did is
now done automatically by Nix.
 2019-10-10 16:24:33 +02:00
talyz dc29a45fc9 nixos/gitlab: Don't print sensitive data to log on startup 
gitlab:db:configure prints the root user's password to stdout on
successful setup, which means it will be logged to the
journal. Silence this informational output. Errors are printed to
stderr and will thus still be let through.
 2019-10-09 16:59:18 +02:00
Robin Gloster b5449e65b5
Merge pull request #69344 from talyz/gitlab-create-database 
nixos/gitlab: Fix databaseCreateLocally evaluation and operation
 2019-10-09 00:28:21 +02:00
Nikolay Amiantov 2219129888 matrix-synapse service: blacklist local IPv6 addresses by default 2019-10-03 19:08:48 +03:00
talyz c6efa9fd2d nixos/gitlab: Clean up the initializers on start 
The initializers directory is populated with files from the gitlab
distribution on start, but old files will be left in the state folder
even if they're removed from the distribution, which can lead to
startup failures. Fix this by always purging the directory on start
before populating it.
 2019-10-03 14:38:54 +02:00
talyz 0f8133d633 nixos/gitlab: Fix state directory permissions 
Since the preStart script is no longer running in privileged mode, we
reassign the files in the state directory and its config subdirectory
to the user we're running as. This is done by splitting the preStart
script into a privileged and an unprivileged part where the privileged
part does the reassignment.

Also, delete the database.yml symlink if it exists, since we want to
create a real file in its place.

Fixes #68696.
 2019-10-03 09:02:00 +02:00
Silvan Mosberger e463c7cd75
nixos/nix-daemon: Prevent network warning when checking config 
Since version 2.3 (https://github.com/NixOS/nix/pull/2949 which was
cherry-picked to master) Nix issues a warning when --no-net wasn't
passed and there is no network interface. This commit adds the --no-net
flag to the nix.conf check such that no warning is issued.
 2019-09-28 17:00:47 +02:00
Peter Hoeg 8cc9d24fe1
Merge pull request #69387 from peterhoeg/f/optimise 
nixos/nix-optimise: be smarter about when we run the store optimiser
 2019-09-26 13:10:39 +08:00
Peter Hoeg 81cd220c67 nixos/pymks: log to journal 2019-09-25 06:33:34 +08:00
Peter Hoeg 4b34dd3120
Merge pull request #69300 from peterhoeg/f/ha2 
nixos/home-assistant: set bluetooth perms
 2019-09-25 04:49:31 +08:00
talyz 58a7502421 nixos/gitlab: Only create the database when databaseHost is unset 
Make sure that we don't create a database if we're not going to
connect to it. Also, fix the assertion that usernames be equal to only
trig when peer authentication is used (databaseHost == "").
 2019-09-24 15:04:20 +02:00
talyz ec958d46ac nixos/gitlab: Fix evaluation failure when postgresql is disabled 
config.services.postgresql.package is only defined when the postgresql
service is activated, which means we fail to evaluate when
databaseCreateLocally == false. Fix this by using the default
postgresql package when the postgresql service is disabled.
 2019-09-24 15:04:19 +02:00
talyz dfc43f7d0a nixos/gitlab: Document the restriction introduced on statePath 
The state path now, since the transition from initialization in
preStart to using systemd-tmpfiles, has the following restriction: no
parent directory can be owned by any other user than root or the user
specified in services.gitlab.user. This is a potentially breaking
change and the cause of the error isn't immediately obvious, so
document it both in the release notes and statePath description.
 2019-09-23 17:55:58 +02:00
Peter Hoeg e537a0a11e home-assistant: set capabilities for bluetooth 2019-09-23 21:54:16 +08:00
Florian Klink 6262e83f5f
nixos/gitlab: Add gnutar and gzip to gitlab-sidekiq's path (#68908) 
nixos/gitlab: Add gnutar and gzip to gitlab-sidekiq's path
 2019-09-23 06:40:52 +02:00
Jos van Bakel 86b83f37b8
nixos/gitea: fix dump 2019-09-21 09:28:53 +02:00
talyz aceac9d531 nixos/gitlab: Add gnutar and gzip to gitlab-sidekiq's path 
Tar and gzip are needed when importing GitLab project exports.
 2019-09-17 09:27:16 +02:00
schneefux bab6e6eb04
nixos/gitlab: Remove todo about mysql support 
GitLab has ended MySQL support.
https://about.gitlab.com/2019/06/27/removing-mysql-support/
 2019-09-14 11:26:22 +02:00
talyz 4b6ba5b27c nixos/gitlab: Fix swap of secrets 
Fix accidental swap of the otp and db secrets in the secrets.yml
file. Fixes #68613.
 2019-09-13 08:40:59 +02:00
Sander van der Burg e987e3fef9 nixos/dysnomia: enable InfluxDB support 2019-09-09 23:28:10 +02:00
Florian Klink 2f3b9cd52c
Merge pull request #66274 from talyz/gitlab 
nixos/gitlab: Add support for secure secrets and more
 2019-09-07 12:52:44 -07:00
talyz 240649a510 nixos/gitlab: Extract arbitrary secrets from extraConfig 
Adds the ability to make any parameter specified in extraConfig secret
by defining it an attrset containing the attr _secret, which in turn
is a path to a file containing the actual secret.
 2019-09-06 16:57:23 +02:00
talyz b351454cac nixos/gitlab: Use postgresql module options to provision local db 
Use the postgresql module to provision a local db (if
databaseCreateLocally is true) instead of doing this locally.

Switch to using the local unix socket for db connections by default;
this is needed since dbs created by the postgresql module only support
peer authentication.

Instead of running the rake tasks db:schema:load, db:migrate and
db:seed_fu, run gitlab:db:configure, which in turn runs these tasks
when needed.

Solves issue #53852 for gitlab.
 2019-09-06 16:56:20 +02:00
talyz cbdf94c0f3 nixos/gitlab: Add support for storing secrets in files 
Add support for storing secrets in files outside the nix store, since
files in the nix store are world-readable and secrets therefore can't
be stored safely there.

The old string options are kept, since they can potentially be handy
for testing purposes, but their descriptions now state that they
shouldn't be used in production. The manual section is updated to use
the file options rather than the string options and the tests now test
both.
 2019-09-06 16:54:22 +02:00
talyz 7648b4f8ba nixos/gitlab: Fix missing ca_file for SMTP 
Work around upstream issue #790 by explicitly referencing the
ca-certificates.crt file.
 2019-09-06 10:17:31 +02:00
Jan Tojnar cdf426488b
Merge branch 'master' into staging-next 
Fixed trivial conflicts caused by removing rec.
 2019-09-06 03:20:09 +02:00
Aaron Andersen b54a120a82 nixos/zookeeper: recursively set permissions and ownership on dataDir 2019-09-03 11:57:57 -04:00
Vladimír Čunát f21211ebfe
Merge branch 'master' into staging 2019-09-02 23:25:24 +02:00
Florian Klink f74735c9d7 nixos: remove dependencies on local-fs.target 
Since https://github.com/NixOS/nixpkgs/pull/61321, local-fs.target is
part of sysinit.target again, meaning units without
DefaultDependencies=no will automatically depend on it, and the manual
set dependencies can be dropped.
 2019-09-01 19:06:38 +02:00
Silvan Mosberger 478e7184f8
nixos/modules: Remove all usages of types.string 
And replace them with a more appropriate type

Also fix up some minor module problems along the way
 2019-08-31 18:19:00 +02:00
Frederik Rietdijk ad1d58c622 Merge staging-next into staging 2019-08-31 10:04:20 +02:00
volth 08f68313a4 treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
Frederik Rietdijk 5061fe0c2c Merge staging-next into staging 2019-08-28 08:26:42 +02:00
Eelco Dolstra 35c1c170d7 nix.conf: Set sandbox-fallback = false 
For security, we don't want the sandbox to be disabled silently.
 2019-08-27 21:17:20 +02:00
volth 35d68ef143 treewide: remove redundant quotes 2019-08-26 21:40:19 +00:00
Peter Hoeg 574ec28ef1 nixos/zoneminder: open telnet port for remote admin 2019-08-26 14:47:00 +08:00
Aaron Andersen 400c6aac71 nixos/phpfpm: deprecate extraConfig options in favor of settings options 2019-08-23 07:56:27 -04:00
Aaron Andersen 62b774a700 nixos/phpfpm: add socket option to replace the listen option 2019-08-23 07:56:21 -04:00
Aaron Andersen 249b4ad942
Merge pull request #66492 from aanderse/extra-subservice-cleanup 
nixos/httpd: extraSubservices cleanup
 2019-08-20 18:55:08 -04:00
Aaron Andersen 8227b2f29e
Merge pull request #66399 from mmahut/metabase 
metabase: service module and test
 2019-08-18 19:49:05 -04:00
WilliButz 4835f65e95
Merge pull request #66814 from mguentner/synapse_1_3_1 
matrix-synapse: 1.2.1 -> 1.3.1
 2019-08-18 19:30:14 +02:00
Marek Mahut 69089e990e modules: adding metabase service 2019-08-18 13:44:26 +02:00
Maximilian Güntner dac8fe9cee
nixos/matrix-synapse: use notify instead of simple 
Starting with 1.3.0, matrix-synapse supports notifying
systemd. Relevant PR: matrix-org/synapse#5732
 2019-08-18 09:41:33 +02:00
Aaron Andersen efbdce2e96 nixos/mantisbt: drop unmaintained module 2019-08-15 21:01:23 -04:00
Ben Gamari d7d873b8cb nixos/gitlab: Delete stale hooks directories with -R 
These can be directories.
 2019-08-14 15:29:50 +02:00
Jeff Slight 2ee14c34ed
nixos/gitlab: properly clear out initializers 2019-08-12 12:50:02 -07:00
Silvan Mosberger 013d403f30
nixos/dwm-status: add module (#51319) 
nixos/dwm-status: add module
 2019-08-09 15:39:50 +02:00
William Casarin 8a24d2ba44 zoneminder: fix nginx config 
For some reason it doesn't seem to load things in the cache directory
properly without this slash.

Looks like this regression may have been introduced in:

  commit 19851ec1fc
  nixos/zoneminder: Fix nginx config check

Cc: Daniel Schaefer <git@danielschaefer.me>
Cc: Peter Hoeg <peter@hoeg.com>

Signed-off-by: William Casarin <jb55@jb55.com>
 2019-08-04 11:53:06 -07:00
bake 9e2a710117 nixos/gitolite: dataDir group-readable 2019-08-04 18:47:02 +09:00
Robin Gloster 19c737fd79
Merge pull request #65699 from jslight90/patch-5 
nixos/gitlab: fix config initializer permissions
 2019-08-01 23:08:39 +00:00
Colin L Rice d7aa6df31f nix-daemon: Fix builduser count to work when maxJobs is auto 2019-08-01 01:54:28 -04:00
Jeff Slight 7efcbead2c
nixos/gitlab: fix config initializer permissions 2019-07-31 14:55:08 -07:00
arcnmx c604b38791 nixos/taskserver: crl file is optional 2019-07-27 15:49:46 -07:00
steve-chavez dfd3a0269c Shorten mkEnableOption description 2019-07-23 12:19:28 +09:00
steve-chavez 5ccfa0c816 nixos/modules: add greenclip user service 2019-07-23 12:19:28 +09:00
Johan Thomsen bbd4a0c100 nixos/gitlab: gitlab-workhorse requires exiftool on path to process uploaded images 2019-07-22 16:41:16 +00:00
Aaron Andersen 44565adda5
Merge pull request #60436 from nbardiuk/master 
nixos/tiddlywiki: init
 2019-07-21 16:39:42 -04:00
Aaron Andersen 30920fbf69
Merge pull request #64741 from dasJ/gitea-smtp-pw 
nixos/gitea: Support SMTP without pw in the store
 2019-07-20 08:32:51 -04:00
Robin Gloster 0972409c95
Merge pull request #64550 from bgamari/gitlab-12.0 
gitlab: 11.10.8 -> 12.0.3
 2019-07-17 16:01:03 +00:00
Nazarii Bardiuk 976928daa2
nixos/tiddlywiki: init 
Service that runs TiddlyWiki nodejs server
 2019-07-16 23:12:16 +01:00
Robin Gloster 52fd300b8c
gitlab module: fix permissions 2019-07-16 03:51:17 +02:00
Robin Gloster 3469c206f2
gitlab-shell: better gitlab_shell_secret location 
So this won't be cleaned up by removing config/*
 2019-07-16 03:51:11 +02:00
Robin Gloster 783c2f6106
gitlab module: clean up permission handling 
This is WIP to get rid of PermissionsStartOnly=true
 2019-07-16 01:19:07 +02:00
Janne Heß 1e23007dcd nixos/gitea: Support SMTP without pw in the store 2019-07-14 22:48:10 +02:00
Silvan Mosberger 5eac339829
nixos/redmine: add database.createLocally option (#63932) 
nixos/redmine: add database.createLocally option
 2019-07-14 16:22:37 +02:00
Frederik Rietdijk 74c24385cb Merge master into staging-next 2019-07-09 15:46:00 +02:00
Elis Hirwing 3b354cc037
Merge pull request #64412 from davidtwco/lidarr/fix-home 
nixos/lidarr: re-add home attribute
 2019-07-07 21:35:06 +02:00
David Wood e2247dceb3
nixos/lidarr: re-add home attribute 
This was accidentally removed in a previous PR and broke things.
 2019-07-07 12:31:28 +01:00
David Wood 7f32961ea2
nixos/jackett: add package option 
This allows users of the module to override the package to a newer
version. Particularly useful as Jackett warns that old versions may not
work.
 2019-07-07 12:23:01 +01:00
worldofpeace ab34f8b39b
Merge pull request #63824 from JohnAZoidberg/zoneminder-alias 
nixos/zoneminder: Fix package and service build
 2019-07-06 21:19:23 -04:00
Vladimír Čunát 0746c4dbb4
Merge branch 'master' into staging-next 
There are several thousand rebuilds from master already.
Hydra nixpkgs: ?compare=1528940
 2019-07-06 13:44:40 +02:00
Elis Hirwing 823120765c
Merge pull request #64113 from davidtwco/lidarr/users-groups-firewalls 
nixos/lidarr: add user/group/openFirewall opts.
 2019-07-05 12:20:49 +02:00
Frederik Rietdijk 25a77b7210 Merge staging-next into staging 2019-07-03 08:59:42 +02:00
Peter Hoeg 897834f015 nixos/nix-optimise: be smarter about when we run the store optimiser 
We might be inside a NixOS container on a non-NixOS host, so instead of not
running at all inside a container, check if the nix-daemon socket is writable as
it will tell us if the store is managed from here or outside.

Fixes #63578
 2019-07-03 09:37:14 +08:00
David Wood 6ba90c2aae
nixos/lidarr: add user/group/openFirewall opts. 
This commit adds new configuration options to the Lidarr module that
allows configuration of the user and group that Lidarr runs as; and to
open the firewall for the Lidarr port.
 2019-07-01 16:17:18 +01:00
worldofpeace 3f4a353737 treewide: use dontUnpack 2019-07-01 04:23:51 -04:00
Aaron Andersen 26a5f32096 nixos/redmine: cosmetic cleanup 2019-06-30 07:24:23 -04:00
Aaron Andersen e702468f6b nixos/redmine: add database.createLocally option 2019-06-30 07:24:18 -04:00
Aaron Andersen 278d867a9b Revert "Merge pull request #63156 from Izorkin/phpfpm-rootless" 
This reverts commit b5478fd1a2, reversing
changes made to dbb00bfcbf.
 2019-06-28 21:47:43 -04:00
Elis Hirwing b5478fd1a2
Merge pull request #63156 from Izorkin/phpfpm-rootless 
phpfpm: do not run anything as root
 2019-06-27 19:13:53 +02:00
Elis Hirwing dbb00bfcbf
Merge pull request #63726 from davidtwco/lidarr/specify-package 
nixos/lidarr: allow specifying package
 2019-06-27 19:06:51 +02:00
Janne Heß 8c3dd6f5e7 nixos/gitea: Generate a JWT secret for git LFS 2019-06-27 03:29:02 +02:00
Aaron Andersen 616e52e21b
Merge pull request #63622 from aanderse/zoneminder 
nixos/zoneminder: fix some issues with database.createLocally option
 2019-06-26 20:36:26 -04:00
Daniel Schaefer 19851ec1fc nixos/zoneminder: Fix nginx config check 
NixOS wouldn't build because the nginx config checker fails.

Location without a trailing slash "could allow an attacker to read file
stored outside the target folder.", source:
https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md

Shouldn't change the behaviour according to
https://serverfault.com/questions/607615/using-trailing-slashes-in-nginx-configuration/607731#607731
 2019-06-26 20:45:55 +02:00
Eelco Dolstra 8e620e1bc5
Merge pull request #63810 from NixOS/binaryCaches-default 
nix.binaryCaches: always set https://cache.nixos.org
 2019-06-26 18:51:17 +02:00
Domen Kožar 036728f3f4
nix.binaryCaches: always set https://cache.nixos.org 
There are many support questions when people add a new binary cache
and they suddenly lose nixos substitutions.

Most of the users want to keep that, so we're doing a breaking change.

Previously to disable all binary caches one had to do:

  nix.binaryCache = [];

Now the same is possible via:

  nix.binaryCache = lib.mkForce;
 2019-06-26 14:30:56 +02:00
Graham Christensen 38c28ef10c
Merge pull request #56265 from aanderse/permissions-start-only 
replace deprecated usage of PermissionsStartOnly (part 2)
 2019-06-25 18:04:22 -04:00
Aaron Andersen 74ff20fae7 nixos/zoneminder: fix some issues with database.createLocally option 2019-06-25 12:20:22 -04:00
David Wood 7e38a64709
nixos/lidarr: allow specifying package 
This commit allows users of `services.lidarr` to specify the package
that is used with `services.lidarr.package`.
 2019-06-24 09:53:38 +01:00
Aaron Andersen 93412bc35f
Merge pull request #63413 from etu/gitea-183-update 
gitea: 1.8.2 -> 1.8.3
 2019-06-19 05:46:48 -04:00
Elis Hirwing 3576ba7c19
nixos/gitea: Add missing tmpfiles rules 2019-06-19 07:45:51 +02:00
Jan Tojnar a3f2131eb6 doc: Use prompt more often 2019-06-17 13:25:50 +02:00
Izorkin 5d3805487a nixos/zoneminder: fix work with phpfpm-rootless mode 2019-06-16 12:33:51 +03:00