Léo Gaspard
7a32b96697
redsocks module: initialize
...
redsocks module: use separate user for redsocks daemon
2017-02-09 18:01:14 +01:00
Daniel Peebles
7439fe083f
Merge pull request #22297 from nand0p/buildbot-0.9.3
...
buildbot: 0.9.0.post1 -> 0.9.3
2017-02-09 11:15:03 -05:00
Joachim Fasting
28b5cc7dca
grsecurity test: adapt to changes in tinycc outputs
2017-02-09 16:23:04 +01:00
Franz Pletz
65a1762a9b
nginx module: make acme group overrideable easily
2017-02-08 23:50:59 +01:00
Nikolay Amiantov
5ff9a2a2cb
kbd service: don't restart systemd-vconsole-setup
...
Fixes #22470 . Also remove non-relevant comment (we don't deviate from upstream
systemd unit anymore).
2017-02-08 21:50:33 +03:00
Nikolay Amiantov
6f7811143d
systemd service: don't install systemd-hwdb-update
2017-02-08 21:42:07 +03:00
Nikolay Amiantov
504774e223
release notes: mention JRE changes and jre_headless
2017-02-08 21:36:22 +03:00
Andrew Cann
3082647e74
trezord: init at 1.2.0 ( #22054 )
2017-02-08 17:18:22 +01:00
Graham Christensen
7db1f727f3
moodle: Remove due to continued security issues.
2017-02-08 09:10:45 -05:00
Nikolay Amiantov
2fd2fcf54d
linuxPackages.nvidia_x11: refactor, build more from source
...
* Use libglvnd;
* Compile nvidia-settings, nvidia-persistenced from source;
* Generalize builder.
2017-02-08 16:57:46 +03:00
Antoine Eiche
9d30099b7f
nixos/systemd: set r-x group permissions on /var/log/journal
...
This allows services such as systemd-journal-gateway to access the
systemd journal.
Closes #22288
2017-02-08 16:06:14 +03:00
Franz Pletz
626540e32e
Merge pull request #22524 from wizeman/u/chrony-impr
...
nixos.chrony: add extraFlags config option
2017-02-07 21:50:58 +01:00
Vladimír Čunát
ce9d30e734
Merge #22241 : amdgpu-pro: 16.50 -> 16.60
2017-02-07 20:49:58 +01:00
Peter Simons
bfd7fe8ba5
nixos: fix taskserver module to evaluate properly when keys are managed manually
2017-02-07 18:35:41 +01:00
Ricardo M. Correia
9293f86bf2
nixos.chrony: remove generatecommandkey option
...
It's deprecated and no longer used.
2017-02-07 18:01:58 +01:00
Ricardo M. Correia
e3fce56047
nixos.chrony: add extraFlags config option
2017-02-07 18:01:57 +01:00
Matthias Beyer
de592483d1
Add xfce documentation
2017-02-07 17:55:40 +01:00
Jörg Thalheim
3aff6c07ab
Merge pull request #22518 from wizeman/u/fix-chrony-conf
...
nixos.chrony: pass config file directly to daemon
2017-02-07 17:17:17 +01:00
Fernando J Pando
34b5c9a4de
buildbot: 0.9.0.post1 -> 0.9.3
...
- Fixes unneeded patching
- Adds worker to build inputs now needed for tests
- Replaces enableworker option with worker configuration module
- Openssh required for tests
- Fixes worker hardcoded paths
- Tested on Nixos Unstable
2017-02-07 11:14:42 -05:00
Svein Ove Aas
e362a3d5c9
nginx: Format the config file
2017-02-07 16:19:11 +01:00
Ricardo M. Correia
af4e6f155e
nixos.chrony: pass config file directly to daemon
...
This fixes an issue where `nixops deploy` wouldn't restart the chrony
service when the chrony configuration changed, because it wouldn't
detect that `/etc/chrony.conf` was a dependency of the chrony service.
2017-02-07 13:48:58 +01:00
aszlig
cd10e3c4ff
nixos/tests/chromium: Run tests as normal user
...
The tests have failed because Chromium has started up displaying the
following error message in a dialog window:
Chromium can not be run as root.
Please start Chromium as a normal user. If you need to run as root for
development, rerun with the --no-sandbox flag.
So let's run as user "alice" and pass all commands using the small
helper function "ru" (to keep it short, it's for "Run as User").
Tested it by running the "stable" test on x86_64-linux.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Reported-by: @globin
2017-02-07 07:36:56 +01:00
aszlig
87cc20eddb
nixos/networkd: Fix eval error for defaultGateway
...
Regression introduced by 0cb487ee04
.
This changed the result for defaultGateway to be a submodule instead of
just a plain string, so instead of using just cfg.defaultGateway we need
to pass cfg.defaultGateway.address now.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @abbradar
2017-02-07 07:05:31 +01:00
David McFarland
905627c7c5
xorg-server: fglrxCompat -> abiCompat
...
Allows it to be used for fglrx (1.17) and amdgpu-pro (1.18)
2017-02-06 23:16:21 -04:00
Shea Levy
714fdb425a
firewall: Fix check for rpfilter on manual-config kernels
2017-02-06 16:43:23 -05:00
Matthias Beyer
bf56d17b2c
fixup! Add documentation for XFCE
2017-02-06 09:17:52 +01:00
Matthias Beyer
4b5a230d1d
Add documentation for XFCE
2017-02-06 09:10:05 +01:00
Nikolay Amiantov
9beeee2717
Merge pull request #22431 from abbradar/postfix-local
...
postfix service: don't empty local_recipient_maps
2017-02-06 03:50:05 +03:00
Joachim Schiele
d491728653
httpd: added serviceExpression which extends the serviceType concept -> allows that httpd services can live outside of nixpkgs ( #22269 )
2017-02-06 01:08:58 +01:00
Nikolay Amiantov
52c7e647ab
postfix service: don't empty local_recipient_maps
...
From Postfix documentation:
With this setting, the Postfix SMTP server will not reject mail with "User
unknown in local recipient table". Don't do this on systems that receive mail
directly from the Internet. With today's worms and viruses, Postfix will become
a backscatter source: it accepts mail for non-existent recipients and then
tries to return that mail as "undeliverable" to the often forged sender
address.
2017-02-06 01:41:27 +03:00
Joachim F
4459f26ad8
Merge pull request #22175 from dancek/illum
...
illum: init at 0.4
2017-02-05 16:41:30 +01:00
Shea Levy
67ef18d01a
supplicant nixos module: Allow not specifying the configFile path
2017-02-05 06:50:20 -05:00
Nikolay Amiantov
90bc1a8595
Merge pull request #22353 from abbradar/bluetooth
...
Bluetooth improvements
2017-02-05 13:18:48 +03:00
Eelco Dolstra
323031f9ed
Merge pull request #22455 from taku0/hyper-v_installation
...
nixos-generate-config.pl, all-hardware.nix: Add support for Hyper-V
2017-02-05 11:05:06 +01:00
Nikolay Amiantov
6812c7001c
nfs tests: fix nfs server unit name
2017-02-05 12:41:21 +03:00
taku0
8dfa60ce73
nixos-generate-config.pl, all-hardware.nix: Add support for Hyper-V
2017-02-05 18:22:26 +09:00
Joachim Fasting
2628597e76
cjdns service: allow daemon to drop privileges
...
The service can run certain components with reduced privileges, but for
that it needs the setuid capability.
2017-02-05 04:54:26 +01:00
Joachim Fasting
a0338afe5f
cjdns service: allow writing keys to /etc
...
20e81f7c0d
prevented key generation in
`preStart`, leaving the service broken for the case where the user has
no pre-existing key.
Eventually, we ought to store the state elsewhere so that `/etc` can be
read-only but for now we fix this the easy way.
2017-02-05 04:54:18 +01:00
Nikolay Amiantov
9a11dda5fd
nfsd service: don't run exportfs
...
It's run by service already.
2017-02-05 03:17:38 +03:00
Nikolay Amiantov
5b043ea361
nfs service: create state directories
2017-02-05 03:17:38 +03:00
Vladimír Čunát
a2c867fd39
Merge branch 'staging'
2017-02-04 21:02:46 +01:00
Hannu Hartikainen
d91b39b3f9
illum: init at 0.4
2017-02-04 20:22:51 +02:00
Joachim F
17cc22a619
Merge pull request #22225 from bachp/glusterfs-service
...
glusterfs: add service
2017-02-04 15:15:39 +01:00
Tim Jaeger
83241c091d
gogs: fix error on push
...
Pushing to gogs only works if the `gogs` user's shell is `bash`. For error and
solution, refer to [this SO thread](http://stackoverflow.com/a/22315659 )
2017-02-04 12:16:37 +01:00
Sarah Brofeldt
ac6606fbf4
bumblebee service: Fix type error when pmMethod = "bbswitch"
2017-02-04 10:44:44 +01:00
rnhmjoj
a3ff62d48c
namecoind: refactor nixos module
2017-02-03 20:06:45 +01:00
rnhmjoj
f7d49037a4
dnschain service: overhaul option interface & implementation
...
Closes https://github.com/NixOS/nixpkgs/pull/22041
2017-02-03 19:49:16 +01:00
Ricardo Ardissone
0bae18fb55
sane service: mention the lp group for printer+scanners
2017-02-03 20:54:04 +03:00
Joachim Fasting
0c31286f75
grsecurity docs: some polish
...
Fix minor formatting issues, excessive punctuation, and also some
improved wording.
2017-02-03 18:47:07 +01:00
Nikolay Amiantov
230c97c944
Merge pull request #22303 from abbradar/nfs4
...
NFS improvements
2017-02-03 20:04:25 +03:00
Guillaume Maudoux
698f178d4e
default nixos config: add firewall options.
...
By showing how to open ports in the firewall and how to disable it, we make users aware that there is a firewall enabled by default.
2017-02-03 16:45:11 +01:00
Vladimír Čunát
2ba076e99c
Merge branch 'master' into staging
...
>11k more build jobs on master, just for Linux :-/
This way staging will never catch up.
2017-02-03 15:32:08 +01:00
Nikolay Amiantov
9eb540b807
qemu-vm module: fix boot.tmpOnTmpfs
...
This option caused systemd to mount /tmp on top of /tmp/{xchg,shared}.
Fixes #21490 .
2017-02-03 15:02:34 +03:00
Vladimír Čunát
adab4cd58b
Merge branch 'master' into staging
2017-02-03 11:47:38 +01:00
Benjamin Staffin
53e6431d61
Merge pull request #22358 from yorickvP/asteriskupd
...
asterisk: add lts version
2017-02-03 02:30:34 -05:00
Nikolay Amiantov
5247140e57
Merge pull request #21875 from abbradar/gateway-interface
...
Allow specifying interface for default gateway
2017-02-03 02:26:31 +03:00
Pascal Bach
ff3f3399ae
filesystems: add support to mount glusterfs
2017-02-02 23:16:52 +01:00
Pascal Bach
19759cfeab
services: add GlusterFS service
...
This service is only limited in configuration options.
But it is sufficient to run glusterd and configure it using the gluster command
2017-02-02 23:16:52 +01:00
Daiderd Jordan
f87fb85259
Merge pull request #22376 from LumiGuide/wordpress-4.7.2
...
wordpress: 4.7.1 -> 4.7.2 (Security fix)
2017-02-02 19:30:36 +01:00
Daniel Peebles
ff8a21e03c
Merge pull request #22348 from nand0p/hologram-module
...
hologram: 8d86e3f -> d20d1c3
2017-02-02 17:42:07 +01:00
Fernando J Pando
1d85e0bbab
hologram: 8d86e3f -> d20d1c3
...
- Updates dependencies
- Adds configuration module
- Tested on Nixos Unstable
2017-02-02 11:31:42 -05:00
Bas van Dijk
5cc75352f8
wordpress: 4.7.1 -> 4.7.2
...
See: https://make.wordpress.org/core/2017/02/01/disclosure-of-additional-security-fix-in-wordpress-4-7-2/
2017-02-02 16:41:32 +01:00
Yorick van Pelt
1b47bc9477
service.asterisk: add package option
2017-02-02 15:16:00 +01:00
Nikolay Amiantov
4feb0a998a
manual: mention needed options for IPv6
2017-02-02 01:53:00 +03:00
Nikolay Amiantov
0cb487ee04
network-interfaces service: add defaultGateway{,6}.interface
2017-02-02 01:53:00 +03:00
Nikolay Amiantov
4abcef2ba1
bluez service: use upstream units
2017-02-02 00:52:54 +03:00
Nikolay Amiantov
8ef14f80e3
systemd service: add aliases option
2017-02-02 00:52:54 +03:00
Tristan Helmich
24f3abdafb
Revert "Make services.xserver.xkbDir conflict free when overriden."
...
This reverts commit 82bcfef109
.
cc @nbp
Fixes #22290 , #22352 .
Signed-off-by: Franz Pletz <fpletz@fnordicwalking.de>
2017-02-01 22:37:04 +01:00
Nikolay Amiantov
c34cfa21d4
Merge pull request #22343 from abbradar/dbus-etc
...
dbus service: use /etc/dbus-1 for configuration
2017-02-01 23:00:07 +03:00
Nikolay Amiantov
e0e9fddf56
nfsd service: use upstream systemd units
...
* Use /etc/nfs.conf as the recommended upstream way to configure services.
* Move server options to nfsd module.
2017-02-01 19:47:33 +03:00
Eelco Dolstra
9d6a55aefd
~/.nixpkgs -> ~/.config/nixpkgs
...
The former is still respected as a fallback for config.nix for
backwards compatibility (but not for overlays because they're a new
feature).
2017-02-01 16:07:55 +01:00
Vladimír Čunát
a2e7770b51
Merge branch 'master' into staging
...
There have been some larger security rebuilds on master.
2017-02-01 15:56:35 +01:00
Nikolay Amiantov
72b3746266
dbus service: remove {system,session}.conf from config dir
...
They are already included by dbus from /run/current-system/sw/share/dbus-1.
2017-02-01 15:37:24 +03:00
Nikolay Amiantov
39344a36d3
dbus service: use /etc/dbus-1 for configuration
...
Also use upstream systemd units.
2017-02-01 15:03:22 +03:00
Franz Pletz
f96c3f1844
Merge pull request #22180 from mguentner/offline_ipfs
...
services: ipfs: separate system units, add offline mode
2017-02-01 03:41:31 +01:00
Nikolay Amiantov
876a6d7f03
rpcbind service: use upstream systemd unit
2017-02-01 02:45:19 +03:00
Peter Simons
10349e72b9
nixos: drop unused 'haskellPackages' option from ihaskell service
...
Closes https://github.com/NixOS/nixpkgs/issues/19039 .
2017-01-31 22:38:01 +01:00
Damien Cassou
58dc8e3024
Remove myself from maintainers
2017-01-31 11:00:14 +01:00
Vladimír Čunát
01751a9447
Merge #22309 : vim: allow building with gtk3
2017-01-31 09:41:24 +01:00
Aneesh Agrawal
68b4a1f669
nixos: Respect nixpkgs.overlays ( #22221 )
2017-01-31 09:38:02 +01:00
Benjamin Staffin
e01c15d433
nixos: if gnome3 is installed, build gvim for gtk3 too
2017-01-31 02:36:35 -05:00
Nikolay Amiantov
8d379ddfef
opengl service: use option for XDG_DATA_DIRS
2017-01-31 04:38:09 +03:00
Nikolay Amiantov
98b0195dde
video services: don't install OpenCL files to /etc
...
They shouldn't be needed now that we search them in /run/opengl-driver.
2017-01-31 03:36:25 +03:00
Edward Tjörnhammar
b08524bf01
nixos: nylon, use named instances
2017-01-30 20:32:06 +01:00
Parnell Springmeyer
128bdac94f
Conditionally logging debug messages based on the WRAPPER_DEBUG env var being set (or not)
2017-01-30 12:59:29 -06:00
Parnell Springmeyer
d8ecd5eb0d
Switching to individually generated derivations
2017-01-30 12:26:56 -06:00
Vladimír Čunát
9cd2dbc569
Merge branch 'master' into staging
...
Hopefully this will fix the mass abortion on Hydra;
restarting the jobs didn't help.
2017-01-30 18:39:36 +01:00
Vaibhav Sagar
63f609b1a4
ihaskell: remove service configuration. ( #22268 )
...
See #22047 . This change should be reverted after IHaskell has been
updated to support GHC 8.
2017-01-30 08:38:42 +01:00
Parnell Springmeyer
264db4e309
Set merge + mkIf always surprises me
2017-01-29 17:10:32 -06:00
Parnell Springmeyer
f2f3f1479e
Derp, wrong path name
2017-01-29 16:54:27 -06:00
Parnell Springmeyer
0f728de67e
More migration cleanup + todos for cleanup
2017-01-29 16:52:23 -06:00
Parnell Springmeyer
4856b42ab6
Gotta provide sane defaults! This is what I get for 5AM coding
2017-01-29 16:47:14 -06:00
Parnell Springmeyer
9abe7528e4
Switching locate over to new wrapper API
2017-01-29 11:27:08 -06:00
Edward Tjörnhammar
e324c02aa5
nixos: i2pd, follow redirect
2017-01-29 18:00:58 +01:00
Parnell Springmeyer
6777e6f812
Merging with upstream
2017-01-29 05:54:01 -06:00
Parnell Springmeyer
c5f1f9a3b5
More mistake fixes
2017-01-29 05:45:43 -06:00
Parnell Springmeyer
9f82c9903d
More fixes
2017-01-29 05:44:29 -06:00
Parnell Springmeyer
cfe4351c33
I'm clearly very tired
2017-01-29 05:39:54 -06:00
Parnell Springmeyer
3215bcf445
Beebooboop
2017-01-29 05:39:18 -06:00
Parnell Springmeyer
a3e9d77640
More derp? It's 5am...
2017-01-29 05:36:47 -06:00