github-actions[bot]
dbed958bf2
Merge staging-next into staging
2021-06-14 12:04:44 +00:00
Profpatsch
799cdbd834
tailscale: add interfaceName
option
...
tailscale allows to specify the interface name.
The upstream systemd unit does not expose it directly however, only
via the `FLAGS` environment variable.
I can’t be 100% sure that the escaping is correct, but this is as good
as we can do for now, unless upstream changes their unit file.
2021-06-14 11:25:08 +02:00
github-actions[bot]
8e50248719
Merge staging-next into staging
2021-06-11 12:04:41 +00:00
Maciej Krüger
3f062397a5
x2goserver: fix rename whole module
2021-06-11 09:07:23 +02:00
Maciej Krüger
6dbeea0b40
nixos/x2goserver: put into networking, like xrdp
2021-06-11 08:13:49 +02:00
Maciej Krüger
03071fd5e3
nixos/xrdp: add openFirewall option
2021-06-11 08:13:48 +02:00
Alyssa Ross
926765c5e3
Merge remote-tracking branch 'nixpkgs/staging-next' into staging
...
Conflicts:
pkgs/servers/http/apache-httpd/2.4.nix
2021-06-11 02:05:00 +00:00
Milan Pässler
55cd291bbd
pleroma-otp: remove
2021-06-10 22:53:00 +02:00
Jan Tojnar
ba733d435b
Merge branch 'staging-next' into staging
2021-06-10 14:07:45 +02:00
rnhmjoj
336130a90f
nixos/gale: remove
...
This should have been removed along the package in 3f7d959
.
2021-06-10 02:33:10 +02:00
github-actions[bot]
e40e33d9d8
Merge staging-next into staging
2021-06-08 18:16:30 +00:00
Kevin Cox
af51d70857
nixos/networkmanager: Add connectionConfig. ( #118308 )
...
Adds the `networking.networkmanager.connectionConfig` option which allows setting arbitrary settings inside the `[connection]` section.
This also reworked the underlying representation significantly to be less string-pasting and more semantic. In a future step it probably makes sense to provide raw access to other sections to users rather than replying on `extraConfig`. However I decided to defer this primarily because ordering of sections can matter. (Although IIUC this is only true for different `[connection]` sections). I think in the future we could expose an object where users can define/edit all sections and map the current configuration onto those. For now however only `[connection]` is exposed and the rest are just used internally.
2021-06-08 11:13:59 -04:00
rnhmjoj
be01320a6c
nixos/wireless: only warn for no interfaces
...
A hard failure breaks the NixOS installer, which can't possibly
know the interface names in advance.
2021-06-08 07:42:34 +02:00
rnhmjoj
eba5f5c1e5
Revert "nixos/wireless: make wireless.interfaces mandatory"
...
This reverts commit 030a521adc
.
2021-06-07 15:55:58 +02:00
github-actions[bot]
385224957b
Merge staging-next into staging
2021-06-06 12:14:34 +00:00
Michele Guerini Rocco
78d9a75d9e
Merge pull request #125288 from rnhmjoj/wpa-race-fix
...
nixos/wireless: make wireless.interfaces mandatory
2021-06-06 10:35:15 +02:00
Sandro
ef45f53bc9
Merge pull request #106465 from jerith666/globalprotect-vpn
2021-06-05 16:40:21 +02:00
github-actions[bot]
0b0d0c21ec
Merge staging-next into staging
2021-06-04 13:00:29 +00:00
Maximilian Bosch
951e6988ac
Merge pull request #104543 from chkno/sftpServerExecutable
...
nixos/sshd: Option to set the sftp server executable
2021-06-04 10:16:20 +02:00
Matt McHenry
e2b7cfedd6
globalprotect-openconnect: init at 1.2.6
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Co-authored-by: sterni <sternenseemann@systemli.org>
2021-06-02 19:22:13 -04:00
rnhmjoj
030a521adc
nixos/wireless: make wireless.interfaces mandatory
...
This is the only way to solve issue #101963 , for now.
2021-06-01 23:19:40 +02:00
Daniel Nagy
e57465a617
nixos/monero: set port type to types.port
2021-05-30 14:38:20 +02:00
Daniel Nagy
65b32a0afe
nixos/syncserver: set port type to types.port
2021-05-30 14:38:19 +02:00
Daniel Nagy
048c45679f
nixos/gitDaemon: set port type to types.port
2021-05-30 14:38:19 +02:00
Niklas Hambüchen
d344dccf3d
nixos/wireguard: Remove .path systemd unit for privkey. Fixes #123203
...
As per `man systemd.path`:
> When a service unit triggered by a path unit terminates
> (regardless whether it exited successfully or failed),
> monitored paths are checked immediately again,
> **and the service accordingly restarted instantly**.
Thus the existence of the path unit made it impossible to stop the
wireguard service using e.g.
systemctl stop wireguard-wg0.service
Systemd path units are not intended for program inputs such
as private key files.
This commit simply removes this usage; the private key is still
generated by the `generateKeyServiceUnit`.
2021-05-28 17:44:19 -07:00
Martin Weinelt
fcd6d0bc14
Merge pull request #124263 from Lassulus/solanum3
...
solanum: remove obsolete BANDB settings/patches
2021-05-25 20:51:32 +02:00
Sandro Jäckel
140828ce38
nixos/kresd: tell resolveconf to use local resolver
2021-05-25 16:37:00 +02:00
Niklas Hambüchen
83a8acc392
Merge pull request #121331 from nh2/wireguard-dynamicEndpointRefreshSeconds
...
nixos/wireguard: Add `dynamicEndpointRefreshSeconds` option
2021-05-24 21:49:05 +02:00
lassulus
8eb5701aaf
solanum: remove obsolete BANDB settings/patches
2021-05-24 15:49:57 +02:00
Martin Weinelt
71fb79ee6b
Merge pull request #123828 from Lassulus/solanum2
...
nixos/solanum: init
2021-05-21 23:23:01 +02:00
lassulus
48c16e48aa
nixos/solanum: init
2021-05-21 23:06:38 +02:00
eyJhb
6000f420e8
nixos/znc: fixed chown not working after hardening ( #123883 )
2021-05-21 19:07:53 +02:00
ajs124
c455f3ccaf
Merge pull request #123084 from Yarny0/hylafax
...
hylafaxplus & nixos/hylafax: small improvements
2021-05-21 14:20:57 +02:00
Jonas Chevalier
30c021fa15
Merge pull request #123744 from hercules-ci/init-ghostunnel
...
ghostunnel: init
2021-05-20 20:58:41 +02:00
Robert Hensing
dc9cb63de4
nixos/ghostunnel: init
2021-05-20 10:41:52 +02:00
Paul Schyska
69202853ea
nixos/nsd: make nsd-checkconf work when configuration contains keys
2021-05-19 18:21:10 +02:00
Michele Guerini Rocco
376eabdac3
Merge pull request #123254 from rnhmjoj/ipsec
...
libreswan: 3.2 -> 4.4
2021-05-19 13:36:04 +02:00
Maciej Krüger
7458dcd956
Merge pull request #75242 from mkg20001/cjdns-fix
...
services.cjdns: add missing, optional login & peerName attribute
2021-05-18 18:22:29 +02:00
Robert Schütz
d189df235a
Merge pull request #122241 from dotlambda/znc-harden
...
nixos/znc: harden systemd unit
2021-05-18 17:44:14 +02:00
Maciej Krüger
7409f9bab3
services.cjdns: add missing, optional login & peerName attribute
2021-05-18 17:39:04 +02:00
rnhmjoj
1a4db01c84
nixos/libreswan: update for version 4.x
...
- Use upstream unit files
- Remove deprecated config options
- Add option to disable redirects
- Add option to configure policies
2021-05-18 08:13:36 +02:00
Jörg Thalheim
b900661f6e
Merge pull request #122825 from Izorkin/update-duplicates-systemcallfilters
...
treewide: remove duplicates SystemCallFilters
2021-05-17 12:06:06 +01:00
Sandro
700942d2a5
Merge pull request #121119 from SuperSandro2000/remove-gnidorah
...
treewide: remove gnidorah
2021-05-17 02:42:24 +02:00
Niklas Hambüchen
357cf46c8d
wireguard module: Add dynamicEndpointRefreshSeconds
option.
...
See for an intro:
https://wiki.archlinux.org/index.php/WireGuard#Endpoint_with_changing_IP
2021-05-16 20:11:51 +02:00
Yarny0
c2af1ff281
nixos/hylafax: enable ProtectKernelLogs
for most services
...
Also document that `ProtectClock` blocks access to serial line.
I couldn't found out why this is the case,
but faxgetty complains about the device file
not being accessible with `ProtectClock=true`.
2021-05-14 22:55:50 +02:00
Robert Schütz
e611d663f4
Merge pull request #120440 from dotlambda/radicale-settings
...
nixos/radicale: add settings option
2021-05-14 15:37:26 +02:00
Yarny0
4415846d5c
nixos/hylafax: use runtimeShell
where possible
...
According to
https://github.com/NixOS/nixpkgs/pull/84556
this effort helps with cross-compilation.
This commit also renames a substituted variable `hylafax`
to `hylafaxplus` to permit substitution with `inherit`.
2021-05-14 05:42:18 +02:00
Yarny0
89df33f882
nixos/hylafax: replace a nested expression with lib.pipe
...
This avoids a tripple-nested function call,
and it looks slightly simpler (at least to me).
2021-05-14 05:42:18 +02:00
Yarny0
449647daf5
nixos/hylafax: use lib.types.ints.positive
...
I haven't realized earlier that there is
already an option type for postive integers.
2021-05-14 05:42:17 +02:00
Izorkin
feebe402f5
treewide: remove duplicates SystemCallFilters
2021-05-13 15:44:56 +03:00