Kevin Cox
b2537dc430
Merge pull request #177561 from max-privatevoid/ipfs-dont-leak-config
...
nixos/ipfs: do not leak config to journal on startup
2022-06-17 19:37:33 -04:00
Max
2a8bf9777d
nixos/ipfs: do not leak config to journal on startup
...
The preStart script for the IPFS service will print parts of the configuration
to stdout (and therefore, the journal) when applying profiles on startup. This
may lead to unwanted disclosure of private information, such as remote pinning
service API keys. Fix by sending stdout to /dev/null.
2022-06-17 23:41:27 +02:00
Sandro
8effa309cc
Merge pull request #176379 from SuperSandro2000/network-setup
...
nixos/network-interfaces-scripted: remove network-setup unit if unused
2022-06-17 22:36:45 +02:00
Sandro
0e6db671a0
Merge pull request #178009 from bbenno/update-gollum
...
gollum: 5.2.3 -> 5.3.0
2022-06-17 21:08:57 +02:00
Maciej Krüger
fc996dab2f
Merge pull request #178039 from adamcstephens/lxc-template-docs
2022-06-17 20:37:02 +02:00
Sandro
558031dcf7
Merge pull request #178041 from vcunat/p/annoying-tests
...
nixos/tests/fcitx: disable
2022-06-17 20:20:52 +02:00
Thiago Kenji Okada
4cf04594a9
Merge pull request #172660 from NickCao/nvidia-open
...
nvidia-open: init at 515.43.04
2022-06-17 18:59:32 +01:00
Vladimír Čunát
7e2a357edb
nixos/tests/fcitx: disable
...
It never worked on 21.11 and still does not:
https://hydra.nixos.org/job/nixos/release-21.11/nixos.tests.fcitx.x86_64-linux/all
https://hydra.nixos.org/job/nixos/trunk-combined/nixos.tests.fcitx.x86_64-linux/all
and it frequently makes big channels wait (same on aarch64-linux).
2022-06-17 18:16:12 +02:00
Adam Stephens
2e090e0d60
nixos/lxc-container: improve template example
2022-06-17 11:42:16 -04:00
Benno Bielmeier
be0e2db8b9
nixos/gollum: add option local-time
...
This feature was introduced in gollum v5.3.0
2022-06-17 12:50:47 +02:00
Benno Bielmeier
9434ac0963
nixos/gollum: improve description of user-icons option
2022-06-17 12:50:13 +02:00
Robert Hensing
3624bb535f
nixosTests.convos: Fix missing port variable
2022-06-17 12:24:52 +02:00
Robert Hensing
2c8bbf33fd
nixos/test-driver: Support mypy through regular mechanisms
2022-06-17 12:22:57 +02:00
Robert Hensing
152736d39e
nixosTests.acme: Fix typechecking, avoiding type reassignment
2022-06-17 11:45:19 +02:00
Jörg Thalheim
5d54641d7f
Merge pull request #177790 from superherointj/package-k3s-1.24.1+k3s1
...
k3s: 1.23.6+k3s1 -> 1.24.1+k3s1
2022-06-17 08:38:10 +01:00
Lily Foster
b5818b7a30
nixos/pipewire: only add pipewire-pulse.conf conditionally
2022-06-15 15:05:44 -07:00
Lily Foster
1e3747b98b
nixos/pipewire: add pkgs.pulseaudio to pipewire-pulse user unit path
2022-06-15 15:05:44 -07:00
superherointj
a6a0c44760
k3s: remove docker support
2022-06-15 16:40:29 -03:00
Jonas Chevalier
9c587c51ac
Merge pull request #177743 from zimbatm/grafana-agent-module
...
nixos: add grafana-agent module
2022-06-15 16:22:54 +02:00
Bobby Rong
284ccb5f4d
Merge pull request #177111 from samuela/upkeep-bot/vscodium-1.68.0-1654822313
...
vscodium: 1.67.2 -> 1.68.0
2022-06-15 22:13:41 +08:00
Bobby Rong
fe1f4564af
nixos/tests/vscodium: skip type check for now
2022-06-15 22:01:04 +08:00
Silvan Mosberger
8f8db59c0e
Merge pull request #163617 from hercules-ci/lib-types-deferredModule
...
lib.types: Add deferredModule
2022-06-15 13:23:43 +02:00
zimbatm
31b47913f3
nixos: add grafana-agent module
...
Easily ship logs and metrics to Grafana Cloud and other similar targets.
2022-06-15 12:59:06 +02:00
Bobby Rong
6d1779c567
Merge pull request #175620 from bobby285271/nixos-pantheon
...
nixos/pantheon: make it possible to remove core packages
2022-06-15 18:49:37 +08:00
Lassulus
a632afba6d
Merge pull request #177536 from yayayayaka/hedgedoc-fix-statedirectory
...
nixos/hedgedoc: Do not set StateDirectory to an absolute path
2022-06-15 11:25:04 +02:00
M. A
becff58579
nixos/hedgedoc: Do not set StateDirectory to an absolute path
...
Commit 8109d8a
set the `StateDirectory=` option of the systemd service
configuration to the value of `cfg.workDir` which is wrong, according
to dasJ [1]. This commit resolves this issue by stripping the
`/var/lib/` prefix from `cfg.workDir`.
[1] https://github.com/NixOS/nixpkgs/pull/172824#issuecomment-1130350412
2022-06-15 08:58:52 +00:00
Andreas
c028f5569b
kcheckpass is gone(?)
2022-06-15 14:53:40 +08:00
Sandro
f7251ca210
Merge pull request #168505 from brhoades/brhoades/ngrok-bump-v3
...
ngrok: 2.3.40 -> 3.0.4
2022-06-15 01:30:17 +02:00
Niklas Hambüchen
0652ef9a64
Merge pull request #176903 from nh2/vaultwarden-service-better-example
...
nixos/vaultwarden: Make example more detailed.
2022-06-15 01:21:40 +02:00
Robert Hensing
d9dccae07c
nixos/doc: Hold off on NixOps 2 info until released
2022-06-14 23:23:41 +02:00
Robert Hensing
dfd98a5da2
lib.deferredModule: Make it properly singular
2022-06-14 23:01:27 +02:00
Robert Hensing
4746f6d03e
lib.types: Add deferredModule
2022-06-14 23:01:23 +02:00
Robert Hensing
5f2eb57725
Merge pull request #177461 from leungbk/mypy-terminal-emulator
...
tests/terminal-emulators: comply with mypy typecheck
2022-06-14 00:34:16 +02:00
Billy J Rhoades II
8e97f29c01
ngrok: 2.3.40 -> 3.0.4
...
ngrok 3 was released this morning. Changelog from v2 is here:
https://ngrok.com/docs/ngrok-agent/changelog
And a detailed upgrade guide is here:
https://ngrok.com/docs/guides/upgrade-v2-v3
Notably, arguments must now be double hyphens: `--token`. Previously,
single hyphens were accepted but those invocations will now error.
2022-06-13 14:53:58 -07:00
Pascal Bach
0d27868e91
Merge pull request #144082 from jojosch/jellyfin-10.8.0
...
jellyfin{,-web}: 10.7.7 -> 10.8.0
2022-06-13 23:35:36 +02:00
Johannes Schleifenbaum
b1ff292b1a
nixos/tests/jellyfin: fix type errors in test script
...
Co-authored-by: Minijackson <minijackson@riseup.net>
2022-06-13 21:58:48 +02:00
Brian Leung
b8df14aec0
tests/terminal-emulators: comply with mypy typecheck
...
Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>
2022-06-13 07:53:43 -07:00
Léo Gaspard
02cd48717d
nixos/openldap: fix systemd rejecting notification ( #177084 )
...
On one of the two machines I have running openldap, openldap failed to start due to a "timeout". Increasing the allowed startup delay didn't help.
I noticed the following in logs:
```
openldap.service: Got notification message from PID 5224, but reception only permitted for main PID 5223
```
It turns out that on this machine at least, openldap apparently sends the notification from a non-main process, which means that we need this NotifyAccess setting for systemd to record that it successfully started. Without it, after 30 seconds systemd kills the process because it didn't receive the sd_notify call.
Somehow the other machine I have on nixos running ldap works fine even without this, but I could not figure out what changes the behavior.
Given that AFAIU NotifyAccess still restricts to "from the cgroup of the service", I think this change should be safe.
2022-06-13 15:28:12 +02:00
Matthieu Coudron
a1ad235743
vimUtils: deprecate configure.pathogen ( #154814 )
...
pathogen does not bring any value compared to vim native packages so
remove it to ease maintainance burden.
2022-06-13 15:25:46 +02:00
Maximilian Bosch
7f9a78e197
Merge pull request #175330 from jtojnar/grafana-uid
...
nixos/grafana: Allow setting UID for datasource
2022-06-13 07:01:19 +02:00
Maximilian Bosch
5203011e4e
Merge pull request #177430 from Ma27/fix-wireguard-exporter
...
nixos/prometheus-wireguard-exporter: fix broken options
2022-06-13 06:14:30 +02:00
Aaron Andersen
37b6b161e5
Merge pull request #177321 from rnhmjoj/pr-fix-mpd
...
mpd: fix socket activation
2022-06-12 22:26:53 -04:00
Mario Rodas
cc73dc83b3
Revert "nixos/security/wrappers: use an assertion for the existence check"
2022-06-12 15:38:05 -05:00
Maximilian Bosch
e03d41fb6b
nixos/prometheus-wireguard-exporter: fix broken options
...
This is apparently a breaking change in a patch-level release[1] where
it's now necessary to specify values for each CLI argument.
[1] https://github.com/MindFlavor/prometheus_wireguard_exporter/releases/tag/3.6.1
2022-06-12 20:27:25 +02:00
Maximilian Bosch
6717faa02c
Merge pull request #177216 from amarshall/linux-kernel-updates
...
Linux kernel updates 2022-06-10
2022-06-12 19:52:57 +02:00
Michele Guerini Rocco
2b6c834377
Merge pull request #177336 from ncfavier/wrappers-source-check
...
nixos/security/wrappers: use an assertion for the existence check
2022-06-12 18:07:40 +02:00
Maximilian Bosch
fd2a89b983
nixos/wpa_supplicant: don't log that wpa_supplicant.conf is ignored with allowAuxiliaryImperativeNetworks = true
...
The warning is wrong with `allowAuxiliaryImperativeNetworks`[1] being
set to `true` because both files are included in this case with `-c` and
`-I`.
[1] https://nixos.org/manual/nixos/stable/options.html#opt-networking.wireless.allowAuxiliaryImperativeNetworks
2022-06-12 17:07:36 +02:00
Florian Klink
f9b0f5d09c
Merge pull request #177048 from NixOS/packages-systemd
...
nixos/systemd: use cfg.package in systemPackages to avoid confusion
2022-06-12 10:20:51 +02:00
Florian Klink
2b9be3117e
Merge pull request #177010 from flokli/make-kexec
...
nixos/modules/installer/kexec/kexec-boot.nix: move into nixos/lib, expose `kexec` nixos/release.nix
2022-06-12 10:07:35 +02:00
Bobby Rong
2375fac93d
nixos/pantheon: treat evince and file-roller as optional app
2022-06-12 13:12:15 +08:00