Alexandre Iooss
8d559672be
nixos/grafana: fix systemd unit
...
Remove MemoryDenyWriteExecute hardening as it breaks image rendering
plugin. Add CAP_NET_BIND_SERVICE to bind to low ports when needed.
Remove PrivateUsers and ProcSubset as upstream choose to remove it.
Upstream changes: <https://github.com/grafana/grafana/pull/40219 >,
<https://github.com/grafana/grafana/pull/40178 >,
<https://github.com/grafana/grafana/pull/40339 > and
<https://github.com/grafana/grafana/pull/40815 >.
2021-10-23 14:33:31 +02:00
Artturi
dfad31d753
Merge pull request #142273 from ju1m/display-managers
2021-10-23 03:58:21 +03:00
pennae
1fa5e13f30
nixos/borgbackup: allow dump scripts as stdin inputs
...
borg is able to process stdin during backups when backing up the special path -,
which can be very useful for backing up things that can be streamed (eg database
dumps, zfs snapshots).
2021-10-22 16:31:50 -04:00
pennae
c47fcb70c6
nixos/mosquitto: rewrite the test
...
expand the test to check all four forms of passwords, tls certificates (both
server and client), and that acl files are formatted properly.
2021-10-22 16:06:55 -04:00
pennae
56d0b5cd6a
nixos/mosquitto: rewrite the module
...
mosquitto needs a lot of attention concerning its config because it doesn't
parse it very well, often ignoring trailing parts of lines, duplicated config
keys, or just looking back way further in the file to associated config keys
with previously defined items than might be expected.
this replaces the mosquitto module completely. we now have a hierarchical config
that flattens out to the mosquitto format (hopefully) without introducing spooky
action at a distance.
2021-10-22 16:06:55 -04:00
Michele Guerini Rocco
b1df6feb1a
Merge pull request #142272 from ju1m/console
...
nixos/console: fix cross-compiling
2021-10-22 19:02:25 +02:00
davidak
6adc2ce335
Merge pull request #142455 from bobby285271/fileroller
...
pantheon.file-roller: init
2021-10-22 16:21:45 +02:00
Peter Hoeg
d2ed9e4f96
nixos/plasma5: add thunderbolt package if configured
2021-10-22 10:46:16 +08:00
Peter Hoeg
f1a82a2182
nixos/plasma5: make running with systemd configurable
2021-10-22 10:46:16 +08:00
Bobby Rong
73487dee85
nixos/pantheon: prefer pantheon.file-roller
2021-10-22 10:26:27 +08:00
Bobby Rong
d34be69054
nixos/file-roller: add option for specify package
2021-10-22 10:26:27 +08:00
Sandro
4663d3f99f
Merge pull request #142360 from romildo/upd.lumina
2021-10-21 23:45:29 +02:00
Jakub Sokołowski
72d16ac9b5
transmission: add extraFlags configuration option
...
Makes service more customizeable and makes debuggingin easier through
the use of flags like `--log-debug` or `--dump-settings`.
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-10-21 23:36:06 +02:00
Sandro
5d74ff4206
Merge pull request #141443 from jtojnar/blackfire-2
2021-10-21 20:22:09 +02:00
Jan Tojnar
25450f2b29
blackfire: 1.49.4 → 2.5.1
...
https://blackfire.io/docs/up-and-running/agent-upgrade
2021-10-21 17:40:19 +02:00
Jacek Galowicz
e7a1dea4c8
Merge pull request #142207 from K900/fix-python-crashes-in-tests
...
nixos/lib/test-driver: clean up threads correctly
2021-10-21 14:13:04 +02:00
Jakub Kozłowski
06ec20277f
coursier: Rename binary to cs
2021-10-21 08:11:47 -04:00
Ninjatrappeur
670c69cb9b
Merge pull request #96655 from ju1m/transmission
2021-10-21 12:15:05 +02:00
Julien Moutinho
2ef7fec214
nixos/systemd-lib: fix cross-compiling
2021-10-21 03:55:36 +02:00
ajs124
c57f96274f
Merge pull request #141487 from helsinki-systems/feat/nixos-install-variable
...
nixos/nixos-enter: Add IN_NIXOS_ENTER variable
2021-10-21 02:07:41 +02:00
Martin Weinelt
5adcd46bc0
Merge pull request #142109 from mweinelt/prometheus-node-exporter
...
nixos/prometheus: add hardening exceptions to node-exporter
2021-10-21 01:15:35 +02:00
Maximilian Bosch
3d1350d3f9
Merge pull request #142148 from Ma27/bump-roundcube
...
roundcube: 1.4.11 -> 1.5.0
2021-10-20 23:47:57 +02:00
Eric Bailey
5b455776e3
helmfile: 0.140.1 -> 0.141.0
2021-10-20 09:06:11 -05:00
José Romildo
247f3876d5
nixos.lumina: give special privilegies to lumina-checkpass
2021-10-20 10:43:25 -03:00
Hugo Lageneste
e09fb63ffc
nixos/luksroot: sync the crypt-storage
...
Add a sync command just after writing to the /crypt-storage file in order to reduce
the possibilities of corruption errors.
2021-10-20 03:46:19 +03:00
Julien Moutinho
808ad2afe1
nixos/display-managers: fix cross-compiling
2021-10-20 02:29:05 +02:00
Julien Moutinho
661207ce7e
nixos/console: fix cross-compiling
2021-10-20 02:15:09 +02:00
K900
9611041ef5
nixos/lib/test-driver: set defaults in __init__ instead of class level
...
Just a minor code style nit to avoid potential footguns
2021-10-19 16:29:19 +03:00
K900
a874235dff
nixos/lib/test-driver: clean up threads correctly
...
The current implementation just forks off a thread to read
QEMU's stdout and lets it exist forever. This, however,
makes the interpreter shutdown racy, as the thread could
still be running and writing out buffered stdout when the
main thread exits (and since it's using the low level API,
the worker thread does not get cleaned up by the atexit hooks
installed by `threading`, either). So, instead of doing that,
let's create a real `threading.Thread` object, and also
explicitly `join` it along with the other stuff when cleaning up.
2021-10-19 16:23:51 +03:00
Maciej Krüger
b11e0a853a
Merge pull request #142084 from mkg20001/hedge
2021-10-19 15:23:45 +02:00
Michael Hoang
43d2eefea6
nixos/samba: Add openFirewall
option
2021-10-19 19:11:02 +11:00
Domen Kožar
8fdc8fe5ce
Merge pull request #142040 from pennae/optimize-module-docs
...
make-options-docs: don't sort the options XML file
2021-10-18 16:38:32 -05:00
Maximilian Bosch
4f88fb9331
roundcube: 1.4.11 -> 1.5.0
...
ChangeLog: https://github.com/roundcube/roundcubemail/releases/tag/1.5.0
2021-10-18 23:27:00 +02:00
figsoda
a209d563cd
Merge pull request #142032 from thiagokokada/refactor-libvirtd-module
...
nixos/libvirtd: refactor module
2021-10-18 16:07:05 -04:00
Sandro
b775c1f58d
Merge pull request #142108 from Ma27/pi-ldap-proxy-py3
2021-10-18 22:06:22 +02:00
Sandro
34ba722a00
Merge pull request #142117 from samhug/hyperv
2021-10-18 21:29:52 +02:00
Robert Hensing
6dfab1853d
Merge pull request #142035 from hercules-ci/nixops-test
...
NixOps test
2021-10-18 21:28:15 +02:00
Maximilian Bosch
47fc40d5ab
pythonPackages.privacyidea-ldap-proxy: 0.6.1 -> 0.6.2, switch to python3
2021-10-18 21:14:35 +02:00
Pascal Wittmann
89a0ec8f3c
Merge pull request #142028 from NixOS/bugfix/subsonic-needs-jdk8
...
nixos/subsonic: use jre8
2021-10-18 20:44:41 +02:00
Sam Hug
d6e1fb43c4
nixos/hyperv: fix evaluation of kernelParams
2021-10-18 11:22:53 -07:00
Julien Moutinho
90877765d3
nixos/transmission: remove SystemCallErrorNumber= to raise errors
2021-10-18 19:35:48 +02:00
Julien Moutinho
aaf21b9636
nixos/transmission: remove InaccessiblePaths= to enable reload, fixes #135695
2021-10-18 19:35:46 +02:00
Julien Moutinho
63e87892ff
nixos/transmission: use freeformType on settings
2021-10-18 19:35:41 +02:00
Martin Weinelt
9b46e3084b
nixos/prometheus: add hardening exceptions to node-exporter
...
Conditionally grants access for the logind, wifi and network_route
collectors.
2021-10-18 19:21:30 +02:00
Thiago Kenji Okada
3e72e18c57
nixos/doc/manual/release_notes: add virtualisation.libvirtd changes
2021-10-18 13:46:56 -03:00
Thiago Kenji Okada
9e7b50e885
nixos/libvirtd: refactor module
...
Move all `virtualisation.libvirtd.qemu*` options to a
`virtualisation.libvirtd.qemu` submodule.
Also for consistency, add `virtualisation.libvirtd.qemu.swtpm.package`
(only new option during this refactor.)
2021-10-18 13:45:35 -03:00
Jörg Thalheim
57961d2b83
Merge pull request #141192 from helsinki-systems/feat/improved-socket-handling2
...
nixos/switch-to-configuration: Improve socket and timer handling, clean up, minor fixes, add test
2021-10-18 16:53:11 +01:00
Sandro
50171477bc
Merge pull request #139128 from HexF/patch-1
2021-10-18 16:15:02 +02:00
Maciej Krüger
cb7459c286
nixos/hedgedoc: add more options for oauth2
2021-10-18 14:20:51 +02:00
Robert Hensing
0645328c22
Merge pull request #142075 from hercules-ci/issue-118722-path-in-contents
...
dockerTools: Fix and test #118722 path in contents
2021-10-18 13:44:13 +02:00