Tuomas Tynkkynen
affcf92287
nixos/tests: Make the UEFI boot test release-critical
...
Seems to be working fine, based on the history:
https://hydra.nixos.org/job/nixos/trunk-combined/nixos.tests.installer.simpleUefiGummiboot.i686-linux/all
https://hydra.nixos.org/job/nixos/trunk-combined/nixos.tests.installer.simpleUefiGummiboot.x86_64-linux/all
2017-08-19 08:46:48 +02:00
Tuomas Tynkkynen
0488cb1802
tests/installer: Rename simpleUefiGummiboot -> simpleUefiSystemdBoot
...
It hasn't been called Gummiboot for ages.
2017-08-19 08:46:48 +02:00
volth
9e00c643d8
boot.kernelParams: dedup and sort
...
dedup and sort boot.kernelParams to avoid restarting services on eval order change
Fixes https://github.com/NixOS/nixpkgs/issues/28277
2017-08-19 06:21:13 +00:00
Michael Peyton Jones
e675296a9c
Release notes: add note for overlays via file
2017-08-17 22:13:39 +00:00
Maximilian Güntner
0f02879e01
ipfs: added defaultMode, added norouting service
2017-08-17 03:30:57 +02:00
makefu
e6785422ae
module gitlab-runner: introduce configOptions and configFile
...
Also removes configText, functionality is now provided more conveniently by configOptions.
Keep in mind that this breaks compatibility with previous configurations,
configFile provides a means to protect the CI token from being written into the nix store.
2017-08-15 16:06:55 +02:00
Peter Hoeg
698efcb7b5
open-vm-tools: do not pull x dependencies unconditionally
...
The "headless" configuration option is ignored because we unconditionally
reference pkgs.open-vm-tools.
This fixes that.
2017-08-15 17:05:30 +08:00
gnidorah
b73ae0a695
maxx: move deps from module to package
2017-08-14 11:13:49 +03:00
Jean-Pierre PRUNARET
e6157451c1
nixos/munin: scripts need to be executable in order to build a wrapper
...
"Builder called die: Cannot wrap
/nix/store/XXX-munin-available-plugins/plugin.sh because it is not an
executable file"
[Bjørn: Keep DRY, quote "$file".]
2017-08-14 07:50:32 +02:00
Joachim F
3e21f91a39
Merge pull request #27796 from LumiGuide/postage
...
postage: init at 3.2.17 & add NixOS module
2017-08-13 20:59:06 +00:00
Joachim Fasting
c0769dc6ef
nixos/hardened profile: increase ASLR entropy
2017-08-13 21:44:13 +02:00
Franz Pletz
2d5a04e5bd
nixos/agetty: override upstream default
...
Also see c2cf696430
.
2017-08-13 19:07:38 +02:00
Frederik Rietdijk
7ebcd39a0f
Merge commit '4c49205' into HEAD
2017-08-13 18:34:59 +02:00
Peter Hoeg
4ce76d9e1a
ddclient nixos module: follow best practice for running daemons
...
Couple of changes:
- move home to /var/lib/ddclient so we can enable ProtectSystem=full
- do not stick binary into systemPackages as it will only run as a daemon
- run as dedicated user/group
- document why we cannot run as type=forking (output is swallowed)
- secure things by running with ProtectSystem and PrivateTmp
- .pid file goes into /run/ddclient
- let nix create the home directory instead of handling it manually
- make the interval configurable
2017-08-13 21:56:48 +08:00
Peter Hoeg
beec141d84
ddclient: assign group for ddclient
2017-08-13 21:56:48 +08:00
Franz Pletz
9fda9f8c79
Merge pull request #27903 from volth/issue-27857-libvirt-xml-manipulation
...
libvirt: 3.5.0 -> 3.6.0
2017-08-12 21:45:01 +02:00
Nadrieril
69a4836df5
firefox syncserver service: run as non-root user by default
2017-08-12 14:42:50 +01:00
Frederik Rietdijk
c06fb4a269
Merge pull request #28188 from Nadrieril/ffsync-fix-pythonpath
...
firefox syncserver service: fix PYTHONPATH
2017-08-12 15:11:53 +02:00
Nadrieril
d6c1d2f793
firefox syncserver service: fix PYTHONPATH
2017-08-12 14:08:25 +01:00
Robin Gloster
79ac09ea06
ripple-rest: remove
...
marked as broken for > 1 yr, development is frozen and author recommends
moving to https://github.com/ripple/ripple-lib
2017-08-12 13:38:32 +02:00
Franz Pletz
5d2764eb68
prometheus-blackbox-exporter: 0.5.0 -> 0.8.1
2017-08-12 11:05:23 +02:00
Jörg Thalheim
c2e7b0e0b4
Merge pull request #27997 from richardlarocque/mosquitto_hashed_pass_docs
...
nixos/mosquitto: Fix instructions for password gen
2017-08-12 09:07:22 +01:00
Franz Pletz
59fa868b01
tests.plasma5: fix hash
2017-08-12 00:55:32 +02:00
Phil
b4d2cd6f6a
nixos/tor: add tor hidden service options ( #28081 )
...
* nixos/tor: add hiddenServices option
This change allows to configure hidden services more conveniently.
* nixos/tor: fix default/example mixup
* nixos/tor: use docbook in documentation
Also use more elegant optionalString for optional strings.
* tor: seperate hidden service port by newline
* tor: better example for hidden service path
a path below /var/lib/tor is usually used for hidden services
2017-08-11 22:59:52 +01:00
Keith Amidon
f9204b9762
nixos/samba: fix pam service name typo ( #28049 )
...
The PAM service name used before this commit was "sambda", with an
extra 'd'. For some reason I don't quite fully understand this typo
prevents GDM from starting. This change fixes that as tested in VMs
built using "nixos-rebuild -I nixpkgs=<mypkgs> build-vm".
2017-08-11 20:13:33 +00:00
Robin Gloster
350a6c3726
tests.plasma5: fix eval
2017-08-11 21:53:17 +02:00
Franz Pletz
991745046f
Merge pull request #27993 from Nadrieril/rsync-run-as-user
...
rsync service: allow running as user (plus some tweaks)
2017-08-11 19:12:46 +02:00
Peter Hoeg
b6f7713d33
Merge pull request #28127 from peterhoeg/f/collectd
...
influxdb (on nixos): reduce closure size by 99.99% (and a bit)
2017-08-12 00:01:46 +08:00
Franz Pletz
9f7f85a3cd
nixos/tests/nginx: fix name
2017-08-11 17:37:14 +02:00
Franz Pletz
61d133c1ee
Merge pull request #27939 from evujumenuk/wireguard-rt_tables
...
wireguard: add per-peer routing table option
2017-08-11 16:27:07 +02:00
Peter Hoeg
211593fe49
influxdb nixos module: allow customizing the collectd dependency
2017-08-11 22:12:49 +08:00
Joachim F
793523d7bc
Merge pull request #28089 from volth/patch-9
...
nixos/tinc: do not tell systemd where is pidfile
2017-08-11 13:31:57 +00:00
Tristan Helmich
aa8e60d934
graylog module: adapt to Graylog version 2.3.0
2017-08-11 13:07:30 +02:00
Domen Kožar
486e1c3c16
Merge pull request #27998 from davidak/macOS
...
replace "Mac OS X" and "OS X" with "macOS"
2017-08-11 13:01:36 +02:00
Peter Simons
1b30d15369
Merge pull request #28123 from jerith666/post-fix-up
...
Post fix up
2017-08-11 09:36:58 +02:00
Dan Peebles
ca99ec3f58
amazon-image: fix typo in last commit
2017-08-11 02:12:39 +00:00
Dan Peebles
5def5bab3c
amazon-image: make image size configurable
2017-08-11 01:57:43 +00:00
Matt McHenry
9186dda4a9
postfix: wakeup value should be used even if wakeupUnusedComponent is not defined
2017-08-10 21:32:03 -04:00
Matt McHenry
01fbf30041
postfix: warn about deprecated extraMasterConf option
2017-08-10 21:32:03 -04:00
Matt McHenry
edd4a0efe3
postfix: fix typo in transport_maps path
2017-08-10 21:32:02 -04:00
Dan Peebles
5f372ef67f
amazon-image: support VPC/VHD as an output format for the builder
2017-08-10 22:57:26 +00:00
Dan Peebles
f3f8c584a4
amazon-image: Add disk format option to image builder module
2017-08-10 21:40:42 +00:00
volth
15351c4780
apply 'restartIfChanged = false' to all libvirtd services
...
Although it is quite safe to restart ```libvirtd``` when there are only ```qemu``` machines, in case if there are ```libvirt_lxc``` containers, a restart may result in putting the whole system into an odd state: the containers go on running but the new ```libvirtd``` daemons do not see them.
2017-08-10 11:34:32 +00:00
Joachim Fasting
767b2ae327
nixos/dnscrypt-proxy: default to random upstream resolver
2017-08-10 01:19:17 +02:00
volth
b32b18631e
nixos/tinc: do not tell systemd where is pidfile
...
```Tinc```'s pid file has more info than just a pid
```
# cat /run/tinc.dmz.pid
12209 7BD4A657B4A04364D268D188A0F4AA972A05247D802149246BBE1F1E689CABA1 127.0.0.1 port 656
```
so ```systemd``` fails to parse it.
It results in long (re)start times when ```systemd``` waits for a correct pid file to appear.
2017-08-09 22:35:20 +00:00
volth
7e5332c868
tinc: allow the daemon to write to files in /etc/tinc/${network}/hosts
...
Follow up https://github.com/NixOS/nixpkgs/pull/27756 : tinc daemon may also create new files in ```/etc/tinc/$network/hosts```
2017-08-10 00:09:45 +02:00
Dan Peebles
b48ffa332b
services.fluentd: add plugins option
...
This allows us to pass in additional ad-hoc fluentd plugins for custom
output formats and other goodness.
2017-08-08 22:02:56 +00:00
Michael Raskin
29c3ea0cf0
Merge pull request #27925 from adisbladis/networkmanager_unbound
...
networkmanager service: use unbound if enabled
2017-08-08 12:13:42 +02:00
Jörg Thalheim
035e0198c5
Merge pull request #27978 from makefu/module/influxdb/bind-fix
...
influxdb module: collectd.port is now called bind-address
2017-08-08 07:51:03 +01:00
Wout Mertens
18fa60db30
Merge pull request #28008 from alexandergall/add-cloud-image
...
nixos/cloud-image: add module
2017-08-08 07:29:08 +02:00
Franz Pletz
bfc78abf2b
Merge pull request #28019 from Infinisil/fix-default-text-xmonad
...
xmonad service: add defaultText to extraPackages to fix rendering in docs
2017-08-08 02:15:45 +02:00
evujumenuk
eaab02b94f
wireguard: convert "table" to an interface option
...
Do the right thing, and use multiple interfaces for policy routing. For example, WireGuard interfaces do not allow multiple routes for the same CIDR range.
2017-08-08 01:45:19 +02:00
Silvan Mosberger
7bc42a8971
xmonad service: add defaultText to extraPackages to fix rendering in docs
2017-08-08 01:14:58 +02:00
davidak
3270aa896b
replace "Mac OS X" and "OS X" with "macOS"
...
as it is the official name since 2016
https://en.wikipedia.org/wiki/Macintosh_operating_systems#Desktop
exception are parts refering to older versions of macOS like
"GUI support for Mac OS X 10.6 - 10.12. Note that Emacs 23 and later [...]"
2017-08-07 21:41:30 +02:00
Bas van Dijk
ca64eaadf8
postage: init at 3.2.17 & add NixOS module
2017-08-07 20:35:23 +02:00
Wout Mertens
339330b322
Merge pull request #27426 from rnhmjoj/nginx
...
nginx: make enabling SSL port-specific
2017-08-07 16:46:28 +02:00
Frederik Rietdijk
e6808e30ae
Merge pull request #27931 from gnidorah/kde
...
Fix some KDE applications
2017-08-07 13:15:36 +02:00
Alexander Gall
a0a4bea2a6
nixos/cloud-image: add module
...
The module creates an image for an openstack-based cloud using the
cloud-init package.
2017-08-07 13:03:02 +02:00
Richard Larocque
b27d8c5d0a
nixos/mosquitto: Fix instructions for password gen
...
Fixes https://github.com/NixOS/nixpkgs/issues/27996 .
Updates instructions for generating hashes passwords for use in a
Mosquitto password file. Using `mosquitto_passwd` to generate these
hashes is a little less convenient, but the results are more likely to
be compatible with the mosquitto daemon.
As far as I can tell, the hashes generated with `mkpassd` did not work
as intended. But this may have been hidden by another bug:
https://github.com/NixOS/nixpkgs/issues/27130 .
2017-08-06 15:54:36 -07:00
Joachim F
9f93150ec9
Merge pull request #27820 from dalaing/piwik-install-doc-fix
...
nixos/piwik: clarifies setup documentation
2017-08-06 22:58:52 +01:00
Nadrieril
a4d07290cb
rsync service: allow running as not root
2017-08-06 22:57:53 +01:00
Nadrieril
94fc613cc7
rsync service: restart service on configuration change
2017-08-06 22:57:53 +01:00
Nadrieril
541377e5f0
rsync service: modernize config file generation
2017-08-06 22:57:53 +01:00
Franz Pletz
0f4179aed2
fixup! reword
2017-08-06 15:16:57 +02:00
makefu
c8e96826ae
influxdb module: collectd.port is now called bind-address
...
with the influxdb release we have packaged (and newer releases)
collectd.port has been streamlined to bind-address which takes a string
instead of a number.
ref: https://github.com/influxdata/influxdb/blob/master/services/collectd/README.md
2017-08-06 14:49:56 +02:00
gnidorah
0e28d3af1d
nixos: add pathes for KDE applications
2017-08-06 12:55:10 +03:00
Linus Heckemann
0abf9d2b12
Document timezone changes in release notes
2017-08-05 12:06:31 +01:00
Robin Gloster
2dddc6dcf6
libvirt: don't suspend and resume on change
2017-08-05 11:00:02 +00:00
Jan Tojnar
c9d419a22b
gnome: Further fixes for Using the 'memory' GSettings backend issue
2017-08-05 12:21:00 +02:00
Graham Christensen
7d0b001d4a
nixos,nixpkgs: only build essentials on i686
2017-08-05 12:06:05 +02:00
evujumenuk
6070d91e93
wireguard: remove "table" option from example
...
Most users will be served well by the default "table" setting ("main").
2017-08-04 21:00:45 +02:00
John Ericson
a753f2fef7
17.09 release-notes: New breaking change: cc-wrapper exports more env vars
2017-08-04 13:43:38 -04:00
evujumenuk
e355f7044d
wireguard: add per-peer routing table option
...
This adds a convenient per-peer option to set the routing table that associated routes are added to. This functionality is very useful for isolating interfaces from the kernel's global routing and forcing all traffic of a virtual interface (or a group of processes, via e.g. "ip rule add uidrange 10000-10009 lookup 42") through Wireguard.
2017-08-04 18:30:53 +02:00
Robin Gloster
b18b70c74d
nixos.tests.nat: fix
2017-08-04 17:52:42 +02:00
Phil
4f277bd920
nixos/networking/nat: add option for protocol
...
This commit adds an option to allow udp port forwarding (see #24894 ).
2017-08-04 17:03:05 +02:00
adisbladis
da7755b75c
networkmanager service: use unbound if enabled
2017-08-04 13:50:06 +08:00
Remy Goldschmidt
7fa034de56
Improved nixos-option manpage
2017-08-04 03:30:35 +02:00
Robin Gloster
dc13376ee2
wvdial: remove
2017-08-04 02:24:07 +02:00
Robin Gloster
a4647bc33f
tlsdate: remove
...
Dead and does not build with openssl 1.1.
Debian has removed it, too.
2017-08-04 02:24:03 +02:00
Robin Gloster
485a8fef73
modules: specify some types
2017-08-04 02:20:31 +02:00
Robin Gloster
94a2cba8d9
nginx module: add resolver config
2017-08-04 02:15:46 +02:00
Robin Gloster
75bbcd4215
nginx module: include uwsgi_params
2017-08-04 02:15:01 +02:00
Markus Mueller
c678fc385e
confluence: fix optional sso
2017-08-04 02:13:51 +02:00
Franz Pletz
02791ced34
atlassian-{jira,confluence}: add crowd sso support
2017-08-04 02:13:42 +02:00
Simon Lackerbauer
1075919413
unifi: add options to control JVM heap size
...
Our controller was acting very sluggish at times and increasing
available RAM for the JVM fixes this.
2017-08-04 02:12:31 +02:00
Franz Pletz
3b472d78a8
avahi-daemon service: add cacheEntriesMax option
2017-08-04 02:10:11 +02:00
Franz Pletz
32e7904624
gnupg agent module: fix ssh agent assertion logic
2017-08-04 02:07:49 +02:00
Markus Mueller
1793c96be2
tests/nat: Use switch-to-configuration in test case
2017-08-03 21:16:14 +02:00
Markus Mueller
53d2f0980d
nat: always flush nixos nat rules on firewall start/reload
...
Fixes #27510
2017-08-03 21:16:14 +02:00
Volth
84a6a3683b
libvirt: 3.5.0 -> 3.6.0
2017-08-03 13:53:57 +00:00
Daniel Fullmer
caaa79f246
nixos/pulseaudio: Fix for missing zeroconf module
2017-08-03 14:21:34 +02:00
Peter Hoeg
72a64ea4f1
nsswitch: add systemd module
...
In order for DynamicUser = true to work in services, we need the
nss-systemd module to be able to resolve the user and group names
generated dynamically.
2017-08-03 10:51:06 +08:00
Profpatsch
5d62d8775c
modules/systemd: improve logind.extraConfig example
...
Since we have a .handleLidSwitch option now, give an other example.
2017-08-03 03:07:05 +02:00
Dave Laing
d690701ff7
nixos/piwik: clarifies setup documentation
...
The piwki setup documentation as it stands has two issues:
- the `ALTER USER root` line does not work with MariaDB or MySQL 5.5
- the auth plugin details vary between MariaDB and MySQL
2017-08-02 08:38:16 +10:00
Christian Albrecht
93965870a8
nixos/auditd: break ordering cycle ( #27577 )
...
auditd creates an ordering cycle by adding wantedBy = [ "basic.target" ],
because of this the job job systemd-update-utmp.service/start is deleted.
Adding unitConfig.DefaultDependencies = false; to the auditd service unbreaks the cycle.
See also #11864
2017-08-01 20:45:01 +01:00
Volth
b998d8e8b7
nixos/hardware/raid/hpsa: init at 2.40
2017-08-01 12:52:04 +00:00
Franz Pletz
c217f48c35
searx: 0.11.0 -> 0.12.0
2017-08-01 06:16:03 +02:00
Taeradan
67890f73af
postfix service: typo in transport filepath
2017-07-31 21:05:03 +02:00
aszlig
4f901203e8
nixos/timezone: Fix evaluation error
...
Evaluation error introduced in a0d464033c
.
If the value for timeZone is null it shouldn't be even tried to coerce
it into a string.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @lheckemann, @joachifm
2017-07-31 17:15:30 +02:00
Linus Heckemann
a0d464033c
nixos/timezone: support imperative timezone configuration ( #26608 )
...
Fixes #26469 .
2017-07-31 15:55:24 +01:00