Izorkin
26898b8518
nixos/unit: update sandboxing options
2020-08-15 11:21:09 +03:00
Jörg Thalheim
7acb961c67
Merge pull request #93395 from hmenke/zfs
...
ZFS: Request credentials only for selected pools
2020-08-15 09:19:49 +01:00
Silvan Mosberger
25d75155f3
nixos/doc: Add freeform modules documentation
...
Co-Authored-By: Robert Hensing <robert@roberthensing.nl>
2020-08-14 22:49:35 +02:00
Martin Weinelt
f1efdd2c0b
Merge pull request #89444 from mweinelt/pinnwand-module
...
nixos/pinnwand: init; steck: init at 0.5.0; nixos/tests/pinnwand: init
2020-08-14 22:09:33 +02:00
worldofpeace
bea5560354
Merge pull request #94878 from stigtsp/package/firejail-test
...
nixos/tests: add test for firejail
2020-08-14 14:05:39 -04:00
Marek Mahut
f43fa60f02
Merge pull request #95010 from StijnDW/dokuwiki
...
dokuwiki: 2018-04-22b -> 2020-07-29
2020-08-14 16:27:38 +02:00
Martin Weinelt
9c8c31b241
Merge pull request #95086 from danieldk/manual-intel-opencl
...
nixos/manual: add a section about enabling OpenCL for Intel GPUs
2020-08-14 12:09:49 +02:00
Daniël de Kok
0c135e5f85
Merge pull request #95336 from danieldk/gpu-accel-common-issues
...
nixos/manual: add a section about common GPU acceleration issues
2020-08-14 08:30:24 +02:00
Aaron Andersen
f1f4cc6e1b
Merge pull request #95231 from aanderse/mysql-cleanup
...
nixos/mysql: run postStart as an unprivileged user
2020-08-13 21:38:44 -04:00
Aaron Andersen
806253800b
nixos/mysql: update release notes
2020-08-13 17:03:23 -04:00
Aaron Andersen
f08049e712
nixos/mysql: move ExecStartPost into postStart
2020-08-13 17:03:22 -04:00
Florian Klink
f3ba51f148
Merge pull request #95353 from flokli/systemd-output-journal
...
nixos: remove StandardOutput=syslog, StandardError=syslog lines
2020-08-13 21:45:12 +02:00
Jan Tojnar
0a4a62459a
nixos/fontconfig: Reintroduce unversioned fonts.conf
...
Turns out lot of software (including Chromium) use bundled fontconfig
so we either need to wrap every one of those, or re-introduce the global unversioned config.
The latter is easier but weakens hermetic configs. But perhaps those are not really worth the effort.
2020-08-13 20:56:43 +02:00
dawidsowa
9aaf34bdb8
nixos/rss-bridge: init
2020-08-13 19:51:30 +02:00
Daniël de Kok
9c14f5d56e
nixos/manual: add a section about common GPU acceleration issues
2020-08-13 19:35:47 +02:00
Florian Klink
962e15aebc
nixos: remove StandardOutput=syslog, StandardError=syslog lines
...
Since systemd 243, docs were already steering users towards using
`journal`:
eedaf7f322
systemd 246 will go one step further, it shows warnings for these units
during bootup, and will [automatically convert these occurences to
`journal`](f3dc6af20f
):
> [ 6.955976] systemd[1]: /nix/store/hwyfgbwg804vmr92fxc1vkmqfq2k9s17-unit-display-manager.service/display-manager.service:27: Standard output type syslog is obsolete, automatically updating to journal. Please update│······················
your unit file, and consider removing the setting altogether.
So there's no point of keeping `syslog` here, and it's probably a better
idea to just not set it, due to:
> This setting defaults to the value set with DefaultStandardOutput= in
> systemd-system.conf(5), which defaults to journal.
2020-08-13 18:49:15 +02:00
Florian Klink
e37941e4e4
nixos/systemd: don't try to install systemd-initctl.{service,socket}
...
Since systemd 246, these are only installed by systemd if
HAVE_SYSV_COMPAT is true, which only is the case if you set
sysvinit-path and sysvrcnd-path (which we explicitly unset in the
systemd derivation for quite some time)
2020-08-13 17:00:24 +02:00
Jörg Thalheim
28224516e5
Merge pull request #92964 from lopsided98/initrd-secrets-compressor
2020-08-13 07:54:01 +01:00
Jörg Thalheim
0f2ee10cbf
Merge pull request #94270 from jerith666/postfix-dane
...
postfix: add useDane config option
2020-08-13 06:53:53 +01:00
Matt McHenry
a45f1453eb
postfix: add useDane config option
2020-08-12 21:18:36 -04:00
Matthew Bauer
6fffd50623
Merge pull request #95220 from obsidiansystems/ipfs-quic-socket-activated
...
nixos/ipfs: Allow QUIC connections to socket activate too
2020-08-12 13:47:29 -05:00
Justin Humm
90ed2c01f0
Merge pull request #95266 from Lassulus/gollum-text
...
nixos/gollum: replace toFile with writeText
2020-08-12 19:28:41 +02:00
lassulus
957da625c5
nixos/gollum: replace toFile with writeText
2020-08-12 19:16:05 +02:00
Florian Klink
22e8ada3b3
Merge pull request #95264 from flokli/nginx-config-reload
...
nixos/nginx: move configuration testing script into reload command
2020-08-12 18:47:02 +02:00
Maximilian Bosch
fddeb7cb73
Revert "nextcloud: use mkDefault for whole nginx config"
...
This breaks the Nextcloud vhost declaration when adding e.g. another
vhost as the `services.nginx.virtualHosts` option has `{ nextcloud =
...; }` as *default* value which will be replaced by another
`virtualHosts`-declaration with a higher (e.g. the default) priority.
The following cases are now supported & covered by the module:
* `nginx` is enabled with `nextcloud` enabled and other vhosts can be
added / other options can be declared without having to care
about the declaration's priority.
* Settings in the `nextcloud`-vhost in `nginx` have to be altered using
`mkForce` as this is the only way how we officially support `nginx`
for `nextcloud` and customizations have to be done explicitly using
`mkForce`.
* `nginx` will be completely omitted if a user enables nextcloud
and disables nginx using `services.nginx.enable = false;`. (because
nginx will be enabled by this module using `mkDefault`).
This reverts commit 128dbb31cc
.
Closes #95259
2020-08-12 18:28:45 +02:00
Florian Klink
300049ca51
nixos/nginx: move configuration testing script into reload command
...
nginx -t not only verifies configuration, but also creates (and chowns)
files. When the `nginx-config-reload` service is used, this can cause
directories to be chowned to `root`, causing nginx to fail.
This moves the nginx -t command into a second ExecReload command, which
runs as nginx's user. While fixing above issue, this will also cause the
configuration to be verified when running `systemctl reload nginx`, not
only when restarting the dummy `nginx-config-reload` unit. The latter is
mostly a workaround for missing features in our activation script
anyways.
2020-08-12 18:13:29 +02:00
Daniël de Kok
2c0034d5fb
Merge pull request #91938 from spacefrogg/openafs-1.6-deprecation
...
openafs: 1.6.23 -> 1.6.24, mark broken due to EOL
2020-08-12 17:11:28 +02:00
Michael Raitza
b3c794d610
openafs: 1.6.23 -> 1.6.24, mark broken due to EOL
...
Last old stable release. Enforce switch to openafs_1_8 by marking broken while
leaving a reasonable short-term alternative.
Ref #90927
2020-08-12 15:31:11 +02:00
Florian Klink
bab13cc0df
nixos/doc/manual/release-notes: document fontconfig 2.10.x config and cache removal
2020-08-12 13:40:46 +02:00
Florian Klink
f527651a67
nixos/fontconfig: stop generating fontconfig_210 config and cache
...
This fontconfig version isn't used anywhere inside nixpkgs anymore.
2020-08-12 13:40:45 +02:00
Jörg Thalheim
dc255dcac0
Merge pull request #94291 from Izorkin/gitea
2020-08-12 12:23:05 +01:00
Aaron Andersen
e3c210dfd1
nixos/mysql: run ExecStartPost as an unprivileged user
2020-08-12 07:21:27 -04:00
Aaron Andersen
31098a03a2
nixos/mysql: cleanup some descriptions
2020-08-12 07:11:00 -04:00
Aaron Andersen
ff9921f0fd
nixos/mysql: loosen mariadb check
2020-08-12 07:10:59 -04:00
Aaron Andersen
3792fef4ec
nixos/mysql: add group option
2020-08-12 07:10:56 -04:00
Aaron Andersen
9b56677634
nixos/mysql: remove variable with confusing name
2020-08-11 21:09:41 -04:00
John Ericson
e6fe9abd8b
nixos/ipfs: Allow QUIC connections to socket activate too
...
Well, via the underlying UDP. QUIC-level socket activation we'll get
someday.
2020-08-11 22:08:19 +00:00
John Ericson
70d68f0478
nixos/systemd: Add support for listenDatagrams
...
This works exactly analogously to the existing `listenStreams`.
2020-08-11 22:08:19 +00:00
Florian Klink
921da91c8a
Merge pull request #93702 from tnias/usbguard20200723
...
nixos/usbguard: rework
2020-08-11 12:14:32 +02:00
Silvan Mosberger
f21c42143b
Merge pull request #48740 from midchildan/add-mirakurun
...
mirakurun: init at 3.3.0
2020-08-11 06:55:56 +02:00
midchildan
3c951a6e93
video/mirakurun: add module
2020-08-11 13:52:17 +09:00
Elis Hirwing
6be7d1c176
php: Drop PHP 7.2 support
2020-08-10 22:28:12 +02:00
Maximilian Bosch
dd957c2cb7
nixos/nextcloud: add documentation for alternative reverse-proxies
...
Follow-up for #93584[1]. This change adds a simple example how to use
`Nextcloud` with `httpd`.
[1] https://github.com/NixOS/nixpkgs/pull/93584#discussion_r465233063
2020-08-10 22:09:01 +02:00
Chris Ostrouchov
2147589c7a
pythonPackages.systemdspawner: init at 0.14
2020-08-10 10:03:43 -07:00
Chris Ostrouchov
228f08035d
nixos/jupyterhub: init service
2020-08-10 10:03:43 -07:00
Daniël de Kok
1c26e70bbc
nixos/manual: add a section about enabling OpenCL for Intel GPUs
2020-08-10 16:26:42 +02:00
zowoq
cc06d7a26f
buildGoModule: change doCheck default to true
2020-08-10 16:01:03 +10:00
Stig Palmquist
15c53cf0fa
nixos/tests: add test for firejail
2020-08-10 06:54:26 +02:00
Matt Layher
15e5ad6c7c
nixos/corerad: use SIGHUP to restart the service
...
Signed-off-by: Matt Layher <mdlayher@gmail.com>
2020-08-09 16:15:49 -07:00
Francesco Gazzetta
6cfda0e92c
shattered-pixel-dungeon: add nixos test
2020-08-09 15:34:30 -07:00
Stefan Frijters
5141082267
nixos/urserver: init
2020-08-09 12:33:37 -07:00
Stijn DW
552fb94877
dokuwiki: 2018-04-22b -> 2020-07-29
2020-08-09 17:42:57 +02:00
Izorkin
2f6a18af5a
nixos/netadata: enable simple sandboxing
2020-08-09 10:19:30 +03:00
Martin Weinelt
cb50679f0e
nixos/tests/pinnwand: init
2020-08-09 01:52:25 +02:00
Martin Weinelt
8774b9090d
nixos/pinnwand: init
2020-08-09 01:52:22 +02:00
Philipp Bartsch
ffd18cc1b1
nixos/usbguard: rework
...
Use StateDirectory to create necessary directories and hardcode some
paths. Also drop file based audit logs, they can be found in the
journal. And add module option deprecation messages.
2020-08-08 23:26:07 +02:00
Luflosi
4d9dec0aba
nixos/ipfs: add QUIC transport to swarmAddress list
...
According to https://github.com/ipfs/go-ipfs/blob/master/docs/config.md#addressesswarm , the default list of swarm multiaddrs now includes the QUIC transport.
2020-08-08 23:08:56 +02:00
Jörg Thalheim
08ba31a660
Merge pull request #94907 from zowoq/ecc-nixos
...
nixos/*: editorconfig fixes
2020-08-08 20:35:29 +01:00
asdf8dfafjk
8e52c2a63e
nixos/networking: Enhance hostId description ( #94800 )
...
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2020-08-08 20:30:50 +01:00
Jacek Galowicz
2a288cb1da
Merge pull request #93824 from blitz/fix-rpi4-installer
...
Fix Raspberry Pi 4B SD-Card Install Image
2020-08-08 13:45:02 +02:00
Peter Hoeg
4767015ec8
Merge pull request #84073 from pnelson/nextdns-1.4.36
...
nextdns: init at 1.7.0
2020-08-08 14:29:12 +08:00
zowoq
8fb410c0ad
nixos/*: editorconfig fixes
2020-08-08 10:54:16 +10:00
Florian Klink
da88c6eee5
nixos/railcar: fix typo
2020-08-07 18:00:28 +02:00
Jörg Thalheim
ba930d8679
nixos/modules: remove trailing whitespace
...
This leads to ci failure otherwise if the file gets changed.
git-blame can ignore whitespace changes.
2020-08-07 14:45:39 +01:00
Jörg Thalheim
e879d83e38
Merge pull request #92106 from ju1m/transmission
2020-08-07 14:40:17 +01:00
Florian Klink
38724d8e8e
Merge pull request #94837 from aanderse/gitlab
...
nixos/gitlab: fix module after #94454
2020-08-07 09:05:35 +02:00
Aaron Andersen
69eb22e4cd
nixos/gitlab: fix module after #94454
2020-08-06 22:37:48 -04:00
Julien Moutinho
2a49db6a89
transmission: apply RFC0042 and harden the service
2020-08-07 04:28:11 +02:00
aszlig
1365b9ac70
nixos/manual: Fix build
...
In fd9eb16b24
, the option
"services.nextcloud.nginx.enable" has been removed since the module now
exclusively supports nginx only.
Unfortunately, with the option gone from the manual, the link in the
Nextcloud-specific documentation referencing the NixOS option also
became a dead link and thus the manual will no longer build.
I also removed a second reference to this option in the Nextcloud-
specific documentation, which while it doesn't lead to a build error in
the manual is nevertheless a good idea to remove as well to ensure we
don't present outdated information to readers of the manual.
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @DavHau, @Ma27
2020-08-07 03:27:42 +02:00
Florian Klink
c1f77f4544
Merge pull request #91960 from datafoo/fix-issue-91761
...
nixos/networkd: update options
2020-08-07 00:37:08 +02:00
Florian Klink
d7f0530a15
Merge pull request #94805 from bachp/postgresql-setup-fix
...
nixos/postgresql: fix setup script
2020-08-06 23:50:12 +02:00
Jörg Thalheim
5e09542c3b
Merge pull request #89416 from Kloenk/autoUpgrade-flakes
...
nixos/autoUpgrade: add flake support
2020-08-06 21:45:07 +01:00
Pascal Bach
cee4e14bdf
nixos/postgresql: fix setup script
...
The missing () caused parts of the escripts to be added to the
ExecStartPost line instead of inside the script.
This caused postgresql start to fail under certain conditions.
2020-08-06 19:47:17 +02:00
Maximilian Bosch
50d8cdb3ca
Merge pull request #93584 from DavHau/nextcloud-improvements
...
nextcloud: restrict web server support to nginx; stop sharing nginx user/group; improve setup service
2020-08-06 19:00:21 +02:00
Florian Klink
056bb77adb
Merge pull request #94454 from aanderse/postgresql-cleanup
...
nixos/postgresql: fix several issues
2020-08-06 11:12:31 +02:00
volth
7503f280c8
nixos/systemd: fix TUN networking in LXC containers ( #81481 )
...
in LXC container /dev/net/tun is pre-available, "dev-net-tun.device" always fails
2020-08-05 21:12:57 -05:00
Jonathan Ringer
8d57f75f7a
nixos/smartd: fix description for docbook
2020-08-06 10:06:59 +10:00
Aaron Andersen
f42f8a6d3c
nixos/postgresql: replace deprecated usage of PermissionsStartOnly
2020-08-05 17:31:16 -04:00
Aaron Andersen
e50e89e1a8
nixos/postgresql: conditionally provision data directory with StateDirectory
2020-08-05 17:31:16 -04:00
Aaron Andersen
4f5fc729c7
nixos/postgresql: use a standard default value for dataDir
2020-08-05 17:31:12 -04:00
tmplt
f9f48250fe
nixos/smartd: add option for notifiction email sender
2020-08-05 14:26:48 -07:00
worldofpeace
c9a3e0a8cb
Merge pull request #94660 from xaverdh/squashfs-configurable-compression
...
nixos/iso-image: make squashfs compression easily configurable
2020-08-05 14:24:37 -04:00
Aaron Andersen
4e3b009778
Merge pull request #94624 from dadada/dadada/dokuwiki-acl-path
...
nixos/dokuwiki: fix path to ACL
2020-08-05 07:28:12 -04:00
Marek Mahut
258ca6451d
Merge pull request #94617 from dadada/dadada/dokuwiki
...
nixos/dokuwiki: add test for login
2020-08-05 11:55:40 +02:00
Marek Mahut
0bc37f7cb4
Merge pull request #94609 from 1000101/dokuwiki
...
nixos/dokuwiki: drop SSL forcing and document incompatibility
2020-08-05 11:54:42 +02:00
Marek Mahut
6cf131d54e
Merge pull request #94340 from 1000101/maintainer
...
nixos/modules: add myself as maintainer of several services
2020-08-05 11:54:29 +02:00
Izorkin
31ce2636a4
nixos/gitea: add lfs options
2020-08-05 11:19:33 +03:00
Izorkin
6c258a7c21
nixos/gitea: add ssh options
2020-08-05 11:19:32 +03:00
Izorkin
dfd32f11f3
nixos/gitea: update sandboxing options
2020-08-05 11:19:32 +03:00
Izorkin
6a0fd33b4c
nixos/gitea: add support socket connection
2020-08-05 11:19:32 +03:00
Izorkin
1a0e633c60
nixos/gitea: enable pid file
2020-08-05 11:19:32 +03:00
Izorkin
4e68da6337
nixos/gitea: add 'backupDir' option
2020-08-05 11:19:32 +03:00
Izorkin
f77e28d83d
nixos/gitea: enable data access only for 'gitea' group
2020-08-05 11:19:32 +03:00
DavHau
128dbb31cc
nextcloud: use mkDefault for whole nginx config
2020-08-05 11:50:26 +07:00
Peter Hoeg
4d8cc104a9
Merge pull request #78166 from peterhoeg/m/logitech_lcd
...
nixos/lcd: add support for Logitech LCD
2020-08-05 08:32:05 +08:00
zowoq
bf9d9cef58
doc/2009: remove trailing whitespace
2020-08-05 09:21:34 +10:00
Ryan Mulligan
c4814c03b7
treewide: add Jitsi maintainers
...
* makes jitsi maintainer team
2020-08-04 13:07:36 -07:00
Dominik Xaver Hörl
7f5000c784
nixos/iso-image: make squashfs compression easily configurable
2020-08-04 21:22:01 +02:00
Aaron Andersen
620e154921
Merge pull request #94043 from aanderse/zabbix-settings
...
nixos/zabbix*: replace extraConfig option with settings option
2020-08-04 12:49:43 -04:00
Maximilian Bosch
f5d964724d
nixos/tests/hydra*: fix eval
...
To specify distributed build-machines, `nix.distributedBuilds` must be
set to `true` now[1].
[1] 67b6e56391
2020-08-04 15:29:08 +02:00