Silvan Mosberger
1906320e68
nixos/cjdns: Don't use IFD for extra hosts
2020-03-07 02:01:19 +01:00
Lancelot SIX
74c0ce5376
Merge pull request #81907 from atlaua/lr/wg-typo
...
nixos/wireguard: Fix typo in error message
2020-03-06 22:43:32 +01:00
Luis Ressel
b19c485b22
nixos/wireguard: Fix typo in error message
...
generatePrivateKey -> generatePrivateKeyFile
2020-03-06 16:19:23 +01:00
Jörg Thalheim
391b7b31d8
Merge pull request #81891 from emilazy/nginx-use-mozilla-tls-config
...
nixos/nginx: use Mozilla Intermediate TLS configuration
2020-03-06 14:30:28 +00:00
Jörg Thalheim
87ae01e70b
Merge pull request #81752 from alexbakker/fix-55221
...
uwsgi: use pyhome instead of pythonpath for uwsgi vassals
2020-03-06 13:16:26 +00:00
Emily
4ed98d69ed
nixos/nginx: use Mozilla Intermediate TLS configuration
...
The configuration at https://ssl-config.mozilla.org/#server=nginx&config=intermediate
is reliably kept up-to-date in terms of security and compatible with a
wide range of clients. They've probably had more care and thought put
into them than our defaults, and will be easier to keep updated in
the future.
The only removed (rather than changed) configuration option here is
ssl_ecdh_curve, per https://github.com/mozilla/server-side-tls/issues/189 .
Resolves #80952 .
2020-03-06 13:08:56 +00:00
Silvan Mosberger
dc70633913
Merge pull request #81774 from ju1m/shorewall_fix_RestartTriggers
...
shorewall: fix RestartTriggers
2020-03-06 11:58:35 +01:00
Martin Milata
421a18f42b
nixos/prometheus-mikrotik-exporter: init
2020-03-06 10:39:05 +01:00
Martin Milata
e7ed7901a8
nixos/prometheus-mail-exporter: misc fixes
...
- Fix misspelled option. mkRenamedOptionModule is not used because the
option hasn't really worked before.
- Add missing cfg.telemetryPath arg to ExecStart.
- Fix mkdir invocation in test.
2020-03-06 01:44:05 +01:00
Martin Milata
3b5cf35e8b
nixos/prometheus-mail-exporter: fix assertion
...
The assertion was printed when user explicitly defined only the
configFile option.
2020-03-06 01:44:05 +01:00
Martin Milata
2a080ac434
nixos/prometheus-snmp-exporter: fix assertion
...
The assertion was printed when user explicitly defined only the
configurationPath option.
2020-03-06 01:43:20 +01:00
Martin Milata
87f87fb3e9
nixos/prometheus-snmp-exporter: update log options
...
The allowed values have changed in bd3319d28c
2020-03-06 01:43:20 +01:00
Martin Milata
0ac24ccf2a
nixos/prometheus-*-exporter: escape shell args
2020-03-06 01:43:20 +01:00
David Guibert
bbc2cd89ef
users.groups.disnix instead of a list
...
related to #63103 .
2020-03-05 09:08:40 +01:00
Julien Moutinho
47f27938e7
shorewall: fix RestartTriggers
2020-03-05 00:01:44 +01:00
Alexander Bakker
7bbf7fa693
uwsgi: use pyhome instead of pythonpath for uwsgi vassals
2020-03-04 20:20:32 +01:00
Michele Guerini Rocco
481a4e938e
Merge pull request #81597 from thatsmydoing/multiport-nat
...
nixos/nat: fix multiple destination ports with loopback
2020-03-04 19:12:25 +01:00
Thomas Dy
97a61c8903
nixos/nat: fix multiple destination ports with loopback
2020-03-04 18:11:31 +09:00
Florian Klink
407be0a577
Merge pull request #81327 from flokli/add-cage
...
nixos/cage: init
2020-03-03 12:04:33 -08:00
Matthew Bauer
e0e4d591cc
nixos/cage: init
...
Add a cage module to nixos. This can be used to make kiosk-style
systems that boot directly to a single application. The user (demo by
default) is automatically logged in by this service and the
program (xterm by default) is automatically started.
This is useful for some embedded, single-user systems where we want
automatic booting. To keep the system secure, the user should have
limited privileges.
Based on the service provided in the Cage wiki here:
https://github.com/Hjdskes/cage/wiki/Starting-Cage-on-boot-with-systemd
Co-Authored-By: Florian Klink <flokli@flokli.de>
2020-03-02 13:43:20 -08:00
WilliButz
eaef96093a
prometheus-nginx-exporter: 0.5.0 -> 0.6.0 ( #81285 )
...
* prometheus-nginx-exporter: 0.5.0 -> 0.6.0
* nixos/prometheus-nginx-exporter: update for 0.6.0
Added new option constLabels and updated virtualHost name in the
exporter's test.
2020-03-02 14:48:40 -05:00
Andreas Rammhold
ca5048cba4
Merge pull request #79925 from mrkkrp/mk/add-nix-store-gcs-proxy-service
...
Add nix-store-gcs-proxy service
2020-03-02 16:04:16 +01:00
Mark Karpov
96b472e95d
module/nix-store-gcs-proxy: init
2020-03-02 16:01:14 +01:00
Jörg Thalheim
2c5ffb5c7a
Merge pull request #81164 from Mic92/home-assistant
...
nixos/home-assistant: 0.104.3 -> 0.106.0
2020-03-02 10:55:35 +00:00
Benjamin Staffin
3a2790c342
services.mailman: RemainAfterExit so settings take effect properly
...
Prior to this fix, changes to certain settings would not be applied
automatically and users would have to know to manually restart the
affected service. A prime example of this is
`services.mailman.hyperkitty.baseUrl`, or various things that affect
`mailman3/settings.py`
2020-03-02 02:25:20 +00:00
obadz
c31958449f
Merge pull request #77405 from danielfullmer/zerotier-mac-fix
...
nixos/zerotierone: prevent systemd from changing MAC address
2020-03-01 18:49:00 -07:00
José Romildo Malaquias
74f5358f13
Merge pull request #66601 from eadwu/nvidia/prime-render-offload
...
nvidia: prime render offload
2020-03-01 14:28:57 -03:00
worldofpeace
0bbada3a07
Merge pull request #80451 from worldofpeace/pantheon-doc
...
nixos/pantheon: add docs
2020-03-01 16:56:55 +00:00
worldofpeace
21c971a732
Merge pull request #81118 from tilpner/gitdaemon-usercreation
...
nixos/git-daemon: only create git user if it will be used
2020-03-01 13:40:57 +00:00
Jörg Thalheim
1b92a08a71
Merge pull request #81297 from Mic92/sslh
...
nixos/sslh: don't run as nogroup
2020-03-01 12:18:09 +00:00
worldofpeace
3be04570e0
nixos/pantheon: add docs
2020-02-28 19:43:18 -05:00
Jörg Thalheim
9218a58964
nixos/sslh: don't run as nogroup
...
See #55370
2020-02-28 15:32:36 +00:00
Jörg Thalheim
ee2ea82a68
nixos/home-assistant: make config deep mergeable
...
This make it possible to split the home-assistant configuration
across multiple files and nix will merge the option in an intuitive
way.
2020-02-28 15:32:03 +00:00
WilliButz
68410b08be
nixos/codimd: update useCDN default to false
2020-02-28 14:36:46 +01:00
worldofpeace
76f4f6b95d
Merge pull request #81087 from lovesegfault/tlp-1.3.1
...
tlp: 1.2.2 -> 1.3.1
2020-02-27 19:43:14 +00:00
Bernardo Meurer
ee7becd918
nixos/tlp: revamp
2020-02-27 09:58:51 -08:00
Thomas Tuegel
d3e3cc1225
nixos/plasma5: Fix activation script when XDG_CONFIG_HOME is unset
...
Fixes #80713
2020-02-27 09:48:58 -06:00
Aaron Andersen
4d67db3101
Merge pull request #80849 from BBBSnowball/pull-load-imagick-once
...
nixos/nextcloud: avoid loading imagick extension more than once
2020-02-26 17:17:55 -05:00
Franz Pletz
2dff70f0f3
Merge pull request #80981 from bachp/nextcloud-x-frame-warning
...
nixos/nextcloud: prevent warning about missing X-Frame-Option
2020-02-26 17:37:38 +00:00
Vladimír Čunát
5f881209f9
nixos/kresd: never force extraFeatures = false
...
Fixes #81109 . Regressed in PR #78392 (26858063
2020-02-26 15:10:53 +01:00
tilpner
6df119a6ec
nixos/git-daemon: only create git user if it will be used
2020-02-26 15:04:36 +01:00
Martin Milata
9b0a9577f7
nixos/parsoid: enable systemd sandboxing
2020-02-25 01:32:31 +01:00
Martin Milata
3b27f4d945
nixos/parsoid: fix package name
...
Original package was removed in 2b8cde0ce2
2020-02-25 01:32:30 +01:00
Pascal Bach
119a7aae50
nixos/nextcloud: prevent warning about missing X-Frame-Option
2020-02-24 22:07:24 +01:00
Jörg Thalheim
ee08bd8dec
Merge pull request #80831 from Mic92/netdata
...
netdata: 1.19.0 -> 1.20.0
2020-02-24 17:24:19 +00:00
Jörg Thalheim
8cfd003295
stubby: configure cache directory
...
This is needed for local dnssec validation
2020-02-24 10:51:43 +00:00
Silvan Mosberger
6d92e54174
nixos/transmission: Allow others to read the directory
...
Directory mode 755 is standard for running services. Without this,
downloadDirPermissions doesn't have any use since other users can't even
look inside the main transmission directory
2020-02-24 08:03:21 +01:00
tobim
44a4a3839c
nixos/gdm: Fix pulseaudio tmpfiles structure ( #80274 )
...
* nixos/gdm: Fix pulseaudio tmpfiles structure
Fix the following startup failure of the sound service in the gdm
session that was introduced by #75893 :
```
Feb 16 11:44:15 qp pulseaudio[1432]: W: [pulseaudio] core-util.c: Failed to open configuration file '/run/gdm/.config/pulse//daemon.conf': Not a directory
Feb 16 11:44:15 qp pulseaudio[1432]: W: [pulseaudio] daemon-conf.c: Failed to open configuration file: Not a directory
Feb 16 11:44:15 qp systemd[1380]: pulseaudio.service: Main process exited, code=exited, status=1/FAILURE
Feb 16 11:44:15 qp systemd[1380]: pulseaudio.service: Failed with result 'exit-code'.
Feb 16 11:44:15 qp systemd[1380]: Failed to start Sound Service.
```
Co-authored-by: worldofpeace <worldofpeace@protonmail.ch>
2020-02-23 07:50:19 -05:00
worldofpeace
2442f99d40
Revert "Theming options for Gtk and Qt"
2020-02-22 20:42:27 -05:00
Benjamin Koch
db32158bbd
nixos/nextcloud: avoid loading imagick extension more than once
...
This avoids the following error message:
Module 'imagick' already loaded at Unknown#0
2020-02-23 00:40:49 +00:00
markuskowa
74dcd1c637
Merge pull request #80617 from ikervagyok/slurm
...
Slurm: improve RDMA capability
2020-02-22 17:33:47 +01:00
Michele Guerini Rocco
02bbaaddc8
Merge pull request #80758 from ikervagyok/wg
...
nixos/wireguard: fix wireguard service as well after it got upstreamed
2020-02-22 10:20:13 +01:00
Lengyel Balazs
50fb52d4e1
fix wireguard service as well after it got upstreamed.
2020-02-22 00:32:15 +01:00
Michele Guerini Rocco
802a528d38
Merge pull request #71079 from gnidorah/theming
...
Theming options for Gtk and Qt
2020-02-21 18:52:52 +01:00
gnidorah
1bd7ea84ad
nixos/qt5: rename to qt
2020-02-21 18:57:56 +03:00
Silvan Mosberger
368d84aafa
Merge pull request #80526 from serokell/yorickvp/fix-bk-agent-hooks
...
nixos/buildkite-agents: fix hooksDir assertion
2020-02-21 12:00:05 +01:00
Lengyel Balázs
dc71384f67
SLURM/NixOS: increase ulimit for IB/RDMA
2020-02-21 11:32:16 +01:00
Jörg Thalheim
1ddb140d95
Merge pull request #53033 from netixx/openvswitch-improved-systemd
...
openvswitch: better integration with systemd
2020-02-21 08:24:49 +00:00
Edward Tjörnhammar
9bab9e2ec6
nixos/i2pd: address #63103
...
As a comment to 1d61efb7f1
2020-02-19 13:15:28 +01:00
Yorick van Pelt
1b351f81f4
nixos/buildkite-agents: fix hooksDir assertion
2020-02-19 12:22:35 +01:00
David Wood
60a3d9dd6b
nixos/jirefeau: add services.jirafeau module
...
Signed-off-by: David Wood <david.wood@codeplay.com>
2020-02-18 09:37:44 -08:00
José Romildo Malaquias
0bcd9a5262
Merge pull request #79939 from romildo/upd.mate
...
mate: update to version 1.24.0
2020-02-18 11:15:10 -03:00
Jörg Thalheim
7448211021
Merge pull request #80032 from Mic92/redis
...
nixos/redis: add requirePassFile option
2020-02-17 21:28:04 +00:00
Julien Moutinho
f9be656873
shorewall: fix warnings due to types.loaOf being deprecated ( #80154 )
2020-02-16 12:53:49 +02:00
gtgteq
c359c6959a
nixos/postgresql: Change local auth method from ident to peer ( #80179 )
2020-02-15 23:55:35 +02:00
Maximilian Bosch
6c63107872
nixos/manual: fix build
2020-02-15 19:18:06 +01:00
Jörg Thalheim
466c1df3e2
Merge pull request #79266 from Mic92/knot
...
nixos/knot: add keyFiles option
2020-02-15 11:15:03 +00:00
José Romildo Malaquias
ba42fef9a7
nixos/mate: add yelp to systemPackages
...
Without this the Contents item in the Help menu of applications fails
to launch.
2020-02-14 18:31:52 -03:00
danbst
84535e0a47
let's not support group mode for versions pre-11.
...
The only fix is to change mode to 0700 before start, because otherwise postgresql
doesn't start, and error is non-obvious.
2020-02-14 19:16:34 +02:00
danbst
2c77c53487
Merge branch 'master' into postgresql_group
2020-02-14 19:00:52 +02:00
Michele Guerini Rocco
3d3392a492
Merge pull request #80090 from crabtw/master
...
nixos/pppd: fix build error
2020-02-14 10:50:47 +01:00
Michele Guerini Rocco
66b5b29977
Merge pull request #80076 from rnhmjoj/alsa
...
nixos/alsa: replace list by attrset in environment.etc
2020-02-14 09:40:41 +01:00
Jyun-Yan You
0f8d1ac47d
nixos/pppd: fix build error
2020-02-14 12:51:50 +08:00
rnhmjoj
f01bcccd25
nixos/unclutter: fix remaining typo
2020-02-14 01:28:03 +01:00
rnhmjoj
2ad680ac73
nixos/alsa: replace list by attrset in environment.etc
2020-02-14 01:17:18 +01:00
Florian Klink
7564f4faf3
Merge pull request #78360 from serokell/mkaito/caddy-restart
...
nixos/caddy: resync with upstream unit file
2020-02-13 23:26:11 +01:00
Symphorien Gibol
44fd320c0f
nixos/iodine: protect passwordFiles with toString
...
It should prevent copying the files to a store path
2020-02-13 21:30:14 +01:00
Jörg Thalheim
9cfe5a7a54
nixos/redis: add requirePassFile option
...
Avoids having the password in the nix store.
2020-02-13 17:06:35 +00:00
Jörg Thalheim
b300ccd7f3
Merge pull request #79961 from dtzWill/update/iwd-1.5
...
ell,iwd: 0.28, 1.5, minor touchups, drop tmpfiles snippet
2020-02-13 10:53:51 +00:00
rnhmjoj
9290e6e7ba
nixos/urxvtd: use new package name for rxvt-unicode
2020-02-13 09:33:58 +01:00
Ryan Mulligan
5a358eade8
Merge pull request #69125 from jslight90/mattermost-5.15
...
mattermost: 5.9.0 -> 5.15.0
2020-02-12 20:56:00 -08:00
Will Dietz
ac8a92543b
iwd: drop tmpfiles snippet, services use StateDirectory already
...
Originally added in [1], and iwd added StateDirectory to its services
in [2] -- 4 days later.
("StateDirectory wasn't used when tmpfile snippet was added to NixOS")
(nevermind git -> release delay)
[1] 6e54e9253a
2020-02-12 19:29:28 -06:00
Jörg Thalheim
e2ef8b439f
knot: add keyFiles option
...
This useful to include tsig keys using nixops without adding those
world-readable to the nix store.
2020-02-12 16:36:42 +00:00
Jörg Thalheim
88029bce39
knot: drop dynamic user
...
This makes it hard to include secret files.
Also using tools like keymgr becomes harder.
2020-02-12 16:34:10 +00:00
Ilya Fedin
f7768c939a
nixos/display-managers: Add DesktopNames parameter to generated desktop session files
...
Some display managers (e.g. SDDM) set the XDG_CURRENT_DESKTOP variable accroding to this parameter.
If this variable is not defined, there will be some problems (e.g. MATE doesn't have icons on the desktop).
Fixes https://github.com/NixOS/nixpkgs/issues/71427
2020-02-12 07:00:39 +04:00
Michele Guerini Rocco
019b637fb1
Merge pull request #79747 from mmilata/fix-mangled-usernames
...
nixos: fix bunch of mangled usernames
2020-02-10 18:21:31 +01:00
Thomas Tuegel
fb098ea543
Merge pull request #79744 from ttuegel/bug--plasma-5.17-ports
...
nixos/plasma5: Port initial configurations from Plasma 5.16
2020-02-10 11:08:23 -06:00
Martin Milata
d99808c720
nixos/supybot: fix username
...
Broken in 1d61efb7f1
2020-02-10 17:56:51 +01:00
Martin Milata
5d3d3eac8b
nixos/statsd: fix username
...
Broken in 1d61efb7f1
2020-02-10 17:56:35 +01:00
Martin Milata
17c72ef75f
nixos/heapster: fix username
...
Broken in 1d61efb7f1
2020-02-10 17:55:46 +01:00
Yorick van Pelt
e242eccb0b
nixos/buildkite-agents: update release notes
2020-02-10 13:36:30 +01:00
Yorick van Pelt
f003810989
nixos/buildkite-agents: support multiple buildkite agents
2020-02-10 13:35:14 +01:00
Kevin Rauscher
05b4fe20a7
mopidy: update to python3
...
mopidy: 2.3.1 -> 3.0.1
mopidy-iris: 3.43.0 -> 3.44.0
mopidy-spotify: 3.1.0 -> 4.0.1
pykka: 1.2.0 -> 2.0.1
2020-02-10 09:53:13 +01:00
Silvan Mosberger
637bb9fa98
Merge pull request #72060 from lopsided98/sanoid-init
...
sanoid: add package, NixOS module and test
2020-02-10 01:28:41 +01:00
Silvan Mosberger
6169eef798
Merge pull request #78024 from wamserma/minidlna-interval
...
minidlna: provide configuration option for announce interval
2020-02-10 01:25:47 +01:00
Silvan Mosberger
b9d7f1fe24
Merge pull request #65397 from mmilata/sympa
...
sympa: init at 6.2.52 + NixOS module
2020-02-10 01:23:45 +01:00
Ben Wolsieffer
7684537e33
nixos/sanoid, nixos/syncoid: init module and test
2020-02-10 01:12:39 +01:00
Maximilian Bosch
c2f2366f5c
Merge pull request #79485 from Ma27/grocy
...
grocy: init at 2.6.0
2020-02-09 23:11:46 +01:00
Maximilian Bosch
13f7b75553
nixos/grocy: init module
...
Co-authored-by: elseym <elseym@me.com>
2020-02-09 21:55:27 +01:00
worldofpeace
8396961c9c
Merge pull request #79300 from jtojnar/default-wm-fix
...
nixos/services.xserver: Fix legacy options for default wm without dm
2020-02-08 21:28:14 -05:00
