Franz Pletz
3ab45f4b36
treewide: use boolToString function
2017-04-11 18:18:53 +02:00
Benjamin Staffin
47a5f9acee
nixos: Add nm-openvpn to the networkmanager group
...
This is to satisfy the polkit restriction limiting
org.freedesktop.NetworkManager.* dbus messages to members of that
group.
Should help with #24806
2017-04-10 22:41:55 -04:00
Aneesh Agrawal
8f4d778509
radicale: Add aneeshusa as maintainer
2017-04-10 20:04:17 -04:00
Aneesh Agrawal
769b991be6
openssh: 7.4p1 -> 7.5p1
...
Release notes are available at https://www.openssh.com/txt/release-7.5 .
Mostly a bugfix release, no major backwards-incompatible changes.
Remove deprecated `UsePrivilegeSeparation` option,
which is now mandatory.
2017-04-10 19:39:22 -04:00
Nikolay Amiantov
c8c340b05a
tlp service: mask systemd-rfkill
...
Fixes #24737 .
2017-04-11 02:09:29 +03:00
Franz Pletz
f1f9020224
crowd service: fix secure sso cookies
...
Crowd didn't detect a secure connection before.
2017-04-10 15:39:37 +02:00
Franz Pletz
4f0dd2f746
prometheus service: add scrapeConfigs.params option
2017-04-10 14:31:27 +02:00
pngwjpgh
773c456ef4
networkmanager: fix dispatcher scripts ( #24507 )
...
networkmanager used `source` to mean `text` and wrote dispatcher scripts with the default mode (0666), which means networkmanager wouldn't call them.
2017-04-09 13:14:04 +01:00
Bas van Dijk
01a8de97eb
avahi-daemon: refactored using some abstraction
2017-04-09 11:18:53 +02:00
Bas van Dijk
ecf03368f8
bepasty: add secretKeyFile option
...
This gives users the option to store secrets outside the
world-readable Nix store.
2017-04-08 19:32:19 +02:00
Michael Raskin
861726579b
Merge pull request #24008 from phile314/slimserver
...
slimserver: Init at 7.9.0 (pkg + module)
2017-04-08 17:43:41 +02:00
Aristid Breitkreuz
4ca22140d9
Merge pull request #24669 from gnidorah/master2
...
autorandr: 53d29f9 -> 855c18b and module
2017-04-08 12:17:57 +02:00
Sorin Iclanzan
b41dd2fae0
nixos/compton: fixup option descriptions ( #24724 )
...
* Fix `fadeExclude` description.
* Fix typo in `shadowExclude`.
2017-04-08 05:04:55 +01:00
Peter Simons
67d735e8df
Merge pull request #23409 from florianjacob/avahi-point-to-point-interfaces
...
avahi-daemon service: Add option to enable point-to-point interfaces.
2017-04-07 12:35:05 +02:00
Jaka Hudoklin
43880af56f
Merge pull request #23135 from ljli/earlyoom-service-init
...
earlyoom service: init
2017-04-06 23:31:28 +02:00
Alexey Shmalko
b8e71f2969
Merge pull request #24651 from edanaher/add-fvwm-window-manager
...
fvwm module: init; now fvwm can be used as an xserver.windowManager
2017-04-06 16:29:28 +03:00
gnidorah
ca733de964
autorandr: 53d29f9 -> 855c18b and module
2017-04-06 13:28:40 +03:00
Evan Danaher
7a38b0858f
fvwm module: init; now fvwm can be used as an xserver.windowManager
2017-04-05 11:12:46 -04:00
Profpatsch
a1e6176cbf
modules/searx: fix configFile type
2017-04-04 20:40:31 +02:00
Piotr Bogdan
c91c3209f3
unclutter: Fix default value of $DISPLAY
2017-04-03 18:41:11 +01:00
Eelco Dolstra
80b40fdf03
sshd.nix: Alternative fix for #19589
...
AFAICT, this issue only occurs when sshd is socket-activated. It turns
out that the preStart script's stdout and stderr are connected to the
socket, not just the main command's. So explicitly connect stderr to
the journal and redirect stdout to stderr.
2017-03-31 16:18:58 +02:00
Eelco Dolstra
4e79b0b075
Revert "sshd: separate key generation into another service"
...
This reverts commit 1a74eedd07
2017-03-31 16:18:58 +02:00
sternenseemann
fd3a99633b
2bwm: init at 0.2
2017-03-30 19:21:27 +02:00
Robin Gloster
a79891f6b2
sitecopy: remove
2017-03-30 12:06:09 +02:00
Tim Steinbach
eb70ae34b1
Merge pull request #24254 from bachp/gitlab-runner-9
...
Upgrade Gitlab Runner
2017-03-28 18:21:35 -04:00
Pascal Bach
8373124202
gitlab-runner: make v1 runner available
...
gitlab-runner 9.0.0 is only compatible with gitlab >= 9.0
gitlab-runner1 1.11.1 is only compatible with gitlab < 9.4
2017-03-28 21:02:43 +02:00
Bas van Dijk
6f2eca1744
wordpress: replace the dbPassword option with dbPasswordFile ( #24146 )
...
We shouldn't force users to store passwords in the world-readable Nix store.
2017-03-28 17:38:16 +02:00
Robin Gloster
d1228f95e9
Revert "Revert "gdm module: only make xserver args overrideable""
...
This reverts commit 4e57e7f7c6
2017-03-27 17:20:56 +02:00
Edward Tjörnhammar
b35d22b30c
radarr: init at 0.2.0.553 + nixos module
2017-03-25 21:19:55 +01:00
Edward Tjörnhammar
2db5c5cfe2
jackett: init at 0.7.1197 + nixos module
2017-03-25 21:19:44 +01:00
Edward Tjörnhammar
958668ab80
nixos, openafs-client: correct serviceConfig
2017-03-25 21:19:34 +01:00
Richard Zetterberg
dc10688edb
nftables: adds information regarding nftables and Docker ( #24326 )
2017-03-25 16:34:02 +01:00
Nikolay Amiantov
417844b596
phpfpm service: don't use private /tmp
...
This breaks local PostgreSQL connections.
2017-03-25 14:52:44 +01:00
Leon Isenberg
db30cff500
earlyoom service: init
2017-03-24 23:16:16 +01:00
Vladimír Čunát
455ce3528c
Merge branch 'staging'
2017-03-24 21:07:55 +01:00
Joachim Fasting
f815a7697e
dnscrypt-proxy service: systemd notification under apparmor
2017-03-24 14:37:44 +01:00
Robin Gloster
4e57e7f7c6
Revert "gdm module: only make xserver args overrideable"
...
This reverts commit a5aa926902
2017-03-24 10:35:20 +01:00
Robin Gloster
c2b9b8031f
Merge pull request #24026 from benley/use-xkbDir
...
nixos: Use xkbDir consistently so it has an effect
2017-03-23 18:02:26 +01:00
Vladimír Čunát
c1a9dc3d37
Merge branch 'master' into staging
2017-03-23 13:31:28 +01:00
Jörg Thalheim
b2ba188656
Merge pull request #24182 from ndowens/munin
...
munin: 2.0.30 -> 2.0.33; for CVE-2017-6188
2017-03-22 19:21:02 +01:00
Piotr Bogdan
a4b4cd0710
lightdm-greeters service: add extraConfig option ( #24135 )
2017-03-22 15:33:22 +01:00
Thomas Tuegel
a96e047b31
nixos/sddm: replace themes option with package option
2017-03-22 07:44:55 -05:00
Thomas Tuegel
7ca62935bb
nixos/plasma5: do not include extra-cmake-modules in sddm
...
Fixes #24126 .
2017-03-22 07:44:55 -05:00
Joachim Fasting
95eaa3aec3
nixos/tor: add missing option type
2017-03-22 02:27:23 +01:00
Jörg Thalheim
b4169bb8dd
munin: fix tests by replacing cron with systemd timer
2017-03-22 00:16:36 +01:00
Eelco Dolstra
78bb734452
nix-daemon.nix: Make the 1.12 check less strict
2017-03-21 18:48:35 +01:00
Nikolay Amiantov
6555ec03c3
udev module: filter duplicate udev paths
...
Fixes #24174
2017-03-21 20:22:27 +03:00
Nikolay Amiantov
d3e2957c90
octoprint: 1.3.1 -> 1.3.2
...
Fix startup wizard and cleanup dependencies.
2017-03-21 20:22:27 +03:00
Domen Kožar
02129a8788
Merge pull request #23672 from edanaher/nginx-alias
...
Nginx alias directive
2017-03-21 15:04:02 +01:00
Franz Pletz
4bd12fa7b2
gitlab module: explicitely create pages shared path
...
Fixes creation of backups.
2017-03-21 13:16:51 +01:00
Frederik Rietdijk
94eb74eaad
Merge remote-tracking branch 'upstream/master' into HEAD
2017-03-21 13:04:37 +01:00
Franz Pletz
fb50cde71e
nixos/treewide: systemd.time is in manvolume 7
...
cc #23396
2017-03-21 08:28:53 +01:00
Robin Gloster
c808801937
nix-daemon: fix autoOptimiseStore option
2017-03-21 02:17:09 +01:00
Franz Pletz
295a824abc
Merge pull request #21866 from pjones/pjones/rmilter
...
rmilter: Fix a couple of bugs
2017-03-20 20:50:56 +01:00
Franz Pletz
c13922f012
nginx: explicitly use stable version
...
Also updates the documention of the NixOS option `services.nginx.package`
that upstream recommends using the mainline version instead.
Fixes #21665 .
2017-03-20 20:04:09 +01:00
Eelco Dolstra
337f731c2b
Merge pull request #24134 from pstn/nix-auto-optimise
...
Added option and description for nix store auto-optimisation.
2017-03-20 20:01:48 +01:00
Philipp Steinpass
68c6d90417
Added option and description for nix store auto-optimisation.
2017-03-20 19:09:19 +01:00
Franz Pletz
fff8cc79df
Merge pull request #23279 from mbbx6spp/make-nginx-module-less-gross
...
nginx service: add commonHttpConfig option
2017-03-20 19:03:20 +01:00
Thomas Tuegel
1b0d9e9ae6
Merge pull request #23819 from ttuegel/freetype
...
FreeType 2.7.1 and Fontconfig defaults
2017-03-20 11:43:50 -05:00
Thomas Tuegel
d709cdd829
nixos/plasma5: do not set kimpanel as default IBus panel
...
kimpanel does not show installed IBus engines or allow switching input
methods. kimpanel does show configured keyboard layouts through kxkb, so I
believe there is some problem communicating with IBus. No error messages are
produced in the log and I have been unable to discover the cause. I have no
intention of continuing to work on kimpanel at this time, so it should be
disabled. The GTK+ 3-based panel provided by IBus is perfectly serviceable in
the interim.
2017-03-20 09:31:05 -05:00
Thomas Tuegel
4837aba1ee
Merge pull request #24101 from romildo/fix.lumina
...
lumina: fix kwindowsystem and oxygen-icons5 attributes
2017-03-20 09:00:25 -05:00
Kristoffer Søholm
f9e8ef7e6d
nixos/bluetooth: add extraConfig option ( #23427 )
2017-03-20 14:28:02 +01:00
romildo
501d9c7186
lumina: fix kwindowsystem and oxygen-icons5 attributes
2017-03-19 21:46:35 -03:00
Will Dietz
cb73cb9e62
neo4j service: neo4j-wrapper is deprecated, merge into neo4j.conf
2017-03-19 16:56:53 -05:00
Will Dietz
515fc22263
neo4j service: fix package installed into env to match running service
2017-03-19 16:56:52 -05:00
Michael Walker
b29bc8d41c
vsftpd: Expose the no_anon_password flag.
2017-03-19 01:53:29 +00:00
Benjamin Staffin
b79c284952
nixos: Use xkbDir consistently so it has an effect
2017-03-18 17:56:38 -04:00
Daiderd Jordan
a48df6fba6
Merge pull request #22508 from matthewbauer/remove-emacs24macport
...
emacs24macport: remove
2017-03-18 22:19:20 +01:00
Philipp Hausmann
c904e68e53
Remove static uid/gid
2017-03-18 13:54:39 +01:00
Vladimír Čunát
742b120ddc
Merge branch 'master' into staging
...
Nontrivial rebuilds from master, again :-/
2017-03-18 11:00:31 +01:00
Will Dietz
63f1a14ae5
neo4j service: increase file limit, per warning emitted at startup ( #23961 )
2017-03-18 01:03:09 +01:00
Joachim F
9a976c09ba
Merge pull request #23963 from dtzWill/feature/irkerd
...
irker: init at 2017-02-12
2017-03-18 00:35:32 +01:00
Franz Pletz
9536169074
nixos/treewide: remove boolean examples for options
...
They contain no useful information and increase the length of the
autogenerated options documentation.
See discussion in #18816 .
2017-03-17 23:36:19 +01:00
Franz Pletz
00239ce8e9
rmilter/rspamd service: tighten unix socket permissions
2017-03-17 23:01:24 +01:00
Franz Pletz
8ab2d2ee27
rmilter service: support only one socket
2017-03-17 23:00:34 +01:00
Peter Jones
4defb788eb
rmilter service: Fix a couple of bugs
...
* The module uses `stringSplit` but it should be `splitString`
* `rmilter` doesn't actually support binding to multiple sockets.
Therefore, bind to the last one specified if `socketActivation` is
`false`.
I also believe there is a bug in this module related to systemd
`ListenStream`. If `socketActivation` is true, Postfix gets
connection timeouts trying to connect to one of the `ListenStream`
inet addresses. I don't know enough about `ListenStream` passing
connections on to `fd:3` to understand what's going on.
These changes are in production (with `socketActivation = false`) via NixOps.
2017-03-17 20:15:48 +01:00
Joachim F
01f8e2161c
Merge pull request #23962 from oxij/nixos/tor-sec
...
nixos: tor: usability and security fixes
2017-03-17 16:14:41 +01:00
Pascal Bach
3728143cbc
prometheus-unifi-exporter: init at 0.4.0
2017-03-17 15:41:22 +01:00
Will Dietz
2807d75dca
irkerd service: init
2017-03-17 09:16:32 -05:00
Jan Malakhovski
a04782581a
nixos: torify: disable by default, add some documentation as of why
...
This `tsocks` wrapper leaks DNS requests to clearnet, meanwhile Tor comes with
`torsocks` which doesn't.
Previous commits to this file state that all of this still useful somehow.
Assuming that it's true, at least let's not confuse users with two different tools
and don't clash with the `tsocks` binary from nixpkgs by disabling this by default.
2017-03-16 21:06:12 +00:00
Jan Malakhovski
6d25f77a64
nixos: tor: add enableGeoIP
2017-03-16 21:06:12 +00:00
Daiderd Jordan
00ed0f792e
Merge pull request #22897 from timor/couchdb-2.0.0
...
couchdb: add support for version 2.0.0
2017-03-16 22:03:32 +01:00
Philipp Hausmann
ffa0a87774
Remove unused options
2017-03-16 20:51:06 +01:00
Philipp Hausmann
0bd6fdcfc4
Cosmetics
2017-03-16 20:50:10 +01:00
Philipp Hausmann
45d8d6ebeb
Add slimserver nixos module
2017-03-16 20:43:09 +01:00
Profpatsch
6da60bb101
modules/mlmmj: fix a typo in listaddress folder
2017-03-16 18:47:11 +01:00
Graham Christensen
e4c0613470
Merge pull request #23674 from c0bw3b/sec/jboss7
...
JBoss AS: list known vulnerability
2017-03-15 17:33:27 -04:00
Vladimír Čunát
e99bc64552
Merge branch 'master' into staging
...
More larger rebuilds from master, unfortunately.
2017-03-15 19:09:56 +01:00
Pascal Bach
a8cca7037e
prometheus-fritzbox-exporter: init at 1.0
2017-03-15 17:22:36 +01:00
Bart Brouns
bb3ef8a95c
physlock: fix issue 21935
2017-03-15 11:47:02 +01:00
Benjamin Staffin
98e4c5dd45
Merge pull request #23861 from benley/nixos-manual-launcher
...
nixos: Add a menu launcher for the NixOS manual
2017-03-15 04:37:16 -04:00
Joachim Fasting
f122f0147b
nixos/dnscrypt-proxy: log resolver list verification failure
...
Otherwise, the service unit just fails for no discernable
reason. Verifcation failure is bad so it ought to be easily
discoverable.
2017-03-15 01:13:08 +01:00
Joachim Fasting
de15e7894b
nixos/dnscrypt-proxy: get resolver list from github
...
The list has disappeared from its ordinary location at
download.dnscrypt.org.
2017-03-15 01:12:46 +01:00
Joachim Fasting
472002f216
nixos/dnscrypt-proxy: remove the resolverList option
...
This option was initially added to make it easier to use an
up-to-date list, but now that we always use an up-to-date list
from upstream, there's no point to the option.
From now on, you can either use a resolver listed by dnscrypt
upstream or a custom resolver.
2017-03-15 01:12:43 +01:00
Joachim Fasting
540740598e
nixos/dnscrypt-proxy: add example of how to use the cache plugin
2017-03-15 01:12:39 +01:00
Joachim Fasting
719813caf6
nixos/dnscrypt-proxy: replace unimportant options with extraArgs
...
Removes tcpOnly and ephemeralKeys: reifying them as nixos
options adds little beyond improved discoverability. Until
17.09 we'll automatically translate these options into extraArgs
for convenience.
Unless reifying an option is necessary for conditional
computation or greatly simplifies configuration/reduces risk of
misconfiguration, it should go into extraArgs instead.
2017-03-15 01:12:37 +01:00
Joachim Fasting
9325c3a616
nixos/dnscrypt-proxy: simplify module logic related to apparmor
2017-03-15 01:12:35 +01:00
Joachim Fasting
83052ef9db
nixos/dnscrypt-proxy: support reload
2017-03-15 01:12:29 +01:00
Bas van Dijk
308c09d41f
wordpress: security upgrade: 4.7.2 -> 4.7.3 & other improvements ( #23837 )
...
* Moved the wordpress sources derivation to the attribute pkgs.wordpress. This
makes it easier to override.
* Also introduce the `package` option for the wordpress virtual host config which
defaults to pkgs.wordpress.
* Also fixed the test in nixos/tests/wordpress.nix.
2017-03-14 16:11:51 +01:00
Benjamin Staffin
638e1b8243
nixos: Add a menu launcher for the NixOS manual
2017-03-14 06:04:43 -04:00
