b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
438963 commits 2 branches 0 tags 3.3 GiB
Commit graph

30886 commits

Author SHA1 Message Date
Sandro Jäckel 8a81ad8fda
nixos/statsd: add missing module import 2022-12-21 20:15:58 +01:00
Naïm Favier 3a8fd0ef47
nixos/installation-cd-minimal: disable noXlibs 
Causes a lot of uncached builds for a negligible decrease in size (822 →
821 MiB currently).
 2022-12-21 15:19:37 +01:00
Domen Kožar bcc8d11f01
Merge pull request #206951 from MercuryTechnologies/gabriella/macos-builder 
darwin.builder: init
 2022-12-21 12:20:12 +00:00
pennae 4cdcad6b26 nixos/firefox-syncserver: remove unnecessary service option 
Stderr does not exist as a systemd option (StandardError would've been
correct), but since "journal" is the default by association this mistake
never had any effect. just remove the key entirely.
 2022-12-21 10:29:25 +01:00
pennae 13d725908c syncstorage-rs: 0.12.5 -> 0.13.1 
this includes a module update because the package update breaks the
module. would rather not break system bisection if possible.
 2022-12-21 10:29:25 +01:00
Thomas Tuegel cc620a6e59
Merge pull request #203863 from samueldr/fix/plamo-misc-issues 
Plasma Mobile: Minor fixes
 2022-12-20 22:43:21 -06:00
figsoda a0a6d4da33 nixos/git: allow lists for config to keep things in order 2022-12-20 21:54:36 -05:00
Maximilian Bosch f37f1de422
Merge pull request #204537 from squalus/grafana-role 
nixos/grafana: add Admin to valid auto_assign_org_role values
 2022-12-20 21:14:47 +01:00
Sandro 9c624f5879
Merge pull request #203117 from sikmir/vmtools 
vmTools: update current maintained debian versions
 2022-12-20 15:51:50 +01:00
Thomas Watson af25692214 nixos/stage-1: Examine binaries for libraries in a consistent order 
To reduce size, stage 1 (the initrd) is populated by copying specific
binaries in, then copying the libraries specifically needed by those
binaries. `patchelf` is then used to make the binaries search in the
directory where these libraries are copied to instead of their original
store paths.

Some filesystems (e.g. ZFS) do not guarantee that copying the same files
in the same order into a given directory will result in `find` returning
them in any particular order (though the order appears consistent so
long as the directory is not modified).

Therefore, when the binaries are scanned for libraries to copy in, they
might be scanned in a different order each time the derivation is built.
If two binaries need two different libraries with the same name, then a
different instance of the library might be copied in first, changing the
derivation contents and breaking reproducibility.

This turns out to be the case with `libudev.so.1` from both `systemd`
(needed by e.g. `mdadm`) and `systemdMinimal` (needed by e.g.
`dmsetup`). This issue is fixed by sorting the list of binaries to be
scanned instead of relying on filesystem order so that the same instance
always gets seen and copied first.

Both before this change (at least on ext4) and after this change
(without any options that affect stage 1), this is the `libudev.so.1`
from `systemdMinimal` by way of `dmsetup`. Whether this is appropriate
and how much the two different systemd configurations and udev libraries
need to be involved is a topic left for future work.
 2022-12-20 08:24:19 +01:00
Bobby Rong 5b8e77a308
nixos/cinnamon: install nemo-with-extensions 2022-12-20 10:59:37 +08:00
Tavi 705392e011 nixos/services.tinc: Fix whitespace 
Fix indentation for previous commit
 2022-12-19 21:19:02 -05:00
Tavi ca591e7008 nixos/services.tinc: Add all generated /etc/ files to reloadTriggers 
Bug fix for issue #66431. Adds all files created as a result of
hostSettings configuration to the created service's reloadTriggers,
or to restartTriggers if the version of tinc isn't 1.1pre or later.
 2022-12-19 20:35:00 -05:00
Gabriella Gonzalez edd1cbf5d4 darwin.builder: init 
Fixes https://github.com/NixOS/nixpkgs/issues/108984

This originates from:

https://github.com/Gabriella439/macos-builder

… which in turn originates from:

https://github.com/YorikSar/nixos-vm-on-macos
 2022-12-19 17:03:45 -08:00
Sandro bf46d7b626
Merge pull request #172084 from priegger/prometheus-statsd-exporter 2022-12-19 23:16:02 +01:00
Olaf Tomalka 813a0ef809 lighthouse: fix validator service not setting arguments properly 2022-12-19 16:41:43 -05:00
Sandro ac210fc15c
Merge pull request #206441 from SuperSandro2000/msmtp 2022-12-19 22:28:07 +01:00
Sandro ace7950a79
Merge pull request #206454 from SuperSandro2000/libextractor 2022-12-19 22:27:31 +01:00
Guillaume Girol 92dbac3199
Merge pull request #205561 from symphorien/nginx-conf-validate 
nixos/nginx: validate config at build time
 2022-12-19 19:52:33 +00:00
Sebastian Sellmeier d3c6ea9d46
greetd: use service-type 'idle' in systemd-service to avoid overlapping systemd-output 2022-12-19 18:22:16 +01:00
Jörg Thalheim 9bf4ec6909
Merge pull request #206645 from Mic92/nix-ld 
nixos/nix-ld: set NIX_LD by default
 2022-12-19 16:26:02 +00:00
Jörg Thalheim 4ce47012a6 nixos/nix-ld: set NIX_LD by default 2022-12-19 17:06:41 +01:00
Artturi 1c387ed1a6
Merge pull request #206709 from SuperSandro2000/mandb-misc 
nixos/man-db: use nativeBuildInputs
 2022-12-19 17:55:46 +02:00
Jonas Heinrich a9e3b1c0f2 nixos/usbmuxd: Ability to change package 2022-12-19 08:14:07 -05:00
Franz Pletz 6f8f1b0454
Merge pull request #205865 from DeeUnderscore/fix/grafana-socket 2022-12-19 12:04:22 +01:00
Sandro Jäckel 26f704b545
treewide: use nativeBuildInputs with runCommand instead of inlining 2022-12-18 23:36:40 +01:00
Anderson Torres c7499150c2
Merge pull request #206698 from linsui/firefox 
nixos/firefox: add languagePacks config
 2022-12-18 19:01:45 -03:00
dev-null-undefined 1cd6b0681e
nixos/i3lock: i3lock program with u2fSupport option 
i3lock program with option to enable u2fAuth.
 2022-12-18 21:31:06 +01:00
figsoda a6a225e33c
Merge pull request #206722 from SuperSandro2000/sourcehut-nix 
nixos/sourcehut: resolve deprecated setting
 2022-12-18 13:55:43 -05:00
Valentin Gagarin f782da699e
Merge pull request #206646 from figsoda/typos 2022-12-18 18:27:57 +01:00
figsoda d48c2fd1ca
nixos/pgpkeyserver-lite: fix typo 
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
 2022-12-18 11:35:23 -05:00
Sandro Jäckel 92c94a946f
nixos/sourcehut: resolve deprecated setting 2022-12-18 16:53:49 +01:00
Sandro Jäckel a6fa6abb15
nixos/man-db: use nativeBuildInputs 2022-12-18 14:19:36 +01:00
linsui 8153ba84ca nixos/firefox: add languagePacks config 2022-12-18 20:48:49 +08:00
Vincent Bernat fc39b5ecc8 nginx: make global redirect vhost option accept exceptions 
By moving the return into a location directive, one can provide
exceptions by adding locations. This is similar to what the forceSSL
option does.
 2022-12-18 12:21:27 +01:00
figsoda 6bb0dbf91f nixos: fix typos 2022-12-17 19:31:14 -05:00
Raito Bezarius b19612cb24 nixos/services/dolibarr: decouple nginx and let other web servers be used 2022-12-18 01:05:53 +01:00
Robert Hensing cf150c53f1
Merge pull request #200724 from JonathanLorimer/allow-configuration-of-roles 
services.postgresql: Allow configuration of user roles in ensureUser
 2022-12-18 00:40:57 +01:00
Lucas Savva c9a5bf4a38
nixos/acme: Increase number of retries in testing 
Helps to avoid failures in Hydra when the host server starts
the web server too slowly.
 2022-12-17 21:12:13 +00:00
Julien Moutinho 15046139d5 nixos/mmsd: init 2022-12-17 17:36:43 +01:00
Naïm Favier 723eb8d9b8
Merge pull request #205479 from IzumiRaine/borgbackup-patterns 2022-12-17 17:00:02 +01:00
Naïm Favier a23134f464
Merge pull request #205311 from LoveIsGrief/nixos-rebuild-I-option-documentation 2022-12-17 16:58:23 +01:00
Ryan Lahfa af6ea430f4
Merge pull request #201119 from Enzime/remove-tailscale-warning 
nixos/tailscale: Add `useRoutingFeatures` option
 2022-12-17 15:44:07 +01:00
Jakub Sokołowski c70f047315
nixos/zfs: assert no force import with hibernation 
According to a ZFS issue about hibernation causing data corruption:
https://github.com/openzfs/zfs/issues/12842

The way this happens is if the system force imports a pool that was
suspended during hibernation. I've had this happen twice on NixOS and
I'd like to avoid having this happen again, to me or others.

To do this I've added an assertion that makes sure you can't have
`forceImportRoot` or `forceImportAll` enabled with `allowHibernation`.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
 2022-12-17 13:11:23 +01:00
Michael Hoang 68e514ed1c nixos/tailscale: Add useRoutingFeatures option 2022-12-17 22:38:14 +11:00
Vladimír Čunát 0ba3487fc6
Merge #205270: staging-next 2022-12-09 2022-12-17 10:11:16 +01:00
Jörg Thalheim 2b7fb2fe8e
Merge pull request #204785 from corngood/vaapi-docs 
nixos/doc/manual: add chapter on VA-API
 2022-12-17 08:53:27 +00:00
Jörg Thalheim 668a2b2f33
Merge pull request #172237 from DeterminateSystems/bootspec-rfc 
Support external bootloader backends (RFC-0125)
 2022-12-17 08:35:53 +00:00
github-actions[bot] 05ca3d8285
Merge master into staging-next 2022-12-17 06:01:30 +00:00
AndersonTorres 4a194173b0 nixos/katriawm: add module 2022-12-17 00:13:39 -03:00
AndersonTorres 4ee04d0f1a module-list: put in ascii-betical ordering 2022-12-17 00:13:38 -03:00
Raito Bezarius aac4134f43 nixos/tests/bootspec: add EFI support for GRUB test 2022-12-16 17:15:59 -08:00
github-actions[bot] 30b97b0e83
Merge master into staging-next 2022-12-17 00:02:17 +00:00
Sandro d154d50e2c
Merge pull request #200856 from aacebedo/aacebedo/streamdeck-ui_package_option 2022-12-17 00:46:28 +01:00
Ryan Lahfa 4428f9f5e9
Merge pull request #198239 from jacobgreenleaf/jacobg-borg-inhibit 
nixos/borgbackup: Add option for inhibiting sleep
 2022-12-17 00:45:10 +01:00
Ryan Lahfa 810e9ccfda
Merge pull request #200720 from kaldonir/dynamic-motd 
pam: Allow backing the MOTD with a file
 2022-12-17 00:35:08 +01:00
Sandro 528a316b31
Merge pull request #205246 from Frostman/unpoller-2.4.0 2022-12-16 22:51:06 +01:00
Sandro c338bf3244
Merge pull request #205712 from devusb/atuin-server 2022-12-16 22:38:35 +01:00
Sandro Jäckel c01a28d021
nixos/no-x-libs: add libextractor 2022-12-16 22:06:00 +01:00
Vladimír Čunát 5bfe30aafa
Merge branch 'master' into staging-next 2022-12-16 21:58:10 +01:00
Sandro Jäckel debcf570c6
nixos/no-x-libs: add msmtp 2022-12-16 20:16:10 +01:00
Nikolay Korotkiy 4e2ce56d6f
Merge pull request #206419 from peperunas/miniflux-package 
miniflux: Add package option
 2022-12-16 23:11:12 +04:00
github-actions[bot] ac36665726
Merge master into staging-next 2022-12-16 18:01:38 +00:00
Bernardo Meurer bf4294b338
Merge pull request #203872 from mikepii/roon-server-id-dir 2022-12-16 14:37:06 -03:00
Frank Moda e27e857def nixos/cloudflared: guard config with enable flag 2022-12-16 11:30:44 -05:00
Giulio De Pasquale b2742248e8
miniflux: Add package option 2022-12-16 16:11:40 +01:00
Manuel Bärenz 3479b87182
nixosTests.mastodon: Put script in separate file 2022-12-16 16:19:41 +03:00
Izorkin 883a56c0cc
nixos/tests/mastodon: add test with external services 2022-12-16 16:19:41 +03:00
Izorkin 8e14bf10c2
nixos/mastodon: update database configuration 2022-12-16 16:19:39 +03:00
Izorkin e2cebf2134
nixos/mastodon: fix init db on remote postgresql 2022-12-16 16:14:39 +03:00
Vladimír Čunát e6cd929c5e
Merge branch 'master' into staging-next 2022-12-16 11:09:31 +01:00
Naïm Favier dc644c312f
Merge pull request #206061 from ncfavier/nginx-duplicate-modules 2022-12-16 10:09:19 +01:00
Morgan Helton a935888d45 nixos/atuin: init module 2022-12-15 21:07:15 -06:00
Naïm Favier 6c61c436cf
nginx: detect duplicate modules 
Nginx breaks at runtime when duplicate modules are added. To detect
this, add a `name` key to all modules.

Also remove the outdated modsecurity v2 module and unify `modsecurity`
and `modsecurity-nginx`.
 2022-12-16 01:57:14 +01:00
happysalada 60797a3bfe surrealdb: add package option 2022-12-15 19:52:28 -05:00
github-actions[bot] b9ac6ee4d9
Merge master into staging-next 2022-12-16 00:02:17 +00:00
Sandro 78d53eadca
Merge pull request #201985 from Shawn8901/prometheus_web_config 2022-12-15 23:18:55 +01:00
Artturin 05a2dfd674 lib.replaceChars: warn about being a deprecated alias 
replaceStrings has been in nix since 2015(nix 1.10)

so it is safe to remove the fallback

d6d5885c15
 2022-12-15 22:25:51 +02:00
Markus Napierkowski e6c6e41649 release-notes: add an entry for users.motdFile 2022-12-15 11:54:26 +01:00
Markus Napierkowski 192ae663cc nixos/pam: allow backing the motd with a file 2022-12-15 11:54:26 +01:00
Shawn8901 6e530b9eda prometheus: Adds an option for web.config.file which can specity settings including authorization. 2022-12-15 10:14:42 +01:00
Shawn8901 470247d433 prometheus: Use yaml format generator instaed json for prometheus.yml 
Additionally remove an unused variable
 2022-12-15 10:11:25 +01:00
github-actions[bot] 58a71457f7
Merge master into staging-next 2022-12-15 00:02:26 +00:00
Sandro b5f35b1c85
Merge pull request #205399 from SuperSandro2000/fix-avahi 2022-12-14 23:34:12 +01:00
Florian Klink 03cf14a56f
Merge pull request #206042 from flokli/assertion-hsphfpd-wireplumber 
nixos/wireplumber: assert hsphfpd to be disabled
 2022-12-14 22:02:12 +00:00
Jörg Thalheim 92b32a8a7c
Merge pull request #205895 from jakubgs/transmission/add-package-opt 
transmission: add package option
 2022-12-14 21:55:08 +00:00
Jörg Thalheim 77f3936552
Merge pull request #205927 from asininemonkey/nixos-nvme-cli 
nixos/modules/profiles/base: add nvme-cli
 2022-12-14 21:40:46 +00:00
Florian Klink bfc60c9362 nixos/wireplumber: assert hsphfpd to be disabled 
According to
https://github.com/NixOS/nixpkgs/issues/205957#issuecomment-1350158554,
pipewire/wireplumber already provides this functionality.

Fixes #205957
 2022-12-14 21:24:13 +00:00
github-actions[bot] eb81abe9c0
Merge master into staging-next 2022-12-14 18:01:37 +00:00
Matt Melling e2b79f08bd gpsd: add listenany option 2022-12-14 18:37:15 +01:00
Jörg Thalheim 7af2f0e2e7
Merge pull request #205943 from mweinelt/vaultwarden 
vaultwarden: Add update script to keep web vault in sync
 2022-12-14 16:15:49 +00:00
tv 816614bd62 nixos/exim: allow using service credentials 
By settings User= to the actual Exim user, systemd will ensure that the
credentials directory will have the correct ownership, allowing users to
utilize LoadCredential=.  Exim still gets started as root (and drops
privileges) to preserve the previous behavior.
 2022-12-14 16:43:46 +01:00
Martin Weinelt d37dca5f14
nixos/tests/vaultwarden: Update selenium tests for 2022.10.0 
A few form element ids were changed around and a button was renamed.
 2022-12-14 15:00:21 +01:00
Martin Weinelt 0497d5b99f
vaultwarden: Add update script to keep web vault in sync 
- Adds an update script to fetch the compatible web vault version
- Removes `vaultwarden-vault` from top-level to prevent independent
  updates through e.g. r-ryantm. Istead the vault is now accessible
  at `vaultwarden.webvault`.
- The name webvault was chosen because it is the title of the projects
  README and it makes it clearer, that this is the web UI.
 2022-12-14 15:00:20 +01:00
Franz Pletz a0b6072547
nixos/grafana: add test case for socket proxy 2022-12-14 14:42:13 +01:00
Naïm Favier bec17309fd
Merge pull request #206079 from ncfavier/vim-fix-example 2022-12-14 14:38:42 +01:00
Naïm Favier 7bb8a42095
nixos/vim: fix example package 
vimHugeX is now an alias for vim-full
 2022-12-14 14:25:30 +01:00
github-actions[bot] 96a0e614c8
Merge master into staging-next 2022-12-14 12:01:19 +00:00
Franz Pletz 78aaaaaadb
Merge pull request #201505 from r-ryantm/auto-update/ntfy-sh 2022-12-14 12:08:03 +01:00
Naïm Favier 6573e10dee
Merge pull request #204480 from ncfavier/hv-kvp 2022-12-14 12:03:20 +01:00
Franz Pletz 5e11704593
nixos/ntfy-sh: fix & expose nixos test 2022-12-14 11:09:52 +01:00
Jakub Sokołowski a96172348e
transmission: add package option 
Useful when someone might want to upgrade/downgrade easily.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
 2022-12-14 10:48:40 +01:00
github-actions[bot] 747e072692
Merge master into staging-next 2022-12-14 06:01:05 +00:00
Thomas Tuegel 03354f45ab plasma5: Help D-Bus find kactivitymanagerd 2022-12-14 10:48:51 +08:00
Thomas Tuegel 34b2fcfd19 plasma5: Enable PipeWire by default 
`xdg-desktop-portal-kde` expects PipeWire to be running, so we enable it by
default, but we don't replace PulseAudio. The user may disable it against our
default, if desired.
 2022-12-14 10:48:51 +08:00
ajs124 f98e6d6290 unifi7: 7.2.95 -> 7.3.76 
https://community.ui.com/releases/UniFi-Network-Application-7-3-76/85c75fc7-3e0f-4e99-aa90-7068af4f1141
 2022-12-14 02:47:04 +01:00
github-actions[bot] d07c2d73fd
Merge master into staging-next 2022-12-13 18:01:30 +00:00
Jose Cardoso c2723da1ea
nixos/modules/profiles/base.nix: add nvme-cli 2022-12-13 15:35:05 +00:00
Ryan Lahfa 78e2fbc4ce
Merge pull request #195341 from zhaofengli/fwupd-extra-daemon-conf 
nixos/fwupd: Make daemon.conf structured
 2022-12-13 14:19:26 +01:00
D Anzorge 9be81d0acf nixos/grafana: allow @chown syscalls when using unix sockets 
Grafana will unconditionally call chown on the socket after creating it,
even if the configuration does not ask for a different socket gid.
 2022-12-13 02:47:50 +01:00
github-actions[bot] a680c884cc
Merge master into staging-next 2022-12-13 00:02:19 +00:00
figsoda 47cd8c9948
Merge pull request #205830 from mousedownmike/docs_sec_wireless_minor 
docs: added missing semicolon in example
 2022-12-12 16:32:27 -05:00
Robert Hensing a70a69156c
Merge pull request #205768 from hercules-ci/remove-numbers-from-manuals 
doc: Remove all section numbers
 2022-12-12 22:11:28 +01:00
figsoda 845ac5dc21 docs: generate docs 2022-12-12 15:58:54 -05:00
Mike Dalrymple 495b71906c
docs: added missing semicolon in example 2022-12-12 12:07:15 -08:00
github-actions[bot] e04ce2733d
Merge master into staging-next 2022-12-12 18:01:15 +00:00
Bernardo Meurer d2578f1dac
Merge pull request #171875 from bbigras/cloudflared 
nixos/cloudflared: init
 2022-12-12 13:06:21 -03:00
Martin Weinelt d6f4f4584a
nixos/botamusique: allow syscalls in the @resources group 
Calls to ffmpeg from botamusique require the `set_mempolicy` syscall.

Fixes: #205702
 2022-12-12 15:36:58 +01:00
Robert Hensing c23666473c doc: Remove all section numbers 
Simplicity.

We use anchors nowadays. Nobody should be printing this.
 2022-12-12 13:04:39 +01:00
github-actions[bot] 3fcd016cea
Merge master into staging-next 2022-12-12 12:01:25 +00:00
Franz Pletz e7b5445fe9
Merge pull request #205346 from Izorkin/init-profile-lxc 
nixos/lxc-container: undo some of the minimal profile stuff
 2022-12-12 11:35:29 +01:00
Bobby Rong 9015c9f389
Merge pull request #205525 from SuperSandro2000/prometheus2 
nixos/alertmanager: fix renamed option
 2022-12-12 18:08:36 +08:00
github-actions[bot] 63c2909cc1
Merge master into staging-next 2022-12-12 06:01:08 +00:00
Bobby Rong 96ba5e03af
Merge pull request #204252 from SamLukeYes/xonshrc 
xonsh: migrate to /etc/xonsh/xonshrc
 2022-12-12 13:57:33 +08:00
Lin Yinfeng 7f220a0422
nixos/installer/netboot-minimal: add missing lib 2022-12-12 09:54:17 +08:00
github-actions[bot] 76e08d0f2f
Merge master into staging-next 2022-12-12 00:03:39 +00:00
Luke Granger-Brown 36c0938cc5
Merge pull request #198835 from YellowOnion/factorio-patch 
factorio: better mod support
 2022-12-11 21:17:05 +00:00
github-actions[bot] 99d681c4e7
Merge master into staging-next 2022-12-11 18:01:21 +00:00
Sandro Jäckel 8f99f34194
nixos/opengl: cleanup suggestions for extraPackages 
- libvdpau-va-gl supports only H.264
- vaapiVdpau is unmaintained for 10 years
 2022-12-11 17:44:48 +01:00
Bobby Rong 0e857e0089
Merge pull request #204807 from Eliot00/v2raya-init 
v2raya: init at 2.0.0
 2022-12-11 23:06:00 +08:00
K900 a95574fd2e
Merge pull request #204560 from jcumming/resilio_config_passthru 
passthrough config if there are no secrets defined (address #204559)
 2022-12-11 17:50:37 +03:00
Elliot 08d651764f
v2raya: init at 2.0.0 
Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>

Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>

Update pkgs/tools/networking/v2raya/default.nix

Co-authored-by: zendo <linzway@qq.com>

Update pkgs/tools/networking/v2raya/default.nix

Co-authored-by: zendo <linzway@qq.com>

Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>

Update pkgs/tools/networking/v2raya/default.nix

Co-authored-by: zendo <linzway@qq.com>

Update nixos/modules/services/networking/v2raya.nix

Co-authored-by: zendo <linzway@qq.com>
 2022-12-11 22:23:12 +08:00
LoveIsGrief 83b917a960
nixos/manpages: Explain -I option and how to build manpages 
When running nixos-rebuild -I, the man page just said "-I path" which could be interpreted as
 "just a path to nixpkgs", which in fact it actually has the same meaning as NIX_PATH.

This is now made clear in the manual, so that when grepping "-I" and "NIX_PATH" one quickly finds
 the format of the option.

I don't know how to link to the "nix manual" as stated in the docbook, so I left that as it is.

Additionally, it wasn't clear to me how to actually build the man pages and view the changes I made.
That's now in the contributing-to-this-manual.chapter.md.
 2022-12-11 11:00:06 +01:00
github-actions[bot] 97267158e3
Merge master into staging-next 2022-12-11 06:01:07 +00:00
Martin Weinelt 76e962151a nixos/tests/evcc: Fail when the unit produces fatal log messages 2022-12-11 01:25:13 +01:00
Martin Weinelt fda65523fb nixos/evcc: Fix unit environment 
In some recent version evcc started requiring `getent` in the PATH, or
else it would fail to start.

It also now requires an sqlite database, which it tries to create a
directory for at `$HOME/.evcc`, so we now need to provide a
StateDirectory.
 2022-12-11 01:23:22 +01:00
Guillaume Girol 26a411b2cb nixos: add release notes for nginx config validation 2022-12-10 23:04:57 +01:00
Guillaume Girol a768871934 nixos/nginx: validate syntax of config file at build time 
Shamelessly stolen from nixcloud-webservices:
https://github.com/nixcloud/nixcloud-webservices/blob/master/modules/web/webserver/lib/nginx_check_config.nix

The nixos test testing the behavior of nginx in case of faulty config
would not build with this change (on purpose), so I modified it so that
the failure is not syntactic.
 2022-12-10 23:04:57 +01:00
Sandro Jäckel a49606696e
nixos/alertmanager: fix renamed option 2022-12-10 20:11:18 +01:00
Bruno Bigras c770b44aff nixos/cloudflared: init 2022-12-10 14:07:26 -05:00
github-actions[bot] fe25c2a8d8
Merge master into staging-next 2022-12-10 18:01:12 +00:00
happysalada bdf8a69ecc surrealdb: module: add secret management 2022-12-10 10:57:13 -05:00
Naïm Favier 4b79d6c374
Merge pull request #204976 from bjornfor/nixos-borgbackup-fix-runtime-warning 2022-12-10 16:51:19 +01:00
Izumi Raine cb4547a433 nixos/borgbackup: add option "patterns" 2022-12-10 16:49:34 +01:00
Naïm Favier 75e0609a00
nixos/borgbackup: fix newline escaping with optional arguments 
The newline must always be escaped, otherwise `extraPruneArgs` will be treated as a separate command if `prune.prefix` is unset.
 2022-12-10 16:46:34 +01:00
Vladimír Čunát de033ae75a
Merge branch 'master' into staging-next 2022-12-10 16:19:36 +01:00
Naïm Favier bd07f70e55
Merge pull request #205358 from farcaller/patch-3 2022-12-10 16:00:28 +01:00
Jonas Heinrich 578dcac1a2
Merge pull request #203779 from Radvendii/firejail 
nixos/firejail: remove the need for qualifications
 2022-12-10 08:58:54 +01:00
Sergei Lukianov 136b81be7d nixos/tests/prometheuts-exporters.unpoller: fix test script 
Unpoller behaviour changed and now it'll not server metrics if no
controller available, so, let's check for not available controller
message instead.
 2022-12-09 21:40:36 -08:00
Sandro Jäckel 89b5dddf99
nixos/avahi: revert closing firewall port by default 2022-12-10 03:40:39 +01:00
Yarny0 3f11bdb2e7 cups-pdf: mention new package/module in 23.05 release notes 2022-12-09 22:22:36 +01:00
Yarny0 85aeeac28d cups-pdf: add vm test 2022-12-09 22:20:09 +01:00
Yarny0 49a129ab40 nixos/cups-pdf: init 
Some implementation notes:

* cups-pdf, and cups-pdf-to-pdf,
  support multiple instances with differing configurations.
  This can be accomplished by creating multiple configuration
  files with names `cups-pdf-{instance-name}.conf`.
  The Nixos module supports this feature by providing
  the option `instances` which is an attrset
  mapping instance names to instance configurations.
  To simplify module usage,
  an instance `pdf` is created by default.

* To use a cups-pdf instance, one also needs
  a cups queue that connects to the backend.
  The module does this automatically by default,
  using the `hardware.printers.ensurePrinters`.
  It uses one of the ppd files which is
  included in the cups-pdf package.
  If this isn't desired (e.g. because printer queues
  should be created by hand, or configured differently),
  the `installPrinter` option can be turned off
  (for each instance separately).

* In our configuration, cups calls external programs
  using the `cups` account and the `lp` group.
  cups-pdf refuses to operate without root privileges,
  likely because it needs to change the
  ownership of it output pdf files so that
  (only) the print job's owner can access them.

  The module installs a suid root wrapper for the backend
  program that can only be called by the `lp` group.
  The cups-pdf package is replaced by a wrapper
  package which calls the suid root wrapper.
  So cups can call its backend programs as usual.
 2022-12-09 22:20:09 +01:00
Izorkin 4165ff32cf
Release notes: fix typo 2022-12-09 23:18:37 +03:00
Izorkin 2b6bfed79c
nixos/lxc-container: undo some of the minimal profile stuff 2022-12-09 23:18:37 +03:00
Vladimir Pouzanov 65aed3b37f
Allow to override the https settings 2022-12-09 19:23:50 +00:00
Linus Heckemann 2ee8b6ee74
Merge pull request #188958 from lheckemann/zram-builtin 
nixos/zram: support built-in zram
 2022-12-09 19:57:44 +01:00
github-actions[bot] 48b3a17dea
Merge master into staging-next 2022-12-09 12:01:30 +00:00
Maximilian Bosch 539954efab
Merge pull request #204780 from Ma27/kernel-maintenance-docs 
nixos/manual: document kernel backporting policy and implications of it
 2022-12-09 11:53:53 +01:00
Maximilian Bosch 8476b02749
nixos/doc: suggest using the latest longterm kernel for ZFS 2022-12-09 11:34:05 +01:00
K900 2123b57d5d nixos/supergfxd: make optional, fix eval (again) 2022-12-09 13:31:00 +03:00
Izorkin 731d4961aa
nixos/profiles/minimal: add release notes 2022-12-09 13:05:27 +03:00
Izorkin 0c6ce0dbab
nixos/installer/netboot-minimal: enable man 2022-12-09 13:03:49 +03:00
Izorkin 309d6a3185
iso/minimal: use mkForce 2022-12-09 13:03:49 +03:00
Izorkin 191d2115ea
iso/minimal: use minimal profile 2022-12-09 13:03:49 +03:00
Izorkin 362d351845
nixos/profiles/minimal: disable udisks service 2022-12-09 13:03:49 +03:00
Izorkin ee858454b3
nixos/profiles/minimal: disable logrotate service 2022-12-09 13:03:49 +03:00
Izorkin df22e4124d
nixos/profiles/minimal: disable documentation 2022-12-09 13:03:38 +03:00
Naïm Favier 0bc9e25e68
Merge pull request #204438 from ncfavier/vim-full 2022-12-09 10:34:17 +01:00
Vladimír Čunát 9c497bb8d6
Merge branch 'staging-next' into staging 2022-12-09 10:27:46 +01:00
Sandro 18ab3af0d4
Merge pull request #205251 from InternetUnexplorer/fix-fish-skim-keybindings 2022-12-09 10:02:04 +01:00
Naïm Favier 4e5ebcc3ed
vim-full: rename from vim_configurable 
Avoids confusion: `vim-full`'s build-time features are configurable, but both
`vim` and `vim-full` are *customizable* (in the sense of user configuration).
 2022-12-09 09:55:55 +01:00
InternetUnexplorer 86ae48a4bf skim: fix fish shell keybindings 
This fixes a typo that prevented the fish keybindings from being loaded.
Also, the keybindings are now only loaded if programs.skim.keybindings
is true, which matches the behavior for bash and zsh.
 2022-12-08 22:52:09 -08:00
Artturi 8ffe22e286
Merge pull request #203956 from Artturin/addforbiddendependenciesregex 
nixos/top-level.nix: add forbiddenDependenciesRegex option
 2022-12-09 07:54:00 +02:00
Martin Weinelt a4f2ca1ef3
Merge pull request #205123 from Frostman/prometheus-smartctl-exporter-0.9.1 2022-12-09 01:58:06 +01:00
Martin Weinelt c7fbae1289
nixos/tests/prometheus-exporters.smartctl: update test script 
We can't actually get metrics for a virtual disk drive so the exporter
fails to start with 0.9.x.

Instead let's just make sure it said that /dev/vda was unavailable.
 2022-12-09 01:40:01 +01:00
Martin Weinelt fdcc9e8202
nixos/prometheus.exporters.smartctl: Simplify DeviceAllow logic 
Setting up the DeviceAllow list with explicitly configured devices was a
nice idea, but sometimes a configured device (`/dev/nvme0n1` an NVMe
namespace) has a parent device (`/dev/nvme0`) that smartctl needs to
access to query metrics.

Falling back to the block and character definitions is probably a valid
fallback.
 2022-12-09 01:40:01 +01:00
Sergey Lukjanov a49feed255 nixos/prometheus.exporters.smartctl: use cli args instead of config 
Config support was dropped and replaced with CLI args
 2022-12-08 15:31:33 -08:00
Robert Hensing 470e6fd1cd
Merge pull request #201902 from ck3mp3r/dockertools-architecture-in-config-200725 
Adding ability to set image architecture when creating OCI images using DockerTools
 2022-12-08 23:54:50 +01:00
ajs124 3071eef957
Merge pull request #201707 from helsinki-systems/alias-krb5Full 
krb5Full: turn into alias
 2022-12-08 23:54:02 +01:00
Ryan Lahfa 022c7d777a
Merge pull request #196837 from KoviRobi/dnsmasq-attrsets-config 
nixos/dnsmasq: Use attrs instead of plain text config
 2022-12-08 23:47:08 +01:00
ajs124 c7930769a7 krb5Full: turn into alias 2022-12-08 23:08:44 +01:00
Cole Helbling 5af481f67f nixos/activation/bootspec: fixup improper $out substitution 2022-12-08 13:50:05 -08:00
Cole Helbling fc88e4cf7d nixos/boot/external: drop duplicated external bootloader documentation 
The documentation is generated thanks to `meta.doc`, and was out of
date anyways.
 2022-12-08 13:50:05 -08:00
Cole Helbling dce9add02b nixos/activation/bootspec: refactor the generator script 
We separate the different steps (injecting the toplevel and injecting
the specialisations) so that it's easy to document what each snippet is
actually doing.
 2022-12-08 13:50:05 -08:00
Cole Helbling 38e5089814 nixos/activation/bootspec: drop problematic comment, only generate bootspec when bootspec is enabled 2022-12-08 13:50:05 -08:00
Cole Helbling 97f657c742 nixos/activation/bootspec: DocBook -> Markdown, add description for extensions field 2022-12-08 13:50:05 -08:00
Cole Helbling cc63293b50 nixos/boot/external: fixup typo in generated docs, regenerate docs 2022-12-08 13:50:05 -08:00
Cole Helbling ad6ea546b4 nixos/boot/external: DocBook -> Markdown 2022-12-08 13:50:05 -08:00
Raito Bezarius 680369e504 nixos/activation/bootspec: add some comments to explain the delicate manipulations 2022-12-08 13:50:05 -08:00
Raito Bezarius 11dfbee0a4 nixos/activation/bootspec: add bootspec chapter in NixOS manual 2022-12-08 13:50:05 -08:00
Raito Bezarius 9832e3e9b9 nixos/activation/bootspec: remove SB extension example in Cue schema 2022-12-08 13:50:04 -08:00
Raito Bezarius 980f50124f nixos/boot/external: add @raitobezarius as maintainer and allow initrd secrets 2022-12-08 13:50:04 -08:00
Raito Bezarius 092e6d39cd nixos/tests/bootspec: init 
This will test various scenarios of bootspec generation.
 2022-12-08 13:50:04 -08:00
Raito Bezarius 348ba1b33c nixos/activation/bootspec: module-ify 
This does the following:

* turns bootspec into a NixOS module
* validates bootspecs with Cue
* exposes internal knobs
 2022-12-08 13:50:04 -08:00
Raito Bezarius ee27291b34 nixos/activation/bootspec: fix slurping specialisation bootspecs 2022-12-08 13:50:04 -08:00
K900 e69c37eae9 nixos/activation: don't generate bootspec for containers 2022-12-08 13:50:04 -08:00
Graham Christensen e9c85d6d0f nixos/activation/bootspec: embed the document into a bootspec subdir 2022-12-08 13:50:04 -08:00
Graham Christensen 6c0e4e892f nixos/activation/bootspec: embed the entire contents of specialisation's bootspecs into the parent 
See: https://github.com/NixOS/rfcs/pull/125#discussion_r871222614
 2022-12-08 13:50:04 -08:00
Cole Helbling 83d06ce16d nixos/boot/external: init 
This allows supporting external bootloader backends.
 2022-12-08 13:50:04 -08:00