b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
488942 commits 2 branches 0 tags 3.3 GiB
Commit graph

25515 commits

Author SHA1 Message Date
Ryan Lahfa 537c6ede55
Merge pull request #234266 from emilylange/qemu-vm-2047mb 
nixos/qemu-vm: add `virtualisation.memorySize < 2048` assertion on 32bit
 2023-05-27 15:31:00 +02:00
Nick Cao cf58ff13a3
Merge pull request #234254 from kevincox/mautrix-facebook-appservice-id 
nixos.mautrix-facebook: Fix appservice name
 2023-05-26 19:48:00 -06:00
Raito Bezarius 69bb0f94de nixos/nginx: first-class PROXY protocol support 
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.

Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.

It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.

An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.

Finally, the tests covers:

- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
  (sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;

In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.

For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
 2023-05-26 19:48:26 +02:00
emilylange 5dbd4f3243
nixos/qemu-vm: add virtualisation.memorySize < 2048 assertion on 32bit 2023-05-26 19:43:58 +02:00
Kevin Cox 5242aea64f
nixos.mautrix-facebook: Fix appservice name 
It appears that newer mautrix-facebook versions default to the appservice name `facebook`. This was breaking our registration and causing mautrix-facebook to fail to start. This changes the name back and makes the registration generated match whatever the setting in the app is.
 2023-05-26 12:39:37 -04:00
Ryan Lahfa 435237d641
Merge pull request #233350 from GrahamDennis/grahamdennis/testing-networks 
nixos/qemu-vm: add option for named network interfaces
 2023-05-26 15:57:01 +02:00
lucasew 8587646ef3 nixos/virtualisation/google-compute-config: minor refactoring 
Signed-off-by: lucasew <lucas59356@gmail.com>
 2023-05-26 00:56:32 +00:00
Yaya f63f781063 nixos/sftpgo: init 
A fully featured and highly configurable SFTP server with optional
HTTP/S, FTP/S and WebDAV support.

https://github.com/drakkan/sftpgo
 2023-05-25 22:46:15 +02:00
Jenny 0adbf8feb4
nixos/pam_mount: fix mounts without options (#234026) 
This commit adds a comma in front of the given options, which makes the
mounts still succeed even if no options are given.

Fixes #233946
 2023-05-25 22:45:59 +02:00
Sandro 86b0cdb24b
Merge pull request #233517 from illustris/pve-fix 
nixos/proxmox-image: fix qemu build failure
 2023-05-25 22:07:14 +02:00
Sandro ef2a17c946
Merge pull request #232339 from bl1nk/bl1nk/thelounge-package-option 
nixos/thelounge: add package option
 2023-05-25 22:04:22 +02:00
Will Fancher fe43923a70
Merge pull request #229767 from mberndt123/mberndt123/stratis-rootfs 
nixos/stratis: initrd support for stratis root volumes
 2023-05-25 14:06:31 -04:00
Sandro 1b40315504
Merge pull request #233092 from midchildan/chore/mirakurun/node18 2023-05-25 14:47:50 +02:00
illustris 6a20c13258
nixos/proxmox-image: fix qemu build failure 2023-05-25 16:25:43 +05:30
nyanotech 3aad03a464 nixos/sshd: detect duplicate config keys 2023-05-25 00:01:03 +02:00
midchildan c3346f87c4
mirakurun: use node 18 
Relates to #229910.
 2023-05-25 03:44:13 +09:00
Maximilian Bosch 40dcc3375c
Merge pull request #232837 from emilylange/nixos/synapse 
nixos/synapse: allow omitting `trusted_key_servers[].verify_keys`
 2023-05-24 16:28:03 +02:00
Graham Dennis 93502aa3b1 nixos/qemu-vm: add option for named network interfaces 
Adds a new option to the virtualisation modules that enables specifying explicitly named network interfaces in QEMU VMs.
The existing `virtualisation.vlans` option is still supported for cases where the name of the network interface is irrelevant.
 2023-05-24 08:54:20 +10:00
Ryan Lahfa 0d13962366
Merge pull request #233518 from tie/bios-bootable-x86 
nixos/iso-image: enable BIOS boot by default if possible
 2023-05-23 17:05:21 +02:00
Ryan Lahfa 078d3ebcaa
Merge pull request #232235 from cyberus-technology/outline-0.69.2 
outline: 0.68.1 -> 0.69.2
 2023-05-23 15:14:18 +02:00
Robert Hensing 983bf78c16
Merge pull request #233397 from Kranzes/hci-module 
nixos/hercules-ci-agent: sync module with upstream
 2023-05-23 14:17:28 +02:00
Alexander Sieg 74bc42615c
outline: 0.68.1 -> 0.69.2 2023-05-23 10:44:02 +02:00
Maximilian Bosch c0bbecef87
Merge pull request #232276 from LeSuisse/broken-php80-packages 
grocy, limesurvey: mark as broken due to lack of PHP 8.1 compatibility
 2023-05-23 07:19:17 +02:00
Ivan Trubach c68a5bb85a nixos/iso-image: enable BIOS boot by default if possible 
The change introduced in commit e5b072eca1
breaks backwards compatibility for some users, see
e5b072eca1 (commitcomment-113775008)
https://github.com/NixOS/nixpkgs/pull/219351#discussion_r1139773448

This change updates the implementation to enable BIOS boot if possible
for the build and host platforms, and also assert that BIOS boot is not
enabled for non-x86 host platforms.
 2023-05-23 04:43:31 +03:00
Sandro 493c6d8505
Merge pull request #233053 from midchildan/chore/epgstation/node18 
epgstation: use node18 + other fixes
 2023-05-23 01:48:26 +02:00
0x4A6F afad0c152b
Merge pull request #214428 from mweinelt/frigate-init 
frigate: init at 0.12.0
 2023-05-22 18:29:37 +02:00
Ryan Lahfa 2e1e1f8765
Merge pull request #231502 from SuperSandro2000/portunus-openldap 
nixos/portunus: use openldap compiled with libxcrypt-legacy
 2023-05-22 18:20:52 +02:00
Naïm Favier 7b28ea6783
Merge pull request #233377 from ncfavier/revert-226088 
Revert "nixos/syncthing: use rfc42 style settings"
 2023-05-22 16:35:04 +02:00
Martin Weinelt f11d33afb7
nixos/frigate: init 2023-05-22 16:29:54 +02:00
Martin Weinelt 958fc81472
Merge pull request #216786 from mweinelt/go2rtc 
go2rtc: init at 1.5.0
 2023-05-22 16:00:54 +02:00
Will Fancher 636e03bef3
Merge pull request #232533 from nikstur/systemd-repart-create-root 
nixos/systemd-repart: enable creating root partition
 2023-05-22 09:13:00 -04:00
Ilan Joselevich ebafd551d7
nixos/hercules-ci-agent: sync module with upstream 2023-05-22 15:05:16 +03:00
ners afdf7705ad nixos/iso-image: add some types 2023-05-22 13:01:56 +02:00
ners c281a355fe nixos/iso-image: prepend to ISO menu labels 2023-05-22 11:25:00 +02:00
Naïm Favier d5e090d2d8
Revert "nixos/syncthing: use rfc42 style settings" 
This reverts commit 32866f8d58.
This reverts commit 40a2df0fb0.
This reverts commit 4762932601.
 2023-05-22 10:29:52 +02:00
Ryan Lahfa 0e662e669a
Merge pull request #227642 from Flakebi/powerdns-admin2 
powerdns-admin: 0.3.0 -> 0.4.1
 2023-05-22 09:30:24 +02:00
Martin Weinelt eae2018b54
nixos/go2rtc: init 2023-05-22 03:48:47 +02:00
Flakebi 1a13b4c0f9
powerdns-admin: 0.3.0 -> 0.4.1 
- Fix with flask-migrate 4+
- Update to 0.4.1
- Improve the test to check that using the database works
 2023-05-22 00:39:58 +02:00
midchildan 94eb60a7d2
nixos/epgstation: add a new option 'ffmpeg' 
Closes #187120.
 2023-05-22 05:24:19 +09:00
midchildan 059006b84b
nixos/epgstation: add required directories to tmpfiles.d 2023-05-22 05:24:18 +09:00
Aaron Andersen 9889d76032
Merge pull request #232607 from plumelo/feat/redmine-5 
redmine: 4.2.10 -> 5.0.5
 2023-05-21 14:33:01 -04:00
Sandro Jäckel 0000000324
nixos/portunus: use openldap compiled with libxcrypt-legacy 
It hardcodes sha256 crypt and the managed slapd crash loops otherwise.
 2023-05-21 18:54:56 +02:00
Sandro a74a4a2f32
Merge pull request #232534 from teutat3s/zhf/fix-prometheus-exporter-jitsi 
jitsi-videobridge: refactor broken `apis` option to `colibriRestApi`
 2023-05-21 18:43:59 +02:00
Sandro 59cb287790
Merge pull request #231260 from Luflosi/update/kubo 
kubo: 0.19.2 -> 0.20.0
 2023-05-21 17:15:22 +02:00
pennae 727086540f
Merge pull request #233238 from emilylange/username-change 
maintainers: rename indeednotjames to emilylange
 2023-05-21 17:07:05 +02:00
Sandro b34c560d19
Merge pull request #186582 from midchildan/fix/epgstation-var-empty 
nixos/epgstation: fix startup issue
 2023-05-21 16:57:54 +02:00
emilylange b0e7f7f5db
maintainers: rename indeednotjames to emilylange 2023-05-21 16:01:35 +02:00
teutat3s cb81bd9340
jitsi-videobridge: refactor broken apis option to 
colibriRestApi

Refactor option to use jvb.conf and convert to boolean. Using the CLI
argument broke a while ago and is deprecated by upstream since 2021:
https://github.com/jitsi/jitsi-videobridge/pull/1738/files#diff-d9f589d2aae1673693461d7c3b9214324201ca1f43db63a3c773d4acfc52bc81

This fixes the currently broken test:
nixosTests.prometheus-exporters.jitsi
 2023-05-21 15:31:14 +02:00
Ilan Joselevich 5f6ad63b4f
Merge pull request #233037 from SuperSandro2000/libvirt-polkit 
nixos/libvirtd: enable polkit
 2023-05-20 20:03:22 +03:00
Jenny 7abd408b7f
nixos/pam_mount: fix cryptmount options (#232873) 
There was a bug in the pam_mount module that crypt mount options were
not passed to the mount.crypt command. This is now fixed and
additionally, a cryptMountOptions NixOS option is added to define mount
options that should apply to all crypt mounts.

Fixes #230920
 2023-05-20 17:40:36 +02:00