Commit graph

27160 commits

Author SHA1 Message Date
Raito Bezarius 2ede3cb621 nextcloud26: 26.0.1 -> 26.0.2
https://nextcloud.com/changelog/#26-0-2
2023-05-27 18:03:58 +02:00
Alyssa Ross 6abae5cbb5 xwayland: set meta.mainProgram 2023-05-27 15:00:40 +00:00
Robert Scott b65f4b653b
Merge pull request #234398 from lorenz/fix-prom
prometheus: skip tests on 32-bit platforms
2023-05-27 15:59:04 +01:00
Lorenz Brun e1a0a7aa76 prometheus: skip tests on 32-bit platforms 2023-05-27 15:58:45 +02:00
Robert Scott 2d895ae34c
Merge pull request #234392 from lorenz/fix-teleport
teleport: mark as broken on <64 bit platforms
2023-05-27 12:48:04 +01:00
Weijia Wang ae0b0867da
Merge pull request #234349 from r-ryantm/auto-update/mediamtx
mediamtx: 0.23.0 -> 0.23.3
2023-05-27 12:57:45 +03:00
Lorenz Brun 12be07b11c teleport: mark as broken on <64 bit platforms 2023-05-27 11:18:34 +02:00
R. Ryantm c256f09dac mediamtx: 0.23.0 -> 0.23.3 2023-05-27 03:05:34 +00:00
figsoda fba54af741
Merge pull request #234329 from wegank/sonic-server-refactor
sonic-server: migrate to bindgenHook
2023-05-26 21:48:14 -04:00
Ryan Lahfa d74e5f4a18
Merge pull request #213510 from RaitoBezarius/nginx-proxyprotocol
nixos/nginx: first-class PROXY protocol support
2023-05-27 03:37:33 +02:00
Weijia Wang 442a6dbd36 surrealdb: fix build on aarch64-linux 2023-05-26 21:00:38 -04:00
Weijia Wang cbb545fbba sonic-server: migrate to bindgenHook 2023-05-27 02:56:05 +03:00
markuskowa a367e2ba0a
Merge pull request #234174 from markuskowa/upd-nfs-ganesha
nfs-ganesha: 5.1 -> 5.2
2023-05-26 20:30:38 +02:00
Sander f3a4973aeb meilisearch: allow builds on aarch64-linux 2023-05-26 14:04:33 -04:00
Raito Bezarius 69bb0f94de nixos/nginx: first-class PROXY protocol support
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.

Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.

It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.

An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.

Finally, the tests covers:

- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
  (sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;

In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.

For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
2023-05-26 19:48:26 +02:00
Weijia Wang a84996a76b
Merge pull request #234195 from wegank/389-bump
_389-ds-base: 2.3.1 -> 2.4.1
2023-05-26 15:21:06 +03:00
Weijia Wang dc57610254 _389-ds-base: 2.3.1 -> 2.4.1 2023-05-26 13:31:03 +03:00
Weijia Wang 3b99ef4582
Merge pull request #234161 from wahjava/update-tailscale
tailscale: 1.40.1 -> 1.42.0
2023-05-26 13:14:49 +03:00
happysalada 938e5e2fbe timescaledb_toolkit: mark broken on darwin 2023-05-26 06:07:33 -04:00
Markus Kowalewski 04f05e328d
nfs-ganesha: 5.1 -> 5.2 2023-05-26 10:57:33 +02:00
Weijia Wang 98fff47d56
Merge pull request #234121 from r-ryantm/auto-update/jackett
jackett: 0.21.17 -> 0.21.34
2023-05-26 11:28:12 +03:00
Weijia Wang a7f164903c
Merge pull request #234155 from r-ryantm/auto-update/martin
martin: 0.8.2 -> 0.8.3
2023-05-26 11:27:38 +03:00
Weijia Wang 92f37aaa8a
Merge pull request #234064 from drupol/openvscode-server/bump-may-2023
openvscode-server: 1.78.1 -> 1.78.2
2023-05-26 10:32:05 +03:00
Ashish SHUKLA 532f47f28b
tailscale: 1.40.1 -> 1.42.0 2023-05-26 09:11:07 +02:00
Weijia Wang e8be664256
Merge pull request #234083 from wegank/rippled-insecure
rippled: mark as insecure
2023-05-26 10:10:49 +03:00
R. Ryantm 4d28c34fff martin: 0.8.2 -> 0.8.3 2023-05-26 06:37:57 +00:00
Pol Dellaiera 67ec520e07
openvscode-server: 1.78.1 -> 1.78.2 2023-05-26 08:15:30 +02:00
R. Ryantm df85fc53a3 jackett: 0.21.17 -> 0.21.34 2023-05-26 02:32:55 +00:00
R. Ryantm e74103437c rustypaste: 0.9.0 -> 0.9.1 2023-05-26 01:51:00 +00:00
Weijia Wang 8de9fea9ea
Merge pull request #231811 from misuzu/snac2-darwin
snac2: build on darwin
2023-05-26 01:12:40 +03:00
Weijia Wang 1ebd98fe8c rippled: mark as insecure 2023-05-26 00:54:15 +03:00
Yaya 931a1b97f7 nixos/tests/sftpgo: init 2023-05-25 22:46:15 +02:00
Yaya 643d213ea6 sftpgo: add yayayayaka to maintainers 2023-05-25 22:46:15 +02:00
Yaya 2e2d5659d5 sftpgo: Include openapi, static and templates folders
Those are needed for serving the web client
2023-05-25 22:46:15 +02:00
Sandro 32e61ec5ad
Merge pull request #228553 from chvp/bump-hookshot
matrix-hookshot: 3.2.0 -> 4.0.0
2023-05-25 22:04:45 +02:00
Weijia Wang f0ca52ee9f
Merge pull request #233929 from r-ryantm/auto-update/janus-gateway
janus-gateway: 1.1.3 -> 1.1.4
2023-05-25 22:42:27 +03:00
Sandro e29207b95a
Merge pull request #231630 from OPNA2608/fix/mir_keyboard_missing
mir: Pull patch to fix evdev device misses
2023-05-25 21:40:42 +02:00
Sandro ab7af0e6ed
Merge pull request #233326 from illustris/hadoop
hadoop, hbase: patch version updates
2023-05-25 21:34:13 +02:00
Weijia Wang 6e7c0b97d4 treewide: make fetchPypi more explicit 2023-05-25 21:37:59 +03:00
figsoda 22ec7aebbc treewide/servers: use top-level fetchPypi 2023-05-25 12:06:38 -04:00
Weijia Wang 037e8a53cf
Merge pull request #233921 from 5aaee9/master
memos: 0.12.2 -> 0.13.0
2023-05-25 15:35:04 +03:00
Patryk Kwiatek e2ec447c57
ferretdb: 1.2.0 -> 1.2.1 (#233950) 2023-05-25 11:39:29 +02:00
R. Ryantm 9091fb6ea3 janus-gateway: 1.1.3 -> 1.1.4 2023-05-25 06:24:50 +00:00
Indexyz a1aa176fcb memos: 0.12.2 -> 0.13.0 2023-05-25 12:32:02 +08:00
Weijia Wang 7ef1ddae9e
Merge pull request #233854 from chkno/hook-spelling
Fix phase name typos in 5 packages' runHook invocations
2023-05-24 23:40:57 +03:00
Sandro c898813431
Merge pull request #233029 from jlamur/nginx-spnego-build-fix
nginx: fix build of module spnego-http-auth
2023-05-24 21:54:24 +02:00
Scott Worley f34465fea5 pomerium: Spell "postBuild" correctly 2023-05-24 09:21:51 -07:00
Scott Worley 45f6e87822 ncdns: Spell "postUnpack" correctly 2023-05-24 09:21:18 -07:00
Weijia Wang f9e87ebfe3
Merge pull request #233818 from r-ryantm/auto-update/sftpgo
sftpgo: 2.5.0 -> 2.5.1
2023-05-24 17:23:53 +03:00
R. Ryantm cfd3805e56 sftpgo: 2.5.0 -> 2.5.1 2023-05-24 12:38:51 +00:00
Ilan Joselevich 1b8093954c
Merge pull request #233497 from LeSuisse/mattermost-7.8.5
mattermost: 7.8.4 -> 7.8.5
2023-05-24 15:19:02 +03:00
Martin Weinelt 2ef3e723bc
Merge pull request #233691 from NixOS/home-assistant
home-assistant: 2023.5.3 -> 2023.5.4
2023-05-24 13:15:09 +02:00
Martin Weinelt 94495fa63c
python310Packages.homeassistant-stubs: 2023.5.3 -> 2023.5.4
https://github.com/KapJI/homeassistant-stubs/releases/tag/2023.5.4
2023-05-24 13:09:14 +02:00
Weijia Wang efb94a82aa
Merge pull request #233679 from r-ryantm/auto-update/redpanda
redpanda: 23.1.7 -> 23.1.10
2023-05-24 12:06:47 +03:00
Weijia Wang 44d4809ec1
Merge pull request #233730 from r-ryantm/auto-update/jackett
jackett: 0.20.4199 -> 0.21.17
2023-05-24 11:56:12 +03:00
R. Ryantm 65a80df22c sshportal: 1.19.3 -> 1.19.5 2023-05-24 06:24:26 +00:00
R. Ryantm 153da9ab8c jackett: 0.20.4199 -> 0.21.17 2023-05-24 04:06:04 +00:00
Mario Rodas 8b0bdf3bcf
Merge pull request #233680 from r-ryantm/auto-update/minio
minio: 2023-05-04T21-44-30Z -> 2023-05-18T00-05-36Z
2023-05-23 18:51:11 -05:00
Martin Weinelt 25fa902f9e
home-assistant: 2023.5.3 -> 2023.5.4
https://github.com/home-assistant/core/releases/tag/2023.5.4
2023-05-24 00:06:36 +02:00
Maciej Krüger e6e049b7a2
Merge pull request #233646 from helsinki-systems/upd/nginx 2023-05-24 00:05:12 +02:00
Thomas Gerbet 3c7eb7a1bc etcd_3_5: 3.5.7 -> 3.5.9
Fixes CVE-2023-32082.

Changelog:
https://github.com/etcd-io/etcd/releases/tag/v3.5.9
https://github.com/etcd-io/etcd/releases/tag/v3.5.8
2023-05-24 07:25:31 +10:00
R. Ryantm d1fe3c0133 redpanda: 23.1.7 -> 23.1.10 2023-05-23 20:56:18 +00:00
R. Ryantm 35273f66f7 minio: 2023-05-04T21-44-30Z -> 2023-05-18T00-05-36Z 2023-05-23 20:31:58 +00:00
misuzu f56ad9d7de snac2: build on darwin 2023-05-23 20:10:43 +03:00
ajs124 27d53b81cc nginxQuic: share src and version with nginxMainline
quic support was merged
still a separate package, because it uses quictls
and sets configureFlags
2023-05-23 18:37:54 +02:00
ajs124 91ecb7d7ff nginxMainline: 1.24.0 -> 1.25.0 2023-05-23 18:28:04 +02:00
Sumner Evans a1e84c454d
matrix-synapse: 1.83.0 -> 1.84.0
Signed-off-by: Sumner Evans <me@sumnerevans.com>
2023-05-23 09:36:52 -06:00
Ryan Lahfa 078d3ebcaa
Merge pull request #232235 from cyberus-technology/outline-0.69.2
outline: 0.68.1 -> 0.69.2
2023-05-23 15:14:18 +02:00
Weijia Wang 34ac9b5264
Merge pull request #233551 from r-ryantm/auto-update/arangodb
arangodb: 3.10.3 -> 3.10.5.2
2023-05-23 13:09:32 +03:00
Alexander Sieg 789c38f865
outline: add xanderio to maintainers 2023-05-23 12:03:39 +02:00
Alexander Sieg 5ade08168a
outline: add nixos test 2023-05-23 12:03:39 +02:00
Alexander Sieg 74bc42615c
outline: 0.68.1 -> 0.69.2 2023-05-23 10:44:02 +02:00
R. Ryantm 2bddf8a8ff arangodb: 3.10.3 -> 3.10.5.2 2023-05-23 05:34:42 +00:00
Mario Rodas af6b71df3e
Merge pull request #233494 from ncfavier/mpd
mpd: 0.23.12 -> 0.23.13
2023-05-23 00:31:55 -05:00
Maximilian Bosch c0bbecef87
Merge pull request #232276 from LeSuisse/broken-php80-packages
grocy, limesurvey: mark as broken due to lack of PHP 8.1 compatibility
2023-05-23 07:19:17 +02:00
Nick Cao 4d0ef51e28
Merge pull request #233337 from figsoda/starcharts
starcharts: init at 1.7.0
2023-05-22 20:25:34 -06:00
Weijia Wang e466052a59
Merge pull request #228304 from r-ryantm/auto-update/matterbridge
matterbridge: 1.25.2 -> 1.26.0
2023-05-23 01:05:42 +03:00
Weijia Wang 0788f05297
Merge pull request #232120 from r-ryantm/auto-update/dnsdist
dnsdist: 1.7.3 -> 1.8.0
2023-05-23 00:41:31 +03:00
Weijia Wang 4bce9539f9
Merge pull request #233060 from r-ryantm/auto-update/mediamtx
mediamtx: 0.22.2 -> 0.23.0
2023-05-23 00:28:09 +03:00
Weijia Wang 20147226df
Merge pull request #233111 from r-ryantm/auto-update/icingaweb2-ipl
icingaweb2-ipl: 0.11.1 -> 0.12.0
2023-05-23 00:27:32 +03:00
Weijia Wang 7cded0fa37 mediamtx: fix version 2023-05-23 00:19:41 +03:00
Weijia Wang fd4c3880d0
Merge pull request #233458 from JulienMalka/ferretdb-1.2.0
ferretdb: 1.1.0 -> 1.2.0
2023-05-23 00:16:50 +03:00
Thomas Gerbet 5be7979101 mattermost: 7.8.4 -> 7.8.5
Fixes MMSA-2023-00183, MMSA-2023-00152, MMSA-2023-00171, MMSA-2023-00177, MMSA-2023-00172, MMSA-2023-00164,
MMSA-2023-00163 and MMSA-2023-00161.

Changelog:
https://docs.mattermost.com/install/self-managed-changelog.html#release-v7-8-extended-support-release
2023-05-22 22:49:26 +02:00
Naïm Favier 7ce5b8e78a
mpd: 0.23.12 -> 0.23.13
https://raw.githubusercontent.com/MusicPlayerDaemon/MPD/v0.23.13/NEWS
2023-05-22 22:39:08 +02:00
Martin Weinelt b18427fb2f
Merge pull request #229953 from mweinelt/navidrome-build-ui
navidrome: Use npmConfig and fetchNpmDeps
2023-05-22 22:13:05 +02:00
Weijia Wang ec873be72f
Merge pull request #229713 from r-ryantm/auto-update/soft-serve
soft-serve: 0.4.7 -> 0.5.4
2023-05-22 22:34:59 +03:00
Ilan Joselevich 742752508b
Merge pull request #233304 from figsoda/shell2http
shell2http: init at 1.16.0
2023-05-22 21:56:46 +03:00
Ryan Lahfa 4a22f84b83
Merge pull request #233399 from NixOS/update/isso
isso: 0.12.6.2 -> 0.13.0
2023-05-22 20:53:19 +02:00
Raito Bezarius 1ebed52d62 isso: 0.12.6.2 -> 0.13.0
This uses `buildNpmPackage` now and Node.js 20.
Also, packages the HTML documentation in a new output.

https://isso-comments.de/news/#isso-version-0-13-0-released
2023-05-22 20:42:38 +02:00
Mario Rodas d76ad32cec
Merge pull request #233411 from marsam/update-timescaledb
postgresqlPackages.timescaledb: 2.10.3 -> 2.11.0
2023-05-22 13:25:31 -05:00
Julien Malka 7ea816fd24
ferretdb: 1.1.0 -> 1.2.0 2023-05-22 19:03:10 +02:00
0x4A6F afad0c152b
Merge pull request #214428 from mweinelt/frigate-init
frigate: init at 0.12.0
2023-05-22 18:29:37 +02:00
Martin Weinelt 9d0bbc2c12
nginxModules.secure-token: 2020-08-28 -> 1.5 2023-05-22 16:29:55 +02:00
Martin Weinelt 2c1cc78307
nginxModules.vod: 1.29 -> 1.31 2023-05-22 16:29:55 +02:00
Raito Bezarius d24f37524d
exabgp: add raitobezarius as a maintainer 2023-05-22 14:52:32 +02:00
Martin Weinelt f752ef56b1
exabgp: init at 4.2.21
The BGP swiss army knife of networking
2023-05-22 14:42:19 +02:00
ajs124 b6ec248dd4
Merge pull request #233007 from LeSuisse/varnish73-init
varnish73: init at 7.3.0
2023-05-22 12:48:33 +02:00
R. Ryantm 4cd4acc547 victoriametrics: 1.89.1 -> 1.91.0 2023-05-22 07:57:40 +00:00
Jonas Heinrich c92f2244d1 wordpress6_2: 6.2.1 -> 6.2.2 2023-05-22 09:18:50 +02:00
Mario Rodas fe3a69ab0c postgresqlPackages.timescaledb: 2.10.3 -> 2.11.0
Diff: https://github.com/timescale/timescaledb/compare/2.10.3...2.11.0

Changelog: https://github.com/timescale/timescaledb/raw/2.11.0/CHANGELOG.md
2023-05-22 04:20:00 +00:00