Commit graph

29029 commits

Author SHA1 Message Date
Yureka 19686a4452 nixos/systemd: conditionally include systemd-update-utmp upstream unit 2022-09-13 10:34:28 +02:00
Brian Leung c231a20d98 nixos/lemmy: move systemd script to serviceConfig
Co-authored-by: Shahar Dawn Or <mightyiampresence@gmail.com>
Co-authored-by: Ctem <c@ctem.me>
Co-authored-by: Ilan Joselevich <personal@ilanjoselevich.com>
Co-authored-by: a-kenji <aks.kenji@protonmail.com>
2022-09-12 18:39:54 -04:00
a-kenji 5519e1b89b nixos/lemmy: remove services.lemmy.jwtSecretPath
Co-authored-by: Ctem <c@ctem.me>
Co-authored-by: Brian Leung <leungbk@posteo.net>
Co-authored-by: Shahar Dawn Or <mightyiampresence@gmail.com>
Co-authored-by: Ilan Joselevich <personal@ilanjoselevich.com>
2022-09-12 18:39:54 -04:00
Franz Pletz 772baccfb1
Merge pull request #190947 from jsoo1/jsoo1/self-deploy-tar 2022-09-12 23:43:47 +02:00
Guillaume Girol a47cfca9af
Merge pull request #189744 from symphorien/vaultwarden-service
nixos/vaultwarden: misc fixes
2022-09-12 19:26:39 +00:00
Christian Kögler 3c263e491c
Merge pull request #190771 from ck3d/fix-nixos-nspawn-privateusers
nixos/nspawn: Fix configuration name PrivateUsersOwnership
2022-09-12 21:02:51 +02:00
pennae 070b3966fc
nixos/cachix-agent: fix type for host option 2022-09-12 20:47:05 +02:00
Tako Marks fb3f7d70b4 nixos/kanidm: Add unixd test
Test makes sure unixd is able to run and is able to query the server.
2022-09-12 20:25:04 +02:00
Frederik Rietdijk 4e62b94df3 Merge master into staging-next 2022-09-12 19:03:50 +02:00
John Soo f0f4ad0cb0
nixos/self-deploy: add tar to path.
Previously it was missing, and the service would fail.
2022-09-12 09:08:43 -07:00
Nick Cao 6ec928d73d
nixos/stratis: wait for devices to appear in tests 2022-09-12 23:49:52 +08:00
Erik Arvstedt fdead18e9e
nixos/paperless: use python from pkg for gunicorn
This ensures that a compatible `gunicorn` is used when `pkg` is
overridden.
2022-09-12 09:20:53 +02:00
Nick Cao 4abf0ee793
nixos/stratis: add test for simple usecases 2022-09-12 15:19:36 +08:00
Nick Cao ca03f2dc0f
nixos/stratis: init 2022-09-12 15:19:36 +08:00
github-actions[bot] 33ef8defa2
Merge master into staging-next 2022-09-12 00:02:43 +00:00
Luke Granger-Brown 9974dcfc20
Merge pull request #190717 from lukegb/paperless-tz
nixos/paperless: fix time.timeZone setting
2022-09-11 22:45:25 +01:00
Domen Kožar fbc23b491a cachix-agent: add host option 2022-09-11 21:18:09 +01:00
github-actions[bot] 6ec60fd222
Merge master into staging-next 2022-09-11 18:01:19 +00:00
Matthieu Coudron 1f8f2c5a57
Merge pull request #126633 from teto/vim-overlay-doc 2022-09-11 19:15:03 +02:00
Matthieu Coudron 800323c0c0 doc(vim): take into account plug non-support
Apply suggestions from code review

Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
2022-09-11 20:33:01 +02:00
Sandro 30ec7dc641
Merge pull request #156232 from B4dM4n/nixos-tests-mediatomb 2022-09-11 18:18:10 +02:00
Sandro Jäckel 4770866f93
nixos/vector: remove no longer required workaround for cross compiling 2022-09-11 17:11:47 +02:00
Christian Kögler f7077ba131
nixos: Fix cross compilation of derivations defined in NixOS via pkgs 2022-09-11 17:11:37 +02:00
Domen Kožar 3f7ba12868 cachix-agent: fix a typo 2022-09-11 16:10:21 +01:00
Jason Yundt 17352e8995 nixos/security/wrappers: clarify required format for capabilities
Before this change, the description for
security.wrappers.<name>.capabilities made it seem like you could just
string together the names of capabilities like this:

  capabilities = "CAP_SETUID,CAP_SETGID";

In reality, each item in the list must be a full-on capability clause:

  capabilities = "CAP_SETUID=ep,CAP_SETGID+i";
2022-09-11 16:36:58 +02:00
Christian Kögler 11bafe6b5b nixos/syncthing: remove exit code 2 from exit status success
Fix #181713
2022-09-11 16:21:07 +02:00
Luke Granger-Brown 55d9a2c596 nixos/paperless: fix time.timeZone setting
This attribute set isn't passed through the NixOS config resolution
mechanism, which means that we can't use lib.mkDefault here.

Instead, just put it before any user overrides so that if the user
specifies this environment variable it'll just override it anyway.
2022-09-11 15:01:47 +01:00
Christian Kögler cfbf9bd15c nixos/nspawn: Fix configuration name PrivateUsersOwnership
Fix #189046
2022-09-11 13:08:36 +02:00
Vladimír Čunát a3d7dfe8a3
Merge branch 'master' into staging-next 2022-09-11 08:43:51 +02:00
Christian Kögler 0ea763fab6
Merge pull request #188009 from martiert/fido2luks
nixos/luksroot: Support adding a list of credentials to fido2luks
2022-09-11 07:42:57 +02:00
Christian Kögler 8a039bc1dd
Merge pull request #190634 from ck3d/fix-nixos-influx-cross
nixos/influx: Fix cross compilation for configFile
2022-09-11 07:29:59 +02:00
github-actions[bot] b6caee49dc
Merge master into staging-next 2022-09-11 00:02:48 +00:00
Sandro f0f614616f
Merge pull request #190646 from Ma27/bump-nextcloud 2022-09-11 00:34:54 +02:00
Maximilian Bosch f72099e0cd
nixos/nextcloud: fix a deprecation warning in the tests using redis 2022-09-10 23:53:40 +02:00
Markus S. Wamser b20df24e2c
nixos/ausweisapp: init module with firewall option
Optional functionality of AusweisApp2 requires an UDP port to be opened.
The module allows for convenient configuration and serves as documentation.
See also https://github.com/NixOS/nixpkgs/issues/136269
2022-09-10 23:48:20 +02:00
github-actions[bot] cf964b46ea
Merge master into staging-next 2022-09-10 18:01:15 +00:00
Jörg Thalheim 67db9b4ad1
Merge pull request #190695 from Mic92/gollum
nixos/gollum: add package option
2022-09-10 18:27:29 +02:00
pennae d98322834b nixos/*: fix docbook deprecation notices
mostly no rendering changes except in buildkite, which used markdown
where docbook was expected without marking up its markdown.
2022-09-10 18:23:13 +02:00
pennae 767485a0de lib/options: deprecate docbook text and literalDocBook
deprecate literalDocBook by adding a warning (that will not fire yet) to
its uses and other docbook literal strings by adding optional warning
message to mergeJSON.
2022-09-10 18:23:13 +02:00
Jörg Thalheim ad0108d803 nixos/gollum: add test 2022-09-10 18:09:08 +02:00
Jörg Thalheim 6a66cf1b90 nixos/gollum: add package option 2022-09-10 17:57:08 +02:00
Florian Klink d20ff65f00
Merge pull request #188314 from cw1o/docs/update-mbr-partition-steps
nixos/docs: updated MBR partitioning steps
2022-09-10 14:12:23 +02:00
Christian Kögler 330bc02b01 nixos/influx: Fix cross compilation for configFile 2022-09-10 08:10:24 +02:00
github-actions[bot] 5644fd38ad
Merge master into staging-next 2022-09-10 00:02:45 +00:00
Sandro f58312c4da
Merge pull request #190103 from kilianar/nixosTests.gitea 2022-09-09 23:36:03 +02:00
github-actions[bot] c1ff69e1da
Merge master into staging-next 2022-09-09 18:01:29 +00:00
Silvan Mosberger 6389a26e5f
Merge pull request #181834 from ncfavier/numbers
lib/types: add `number`
2022-09-09 19:59:29 +02:00
Sandro Jäckel 08dd3b91ea nixos/vector: fix validation for cross compiling 2022-09-09 11:59:07 -04:00
Christian Kögler 6ee982a34e
Merge pull request #190498 from eskytthe/grafana-module-fix-text
nixos/grafana: fix description text error
2022-09-09 17:55:26 +02:00
Christian Kögler b3c8810040
Merge pull request #186695 from amarshall/installer-no-mkforce
nixos/installer: mkForce -> mkImageMediaOverride
2022-09-09 17:32:17 +02:00
Christian Kögler 4b6b03f99c
Merge pull request #185782 from e1mo/e1mo/syncthing-receiveencrypted
nixos/syncthing: Add receiveencrypted folder type
2022-09-09 17:30:45 +02:00
Christian Kögler d44b9d665c
Merge pull request #189201 from jmbaur/ipv6-route-prefix-example
nixos/systemd.network: Fix `ipv6RoutePrefixes` example
2022-09-09 17:05:36 +02:00
Erik Skytthe 3c1c405e72 nixos/grafana: fix description text error
Description text has been placed incorrectly for allowedDomains and allowedGroups
2022-09-09 15:55:15 +02:00
Naïm Favier 52bbbaeb09
nixos/doc/option-types: add precision loss warning for floats 2022-09-09 15:39:35 +02:00
github-actions[bot] a43d6b1a9a
Merge master into staging-next 2022-09-09 12:01:31 +00:00
Sandro b41f6fe581
Merge pull request #189957 from illustris/proxmox-vm 2022-09-09 11:45:16 +02:00
Brian Leung b7f19802af services/lemmy: fix /feeds/* and /nodeinfo/* API endpoints
Co-authored-by: Shahar Dawn Or <mightyiampresence@gmail.com>
Co-authored-by: Matthias Meschede <MMesch@users.noreply.github.com>
Co-authored-by: a-kenji <aks.kenji@protonmail.com>
Co-authored-by: Ctem <c@ctem.me>
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
2022-09-09 05:18:02 -04:00
github-actions[bot] 1c0ef46804
Merge master into staging-next 2022-09-09 00:02:46 +00:00
Yureka bb5b6029aa
Revert "nixos/console: detect unicode properly"
This reverts commit 05958b228b.

Issue https://github.com/NixOS/nixpkgs/issues/188998 is concerns quite a
few NixOS users with full disk encryption and custom keymap.
Since there hasn't been a proper fix agreed upon and merged, I am
reverting this.
The changes can be applied again, when it is ensured that they do not
break custom keymaps in initrd.
2022-09-08 23:11:45 +02:00
Ivv ac5e7351d1
Merge pull request #188754 from snaar/prometheus-ipmi
nixos/services.prometheus.exporters.ipmi: new module along with underlying ipmi_exporter package
2022-09-08 21:39:49 +02:00
illustris e7ec55a72d
nixos/proxmox-image: fix broken build, reduce build time 2022-09-08 08:26:02 +05:30
kilianar e9b99943dd nixosTests.gitea.*: adapt to option renaming 2022-09-07 09:51:45 +02:00
revol-xut 0e291be644
mediawiki: fix correctly setting --dbtype flag 2022-09-06 22:17:47 +02:00
github-actions[bot] 01253f131d
Merge master into staging-next 2022-09-06 18:01:13 +00:00
Bernardo Meurer 0627237785
Merge pull request #181334 from zhaofengli/nat-iptables-pkg
nixos/nat: Use the package specified in networking.firewall.package
2022-09-06 14:05:20 -03:00
Tako Marks 3df41451e3 nixos/kanidm: Bind mount cacert path in unixd service
In order to be able to use the unixd service with the `verify_ca` and
`verify_hostnames` set to `true` it needs to be able to read the
certificate store. This change bind mounts the cacert paths for the
unixd service.
2022-09-06 15:01:37 +02:00
Jacek Galowicz 8ae3e986a7
Merge pull request #189999 from sbruder/test-driver-formatting-closed-port
nixos/test-driver: fix formatting of closed port
2022-09-06 14:48:13 +02:00
Simon Bruder 9caf5f6ba9
nixos/test-driver: fix formatting of closed port
Co-authored-by: a-kenji <aks.kenji@protonmail.com>
2022-09-06 14:32:56 +02:00
github-actions[bot] 15740e0788
Merge master into staging-next 2022-09-06 12:01:31 +00:00
Luke Granger-Brown 8157e3d89f
Merge pull request #189934 from delroth/grafana-sandboxing
nixos/grafana: loosen systemd syscall sandboxing
2022-09-06 09:36:23 +01:00
Pierre Bourdon bfe73f9543
nixos/grafana: loosen systemd syscall sandboxing
Allow @resources syscalls in the grafana.service unit. While Grafana
itself does not need them, some plugins (incl. first party) crash if
they fail to setrlimit. This was first seen with the official grafana
Clickhouse datasource plugin.

The @resources syscalls set is fairly harmess anyway.
2022-09-06 02:10:47 +02:00
github-actions[bot] 1fcb01e547
Merge master into staging-next 2022-09-05 18:01:15 +00:00
Martin Weinelt 9ac9449a0a nixos/tests/kanidm: Update recover_account commandline
The username is now passed directly as an argument.
2022-09-05 17:13:10 +02:00
Fabian Möller 86bfd15732
nixos/tests/mediatomb: fix test when running with gerbera 2022-09-05 17:06:54 +02:00
Sandro a8737efd40
Merge pull request #187913 from ncfavier/ibus 2022-09-05 16:13:21 +02:00
Sandro 2902676b30
Merge pull request #189056 from jtojnar/fwupd 2022-09-05 16:13:00 +02:00
Fabian Möller f3e08ac0b1
nixos/mediatomb: wait for network-online.target 2022-09-05 16:03:01 +02:00
Martin Weinelt 268569b6d8
Merge pull request #189852 from erikarvstedt/paperless-pythonpath 2022-09-05 15:26:20 +02:00
Erik Arvstedt 783f8f16c1
paperless: move PYTHONPATH definition to module
`paperless-ngx.pythonPath` was incomplete due to the missing paperless-ngx
source, so it had to be amended in the service.
Instead of amending it, define it entirely in the service.

This allows an override of `paperless-ngx.propagatedBuildInputs` to be reflected
in the service's PYTHONPATH.
2022-09-05 14:50:45 +02:00
github-actions[bot] dc6009a527
Merge master into staging-next 2022-09-05 12:01:27 +00:00
Maciej Krüger ff7a59b802
Merge pull request #189824 from bobby285271/cinnamon-nixos-test 2022-09-05 13:05:04 +02:00
Bobby Rong 271b5dc25e
nixos/tests/cinnamon: init 2022-09-05 18:48:58 +08:00
Théo Zimmermann 0daa4b200c
Merge pull request #189721 from Zimmi48/changelog-for-coqide-split
coq: document CoqIDE split
2022-09-05 10:37:23 +02:00
Erik Arvstedt 310b9fe58d
nixos/paperless: extract variable pkg 2022-09-05 10:03:59 +02:00
github-actions[bot] f8118e6f67
Merge master into staging-next 2022-09-05 00:02:45 +00:00
Michele Guerini Rocco e8e48a7a53
Merge pull request #189749 from ncfavier/console-colors-check
nixos/console: add format check to `console.colors`
2022-09-04 21:56:06 +02:00
Martin Weinelt 0973090c9b
Merge pull request #189730 from mweinelt/paperless-release-notes 2022-09-04 21:45:04 +02:00
Naïm Favier cb40619996
nixos/console: add format check to console.colors 2022-09-04 21:09:08 +02:00
Jan Tojnar 89c025b366 nixos/fwupd: add polkit dependency
We are building fwupd daemon with polkit support which means
polkit daemon is required.

Previously polkit was enabled by default via udisks2 but that
stopped with f763710065
breaking the fwupd installed tests as a result.

Let’s add the polkit dependency to the fwupd module to ensure polkit is available.
2022-09-04 20:23:12 +02:00
github-actions[bot] 0ce8328301
Merge master into staging-next 2022-09-04 18:01:33 +00:00
Jonas Heinrich bdd227c300
Merge pull request #184827 from onny/dokuwiki
dokuwiki: 2020-07-29 -> 2022-07-31
2022-09-04 19:08:45 +02:00
Naïm Favier 3a2f99340c
ibus: fix installed tests 2022-09-04 18:52:45 +02:00
Martin Weinelt b36cd65ad1
rl-2211: Mention new paperless timezone default 2022-09-04 16:38:07 +02:00
Martin Weinelt f98011803e
nixos/paperless: Restrict CAP_NET_BIND_SERVICE
Handing CAP_NET_BIND_SERVICE to the `paperless-web.service` only makes
sense when it actually wants to bind to a port < 1024. Don't hand it out
if that is not the case.
2022-09-04 16:24:24 +02:00
Martin Weinelt 2d257f8101
nixos/paperless: Add pgsql via unix socket example
Finding out how to connect paperless to a PostgreSQL database via unix
sockets and peer authentication took me a few minutes, so leaving a hint
in the extraConfig example seems like a good idea to me.

Also remove unnecessary use of literalExpression for attribute set, it
is only required for complex values like functions or values that depend
on other values or packages.
2022-09-04 16:16:46 +02:00
Martin Weinelt 81a17f7352
nixos/paperless: Use system timezone by default, if set 2022-09-04 16:16:46 +02:00
Martin Weinelt 94f00041f0
nixos/paperless: Allow mbind syscall in paperless-web.services
After uploading a document through the webinterface I started seeing
it killed through the SYSBUS signal. Inspecting the call trace led me to
liblapack's memory allocator, that uses the mbind syscall on Linux.
2022-09-04 16:16:45 +02:00
Michele Guerini Rocco 68065dc561
Merge pull request #189711 from SuperSandro2000/gnupg-remote-quiet
nixos/gnupg: void error messages when using nix remote builders
2022-09-04 14:53:34 +02:00
Sandro Jäckel 0d44562788
nixos/gnupg: void error messages when using nix remote builders 2022-09-04 14:38:15 +02:00
Sandro 2f54aad5e6
Merge pull request #156813 from JQ-Networks/master 2022-09-04 14:32:13 +02:00