Commit graph

29244 commits

Author SHA1 Message Date
talyz 8e8253ddb4 nixos/gitlab: Create registry state path 2022-10-09 08:12:19 +02:00
talyz 3dedfb3fa0 nixos/gitlab: Connect to redis through a unix socket by default
This gives us slightly higher security as you have to be in the gitlab
group to connect, and possibly a (very small) performance benefit as
well.
2022-10-09 08:12:19 +02:00
talyz 843082eb3a nixos/gitlab: Add findutils to runtime dependencies
Needed for the gitlab:cleanup:orphan_job_artifact_files rake task.
2022-10-09 08:12:19 +02:00
talyz bee6e1dafa nixos/gitlab: Deduplicate runtime dependency listing 2022-10-09 08:12:19 +02:00
talyz 0211edd1ff nixos/gitlab: Add workhorse.config option 2022-10-09 08:12:19 +02:00
talyz 4df4d2a8ea genJqSecretsReplacementSnippet: Allow dots in attribute names...
...and escape quotation marks and backslashes.
2022-10-09 08:12:19 +02:00
Jörg Thalheim b4bb571fa0 iwd: remove myself as maintainer 2022-10-08 16:50:37 +02:00
Florian Klink 1780768449
Merge pull request #194684 from oxalica/fix/systemd-oomd-test
nixos/tests/systemd-oomd: fix and follows upstream tests
2022-10-08 16:09:45 +02:00
Robert Scott 68138bfb28 nixosTests.spark: give worker node 2G of memory
test currently failing due to OOM
2022-10-08 11:55:51 +01:00
Nick Cao 309ea5a1af nixos/udev: allow marking firmware as not compressible 2022-10-07 19:40:58 +00:00
Christian Kögler aff16d8bc8
Merge pull request #190052 from JasonWoof/acme-example
nixos/doc: fix acme dns-01 example
2022-10-07 12:53:15 +02:00
Alexander Bantyev 99cc02fe98
Merge pull request #193694 from cab404/fwupd-remote-list
nixos.fwupd: add remote list option
2022-10-07 14:23:19 +04:00
Edward Tjörnhammar a72e138b78 nixos/jfs: correct broken toplevel reference 2022-10-06 19:26:13 +00:00
Lucas Savva 49c0fd7d60 nixos/acme: Disable lego renew sleeping
Lego has a built-in mechanism for sleeping for a random amount
of time before renewing a certificate. In our environment this
is not only unnecessary (as our systemd timer takes care of it)
but also unwanted since it slows down the execution of the
systemd service encompassing it, thus also slowing down the
start up of any services its depending on.

Also added FixedRandomDelay to the timer for more predictability.
2022-10-06 10:30:24 -04:00
Lucas Savva 657ecbca0e nixos/acme: Make account creds check more robust
Fixes #190493

Check if an actual key file exists. This does not
completely cover the work accountHash does to ensure
that a new account is registered when account
related options are changed.
2022-10-06 10:30:24 -04:00
Lucas Savva 39796cad46 nixos/acme: Fix cert renewal with built in webserver
Fixes #191794

Lego threw a permission denied error binding to port 80.
AmbientCapabilities with CAP_NET_BIND_SERVICE was required.
Also added a test for this.
2022-10-06 10:30:24 -04:00
Sandro 2fca262fa0
Merge pull request #194271 from andersk/teleport-10 2022-10-06 15:36:47 +02:00
pennae 3826e303c6 nixos/firefox-syncserver: remove extra add_header
syncstorage-rs sets this header starting with 0.12.3.
2022-10-06 14:48:53 +02:00
pennae f97c9d60e4 nixos/firefox-syncserver: proxyPass singleNode to 127.0.0.1
syncstorage-rs does not listen on ::1 unless explicitly configured.
2022-10-06 14:48:53 +02:00
pennae 8dc30e9e98 nixos/firefox-syncserver: set default for oauth verifier threads
the 0.12.1 update introduced a static thread pool for verifying oauth
tokens. set a reasonable default for self-hosted setups (10 threads).
2022-10-06 14:48:53 +02:00
Jörg Thalheim 988c9130e1
Merge pull request #193767 from winterqt/update-dendrite
dendrite: 0.9.9 -> 0.10.1
2022-10-06 09:28:32 +02:00
oxalica 9fca212c84 nixos/tests/systemd-oomd: fix and follows upstream tests
The current test triggers the kernel OOM killer and doesn't work well.
2022-10-06 09:48:13 +08:00
Stanisław Pitucha 4a6979d310
Merge pull request #194603 from phiadaarr/jitsiVideobridge
jitsi-videobridge: fix link in docs
2022-10-06 12:19:43 +11:00
06kellyjac becacf259d teleport: 9.1.2 -> 10.3.1
Dropped the roletester since it doesn't exist anymore

Co-authored-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2022-10-05 13:52:20 -07:00
José Luis Lafuente 396f4f05b9
nixos/tmate-ssh-server: init module (#192270)
* nixos/tmate-ssh-server: init module

Co-authored-by: Aaron Andersen <aaron@fosslib.net>
2022-10-05 17:34:30 +01:00
Philipp Arras 1e430612dc jitsi-videobridge: fix link in docs 2022-10-05 18:11:57 +02:00
Florian Klink c1c406bc87
Merge pull request #191491 from oxalica/fix/systemd-initrd-modprobe
nixos/systemd-stage-1: include modprobe confg in initrd
2022-10-05 10:39:58 +02:00
Thiago Kenji Okada d10f9fdccd
Merge pull request #193939 from thiagokokada/bump-retroarch
retroarch: 1.10.3 -> 1.11.0;  libretro: unstable-2022-04-21 -> unstable-2022-10-01
2022-10-05 09:00:37 +01:00
oxalica 3c92009868 nixos/tests/systemd-initrd-modprobe: init 2022-10-05 08:37:51 +08:00
Robert Hensing 70ec3b9f54
Merge pull request #193498 from hercules-ci/nixos-doc-disambiguate-test-options
nixos/doc: disambiguate test option ids
2022-10-04 21:35:49 +01:00
superherointj 2e19f2fa53 maintainers: remove superherointj 2022-10-04 14:06:48 -03:00
superherointj ef157b4b4c
Merge pull request #193376 from superherointj/package-k3s-1.25.2+k3s1
k3s: 1.25.0+k3s1 -> 1.25.2+k3s1
2022-10-04 13:11:41 -03:00
Adam Joseph c46bdcbaf2 nixos/lib/qemu-common.nix: set qemuSerialDevice for isMips64 2022-10-04 07:48:12 +00:00
Jan Tojnar e14d1e1bc9
Merge pull request #192969 from jtojnar/extra-gsettings-strict
GNOME/Cinnamon/Pantheon: Clean up GSettings overrides and make strict
2022-10-04 00:59:08 +02:00
Christian Kögler fd323dfe49
Merge pull request #194159 from foo-dogsquared/update-systemd-extraconfig-module-doc
nixos/systemd: update extraConfig description
2022-10-03 21:56:25 +02:00
Sandro b70049a463
Merge pull request #183349 from Luflosi/rename-ipfs-to-kubo 2022-10-03 21:34:14 +02:00
David Morgan bd62717fd3
libinput: Add tappingButtonMap option (#189612)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-10-03 21:13:43 +02:00
Sandro 1385382014
Merge pull request #191532 from ambroisie/add-tandoor-recipes 2022-10-03 20:25:06 +02:00
Bruno BELANYI 91ba8464f4 nixos/tandoor-recipes: add test 2022-10-03 09:48:54 +02:00
Bruno BELANYI d8b1d34806 nixos/tandoor-recipes: init module 2022-10-03 09:48:54 +02:00
Gabriel Arazas 292aab9822 nixos/systemd: update extraConfig description 2022-10-03 11:17:41 +08:00
Graham Christensen 25acc1d800
Merge pull request #190014 from fgaz/vengi-tools/0.0.21
vengi-tools: 0.0.20 -> 0.0.21
2022-10-02 13:04:45 -04:00
superherointj 3d200bd959 nixos/tests/k3s: fix tests
* add superherointj as maintainer
2022-10-02 13:01:47 -03:00
piegames ec5f7d48ab
Merge pull request #194058: Disable checkMeta by default again 2022-10-02 18:00:48 +02:00
Jörg Thalheim ffde4721ab
Merge pull request #194052 from rapenne-s/fail2ban_doc
nixos/fail2ban: improve module documentation
2022-10-02 17:09:43 +02:00
Luflosi eefaaf41d6
kubo: rename from ipfs
Go-IPFS was renamed to Kubo in version 0.14.0, see https://github.com/ipfs/kubo/issues/8959.
2022-10-02 16:00:22 +02:00
Profpatsch 1600cba863 Disable checkMeta by default again.
This caused too many downstream projects to break, so we are reverting
this change for now, until further transition fixes are in place.

See discussion in https://github.com/NixOS/nixpkgs/pull/191171

This reverts part of 6762de9a28
2022-10-02 14:28:40 +02:00
Solene Rapenne 605a588ea6 nixos/fail2ban: improve module documentation 2022-10-02 12:59:54 +02:00
Christian Kögler 6845ddc94b
Merge pull request #192864 from alyaeanyx/nix-serve-package-option
nixos/nix-serve: add package option
2022-10-02 11:39:28 +02:00
Sandro f01f3c83d2
Merge pull request #192615 from gador/pgadmin-6.14 2022-10-01 23:53:36 +02:00