Commit graph

34477 commits

Author SHA1 Message Date
github-actions[bot] 09bdd38107
Merge master into staging-next 2023-07-10 00:02:30 +00:00
Sandro eae22520b9
Merge pull request #237802 from SuperSandro2000/ceph-package-options
nixos/ceph: add options to configure package used by each component
2023-07-09 23:38:28 +02:00
Jacob Moody 5f97e78c64 pam_dp9ik: init at 1.5 2023-07-09 14:12:21 -05:00
Demitri Tzitzon d629ca54b2 k3s: symlinks for kubectl crictl & ctr 2023-07-09 20:40:36 +02:00
github-actions[bot] a61c7c58e4
Merge master into staging-next 2023-07-09 18:01:03 +00:00
K900 2fc57ae670 nixos/tests: adjust everything I missed for sddm update
Also clean up a few warnings while we're at it.
2023-07-09 18:49:28 +03:00
github-actions[bot] c60d48234a
Merge master into staging-next 2023-07-09 12:01:18 +00:00
Jacek Galowicz c916884f86 integration test driver: Synchronize integration test driver's docstrings in Machine class methods with nixos documentation 2023-07-09 13:57:07 +02:00
Jacek Galowicz c97588eedc integration test driver: Adapt test script checking output 2023-07-09 13:57:07 +02:00
Lily Foster 5c1583bfd7
nixos/plymouth: fix minor doc rendering issue 2023-07-09 02:31:05 -04:00
github-actions[bot] a52559d1f6
Merge master into staging-next 2023-07-09 06:01:18 +00:00
K900 8533b23159 nixos/networkd: fix mismerge of #240969 and #241362 2023-07-09 07:34:42 +03:00
github-actions[bot] 24fc2ed8e1
Merge master into staging-next 2023-07-09 00:02:38 +00:00
Artturin 1b1f25312d ananicy: unstable-2021-11-05 -> unstable-2023-03-21
type's were renamed so this will break some user rules
2023-07-09 00:58:05 +03:00
Will Fancher 0b25b4c7c9
Merge pull request #237908 from lilyinstarlight/upd/plymouth-2023-06-05
plymouth: unstable-2021-10-18 -> unstable-2023-06-05
2023-07-08 16:57:31 -04:00
Robert Hensing a1d0ee8c50
nixos/nix-channel: Apply suggestions from code review
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-07-08 20:49:37 +02:00
github-actions[bot] e949ec41bd
Merge master into staging-next 2023-07-08 18:01:04 +00:00
Ryan Lahfa 186edce0a0
Merge pull request #241362 from RaitoBezarius/macvtap-networkd 2023-07-08 20:00:52 +02:00
Artturin aae2268e0a nixos/ananicy-cpp: add rulesProvider 2023-07-08 20:28:45 +03:00
K900 008f9f0cd4 nixos/test-driver: actually use the backdoor message to wait for backdoor
New EDK2 sets up the backdoor port as a serial console, which feeds the test driver
a bunch of boot logs it can safely ignore. Do so by waiting for the message the
backdoor shell prints before doing anything else.
2023-07-08 20:21:50 +03:00
Artturin ff28d7a982 nixos/ananicy: don't error if $out/ananicy-cpp doesn't exist
copy new rule
2023-07-08 20:19:13 +03:00
Artturin b04a04929c nixos/ananicy: add extraTypes, extraCgroups 2023-07-08 19:42:46 +03:00
Joerie de Gram 1785fe6c01 nixos/i18n: correct defaultText for supportedLocales 2023-07-08 16:43:22 +02:00
Robert Hensing 3fd4ac8e82
Merge pull request #237040 from roberth/flexible-activation
nixos/system: Support pre-activated images
2023-07-08 16:06:25 +02:00
K900 9c98b1a744
Merge pull request #233981 from K900/dont-touch-graphical-session-target
nixos/x11/display-managers: don't touch graphical-session.target in xsession-wrapper
2023-07-08 16:43:27 +03:00
Raito Bezarius 6b9e49230d nixos/networkd: add MACVTAP= option for networks
Example 10. of man page of systemd.network(5) shows:
```

       Example 10. MacVTap

       This brings up a network interface "macvtap-test" and attaches it to "enp0s25".

           # /usr/lib/systemd/network/25-macvtap.network
           [Match]
           Name=enp0s25

           [Network]
           MACVTAP=macvtap-test
```

Which is a MACVTAP example and is currently unsupported in NixOS.
This is useful for people using "modern" technologies with virtual machines.
2023-07-08 15:42:10 +02:00
Ryan Lahfa ed2f009130
Merge pull request #237873 from Mic92/fix-aarch64-zfs 2023-07-08 14:41:00 +02:00
Ryan Lahfa 7be83143e8
Merge pull request #222536 from oddlama/master 2023-07-08 14:36:18 +02:00
Ryan Lahfa 89d68cebcb
Merge pull request #241126 from RaitoBezarius/fix-plausible-secret-handling 2023-07-08 14:34:20 +02:00
Ryan Lahfa 0d2f526dbb
Merge pull request #241462 from SuperSandro2000/remove-ddclient 2023-07-08 14:33:00 +02:00
Ryan Lahfa 828633d36a
Merge pull request #241534 from samueldr/fix/finally-deprecate-boot-loader-raspberrypi 2023-07-08 14:16:27 +02:00
K900 d26393d60c nixos/x11/display-managers: don't touch graphical-session.target in xsession-wrapper if the desktop knows how to handle it
This is not correct and will in fact break things because they try to run before the target is reached.
Ideally we'd get rid of it entirely, but WM users rely on this behavior, so allowlist some desktops
to get the sane behavior, and fake the session for the rest until upstreams/NixOS modules catch up.
2023-07-08 15:09:39 +03:00
github-actions[bot] 3ab86b3cfa
Merge master into staging-next 2023-07-08 12:01:04 +00:00
Ryan Lahfa 49413e25e0
Merge pull request #241314 from jnsgruk/master 2023-07-08 13:58:20 +02:00
Bruce Toll 8f4f1ce005 nixos/atop: Fix regression in enabling atop units
Fix regression where the systemd units for atop are no longer
automatically started at boot when programs.atop.enable = true.

Regression was introduced in commit: 09350ff7d4
  nixos/atop: Convert log format to fix service start

This commit restructures the atop systemd service config so that the
code to convert the log format gets configured as a preStart script
along with the addition of the wantedBy rule.
2023-07-08 07:29:22 -04:00
K900 400aafbdc9
Merge pull request #239389 from K900/sddm-0.20.0
sddm: 0.19.0 -> 0.20.0
2023-07-08 11:52:02 +03:00
github-actions[bot] cc1af72ece
Merge master into staging-next 2023-07-08 06:01:19 +00:00
adisbladis 038752b14e
Merge pull request #242155 from adisbladis/lemmy-0_18_1
lemmy-{ui,server}: 0.18.0 -> 0.18.1
2023-07-08 14:48:16 +12:00
adisbladis f2b2e6d098
Merge pull request #240246 from adisbladis/xonsh-envs
xonsh: Add wrapper
2023-07-08 14:26:43 +12:00
adisbladis 8062626e0e lemmy-{server,ui}: 0.18.0 -> 0.18.1 2023-07-08 13:59:30 +12:00
github-actions[bot] 6d9902baac
Merge master into staging-next 2023-07-08 00:02:35 +00:00
Robert Hensing 61afc4d166 nixos/nix-channel: Take care of NIX_PATH's non-empty default when disabled 2023-07-07 23:12:39 +02:00
Janik e46ab54b68
Merge pull request #241783 from gmemstr/n8n-tweaks 2023-07-07 23:04:48 +02:00
Ilan Joselevich 7016b8bf7a
Merge pull request #242076 from Kranzes/nixtmpfilesd
nixos/nix-daemon: use tmpfiles from nixPackage when possible
2023-07-07 23:53:27 +03:00
Jeremy Kolb 1e16a937ca vmware-guest module: work under aarch64 2023-07-07 15:40:29 -04:00
github-actions[bot] f66291aefe
Merge master into staging-next 2023-07-07 18:01:21 +00:00
Jon Seager 21e36654c8
nixos/tests/lxd-ui: init lxd-ui tests 2023-07-07 18:31:04 +01:00
Jon Seager 2fbb85e2c9
nixos/lxd: add ui.enable option to toggle ui feature 2023-07-07 18:31:03 +01:00
Ilan Joselevich 160edcf2c5
nixos/twingate: add package option and test 2023-07-07 20:03:54 +03:00
Robert Hensing d00e242b80 nixos: Add nixos.channel.enable
For those who wish to get rid of nix-channel.
2023-07-07 19:00:06 +02:00
Robert Hensing faa1b3babc nixosTests.installer: Fix driverInteractive 2023-07-07 19:00:05 +02:00
Robert Hensing 218ef2f405 nixosTests.installer: Make sure we boot into the config we generated 2023-07-07 19:00:05 +02:00
Gabriel Simmer 4656163a04
nixos/n8n: add test for webhookUrl configuration 2023-07-07 16:20:03 +01:00
Ilan Joselevich af8206f801
nixos/nix-daemon: use tmpfiles from nixPackage when possible 2023-07-07 17:29:05 +03:00
Pol Dellaiera 764472b473
Merge pull request #233091 from yayayayaka/add-team-gitlab
maintainers/team-list: Add team gitlab
2023-07-07 15:19:15 +02:00
Nick Cao b119b38cc1
Merge pull request #241134 from frederictobiasc/mautrix
mautrix-telegram: 0.14.0 -> 0.14.1, python3Packages.mautrix: 0.19.16 -> 0.20.0
2023-07-07 20:41:07 +08:00
Franz Pletz a72142410d
Merge pull request #241969 from mweinelt/kea-2.4.0 2023-07-07 14:13:11 +02:00
github-actions[bot] da44aac0b1
Merge master into staging-next 2023-07-07 12:01:26 +00:00
K900 c0132f22e9 sddm: 0.19.0 -> 0.20.0 2023-07-07 12:46:59 +03:00
Sandro Jäckel 88d7aa56e1
nixos/nix*: remove not necessary imports
We do not really declare module dependencies anywhere else and it would
a nousance to move any file if many other referenced it without being
necessary. Also most higher level modules depend on most of the lower
level ones.
So removing this because it can only potentially cause weird issues.
2023-07-07 11:01:12 +02:00
Robert Hensing 54303b65ef
Merge pull request #241690 from hercules-ci/nixos-nix-modules
Split nixos/nix-daemon.nix
2023-07-07 10:29:58 +02:00
Robert Hensing 262e7272c7
Merge pull request #236389 from Enzime/darwin-builder
darwin-builder: use port 31022 by default
2023-07-07 10:24:48 +02:00
Robert Hensing 12cb2b0b40 nixos: flakes.nix -> nix-flakes.nix
I guess this is what people expect to find. Thanks Sandro.
2023-07-06 23:27:17 +02:00
Martin Weinelt 048b14d40f
nixos/tests: Fix delegated prefix in prefix-delegation test
Prefix/pool validation since kea 2.4.0 is now complaining about
overlapping and not properly aligned prefix lengths.
2023-07-06 22:49:06 +02:00
github-actions[bot] 1a76e12ddc
Merge master into staging-next 2023-07-06 18:01:11 +00:00
Robert Hensing c83ad0598b nixos/*nix*: Update module impl docs and link related modules
Something extra for the readers.
2023-07-06 20:00:10 +02:00
Robert Hensing 07de9b62cc nixos/*nix*: Add imports as inherently necessary
Albeit not technically necessary because of nixos//module-list.nix
2023-07-06 19:48:22 +02:00
Michele Guerini Rocco d0b4889418
Merge pull request #240295 from sysvinit/sysvinit/udev-privacy-address-scope
network-interfaces: restrict ipv6 udev rules
2023-07-06 18:03:36 +02:00
Kevin Boulain 680ee304ca nixos/usbguard: rename services.usbguard.implictPolicyTarget to services.usbguard.implicitPolicyTarget 2023-07-06 15:34:40 +02:00
Kerstin ba445ba8bc
Merge pull request #241088 from jooooscha/master
maintainers: add joscha
2023-07-06 15:30:28 +02:00
Michael Hoang edef486898 darwin.linux-builder: rename from darwin.builder 2023-07-06 21:33:09 +10:00
Michael Hoang 34f6ce2fc2 darwin.builder: allow overriding configuration 2023-07-06 21:32:08 +10:00
Michael Hoang 98d970bc37 nixos/qemu-vm: use CA certificates from host 2023-07-06 21:32:08 +10:00
Michael Hoang 285f5e858e darwin.builder: use port 31022 by default 2023-07-06 21:32:08 +10:00
github-actions[bot] b9424c74c5
Merge staging-next into staging 2023-07-06 00:03:25 +00:00
Gabriel Simmer 674de7c287
nixos/n8n: correct configuration, webhookUrl type
I realised in NixOS#240189 I made some minor errors in the service definition.
2023-07-05 23:15:52 +01:00
Sandro 5e3022fb17
Merge pull request #240320 from wegank/cdesktopenv-bump
cdesktopenv: 2.3.2 -> 2.5.1
2023-07-05 23:41:36 +02:00
Lassulus f751061a08
Merge pull request #237477 from accelbread/usbguard-dbus-support
nixos/usbguard: add USBGuard dbus daemon option
2023-07-05 23:13:10 +02:00
Vladimír Čunát d507f1d4a6
Merge branch 'master' into staging 2023-07-05 23:06:05 +02:00
K900 db9b857e1d nixos/iso-image: fix syntax 2023-07-05 21:49:03 +03:00
github-actions[bot] 8791a24d33
Merge staging-next into staging 2023-07-05 18:02:00 +00:00
Will Fancher e520c2e278
Merge pull request #240600 from lilyinstarlight/fix/luksroot-lvm-default-off
nixos/lvm: toggle initrd enable option independently of main options
2023-07-05 12:42:45 -04:00
Alexander Sieg 8d80108d6d nixos/gitlab: configure elasticsearch indexer path 2023-07-05 15:01:31 +02:00
Robert Hensing 0f71c406cf nixos/nix-daemon: Move to services/system
It is now only about the system service.
Granted, it also installs the client package, but that could be
factored out later, with actual test to support such a new type of
configuration.
2023-07-05 14:59:01 +02:00
Jan Tojnar 6bbcd65c44 gedit: Move out of GNOME
It has been moved out of GNOME core in favour of gnome-text-editor.
And it is not much of a GNOME app anymore either, using custom gtksourceview fork.
2023-07-05 14:56:27 +02:00
Robert Hensing fad172a366 nixos/config/nix-channel: Move NIX_PATH logic 2023-07-05 14:54:29 +02:00
Robert Hensing 5c0c96a828 nixos/config/nix-channel: Factor out root channel initialization 2023-07-05 14:54:29 +02:00
Robert Hensing 1c772cd857 nixos/config/flakes: Factor out 2023-07-05 14:54:28 +02:00
Robert Hensing d6a68f0542 nixos/config/nix-remote-build: Factor out 2023-07-05 14:54:27 +02:00
Robert Hensing 4bbd44908c nixos/config/nix: Move extraOptions 2023-07-05 14:54:27 +02:00
Robert Hensing 19e33831c6 nixos/config/nix: Move nix.check* 2023-07-05 14:54:26 +02:00
Robert Hensing d73da5b868 nixos/config/nix: Move nix.settings 2023-07-05 14:54:26 +02:00
Yaya 71be5933cd nixos/snipe-it: Use the pinned PHP package
As 3bb3859 bumped the default PHP version to 8.2, the snipe-it package
has been pinned to PHP 8.1. This commit changes the php package used in
the module to the one pinned by snipe-it.
2023-07-05 14:47:05 +02:00
github-actions[bot] 007ab6fb2f
Merge staging-next into staging 2023-07-05 12:02:05 +00:00
Maximilian Bosch b82c8e13c7
Merge pull request #228508 from SuperSandro2000/gitea-no-recurse
nixos/gitea: don't recursively change file owners/permissions
2023-07-05 13:56:46 +02:00
Lassulus 7e37c051c1
Merge pull request #241526 from Mic92/cloud-init 2023-07-05 13:31:27 +02:00
Jörg Thalheim 56926dda06
Merge pull request #239393 from Lassulus/iso-graphical
nixos/iso-image: make graphical grub configurable
2023-07-05 12:30:59 +01:00
Robert Hensing 6649d1e369 nixos/config/nix: Move nixConf 2023-07-05 13:03:32 +02:00
Robert Hensing 2fa416732c nixos/config/nix: Move legacyConfMappings 2023-07-05 12:52:56 +02:00
Maximilian Bosch 7f0bc68c32
Merge pull request #237544 from hrdinka/fix_gitea
Revert "nixos/gitea: requires database"
2023-07-05 12:09:55 +02:00
Lily Foster 7b514d2175
nixos/lvm: toggle initrd enable option independently of main options 2023-07-05 04:59:04 -04:00
Jan Tojnar 2819e547d3 Merge branch 'staging-next' into staging
; Conflicts:
;	pkgs/development/libraries/nss/generic.nix

- bb53634671 removed the conditionals since firefox-esr-91 and nss <3.69 has been dropped a while ago.
- cb3762857d updated the conditionals to always partition the tests based on the nss_latest version. Chosen that since it will remain future proof.
2023-07-05 02:22:26 +02:00
Emily 3a79936b45
Merge pull request #217536 from sephii/caddy-reload
nixos/caddy: add support for reload
2023-07-04 22:57:24 +02:00
r-vdp 9ef5b7d793 nixos/x11: change the description of the display manager service
Currently systemd prints `Starting X11 Server` in the journal, which completely
misled me into searching why my wayland system was starting an X server.
Turns out that what is started is actually the display manager,
so I think it's better to call it like that in the description.
2023-07-04 21:08:13 +02:00
Samuel Dionne-Riel a6e61a1ea9 nixos: Formally deprecate boot.loader.raspberryPi
The whole option set was recommended against since mid-2019, and never
worked with the Raspberry Pi 4 family of devices.

We should have deprecated it in early 2020 for removal by 2021. At the
time I did not feel confident in making such a decision, and never
ended-up getting around to it.

The ***only*** supported-by-NixOS boot methods for AArch64 are
standards-based boot methods, namely UEFI or the pragmatically
almost-standard extlinux-compatible for U-Boot.

You can quote me on that.
2023-07-04 13:42:57 -04:00
Jörg Thalheim 6f404ed214 cloud-init: add xfs support 2023-07-04 19:27:18 +02:00
Alexander Sieg 8934558abf
nixos/gitlab: fix unit test result display (#241322)
After the update to GitLab 16 the puma worker needs `gzip` in it's PATH
in order to junit test results.
2023-07-04 18:57:19 +02:00
Atemu 712caf8eb1
Merge pull request #224366 from martinetd/ankisyncd-rs
ankisyncd-rs: add package for anki-sync-server-rs
2023-07-04 18:03:19 +02:00
Sandro Jäckel d35df28f65
ddclient: remove package and module on upstream maintainer request 2023-07-04 16:46:53 +02:00
Martin Weinelt 06f0af1f0a
firefox-esr-115-unwrapped: init at 115.0esr
The next major version of the Firefox Extended Support Release.

https://www.mozilla.org/en-US/firefox/115.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-22/

Fixes: CVE-2023-3482, CVE-2023-37201, CVE-2023-37202, CVE-2023-37203
       CVE-2023-37204, CVE-2023-37205, CVE-2023-37206, CVE-2023-37207,
       CVE-2023-37208, CVE-2023-37209, CVE-2023-37210, CVE-2023-37211,
       CVE-2023-37211, CVE-2023-37212
2023-07-04 16:07:25 +02:00
github-actions[bot] 14bdc27ee1
Merge staging-next into staging 2023-07-04 12:01:56 +00:00
Sylvain Fankhauser 27b7132e81
nixos/caddy: remove admin check
Since it introduces IFD.
2023-07-04 11:25:08 +02:00
Sylvain Fankhauser 1f0ac736b4
nixos/caddy: add support for reload 2023-07-04 11:25:05 +02:00
Pol Dellaiera 3ede00e4fa
Merge pull request #240571 from gaelreyrol/scaphandre-module-assertions
nixos/prometheus/exporters: adjust scaphandre assertions
2023-07-04 11:24:24 +02:00
Dominique Martinet fbe3e3b44e replace ankisyncd with ankisyncd-rs
- remove old ankisyncd python package
- rename new rust package so it's a drop in replacement
2023-07-04 18:14:18 +09:00
Dominique Martinet 668f528b6c nixos/ankisyncd: use ankisyncd-rs instead of the old python one
Unfortunately the config is not compatible; data itself looks like it was compatible
from an up to date python ankisyncd but I wouldn't assume anything with the older
service (which didn't work for me with either ankidroid or recent desktop version)
2023-07-04 18:14:17 +09:00
Florian Klink f338f46fff
Merge pull request #240969 from mutantmell/systemd-network-unit-util
systemd.network: move unit file generation code into a util
2023-07-04 12:02:37 +03:00
Janik 8419b512e6
Merge pull request #240189 from gmemstr/patch-1
n8n: add WEBHOOK_URL environment variable
2023-07-04 08:56:36 +02:00
github-actions[bot] 0f844d9b01
Merge staging-next into staging 2023-07-03 18:01:46 +00:00
Will Fancher 73a8ca1674
Merge pull request #240601 from lilyinstarlight/fix/lvm-root-sd-stage-1-unhide
nixos/*: unhide remaining systemd stage-1 options
2023-07-03 13:38:12 -04:00
Christoph Hrdinka 70cc0d412f
nixos/gitea: only require databases if createDatabase is set
Currently the database service (mysql/postgresql) is required by the
gitea service. If none of them exists on the same machine as gitea it
will refuse to start. With this change it is only required if
createDatabase was set to true.
2023-07-03 17:02:12 +02:00
Lein Matsumaru 143869247e
rtl8723bs-firmware: cleanup 2023-07-03 14:22:20 +00:00
Lily Foster e9207b0501
nixos/*: unhide remaining systemd stage-1 options
These options were missed in NixOS/nixpkgs#226237, but they all were
specifically added for systemd stage-1.
2023-07-03 08:41:38 -04:00
github-actions[bot] afae8eadb8
Merge staging-next into staging 2023-07-03 12:01:45 +00:00
Janik 565fc74d28
Merge pull request #240954 from michaelshmitty/anuko-time-tracker-fixup 2023-07-03 12:29:43 +02:00
Bobby Rong dd9fcc40b7
Merge pull request #241131 from ShamrockLee/nix-daemon-gramman
nixos/nix-daemon: fix grammatical mistake in description
2023-07-03 16:41:51 +08:00
Michael Smith 65585d6c53 nixos/anuko-time-tracker: improve module options
* Remove unsafe dbinstall.php script
* Make Nginx virtualhost configurable
2023-07-03 08:39:17 +02:00
github-actions[bot] 61abd839c4
Merge staging-next into staging 2023-07-03 06:01:59 +00:00
Eric Wolf ee5cc38432 lemmy: Support secret options
This commit implements #101777 by merging
the config with an external file at startup.
2023-07-03 09:12:40 +08:00
Nguyễn Gia Phong 170125ebdb nixos/ntfy.sh: require base-url setting
It is required by attachment-cache-dir whose default is provided.
2023-07-03 08:58:05 +08:00
github-actions[bot] 9fc1b7bdc9
Merge staging-next into staging 2023-07-03 00:03:26 +00:00
Ryan Lahfa 9f2cff4e0a
Merge pull request #240913 from gabriel-doriath-dohler/MCHPRS 2023-07-03 01:14:24 +02:00
gabriel-doriath-dohler 04c830db01 nixos/mchprs: init module
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
2023-07-02 23:59:59 +00:00
github-actions[bot] d3954e9196
Merge staging-next into staging 2023-07-02 18:01:45 +00:00
Emily d8c2229c49
Merge pull request #226684 from srid/patch-8
nixos/jenkins-job-builder: Fix link to documentation, use mkEnableOption
2023-07-02 19:49:17 +02:00
Sridhar Ratnakumar ac4790a84e
nixos/jenkins-job-builder: Fix link to documentation, use mkEnableOption
Co-Authored-By: emilylange <git@emilylange.de>
2023-07-02 19:07:44 +02:00
Frédéric Tobias Christ bb55edd515 mautrix-telegram: 0.14.0 -> 0.14.1
Add new configuration option regarding IPv6 support to the example.

Diff: https://github.com/mautrix/telegram/compare/refs/tags/v0.14.0...v0.14.1
Changelog: https://github.com/mautrix/telegram/releases/tag/v0.14.1
2023-07-02 17:44:51 +02:00
Yueh-Shun Li a899971599 nixos/nix-daemon: fix grammatical mistake in description 2023-07-02 23:27:09 +08:00
Raito Bezarius d7e721f614 plausible: fix admin user password seed and SMTP passwords
LoadCredential was misused as it is not building any environment variable,
it is the responsibility of our preStart to do it so
Plausible's script can pick it up.
2023-07-02 17:03:53 +02:00
github-actions[bot] 394e69c186
Merge staging-next into staging 2023-07-02 12:01:55 +00:00
Ryan Lahfa 7672c1e9ae
Merge pull request #201907 from Tom-Hubrecht/fail2ban 2023-07-02 13:57:47 +02:00
oddlama 1fa9f03eec
nixos/hostapd: rewrite to support multi-AP, password from file, and more
At this point this is basically a full rewrite of this module, which
is a breaking change and was necessary to properly expose the useful
parts of hostapd's config. The notable changes are:

- `hostapd` is now started with additional systemd sandbox/hardening options
- A single-daemon can now manage multiple distinct radios and BSSs, which is
  why all configuration had to be moved into `hostapd.radios`
- By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are
  supported, too
- Added passwordFile-like options for wpa and sae
- Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration
- Implements RFC42 as far as reasonable for hostapd
- Removes `with lib;`
2023-07-02 13:32:41 +02:00
oddlama 4bec3f2043
hostapd: enable new stable features such as WiFi6 and structure .config
These changes are important to support modern APs configurations.
Short overview:

- CONFIG_IEEE80211AX support (WiFi6)
- CONFIG_SAE_PK (pubkey authenticated WPA3)
- CONFIG_DRIVER_NONE (standalone RADIUS server)
- CONFIG_OCV (Operating Channel Validation)
- Enable epoll on linux systems
- Remove deprecated TKIP support
- Fix misspelling (CONFIG_INTERNETWORKING != CONFIG_INTERWORKING)
- The .config was restructured into sections to reflect the
  upstream defconfig order and for easier updating in the future
2023-07-02 13:31:38 +02:00
Joscha Loos 1130d57afb gollum: add maintainer 2023-07-02 13:23:05 +02:00
mutantmell d51ebb6173 nixos/networkd: refactor
Reduces size of networkd module by moving unit file generation code into a util.
2023-07-01 17:17:51 -07:00
github-actions[bot] f5a8109c46
Merge staging-next into staging 2023-07-02 00:03:47 +00:00
figsoda a86a7dafdf
Merge pull request #226977 from mac-chaffee/sws-module 2023-07-01 19:58:40 -04:00
Pol Dellaiera b9b176f8b8
Merge pull request #240725 from eskytthe/apachekafka-3.5.0
apacheKafka: 3.5.0, 3.4.1, 3.3.1 -> 3.3.2
2023-07-01 23:25:54 +02:00
Pol Dellaiera b9e160aef4
Merge pull request #240945 from nh2/consul-1.16.0
consul: 1.15.3 -> 1.16.0
2023-07-01 23:06:32 +02:00
Jan Tojnar ff15350944 Merge branch 'staging-next' into staging
; Conflicts:
;	pkgs/development/libraries/nss/generic.nix

fa93045a5b adds `< 3.91` conjunct for the `remove-c25519-support.patch` condition
bb53634671 removes the ≥ 3.90 condition for the `remove-c25519-support.patch` since nss < 3.90 is no longer provided
2023-07-01 20:11:04 +02:00