public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
202,948 Commits 1 Branch 0 Tags
Commit Graph

7733 Commits

Author SHA1 Message Date
Aaron Andersen
9c28599bfe nixos/httpd: drop stateDir option, hardcode to /run/httpd 2019-11-04 07:32:28 -05:00
Marcello Sylvester Bauer
d6169284c4 nixos/libinput: apply options to all device types 
Instead of assign the libinput options to touchpad devices only, it
should be appied by any device using libinput.
Due to the fact that `40-libinput.conf` already defines libinput as
driver for any detected input device, we can use `MatchDriver` to appy
options.
 2019-11-04 13:02:08 +01:00
Marek Mahut
794c919765
Merge pull request #68327 from mmilata/moin 
nixos/moinmoin: init module
 2019-11-03 21:36:12 +01:00
Gabriel Ebner
c2b54c59e8 nixos/digimend: init module 2019-11-03 17:32:46 +01:00
Marek Mahut
f3b8d9bae3 nixos/trac: service init 2019-11-03 17:24:08 +01:00
Benjamin Hipple
3d73b6db85 nixos/nginx: update comment 
It says Apache, but this is for Nginx; looks like a copy-paste error.
 2019-11-03 10:22:56 -05:00
worldofpeace
4bdbbc1b33 nixos/gnome3: add sound-theme-freedesktop 
I've noticed a similar issue in Pantheon, without this
sound theme installed there's no system sounds.
I believe it's because the gnome theme and the pantheon
theme inherit this one.
 2019-11-03 10:19:25 -05:00
Renaud
266d3dd7f6
Merge pull request #72187 from Izorkin/netdata-fix 
nixos/netdata: add which to path
 2019-11-03 14:06:51 +01:00
Renaud
a5807e79c9
Merge pull request #71507 from SRGOM/patch-11 
nixos/x11/libinput: Document values for option
 2019-11-03 12:30:09 +01:00
Marek Mahut
43a0b4b31f
Merge pull request #72415 from 1000101/trickster 
nixos/trickster: init
 2019-11-01 15:39:50 +01:00
Silvan Mosberger
dd0a47e7ae
treewide: Switch to system users (#71055) 
treewide: Switch to system users
 2019-11-01 13:26:43 +01:00
Jan Hrnko
9b0aefac86 nixos/trickster: init 2019-11-01 10:57:29 +01:00
Renaud
e69fd930ed
Merge pull request #72193 from Ma27/bump-nexus 
nexus: 3.18.1-01 -> 3.19.1-01
 2019-11-01 08:55:24 +01:00
ShaRose
9e2308ed80 nixos/dnsdist: Add CAP_NET_BIND_SERVICE to AmbientCapabilities 
It seems that dnsdist doesn't actually request CAP_NET_BIND_SERVICE, which is why normally it's executed and root and setuids to another, unprivileged, user. This means that as it is, dnsdist will be unable to bind to any port under 1024 and will fail with access denied.

Removing CAP_SETGID and CAP_SETUID is also related to this as we don't actually change the uid or gid after the fact as we use DynamicUser. (That part isn't strictly NEEDED but there's no reason to have those capabilities if we don't use them).

There are also some additional sandboxing we can remove from the service definition as they are assumed true or strict by DynamicUser: specifically PrivateTmp and ProtectSystem respectively.

ProtectHome is still there, despite being assumed read-only as setting it to true means they are seen as empty. I don't think it really matters as I don't know if systemd will ignore it or not, but I didn't see any reason to go hunting for excuses to make it a bigger change.
 2019-10-31 13:27:55 -02:30
worldofpeace
d5c639c545
Merge pull request #72281 from peterhoeg/f/geoclue 
nixos/geoclue: minor cleanups
 2019-10-31 13:58:25 +00:00
Peter Hoeg
0838d6d4cd nixos/geoclue: add worldofpeace as maintainer 2019-10-31 09:57:20 -04:00
Marek Mahut
392b12f252
Merge pull request #72089 from prusnak/trezor-udev-rules 
trezor-udev-rules: init at unstable-2019-07-17
 2019-10-31 10:48:48 +01:00
Jörg Thalheim
c91a1be877
nixos/orangefs: init at 2.9.7, add modules and test (#67591) 
nixos/orangefs: init at 2.9.7, add modules and test
 2019-10-31 09:27:14 +00:00
Pavol Rusnak
d124858efe
trezor-udev-rules: init at unstable-2019-07-17 2019-10-30 15:15:22 +01:00
Aaron Andersen
722b99beb9
Merge pull request #69342 from Kiwi/matomo-updates 
Matomo (module, package) updates
 2019-10-29 23:09:27 -04:00
Peter Hoeg
d7ebe00453 nixos/geoclue: minor cleanups 
- spawn the geoclue-agent directly instead of running it via bash
 - document why we cannot use DynamicUser = true
 - have systemd create the home directory instead of using an explicit
   tmpfiles.d fragment
 2019-10-30 10:50:52 +08:00
Silvan Mosberger
90e30394f5
go-shadowsocks2: init at 0.0.11 (#67516) 
go-shadowsocks2: init at 0.0.11
 2019-10-30 01:05:59 +01:00
Evils-Devils
5a78ce30d4 Fancontrol: add test etc from #70933 (#72065) 
* lm_sensors: add fancontrol module + nixos test

fancontrol is a small script that checks temperature sensors and adapts
fan speeds accordingly. It reads a text config file that can be
auto-generated by running the pwmconfig wizard on the live system.
 2019-10-29 15:06:32 +01:00
Maximilian Bosch
df7727042f
nexus: 3.18.1-01 -> 3.19.1-01 
Relevant release notes:

* https://help.sonatype.com/repomanager3/release-notes/2019-release-notes#id-2019ReleaseNotes-RepositoryManager3.19.1
* https://help.sonatype.com/repomanager3/release-notes/2019-release-notes#id-2019ReleaseNotes-RepositoryManager3.19.0

Also added `preferLocalBuild = true;` to prevent builds on remote
machines as this only means elevated network access (tarball is fetched
locally and uploaded to the builder) and the build is fairly trivial.

To fix the startup I had to add the JVM parameter `java.endorsed.dirs`
to ensure that all libraries are loaded properly[1].

[1] https://issues.sonatype.org/browse/NEXUS-21603
 2019-10-28 21:34:55 +01:00
Izorkin
001b3d5764 nixos/netdata: add which to path 2019-10-28 21:20:57 +03:00
caadar
028dacdcfb cups: fix misleading comment 2019-10-28 16:48:34 +01:00
talyz
d5db11ccbd nixos/gitlab: Remove the old lib symlink in the state directory 
Also, remove the old and unused PermissionsStartOnly definition in the
gitlab-workhorse systemd service.
 2019-10-28 14:56:37 +01:00
talyz
041cbd860d nixos/gitlab: Abort on error and use of unset variables 
Default behavior is to continue executing the script even when one or
multiple steps fail. We want to abort early if any part of the
initialization fails to not run with a partially initialized state.

Default behavior also allows dereferencing non-existent variables,
potentially resulting in hard-to-find bugs.
 2019-10-28 14:56:37 +01:00
Robert Djubek
6ea626d3e2
nixos/matomo: fix deprecation warnings 
Fixes the phpfpm deprecation warnings about listen and extraConfig by
using fpm.socket and settings. Removes phpfpmProcessManagerConfig.
 2019-10-28 05:07:27 +00:00
Silvan Mosberger
f124b7addc
nixos/znapzend: Increase starting timeout 2019-10-27 12:29:31 +01:00
Silvan Mosberger
698dfed2e6
nixos/znapzend: Add options for features 2019-10-27 12:06:18 +01:00
Aaron Andersen
33474166e3
Merge pull request #69436 from tshaynik/fix/nextcloud-nginx-sts 
nixos/nextcloud: add Strict-Transport-Security
 2019-10-26 12:34:36 -04:00
Aaron Andersen
50e5139893 redmine: drop 3.4.x package 2019-10-26 10:40:16 -04:00
Gemini Lasswell
d6549a2c42 nixos/yggdrasil: remove DynamicUser for systemd 243 2019-10-26 13:51:31 +02:00
Gemini Lasswell
b8cb8c39d6 nixos/yggdrasil: add service 2019-10-26 13:51:31 +02:00
Aaron Andersen
2921e8a82a
Merge pull request #71789 from tomfitzhenry/openarena-server 
openarena: add module and test
 2019-10-26 07:48:19 -04:00
Maximilian Bosch
4a5c0e029d
Merge pull request #71963 from dtzWill/security/nextcloud17-php-and-nginx-config 
Address nextcloud "urgent security issue" w/nginx per upstream recs
 2019-10-25 19:12:18 +02:00
Martin Milata
ad034104cc nixos/moin: init 2019-10-25 17:51:09 +02:00
Maximilian Bosch
6db4ae1f27
Merge pull request #70441 from doronbehar/package-gotify-server 
gotify-server: init at 2.0.10
 2019-10-25 17:10:14 +02:00
Janne Heß
2abe2b2cda nixos/stunnel: Add maintainers 2019-10-25 16:19:57 +02:00
Janne Heß
4a32dbd1e1 nixos/stunnel: Fix CA files 2019-10-25 16:19:57 +02:00
Maximilian Bosch
3461ec2ffd
nixos/gotify: init module and test 2019-10-25 16:19:41 +02:00
Tom Fitzhenry
230fc22e61 openarena: add module for dedicated server 2019-10-26 00:57:54 +11:00
Will Dietz
f6c45bff6d
nixos/nextcloud: update config for "urgent security issue" 
https://nextcloud.com/blog/urgent-security-issue-in-nginx-php-fpm/
 2019-10-25 06:50:29 -05:00
Frederik Rietdijk
32389de159 Merge master into staging-next 2019-10-24 08:27:04 +02:00
Eelco Dolstra
52e739cc58 nix-daemon.nix: Fix checkConfig 2019-10-23 21:30:28 +02:00
Ricardo M. Correia
4cd2cb43fb
Merge pull request #71137 from erictapen/smokeping-fix-permission 
nixos/smokeping: replace smokeping.fcgi with a symlink
 2019-10-23 18:19:15 +00:00
Frederik Rietdijk
a85e58ac13 Merge master into staging-next 2019-10-23 09:38:37 +02:00
Matthias Beyer
4e3aa7b7b8 mpd: restart always 
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
 2019-10-22 16:30:14 +02:00
Aaron Andersen
43a3d8dc29
Merge pull request #71461 from etu/lidarr-specify-datadir-option 
nixos/lidarr: Add dataDir option
 2019-10-22 05:07:49 -04:00