Bob van der Linden
78acc82432
nixos/svnserve: /var/run -> /run
2019-03-20 00:02:45 +01:00
Bob van der Linden
3f17dcbbfd
nixos/spice-vdagentd: /var/run -> /run
2019-03-20 00:02:45 +01:00
Bob van der Linden
231d815721
nixos/mbpfan: /var/run -> /run
2019-03-20 00:02:45 +01:00
Bob van der Linden
e1376ddd3d
nixos/matrix-synapse: /var/run -> /run
2019-03-20 00:02:45 +01:00
Bob van der Linden
c67f2f0815
nixos/spamassassin: /var/run -> /run
2019-03-20 00:02:44 +01:00
Bob van der Linden
edd5c88086
nixos/postgrey: /var/run -> /run
2019-03-20 00:02:44 +01:00
Bob van der Linden
0438ad4712
nixos/pfix-srsd: /var/run -> /run
2019-03-20 00:02:44 +01:00
Bob van der Linden
e8434784bd
nixos/rethinkdb: /var/run -> /run
2019-03-20 00:02:43 +01:00
Bob van der Linden
af0380997f
nixos/redis: /var/run -> /run
2019-03-20 00:02:43 +01:00
Bob van der Linden
09d3ea4f67
nixos/openldap: /var/run -> /run
2019-03-20 00:02:43 +01:00
Bob van der Linden
660ee99293
nixos/mongodb: /var/run -> /run
2019-03-20 00:02:43 +01:00
Bob van der Linden
651f05c47c
nixos/couchdb: /var/run -> /run
2019-03-20 00:02:42 +01:00
Bob van der Linden
66fb3aa1be
nixos/bacula: /var/run -> /run
2019-03-20 00:01:45 +01:00
Jörg Thalheim
b488c60cdb
network-manager: rename systemd service back to match upstream
...
Compatibility with other distributions/software and expectation
of users coming from other systems should have higher priority over consistency.
In particular this fixes #51375 , where the NetworkManager-wait-online.service
broke as a result of this.
2019-03-19 23:48:08 +01:00
Yurii Izorkin
f56d507e06
nixos/datadog-agent: change start command ( #57871 )
2019-03-18 13:31:04 -07:00
Izorkin
42a99b1be2
nixos/unit: init service unit
2019-03-16 19:54:21 +03:00
Vladimír Čunát
3aecf21239
Merge #56922 : nixos/knot: init basic service + tests
2019-03-16 09:17:15 +01:00
Janne Heß
b0daedd371
nixos/icingaweb2: Replace most options with toINI
2019-03-15 20:35:29 +01:00
Florian Jacob
5bec5e8cb1
nixos/mysql: specify option types
2019-03-15 16:32:36 +01:00
Silvan Mosberger
f8de52a2fe
Revert "nixos/nginx: support h2c"
2019-03-15 14:31:11 +01:00
Markus
2e29412e9c
nixos/kubernetes: Add proxy client certs to apiserver
2019-03-15 13:21:43 +00:00
Ryan Mulligan
4b6a41a939
Merge pull request #57077 from callahad/brother-dsseries
...
dsseries: init at 1.0.5-1
2019-03-14 21:17:31 -07:00
aszlig
ef553788d0
postgresql: Move socket dir to /run/postgresql
...
The default, which is /tmp, has a few issues associated with it:
One being that it makes it easy for users on the system to spoof a
PostgreSQL server if it's not running, causing applications to connect
to their provided sockets instead of just failing to connect.
Another one is that it makes sandboxing of PostgreSQL and other services
unnecessarily difficult. This is already the case if only PrivateTmp is
used in a systemd service, so in order for such a service to be able to
connect to PostgreSQL, a bind mount needs to be done from /tmp to some
other path, so the service can access it. This pretty much defeats the
whole purpose of PrivateTmp.
We regularily run into issues with this in the past already (one example
would be https://github.com/NixOS/nixpkgs/pull/24317 ) and with the new
systemd-confinement mode upcoming in
https://github.com/NixOS/nixpkgs/pull/57519 , it makes it even more
tedious to sandbox services.
I've tested this change against all the postgresql NixOS VM tests and
they still succeed and I also grepped through the source tree to replace
other occasions where we might have /tmp hardcoded. Luckily there were
very few occasions.
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @ocharles, @thoughtpolice, @danbst
2019-03-15 04:52:35 +01:00
Silvan Mosberger
fb879ae920
Merge pull request #57174 from worldofpeace/pantheon/cleanup
...
nixos/pantheon cleanup
2019-03-15 01:26:49 +01:00
Matthew Bauer
b703c4d998
plasma5: fix typo from pr #57037
...
Thanks @Yarny0
2019-03-14 14:09:13 -04:00
Martin Weinelt
a978d3dcd2
nixos/knot: init
2019-03-14 01:28:53 +01:00
Artemis Tosini
fee854ed01
nixos/nginx: add return option to location
2019-03-13 17:31:01 +00:00
Andrew Childs
c53703a6b2
nixos/prometheus: use append instead of insert for opening firewalls ( #55224 )
...
Inserting with `-I` causes the rules to placed before `ctstate`
tracking, while `-A` places them alongside all other allow rules.
2019-03-13 12:44:36 +02:00
Markus
7e71cd8292
nixos/flannel: Add iptables package to service path
2019-03-12 15:30:33 +00:00
Johan Thomsen
292c1ce7ff
nixos/gitlab: added gzip and bzip2 as dependencies for gitaly
2019-03-12 15:04:45 +00:00
Markus
87d1a82627
nixos/kubernetes: Add preferredAddressTypes option to apiserver
2019-03-12 15:01:14 +00:00
Matthew Bauer
7890494813
Merge pull request #57037 from matthewbauer/remove-xdg-desktop-menu-dummy
...
plasma: handle kbuildsycoca5 better
2019-03-11 22:58:40 -04:00
Christian Kögler
9f7f16cd7b
nixos dwm: start user installed dwm if available
...
dwm has no configuration file. The user has to install his own version.
2019-03-11 20:18:08 +01:00
Christian Albrecht
e3a80ebc40
Cleanup pki: remove mkWaitCurl
2019-03-11 12:22:59 +01:00
Christian Albrecht
45e683fbd6
Cleanup pki: control-plane-online
2019-03-11 12:22:59 +01:00
Christian Albrecht
50c5f489ef
Cleanup pki: scheduler
2019-03-11 12:22:53 +01:00
Christian Albrecht
46653f84c9
Cleanup pki: proxy
2019-03-11 12:22:49 +01:00
Christian Albrecht
73657b7fcf
Cleanup pki: kubelet
2019-03-11 12:22:44 +01:00
Christian Albrecht
ea6985ffc1
Cleanup pki: flannel
2019-03-11 12:22:40 +01:00
Christian Albrecht
ce83dc2c52
Cleanup pki: controller-manager
2019-03-11 12:22:36 +01:00
Christian Albrecht
8ab50cb239
Cleanup pki: apiserver and etcd
2019-03-11 12:22:31 +01:00
Christian Albrecht
ee9dd4386a
Cleanup pki: addon-manager
2019-03-11 12:16:58 +01:00
worldofpeace
36d4dba317
nixos/pantheon: more mkDefault
2019-03-09 17:29:29 -05:00
worldofpeace
c41a2d28d3
nixos/pantheon: cleanup systemPackages
...
We don't need gnome-bluetooth because its executables
path is already hardcoded into the contractor file, as that's
the only place it is needed.
Don't think we need gnome-power-manager either.
Also add programs like geary to removePackagesByName.
2019-03-09 17:29:08 -05:00
Silvan Mosberger
6ad76ff1ba
Merge pull request #52096 from furrycatherder/davmail
...
nixos/davmail: init
2019-03-09 22:41:55 +01:00
Pierre Bourdon
18bc8203a1
nixos/firewall: canonicalize firewall ports lists
...
Fixes #56086 .
2019-03-09 20:02:04 +01:00
Pierre Bourdon
843215ac1c
nixos/firewall: use types.port where appropriate
2019-03-09 19:45:11 +01:00
Sean Haugh
f2730d881b
nixos/davmail: init
...
Co-authored-by: Aaron Andersen <aaron@fosslib.net>
Co-authored-by: Silvan Mosberger <infinisil@icloud.com>
2019-03-09 12:05:15 -06:00
scaroo
56aa491ad7
zonminder: Fix database name and username
...
PR #56889 messed up db and use naming while fixing the scope of the initialDatabases property.
This patch fixes the issue.
2019-03-09 17:21:29 +01:00
worldofpeace
fa64c63fa0
Merge pull request #56552 from worldofpeace/elementary-screenshot-tool/fix-conceal-text
...
pantheon.elementary-screenshot-tool: fix conceal text
2019-03-09 11:03:37 -05:00