Anderson Torres
0687add56e
Merge pull request #87716 from AndersonTorres/weird-window-mangers-upload
...
Small window managers:
- berry: init at 0.1.5
- smallwm: init at 2020-02-28
- yeahwm: init at 0.3.5
- lwm: init at 1.2.4
2020-05-14 22:22:07 -03:00
Eelco Dolstra
b7ddd316f1
postgresql: Use runuser instead of sudo
...
Currently, sudo doesn't work in a NixOS container running inside a Nix
build, because Nix's seccomp filter doesn't allow setuid programs. In
any case, runuser is a bit lower-overhead than sudo.
2020-05-15 00:25:27 +02:00
Izorkin
da08b22e1a
nixos/mysql-replication: ignore system databases in binary log
2020-05-14 17:29:40 +03:00
Izorkin
b8c8e810aa
nixos/mysql: disable load pluginx auth_socket in mariadb
2020-05-14 17:29:40 +03:00
Florian Klink
4a85559ffc
Merge pull request #87016 from flokli/nsswitch-cleanup
...
nixos/nsswitch cleanup nss modules
2020-05-14 14:55:43 +02:00
Linus Heckemann
85a0587884
Merge pull request #87219 from serokell/kirelagin/postgres-no-time
...
postgres: Do not log timestamp
2020-05-14 08:34:44 +02:00
Jeff Slight
fe07adef7f
nixos/logrotate: add newline before extraConfig
...
Co-authored-by: Ryan Mulligan <ryan@ryantm.com>
2020-05-13 20:52:26 -07:00
AndersonTorres
1c2c0b2eb8
lwm: init at 1.2.4
...
lwm is a lightweight window manager
2020-05-13 21:32:54 -03:00
AndersonTorres
43ce2a5219
berry: init at 0.1.5
...
berry is a small window manager for X11
2020-05-13 21:32:54 -03:00
AndersonTorres
6aeaa1019c
yeahwm: init at 0.3.5
...
yeahwm is a small window manager for X11, inspired by evilwm
2020-05-13 21:32:54 -03:00
AndersonTorres
58a93ee62d
smallwm: init at 2020-02-28
2020-05-13 21:32:54 -03:00
Jeff Slight
90ce7f508a
nixos/logrotate: add options for basic paths
2020-05-13 13:44:58 -07:00
Kirill Elagin
084bd32bad
postgresql: Fix formatting in option description
...
Co-authored-by: Mario Rodas <marsam@users.noreply.github.com>
2020-05-13 23:33:08 +03:00
Jeff Slight
c94911c5b7
nixos/logrotate: use lib.mkEnableOption
2020-05-13 11:58:51 -07:00
Jörg Thalheim
6c437ef1bb
Merge pull request #85567 from Izorkin/nginx-sandbox
2020-05-13 10:34:02 +01:00
Dietrich Daroch
735c9a70d7
Services,IPFS,Fix: Require the ipfs-migrator package for handling upgrades.
...
Without it, the services get stuck on startup when the IPFS repo needs upgrades.
2020-05-13 00:15:50 -07:00
Linus Heckemann
db010c5537
Merge pull request #85687 from mayflower/privacyidea
...
Init privacyIDEA packages and modules
2020-05-13 09:08:57 +02:00
Izorkin
94391fce1d
nixos/nginx: add option enableSandbox
2020-05-12 20:03:29 +03:00
Izorkin
aa12fb8adb
nginxModules: add option allowMemoryWriteExecute
...
The allowMemoryWriteExecute option is required to checking enabled nginxModules
and disable the nginx sandbox mode MemoryDenyWriteExecute.
2020-05-12 20:03:29 +03:00
Izorkin
628354c686
nixos/nginx: enable sandboxing
2020-05-12 20:03:27 +03:00
ajs124
511b578c93
nixos/sogo: init module
2020-05-12 18:49:43 +02:00
Silvan Mosberger
6440000547
Merge pull request #87599 from helsinki-systems/znapzend-oracle-mode
2020-05-12 15:39:25 +02:00
Silvan Mosberger
fea63944fd
Merge pull request #87280 from helsinki-systems/znapzend-mbuffer-path
2020-05-12 15:37:38 +02:00
betaboon
fd41795f58
nixos/pixiecore: fix escaping of cmdline
2020-05-12 15:14:49 +02:00
Anderson Torres
bae0829384
Merge pull request #87288 from AndersonTorres/tinywm-upload
...
tinywm: init at 2014-04-22
2020-05-11 21:31:41 -03:00
Florian Klink
90bc3ec9b9
nixos/sssd remove redundant condition
...
This is all inside a global cfg.enable conditional, so we don't need to
check here again.
2020-05-11 16:14:51 +02:00
Florian Klink
0f6f544aaf
nixos/sssd: drop assertion
...
This is now already triggered by the nsswitch module, as we set
system.nssModules.
2020-05-11 16:14:51 +02:00
Florian Klink
1fb6c37597
nixos/samba: move nss database configuration into samba module
2020-05-11 16:14:50 +02:00
Florian Klink
fd21793de6
nixos/avahi: move nss database configuration into avahi module
2020-05-11 16:14:50 +02:00
Florian Klink
ecf327d697
nixos/sssd: add to system.nssDatabases.group too
...
nixos/modules/config/nsswitch.nix uses `passwdArray` for both `passwd`
and `group`, but when moving this into the sss module in
edddc7c82a848f1b1f23344a338b5d56b38178c0, it didn't get split
appropriately.
2020-05-11 16:14:50 +02:00
Michel Weitbrecht
90533bfde2
nixos/znapzend: Add oracleMode feature; add maintainer
...
The feature destroys snapshots one-by-one instead of all at once.
If many snapshots accumulated, destroying them all at once can fail
because the argument list is too long. See
https://github.com/oetiker/znapzend/blob/master/lib/ZnapZend/ZFS.pm#L284
2020-05-11 14:35:30 +02:00
Michel Weitbrecht
c46b26b9ad
nixos/znapzend: Use generic mbuffer path
...
The configured mbuffer path will be called on both the source and target
system. If you use pkgs.mbuffer from the source host and the target host
does not have this exact derivation, you will get a broken pipe when
sending snapshots. This is the case when transferring to a non-NixOS
system or to a host with a different mbuffer version.
2020-05-11 14:26:39 +02:00
Michele Guerini Rocco
da19aa1319
Merge pull request #87593 from vojta001/monero
...
monero: fix rcp.restricted option
2020-05-11 12:39:16 +02:00
Jörg Thalheim
11c18faa4e
Merge pull request #85862 from Izorkin/nginx-paths
2020-05-11 11:17:04 +01:00
Vojtěch Káně
e7ab236cab
monero: fix rcp.restricted option
...
According to https://monerodocs.org/interacting/monerod-reference/#node-rpc-api
the correct option is restricted-rpc, not restrict-rpc.
2020-05-11 12:11:58 +02:00
Dominique Martinet
d8fa2627f3
mpd: remove user/group from conf
...
the options should not be set as we already change user with service
file, man mpd.conf says "Do not use this option if you start MPD as an
unprivileged user"
The group option actually is not documented at all anymore and probably
no longer exists.
These options get in the way of setting up confinement for the service,
as it would otherwise be pretty straightforward to setup, but even if
mpd is not root it would check the user exists within the chroot which
is more work (need to get nss working):
systemd.services.mpd = {
serviceConfig.BindPaths = [
# mpd state dir
"/var/lib/mpd"
# notify systemd service started up
"/run/systemd/notify"
];
serviceConfig.BindReadOnlyPaths = [
"/path/to/music:/var/lib/mpd/music"
];
# ProtectSystem is not compatible with confinement
serviceConfig.ProtectSystem = lib.mkForce false;
confinement = {
enable = true;
binSh = null;
mode = "chroot-only";
};
};
2020-05-10 20:24:33 +02:00
Matthew Bauer
b907387ffe
Merge pull request #87212 from matthewbauer/dont-include-gdk-pixbuf-module-file
...
nixos/gdk-pixbuf.nix: don’t set GDK_PIXBUF_MODULE_FILE in cross
2020-05-09 14:06:48 -05:00
Robin Gloster
f1f0e82c50
privacyidea: address reviews
2020-05-09 12:11:44 +02:00
AndersonTorres
44d90b0619
tinywm: init at 2014-04-22
...
A tiny window manger for X11
2020-05-08 15:29:25 -03:00
Michael Raskin
50684f118a
Merge pull request #87264 from prusnak/rfc45
...
treewide: per RFC45, remove more unquoted URLs
2020-05-08 14:30:09 +00:00
Jörg Thalheim
43b3c15228
Merge pull request #87255 from symphorien/dovecot-restart-module
2020-05-08 15:05:10 +01:00
Pavol Rusnak
6abf4a43ad
treewide: per RFC45, remove more unquoted URLs
2020-05-08 15:20:47 +02:00
Symphorien Gibol
8fc8eec0e7
nixos/tt-rss.service: set syslogidentifier
2020-05-08 12:00:00 +00:00
Symphorien Gibol
0f3b4928b2
dovecot: restart when modules are changed
2020-05-08 12:00:00 +00:00
Symphorien Gibol
e96c52efdb
tt-rss: restart on failure
...
as should be the default with all long-running services
2020-05-08 12:00:00 +00:00
Symphorien Gibol
c7db8c1927
tt-rss: make less insanely verbose.
...
Fixes #74427
2020-05-08 12:00:00 +00:00
Jörg Thalheim
ddef88772e
Merge pull request #86242 from lordcirth/ipfs05
2020-05-08 10:51:21 +01:00
Kirill Elagin
652958eefa
postgres: Do not log timestamp
...
By default, postgres prefixes each log line with a timestamp. On NixOS
logs are written to journal anyway, so they include an external
timestamp, so the timestamp ends up being printed twice, which clutters
the log.
* Add a module option to change the log prefix.
* Set it to upstream default sans timestamp.
2020-05-08 00:13:20 +03:00
Matthew Bauer
c33e8c4986
nixos/gdk-pixbuf.nix: don’t set GDK_PIXBUF_MODULE_FILE in cross
...
From 6c5983a291530f040deb97881e80cca373a5b29e, this should not be
necessary for gdk-pixbuf to work correctly.
2020-05-07 14:39:42 -05:00
Eelco Dolstra
9bf75a27f4
Revert "nix-daemon.nix: Use 'nix ping-store' to initialize directories"
...
This reverts commits 9d0de0dc57ce97ab9cc3d73a66e914d718e4af3b,
27d2857a9927aa197b9679b9a2dcf59b97c06907. 'nix ping-store' is an
experimental command so it doesn't work in Nix 2.4 unless you set
'experimental-features = nix-command' in nix.conf.
2020-05-07 12:39:22 +02:00