06bdfc5e32
Merge pull request #82185 from matt-snider/master
...
ankisyncd, nixos/ankisyncd: init at 2.1.0
2020-03-12 11:47:42 +01:00
154f9e1bd9
Merge pull request #82340 from nyanloutre/vsftpd_pam_fix
...
nixos/vsftpd: fix missing default pam_service_name
2020-03-11 22:29:43 +00:00
9aa23e31b3
Merge pull request #80904 from talyz/haproxy-fixes
...
nixos/haproxy: Revive the haproxy user and group
2020-03-11 22:23:13 +00:00
b7cdb64ac2
treewide: remove myself from a few packages I don't use anymore
2020-03-11 22:29:30 +01:00
7ab00c48d8
nixos/vsftpd: fix missing default pam_service_name
...
9458ec4
2020-03-11 21:15:47 +01:00
bb7ad853fb
nixos/haproxy: Revive the haproxy user and group
...
Running haproxy with "DynamicUser = true" doesn't really work, since
it prohibits specifying a TLS certificate bundle with limited
permissions. This revives the haproxy user and group, but makes them
dynamically allocated by NixOS, rather than statically allocated. It
also adds options to specify which user and group haproxy runs as.
2020-03-11 19:52:37 +01:00
3d1079a20d
nixos/zerotierone: switch from manually generating the .link file to use the module
...
Previously, systemd.network.links was only respected with networkd
enabled, but it's really udev taking care of links, no matter if
networkd is enabled or not.
With our module fixed, there's no need to manually manage the text file
anymore.
2020-03-11 10:21:37 +01:00
b155a62dad
nixos/lightdm-tiny-greeter: init module
2020-03-11 08:12:35 +00:00
6bba9428d9
Merge pull request #81431 from jtojnar/malcontent-0.6
...
malcontent: 0.4.0 → 0.6.0
2020-03-11 04:08:59 +01:00
31dd8332bc
nixos/malcontent: init
2020-03-10 23:30:20 +01:00
b42babd160
nixos/netdata: add module package option
2020-03-10 23:06:01 +01:00
acba458b7e
nixos/ankisyncd: init at 2.1.0
2020-03-10 22:45:33 +01:00
641b94bdd0
nixos/mysql: add settings and configFile options
2020-03-10 15:15:11 -04:00
dfc70d37f4
Merge pull request #82252 from mayflower/radius-http2
...
FreeRADIUS improvements
2020-03-10 16:01:46 +01:00
065716ab95
nixos/freeradius: depend on network.target, not online
2020-03-10 15:54:29 +01:00
0587329191
freeradius: make debug logging optional
2020-03-10 15:54:02 +01:00
1affd47cc1
nixos/supybot: python3 switch, add plugin options
...
Python2 seems to be no longer supported by limnoria upstream.
2020-03-09 23:32:54 +01:00
57f5fb62d4
nixos/supybot: enable systemd sandboxing options
2020-03-09 23:32:54 +01:00
b150e08169
nixos/supybot: stateDir in /var/lib, use tmpfiles
...
Moving the stateDir is needed in order to use ProtectSystem=strict
systemd option.
2020-03-09 23:29:04 +01:00
dceec409cc
nixos/cage: move ConditionPathExists to service config
...
It doesn't belong into [Service]:
> Unknown key name 'ConditionPathExists' in section 'Service', ignoring.
2020-03-09 00:47:49 +01:00
93745d243b
Merge pull request #79488 from danielfullmer/zoneminder-1.34.2
...
zoneminder: 1.32.3 -> 1.34.3
2020-03-07 13:25:17 -05:00
cb5da4eacb
nixos/zoneminder: update on startup if needed
2020-03-07 12:59:39 -05:00
64ee425a01
nixos/cjdns: Fix connectTo example rendering
2020-03-07 02:01:41 +01:00
1906320e68
nixos/cjdns: Don't use IFD for extra hosts
2020-03-07 02:01:19 +01:00
74c0ce5376
Merge pull request #81907 from atlaua/lr/wg-typo
...
nixos/wireguard: Fix typo in error message
2020-03-06 22:43:32 +01:00
b19c485b22
nixos/wireguard: Fix typo in error message
...
generatePrivateKey -> generatePrivateKeyFile
2020-03-06 16:19:23 +01:00
391b7b31d8
Merge pull request #81891 from emilazy/nginx-use-mozilla-tls-config
...
nixos/nginx: use Mozilla Intermediate TLS configuration
2020-03-06 14:30:28 +00:00
87ae01e70b
Merge pull request #81752 from alexbakker/fix-55221
...
uwsgi: use pyhome instead of pythonpath for uwsgi vassals
2020-03-06 13:16:26 +00:00
4ed98d69ed
nixos/nginx: use Mozilla Intermediate TLS configuration
...
The configuration at https://ssl-config.mozilla.org/#server=nginx&config=intermediate
is reliably kept up-to-date in terms of security and compatible with a
wide range of clients. They've probably had more care and thought put
into them than our defaults, and will be easier to keep updated in
the future.
The only removed (rather than changed) configuration option here is
ssl_ecdh_curve, per https://github.com/mozilla/server-side-tls/issues/189 .
Resolves #80952 .
2020-03-06 13:08:56 +00:00
dc70633913
Merge pull request #81774 from ju1m/shorewall_fix_RestartTriggers
...
shorewall: fix RestartTriggers
2020-03-06 11:58:35 +01:00
421a18f42b
nixos/prometheus-mikrotik-exporter: init
2020-03-06 10:39:05 +01:00
e7ed7901a8
nixos/prometheus-mail-exporter: misc fixes
...
- Fix misspelled option. mkRenamedOptionModule is not used because the
option hasn't really worked before.
- Add missing cfg.telemetryPath arg to ExecStart.
- Fix mkdir invocation in test.
2020-03-06 01:44:05 +01:00
3b5cf35e8b
nixos/prometheus-mail-exporter: fix assertion
...
The assertion was printed when user explicitly defined only the
configFile option.
2020-03-06 01:44:05 +01:00
2a080ac434
nixos/prometheus-snmp-exporter: fix assertion
...
The assertion was printed when user explicitly defined only the
configurationPath option.
2020-03-06 01:43:20 +01:00
87f87fb3e9
nixos/prometheus-snmp-exporter: update log options
...
The allowed values have changed in bd3319d28c
2020-03-06 01:43:20 +01:00
0ac24ccf2a
nixos/prometheus-*-exporter: escape shell args
2020-03-06 01:43:20 +01:00
bbc2cd89ef
users.groups.disnix instead of a list
...
related to #63103 .
2020-03-05 09:08:40 +01:00
47f27938e7
shorewall: fix RestartTriggers
2020-03-05 00:01:44 +01:00
7bbf7fa693
uwsgi: use pyhome instead of pythonpath for uwsgi vassals
2020-03-04 20:20:32 +01:00
481a4e938e
Merge pull request #81597 from thatsmydoing/multiport-nat
...
nixos/nat: fix multiple destination ports with loopback
2020-03-04 19:12:25 +01:00
97a61c8903
nixos/nat: fix multiple destination ports with loopback
2020-03-04 18:11:31 +09:00
407be0a577
Merge pull request #81327 from flokli/add-cage
...
nixos/cage: init
2020-03-03 12:04:33 -08:00
e0e4d591cc
nixos/cage: init
...
Add a cage module to nixos. This can be used to make kiosk-style
systems that boot directly to a single application. The user (demo by
default) is automatically logged in by this service and the
program (xterm by default) is automatically started.
This is useful for some embedded, single-user systems where we want
automatic booting. To keep the system secure, the user should have
limited privileges.
Based on the service provided in the Cage wiki here:
https://github.com/Hjdskes/cage/wiki/Starting-Cage-on-boot-with-systemd
Co-Authored-By: Florian Klink <flokli@flokli.de>
2020-03-02 13:43:20 -08:00
eaef96093a
prometheus-nginx-exporter: 0.5.0 -> 0.6.0 ( #81285 )
...
* prometheus-nginx-exporter: 0.5.0 -> 0.6.0
* nixos/prometheus-nginx-exporter: update for 0.6.0
Added new option constLabels and updated virtualHost name in the
exporter's test.
2020-03-02 14:48:40 -05:00
ca5048cba4
Merge pull request #79925 from mrkkrp/mk/add-nix-store-gcs-proxy-service
...
Add nix-store-gcs-proxy service
2020-03-02 16:04:16 +01:00
96b472e95d
module/nix-store-gcs-proxy: init
2020-03-02 16:01:14 +01:00
2c5ffb5c7a
Merge pull request #81164 from Mic92/home-assistant
...
nixos/home-assistant: 0.104.3 -> 0.106.0
2020-03-02 10:55:35 +00:00
3a2790c342
services.mailman: RemainAfterExit so settings take effect properly
...
Prior to this fix, changes to certain settings would not be applied
automatically and users would have to know to manually restart the
affected service. A prime example of this is
`services.mailman.hyperkitty.baseUrl`, or various things that affect
`mailman3/settings.py`
2020-03-02 02:25:20 +00:00
c31958449f
Merge pull request #77405 from danielfullmer/zerotier-mac-fix
...
nixos/zerotierone: prevent systemd from changing MAC address
2020-03-01 18:49:00 -07:00
74f5358f13
Merge pull request #66601 from eadwu/nvidia/prime-render-offload
...
nvidia: prime render offload
2020-03-01 14:28:57 -03:00
0bbada3a07
Merge pull request #80451 from worldofpeace/pantheon-doc
...
nixos/pantheon: add docs
2020-03-01 16:56:55 +00:00
21c971a732
Merge pull request #81118 from tilpner/gitdaemon-usercreation
...
nixos/git-daemon: only create git user if it will be used
2020-03-01 13:40:57 +00:00
1b92a08a71
Merge pull request #81297 from Mic92/sslh
...
nixos/sslh: don't run as nogroup
2020-03-01 12:18:09 +00:00
3be04570e0
nixos/pantheon: add docs
2020-02-28 19:43:18 -05:00
9218a58964
nixos/sslh: don't run as nogroup
...
See #55370
2020-02-28 15:32:36 +00:00
ee2ea82a68
nixos/home-assistant: make config deep mergeable
...
This make it possible to split the home-assistant configuration
across multiple files and nix will merge the option in an intuitive
way.
2020-02-28 15:32:03 +00:00
68410b08be
nixos/codimd: update useCDN default to false
2020-02-28 14:36:46 +01:00
76f4f6b95d
Merge pull request #81087 from lovesegfault/tlp-1.3.1
...
tlp: 1.2.2 -> 1.3.1
2020-02-27 19:43:14 +00:00
ee7becd918
nixos/tlp: revamp
2020-02-27 09:58:51 -08:00
d3e3cc1225
nixos/plasma5: Fix activation script when XDG_CONFIG_HOME is unset
...
Fixes #80713
2020-02-27 09:48:58 -06:00
4d67db3101
Merge pull request #80849 from BBBSnowball/pull-load-imagick-once
...
nixos/nextcloud: avoid loading imagick extension more than once
2020-02-26 17:17:55 -05:00
2dff70f0f3
Merge pull request #80981 from bachp/nextcloud-x-frame-warning
...
nixos/nextcloud: prevent warning about missing X-Frame-Option
2020-02-26 17:37:38 +00:00
5f881209f9
nixos/kresd: never force `extraFeatures = false`
...
Fixes #81109 . Regressed in PR #78392 (26858063
2020-02-26 15:10:53 +01:00
6df119a6ec
nixos/git-daemon: only create git user if it will be used
2020-02-26 15:04:36 +01:00
9b0a9577f7
nixos/parsoid: enable systemd sandboxing
2020-02-25 01:32:31 +01:00
3b27f4d945
nixos/parsoid: fix package name
...
Original package was removed in 2b8cde0ce2
2020-02-25 01:32:30 +01:00
119a7aae50
nixos/nextcloud: prevent warning about missing X-Frame-Option
2020-02-24 22:07:24 +01:00
ee08bd8dec
Merge pull request #80831 from Mic92/netdata
...
netdata: 1.19.0 -> 1.20.0
2020-02-24 17:24:19 +00:00
8cfd003295
stubby: configure cache directory
...
This is needed for local dnssec validation
2020-02-24 10:51:43 +00:00
6d92e54174
nixos/transmission: Allow others to read the directory
...
Directory mode 755 is standard for running services. Without this,
downloadDirPermissions doesn't have any use since other users can't even
look inside the main transmission directory
2020-02-24 08:03:21 +01:00
44a4a3839c
nixos/gdm: Fix pulseaudio tmpfiles structure ( #80274 )
...
* nixos/gdm: Fix pulseaudio tmpfiles structure
Fix the following startup failure of the sound service in the gdm
session that was introduced by #75893 :
```
Feb 16 11:44:15 qp pulseaudio[1432]: W: [pulseaudio] core-util.c: Failed to open configuration file '/run/gdm/.config/pulse//daemon.conf': Not a directory
Feb 16 11:44:15 qp pulseaudio[1432]: W: [pulseaudio] daemon-conf.c: Failed to open configuration file: Not a directory
Feb 16 11:44:15 qp systemd[1380]: pulseaudio.service: Main process exited, code=exited, status=1/FAILURE
Feb 16 11:44:15 qp systemd[1380]: pulseaudio.service: Failed with result 'exit-code'.
Feb 16 11:44:15 qp systemd[1380]: Failed to start Sound Service.
```
Co-authored-by: worldofpeace <worldofpeace@protonmail.ch>
2020-02-23 07:50:19 -05:00
2442f99d40
Revert "Theming options for Gtk and Qt"
2020-02-22 20:42:27 -05:00
db32158bbd
nixos/nextcloud: avoid loading imagick extension more than once
...
This avoids the following error message:
Module 'imagick' already loaded at Unknown#0
2020-02-23 00:40:49 +00:00
74dcd1c637
Merge pull request #80617 from ikervagyok/slurm
...
Slurm: improve RDMA capability
2020-02-22 17:33:47 +01:00
02bbaaddc8
Merge pull request #80758 from ikervagyok/wg
...
nixos/wireguard: fix wireguard service as well after it got upstreamed
2020-02-22 10:20:13 +01:00
50fb52d4e1
fix wireguard service as well after it got upstreamed.
2020-02-22 00:32:15 +01:00
802a528d38
Merge pull request #71079 from gnidorah/theming
...
Theming options for Gtk and Qt
2020-02-21 18:52:52 +01:00
1bd7ea84ad
nixos/qt5: rename to qt
2020-02-21 18:57:56 +03:00
368d84aafa
Merge pull request #80526 from serokell/yorickvp/fix-bk-agent-hooks
...
nixos/buildkite-agents: fix hooksDir assertion
2020-02-21 12:00:05 +01:00
dc71384f67
SLURM/NixOS: increase ulimit for IB/RDMA
2020-02-21 11:32:16 +01:00
1ddb140d95
Merge pull request #53033 from netixx/openvswitch-improved-systemd
...
openvswitch: better integration with systemd
2020-02-21 08:24:49 +00:00
9bab9e2ec6
nixos/i2pd: address #63103
...
As a comment to 1d61efb7f1
2020-02-19 13:15:28 +01:00
1b351f81f4
nixos/buildkite-agents: fix hooksDir assertion
2020-02-19 12:22:35 +01:00
af73425b82
nixos/mate: debugging via environment variable
2020-02-18 16:34:26 -05:00
b9db3f8ca0
nixos/mate: use upstream session
2020-02-18 16:30:09 -05:00
60a3d9dd6b
nixos/jirefeau: add `services.jirafeau` module
...
Signed-off-by: David Wood <david.wood@codeplay.com>
2020-02-18 09:37:44 -08:00
0bcd9a5262
Merge pull request #79939 from romildo/upd.mate
...
mate: update to version 1.24.0
2020-02-18 11:15:10 -03:00
7448211021
Merge pull request #80032 from Mic92/redis
...
nixos/redis: add requirePassFile option
2020-02-17 21:28:04 +00:00
f9be656873
shorewall: fix warnings due to types.loaOf being deprecated ( #80154 )
2020-02-16 12:53:49 +02:00
c359c6959a
nixos/postgresql: Change local auth method from ident to peer ( #80179 )
2020-02-15 23:55:35 +02:00
6c63107872
nixos/manual: fix build
2020-02-15 19:18:06 +01:00
466c1df3e2
Merge pull request #79266 from Mic92/knot
...
nixos/knot: add keyFiles option
2020-02-15 11:15:03 +00:00
ba42fef9a7
nixos/mate: add yelp to systemPackages
...
Without this the Contents item in the Help menu of applications fails
to launch.
2020-02-14 18:31:52 -03:00
84535e0a47
let's not support group mode for versions pre-11.
...
The only fix is to change mode to 0700 before start, because otherwise postgresql
doesn't start, and error is non-obvious.
2020-02-14 19:16:34 +02:00
2c77c53487
Merge branch 'master' into postgresql_group
2020-02-14 19:00:52 +02:00
3d3392a492
Merge pull request #80090 from crabtw/master
...
nixos/pppd: fix build error
2020-02-14 10:50:47 +01:00
66b5b29977
Merge pull request #80076 from rnhmjoj/alsa
...
nixos/alsa: replace list by attrset in environment.etc
2020-02-14 09:40:41 +01:00
0f8d1ac47d
nixos/pppd: fix build error
2020-02-14 12:51:50 +08:00
f01bcccd25
nixos/unclutter: fix remaining typo
2020-02-14 01:28:03 +01:00
2ad680ac73
nixos/alsa: replace list by attrset in environment.etc
2020-02-14 01:17:18 +01:00
Léo Gaspard
Jörg Thalheim
Maximilian Bosch
nyanloutre
talyz
Florian Klink
Edward Tjörnhammar
Jan Tojnar
Jesper Geertsen Jonsson
Matt Snider
Aaron Andersen
Linus Heckemann
Martin Milata
Dmitry Kalinkin
Daniel Fullmer
Silvan Mosberger
Lancelot SIX
Luis Ressel
Emily
David Guibert
Julien Moutinho
Alexander Bakker
Michele Guerini Rocco
Thomas Dy
Matthew Bauer
WilliButz
Andreas Rammhold
Mark Karpov
Benjamin Staffin
obadz
José Romildo Malaquias
worldofpeace
Jörg Thalheim
WilliButz
Bernardo Meurer
Thomas Tuegel
Franz Pletz
Vladimír Čunát
tilpner
Pascal Bach
tobim
Benjamin Koch
markuskowa
Lengyel Balazs
gnidorah
Yorick van Pelt
David Wood
Julien Moutinho
gtgteq
danbst
Jyun-Yan You
rnhmjoj