3216 Commits

Author	SHA1	Message	Date
Bob van der Linden	f0fd1c9bcf	nixos: iso-image: use memtest86 params in syslinux ... See also #6593.	2015-03-24 22:15:11 +01:00
Bob van der Linden	9ff9949896	nixos: iso-image: removed com32 entries from syslinux menu ... These entries result in incorrect entries when UNetbootin writes the image to an USB disk.	2015-03-24 22:09:06 +01:00
Bob van der Linden	af68f24003	nixos: iso-image: solve UNetbootin compatiblity ... There are a number of hidden restrictions on the syslinux configuration file that come into play when UNetbootin compatiblity is desired. With this commit these are documented.	2015-03-24 22:08:52 +01:00
Bob van der Linden	a12ddc1964	nixos: iso-image: use generic boot-loader timeout ... Syslinux uses different values than grub for timeout. It uses 1/10 seconds as its unit and it uses 0 to disable timeouts. In response to PR #5772.	2015-03-24 22:03:30 +01:00
Bob van der Linden	8d092270d2	nixos: iso-image: use syslinux bootloader for USB booting support ... This changes the bootloader for iso generation from Grub to syslinux. In addition this adds USB booting support, so that "dd" can be used to burn the generated ISO to USB thumbdrives instead of needing applications like UnetBootin.	2015-03-24 22:01:04 +01:00
Arseniy Seroka	ff22e19fc4	Merge pull request #6893 from hrdinka/nsd-config-options ... nsd: Fix automatic config options	2015-03-23 13:19:29 +03:00
Jaka Hudoklin	491c8f82b2	Merge pull request #6917 from offlinehacker/rippled/module/awesome ... rippled: expose more options, make compatible with new rippled version	2015-03-22 23:13:48 +01:00
Jaka Hudoklin	ad10db7617	Merge pull request #6882 from offlinehacker/nixos/fluentd ... Add fluentd package and module	2015-03-21 22:37:48 +01:00
Jaka Hudoklin	916aab2927	Merge pull request #6875 from offlinehacker/nixos/cadvisor/fix ... nixos/cadvisor: fixes	2015-03-21 22:36:11 +01:00
William Casarin	ea2baa8abf	spectrwm window manager	2015-03-21 11:02:44 -07:00
Jaka Hudoklin	4947bacd52	rippled: expose more options, make compatible with new rippled version	2015-03-21 12:52:06 +01:00
Edward Tjörnhammar	664592561d	nixos: added aiccu service	2015-03-20 22:01:35 +01:00
Austin Seipp	3ff22a924f	Merge pull request #6871 from joachifm/apparmor-fixups ... Apparmor fixups	2015-03-20 15:36:42 -05:00
aszlig	ea2fd84ecd	nixos/mpd: Fix creation of "mpd" group. ... The group is specified using a singleton list, so the loaOf merging is done by iterating through the list items with imap, so it enumerates every element and sets that as the default "name" attribute. From lib/types:143: name = elem.name or "unnamed-${toString defIdx}.${toString elemIdx}"; So, people get groups like "unnamed-X.Y" instead of "mpd". Signed-off-by: aszlig <aszlig@redmoonstudios.org> Reported-by: devhell <"^"@regexmail.net> Tested-by: devhell <"^"@regexmail.net>	2015-03-20 20:58:13 +01:00
Jaka Hudoklin	89f41b90fa	Merge pull request #6874 from offlinehacker/pkgs/kubernetes/update ... kubernetes: update to 0.12.1, fix module	2015-03-20 11:22:48 +01:00
Ricardo M. Correia	4d2317e6eb	nixos/zfs: Don't default to git version for kernels >= 3.19 ... Stable version 0.6.3-1.3 works with kernels 3.19.x.	2015-03-19 19:37:33 +01:00
Arseniy Seroka	9cfdeba324	Merge pull request #6611 from jagajaga/slurm ... Slurm module	2015-03-19 21:06:49 +03:00
Christoph Hrdinka	d3a2edb8ce	nsd: Fix automatic config options	2015-03-19 12:10:55 +01:00
Jaka Hudoklin	1b99f0aeb6	Merge pull request #6873 from offlinehacker/pkgs/panamax/update ... panamax: update, fix module	2015-03-19 09:18:48 +01:00
Arseniy Seroka	15f7afa6b4	Merge pull request #6885 from hrdinka/update-nsd ... nsd: Update from 4.1.0 -> 4.1.1	2015-03-19 03:15:35 +03:00
Jaka Hudoklin	fca0aa7077	Add fluentd package and module	2015-03-18 21:18:47 +01:00
Rickard Nilsson	bdbdaee3c0	scollector module: Add extraOpts option	2015-03-18 21:16:31 +01:00
Christoph Hrdinka	6db8155e37	nsd: Update from 4.1.0 -> 4.1.1	2015-03-18 21:01:35 +01:00
Luca Bruno	b94b08488f	nixos/pulseaudio: don't put 32bit libs in systemPackages ... Fixes the useless collisions in the system path. The 64bit and 32bit variants have the same files, hence it's pointless to put the 32bit pulseaudio in systemPackages.	2015-03-18 14:10:02 +00:00
Luca Bruno	cb45b7ec3e	Revert "nixos: Multiple service instances, apply to nginx. See #6784" ... This reverts commit 7ef59c4fe2. Wrong push! Sorry!	2015-03-18 14:09:24 +00:00
Luca Bruno	7ef59c4fe2	nixos: Multiple service instances, apply to nginx. See #6784	2015-03-18 14:07:29 +00:00
Jaka Hudoklin	2482b75eae	kubernetes: update to 0.12.1, fix module	2015-03-18 14:37:03 +01:00
Jaka Hudoklin	079520ced5	panamax: update, fix module	2015-03-18 14:35:24 +01:00
Jaka Hudoklin	536694bcd4	nixos/cadvisor: fixes ... - run as non root user, because of docker - run docker by default	2015-03-18 14:31:08 +01:00
Joachim Fasting	532337d673	Cleanup AppArmor module ... Remove excessive whitespace & comment sections	2015-03-18 12:07:43 +01:00
Eelco Dolstra	224d0d5302	Set stricter permissions on /nix/store ... The nixbld group doesn't need read permission, it only needs write and execute permission. (cherry picked from commit 066758758e7c0768ff8da51d208cdae0f33b368c)	2015-03-18 10:58:08 +01:00
lethalman	cdbeb7143c	Merge pull request #6832 from k0ral/icecast ... Added icecast module	2015-03-17 16:43:02 +01:00
koral	54857abfc9	Added icecast module.	2015-03-17 14:21:57 +00:00
lethalman	c91ccb4b9c	Merge pull request #6842 from philandstuff/hash-owncloud-admin-password ... owncloud: don't store plaintext adminPassword in nix store	2015-03-17 12:59:58 +01:00
lethalman	70b059fb59	Merge pull request #5936 from j-keck/nixos-container-usage ... nixos-container: add missing 'nixos-container update' in usage	2015-03-17 12:43:29 +01:00
lethalman	359bc60ec8	Merge pull request #6448 from eduarrrd/ddclient ... ddclient module: fix module	2015-03-17 12:38:12 +01:00
Philip Potter	7ad6dac43b	owncloud: don't store plaintext adminPassword in nix store ... Rather than using openssl to hash the password at build time, and hence leaving the plaintext password world-readable in the nix store, we can instead hash the password in the nix expression itself using builtins.hashString.	2015-03-16 22:42:22 +00:00
Peter Simons	56bb114905	Merge pull request #6722 from joachifm/fix-id-mismatches ... Fix id mismatches	2015-03-16 18:46:38 +01:00
Joachim Fasting	3518b761ba	TCSD: use tss user/group instead of nginx ... For some reason TCSD is configured to use the nginx uid/gid. Use the newly created tss uid/gid instead.	2015-03-16 09:58:16 +01:00
Joachim Fasting	e9cd877921	nixos: resolve uid/gid conflicts ... This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch	2015-03-16 09:58:13 +01:00
Austin Seipp	ef95600372	Merge pull request #6771 from joachifm/apparmor-2.9 ... Apparmor 2.9	2015-03-15 14:16:24 -05:00
Nicolas B. Pierron	05e8a48fb4	Document and rename internal option of modules.	2015-03-15 14:45:42 +01:00
Ricardo M. Correia	7c8247a8c5	grsecurity: Update stable and test patches ... stable: 3.1-3.14.35-201503071140 -> 3.1-3.14.35-201503092203 test: 3.1-3.18.9-201503071142 -> 3.1-3.19.1-201503122205	2015-03-15 03:49:58 +01:00
William A. Kennington III	c200c1e0a1	Merge pull request #6813 from globin/fix/elantech-trackpoint-scrolling ... Add Elanthec PS/2 Trackpoint (Thinkpad L430)	2015-03-14 17:01:13 -07:00
Robin Gloster	a8a350e679	Add Elanthec PS/2 Trackpoint (Thinkpad L430)	2015-03-15 00:09:04 +01:00
koral	9c4cbaa553	Fix mpd configuration (enclosing quotes needed).	2015-03-14 12:15:34 +00:00
Joachim Schiele	d74ea7d34f	zef hemels' wordpress.nix adapted to extraSubservices	2015-03-13 14:19:48 +01:00
lethalman	f72d1abb79	Merge pull request #5846 from arno01/nginx ... nginx service improvements	2015-03-13 11:41:27 +01:00
Nicolas B. Pierron	9f2865515d	Fix infinite loop in fontconfig-ultimate.nix ... With the new evaluation of arguments, pkgs is now defined by the configuration, which implies that option declaration with pkgs.lib will cause an infinite loop.	2015-03-12 23:42:58 +01:00
Shea Levy	3177d37652	Fix import using module args	2015-03-12 23:42:57 +01:00
Shea Levy	f69ce50529	Move most extra args out of eval-config.nix	2015-03-12 23:42:57 +01:00
Shea Levy	e3eff53037	evalModules: Add internal option for the check argument	2015-03-12 23:42:57 +01:00
Shea Levy	e4a06f35b1	nixos: Don't evaluate twice to get the value of config.nixpkgs	2015-03-12 23:42:57 +01:00
Shea Levy	1d62ad4746	modules.nix: Generate the extra argument set from the configuration ... This allows for module arguments to be handled modularly, in particular allowing the nixpkgs module to handle the nixpkgs import internally. This creates the __internal option namespace, which should only be added to by the module system itself.	2015-03-12 23:42:57 +01:00
Vladimír Čunát	208d1f24db	xfce: more update fallout ... - forgotten mousepad update, including some wrapping magic - dealing with panel plugins (either fix or mark as broken) CC maintainer @AndersonTorres. - remove some libxfcegui4 occurrences, as it's being phased out - minor stuff	2015-03-12 23:02:15 +01:00
lethalman	14ed261fc7	Merge pull request #6765 from gebner/ibus-plugins ... Add ibus-qt and ibus-anthy.	2015-03-12 14:35:23 +01:00
Joachim Fasting	7a9a24a95e	Update AppArmor service module ... - Use AppArmor 2.9 - Enable PAM support	2015-03-12 11:49:05 +01:00
Kirill Elagin	356810b178	cupsd: rename cupsd.service to cups.service	2015-03-12 09:00:56 +03:00
Gabriel Ebner	d23ed364b5	Add ibus-qt.	2015-03-11 21:54:04 +01:00
Gabriel Ebner	59da79c733	ibus: Enable XIM support. ... This allows firefox to use ibus.	2015-03-11 21:54:04 +01:00
Gabriel Ebner	f222abea44	Add programs.ibus config option to enable ibus and plugins.	2015-03-11 21:53:34 +01:00
Thomas Tuegel	61cf7e1265	Merge branch 'kde5'	2015-03-11 11:49:45 -05:00
Thomas Tuegel	f370af91ad	kde5: use ksshaskpass for SSH_ASKPASS	2015-03-11 11:49:29 -05:00
Thomas Tuegel	4b10907152	ssh: make askPassword an option ... By making askPassword an option, desktop environment modules can override the default x11_ssh_askpassword with their own equivalent for better integration. For example, KDE 5 uses plasma5.ksshaskpass instead.	2015-03-11 11:49:29 -05:00
Thomas Tuegel	5b5b7aa951	kde5: add kde-workspace and kde-runtime to systemPackages	2015-03-11 11:49:28 -05:00
Luca Bruno	fe6b0b15e6	nixos-install: support -j, --cores and --option. Closes #6755	2015-03-11 16:47:44 +00:00
lethalman	fe79bf34a5	Merge pull request #6512 from bjornfor/nixos-haproxy-cleanup ... nixos/haproxy: remove broken default 'config'	2015-03-11 16:29:06 +01:00
lethalman	c8ac069772	Merge pull request #6724 from anderspapitto/local ... Add x11 service for unclutter	2015-03-11 15:32:40 +01:00
Arseniy Seroka	ef37154c82	Merge pull request #6739 from joachifm/refactor-tarsnap-service ... nixos: refactor tarsnap backup service module	2015-03-11 11:22:32 +03:00
Arseniy Seroka	1c58c3a772	Merge pull request #6345 from puffnfresh/feature/mtrack-options ... Add more options to multitouch (mtrack) module	2015-03-11 11:10:51 +03:00
William A. Kennington III	26020cfe8a	nixos/lightdm: Add a background option	2015-03-10 15:57:46 -07:00
William A. Kennington III	e519414e1f	nixos/lightdm: Fix data directory	2015-03-10 14:55:54 -07:00
William A. Kennington III	3a67a51689	nixos/lightdm: Small cleanup	2015-03-10 14:35:49 -07:00
William A. Kennington III	ffed8a85bc	nixos/sddm: Hide users which don't have login shells	2015-03-10 14:32:53 -07:00
William A. Kennington III	5893d2ecd3	nixos/lightdm: More Cleanups	2015-03-10 14:23:43 -07:00
William A. Kennington III	7b6e2e1c68	lightdm: Fix rendering	2015-03-10 14:03:18 -07:00
lethalman	27f3f254d3	Merge pull request #6540 from k0ral/transmission ... Simplify (and fix) settings for transmission module	2015-03-10 13:26:03 +01:00
lethalman	70527b87a1	Merge pull request #6440 from k0ral/fcgiwrap ... Updated fcgiwrap's systemd unit to match upstream version.	2015-03-10 13:18:46 +01:00
Joachim Fasting	1bdd12ed69	nixos: refactor tarsnap backup service module ... Major changes - Port to systemd timers: for each archive configuration is created a tarsnap@archive-name.timer which triggers the instanced service unit - Rename the `config` option to `archives` Minor/superficial improvements - Restrict tarsnap service capabilities - Use dirOf builtin - Set executable bit for owner of tarsnap cache directory - Set IOSchedulingClass to idle - Humanize numbers when printing stats - Rewrite most option descriptions - Simplify assertion	2015-03-10 12:35:58 +01:00
William A. Kennington III	4940e643cc	nixos/display-manager: Support configurable hidden users	2015-03-09 18:10:31 -07:00
William A. Kennington III	66bfdf6eb0	nixos/lightdm: We now use a global lightdm.conf	2015-03-09 17:59:21 -07:00
Eelco Dolstra	475df1a350	switch-to-configuration: Don't print already active target units ... Since we restart all active target units (of which there are many), it's hard to see the units that actually matter. So don't print that we're starting target units that are already active.	2015-03-09 16:51:06 +01:00
Eelco Dolstra	a574065a81	nixos-rebuild: Add ‘dry-activate’ command ... ‘nixos-rebuild dry-activate’ builds the new configuration and then prints what systemd services would be stopped, restarted etc. if the configuration were actually activated. This could be extended later to show other activation actions (like uids being deleted). To prevent confusion, ‘nixos-rebuild dry-run’ has been renamed to ‘nixos-rebuild dry-build’.	2015-03-09 16:50:59 +01:00
Eelco Dolstra	8cb3e3b864	httpd: Disable insecure protocols/ciphers by default ... This makes us resistant to FREAK and similar attacks.	2015-03-09 14:18:12 +01:00
Eelco Dolstra	d31202fba2	sshd: Enable seccomp sandboxing	2015-03-09 11:27:19 +01:00
lethalman	9867f4bdef	Merge pull request #6720 from nslqqq/nmhooks ... New NetworkManager Dispatcher scripts options	2015-03-09 10:36:10 +01:00
Anders Papitto	887a547ac9	Add x11 service for unclutter ... modeled after the redshift service	2015-03-08 20:12:18 -07:00
William A. Kennington III	5b059416b8	Merge pull request #6699 from hakuch/fix_samba ... Samba: Fixed "syncPasswordsByPam".	2015-03-08 16:09:29 -07:00
obadz	e5d4624420	PAM/eCryptfs now able to mount ecryptfs'd home directories on login	2015-03-08 16:03:51 -07:00
Nikita Mikhailov	579159c72b	Add dispatcher configuration options to NetworkManager module	2015-03-08 20:24:53 +01:00
Unai Zalakain	581a90bad8	Optional user and group to run the MPD	2015-03-08 10:18:40 +00:00
Jesse Haber-Kucharsky	5a1950d985	Samba: Fixed "syncPasswordsByPam".	2015-03-07 17:56:46 +00:00
Nikolay Amiantov	b802018482	stage-1: fix hibernation (close #6675) ... Fixes #6617.	2015-03-07 13:00:08 +01:00
Arseniy Seroka	30e6f1b4ea	slurm: impl basic configuration	2015-03-07 00:26:57 +03:00
Arseniy Seroka	0b1cc3cd51	slurm: impl simple service	2015-03-07 00:26:57 +03:00
Arseniy Seroka	69e59e9962	munge: add service	2015-03-07 00:26:52 +03:00
Eelco Dolstra	3b9b620656	Revert "linux: disable UEVENT_HELPER*" ... This reverts commit 9f87f3ccb0 because it causes /proc/sys/kernel/hotplug to not be cleared on Linux <= 3.14.	2015-03-06 15:59:06 +01:00
Nikolay Amiantov	4fde098eec	Merge pull request #6677 from abbradar/sddm ... Add SDDM display manager	2015-03-05 21:03:43 +03:00
Nikolay Amiantov	4f317767da	lightdm: don't leave a shell running	2015-03-05 20:49:45 +03:00
Nikolay Amiantov	264c6892f2	nixos/uim: capitalize description	2015-03-05 20:49:45 +03:00
Nikolay Amiantov	db5b08cfaf	nixos/sddm: add display manager	2015-03-05 20:49:26 +03:00
Eelco Dolstra	9bb586943a	Deal with virtualisation.xen.stored in a more standard way	2015-03-05 12:46:50 +01:00
Luca Bruno	b93e8bab3a	nixos/xen: do not use derivation in the default values ... The xen package is broken on i686, so this would break the generation of the nixos manual.	2015-03-04 12:05:58 +01:00
Eelco Dolstra	1002fb6433	Add "input" group ... This is required by systemd >= 215.	2015-03-03 20:27:09 +01:00
Eelco Dolstra	8546ec7c74	Fix some uid/gid clashes	2015-03-03 20:26:36 +01:00
Eelco Dolstra	a4e0278fcd	Create /dev/nvidia-uvm for CUDA support	2015-03-03 20:24:14 +01:00
Arseniy Seroka	7ce77b5752	slurm: add pkg	2015-03-02 22:10:58 +03:00
lethalman	c97d7819ab	Merge pull request #6624 from joachifm/grsec-lock ... nixos: grsec-lock service fixes	2015-03-02 18:49:39 +01:00
Joachim Fasting	18320d3b21	nixos: fix grsec-lock requires	2015-03-02 18:39:04 +01:00
Joachim Fasting	ccd6f5a313	nixos: make the grsec-lock unit depend on the path it writes to ... The grsec-lock unit fails unless /proc/sys/kernel/grsecurity/grsec_lock exists and so prevents switching into a new configuration after enabling grsecurity.sysctl.	2015-03-02 18:39:01 +01:00
lethalman	373c4ce0ec	Merge pull request #6605 from AndersonTorres/afterstep ... Adding Afterstep to nixos window manager modules	2015-03-02 18:00:28 +01:00
Tobias Geerinckx-Rice	9f87f3ccb0	linux: disable UEVENT_HELPER* ... Deprecated since 2006: http://lwn.net/Articles/166954/	2015-03-01 03:31:59 +01:00
Eelco Dolstra	307064ceb5	Don't use machinectl to shut down containers ... If the host is shutting down, machinectl may fail because it's bus-activated and D-Bus will be shutting down. So just send a signal to the leader process directly. Fixes #6212.	2015-02-28 19:23:00 +01:00
AndersonTorres	929485b645	Adding Afterstep to nixos modules	2015-02-28 11:14:33 -03:00
AndersonTorres	5472af91f2	Fluxbox: update to 1.3.7	2015-02-28 11:04:20 -03:00
Jaka Hudoklin	6dc0938a3e	Merge pull request #6591 from lseppala/master ... Fix rebooting containers where resolv.conf is a symlink	2015-02-28 12:19:01 +01:00
Joachim Fasting	0473b4ae8d	nixos: citerefentry markup in lxc option descriptions	2015-02-28 09:21:48 +01:00
Joachim Fasting	d375550ead	nixos: add a few missing type specifiers under boot.*	2015-02-28 09:19:23 +01:00
Lane Seppala	4106a3b74e	Fix rebooting containers where resolv.conf is a symlink	2015-02-27 10:27:18 -07:00
Eelco Dolstra	22d2fc3657	Fix "systemctl reload container@" ... Fixes #5179.	2015-02-27 14:32:54 +01:00
Rob Vermaas	24e0565407	Only start fetch-keys for GCE image after ip-up.	2015-02-27 10:48:15 +00:00
koral	c1cefa1a58	Simplify (and fix) settings for transmission module.	2015-02-26 22:21:27 +00:00
Rob Vermaas	e4928b8955	GCE image: Pass header to metadata service calls.	2015-02-26 19:20:43 +00:00
Sander van der Burg	7b27af61fb	Add NixOS global binaries to the PATH	2015-02-26 17:29:49 +00:00
Eelco Dolstra	6177710ac7	Merge pull request #6046 from ts468/xen ... Update: Xen 4.5 + NixOS Xen modules	2015-02-26 10:15:05 +01:00
lethalman	b6672f232a	Merge pull request #6283 from mdorman/master ... Fix initial-install issues with couchdb.nix.	2015-02-26 10:11:18 +01:00
lethalman	d791335ac2	Merge pull request #6518 from ehmry/u9fs ... U9fs	2015-02-26 09:41:18 +01:00
William A. Kennington III	9ce0c1cb71	nixos/consul: Fix timeout bugs and json formatting	2015-02-25 15:42:43 -08:00
Thomas Strobel	3d4fbb874c	Update: add new Xen versions + update NixOS Xen modules ... Versions of XEN: - Xen 4.5 - Xen 4.5 + XenServer patches - Xen 4.4.1	2015-02-25 23:30:44 +01:00
William A. Kennington III	f27fa79aa9	nixos/dnsmasq: Fix service name typo	2015-02-25 09:22:16 -08:00
Eelco Dolstra	36d0f367de	ssh-agent: Fix asking for confirmation via $SSH_ASKPASS ... This was lost back in ffedee6ed5. Getting this to work is slightly tricky because ssh-agent runs as a user unit, and so doesn't know the user's $DISPLAY.	2015-02-25 14:31:17 +01:00
Eelco Dolstra	93902ea108	nsswitch.conf: Omit ldap unless ldap is enabled ... This prevents programs from trying to find nss_ldap.	2015-02-25 14:31:13 +01:00
William A. Kennington III	e453f99446	nixos/networkd: Add an assertion for unsupported rstp	2015-02-24 13:09:34 -08:00
Lluís Batlle i Rossell	b26e939111	fix pam (OATH related) ... the pam config was wrong. Issue #6551	2015-02-24 17:52:41 +01:00
Eelco Dolstra	16cf3ee9da	Ensure that the home directory exists even if the user already exists	2015-02-24 11:57:38 +01:00
Eduard Bachmakov	4bf66ba89c	ddclient module: fix module ... * rewrite to systemd.services * disable forking to give systemd better control * verifiably run as ddclient user * expose ssl option * unset default value for dyndns server * rename option "web" to "use" to be consistent with ddclient docs * add descriptions * add types to options * clean up formatting	2015-02-23 22:37:20 -05:00
Jaka Hudoklin	1cddb5be20	mongodb: remove lock file on restart	2015-02-23 20:40:13 +01:00
Eelco Dolstra	b70bd0879b	sshd: Generate a ed25519 host key	2015-02-23 17:00:07 +01:00
Emery Hemingway	446580f3cd	nixos: u9fs service module	2015-02-22 12:16:58 -05:00
Bjørn Forsman	d5017499a2	nixos/redis: capitalize service description	2015-02-22 16:54:14 +01:00
Bjørn Forsman	25a6745310	nixos/fail2ban: capitalize service description	2015-02-22 16:54:14 +01:00
Lluís Batlle i Rossell	4e99901961	nixos: Adding OATH in pam. ... (cherry picked from commit cb3cba54a1b87c376d0801238cb827eadb18e39e) Conflicts: nixos/modules/security/pam.nix	2015-02-22 15:25:38 +01:00
Bjørn Forsman	ffb4797dd3	nixos/haproxy: remove broken default 'config' ... HAProxy fails to start with the default 'config'. Better disable it and assert that the user provides a suitable 'config'. (AFAICS, there cannot really be a default config file for HAProxy.)	2015-02-22 12:30:14 +01:00
Bjørn Forsman	419a4166a7	nixos/haproxy: small cleanup ... * Add option types * Rewrite option descriptions * /var/run/haproxy.pid => /run/haproxy.pid (canonical location)	2015-02-22 12:29:34 +01:00
aszlig	030895f075	nixos/dhcpcd: Only run resume commands if enabled. ... The networkd implementation sets systemd.services.dhcpcd.enable to false in nixos/modules/tasks/network-interfaces-systemd.nix. So we need to respect that in the dhcpcd module. If we don't, the resumeCommand is set nevertheless, which causes the post-resume.service to fail after resuming: Failed to reload dhcpcd.service: Unit dhcpcd.service is masked. post-resume.service: main process exited, code=exited, status=1/FAILURE Failed to start Post-Resume Actions. Dependency failed for Post-Resume Actions. Unit post-resume.service entered failed state. post-resume.service failed. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-02-22 08:09:04 +01:00
Thomas Tuegel	d15d0bebc3	kde5: remove file collisions	2015-02-21 20:58:43 -06:00
Thomas Tuegel	68f2db74ff	kde5: always use plasma-nm	2015-02-21 13:59:28 -06:00
Thomas Tuegel	7eb8a9b41f	kde5: install media-player-info udev rules for solid	2015-02-21 11:39:21 -06:00
Thomas Tuegel	532650e4bb	kde5: change notice about default Phonon backend	2015-02-21 11:39:21 -06:00
Thomas Tuegel	e5de75bf2a	kde5: install kde-frameworks version used by plasma	2015-02-21 11:39:21 -06:00
Thomas Tuegel	b050babd3e	kde5: fix Phonon GStreamer backend	2015-02-21 11:39:20 -06:00
Thomas Tuegel	a79936561b	environment: use Qt 5 Qml import paths	2015-02-21 11:39:20 -06:00
Vladimír Čunát	a3a467ce77	nixos/nvidia: use correct 32-bit legacy libs; refactor ... Fixes #6127. Now we avoid multiple switches among the version possibilities.	2015-02-21 16:34:24 +01:00
Bjørn Forsman	97875ac175	bridge-utils: align attrname with pkgname	2015-02-20 22:30:51 +01:00
Thomas Strobel	c62e42e9c5	Enhance stage-1/2 scripts for better dealing with squashfs	2015-02-20 17:42:22 +01:00
Peter Simons	263a49be20	Merge pull request #5704 from eduarrrd/nixos-version ... Add option to display git revision to nixos-version	2015-02-20 16:35:56 +01:00
Shea Levy	2fe3a3c203	Merge branch 'grub' of git://github.com/ts468/nixpkgs ... Fix grubTarget on nodev installs	2015-02-20 07:47:06 -05:00
tv	86cb16965a	exim: add version 4.85 incl. nixos module	2015-02-20 10:49:15 +01:00
Shea Levy	3e44f99055	Fix grub 1 install	2015-02-19 19:33:17 -05:00
Eelco Dolstra	5762f8f95c	Add options to support signed binary caches ... Typical use: nix.requireSignedBinaryCaches = true; nix.binaryCachePublicKeys = [ "hydra.nixos.org-1:CNHJZBh9K4tP3EKF6FkkgeVYsS3ohTl+oS0Qa8bezVs=" ]; (The public key of cache.nixos.org is included by default.) Note that this requires Nix 1.9 and that most of cache.nixos.org hasn't been signed yet.	2015-02-19 14:22:43 +01:00
Jaka Hudoklin	ebfadc2fc9	Merge pull request #6452 from rushmorem/update-chronos-port ... Update chronos default port	2015-02-19 14:13:00 +01:00
rushmorem	74b40e9a43	Add marathon mesos framework	2015-02-19 13:30:00 +02:00
rushmorem	a661802d29	Update chronos default port ... Update chronos default port to match the one documented on their website (http://airbnb.github.io/chronos). The one in their repo (the current one) clashes with the marathon documented one.	2015-02-19 12:31:12 +02:00
koral	d9078d03a3	Updated fcgiwrap's systemd unit to match upstream version.	2015-02-18 21:19:12 +00:00
Eelco Dolstra	4ac280ec49	Blacklist the nouveau driver on EC2	2015-02-18 13:04:10 +01:00
Sou Bunnbu	f8dbd6f9ae	Merge pull request #6427 from grwlf/vsftpd-port ... vsftpd.nix: add 'portPromiscuous' option	2015-02-18 19:18:34 +08:00
Sergey Mironov	ac65a757f0	vsftpd.nix: add 'portPromiscuous' option	2015-02-18 11:51:43 +03:00
Mathijs Kwik	2fe44b95d0	nixos/wpa_supplicant: fix conflicting documentation ... fixes #6298	2015-02-17 22:16:20 +01:00
James Cook	6daf9aa922	Merge pull request #5995 from ts468/qemu-vm ... Update QEMU Nixos Virtual Machine	2015-02-16 13:13:26 -08:00
Thomas Strobel	c61ff9b51e	Fix grubTarget on nodev installs	2015-02-16 20:19:44 +01:00
Thomas Strobel	80afabd5b5	Update QEMU Nixos Virtual Machine ... The Nixos Qemu VM that are used for VM tests can now start without boot menu even when using a bootloader. The Nixos Qemu VM with bootloader can emulate a EFI boot now.	2015-02-16 20:07:42 +01:00
Evgeny Egorochkin	4621f16b34	azure: add a job to download ssh host and root keys if they are made available via "custom data"; see #3986	2015-02-16 16:54:30 +02:00
Eelco Dolstra	5d7000df68	Automatically set nix.nrBuildUsers to at least nix.maxJobs	2015-02-16 12:02:49 +01:00
Wout Mertens	65438da88a	Merge pull request #6357 from NixOS/jobs-vs-users ... nix-daemon: Sanity check maxJobs vs nrBuildUsers	2015-02-16 11:42:24 +01:00
Rob Vermaas	824fccd3e9	Move amazon option out of amazon-image.nix, needed to make ec2.hvm usable from nixops, without breaking evaluation for other backends. ... (cherry picked from commit 213fe8427c5ce455b893c0c5c56cc38175bf36b7)	2015-02-16 09:57:19 +00:00
Eelco Dolstra	5092d625d6	/etc/ssl/certs/ca-bundle.crt -> ca-certificates.crt ... Even though there is no "official" standard location, it's better to stick to what most distros are using.	2015-02-15 19:06:31 +01:00
Eelco Dolstra	75e1b5e317	Provide symlinks to ca-bundle.crt for compat with other distros ... There is no "standard" location for the certificate bundle, so many programs/libraries have various hard-coded default locations that don't exist on NixOS. To make these more likely to work, provide some symlinks.	2015-02-15 19:06:31 +01:00
AndersonTorres	f19ed980a2	Sawfish (git): New Package ... Sawfish is a versatile, Lisp-based window manager In that commit I include all Sawfish stack: - librep, a lisp system; - rep-gtk, bindings for gtk - sawfish, the window manager	2015-02-15 19:42:53 +03:00
Wout Mertens	d41367735d	nix-daemon: Sanity check maxJobs vs nrBuildUsers	2015-02-15 15:37:30 +01:00
James Cook	33550b6efe	Merge pull request #5665 from joachifm/dnscrypt-proxy-apparmor-updates ... dnscrypt-proxy service: update AppArmor profile	2015-02-14 22:02:31 -08:00
Brian McKenna	28a9ed618f	Add more options to multitouch (mtrack) module	2015-02-14 14:56:12 -07:00
William A. Kennington III	1fddcd1e83	grub: Don't remove zfs support if contained in the default binary	2015-02-13 14:40:41 -08:00
William A. Kennington III	69a277e2cc	iwlegacy: Remove since it is already in linux-firmware-nonfree	2015-02-13 14:27:47 -08:00
Harald van Dijk	0fe9d58e4e	stage-1-init: fix PID 1 shell ... The PID 1 shell is executed as the last command in a sh invocation. Some shells implicitly use exec for that, but the current busybox ash does not, so the shell gets a wrong PID. Spell out the exec.	2015-02-13 10:20:29 +00:00
lethalman	51a7277fac	Merge pull request #6312 from k0ral/sslh ... sslh: added libwrap support + improved nixos module.	2015-02-13 10:03:48 +01:00
Domen Kožar	5a4614dc1f	Add hid_lenovo to initrd kernel modules	2015-02-13 01:42:13 +01:00
Jaka Hudoklin	a17f5c8c9b	nixos/consul: add consul-alerts service	2015-02-12 19:16:50 +01:00
Jaka Hudoklin	36e7a61dde	Merge pull request #6222 from offlinehacker/limesurvey ... add limesurvey package and nixos module	2015-02-12 18:07:42 +00:00
koral	cb153cfca3	sslh: added libwrap support + improved nixos module.	2015-02-12 13:21:36 +01:00
Michael Alan Dorman	f21cab27a4	Fix initial-install issues with couchdb.nix. ... When starting from a clean slate, the couchdb service fails. First, the pre-start script fails because it tries to chown the uriFile, which doesn't exist. It also doesn't ensure that the directory in which the uriFIle is placed is writeable by couchdb, which could also cause failure (though I didn't observe this). Additionally, the log file's default location isn't a directory owned by couchdb, nor is the file guaranteed to exist, nor is it guaranteed to be chowned to the appropriate user. All of which can cause unexpected failure. As a bonus I made a small change in the description of the configFile attribute, in the hopes of making it a little more obvious why it existed.	2015-02-11 20:42:52 -05:00
William A. Kennington III	35e9d3c112	nixos/zfs: Use the git version for kernels unsupported by 0.6.3	2015-02-11 15:11:56 -08:00
Luca Bruno	e088fd0314	Revert "Merge pull request #5626 from matthiasbeyer/add-fish_shell_module" ... This reverts commit 157d199b33, reversing changes made to 4c7adddcb7.	2015-02-11 18:31:11 +01:00
Luca Bruno	c427b48ba6	Revert "Add fish to nixos module list" ... This reverts commit d7f5d00f0a.	2015-02-11 18:30:58 +01:00
Luca Bruno	d7f5d00f0a	Add fish to nixos module list	2015-02-11 14:05:30 +00:00
lethalman	157d199b33	Merge pull request #5626 from matthiasbeyer/add-fish_shell_module ... Add basic nixos module for fish shell	2015-02-11 15:05:03 +01:00
Luca Bruno	f7b26bf98f	gnome3: Set XCURSOR_PATH. Closes #6191	2015-02-11 11:48:51 +00:00
lethalman	c1d22c947e	Merge pull request #6278 from bendlas/cdemu ... Add cdemu packages and module	2015-02-10 15:33:06 +01:00
Herwig Hochleitner	983fddcea8	Move cdemu module into programs	2015-02-10 13:14:09 +01:00
lethalman	12834a8500	Merge pull request #6072 from AndersonTorres/window-managers ... Update NixOS module files to include WindowMaker	2015-02-10 13:06:06 +01:00
Herwig Hochleitner	b909def3e1	Whitespace cleanup	2015-02-10 11:49:32 +01:00
lethalman	93ebaafabe	Merge pull request #6170 from k0ral/sslh ... New sslh module	2015-02-10 11:17:56 +01:00
lethalman	7614b2f984	Merge pull request #6229 from devhell/canto ... canto-{curses,daemon}: Add packages	2015-02-10 10:34:11 +01:00
Luca Bruno	d06122c58d	Add PermissionsStartOnly to mpd service. Closes #6277	2015-02-10 10:18:54 +01:00
Herwig Hochleitner	2961b83d08	Add cdemu packages and module	2015-02-10 06:49:47 +01:00
William A. Kennington III	650b2258f0	nonfree-firmware: Use the new kernel.org repository for tracking nonfree firmware changes ... remove the obsolete iwlwifi firmware which is included in the repo.	2015-02-09 16:28:40 -08:00
William A. Kennington III	b556983eb7	nixos/system: Add xhci_pci as it is needed to detect host buses in the initrd for usb keyboards on the xhci bus and storage devices on the iso	2015-02-09 13:09:26 -08:00
Wout Mertens	8f42f33c45	stage-1-init: better warnings ... - Suppress spurious LVM FD3 warning: See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432986 - Warn when device doesn't come online	2015-02-09 21:53:51 +01:00
Shea Levy	24c0844cfb	Fix grub on nodev installs	2015-02-08 22:31:14 -05:00
William A. Kennington III	c4bec1a0a4	Merge pull request #6152 from abbradar/samba-clean ... nixos/samba: cleanup and update defaults	2015-02-08 14:20:49 -08:00
William A. Kennington III	2a0754ccbc	Merge pull request #5994 from ts468/grub ... Add 'target' parameter for GRUB installation chain	2015-02-08 14:18:13 -08:00
devhell	a9ac564f50	canto-daemon: Fix typo and remove TimeoutStopSec	2015-02-08 14:16:17 +00:00
devhell	d6e9df1e1a	canto-daemon: Add a systemd service ... This adds a systemd service for the canto-daemon.	2015-02-08 14:16:17 +00:00
Domen Kožar	b83433cdd1	Remove gui (see #6207), use nixui instead	2015-02-08 10:47:58 +01:00
William A. Kennington III	42a6ac5209	nixos/iso: Increase efi image size to 15M	2015-02-07 20:38:24 -08:00
William A. Kennington III	0fa4c9d6d3	nixos/zfs: Fix references to zfs packages now that they are split	2015-02-07 15:07:39 -08:00
Jaka Hudoklin	41ae4d1af9	add limesurvey package and nixos module	2015-02-07 23:18:51 +01:00
Jaka Hudoklin	f85abb041a	Merge pull request #5622 from offlinehacker/panamax ... panamax: new package and service	2015-02-07 14:56:25 +00:00
Jaka Hudoklin	769fb8a141	Merge pull request #5486 from matejc/fixgatewayd ... systemd-journal-gatewayd: add systemd-journal group	2015-02-07 14:52:31 +00:00
Jaka Hudoklin	ae34f923f7	panamax: simplify, refactor, add test	2015-02-07 15:32:20 +01:00
Matej Cotman	8c79a2df63	panamax: new package and service	2015-02-07 15:32:20 +01:00
William A. Kennington III	9792b12e53	nixos/openntpd: Don't start until we have networking ... This attempts to fix an issues where ntp is unable to resolve hostnames because it came up before local nameservers or networking.	2015-02-06 14:45:47 -08:00
William A. Kennington III	3e280f2089	nixos/tinc: Fix key generation behavior and use tinc 1.1 by default	2015-02-05 23:37:20 -08:00
Eelco Dolstra	d2bfb5ceb0	Add options for installing additional root certificates	2015-02-05 18:08:35 +01:00
Nikolay Amiantov	f35568e705	Merge pull request #5277 from abbradar/uwsgi ... Add uWSGI application server	2015-02-05 17:10:37 +03:00
koral	1439e72147	New sslh module.	2015-02-05 13:30:39 +01:00
Edward Tjörnhammar	83925c33f6	i2pd: 0.6.0 -> 0.7.0 ... nixos: i2pd.service, fix string escaping	2015-02-05 12:09:59 +01:00
William A. Kennington III	9ddb6c9cc9	nixos/tinc: Add daemon configuration	2015-02-04 18:19:04 -08:00
William A. Kennington III	bae5faa82d	nixos/dhcpd: Also try restarting openntpd as it suffers the same dns resolution problem	2015-02-04 17:33:14 -08:00
William A. Kennington III	43d8b1ef3c	openntpd: Fixes	2015-02-04 17:30:22 -08:00
William A. Kennington III	a9f1329d2d	nixos/openntpd: Add openntpd to the environment for ntpctl	2015-02-04 17:27:03 -08:00
Nikolay Amiantov	b22a1ff683	Merge pull request #4485 from abbradar/parsoid ... Add "parsoid" service	2015-02-04 23:08:28 +03:00
Nikolay Amiantov	b903bf0a57	nixos/samba: cleanup and update defaults	2015-02-04 22:31:50 +03:00
AndersonTorres	fff55a968e	Update NixOS module files to include WindowMaker ... According to a hint on NixOS mailing list[1], I updated nixos/modules/services/x11/window-managers/default.nix to include windowmaker. 1 - https://github.com/NixOS/nixpkgs/pull/4066#issuecomment-72017611	2015-02-03 21:24:12 -02:00
Lukas Lihotzki	c848d05de9	gitlab: Fix typo	2015-02-03 22:08:10 +01:00
lethalman	49b67bb9cb	Merge pull request #6078 from boothead/sabnzbd ... sabnzbd Change service to systemd	2015-02-03 13:32:59 +01:00
Peter Simons	b7ecd5e729	Merge pull request #5025 from abbradar/xmonad-wrapper ... nixos/xmonad: make a wrapper	2015-02-03 11:52:09 +01:00
Shea Levy	c45372f038	Merge commit 'cfb29ab882323d379aba20a95020c7c24f883eae' ... Partial staging merge, including cc-wrapper fixes Conflicts: pkgs/applications/audio/spotify/default.nix pkgs/build-support/cc-wrapper/default.nix pkgs/development/compilers/cryptol/1.8.x.nix	2015-02-02 21:14:28 -05:00
Nikolay Amiantov	b7bb524f04	nixos/xmonad: move to haskell-ng and make a wrapper	2015-02-03 01:05:23 +03:00
Nikolay Amiantov	51681449da	uwsgi: add nixos module	2015-02-02 22:23:42 +03:00
Nikolay Amiantov	9a04482af7	parsoid: add service	2015-02-02 22:21:45 +03:00
Thomas Tuegel	0fee7a2b21	fontconfig: stringify dpi correctly	2015-02-01 16:18:48 -06:00
Bjørn Forsman	ee52a61e3a	nixos/tftpd: add option types and fixup descriptions ... The first description is a (incorrect) copy/paste from the 'vsftpd' module, and the second option lacks a 'dot' at the end.	2015-02-01 15:57:28 +01:00
lethalman	9576ff49d8	Merge pull request #5737 from matthiasbeyer/add-gitolite_admin_pubkey_oneline_note ... Add note that admin-pub-key for gitolite has to be written in one line	2015-01-30 11:24:06 +01:00
lethalman	41cca7d2d6	Merge pull request #6045 from ragnard/apache-kafka ... apache-kafka: New package and service	2015-01-30 10:50:14 +01:00
Luca Bruno	a239775488	Merge PR #5772, boot.loader.timeout	2015-01-30 10:39:50 +01:00
Bob van der Linden	a3d5f4f3ef	nixos: gummiboot: change default to 1000 if boot.loader.timeout is null ... When gummiboot.timeout == null, the menu will still be skipped. When gummiboot.timeout == 0, the menu will also be skipped. The only way to show the menu 'indefinitely' is to show it a long time.	2015-01-30 10:36:21 +01:00
Bob van der Linden	f93ba51469	nixos: loader: added generic config.boot.loader.timeout option ... timeout options of grub and gummiboot will inherit the value of this option by default.	2015-01-30 09:53:44 +01:00
Shea Levy	52d4b9d982	Merge branch 'tlsdate' of git://github.com/4z3/nixpkgs	2015-01-30 01:07:59 -05:00
Ragnar Dahlén	17bd96ea25	apache-kafka: New service for Apache Kafka	2015-01-29 11:10:22 +00:00
lethalman	a15edc22e3	Merge pull request #5615 from nckx/freefall ... Add freefall: hard drive protection on HP/Dell laptops	2015-01-28 18:52:46 +01:00
Eelco Dolstra	378006f0f2	Restrict the length of container names	2015-01-28 16:13:00 +01:00
Jaka Hudoklin	c0eff1de61	Merge pull request #5939 from offlinehacker/nixos/containers/containers_in_containers ... nixos/containers: make containers in containers possible	2015-01-28 16:07:17 +01:00
Jaka Hudoklin	2af3ff52c2	nixos/containers: make containers in containers possible	2015-01-28 16:06:44 +01:00
Tobias Geerinckx-Rice	ff5eae075a	Add freefall NixOS service module	2015-01-28 15:59:21 +01:00
Eelco Dolstra	b61d4ac6a5	ntpd: Fork into the background ... With -n, ntpd will write log messages to both syslog and stderr, which is ugly.	2015-01-28 15:34:42 +01:00
Thomas Strobel	3767370866	Add target parameter to grub installation chain	2015-01-27 19:46:37 +01:00
Eelco Dolstra	53710c752a	nixos-rebuild: Update fallback code to update Nix	2015-01-27 18:58:20 +01:00
Eelco Dolstra	6f8fad2253	Remove executable bits from non-executable files	2015-01-27 18:54:38 +01:00
Thomas Tuegel	63ec1a9677	add stable attrs for plasma5, kf5, and kdeApps	2015-01-26 21:01:07 -06:00
Thomas Tuegel	a55543711e	kde5: simplify package list	2015-01-26 21:01:06 -06:00
Thomas Tuegel	3a97ea592f	kdm: install default backgrounds	2015-01-26 21:01:06 -06:00
Thomas Tuegel	726b80bc87	startkde: don't split script between NixOS module and package	2015-01-26 21:01:06 -06:00
Thomas Tuegel	e7508b831f	kde5: warn if enabled with kde4	2015-01-26 21:01:05 -06:00
Thomas Tuegel	16b54d19d3	kde5: rename plasma5 desktop module	2015-01-26 21:01:05 -06:00
Thomas Tuegel	5c52354ee8	add NixOS module for Plasma desktop	2015-01-26 21:00:38 -06:00
Thomas Tuegel	849647a3eb	environment: set paths for Qt plugins and QML	2015-01-26 20:59:49 -06:00
Domen Kožar	9df1bdefef	Merge pull request #5982 from robberer/pkgs/openldap ... openldap: add dataDir, use cfg.user and cfg.group to run slapd	2015-01-26 10:33:57 +01:00
Domen Kožar	c1ce67561d	openldap: correct directory hint	2015-01-26 10:03:25 +01:00
Longrin Wischnewski	a4af32eec3	openldap: add dataDir, use cfg.user and cfg.group to run slapd	2015-01-26 09:35:56 +01:00
aszlig	d110f5adf7	nixos/gitlab: Fix evaluation. ... Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-01-26 08:20:14 +01:00
Jaka Hudoklin	6e7d708bcc	nixos/rabbitmq: fix module	2015-01-26 02:09:04 +01:00
Charles Strahan	6eaa419920	gitlab: fix evaluation	2015-01-25 16:28:18 -05:00
Domen Kožar	2daba83828	openldap: add example config	2015-01-25 21:15:29 +01:00
j-keck	611a21a919	nixos-container: add missing 'nixos-container update' in usage ... * in nixos-container.pl the mode 'update' is missing in the usage	2015-01-24 20:37:55 +01:00
Edward Tjörnhammar	6bbec634a7	Merge pull request #5850 from edwtjo/kodi-plugins ... XBMC to Kodi migrations	2015-01-24 14:17:14 +01:00
Domen Kožar	cb7cd012df	Merge pull request #5593 from abbradar/modprobe-fix ... modprobe: wrap all of kmod	2015-01-24 07:11:16 +01:00
Domen Kožar	fde45d217e	Merge pull request #5531 from abbradar/tlp ... tlp: add package	2015-01-24 07:10:48 +01:00
Nikolay Amiantov	b7b3a0972d	nixos/tlp: add service	2015-01-24 02:56:21 +03:00
Eelco Dolstra	11a0344e13	Merge pull request #5918 from robberer/openntpd ... openntpd: add extraConfig and extraOptions	2015-01-23 16:43:15 +01:00
Longrin Wischnewski	4fa5d1f626	openntpd: add extraConfig and extraOptions	2015-01-23 16:15:20 +01:00
aszlig	127c928c23	nixos/rename: Fix merging multiple destinations. ... The renaming of options define the original value for the new attribute path. This works well if there is only *one* target, but if there are more, we end up recursing into the attribute set of the option definition itself. We now check for that within the parent recursion node (we can't check that from the subnode, because we lack that information about whether it's defined multiple times) and if the subnode consist entirely of a list of definitions, we use mkMerge on it. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-01-22 14:08:28 +01:00
wmertens	8780caadd4	Merge pull request #5499 from wizeman/u/zfs-dont-fsck ... nixos: When generating /etc/fstab, ZFS and NFS filesystems shouldn't be checked	2015-01-22 12:09:22 +01:00
Charles Strahan	8d49e87dec	Merge pull request #4677 from cstrahan/pleasant-ruby ... Pleasant ruby	2015-01-21 23:27:38 -05:00
Matej Cotman	3ed3977166	owncloud: make .htaccess available	2015-01-21 22:49:22 +01:00
Matej Cotman	7494bd389e	apache-httpd: add owncloud	2015-01-21 22:49:22 +01:00
Matej Cotman	6630e3e4fe	apache-httpd: add restartSec option	2015-01-21 22:49:22 +01:00
Ricardo M. Correia	1b66077205	nixos: Don't do filesystem checks on ZFS or NFS filesystems	2015-01-21 17:39:53 +01:00
tv	3fdd925063	nixos: Add tlsdated service	2015-01-21 05:09:47 +01:00
Charles Strahan	dfc225d143	Merge branch 'master' of github.com:nixos/nixpkgs into pleasant-ruby ... Conflicts: pkgs/applications/version-management/git-and-tools/default.nix pkgs/applications/version-management/git-and-tools/hub/default.nix pkgs/tools/audio/mpdcron/default.nix	2015-01-20 20:21:03 -05:00
Ricardo M. Correia	a11dc2f0a3	grsecurity: Add denyUSB option to grsec NixOS module ... The option had been added to the grsec build-support code, but it hadn't been added to the grsec module. After this commit, grsec module users will be able to change the default value. It also serves to document that this option exists and that NixOS will disable it by default.	2015-01-20 19:18:06 +01:00
Joachim Fasting	7023e03d77	firewall service: fix pingLimit example value ... The example uses single dashes, whereas iptables requires double dashes.	2015-01-20 08:47:11 +01:00
Edward Tjörnhammar	5b1c9417a8	Add Kodi desktop-manager	2015-01-19 22:14:36 +01:00
Peter Simons	ec6b82a0c2	Merge branch 'master' into staging.	2015-01-19 18:41:17 +01:00
lethalman	d957d9e6bc	Merge pull request #5517 from paraseba/bumblebee ... Bumblebee config to enable multiple monitors	2015-01-19 15:00:11 +01:00
wmertens	d3383e4879	Merge pull request #4394 from wmertens/patch-6 ... setup-etc.pl: Fail when symlink/rename fails	2015-01-19 12:39:41 +01:00
lethalman	9cd9264ef3	Merge pull request #5849 from robberer/systemd/restartassert ... systemd: extend checkUnitConfig with on-abnormal	2015-01-19 11:48:48 +01:00
Longrin Wischnewski	4b0100774a	systemd: extend checkUnitConfig with on-abnormal	2015-01-19 11:41:18 +01:00
Andrey Arapov	04be7262a6	nixos/dovecot: added configFile option and default Restart on-failure, PR #5845 ... Absolute path is required when one has such postfix configuration where he/she needs to specify the actual (real) path to active dovecot config. Without this commit applied, the dovecot is running in such way: /nix/store/hashAAA-dovecot-ver/sbin/dovecot -F -c /nix/store/hashBBB-dovecot2.conf and postfix can't be aware of the value of "hashBBB" via services.postfix.extraConfig = '' ... ''; (it can only be aware of "hashAAA" with ${pkgs.dovecot} parameter) Also enable Restart on-failure. Edit: set RestartSec to 1s	2015-01-19 11:05:56 +01:00
Andrey Arapov	b1b9efdbe1	nginx service improvements ... Adding Restart, RestartSec, StartLimitInterval to ensure that the service is started in case if it can't assign (bind) the address as often it takes longer for the network (e.g. dhcpcd) to get the IP assigned.	2015-01-19 10:46:45 +01:00
William A. Kennington III	130f66b683	nixos/sync-server: Respect the enable option	2015-01-18 14:21:40 -08:00
Domen Kožar	3b174a4024	Merge pull request #5301 from nbp/syncserver ... Add Firefox Sync service	2015-01-18 17:47:51 +01:00
Nicolas B. Pierron	8196727fad	Improve the documentation of the syncserver module.	2015-01-18 12:21:23 +01:00
Nicolas B. Pierron	0d13ea0131	Change default syncserver listen.port to a safer one.	2015-01-18 12:20:44 +01:00
Domen Kožar	b92a62165d	Merge pull request #5726 from spwhitt/zsh-command-not-found ... command-not-found: Add ZSH Support	2015-01-17 18:15:35 +01:00
Damien Cassou	a7024cb4b4	Create a nixos module for cups-browsed	2015-01-16 14:10:57 +01:00
Eelco Dolstra	efa8fc2b0a	Paranoia	2015-01-15 18:37:55 +01:00
Eelco Dolstra	b9c4569b6b	nixos-install: Create /root with 700 permission	2015-01-15 18:37:55 +01:00
Eelco Dolstra	3ca275d7ba	NixOS containers: Create /root with 700 permission ... Systemd-nspawn creates /root with 755 permission if it doesn't exist, which is bad. So we have to create it ourselves before calling systemd-nspawn.	2015-01-15 17:51:43 +01:00
Eelco Dolstra	24ce7ff3ea	test-instrumentation.nix: Prevent calling a pager	2015-01-15 14:39:29 +01:00
Eric Seidel	88eae46455	rename occurrences of gcc.gcc to gcc.cc	2015-01-14 20:47:49 -08:00
Edward Tjörnhammar	837cfbb9ea	nixos: adding nylon service with uid,gid	2015-01-14 22:08:47 +01:00
William A. Kennington III	8e5ef7da54	nixos/network-interfaces: Fix rstp support	2015-01-14 10:34:28 -08:00
Luca Bruno	804a958663	pam: add pam_wheel	2015-01-14 18:32:08 +01:00
Luca Bruno	2beb43174f	nixos-rebuild: use reload-or-restart for dbus. Closes #5767 ... Now that dbus reload has been moved before restarting units, the reload may fail if dbus has been stopped before. The reload-or-restart will reload dbus if it's active, otherwise start it.	2015-01-14 16:08:47 +01:00
Rob Vermaas	df7923fa82	Merge pull request #5515 from oconnorr/master ... GCE updates to ntp server and to fetch all ssh keys	2015-01-14 13:19:38 +01:00
Matej Cotman	4e6efec4b4	enlightenment: fix media preview	2015-01-13 14:56:35 +01:00
Ryan Mulligan	2e3fa5b849	different wording for adminPubkey description ... Maybe this wording is a slight improvement?	2015-01-12 21:49:33 -08:00
Matthias Beyer	f64d795950	Add note that administrative public key for gitolite has to be written in one line	2015-01-12 23:10:27 +01:00
mokasin	dd6dfde575	Add auto-start option to containers.	2015-01-12 18:26:22 +01:00
Spencer Whitt	6cba6dc61b	command-not-found: Add ZSH Support	2015-01-12 03:45:48 -05:00
Vladimír Čunát	72d2d59cd4	/etc/ssh/ssh_known_hosts: refactor and fix #5612 ... Generating the file was refactored to be completely in nix. Functionally it should create the same content as before, only adding the newlines. CC recent updaters: @aszlig, @rickynils.	2015-01-11 22:14:25 +01:00
Peter Simons	43bae26b33	Merge pull request #5627 from oxij/update-postfix ... postfix: make 2.11 the default, nixos: update postfix config for 2.11	2015-01-11 11:28:31 +01:00
Arseniy Seroka	4f596fb93f	Revert "zsh: profile-relative functions path" ... This reverts commit 766207ca1d. We need to solve the problem with `environment.profileRelativeEnvVars`. The best workaround is to make profileRelativeEnvVars prepend paths.	2015-01-10 22:11:13 +03:00
Joachim Fasting	97bac259d0	dnscrypt-proxy service: update AppArmor profile ... This patch fixes the AppArmor profile path clause and adds (currently ignored) network rules. The AppArmor profile used to be defined for the path sbin/dnscrypt-proxy, but the real path is bin/dnscrypt-proxy (due to sbin now being a symlink to bin), which permitted the service to run unconfined. Adding the network rules has no effect other than improving correctness, as the version of AppArmor in the NixOS kernel fails to enforce network rules.	2015-01-09 15:08:07 +01:00
Shea Levy	cca8bae86e	Merge branch 'rngd-fix' of git://github.com/abbradar/nixpkgs	2015-01-08 09:36:29 -05:00
Matthias Beyer	5e6068d913	Put shell aliases in interactiveShellInit	2015-01-08 15:18:26 +01:00
Matthias Beyer	c5e855e060	Add basic nixos module for fish shell	2015-01-08 15:18:26 +01:00
lethalman	908c47b281	Merge pull request #5550 from abbradar/fprintd ... add fprintd support	2015-01-08 14:58:22 +01:00
William A. Kennington III	dd7efcbf36	java: More default cleanups	2015-01-07 14:55:41 -08:00
William A. Kennington III	c82410eeda	java: Normalize to the default jre / jdk	2015-01-07 14:55:41 -08:00
William A. Kennington III	9a7766e054	nixos/network-interfaces: Add mstpd support for bridges	2015-01-07 14:49:24 -08:00
Peter Simons	24f5b2a1a0	Merge pull request #5619 from oxij/various-changes-2 ... Various (hopefully) small changes	2015-01-07 16:59:10 +01:00
Jan Malakhovski	265c1c1472	postfix: make 2.11 the default, nixos: update postfix config for 2.11 ... postfix 2.11 is much more humane with respect to disk writes since it uses sockets (which do not change inodes on accesses) instead of fifos (which do).	2015-01-07 15:43:32 +00:00
Jan Malakhovski	b6646f7ba7	nixos: make zsh use fcntl for locking history files by default ... Without this zsh creates and then unlinks .lock files at each interactive input line, which is inhumane with respect to disk.	2015-01-07 15:43:01 +00:00
j-keck	3ced0d94ac	doc: use postgresql94 ... update postgresql module doc to use postgresql94 (was postgresql93)	2015-01-07 13:21:18 +01:00
William A. Kennington III	20d2092ff8	nixos/base: Add efi management utilities	2015-01-07 01:52:47 -08:00
Russell O'Connor	d1a58ef7c6	google-compute-image.nix: Try to download all SSH host keys from metadata server.	2015-01-06 12:06:54 -05:00
Nikolay Amiantov	dbc0395b2b	nixos/rngd: some fixes	2015-01-06 17:27:07 +03:00
Nikolay Amiantov	2aaeacc579	nixos/modprobe: wrap all of kmod	2015-01-06 16:39:00 +03:00
Russell O'Connor	3251948029	Generate SSH host public key from the private key.	2015-01-05 15:20:55 -05:00
Russell O'Connor	d1cbbff1e3	Call wget directly in fetch-ssh-keys service.	2015-01-05 15:20:55 -05:00
Russell O'Connor	6382e16014	google-compute-image.nix: unconditionally clean up /root/key.pub /root/authorized-keys-metadata	2015-01-05 15:18:02 -05:00
Russell O'Connor	b19ab1f046	google-comute-image.nix: set umask 077 when downloading private keys from the metadata server.	2015-01-05 15:01:49 -05:00
Russell O'Connor	e548a4330d	google-compute-image.nix: use internal google NTP server.	2015-01-05 12:45:23 -05:00
Peter Simons	ea94a6d653	nixos/modules/services/misc/nix-daemon.nix: document meaning of '0' for the buildCores attribute	2015-01-05 15:38:08 +01:00
Rob Vermaas	c5caa853ec	dd-agent: set SSL_CERT_FILE for dogstatsd. ... (cherry picked from commit c67204dec27a86e2235afb2aebf48bc53dd804d0)	2015-01-05 13:15:22 +01:00
Eelco Dolstra	ae7d79cd61	Fix some bad gids ... Issue #3727.	2015-01-05 11:58:17 +01:00
Rob Vermaas	ea9530b5c7	Fix GCE image build. ... (cherry picked from commit 98af87cd4abb0cd77e8a51cfdf6913a92d088784)	2015-01-05 09:35:35 +01:00
William A. Kennington III	8ec82fcb18	nixos/samba: Allow package version setting	2015-01-03 21:45:16 -08:00
Kirill Elagin	766207ca1d	zsh: profile-relative functions path ... This is needed mostly for autocompletion.	2015-01-04 02:02:59 +03:00
Nikolay Amiantov	a164a0b4c5	nixos/fprintd: add service and pam support	2015-01-03 19:50:40 +03:00
Domen Kožar	3d7ff07258	fix manual	2015-01-03 16:32:07 +01:00
Domen Kožar	1f523bb23d	clarify things about hashed passwords and mutableUsers	2015-01-02 17:32:56 +01:00
William A. Kennington III	8627110091	icedtea: Make major version nonspecific attrs	2015-01-02 00:24:49 -08:00
Nicolas B. Pierron	816229593a	Merge pull request #5441 from nbp/mkAlias ... modules: Extract mkAliasDefinition from the rename.nix NixOS module.	2015-01-01 06:59:42 -08:00
Sebastián Bernardo Galkin	24abe2b2b3	Bumblebee config to enable multiple monitors ... Added configurations to `bumblebee` package to easy multiple monitors on Optimus machines. The behaviour of the default `bumblebee` package hasn't change, so this change is backwards compatible. Users who want to connect a monitor to their discrete card should use the package `bumblebee_display` instead. Also added new configuration option to nixos bumblebee module: ``` hardware.bumblebee.connectDisplay = true ``` will enable the new configuration, but the default is still false.	2014-12-30 19:17:42 -08:00
Charles Strahan	94dd4b9721	ruby: WIP	2014-12-30 21:05:00 -05:00
Eelco Dolstra	e62cb5585d	Merge pull request #5507 from DamienCassou/systemd-user-timers ... Add systemd.user.timers	2014-12-30 15:40:43 +01:00
Damien Cassou	dcc93abe74	Add systemd.user.timers	2014-12-30 05:46:36 +01:00
Tobias Geerinckx-Rice	c64257b8e5	Fix user-facing typos (mainly in descriptions)	2014-12-30 03:31:03 +01:00
Jaka Hudoklin	1b19b7a3bf	Merge pull request #5491 from offlinehacker/cadvisor ... Add cadvisor package and nixos module	2014-12-29 17:58:43 +01:00
Shea Levy	9245516b46	gummiboot-builder.py: run nix with no build-users-group ... During install, the bootloader script gets run inside a chroot after the /etc/group bind-mount is unmounted. Since we're not doing any building, this should be safe, but really nix should just not care if the group does not exist when no build is needed. Fixes #5494	2014-12-29 07:09:10 -05:00
Ricardo M. Correia	1d44322d53	grsecurity: Update stable and test patches ... stable: 3.0-3.14.27-201412211908 -> 3.0-3.14.27-201412280859 test: 3.0-3.17.7-201412211910 -> 3.0-3.18.1-201412281149	2014-12-29 03:00:47 +01:00
Matej Cotman	9eb24c72ff	systemd: fix permissions on /var/log/journal	2014-12-28 22:37:50 +01:00
Charles Strahan	145733c479	Merge branch 'master' of github.com:nixos/nixpkgs into pleasant-ruby ... Conflicts: pkgs/applications/version-management/redmine/default.nix pkgs/development/interpreters/ruby/gem.nix pkgs/development/interpreters/ruby/generated.nix pkgs/development/interpreters/ruby/patches.nix pkgs/development/tools/vagrant/default.nix pkgs/servers/consul/default.nix	2014-12-28 14:29:52 -05:00
Domen Kožar	43af22b2de	Merge pull request #5487 from luke-clifton/lc-btsync-group ... btsync groups	2014-12-28 20:25:13 +01:00
Charles Strahan	4ed847d81d	redmine: fix use of bundler	2014-12-28 14:22:11 -05:00
Jaka Hudoklin	b6198f08e3	nixos: add cadvisor service	2014-12-28 20:21:41 +01:00
Eelco Dolstra	ea9d391bb5	Fix ntpd ... Since the 4.2.8 upgrade, ntpd is broken on NixOS: Dec 28 19:06:54 hagbard ntpd[27723]: giving up resolving host 1.nixos.pool.ntp.org: Servname not supported for ai_socktype (-8) This appears to be because DNS resolution doesn't work in chroots anymore (due to /etc being missing). So disable chroots for now. It's probably better to use systemd's containment facilities anyway.	2014-12-28 19:38:45 +01:00
Alexander Kjeldaas	da1f8578b0	Eradicate gzip -9 without -n	2014-12-28 13:45:27 +01:00
Luke Clifton	3c8914f94e	Changed group id to match user id	2014-12-28 19:47:12 +08:00
Luke Clifton	b625c3dd4b	Added group id to ids.nix	2014-12-28 18:10:02 +08:00
Vladimír Čunát	61d9f06760	fix a typo from 2627198b0c	2014-12-28 10:44:50 +01:00
Luke Clifton	0c477eb38f	Documentation update	2014-12-28 17:26:59 +08:00
Luke Clifton	61ff1b2b0a	Moved UMask to correct location	2014-12-28 16:44:27 +08:00
Luke Clifton	5fdd6f6a66	Change umask	2014-12-28 16:39:56 +08:00
William A. Kennington III	2627198b0c	nixos/firewall: Add ipset utility	2014-12-28 00:04:49 -08:00
Luke Clifton	5866a9df03	added group	2014-12-28 13:23:10 +08:00
Luke Clifton	fabcc2cf7b	Added btsync group to btsync user	2014-12-28 13:17:37 +08:00
Vladimír Čunát	3c050d00a5	upower: use newer version by default ... Tested on KDE4, fixed with xfce, and was used with GNOME before. CC @lethalman. I did not test e19, as it won't build, probably due to #5392 @shlevy. CC maintainer @matejc. Also removed a forgotten unused patch.	2014-12-27 22:46:46 +01:00
Eduard Bachmakov	86cd055477	Add option to display git revision to nixos-version ... Example use case: git checkout `nixos-version --hash`	2014-12-27 21:43:04 +01:00
Domen Kožar	ec5fcfa82c	network-manager: specify full path to sytemctl binary ... (cherry picked from commit af8f76c2568ae9d842716d98673b3639292a920e) Signed-off-by: Domen Kožar <domen@dev.si>	2014-12-27 11:53:07 +01:00
Bjørn Forsman	0a8623d6a9	nixos/munin: add /var/setuid-wrappers to PATH ... /var/setuid-wrappers is an extension of the system profile, so it belongs in PATH for the munin service.	2014-12-25 15:43:51 +01:00
aszlig	c7e3ddf7ff	nixos/synergy: Fix use of the "optional" function. ... Commit 939edb1 reintroduced autoStart, but instead of creating a list of units for the wantedBy list with optional it became a list of lists of units. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-24 12:35:57 +01:00
Domen Kožar	a4961f09f6	Merge pull request #5390 from abbradar/nixos-isntall ... nixos-install: fix -I flag	2014-12-23 18:15:14 +01:00
Nicolas B. Pierron	d7f29acd48	modules: Extract mkAliasDefinition from the rename.nix NixOS module.	2014-12-22 22:38:38 +01:00
Igor Pashev	2b91b9b594	Strongswan: updown script uses ip and iptables utilities	2014-12-22 20:20:52 +00:00
Luca Bruno	79209e30b5	nixos: Add -verbose to xserverArgs example	2014-12-22 21:01:12 +01:00
lethalman	50789593df	Merge pull request #5346 from svenkeidel/disable-xserver-verbose-logging ... disable verbose logging for XServer, fixes #4333	2014-12-22 20:59:06 +01:00
Benno Fünfstück	914b76bad4	services.mpd: use systemd's user option ... For some reason, mpd fails to open the sound card if using mpd's user option. Starting mpd directly as the mpd user works for me.	2014-12-22 11:22:14 +00:00
lethalman	d0fdad5f36	Merge pull request #5419 from ehmry/tox-bootstrapd ... tox-bootstrapd	2014-12-22 11:16:44 +01:00
Nicolas B. Pierron	6a7971bee7	Merge pull request #5416 from nbp/nixos-option-include ... nixos-option: Support -I option	2014-12-21 15:11:11 -08:00
Nicolas B. Pierron	974edc5056	nixos-option: Use <nixpkgs/nixos> instead of <nixpkgs>.	2014-12-21 01:33:06 +01:00
Emery Hemingway	01910e84f9	nixos: tox-bootstrapd service	2014-12-20 18:20:27 -05:00
Nicolas B. Pierron	82a5f54c0d	nixos-option: Support -I option.	2014-12-20 20:30:19 +01:00
Nicolas B. Pierron	c9682a22ff	nixos-option: Produce nicer error messages in case of typos.	2014-12-20 19:52:28 +01:00
Nicolas B. Pierron	640428d3c5	nixos-option: Handle 'attrsOf submodule' options.	2014-12-20 19:16:43 +01:00
Nicolas B. Pierron	cd2f7ce9f9	nixos-option: Improve error messages to avoid reporting internal location and traces.	2014-12-19 23:00:52 +01:00
Nicolas B. Pierron	b2abfe54b3	nixos-option: Print derivation outPath within attribute sets and list, when the strict mode is used.	2014-12-19 23:00:00 +01:00
Nicolas B. Pierron	9db6a84f0b	nixos-option: Print the outPath of derivation for option values.	2014-12-19 22:33:24 +01:00
Eelco Dolstra	80a85541d5	Typo	2014-12-19 14:38:33 +01:00
Eelco Dolstra	5ad3a02938	Shut up a warning from udev ... Issue #5260.	2014-12-19 14:37:50 +01:00
Mathijs Kwik	6e728a42ec	virtualisation.qemuNetworkingOptions -> virtualisation.qemu.networkingOptions	2014-12-19 11:59:00 +01:00
Mathijs Kwik	6cdacdd4a2	nixos/qemu-vm: make networking options configurable	2014-12-19 08:52:06 +01:00
wmertens	a8c726da56	Merge pull request #5378 from benley/mesos ... mesos-slave: add config option for slave attributes	2014-12-19 08:10:07 +01:00
Evgeny Egorochkin	87610ca0fd	kde4: enable akonadi by default	2014-12-19 08:59:22 +02:00
Evgeny Egorochkin	939edb1873	synergy: restore autostart option. ... closes #5334	2014-12-19 08:25:23 +02:00
Evgeny Egorochkin	9225af50d0	resurrect torsocks-faster	2014-12-19 08:05:41 +02:00
Evgeny Egorochkin	eb0874d5ff	rename torify to tsocks, to avoid name clashes and make it clear which wrapper library is used	2014-12-19 08:05:41 +02:00
Evgeny Egorochkin	633cc58d5c	torsocks: enable by default if tor client functionality is enabled	2014-12-19 08:05:41 +02:00
Evgeny Egorochkin	824b3b1a99	tor: restore the Privoxy setup, but configure the system Privoxy instead of running a separate instance.	2014-12-19 08:05:41 +02:00
Evgeny Egorochkin	1fe5314dc5	tor: restore strong circuit isolation	2014-12-19 08:05:41 +02:00
Evgeny Egorochkin	da118cf60b	Revert "nixos: Remove torify module" ... tsocks is still useful because it's less strict This reverts commit 1b26faeb69.	2014-12-19 08:05:41 +02:00
Benjamin Staffin	c47cefd05e	nixos/mesos: Parameterize mesos slave attributes ... Added attributes to nixos/tests/mesos.nix to verify that mesos-slave attributes work. If the generated attributes are invalid, the daemon should fail to start. Change-Id: I5511245add30aba658b1af22cd7355b0bbf5d15c	2014-12-18 14:47:24 -08:00
wmertens	5f7530a1d7	zfs hostId: Instructions to derive from machine-id	2014-12-18 22:52:29 +01:00
Nikolay Amiantov	22eb0e22d3	nixos-install: fix -I flag	2014-12-18 22:43:40 +03:00
aszlig	f7384b8c75	nixos/virtualbox: Revert disable hardening. ... This reverts commit 5d67b17901. The issues have been resolved by ac603e208c. Tested this with hostonlyifs and USB support with extension pack. Conflicts: nixos/modules/programs/virtualbox-host.nix Signed-off-by: aszlig <aszlig@redmoonstudios.org> Tested-by: Mateusz Kowalczyk <fuuzetsu@fuuzetsu.co.uk>	2014-12-18 18:18:32 +01:00
Eelco Dolstra	63c14e259d	ssh-agent: Don't have a timeout by default ... IMHO, having a short timeout (1h) defeats the point of using ssh-agent, which is not to have to retype passphrases all the time. Of course, users who want timeouts can set programs.ssh.agentTimeout. This restores the 14.04 behaviour.	2014-12-18 15:34:29 +01:00
aszlig	ac603e208c	virtualbox: Fix runtime paths in hardening mode. ... Because we have to rely on setuid wrappers on NixOS, we can't easily hardcode the executable paths and set it 4755. So for all calls, we need to change the runtime path executable directory to /var/setuid-wrappers/ and for verification we need to retain the executable directory. Also note, that usually VBoxNetAdpCtl, VBoxNetDHCP, VBoxNetNAT, VBoxSDL and VBoxVolInfo don't reside in directories that are commonly in PATH, but in /usr/lib/virtualbox in most mainstream distros. But because the names of these executables are distinctive enough to not cause collisions with other setuid programs, I'll leave it like that and not patch up setuid-wrappers. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-18 14:06:13 +01:00
Domen Kožar	432490e319	fix users.mutableUsers = false; install in iso ... (cherry picked from commit 9bc8bcbbdcc7cac98686877f09315bb749627732) Signed-off-by: Domen Kožar <domen@dev.si>	2014-12-18 12:18:49 +01:00
Eelco Dolstra	89697b0fc1	Improve /etc/sudoers message	2014-12-18 11:51:42 +01:00
William A. Kennington III	1036c66d43	nixos/network-interfaces: Add ipv6 gateway support	2014-12-17 17:56:29 -08:00
Eelco Dolstra	c812e45292	switch-to-configuration: Ignore slice units	2014-12-18 01:47:36 +01:00
Eelco Dolstra	bde9ae18cf	Revert "enable bash autocomplete by default" ... This reverts commit ee8e15fe76. See discussion at ee8e15fe76.	2014-12-18 00:36:46 +01:00
Eelco Dolstra	d34c600414	Remove udev from /run/opengl-drivers ... /run/opengl-drivers should contain only libGL-related libraries, not stuff like udev. Injecting anything into LD_LIBRARY_PATH is dangerous because it can break applications that expect a different version of the library. Caused by eef9a8ac2a. Fixes #5371.	2014-12-17 17:00:10 +01:00
Rob Vermaas	b8a4095003	It is called Dingo! yes, Dingo!	2014-12-17 16:42:52 +01:00
Luca Bruno	614162ee6c	Some lua and awesome improvements ... - Move lgi to luaPackages - Use luaPackages in awesome and passthru lua - Allow to pass lua modules to the awesome WM so that those can be used in the configuration	2014-12-17 15:08:21 +01:00
wmertens	0d5bd2a0f3	Merge pull request #5254 from ehmry/network-filesystems ... nixos: configure samba and rsync shares with sets	2014-12-17 07:07:28 +01:00
wmertens	2fb69f5277	Merge pull request #5196 from madjar/cloud-init ... cloud-init: add expression and service	2014-12-17 06:58:54 +01:00
William A. Kennington III	681ae2fa7f	nixos/consul: Don't timeout if start job has many retries	2014-12-16 15:42:08 -08:00
Eelco Dolstra	be0e73b938	cups: Build with SERVERROOT set to /etc/cups	2014-12-16 18:23:41 +01:00
Eelco Dolstra	dc6c8b9714	cupsd.nix: Clean up environment.etc	2014-12-16 18:23:41 +01:00
tv@shackspace.de	b71f3c4315	nixos/cupsd: use cups-files.conf	2014-12-16 18:23:40 +01:00
aszlig	e36bec661c	nixos/virtualbox: Fix warning on enableHardening. ... The warning was displayed whenever services.virtualboxHost.enable was true, but if people were to enable hardening, they'd still get that annoying message. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-16 11:24:55 +01:00
aszlig	d85fabd68c	nixos/virtualbox/hostonlyif: Fix writing to /root. ... Creates unnecessary cruft in the root users home directory, which we really don't need. Except the log, but therefore we now cat the log to stderr and the private temporary directory is cleaned up afterwards. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-15 19:16:43 +01:00
Sven Keidel	7199db8aab	disable verbose logging for XServer, fixes #4333 ... The current options for the XServer produce a huge amount of log messages. The server produces around 70-80 messages per minute. The most messages look like this: display-manager-start[1846]: GetModeLine - scrn: 0 clock: 75200 display-manager-start[1846]: GetModeLine - hdsp: 1366 hbeg: 1414 hend: 1478 httl: 1582 display-manager-start[1846]: vdsp: 768 vbeg: 772 vend: 779 vttl: 792 flags: 9 Since theses messages aren't very useful, I propose to remove the `-logverbose` and `-verbose` options from the XServer arguments.	2014-12-15 18:59:49 +01:00
aszlig	5d67b17901	nixos/virtualbox: Disable hardening for now. ... This should display a big fat warning that people can hardly miss until we have fixed the issues with the host-only-interfaces that persist when hardining is enabled. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-15 18:53:41 +01:00
aszlig	245baeb2f6	nixos/virtualbox: Note about "vboxusers" group. ... Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-15 17:52:19 +01:00
aszlig	e03e0ff42a	nixos/virtualbox: Allow to disable hardening. ... Hardening mode in VirtualBox is quite restrictive and on some systems it could make sense to disable hardening mode, especially while we still have issues with hostonly networking and other issues[TM] we don't know or haven't tested yet. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-15 17:52:18 +01:00
Eelco Dolstra	bed675f400	nixos-generate-config: Don't emit networking.hostId ... Systemd already generates /etc/machine-id. So there is no need to generate another unique host identifer.	2014-12-15 17:03:28 +01:00
Eelco Dolstra	0d3a229baa	nixos-generate-config: Add time zone	2014-12-15 16:55:03 +01:00
Peter Simons	0f2b026bfe	nixos/modules/system/boot/luksroot.nix: hyperlinkify an URL in the documentation	2014-12-15 16:31:18 +01:00
Peter Simons	137ffc9929	Switch default timezone in NixOS from "CET" to "UTC". ... Suggested in https://github.com/NixOS/nixpkgs/pull/5332.	2014-12-15 16:31:18 +01:00
Eelco Dolstra	88412c865d	Fix ANSI escape in warning messages ... Seems to have been broken by accident in 7d1ddae58e.	2014-12-15 16:19:35 +01:00
Thomas Tuegel	32e41c2280	nixos: fix config.fonts.fontconfig.ultimate.allowBitmaps ... The option was incorrectly negated, so that 'allowBitmaps = true' actually disabled bitmap fonts.	2014-12-15 09:16:40 -06:00
Rob Vermaas	b48e41b8d7	cron: make into systemd.service and make it depend on /etc/localtime ... so that changes in timezone will trigger a restart of cron service.	2014-12-15 14:50:12 +01:00
Eelco Dolstra	cfe26e4438	Fix using Apache httpd 2.2	2014-12-15 13:13:17 +01:00
wmertens	d3d38c38c5	Merge pull request #5326 from prikhi/refactor-psd-config ... profile-sync-daemon: refactor nixos module	2014-12-14 19:38:31 +01:00
Nicolas B. Pierron	42c3c205c4	Merge remote-tracking branch 'origin/master' into syncserver	2014-12-14 14:17:56 +01:00
Sebastián Bernardo Galkin	aba0d8a73d	Fix networkmanager resumeCommands ... Small typo prevented the post resume script to restart network manager	2014-12-14 03:46:54 -08:00
Domen Kožar	48a282b913	http://nixos.org -> https://nixos.org ... (cherry picked from commit 78bb17dd22e4da4e3810fbc78185d73bb25ea73e) Signed-off-by: Domen Kožar <domen@dev.si>	2014-12-14 11:26:45 +01:00
Domen Kožar	ba5fad6dfa	Merge pull request #5323 from offlinehacker/gitlab_i686_fix ... gitlab: fix i686-linux build and module	2014-12-14 09:48:44 +01:00
Pavan Rikhi	25da0e2518	profile-sync-daemon: refactor module	2014-12-14 00:45:08 -05:00
Jaka Hudoklin	90683792aa	gitlab: fix i686-linux build and module ... It turns out that installing therubytracer, with dependency on old v8, even when using source libv8 version is problematic. (see http://stackoverflow.com/questions/21666379/problems-installing-gitlab-on-odroid-v8-lib-not-available). But wait, rails does not even need therubytracer, just any kind of javascript server side execution framework like nodejs. Well just use that, as also suggested from different internet sources (look link above), it works just fine.	2014-12-14 02:24:12 +01:00
Pavan Rikhi	0df1c05f71	Add the Profile Sync Daemon Package & NixOS Module	2014-12-13 09:24:12 -05:00
aszlig	0d71ec8a6e	nixos/virtualbox: Fix setuid wrappers. ... We only need to have setuid-root wrappers for VBox{Headless,SDL} and VirtualBox, otherwise VBoxManage will run as root and NOT drop privileges! Fixes #5283. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-13 07:52:19 +01:00
Nicolas B. Pierron	1a1fc17957	Firefox Sync Server: Create the private config file as non-world readable.	2014-12-12 22:14:38 +01:00
Nicolas B. Pierron	a0154145d5	Firefox Sync Server: Fix copy&paste issue.	2014-12-12 22:13:03 +01:00
Jaka Hudoklin	d8ee91cb54	nixos: container profile, fix a few things	2014-12-12 20:28:01 +01:00
Jaka Hudoklin	13e58784bf	nixos/gitlab: fixes ... - fix timezone data not found - fix module, add simple test - allow to set port	2014-12-12 18:01:31 +01:00
Thomas Hunger	59995e168c	nixos: Add gitlab and gitlab-shell ... I had to make several adjustments to make it work with nixos: * Replace relative config file lookups with ENV variable. * Modify gitlab-shell to not clear then environment when running pre-receive. * Modify gitlab-shell to write some environment variables into the .authorized_keys file to make sure gitlab-shell reads the correct config file. * Log unicorn output to syslog. I tried various ways of adding a syslog package but the bundler would not pick them up. Please fix in a better way if possible. * Gitlab-runner program wrapper. This is useful to run e.g. backups etc. with the correct environment set up.	2014-12-12 18:01:29 +01:00
Vladimír Čunát	3bcd3ed017	nixos: check resumeDevice is absolute path and document ... Fixes #5219 after merging #4995. (cherry picked from commit 0681d61c3730c686548df3af9a7dc1a59abaf371) Signed-off-by: Domen Kožar <domen@dev.si>	2014-12-12 11:11:57 +01:00
Eelco Dolstra	8bb494c170	Get rid of a warning about dbus in the activation script	2014-12-12 10:45:37 +01:00
aszlig	cf7f15c92c	nixos-install: Pass CA cert bundle to chroot. ... Since we're using HTTPS for the binary cache (introduced in faf0797) by default, the binary cache should also be available during installation. The file that is defined in SSL_CERT_FILE outside of the chroot is copied over to /tmp/ca-cert.crt inside the chroot, so we have an absolute path we can reference during nixos-install. However, this might end up with the file not being cleaned up properly from outside of the store, but neither would be /tmp/root so the cleanup issue needs to be solved in another place (or commit to be more exact). Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-12 03:03:14 +01:00
Jaka Hudoklin	f2e20fa837	nixos: container profile, update /init symlink on rebuild	2014-12-12 02:55:23 +01:00
ambrop7@gmail.com	65393ca8d3	virtualbox: Unbreak the nixos module.	2014-12-12 00:16:33 +01:00
Jaka Hudoklin	e1383d0833	Merge pull request #5300 from ambrop72/virtualbox-network-interface ... virtualbox: Allow disabling the network interface.	2014-12-11 23:51:52 +01:00
Nicolas B. Pierron	0570a08b83	Merge remote-tracking branch 'origin/master' into syncserver	2014-12-11 23:49:19 +01:00
Nicolas B. Pierron	01886aef22	Add Firefox Sync server module.	2014-12-11 23:48:15 +01:00
lethalman	786a0c92c6	Merge pull request #5299 from bjornfor/gnome-enable-mtp-support ... nixos/gnome: enable MTP support in gvfs	2014-12-11 23:41:05 +01:00
ambrop7@gmail.com	9fa2c35ec8	virtualbox: Allow disabling the network interface. ... The current nixos module for VirtualBox unconditionally configures a vboxnet0 network interface at boot. This may be undesired, especially when the user wants to manage network interfaces in a centralized manner.	2014-12-11 23:35:03 +01:00
Jaka Hudoklin	4be1089781	nixos: move kubernetes & fleet to services/cluster	2014-12-11 23:32:37 +01:00
Jaka Hudoklin	5dac2ec412	Merge pull request #5297 from fmapfmapfmap/tor-extra-config ... Tor module: append redundant specifications of 'extraConfig', via 'types.lines'.	2014-12-11 23:22:52 +01:00
Jaka Hudoklin	deb28cf0b1	nixos: container tarball release ... - Create container nixos profile - Create lxc-container nixos config using container nixos profile - Docker nixos image, use nixos profile for its base config	2014-12-11 23:17:27 +01:00
Bjørn Forsman	f3a46c3858	nixos/gnome: enable MTP support in gvfs ... To support browsing files on Android phones in Nautilus (and other GVFS based file browsers).	2014-12-11 23:13:39 +01:00
vi	c005dc0e6b	Tor module: append redundant specifications of 'extraConfig', via 'types.lines'.	2014-12-11 14:23:48 +00:00
Shea Levy	10751129d0	Don't require forcing utils to get to lib	2014-12-10 19:28:45 -05:00
Domen Kožar	0ec12d53e6	tcpcrypt: 2011.07.22 -> 0.3rc1, fix nixos service	2014-12-10 10:23:46 +01:00
Austin Seipp	42e4e64577	Merge pull request #5276 from abbradar/nginx-types ... nixos/nginx: add more types	2014-12-09 19:48:04 -06:00
Nikolay Amiantov	d0773dae54	nixos/nginx: add more types	2014-12-10 04:45:10 +03:00
Eelco Dolstra	faf0797c0c	Use https://cache.nixos.org	2014-12-09 13:38:46 +01:00
William A. Kennington III	c17eb7f0e6	nixos/consul: Make service definition more sane	2014-12-09 02:24:36 -08:00
Thomas Tuegel	9707ffd973	nixos: let fontconfig default fonts be lists of fonts	2014-12-08 10:55:24 -06:00
Thomas Tuegel	57ba2093bf	Replace Bitstream Vera fonts by DejaVu in defaults ... The default configuration installed the Bitstream Vera fonts, but DejaVu is a superior replacement, and the default Fontconfig settings need it now for the generic faces monospace, sans-serif, and serif.	2014-12-08 10:55:24 -06:00
Thomas Tuegel	c00c563c66	Add NixOS module for fontconfig-ultimate ... Details: * The option `fonts.fontconfig.ultimate.enable` can be used to disable the fontconfig-ultimate configuration. * The user-configurable options provided by fontconfig-ultimate are exposed in the NixOS module: `allowBitmaps` (default: true), `allowType1` (default: false), `useEmbeddedBitmaps` (default: false), `forceAutohint` (default: false), `renderMonoTTFAsBitmap` (default: false). * Upstream provides three substitution modes for substituting TrueType fonts for Type 1 fonts (which do not render well). The default, "free", substitutes free fonts for Type 1 fonts. The option "ms" substitutions Microsoft fonts for Type 1 fonts. The option "combi" uses a combination of Microsoft and free fonts. Substitutions can also be disabled. * All 21 of the Infinality rendering modes supported by fontconfig-ultimate or by the original Infinality distribution can be selected through `fonts.fontconfig.ultimate.rendering`. The default is the medium style provided by fontconfig-ultimate. Any of the modes may be customized, or Infinality rendering can be disabled entirely.	2014-12-08 10:55:24 -06:00
Thomas Tuegel	8991ff7ceb	Load default Fontconfig settings into Xresources for Xft	2014-12-08 10:55:24 -06:00
Thomas Tuegel	1df1305a8a	Rewrite Fontconfig NixOS module ... Details: * The option `fonts.enableFontConfig` has (finally) been renamed `fonts.fontconfig.enable`. * Configurations are loaded in this order: first the Fontconfig-upstream configuration is loaded, then the NixOS-specific font directories are set, the system-wide default configuration is loaded, and finally the user configuration is loaded (if enabled). * The NixOS options `fonts.fontconfig.defaultFonts.monospace`, `fonts.fontconfig.defaultFonts.sansSerif` and `fonts.fontconfig.defaultFonts.serif` are added to allow setting the default system-wide font used for these generic faces. The defaults are the appropriate faces from the DejaVu collection because of their comprehensive Unicode coverage, clean rendering, and excellent legibility. * The NixOS option `fonts.fontconfig.antialias` can be used to disable antialiasing (it is enabled by default). * The options `fonts.fontconfig.subpixel.rgba` and `fonts.fontconfig.subpixel.lcdfilter` control the system-wide default settings for subpixel order and LCD filtering algorithm, respectively. * `fonts.fontconfig.hinting.enable` can be used to disable TrueType font hinting (it is enabled by default). `fonts.fontconfig.hinting.autohint` controls the FreeType autohinter. `fonts.fontconfig.hinting.style` controls the hint style; it is "full" by default. * User configurations can be disabled system-wide by setting `fonts.fontconfig.includeUserConf = false`. They are enabled by default so users can set Fontconfig options in the desktop environment of their choice.	2014-12-08 10:55:23 -06:00
Jaka Hudoklin	c821f239a3	nixos/fleet: fix typo	2014-12-08 13:30:45 +01:00
Jaka Hudoklin	743b47579b	nixos/fleet: enable etcd and docker by default	2014-12-08 13:07:12 +01:00
Domen Kožar	ee8e15fe76	enable bash autocomplete by default	2014-12-08 12:06:02 +01:00
Jaka Hudoklin	b7092dc95c	nixos: add fleet module	2014-12-07 21:52:52 +01:00
Jaka Hudoklin	8bb6fdc4f9	nixos/systemd: ignore null environment options	2014-12-07 21:44:20 +01:00
Emery Hemingway	f30748a7cd	nixos: configure samba and rsync shares with sets	2014-12-07 15:42:22 -05:00
Bjørn Forsman	f85ad2d378	nfs-utils: align attrname with pkgname ... nfsUtils => nfs-utils. Keep copy of old attribute for backward compatibility.	2014-12-06 17:01:05 +01:00
Austin Seipp	bc10c92377	nixos: overhaul Tor module ... This overhauls the Tor module in a few ways: - Uses systemd service files, including hardening/config checks - Removed old privoxy support; users should use the Tor Browser instead. - Remove 'fast' circuit/SOCKS port; most users don't care (and it adds added complexity and confusion) - Added support for bandwidth accounting - Removed old relay listenAddress option; taken over by portSpec - Formatting, description, code cleanups. Signed-off-by: Austin Seipp <aseipp@pobox.com>	2014-12-06 05:01:08 -06:00
Austin Seipp	e5e8efc1f4	nixos: rewrite torsocks module ... Rather than trying to override the 'torsocks' executable in $PATH, the new module instead properly configures `/etc/tor/torsocks.conf` and puts the normal `torsocks` executable in $PATH so it can work out of the box. As a bonus, I think this module actually works now, because the torsocks configuration has changed a lot from when this was written, it seems... Signed-off-by: Austin Seipp <aseipp@pobox.com>	2014-12-06 05:00:27 -06:00
Austin Seipp	1b26faeb69	nixos: Remove torify module ... 'torify' now ships with the tor bundle itself; and using torsocks is recommended over tsocks (torify will use torsocks automatically.) Signed-off-by: Austin Seipp <aseipp@pobox.com>	2014-12-06 05:00:26 -06:00
William A. Kennington III	8297e09d78	nixos/synergy: Don't generate units unecessarily	2014-12-05 12:12:17 -08:00
William A. Kennington III	159af942d5	nixos/unifi: Ensure stateDir is mounted before proceeding	2014-12-05 12:12:17 -08:00
Tino Breddin	ee0f81de5e	Fix filename for udev network interface rules ... From http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/ You disable the assignment of fixed names, so that the unpredictable kernel names are used again. For this, simply mask udev's rule file for the default policy: ln -s /dev/null /etc/udev/rules.d/80-net-setup-link.rules (since v209: this file was called 80-net-name-slot.rules in release v197 through v208)	2014-12-05 17:32:36 +01:00
Emery Hemingway	e69f876cca	nixos: iPXE client for GRUB ... fix bug in grub/install-grub.pl that would replace @bootRoot@ with an invalid string	2014-12-04 12:03:10 +01:00
Thomas Tuegel	f7c27885d0	Add iwlegacy firmware for old Intel wireless cards	2014-12-03 10:10:00 -06:00
Jaka Hudoklin	099eabb490	nixos: add chronos service	2014-12-03 15:49:14 +01:00
Jaka Hudoklin	665cc41e5c	nixos/peerflix: fix enable option description	2014-12-03 15:13:50 +01:00
Georges Dubus	9889f1b545	Added the cloud-init service	2014-12-03 13:22:13 +01:00
Domen Kožar	55cf272c19	fixes #5198	2014-12-02 12:59:14 +01:00
Jaka Hudoklin	a0cf449fa5	mesos: add docker support	2014-12-02 12:22:12 +01:00
Luca Bruno	41cb91a4fd	Revert "Merge pull request #5184 from daogames/tb/fix-systemd-udev-net-rules" ... This reverts commit ddeee82b31, reversing changes made to 75ead8812b.	2014-12-02 10:54:48 +01:00
lethalman	ddeee82b31	Merge pull request #5184 from daogames/tb/fix-systemd-udev-net-rules ... Fix filename for udev network interface rules	2014-12-02 10:50:16 +01:00
William A. Kennington III	8a94c06595	nixos: Add network-pre.target and adjust firewall start ordering	2014-12-01 17:19:44 -08:00
William A. Kennington III	2b06a92c2a	nixos/nfs: Fix dependency ordering	2014-12-01 17:19:44 -08:00
William A. Kennington III	1716c12b54	iwlwifi: Split into separate package with more up to date firmware	2014-12-01 16:25:20 -08:00
wmertens	3cecef15d7	Revert $GIT_SSL_CAINFO removal ... Users have an older git in their user environment and it doesn't work without it. We should keep it around for a while.	2014-12-01 23:07:50 +01:00
Jaka Hudoklin	40d73c5eb7	nixos/docker: fix module, add simple test	2014-12-01 17:20:35 +01:00
Jaka Hudoklin	4fe3e44645	nixos/mesos: restart on failure	2014-12-01 16:57:56 +01:00
Jaka Hudoklin	827ad85a1e	nixos/mesos: convert quorum to string	2014-12-01 16:57:17 +01:00
Jaka Hudoklin	3424ded286	nixos: add peerflix module	2014-12-01 16:42:40 +01:00
William A. Kennington III	1c04e69bce	nixos/networking: Fix more harmless errors	2014-12-01 01:18:32 -08:00
Tino Breddin	d0327c052c	Fix filename for udev network interface rules ... From http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/ You disable the assignment of fixed names, so that the unpredictable kernel names are used again. For this, simply mask udev's rule file for the default policy: ln -s /dev/null /etc/udev/rules.d/80-net-setup-link.rules (since v209: this file was called 80-net-name-slot.rules in release v197 through v208)	2014-12-01 09:32:41 +01:00
Domen Kožar	1ad22e8c55	Merge pull request #5189 from NixOS/almir ... almir: pin the sqlalchemy version used by zope.sqlalchemy to 8	2014-11-30 17:23:53 +01:00
Antoine R. Dumont	da47d6bd59	Improve readability - from https://github.com/NixOS/nixpkgs/pull/5058#discussion_r21043552	2014-11-30 15:19:30 +01:00
Antoine R. Dumont	e54f9ffcf4	Ensure nix-daemon sees the proxy defined options ... (Not sure about this one) Here are the incomplete and a little contradictory discussions about it (or at least my interpretations of them): - https://github.com/NixOS/nixpkgs/pull/5058#discussion_r20830855 - https://github.com/NixOS/nixpkgs/pull/5058#discussion_r21043552 cc @edolstra @wmertens What did I get wrong?	2014-11-30 15:19:30 +01:00
Antoine R. Dumont	3c7e779602	Introduce a dedicated networking.proxy option ... Following the discussion NixOS#5021: - obsolete the nix.proxy option - add the networking.proxy option - open a default no_proxy environment variable - add a rsync option - Manual tests ok. - Automatic tests ok. Amended by lethalman to simplify the option descriptions.	2014-11-30 15:19:25 +01:00
William A. Kennington III	74ed5eee41	nixos/network: Fix typo	2014-11-30 05:16:07 -08:00
William A. Kennington III	47d3db5c30	nixos/network: Only check slave interfaces which are configured	2014-11-30 05:12:49 -08:00
William A. Kennington III	01332149d4	nixos/networkd: Fix dhcp being enabled when it should be disabled	2014-11-30 04:46:59 -08:00
Cillian de Róiste	1d5aecd356	Almir module: set a working default sqlalchemy_engine_url	2014-11-30 13:11:55 +01:00
Arseniy Seroka	f8e1087209	Merge pull request #5121 from coreyoconnor/primus-upstream ... Add primus and extend bumblebee to support 32bit/64bit multilib	2014-11-30 13:23:30 +03:00
William A. Kennington III	4b9c5ebee6	nixos/networking: Fix dependencies for macvlan which should be on bridges	2014-11-30 01:25:09 -08:00
William A. Kennington III	a911f9989c	nixos/networkd: Fix macvlan called with null mode	2014-11-30 01:19:54 -08:00
William A. Kennington III	16827ff287	nixos/nfs: Fix Test	2014-11-30 01:14:57 -08:00
William A. Kennington III	66f45268ab	nixos/networking: Improve service ordering	2014-11-29 22:47:04 -08:00
William A. Kennington III	7ecb084b77	nixos/networking: More fixes	2014-11-29 22:35:03 -08:00
William A. Kennington III	bcfe7b2200	Merge pull request #5043 from wkennington/master.networkd ... nixos/networking: Revamp networking configuration and add an experimental networkd option.	2014-11-29 19:59:31 -08:00
Corey O'Connor	b2f3e10a35	Add primus and extend bumblebee to support 32bit/64bit multilib architectures. ... Using primusrun will work as expected in a multilib environment. Even if the initial program executes a antoehr program of the another architecture. Assuming the program does not modify LD_LIBRARY_PATH inappropriately. This does not update virtualgl for seemless multilib. I was unable to get a mixed 64/32 bit environment to work with VirtualGL. The mechanism VirtualGL uses to inject the fake GL library would fail if both 32bit and 64 bit libraries were in the environment. Instead the bumblebee package creates a optirun32 executable that can be used to run a 32bit executable with optimus on a 64 bit host. This is not created if the host is 32bit. For my usage, gaming under wine, the primusrun executable works as expected regardless of 32bit/64bit.	2014-11-29 16:42:00 -08:00
aszlig	3e49487c1a	virtualbox: Enable hardening by default. ... VirtualBox with hardening support requires the main binaries to be setuid root. Using VBOX_WITH_RUNPATH, we ensure that the RPATHs are pointing to the libexec directory and we also need to unset VBOX_WITH_ORIGIN to make sure that the build system is actually setting those RPATHs. The hardened.patch implements two things: * Set the binary directory to the setuid-wrappers dir so that VboxSVC calls them instead of the binaries from the store path. The reason behind this is because nothing in the Nix store can have the setuid flag. * Excempt /nix/store from the group permission check, because while it is group-writeable indeed it also has the sticky bit set (and also the whole store is mounted read-only on most NixOS systems), so we're checking on that as well. Right now, the hardened.patch uses /nix/store and /var/setuid-wrappers directly, so someone would ever want to change those on a NixOS system, please provide a patch to set those paths on build time. However, for simplicity, it's best to do it when we _really_ need it. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-11-29 19:21:46 +01:00
Jaka Hudoklin	8c766dcc90	nixos/kubernetes: fix user id	2014-11-29 16:46:39 +01:00
Jaka Hudoklin	bd32da69bc	Merge pull request #5088 from offlinehacker/nixos/kubernetes ... nixos: add kubernetes module	2014-11-29 16:44:42 +01:00
Jaka Hudoklin	2b261c1edf	nixos: add kubernetes module	2014-11-29 02:27:17 +01:00
aszlig	c37611f3e5	nixos: Use vendor zones instead of N.pool.ntp.org. ... Closes #4824, thanks to @abh for processing my stupidity. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-11-28 19:37:03 +01:00
William A. Kennington III	299b59d1c4	nixos/network-interfaces: More fixes	2014-11-27 22:54:01 -08:00
Domen Kožar	28a1af6e06	fix printing test	2014-11-27 20:01:18 +01:00
aszlig	2249474632	nixos/sshd: Fix build if knownHosts is empty. ... Introduced by 77ff279f27. Build failure: https://headcounter.org/hydra/build/583158/nixlog/5/raw Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-11-27 19:03:41 +01:00
aszlig	14f09e01c1	nixos: Add enable option for programs/virtualbox. ... We will simply rename the previous module and add a warning whenever the module is included directly, pointing the user to the right option and also enable it as well (in case somebody has missed the option and is wondering why VirtualBox doesn't work anymore). Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-11-27 18:42:22 +01:00
aszlig	444987193e	nixos: Rename virtualbox to virtualboxGuest. ... Especially new users could be confused by this, so we're now marking services.virtualbox.enable as obsolete and defaulting to services.virtualboxGuest.enable instead. I believe this now makes it clear, that this option is for guest additions only. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-11-27 18:42:22 +01:00
Rickard Nilsson	77ff279f27	nixos/services.openssh: Allow knownHost keys to have multiple lines. ... Useful for adding several public keys of different types for the same host.	2014-11-27 18:40:21 +01:00
Eelco Dolstra	e7cd18e907	Don't set $MANPATH ... The default is derived automatically from $PATH, so it's in fact better *not* to set it.	2014-11-27 17:36:46 +01:00
wmertens	45c1b9147f	Merge pull request #5130 from wmertens/git-ssl-env ... Let git use $SSL_CERT_FILE	2014-11-27 13:24:08 +01:00
Domen Kožar	91bdca38a0	NetworkManager.service -> network-manager.service	2014-11-27 12:10:20 +01:00
William A. Kennington III	fbe9ac05d3	nixos/network-interfaces: Add maclvan support	2014-11-26 16:29:24 -08:00
William A. Kennington III	1860ee27b0	nixos/networking: Fixes	2014-11-26 16:29:24 -08:00
Matej Cotman	084fb3a0d3	e18: remove old desktop manager	2014-11-26 21:44:23 +01:00
Matej Cotman	959946a5af	e17: remove old desktop manager	2014-11-26 21:44:23 +01:00
William A. Kennington III	4f2a041345	nixos/network-interfaces: Make it clear that networkd is experimental	2014-11-26 11:22:03 -08:00
William A. Kennington III	2c42738231	nixos/network-interfaces: Refactor scripts for reliability and dependency removal	2014-11-26 11:22:03 -08:00
William A. Kennington III	c417012c1b	nixos/dhcpcd: Respect per interface dhcp options	2014-11-26 11:22:03 -08:00
William A. Kennington III	7005e289da	nixos/network-interfaces: Promote secondary addresses when primary addresses expire	2014-11-26 11:22:03 -08:00
William A. Kennington III	c7d46687c5	nixos/network-interfaces: Support mac address and mtu universally	2014-11-26 11:22:03 -08:00
William A. Kennington III	2057d9087f	nixos: Support network-online target in addition to ip-up	2014-11-26 11:22:03 -08:00
William A. Kennington III	0626c1ecf0	nixos/systemd: ip-up and network-online targets should come after networkd-wait-online	2014-11-26 11:22:02 -08:00
William A. Kennington III	c234e7b115	nixos/networking: Rebuild resolvconf during activation ... This is needed when /etc/resolv.conf is being overriden by networkd and other configurations. If the file is destroyed by an environment activation then it must be rebuilt so that applications which interface with /etc/resolv.conf directly don't break.	2014-11-26 11:22:02 -08:00
William A. Kennington III	8cffa37787	networkd: Support Host Resolvconf	2014-11-26 11:22:02 -08:00
William A. Kennington III	295a17f872	nixos/network-interfaces-scripted: Fix network-setup triggering	2014-11-26 11:22:02 -08:00
William A. Kennington III	59f512ef7d	nixos/network-interfaces: Provide a networkd implementation	2014-11-26 11:22:02 -08:00
William A. Kennington III	045132a9b0	systemd-network: Add assertions for user clarity	2014-11-26 11:22:02 -08:00
William A. Kennington III	a332c4eac5	systemd: Enable more network services	2014-11-26 11:22:02 -08:00
William A. Kennington III	08e74f2791	systemd: Add ability to define networks	2014-11-26 11:22:02 -08:00
Igor Pashev	1dd53cc990	Mediawiki: updated for Apache 2.4	2014-11-26 16:51:30 +01:00
Wout Mertens	72b81cf8bb	Remove unnecessary $GIT_SSL_CAINFO from sys env	2014-11-26 00:30:07 +01:00
Eelco Dolstra	dd2dedafa3	Style fixes	2014-11-25 16:01:27 +01:00
Igor Pashev	4c33004e1f	Added strongSwan service	2014-11-25 15:29:34 +01:00
Vladimír Čunát	d39c6ceffc	nvidia_x11: current long-lived becomes a new legacy ... CC: #5070.	2014-11-24 22:39:00 +01:00
cillianderoiste	04d62f6643	Merge pull request #5006 from daogames/este/customgitoliteuser ... enable different useraccount name for gitolite user	2014-11-24 22:03:20 +01:00
William A. Kennington III	f83aa6c0ea	nixos/unifi: Properly depend on mountpoints	2014-11-24 12:40:07 -08:00
aszlig	cc28e819e4	nixos/cupsd: Ignore collisions in cups-progs. ... There currently are collisions between the main CUPS package and the filters package, which are: * $storepath/share/cups/banners/classified * $storepath/share/cups/banners/confidential * $storepath/share/cups/banners/secret * $storepath/share/cups/banners/standard * $storepath/share/cups/banners/topsecret * $storepath/share/cups/banners/unclassified * $storepath/share/cups/data/testprint And they actually have different content, so let's ignore those for now until we have a better fix. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-11-24 17:40:03 +01:00
Oliver Charles	ac616e17b3	opentsdb: Enable chunked API requests by default	2014-11-24 14:40:48 +00:00
Oliver Charles	abd24523f3	scollector: Allow users to specify external collectors	2014-11-24 14:40:48 +00:00
Oliver Charles	ced9e83732	OpenTSDB should create its schema on start up	2014-11-24 14:40:48 +00:00
Oliver Charles	5c670c81d5	hbase should use dataDir to specify where to store data	2014-11-24 14:40:48 +00:00
Oliver Charles	1280c6aa64	Add an extraConfig option to bosun	2014-11-24 14:40:48 +00:00
Oliver Charles	fb67616588	scollector should talk to Bosun, not OpenTSDB	2014-11-24 14:40:48 +00:00
Oliver Charles	891c262e9a	Add a NixOS module to run bosun	2014-11-24 14:40:47 +00:00
Oliver Charles	2ed07c6cc1	scollector: New NixOS module	2014-11-24 14:40:47 +00:00
Oliver Charles	751a2943f4	opentsdb: Upgrade to 2.1.0-RC1	2014-11-24 14:40:47 +00:00
Oliver Charles	764cca613d	opentsdb: New package and NixOS module	2014-11-24 14:40:47 +00:00
Oliver Charles	8964667bcd	hbase: New package and NixOS module	2014-11-24 14:40:47 +00:00
Arseniy Seroka	fd5566da41	Merge pull request #5080 from joachifm/dnscrypt-refactor ... dnscrypt-proxy: minor superficial improvements	2014-11-24 15:48:47 +03:00
William A. Kennington III	8309aa04b2	unifi: Actually remove webapps at shutdown	2014-11-24 02:30:04 -08:00
William A. Kennington III	8f0d65e2df	unifi: Clean all of webapps at start and stop	2014-11-24 00:22:24 -08:00
William A. Kennington III	3f7b2bc70d	unifi: Fix typo	2014-11-24 00:06:42 -08:00
Domen Kožar	23567ac200	cups-pdf-filter -> cups-filters, enable by default for cups	2014-11-23 17:51:55 +01:00
Michael Raskin	48a1b59f6a	Remove cups_pdf_filter from the default set - adding to default set is easier than removing...	2014-11-23 16:27:28 +03:00
Aristid Breitkreuz	5ff169f4d7	containers: remove obsolete comment	2014-11-23 12:30:03 +01:00
Jaka Hudoklin	4f592d4f29	nixos/etcd: fix postStart check and make tests deterministic	2014-11-23 12:16:50 +01:00
Jaka Hudoklin	7202121e0e	nixos/etcd: only use one cient url by default	2014-11-23 01:25:53 +01:00
Joachim Fasting	119d93e223	dnscrypt-proxy: minor superficial improvements ... - Use upstream description and explicitly set platforms = all - Coding conventions fix	2014-11-22 16:19:06 +01:00
Jaka Hudoklin	73dc767aa0	nixos: add docker-registry module	2014-11-22 12:16:41 +01:00
Jaka Hudoklin	444bda1936	Merge pull request #4991 from offlinehacker/nixos/etcd ... nixos: add etcd module	2014-11-22 12:05:35 +01:00
Domen Kožar	85daeeb222	Merge pull request #4639 from lethalman/installer-nm ... kde installer: enable networkmanager. Closes #3433	2014-11-21 22:29:10 +01:00
Jaka Hudoklin	b02d90969f	make zookeeper.nix non-executable	2014-11-21 15:06:51 +01:00
Jaka Hudoklin	b3bc157f7f	nixos: add etcd module	2014-11-21 13:54:45 +01:00
Emery Hemingway	21e4ff5624	initial liquidsoap service expression	2014-11-20 17:41:15 -05:00
William A. Kennington III	e33cccd686	nixos/ids: Fix systemd ids	2014-11-19 15:01:44 -08:00
William A. Kennington III	487e47a8e1	nixos/ids: Add systemd networking ids	2014-11-19 14:59:42 -08:00
Rickard Nilsson	63d9366212	nixos/haveged: Fix incorrect unit configuration (documentation -> Documentation)	2014-11-19 12:56:42 +01:00
Rickard Nilsson	76f065a8de	nixos/riemann: Add option configFiles	2014-11-19 12:56:42 +01:00
Eelco Dolstra	8daa0767fa	Merge pull request #5016 from bjornfor/nixos-generate-config-with-lib ... nixos-generate-config: add 'lib' to module template	2014-11-18 08:48:30 +01:00
Charles Strahan	973794b24a	bundixify riemann-dash	2014-11-18 03:31:56 +00:00
Igor Pashev	2b91426920	Use lib instead of pkgs.lib ... Usage of pkgs.lib may cause infinite recursion	2014-11-17 20:30:37 +03:00
Bjørn Forsman	8835d932b1	nixos-generate-config: add 'lib' to module template ... The NixOS manual says modules have the following signature: { config, lib, pkgs, ... }: But our generated configuration.nix file lacks the 'lib' part. Add it.	2014-11-17 17:13:36 +01:00
Ricardo M. Correia	389143d808	grsecurity: Update assertion msg to correct major kernel versions	2014-11-16 18:52:39 +01:00
Evgeny Egorochkin	599394162c	update obsolete startOn values	2014-11-16 17:04:54 +02:00
Nikolay Amiantov	a2eb7ca23c	stage-1: fix hibernation for device node symlinks ... closes #4995	2014-11-15 21:44:37 +02:00
Evgeny Egorochkin	f151f4c816	KDE4: fix sound using the old gstreamer approach; the correct way would be to wrap each and every phonon client, or patch phonon's search path	2014-11-15 21:40:13 +02:00
Michael Raskin	ba77c90161	Revert "cups: update package" ... This reverts commit aa548af5a5.	2014-11-15 17:00:15 +03:00
Michael Raskin	d86c047f9c	Revert "cups-filters: add package" ... This reverts commit f7ba33de56.	2014-11-15 16:59:58 +03:00
Michael Raskin	a7c8d00b27	Merge pull request #4857 from abbradar/cups2 ... [WIP] Improve printing experience and update related packages	2014-11-15 15:18:35 +03:00
Aristid Breitkreuz	2fd7e5f39d	ssh-agent: use types.nullOr	2014-11-15 12:33:01 +01:00
Aristid Breitkreuz	d57110fabc	ssh-agent: make key timeout optional	2014-11-15 12:13:25 +01:00
Aristid Breitkreuz	d70336f37c	limit the amount of time ssh-agent keeps a key (default: 1h)	2014-11-15 12:13:25 +01:00
wmertens	0b34eb1493	Allow starting a shell on stage 1 failure ... When people copy the ISO to USB it can happen that the root device isn't known. Having a shell greatly improves that situation.	2014-11-15 00:14:26 +01:00
Luca Bruno	e8adc8b5ec	Drop GNOME 3.10	2014-11-14 22:46:37 +01:00
William A. Kennington III	826f5468ab	nixos/unifi: Remove old ROOT.war links before relinking	2014-11-14 11:45:38 -08:00
Ronny Esterluss	2b243bfbad	enable different useraccount name for gitolite user	2014-11-14 17:39:41 +01:00
Eelco Dolstra	ca441636f1	Merge branch 'staging'	2014-11-14 16:00:23 +01:00
Vladimír Čunát	b4af993c3f	Merge branch 'master' into staging ... Conflicts (simple): pkgs/development/lisp-modules/clwrapper/setup-hook.sh	2014-11-14 14:28:23 +01:00
Rene Donner	8bd2f6bfc1	some typos	2014-11-14 13:05:55 +01:00
Nikolay Amiantov	f7ba33de56	cups-filters: add package	2014-11-14 13:51:26 +03:00
Nikolay Amiantov	aa548af5a5	cups: update package	2014-11-14 13:51:26 +03:00
William A. Kennington III	d0e15cc575	Merge pull request #4983 from bosu/fw-stop-fix ... firewall: clear rpfilter on stop	2014-11-14 00:14:27 -08:00
Boris Sukholitko	53b24d0c95	firewall: clear rpfilter on stop	2014-11-14 09:07:18 +02:00
wmertens	dda62c451c	Re-enable ZFS in installer image ... Hopefully #4807 fixes http://hydra.nixos.org/build/16883184	2014-11-13 10:31:15 +01:00
wmertens	5c19521c6e	Merge pull request #4807 from wizeman/u/zfs-improvements ... ZFS improvements	2014-11-13 10:26:30 +01:00
Shea Levy	ba7c80eefb	Fix init= stage 1 test	2014-11-12 18:25:03 -05:00
Charles Strahan	6e6ac35024	more rubyLibs renaming	2014-11-12 22:32:32 +00:00
Moritz Ulrich	e884dc32c5	Add local-fs.target to minidlna. ... Minidlna fails to start if it wants to access a filesystem which isn't mounted (yet).	2014-11-12 23:20:47 +01:00
Ricardo M. Correia	7a7bf8368e	nixos-generate-config: Configure networking.hostId by default ... The host id value gets generated by reading a 32-bit value from /dev/urandom. This makes programs that rely on a correct host id more reliable. It also makes using ZFS more seamless, as you don't need to configure the hostId manually; instead, it becomes part of your config from the moment you install NixOS.	2014-11-12 22:31:50 +01:00
Ricardo M. Correia	e9affb4274	nixos: Add system-wide option to set the hostid ... The old boot.spl.hostid option was not working correctly due to an upstream bug. Instead, now we will create the /etc/hostid file so that all applications (including the ZFS kernel modules, ZFS user-space applications and other unrelated programs) pick-up the same system-wide host id. Note that glibc (and by extension, the `hostid` program) also respect the host id configured in /etc/hostid, if it exists. The hostid option is now mandatory when using ZFS because otherwise, ZFS will require you to force-import your ZFS pools if you want to use them, which is undesirable because it disables some of the checks that ZFS does to make sure it is safe to import a ZFS pool. The /etc/hostid file must also exist when booting the initrd, before the SPL kernel module is loaded, so that ZFS picks up the hostid correctly. The complexity in creating the /etc/hostid file is due to having to write the host ID as a 32-bit binary value, taking into account the endianness of the machine, while using only shell commands and/or simple utilities (to avoid exploding the size of the initrd).	2014-11-12 22:31:49 +01:00
Ricardo M. Correia	12e77fdc3f	nixos/zfs: Improve the ZFS boot process ... It turns out that the upstream systemd services that import ZFS pools contain serious bugs. The first major problem is that importing pools fails if there are no pools to import. The second major problem is that if a pool ends up in /etc/zfs/zpool.cache but it disappears from the system (e.g. if you reboot but during the reboot you unplug your ZFS-formatted USB pen drive), then the import service will always fail and it will be impossible to get rid of the pool from the cache (unless you manually delete the cache). Also, the upstream service would always import all available ZFS pools every boot, which may not be what is desired in some cases. This commit will solve these problems in the following ways: 1. Ignore /etc/zfs/zpool.cache. This seems to be a major source of issues, and also does not play well with NixOS's philosophy of reproducible configurations. Instead, on every boot NixOS will try to import the set of pools that are specified in its configuration. This is also the direction that upstream is moving towards. 2. Instead of trying to import all ZFS pools, only import those that are actually necessary. NixOS will automatically determine these from the config.fileSystems.* option. Also, the user can import any additional pools every boot by adding them to the config.boot.zfs.extraPools option, but this is only necessary if their filesystems are not specified in config.fileSystems.*. 3. Added options to configure if ZFS should force-import ZFS pools. This may currently be necessary, especially if your pools have not been correctly imported with a proper host id configuration (which is probably true for 99% of current NixOS ZFS users). Once host id configuration becomes mandatory when using ZFS in NixOS and we are sure that most users have updated their configurations and rebooted at least once, we should disable force-import by default. Probably, this shouldn't be done before the next stable release. WARNING: This commit may change the order in which your non-ZFS vs ZFS filesystems are mounted. To avoid this problem (now or in the future) it is recommended that you set the 'mountpoint' property of your ZFS filesystems to 'legacy', and that you manage them using config.fileSystems, just like any other non-ZFS filesystem is usually managed in NixOS.	2014-11-12 22:31:49 +01:00
Ricardo M. Correia	3b0fa60a98	zfs: Enable systemd ... Also remove custom zfs services from NixOS. This makes NixOS more aligned with upstream. More importantly, it prepares the way for NixOS to use ZED (the ZFS event daemon). This service will automatically be enabled but it is not possible to configure it via configuration.nix yet.	2014-11-12 22:31:49 +01:00
Michael Raskin	0d6306be4d	Merge pull request #4950 from joachifm/dnscrypt-proxy ... dnscrypt-proxy service	2014-11-13 00:25:05 +03:00
Michael Raskin	232f6bb4d2	Merge pull request #4929 from abbradar/prl-tools ... Add packages and support for Parallel Guest Tools	2014-11-13 00:22:42 +03:00
Michael Raskin	efe5eb4709	Merge pull request #4573 from fpletz/feature/lxc-configuration ... Add support for global LXC config files	2014-11-13 00:14:46 +03:00
Eelco Dolstra	433a845081	Disable zfs in the ISO for now ... It's giving zpool-import.service errors. http://hydra.nixos.org/build/16883184	2014-11-12 15:32:21 +01:00
Longrin Wischnewski	490232bd2e	apache-httpd: add mod_access_compat for compatibility with old httpd-22 configurations	2014-11-12 13:18:02 +01:00
Eelco Dolstra	c5a7ff0afd	Fix /dev/root udev rule in the ISO	2014-11-11 23:48:31 +01:00
Eelco Dolstra	f33fa1b66b	Merge remote-tracking branch 'origin/master' into staging ... Conflicts: pkgs/development/libraries/boost/generic.nix	2014-11-11 23:48:08 +01:00
Nikolay Amiantov	32e18bc722	nixos/parallels-guest: add options	2014-11-12 01:26:23 +03:00
Joachim Fasting	52f0553209	Add dnscrypt-proxy service ... The dnscrypt-proxy service relays regular DNS queries to a DNSCrypt enabled upstream resolver. The traffic between the client and the upstream resolver is encrypted and authenticated, which may mitigate the risk of MITM attacks and third-party snooping (assuming a trustworthy upstream). Though dnscrypt-proxy can run as a standalone DNS client, the recommended setup is to use it as a forwarder for a caching DNS client. To use dnscrypt-proxy as a forwarder for dnsmasq, do ```nix { # ... networking.nameservers = [ "127.0.0.1" ]; networking.dhcpcd.extraConfig = "nohook resolv.conf"; services.dnscrypt-proxy.enable = true; services.dnscrypt-proxy.localAddress = "127.0.0.1"; services.dnscrypt-proxy.port = 40; services.dnsmasq.enable = true; services.dnsmasq.extraConfig = '' no-resolv server=127.0.0.1#40 listen-address=127.0.0.1 ''; # ... } ```	2014-11-11 22:47:19 +01:00
Luca Bruno	b77d166b17	nixos: move bcache udev rule in a new bcache.nix module	2014-11-10 22:19:43 +01:00
Luca Bruno	31df4f70af	nixos: Add boot.initrd.extraUdevRulesCommands	2014-11-10 22:19:43 +01:00
Luca Bruno	6af0d6974f	Merge branch 'master' into staging	2014-11-10 10:03:52 +01:00
Brian McKenna	a6bacd4d81	Add "light" package and setuid wrapper	2014-11-09 19:45:43 -07:00
Michael Raskin	6d0518fbdf	Merge pull request #4282 from sztupi/crashplan ... Crashplan OK, it is an external service with unfree client, so let's declare that ensuring usability of the service is not our headache.	2014-11-09 18:09:33 +03:00
Edward Tjörnhammar	c329e5bbd9	i2pd: added package, service	2014-11-09 09:55:35 +01:00
Emery Hemingway	67a2a58314	cjdns: service tweaks, new NixOS test	2014-11-08 23:39:02 +01:00
Nikolay Amiantov	aeaa96f7e4	xfce4-volumed: add package (close #4628)	2014-11-08 21:48:51 +01:00
Luca Bruno	510fba95e8	nixos-rebuild: reload dbus before starting other units. Closes #4546	2014-11-08 19:40:28 +01:00
Aristid Breitkreuz	8b949e5ff5	Merge pull request #4823 from abbradar/synaptics-fix ... synaptics: fix tapButtons setting	2014-11-08 19:38:06 +01:00
Aristid Breitkreuz	8b50383c45	Merge pull request #4859 from abbradar/git-daemon ... nixos/git-daemon: fix a bug and add 'user' and 'group' options	2014-11-08 19:33:24 +01:00
Domen Kožar	9ea81152cc	Merge pull request #4891 from pSub/prefer-xresources ... Try to load Xresources, if that fails fall back to Xdefaults. Closes #4670	2014-11-08 19:32:46 +01:00
Rüdiger Sonderfeld	fa1cec1037	update-users-groups.pl: Use UTF-8 instead of latin1. ... Perl seems to write the file in latin1 independent of the actual input encoding. This can corrupt the "description" field of /etc/passwd. By setting "binmode" to ":utf8" Perl can be forced to write UTF-8. Ideally the program would simply read/write the fields by value without any changes in encoding. However, assuming/enforcing UTF-8 is a lot better than using an obsolete coding like latin1.	2014-11-08 19:25:17 +01:00
Luca Bruno	83221f3886	Merge branch 'master' into staging ... Makes the build more useful: - Disabled hybrid iso, makes installer tests pass again - Imagemagick fixes to the "Illegal instruction" thing	2014-11-08 15:56:40 +01:00
Pascal Wittmann	d6e87f1749	Try to load Xresources, if that fails fall back to Xdefaults. Closes #4670	2014-11-08 15:25:40 +01:00
Aristid Breitkreuz	cf4a976ced	quassel: make a proper systemd unit (also properly works in containers now)	2014-11-08 14:59:25 +01:00
Luca Bruno	7885c2ed12	Revert "nixos: iso-image: use syslinux bootloader for USB booting support" ... This reverts commit 455db168b3.	2014-11-08 14:33:27 +01:00
Luca Bruno	e3611709d6	Revert "nixos: installation: make installation ISOs USB bootable" ... This reverts commit b7f6a138b1.	2014-11-08 14:33:27 +01:00
Jaka Hudoklin	53667c7b1a	Merge pull request #4870 from bosu/docker-proxy ... docker: propagate nix.proxy into daemon environment	2014-11-08 13:06:56 +01:00
Nikolay Amiantov	46b866cf63	nixos/git-daemon: fix 'exportAll' option	2014-11-07 15:50:01 +03:00
Nikolay Amiantov	af1d09879b	nixos/git-daemon: add 'user' and 'group' options	2014-11-07 15:49:45 +03:00
Nikolay Amiantov	4b2e43865a	nixos/git-daemon: add types	2014-11-07 15:49:03 +03:00
Boris Sukholitko	0d89afdedd	docker: propagate nix.proxy into daemon environment	2014-11-07 13:46:36 +02:00
Rickard Nilsson	71f64ded06	Revert "Revert "syslog-ng: Update from 3.5.6 to 3.6.1"" ... This reverts commit 8e1072fd60.	2014-11-06 21:59:04 +01:00
Rickard Nilsson	2b3c3d0e32	Fixes to Apache 2.4 configuration	2014-11-06 21:58:40 +01:00
Eelco Dolstra	b3eb981a95	apache-httpd: Make 2.4 the default ... The NixOS 14.11 release is a good time to finally make 2.4 the default.	2014-11-06 14:55:44 +01:00
Evgeny Egorochkin	85d23f5292	thermald needs dbus config files to run	2014-11-06 15:19:33 +02:00
Eelco Dolstra	0518ccf5af	Merge remote-tracking branch 'origin/master' into staging ... Conflicts: pkgs/stdenv/generic/default.nix	2014-11-06 10:16:39 +01:00
Peter Simons	02c37c1027	Merge pull request #4838 from abbradar/ssmtp-root ... Add 'root' option to ssmtp	2014-11-05 15:45:47 +01:00
Vladimír Čunát	52404a868d	Merge recent master into staging ... Nixpkgs Hydra: ?compare=1157272 TODO: port e22889064f Conflicts: nixos/tests/gnome3_10.nix (auto-solved) pkgs/applications/video/aegisub/default.nix pkgs/development/libraries/boost/1.55.nix	2014-11-05 15:00:44 +01:00
Vladimír Čunát	c0e2aceef4	fontconfig: patch and document	2014-11-05 12:12:30 +01:00
Nikolay Amiantov	1b6f0ffb6e	ssmtp: add 'root' option	2014-11-05 02:47:59 +03:00
Nikolay Amiantov	292e07689a	ssmtp: add types to options	2014-11-05 02:42:48 +03:00
Jaka Hudoklin	d232390d5d	nixos/graphite: fix user creation	2014-11-04 19:38:24 +01:00
Ricardo M. Correia	98a59df81f	nixos/transmission: Start after local-fs.target	2014-11-04 18:40:13 +01:00
aszlig	8e516de3e7	nixos: Fix priorities of initialHashedPassword. ... Regression introduced in f496c3cbe4. Previously when we used security.initialRootPassword, the default priority for this option was 1001, because it was a default value set by the option itself. With the mentioned commit, it is no longer an option default but a mkDefault, which is priority 1000. I'm setting this to 150 now, as test-instrumentation.nix is using this for overriding other options and because I think it still makes it possible to simple-override it, because if no priority is given, we get priority 100. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-11-04 05:19:07 +01:00
Nikolay Amiantov	5f84c785ff	synaptics: fix tapButtons setting	2014-11-04 06:20:10 +03:00
lethalman	636a4c00ca	Merge pull request #4801 from robberer/pkgs/zabbix-server ... zabbix-server: add extraConfig option	2014-11-04 00:32:46 +01:00
Peter Simons	b5fed52c43	Merge pull request #4238 from wkennington/master.boost ... Make boost 156 the default	2014-11-03 23:03:01 +01:00
Longrin Wischnewski	ce8e1a278b	zabbix-server: add extraConfig option ... add types to options	2014-11-03 16:47:07 +01:00
Eelco Dolstra	f496c3cbe4	Obsolete security.initialPassword ... You can now set users.extraUsers.root.initialHashedPassword instead.	2014-11-03 12:36:56 +01:00
Eelco Dolstra	f8f787b800	Handle initialPassword and initialHashedPassword for !mutableUsers ... In this case, they're equivalent to setting ‘password’ and ‘hashedPassword’ (since there is no distinction between an initial and non-initial user account state).	2014-11-03 12:32:32 +01:00
Eelco Dolstra	3696536115	Handle removing a password if mutableUsers = false	2014-11-03 12:32:27 +01:00
Eelco Dolstra	1b53a3fcb7	Add initialPassword and initialHashedPassword options ... These are like password and hashedPassword, except that they only apply when the user is initially created.	2014-11-03 12:32:19 +01:00
William A. Kennington III	8e1072fd60	Revert "syslog-ng: Update from 3.5.6 to 3.6.1" ... This reverts commit e2ada42623.	2014-11-02 17:22:28 -08:00
William A. Kennington III	5ae216558f	jfsrec: Remove derivation	2014-11-02 17:22:27 -08:00
Bob van der Linden	b7f6a138b1	nixos: installation: make installation ISOs USB bootable	2014-11-02 17:35:16 +01:00
Bob van der Linden	455db168b3	nixos: iso-image: use syslinux bootloader for USB booting support ... This changes the bootloader for iso generation from Grub to syslinux. In addition this adds USB booting support, so that "dd" can be used to burn the generated ISO to USB thumbdrives instead of needing applications like UnetBootin.	2014-11-02 17:35:16 +01:00
lethalman	560fd3a5b7	Merge pull request #4742 from abbradar/bcache-stage1 ... Support bcache volumes in initrd	2014-11-02 17:29:38 +01:00
Nikolay Amiantov	775f381a9e	stage-1: add bcache support ... This adds necessary udev rule into initrd to support autodetecting bcache partitions in stage-1. It also fixes 'sh' path for the new rule to work.	2014-11-02 19:03:50 +03:00
Peter Simons	a9c53037fa	Merge remote-tracking branch 'origin/master' into staging.	2014-11-02 16:15:53 +01:00
Luca Bruno	6bb278659f	kde installer: enable networkmanager. Closes #3433	2014-11-02 15:23:22 +01:00
Mathijs Kwik	f356cee747	sudo: allow adding extra configuration options to the bottom of sudoers ... from sudoers (5): When multiple entries match for a user, they are applied in order. Where there are multiple matches, the last match is used (which is not necessarily the most specific match).	2014-11-02 13:27:05 +01:00
Peter Simons	415f41bf68	nixos/modules/services/monitoring/graphite.nix: strip trailing whitespace	2014-11-02 12:40:00 +01:00
Peter Simons	96a7e65c37	nixos/modules/services/monitoring/graphite.nix: don't create graphite user unconditionally ... I'm not sure what exactly this user is needed for, i.e. under what circumstances it must exist or not, but creating it unconditionally seems like the wrong thing to do. I complained to @offlinehacker about this on Github, but got no response for a week or so. I'm disabling the extraUsers bit to put out the fire, and now hope that someone who actually knows about Graphite implements a proper solution later.	2014-11-02 12:34:16 +01:00
Nikolay Amiantov	5423f62373	gitolite: add dataDir	2014-11-02 02:24:41 +03:00
lethalman	f079cd1721	Merge pull request #4750 from abbradar/nix-maxcores ... Add buildCores option to nix	2014-11-01 22:01:39 +01:00
Nikolay Amiantov	e8dace201f	nix-daemon: add maxCores option	2014-11-01 23:58:21 +03:00
William A. Kennington III	ba53392bce	nixos/nat: Fix override so that sysctls are properly preserved	2014-10-31 16:50:25 -07:00
Eelco Dolstra	a9f5e77e2f	update-users-groups.pl: Generate hashed passwords internally ... I.e. don't call "passwd" to update /etc/shadow from the "password" option. This has the side-effect of not updating the password if mutableUsers = true (since the code path for "hashedPassword" has a check for mutableUsers). Fixes #4747.	2014-10-31 17:42:09 +01:00
Peter Simons	b11060d8db	Merge remote-tracking branch 'origin/master' into staging.	2014-10-31 11:14:24 +01:00
Peter Simons	e18e77fbcd	Merge pull request #4746 from abbradar/synaptics-fingers ... Add "fingersMap" option to Synaptics	2014-10-31 11:06:58 +01:00
Nikolay Amiantov	118096fc0b	synaptics: add fingersMap option	2014-10-31 12:45:54 +03:00
Nikolay Amiantov	0eb86647b3	synaptics: add types to options	2014-10-31 12:45:54 +03:00
Aristid Breitkreuz	93f2c180d0	rsnapshot: add git version & make it configurable in the nixos module	2014-10-27 20:38:39 +01:00
Kirill Elagin	0c6d49da7d	xsession: Start the right pulseaudio binary ... Fixes #4663.	2014-10-27 15:43:19 +03:00
Rickard Nilsson	e2ada42623	syslog-ng: Update from 3.5.6 to 3.6.1 ... Also update the NixOS module, syslog-ng now automatically listens to the systemd journal, so we don't have to set up syslog.socket.	2014-10-27 12:22:22 +01:00
lethalman	40b5aa1d33	Merge pull request #4506 from cstrahan/logstash-config ... logstash service: make log verbosity configurable.	2014-10-26 20:10:03 +01:00
William A. Kennington III	8636d93f54	Merge pull request #4213 from wkennington/master.zfsiso ... [Dont Merge] nixos-iso: Add zfs / btrfs to supportedFilesystems	2014-10-25 18:01:17 -07:00
Aristid Breitkreuz	dabdab8dce	Merge pull request #4640 from lethalman/installer-icons ... kde installer: Add gparted, nixos manual and konsole in the desktop	2014-10-25 16:32:56 +02:00
Eelco Dolstra	f4be4f5e54	Merge remote-tracking branch 'origin/master' into staging	2014-10-24 12:24:13 +02:00
Luca Bruno	9e1ab43459	gnome3: Add cantarell fonts. Closes #4633	2014-10-24 11:50:47 +02:00
Luca Bruno	e553e27f48	kde installer: Add gparted, nixos manual and konsole in the desktop	2014-10-23 18:59:25 +02:00
Vladimír Čunát	2cf17b0802	Merge recent master into staging ... Hydra nixpkgs: ?compare=1156478	2014-10-23 17:40:41 +02:00
Domen Kožar	3b133beb7a	Merge pull request #4553 from ehmry/polipo ... drop permission prestart from polipo service module	2014-10-23 12:51:36 +02:00
Peter Simons	5986bb2199	Merge pull request #4631 from robberer/tmp1 ... passwordFile: update description	2014-10-23 11:36:30 +02:00
Luca Bruno	0927405a37	fontconfig: update 2.10.2 -> 2.11.1. Close #4410, #2050	2014-10-23 10:40:26 +02:00
Longrin Wischnewski	a2c65d447f	passwordFile: update description	2014-10-23 04:52:50 +02:00
Thomas Tuegel	da77d9f409	Merge pull request #4614 from geerds/kde4-plasma-nm ... kde4: Use plasma-nm instead of knetworkmanager	2014-10-22 20:28:36 -05:00
Aristid Breitkreuz	608aeede89	Merge pull request #4597 from ehmry/cjdns ... Cjdns	2014-10-22 20:49:20 +02:00
Ricardo M. Correia	10348a0f2c	grsecurity: Update documentation to mention correct kernels	2014-10-22 16:50:36 +02:00
Jascha Geerds	83ae3042a7	kde4: Use plasma-nm instead of knetworkmanager	2014-10-22 13:27:19 +02:00
aszlig	57aaf3d36e	Merge branch 'nixpart-1.0-preparations'. ... Partially and temporarily addresses NixOS/nixops#228. We now have an up-to-date version of Blivet and a bunch of its dependen- cies as well as the old nixpart 0.4 with all its old and crappy dependencies, which should fix _simple_ partitioning layouts for NixOps. Also, nixpart 1.0 is now marked as broken, because it is not yet released and this branch is more of a preparation and "damage control" in case I shouldn't manage to finish nixpart + nixos-assimilate in time for the next NixOS release.	2014-10-22 08:23:31 +02:00
aszlig	23160383e3	nixos: Add a filesystem module for JFS. ... I'm not using JFS, but this is to mainly make jfsutils available if you have defined a JFS filesystem in your configuration. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-10-22 08:22:57 +02:00
Emery Hemingway	a3338abcfe	cjdns: add peer hostnames to extraHosts, option for external config	2014-10-21 13:16:04 -04:00
Georges Dubus	50be0d5447	Removed the kde4_next nixos module ... Merged its differences into kde4. This commit fixes #4519.	2014-10-21 14:04:28 +02:00
Domen Kožar	14631cec82	nixos: prosody was clashing with seeks unix ids	2014-10-20 17:22:01 +02:00
Jaka Hudoklin	594f354bc7	nixos/graphite: fix grahite api documentation url	2014-10-20 13:32:58 +02:00
Jaka Hudoklin	09c8d909fb	nixos/graphite: update docs, add graphite pager	2014-10-20 13:27:21 +02:00
Eelco Dolstra	a3b873924b	Let the kernel load firmware directly ... Loading firmware via udevd is obsolete. Fixes #4552.	2014-10-20 13:25:00 +02:00
William A. Kennington III	f020a26164	nixos/systemd: Also escape \ characters	2014-10-19 16:34:53 -07:00
Vladimír Čunát	359dd3b8ac	nixos: fix two pipefail problems ... It failed since 3c6efec2c0, i.e. #4453. Now it should "work" the same as before.	2014-10-19 19:29:28 +02:00
Domen Kožar	2fa662c957	systemd: replace @ when generating unit command name	2014-10-19 17:20:37 +02:00
Domen Kožar	0854836fd2	systemd: include name of the unit when generating nix store path	2014-10-19 15:49:55 +02:00
Aristid Breitkreuz	bda39ae4de	remove unused parameter from nixos module that is causing trouble with nixops 1.2	2014-10-19 14:10:28 +02:00
Jaka Hudoklin	988ed87e70	nixos/neo4j: add package option	2014-10-18 13:18:37 +02:00
Franz Pletz	2c321bf296	Add support for global LXC config files	2014-10-18 05:02:39 +02:00
Emery Hemingway	32d6ae7ed9	drop permission prestart from polipo service module ... chowning the cache directory can timeout the service, permissions on this directory should never change without user intervention	2014-10-16 10:57:16 -04:00
Eelco Dolstra	09dc132e04	Merge remote-tracking branch 'origin/master' into staging ... Conflicts: pkgs/development/libraries/poppler/default.nix	2014-10-16 15:16:50 +02:00
Rickard Nilsson	135d677690	nixos/logrotate: Fix spelling mistake	2014-10-16 08:20:43 +02:00
Rickard Nilsson	cdba59d0f2	nixos/syslog-ng: Add option configHeader	2014-10-16 08:14:45 +02:00
Rickard Nilsson	2ffe274486	nixos/logrotate: Specify type for config option	2014-10-15 16:52:50 +02:00
Mathnerd314	938f92e8b2	Fix the driver for qemu ("vesa" -> "modesetting") ... Signed-off-by: Domen Kožar <domen@dev.si>	2014-10-15 12:24:50 +02:00
Domen Kožar	bc015be0f3	fix eval	2014-10-15 12:00:20 +02:00
Lluís Batlle i Rossell	f594033822	nixos nfs: allow setting the lockd ports. ... This helps in setting a fixed firewall open port for NFS lockd. Based on: http://rlworkman.net/howtos/NFS_Firewall_HOWTO (cherry picked from commit b32ca0616ff70795f71995fa79ea508b82f30b3a) Conflicts: nixos/modules/services/network-filesystems/nfsd.nix	2014-10-15 10:59:33 +02:00
Joachim Schiele	13298fcbb9	Merge pull request #4535 from flosse/lua-bitop ... lua-packages: added lua-bitop to add websocket support for prosody	2014-10-15 09:41:32 +02:00
William A. Kennington III	5118dcf4fb	nixos-iso: Add zfs / btrfs to supportedFilesystems	2014-10-14 20:24:43 -07:00
Markus Kohlhase	5308d3284b	prosody: added websocket support	2014-10-15 03:57:00 +02:00
Rickard Nilsson	54a0ac090c	nixos/syslog-ng: Replace option serviceName with listenToJournal. Fix socket activation	2014-10-14 15:38:42 +02:00
Rob Vermaas	8523d0e44c	Dohh ... (cherry picked from commit b7451d91e8ecb70651fd2de81b2ec0faa8173aec)	2014-10-14 11:43:51 +02:00
Rob Vermaas	028807c3a0	amazon-image.nix: Pass --option build-users-group '' to nix tools to make Amazon generation work with nix-1.8+ ... (cherry picked from commit 654eaeb2ca709908b0e6fdcc8eabd3af6b3c0a5d)	2014-10-14 11:40:04 +02:00
Mateusz Kowalczyk	b9c2fe5fd8	Merge pull request #4400 from matejc/seeksservice ... seeks: update and write nixos module	2014-10-13 21:37:11 +01:00
Charles Strahan	dc2fac7c0c	logstash service: make log verbosity configurable.	2014-10-13 15:48:41 -04:00
Michael Raskin	2ef0a17561	Merge pull request #4387 from 1126/refactor-stumpwm ... stumpwm: update and refactoring	2014-10-13 17:50:46 +04:00
Matej Cotman	561d3b3860	seeks: nixos module	2014-10-13 13:10:49 +02:00
Jaka Hudoklin	dd0758ab6b	Merge pull request #4392 from cstrahan/logstash ... logstash service improvements	2014-10-12 23:02:52 +02:00
Joachim Schiele	df95acd13c	Merge pull request #3960 from flosse/prosody-service ... Prosody service	2014-10-11 23:10:05 +02:00
Markus Kohlhase	d86c2c30c5	prosody: packaged as a service ... Conflicts: nixos/modules/misc/ids.nix	2014-10-11 18:53:43 +02:00
William A. Kennington III	a5bed86fa4	zfs: zpool-import service must be wanted to start	2014-10-11 01:53:24 -07:00
Eelco Dolstra	058bf4ccc4	Create a udev rule for /dev/root ... In the installation CD, this ensures that systemd will see a proper udev node for /dev/root. Fixes #4399. Borrowed from http://lists.freedesktop.org/archives/systemd-devel/2014-July/020988.html	2014-10-10 17:18:04 +02:00
William A. Kennington III	362699376a	nixos/network-interfaces: Bond interface configuration must wait for the bond device service ... Also fixes some formatting and removal of slave devices.	2014-10-07 23:07:10 -07:00
Domen Kožar	4941b96f0c	eval fix	2014-10-07 21:46:15 +02:00
Domen Kožar	1992bd1331	Merge pull request #4409 from iElectric/redmine ... Add Redmine package and NixOS Service	2014-10-07 13:41:46 +02:00
Shea Levy	3432414808	Merge branch 'nixos-cronfiles' of git://github.com/rickynils/nixpkgs ... nixos: Add option services.cron.cronFiles	2014-10-07 05:59:03 -04:00
Domen Kožar	b4a335cd59	nixos: add redmine service	2014-10-07 10:55:50 +02:00
Eelco Dolstra	a85dcf4a00	Merge remote-tracking branch 'origin/master' into staging ... Conflicts: pkgs/development/libraries/libav/default.nix pkgs/shells/bash/bash-4.2-patches.nix pkgs/stdenv/generic/default.nix	2014-10-07 00:09:37 +02:00
wmertens	36641d9e69	setup-etc.pl: Fail when symlink/rename fails ... When atomicSymlink can't symlink or rename, it should return failure. This is then handled with `... or die` and `... or warn`	2014-10-06 08:00:11 +02:00
Charles Strahan	fc7098abf7	logstash service improvements ... * add logstash-contrib plugins package * add additional options to the logstash service	2014-10-05 21:53:05 -04:00
Bjørn Forsman	fca51849ec	nixos/lighttpd: add services.lighttpd.enableModules option ... This option makes the coupling between lighttpd and its sub-services more "loose". While the option is a list, its purpose is to provide a "set" of needed modules to load for lighttpd to function correctly with its config. The NixOS lighttpd module ensures that lighttpd modules are loaded no more than once (because lighttpd dislikes that), and in the correct order. Also add an assertion that all modules listed in .enableModules are valid.	2014-10-05 19:15:19 +02:00
Vladimír Čunát	e4436ad841	FONTCONFIG_FILE: remove setters to /etc/fonts/fonts.conf ... Any reasonably new version of fontconfig does search that path by default, and setting this globally causes problems, as 2.10 and 2.11 need incompatible configs. Tested: slim+xfce desktop, chrootenv-ed steam. I have no idea why we were setting the global variable; e.g., neither Fedora nor Ubuntu does that.	2014-10-05 17:05:27 +02:00
_1126	7536d41287	stumpwm: update and refactoring ... This commit updates the stumpwm to version 0.9.8. Futhermore, it refactors the expression quite a lot: * stumpwm has been moved from lisp modules to window-managers. * stumpwm has been added to the window managers NixOS knows about, this enables the user to add stumpwm as a default window manager in his NixOS configuration like with Xmonad or i3. * the package has been split into stumpwm and stumpwmContrib. This is due to the fact that development of stumpwm and its extension modules has been split into two repositories. As of today, the release is the last one before this split. This split into two packages only reflect those upcoming upstream changes already. It is planned to make the addition of the extension modules voluntarily, like with Xmonads option "enableContribAndExtras". Furthermore it might be possible to add an option to compile stumpwm with clisp instead of sbcl.	2014-10-05 14:50:08 +02:00
William A. Kennington III	f1572d37c3	network-interfaces: Bonding fixes	2014-10-04 18:37:00 -07:00
William A. Kennington III	93eb325004	network-interface: Add extra bond options	2014-10-04 17:59:10 -07:00
Eelco Dolstra	97220c973f	Replace hasAttr/getAttr calls with the ? and . operators ... For NixOS evaluation, this gives a ~21% reduction in the number of values allocated and a ~4% speedup. It's also more readable.	2014-10-05 01:11:06 +02:00
Nathaniel Baxter	0c8ad65560	pulseaudio: Add support for 32bit alsa apps on 64bit systems.	2014-10-04 14:48:58 +02:00
Nathaniel Baxter	ab8ef63ff4	alsa: Add multilib plugin support via "libs" entry in asound config. ... alsa: Remove unused $ALSA_PLUGIN_DIRS support.	2014-10-04 14:48:58 +02:00
Austin Seipp	8cc3460a87	Merge pull request #4294 from daogames/tb/psql-port-fix ... postgresql: use configured port when invoking psql	2014-10-01 18:56:39 -05:00
Rickard Nilsson	57721a2888	nixos: Add option services.cron.cronFiles ... This allows you to configure extra files that should be appended to your crontab. Implemented by writing to /etc/crontab when the cron service starts. Would be nicer to use a cron that supports /etc/cron.d but that would require us to patch vixie-cron.	2014-10-01 17:33:38 +02:00
Shea Levy	f5aaefbb6c	More pkgs.lib -> lib fixes	2014-09-29 09:45:59 -04:00
Vladimír Čunát	4bcae6dc96	merge #4265: add KDE 4.14.1	2014-09-27 18:15:00 +02:00
Tino Breddin	eb7bbb4862	postgresql: use configured port when invoking psql	2014-09-27 14:37:11 +02:00
Jaka Hudoklin	ff8f23ab26	Merge pull request #4280 from wkennington/master.consul ... nixos/consul: Add module	2014-09-27 07:00:39 +02:00
Attila Sztupak	90a326eecd	crashplan: nixos module for backup service	2014-09-26 15:33:36 +01:00
William A. Kennington III	36f9b9c284	nixos/consul: Add module	2014-09-26 03:25:14 -07:00
Matej Cotman	5e18182a30	mailpile: add module	2014-09-26 10:49:09 +02:00
William A. Kennington III	9a90ce0bf7	nixos/ids: Add consul	2014-09-26 01:44:14 -07:00
William A. Kennington III	d084245e74	iproute: Fix regressions introduced in 3.16.0 ... 3.16.0 introduced a regression where vlan and veth devices could not be created due to a check in the code for existing devices. This applies the upstream patch which fixes the issue. Additionally, this corrects the nixos network-interfaces task which now needs to specify the name parameter when adding links.	2014-09-26 00:45:38 -07:00
ambrop7@gmail.com	bea503ec36	kde: Allow kde_next as a desktop environment ... This is the same as 93fda9e353	2014-09-24 23:50:23 +02:00
Bjørn Forsman	9ce2cca6aa	nixos: mark services.samba.defaultShare as obsolete ... It was removed in 753d9d4e4f ("nixos/samba: remove services.samba.defaultShare option").	2014-09-24 23:07:04 +02:00
Franz Pletz	30690d05bc	Add cryptodisk support for Grub ... Closes #4193	2014-09-24 21:48:55 +01:00
Bjørn Forsman	3ebe3df4d0	nixos/samba: add services.samba.configText option ... The .configText option is for providing verbatim content of smb.conf. I'm adding this because I cannot seem to find any other way to override (with mkForce) the generated smb.conf with the current samba module. All attempts ends with errors ("duplicate entry samba/smb.conf").	2014-09-24 18:31:20 +02:00
Bjørn Forsman	753d9d4e4f	nixos/samba: remove services.samba.defaultShare option ... It's not that difficult to define shares using standard samba config file syntax, so why do we need the semi-configurable .defaultShare option? Also: * It uses /home/smbd and I think /home should be reserved for real human users. * If enabled, it breaks the assumption that .extraConfig continues in the [global] section. Without .defaultShare there is no need for the "smbguest" user and group either, mark them as unused.	2014-09-24 18:31:20 +02:00
Eelco Dolstra	38d57b4a94	Merge pull request #4244 from abbradar/resume ... Replace resumeDevice with autodetection of hibernation partition	2014-09-24 18:05:53 +02:00
Nikolay Amiantov	ba31749458	stage-1: Use udevadm instead of blkid	2014-09-24 20:00:51 +04:00
Nikolay Amiantov	18bd9917ed	stage-1: autodetect resume swap partitions	2014-09-24 18:51:44 +04:00
Emil Rangden	c7b73b2b12	include thermald service in module list ... Closes #4230	2014-09-23 22:41:24 +01:00
Emery Hemingway	61f0d9b251	cjdns: update from 20140919 20140922 ... package installs to .../bin fix service module to look in .../bin Closes #4240	2014-09-23 22:30:53 +01:00
William A. Kennington III	13ca3708b5	Fix #4236	2014-09-23 10:18:05 -07:00
Rickard Nilsson	5be23fe888	nixos/install-grub: Don't run GrubFs(/nix/store) if copyKernels is true	2014-09-23 14:34:44 +02:00
Luca Bruno	8ef7b83ca7	Fix nixos-rebuild evaluation	2014-09-23 14:01:25 +02:00
Mateusz Kowalczyk	cd5f4e7f85	Merge pull request #4211 from ehmry/cpuminer-cryptonight ... Cpuminer cryptonight	2014-09-22 19:26:35 +01:00
Emery Hemingway	c8109488b3	cpuminer-cryptonight: new service module	2014-09-22 13:37:47 -04:00
Rickard Nilsson	a59df1e567	nixos: Add also group.members to group	2014-09-22 19:18:08 +02:00
Ben Ford	06818c5cb2	Change service to systemd	2014-09-22 12:09:53 +01:00
Mateusz Kowalczyk	1ffe41b34f	Merge branch 'dev/ati-drivers' of https://github.com/nathanielbaxter/nixpkgs	2014-09-22 01:27:00 +01:00
AndersonTorres	9c25f350a8	Ratpoison: updated for 1.4.8 ... Also, adding the infamous service file Closes #4192	2014-09-21 20:05:12 +01:00
Mateusz Kowalczyk	7fedb1baa6	Try fixing #4084	2014-09-21 07:04:01 +01:00
Dmitry Malikov	08cc8da65a	mpd service: add network.{host,port} options ... Closes #4084	2014-09-21 01:43:06 +01:00
Ronny Esterluss	473ffd9eae	extended gitolite service to take custom hooks ... Closes #4160	2014-09-21 00:08:40 +01:00
AndersonTorres	90fcd66599	AfterStep (version 2.2.12): New Package ... AfterStep is a beautiful window manager, inspired by NEXTStep interface Closes #4177	2014-09-21 00:03:44 +01:00
AndersonTorres	c6f28f988c	Windowmaker: adding system service file, and a long description ... Closes #4066	2014-09-20 23:36:07 +01:00
Domen Kožar	2247f3a8d3	Merge pull request #4168 from lostdj/ltp/master/btsyncfix ... bittorrentsync: fix storage_path	2014-09-20 10:53:57 +02:00
lostdj	f02d4ec9ed	bittorrentsync: fix storage_path. ... If this path is a symlink, btsync won't be able to read it if it's not ending with "/".	2014-09-19 18:19:04 +04:00
Eelco Dolstra	91ec6e0d90	Merge remote-tracking branch 'origin/master' into staging	2014-09-18 22:28:35 +02:00
William A. Kennington III	ae195727b7	nixos/nat: Don't flush tables, create subchains for autogenerated rules	2014-09-18 11:28:58 -07:00
Eelco Dolstra	0de982d75b	httpd: Add option for specifying robots.txt	2014-09-18 19:05:26 +02:00
Eelco Dolstra	837a0c05e5	httpd: Don't emit robots.txt if there are no robots entries	2014-09-18 18:48:28 +02:00
Eelco Dolstra	ec4f38c56f	Manual: Remove some option defaults that refer to store paths ... Option defaults should not refer to store paths, because they cause the manual to be rebuilt gratuitously. It's especially bad to refer to a highly variable path like a computed configuration file.	2014-09-18 16:21:26 +02:00
Rickard Nilsson	8fc777ffd6	syslog-ng module: Add package option	2014-09-17 19:48:51 +02:00
Jaka Hudoklin	9c3c7a75d3	collectd: add pidFile option, change default pid to /var/run/collectd.pid	2014-09-17 19:21:05 +02:00
Jaka Hudoklin	1cdb6cfb00	nixos/graphite: add package option to graphiteApi	2014-09-17 18:33:51 +02:00
Jaka Hudoklin	75aaeca9d2	nixos/graphite: add seyren service, graphite alerting dashboard	2014-09-17 18:33:50 +02:00
Jaka Hudoklin	c396ee9912	nixos: add collectd module	2014-09-17 18:33:50 +02:00
William A. Kennington III	ec9c4143a7	nixos/firewall: Cleanup in case reload fails	2014-09-16 15:51:57 -07:00
lethalman	3224b32e64	Merge pull request #4101 from ts468/e19 ... Add package: Enlightenment E19!!!!	2014-09-16 16:13:56 +02:00
Rickard Nilsson	66bbbc205d	nixos/nfs: Fix configuration merge	2014-09-16 13:53:18 +02:00
Jaka Hudoklin	9bd66b24d9	nixos/graphiteApi: add example config for influxdb backend	2014-09-16 10:41:56 +02:00
Jaka Hudoklin	996da030b6	nixos/mongodb: service fixes ... - Log to syslog, so journal picks-up logs - Start as foring service, so systemd will wait for service to start - Add extraConfig option	2014-09-16 10:28:04 +02:00
Jaka Hudoklin	271e0f7488	nixos/graphite: add host and port options for graphiteApi	2014-09-16 10:28:04 +02:00
William A. Kennington III	1321fd175d	nixos/nat: Leverage firewall module	2014-09-15 21:31:27 -07:00
William A. Kennington III	6a43d51291	nixos/firewall: Support extraStopCommands	2014-09-15 21:31:26 -07:00
William A. Kennington III	43c2bc0f8c	Merge pull request #4108 from wkennington/master.firewall ... Firewall: Don't allow traffic during nixos-switch / reload	2014-09-15 20:42:40 -07:00
William A. Kennington III	fd7b9b4291	nixos/firewall: Don't allow traffic during reload	2014-09-15 20:40:16 -07:00
William A. Kennington III	4d193b7262	systemd: Support reload scripts	2014-09-15 20:04:49 -07:00
Thomas Strobel	1613d6cca6	Add package: Enlightenment E19! ... Wayland desktop shell is not enabled, yet.	2014-09-15 23:34:28 +02:00
Bjørn Forsman	0bfd27535f	nixos/libvirtd: refresh LXC emulator path on startup ... This fixes the issue when the LXC emulator binary is garbage collected and breaks libvirtd containers, because libvirtd XML file still refers to GC'ed store path. We already have a fix for QEMU, this commit extends the fix to cover LXC too.	2014-09-15 23:03:20 +02:00
Michael Raskin	d05684be21	Merge pull request #3694 from matejc/cmst ... new package: cmst - qt gui for connman	2014-09-15 23:12:01 +04:00
Aristid Breitkreuz	69c95e3fdf	Merge pull request #4041 from nbp/disable-fuppes ... Disable fuppes module	2014-09-14 22:29:30 +02:00
Vladimír Čunát	d957b4bd78	Merge recent master into staging ... Hydra nixpkgs: ?compare=1151601	2014-09-13 21:48:29 +02:00
Jaka Hudoklin	d6f9878fbf	nixos/elasticsearch: wait for start	2014-09-13 02:21:31 +02:00
Jaka Hudoklin	f7ba3d833f	nixos/znc: fix module, createUser option does not exist anymore	2014-09-13 02:20:32 +02:00
Jaka Hudoklin	74122464da	nixos/influxdb: wait for start	2014-09-13 02:19:39 +02:00
Jaka Hudoklin	26fd945151	nixos/rabbitmq: wait for start	2014-09-13 02:16:53 +02:00
Jaka Hudoklin	a23e4997d3	Merge pull request #4034 from offlinehacker/graphiteApi ... nixos: add graphite api to graphite functionality	2014-09-13 00:05:36 +00:00
Bjørn Forsman	ec59929c9f	nixos/jekins: add services.jenkins.extraGroups option ... This makes it easy to give jenkins extra privileges by adding group memberships. Use with care :-)	2014-09-12 15:25:15 +02:00
Matej Cotman	99a46a0eca	set network manager as default true	2014-09-12 13:52:26 +02:00
William A. Kennington III	bab5efd237	nixos/ssh: Allow user to configure the package that provides ssh/sshd	2014-09-11 22:07:39 -07:00
Nicolas B. Pierron	ca02c60cb8	Disable fuppes module ... fuppes has not been compiling for a long moment, and the ffmpeg version on which it depends is no longer listed in nixpkgs.	2014-09-11 23:46:20 +02:00
Bjørn Forsman	a44de69d06	nixos/tomcat: make package version configurable	2014-09-11 22:32:16 +02:00
aszlig	d394d095ab	containers: Don't descend into mounts on destroy. ... This tells the sad tale of @the-kenny who had bind-mounted his home directory into a container. After doing `nixos-container destroy` he discovered that his home directory went from "full of precious data" to "no more data". We want to avoid having similar sad tales in the future, so this now also check this in the containers VM test. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-09-11 18:12:35 +02:00
aszlig	859f049d1b	containers: Remove check for var/lib/startup-done. ... Fixes a leftover from 330fadb706. We're using systemd dbus notifications now and this leftover caused the startup notification to fail. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-09-11 18:12:35 +02:00
Jaka Hudoklin	bc6b180d90	nixos/statsd: add support for external backends, fix a few options	2014-09-11 18:11:16 +02:00
Jaka Hudoklin	19ea435cf8	nixos: add graphite api to graphite functionality	2014-09-11 18:09:40 +02:00
Eelco Dolstra	05163e99db	nixos-rebuild: Don't pass -K by default	2014-09-10 14:57:26 +02:00
Eelco Dolstra	624efa4224	Support users-groups.json referring to store paths ... Fixes #4016.	2014-09-10 11:50:45 +02:00
Luca Bruno	ac724e7bbc	Added TORQUE package and nixos module ... Resource management system for submitting and controlling jobs on supercomputers, clusters, and grids http://www.adaptivecomputing.com/products/open-source/torque	2014-09-09 18:24:46 +02:00
Bjørn Forsman	e84b0c94f0	nixos/jekins: rename option services.jenkins.{extraOpts => extraOptions} ... I noticed "extraOptions" is infinitely more used than "extraOpts" in NixOS.	2014-09-09 17:40:53 +02:00
Bjørn Forsman	cb614ef4ad	nixos/jenkins: remove use of types.string (it's deprecated)	2014-09-09 17:36:25 +02:00
Bjørn Forsman	cf7b782ea9	nixos/jenkins: add services.jenkins.extraOpts option ... Allows passing extra command line arguments to Jenkins.	2014-09-09 17:36:25 +02:00
Luca Bruno	e4e39f26ba	Change default from gnome 3.10 to gnome 3.12	2014-09-08 18:35:45 +02:00
Eelco Dolstra	1a9c27c092	Typo	2014-09-08 13:58:44 +02:00
Eelco Dolstra	152ae27aac	Merge remote-tracking branch 'origin/systemd-216' into staging	2014-09-08 13:53:33 +02:00
Luca Bruno	dfa6f03ea3	Do not assert absolute path for nodev grub device. Closes #3996	2014-09-08 12:00:34 +02:00
Eelco Dolstra	585983bc95	Merge remote-tracking branch 'origin/staging' ... Conflicts: pkgs/applications/version-management/subversion/default.nix	2014-09-08 11:42:09 +02:00
Nicolas Pierron	becde6132b	Replace environment.profileVariables by environment.profileRelativeEnvVars	2014-09-07 19:41:00 +02:00
Nicolas B. Pierron	a4e60ebacf	Merge pull request #3811 from nbp/options-json ... Export the list of options to XML & JSON, such that external tools can use it.	2014-09-07 10:39:03 -07:00
Igor Pashev	5c6e4e7433	Updated Mediawiki to 1.23.3 ... Removed mediawiki-postgresql-fixes.patch (fixed upstream)	2014-09-07 17:50:51 +02:00
Nathaniel Baxter	fb9a6221b6	ati_unfree: Update nixos-manual for AMD driver support	2014-09-07 12:42:32 +10:00
Nathaniel Baxter	45f4b8b3ad	ati_unfree: Towards using ati unfree 32bit binary libs	2014-09-07 12:40:40 +10:00
Nathaniel Baxter	c16874c4c0	ati_unfree: Create a nixos module for the ati_unfree x11 driver and ... blacklist the radeon driver when ati_unfree is installed.	2014-09-07 12:40:32 +10:00
Rob Vermaas	f14d1d76bb	Azure: Fix authorized_keys	2014-09-06 22:54:15 +02:00
Rob Vermaas	e9c1fb0c89	Azure: Mount metadata 'CD' on /metadata	2014-09-06 21:53:10 +02:00
Rob Vermaas	81046b9e5d	Initial configuration + image generation script for Micro$oft Azure. Work in progress for #3986.	2014-09-06 21:37:46 +02:00
Domen Kožar	18d9904433	nixos-option: fixes as suggested by @nbp	2014-09-06 20:59:14 +02:00
Vladimír Čunát	06fea81c6e	Merge recent master into staging ... Hydra: ?compare=1150594	2014-09-06 16:52:45 +02:00
Aristid Breitkreuz	c3fe942a57	start dhcpcd after network-interfaces	2014-09-06 13:52:09 +02:00
Aristid Breitkreuz	958c1c68c2	Merge pull request #3977 from manveru/diod ... diod: fix service	2014-09-06 12:31:00 +02:00
Thomas Tuegel	53fa517176	Merge pull request #3961 from wkennington/master.grub ... nixos/install-grub: Read correct mountpoints	2014-09-05 20:01:08 -05:00
Bjørn Forsman	db86b03b1c	nixos/apcupsd: add systemd documentation hint ... systemctl has the ability to display a list of documentation URLs in the output of "systemctl status <service-name>".	2014-09-06 00:14:42 +02:00
Bjørn Forsman	b7a889759d	nixos/fail2ban: don't use types.string (it's deprecated) ... I'm not really sure which one of types.lines or types.str that fit better, but I'm going for types.lines because it behaves more like the current type (i.e. have the ability to merge).	2014-09-05 22:56:30 +02:00
Luca Bruno	718106e958	Fix initrd after recent busybox upgrades	2014-09-05 18:42:53 +02:00
Eelco Dolstra	20be024d1b	Fix subuid/subgid generation ... I don't think we need to filter users with an unset uid, because mkSubuidEntry/mkSubgidEntry don't references the uid.	2014-09-05 17:40:09 +02:00
Eelco Dolstra	59edfd61ad	Increase systemd timeout on Jenkins and Munin tests ... These were timing out a lot. http://hydra.nixos.org/build/13991108 http://hydra.nixos.org/build/13991107	2014-09-05 15:50:55 +02:00
Eelco Dolstra	b0855d59a1	Improve option descriptions a bit	2014-09-05 15:28:24 +02:00
Eelco Dolstra	bb9ee6a13f	Remove some setuid wrappers for non-standard programs	2014-09-05 14:46:36 +02:00
Eelco Dolstra	cd7129a037	Revert "nixos: add setuid wrappers for some networked filesystems' helpers" ... This reverts commit 26a4001a98. It breaks the NFS test: http://hydra.nixos.org/build/13943148 Also, having more setuid programs is a bad thing security-wise.	2014-09-05 14:43:11 +02:00
Michael Fellinger	00887dc3f8	diod: fix service	2014-09-05 14:39:55 +02:00
Eelco Dolstra	1f7c775910	Remove unrar from the installation CD since it's unfree	2014-09-05 14:25:17 +02:00
aszlig	e8c4fde22d	nixos/nsd: Improve support for journald/systemd. ... Don't fork into the background and just log to stderr. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-09-05 02:54:39 +02:00
aszlig	141cb70d5c	nixos/networking: Fix typo in ipv6prefixLength. ... Within the module it's referenced with an uppercase "P" and ipv6Address also begins with an uppercase "A" after the "6", so let's make it consistent. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-09-05 02:54:39 +02:00
aszlig	6386df1645	nixos/nsd: Fix indentation/coding style. ... For Nix, we indent using two spaces, but in this module somehow 4 spaces were snuck in. Other than that, remoteControl and ratelimit are just nested attribute sets, so we don't need to make another submodule type for no particular reason. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-09-05 02:54:39 +02:00
Michael Fellinger	d62e848cc9	virtualbox: vboxusers may use /dev/vboxnetctl	2014-09-04 22:44:38 +02:00
William A. Kennington III	c6bd6d6d89	nixos/grub: Assert devices should be absolute paths	2014-09-04 10:31:39 -07:00
William A. Kennington III	f73f7ccc6e	nixos/install-grub: Read correct mountpoints	2014-09-04 10:31:39 -07:00
Michael Raskin	a3b9bf6c87	Merge pull request #3653 from iyzsong/nixos/xfce4-mixer ... nixos: don't set variables for gstreamer-0.10 (fix #3652)	2014-09-04 20:54:57 +04:00
Michael Raskin	1a0d437bf3	Merge pull request #3944 from joshcartwright/gummiboot-timeout-fix ... gummiboot/builder: fix timeout setting when unset	2014-09-04 20:17:44 +04:00
Luca Bruno	2ba523df24	nixos nat: add description to forwardPorts	2014-09-04 11:33:08 +02:00
Luca Bruno	e6ab680cbf	nixos nat: add type for sourcePort and destination of forwardPorts	2014-09-04 10:26:33 +02:00
Luca Bruno	a1ded5c20e	nixos-install: use absolute path when running passwd in chroot	2014-09-03 23:12:40 +02:00
Luca Bruno	59ad713288	nixos-install: set umask 0022	2014-09-03 23:12:40 +02:00
Domen Kožar	2e97c06999	nixos-option: enable all flags by default and make output a bit readable cc @nbp	2014-09-03 22:08:25 +02:00
Jaka Hudoklin	43d9f92c82	nixos: docker, create docker group	2014-09-03 21:23:30 +02:00
Michael Raskin	4155121069	Merge pull request #3926 from lethalman/fwdports ... nixos/nat: add forwardPorts for external->internal DNAT	2014-09-03 21:54:37 +04:00
Nathan Bijnens	00ad134284	Mesos: services	2014-09-03 19:21:49 +02:00
Michael Raskin	ab023cc559	Merge pull request #3843 from wkennington/master.iffix ... nixos/network-interfaces: Sanitize sys-subsystem device names	2014-09-03 21:15:46 +04:00
Eelco Dolstra	65ef435d7b	Merge pull request #3949 from wkennington/master.grub ... grub2: Add localizations	2014-09-03 19:06:26 +02:00
William A. Kennington III	eee8fd89b3	nixos/install-grub: Correct store path for search	2014-09-03 10:01:00 -07:00
William A. Kennington III	1b63a1b75e	nixos/iso-image: Fix grub-mkimage requiring a prefix	2014-09-03 09:26:44 -07:00
Michael Raskin	3e841ef642	Fixing comment case	2014-09-03 20:03:15 +04:00
Eelco Dolstra	46623bfc15	Remove copy-com.nix from the module list ... This is proprietary software, and NixOS is intended as a free software distribution. We currently don't have a mechanism like allowUnfree for NixOS modules, so it's better to leave out modules for such packages. Of couse, they can still be activated by doing: imports = [ <nixpkgs/nixos/services/networking/copy-com.nix ];	2014-09-03 17:09:00 +02:00
Michael Raskin	c4d85240e5	Merge pull request #3267 from Mathnerd314/cpufreq_noise ... Remove non-cpufreq_* modules since they are loaded by udev	2014-09-03 18:46:01 +04:00
Michael Raskin	94a131b95a	Fix forgotten unit entry	2014-09-03 15:47:53 +04:00
Strahinja Popovic	fe3f7716f0	Enabled access to binaries of needed tools, and worker daemons can be enabled for phabricator #3306	2014-09-03 15:46:59 +04:00
Rickard Nilsson	66ee6e03e7	pulseaudio: Use group audio instead of pulse-access	2014-09-03 13:24:47 +02:00
Sergey Mironov	2b72edad9b	yandex-disk: fix the url; introduce systemd.service #2228	2014-09-03 12:36:29 +04:00
Rickard Nilsson	56102642fa	pulseaudio: Add pulse-access group, controlling access to the system-wide PA daemon	2014-09-03 10:25:36 +02:00
Cray Elliott	4efc03f46f	Delete nixos/modules/module-list.nix.orig, extraneous file	2014-09-03 01:20:56 -07:00
Michael Raskin	d1ae15b680	Merge pull request #3804 from ehmry/unbound ... unbound: run in chroot	2014-09-03 11:45:20 +04:00
Michael Raskin	7a47d21aec	Merge pull request #3943 from wkennington/master.grub ... Fix grub zfs build and typo	2014-09-03 11:39:35 +04:00
William A. Kennington III	d48a7a17df	nixos/network-interfaces: Sanitize sys-subsystem device names ... Currently, nixos will allow for interface names with special characters such as the hyphen to be used. This presents a problem when using systemd device names as the namespace paths are separated using hyphens. Within systemd, if a device name has a hyphen it should be replaced with the escape sequence \x2d. This patch sanitizes all interface names before they are used in a systemd device string.	2014-09-03 00:31:38 -07:00
Michael Raskin	c3e7588367	Merge pull request #3747 from wkennington/master.explicit ... nixos/network-interfaces: Allow explicit virtual interface type setting	2014-09-03 11:25:28 +04:00
Nathan Bijnens	33a3f76ee4	Copy.com: client #3617	2014-09-03 11:31:51 +04:00
Michael Raskin	8e968b18e4	Merge pull request #2952 from edwtjo/cups-syswide-clientconf ... CUPS system wide client side remote printing.	2014-09-03 10:51:49 +04:00
Michael Raskin	a82c623c26	Merge pull request #3940 from wkennington/master.dnsmasq ... nixos/dnsmasq: Fix regressions during the systemd update	2014-09-03 10:06:26 +04:00
Josh Cartwright	626a666da5	gummiboot/builder: fix timeout setting when unset ... The gummiboot-builder.py script is expecting the @timeout@ metavar to be substituted for either an empty string (in the case where a user has left the timeout unset) or the actual value set in the system configuration. However, the config.boot.loader.gummiboot.timeout option defaults to 'null', and due to the way pkgs.substituteAll works, the substitution for '@timeout@' is _never_ set to the empty string. This causes the builder script to put a bogus line into /boot/loader/loader.conf: timeout @timeout@ Fix this by explicitly setting 'timeout' to the empty string when it's unset in the system configuration. Signed-off-by: Josh Cartwright <joshc@eso.teric.us>	2014-09-03 05:36:45 +02:00
William A. Kennington III	ccc758f414	nixos/install-grub: Fix typo	2014-09-02 18:56:53 -07:00
Michael Fellinger	e805c78ed3	diod: remove redundant default doc	2014-09-03 02:55:00 +02:00
Michael Fellinger	0bf05a02f4	diod: add systemd service and config	2014-09-03 02:30:04 +02:00
William A. Kennington III	9659d0f4fb	nixos/dnsmasq: Fix regressions during the systemd update	2014-09-02 17:23:55 -07:00
William A. Kennington III	961e9867b3	nixos/generate-config: Only add store search path when kernels are not copied	2014-09-02 09:16:13 -07:00
William A. Kennington III	9467937639	nixos/install-grub: Only check for /nix to be the mountPoint for the store	2014-09-02 09:16:13 -07:00
William A. Kennington III	61908bdd80	nixos/install-grub: Always copy kernels for different devices	2014-09-02 09:16:13 -07:00
William A. Kennington III	87b6232f3a	nixos/generate-config: Don't interpret btrfs subvols as bind mounts	2014-09-02 09:16:13 -07:00
William A. Kennington III	01ab1d57a3	nixos/install-grub: Detect nested btrfs subvolumes	2014-09-02 09:16:13 -07:00
William A. Kennington III	7fae423522	nixos/generate-config: Support detecting nested subvolumes	2014-09-02 09:16:13 -07:00
William A. Kennington III	0b66483c9a	nixos/install-grub: Store path should be /nix/store not /nix	2014-09-02 09:16:13 -07:00
William A. Kennington III	36614ff3e2	Revert "Revert "Merge pull request #2449 from wkennington/master.grub"" ... This reverts commit 94205f5f21. Conflicts: nixos/modules/system/boot/loader/grub/install-grub.pl	2014-09-02 09:16:13 -07:00
Eelco Dolstra	3d821c068a	Merge remote-tracking branch 'origin/master' into systemd-216	2014-09-02 14:43:27 +02:00
Peter Simons	1c0d15b90e	Merge branch 'origin/master' into staging. ... Conflicts: pkgs/development/libraries/ffmpeg/2.x.nix pkgs/development/libraries/serf/default.nix	2014-09-02 12:31:03 +02:00
lethalman	a3e91bbfa3	Merge pull request #3901 from vlstill/ssh_ip ... Allow binding sshd to specified addresses.	2014-09-02 10:38:16 +02:00
Vladimir Still	13bbce96c3	sshd: Fix typo in assetion.	2014-09-02 10:06:04 +02:00
Michael Raskin	3ad91106f1	Merge pull request #3704 from sfultong/upstream-master ... tomcat: update to upstream master	2014-09-02 02:09:18 +04:00
Michael Raskin	fa55a99701	Load EHCI befor OHCI and UHCI; from patch by Mathnerd314	2014-09-02 02:12:46 +04:00
Chris Farmiloe	08534000a4	Ensure libvirtd is started after vswitch and add ability to configure how libvirtd guests are shutdown	2014-09-02 01:48:50 +04:00
Chris Farmiloe	76a4de68c1	formatting/retab	2014-09-02 01:48:50 +04:00
Chris Farmiloe	8ef11bb0ee	add openvswitch package + basic nixos module to enable it	2014-09-02 01:48:50 +04:00
Michael Raskin	2a1a814e53	Make console-getty only used inside container by default	2014-09-02 01:36:10 +04:00
Michael Raskin	d140851472	Merge pull request #3779 from offlinehacker/docker ... full nixos inside docker	2014-09-02 01:04:05 +04:00
Michael Raskin	419031bcfc	Merge pull request #2644 from lethalman/pam_tally ... pam: Add logFailures option for adding pam_tally to su	2014-09-02 00:58:30 +04:00
Vladimir Still	a2394f09c7	sshd: Add note about listening on port 22 to listenAddresses.	2014-09-01 22:56:35 +02:00
Vladimir Still	ac39d839c3	sshd: Add note about firewall and listenAddresses.	2014-09-01 22:56:35 +02:00
Vladimir Still	e12337156c	sshd: Allow to specify ListenAddress.	2014-09-01 22:56:35 +02:00
Michael Raskin	5bbeba3d97	Merge pull request #3911 from vlstill/nfs-port_pullreq ... nfsd: Make it possible to fix rpc.{mountd,statd,lockd} ports.	2014-09-02 00:53:52 +04:00
Michael Raskin	a6dfb4dc28	Merge pull request #3241 from ehmry/cjdns ... cjdns declarative configuration	2014-09-02 00:53:18 +04:00
Michael Raskin	8c167b22a5	Merge pull request #3918 from robberer/pkgs/clamav ... clamav: update to version 0.98.4 and run freshclam in daemon mode	2014-09-02 00:46:25 +04:00
Luca Bruno	b21ac60290	nixos/nat: add forwardPorts for external->internal DNAT	2014-09-01 22:31:56 +02:00
Luca Bruno	31b7cae018	nixos/znc: fix immutable config. ... Fix references to coreutils echo and rm. Make config writable even if immutable because of https://github.com/znc/znc/blob/master/src/znc.cpp#L964 .	2014-09-01 16:21:12 +02:00
aszlig	29f4642284	nixos: Add new service for OpenNTPd. ... This conflicts with the existing reference NTP daemon, so we're using services.ntp.enable = mkForce false here to make sure both services aren't enabled in par. I was already trying to merge the module with services.ntp, but it would have been quite a mess with a bunch of conditions on the package name. They both have a bit in common if it comes to the configuration files, but differ in handling of the state dir (for example, OpenNTPd doesn't allow it to be owned by anything other than root). Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-09-01 16:07:28 +02:00
Longrin Wischnewski	28fd7ea190	clamav: run freshclam in daemon mode	2014-09-01 09:41:19 +02:00
Emery Hemingway	f5b4eacad6	uhub: initial service expression	2014-09-01 10:53:19 +04:00
Michael Raskin	a49caa77e7	Add IDs for uhub service	2014-09-01 10:53:19 +04:00
Michael Raskin	9e3d1b1a8f	Merge pull request #3908 from wkennington/master.ip ... Reapply the multi-ip code	2014-09-01 10:28:54 +04:00
Jan Malakhovski	26a4001a98	nixos: add setuid wrappers for some networked filesystems' helpers ... So that `user` mount option would work allowing normal users to mount and umount stuff marked with it in `fileSystems.<name>.options`.	2014-09-01 10:33:48 +04:00
Jan Malakhovski	8c9b6d932a	nixos: add dhcpcd.persistent option	2014-09-01 10:33:48 +04:00
Jan Malakhovski	99243a5c51	nixos: add atftpd service	2014-09-01 10:33:48 +04:00
Jan Malakhovski	8f50d803ef	nixos: add support for mkhomedir in PAM	2014-09-01 10:33:48 +04:00
Emery Hemingway	f60ac82cac	cjdns: new declarative service expression ... systemd service wants network-interfaces.target rather than network.target assertion on config.networking.enableIPv6	2014-08-31 18:14:16 -04:00
Vladimir Still	a735c308b6	nfsd: Make it possible to fix rpc.{mountd,statd,lockd} ports.	2014-08-31 22:00:16 +02:00
Vladimir Still	5588ad472b	vpnc: Fix building of system config.	2014-08-31 21:39:03 +02:00
Sam Griffin	ec8e4d23f1	cleanup per Lethalman's suggestions	2014-08-31 13:01:20 -04:00
William A. Kennington III	02ecc98e87	nixos/network-interfaces: Fix bug in converting old ipAddresses	2014-08-31 09:47:18 -07:00
William A. Kennington III	3d037ebb94	Revert "Revert "Merge pull request #3182 from wkennington/master.ipv6"" ... This reverts commit ea8910652f.	2014-08-31 09:46:16 -07:00
Sam Griffin	0667d67c95	Adding vpnc configuration module	2014-08-31 12:44:13 -04:00
Longrin Wischnewski	196c6260be	grub: fix grub merge error	2014-08-31 12:29:13 +02:00
Rob Vermaas	ea8910652f	Revert "Merge pull request #3182 from wkennington/master.ipv6" ... This reverts commit b23fd65854, reversing changes made to 43654cba2c.	2014-08-31 10:58:54 +02:00
Michael Raskin	94205f5f21	Revert "Merge pull request #2449 from wkennington/master.grub" ... This reverts commit 469f22d717, reversing changes made to 0078bc5d8f. Conflicts: nixos/modules/installer/tools/nixos-generate-config.pl nixos/modules/system/boot/loader/grub/install-grub.pl nixos/release.nix nixos/tests/installer.nix I tried to keep apparently-safe code in conflicts.	2014-08-31 12:58:37 +04:00
Suvash Thapaliya	9073a30cee	Add extraConfig option for SLiM ... so that various configuration options can be set without having to expose every single configurable parameter	2014-08-31 03:21:37 +02:00
Nicolas B. Pierron	a5d6219897	Merge pull request #3864 from nbp/useless-submodules ... Remove useless use of undocumented submodules.	2014-08-30 18:21:17 +02:00
William A. Kennington III	ef92afe0da	nixos/network-interfaces: Fix vlan device coming up during switch	2014-08-30 08:20:14 -07:00
William A. Kennington III	ed6040fc8d	nixos/network-interface: Append -netdev for all device units ... Currently, device units are named directly after the name the user specifies for the device. A bridge device named lan will be defined within lan.service. This becomes a problem if you want your interface named nginx but also want to run the nginx service. This patch fixes the issue by appending netdev to all virtually created network device units. Therefore, the lan bridge -> lan-netdev.service. This naming convention is used for all types of network devices in order to ensure that all network devices are unique.	2014-08-30 08:20:14 -07:00
William A. Kennington III	1c08efb8ab	nixos/network-interfaces: Allow explicit virtual interface type setting	2014-08-30 08:20:14 -07:00
William A. Kennington III	4d8390be60	nixos/network-interfaces: Support the old ip configuration convention	2014-08-30 08:05:00 -07:00
William A. Kennington III	86c0f8c549	Refactor nixos files relying on the old ipAddress / prefixLength / subnetMask attributes	2014-08-30 07:33:38 -07:00
William A. Kennington III	1ff4b83875	nixos/network-interfaces: Add flush upon interface going down	2014-08-30 07:33:38 -07:00
William A. Kennington III	098c8f4c77	nixos/network-interfaces: Add support for multiple ipv4 / ipv6 addresses	2014-08-30 07:33:38 -07:00
Aristid Breitkreuz	032e93b9ab	Merge pull request #3863 from wkennington/master.grubfix ... Fix perl indentation	2014-08-30 15:11:42 +02:00
Michael Raskin	8937b70d07	Merge pull request #3344 from ehmry/privoxy ... privoxy: upstart to systemd conversion, actions file editing	2014-08-30 14:19:57 +04:00
Vladimír Čunát	e51f73652d	Merge recent master into staging ... Hydra: ?compare=1149952 Conflicts: nixos/doc/manual/configuration.xml (changed split file) nixos/modules/config/users-groups.nix (choosing filterNull instead of inline definition) pkgs/development/libraries/readline/readline6.3.nix (auto-solved)	2014-08-30 10:04:02 +02:00
William A. Kennington III	7d16a429f0	nixos/install-grub: Fix Indentation	2014-08-29 12:19:13 -07:00
William A. Kennington III	4428178847	nixos/generate-config: Fix indentation	2014-08-29 12:19:13 -07:00
Nicolas Pierron	8c19690d99	Remove useless use of optionSet.	2014-08-29 18:43:03 +02:00
Nicolas Pierron	43e52ef001	Remove useless use of undocumented submodules.	2014-08-29 18:28:34 +02:00
Nicolas B. Pierron	7bc9d59303	Merge pull request #3773 from nbp/nixos-maintainers ... NixOS: Add meta.maintainer option to modules.	2014-08-29 14:57:20 +02:00
Igor Pashev	019bc6bb2b	Made Mediawiki rewrite rules work for virtual hosts ... Related to cdd1785cd6	2014-08-29 13:56:23 +02:00
aszlig	e0e65cbf8e	nixos/users-groups: Fix eval on missing uid/gid. ... This hopefully fixes a regression introduced by 08b214a. In bf129a2, it was already fixed for normal uid/gid values and it got reintroduced by sub-uid/gid-handling again, so I've refactored it a bit into a filterNull function which takes care of also the filtering introduced by bf129a2. I have not tested this extensively, but master is already broken for systems with `mutableUsers = true` and no uid values set. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-08-29 07:17:19 +02:00
Michael Raskin	844fd2553e	Merge pull request #3745 from wkennington/master.dnsmasq ... dnsmasq: Update and enable dbus support	2014-08-29 01:43:41 +04:00
Michael Raskin	e8badf3c3b	Merge pull request #3275 from taku0/gtk-env ... uim, gtk-exe-env, qt-plugin-env: Add input method modules for GTK+ and Qt	2014-08-29 01:35:38 +04:00
Michael Raskin	469f22d717	Merge pull request #2449 from wkennington/master.grub ... Grub Update	2014-08-29 01:22:47 +04:00
Michael Raskin	c42e7dfc0c	Merge pull request #3200 from wkennington/master.dhcpcd ... nixos/dhcpcd: Add an explicit interfaces option	2014-08-29 01:09:22 +04:00
Michael Raskin	1fd14fa415	Merge pull request #3100 from tailhook/new-shadow ... Upgrade "shadow" to 4.2.1	2014-08-29 00:42:57 +04:00
Michael Raskin	0036f4d792	Merge pull request #3047 from chrisfarms/freetds ... Simple nixos module to enable configuration of freetds	2014-08-29 00:38:23 +04:00
William A. Kennington III	cf7f7a5107	nixos/install-grub: Check /boot against /nix/store instead of /nix	2014-08-28 13:35:37 -07:00
William A. Kennington III	36a47733a2	nixos-generate-config: Detect btrfs subvolumes	2014-08-28 13:35:37 -07:00
William A. Kennington III	940c57e4e8	nixos/ova: Grub uuid detection is broken when generating the ova	2014-08-28 13:35:36 -07:00
William A. Kennington III	0f6079d999	nixos/grub: Fix spacing and correct subvolume detection	2014-08-28 13:35:36 -07:00
William A. Kennington III	4f096c044f	nixos/grub: Simplify detection of labels / uuids for provided device names	2014-08-28 13:35:36 -07:00
William A. Kennington III	c02bc3a9de	nixos/grub: Fix regex for getting subvolume name in btrfs	2014-08-28 13:35:36 -07:00
William A. Kennington III	3bf22679b3	nixos/grub: Kernels don't need to be copied if we can read the nix store	2014-08-28 13:35:36 -07:00
William A. Kennington III	87d5e457fe	nixos/grub: Grub detection is much simpler using subvol show	2014-08-28 13:35:36 -07:00
William A. Kennington III	d4a9645ef0	nixos/grub: Needs mount so add utillinux to bin	2014-08-28 13:35:35 -07:00
William A. Kennington III	8329d12b79	grub: Change fsIdentifier to str from string	2014-08-28 13:35:35 -07:00
William A. Kennington III	769d2dc6bf	nixos/grub: Catch errors from command execution	2014-08-28 13:35:35 -07:00
William A. Kennington III	d4e2040099	nixos/grub: Refactor install-grub.pl and correct perl syntax	2014-08-28 13:35:35 -07:00
William A. Kennington III	99b4792554	nixos/grub: Refactor perl script to remove the Switch module	2014-08-28 13:35:35 -07:00
William A. Kennington III	525acb4d4f	nixos/grub: Fix typo	2014-08-28 13:35:35 -07:00
William A. Kennington III	70c11772a6	nixos/grub: Fix some silly perl struct accesses	2014-08-28 13:35:35 -07:00
William A. Kennington III	a6e6c85f06	grub: Add support for detecting btrfs subvolumes	2014-08-28 13:35:35 -07:00
William A. Kennington III	fba9f641a8	grub: Add support for forcing devices to be identified with labels or UUIDs	2014-08-28 13:35:35 -07:00
William A. Kennington III	c5bdb469ce	Update the grub configuration script to handle more complex filesystem layouts including full zfs / and /boot	2014-08-28 13:35:35 -07:00
William A. Kennington III	02ab48d0ee	Enable grub zfsSupport if zfs is built into the initrd	2014-08-28 13:35:34 -07:00
William A. Kennington III	3c6e2fbba9	Add optional zfsSupport to the nixos grub configuration	2014-08-28 13:35:34 -07:00
William A. Kennington III	4f832b5217	Revert "grub: Allow setting the boot root explicitly" ... This reverts commit e4630c1d41.	2014-08-28 13:35:34 -07:00
Paul Colomiets	adbb9ff796	dnsmasq: upgrade to 2.71, fixed dnsmasq module ... * The module now has systemd config * Add resolveLocalQueries option which sets up it as a dns server for local host (including reasonable setup of resolvconf) * Add "dnsmasq" user for running daemon * Enabled dbus and dnssec support for the package Conflicts: nixos/modules/misc/ids.nix	2014-08-28 11:39:03 -07:00
Nicolas Pierron	7b9fa26b10	Quote paths from example & default attributes.	2014-08-28 08:36:55 +02:00
Eelco Dolstra	21ab4e054c	nixos-container run: Execute command using ‘su’ ... This ensures that the environment is set up correctly.	2014-08-28 02:20:31 +02:00
Eelco Dolstra	6773babd5b	Containers: Use nsenter to execute commands in containers ... Also remove ‘nixos-container set-root-password’, which is kind of pointless now.	2014-08-28 02:20:23 +02:00
aszlig	8a56a55bb4	nixos/manual: Use literalExample when feasible. ... Should bring most of the examples into a better consistency regarding syntactic representation in the manual. Thanks to @devhell for reporting. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-08-27 23:41:15 +02:00
aszlig	9667a4067c	nixos: Use literalExample for systemPackages. ... Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-08-27 22:44:56 +02:00
Emery Hemingway	e7597b12b8	privoxy: upstart to systemd conversion, actions file editing ... fix missing actions and filters	2014-08-27 11:34:10 -04:00
Jaka Hudoklin	fd52ebd160	Merge pull request #3558 from geerds/trackpoint ... Add "emulateWheel" option for trackpoint configuration	2014-08-27 13:50:26 +02:00
Nathan Bijnens	ac90177cb1	Zookeeper	2014-08-27 13:01:30 +02:00
Eelco Dolstra	41788255ab	Manual: Start of module-specific documentation	2014-08-27 12:24:44 +02:00
Eelco Dolstra	005f78e739	Fix opening NixOS manual ... http://hydra.nixos.org/build/13760576	2014-08-27 11:08:50 +02:00
Shea Levy	4061c18c98	Revert "grub: removed orphaned mkOption configurationName" ... The configurationName option value is still used by NixOS, this removal breaks grub users. This reverts commit bd811d32b4.	2014-08-27 03:26:40 -04:00
Emery Hemingway	aedbfdff84	unbound: run in chroot	2014-08-26 21:24:09 -04:00
Eelco Dolstra	f6b4214567	/dev/sda1 -> "/dev/sda1" ... Otherwise Nix might try to copy /dev/sda1 under certain circumstances :-)	2014-08-26 19:30:45 +02:00
Joachim Schiele	bd811d32b4	grub: removed orphaned mkOption configurationName	2014-08-26 19:14:47 +02:00
Rickard Nilsson	8c78986553	Some pkgs.lib -> lib fixes	2014-08-25 14:40:40 +02:00
Eelco Dolstra	d2539605e1	Remove reference to icecat	2014-08-25 14:35:08 +02:00
Jaka Hudoklin	296888b1bc	nixos: virtualisation, add basic docker nixos image	2014-08-25 12:00:14 +02:00
Igor Pashev	cdd1785cd6	Fixed rewrite rules for Mediawiki ... If Mediawiki was served from the root directory of the server it was impossible to serve other directories. Make sure that URLs defined in servedDirs are not rewritten. Use case: serving local copy of MathJax	2014-08-25 11:55:57 +02:00