Commit graph

30089 commits

Author SHA1 Message Date
Sandro Jäckel 7ffcd69c1f
nixos/goldwarden: init 2024-03-25 22:29:55 +01:00
Adam C. Stephens c9c612f159
Merge pull request #294548 from adamcstephens/incus/override
incus: move wrapper to nixos module
2024-03-25 16:40:14 -04:00
Sandro c90ed026b7
Merge pull request #281075 from melvyn2/patch-2
nixos/slskd: refactor and add config file options
2024-03-25 21:00:01 +01:00
Naïm Favier fb613a3a41
nixos/nvidia: update manual
Remove the `nvidiaLegacy*` video drivers from the manual: not only are
they deprecated, their deprecation notice was removed in
https://github.com/NixOS/nixpkgs/pull/244060.
2024-03-25 16:56:11 +01:00
Jörg Thalheim 2724e18228
Merge pull request #297142 from Mic92/envfs
envfs: 1.0.3 -> 1.0.6
2024-03-25 12:36:03 +01:00
Tobias Poschwatta ee2b899ff7 nixos/nfsd: settings for /etc/nfs.conf
services.nfs.settings is added for options that go into /etc/nfs.conf.

There are services.nfs.server.extraNfsdConfig and
services.nfs.extraConfig, but they have drawbacks.  They overlap in
scope (nfs.extraConfig can also add nfsd options). They require that one
writes INI syntax. They often produce nfs.conf files with duplicate
section names, which is confusing.

This deprecates services.nfs.server.extraNfsdConfig and
services.nfs.extraConfig.

services.nfs.settings cannot be used together with
services.nfs.server.extraNfsdConfig or services.nfs.extraConfig.
2024-03-25 12:22:48 +01:00
Robert Hensing ecbeabd182
Merge pull request #293846 from amarshall/darwin-linux-builder-fail-on-error
darwin.linux-builder: Exit scripts on error
2024-03-25 12:20:58 +01:00
Melvyn 4da76cc6f4
nixos/slskd: refactor and add config file options 2024-03-24 18:26:56 -07:00
Sandro 0e1cac923d
Merge pull request #286685 from max-niederman/photonvision
photonvision: init at 2024.2.3
2024-03-24 22:05:36 +01:00
Sandro 76e86c46b2
Merge pull request #273234 from SuperSandro2000/oauth2-proxy-nginx
nixos/oauth2_proxy_nginx: allow placing the login page itself under a separate domain
2024-03-24 22:03:10 +01:00
Sandro c51e10cbd2
Merge pull request #283240 from Aleksanaa/nixos/plymouth
nixos/plymouth: improving documentation of logo option
2024-03-24 21:53:08 +01:00
Sandro dabaa7ac65
Merge pull request #288033 from diogotcorreia/module-dnsproxy
nixos/dnsproxy: init module
2024-03-24 21:52:09 +01:00
K900 3d41d10877
Merge pull request #298663 from K900/simplefb-oof
nixos/profile/all-hardware: remove simplefb
2024-03-24 19:21:16 +03:00
Felix Bühler 63078e3468
Merge pull request #298168 from ambroisie/improve-tandoor-recipes-manage
nixos/tandoor-recipes: improve manage script
2024-03-24 17:06:01 +01:00
K900 5fbc094393 nixos/profile/all-hardware: remove simplefb
It's simpledrm now and it's compiled in.
2024-03-24 18:44:19 +03:00
Jörg Thalheim 3a8e8369a6 envfs: 1.0.3 -> 1.0.6
Diff: https://github.com/Mic92/envfs/compare/1.0.3...1.0.6
2024-03-24 10:26:45 +01:00
Martin Weinelt 3bc33ba58d
nixos/wyoming-faster-whisper: update model option 2024-03-23 23:29:06 +01:00
K900 1b59f54864
Merge pull request #298363 from K900/greetd-alias
nixos/greetd: create display-manager.service alias
2024-03-24 01:04:40 +03:00
Maciej Krüger 94d6d4e93a
nixos/docuum: add module for docuum package
Co-Authored-By: Martin Weinelt <mweinelt@users.noreply.github.com>
2024-03-23 18:25:55 +01:00
Sandro 9ae4475cff
Merge pull request #291214 from RatCornu/suwayomi-server
suwayomi-server: 0.7.0 -> 1.0.0
2024-03-23 17:56:19 +01:00
Martin Weinelt bc11108f35
Merge pull request #295417 from NyCodeGHG/nixos/fritz-exporter
nixos/prometheus-fritz-exporter: init module
2024-03-23 16:37:49 +01:00
Marie Ramlow 88daab5195 nixos/prometheus-fritz-exporter: init module 2024-03-23 16:32:25 +01:00
Nick Cao 5c586526bf
Merge pull request #298211 from NickCao/pam-fprintd
nixos/pam: use services.fprintd.package for fprintd rule
2024-03-23 11:30:41 -04:00
K900 c0949a240a nixos/greetd: create display-manager.service alias 2024-03-23 16:33:16 +03:00
Florian Klink 21721e4196 nixos/mycelium: description updates
- Slight rewordings and typo fixes.
 - Use documentation prefixes for addresses, rather than 1.2.3.4, and
   add IPv6 examples.
 - Fix description for `keyFile` (`/var/lib/mycelium/key{,.bin}`).
 - Some formatting by my editor
2024-03-23 12:36:49 +01:00
Nick Cao cee0d0bac7
nixos/pam: use services.fprintd.package for fprintd rule 2024-03-22 20:14:49 -04:00
Philip Taron e2e43f6ce7
nixos/systemd/initrd: make systemd mount root as rw if gpt-auto is set 2024-03-22 16:08:29 -07:00
Bruno BELANYI af6e257878 nixos/tandoor-recipes: improve manage script
This is shamelessly stolen from Photoprism's module, and should allow
executing the manage script without resorting to various tricks due to
relying on transient users.
2024-03-22 20:54:36 +00:00
Bruno BELANYI 6b1e9f77f9 nixos/tandoor-recipes: set service 'Group' 2024-03-22 20:47:55 +00:00
Maximilian Bosch e7533df80f
nixos/mastodon: stop mastodon-init-db.service if check for seeded DB fails
The postgresql runs on a different node than my mastodon itself. Sometimes when
rebooting the entire host it can happen that mastodon gets started
before the DB[1] is up. In that case `mastodon-init-db.service` ran
through with the following log output:

    2024-03-07 15:30:56.856
    Migrating database (this might be a noop)
    2024-03-07 15:30:56.856
    /nix/store/xzm7www0qb7jg5zrgg7knynckx5yhki9-unit-script-mastodon-init-db-start/bin/mastodon-init-db-start: line 9: [: -eq: unary operator expected

It seems wrong to me to have this unit pass if the DB isn't even up,
especially with such an error.

This patch now checks if the exit code of the psql check was non-zero
and fails the entire unit. A retry can be implemented e.g. with
Restart/RestartSec then (which is more elegant than adding a while/sleep
loop anyways) like this:

    systemd.services.mastodon-init-db = {
      serviceConfig = {
        Restart = "on-failure";
        RestartSec = "5s";
        RestartMode = "direct";
        RemainAfterExit = true;
      };
      unitConfig = {
        StartLimitBurst = 5;
        StartLimitIntervalSec = "60";
      };
    };

Also using `-t --csv` now to not render the column name and to not
render a table so we don't need to rely on the format of psql (and parse
it with `sed(1)`).

[1] I added a script that blocks until postgres is there in the meantime
    though.
2024-03-22 17:51:20 +01:00
Vladimír Čunát e90be8418d
Merge #284149: nixos/kernel: add hid_corsair to initrd modules 2024-03-22 14:59:18 +01:00
K900 176ee51929
Merge pull request #297806 from andrevmatos/nixos/wireplumber/fix_systemwide_bluetooth
nixos/wireplumber: fix systemwide bluetooth integration
2024-03-22 09:47:46 +03:00
Bobby Rong 5cf5dd0fb0
Merge pull request #297727 from bobby285271/upd/budgie-nemo-terminal
nixos/budgie: Use gnome-terminal by default
2024-03-22 13:20:40 +08:00
Bobby Rong 0f150faf98
Merge pull request #297941 from bobby285271/upd/budgie-fprintd
nixos/budgie: Don't enable fprintd by default
2024-03-22 13:00:38 +08:00
Bobby Rong 414628b4a0
nixos/budgie: Don't enable fprintd by default
This is optional for {budgie,gnome}-control-center and is not
enabled in the GNOME module.

To re-enable this fprintd should be unbreak first.
2024-03-22 12:28:17 +08:00
Maciej Krüger ccf8f3a8fb
Merge pull request #297464 from mkg20001/fcfix
nixos/fcitx5: fix warning about plasma6 option
2024-03-22 01:35:59 +01:00
Adam Stephens 790fb86a7f
nixos/users-groups: move linger to oneshot and add nixos test 2024-03-21 19:51:05 -04:00
Peder Bergebakken Sundt 554f412e2d
Merge pull request #294171 from Noodlez1232/joycond-cemuhook-fix
nixos/joycond-cemuhook: fix missing module
2024-03-22 00:40:59 +01:00
e1mo bc25c4bd7d
nixos/pretix: raise TimeoutStartSec
On some slower systems or ones with a slower database (connection) the
initial migrations can exceed the default 90s timeout.
2024-03-21 21:49:40 +01:00
e1mo 6d5a6cab71
nixos/pretix: Fix pdf generation
Previously, pdftk (part of the ticket, badge, ... generation pipeline)
would fail with:

```
Error occurred during initialization of VM
Failed to mark memory page as executable - check if grsecurity/PaX is enabled
```
Thise caused pdf generation to fail.

Since pdftk is a java application and, according to systemd.exec(5),

 > Note that [MemoryDenyWriteExecute=] is incompatible with programs and
 > libraries that generate program code dynamically at runtime, including
 > JIT execution engines, executable stacks, and code "trampoline" featu
 > re of various C compilers.

Disabling `MemoryDenyWriteExecute=` fixes it.
2024-03-21 21:49:39 +01:00
K900 ff3d03a15f
Merge pull request #297697 from K900/plasma6-install-kio5
plasma6: also install base kio5
2024-03-21 23:05:33 +03:00
André Vitor de Lima Matos bdc6b3abe0
nixos/wireplumber: fix systemwide bluetooth integration
From https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/3828#note_2270701
Broken/removed in #278760
2024-03-21 16:21:59 -03:00
Adam Stephens 564c3749d9
nixos/users-groups: fix broken linger 2024-03-21 13:47:15 -04:00
K900 d23f4b140f
Merge pull request #297479 from cab404/raop-firewall
nixos/pipewire: raopOpenFirewall option
2024-03-21 18:05:20 +03:00
Bobby Rong b79ac84d84
nixos/budgie: Use gnome-terminal by default
- Both budgie-desktop-view and cinnamon-desktop defaults to gnome-terminal, there
  are no clear reason why we don't use the defaults here.
  The cinnamon-desktop org.cinnamon.desktop.default-applications.terminal schema
  is used in nemo for default emulator, since we use nemo by default this fixes nemo
  open in terminal entry without introducing another override.
- There are theming issues with Qogir when opening right-click menu in a second tab.
- Transparency is broken when hovering on other windows, showing only the wallpaper.

This also ensures a stable default for budgie-desktop-view, by using only the
executable name and not a nix store path.

ref: https://github.com/BuddiesOfBudgie/budgie-desktop-view/blob/v1.3/data/org.buddiesofbudgie.budgie-desktop-view.gschema.xml#L60
ref: https://github.com/linuxmint/cinnamon-desktop/blob/6.0.0/schemas/org.cinnamon.desktop.default-applications.gschema.xml.in#L46
ref: https://github.com/linuxmint/nemo/blob/6.0.0/src/nemo-view.c#L7193
2024-03-21 22:16:25 +08:00
Martin Weinelt 3b7d9c77b3
Merge pull request #297622 from mweinelt/kea-exporter-0.7.0
kea-exporter: 0.6.1 -> 0.7.0
2024-03-21 14:29:42 +01:00
K900 4e5b7fe664 plasma6: also install base kio5
Fixes #295814
2024-03-21 15:19:44 +03:00
nikstur 80f60ad1f4
Merge pull request #297224 from WilliButz/repart-image/mkDerivation
nixos/repart-image: refactor to use mkDerivation instead of runCommand
2024-03-21 12:50:17 +01:00
Stig 468417b7f3
Merge pull request #296479 from marcusramberg/marcus/nimdow
nixos/nimdow: module updates
2024-03-21 12:14:56 +01:00
WilliButz d9264d0568
nixos/repart-image: add myself as maintainer 2024-03-21 11:37:43 +01:00
WilliButz 5282cdd926
nixos/repart-image: add internal option to expose finalPartitions 2024-03-21 11:37:43 +01:00
WilliButz d7ef2defda
nixos/repart-image: refactor to use mkDerivation
As a follow-up to https://github.com/NixOS/nixpkgs/pull/294096 this
should further improve the flexibility around building OS images with
systemd-repart:

* Previously the attribute set `compression` needed to be fully
  populated, including `algorithm` and `level` because
  `compression.enable` was evaluated by bash, after being interpolated
  as strings into the `buildCommand`. Now it's sufficient to pass
  `compression.enable = false` to the builder, e.g. in `overrideAttrs`,
  to disable the compression.
* Using mkDerivation allows for much more customization than the
  previously used `runCommand`, making use of phases and pre/post hooks.
  This is especially helpful for building multiple images from the same
  system configuration, e.g. to build an image `Y` based on a partially
  built raw image `X`,  by injecting a UKI that depends on `X` into a
  defered ESP.
* Before this change it was non-trivial to conduct further manipulations
  on the amended repart definitions. Now, the definitions that
  systemd-repart uses to build the image can be easily manipulated in
  `postPatch` or `preBuild`.

Aside from this, the build is now executed in the build directory, rather
than `$out`. This allows references to relative paths in the build
environment to be used, especially for `--definitions`, which previously
required an absolute path.
2024-03-21 11:37:43 +01:00
Doron Behar 2897be360b
Merge pull request #287966 from Guanran928/clash-meta
nixos/mihomo: init
2024-03-21 10:40:10 +02:00
Martin Weinelt c77d192eb4
prometheus-kea-exporter: 0.6.1 -> 0.7.0
https://github.com/mweinelt/kea-exporter/blob/v0.7.0/HISTORY

Updates the module to use the target name, because it now supports both
UDS as well as HTTP URLs.
2024-03-21 06:17:59 +01:00
Martin Weinelt d702c91302
nixos/prometheus/exporters: pass utils into exporter modules
This is useful, because it provides escapeSystemdShellArgs.
2024-03-21 05:27:21 +01:00
github-actions[bot] 36232fff71
Merge master into staging-next 2024-03-20 18:01:02 +00:00
Dmitry Bogatov 5bb92281f5 nixos/dnscache: Provide explicit group for "dnscache" user
Without this patch the module refuses to evaluate, complaining that
default "nogroup" is no longer supported.
2024-03-20 16:45:50 +01:00
Cabia Rangris eaf6b74366
nixos/pipewire: raopOpenFirewall option
RAOP requires UDP/6001-6002 for timing
information, and won't work with apple devices if
firewall is enabled.
2024-03-20 18:32:01 +03:00
Maciej Krüger 061b88c7f4
nixos/fcitx5: fix warning about plasma6 option 2024-03-20 15:18:51 +01:00
Sandro 50b2e2a029
Merge pull request #296866 from SuperSandro2000/xserver-pinentry 2024-03-20 14:32:44 +01:00
github-actions[bot] 90461ffe37
Merge master into staging-next 2024-03-20 12:01:15 +00:00
éclairevoyant debb92775e nixos/starship: cleanup 2024-03-20 21:08:43 +11:00
éclairevoyant 4f9d91e276 nixos/starship: allow setting package 2024-03-20 21:08:43 +11:00
Florian Klink 40e49b40ab
Merge pull request #296949 from NixOS/mycelium_service
nixos/mycelium: init
2024-03-20 11:50:46 +02:00
nikstur d5d1e6a4fa
Merge pull request #297227 from WilliButz/uki/expose-rendered-config
nixos/uki: add configFile option
2024-03-20 10:41:59 +01:00
Florian Klink 39ebd395cc
Merge pull request #224666 from grindhold/container_underscores
check nixos-container names for underscores
2024-03-20 11:41:34 +02:00
Pol Dellaiera 15541288f3
Merge pull request #297133 from trofi/etebase-server-fix-test
etebase-server: fix the eval on `null` `cfg.unixSocket`
2024-03-20 07:38:15 +01:00
K900 e240f8bde9 Merge remote-tracking branch 'origin/master' into staging-next 2024-03-20 09:27:30 +03:00
K900 e382906174
Merge pull request #295839 from peterhoeg/m/sddm_kwin
nixos/sddm: add support for kwin_wayland
2024-03-20 09:02:52 +03:00
Ameya Shenoy 99c0c32a49
usbguard: fix policy enums
The available policies for `InsertedDevicePolicy` and
`ImplicitPolicyTarget` differ from the defined policy enum. This change
is to prevent users from configuring incorrect policies for `usbguard`

Related `usbguard` documentation
https://usbguard.github.io/documentation/configuration.html

Signed-off-by: Ameya Shenoy <shenoy.ameya@gmail.com>
2024-03-20 08:41:21 +05:30
lassulus b82a5ef764 nixos/mycelium: init 2024-03-20 03:56:58 +01:00
Adam Stephens deb5be50c4
incus: move wrapper to nixos module 2024-03-19 22:48:07 -04:00
github-actions[bot] a474411771
Merge master into staging-next 2024-03-20 00:02:08 +00:00
aleksana b60f6b118b nixos/mandoc: add leading slash to manPath 2024-03-20 00:56:18 +01:00
aleksana da089cf63a nixos/mandoc: fix invalid manpath directory and add cachePath option 2024-03-20 00:56:18 +01:00
Philip Taron 29a46d2802
nixos/nvidia: Set SidebandSocketPath to a user-writable path in /run
The NVIDIA X driver uses a UNIX domain socket to pass information to
other driver components. If unable to connect to this socket, some
driver features, such as G-Sync, may not work correctly. The socket will
be bound to a file with a name unique to the X server instance created
in the directory specified by this option. Note that on Linux, an
additional abstract socket (not associated with a file) will also be
created, with this pathname socket serving as a fallback if connecting
to the abstract socket fails.

The default, which was in effect prior to this change, was `/var/run`.

The effect of not setting this option was that GDM X sessions
(and other non-root sessions) would see this warning in the log files:

```
   (WW) NVIDIA: Failed to bind sideband socket to
   (WW) NVIDIA:     '/var/run/nvidia-xdriver-b4f69129' Permission denied
```

I don't see any security implications of turning this on universally,
since there already was an abstract socket created according to the
docs.

Documentation:

1. [NVIDIA X Config Options](https://download.nvidia.com/XFree86/Linux-x86_64/440.82/README/xconfigoptions.html#SidebandSocketPath)

Diagnosis:

1. [Arch Linux BBS post](https://bbs.archlinux.org/viewtopic.php?pid=1909115#p1909115)
2024-03-19 16:34:41 -07:00
maxine b0f45b4837
Merge pull request #295926 from savannidgerinel/savanni/1password-8.10.28-21
_1password-gui_beta: 8.10.28-11 -> 8.10.28-21 + refactor
2024-03-19 23:11:29 +01:00
Savanni D'Gerinel 61b6a6ae6f
_1password-gui-beta: 8.10.28-11 -> 8.10.28-21
- Updating the 1Password beta release to 8.10.28
- Removing the KeyringHelper application.
2024-03-19 23:09:37 +01:00
Silvan Mosberger 308671dbe8 nixos/nix: Fix example for nix.settings option
Attribute sets aren't valid option values, needs to be a list
2024-03-19 22:55:19 +01:00
Peter Hoeg 404a2363d1 nixos/plasma6: use kwin with sddm 2024-03-19 21:14:46 +01:00
Peter Hoeg 8c642cd40a nixos/sddm: add support for kwin_wayland 2024-03-19 20:55:23 +01:00
github-actions[bot] 7338a5dec5
Merge master into staging-next 2024-03-19 18:01:00 +00:00
Will Fancher f0701b576a
Merge pull request #290061 from SuperSandro2000/kernel-modules-package-name
nixos/boot: move name overwrite to pkgs.aggregateModules to option
2024-03-19 13:04:19 -04:00
WilliButz e9fa0ec5fe
nixos/uki: add configFile option
This option makes it easier to reuse a system's ukify.conf without the
need for manually calling the generator on `settings` again to receive a
rendered configuration file.

Theoretically, a complete configuration file could now be provided by
users.
2024-03-19 17:58:28 +01:00
Martin Weinelt 7762462405
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/flask-security-too/default.nix
2024-03-19 17:30:16 +01:00
Bobby Rong 2dcadb7087
Merge pull request #297072 from FedericoSchonborn/add-federicoschonborn
maintainers: Add federicoschonborn back again
2024-03-19 23:12:06 +08:00
ajs124 bdabdf0c16 nixos/gitlab: use workhorse package from option in path 2024-03-19 13:47:55 +01:00
ajs124 1bada61543 nixos/gitlab: switch from sidekiq to sidekiq-cluster 2024-03-19 13:47:55 +01:00
Sandro 4a9a5fab1c
Merge pull request #283501 from SuperSandro2000/hedgedoc-fix-tools-exec 2024-03-19 13:37:46 +01:00
Sergei Trofimovich 5a3bd05394 etebase-server: fix the eval on null cfg.unixSocket
Without the change the test eval fails as:

    $ nix build --no-link -f. etebase-server.tests
       error: cannot coerce null to a string: null
2024-03-19 08:59:57 +00:00
Federico Damián Schonborn 455b915be0
maintainers: Add federicoschonborn back again
Signed-off-by: Federico Damián Schonborn <federicoschonborn@disroot.org>
2024-03-18 21:51:28 -03:00
github-actions[bot] 7c0bd382c7
Merge master into staging-next 2024-03-19 00:02:09 +00:00
Lily Foster e3c0bb4255
Merge pull request #294542 from Janik-Haag/garage
nixos/garage: add env-var wrapper for admin cli
2024-03-18 16:10:15 -07:00
Janik H. 9ec0e31f79
nixos/garage: add env-var wrapper for admin cli 2024-03-18 22:53:21 +01:00
Will Fancher 57f69255d7
Merge pull request #293591 from lf-/jade/fix-luksroot-assert
nixos.luksroot: fix assertion message to name correct option
2024-03-18 17:46:11 -04:00
maralorn b6668ded0e
Merge pull request #296977 from slotThe/maintainer
Add slotThe as a maintainer
2024-03-18 22:43:38 +01:00
Jade Lovelace a72afcbc48 nixos.luksroot: fix assertion message to name correct option 2024-03-18 14:41:47 -07:00
Ryan Lahfa ae07fcb07b
Merge pull request #293271 from nikstur/test-instrumentation-without-usr-bin-env
nixos/test-instrumentation: use full path to env
2024-03-18 13:57:37 -07:00
Tony Zorman 240c39ef2e nixos/xmonad: add slotThe as a maintainer 2024-03-18 20:27:15 +01:00
Martin Weinelt 00e2713c5b
Merge remote-tracking branch 'origin/master' into staging-next 2024-03-18 19:59:23 +01:00
Will Fancher 99587a3411
Merge pull request #209964 from Majiir/fix-initrd-systemd-closure
nixos/systemd/initrd: follow init param symlinks
2024-03-18 14:39:37 -04:00
Florian Klink 70d7abc09c
Merge pull request #296924 from flokli/document-servers-empty-fallback
nixos/timesyncd: further document services.timesyncd.servers
2024-03-18 20:08:22 +02:00
Jon Seager ffc736695c
Merge pull request #296937 from MinerSebas/scrutiny-collector-ordering 2024-03-18 17:16:40 +00:00
Martin Weinelt 03fcd060ff
Merge pull request #296921 from patka-123/engelsystem-cleanup
engelsystem: cleanup
2024-03-18 17:14:59 +01:00
Patka 93aba53a08
engelsystem: cleanup
The custom php with extensions is not needed. The default already has all the needed extensions enabled by default.
2024-03-18 17:08:01 +01:00
K900 823897dde8 wireplumber: 0.4.17 -> 0.5.0 2024-03-18 18:57:05 +03:00
MinerSebas 9d384c350b nixos/scrutiny: Order scrutiny-collector after scrutiny 2024-03-18 16:30:51 +01:00
Florian Klink 78d8e2ca11 nixos/timesyncd: further document services.timesyncd.servers
Running systemd-timesyncd with an empty list of timeservers to sync from
does not work.

In case an empty list is configured here, systemd will fall back to its
compiled-in defaults, which NixOS sets to `{0..4}.nixos.pool.ntp.org`,
as per https://github.com/systemd/systemd/blob/main/docs/DISTRO_PORTING.md#ntp-pool

This has caused some confusion. Explicitly document this, and describe
how to disable timesyncd.
2024-03-18 17:23:55 +02:00
Jonas Heinrich 30036c3d10 nixos/initrd-ssh: Add authorizedKeyFiles option 2024-03-18 15:27:15 +01:00
github-actions[bot] d5491af22d
Merge master into staging-next 2024-03-18 12:01:22 +00:00
Sandro 124ec2d9d6
nixos/xserver: don't conflict pinentry package with DEs 2024-03-18 11:22:48 +01:00
nikstur a1c4f0a754
Merge pull request #282022 from ElvishJerricco/gpt-auto-root
nixos: Support systemd-gpt-auto-root
2024-03-18 10:27:22 +01:00
yunfachi 05901fbaec nixos/uni-sync: init 2024-03-18 10:35:43 +03:00
github-actions[bot] 819a14ad05
Merge master into staging-next 2024-03-18 06:01:21 +00:00
github-actions[bot] ac91cf83c1
Merge master into staging-next 2024-03-18 00:02:20 +00:00
Alex Martens bdb6849a32 nixos/llama-cpp: fix binary path 2024-03-17 16:48:51 -07:00
Sandro 1f212fd6e6
Merge pull request #289025 from tcheronneau/issue-288907
nixos/tinyproxy: fix the quotes around the filter path
2024-03-17 23:33:42 +01:00
Will Fancher 486e837cbe
Merge pull request #293710 from B4dM4n/networkd-policy-rule-port-range
nixos/networkd: allow RoutingPolicyRule port ranges
2024-03-17 12:36:30 -07:00
github-actions[bot] 100b3bb178
Merge master into staging-next 2024-03-17 18:00:54 +00:00
github-actions[bot] c222aba0b8
Merge master into staging-next 2024-03-17 12:01:55 +00:00
Patka c4e1ffb96b
engelsystem: 3.4.1 -> 3.5.0
Release notes: https://github.com/engelsystem/engelsystem/releases/tag/v3.5.0
2024-03-17 12:24:29 +01:00
Maximilian Bosch 6af7e814af
Merge pull request #292993 from wolfgangwalther/postgresql-refactor
postgresql: refactor and cleanup
2024-03-17 10:00:07 +00:00
Sandro 62748bdf42
Merge pull request #295891 from Stzx/pinentry-conflict
pinentry: fix DM option and user conflict
2024-03-17 08:50:13 +01:00
Bobby Rong a4bca9aaef
nixos/pantheon: Add missing gala-daemon systemd services
Otherwise it doesn't autostart after user session managed by systemd.
2024-03-17 13:42:33 +08:00
Bobby Rong 0b41a85c95
nixos/display-managers: Don't force graphical-session.target activation for Pantheon
See Nixpkgs pull request 233981.
2024-03-17 13:42:33 +08:00
Bobby Rong 7522f97cbe
pantheon: Manage user session with systemd
This is now needed as gnome-session 46 drops `--builtin` option.
2024-03-17 13:41:51 +08:00
github-actions[bot] 2178d8d857
Merge master into staging-next 2024-03-17 00:02:17 +00:00
Martin Weinelt 2b003c0269
nixos/pretix: make state directory world-readable
Pretix creates static files in its state directory, that nginx needs to
serve, so locking down the permissions that hard is not going to work.
2024-03-16 23:44:37 +01:00
Atemu 44a3dd2ef4
Merge pull request #296009 from Atemu/steamcompattools
proton-ge-bin: init at 9-1, nixos/steam: use steamcompattool output for extraCompatPackages
2024-03-16 20:57:05 +00:00
Jon Seager bfa0fb2dbe
Merge pull request #296463 from MinerSebas/scrutiny-split 2024-03-16 19:41:40 +00:00
Marcus Ramberg 20eec34036 nixos/nimdow: Make package configurable, ensure nimdow can start a terminal in it's default config 2024-03-16 19:32:34 +01:00
github-actions[bot] 60fbf92c10
Merge master into staging-next 2024-03-16 18:01:00 +00:00
Pol Dellaiera 5ebdb3eda7
Merge pull request #296465 from Janik-Haag/networkmanager-ensure-profiles
nixos/networkmanager: ensure-profiles, make sure networkmanager is running
2024-03-16 18:46:12 +01:00
Janik H. 847a53742c
nixos/networkmanager: ensure-profiles, make sure networkmanager is running 2024-03-16 18:11:58 +01:00
MinerSebas 2210ac7764 nixos/scrutiny: Order scrutiny.service after influxdb2.service 2024-03-16 18:02:17 +01:00
MinerSebas 7d6917088c nixos/scrutiny: Dont enable influxdb when only using scrutiny-collector 2024-03-16 18:02:10 +01:00
Atemu bdc55d2f86 nixos/steam: provide example in extraCompatPackages 2024-03-16 17:59:27 +01:00
Atemu 2b619c2314 nixos/steam: use steamcompattool output for extraCompatPackages
This sets a standard for Steam compat tools in NixOS where they must have the
compat tool in a special steamcompattool output.

proton-ge-bin was adjusted to conform with it.
2024-03-16 17:59:27 +01:00
Arian van Putten d211b80d29
Merge pull request #294493 from endgame/ec2-image-ssm-agent
nixos/amazon-image: Enable Amazon SSM Agent by default
2024-03-16 17:57:42 +01:00
Guillaume Girol 119099506c
Merge pull request #292477 from nu-nu-ko/nixos-komga-hardening
nixos/komga: add service hardening and misc format changes.
2024-03-16 17:34:45 +01:00
Martin Weinelt fe8d02e2bc
Merge pull request #296180 from mweinelt/pretix
pretix: init at 2024.2.0
2024-03-16 17:28:20 +01:00
Manuel Sanchez Pinar a1301766eb
nixos/silverbullet: init module 2024-03-16 17:11:59 +01:00
Jörg Thalheim 56db90d274
Merge pull request #296164 from bubuntux/ivsc-option
Add ivsc-firmware to ipu6 option
2024-03-16 16:14:05 +01:00
Martin Weinelt b05a529fd6
nixos/pretix: init 2024-03-16 14:50:56 +01:00
Bobby Rong 3b48b3aaa9
Merge pull request #289062 from bobby285271/upd/mate
MATE 1.28
2024-03-16 21:38:24 +08:00
github-actions[bot] 9db4d84312
Merge master into staging-next 2024-03-16 12:01:19 +00:00
Pol Dellaiera 4285a30496
Merge pull request #295837 from abysssol/ollama-env-vars
nixos/ollama: add option to set environment variables
2024-03-16 08:02:55 +01:00
github-actions[bot] 7006358e6a
Merge master into staging-next 2024-03-16 00:02:02 +00:00
Will Fancher f1731f2e28 nixos: Support systemd-gpt-auto-root 2024-03-15 18:22:04 -04:00
Guillaume Girol 1f26e67560
Merge pull request #278064 from symphorien/nix_config_extra
nixos/nix: add workaround for https://github.com/NixOS/nix/issues/9487
2024-03-15 22:46:51 +01:00
Pol Dellaiera 21456ee2a7
Merge pull request #296183 from laalsaas/etebase-server-fix
etebase-server: create required tmpdir
2024-03-15 22:08:15 +01:00
Wolfgang Walther 4b6bce5c31
postgresql: refactor to remove "this" argument
This was proposed by abbradar in #150801, but left out of the follow up PR
#221851 by Ma27 to reduce the size of the diff. Compared to the initial
proposal this includes the callPackage call in the recursion, which avoids
breaking the withJIT/withoutJIT helpers.

In terms of nixpkgs, this is a pure refactor, no derivations change. However,
this makes downstream expressions like the following possible:

  (postgresql.override { jitSupport = true; }).pkgs.postgis

This would have not worked before without passing another "this" argument,
which is error prone as can be seen in this example:

  https://github.com/PostgREST/postgrest/pull/3222/files
2024-03-15 21:11:09 +01:00
Wolfgang Walther 14b3ea2789
postgresql: refactor to pass jitSupport/llvm via scope instead of passthru
This makes it less error-prone to use the llvm package in extensions, because
it will always match the package used by the postgresql derivation itself.

Previously, you could've accidentally used llvm instead of postgresql.llvm
with a different result.
2024-03-15 21:11:09 +01:00
Maximilian Bosch 0d17fd9524
Merge pull request #292473 from networkException/fix-synapse-unix-socket-permissions
nixos/matrix-synapse: allow synapse to write to directories of unix socket paths
2024-03-15 18:53:04 +00:00
Janik H. fc060cc3cb nixos/resolvconf: add ::1 as local dns resolver 2024-03-15 19:31:37 +01:00
github-actions[bot] 00729a3d21
Merge master into staging-next 2024-03-15 18:01:19 +00:00
laalsaas 1d4c8cb0ff etebase-server: create required tmpdir 2024-03-15 16:52:21 +01:00
Julio Gutierrez 811872a489 Add ivsc-firmware to ipu6 option 2024-03-15 09:29:46 -05:00
Andrew Marshall 24ae983076 darwin.linux-builder: Exit scripts on error
For example, if the user decided to ctrl-c upon getting the sudo
password prompt, the script previously continued on to start the VM, but
that should not be the case.
2024-03-15 08:52:30 -04:00
Peder Bergebakken Sundt 3399de5396
Merge pull request #295342 from pbsds/spotifyd-url-1710255988
nixos/spotifyd: update configuration documentation url
2024-03-15 13:03:01 +01:00
github-actions[bot] 4aac48ff7f
Merge master into staging-next 2024-03-15 06:01:09 +00:00
Bobby Rong 9254f99be6
Merge pull request #296019 from bobby285271/upd/budgie
nixos/budgie: Fix default fonts
2024-03-15 08:35:12 +08:00
github-actions[bot] 2bffd64e73
Merge master into staging-next 2024-03-15 00:01:59 +00:00
Bobby Rong f7f3a3ec53
nixos/budgie: Fix default fonts
Always install noto fonts and hack font.
2024-03-15 07:56:02 +08:00
Ilan Joselevich 09078fd022
Merge pull request #295932 from Kranzes/nextcloud
nixos/nextcloud: remove opcache.enable_cli=1
2024-03-14 21:36:09 +02:00
Ilan Joselevich 9353fb2309
nixos/nextcloud: remove opcache.enable_cli=1
Upstream no longer recommends enabling the opcache cli.
See the following:
 - https://github.com/nextcloud/documentation/issues/1439
 - https://github.com/nextcloud/server/pull/15468
2024-03-14 18:36:11 +02:00
Bobby Rong 398cce395c
nixos/mate: Add enableWaylandSession option
Make this an opt-in for now since the session is in early stage
and introduces a new set of wayfire closure.
2024-03-14 23:34:11 +08:00
Bobby Rong b45faa9834
nixos/mate: Add extraPanelApplets, extraCajaExtensions option
Hopefully this is more user-friendly.
2024-03-14 23:34:10 +08:00
Bobby Rong a323f4f828
mate: Install mate-panel-with-applets by default 2024-03-14 23:34:06 +08:00
Bobby Rong c87f6b5591
mate: Install caja-with-extensions by default 2024-03-14 23:34:05 +08:00
Stzx 8bf5cc2666
pinentry: fix DM option and user conflict 2024-03-14 21:54:35 +08:00
abysssol b5e7a05bb7 nixos/ollama: add option to set environment variables 2024-03-14 04:21:36 -04:00
github-actions[bot] f4c4bfc9fc
Merge master into staging-next 2024-03-13 18:00:53 +00:00
nikstur 7f175e69ca
Merge pull request #295370 from arianvp/fix-295365
nixos/binfmt: fix race condition between systemd-tmpfiles and systemd-binfmt
2024-03-13 14:52:24 +01:00
Sandro db55012fa3
Merge pull request #291455 from SuperSandro2000/hydra-starman-worker 2024-03-13 13:57:12 +01:00
github-actions[bot] cecf050e96
Merge master into staging-next 2024-03-13 12:01:25 +00:00
Pol Dellaiera 55251f1ffc
Merge pull request #295547 from Janik-Haag/unbound
nixos/unbound: drop networkmanager since it doesn't support unbound anymore
2024-03-13 10:33:52 +01:00
Janik H. 4147e50f18
nixos/unbound: drop networkmanager since it doesn't support unbound anymore 2024-03-13 09:50:56 +01:00
Pol Dellaiera c35c016e5d
Merge pull request #295529 from Janik-Haag/networkmanager-drop-unbound
nixos/networkmanager: drop unbound form dns servers
2024-03-13 09:04:58 +01:00
Pol Dellaiera 6710011819
Merge pull request #295199 from blakesmith/gotosocial_14_2
gotosocial 0.14.1 -> 0.14.2
2024-03-13 08:53:37 +01:00
Janik H. a97e56ae28
nixos/networkmanager: drop unbound form dns servers
upstream dropped unbound in 5da17c689b
2024-03-13 08:31:52 +01:00
éclairevoyant e7db1f299c
nixos/scrutiny: fix timer not auto-starting 2024-03-12 22:25:54 -04:00
Blake Smith b0529146b9 nixos/gotosocial: add blakesmith as a maintainer 2024-03-12 21:13:22 -05:00
annalee 8e038835fe
Merge remote-tracking branch 'upstream/master' into staging-next 2024-03-13 00:38:07 +00:00
Rok Garbas 6f11ba9ffe
Merge branch 'master' into amazon-ec2-amis 2024-03-13 00:37:12 +01:00
Jörg Thalheim 721c6579d2
Merge pull request #295407 from Stunkymonkey/nixos-murmur-registerPassword-fix
nixos/murmur: fix writing registerPassword to config
2024-03-12 22:47:26 +01:00
Fabián Heredia Montiel da8768347e
Merge pull request #293950 from DCsunset/nixos-hoogle
nixos/hoogle: add extraOptions
2024-03-12 14:57:30 -06:00
Felix Buehler 1e22e7d75e nixos/murmur: fix writing registerPassword to config 2024-03-12 21:19:24 +01:00
Arian van Putten 16526f454f nixos/binfmt: fix race condition between systemd-tmpfiles and systemd-binfmt
We need to make sure systemd-tmpfiles-setup.service ran before we
start systemd-binft.service. Otherwise it might fail to start
due to non-existant files

Fixes #295365
2024-03-12 21:08:03 +01:00
github-actions[bot] 6b78f024b2
Merge staging-next into staging 2024-03-12 18:01:46 +00:00
Azat Bahawi d3e30a442b
nixos/incus: fix systemd service path
Fixes a regression introduced in #294754.
2024-03-12 20:03:36 +03:00
Peder Bergebakken Sundt 285d2dcf3c nixos/spotifyd: update configuration documentation url 2024-03-12 16:07:48 +01:00
Sandro e220724911
Merge pull request #292141 from SuperSandro2000/plasma-out-xserver 2024-03-12 13:55:27 +01:00
K900 21adc4f16a
Merge pull request #295092 from K900/more-heinous-crimes
nixos/iso-image: extremely cursed performance optimization for Hydra
2024-03-12 15:45:38 +03:00
K900 77536af43b nixos/iso-image: extremely cursed performance optimization for Hydra
Right now the worst case chain of events for building an ISO on Hydra is

    - copy everything to squashfs builder
    - run squashfs builder
    - download squashfs from builder
    - compress squashfs
    - upload squashfs to S3
    - copy squashfs to ISO builder
    - run ISO builder
    - download ISO from builder
    - compress ISO
    - upload ISO to S3

This inlines the squashfs build into the ISO build, which makes it

    - copy everything to ISO builder
    - run ISO builder
    - download ISO from builder
    - compress ISO
    - upload ISO to S3

Which should reduce queue runner load by $alot per ISO, which we have four of on small channels
(one release, one test per arch) and a lot more than four of on large channels (with various desktops)
2024-03-12 15:41:59 +03:00
github-actions[bot] 1cef2a1be7
Merge staging-next into staging 2024-03-12 12:01:40 +00:00
nikstur da05945c74
Merge pull request #295096 from jmbaur/uki-dtb
nixos/uki: add ".dtb" section if devicetree is used
2024-03-12 12:57:15 +01:00
Sandro Jäckel b07cdeb1b3
nixos/plasma6: move out of x11
This release focuses on wayland, lets give that justice
2024-03-12 10:49:42 +01:00
github-actions[bot] 0917422ffe
Merge staging-next into staging 2024-03-12 06:01:24 +00:00
cmspam 701fcd7982 nixos/incus: add openvswitch support
1. Added openvswitch integration to incus service.
2. Added tests to test openvswitch functionality with incus.
2024-03-12 01:03:39 +00:00