From eebaa71e118a455f525083c017aa1e75dcbf2b52 Mon Sep 17 00:00:00 2001 From: Oliver Schmidt Date: Mon, 12 May 2025 09:29:59 +0200 Subject: [PATCH 1/2] doc: add release about for AmneziaWG support add release notes for #341663. Especially noteworthy is the minor backwards incompatibility introduced there. --- nixos/doc/manual/release-notes/rl-2505.section.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/nixos/doc/manual/release-notes/rl-2505.section.md b/nixos/doc/manual/release-notes/rl-2505.section.md index 71cf50a5f015..340ab295a80f 100644 --- a/nixos/doc/manual/release-notes/rl-2505.section.md +++ b/nixos/doc/manual/release-notes/rl-2505.section.md @@ -297,6 +297,8 @@ After you run ALTER EXTENSION, you must run [this SQL script](https://github.com/timescale/timescaledb-extras/blob/master/utils/2.15.X-fix_hypertable_foreign_keys.sql). For more details, see the following pull requests [#6797](https://github.com/timescale/timescaledb/pull/6797). PostgreSQL 13 is no longer supported in TimescaleDB v2.16. +- `networking.wireguard.enable = true` does not always add `wireguard-tools` to system packages anymore. Only when wireguard interfaces are configured, the backing implementation packages are added to system PATH. + - `virtualisation/azure-common.nix`'s filesystem and grub configurations have been moved to `virtualisation/azure-image.nix`. This makes `azure-common.nix` more generic so it could be used for users who generate Azure image using other methods (e.g. nixos-generators and disko). For existing users depending on these configurations, please also import `azure-image.nix`. - `zammad` has had its support for MySQL removed, since it was never working correctly and is now deprecated upstream. Check the [migration guide](https://docs.zammad.org/en/latest/appendix/migrate-to-postgresql.html) for how to convert your database to PostgreSQL. @@ -527,6 +529,8 @@ - `networking.wireguard` now has an optional networkd backend. It is enabled by default when `networking.useNetworkd` is enabled, and it can be enabled alongside scripted networking with `networking.wireguard.useNetworkd`. Some `networking.wireguard` options have slightly different behavior with the networkd and script-based backends, documented in each option. +- `networking.wireguard` adds support for the [AmneziaWG](https://amnezia.org/en) variant of the protocol. The variant to be used is set per interface as `networking.wireguard.interfaces..type`, defaulting to wireguard. + - The `stackclashprotection` hardening flag has been enabled by default on compilers that support it. - `services.rss-bridge` now has a `package` option as well as support for `caddy` as reverse proxy. From 5a316930c8c189f30c579a9a0637186375a2b4a2 Mon Sep 17 00:00:00 2001 From: Oliver Schmidt Date: Mon, 12 May 2025 10:27:13 +0200 Subject: [PATCH 2/2] doc: merge Amnezia VPN-related release note entries --- nixos/doc/manual/release-notes/rl-2505.section.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/nixos/doc/manual/release-notes/rl-2505.section.md b/nixos/doc/manual/release-notes/rl-2505.section.md index 340ab295a80f..a5c94e827d2b 100644 --- a/nixos/doc/manual/release-notes/rl-2505.section.md +++ b/nixos/doc/manual/release-notes/rl-2505.section.md @@ -44,7 +44,10 @@ -- [AmneziaVPN](https://amnezia.org/en), an open-source VPN client, with a key feature that enables you to deploy your own VPN server on your server. Available as [programs.amnezia-vpn](#opt-programs.amnezia-vpn.enable). +- [AmneziaVPN](https://amnezia.org/en), a self-hostable open-source VPN client, is available in two variants: + - [programs.amnezia-vpn](#opt-programs.amnezia-vpn.enable): a GUI client which can also deploy a VPN endpoint to a remote server + - {option}`networking.wireguard` adds support for the [AmneziaWG](https://docs.amnezia.org/documentation/amnezia-wg/) variant of the protocol, featuring better masking against Deep Packet Inspection. The variant to be used is set per interface as `networking.wireguard.interfaces..type`, defaulting to wireguard. + - [Bazecor](https://github.com/Dygmalab/Bazecor), the graphical configurator for Dygma Products. @@ -529,8 +532,6 @@ - `networking.wireguard` now has an optional networkd backend. It is enabled by default when `networking.useNetworkd` is enabled, and it can be enabled alongside scripted networking with `networking.wireguard.useNetworkd`. Some `networking.wireguard` options have slightly different behavior with the networkd and script-based backends, documented in each option. -- `networking.wireguard` adds support for the [AmneziaWG](https://amnezia.org/en) variant of the protocol. The variant to be used is set per interface as `networking.wireguard.interfaces..type`, defaulting to wireguard. - - The `stackclashprotection` hardening flag has been enabled by default on compilers that support it. - `services.rss-bridge` now has a `package` option as well as support for `caddy` as reverse proxy.