3271 Commits
Author SHA1 Message Date
kirillrdyandGitHub 95628463fa nixos/flarum: add initialAdminPasswordFile and databasePasswordFile options (#543724) 2026-07-21 22:42:38 +00:00
Felix BühlerandGitHub 23d55b2809 nixos/bentopdf: map vhost via lib.mkDefault (#543983) 2026-07-21 18:47:39 +00:00
Felix Buehler 4d709c3805 nixos/bentopdf: map vhost via lib.mkDefault 2026-07-20 23:43:11 +02:00
fsagbuya 942f9d2eeb nixos/flarum: add initialAdminPasswordFile and databasePasswordFile options 2026-07-20 14:39:23 +08:00
BatteredBunny b88fa50389 nixos/tabbyapi: sync options with upstream
Assisted-by: Claude Code (Claude Opus 4.8)
2026-07-19 21:01:23 +03:00
@mjonesandGitHub 16f2831afc nixos/immichframe: harden and fix tests (#540256) 2026-07-19 01:44:48 +00:00
Felix BühlerandGitHub 87fb675b3a nixos/homer: add caching headers and compression to caddy vhost (#529447) 2026-07-17 21:48:56 +00:00
Morgan Jones 2a28ddd27e nixos/immichframe: add more systemd hardening
Based on Jellyfin but a little stricter because it doesn't do as much.
2026-07-14 20:32:51 -07:00
SandroandGitHub c09ae0baff nixos/isso: add secret file option (#538141) 2026-07-13 00:20:36 +00:00
Martin WeineltandGitHub d5569e5144 nixos/lasuite-meet: fix RuntimeDirectory nonsense (#541018) 2026-07-12 12:23:04 +00:00
K900 3d6034e8fa nixos/lasuite-meet: fix RuntimeDirectory nonsense 2026-07-12 14:25:23 +03:00
MartV0 aa15810a39 nixos/isso: add secret file option 2026-07-12 11:29:12 +02:00
Jonas HeinrichandGitHub 077decce0d Nextcloud34 & package updates (#536719) 2026-07-11 16:03:22 +00:00
Rémi NICOLEandGitHub 4dee341813 nixos/netbox: uplift (#531455) 2026-07-10 17:22:08 +00:00
052cec991b nextcloud34: init at 34.0.1
Co-authored-by: Jonas Heinrich <757752+onny@users.noreply.github.com>
Co-Authored-By: Joseph Price <joe@pricey.uk>
2026-07-10 16:49:27 +02:00
SandroandGitHub 8de8564a01 part-db: 2.4.0 -> 2.13.1 (#539197) 2026-07-08 21:53:02 +00:00
Vladimír Čunát 4bddd7068b Merge master into staging-next 2026-07-08 16:42:08 +02:00
yayaandGitHub d1ded74c76 doc/akkoma: fix mistake in manual (#538772) 2026-07-08 13:36:51 +00:00
Martin Weinelt 1ed5aba226 nixos/pretix: fix manual eval 2026-07-08 14:58:11 +02:00
nixpkgs-ci[bot]andGitHub 57cbedcc3b Merge master into staging-next 2026-07-08 09:09:22 +00:00
Gerhard Schwanzer 72672bd2e0 nixos/part-db: add environmentFile option
Generate env.local at runtime so secrets such as APP_SECRET can be provided outside the Nix store.

Assisted-by: pi coding agent / Mika (OpenAI GPT-5.5)
2026-07-08 10:11:39 +02:00
Gerhard Schwanzer b7dcd54f64 nixos/part-db: use writable attachment storage
Move mutable public media and uploads out of the Nix store and add nginx hardening for served media files.

Assisted-by: pi coding agent / Mika (OpenAI GPT-5.5)
2026-07-08 10:11:26 +02:00
Martin Weinelt 9b2a1f97be pretalx: 2026.1.2 -> 2026.2.0
https://pretalx.com/p/news/releasing-pretalx-2026-2-0/
https://docs.pretalx.org/changelog/v2026.2.0/

Fixes: GHSA-5948-5q78-cvg6
2026-07-08 01:41:24 +02:00
Martin Weinelt 7f7d069ad7 nixos/netbox: add services to redis group conditionally
This only makes sense when there is a local redis group, and then we
can scope the group membership to the service instead of the whole user.
2026-07-07 17:43:39 +02:00
Martin Weinelt f0cd25ba33 nixos/netbox: harden systemd units
Limits what the netbox services can do down to a reasonable scope.
2026-07-07 17:43:39 +02:00
Martin Weinelt b50a65023c nixos/netbox: add opt-in nginx support
This is part of making way for simpler onboarding, because it stops
requiring users to guess where to point the static directory to.
2026-07-07 17:43:39 +02:00
Martin Weinelt 5bab8a265b nixos/netbox: allow opt-out from local postgres and redis
This is important, because now users can easily understand that the
module takes care of these things, and opt-out if needed.
2026-07-07 17:43:38 +02:00
Martin Weinelt 53e8dc133a nixos/netbox: put all services into a systemd slice
Simplifies resource overview and management.
2026-07-07 17:43:38 +02:00
Martin Weinelt 06a84e0888 nixos/netbox: shared unit settings, structured command line
The shared unit settings make it easier to make updates across the units.

The structured command line always ensures proper tokenization.
2026-07-07 17:43:37 +02:00
Martin Weinelt 37220b42c4 nixos/netbox: refactor settings and make config introspectable
Configuring a module from withing config is bad style. This makes what
gets configured not introspectable. Worse, it requires special care to
handle priorities correctly, so things will correctly overwrite or merge.

The `GIT_PATH` setting was removed, when Netbox migrated Git operations
to dulwhich. https://github.com/netbox-community/netbox/commit/b9cac97b73c1c08213db6272de11c03711491486

Furthermore, this reduces LDAP to just a single option, because once an
LDAP configuration is set, we can already make assumptions.
2026-07-07 17:43:37 +02:00
Martin Weinelt 1a8e82de98 nixos/netbox: add option for environment files
This is relevant to pass secrets that are read from custom code in
extraConfig.

As these secrets are then read for every configuration.py consumer this
also affects netbox-manage.
2026-07-07 17:43:36 +02:00
Martin Weinelt 5c355dedbf nixos/netbox: merge bind options into one
They are all passed to gunicorn's --bind flag, so let the user pass
whatever they want.
2026-07-07 16:58:06 +02:00
Martin Weinelt d6beee20af nixos/netbox: drop keycloak specific option
The django-social-auth library supports a massive list of authentication
backends. Maintaining options at this granularity is just not great for
maintainability.

https://python-social-auth.readthedocs.io/en/latest/backends/index.html
2026-07-07 16:58:05 +02:00
Martin Weinelt f76c4fdb7f nixos/netbox: merge nixos options support in concatFile
While types.lines has a custom merge function it is generally not great
style to configure module options needlessly from the config section.
2026-07-07 16:58:05 +02:00
Martin Weinelt 46c6aaeac7 nixos/netbox: improve secret management
With this change secrets will be automatically generated if left at their
individual option defaults.

We now also allow configuration of multiple peppers, to allow proper
rotation as intended by upstream.

Finally, we now we prevent secrets from leaking into the store.
2026-07-07 16:58:05 +02:00
Sizhe Zhao b0f64c4928 nixos/alps: update 2026-07-07 22:45:59 +08:00
Baum ad0d0cec09 akkoma: fix mistake in manual 2026-07-06 13:46:31 +02:00
Yohann BonifaceandGitHub c27a1c00a6 treewide: largely remove danth from maintainers (#538448) 2026-07-05 20:49:07 +00:00
K900andGitHub 23706216c3 lasuite-meet: 1.21.0 -> 1.22.0 (#538178) 2026-07-05 15:46:05 +00:00
Arne KellerandGitHub b2f2b0c72c nixos/cloudlog: fix QSL images, SSTV scans, and awards JSON files (#399257) 2026-07-05 11:20:13 +00:00
K900 21af0e8e78 nixos/lasuite-meet: add cronjobs for cleanup tasks 2026-07-05 10:07:10 +03:00
K900 96ec540b85 nixos/lasuite-meet: refactor systemd units 2026-07-05 10:03:56 +03:00
Daniel Thwaites 3bc78b00e8 treewide: largely remove danth from maintainers
I have not used most of these in a while, so have no interest in
maintaining them any more.
2026-07-04 18:56:47 +01:00
Gergő GutyinaandGitHub 5c82df1d32 papra: 26.4.0 -> 26.5.0 (#531079) 2026-07-03 13:21:35 +00:00
Defelo 50da00f7b5 chhoto-url: 7.2.1 -> 7.4.1
Changelog: https://github.com/SinTan1729/chhoto-url/releases/tag/7.4.1
Diff: https://github.com/SinTan1729/chhoto-url/compare/7.2.1...7.4.1
2026-07-02 15:10:43 +02:00
Fabian Haas 288e0e1738 papra: 26.4.0 -> 26.5.0 2026-07-02 02:33:21 +02:00
Peder Bergebakken SundtandGitHub b9c7beb418 lemmy: update documentation (#532167) 2026-06-29 22:09:09 +00:00
isabelandGitHub 38cabf027c koito: init at 0.3.2, nixos/koito: init module (#529576) 2026-06-29 15:35:53 +00:00
Ivan MincikandGitHub bcaf79b051 geoserver: add service (#506504) 2026-06-29 08:04:38 +00:00
ivann 25851326c1 nixos/koito: init module 2026-06-28 21:25:08 +02:00