gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
636,268 Commits 9 Branches 0 Tags
1f577fc00a75e6e586d98e7ab72f3d9757219d5f
Commit Graph
636268 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
emilylange ac20219508 nixos/rl-2411: add services.forgejo.secrets 
and the accompanying `services.forgejo.mailerPasswordFile` deprecation.
 2024-06-05 01:05:47 +02:00
Nick Cao e0399f66a7 julia_110: 1.10.3 -> 1.10.4 2024-06-04 19:01:45 -04:00
Nick Cao ab880c58dc julia_110-bin: 1.10.3 -> 1.10.4 2024-06-04 19:01:44 -04:00
Connor Baker 5515dd00e7 python3Packages.fastembed: 0.2.2 -> 0.2.7; fixups 2024-06-04 22:56:26 +00:00
Nick CaoandGitHub 61ed00ff17 Merge pull request #316436 from NickCao/telegram-desktop 
telegram-desktop: 5.0.6 -> 5.1.2
 2024-06-04 18:48:28 -04:00
emilylange fd58d2299b nixos/tests/forgejo: test cfg.secrets using /metrics endpoint 
Heavily inspired by b59e5a34e7 (gitea).
 2024-06-05 00:46:00 +02:00
emilylange 694db856ed nixos/forgejo: refactor secrets, add cfg.secrets 
This is not a breaking change. Existing setups continue to work as-is.

Users of `cfg.mailerPasswordFile` will get an option rename/deprecation
warning, but that's it (assuming there is no regression).

This adds `cfg.secrets`, which is a wrapper over systemd's
`LoadCredential=` leveraging Forgejo's `environment-to-ini`.

`environment-to-ini` is intended for configuring Forgejo in OCI
containers.

It requires some fairly annoying escaping of the section names to fit
into the allowed environment variable charset.

E.g. `"log.console".COLORIZE = false` becomes
`FORGEJO__LOG_0x2E_CONSOLE__COLORIZE=false`.

 - `.` needs to be replaced with `_0X2E_` and
 - `-` needs to be replaced with `_0X2D_`

Those are simply the hex representation of each char from an ASCII
table:

. = ASCII 46 = 46 (decimal) = 2E (hex) = 0x2E = _OX2E_

To make interacting with `environment-to-ini` less annoying, we template
and escape the sections/keys in nix:

`cfg.secrets` takes the same free-form sections/keys as `cfg.settings`.
Meaning there is now a generalized abstraction for all keys, not just
those that have been manually implemented in the past.

It goes as far as theoretically allowing one to have `DEFAULT.APP_NAME`
read from a secret file.

I don't know why one would want to do that, but it has been made
possible by this :^)

More reasonable examples are listed in the `cfg.secrets` option example.

We also continue to bootstrap a handful of secrets like
`security.SECRET_KEY`. This is done is a sort of sidecar bootstrap unit
fittingly called `forgejo-secrets.service`.

Overriding those is, just like before, not really intended and requires
the use of `lib.mkForce` and might lead to breakage. But it is, in a
way, more possible than before.
 2024-06-05 00:45:59 +02:00
emilylange ae8404ff58 forgejo: build environment-to-ini for use in nixos/forgejo secret refactor 
This is needed for the upcoming nixos/forgejo secret refactor that will
leverage `environment-to-ini` instead of `pkgs.replace-secret`.

https://codeberg.org/forgejo/forgejo/src/tag/v7.0.2/contrib/environment-to-ini/environment-to-ini.go

To read the motivation behind this, please see the actual nixos/forgejo
refactor commit following this commit.
 2024-06-05 00:45:48 +02:00
Connor Baker d63eb88a50 neuron: 8.2.3 -> 8.2.4; fixup 2024-06-04 22:29:48 +00:00
YtandGitHub 1f3cfae3d5 Merge pull request #317231 from lytedev/gleam-1.2.1 
gleam: 1.2.0 -> 1.2.1
 2024-06-04 22:09:21 +00:00
YtandGitHub 227f0327cb Merge pull request #317245 from BaerLKR/update-nu_plugin_net 
nu_plugin_net: 1.4.0 -> 1.4.1
 2024-06-04 22:05:54 +00:00
R. Ryantm af134dc1a0 troubadix: 24.5.1 -> 24.6.1 2024-06-04 21:44:35 +00:00
Palmer Cox 64e2cdf640 python312Packages.mypy: 1.9.0 -> 1.10.0 2024-06-04 17:10:02 -04:00
Palmer Cox 0d6e647a7d python312Packages.schema-salad: 8.5.20240410123758 -> 8.5.20240503091721 2024-06-04 17:09:56 -04:00
Palmer Cox e6b776ccb0 cwltool: 3.1.20240404144621 -> 3.1.20240508115724 2024-06-04 17:09:55 -04:00
Weijia WangandGitHub ea51548160 Merge pull request #312976 from r-ryantm/auto-update/python311Packages.ufo2ft 
python311Packages.ufo2ft: 3.2.2 -> 3.2.4
 2024-06-04 23:06:02 +02:00
superherointjandGitHub 286f327936 Merge pull request #317272 from znaniye/ols 
ols: 0-unstable-2024-05-22 -> 0-unstable-2024-06-04
 2024-06-04 18:04:08 -03:00
Weijia WangandGitHub 5f6578b809 Merge pull request #314490 from r-ryantm/auto-update/highlight 
highlight: 4.11 -> 4.12
 2024-06-04 23:03:23 +02:00
Weijia WangandGitHub 8be1b6e399 Merge pull request #315264 from r-ryantm/auto-update/python311Packages.oracledb 
python311Packages.oracledb: 2.2.0 -> 2.2.1
 2024-06-04 22:58:20 +02:00
superherointjandGitHub e3a7460822 Merge pull request #316757 from superherointj/dotnet-label 
github/labeler.yml: add dotnet label
 2024-06-04 17:56:04 -03:00
Lorenz Leutgeb 9b3d0c78e5 radicle-node: 1.0.0-rc.9 → 1.0.0-rc.10 2024-06-04 22:55:56 +02:00
Weijia WangandGitHub f291248c3b Merge pull request #315553 from r-ryantm/auto-update/python311Packages.azure-mgmt-network 
python311Packages.azure-mgmt-network: 25.3.0 -> 25.4.0
 2024-06-04 22:52:59 +02:00
Nick CaoandGitHub fd4562040d Merge pull request #317241 from Kranzes/jnv 
jnv: remove no longer needed dependencies
 2024-06-04 16:50:47 -04:00
Christian KöglerandGitHub d1af0c17b3 Merge pull request #312936 from ck3d/neovide-rm-x86-darwin 
neovide: remove unsupported x86_64-darwin
 2024-06-04 22:50:21 +02:00
Weijia WangandGitHub fe4c307794 Merge pull request #315498 from r-ryantm/auto-update/nix-index-unwrapped 
nix-index-unwrapped: 0.1.7 -> 0.1.8
 2024-06-04 22:50:06 +02:00
Nick CaoandGitHub e05241210d Merge pull request #317246 from r-ryantm/auto-update/tile38 
tile38: 1.32.2 -> 1.33.0
 2024-06-04 16:49:55 -04:00
Weijia WangandGitHub dec43af2b3 Merge pull request #315518 from r-ryantm/auto-update/saml2aws 
saml2aws: 2.36.15 -> 2.36.16
 2024-06-04 22:49:44 +02:00
Nick CaoandGitHub dc5dc0c712 Merge pull request #317247 from r-ryantm/auto-update/vals 
vals: 0.37.1 -> 0.37.2
 2024-06-04 16:49:11 -04:00
Weijia WangandGitHub 5d9ca45fe5 Merge pull request #315502 from r-ryantm/auto-update/atmos 
atmos: 1.73.0 -> 1.76.0
 2024-06-04 22:48:54 +02:00
Nick CaoandGitHub 02707c597f Merge pull request #317264 from r-ryantm/auto-update/openvas-scanner 
openvas-scanner: 23.3.1 -> 23.3.2
 2024-06-04 16:48:38 -04:00
Nick CaoandGitHub f4dddc2060 Merge pull request #317266 from r-ryantm/auto-update/stackit-cli 
stackit-cli: 0.7.0 -> 0.8.0
 2024-06-04 16:48:12 -04:00
Weijia WangandGitHub 310c60970c Merge pull request #315783 from r-ryantm/auto-update/dprint 
dprint: 0.45.1 -> 0.46.1
 2024-06-04 22:47:15 +02:00
Weijia WangandGitHub 1f49b84af4 Merge pull request #315765 from r-ryantm/auto-update/libtransmission_4 
libtransmission_4: 4.0.5 -> 4.0.6
 2024-06-04 22:46:50 +02:00
Alyssa Ross ba96c1f7e5 doc: fix make-disk-image.nix example 2024-06-04 21:46:41 +01:00
Nick CaoandGitHub c51bbc122f Merge pull request #317207 from Kiskae/nvidia/470.256.02 
linuxPackages.nvidiaPackages.legacy_470: 470.239.06 -> 470.256.02
 2024-06-04 16:46:21 -04:00
Nick CaoandGitHub ed83d0241a Merge pull request #317216 from r-ryantm/auto-update/flake-checker 
flake-checker: 0.1.18 -> 0.1.19
 2024-06-04 16:45:43 -04:00
Nick CaoandGitHub 50b99e0531 Merge pull request #317220 from Moraxyc/update-nezha-agent 
nezha-agent: 0.16.10 -> 0.16.11
 2024-06-04 16:44:56 -04:00
Nick CaoandGitHub ad45289533 Merge pull request #317221 from wrbbz/pulumi-bin-3.118.0 
pulumi-bin: 3.117.0 -> 3.118.0
 2024-06-04 16:44:18 -04:00
Nick CaoandGitHub 67508ee945 Merge pull request #317183 from gador/pipenv-poetry-migrate-0.5.7 
python311Packages.pipenv-poetry-migrate: 0.5.6 -> 0.5.7
 2024-06-04 16:41:19 -04:00
Nick CaoandGitHub 377f970dbe Merge pull request #317190 from r-ryantm/auto-update/granted 
granted: 0.27.0 -> 0.27.2
 2024-06-04 16:39:54 -04:00
Weijia WangandGitHub b188c5c8e4 Merge pull request #315788 from r-ryantm/auto-update/flat-remix-gnome 
flat-remix-gnome: 20240503 -> 20240526
 2024-06-04 22:38:05 +02:00
Pascal BachandGitHub e710ea9931 Merge pull request #316925 from r-ryantm/auto-update/git-cliff 
git-cliff: 2.2.2 -> 2.3.0
 2024-06-04 22:36:17 +02:00
Nick CaoandGitHub bdaaf420a2 Merge pull request #317117 from fabaff/exploitdb-bump 
exploitdb: 2024-06-02 -> 2024-06-04
 2024-06-04 16:35:38 -04:00
Weijia WangandGitHub 365231d71d Merge pull request #315785 from r-ryantm/auto-update/glab 
glab: 1.40.0 -> 1.41.0
 2024-06-04 22:32:30 +02:00
R. RyantmandWeijia Wang 932c8db595 shikane: 0.2.0 -> 1.0.1 2024-06-04 22:31:55 +02:00
niksturandGitHub 1baf7d7e4e Merge pull request #314890 from danielbarter/repart-image-fix 
repart-image: remove --map-root-user flag from unshare
 2024-06-04 22:28:05 +02:00
Weijia WangandGitHub 83b947e59f Merge pull request #315545 from r-ryantm/auto-update/vivaldi 
vivaldi: 6.7.3329.31 -> 6.7.3329.35
 2024-06-04 22:24:52 +02:00
Nick CaoandGitHub 16f0bfbb36 Merge pull request #317073 from r-ryantm/auto-update/quarto 
quarto: 1.4.554 -> 1.4.555
 2024-06-04 16:24:12 -04:00
Weijia WangandGitHub ca7ec229e3 Merge pull request #315377 from r-ryantm/auto-update/kubevirt 
kubevirt: 1.2.0 -> 1.2.1
 2024-06-04 22:23:58 +02:00
Weijia WangandGitHub f25ded268b Merge pull request #315290 from r-ryantm/auto-update/touchosc 
touchosc: 1.3.1.204 -> 1.3.3.207
 2024-06-04 22:23:46 +02:00