Commit Graph

19624 Commits

Author SHA1 Message Date
euxane
ddcbe4c369 nixos/stalwart-mail: add default account directory
This configures a default account directory for the Stalwart service.
It uses the default common database which was already configured.

Without this directory, admins could not manage users and groups using
the `stalwart-cli` tools.
2024-05-30 02:07:17 +02:00
lassulus
d6f07be682 Merge pull request #314889 from DavHau/pr_sshd
nixos/openssh: allow removing settings
2024-05-30 01:01:07 +02:00
euxane
6ee84bcda0 nixos/stalwart-mail: do not use DynamicUser
This service stores a large number of files for its blob store and some
of its databases. This is not compatible with `DynamicUser`, which
`chown`s everything in the state directory every time the service is
started. Therefore, we now use a static system user and group instead.

See https://github.com/NixOS/nixpkgs/pull/313634#discussion_r1609960417
2024-05-30 00:40:12 +02:00
euxane
824949f300 nixos/stalwart-mail: migrate logging config
The logging configuration keys have changed,
which caused this config to be ignored.
2024-05-29 22:17:59 +02:00
Kerstin
daa52e1d9e Merge pull request #289582 from Izorkin/update-mastodon-redis
nixos/mastodon: update redis host and port configurations
2024-05-29 18:41:20 +02:00
Sandro
9584ef2c26 Merge pull request #315189 from SuperSandro2000/gitea-maint 2024-05-29 15:49:00 +02:00
Izorkin
8730a7e8d8 nixos/mastodon: optimize systemd startup order block 2024-05-29 13:45:23 +03:00
Izorkin
a05afb1437 nixos/mastodon: update redis host and port configurations 2024-05-29 13:45:17 +03:00
Frank Doepper
4df955130e nixos/frr: adapt to frr-9
- fix #274286
- remove `-f configfile` from ExecStart
- use /etc/frr/${service}d.conf
- enable mgmtd when staticd is enabled
- don't frr-reload.py mgmtd
- remove obsolete lib.mdDoc
2024-05-29 11:07:39 +02:00
Cosima Neidahl
33ce263359 Merge pull request #315117 from OPNA2608/fix/lomiri-24.05-buildable
lomiri.*: Make buildable while waiting for GLib fix
2024-05-29 08:43:42 +02:00
Ivan Trubach
a5499ee535 nixos/pghero: init 2024-05-29 03:40:48 +03:00
Christina Rust
343ddd9f4b Merge pull request #315263 from srhb/devpi-loadcredential
nixos/devpi-server: fix loading credentials as DynamicUser
2024-05-28 19:22:40 +02:00
abysssol
c01818d57c Merge pull request #314722 from abysssol/ollama-split-listenaddress
nixos/ollama: split `listenAddress` into `host` and `port`
2024-05-28 15:37:51 +00:00
lucasew
4c621ef886 nixos/loki: add network.target to after
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-05-28 12:02:04 -03:00
tcmal
7952d92b82 nixos/akkoma: dont disable protectsystem in confinement mode
this works fine since #289593
2024-05-28 15:47:03 +01:00
tcmal
a247fc94b4 nixos/akkoma: deal with $RUNTIME_DIRECTORY containing multiple entries
this fixes issues with confined module tests.

see https://github.com/NixOS/nixpkgs/pull/313794#issuecomment-2126909110
2024-05-28 15:47:03 +01:00
Someone
93b5069466 Merge pull request #314840 from ereslibre/cdi-fix-egl
hardware/nvidia-container-toolkit: mount `nvidia-driver/share`
2024-05-28 12:50:40 +00:00
Jonas Heinrich
4217b9cd9a nixos/invoiceplane: Remove deprecated extraConfig 2024-05-28 14:07:44 +02:00
Jonas Chevalier
5d6d058646 Merge pull request #308090 from mogeko/service-rke2
nixos/rke2: add rke2 service
2024-05-28 09:36:03 +02:00
Sarah Brofeldt
4d4571b20a nixos/devpi-server: fix loading credentials as DynamicUser 2024-05-28 08:58:24 +02:00
Mogeko
a642efcdab nixos/rke2: add rke2 service
Set assertions to avoid obvious errors.

Eliminate the conflict between default CNI (`cana`) and `NetworkManager`.

Determine whether optional can be used for agent.

Add the option `cisHardening` to enable CIS Hardening.

Set kernel parameters by `boot.kernel.sysctl`.

Using `lib.escapeShellArgs` to make `ExecStart` more resilient to escaping issues.

Using a list of `str` to extra flags.
2024-05-28 12:39:30 +08:00
Rafael Fernández López
79c79671a7 hardware/nvidia-container-toolkit: mount nvidia-driver/share 2024-05-27 23:44:32 +02:00
Sandro Jäckel
73c11de701 gitea,nixos/gitea: add SuperSandro2000 as maintainer, remove inactive maintainers, unify maintainers 2024-05-27 22:48:14 +02:00
OPNA2608
3ef60ac499 lomiri.telephony-service: Mark broken & exclude everywhere
Needs a GLib change to be fixed, which needs a staging cycle, which I was told won't happen in time anymore.
Luckily it's not a crucial component for the desktop mode.
2024-05-27 17:08:53 +02:00
Nikolay Korotkiy
ecddd99c6a nixos/gitDaemon: add package option 2024-05-27 18:50:15 +04:00
John Titor
353aa12446 nixos/hypridle: init 2024-05-27 17:41:36 +05:30
Thomas Gerbet
00015f3ef9 Merge pull request #309036 from tomfitzhenry/sshd-package
nixos/ssh: add services.openssh.package
2024-05-27 09:40:31 +02:00
Maximilian Bosch
a5f800ab48 Merge pull request #311701 from Ma27/bump-grafana
grafana: 10.4.2 -> 11.0.0
2024-05-26 20:47:56 +00:00
DavHau
3fe773a174 nixos/openssh: allow removing settings
# Motivation
So far it was not possible to configure sshd to allow password authentication only for a specific user. This is because in the generated config a `Match User xxx` section would be required before the global `PasswordAuthentication` is defined, as otherwise the global option always takes precedence.
The same problem occurs with multiple other options under `settings`.

# Done
This PR fixes that issue for all settings by simply allowing them to be overridden with `null`, which leads to a removal of that setting from the config.
The user can then correctly configure user specific settings using extraConfig, like this:
```
    Match User user1
    PasswordAuthentication yes
    Match all
    PasswordAuthentication no
```
2024-05-26 18:46:27 +02:00
abysssol
428e60cad9 nixos/ollama: split listenAddress into host and port
breaking change; do not backport
2024-05-25 21:22:15 -04:00
Peter Lehmann
09be64ecc8 nixos/prometheus: Add query_log_file option 2024-05-25 17:03:24 +02:00
sodiboo
0fa287f2ff nixos/invidious-router: maintianers.s1ls -> maintainers.sils 2024-05-25 13:10:20 +02:00
Pol Dellaiera
d091b7f681 Merge pull request #313112 from savyajha/firefly-iii
firefly-iii: 6.1.15 -> 6.1.16
2024-05-25 10:41:44 +02:00
Yt
1777f06494 Merge pull request #314244 from onny/stalwart-cleanup
stalwart-mail_0_6: drop
2024-05-25 01:59:37 +00:00
éclairevoyant
04548e7e1f nixos/journalwatch: add package option 2024-05-24 19:11:54 -04:00
Sandro Jäckel
b064e2db69 nixos/mopidy: add wants network-online.target to fix warning 2024-05-25 00:43:18 +02:00
Silvan Mosberger
6c42e8745a Merge pull request #309517 from bobrippling/fix/ebusd-args
Fix ebusd service argument passing
2024-05-24 23:25:28 +02:00
Vladimir Timofeenko
f41e387c26 nixos/frigate: drop BindPaths from systemd service (#309341)
Migrations have been working well even with misconfigured BindPaths => removing
2024-05-24 18:24:56 +02:00
Andrew Morgan
fad7ecc30f mealie: set the correct port in BASE_URL
Otherwise it would default to port 8080, which breaks generated links
when `cfg.port` is set to another port.
2024-05-24 09:17:47 -05:00
James Atkins
bcaf6de467 mealie: 1.2.0 -> 1.7.0
https://github.com/mealie-recipes/mealie/releases/tag/v1.7.0
2024-05-24 09:17:42 -05:00
Jonas Heinrich
50388b71cc nixos/stalwart-mail: add onny as maintainer 2024-05-24 12:26:13 +02:00
Jonas Heinrich
3d6a20f380 nixos/stalwart-mail: drop legacy package 2024-05-24 12:15:50 +02:00
K900
69aa70cddf Merge pull request #307766 from SuperSandro2000/oauth2-proxy-fix-headers
nixos/oauth2_proxy_nginx: fix proxy_set_header
2024-05-24 10:48:07 +03:00
Pol Dellaiera
d9062cd5f9 Merge pull request #313146 from malteneuss/add-nextjs-ollama-llm-ui
Add nextjs ollama llm UI frontend for Ollama
2024-05-24 06:51:37 +02:00
pennae
4d2462511f Merge pull request #314099 from mrkline/snapper-and-borgbackup-doc-fix
nixos/snapper, nixos/borgbackup: Fix module doc typo
2024-05-24 01:15:09 +02:00
Sandro
3e3ac0e7ba Merge pull request #305516 from OPNA2608/init/lomiri/ayatana-indicator-display
ayatana-indicator-display: init & add to Lomiri
2024-05-24 00:40:55 +02:00
Malte Neuss
8a05b4f8d4 nixos/nextjs-ollama-llm-ui: init module
NixOS already has good support for the Ollama
backend service. Now we can benefit from
having a convenient web frontend as well for it.
2024-05-23 23:48:55 +02:00
Matt Kline
234f4db797 nixos/snapper, nixos/borgbackup: Fix module doc typo
The persistentTimer argument sets the _Persistent_ field in
systemd.timer(5).

Pointed out in #312549
2024-05-23 14:23:40 -07:00
Lin Jian
4be6150a4c Merge pull request #313822 from linj-fork/pr/kanata-config-file
nixos/kanata: add a configFile option
2024-05-24 02:53:42 +08:00
Sandro
d836a3e678 Merge pull request #307499 from SuperSandro2000/bwdc-network-online
nixos/bitwarden-directory-connector-cli: add dependsOn network-online…
2024-05-23 20:47:05 +02:00