networkException and lassulus
2ce1e84103
nixos/nextcloud: use LoadCredential to read secrets
...
This patch adds support for using systemd's LoadCredential
feature to read various secret files used by nextcloud service
units.
Previously credentials had to be readable by the nextcloud user,
this is now no longer required.
The nextcloud-occ wrapper script has been adjusted to use
systemd-run for loading credentials when being called from
outside a service.
In detail this change touches various details of the module:
- The nix_read_secret() php function now takes the name of a
file relative to the path specified in the CREDENTIALS_DIRECTORY
environment variable.
- The nix_read_secret() now exits with error code 1 instead of
throwing a RuntimeException as this will properly error out
the nextcloud-occ script
- Only the nextcloud-setup service unit has the adminpass credential
added in addition to the other credentials
- Uses of ExecCondition= in nextcloud-cron and nextcloud-update-db
have been replaced by a shell conditional as ExecCondition currently
doesn't support credentials
- The phpfpm-nextcloud service now runs a preStart script to make
the credentials it gets readable by the nextcloud user as the
unit runs as root but the php process itself as nextcloud.
- To invoke occ notify_push:setup when using nextcloud notify_push
a new service has been added that replaces the preStart script
in nextcloud-notify_push.service. This has been done as the
main executable only needs the database password credential.
Co-authored-by: lassulus <lassulus@lassul.us >
2025-01-21 13:13:34 +01:00
networkException
e6b078981b
nixos/nextcloud: move systemd service overrides for phpfpm-nextcloud closer to phpfpm config
2025-01-21 13:13:33 +01:00
networkException
598ba3922c
nixos/nextcloud: use writeShellApplication for nextcloud-occ
...
This patch replaces the use of writeScriptBin for the nextcloud-occ
script with writeShellApplication, enabling shell checking.
This patch also updates various invocations of the script to
use lib.getExe.
2025-01-21 13:13:32 +01:00
networkException
9ffa0a5945
nixos/tests/nextcloud: test for notify_push in with-declarative-redis-and-secrets
...
This patch adds a subtest and corresponding configuration to
with-declarative-redis-and-secrets to test for nextcloud notify_push
to be working, just as in with-postgresql-and-redis.
As notify_push needs to connect to the database, including it
in this test checks that it can read the dbpassFile properly.
2025-01-21 13:13:30 +01:00
Jörg Thalheim and GitHub
c80e750b52
sunshine: 0.23.1 -> 2025.118.151840 ( #375153 )
2025-01-21 13:06:13 +01:00
Emily Trau and GitHub
759cb9ce57
Make gradle update script runnable on macos ( #374074 )
2025-01-21 22:47:16 +11:00
Kerstin and GitHub
f4e3779598
nixos/radicale: Allow AF_UNIX for systemd log ( #373893 )
2025-01-21 12:43:28 +01:00
K900 and GitHub
adf31f6844
nixos/tests: fix bonding test ( #375496 )
2025-01-21 14:14:13 +03:00
e6b177df20
gollama: 1.28.4 -> 1.28.5 ( #375467 )
...
Co-authored-by: genga898 <genga898@users.noreply.github.com >
2025-01-21 11:07:05 +00:00
K900
441c242855
nixos/tests: fix bonding test
2025-01-21 13:44:36 +03:00
0x4A6F and GitHub
f7b9530368
nodejs_23: 23.5.0 -> 23.6.0 ( #371909 )
2025-01-21 11:39:57 +01:00
Mutsuha Asada and Vincent Laporte
d21198f27d
ocamlPackages.odoc-parser: add momeemt to maintainers
2025-01-21 11:37:28 +01:00
Mutsuha Asada and Vincent Laporte
5b4048d900
ocamlPackages.odoc-parser: 2.4.2 -> 2.4.4
...
Changelog: https://github.com/ocaml/odoc/releases/tag/2.4.4
Diff: https://github.com/ocaml/odoc/compare/2.4.2...2.4.4
2025-01-21 11:37:28 +01:00
Doron Behar and GitHub
d9e47de23e
gqrx: add darwin support ( #375406 )
2025-01-21 12:20:22 +02:00
Jan Tojnar and GitHub
028048884d
Merge libgda: fix mysql ( #375044 )
2025-01-21 11:17:35 +01:00
Sandro and GitHub
2630f1f73f
nixos/stirling-pdf: fix external dependencies and service permissions ( #374225 )
2025-01-21 11:17:14 +01:00
Ramses and GitHub
a1a54943ff
fwupd: 2.0.3 -> 2.0.4 ( #375313 )
2025-01-21 11:06:04 +01:00
Jon Seager and GitHub
3c6c229eb2
parca-agent: 0.35.1 -> 0.35.2 ( #375462 )
2025-01-21 09:32:14 +00:00
Jon Seager and GitHub
db1a74c678
google-chrome: Fix Qt support ( #375279 )
2025-01-21 09:31:40 +00:00
e579a7f31b
vieb: 12.1.0 -> 12.2.0 ( #375455 )
...
Co-authored-by: tejing1 <tejing@tejing.com >
2025-01-21 09:24:42 +00:00
ac402b208e
sqlc: 1.27.0 -> 1.28.0 ( #375443 )
...
Co-authored-by: aaronjheng <aaronjheng@users.noreply.github.com >
2025-01-21 09:06:08 +00:00
Pol Dellaiera and GitHub
f7553c07e7
phpExtensions.opentelemetry: 1.1.0 -> 1.1.1 ( #375456 )
2025-01-21 09:51:18 +01:00
R. Ryantm
5c4a9835ba
gollama: 1.28.4 -> 1.28.5
2025-01-21 08:29:19 +00:00
547beff605
spicy-parser-generator: 1.11.3 -> 1.12.0 ( #371669 )
...
Co-authored-by: tobim <tobim@users.noreply.github.com >
2025-01-21 08:27:18 +00:00
R. Ryantm
a14a9c0263
parca-agent: 0.35.1 -> 0.35.2
2025-01-21 08:08:02 +00:00
Ramses and GitHub
5ba03e67b1
dotnet-ef: 9.0.0 -> 9.0.1 ( #374945 )
2025-01-21 09:02:28 +01:00
Gaël Reyrol
13fba90003
phpExtensions.opentelemetry: 1.1.0 -> 1.1.1
...
Diff: https://github.com/open-telemetry/opentelemetry-php-instrumentation/compare/1.1.0...1.1.1
Changelog: https://github.com/open-telemetry/opentelemetry-php-instrumentation/releases/tag/1.1.1
2025-01-21 08:56:52 +01:00
R. Ryantm
92ff026807
vieb: 12.1.0 -> 12.2.0
2025-01-21 07:44:43 +00:00
Gaétan Lepage and GitHub
426d8e9ac6
mprocs: 0.7.1 -> 0.7.2 ( #375444 )
2025-01-21 08:41:03 +01:00
Gaetan Lepage
7562f48a27
mprocs: 0.7.1 -> 0.7.2
...
Diff: https://github.com/pvolok/mprocs/compare/refs/tags/v0.7.1...v0.7.2
Changelog: https://github.com/pvolok/mprocs/releases/tag/v0.7.2
2025-01-21 08:27:40 +01:00
stereomato
ad370bf190
google-chrome: Fix QT support
...
Up until now, the AllowQt feature and the "Use Qt" button on Chrome's settings simply did nothing, now, they work.
Related to: https://github.com/NixOS/nixpkgs/issues/228751
Signed-off-by: stereomato <stereomato@proton.me >
2025-01-21 02:07:47 -05:00
R. Ryantm
ca043d9d73
sqlc: 1.27.0 -> 1.28.0
2025-01-21 07:05:23 +00:00
K900 and GitHub
1371a55a79
build-support/vm: don't depend on the "unix" module ( #375355 )
2025-01-21 07:29:37 +03:00
wxt
3d7ef2f051
libgda: fix mysql
2025-01-21 12:27:27 +08:00
rewine and GitHub
ec9f2c23c1
cosmic-term: 1.0.0-alpha.3 -> 1.0.0-alpha.5.1 ( #374031 )
2025-01-21 11:44:12 +08:00
rewine and GitHub
250f437737
cosmic-edit: 1.0.0-alpha.4 -> 1.0.0-alpha.5.1 ( #374026 )
2025-01-21 11:43:31 +08:00
Martin Weinelt and GitHub
886a2858d3
mediawiki: 1.42.4 -> 1.43.0 ( #369641 )
2025-01-21 03:25:11 +01:00
Martin Weinelt
19a38ac732
nixos/mediawiki: make changes for 1.43.0
2025-01-21 03:12:28 +01:00
Robert Schütz and GitHub
252bfe3a84
python312Packages.robotframework-seleniumlibrary: 6.6.1 -> 6.7.0 ( #374665 )
2025-01-20 18:12:13 -08:00
Robert Schütz
aee5b623e0
python313Packages.approvaltests: skip failing test
2025-01-20 17:48:47 -08:00
9588b8422b
stevenblack-blocklist: 3.15.5 -> 3.15.8 ( #372042 )
...
Co-authored-by: Frontear <Frontear@users.noreply.github.com >
2025-01-21 01:47:19 +00:00
Robert Schütz
eac6cd05b2
python313Packages.mrjob: depends on standard-pipes
2025-01-20 17:40:15 -08:00
Robert Schütz
f68436411d
python313Packages.standard-pipes: init at 3.13.0
2025-01-20 17:39:38 -08:00
Fabian Affolter and GitHub
6a3dd6351f
python313Packages.kasa-crypt: 0.4.4 -> 0.5.0 ( #375396 )
2025-01-21 00:24:18 +01:00
Fabian Affolter and GitHub
623cccb2c6
python313Packages.mitogen: 0.3.20 -> 0.3.21 ( #375394 )
2025-01-21 00:23:33 +01:00
Fabian Affolter and GitHub
2527d0061d
python313Packages.ayla-iot-unofficial: 1.4.4 -> 1.4.5 ( #375404 )
2025-01-21 00:23:09 +01:00
Fabian Affolter and GitHub
55f5902ed2
python313Packages.cyclopts: 3.2.1 -> 3.3.0 ( #375398 )
2025-01-21 00:20:18 +01:00
Fabian Affolter and GitHub
6a5af8efd7
python313Packages.asteval: 1.0.5 -> 1.0.6 ( #375399 )
2025-01-21 00:19:51 +01:00
Fabian Affolter and GitHub
1da7d94e6f
python313Packages.thermopro-ble: 0.10.0 -> 0.10.1 ( #375401 )
2025-01-21 00:19:27 +01:00
Fabian Affolter and GitHub
8a55a6a691
python313Packages.python-overseerr: 0.5.0 -> 0.6.0 ( #375402 )
2025-01-21 00:19:07 +01:00
