Commit Graph
642669 Commits
Author SHA1 Message Date
euxane 3d10deb7a5 nixos/cgit: fix GIT_PROJECT_ROOT ownership
The GIT_PROJECT_ROOT directory is now created at runtime instead of
being assembled at build time.

This fixes ownership issues which prevented those repositories to be
read by users other than root. This also avoids creating symlinks in
the nix store pointing to the outside.
2024-06-22 19:45:25 +02:00
euxane 2d8626bf0a nixos/cgit: configurable user instead of root
This allows running cgit instances using dedicated users instead of
root. This is now set to "cgit" by default.
2024-06-22 19:45:25 +02:00
euxane 51b246a1ac nixos/fcgiwrap: do not run as root by default
Use a dynamic user instead unless one is specified.
2024-06-22 19:45:25 +02:00
euxane c5dc3e2034 nixos/fcgiwrap: adapt consumer modules and tests 2024-06-22 19:45:25 +02:00
euxane 81f72015f0 nixos/fcgiwrap: add unix socket owner, private by default
This adds a few options to properly set the ownership and permissions
on UNIX local sockets, set to private by default.

Previously, the created UNIX local sockets could be used by any local
user. This was especially problematic when fcgiwrap is running as root
(the default).
2024-06-22 19:45:25 +02:00
euxane 289c1585c2 nixos/fcgiwrap: limit prefork type to positives 2024-06-22 19:45:25 +02:00
euxane 3955eaf450 nixos/fcgiwrap: improve readability of CLI args 2024-06-22 19:45:25 +02:00
euxane 8101ae41f8 nixos/fcgiwrap: adapt consumer modules and tests 2024-06-22 19:45:25 +02:00
euxane 022289f2fa nixos/fcgiwrap: group options logically, fix doc
Since we're already introducing some backward-incompatible change in
the previous commit, let's make the options more tidy, also preparing
for the introduction of more options.

This also fixes the documentation of the user and group options which
are applying to the service's running user, not the socket.
2024-06-22 19:45:25 +02:00
euxane bf2ad6f48c nixos/fcgiwrap: adapt consumer modules and tests
This also fixes the gitolite-fcgiwrap test by running git through
fcgiwrap as the proper user.
2024-06-22 19:45:25 +02:00
euxane 41419ca288 nixos/fcgiwrap: refactor for multiple instances
This allows configuring and starting independent instances of the
fgciwrap service, each with their own settings and running user,
instead of having to share a global one.

I could not use `mkRenamedOptionModule` on the previous options
because the aliases conflict with `attrsOf submodule` now defined at
`services.fcgiwrap`. This makes this change not backward compatible.
2024-06-22 19:45:15 +02:00
Christian KöglerandGitHub e2a6227705 Merge pull request #321699 from ck3d/localai-2171
local-ai: 2.16.0 -> 2.17.1
2024-06-22 18:08:52 +02:00
Marcus RambergandGitHub 0445f6f541 Merge pull request #321426 from ifd3f/caligula/mark-nonbroken-darwin
caligula: mark darwin as no longer broken
2024-06-22 18:08:33 +02:00
Jan TojnarandGitHub 69cc9ae079 Merge pull request #321778 from Aleksanaa/gnome-podcasts
gnome-podcasts: 0.6.1 -> 0.7.1
2024-06-22 18:00:36 +02:00
Martin WeineltandGitHub 0f27188ebe Merge pull request #321779 from pinpox/init-ha-awtrix
home-assistant-custom-components.awtrix: init at unstable-2024-05-26
2024-06-22 17:49:13 +02:00
Christian Kögler 9ad5d2dec8 local-ai: 2.16.0 -> 2.17.1 2024-06-22 17:39:54 +02:00
Benjamin StaffinandGitHub 4530b8f72f nixos/ipa: Lower default sssd debug_level (#310662)
debug_level 65510 (0x3f7f0) is _extremely_ verbose, far more than one
would want in normal operation.  Setting these in the default config
also makes it difficult to override in a user config.  Anyone who needs
greater verbosity can add these options to their own sssd config, or
adjust them at runtime with `sssctl debug-level`.
2024-06-22 11:31:18 -04:00
Benjamin StaffinandGitHub e93ccda887 nixos/ipa: Make ipa_hostname configurable (#321588)
Some sites put hosts in domains outside of the IPA server's default
domain, so this needs to be user-configurable.  The default is to use
the system's FQDN if it is configured, otherwise fallback to the
previous default behaviour of assuming the IPA's server's domain.
2024-06-22 11:29:54 -04:00
Pablo Ovelleiro Corral 9a0659560e home-assistant-custom-components.awtrix: init at unstable-2024-05-26 2024-06-22 17:28:58 +02:00
Masum RezaandGitHub 7546a9d9de Merge pull request #261858 from FliegendeWurst/gummy
gummy: 0.3 -> 0.6.0
2024-06-22 20:55:50 +05:30
Marc JakobiandMatthieu Coudron d5bf1b6a3b luaPackages.lz-n: 1.3.0-1 -> 1.3.2-1 2024-06-22 17:23:40 +02:00
Julien MalkaandGitHub dac08a037c Merge pull request #320817 from camillemndn/jitsi-excalidraw
jitsi-excalidraw: add update script
2024-06-22 17:19:12 +02:00
205bd6f42b whatsapp: init at 2.24.11.85 (#321464)
Co-authored-by: DontEatOreo <57304299+DontEatOreo@users.noreply.github.com>
2024-06-22 20:45:31 +05:30
Masum RezaandGitHub 3c831e9939 Merge pull request #264430 from Compile-Time/master
keym: init at unstable-2022-07-10
2024-06-22 20:39:48 +05:30
Masum RezaandGitHub c7a12cd27d Merge pull request #318620 from CherryKitten/update-john
john: 1.9.0-Jumbo-1 -> rolling-2404
2024-06-22 20:31:00 +05:30
Masum RezaandGitHub 2ec0c360fe Merge pull request #287566 from ScatteredRay/djv-openexr
djv: Adding OpenEXR Support
2024-06-22 20:30:39 +05:30
Julien MalkaandGitHub ba524a9470 Merge pull request #320886 from camillemndn/jellyseerr
jellyseerr: fix update script
2024-06-22 17:00:07 +02:00
Leona MaroniandGitHub 6311a7abf3 Merge pull request #318814 from NickCao/keycloak
keycloak: 24.0.5 -> 25.0.1
2024-06-22 16:52:12 +02:00
aleksana 51096f2d7a gnome-podcasts: 0.6.1 -> 0.7.1 2024-06-22 22:44:46 +08:00
Yaya 343b3d4e6d liferea: 1.15.6 -> 1.15.7
- changelog: https://github.com/lwindolf/liferea/releases/tag/v1.15.7
- diff: https://github.com/lwindolf/liferea/compare/v1.15.6...v1.15.7
2024-06-22 16:38:53 +02:00
Martin WeineltandGitHub 7bba7b6029 Merge pull request #321757 from fabaff/motionblindsble
python312Packages.motionblindsble: init at 0.1.0
2024-06-22 16:31:16 +02:00
Nick Cao 0360d42e20 nixos/keycloak: disable keycloak-metrics-spi in tests 2024-06-22 10:23:09 -04:00
Nick Cao d10d0fc423 nixos/keycloak: update options for release 25.0.0
Reference: https://www.keycloak.org/docs/25.0.0/upgrading/
2024-06-22 10:23:09 -04:00
Nick Cao 134a223f3f keycloak: 24.0.5 -> 25.0.1
Diff: https://github.com/keycloak/keycloak/compare/24.0.5...25.0.1
2024-06-22 10:23:08 -04:00
Nick CaoandGitHub d60c3f1479 Merge pull request #321734 from fabaff/aioairzone-bump
python312Packages.aioairzone: 0.7.6 -> 0.7.7
2024-06-22 10:17:05 -04:00
Nick CaoandGitHub 038f320271 Merge pull request #321735 from fabaff/aiounifi-bump
python312Packages.aiounifi: 78 -> 79
2024-06-22 10:16:36 -04:00
Nick CaoandGitHub 36df2dd033 Merge pull request #321658 from r-ryantm/auto-update/witness
witness: 0.5.2 -> 0.6.0
2024-06-22 10:15:07 -04:00
Nick CaoandGitHub 46c3d66873 Merge pull request #321660 from r-ryantm/auto-update/myks
myks: 4.2.0 -> 4.2.1
2024-06-22 10:14:37 -04:00
Nick CaoandGitHub f6f6e05cc0 Merge pull request #321671 from r-ryantm/auto-update/python311Packages.clarifai
python311Packages.clarifai: 10.3.3 -> 10.5.2
2024-06-22 10:14:08 -04:00
Nick CaoandGitHub 471e99df44 Merge pull request #321681 from r-ryantm/auto-update/automatic-timezoned
automatic-timezoned: 2.0.16 -> 2.0.17
2024-06-22 10:13:09 -04:00
Nick CaoandGitHub 9d264360ea Merge pull request #321627 from r-ryantm/auto-update/ardugotools
ardugotools: 0.5.1 -> 0.5.2
2024-06-22 10:11:32 -04:00
Nick CaoandGitHub 986e7d6116 Merge pull request #321640 from r-ryantm/auto-update/narrowlink
narrowlink: 0.2.5 -> 0.2.6
2024-06-22 10:10:31 -04:00
Nick CaoandGitHub c2205591e5 Merge pull request #321642 from r-ryantm/auto-update/jql
jql: 7.1.11 -> 7.1.12
2024-06-22 10:09:45 -04:00
Nick CaoandGitHub a868def91f Merge pull request #321646 from r-ryantm/auto-update/python311Packages.aioairzone-cloud
python311Packages.aioairzone-cloud: 0.5.2 -> 0.5.3
2024-06-22 10:08:19 -04:00
Azat BahawiandGitHub b466320a96 Merge pull request #321541 from r-ryantm/auto-update/vcmi
vcmi: 1.5.2 -> 1.5.3
2024-06-22 17:07:42 +03:00
Nick CaoandGitHub 3080a35155 Merge pull request #321560 from JamieMagee/genie-partner-sdk-1.0.4
python312Packages.genie-partner-sdk: 1.0.3 -> 1.0.4
2024-06-22 10:06:49 -04:00
Nick CaoandGitHub e35a50fcde Merge pull request #321648 from r-ryantm/auto-update/qdrant-web-ui
qdrant-web-ui: 0.1.28 -> 0.1.29
2024-06-22 10:06:28 -04:00
Nick CaoandGitHub c53c6a3bd5 Merge pull request #321651 from r-ryantm/auto-update/ddns-go
ddns-go: 6.6.2 -> 6.6.3
2024-06-22 10:05:52 -04:00
Nick CaoandGitHub fc33f2fcff Merge pull request #321652 from r-ryantm/auto-update/tparse
tparse: 0.13.3 -> 0.14.0
2024-06-22 10:05:33 -04:00
Nick CaoandGitHub b1ba72eda9 Merge pull request #321581 from YMSTNT/update-hifile
hifile: 0.9.9.12 -> 0.9.9.13
2024-06-22 10:04:10 -04:00