Commit Graph

4270 Commits

Author SHA1 Message Date
github-actions[bot]
4883735d0c Merge staging-next into staging 2024-06-06 06:01:40 +00:00
Jonathan Davies
7d7cb3e425 doc/release-notes: 24.11: Added Quickwit item to new services. 2024-06-06 00:49:42 +01:00
github-actions[bot]
937c2fa134 Merge staging-next into staging 2024-06-05 18:01:19 +00:00
Adam C. Stephens
af4ac075a3 Merge pull request #312523 from emilylange/nixos-forgejo-secrets
nixos/forgejo: refactor secrets, add `cfg.secrets`, forgejo: build `environment-to-ini`, nixos/tests/forgejo: test `cfg.secrets` using /metrics endpoint
2024-06-05 10:01:37 -04:00
github-actions[bot]
d7993cebbc Merge staging-next into staging 2024-06-05 12:01:43 +00:00
Thomas Gerbet
ef6fea2d86 openssh: move Kerberos support into a dedicated package
The `openssh` and `openssh_hpn` packages are now built without
the Kerberos support by default in an effort to reduce the attack surface.

The Kerberos support is likely used only by a fraction of the total users
(I'm guessing mainly users integrating SSH in an Active Directory env) so
dropping it should not impact too many users. It should also be noted that
the Kerberos/GSSAPI auth is disabled by default in the configuration.
`opensshWithKerberos` and `openssh_hpnWithKerberos` are added in order
to provide an easy migration path for users needing this support.

The `openssh_gssapi` package is kept untouched.
2024-06-05 19:45:31 +10:00
Pol Dellaiera
133aa44c38 Merge pull request #317286 from drupol/open-webui-add-more-env
nixos/{ollama,open-webui}: minor service update
2024-06-05 09:12:28 +02:00
Pol Dellaiera
8ea262601a nixos/open-webui: add release note entry 2024-06-05 08:05:18 +02:00
github-actions[bot]
1e2381cfc5 Merge staging-next into staging 2024-06-05 00:02:59 +00:00
emilylange
ac20219508 nixos/rl-2411: add services.forgejo.secrets
and the accompanying `services.forgejo.mailerPasswordFile` deprecation.
2024-06-05 01:05:47 +02:00
kirillrdy
dfee75c298 Merge pull request #309121 from jlbribeiro/pkgs/zx-8.0.2
zx: 7.2.3 -> 8.1.2
2024-06-05 06:07:55 +10:00
Arian van Putten
f8439331dc doc/release-notes: Add note about backwards compatibility in ACME module
Co-authored-by: Stéphan Kochen <git@stephank.nl>
2024-06-04 20:23:30 +02:00
Thomas Gerbet
71ac0e5f22 Merge pull request #317024 from risicle/ris-zerocallusedregs-default-relnotes
nixos/doc/rl-2411: `zerocallusedregs` hardening flag enabled by default
2024-06-04 12:55:27 +02:00
José Ribeiro
6fc5c63584 doc(rl-24.11): zx v8 breaking changes 2024-06-03 22:16:55 +01:00
Robert Scott
35b3c16331 nixos/doc/rl-2411: zerocallusedregs hardening flag enabled by default 2024-06-03 22:02:18 +01:00
Sandro
617a79dd10 doc/release-notes: repalce security.pam.enableSSHAgentAuth with security.pam.sshAgentAuth.enable 2024-06-03 13:34:00 +02:00
Sandro
6f02edec1a Merge pull request #316358 from majewsky/portunus-remove-libxcrypt-legacy 2024-06-02 23:10:26 +02:00
Vassilis Palassopoulos
f41fc204d6 doc/release-notes: fix option that enables Plasma 6 2024-06-02 13:48:33 +03:00
Aleksana
5a7bf1479a Merge pull request #316270 from wegank/release-notes-3
doc/release-notes: update info on gnome 46
2024-06-01 16:33:46 +08:00
Stefan Majewsky
d11d18df30 portunus: remove libxcrypt-legacy usage 2024-06-01 10:28:21 +02:00
Silvan Mosberger
72ca766b70 Merge pull request #316207 from infinisil/release-notes-lib 2024-06-01 08:58:07 +02:00
Weijia Wang
6fd5c54452 doc/release-notes: update info on gnome 46 2024-06-01 00:05:54 +02:00
Weijia Wang
d95b1060ca Release NixOS 24.05 2024-05-31 20:17:44 +02:00
Silvan Mosberger
2906c69534 doc/release-notes: Add section on lib 2024-05-31 18:37:30 +02:00
Martin Weinelt
85cdd3a849 Merge pull request #316026 from wegank/release-notes-2
doc/release-notes: highlight desktop environment updates
2024-05-31 10:24:10 +02:00
Weijia Wang
8c58b05881 doc/release-notes: highlight desktop environment updates 2024-05-31 02:13:24 +02:00
Yt
6606ce9c0c Merge pull request #273101 from onny/invoiceplane-settings2
nixos/invoiceplane: Remove deprecated extraConfig
2024-05-31 00:04:34 +00:00
euxane
0174aa1c56 nixos/stalwart-mail: rocksdb as default storage
This sets RocksDB as the default storage backend for `stateVersion` >=
24.11. For previous `stateVersion`s, the structured data and blobs
remain on SQLite and the filesystem respectively.

This is closer to the suggested upstream configuration for fully local
storage.
2024-05-30 16:22:03 +02:00
Someone
7781c1a927 Merge pull request #303682 from SomeoneSerge/feat/imgui-cmake
imgui: ship vcpkg' (cmake) distribution info
2024-05-29 12:48:33 +00:00
Someone Serge
fdf0e19b73 imgui: mention cmake integration in release notes 2024-05-28 19:58:02 +00:00
Jacek Generowicz
9c6861249c Further tweaks to release notes 2024-05-28 17:28:29 +02:00
Jacek Generowicz
005ef76e9e Consistently use capitalized Nix in plain text 2024-05-28 17:28:29 +02:00
Jacek Generowicz
9708aca853 Various tweaks to release notes 2024-05-28 17:28:29 +02:00
Jacek Generowicz
e36f83eac4 Clean up the curious dwarf-fortress note 2024-05-28 17:28:28 +02:00
Jonas Heinrich
4217b9cd9a nixos/invoiceplane: Remove deprecated extraConfig 2024-05-28 14:07:44 +02:00
Jonas Chevalier
5d6d058646 Merge pull request #308090 from mogeko/service-rke2
nixos/rke2: add rke2 service
2024-05-28 09:36:03 +02:00
Mogeko
a642efcdab nixos/rke2: add rke2 service
Set assertions to avoid obvious errors.

Eliminate the conflict between default CNI (`cana`) and `NetworkManager`.

Determine whether optional can be used for agent.

Add the option `cisHardening` to enable CIS Hardening.

Set kernel parameters by `boot.kernel.sysctl`.

Using `lib.escapeShellArgs` to make `ExecStart` more resilient to escaping issues.

Using a list of `str` to extra flags.
2024-05-28 12:39:30 +08:00
Franz Pletz
e047b23254 Merge pull request #313844 from superherointj/nginx-libgd-optional 2024-05-27 02:10:55 +02:00
Maximilian Bosch
a5f800ab48 Merge pull request #311701 from Ma27/bump-grafana
grafana: 10.4.2 -> 11.0.0
2024-05-26 20:47:56 +00:00
superherointj
f2a202ff38 nixos/doc/rl-2411: nginx now has gd, geoip as an optional 2024-05-25 12:12:50 -03:00
Jonas Heinrich
3c80361f9a nixos/stalwart-mail: add release notes 2024-05-24 12:25:33 +02:00
Weijia Wang
a64a502cd7 Merge pull request #313251 from lucc/nvimpager
nvimpager: 0.12.0 -> 0.13.0
2024-05-24 10:14:29 +02:00
Pol Dellaiera
d9062cd5f9 Merge pull request #313146 from malteneuss/add-nextjs-ollama-llm-ui
Add nextjs ollama llm UI frontend for Ollama
2024-05-24 06:51:37 +02:00
Malte Neuss
8a05b4f8d4 nixos/nextjs-ollama-llm-ui: init module
NixOS already has good support for the Ollama
backend service. Now we can benefit from
having a convenient web frontend as well for it.
2024-05-23 23:48:55 +02:00
Bobby Rong
e967f2f99c Merge pull request #313416 from bobby285271/upd/pantheon-tweaks
pantheon-tweaks: 1.1.2 -> 2.0.1
2024-05-23 21:26:59 +08:00
Lucas Hoffmann
eff2e77eee nvimpager: 0.12.0 -> 0.13.0 2024-05-23 14:57:33 +02:00
Jeremy Baxter
20fc095a1c nixos/oink: init module 2024-05-23 10:12:53 +12:00
Jacek Generowicz
028cc4b606 doc/release-notes: more release note edits (#313730)
* Move watchdogd to correct section

* Move FileSender to correct position

* Reword

* Add TODO querying meaning of dwarf-fortress note

* Remove comments suggesting random item placement

* Add comments asking to maintain alphabetical order
2024-05-22 18:57:12 +02:00
Weijia Wang
f7da007372 doc/release-notes: update codename 2024-05-22 18:48:39 +02:00
Weijia Wang
4a817d2083 24.05 is Vicuña 2024-05-22 18:15:34 +02:00