Vladimir Serov
5edabf7c0b
moonraker: add useGpiod
2023-10-02 06:09:58 +04:00
Will Fancher
5709754a1d
Merge pull request #237336 from zi3m5f/fix-systemd-nspawn-machineid-option
...
systemd-nspawn: fix spelling of MachineID option and add module test
2023-06-12 13:12:59 -04:00
Robert Hensing
7e63eed145
Merge pull request #237282 from isker/patch-3
...
nixos/nix-daemon: fix URL for nix.conf
2023-06-12 17:01:15 +02:00
Colin
bd77d4ae46
nixos/lemmy: support nginx
2023-06-12 09:59:11 -04:00
Robert Hensing
ed551f4ecf
Merge pull request #237218 from hercules-ci/fix-nixos-generate-config-system
...
nixos-generate-config: Fix generated hostPlatform.system
2023-06-12 12:26:56 +02:00
zi3m5f
67f5dcfd94
nixos/nspawn: fix spelling of systemd.nspawn MachineID option
...
This changes option systemd.nspawn.execConfig.MachineId to MachineID.
See man page systemd.nspawn(5)
2023-06-12 12:08:15 +02:00
Ryan Lahfa
3897d52760
Merge pull request #236134 from Tom-Hubrecht/pixelfed
...
nixos/pixelfed: Fix missing permissions for nginx serving files
2023-06-12 11:59:31 +02:00
Ian Kerins
2f20e0e131
nixos/nix-daemon: fix URL for nix.conf
...
The existing URL no longer takes you somewhere useful.
2023-06-11 23:17:50 -04:00
Martin Weinelt
fe2f291e17
Merge pull request #236757 from max-privatevoid/pam-kanidm
...
nixos/pam: support Kanidm
2023-06-11 20:22:00 +02:00
Robert Hensing
1350e522fa
nixos-generate-config: Fix generated hostPlatform.system
...
While the intent of the code was correct, the system string can not be used
in the substituteAll function.
See https://github.com/NixOS/nixpkgs/issues/237216
2023-06-11 19:28:51 +02:00
Max
847a7f1102
nixos/kanidm: auto-restart kanidm-unixd-tasks
2023-06-11 17:17:42 +02:00
Max
34a4165674
nixos/pam: support Kanidm
2023-06-11 17:17:42 +02:00
Marillindië
e394dc22f9
xray: allow binding lower ports
...
Set CapabilityBoundingSet, AmbientCapabilities and NoNewPrivileges as described in XTLS/xray-install.
2023-06-11 09:03:50 +01:00
Ryan Lahfa
6262a46ba8
Merge pull request #234034 from NixOS/qemu/direct-boot
...
nixos/qemu-vm: introduce `virtualisation.directBoot`
2023-06-10 18:12:56 +02:00
Will Fancher
90d69b1634
Merge pull request #236388 from ElvishJerricco/sd-s1-networkd-stop-on-switch-root
...
systemd stage 1 networking: Stop systemd-networkd on switch-root
2023-06-10 00:35:56 -04:00
Martin Weinelt
0983c18e6a
nixos/go2rtc: add support for v4l2 video sources
...
Capturing from /dev/video* requires being member of the video group.
2023-06-09 20:20:38 +02:00
Sergey Ivanov
bbc56fd1c7
gnunet: fix systemd service config ( #151269 )
...
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com >
2023-06-09 16:33:51 +00:00
Raito Bezarius
610f60231f
nixos/qemu-vm: introduce virtualisation.directBoot
...
As with many things, we have scenarios where we don't want to boot on a
disk / bootloader and also we don't want to boot directly.
Sometimes, we want to boot through an OptionROM of our NIC, e.g. netboot
scenarios or let the firmware decide something, e.g. UEFI PXE (or even
UEFI OptionROM!).
This is composed of:
- `directBoot.enable`: whether to direct boot or not
- `directBoot.initrd`: enable overriding the
`config.system.build.initialRamdisk` defaults, useful for
netbootRamdisk for example.
This makes it possible.
2023-06-09 14:51:18 +02:00
Pol Dellaiera
f0fc9fe22d
Merge pull request #236567 from l0b0/fix-activate-lints
...
nixos/modules: Fix ShellCheck lints
2023-06-08 18:42:38 +02:00
Weijia Wang
4b8f7098da
foundationdb: cleanup
2023-06-08 14:48:41 +03:00
Weijia Wang
0dfe118d22
Merge pull request #236259 from wegank/mongodb-drop
...
mongodb-4_2: drop
2023-06-08 14:40:30 +03:00
Tom McLaughlin
f69aff8f89
github-runner: add thomasjm as maintainer
2023-06-08 01:03:15 -07:00
Will Fancher
5d6ea734a1
systemd stage 1 networking: Stop systemd-networkd on switch-root
...
This essentially backports
https://github.com/systemd/systemd/pull/27791 . `systemd-networkd.service`
is sent the `SIGTERM` signal, but it is not required to be stopped
before `initrd-switch-root.target` is reached, despite the use of
`systemctl isolate initrd-switch-root.target`. This is because when
there is no ordering at all between two units, and a transaction stops
one and starts the other, the two operations can happen
simultaneously. This means the service could still be running when
`switch-root` actually occurs. Then, stage 2 systemd will see the
service still running and decide it doesn't need to add a start
operation for it to its initial transaction. Finally, the service
exits, but only after it's already too late. If, however, there is any
ordering at all between a stopping unit and a starting unit, then the
stop operation will be done first. This way, we ensure that the
service is properly exited before doing `switch-root`.
This is something to keep in mind going forward. There may be other
services that need this treatment. These `before` and `conflicts`
definitions are the correct way to ensure a unit is actually stopped
before you reach initrd-switch-root
2023-06-08 00:25:15 -04:00
Victor Engmark
8deaa732a8
refactor: Split mkdir -m … into mkdir + chmod
...
As recommended by ShellCheck
<https://www.shellcheck.net/wiki/SC2174 >.
2023-06-08 15:55:40 +12:00
Victor Engmark
b0a9abedea
refactor: Use dummy variable name for unused value
...
As recommended by ShellCheck
<https://github.com/koalaman/shellcheck/wiki/SC2034 >.
2023-06-08 15:11:35 +12:00
Martin Weinelt
5715d6b452
Merge pull request #236471 from Mic92/mediawiki-fixes
...
mediawiki: fix group used when apache2 is used
2023-06-08 03:13:35 +02:00
Jörg Thalheim
d3036bb608
mediawiki: fix group used when apache2 is used
2023-06-07 17:31:44 +02:00
Pol Dellaiera
fdcc0ecf37
Merge pull request #236303 from alyssais/StrictModes
...
nixos/sshd: add StrictModes option
2023-06-07 15:53:20 +02:00
Weijia Wang
4b3f710d96
Merge pull request #236363 from pennae/drop-unifi-maint
...
unifi: drop pennae from maintainers
2023-06-07 16:29:31 +03:00
happysalada
d804ca626a
nixos/atuin: add database.createLocally
2023-06-07 05:35:09 -04:00
Michele Guerini Rocco
e9da2bac96
Merge pull request #236048 from rnhmjoj/pr-fix-i2c
...
nixos/hardware/i2c: fix uaccess rule
2023-06-07 10:22:18 +02:00
Michele Guerini Rocco
996dd1c645
Merge pull request #236311 from joee/patch-4
...
nixos/modules/web-servers/nginx/default.nix: fix minor typo
2023-06-07 09:05:22 +02:00
Joe Edmonds
f87892b50b
nixos/modules/web-servers/nginx/default.nix: fix minor typo
2023-06-06 21:55:15 -07:00
Jacob Moody
39f220b6df
nixos/grafana: add jsonData datasource option ( #234364 )
2023-06-07 00:11:10 +02:00
pennae
912caf09f7
unifi: drop pennae from maintainers
...
not using this any more, and really don't have the energy to deal with
neither the fallout of ubnt not officially supporting mongodb newer than
3.6, nor the hacks nixpkgs contains to work around that.
2023-06-06 23:29:46 +02:00
Pol Dellaiera
43b346ea1e
Merge pull request #220481 from uoleg/master
...
nixos/nano: refactor nanorc creation
2023-06-06 21:35:26 +02:00
Sandro
50ab2973ed
Merge pull request #236126 from pacien/exim-service-privilege-namespacing-fix
...
nixos/exim: apply privilege restrictions
2023-06-06 18:29:40 +02:00
Alyssa Ross
eeabae56e7
nixos/sshd: add StrictModes option
2023-06-06 16:06:09 +00:00
Ryan Lahfa
a06d736f1f
Merge pull request #227203 from badele/fix-smokeping-symbolic-links
...
nixos/smokeping: fix smokeping symbolic links
2023-06-06 16:02:58 +02:00
José Romildo Malaquias
4607765abc
Merge pull request #220054 from Scrumplex/init-qt6ct
...
qt6ct: init at 0.8
2023-06-06 09:40:27 -03:00
Domen Kožar
1b4ec8b16b
Merge pull request #233439 from tweag/nix-2.15
...
nix: 2.13.3 -> 2.15.1
2023-06-06 12:51:41 +01:00
Weijia Wang
3f467ff45f
mongodb-4_2: drop
2023-06-06 14:26:11 +03:00
Anand Suresh
aa884b8f3d
improve documentation for nix.settings.sandbox ( #188541 )
...
* add information on the "relaxed" setting in `nix.settings.sandbox`
2023-06-06 10:32:26 +02:00
K900
c3ac633a81
Merge pull request #236109 from K900/no-more-dash-n
...
treewide: clean up usages of `cp -n`
2023-06-06 09:58:15 +03:00
Pol Dellaiera
cc47c2189f
Merge pull request #220068 from h7x4/hedgedoc-allow-nullable-client-secret
...
nixos/hedgedoc: allow `clientSecret` to be null
2023-06-05 21:54:02 +02:00
Tom Hubrecht
953ee5df82
nixos/pixelfed: Fix missing permissions for nginx serving files
...
Also fixes the service `pixelfed-cron` StateDirectory and uses the nginx user instead of group to define nginx appartenance to pixelfed's group
2023-06-05 20:49:16 +02:00
pacien
54be076ae7
nixos/exim: apply privilege restrictions
...
Since 816614bd62 , the service is set to use the exim user so that
systemd takes care of the credentials ownership. The executable is
still required to run as root, to then drop privileges. The prefix '+'
that was used however interfers with the use of privilege restrictions
and other sandboxing options. Since we only want to escape the "User"
setting, we can use the '!' prefix instead.
2023-06-05 20:04:48 +02:00
Sandro
048f167595
Merge pull request #233423 from tomaskala/self-deploy-after-network-online
...
nixos/self-deploy: set after to requires, type to oneshot and remove wantedBy
2023-06-05 19:47:10 +02:00
K900
57e1ea5a18
nixos/libvirtd: don't use cp -n
2023-06-05 19:14:01 +03:00
github-actions[bot]
de4f02a6c8
Merge master into staging-next
2023-06-05 12:01:12 +00:00