Commit Graph

39375 Commits

Author SHA1 Message Date
Felix Buehler
7b39ce457f nixos/pptpd: deprecate phases 2025-08-12 22:39:09 +02:00
Paul Haerle
086d855355 netbird: 0.49.0 -> 0.54.0 + split up + relicense (#431976) 2025-08-11 22:10:25 +02:00
K900
d56d26bf30 nixos/pcscd: fix eval 2025-08-11 21:56:05 +03:00
Krzysztof Nazarewski
f1277e5434 netbird: 0.49.0 -> 0.54.0 + split up + relicense
- 0.53.0+ relicensed the server components
  - as a result split into per-component packages
- adds missing 2 upload & relay components
- the tested behavior has changed
2025-08-11 20:46:42 +02:00
Emily
137414cf20 nixos/{consul-template,vault-agent}: drop template sub-option (#431031) 2025-08-11 19:29:32 +02:00
Maximilian Bosch
0dd4477d19 Merge: Fix: Correct podman systemd service name (#425170) 2025-08-11 18:39:10 +02:00
Franz Pletz
43a602c25d nixos/libvirtd: allow changing firewall backend (#432610) 2025-08-11 16:00:12 +02:00
isabel
7c854b91a6 nixos/pcscd: Allow configuration of filters (#425047) 2025-08-11 14:36:08 +01:00
Adam C. Stephens
af7f652b8d nixos/traefik: add WorkingDirectory (#432214) 2025-08-11 07:50:10 -04:00
Jack Rosenberg
f26c52e8cf nixos/traefik: add WorkingDirectory 2025-08-11 11:03:17 +02:00
Janne Heß
48d85cad8d nixos/oxidized: allow for providing config by other means (#431687) 2025-08-11 10:37:33 +02:00
Wolfgang Walther
f96d58f0c8 nixos/config/sysfs: run treefmt 2025-08-11 09:16:28 +02:00
Mikael Voss
ba04f97d4e nixos/config/sysfs: init module 2025-08-11 12:16:59 +05:30
nikstur
42cf56db09 nixos/system-path: add corePackages option
This allows users to override all packages. This is useful to build
minimal systems that really don't required these packages that
previously were "required".
2025-08-10 22:48:26 +02:00
nikstur
f087e5c94b nixos/network-interfaces: add packages to corePackages
This allows users to override (i.e. exclude) these packages from their
system closure if they don't need them.
2025-08-10 22:48:26 +02:00
nikstur
e63a403bfb nixos/kernel: don't include append-initrd-secrets when unused 2025-08-10 22:43:48 +02:00
nikstur
bc5eefd2a5 nixos/activation-script: disable userActivationScripts when system is not activatable 2025-08-10 22:43:42 +02:00
nikstur
0d9a5c2059 nixos/fuse: add enable option
Fuse is stil enabled by default so the default behaviour of NixOS
doesn't change. However, now it's possible to actively exclude fuse when
you don't need it.
2025-08-10 22:43:39 +02:00
nikstur
9e0ac0c7e6 nixos/kexec: add enable option
It is still enabled by default but now you can actively exclude it if
you don't need it.
2025-08-10 22:43:34 +02:00
nikstur
898ebf78ef nixos/bash: re-introduce enable option 2025-08-10 22:43:28 +02:00
nikstur
d5ae87bdeb Revert "nixos: allow more things to be disabled" 2025-08-10 22:22:08 +02:00
André Lima
28d3245201 nixos/libvirtd: allow changing firewall backend 2025-08-10 21:06:54 +01:00
Ryan Lahfa
c230381b25 nixos/test-instrumentation: use bash directly (#432290) 2025-08-10 20:17:13 +02:00
Arian van Putten
1bb040fae8 nixos: allow more things to be disabled (#429695) 2025-08-10 19:49:52 +02:00
Luke Granger-Brown
7f552ff771 tayga: 0.9.2 -> 0.9.5 (#432528) 2025-08-10 17:50:45 +02:00
Pol Dellaiera
4594192170 nixos/netbird: fix desktop file name pattern (#432535) 2025-08-10 17:18:12 +02:00
lassulus
5316ba88a5 nixos/prosody: remove erronous spaces in module names 2025-08-10 17:09:16 +02:00
Luke Granger-Brown
4548324aae nixos/tayga: add option to allow toggling WKPF strict compliance
The RFC requires that we don't allow access to non-global v4 addresses
using the well-known 64:ff9b:: prefix, but there are some deployments
where it's convenient to permit this.

To make this work in tests, disable wkpf-strictness via the config
option introduced in bc18503e2ff1ee48ac472a67ba982dae76a5c2d3.

Tayga added 100.64.0.0 to the set of WKPF in
4dff17ef61821f5bc1996ce687a3dc317fd4fa50.
2025-08-10 17:00:13 +02:00
Luke Granger-Brown
b45ba94a0e nixos/tayga: add log option
This allows configuring logging in tayga, and enables it for the NixOS
test.
2025-08-10 16:37:42 +02:00
Florian Klink
73582e4158 nixos/tayga: fix config reload
Use a trampoline at /etc/tayga.conf for the config, so reload actually
picks up a changed config file.
2025-08-10 16:30:52 +02:00
Rohan Verma
4c2b315075 nixos/netbird: fix desktop file name pattern
The desktop file substitution was looking for 'Name=NetBird' but the
actual desktop file contains 'Name=Netbird' (with lowercase 'b').

Fixes #432454
2025-08-10 19:49:14 +05:30
Martin Weinelt
63c4ed7e64 nixseparatedebuginfod2: init package and module (#428845) 2025-08-10 15:46:23 +02:00
Martin Weinelt
43eb19bae2 nixos/frigate: validate config at build time (#429986) 2025-08-10 15:09:02 +02:00
K900
aadb3e60ec linux: remove mentions of extraStructuredConfig & throw error (#432497) 2025-08-10 15:16:42 +03:00
Maximilian Bosch
dccb264578 linux: remove mentions of extraStructuredConfig & throw error
PR #431115 changed extraStructuredConfig to structuredExtraConfig to
follow the deprecation warning about `extraConfig`. However,
`extraStructuredConfig` was mentioned in several places in the docs that
weren't addressed. Also, using this would silently fail since the code
in question would still accept the old key.

This patch updates the docs accordingly and throws an error if the
code-path is reached and `extraStructuredConfig` is being used.
2025-08-10 14:10:50 +02:00
Jörg Thalheim
4940959d28 nixos/mediawiki: fix error from wfGetDB being removed (#427623) 2025-08-10 11:42:14 +02:00
lassulus
cb771a25a1 jitsi-meet: fix infinite recursion with prosody package (#432371) 2025-08-10 09:34:49 +02:00
Emily
46aad76001 nixos/iso-image: Support systemd initrd (#291750) 2025-08-10 05:37:48 +01:00
Martin Weinelt
a0f387ae34 nixos/frigate: validate config at build time
Only in non-cross setups because we cannot infer the buildPackages
version of cfg.package when overridden.
2025-08-10 02:18:22 +02:00
lassulus
804919a7f4 nixos/prosody: fix serialization error if httpFileShare is null 2025-08-10 01:03:49 +02:00
lassulus
6f224e65ea jitsi-meet: fix infinite recursion with prosody package 2025-08-10 00:23:58 +02:00
Sandro
29484ab654 nixos/zwave-js: allow non-world-readable secrets (#411496) 2025-08-09 21:53:14 +02:00
Morgan Jones
1dc3ecfc93 nixos/gdm: Add conffile to gdm-fingerprint (#424733) 2025-08-09 19:36:31 +00:00
Farid Zakaria
17b28eabbb nixos/gdm: Add conffile to gdm-fingerprint 2025-08-09 11:47:12 -07:00
Ryan Lahfa
bcc20cad16 nixos/network-interfaces: let networkd handle privacy extensions (#431967) 2025-08-09 17:53:39 +02:00
nikstur
3ae9229600 nixos/test-instrumentation: use bash directly 2025-08-09 17:39:01 +02:00
nikstur
439d68b58d nixos/audit: fix journald test
Makes the audit module responsible for setting up the audit subsystem of
the kernel. The auditd module is now only responsible for setting up the
daemon.

Enable the audit subsystem early via kernelParams.

Increase the default audit backlog limit so that it works out of the box
for a normal system.

Remove a superfluous and pointless test case.
2025-08-09 15:00:41 +02:00
Elis Hirwing
465f689e63 treewide: Remove myself as a maintainer from most things 2025-08-09 08:41:25 +02:00
Yohann Boniface
eeffb605af nh: Delay clean service so it doesnt slow down boot (#431770) 2025-08-09 05:24:00 +02:00
nikstur
bb954cddf5 nixos/network-interfaces: let networkd handle privacy extensions
This removes bash from the mandatory system closure.
2025-08-09 00:10:13 +02:00