Commit Graph

1268 Commits

Author SHA1 Message Date
Lin Jian
d27a248494 Merge pull request #255064 from tomfitzhenry/vikunja-cli
nixos/vikunja: install 'vikunja' CLI tool
2023-09-20 18:03:34 +08:00
Kerstin Humm
d989b040da nixos/mobilizon: migrate to mdDoc 2023-09-14 07:53:23 +00:00
Tom Fitzhenry
355cfada40 nixos/vikunja: install 'vikunja' CLI tool
See https://vikunja.io/docs/cli/
2023-09-14 15:52:56 +10:00
Anna Aurora
8a1734ec98 nixos/meme-bingo-web: init service 2023-09-12 02:45:58 +00:00
Lassulus
38e6d28575 Merge pull request #251323 from saserr/improve-healthchecks
healthchecks: add DB, DB_NAME and support for several _FILE options
2023-09-11 17:30:59 +02:00
Nick Cao
a1635b3821 Merge pull request #249939 from erdnaxe/galene-fix
nixos/galene: do not restrict AF_NETLINK
2023-09-10 08:49:19 -04:00
ajs124
f8df5ffdfe nixos/tt-rss: fix and significantly simplify database setup
the schema files referenced in the current preStart are empty.
other ones exist, but don't apply cleanly either.
calling update.php with --update-schema works for initial setup and
updates. if the database schema is already up to date, it's idempotent.
2023-09-09 19:11:54 +02:00
Salar Rahmanian
e8210b2aac plausible: 1.4.4 -> 1.5.1 2023-09-08 20:54:05 +00:00
Kerstin Humm
36ff7d5d5d mobilizon: init at 3.1.3
Co-Authored-By: Minijackson <minijackson@riseup.net>
Co-Authored-By: summersamara <summersamara@proton.me>
2023-09-07 08:59:40 +00:00
Weijia Wang
71c99509fd Merge pull request #250224 from n0emis/grocy-4.0.2
grocy: 4.0.0 -> 4.0.2
2023-09-07 01:59:28 +02:00
Sanjin Sehic
7f5e8a0113 nixos/healthchecks: enable _FILE variants for all secrets
This change enables _FILE variants for all secrets in Healthchecks
configuration so they can be read from a file and not stored in
/nix/store.

In particular, it adds support for these secrets:
DB_PASSWORD, DISCORD_CLIENT_SECRET, EMAIL_HOST_PASSWORD,
LINENOTIFY_CLIENT_SECRET, MATRIX_ACCESS_TOKEN, PD_APP_ID,
PUSHBULLET_CLIENT_SECRET, PUSHOVER_API_TOKEN, S3_SECRET_KEY, SECRET_KEY,
SLACK_CLIENT_SECRET, TELEGRAM_TOKEN, TRELLO_APP_KEY, and TWILIO_AUTH.
2023-09-02 09:43:19 +01:00
Sanjin Sehic
4a81613aa6 nixos/healthchecks: add EMAIL_HOST_PASSWORD_FILE option
This allows keeping EMAIL_HOST_PASSWORD out of /nix/store.
2023-09-02 09:43:17 +01:00
Sanjin Sehic
9e9f7c4aa6 nixos/healthchecks: define default DB_NAME for postgres and mysql
Previously, if someone changed DB to postgres or mysql and forgot to
change DB_NAME, services.healthchecks would have used the hardcoded path
that was meant for the sqlite as DB_NAME.

This change introduces DB and DB_NAME options in
services.healthchecks.settings.
2023-09-02 09:43:12 +01:00
Matt Melling
9181483d66 nixos/cloudlog: remove pin for PHP 8.1 2023-08-31 23:51:25 +01:00
Pol Dellaiera
df24943cc0 Merge pull request #249765 from NixOS/nixos/modules/honk-init
nixos/honk: init
2023-08-28 10:40:23 +02:00
Pol Dellaiera
48de649336 nixos/modules/honk: init 2023-08-27 23:43:40 +02:00
happysalada
676fe5e01b lemmy: fix ui commit_hash path 2023-08-27 20:44:10 +08:00
revol-xut
0ebb3b6ed8 nixos/netbox: add keycloakClientSecret option 2023-08-25 15:42:44 +01:00
Benjamin Staffin
63e9b2f8c0 Merge pull request #246354 from minijackson/netbox-fixes
netbox: 3.5.6 -> 3.5.7 + migration fixes + upgrade NixOS test
2023-08-21 16:22:38 -04:00
Ember Keske
0138e327c1 grocy: clear viewcache before start 2023-08-21 10:36:24 +02:00
Ember Keske
0b1ef8ea9e grocy: 4.0.0 -> 4.0.2 2023-08-19 13:52:07 +02:00
Franz Pletz
4fe4a74fe5 Merge pull request #246713 from n0emis/grocy-4.0.0
grocy: 3.3.0 -> 4.0.0
2023-08-19 13:41:22 +02:00
Ember Keske
66ee520289 grocy: replace @ma27 with @n0emis as maintainer 2023-08-19 13:02:04 +02:00
Alexandre Iooss
64a71aea98 nixos/galene: do not restrict AF_NETLINK
Built-in TURN server requires AF_NETLINK address family.
2023-08-19 08:47:01 +02:00
Felix Bühler
96481fd201 Merge pull request #249323 from kevincox/photoprism-chmod
nixos.photoprism: Relax sandbox to allow running exiftool
2023-08-17 21:01:40 +02:00
Freakmiko
66469836be Fix Lemmy Caddy config static path handling
Due to lemmy-ui using a sub-path for the static files, the original static path handling was not sufficient
2023-08-17 04:19:48 +08:00
Kevin Cox
86c67a1f11 nixos.photoprism: Relax sandbox to allow running exiftool
exiftool is written in Perl which appears to call `chown` as part of startup. This is blocked by the `@privileged` system call group. This causes a failure when changing image orientation.

Fixes: https://github.com/NixOS/nixpkgs/issues/249120
2023-08-15 07:58:42 -04:00
Sophie Tauchert
1a3b7f61b2 nixos/invidious: generate hmac_key automatically
This change also generates the invidious config by putting JSON
snippets into a bash array and then using jq to merge them all into
a single configuration where later elements override previous
elements.
2023-08-15 10:48:30 +02:00
Maximilian Bosch
648546b09d nixos/nextcloud: improve documentation of adminuser-option
This option only has an effect on the initial setup of Nextcloud and
changes later won't have any effect.

Same issue as with `adminpassFile` - it's only passed to the installer
command - but even worse because the username is frequently used as
unique ID in the database, so there's no trivial way to change it, even
imperatively.
2023-08-07 12:16:41 +02:00
Maximilian Bosch
01820d520b Merge pull request #247384 from jtbx/nextcloud-doc
nixos/nextcloud: improve documentation
2023-08-06 12:27:33 +02:00
Jeremy
c7a9f7c132 nixos/nextcloud: improve documentation 2023-08-06 10:02:52 +12:00
Maximilian Bosch
2ddb1453e6 nixos/nextcloud: make php settings additive
Right now, the settings aren't additive which means that when I do

    services.nextcloud.phpOptions."opcache.interned_strings_buffer = "23";

all other options are discarded because of how the module system works.

This isn't very nice in this case, though because wanting to override
a single option doesn't mean I want to discard the rest of the -
reasonable - defaults. Hence, the settings are showed as default in the
option's manual section, but are added with normal priority.

That means, to override _all_ options at once, an expression like

    services.nextcloud.phpOptions = mkForce {
      /* ... */
    };

is needed. This is also way more intuitive IMHO because the `mkForce`
explicitly tells that everything will be modified.

Also, APCu enable and the memory & file-size limits are also written
into `services.nextcloud.phpOptions` rather than adding them
silently before passing all options to the PHP package. This has the
benefit that users will realize on evaluation time that they configured
options that would otherwise be set by the module on its own.
2023-08-05 11:58:11 +02:00
ajs124
bf4d2e6c1e Merge pull request #242538 from tnias/fix/apparmor
apparmor: add some policies and improve abstractions and utils
2023-08-04 13:05:52 +02:00
Ember Keske
c247201679 grocy: 3.3.0 -> 4.0.0 2023-08-02 06:44:36 +02:00
Pol Dellaiera
fa8883c580 hedgedoc: remove top level with lib; 2023-08-01 16:01:02 +02:00
Pol Dellaiera
b7062f43e2 hedgedoc: add enableStatsApi configuration option 2023-08-01 15:52:11 +02:00
Pol Dellaiera
a521506834 hedgedoc: use lib.mkPackageOptionMD 2023-08-01 15:51:33 +02:00
Minijackson
d1b0a9543d nixos/netbox: move migration into the preStart netbox.service, reindex
Now migrations are run only on upgrade / downgrade and first start,
which makes netbox much faster on a normal start.

add the reindex for NetBox > 3.5.0, to populate the index, preventing
empty search results.

Migrations were moved out of netbox-migration.service into
netbox.service, to prevent service dependency issues when upgrading
NixOS.
2023-08-01 14:45:01 +02:00
Minijackson
a57a322b8d nixos/netbox: add GIT_PATH environment variable
used by the synchronization backend for remote git repositories, in
"Data Sources"
2023-07-31 14:39:08 +02:00
Minijackson
bcdc4d976c nixos/netbox: remove "with lib;" 2023-07-31 14:38:26 +02:00
Eric Wolf
318d8cc4c5 nixos/lemmy: limit impurity by secrets
Split `services.lemmy.secretFile` into
multiple options to allow only secrets.
2023-07-28 07:49:27 +00:00
ajs124
c9cf0708f0 Merge pull request #229271 from markus-heinrich/submit/sogo
nixos/sogo: fix nginx proxy_buffer config
2023-07-26 12:39:51 +02:00
Emily
2d83cbda63 Merge pull request #244463 from mattmelling/cloudlog-pin-php8
cloudlog: pin php version
2023-07-23 23:09:50 +02:00
Felix Bühler
0a2745684e Merge pull request #239624 from Stunkymonkey/use-optionalString-then
treewide: use optionalString instead of 'then ""'
2023-07-22 13:02:47 +02:00
Felix Bühler
f7bb884c13 Merge pull request #243850 from mattchrist/nixos/freshrss_auth_type
nixos/freshrss: authType option
2023-07-20 18:58:45 +02:00
Matt Melling
3f34b65b2c cloudlog: pin php version 2023-07-20 09:24:47 +01:00
Matt Christ
c4d28ff161 nixos/freshrss: authType option
This patch adds an `authType` option to enable configuring FreshRSS's
`auth_type` parameter.
Upstream documentation for this feature is located here:
https://freshrss.github.io/FreshRSS/en/admins/09_AccessControl.html

An accompanying NixOS test is provided to confirm this feature works
as expected.
2023-07-19 19:43:55 -05:00
Martin Weinelt
aadb3f3058 Merge pull request #244188 from mweinelt/engelsystem-php81
nixos/engelsystem: pin php at 8.1
2023-07-19 21:13:26 +02:00
Sandro Jäckel
fe6304df54 nixos/nexus: use mkPackageOption, cleanup
This fixes:
trace: warning: literalExample is deprecated, use literalExpression instead, or use literalMD for a non-Nix description.
2023-07-19 13:13:28 +02:00
Martin Weinelt
c8a7edcee1 nixos/engelsystem: pin php at 8.1
Upstream supports php 8.0/8.1 for the 3.3.0 release. The upgrade to 8.2
caused a type mismatch in carbon.

> PHP message: Exception: Code: 0, Message: Carbon\Carbon::setLastErrors(): Argument #1 ($lastErrors) must be of type array, bool given, called in /nix/store/2prnw9qya9kaks2rwvd6fkrz0c7l5ygd-engelsystem-3.3.0/share/engelsystem/vendor/nesbot/carbon/src/Carbon/Traits/Creator.php on line 98, File: vendor/nesbot/carbon/src/Carbon/Traits/Creator.php:928
2023-07-18 18:34:58 +02:00