Commit Graph

1580 Commits

Author SHA1 Message Date
dish
2b2ff53811 prometheus-script-exporter: switch to maintained fork (#435767) 2025-09-05 11:57:06 -04:00
Maximilian Bosch
409107d2f5 nixos/grafana: don't set X-XSS-Protection anymore
Part of #438800.

The OWASP recommentation[1] is:

> The X-XSS-Protection header has been deprecated by modern browsers
> and its use can introduce additional security issues on the client
> side. As such, it is recommended to set the header as X-XSS-Protection: 0
> in order to disable the XSS Auditor, and not allow it to take the default
> behavior of the browser handling the response. Please use
> Content-Security-Policy instead.

Hence, we turn this off, diverging from the upstream defaults here. An
upstream issue has been opened[2].

[1] https://owasp.org/www-project-secure-headers/#x-xss-protection
[2] https://github.com/grafana/grafana/issues/110369
2025-08-31 15:22:16 +02:00
undefined
5365b3cdd9 gatus: 5.19.0 -> 5.23.2 2025-08-30 05:51:34 +08:00
Sandro
bab1ec5bd3 victoriametrics & vmagent: Make the config check optional (#419908) 2025-08-27 22:25:51 +02:00
dish
970dcca69c treewide: Fix links in module documentation 2025-08-25 12:55:11 -04:00
C4 Patino
4a80d00387 prometheus-script-exporter: switch to maintained fork 2025-08-22 23:47:48 -05:00
Maximilian Bosch
eb6a408547 Merge: nixos/grafana: add prune option to provision.datasources (#431775) 2025-08-22 21:48:35 +02:00
misuzu
4b66d476f3 kminion: 2.2.7 → 2.2.13, init module (#318792) 2025-08-18 19:30:40 +03:00
Sandro
b146c51ce7 vlagent: init at 1.25.0 (#424934) 2025-08-18 01:12:26 +02:00
Christina Sørensen
8373b65856 kminion: format source
Signed-off-by: Christina Sørensen <ces@fem.gg>
2025-08-17 14:07:18 +00:00
Jonathan Davies
314b467ac1 nixos/prometheus-exporters: Added kafka exporter 2025-08-17 14:07:13 +00:00
Maximilian Bosch
c7eb566c41 nixos/grafana: add prune option to provision.datasources
Closes #430532
2025-08-07 17:03:57 +02:00
Matthias Beyer
2c06381907 nixos/traccar: Rework configuration file creation. (#413653) 2025-08-04 10:26:00 +02:00
Martin Weinelt
56674702b0 nixos/postfix: modernize, cleanup (#416840) 2025-08-02 23:50:59 +02:00
Frédéric Christ
51462b8a68 nixos/traccar: Rework configuration file creation.
Previously, a flat attribute set was expected. The new implementation
uses nested attribute sets. This is a breaking change.
2025-08-01 21:25:45 +02:00
Franz Pletz
bec2364ee4 nixos/prometheus.exporters.bitcoin: fix SC2155 (#411022) 2025-07-31 17:18:43 +02:00
Martin Weinelt
7f52135a59 nixos/postfix: fold main and master config into settings attribute 2025-07-28 17:03:08 +02:00
Martin Weinelt
029f408b94 treewide: migrate postfix configurations to service.postfix.config
The `services.postfix.config` option is a freeform type that represents
settings in `main.cf`. The top-level options on the postfix module were
replaced by these and that is the reason behind this migration.
2025-07-28 16:42:17 +02:00
Grimmauld
84cbe9dce4 nixos/netdata: remove cgroup accounting enable
cgroup accounting is enabled by default, and the option is scheduled for removal.
2025-07-28 11:26:41 +02:00
Ryan Horiguchi
62d7be2954 nixos/netdata: fix module when withSystemdJournal = false 2025-07-27 07:32:56 +02:00
diniamo
5bb944c6f5 nixos/grafana: add openFirewall option 2025-07-25 10:02:17 +02:00
Shawn8901
37deae36ba nixos/vlagent: init 2025-07-24 19:55:02 +02:00
Wolfgang Walther
5a0711127c treewide: run nixfmt 1.0.0 2025-07-24 13:55:40 +02:00
Wolfgang Walther
62fe016519 treewide: run treefmt with mdcr/nixfmt 2025-07-24 13:52:31 +02:00
Wolfgang Walther
6c47e7d5da treewide: fix syntax errors in nix code blocks
Fixes all code blocks with "nix" language in markdown files for syntax
errors to be able to run nixfmt in the next step.
2025-07-24 13:52:29 +02:00
Felix Bargfeldt
4c6641db92 nixos/alertmanager-ntfy: improve documentation about topic option (#426956) 2025-07-23 19:35:42 +02:00
Maximilian Bosch
0bb1514207 nixos/alertmanager-ntfy: improve documentation about topic option
This cannot be left unset, otherwise the evaluation would fail. However,
it should be treated as secret. Update description to reflect that.
2025-07-23 18:51:19 +02:00
mivorasu
d80ed4cb91 treewide: conform descriptions to the standards
Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com>
2025-07-22 23:44:23 +00:00
nixpkgs-ci[bot]
adc74351e2 Merge staging-next into staging 2025-07-04 00:18:19 +00:00
Philip Wilk
e97badfdd7 nixos/ups: add package option 2025-07-03 22:30:43 +02:00
nixpkgs-ci[bot]
536476f3aa Merge staging-next into staging 2025-07-01 12:08:22 +00:00
HE7086
ab2dc5c3f9 nixos/prometheus-wireguard-exporter: add support for new flags 2025-06-30 20:56:40 +02:00
nixpkgs-ci[bot]
62814d33b6 Merge staging-next into staging 2025-06-30 18:06:45 +00:00
Jenny
9bb3e93ca4 nixos/librenms: fix link (#421053) 2025-06-30 14:35:59 +02:00
nixpkgs-ci[bot]
eee21ba9fa Merge staging-next into staging 2025-06-30 12:08:05 +00:00
Franz Pletz
629135df7f nixos/prometheus.alertmanagerIrcRelay: fix network-online.target ordering but not depending warning (#358851) 2025-06-30 12:26:16 +02:00
Franz Pletz
e8c0884917 nixos/prometheus-wireguard-exporter: Add a new option to export wireguard_latest_handshake_delay_seconds. (#419815) 2025-06-30 12:25:18 +02:00
nixpkgs-ci[bot]
6d1ef78814 Merge staging-next into staging 2025-06-30 00:19:30 +00:00
Sandro
6dcce44311 prometheus-mailman3-exporter: init at 0.9.1 (#398164) 2025-06-29 22:30:36 +02:00
Sandro
e3180b7675 nixos/librenms: fix link 2025-06-29 18:41:21 +02:00
K900
5985f13b69 Merge remote-tracking branch 'origin/staging-next' into staging 2025-06-27 21:07:44 +03:00
Mike Kusold
292073c5cc victoriametrics & vmagent: Make the config check optional
This follows the pattern that AlertManager uses. Currently if you use
environment variables, the config check will fail.
2025-06-25 08:55:34 -06:00
Jeevan Shikaram
b10dabd009 nixos/prometheus-wireguard-exporter: Add a new option to export wireguard_latest_handshake_delay_seconds. 2025-06-25 18:13:45 +10:00
Wolfgang Walther
41c5662cbe nixos/postgresql: move postStart into separate unit
This avoids restarting the postgresql server, when only ensureDatabases
or ensureUsers have been changed. It will also allow to properly wait
for recovery to finish later.

To wait for "postgresql is ready" in other services, we now provide a
postgresql.target.

Resolves #400018

Co-authored-by: Marcel <me@m4rc3l.de>
2025-06-24 15:26:47 +02:00
zimbatm
39c01d22bf net-tools: rename from nettools
By being in sync with the pname, it makes it easier to walk back from
the pname that shows in the /nix/store back to the attribute.

This change should not cause any rebuild.
2025-06-21 19:57:36 +02:00
Jon Seager
f186923e32 scrutiny: fix collector endpoint to include basepath (#369221) 2025-06-18 16:53:03 +02:00
Aleksana
2054cff512 nixos/gatus: fix missing CAP_NET_RAW (#415877) (#415879) 2025-06-13 17:59:21 +08:00
WilliButz
356d4fc91c treewide: remove myself from maintainers
This removes maintainer entries which haven't reflected reality for a
while, mostly due to a change in focus towards other topics.
2025-06-11 17:39:42 +02:00
griffi-gh
288b6609cb nixos/gatus: fix missing CAP_NET_RAW (#415877) 2025-06-11 17:35:12 +02:00
Maximilian Bosch
d92e71021b Merge: nixos/vmalert: support multiple instances (#410856) 2025-06-09 15:18:38 +02:00