Commit Graph

36611 Commits

Author SHA1 Message Date
K900
b964d0d668 Revert "nixos/profiles/hardened: don't enable by default" 2025-02-19 19:53:15 +03:00
K900
6ff9bde2cf nixos/profiles/hardened: don't enable by default (#383422) 2025-02-19 19:32:31 +03:00
Sandro
7379cc70e6 services.restic: use getExe instead of hard-coded path (#376416) 2025-02-19 17:27:20 +01:00
Marie Ramlow
c47719a799 nixos/profiles/hardened: don't enable by default 2025-02-19 17:26:05 +01:00
Sandro
85fda9a3b2 nixos/profiles/hardened: add to module list (#380985) 2025-02-19 17:12:42 +01:00
Jörg Thalheim
55b39e42a6 install-grub: add missing rmtree (#383269) 2025-02-19 21:53:51 +07:00
K900
6fb6b4bd24 moonraker (and friends): update, wire up klipper-estimator analysis support (#382068) 2025-02-19 13:32:04 +03:00
Ramses
9abef1cee8 switch-to-configuration-ng: don't block when the lockfile is already locked (#382797) 2025-02-19 11:07:33 +01:00
Ramses
51e84098b5 nixos-container: avoid subshell when testing $PRIVATE_USERS (#383056) 2025-02-19 10:46:48 +01:00
K900
550696628c nixos/moonraker: allow configuring analysis 2025-02-19 11:11:31 +03:00
Jörg Thalheim
39dd19122f install-grub: add missing rmtree 2025-02-19 14:33:46 +07:00
Jörg Thalheim
8706be35d9 nixos/ghidra: init (#375831) 2025-02-19 14:31:02 +07:00
Adam C. Stephens
223499992b nixos/kanidm: add home_mount_prefix to BindPaths if set (#382915) 2025-02-18 09:06:56 -05:00
lassulus
cc594f99bf nixos/h2o: module init (#382527) 2025-02-18 21:06:35 +07:00
Kerstin
4c18ccc9c4 nixos/mobilizon: update nginx config, mobilizon: fix media proxy (#374273) 2025-02-18 14:33:46 +01:00
Michele Guerini Rocco
d05074f981 nixos/getty: only include if config.console.enable == true (#363533) 2025-02-18 11:44:42 +01:00
Sandro
92dfde3dd8 nixos/mobilizon: minor format 2025-02-18 11:40:50 +01:00
โทสฺตัล
2c1a09f1fe nixos/h2o: init module
Co-Authored-By: adisbladis <adis@blad.is>
2025-02-18 17:06:15 +07:00
Jörg Thalheim
cdf83e0f3a nixos-generate-config: add --flake option (#383033) 2025-02-18 16:50:13 +07:00
GovanifY
6a3f025e54 nixos/ghidra: init 2025-02-18 09:53:01 +01:00
Jean-Baptiste Giraudeau
57c96ff6ef nixos-container: avoid subshell when testing $PRIVATE_USERS
So that the script is not rejected by https://www.shellcheck.net/wiki/SC2235
 under `systemd.enableStrictShellChecks = true;`
2025-02-18 09:41:55 +01:00
Pablo Ovelleiro Corral
1606ea91b4 nixos-generate-config: add --flake option
Co-authored-by: éclairevoyant <848000+eclairevoyant@users.noreply.github.com>
2025-02-18 15:37:53 +07:00
Jörg Thalheim
5be6db6b3d grub modernize (#374844) 2025-02-18 13:03:24 +07:00
Will Fancher
286d25f5ec nixos/networkd: add new options introduced in systemd 257 (#382953) 2025-02-17 19:07:48 -05:00
Sandro
86f9eeb816 nixos-container: add support for --private-users (#362210) 2025-02-18 00:09:56 +01:00
Gaétan Lepage
d7b4e9fe9e nixos/fail2ban: Update openssh option in docs (#371398) 2025-02-17 23:35:57 +01:00
Sandro
8a3e6de4bd alertmanager-gotify-bridge: init at 2.3.2 (#378055) 2025-02-17 23:23:20 +01:00
Sandro
1be5e524f1 nixos/oauth2-proxy-nginx: match files in location block exactly (#382869) 2025-02-17 22:54:49 +01:00
Fernando Rodrigues
cf4c8e97ad nixos/networkd: add new options introduced in systemd 257
The Wireguard public key can now be read from a file.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2025-02-17 21:51:40 +00:00
oddlama
2f45486c6c nixos/kanidm: add home_mount_prefix to BindPaths if set 2025-02-17 21:14:45 +01:00
Sandro Jäckel
d149dabb54 nixos/oauth2-proxy-nginx: match files in location block exactly 2025-02-17 17:28:11 +01:00
Arian van Putten
098d858f3c nixos/image/images: fix sd-card image on aarch64 (#372783) 2025-02-17 15:04:27 +01:00
r-vdp
125edf8424 switch-to-configuration: don't block on flock, see 7a56ddaf9d 2025-02-17 13:14:25 +01:00
Adam C. Stephens
8780973144 incus.ui: 0.7 -> incus-0.14.6, rename to incus-ui-canonical (#382440) 2025-02-16 17:43:56 -05:00
Adam C. Stephens
ad53a8451f incus-ui-canonical: rename from incus.ui 2025-02-16 17:33:03 -05:00
Julian Kuhn
a919728213 nixos/alertmanager-gotify-bridge: init module 2025-02-16 22:38:04 +01:00
Peder Bergebakken Sundt
c78dd5a021 nixos/webdav: add package option (#375129) 2025-02-16 22:00:23 +01:00
Sandro
03b6a553eb nixos/users-groups: split isSystemUser/isNormalUser and uid check into two (#357944) 2025-02-16 20:35:45 +01:00
Franz Pletz
9486edb651 nixos/prometheus: add missing dns_sd_configs types (#382617) 2025-02-16 20:15:32 +01:00
Arian van Putten
3835432751 systemd-repart: Enable custom --empty flags in initrd (#373414) 2025-02-16 20:03:50 +01:00
Jeremy Fleischman
c263be1dee nixos/prometheus: add missing dns_sd_configs types
From
https://prometheus.io/docs/prometheus/latest/configuration/configuration/#dns_sd_config:

> The type of DNS query to perform. One of SRV, A, AAAA, MX or NS.

I also simplified the doc string as it's redundant with the generated
docs.
2025-02-16 23:46:29 +07:00
Bjørn Forsman
92ea914782 nixos/zigbee2mqtt: set StateDirectory
So that the directory is guaranteed to exist at service startup. This
fixes the scenario where the service is stopped, the state directory
removed and the service started again (for testing / starting fresh).

Set StateDirectoryMode to match the existing directory permissions.
2025-02-16 15:52:37 +01:00
Niklas Korz
16fda46db7 nixos/mobilizon: create launch wrapper through runCommand 2025-02-16 15:10:33 +01:00
Christian Kögler
95c58aeb88 nixos/tlp: expose package (#375413) 2025-02-16 14:32:43 +01:00
Sandro
bbea96f543 lomiri.lomiri-calendar-app: init at 1.1.2 (#366949) 2025-02-16 14:30:15 +01:00
misuzu
faa68fc84b vsmartcard-vpcd, vsmartcard-pcsc-relay: init at 0.9-unstable-2025-01-25, nixos/vsmartcard-vpcd: init (#194957) 2025-02-16 10:25:12 +02:00
Christian Kögler
bbd8de2fdd nixos-container: do not touch os-release if it is a symlink (#353366) 2025-02-16 07:43:34 +01:00
Gaétan Lepage
50ac81b1b4 nixos/amazon-cloudwatch-agent: condense module options (#379716) 2025-02-16 00:00:42 +01:00
Christoph Honal
94a66f9416 nixos/vsmartcard-vcpd: init 2025-02-15 22:16:31 +01:00
commiterate
b2b7d1c7de nixos/amazon-cloudwatch-agent: condense module options 2025-02-15 15:13:15 -05:00