Commit Graph

3133 Commits

Author SHA1 Message Date
Sandro
bd820895a9 nixos/rsync: remove assertion (#455800) 2025-10-29 00:28:40 +00:00
Wolfgang Walther
6691c568b0 nixosTests.gitlab: fix eval
This was recently turned into a throw.
2025-10-28 18:06:49 +01:00
Philip Taron
01898764b6 treewide: replace "yes" else "no" usages to lib.boolToYesNo (#442387) 2025-10-28 16:25:46 +00:00
h7x4
f964b6a027 nixos/iio-niri: move from programs to services/misc (#455219) 2025-10-27 15:51:12 +00:00
Lukas Wurzinger
5172d80615 nixos/rsync: remove assertion 2025-10-26 12:39:07 +01:00
Pol Dellaiera
d7dd8ff319 nixos/n8n: use env vars instead of config file (#445176) 2025-10-26 10:37:15 +00:00
Zhaith Izaliel
0e6c2a2595 nixos/iio-niri: move from programs to services/misc
The module was wrongly put in programs following PR #454551 and we didn't catch it during review. This commit fixes that issue so the path is compliant to the guidelines.
2025-10-24 14:27:48 +02:00
Lukas Wurzinger
e33798277b nixos/rsync: init module 2025-10-22 20:48:35 +02:00
Lukas Wurzinger
1f4c50ab81 lib/cli: deprecate toGNUCommandLine 2025-10-21 21:01:38 +02:00
Aliaksandr
80f12557f5 treewide: replace "yes" else "no" usages to lib.boolToYesNo 2025-10-21 16:04:34 +03:00
dish
96aa4941c0 nixos/forgejo: add age setting to automatic dump (#450761) 2025-10-20 14:20:09 +00:00
Luca A.
7bf1b4d04a nixos/forgejo: add age setting to automatic dump
Currently dump are added to the directory but not cleaned up.
This setting allows the user to customize the cleanup age of dumps.
2025-10-20 15:42:18 +02:00
h7x4
fcfadc6853 nixos/pinchflat: make TZ variable optional (#452647) 2025-10-17 15:02:20 +00:00
Yechiel Worenklein
b317daf271 nixos/pinchflat: make TZ variable optional
This is to prvent an error while building time.timeZone is set to null
(default)
2025-10-17 15:19:44 +01:00
Cabia Rangris
fe460b7778 nixos/klipper: Expose firmware and flasher packages in config (#432658) 2025-10-14 12:51:46 +00:00
Emily
2f42412f78 ruby_3_2: drop 2025-10-12 17:39:43 +01:00
h7x4
375a70c8aa nixos/local-content-share: init module (#426887) 2025-10-12 14:06:52 +00:00
evolve
57e3a806bf nixos/local-content-share: init module 2025-10-12 12:40:21 +02:00
h7x4
595dc97360 nixos/serviio: add option to open firewall ports (#448271) 2025-10-09 05:12:25 +00:00
Felix Singer
79ab4bb47b nixos/redmine: Enable MountAPIVFS hardening in service config
This setting is already implied by others, but add it for completeness
as well. For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#MountAPIVFS=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:16:27 +02:00
Felix Singer
21f827065b nixos/redmine: Enable PrivateUsers hardening in service config
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#PrivateUsers=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:16:27 +02:00
Felix Singer
a799bd0e3d nixos/redmine: Set ProtectProc to invisible
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:16:26 +02:00
sweenu
f6a4509bfb nixos/n8n: use env vars instead of config file 2025-10-07 14:52:32 +02:00
Thomas Gerbet
f0335d8ede nixos/redmine: Set ProtectControlGroups to strict (#448634) 2025-10-07 06:20:44 +00:00
Wolfgang Walther
91a8fee3aa treewide: remove redundant parentheses
Auto-fixed by nixf-diagnose.
2025-10-05 10:52:03 +02:00
Wolfgang Walther
c283f32d29 treewide: remove unused with
Auto-fixed by nixf-diagnose.
2025-10-05 10:50:41 +02:00
Wolfgang Walther
90e7159c55 treewide: remove unused rec
Auto-fix by nixf-diagnose.
2025-10-05 10:49:12 +02:00
Felix Singer
4fb64fb8a1 nixos/redmine: Set ProtectControlGroups to strict
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-04 23:15:45 +02:00
n
4f67d0e4f8 nixos/serviio: add option to open firewall ports
I think we should have open firewall ports and let the user choose if they want to have these ports open or not. :D
2025-10-03 21:17:58 +05:30
Bart Brouns
d1a084e777 nixos/ringboard: add user service module 2025-10-01 15:59:28 +02:00
Masum Reza
9e538263a0 sssd: fix tests issues (#446589) 2025-09-29 14:35:47 +00:00
xanderio
61dfdcf015 nixos/gitlab: add proxyWebsockets as recommended nginx setting (#431884) 2025-09-29 09:02:01 +00:00
liberodark
979a95c40a sssd: fix tests issues 2025-09-28 10:42:56 +02:00
Felix Singer
b19c6d9645 nixos/redmine: Set ProtectSystem to strict
Make the whole file system read-only except the directories related to
Redmine, like the state directory. The runtime directory is already
excluded by configuring it with the option `RuntimeDirectory`.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-25 16:00:26 +02:00
Felix Singer
31f095fa1a nixos/redmine: Set up runtime directory by using RuntimeDirectory option
Instead of letting systemd tmpfiles set up the runtime directory, use
the option `RuntimeDirectory` from the systemd service config since the
configured path stays read-writable when ProtectSystem is set to
`strict`. This is equal to adding the path to ReadWritePaths.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-09-25 15:58:31 +02:00
jopejoe1
2032412fdb various: use more accurate int types (#445244) 2025-09-22 21:50:55 +00:00
h7x4
2fb06be29f nixos/gitlab: use types.port 2025-09-22 16:46:44 +02:00
h7x4
adccbd9442 nixos/cpuminer-cryptonight: use more accurate int types 2025-09-22 16:36:17 +02:00
h7x4
bda8f77974 nixos/rshim: use more accurate int types 2025-09-22 16:36:16 +02:00
h7x4
5bd07053b4 nixos/gotenberg: use more accurate int types 2025-09-22 16:36:16 +02:00
h7x4
1cd9d47415 nixos/homepage-dashboard: use types.port 2025-09-22 16:33:01 +02:00
h7x4
5137d1adae nixos/taskserver: use types.port 2025-09-22 16:33:00 +02:00
Zhaofeng Li
f72f1eb0bc nixos/klipper: Expose firmware and flasher packages in config
This makes it easy to refer to the firmware and flasher packages from other
parts of the config. Currently, if `enableKlipperFlash` is false, simply adding
the firmware package to `systemPackages` isn't very useful.

Also makes the assertion message more helpful.
2025-09-22 08:18:38 -04:00
h7x4
4ba3f60b8a various: use mkPackageOption 2025-09-22 02:46:54 +02:00
Thiago Kenji Okada
5bdecea140 nixos/ollama: add network-online.target to ollama-model-loader.service
This should avoid the service failing to start after switching to a new
configuration because the network service was restarted.
2025-09-16 10:17:14 +01:00
xgroleau
810154770f nixos/ntfy: add environmentFile option for secrets 2025-09-08 23:08:44 +02:00
Haylin Moore
cf540f8c98 treewide/nixos: move number typed port options to types.port 2025-09-08 15:27:19 +02:00
h7x4
e3a7138a82 nixos/gitea: enable hardware watchdog 2025-09-05 15:46:04 +02:00
h7x4
3322199983 nixos/gitea: use systemd service type notify 2025-09-05 15:46:04 +02:00
Sandro
e2adef4c23 nixos/paperless: add missing default to domain (#439217) 2025-09-03 11:33:30 +02:00