Sandro
bd820895a9
nixos/rsync: remove assertion ( #455800 )
2025-10-29 00:28:40 +00:00
Wolfgang Walther
6691c568b0
nixosTests.gitlab: fix eval
...
This was recently turned into a throw.
2025-10-28 18:06:49 +01:00
Philip Taron
01898764b6
treewide: replace "yes" else "no" usages to lib.boolToYesNo ( #442387 )
2025-10-28 16:25:46 +00:00
h7x4
f964b6a027
nixos/iio-niri: move from programs to services/misc ( #455219 )
2025-10-27 15:51:12 +00:00
Lukas Wurzinger
5172d80615
nixos/rsync: remove assertion
2025-10-26 12:39:07 +01:00
Pol Dellaiera
d7dd8ff319
nixos/n8n: use env vars instead of config file ( #445176 )
2025-10-26 10:37:15 +00:00
Zhaith Izaliel
0e6c2a2595
nixos/iio-niri: move from programs to services/misc
...
The module was wrongly put in programs following PR #454551 and we didn't catch it during review. This commit fixes that issue so the path is compliant to the guidelines.
2025-10-24 14:27:48 +02:00
Lukas Wurzinger
e33798277b
nixos/rsync: init module
2025-10-22 20:48:35 +02:00
Lukas Wurzinger
1f4c50ab81
lib/cli: deprecate toGNUCommandLine
2025-10-21 21:01:38 +02:00
Aliaksandr
80f12557f5
treewide: replace "yes" else "no" usages to lib.boolToYesNo
2025-10-21 16:04:34 +03:00
dish
96aa4941c0
nixos/forgejo: add age setting to automatic dump ( #450761 )
2025-10-20 14:20:09 +00:00
Luca A.
7bf1b4d04a
nixos/forgejo: add age setting to automatic dump
...
Currently dump are added to the directory but not cleaned up.
This setting allows the user to customize the cleanup age of dumps.
2025-10-20 15:42:18 +02:00
h7x4
fcfadc6853
nixos/pinchflat: make TZ variable optional ( #452647 )
2025-10-17 15:02:20 +00:00
Yechiel Worenklein
b317daf271
nixos/pinchflat: make TZ variable optional
...
This is to prvent an error while building time.timeZone is set to null
(default)
2025-10-17 15:19:44 +01:00
Cabia Rangris
fe460b7778
nixos/klipper: Expose firmware and flasher packages in config ( #432658 )
2025-10-14 12:51:46 +00:00
Emily
2f42412f78
ruby_3_2: drop
2025-10-12 17:39:43 +01:00
h7x4
375a70c8aa
nixos/local-content-share: init module ( #426887 )
2025-10-12 14:06:52 +00:00
evolve
57e3a806bf
nixos/local-content-share: init module
2025-10-12 12:40:21 +02:00
h7x4
595dc97360
nixos/serviio: add option to open firewall ports ( #448271 )
2025-10-09 05:12:25 +00:00
Felix Singer
79ab4bb47b
nixos/redmine: Enable MountAPIVFS hardening in service config
...
This setting is already implied by others, but add it for completeness
as well. For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#MountAPIVFS=
Signed-off-by: Felix Singer <felixsinger@posteo.net >
2025-10-07 16:16:27 +02:00
Felix Singer
21f827065b
nixos/redmine: Enable PrivateUsers hardening in service config
...
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#PrivateUsers=
Signed-off-by: Felix Singer <felixsinger@posteo.net >
2025-10-07 16:16:27 +02:00
Felix Singer
a799bd0e3d
nixos/redmine: Set ProtectProc to invisible
...
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc=
Signed-off-by: Felix Singer <felixsinger@posteo.net >
2025-10-07 16:16:26 +02:00
sweenu
f6a4509bfb
nixos/n8n: use env vars instead of config file
2025-10-07 14:52:32 +02:00
Thomas Gerbet
f0335d8ede
nixos/redmine: Set ProtectControlGroups to strict ( #448634 )
2025-10-07 06:20:44 +00:00
Wolfgang Walther
91a8fee3aa
treewide: remove redundant parentheses
...
Auto-fixed by nixf-diagnose.
2025-10-05 10:52:03 +02:00
Wolfgang Walther
c283f32d29
treewide: remove unused with
...
Auto-fixed by nixf-diagnose.
2025-10-05 10:50:41 +02:00
Wolfgang Walther
90e7159c55
treewide: remove unused rec
...
Auto-fix by nixf-diagnose.
2025-10-05 10:49:12 +02:00
Felix Singer
4fb64fb8a1
nixos/redmine: Set ProtectControlGroups to strict
...
For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups=
Signed-off-by: Felix Singer <felixsinger@posteo.net >
2025-10-04 23:15:45 +02:00
n
4f67d0e4f8
nixos/serviio: add option to open firewall ports
...
I think we should have open firewall ports and let the user choose if they want to have these ports open or not. :D
2025-10-03 21:17:58 +05:30
Bart Brouns
d1a084e777
nixos/ringboard: add user service module
2025-10-01 15:59:28 +02:00
Masum Reza
9e538263a0
sssd: fix tests issues ( #446589 )
2025-09-29 14:35:47 +00:00
xanderio
61dfdcf015
nixos/gitlab: add proxyWebsockets as recommended nginx setting ( #431884 )
2025-09-29 09:02:01 +00:00
liberodark
979a95c40a
sssd: fix tests issues
2025-09-28 10:42:56 +02:00
Felix Singer
b19c6d9645
nixos/redmine: Set ProtectSystem to strict
...
Make the whole file system read-only except the directories related to
Redmine, like the state directory. The runtime directory is already
excluded by configuring it with the option `RuntimeDirectory`.
Signed-off-by: Felix Singer <felixsinger@posteo.net >
2025-09-25 16:00:26 +02:00
Felix Singer
31f095fa1a
nixos/redmine: Set up runtime directory by using RuntimeDirectory option
...
Instead of letting systemd tmpfiles set up the runtime directory, use
the option `RuntimeDirectory` from the systemd service config since the
configured path stays read-writable when ProtectSystem is set to
`strict`. This is equal to adding the path to ReadWritePaths.
Signed-off-by: Felix Singer <felixsinger@posteo.net >
2025-09-25 15:58:31 +02:00
jopejoe1
2032412fdb
various: use more accurate int types ( #445244 )
2025-09-22 21:50:55 +00:00
h7x4
2fb06be29f
nixos/gitlab: use types.port
2025-09-22 16:46:44 +02:00
h7x4
adccbd9442
nixos/cpuminer-cryptonight: use more accurate int types
2025-09-22 16:36:17 +02:00
h7x4
bda8f77974
nixos/rshim: use more accurate int types
2025-09-22 16:36:16 +02:00
h7x4
5bd07053b4
nixos/gotenberg: use more accurate int types
2025-09-22 16:36:16 +02:00
h7x4
1cd9d47415
nixos/homepage-dashboard: use types.port
2025-09-22 16:33:01 +02:00
h7x4
5137d1adae
nixos/taskserver: use types.port
2025-09-22 16:33:00 +02:00
Zhaofeng Li
f72f1eb0bc
nixos/klipper: Expose firmware and flasher packages in config
...
This makes it easy to refer to the firmware and flasher packages from other
parts of the config. Currently, if `enableKlipperFlash` is false, simply adding
the firmware package to `systemPackages` isn't very useful.
Also makes the assertion message more helpful.
2025-09-22 08:18:38 -04:00
h7x4
4ba3f60b8a
various: use mkPackageOption
2025-09-22 02:46:54 +02:00
Thiago Kenji Okada
5bdecea140
nixos/ollama: add network-online.target to ollama-model-loader.service
...
This should avoid the service failing to start after switching to a new
configuration because the network service was restarted.
2025-09-16 10:17:14 +01:00
xgroleau
810154770f
nixos/ntfy: add environmentFile option for secrets
2025-09-08 23:08:44 +02:00
Haylin Moore
cf540f8c98
treewide/nixos: move number typed port options to types.port
2025-09-08 15:27:19 +02:00
h7x4
e3a7138a82
nixos/gitea: enable hardware watchdog
2025-09-05 15:46:04 +02:00
h7x4
3322199983
nixos/gitea: use systemd service type notify
2025-09-05 15:46:04 +02:00
Sandro
e2adef4c23
nixos/paperless: add missing default to domain ( #439217 )
2025-09-03 11:33:30 +02:00