Linus Heckemann
d25d639031
nixos/acme: remove scripted webroot creation
...
Situations where systemd-tmpfiles rules aren't applied but
acme-$name.service is rerun are quite unlikely, so it should be fine to
remove the mkdir completely.
2026-04-16 16:42:01 +02:00
Linus Heckemann
a86d6ed9b1
nixos/acme: make webroot world-readable at creation
...
Up to now, the webroot mechanism wasn't usable without extra steps
when the certificate was not intended for the web server. In my case,
I wanted to obtain a certificate for use in other services from a
private CA, but validate via a webroot served by nginx. The (sensibly!)
restrictive umask of acme-$name.service led to the webroot being created
with o-rx permissions, which meant that nginx could not serve the
webroot and the certificate could not be obtained.
This retains the mkdir invocation as a best-effort attempt to create the
webroot if for example the state has been cleared since systemd-tmpfiles
setup, but relies primarily on systemd-tmpfiles to create the webroots
with appropriate permissions.
2026-04-16 16:36:29 +02:00
Sandro and GitHub
4bd9165a91
logisim-evolution: 4.0.0 -> 4.1.0 ( #494176 )
2026-04-14 12:31:25 +00:00
Sandro and GitHub
a8160c0f4a
nixos/rsshub: init module ( #495256 )
2026-04-14 12:27:57 +00:00
Adam C. Stephens and GitHub
e1a589b3d5
elephant: enable all providers by default ( #509578 )
2026-04-14 12:26:28 +00:00
Cosima Neidahl and GitHub
1a84eb6947
open-watcom-v2-unwrapped: 0-unstable-2025-11-15 -> 0-unstable-2026-04-11, disable strictflexarrays1 to fix build ( #509090 )
2026-04-14 12:26:21 +00:00
Vladimír Čunát and GitHub
0581ee0427
nixpkgs/release-checks: fix url-literal warns after Nix upgrade ( #509947 )
2026-04-14 12:26:01 +00:00
Doron Behar and GitHub
2fb25e352b
python3Packages.pueblo: 0.0.17 -> 0.0.18 ( #509893 )
2026-04-14 12:19:47 +00:00
Vladimír Čunát
ea42261b90
nixpkgs/release-checks: fix url-literal warns after Nix upgrade
...
https://hydra.nixos.org/build/326503233/nixlog/2/tail
2026-04-14 14:19:13 +02:00
lassulus and GitHub
8568fa964f
prek: 0.3.8 -> 0.3.9 ( #509787 )
2026-04-14 12:12:40 +00:00
Pol Dellaiera and GitHub
caa8315f98
lisette: 0.1.3 -> 0.1.9 ( #509934 )
2026-04-14 12:10:32 +00:00
Martin Weinelt and GitHub
8be633b54a
firefox-esr-140-unwrapped: 140.9.0esr -> 140.9.1esr ( #509847 )
2026-04-14 11:48:34 +00:00
nixpkgs-ci[bot] and GitHub
eea9daf5f3
fence: 0.1.42 -> 0.1.46 ( #509808 )
2026-04-14 11:46:07 +00:00
Jo and GitHub
6e871d6b11
shairport-sync: use new names of pipewire and pulseaudio backends ( #497238 )
2026-04-14 11:44:45 +00:00
Sandro and GitHub
b7997ad930
nixos/hedgedoc: remove minio from examples ( #509424 )
2026-04-14 11:44:21 +00:00
R. Ryantm and Martin Weinelt
a39a49a04a
firefox-esr-140-unwrapped: 140.9.0esr -> 140.9.1esr
...
https://www.mozilla.org/en-US/firefox/140.9.1/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2026-27/
Fixes: CVE-2026-5732, CVE-2026-5731, CVE-2026-5734
2026-04-14 13:43:11 +02:00
Jo and GitHub
c7b1037262
firefox-beta-unwrapped: 150.0b5 -> 150.0b9 ( #509755 )
2026-04-14 11:38:16 +00:00
Jenny and GitHub
d68f5f8c9c
nixos/librenms: Use new Artisan Console Command ( #503180 )
2026-04-14 11:36:56 +00:00
R. Ryantm
bfb560593d
lisette: 0.1.3 -> 0.1.9
2026-04-14 11:32:59 +00:00
Jhonas Wernery and GitHub
db63dd656a
signal-desktop: 8.6.0 -> 8.6.1 ( #509840 )
2026-04-14 11:04:38 +00:00
Ramses and GitHub
7e6d2a5c1c
parted: 3.6 -> 3.7 ( #509452 )
2026-04-14 11:02:14 +00:00
Ramses and GitHub
185317334a
htop: 3.4.1 -> 3.5.0 ( #509369 )
2026-04-14 11:00:01 +00:00
R. Ryantm
a75847f6eb
python3Packages.pueblo: 0.0.17 -> 0.0.18
2026-04-14 10:56:28 +00:00
nixpkgs-ci[bot] and GitHub
7f0b931542
piliplus: 2.0.2 -> 2.0.4 ( #509862 )
2026-04-14 10:48:08 +00:00
nixpkgs-ci[bot] and GitHub
09c6c5a949
walker: 2.15.2 -> 2.16.0 ( #509816 )
2026-04-14 10:47:54 +00:00
nixpkgs-ci[bot] and GitHub
e5c91c1a00
mangareader: 2.3.0 -> 2.4.0 ( #508757 )
2026-04-14 10:47:41 +00:00
nixpkgs-ci[bot] and GitHub
c9e3f05be8
fluent-reader: 1.2.0 -> 1.2.1 ( #509793 )
2026-04-14 10:15:43 +00:00
kirillrdy and GitHub
7c0d4a2df5
sanbdox-runtime: fix wrapProgram ( #509872 )
2026-04-14 09:52:45 +00:00
nixpkgs-ci[bot] and GitHub
fa2278b436
dprint-plugins.dprint-plugin-biome: 0.12.6 -> 0.12.7 ( #509817 )
2026-04-14 09:43:23 +00:00
Jörg Thalheim and GitHub
03796993b6
lib/modules: short-circuit mergeDefinitions for plain singletons ( #509195 )
2026-04-14 09:39:45 +00:00
Gaetan Lepage
a5be142ac6
sanbdox-runtime: fix wrapProgram
2026-04-14 09:37:48 +00:00
Thiago Kenji Okada and GitHub
d189cfccfc
nixos/flood: add AF_NETLINK to RestrictedAddressFamilies ( #509865 )
2026-04-14 09:31:13 +00:00
Marcus Ramberg and GitHub
85230b6603
sqlit-tui: 1.3.1 -> 1.3.1.1 ( #499451 )
2026-04-14 09:26:22 +00:00
isabel and GitHub
fb5a8c0b46
porxie: init at 0.1.0, nixos/porxie: init ( #509305 )
2026-04-14 09:20:44 +00:00
zowoq and GitHub
e1d1373422
terraform-providers.dopplerhq_doppler: 1.21.1 -> 1.21.2 ( #509844 )
2026-04-14 09:15:40 +00:00
zowoq and GitHub
ddcc0a7d68
terraform-providers.opentelekomcloud_opentelekomcloud: 1.36.62 -> 1.36.63 ( #509811 )
2026-04-14 09:15:38 +00:00
kashw2
e76ee72067
nixos/flood: add AF_NETLINK to RestrictedAddressFamilies
2026-04-14 19:03:42 +10:00
nixpkgs-ci[bot] and GitHub
74e19fc2a6
remnote: 1.25.0 -> 1.25.7 ( #509777 )
2026-04-14 08:59:36 +00:00
Thiago Kenji Okada and GitHub
f099b32af5
libretro.snes9x2010: 0-unstable-2026-03-31 -> 0-unstable-2026-04-09 ( #509785 )
2026-04-14 08:46:36 +00:00
Vladimír Čunát and GitHub
ec5a6e22b4
staging-nixos merge for 2026-04-14 ( #509851 )
2026-04-14 08:35:58 +00:00
R. Ryantm
2fd0fa1a77
piliplus: 2.0.2 -> 2.0.4
2026-04-14 08:32:54 +00:00
Vladimír Čunát
1d16486166
Revert "nixos/test-driver: use log levels"
...
This reverts commit 149201a7e3 .
I don't get what needs to done to fix redirects in the NixOS manual,
so let's unblock by reverting for now.
2026-04-14 10:30:14 +02:00
rewine and GitHub
ac719b7363
vivaldi: fix Vulkan ICD discovery ( #509225 )
2026-04-14 08:27:06 +00:00
nixpkgs-ci[bot] and GitHub
f18921bf91
vivaldi: 7.9.3970.47 -> 7.9.3970.50 ( #509807 )
2026-04-14 08:21:52 +00:00
yaya and GitHub
7a0aafa5f9
nixosTests.gitlab.runner: add garbage collection to daemon ( #484371 )
2026-04-14 08:18:59 +00:00
Gergő Gutyina and GitHub
ea0771c95c
lua-language-server: 3.18.0 -> 3.18.1 ( #509786 )
2026-04-14 07:57:29 +00:00
R. Ryantm
a55848fbc3
terraform-providers.dopplerhq_doppler: 1.21.1 -> 1.21.2
2026-04-14 07:39:51 +00:00
Fabian Affolter and GitHub
980fada073
python3Packages.django-dbbackup: 5.2.0 -> 5.3.0 ( #509800 )
2026-04-14 07:38:01 +00:00
Fabian Affolter and GitHub
d311fc1289
python3Packages.dnsight: init at 1.0.1 ( #509684 )
2026-04-14 07:28:30 +00:00
Fabian Affolter and GitHub
4523563231
python3Packages.switchbot-api: 2.11.0 -> 2.11.1 ( #509726 )
2026-04-14 07:28:05 +00:00