Commit Graph
980185 Commits
Author SHA1 Message Date
Linus Heckemann d25d639031 nixos/acme: remove scripted webroot creation
Situations where systemd-tmpfiles rules aren't applied but
acme-$name.service is rerun are quite unlikely, so it should be fine to
remove the mkdir completely.
2026-04-16 16:42:01 +02:00
Linus Heckemann a86d6ed9b1 nixos/acme: make webroot world-readable at creation
Up to now, the webroot mechanism wasn't usable without extra steps
when the certificate was not intended for the web server. In my case,
I wanted to obtain a certificate for use in other services from a
private CA, but validate via a webroot served by nginx. The (sensibly!)
restrictive umask of acme-$name.service led to the webroot being created
with o-rx permissions, which meant that nginx could not serve the
webroot and the certificate could not be obtained.

This retains the mkdir invocation as a best-effort attempt to create the
webroot if for example the state has been cleared since systemd-tmpfiles
setup, but relies primarily on systemd-tmpfiles to create the webroots
with appropriate permissions.
2026-04-16 16:36:29 +02:00
SandroandGitHub 4bd9165a91 logisim-evolution: 4.0.0 -> 4.1.0 (#494176) 2026-04-14 12:31:25 +00:00
SandroandGitHub a8160c0f4a nixos/rsshub: init module (#495256) 2026-04-14 12:27:57 +00:00
Adam C. StephensandGitHub e1a589b3d5 elephant: enable all providers by default (#509578) 2026-04-14 12:26:28 +00:00
Cosima NeidahlandGitHub 1a84eb6947 open-watcom-v2-unwrapped: 0-unstable-2025-11-15 -> 0-unstable-2026-04-11, disable strictflexarrays1 to fix build (#509090) 2026-04-14 12:26:21 +00:00
Vladimír ČunátandGitHub 0581ee0427 nixpkgs/release-checks: fix url-literal warns after Nix upgrade (#509947) 2026-04-14 12:26:01 +00:00
Doron BeharandGitHub 2fb25e352b python3Packages.pueblo: 0.0.17 -> 0.0.18 (#509893) 2026-04-14 12:19:47 +00:00
Vladimír Čunát ea42261b90 nixpkgs/release-checks: fix url-literal warns after Nix upgrade
https://hydra.nixos.org/build/326503233/nixlog/2/tail
2026-04-14 14:19:13 +02:00
lassulusandGitHub 8568fa964f prek: 0.3.8 -> 0.3.9 (#509787) 2026-04-14 12:12:40 +00:00
Pol DellaieraandGitHub caa8315f98 lisette: 0.1.3 -> 0.1.9 (#509934) 2026-04-14 12:10:32 +00:00
Martin WeineltandGitHub 8be633b54a firefox-esr-140-unwrapped: 140.9.0esr -> 140.9.1esr (#509847) 2026-04-14 11:48:34 +00:00
nixpkgs-ci[bot]andGitHub eea9daf5f3 fence: 0.1.42 -> 0.1.46 (#509808) 2026-04-14 11:46:07 +00:00
JoandGitHub 6e871d6b11 shairport-sync: use new names of pipewire and pulseaudio backends (#497238) 2026-04-14 11:44:45 +00:00
SandroandGitHub b7997ad930 nixos/hedgedoc: remove minio from examples (#509424) 2026-04-14 11:44:21 +00:00
R. RyantmandMartin Weinelt a39a49a04a firefox-esr-140-unwrapped: 140.9.0esr -> 140.9.1esr
https://www.mozilla.org/en-US/firefox/140.9.1/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2026-27/

Fixes: CVE-2026-5732, CVE-2026-5731, CVE-2026-5734
2026-04-14 13:43:11 +02:00
JoandGitHub c7b1037262 firefox-beta-unwrapped: 150.0b5 -> 150.0b9 (#509755) 2026-04-14 11:38:16 +00:00
JennyandGitHub d68f5f8c9c nixos/librenms: Use new Artisan Console Command (#503180) 2026-04-14 11:36:56 +00:00
R. Ryantm bfb560593d lisette: 0.1.3 -> 0.1.9 2026-04-14 11:32:59 +00:00
Jhonas WerneryandGitHub db63dd656a signal-desktop: 8.6.0 -> 8.6.1 (#509840) 2026-04-14 11:04:38 +00:00
RamsesandGitHub 7e6d2a5c1c parted: 3.6 -> 3.7 (#509452) 2026-04-14 11:02:14 +00:00
RamsesandGitHub 185317334a htop: 3.4.1 -> 3.5.0 (#509369) 2026-04-14 11:00:01 +00:00
R. Ryantm a75847f6eb python3Packages.pueblo: 0.0.17 -> 0.0.18 2026-04-14 10:56:28 +00:00
nixpkgs-ci[bot]andGitHub 7f0b931542 piliplus: 2.0.2 -> 2.0.4 (#509862) 2026-04-14 10:48:08 +00:00
nixpkgs-ci[bot]andGitHub 09c6c5a949 walker: 2.15.2 -> 2.16.0 (#509816) 2026-04-14 10:47:54 +00:00
nixpkgs-ci[bot]andGitHub e5c91c1a00 mangareader: 2.3.0 -> 2.4.0 (#508757) 2026-04-14 10:47:41 +00:00
nixpkgs-ci[bot]andGitHub c9e3f05be8 fluent-reader: 1.2.0 -> 1.2.1 (#509793) 2026-04-14 10:15:43 +00:00
kirillrdyandGitHub 7c0d4a2df5 sanbdox-runtime: fix wrapProgram (#509872) 2026-04-14 09:52:45 +00:00
nixpkgs-ci[bot]andGitHub fa2278b436 dprint-plugins.dprint-plugin-biome: 0.12.6 -> 0.12.7 (#509817) 2026-04-14 09:43:23 +00:00
Jörg ThalheimandGitHub 03796993b6 lib/modules: short-circuit mergeDefinitions for plain singletons (#509195) 2026-04-14 09:39:45 +00:00
Gaetan Lepage a5be142ac6 sanbdox-runtime: fix wrapProgram 2026-04-14 09:37:48 +00:00
Thiago Kenji OkadaandGitHub d189cfccfc nixos/flood: add AF_NETLINK to RestrictedAddressFamilies (#509865) 2026-04-14 09:31:13 +00:00
Marcus RambergandGitHub 85230b6603 sqlit-tui: 1.3.1 -> 1.3.1.1 (#499451) 2026-04-14 09:26:22 +00:00
isabelandGitHub fb5a8c0b46 porxie: init at 0.1.0, nixos/porxie: init (#509305) 2026-04-14 09:20:44 +00:00
zowoqandGitHub e1d1373422 terraform-providers.dopplerhq_doppler: 1.21.1 -> 1.21.2 (#509844) 2026-04-14 09:15:40 +00:00
zowoqandGitHub ddcc0a7d68 terraform-providers.opentelekomcloud_opentelekomcloud: 1.36.62 -> 1.36.63 (#509811) 2026-04-14 09:15:38 +00:00
kashw2 e76ee72067 nixos/flood: add AF_NETLINK to RestrictedAddressFamilies 2026-04-14 19:03:42 +10:00
nixpkgs-ci[bot]andGitHub 74e19fc2a6 remnote: 1.25.0 -> 1.25.7 (#509777) 2026-04-14 08:59:36 +00:00
Thiago Kenji OkadaandGitHub f099b32af5 libretro.snes9x2010: 0-unstable-2026-03-31 -> 0-unstable-2026-04-09 (#509785) 2026-04-14 08:46:36 +00:00
Vladimír ČunátandGitHub ec5a6e22b4 staging-nixos merge for 2026-04-14 (#509851) 2026-04-14 08:35:58 +00:00
R. Ryantm 2fd0fa1a77 piliplus: 2.0.2 -> 2.0.4 2026-04-14 08:32:54 +00:00
Vladimír Čunát 1d16486166 Revert "nixos/test-driver: use log levels"
This reverts commit 149201a7e3.
I don't get what needs to done to fix redirects in the NixOS manual,
so let's unblock by reverting for now.
2026-04-14 10:30:14 +02:00
rewineandGitHub ac719b7363 vivaldi: fix Vulkan ICD discovery (#509225) 2026-04-14 08:27:06 +00:00
nixpkgs-ci[bot]andGitHub f18921bf91 vivaldi: 7.9.3970.47 -> 7.9.3970.50 (#509807) 2026-04-14 08:21:52 +00:00
yayaandGitHub 7a0aafa5f9 nixosTests.gitlab.runner: add garbage collection to daemon (#484371) 2026-04-14 08:18:59 +00:00
Gergő GutyinaandGitHub ea0771c95c lua-language-server: 3.18.0 -> 3.18.1 (#509786) 2026-04-14 07:57:29 +00:00
R. Ryantm a55848fbc3 terraform-providers.dopplerhq_doppler: 1.21.1 -> 1.21.2 2026-04-14 07:39:51 +00:00
Fabian AffolterandGitHub 980fada073 python3Packages.django-dbbackup: 5.2.0 -> 5.3.0 (#509800) 2026-04-14 07:38:01 +00:00
Fabian AffolterandGitHub d311fc1289 python3Packages.dnsight: init at 1.0.1 (#509684) 2026-04-14 07:28:30 +00:00
Fabian AffolterandGitHub 4523563231 python3Packages.switchbot-api: 2.11.0 -> 2.11.1 (#509726) 2026-04-14 07:28:05 +00:00