Commit Graph

21239 Commits

Author SHA1 Message Date
Nico Felbinger
9e608d46a9 nixos/suricata: add description fields for configuration 2024-11-01 14:42:53 +01:00
Atemu
dddcb35140 nixos/jupyter: set user primary group (#349415) 2024-10-18 12:05:43 +02:00
Vladimír Čunát
a8f84a9dff nixos/kresd: add link to upstream doc (#311915) 2024-10-18 10:22:18 +02:00
Atemu
267847014a nixos/immich: do not set services.redis.servers.immich.user (#345126) 2024-10-18 10:19:46 +02:00
Jack Wilsdon
df03b32278 nixos/jupyter: set user primary group 2024-10-17 23:44:53 +01:00
David McFarland
cd286b21e4 resolvconf: use correct output files when used with dnsmasq (#349320) 2024-10-17 16:44:18 -03:00
David McFarland
403604ca66 resolvconf: use correct output files when used with dnsmasq 2024-10-17 14:20:57 -03:00
scrufulufugus
969102bd11 system76-scheduler: migrate to pkgs/by-name format 2024-10-17 18:22:34 +02:00
scrufulufugus
1d4df7adcc system76-scheduler: Move out of kernel category
system76-scheduler: add alias at old location
2024-10-17 18:22:34 +02:00
Brendan Taylor
04e39de6eb nixos/immich: do not set services.redis.servers.immich.user
the redis module expects a user and group to exist with this name.
previously if there was no group with the same name as
`services.immich.user` the immich redis server would fail to start.

instead we can use the redis module's default behaviour: it will
create a user & group named "redis-immich".
2024-10-17 07:19:02 -06:00
Atemu
644c36174b nixos/redis: add option services.redis.servers.*.group (#345327) 2024-10-17 10:39:48 +02:00
Leona Maroni
edd292c18b nixos/dokuwiki,nixos/wordpress,nixos/invoiceplane: Remove deprecated isCoercibleToString (#292801) 2024-10-17 09:32:14 +02:00
Felix Bühler
cc42a1be7b nixos/services.mysql: remove with lib; (#338048) 2024-10-16 21:38:48 +02:00
Robert Schütz
a9dee7c45b immich: 1.117.0 -> 1.118.1 (#348890) 2024-10-16 12:31:58 -07:00
Robert Schütz
e3152f80bf nixos/immich: change default port to 2283
This was always upstream's default but they also change the internal
port, i.e. behind the reverse proxy, to 2283 in
https://github.com/immich-app/immich/pull/13185.
2024-10-16 10:30:34 -07:00
Adam Stephens
bece21421b nixos/atticd: wants network-online.target
fixes:

trace: evaluation warning: atticd.service is ordered after 'network-online.target' but doesn't depend on it
2024-10-16 12:36:19 -04:00
nikstur
e81710fa8b nixos/userborn: fix username typo (#346773) 2024-10-16 17:00:39 +02:00
Aaron Andersen
2ab323a087 nixos/github-runners: Make 'enable' functional (#342996) 2024-10-16 10:18:14 +02:00
K900
70cc7b62f2 nixos/murmur: Set UMask to 027 (#348652) 2024-10-16 05:16:09 +03:00
Robert Schütz
fb2d897809 nixos/headscale: don't set deprecated options in config (#347991) 2024-10-15 16:22:18 -07:00
Felix Bühler
e544a67eba nixos/freshrss: fix phpfpm.pool (#347324) 2024-10-15 22:39:24 +02:00
Azat Bahawi
e2337957df nixos/zapret: init (#347805) 2024-10-15 20:37:40 +00:00
Dmitry Voronin
5a5c04d1ea nixos/zapret: init 2024-10-15 21:51:53 +03:00
Peder Bergebakken Sundt
13bf1d6259 nixos/resilio: add package option (#346427) 2024-10-15 20:38:41 +02:00
Felix Singer
13f6e2d85f nixos/murmur: Set UMask to 027
Group only needs limited access, while other users don't need access at
all. So set the UMask to 027.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-15 02:43:42 +02:00
Someone
a9b63f037b nvidia-container-toolkit: add "nvidia" to services.xserver.videoDrivers (#344174) 2024-10-14 19:58:35 +00:00
Michele Guerini Rocco
35618d0b14 nixos/dhcpcd: fix race between namespace setup and resolvconf (#348305) 2024-10-14 15:44:32 +02:00
Adam C. Stephens
86420f4ee8 nixos/atticd: init module (#347749) 2024-10-14 09:33:35 -04:00
Martin Weinelt
f4226b78df knot-dns: 3.4.0 -> 3.4.1 (#348476) 2024-10-14 14:20:26 +02:00
Vladimír Čunát
46954f61c6 nixos/knotd: extend SystemCallFilter
It was breaking knot-dns.tests.knot
New knotd uses fchown to cover cases where user changes during startup.
In typical Linux cases the user is kept the same and there are
capabilities instead, but the syscall still happens and got caught here.
2024-10-14 10:26:46 +02:00
Markus Kowalewski
812640f38a nixos/saunafs: add module + test (#347337) 2024-10-14 09:24:51 +02:00
rnhmjoj
52e2e7027d dhcpcd: fix race between namespace setup and resolvconf
systemd requires paths in `ReadWritePaths=` to exist before setting up
the service sandbox, so dhcpcd should be ordered after resolvconf.
Making resolvconf a oneshot service ensure `After=resolvconf.service`
works correctly.
2024-10-14 08:02:46 +02:00
Pol Dellaiera
56cbea0d2e snapweb: init at 0.8.0 (#347536) 2024-10-14 07:14:23 +02:00
Felix Buehler
de810c5163 nixos/freshrss: update de parameters 2024-10-13 23:07:46 +02:00
Bjørn Forsman
21529d1813 nixos/ups: shutdown UPS at host shutdown
Implement the missing bit of the NUT shutdown design[1]. This ensures
that machines come back up automatically after a power outage. (Without
this change they will only come back up if the UPS completely empties
its battery.)

[1] https://networkupstools.org/docs/user-manual.chunked/Configuration_notes.html#Shutdown_design
2024-10-13 17:55:52 +02:00
Bjørn Forsman
3b781a1e72 nixos/ups: document default upsmon MONITOR value 2024-10-13 17:55:52 +02:00
Bjørn Forsman
2b90f4cdb3 nixos/ups: sort settings attributes
They're listed twice (documentation and implementation) and this change
makes it easier to compare the attrsets.
2024-10-13 17:55:52 +02:00
Adam Stephens
8d4f3f2b3e nixos/atticd: init module
Copied from 1b29816235/nixos/atticd.nix and modified
2024-10-13 08:23:34 -04:00
Robert Schütz
cc4d29d353 nixos/headscale: assert that dns.base_domain is set when using MagicDNS 2024-10-12 18:28:17 -07:00
K900
001fb496bf Merge remote-tracking branch 'origin/master' into staging-next 2024-10-12 21:08:11 +03:00
Kerstin
35c52ab030 mastodon: 4.2.13 -> 4.3.0 (#337545) 2024-10-12 19:37:08 +02:00
Markus Kowalewski
d22d60f3ac nixos/saunafs: add module + test 2024-10-12 19:13:00 +02:00
Maximilian Bosch
f840d87a6e Merge: nixos/nginx: expand proxyResolveWhileRunning's description (#347164) 2024-10-12 17:14:43 +02:00
Cosima Neidahl
e58a261efb lomiri.*: Updates (#341377) 2024-10-12 16:49:25 +02:00
github-actions[bot]
4433a315bd Merge master into staging-next 2024-10-12 12:05:08 +00:00
Florian Klink
237016d023 gogs: remove (#348053) 2024-10-12 13:13:13 +03:00
Ramses
b1e4854ecb nixos/automatic-timezoned: set time.timeZone to null to avoid silent overriding (#347217) 2024-10-12 11:12:27 +02:00
Pol Dellaiera
afd96bad04 Bump and fix nextjs-ollama-llm-ui (#347856) 2024-10-12 10:42:53 +02:00
Maximilian Bosch
875f00ed40 gogs: remove
Upstream development has stalled and several critical vulnerabilities
that weren't addressed within a year[1][2].

Back then it was fair to mark it as insecure, but given nothing has
happened since, it's time to remove it.

[1] https://forgejo.org/2023-11-release-v1-20-5-1/
[2] https://github.com/gogs/gogs/issues/7777
2024-10-12 10:36:06 +02:00
Robert Schütz
0673e98248 nixos/headscale: update option descriptions 2024-10-11 20:17:15 -07:00