Commit Graph

49502 Commits

Author SHA1 Message Date
Robert Hensing
f37ad1a90b nixos: add simple vm-variant test (#391021) 2025-03-20 12:28:00 +00:00
n
d6b565f277 nixos/yabar: update package option description 2025-03-20 14:39:01 +05:30
K900
b64ec1944e nixos/fonts: ship fontconfig caches even for cross-compiled hosts (#391305) 2025-03-20 09:06:38 +03:00
Jeremy Fleischman
9c02a1e422 services/cloudflare-dyndns: require that apiTokenFile be an api token
Previously, this option was supposed to be a file of the form
`CLOUDFLARE_API_TOKEN=...`, which has a few problems:

- That's not an api token. It's an env file fit for passing to systemd's
  `EnvironmentFile` option. The user could typo the variable name, or
  intentionally/unintentionally include unrelated environment variables.
- It's not how secret files usually work in NixOS. Secret files are
  usually just the secret, and don't leak details about how the secret
  is passed to the service.
- This increases friction for people switching between cloudflare dyndns
  services, such as `services.cloudflare-dyndns` and
  `services.cfdyndns`, which both have a `apiToken` option, but (before
  this change) with different semantics.
2025-03-19 18:19:29 -05:00
Felix Bühler
30358ab7a7 formats.lua: init; types.luaInline: init (#390120) 2025-03-19 23:18:05 +01:00
Matt Sturgeon
2611d5bd70 formats.lua: init
Add a lua format, based on `lib.generators.toLua`.
2025-03-19 21:18:49 +00:00
Will Fancher
ecbf53f525 nixos/systemd: conditionally leave out some upstream units (#374214) 2025-03-19 16:58:14 -04:00
Will Fancher
b15e9e7d3d nixos/initrd: add extraFirmwarePaths option (#391166) 2025-03-19 16:51:26 -04:00
Sandro
ddef00d3f0 nixos/zipline: improve systemd hardening (#387119) 2025-03-19 19:01:37 +01:00
Sandro
1289c91409 nixos/echoip: improve systemd hardening (#387466) 2025-03-19 19:00:27 +01:00
Sandro
86f44b004d nixos/nixos-containers: user options take precedence over module ones (#388409) 2025-03-19 18:59:56 +01:00
Adam C. Stephens
476618066b nixos/firezone: init module and packages (#374647) 2025-03-19 13:50:47 -04:00
Alexander Foremny
5c28518c4b nixos/modules/image: fix error message
When a module is not found, it did not show the intended error message
`The module ... does not exist`, but rather `path ... does not exist`.
2025-03-19 17:29:28 +00:00
Defelo
ef19fcf725 nixos/zipline: improve systemd hardening 2025-03-19 18:16:01 +01:00
Defelo
0deb1b285f nixos/tests/zipline: add interactive config 2025-03-19 18:16:00 +01:00
Silvan Mosberger
4f6e508a09 nixos/users-groups: Enforce ASCII usernames and fix repeated doubling of activation script runtime (#385904) 2025-03-19 17:33:49 +01:00
Jared Baur
dad880d6bf nixos/systemd: conditionally leave out some upstream units
Some upstream systemd units are conditionally installed into the systemd
output, so we must make sure the feature that enables their installation
is enabled on our side prior to trying to use them.
2025-03-19 08:14:48 -07:00
Matthias Beyer
2a725d40de nixos/mautrix-telegram: switch to using static user for automated registration of appservice (#389679) 2025-03-19 15:38:57 +01:00
Gaétan Lepage
871ff1d88e grocy: 4.3.0 -> 4.4.2 (#387015) 2025-03-19 14:00:50 +01:00
thefeiter
f375a86fc1 nixos/mautrix-telegram: switch to using static user for automated registration of appservice
Like for matrix-whatsapp use a static user so that the registration file can be automatically shared with synapse.
This also includes the registerToSynapse config option.
2025-03-19 13:59:23 +01:00
Yt
a72f22d0d8 Prefect init module (#386895) 2025-03-19 08:52:19 -04:00
WilliButz
41c7225648 podman: use serviceConfig.ExecStart instead of script (#390731) 2025-03-19 12:06:33 +01:00
WilliButz
6ba10ff228 docker: use serviceConfig.ExecStart instead of script (#390681) 2025-03-19 12:06:26 +01:00
WilliButz
4edfeafac4 initrd: implement panic-on-fail interpreterless (#390698) 2025-03-19 11:37:48 +01:00
Benedikt Ritter
ef2bde5a13 docker: use serviceConfig.ExecStart instead of script 2025-03-19 11:12:59 +01:00
Benedikt Ritter
ccdfb91b48 podman: use serviceConfig.ExecStart instead of script 2025-03-19 11:08:18 +01:00
Benedikt Ritter
deb045e057 initrd: implement panic-on-fail interpreterless 2025-03-19 10:23:46 +01:00
Neyts Zupan
19683d2d61 paretosecurity: 0.0.86 -> 0.0.87 2025-03-19 09:10:27 +00:00
Colin
9435a2b422 nixos/fonts: ship fontconfig caches even for cross-compiled hosts 2025-03-19 07:53:24 +00:00
Jared Baur
ea116654aa nixos/initrd: add extraFirmwarePaths option
(cherry picked from commit 488d4316b9e1510c9b4a2eeb8d7e2cc66839a1fc)
2025-03-18 20:39:52 -07:00
Shahar "Dawn" Or
48a407177a nixos: add simple vm-variant test 2025-03-18 20:32:43 +00:00
Will Fancher
720efefbc0 Revert "nixos/doc: recommend usage of --use-remote-sudo when switching configurations" (#390935) 2025-03-18 15:54:33 -04:00
Dawid Ciężarkiewicz
07a3793105 nixos/syncthing: make it easier to debug incorrect IDs
In case of an incorrect ID, the behavior of this script
is quite tricky. See:

https://github.com/NixOS/nixpkgs/issues/326704#issuecomment-2730819822

for more info.
2025-03-18 19:10:10 +01:00
Dawid Ciężarkiewicz
a8b8f8f8c7 nixos/syncthing: missing --fail to curl 2025-03-18 19:10:10 +01:00
Nicolas Mémeint
7407020674 authelia: 4.38.19 -> 4.39.1 2025-03-18 18:23:43 +01:00
Preston Pan
437ae0fb4e nixos/ircd-hybrid: fix bug in which fails to substitute iproute2 (#390833) 2025-03-18 17:46:55 +01:00
Sandro
326cd70480 nixos/movim: improve systemd dependency directives (#388750) 2025-03-18 17:42:52 +01:00
Fernando Rodrigues
c7f394d214 Revert "nixos/doc: recommend usage of --use-remote-sudo when switching configurations" 2025-03-18 11:34:07 +00:00
Neyts Zupan
75773b77be paretosecurity: init at 0.0.86, nixos/paretosecurity: init 2025-03-18 11:09:14 +00:00
K900
dd102fa28d nixos-generate-config: Fix unspecified root (#390892) 2025-03-18 12:02:33 +03:00
Will Fancher
b82dbaf3ab nixos-generate-config: Fix unspecified root 2025-03-18 04:56:51 -04:00
Martin Weinelt
2855030659 nixos/release-combined: migrate to graphical ISO in tested set 2025-03-18 04:05:53 +01:00
Will Fancher
317736b155 nixos/iso-image: Consolidate ISOs Using Specialisations. (#355893) 2025-03-17 21:22:38 -04:00
programmerlexi
1a830fe9d9 nixos/limine: fix the install script 2025-03-18 01:06:55 +05:30
Rane
2cc1d33489 nixos/limine: cast partition index to string (#390732) 2025-03-18 01:01:15 +05:30
oddlama
6c888f4911 nixos/firezone: init modules 2025-03-17 20:21:00 +01:00
Arne Keller
65d532c9d9 nixos/jackett: fix hardening for custom dataDir (#390609) 2025-03-17 17:19:29 +01:00
John Ericson
9df17ad165 nixos/hydra: fix race condition in hydra-compress-logs (#390685) 2025-03-17 11:38:32 -04:00
Sandro
b96c9e3a68 gokapi: init at 1.9.6 (#372911) 2025-03-17 16:12:38 +01:00
Sandro Jäckel
588f41bef0 nixos/hydra: fix race condition in hydra-compress-logs
Source https://github.com/NixOS/hydra/pull/1450
2025-03-17 15:41:00 +01:00