about summary refs log tree commit diff
path: root/nixos/modules/config
AgeCommit message (Collapse)AuthorFilesLines
2021-01-20networking, chrony, ntpd, timesyncd: add timeServers option typeScriptkiddi1-0/+1
2021-01-20Merge pull request #109060 from MetaDark/nixos/xdg/portalWORLDofPEACE1-1/+1
nixos/xdg/portal: fix loading portals from systemd service
2021-01-17nixos/modules: stdenv.lib -> libPavol Rusnak1-6/+4
2021-01-11nixos/xdg/portal: fix loading portals from systemd serviceKira Bruneau1-1/+1
2021-01-10nixos/networking: make /etc/netgroup by defaultMasanori Ogino1-0/+4
This will prevent nscd from complaining /etc/netgroup being absent. Signed-off-by: Masanori Ogino <167209+omasanori@users.noreply.github.com>
2021-01-07nufraw: init at 0.43-3Benjamin Asbach1-0/+1
`nufraw` is used to manipulate raw images. `nufraw-thumbnailer` is used to generate thumbnails for raw images. relates #108444
2021-01-02Merge pull request #106787 from flokli/console-optional-display-managerFlorian Klink1-1/+2
nixos/console: fix Before= on the systemd-vconsole-setup unit
2020-12-31Merge pull request #41966 from ↵Niklas Hambüchen2-1/+10
aneeshusa/allow-mutable-shells-for-declarative-users nixos/users: Allow mutable shells for declarative users
2020-12-17console: remove console.extraTTYs optionrnhmjoj1-14/+4
This closes issue #88085
2020-12-16nixos/users-groups: createHome: Ensure HOME permissions, fix descriptionKlemens Nanni2-5/+4
configuration.nix(1) states users.extraUsers.<name>.createHome [...] If [...] the home directory already exists but is not owned by the user, directory owner and group will be changed to match the user. i.e. ownership would change only if the user mismatched; the code however ignores the owner, it is sufficient to enable `createHome`: if ($u->{createHome}) { make_path($u->{home}, { mode => 0700 }) if ! -e $u->{home}; chown $u->{uid}, $u->{gid}, $u->{home}; } Furthermore, permissions are ignored on already existing directories and therefore may allow others to read private data eventually. Given that createHome already acts as switch to not only create but effectively own the home directory, manage permissions in the same manner to ensure the intended default and cover all primary attributes. Avoid yet another configuration option to have administrators make a clear and simple choice between securely managing home directories and optionally defering management to own code (taking care of custom location, ownership, mode, extended attributes, etc.). While here, simplify and thereby fix misleading documentation.
2020-12-12nixos/console: fix Before= on the systemd-vconsole-setup unitFlorian Klink1-1/+2
Only set Before=display-manager.service if it is actually present. On headless systems, `systemctl list-units --state not-found` will otherwise show display-manager.service. Reported-In: https://github.com/NixOS/nixpkgs/issues/88597
2020-12-12Merge pull request #98731 from mayflower/ldap-nss-optionalLinus Heckemann1-2/+2
config.users.ldap: do not include nss module if turned off
2020-12-11Merge pull request #101224 from aanderse/ldapAaron Andersen1-14/+17
nixos/ldap: restart nslcd when configuration changes
2020-11-25nixos/zram: add zramSwap.memoryMax optionLuke Granger-Brown1-1/+15
This allows capping the total amount of memory that will be used for zram-swap, in addition to the percentage-based calculation, which is useful when blanket-applying a configuration to many machines. This is based off the strategy used by Fedora for their rollout of zram-swap-by-default in Fedora 33 (https://fedoraproject.org/wiki/Changes/SwapOnZRAM), which caps the maximum amount of memory used for zram at 4GiB. In future it might be good to port this to the systemd zram-generator, instead of using this separate infrastructure.
2020-11-24utillinux: rename to util-linuxGraham Christensen3-4/+4
2020-11-21Merge pull request #104052 from TredwellGit/nixos/mallocJoachim F1-1/+1
nixos/malloc: fix Scudo
2020-11-20Merge pull request #98544 from Mic92/unfuck-update-user-groupGraham Christensen1-10/+8
nixos/update-user-groups: Fix encoding issues + atomic writes
2020-11-17nixos/malloc: fix ScudoTredwellGit1-1/+1
Fixes segmentation faults. https://github.com/NixOS/nixpkgs/issues/100799
2020-11-11Merge pull request #103225 from gebner/hsphfpdGabriel Ebner1-1/+1
pulseaudio: add hsphfpd support
2020-11-09Merge pull request #93431 from sorki/audio/pulseJackWORLDofPEACE1-1/+7
nixos/jack,pulseaudio: fix pulse connection to jackd service
2020-11-09treewide: generate pulseaudio pulseDirEdmund Wu1-1/+1
2020-10-26fontdir: add ttc to font regexIvan Tham1-1/+1
.ttc fonts are used by noto-fonts-cjk
2020-10-26nixos/system-path: Add mkpasswd(1)Klemens Nanni2-2/+2
Generating password hashes, e.g. when adding new users to the system configuration, should work out-of-the-box and offline.
2020-10-20nixos/ldap: minor cosmetic fixesAaron Andersen1-13/+9
2020-10-20nixos/ldap: add missing typesAaron Andersen1-0/+2
2020-10-20nixos/ldap: restart nslcd when configuration changesAaron Andersen1-1/+6
2020-10-21Merge pull request #100657 from flokli/network-manager-sstpFlorian Klink1-1/+2
networkmanager-sstp: init at unstable-2020-04-20, bump sstp from 1.0.12 to 1.0.13
2020-10-21nixos/no-x-libs: add networkmanager-sstpFlorian Klink1-1/+2
2020-10-14nixos/pam_mount: add pamMount attribute to usersDavid Reiss1-0/+14
This attribute is a generalized version of cryptHomeLuks for creating an entry in /etc/security/pam_mount.conf.xml. It lets the configuration control all the attributes of the <volume> entry, instead of just the path. The default path remains the value of cryptHomeLuks, for compatibility.
2020-10-08Merge master into staging-nextFrederik Rietdijk2-41/+0
2020-10-07Revert "apparmor: fix and improve the service"Vladimír Čunát2-41/+0
This reverts commit fb6d63f3fdd95a5468d43a0693c8ca7c1894363f. I really hope this finally fixes #99236: evaluation on Hydra. This time I really did check basically the same commit on Hydra: https://hydra.nixos.org/eval/1618011 Right now I don't have energy to find what exactly is wrong in the commit, and it doesn't seem important in comparison to nixos-unstable channel being stuck on a commit over one week old.
2020-10-06Merge staging-next into stagingFrederik Rietdijk2-19/+40
2020-10-04nixos/xwayland: add new module and allow configuring a default font pathEmilio Perez1-3/+5
- Add option `programs.xwayland.defaultFontPath` - Modify sway to enable Xwayland
2020-10-04nixos/fontdir: add option to decompress fontsEmilio Perez1-0/+11
This will let Xwayland use the global font folder as font path
2020-10-04nixos/fontdir: add group of options for fontDirEmilio Perez1-5/+8
Renaming enableFontDir to fontDir.enable
2020-10-04nixos/fontdir: add the directory to the xserver font pathsrnhmjoj1-5/+9
2020-10-04nixos/fontdir: use regexp to find font filesEmilio Perez1-6/+3
2020-10-04nixos/fontdir: gather more font formatsEmilio Perez1-5/+7
- Fix wrong order in which font indexes are created mkfontdir requires the file fonts.scale to consider scalable fonts, thus, mkfontscale should be run before - Search more font formats, in particular, bit-mapped formats
2020-09-30nixos/tests: fix x11 testsJonathan Ringer1-5/+7
2020-09-29Merge branch 'staging-next' into stagingJan Tojnar4-0/+48
2020-09-27Merge pull request #93457 from ju1m/apparmorMichael Raskin2-0/+41
apparmor: fix and improve the service
2020-09-25nixos/update-users-groups: /etc/shadow owned by root:shadowCole Helbling2-0/+7
2020-09-25config.users.ldap: do not include nss module if turned offRobin Gloster1-2/+2
2020-09-23nixos/update-users-groups: write files truly atomicJörg Thalheim1-2/+1
Having the .tmp suffix is broken w.r.t. to multiple writers, as they would overwrite existing files. using the atomic flag will make write_file to create a unique temporary file it gets renamed to its target.
2020-09-23nixos/update-users-groups: fix encoding of json databaseJörg Thalheim1-2/+2
The issue here is that updateFile expects a unicode string while encode_json returns a binary string unlike to_json.
2020-09-23nixos/update-users-group: treat all file as utf-8Jörg Thalheim1-6/+5
Ideally we would treat everything as bytes however our database is already utf-8 encoded so we need to stay compatible.
2020-09-12hooks: add moveSystemdUserUnitsHookRobert Helgesson1-0/+1
This hook moves systemd user service file from `lib/systemd/user` to `share/systemd/user`. This is to allow systemd to find the user services when installed into a user profile. The `lib/systemd/user` path does not work since `lib` is not in `XDG_DATA_DIRS`.
2020-09-08Merge pull request #97171 from davidak/defaultPackagesWORLDofPEACE1-1/+22
nixos/config: add defaultPackages option
2020-09-08nixos/jack,pulseaudio: fix pulse connection to jackd serviceRichard Marko1-1/+7
This fixes the case when Jack Audio Daemon is running as a service via `services.jack.jackd` and Pulseaudio running as a *user* service. Two issues prevented connecting `pulse` with `jackd`: * Missing `JACK_PROMISCUOUS_SERVER` environment variable for `pulse` user service, resulting in `pulse` trying to access `jackd` as if it was running as part of the users session. * `jackd` not being able to access socket created by `pulse` due to socket created using user ID and `users` group. Change allows `jackd` to access the socket created by `pulse` correctly. `pulse` now also autoloads `module-jack-sink` and `module-jack-source` if `services.jack.jackd.enable` is set. The default `pulse` package is now set to `pulseaudioFull` automatically if `services.jack.jackd.enable` is set.
2020-09-06nixos/config: add defaultPackages optiondavidak1-1/+22
readd perl (used in shell scripts), rsync (needed for NixOps) and strace (common debugging tool) they where previously removed in https://github.com/NixOS/nixpkgs/pull/91213 Co-authored-by: Timo Kaufmann <timokau@zoho.com> Co-authored-by: 8573 <8573@users.noreply.github.com>