about summary refs log tree commit diff
path: root/nixos/modules/services
AgeCommit message (Collapse)AuthorFilesLines
2024-05-12Merge pull request #305586 from drupol/private-gpt/initPol Dellaiera1-0/+121
private-gpt: init at 0.5.0
2024-05-11nixos/pixiecore: fix apiServer exampleBjørn Forsman1-2/+2
Add missing http:// scheme. Without it pixiecore logs this and never contacts the API server: [DHCP] Couldn't get bootspec for [REDACTED_MAC_ADDR]: Get "localhost:8080/v1/boot/[REDACTED_MAC_ADDR]": unsupported protocol scheme "localhost"
2024-05-11nixos/private-gpt: initPol Dellaiera1-0/+121
2024-05-10k3s: format with nixfmt-rfc-stylesuperherointj1-13/+31
2024-05-10Merge pull request #310366 from mweinelt/pretix-pretalx-homemodeMartin Weinelt2-12/+49
pretix, pretalx: fixes, hardening
2024-05-10Merge pull request #310452 from fpletz/nginx-acme-servernameFranz Pletz1-1/+1
nixos/nginx: fix reference to acme cert hostname
2024-05-10nixos/navidrome: add nu-nu-ko to maintainersnu-nu-ko1-1/+2
2024-05-10nixos/navidrome: ensure data & cache dirs exist with valid permissionsnu-nu-ko1-54/+65
2024-05-10nixos/navidrome: remove apply from settings optionnu-nu-ko1-3/+1
2024-05-10nixos/navidrome: use lib.getExenu-nu-ko1-2/+2
2024-05-10nixos/navidrome: add user/group optionsnu-nu-ko1-2/+25
2024-05-10nixos/navidrome: rfcfmt, rm mdDoc & with lib;nu-nu-ko1-52/+73
2024-05-10nixos/nginx: fix reference to acme cert hostnameFranz Pletz1-1/+1
The change introduced in #308303 refers to the virtualHosts attrset key which can be any string. The servername is the actual primary hostname used for the certificate. This fixes use cases like: services.nginx.virualHosts.foobar.serverName = "my.fqdn.org";
2024-05-09pretalx: adopt and set up code ownershipMartin Weinelt1-1/+1
2024-05-09nixos/pretix: update hardeningMartin Weinelt1-2/+4
- Transition from world-readable to group-readable UMask - Remove world permissions from state directory
2024-05-09nixos/pretalx: set up hardeningMartin Weinelt1-0/+35
2024-05-09nixos/pretalx: fix state directory modeMartin Weinelt1-5/+7
The state directory contains static files that need to be accessible by a webserver, but homeMode defaults to 0750 and switching the generation will always force the homeMode, thereby breaking access to the assets. Instead, fully rely on systemd to provide the StateDirectory with the correct mode.
2024-05-09nixos/pretix: fix state directory modeMartin Weinelt1-4/+2
The state directory contains static files that need to be accessible by a webserver, but homeMode defaults to 0750 and switching the generation will always force the homeMode, thereby breaking access to the assets. Instead, fully rely on systemd to provide the StateDirectory with the correct mode.
2024-05-09Merge pull request #310298 from rouven0/portunus-dexNick Cao1-6/+8
nixos/portunus: fix dangling service files for dex
2024-05-09nixos/portunus: fix dangling service files for dexRouven Seifert1-6/+8
2024-05-08Merge pull request #277368 from niklaskorz/nixos-mautrix-signalGuillaume Girol1-0/+249
nixos/mautrix-signal: add module
2024-05-08Merge pull request #302300 from Ma27/kernel-zstdLinus Heckemann1-4/+10
linux kernel: prefer zstd where possible
2024-05-08Merge pull request #309696 from Uthar/lisp-removal-of-previous-variants7c6f434c1-1/+1
Lisp modules - removal of previous variants
2024-05-08Merge pull request #308291 from Ma27/nc-update-dbJonas Heinrich1-1/+16
nixos/nextcloud: add nextcloud-update-db.service, nextcloud-cron isn't oneshot
2024-05-08Merge pull request #302908 from kai-tub/nixos/restic/fix-checkCmdPascal Wittmann1-5/+14
nixos/restic: fix skipping of check command
2024-05-07Merge pull request #309838 from cyberus-technology/take-plausible-maintainershipnikstur1-1/+1
plausible: take take-plausible-maintainership
2024-05-07Merge pull request #309836 from cyberus-technology/fix-nixos-plausible-unitLeona Maroni1-1/+1
nixos/plausible: fix unit start script
2024-05-07plausible: take take-plausible-maintainershipAlexander Sieg1-1/+1
2024-05-07nixos/plausible: fix unit start scriptAlexander Sieg1-1/+1
In 8bb777ee378082942231f63a035923a475538030 a condition was added to only execute the createdb.sh script if database setup was configurated. However a superfluace " was added at the end of the line which cased an escaping error the resulted in #309520. Fixes #309520
2024-05-07Merge pull request #309550 from linj-fork/pr/kanata-check-config-at-build-timePol Dellaiera1-8/+14
nixos/kanata: check the config file at build time
2024-05-07Merge pull request #309609 from linj-fork/pr/kanata-module-docLin Jian1-21/+10
nixos/kanata: improve doc
2024-05-07nixos/clfswm: use sbclPackages - lispPackages was removedKasper Gałkowski1-1/+1
2024-05-07Merge pull request #309424 from NixOS/ReadWriteDirectories-ReadWritePathsNiklas Hambüchen4-4/+5
nixos/{zoneminder,caddy,traefik}: ReadWriteDirectories -> ReadWritePaths
2024-05-07treewide: ReadWriteDirectories -> ReadWritePaths.Niklas Hambüchen4-4/+4
These were renamed in systemd v231: https://github.com/systemd/systemd/commit/2a624c36e646e9ef8d204a506b12e7dbd380e111
2024-05-06nixos/oauth2-proxy: fix missing `lib.`Bernardo Meurer1-1/+1
2024-05-07nixos/kanata: replace deflayer with deflayermap in config exampleLin Jian1-16/+5
IMHO, this style is more intuitive.
2024-05-07nixos/kanata: improve links to the upstream documentationLin Jian1-4/+4
2024-05-07nixos/kanata: improve example of the package optionLin Jian1-1/+1
Before this patch, it is rendered as "Example: kanata-with-cmd". With this patch applied, it is "Example: pkgs.kanata-with-cmd".
2024-05-06nixos/kanata: check the config file at build timeLin Jian1-8/+14
Before this patch, checking the config file is done at runtime. Doing so at build time shortens the feedback loop[1][2]. [1]: https://github.com/NixOS/nixpkgs/issues/278135 [2]: https://github.com/jtroo/kanata/issues/689
2024-05-06Merge pull request #309304 from Ma27/nc-davSandro2-7/+2
2024-05-06nixos/caddy: Comment why ExecStart is resetNiklas Hambüchen1-0/+1
2024-05-06nixos/ssh: Make `~/.ssh/authorized_keys` optional in AuthorizedKeysFiles ↵nicoo1-1/+12
(#279894)
2024-05-05Merge pull request #309324 from evenbrenden/move-jotta-cliSandro2-4/+4
nixos/jotta-cli: move to services.jotta-cli
2024-05-05Merge pull request #309318 from oxalica/feat/plasma6-kwin-wayland-niceK9001-0/+9
nixos/plasma6: add CAP_SYS_NICE for kwin_wayland
2024-05-05Merge pull request #309068 from SuperSandro2000/dbus-brokerFlorian Klink1-0/+12
nixos/dbus: fix switching from dbus-broker to dbus
2024-05-05Merge pull request #306655 from devusb/sunshine-updateAndré Silva1-3/+3
sunshine: 0.23.0 -> 0.23.1
2024-05-05nixos/jotta-cli: move to services.jotta-cliEven Brenden2-4/+4
2024-05-05nixos/nextcloud: add trailing slashes to carddav/caldav redirectMaximilian Bosch2-7/+2
This seems to solve the problem with the warning about carddav/caldav redirects being broken.
2024-05-05nixos/mautrix-signal: add moduleNiklas Korz1-0/+249
2024-05-05nixos/display-managers: fix assertionSandro Jäckel1-1/+1