summary refs log tree commit diff
path: root/nixos/modules
AgeCommit message (Collapse)AuthorFilesLines
2023-11-2123.11 beta release 23.11-betafigsoda2-1/+2
Signed-off-by: figsoda <figsoda@pm.me>
2023-11-21treewide: replace broken udev paths with systemdners2-3/+3
2023-11-20Merge pull request #268324 from Janik-Haag/nixos-firewall-toolAtemu1-0/+1
nixos/firewall: install nixos-firewall-tool for iptables by default
2023-11-20maintainers: remove the numtide team (#268684)Jonas Chevalier1-1/+1
It doesn't really make sense for us as team members are focused on different things. At the end of the day it's the individuals that do the work.
2023-11-20Merge pull request #268717 from SuperSandro2000/patch-2Ryan Lahfa1-2/+2
2023-11-20Merge pull request #253918 from tie/centrifugoNick Cao2-0/+124
centrifugo: init at 5.1.1
2023-11-20nixos/postgresql: fix mentioned settings in ensurePermissions warningsSandro1-2/+2
2023-11-20centrifugo: init at 5.1.1Ivan Trubach2-0/+124
2023-11-19Merge pull request #258036 from anthonyroussel/fix-ssm-seelogMario Rodas1-3/+6
nixos/amazon-ssm-agent: fix missing seelog.xml file
2023-11-19Merge pull request #264910 from anthonyroussel/ocsinventory-agent+nixosMario Rodas3-0/+168
nixos/ocsinventory-agent: init
2023-11-19Merge pull request #265465 from jpds/caddy-restart-on-failureEmily1-1/+3
nixos/caddy: Set systemd unit to restart on-failure
2023-11-19Merge pull request #268110 from tyxieblub/squid-serviceArtturi1-1/+1
2023-11-19Merge pull request #260089 from anthonyroussel/thanos_0_32_4Artturi1-50/+95
2023-11-19Merge pull request #252117 from nalves599/252116-pixiecore-firewallRyan Lahfa1-3/+3
2023-11-19Merge pull request #266151 from JulienMalka/append-secret-reproducibleRyan Lahfa1-1/+1
2023-11-19nixos/chrony: Add missing rtcsync assertion.Adrian Pistol1-6/+21
Due to a lot of rebasing, I dropped my added assertion in #259405. This is important.
2023-11-19Merge pull request #263550 from anthonyroussel/updates/axis2Mario Rodas1-95/+70
axis2: 1.7.9 -> 1.8.2, tomcat10: 10.0.27 -> 10.1.15, tomcat9: 9.0.75 -> 9.0.82
2023-11-18Merge pull request #267640 from Madouura/pr/bcachefsRyan Lahfa1-10/+31
2023-11-18Merge pull request #264521 from stephen-huan/mullvad-vpn-resolvconfArtturi1-1/+3
2023-11-18Merge pull request #266990 from ↵Will Fancher1-1/+1
ElvishJerricco/systemd-boot-boot-pass-flags-to-update nixos/systemd-boot: pass EFI variable flags during update too
2023-11-19nixos/networkd: allow configuring AckFilter for CAKE qdiscPatrick Steinhardt1-0/+2
The CAKE section for systemd.network units allows configuring whether or not redundant ACKs should be dropped. This option corresponds to the respective tc-cake(8) params "ack-filter", "ack-filter-aggressive" or "no-ack-filter". Add support for these values in the `cakeConfig` module so that users can configure it.
2023-11-18nixos/firewall: install nixos-firewall-tool for iptables by defaultJanik H.1-0/+1
2023-11-18nixos/bcachefs: soft-deprecate 'linuxPackages_testing_bcachefs'Madoura1-3/+26
'bcachefs' is included in the linux kernel since 6.7-rc1
2023-11-18Merge pull request #268132 from bendlas/forgejo-release-notesNick Cao1-1/+1
nixos/forgejo/docs: fix typo
2023-11-18nixos/bcachefs: remove 'with lib;'Madoura1-7/+5
2023-11-18google-compute-image: add the missing /boot filesystemYang, Bo1-0/+5
2023-11-18nixos/forgejo: remove `postgresql_15` permission work-aroundemilylange1-11/+0
This is no longer necessary as of ccfe07c3168109567b98462533f7ddf14c7ba18d. Previously: b8585a119ce5c28754267f349107304117041083.
2023-11-18nixos/networkd: add [IPVLAN] and [IPVTAP] configuration options to ↵Philip Taron1-0/+34
systemd.netdev files [IPVLAN](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVLAN%5D%20Section%20Options) [IPVTAP](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVTAP%5D%20Section%20Options)
2023-11-18nixos/networkd: add ipvtap kind to netdev and IPVTAP= to networkPhilip Taron1-0/+2
From `man systemd.netdev`: https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#Supported%20netdev%20kinds From `man systemd.network`: https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#IPoIB=
2023-11-17Merge pull request #264358 from RaitoBezarius/drop-nodejsRyan Lahfa3-474/+0
2023-11-17nixos/syncthing: respect the dataDir optionWilliam McKinnon1-1/+3
The previous -home argument worked as such: "Set common configuration and data directory. The default configuration directory is $HOME/.config/syncthing (Unix-like), $HOME/Library/Application Support/Syncthing (Mac) and %LOCALAPPDATA%\Syncthing (Windows)" This resulted in syncthing not respecting different home and data dirs declared in its config. The default behaviour will remain the same, as we set the datadir default value to homeDir + .config/syncthing.
2023-11-17Merge pull request #227588 from camillemndn/jitsi-meetJulien Malka1-19/+159
nixos/jitsi-meet: updated prosody, support secure domain setup and Excalidraw whiteboards
2023-11-17Merge pull request #265556 from adamcstephens/slimserver/fixAdam C. Stephens1-1/+1
slimserver: fix broken package
2023-11-17code-server: dropRaito Bezarius2-260/+0
Depends on Node.js 16 and cannot be trivially upgraded to Node.js 18.
2023-11-17kibana7: dropRaito Bezarius2-214/+0
Depends on EOL software and no maintenance has been attempted to change this after a ping (https://github.com/NixOS/nixpkgs/issues/259178) Feel free to adopt and re-introduce if you care about this software. This will probably seriously hamper ELK usability in nixpkgs, but as it receives no maintenance…
2023-11-17Merge pull request #267985 from JulienMalka/absent-bootspecRyan Lahfa2-3/+16
2023-11-17Merge pull request #266270 from Ma27/postgresql-ownership-15Ryan Lahfa33-94/+157
2023-11-17nixos/forgejo/docs: fix typoHerwig Hochleitner1-1/+1
2023-11-17nixos/postgresql: document psql 15 changes (#267238)Herwig Hochleitner1-0/+119
* nixos/postgresql: document psql 15 changes * nixos/postgresql: manual heading ids * nixos/postgresql: reword warning against initialScript Co-authored-by: Ryan Lahfa <masterancpp@gmail.com> * nixos/postgresql: wording PERMISSIONS -> PRIVILEGES Co-authored-by: Ryan Lahfa <masterancpp@gmail.com> * nixos/postgresql: document intermediate oneshot / service user method * nixos/postgresql/docs: clarify security benefits of `ensureDBOwnership` * nixos/postgresql/docs: service type -> serviceConfig.Type --------- Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
2023-11-17nixos/forgejo: changelog and migration instructions (#267248)Herwig Hochleitner2-0/+80
* nixos/forgejo: changelog and migration instructions * nixos/forgejo/docs: clarify sentence Co-authored-by: Trolli Schmittlauch <schmittlauch@users.noreply.github.com> * nixos/forgejo/docs: document migration via gitea impersonation * nixos/forgejo/docs: note about url change on migration * nixos/forgejo/docs: note about migration (non-)requirement * nixos/forgejo/docs: header ids * nixos/forgejo/docs: clarify release notes entry Co-authored-by: Emily <git@emilylange.de> * nixos/forgejo/docs: improve manual entry Co-authored-by: Emily <git@emilylange.de> * nixos/forgejo/docs: move changelog line to the middle of the section as noted <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. --> --------- Co-authored-by: Trolli Schmittlauch <schmittlauch@users.noreply.github.com> Co-authored-by: Emily <git@emilylange.de>
2023-11-17nixos/invidious: do not use `ensureDBOwnership`Raito Bezarius1-0/+9
Invidious uses a strange setup where the database name is different from the system username for non-explicit reasons. Because of that, it makes it hard to migrate it to use `ensureDBOwnership`, we leave it to Invidious' maintainers to pick up the pieces.
2023-11-17nixos/mobilizon: do not use `ensureDBOwnership`Raito Bezarius1-7/+10
Mobilizon can have a custom database username and it is not trivial to sort out how to remove this. In the meantime, for the upcoming 23.11 release, I apply the classical workaround and defer to Mobilizon's maintainers.
2023-11-17nixos/sourcehut: do not use `ensureDBOwnership`Raito Bezarius1-12/+7
Given that SourceHut uses unfortunate defaults for database name, it will not be realistic to fix this in time for 23.11. We will leave the workaround and leave it to SourceHut maintainers to pick up the work to clean this up after 23.11.
2023-11-17nixos/systemd-boot: allow for bootspec-less generationsJulien Malka2-3/+16
Generation built with old versions of NixOS with no bootspec support may still be present on the system and must be accounted for.
2023-11-17slimserver: add bin symlink and meta.mainProgramAdam Stephens1-1/+1
2023-11-17services/squid: explicit usage of coreutils' kill on ExecReloadjoris1-1/+1
2023-11-17maintainers: fortuneteller2k -> monifortuneteller2k1-1/+1
2023-11-17Merge pull request #267761 from jpds/grafana-restart-on-failureIlan Joselevich1-0/+1
nixos/grafana: Set systemd unit to restart on failure
2023-11-16Merge master into staging-nextgithub-actions[bot]2-52/+67
2023-11-16Merge pull request #267560 from anthonyroussel/bugfix/plantuml-server-nixosPol Dellaiera1-52/+66
nixos/plantuml-server: fix