Age | Commit message (Collapse) | Author | Files | Lines |
|
Signed-off-by: figsoda <figsoda@pm.me>
|
|
|
|
nixos/firewall: install nixos-firewall-tool for iptables by default
|
|
It doesn't really make sense for us as team members are focused on
different things. At the end of the day it's the individuals that do the
work.
|
|
|
|
centrifugo: init at 5.1.1
|
|
|
|
|
|
nixos/amazon-ssm-agent: fix missing seelog.xml file
|
|
nixos/ocsinventory-agent: init
|
|
nixos/caddy: Set systemd unit to restart on-failure
|
|
|
|
|
|
|
|
|
|
Due to a lot of rebasing, I dropped my added assertion in #259405. This is important.
|
|
axis2: 1.7.9 -> 1.8.2, tomcat10: 10.0.27 -> 10.1.15, tomcat9: 9.0.75 -> 9.0.82
|
|
|
|
|
|
ElvishJerricco/systemd-boot-boot-pass-flags-to-update
nixos/systemd-boot: pass EFI variable flags during update too
|
|
The CAKE section for systemd.network units allows configuring whether or
not redundant ACKs should be dropped. This option corresponds to the
respective tc-cake(8) params "ack-filter", "ack-filter-aggressive" or
"no-ack-filter".
Add support for these values in the `cakeConfig` module so that users
can configure it.
|
|
|
|
'bcachefs' is included in the linux kernel since 6.7-rc1
|
|
nixos/forgejo/docs: fix typo
|
|
|
|
|
|
This is no longer necessary as of
ccfe07c3168109567b98462533f7ddf14c7ba18d.
Previously: b8585a119ce5c28754267f349107304117041083.
|
|
systemd.netdev files
[IPVLAN](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVLAN%5D%20Section%20Options)
[IPVTAP](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVTAP%5D%20Section%20Options)
|
|
From `man systemd.netdev`: https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#Supported%20netdev%20kinds
From `man systemd.network`: https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#IPoIB=
|
|
|
|
The previous -home argument worked as such:
"Set common configuration and data directory. The default configuration directory is $HOME/.config/syncthing (Unix-like), $HOME/Library/Application Support/Syncthing (Mac) and %LOCALAPPDATA%\Syncthing (Windows)"
This resulted in syncthing not respecting different home and data dirs
declared in its config. The default behaviour will remain the same, as
we set the datadir default value to homeDir + .config/syncthing.
|
|
nixos/jitsi-meet: updated prosody, support secure domain setup and Excalidraw whiteboards
|
|
slimserver: fix broken package
|
|
Depends on Node.js 16 and cannot be trivially upgraded to Node.js 18.
|
|
Depends on EOL software and no maintenance has been attempted to change this after a ping
(https://github.com/NixOS/nixpkgs/issues/259178)
Feel free to adopt and re-introduce if you care about this software.
This will probably seriously hamper ELK usability in nixpkgs, but as it
receives no maintenance…
|
|
|
|
|
|
|
|
* nixos/postgresql: document psql 15 changes
* nixos/postgresql: manual heading ids
* nixos/postgresql: reword warning against initialScript
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
* nixos/postgresql: wording PERMISSIONS -> PRIVILEGES
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
* nixos/postgresql: document intermediate oneshot / service user method
* nixos/postgresql/docs: clarify security benefits of `ensureDBOwnership`
* nixos/postgresql/docs: service type -> serviceConfig.Type
---------
Co-authored-by: Ryan Lahfa <masterancpp@gmail.com>
|
|
* nixos/forgejo: changelog and migration instructions
* nixos/forgejo/docs: clarify sentence
Co-authored-by: Trolli Schmittlauch <schmittlauch@users.noreply.github.com>
* nixos/forgejo/docs: document migration via gitea impersonation
* nixos/forgejo/docs: note about url change on migration
* nixos/forgejo/docs: note about migration (non-)requirement
* nixos/forgejo/docs: header ids
* nixos/forgejo/docs: clarify release notes entry
Co-authored-by: Emily <git@emilylange.de>
* nixos/forgejo/docs: improve manual entry
Co-authored-by: Emily <git@emilylange.de>
* nixos/forgejo/docs: move changelog line to the middle of the section
as noted <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->
---------
Co-authored-by: Trolli Schmittlauch <schmittlauch@users.noreply.github.com>
Co-authored-by: Emily <git@emilylange.de>
|
|
Invidious uses a strange setup where the database name is different from the system username
for non-explicit reasons.
Because of that, it makes it hard to migrate it to use `ensureDBOwnership`, we leave it to Invidious' maintainers
to pick up the pieces.
|
|
Mobilizon can have a custom database username and it is not trivial to sort out how to remove this.
In the meantime, for the upcoming 23.11 release, I apply the classical workaround
and defer to Mobilizon's maintainers.
|
|
Given that SourceHut uses unfortunate defaults for database name, it will not
be realistic to fix this in time for 23.11.
We will leave the workaround and leave it to SourceHut maintainers to pick up the work
to clean this up after 23.11.
|
|
Generation built with old versions of NixOS with no bootspec
support may still be present on the system and must be
accounted for.
|
|
|
|
|
|
|
|
nixos/grafana: Set systemd unit to restart on failure
|
|
|
|
nixos/plantuml-server: fix
|