about summary refs log tree commit diff
path: root/nixos/modules
AgeCommit message (Collapse)AuthorFilesLines
2024-04-20nixos/deconz: delay signalling service readiness until it's actually upBjørn Forsman1-0/+7
Fixes test flakiness (`nix-build -A nixosTests.deconz`). (cherry picked from commit e99ef7b970bc0b75d96c9659cc547ba44aca49ea)
2024-04-16akkoma: make options work for 23.11 stateChristina Sørensen1-0/+11
Signed-off-by: Christina Sørensen <christina@cafkafk.com> (cherry picked from commit 8a1dbedde5d596103cf7929b7286a2ba3535d8ea)
2024-04-12akkoma: add tcmal as maintainertcmal1-1/+1
(cherry picked from commit f8b9215e9fe939497143ba2cfc9ad0ab8e26a6d8)
2024-04-12nixos/akkoma: check that upload and media proxy base url is specifiedtcmal1-0/+42
new versions of akkoma require the upload base url to be specified in order for updates to work properly. this will be a breaking change in 24.05, but for now a reasonable default is set.
2024-04-12Merge pull request #301920 from JohnRTitor/backport-searxng-to-23.11Sandro1-1/+1
2024-04-12nixos/searx: use lib.getExeRobert Schütz1-1/+1
2024-04-11nixos-generate-config: preserve vfat filesystem mount permissionsBjørn Forsman1-0/+11
The default is to mount these world-readable, but that's a security risk for the EFI System Partition. Ref https://github.com/NixOS/nixpkgs/issues/279362. (cherry picked from commit 8ee9b79cc41e9013f5bb58081eccdec236530611)
2024-04-10Merge pull request #303135 from Mic92/envfs-backportlassulus1-0/+4
[Backport release-23.11] envfs: 1.0.3 -> 1.0.6
2024-04-10envfs: 1.0.3 -> 1.0.6Jörg Thalheim1-0/+4
Diff: https://github.com/Mic92/envfs/compare/1.0.3...1.0.6 (cherry picked from commit 3a8e8369a67cb68e0e267413c36d997e9e3f670c)
2024-04-09nixos/autorandr: add --match-edidMotiejus Jakštys1-1/+8
It is useful when outputs change, but EDIDs do not. See [upstream PR][1] for more details. [1]: https://github.com/phillipberndt/autorandr/pull/293 (cherry picked from commit dd1e21f39f07a43de49e90866869c23bad4cb31e)
2024-04-08nixos/ollama: add options to override `HOME` and `OLLAMA_MODELS`abysssol1-2/+18
(cherry picked from commit 18a5476aa7779b916e588e99fb438c631a464d77)
2024-04-08Merge pull request #296353 from NixOS/backport-295837-to-release-23.11Pol Dellaiera1-24/+36
[Backport release-23.11] nixos/ollama: add option to set environment variables
2024-04-08zfs_2_1: 2.1.14 -> 2.1.15Alyssa Ross1-35/+6
This adds compatibility with newer kernels, which fixes nixosTests.zfs.series_2_1, which broke when the default kernel version was bumped. This means we no longer need the removeLinuxDRM option at all, but I've kept it around as a no-op so people can leave it set in case the same thing happens again in future. (cherry picked from commit 45f1428902a6fe08ff343a7ebb7254cd1ca98785)
2024-04-08zfs: update latestCompatibleLinuxPackagesAlyssa Ross1-2/+4
ZFS no longer tries to use GPL-only symbols on aarch64. Tested by building nixosTests.zfs.stable (modified to use Linux 6.6) and nixosTests.zfs.unstable. (cherry picked from commit 2b9f0438230377995efb9a6efeec5f8572967643)
2024-04-04nixos/kernel: add hid_corsair to initrd modulesLorenz Brun1-0/+1
Same as all the other HID drivers, otherwise Corsair keyboards do not work before the switch to stage2 without custom configuration. (cherry picked from commit b8b53fdf37710b1c1b58b9a17e2649355dbee938)
2024-04-03Merge pull request #288083 from NixOS/backport-287856-to-release-23.11Emily1-0/+5
[Backport release-23.11] nixos/gitea: warn when using `services.gitea` with forgejo
2024-03-31nixos/gitlab: Rename workhorse binaryYaya1-1/+3
(cherry picked from commit 2e30c96c0afc0544227b8f9900f035f00668ffd4)
2024-03-26nixos/paperless: set OMP_NUM_THREADS=1 by default (#299289)Atemu1-0/+16
Fixes https://github.com/NixOS/nixpkgs/issues/240591 (cherry picked from commit 70fa188e175ab9d1034416374b2af15ad94decbc)
2024-03-25nixos/mediawiki: quote shell flags passed to installerJörg Thalheim1-7/+7
(cherry picked from commit f468e0d11180bdde888a7a16f9c043ec33dd284e)
2024-03-24Merge pull request #295584 from blakesmith/backport_295199Pol Dellaiera1-1/+1
[Backport release-23.11] gotosocial: 0.14.1 -> 0.14.2
2024-03-23Merge pull request #296724 from Lord-Valen/backport-296009-to-release-23.11Atemu1-0/+20
[Backport release-23.11] steam: add extraCompatPackages
2024-03-23nixos/gotosocial: add blakesmith as a maintainerBlake Smith1-1/+1
(cherry picked from commit b0529146b9cb07385b16bd828197d56505ed5ec0)
2024-03-20nixos/gitlab: use workhorse package from option in pathajs1241-1/+1
(cherry picked from commit d179a5fd02ce415236e5c708e661397e44ec6184)
2024-03-20nixos/gitlab: switch from sidekiq to sidekiq-clusterajs1241-1/+8
(cherry picked from commit 956005226f0a7232bae04cdd2501e88c0685ed31)
2024-03-18nixos/steam: provide example in extraCompatPackagesAtemu1-0/+5
(cherry picked from commit bdc55d2f8671881b81d6797928b3e7569235b1ba)
2024-03-17nixos/steam: use steamcompattool output for extraCompatPackagesAtemu1-3/+5
This sets a standard for Steam compat tools in NixOS where they must have the compat tool in a special steamcompattool output. proton-ge-bin was adjusted to conform with it. (cherry picked from commit 2b619c23146b7b791ed25a174add5cc8d99c8654)
2024-03-17nixos/steam: fix eval after #293564K9001-1/+1
(cherry picked from commit 7b8d88fa059d2a945e17c800d4f2bbc958755e5c)
2024-03-17steam: add extraCompatPackagesShawn89011-0/+13
(cherry picked from commit 93a891f0e8e0feb96090eac48d9a2d5aaad28f20)
2024-03-16nixos/ollama: add option to set environment variablesabysssol1-24/+36
(cherry picked from commit b5e7a05bb737a3f53e3316d76008bfd8e373b00d)
2024-03-15Merge pull request #295962 from NixOS/backport-295932-to-release-23.11Ilan Joselevich1-1/+0
[Backport release-23.11] nixos/nextcloud: remove opcache.enable_cli=1
2024-03-14Merge pull request #290195 from NixOS/backport-289754-to-release-23.11Yt1-1/+3
[Backport release-23.11] nixos/atuin: add services.atuin.package option
2024-03-14nixos/nextcloud: remove opcache.enable_cli=1Ilan Joselevich1-1/+0
Upstream no longer recommends enabling the opcache cli. See the following: - https://github.com/nextcloud/documentation/issues/1439 - https://github.com/nextcloud/server/pull/15468 (cherry picked from commit 9353fb2309902387c16130c97f27242ef24bc4c6)
2024-03-13nixos/binfmt: fix race condition between systemd-tmpfiles and systemd-binfmtArian van Putten1-0/+1
We need to make sure systemd-tmpfiles-setup.service ran before we start systemd-binft.service. Otherwise it might fail to start due to non-existant files Fixes #295365 (cherry picked from commit 16526f454fe534a809b3a0e4713c7fa70accb812)
2024-03-12nixos/murmur: fix writing registerPassword to configFelix Buehler1-1/+1
(cherry picked from commit 1e22e7d75ec50dbc106b2080a4f12ce47e547719)
2024-03-12Merge pull request #277395 from NixOS/backport-273443-to-release-23.11Maximilian Bosch1-2/+1
[Backport release-23.11] nixos/thanos: Changed query.replica-labels to a list parameter
2024-03-11nixos/lldap: set service `UMask=0027` and `StateDirectoryMode=0750`emilylange1-0/+2
While `/var/lib/lldap` isn't technically accessible by unprivileged users thanks to `DynamicUser=true`, a user might prefer and change it to `DynamicUser=false`. There is currently also a PR open that intends to make `DynamicUser` configurable via module option. As such, `jwt_secret_file`, if bootstrapped by the service start procedure, might be rendered world-readable due to its permissions (`0644/-rw-r--r--`) defaulting to the service's umask (`022`) and `/var/lib/lldap` to `0755/drwxr-xr-x` due to `StateDirectoryMode=0755`. This would usually be fixed by using `(umask 027; openssl ...)` instead of just `openssl ...`. However, it was found that another file (`users.db`), this time bootstrapped by `lldap` itself, also had insufficient permissions (`0644/-rw-r--r--`) inherited by the global umask and would be left world-readable as well. Due to this, we instead change the service's to `027`. And to lower the impact for already bootstrapped files on existing instances like `users.db`, set `StateDirectoryMode=0750`. (cherry picked from commit 3a1e06218adc58a5a160efe11a814edb2c298b04)
2024-03-11nixos/lldap: bootstrap `jwt_secret` if not providedemilylange1-1/+14
If not provided, lldap defaults to `secretjwtsecret` as value which is hardcoded in the code base. See https://github.com/lldap/lldap/blob/v0.5.0/server/src/infra/configuration.rs#L76-L77 This is really bad, because it is trivially easy to generate an admin access token/cookie as attacker, if a `jwt_secret` is known. (cherry picked from commit 566fba2236ae3a55831ced25e731909d37623d58)
2024-03-10nixos/stargazer: add missing debugMode settinggaykitty1-1/+7
(cherry picked from commit 366147b86d7e9ab9081e9b077d7c0d3c5199a45f)
2024-03-07hercules-ci-agent_assume...: Override largely irrelevant CVE-2024-27297Robert Hensing1-1/+5
It is safe to use 2.16 for evaluation and talking to the daemon, which is how it's used when you're using a nix-daemon. Specifically, this means that it is safe on NixOS and on other multi-user installations.
2024-03-04nixos/ollama: add option for hardware accelerationabysssol1-11/+26
(cherry picked from commits: b8d8c1f207a8c80f7267920efa70db785e5d441e 5c143f03663eb59a7a1eac4b24b7c034abc4f483 87203977204d1c3a7c7ccd39147b17dadf3156e8)
2024-03-04nixos/ollama: Add listenAddressMarcus Ramberg1-0/+8
(cherry picked from commit 8d956b1725be2b21116ba8e267c0f892e1d08a76)
2024-03-04nixos/ollama: initJonas Heinrich2-0/+43
(cherry picked from commit 67a799c40f1e177950d70bb0ea1073c4b6273b0f)
2024-02-29nixos/podman: pass proxy variables to podman APIKiskae1-0/+2
(cherry picked from commit fe93ea4e8e83444f5258d0e593420aac71d0d177)
2024-02-29Merge pull request #292081 from Atemu/backport/mealieAtemu2-0/+80
[23.11] mealie: init at 1.2.0
2024-02-28Merge pull request #287264 from NixOS/backport-286063-to-release-23.11Aaron Andersen1-1/+2
[Backport release-23.11] nixos/github-runners: only override pkg if it has a `nodeRuntimes` arg
2024-02-28nixos/mealie: init moduleLitchi Pi2-0/+80
Signed-off-by: Litchi Pi <litchi.pi@proton.me> (cherry picked from commit 4ebf2b54b09589e35eccb1a565bfb124cb7d09ba)
2024-02-25Merge pull request #287514 from NixOS/backport-256709-to-release-23.11Nick Cao1-1/+2
[Backport release-23.11] nixos/lib/make-squashfs.nix: allow disabling compression
2024-02-22nixos/prometheus-fastly-exporter: fix runtime environmentMartin Weinelt1-19/+32
- Make the token a required option - Drop the proto from the listen parameter - Use systemd credentials to pass the token file - Drop debug flag, use extraArgs instead - Actually hook up extraArgs - Escape shell arguments - Drop overly broad `with lib` statement (cherry picked from commit a43d9cd69a2d02561217b56415edc95a9366a09e)
2024-02-20nixos/atuin: add services.atuin.package optionJohn Garcia1-1/+3
(cherry picked from commit 7427bec3a785c5269c5dee55f9ef45bf77454e09)
2024-02-14Merge pull request #288703 from NixOS/backport-288637-to-release-23.11Nick Cao1-1/+1
[Backport release-23.11] nixos/garage: allow all available log levels in `cfg.logLevel`
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-09-04 01:45:28 +0000