about summary refs log tree commit diff
path: root/nixos/modules
AgeCommit message (Collapse)AuthorFilesLines
2023-12-11nixos/networking-interfaces: fix rootless pingrnhmjoj1-0/+2
In 759ec111 the ping setuid wrapper was removed in favour of giving permissions to perform ICMP echo requests to all users. The problem is that the systemd file that was supposed to change the `net.ipv4.ping_group_range` sysctl is not always installed, specifically only if systemd.coredump.enable. In that case the range is "0 1", which is effectively restricts ping to only root. This change explicitely sets the range to "0 2^31-1", as systemd does. (cherry picked from commit cdc24ab40989d45fab2779d9df243aba5f3cfe3c)
2023-12-10Merge pull request #272654 from NixOS/backport-267906-to-release-23.11Nick Cao1-3/+11
[Backport release-23.11] nixos/keycloak: Allow setting `hostname-url`
2023-12-10nixos/home-assistant: fix broken reference in option exampleMartin Weinelt1-1/+1
(cherry picked from commit 04c2893d58e7fc78f1f0b287058cdbb45db24acb)
2023-12-10nixos/home-assistant: fix custom lovelace module loadingSandro Jäckel1-4/+2
based on https://community.home-assistant.io/t/ui-lovelace-yaml-and-custom-resources/240178/4 Tested on a home-assistant server and before the card was not loaded at all. After this it threw an error that my config is wrong. (cherry picked from commit 663dbfb82d631c8fcc4b6c46a4db3760a99e1c36)
2023-12-10nixos/home-assistant: fix error when switching between writable and none ↵Sandro Jäckel1-2/+2
writable lovelace config error message before was: cp: not writing through dangling symlink '/var/lib/hass/ui-lovelace.yaml' (cherry picked from commit 57bfbc781c39b51aa440f0d1aebead78eab9bdf4)
2023-12-10nixos/home-automation: really fix lovelace card entrypointZhong Jianxin1-1/+1
(cherry picked from commit b097e95193746184b0dbf32ebc0af79bd8852c66)
2023-12-10nixos/home-automation: fix lovelace card entrypointMartin Weinelt1-1/+1
Only append the .js extension to the card pname, not to the specified entrypoint. (cherry picked from commit d809a6f9c30d6d7dd0a87025553c28067810edf0)
2023-12-10Merge pull request #272617 from NixOS/backport-272542-to-release-23.11Florian Klink1-3/+3
[Backport release-23.11] nixos/caddy: use caddyfile adapter by default with explicit configFile
2023-12-09nixos/btrbk: Optimize sortRobert Hensing1-2/+2
This avoids computing the prio more than necessary. The test evaluates to the same derivation hash. (cherry picked from commit 7438f4e0de4f41a562c4292a035f406129208bfd)
2023-12-09nixos/postgresqlBackup: add Scrumplex as maintainerSefa Eyeoglu1-0/+1
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net> (cherry picked from commit 58f091d5ac33943664b7567d68a6777ddc775df1)
2023-12-09nixos/postgresqlBackup: add --rsyncable to compression programsSefa Eyeoglu1-2/+2
The --rsyncable option changes the behavior of gzip/zstd so that the resulting files can be incrementally backed up easily. Tools like Borg, rsync and xdelta can make use their deduplication/diff mechanisms more easily. In my local testing, this resulted in a 2% size increase for backup files. Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net> (cherry picked from commit 40c3d65bdff49b818073d7c92cf0ec6d7fab2bba)
2023-12-08nixos/teamspeak3: SSH and HTTP ip+port optionsJacob Greenleaf1-9/+33
ServerQuery actually listens on three separate addresses each corresponding to its own protocol (raw/telnet, ssh, and http). By only setting `query_addr` we only update what IP we listen on for the raw protocol, not ssh and http protocols which end up listening on the default wildcard address. This change simply makes it so that setting `queryIP` sets the IP for all three protocols by setting each corresponding option (`query_ip`, `query_ssh_ip` and `query_http_ip`). (cherry picked from commit ed67e22139a4e01338ce8b56ca2a3d4711d0199e)
2023-12-08nixos/transmission: correct typo on systemd StateDirectoryckie1-4/+4
systemd would previously create a nonoperational "/var/lib/transmission/watch-dir" directory due to a typo in the StateDirectory array ("watch-dir" -> "watchdir") I have corrected this by using the pre-declared constants for these folder names. (cherry picked from commit d5260c5544b9dfbe35392d7b4e03ee57d7205628)
2023-12-08nixos/nix.nix: Support new Nix 2.20 command syntaxRobert Hensing1-2/+6
Otherwise it shows a deprecation warning, which is escalated to an error. For context, see https://github.com/NixOS/nixpkgs/pull/139075#discussion_r733615550 (cherry picked from commit 2d0f4a7ec19082248094eb04a35c93c94b1d35d5)
2023-12-08nixos/guix: fix user activation scriptGabriel Arazas1-1/+1
(cherry picked from commit 85fcb9b4ef555af76ab54f88e27d9f4c28aec512)
2023-12-08Merge pull request #272638 from NixOS/backport-269908-to-release-23.11Peder Bergebakken Sundt1-0/+6
[Backport release-23.11] nixos/ejabberd: ensure erlang cookie is made
2023-12-08Merge pull request #272631 from NixOS/backport-268497-to-release-23.11Peder Bergebakken Sundt1-3/+9
[Backport release-23.11] greetd: create cache dir for tuigreet
2023-12-07nixos/wyoming/{faster-whisper,piper}: hook up enable optionMartin Weinelt2-0/+2
(cherry picked from commit de0e28497657771ae16cce96bb946cdb1439ae3b)
2023-12-07Revert "wordpress: fixed installing of languages"Weijia Wang1-1/+1
(cherry picked from commit 9f1f87b6125c229e199a874ea4be90a2ea06c185)
2023-12-07nixos/git: add prompt.enableProminentRetail1-0/+9
(cherry picked from commit 2db2f446c27b7be976822cf4d502857a0f522b2f)
2023-12-07Merge pull request #272639 from NixOS/backport-271289-to-release-23.11Weijia Wang1-1/+1
[Backport release-23.11] nixos/teeworlds: reduce closure size
2023-12-07Merge pull request #272317 from NixOS/backport-270847-to-release-23.11Weijia Wang1-1/+1
[Backport release-23.11] tomcat10: 10.1.15 -> 10.1.16
2023-12-07nixos/keycloak: Allow setting hostname-urltalyz1-3/+11
(cherry picked from commit 4b0b3413b48d303bfd5714c7161cb3a574bee38f)
2023-12-07nixos/teeworlds: reduce closure sizeLuflosi1-1/+1
Use `teeworlds-server` instead of `teeworlds`. We don't need an entire GUI program just to run the server. (cherry picked from commit efca3c0329531a2bdba8a018dff91434257112a3)
2023-12-07nixos/ejabberd: ensure erlang cookie is madePeder Bergebakken Sundt1-0/+6
Apply the same fix as found in `couchdb` and `rabbitmq`. (cherry picked from commit 2ca79e7f9d14ebc34495affc576eccd4f17aa5e2)
2023-12-07greetd: create cache dir for tuigreetPaul Meyer1-3/+9
(cherry picked from commit 3e4e76e6769bab6fa7f1f6f9d63967147e701ac8)
2023-12-07nixos/guix: initGabriel Arazas2-0/+395
(cherry picked from commit ad277ea47e17e3073ba61af07284d1dff8d1601e)
2023-12-07nixos/caddy: Use caddyfile adapter by default when explicitly specifying ↵sohalt1-3/+3
configFile (cherry picked from commit 3c6b3d71fa696da5c170c0ff44eaa8c51999a80c)
2023-12-05nixos/tomcat: add anthonyroussel to maintainersAnthony Roussel1-1/+1
(cherry picked from commit 9a5f5ee7d3bae6c42b95c5b0f5d2a1bb5243a5d5)
2023-12-04Merge pull request #272056 from NixOS/backport-270522-to-release-23.11Kerstin1-1/+1
[Backport release-23.11] nixos/mastodon; Releasenotes and (possibly) better error messages for `streamingProcesses`
2023-12-04Merge pull request #272039 from NixOS/backport-271869-to-release-23.11Nick Cao1-1/+4
[Backport release-23.11] nixos/redmine: Fix database assertions
2023-12-04nixos/mastodon: clarify the need to set streamingProcessesTrolli Schmittlauch1-1/+1
Explicitly declaring that option is now necessary, but wasn't in the module shipped with 23.05. (cherry picked from commit cbf69c83d3b2bdc5eca341aa9e44e0406794af81)
2023-12-04nixos/redmine: Fix database assertionsMichal Sojka1-1/+4
Recent PR 266270[1] modified an assertion related to database settings of the redmine service. There are two problems with that change: 1. Assert message was not updated to reflect the change in the assert condition. 2. The new condition applies only to postgresql, not the default mysql. Therefore, the assertion breaks existing mysql-based installations without any reason. This commit fixes these by 1) reverting the modified assertion to the previous value, making the message match the condition and 2) adding a new assertion that applies only to postgresql. [1]: https://github.com/NixOS/nixpkgs/pull/266270 (cherry picked from commit 8667baf161e3f705f56c1bdd9cc48f187a3627a6)
2023-12-04nixos/keepalived: add openFirewall optionNuno Alves1-0/+21
Allow VRRP and AH (authentication packets) through the firewall automatically if the option is set. (cherry picked from commit 24d9151d15168867b87669ee663e4d15a23ded91)
2023-12-02nixos/preload: fix log permissionLDprg1-1/+1
(cherry picked from commit 6f33e6e4ab2e47124e8c1160c574f9c60c40a523)
2023-12-02nixos/mysql-auth: fix passwords in config filesnetali1-22/+35
(cherry picked from commit b1b67e980a9a8e6227d5f71f8b036e17c7716f0d)
2023-12-02nixos/matrix-appservice-irc: fix syscall filterBenjamin Saunders1-1/+1
The pre-start script requires @chown; the service fails without it. (cherry picked from commit dffba14043168d767a12ff86c39464b8503d3d29)
2023-12-01nixos/opensearch: check plugins directory exists before checking contentSoner Sayakci1-1/+1
(cherry picked from commit 87b3a98c36607596f9c4fc1fa5d51ffd9b12894f)
2023-12-01Merge pull request #270117 from NixOS/backport-269452-to-release-23.11Ryan Lahfa1-12/+19
[Backport release-23.11] zfs_2_1: init at 2.1.13
2023-11-30nixos/libvirtd: add netcat and supportFelix Buehler1-1/+1
see: https://github.com/NixOS/nixpkgs/issues/180806 (cherry picked from commit 1b5617e25bc7b4f2390898e895792be5f0e68c6e)
2023-11-30nixos/i3: add updateSessionEnvironment optionLuna Nova1-0/+15
Runs dbus-update-activation-environment and systemctl import-environment on session start to ensure xdg portals work, and user services have correct PATH / XDG env vars. Matches behavior of Plasma/Gnome sessions. (cherry picked from commit d47bb3261f54f5285b0f0714cd4f3f7452f89017)
2023-11-30Merge pull request #270186 from NixOS/backport-269423-to-release-23.11Nick Cao1-5/+2
[Backport release-23.11] nixos/mediawiki: update url option defaultText
2023-11-30Merge pull request #270384 from NixOS/backport-252747-to-release-23.11Nick Cao1-6/+2
[Backport release-23.11] nixos/syncoid: use string type for sshKey options
2023-11-30nixos/jitsi-meet: fix `cfg.caddy.enable`emilylange1-1/+1
This fixes the following error: ``` error: failed processing files: FailedJobs( "static/404.html": Permission denied (os error 13) at path "/build/static/.tmpRMzDXu" ) ``` (cherry picked from commit 3e5dc7174ede2897c5da25bb7863b2df52400a0c)
2023-11-30Merge pull request #270693 from NixOS/backport-268574-to-release-23.11Weijia Wang2-3/+19
[Backport release-23.11] darwin.linux-builder: Disable evaluation
2023-11-29zfs_2_1: init at 2.1.13Raito Bezarius1-12/+19
This re-introduces the old stable ZFS version we had in the past following the many predicted issues of ZFS 2.2.x series, that is much more stable than any further ZFS version at the moment. I am also removing myself from maintenance of any further ZFS versions as I am planning to quit ZFS maintenance at some point. In the meantime, for users like me who depend on ZFS for critical operations, here is a ZFS version that is known to work for LTS kernels. (cherry picked from commit e04c0b0d99fb66e4ab52dc47840f237f92242c4f)
2023-11-29nixos/esphome: fix bwrapFelix Buehler1-3/+3
(cherry picked from commit 9f563e21ac4dfb62ca57ff5b5893e86e497cfd72)
2023-11-29Merge pull request #270175 from ↵figsoda1-6/+16
ShamrockLee/backport-23.11-apptainer-localstatedir [Backport 23.11] apptainer, singularity: use self-contained LOCALSTATEDIR by default
2023-11-29nixos/mininet: wrap with mininet in PYTHONPATH and ifconfig in PATHhexclover1-10/+23
(cherry picked from commit 4e6fc83b980ebd91d7cb3b24e5a2927f1d158520)
2023-11-28nixos/sourcehut: compile and integrate paste.sr.ht API componentTomas Antonio Lopez1-0/+5
(cherry picked from commit 5476b490d4c47655ee6345a120b663fa5351ee07)