summary refs log tree commit diff
path: root/nixos
AgeCommit message (Collapse)AuthorFilesLines
2016-08-08libinput.accelProfile: improve docs & new defaultProfpatsch2-8/+20
The link to some (of course non-existing, i.e. freedesktop) “libinput” documentation is replaced by a piece of the API documentation. The default is changed since the documentation suggests `adaptive` should be it. https://wayland.freedesktop.org/libinput/doc/latest/group__config.html#gad63796972347f318b180e322e35cee79 Also fix a missing string conversion for `scrollButton`.
2016-08-08Merge pull request #17100 from abbradar/resume-delayWout Mertens1-56/+67
nixos stage-1: wait for resume devices to appear
2016-08-08unity3d: use chromium-suid-sandboxNikolay Amiantov3-26/+3
2016-08-08chromium-suid-sandbox module: fix descriptionNikolay Amiantov1-10/+14
2016-08-08phpfpm service: restructured pool configurationAl Zohali3-3/+56
From @fpletz: Keep poolConfigs option for backwards-compatibility. The original commit 6b3f5b5a421fe3422e9ef63a3fd690178c36163e was previously reverted by c7860cae1a4b54f4b54339142472f00f861fa055 but the issues were resolved.
2016-08-08nixos stage-1: wait for devices during resumption attemptNikolay Amiantov1-7/+9
Also a microimprovement -- use `test -n` instead of `test -e` since we have already checked that the file exists.
2016-08-08nixos stage-1: move resumption below helper functions' definitionsNikolay Amiantov1-33/+33
2016-08-08nixos stage-1: factor device waiting into a functionNikolay Amiantov1-23/+32
2016-08-07NixOS manual: Add docs for Virtualbox guest (#17454)David Reaver2-0/+90
Fixes #13311
2016-08-07Merge pull request #17479 from elitak/factorioRok Garbas1-10/+38
Factorio: 0.13.8 -> 0.13.13, mod support
2016-08-07Add Terraria server service (#16832)Paul Hendry3-0/+142
2016-08-06syncthing service: add syncthing-inotify (#17320)jokogr1-12/+43
2016-08-06chromium: add nixos module security.chromiumSuidSandboxobadz2-0/+29
Closes #17460 Changed the wrapper derivation to produce a second output containing the sandbox. Add a launch wrapper to try and locate the sandbox (either in /var/setuid-wrappers or in /nix/store). This launch wrapper also sheds libredirect.so from LD_PRELOAD as Chromium does not tolerate it. Does not trigger a Chromium rebuild. cc @cleverca22 @joachifm @jasom
2016-08-06nixos/x11: make nvidia driver work againGabriel Ebner1-3/+4
The nvidia driver module directly sets the services.xserver.drivers option, while still having nvidia/nvidiaBeta/... etc. in the videoDrivers option.
2016-08-05Merge pull request #17503 from peterhoeg/sshRobin Gloster1-0/+1
ssh module: ignore exit code when socket activated
2016-08-05Merge pull request #17470 from layus/synaptics-conflictJoachim F2-0/+15
Warn for conflict between synaptics and libinput
2016-08-05nixos/x11: output sections for modesetting driverGabriel Ebner1-4/+6
See #17487.
2016-08-05Merge pull request #17363 from MatrixAI/zsh-helpdirJoachim F1-0/+2
zsh: Added HELPDIR variable for interactive shells
2016-08-04Merge pull request #17489 from mayflower/pkg/gitlab-8-10Franz Pletz3-78/+147
gitlab: 8.5.12 -> 8.10.3, update module
2016-08-04nixos/luksroot: Reference correct output of opensslTuomas Tynkkynen1-1/+1
2016-08-04nixos-install: add options --closure, --no-channel-copy, --no-root-passwd, ↵obadz2-10/+56
and --no-bootloader Closes #17236 nix-build -A tests.installer.simple '<nixos/release.nix>' succeeds ✓
2016-08-04Merge pull request #17218 from bennofs/fix-nixos-versionBenno Fünfstück2-4/+5
fix nixos-version --hash when building from git
2016-08-04varnish: fix localstatedir for varnish* tools (#17508)Christian Kauhaus1-1/+4
The varnish tools (varnishstat, varnishlog, ...) tried to load the VSM file from a spurious var directory in the Nix store. Fix the default so the tools "just work" when also keeping services.varnish.stateDir at the default. Notes: - The tools use $localstatedir/$HOSTNAME so I've adapted the default for stateDir as well to contain hostName. - Added postStop action to remove the localstatedir. There is no point in keeping it around when varnish does not run, as it regenerates it on startup anyway. Fixes #7495
2016-08-04ssh module: ignore exit code when socket activatedPeter Hoeg1-0/+1
sshd will at times fail when exiting. When socket activated, this will leave a number of sshd@ service instances in the failed state, so we simply ignore the error code if we are running socket activated. Recommended by upstream: http://systemd-devel.freedesktop.narkive.com/d0eapMCG/socket-activated-sshd-service-showing-up-as-a-failure-when-the-client-connection-fails Fixes: #3279
2016-08-04Merge pull request #17418 from DamienCassou/offlineimap-module-reportingDamien Cassou1-1/+1
offlineimap's module: change UI to syslog
2016-08-04gitlab module: update documentationFranz Pletz1-24/+25
2016-08-04gitlab module: split up gitlab-runner scriptFranz Pletz3-16/+23
The name gitlab-runner clashes with a component of Gitlab CI with the same name and only confuses people. It's now called gitlab-bundle and a convenience-script gitlab-rake for easier invocation of rake tasks was added. This was the primary use case of gitlab-runner.
2016-08-04gitlab: 8.5.12 -> 8.10.3, update moduleFranz Pletz1-39/+100
Fixes #14795.
2016-08-03factorio: rudimentary mod support for factorio's nixos moduleEric Litak1-10/+38
2016-08-03Merge pull request #17425 from joachifm/grsec-efiJoachim F2-0/+19
grsecurity module: disable EFI runtime services by default
2016-08-03Warn for conflict between synaptics and libinputGuillaume Maudoux2-0/+15
2016-08-02nixos manual: add Emacs section (fixes #13217)Rodney Lorrimar3-0/+580
In light of Emacs packaging improvements such as those mentioned in #11503, and with the addition of a systemd service (#15807 and #16356), and considering that the wiki page is completely out of date (#13217), it seems that some documentation is in order.
2016-08-02grsecurity module: disable EFI runtime services by defaultJoachim Fasting2-0/+19
Enabling EFI runtime services provides a venue for injecting code into the kernel. When grsecurity is enabled, we close this by default by disabling access to EFI runtime services. The upshot of this is that /sys/firmware/efi/efivars will be unavailable by default (and attempts to mount it will fail). This is not strictly a grsecurity related option, it could be made into a general option, but it seems to be of particular interest to grsecurity users (for non-grsecurity users, there are other, more immediate kernel injection attack dangers to contend with anyway).
2016-08-02dnscrypt-proxy service: update resolver listJoachim Fasting1-1/+1
2016-08-01nginx module: fix evaluation of root location optionFranz Pletz1-1/+1
2016-08-01grsecurity module: correct internal noteJoachim Fasting1-1/+1
2016-08-01Merge pull request #15862 from mayflower/nginx-moduleRok Garbas3-10/+455
Declarative nginx module with ACME support
2016-08-01dnscrypt-proxy module: types.string should be types.strJoachim Fasting1-2/+2
2016-08-01version module: refactor with fileContentsEric Sagnes1-3/+3
2016-08-01release.nix: refactor with fileContentsEric Sagnes1-1/+1
2016-08-01Fix epub generationEelco Dolstra1-3/+6
* Hydra doesn't like spaces in filenames. * The zip file contained nix/store/.../OEBPS rather than OEBPS at top-level, causing some programs (like okular) to barf. * Remove the redundant $dst/epub directory.
2016-08-01Remove the PDF manualEelco Dolstra2-25/+1
PDF is very 20th century and nobody reads technical documentation this way anymore.
2016-08-01Manual: Only include the release number (e.g. 16.03)Eelco Dolstra2-14/+8
This prevents gratuitous rebuilds of the manual every time the Git revision changes. Should help a bit with #17261.
2016-08-01Remove $NIXOS_LABEL and $NIXOS_VERSIONEelco Dolstra1-19/+4
Relying on environment variables to override configuration options is ugly, and there is no reason for them.
2016-08-01offlineimap's module: change UI to syslogDamien Cassou1-1/+1
The 'syslog' UI "allows better integration with systemd": http://www.offlineimap.org/doc/Changelog.html#offlineimap-v660-rc2-2015-10-15
2016-08-01Merge pull request #17387 from cko/redisGabriel Ebner1-0/+7
redis: 3.0.7 -> 3.2.2
2016-07-31Merge pull request #15496 from kampfschlaefer/containers_more_veth_interfacesFranz Pletz7-183/+388
Declarative containers: more veth interfaces
2016-07-31mopidy service: add default value for configuration (#17385)Langston Barrett1-0/+1
Mopidy will start if the configuration is empty. Fixes #17381.
2016-07-31Redis: add entry to release notesChristine Koppelt1-0/+7
2016-07-31nixos/firewall: Refactor rpfilter, allow DHCPv4 (#17325)Franz Pletz1-6/+27
Adds a new chain in the raw table for reverse path filtering and optional logging. A rule to allow serving DHCPv4 was also added as it is commonly needed and poses no security risk even when no DHCPv4 server is running. Fixes #10101.
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-10-08 18:21:34 +0000