about summary refs log tree commit diff
path: root/nixos
AgeCommit message (Collapse)AuthorFilesLines
2020-09-07nixos/lorri: add package optionEvan Stoll1-2/+11
2020-09-07nixos/tests/installer: increase RAM in the VMVladimír Čunát1-1/+1
1G apparently isn't sufficient anymore, at least in swraid case: https://hydra.nixos.org/build/126561574
2020-09-07Merge #97146: 'staging-next' branchVladimír Čunát3-23/+19
This is the last planned iteration before forking 20.09.
2020-09-07nixos/prometheus-exporters: fix default firewall filterWilliButz1-1/+2
Instead of always using the default port of one exporter for its default firewall filter, the port from the current service configuration is used.
2020-09-06Revert "nixos/qemu-vm: support nix run"worldofpeace1-1/+1
This reverts commit 02590c96209d374d7f720293fcb8337e17104bc9. https://github.com/NixOS/nixpkgs/commit/02590c96209d374d7f720293fcb8337e17104bc9#commitcomment-42078853
2020-09-06nixos/doc/borgbackup: correct install instructions for `vorta`Maximilian Bosch1-20/+2
No need to fiddle around with `flatpack` to get `vorta`, a graphical desktop-client for `borgbackup` running as it's available in `nixpkgs`.
2020-09-06Merge pull request #68887 from teto/ssh_bannerSilvan Mosberger1-0/+10
services.openssh: add banner item
2020-09-06services.openssh: add bannerMatthieu Coudron1-0/+10
Add the possibility to setup a banner. Co-authored-by: Silvan Mosberger <github@infinisil.com>
2020-09-06Merge pull request #96885 from bbigras/sssd-ldapJörg Thalheim2-0/+79
nixos/tests/sssd-ldap: init
2020-09-06nixos/qemu-vm: support nix runworldofpeace1-1/+1
2020-09-06Merge pull request #91121 from m1cr0man/masterFlorian Klink14-737/+865
Restructure acme module
2020-09-06Merge master into staging-nextFrederik Rietdijk15-53/+177
2020-09-06Merge pull request #96769 from peterhoeg/m/phpfpmPeter Hoeg1-0/+1
nixos/phpfpm: always restart service on failure
2020-09-06Merge pull request #93424 from helsinki-systems/feat/gitlab-mailroomFlorian Klink2-0/+23
nixos/gitlab: Support incoming mail
2020-09-06Merge pull request #97123 from peterhoeg/m/fscachePeter Hoeg1-7/+11
nixos/cachefilesd: don't set up manually
2020-09-06Revert "nixos/fontconfig: fix 50-user.conf handling"Jan Tojnar1-4/+2
This reverts commit 8425726f86a2f4a38d0022f3d5cb1d2001da6999. This should have been reverted in https://github.com/NixOS/nixpkgs/pull/95358 but I forgot about it.
2020-09-06nixos/acme: More features and fixesLucas Savva2-15/+31
- Allow for key reuse when domains are the only thing that were changed. - Fixed systemd service failure when preliminarySelfsigned was set to false
2020-09-05nixos/terraria: allow dataDir to be configured (#89033)Evan Stoll1-6/+12
* nixos/terraria: allow dataDir to be configured add dataDir option to terraria module * Update nixos/modules/services/games/terraria.nix Co-authored-by: WORLDofPEACE <worldofpeace@protonmail.ch> Co-authored-by: WORLDofPEACE <worldofpeace@protonmail.ch>
2020-09-05Merge pull request #96659 from doronbehar/module/syncthingLassulus1-2/+11
nixos/syncthing: add ignoreDelete folder option
2020-09-05Merge pull request #95194 from ju1m/nixos-installWORLDofPEACE5-21/+82
nixos-install: add support for flakes
2020-09-05nixos/tests/installer swraid: increase partition sizeVladimír Čunát1-4/+4
We apparently didn't fit anymore. I don't think this test is meant to (also) check closure size. Note: as of this commit, the test is blocked by a fontconfig problem, so I tested with that merge temporarily reverted.
2020-09-05nixos/testing: remove remaining coverage-data logicFlorian Klink2-17/+1
This isn't used anymore as per https://github.com/NixOS/nixpkgs/pull/72354#discussion_r451031449.
2020-09-05Merge pull request #93314 from tnias/nixos_opendkim_20200717lewo2-0/+36
nixos/opendkim: systemd sandbox
2020-09-05nixos/acme: Update docs, use assert more effectivelyLucas Savva3-4/+28
2020-09-05Merge pull request #95358 from jtojnar/global-fontconfigJan Tojnar1-4/+5
2020-09-04nixos/acme: Run postRun script as rootLucas Savva2-11/+21
2020-09-04Merge staging-next into stagingFrederik Rietdijk4-102/+171
2020-09-04fixup! nixos/doc/releases: update the docs as promisedJan Tojnar1-28/+17
2020-09-04fixup! nixos/doc/releases: update the docs as promisedworldofpeace1-8/+8
2020-09-04nixos/doc/releases: update the docs as promisedworldofpeace1-100/+176
This goes through a recent example of 19.09 (because the workflow should be everchanging, so our example needs to be recent). Lots of changes, just read idk.
2020-09-04Merge pull request #97008 from andersk/cryptception-1Florian Klink2-6/+3
cryptsetup, lvm2, systemd: Break cyclic dependency at a different point
2020-09-04Merge pull request #96992 from jtojnar/fc-dtd-urnJan Tojnar1-5/+5
treewide: use URN for fontconfig DTD
2020-09-04nixos/cachefilesd: don't set up manuallyPeter Hoeg1-7/+11
Use our available infrastructure instead of manually handling setup.
2020-09-04nixos/tests/sssd-ldap: initBruno Bigras2-0/+79
2020-09-04nixos-install: add support for flakesJulien Moutinho3-16/+75
2020-09-04nixos-rebuild: do not depend on nix.conf to activate flakesJulien Moutinho2-5/+7
2020-09-04nixos/acme: Fix race condition, dont be smart with keysLucas Savva2-76/+56
Attempting to reuse keys on a basis different to the cert (AKA, storing the key in a directory with a hashed name different to the cert it is associated with) was ineffective since when "lego run" is used it will ALWAYS generate a new key. This causes issues when you revert changes since your "reused" key will not be the one associated with the old cert. As such, I tore out the whole keyDir implementation. As for the race condition, checking the mtime of the cert file was not sufficient to detect changes. In testing, selfsigned and full certs could be generated/installed within 1 second of each other. cmp is now used instead. Also, I removed the nginx/httpd reload waiters in favour of simple retry logic for the curl-based tests
2020-09-03cryptsetup, lvm2, systemd: Break cyclic dependency at a different pointAnders Kaseorg2-6/+3
The cyclic dependency of systemd → cryptsetup → lvm2 → udev=systemd needs to be broken somewhere. The previous strategy of building cryptsetup with an lvm2 built without udev (#66856) caused the installer.luksroot test to fail. Instead, build lvm2 with a udev built without cryptsetup. Fixes #96479. Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2020-09-03nixos/systemd: Don't use apply for $PATHJanne Heß3-2/+6
When not using apply, other modules can use $PATH as a list instead of getting a colon-separated list to each /bin directory.
2020-09-03nixos/doc: add opendkim changes to release notesPhilipp Bartsch1-0/+6
2020-09-03nixos/opendkim: add keyPath to ReadWritePathsPhilipp Bartsch1-0/+1
2020-09-03nixos/opendkim: add systemd service sandboxPhilipp Bartsch1-0/+29
2020-09-03programs.zsh: remove unnecessary `with`Daniël de Kok1-1/+1
2020-09-03Merge pull request #89748 from heinic/krb5-listsJörg Thalheim2-18/+24
2020-09-03treewide: use URN for fontconfig DTDJan Tojnar1-5/+5
To match upstream change: https://gitlab.freedesktop.org/fontconfig/fontconfig/commit/9c46ef4aac87c42d013d0e7380b6aeb03e1a9949
2020-09-02Merge pull request #96925 from jtojnar/gpaste-session-pathWORLDofPEACE1-0/+2
nixos/gpaste: return sessionPath
2020-09-02nixos/acme: Add proper nginx/httpd config reload checksLucas Savva2-8/+32
Testing of certs failed randomly when the web server was still returning old certs even after the reload was "complete". This was because the reload commands send process signals and do not wait for the worker processes to restart. This commit adds log watchers which wait for the worker processes to be restarted.
2020-09-02nixos/acme: Restructure moduleLucas Savva13-736/+810
- Use an acme user and group, allow group override only - Use hashes to determine when certs actually need to regenerate - Avoid running lego more than necessary - Harden permissions - Support "systemctl clean" for cert regeneration - Support reuse of keys between some configuration changes - Permissions fix services solves for previously root owned certs - Add a note about multiple account creation and emails - Migrate extraDomains to a list - Deprecate user option - Use minica for self-signed certs - Rewrite all tests I thought of a few more cases where things may go wrong, and added tests to cover them. In particular, the web server reload services were depending on the target - which stays alive, meaning that the renewal timer wouldn't be triggering a reload and old certs would stay on the web servers. I encountered some problems ensuring that the reload took place without accidently triggering it as part of the test. The sync commands I added ended up being essential and I'm not sure why, it seems like either node.succeed ends too early or there's an oddity of the vm's filesystem I'm not aware of. - Fix duplicate systemd rules on reload services Since useACMEHost is not unique to every vhost, if one cert was reused many times it would create duplicate entries in ${server}-config-reload.service for wants, before and ConditionPathExists
2020-09-02Merge pull request #94917 from ju1m/biboumiFélix Baylac-Jacqué2-0/+270
nixos/biboumi: init
2020-09-02Merge pull request #96937 from jtojnar/drop-strigiWORLDofPEACE1-1/+0
strigi: drop
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-09-20 03:59:32 +0000