about summary refs log tree commit diff
path: root/nixos
AgeCommit message (Collapse)AuthorFilesLines
2023-12-15Revert "kea: use separate runtime directories for each service"Martin Weinelt3-16/+13
This reverts commit 413011ddf46265756c0ba417c8722952eab853c6. Using separate lockfile directories prevents the different kea daemons from using the interprocess sync lockfile. Keeping the runtime directory around might be the better approach.
2023-12-15Merge pull request #274264 from flokli/udev-rules-allow-bin-shFlorian Klink1-1/+2
nixos/udev: allow /bin/sh in udev rules
2023-12-15Merge pull request #274409 from K900/unblock-channelsK9002-2/+3
Unblock channels
2023-12-15Merge pull request #274262 from NetaliDev/zammad-updateJanne Heß1-0/+4
zammad: 6.1.0 -> 6.2.0
2023-12-15nixos/ldso: remove string context from linker sonameK9001-2/+2
Unbreaks installer tests that otherwise start depending on i686-glibc
2023-12-15nixos/tests/containers-imperative: download more RAMK9001-0/+1
2023-12-15Merge pull request #274275 from Ma27/hardened-kernel-updatesMaximilian Bosch1-0/+1
hardened kernel: test 6.6 & remove obsolete 4.14 from patches.json
2023-12-15Merge pull request #273858 from dotlambda/nextcloud28-initMaximilian Bosch4-10/+16
nextcloud28: init at 28.0.0, nextcloud27: 27.1.4 -> 27.1.5, nextcloud26: 26.0.9 -> 26.0.10
2023-12-14Merge pull request #274110 from networkException/sysctl-net.core.wmem_maxLin Jian4-10/+21
nixos/{sysctl,caddy}: improvements for net.core.wmem_max
2023-12-15nixos/caddy: also increase socket send buffer size as recommended by upstreamnetworkException1-1/+2
this patch adjusts the `boot.kernel.sysctl."net.core.wmem_max"` to match the value suggested in the quic-go wiki, just as `"net.core.wmem_max"`. see fdfdc5df21d3df985b751bc61929e2305882dd48 see https://github.com/quic-go/quic-go/issues/3923
2023-12-15nixos/sysctl: use highest value on conflict for net.core.wmem_maxnetworkException3-9/+19
we previously defined a custom type for `boot.kernel.sysctl."net.core.rmem_max"` to resolve to the highest value set. this patch adds the same behavior to `"net.core.wmem_max"`. as this changes the type from a string to an integer, which is a breaking change this patch also includes a release note and updates the transmission module to use a number for `wmem_max`.
2023-12-15Merge pull request #274315 from emilylange/fix-nixos-node-redWeijia Wang1-1/+1
nixos/node-red: fix `cfg.package` default value
2023-12-15Merge pull request #257504 from SuperSandro2000/postgres-docThomas Gerbet1-1/+1
nixos/postgresql: point doc link to current like all others
2023-12-14nixos/node-red: fix `cfg.package` default valueemilylange1-1/+1
This fixes the following eval error: ``` error: nodePackages.node-red cannot be found in pkgs ``` when having `services.node-red.enable = true;` without specifying `services.node-red.package`, just like the nixos VM test. Follow-up of f509382c11ed445b52f249efa6e2fe66d1b56fa7, which attempted to fix this as well. Breakage introduced in 0a37316d6cfea44280f4470b6867a711a24606bd.
2023-12-14Merge pull request #274273 from Ma27/include-rl2405Silvan Mosberger1-0/+1
nixos/doc: include section for 24.05
2023-12-14nixos/tests/kernel-generic: test hardened 6.6Maximilian Bosch1-0/+1
2023-12-14nixos/doc: include section for 24.05Maximilian Bosch1-0/+1
People are actively writing release notes already and with this it's ensured that the contents are actually valid. Also, when writing release notes for something, I'd like to be able to see a preview.
2023-12-14nixos/udev: allow /bin/sh in udev rulesFlorian Klink1-1/+2
Using `/bin/sh` in udev rules is fine (as it's guaranteed to point to a (bash) shell on NixOS), and actually is better than hardcoding absolute paths, at least in cases where these rules are also added to the (systemd-based) initrd (via boot.initrd.services.udev.rules). To allow this, we need to update the check routine that assembles the list of files needing fixup, to explicitly exclude `/bin/sh` occurences. To do this, we convert the pattern to a PCRE regex (which requires "/" to be escaped), and add `(?!/bin/sh\b)` as a negative lookahead. This subsequently allows udev rules to (start using) `/bin/sh` again, so they'll work in-initrd.
2023-12-14nixos/tests/zammad: set memory limit to 2048 MBnetali1-0/+4
It seems like Zammad and the postgreSQL need more then 1 GB memory after the update to Zammad 6.2.0. So this commit sets the memory limit to 2 GB.
2023-12-14nixos/doc: mention nc28Maximilian Bosch2-1/+7
2023-12-14nixos/nextcloud: updates for nc28Maximilian Bosch1-5/+2
* Always use PHP 8.2: at the time of writing, Nextcloud also suggests to use 8.2 rather than 8.3 in the manual for v28. One contributing factor is probably that all plugins need new releases to declare PHP 8.3 support. * Fix upgradeWarning for installing v27 now that v28 is out. * Drop upgrade warning for v24. This one is EOL for quite a while already, so right now everybody should've switched (or carefully studied the release notes in case they were upgrading from <23.05) and we can clean up the module a little bit. v25 was dropped not so long ago, so if it's still referenced (because somebody didn't declare `services.nextcloud.package` and has `system.stateVersion = "22.11";`) it's appropriate to still give a specialized error.
2023-12-14Merge pull request #274236 from flokli/udev-path-default-optionFlorian Klink1-0/+3
nixos/udev: update defaultText for services.udev.path
2023-12-14nixos/udev: update description for services.udev.pathFlorian Klink1-0/+3
services.udev.path already contains some defaults, these are however defined in the module implementation, not options. Update the description to make this more clear.
2023-12-14Merge pull request #274088 from NickCao/synapseMaximilian Bosch2-11/+11
treewide: replace references to matrix-org/synapse with element-hq/synapse
2023-12-14Merge pull request #267693 from nbraud/nixos/wpa_supplicant/umaskLinus Heckemann2-0/+12
nixos/wpa_supplicant: Ensure the generated config isn't world-readable
2023-12-14Merge pull request #270084 from Atemu/nixos/snapraid-top-levelLinus Heckemann3-4/+9
nixos/snapraid: remove from top-level
2023-12-14Merge pull request #270444 from NukaDuka/cephfs-mount-fixLinus Heckemann1-9/+12
ceph: use absolute binary paths instead of relative paths
2023-12-14Merge pull request #270523 from m-bdf/river-xdg-portal-configLinus Heckemann1-0/+3
nixos/river: add xdg.portal.config
2023-12-14Merge pull request #270704 from Avaq/avaq/vdirsync-fix-statuspathLinus Heckemann1-3/+5
nixos/vdirsyncer: fix config.statusPath option
2023-12-14Merge pull request #274013 from philiptaron/fixing-thingsLassulus1-1/+1
nixos/jigasi: update to use literalExpression
2023-12-14nixos/qmk: ensure plugdev groups existstv1-0/+1
QMK's udev rules are setting hidraw devices's group to plugdev.
2023-12-14Merge pull request #267937 from SomeoneSerge/fix/test-driver-activestateJacek Galowicz1-2/+30
nixos/lib/test-driver: make wait_for_unit ask for ActiveState only
2023-12-14nixos/users-groups: fix confusing error messageAlyssa Ross1-1/+1
If we include users with unset groups, we get this very confusing message, with invalid Nix code: - The following users have a primary group that is undefined: qyliss Hint: Add this to your NixOS configuration: users.groups. = {}; We don't need to include such users in this check, since they'll be caught anyway by this one: - users.users.qyliss.group is unset. This used to default to nogroup, but this is unsafe. For example you can create a group for this user with: users.users.qyliss.group = "qyliss"; users.groups.qyliss = {};
2023-12-13nextcloud28: init at 28.0.0Robert Schütz2-5/+8
2023-12-13nixos/matrix-synapse: update broken link to redis related docsNick Cao1-1/+1
2023-12-13nixos/matrix-synapse: replace references to matrix-org/synapse with ↵Nick Cao2-11/+11
element-hq/synapse
2023-12-13nixos/nebula: tests: revert wait_for_unitMorgan Jones1-5/+0
2023-12-13Merge pull request #273834 from ajs124/restic-wrappers-append-pathJanik1-1/+2
nixos/restic: append PATH in wrappers instead of overwriting
2023-12-13Merge pull request #269551 from tejing1/nixos-stub-ldRobert Hensing8-1/+197
nixos/stub-ld: init module
2023-12-13Merge pull request #253184 from tilpner/prometheus-headersJanne Heß1-0/+8
nixos/prometheus: add remote{Read, Write}.headers options
2023-12-13nixos/hyprland: remove enableNvidiaPatches optionMihai Fufezan1-5/+6
Hyprland now works on Nvidia without patching.
2023-12-13Merge pull request #273698 from foo-dogsquared/fix-guix-gc-serviceWeijia Wang2-2/+5
nixos/guix: fix GC service
2023-12-13nixos/jigasi: update to use literalExpressionPhilip Taron1-1/+1
I saw this trace when building my system configuration this morning: ``` lazy-options.json> trace: warning: literalExample is deprecated, use literalExpression instead, or use literalMD for a non-Nix description. ``` This warning was introduced in https://github.com/NixOS/nixpkgs/pull/237557. The option this commit changes was introduced in https://github.com/NixOS/nixpkgs/pull/137003.
2023-12-13nixos/restic: append PATH in wrappers instead of overwritingajs1241-1/+2
fixes "mount"
2023-12-13Merge pull request #273951 from schnusch/nixos/tinyproxyNick Cao1-1/+1
nixos/tinyproxy: fix services.tinyproxy.package
2023-12-13Merge pull request #273878 from numinit/nebula-startup-raceNick Cao1-1/+1
nixos/nebula: wait for start notification to prevent startup race
2023-12-13nixos/guix: add test for GC serviceGabriel Arazas1-1/+5
2023-12-13Merge pull request #272679 from flokli/jenkins-statedirFlorian Klink1-0/+1
nixos/jenkins: set StateDirectory if home is /var/lib/jenkins
2023-12-13nixos/jenkins: set StateDirectory if home is /var/lib/jenkinsFlorian Klink1-0/+1
This will cause systemd to chown /var/lib/jenkins to the user that the jenkins systemd service runs as, fixing permission issues when mounting /var/lib/jenkins from another data volume. It uses the same logic that garage is using, too, checking for the prefix.
2023-12-13nixos/tinyproxy: fix services.tinyproxy.packageschnusch1-1/+1