Commit graph

51132 commits

Author SHA1 Message Date
Defelo
881a31616e nixos/olivetin: use yq-go to merge config files
(cherry picked from commit f71748184c)
2025-06-08 21:42:06 +00:00
isabel
3f2e2a09cf
[25.05] kanidm-provision: 1.2.1 -> 1.3.0 (#415062) 2025-06-08 19:41:35 +01:00
oddlama
7ce5e5aa0f
nixos/kanidm: add option and tests for imperative group management
(cherry picked from commit 5f833b1008)
2025-06-08 18:31:00 +02:00
Markus S. Wamser
dbe4ed865c [Backport release-25.05] nixosTests.keepassxc: enable dconf
Manual backport of https://github.com/NixOS/nixpkgs/pull/389288
to `release-25.05`.

simply doing a
cherry-pick of e91a6f4594
not possible due to conflicts
2025-06-08 11:19:11 +02:00
Peter Lehmann
fce8cd453a nixos/pdns-recursor: reload service on config change
(cherry picked from commit c586196e17)
2025-06-07 21:40:26 +00:00
Katalin Rebhan
2f534ed8ea nixos/users-groups: allow changing default home directory
(cherry picked from commit 6f7d7cf76f)
2025-06-07 18:31:59 +00:00
Rory&
138030fb2b nixosTests.draupnir: init
Co-authored-by: emilylange <git@emilylange.de>
Co-authored-by: Martin Weinelt <hexa@darmstadt.ccc.de>
Co-authored-by: teutat3s <10206665+teutat3s@users.noreply.github.com>
(cherry picked from commit d6413ba436)
2025-06-06 21:07:39 +02:00
Rory&
297dbf2ae4 nixos/draupnir: init
Co-authored-by: emilylange <git@emilylange.de>
Co-authored-by: Martin Weinelt <hexa@darmstadt.ccc.de>
Co-authored-by: teutat3s <10206665+teutat3s@users.noreply.github.com>

(cherry picked from commit 4b153aad5d)
2025-06-06 21:07:19 +02:00
Jared Baur
d6822a8edf nixos/networkd: update valid KeepConfiguration values
These changed with the release of systemd v257 from "dhcp*" to
"dynamic*".

(cherry picked from commit d8f9c63512)
2025-06-05 23:18:28 +00:00
Maximilian Bosch
4579a816f4 nixos/nginx: fix type of mapHashBucketSize
While the default is indeed 32/64/128, the option accepts any `size`[1]
including values >128, as observed in a customer project.

[1] https://nginx.org/en/docs/http/ngx_http_map_module.html

(cherry picked from commit 4a2a4193f9)
2025-06-05 14:12:30 +00:00
Luj
f10e84cf9c
[Backport release-25.05] nixos/clevis: fix clevis in scripted initrd (#413635) 2025-06-04 15:27:27 +03:00
Pol Dellaiera
0eef838fb4
Revert "[Backport release-25.05] nixos/postfix: add slow domain" 2025-06-04 08:16:14 +02:00
Julien Malka
a776cc522e nixos/clevis: fix clevis in scripted initrd
Fixes #389750

(cherry picked from commit 9655143028)
2025-06-03 16:00:46 +00:00
Jörg Thalheim
7c0f154132 systemd-boot: improve error message if no previous systemd boot is found.
(cherry picked from commit b6c1663986)
2025-06-03 15:44:47 +00:00
Domen Kožar
1fbbd7ad98
[Backport release-25.05] paretosecurity: 0.2.23 -> 0.2.27 (#413035) 2025-06-03 11:48:19 +05:00
eV
731f374fc2 nixos/wyoming-satellite: fix override to use dependencies
(cherry picked from commit 7ca9f21361)
2025-06-02 18:27:49 +00:00
eljamm
59898069c1 tests/taler: update exchange node config
(cherry picked from commit 3213654cf8)
2025-06-02 11:14:31 +02:00
eljamm
ed87639982 tests/taler: fix currency withdrawal confirmation
(cherry picked from commit b24910bccf)
2025-06-02 11:14:31 +02:00
eljamm
67edee17b5 tests/taler: adjust currency wire fees
because making a withdrawal fails if the fees are 0, for some reason.

(cherry picked from commit c1fe104a77)
2025-06-02 11:14:31 +02:00
eljamm
092005dd4f tests/taler: pass config to taler-exchange-offline
else it doesn't work properly.

(cherry picked from commit f73d148645)
2025-06-02 11:14:31 +02:00
eljamm
1e09ac772f tests/taler: change bank admin password
which is now required to be at least 8 chars long.

(cherry picked from commit 4ea47f3563)
2025-06-02 11:14:31 +02:00
eljamm
455d530741 tests/taler: update merchant instance's endpoint
(cherry picked from commit 12fa648231)
2025-06-02 11:14:31 +02:00
eljamm
d5fb6d6da9 tests/taler: create exchange credentials at runtime
Basic auth is deprecated, so exchange credentials must be set at runtime
because it requires a token from the bank.

(cherry picked from commit 21ad6f743c)
2025-06-02 11:14:31 +02:00
eljamm
27fdb64e86 tests/taler: authenticate users with tokens
(cherry picked from commit 1741d8abaa)
2025-06-02 11:14:31 +02:00
eljamm
19ed46dc3c nixos/libeufin: update BASE_URL
which is now required to have a valid protocol.

(cherry picked from commit e04f8bb993)
2025-06-02 11:14:31 +02:00
eljamm
1088ff7609 nixos/taler: add exchangekeyupdate service
whose role is to sync Taler exchanges' information with the merchant.

(cherry picked from commit 276fca3265)
2025-06-02 11:14:31 +02:00
eljamm
3a842aa828 nixos/taler: update exchange settings
adding new and removing deprecated ones.

(cherry picked from commit 58fca01255)
2025-06-02 11:14:31 +02:00
eljamm
9afa3afbb4 nixos/taler: use the same dynamicUser for services
which makes managing the database much simpler.

(cherry picked from commit 85b6430fac)
2025-06-02 11:14:31 +02:00
eljamm
5735c3c3b4 nixos/taler: explicitly specify configFile
else the executables fail to work.

(cherry picked from commit 5db5bd097c)
2025-06-02 11:14:31 +02:00
Peder Bergebakken Sundt
affe59411e
[Backport release-25.05] nixos/stash: fix mutableSettings logic (#412800) 2025-06-02 01:06:49 +02:00
Peder Bergebakken Sundt
c209086813
[Backport release-25.05] nixos/stash: fix empty immutable plugins (#412802) 2025-06-02 00:53:53 +02:00
Neyts Zupan
e3d34c66f8 paretosecurity: 0.2.23 -> 0.2.27
(cherry picked from commit 22dbe6bd1c)
2025-06-01 21:06:04 +00:00
Diogo Correia
148a482687
nixos/stalwart-mail: fix incorrect config for webadmin and spam-filter
Stalwart 0.11.0 changed the `config.resource.spam-filter` and
`config.resource.webadmin` keys to be `spam-filter.resource` and
`webadmin.resource` respectively. The NixOS has been updated
accordingly, but unfortunately it has mistakenly used
`config.spam-filter.resource` and `config.webadmin.resource`, which are
incorrect and do not do anything.

This commit changes the default configuration to use the correct keys.

Note that due to infinite recursion, the `optionalAttrs` has been
replaced with `mkIf`.

Additionally, some tests were added to catch this regression in the
future.

Fixes #411351

(cherry picked from commit b7ab1fa981)
2025-06-01 17:23:27 +01:00
alyaeanyx
3f72d383d1 maintainers: rename alyaeanyx -> pentane
(cherry picked from commit bdd58823ab)
2025-06-01 10:14:38 +00:00
Wolfgang Walther
0a39ecd8ca
[Backport release-25.05] nixos/glpi-agent: add hardening (#412373) 2025-06-01 08:55:16 +00:00
Wolfgang Walther
6df5cbe24b
[Backport release-25.05] Google Authenticator 2FA support over XRDP (#411826) 2025-06-01 08:51:29 +00:00
Wolfgang Walther
e9318c3996
[Backport release-25.05] lomiri.lomiri-music-app: 3.2.2 -> 3.3.0 (#411529) 2025-06-01 08:28:45 +00:00
Wolfgang Walther
fad373f5c8
[Backport release-25.05] adguardhome: Build from source (#411348) 2025-06-01 08:20:52 +00:00
Wolfgang Walther
9d684e717b
[Backport release-25.05] virtualisation/docker: fix nvidia container wrapper (#411345) 2025-06-01 08:19:00 +00:00
renesat
16c1825c74 nixos/stash: fix empty immutable plugins
(cherry picked from commit cb4459412a)
2025-06-01 01:46:59 +00:00
DoctorDalek1963
1c2dbee288 nixos/stash: fix mutableSettings logic
Fixes services.stash.mutableSettings so that it makes sense. The logic
was previously backwards and the settings would be overriden if
mutableSettings was true.

(cherry picked from commit 7dcad49a30)
2025-06-01 01:39:38 +00:00
Morgan Jones
ef44d95de5 k3s.tests: fix eval
(cherry picked from commit 24134e86b7)
2025-05-31 21:49:38 +00:00
liberodark
71c589f8bb nixos/glpi-agent: add hardening
(cherry picked from commit e673eca2be)
2025-05-30 15:10:17 +00:00
liberodark
ffa82b9ad4 oxidized: fix symlink
(cherry picked from commit 99bdbcbd01)
2025-05-30 11:12:11 +00:00
ferres
5ea9b9f743 nixos/zeronsd: fix acl permissions
(cherry picked from commit 41f1eadb73)
2025-05-30 11:23:25 +05:30
Antonio
f0a47fd2a3 nixos/pam: add Google Authenticator 2FA support over XRDP
(cherry picked from commit 8331187976)
2025-05-29 18:58:46 +02:00
Morgan Jones
2870d0deb6 nixos/kubernetes: use util-linux.withPatches
(cherry picked from commit e14de85830)
2025-05-29 05:43:28 +00:00
Marc Fontaine
7c65985b2c nixos/postgrest: fix typo in name of configuration options (#411197)
The config-file key is 'server-unix-socket-mode', not 'service-unix-socket-mode'.

(cherry picked from commit b134f3148f)
2025-05-28 14:43:13 +00:00
Sandro Jäckel
c44d6d705d nixos/mediagoblin: fix initial media reprocessing with gmg
Running `mediagoblin-gmg reprocess initial` before would fail with
missing GST_PLUGIN_PATH and tools in PATH.

(cherry picked from commit 81d2a488e6)
2025-05-28 14:15:09 +00:00
Sandro Jäckel
b7444e5d11 nixos/mediagoblin: fix gmg argument parsing
Before the argument to mediagoblin-gmg would be passed to the actual command
and the rest to sh which is obviously nonsense.

(cherry picked from commit dd63ca898e)
2025-05-28 14:15:09 +00:00