movefasta/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-06-28 20:16:41 +03:00
Code Activity
691317 commits 164 branches 129 tags 11 GiB
Commit graph

44920 commits

Author SHA1 Message Date
Emily
85c36fecfc
xen: nuke, move to by-name. (#345192) 2024-10-07 03:48:37 +01:00
Emily
1a53b400e5
mongodb: mongodb-5_0 -> mongodb-7_0; mongodb-5_0: drop; unifi: unifi7 -> unifi8; unifi{7,-video}: drop (#345625) 2024-10-07 01:38:54 +01:00
Will Fancher
aad455b434
nixos/usbStorage: apply upstream (#284334) 2024-10-06 19:39:07 -04:00
Emily
086676017e mongodb: mongodb-5_0 -> mongodb-7_0 2024-10-06 22:47:42 +01:00
Emily
b0395df085 unifi7: drop 2024-10-06 22:47:41 +01:00
Will Fancher
c00fc8bd1a
nixos/unl0kr: add settings to the unl0kr module (#339787) 2024-10-06 17:44:55 -04:00
Izorkin
611b1d53b7
dhcpcd: enable sandboxing options 2024-10-06 23:46:18 +03:00
Fernando Rodrigues
64cc613a0f
release-notes: remove mentions to xen-slim or 4.18 
They were removed during the great Xen deletion.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2024-10-06 20:24:30 +00:00
Fernando Rodrigues
251dc99c70
nixos/xen: simplify package options 
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2024-10-06 20:24:29 +00:00
Fernando Rodrigues
0eaec9f2f3
xen: drop 4.17 
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2024-10-06 15:55:39 -03:00
Kevin Cox
fb9b5c806b
mautrix-meta: drop maintainership Rutherther (#346916) 2024-10-06 14:45:10 -04:00
Kevin Cox
b8fc5855fb
nixos.mautrix-meta: Update config to 0.4 format (#343606) 2024-10-06 14:44:41 -04:00
Rutherther
379ca4e67f mautrix-meta: drop maintainership Rutherther 2024-10-06 20:33:42 +02:00
Bjørn Forsman
40bfbe3226 nixos/scrutiny: wait until ready 
Add postStart code that waits until Scrutiny has opened its port. This
fixes a race condition against scrutiny-collector, which can start (and
fail) before scrutiny is ready.
 2024-10-06 20:07:45 +02:00
Michele Guerini Rocco
7eef63ed98
wpa_supplicant: add patch to fix ext_passwords_file bug (#342792) 2024-10-06 19:15:19 +02:00
Michele Guerini Rocco
463f8b8ed4
nixos/tests/dnsdist: fix dnscrypt test (#346843) 2024-10-06 19:12:07 +02:00
Arthur Gautier
a32dbada18 nixosTests: fixup tests/common/resolver to work with a local resolver 
When 757a455dde refactored the zones to go
from a list to a map, this broke the tests/common/resolver helper.

reproduction:
```
let
  pkgs = import <nixpkgs> {};

  testConfig = {
    name = "resolver-repro";
    nodes = {
      acme = { nodes, ... }: {
        imports = [ (pkgs.path + /nixos/tests/common/acme/server) ];
      };
    };

    testScript = ''
    '';
  };
in pkgs.nixosTest testConfig
```
 2024-10-06 15:18:45 +00:00
Maximilian Bosch
5ee80e8120
Merge: nixos/nginx: remove shortand from defaultText (#346767) 2024-10-06 17:13:51 +02:00
Sandro
0cc879fa99
nixos/tests/non-default-filesystems: fix btrfs mount regex (#340702) 2024-10-06 14:08:21 +02:00
Sandro
85100fcc51
nixos/tests/tmate-ssh-server: fix test (#342318) 2024-10-06 14:07:14 +02:00
Sandro
020c26717f
nixos/quorum: fix geth args, fix test (#341181) 2024-10-06 14:06:31 +02:00
Sandro
c0ad8503fa
nixos/tests/pgjwt: fix test (#341150) 2024-10-06 14:05:36 +02:00
Sandro
00461d0fcb
nixos/nginx: fix double slash in example (#346774) 2024-10-06 13:58:54 +02:00
rnhmjoj
cf614ee789
nixos/tests/dnsdist: fix dnscrypt test 2024-10-06 11:34:57 +02:00
Jonas Heinrich
c566a36839
feishin: 0.9.0 -> 0.10.1 (#344865) 2024-10-06 10:27:49 +02:00
Sandro Jäckel
dd7ef21afc
nixos/nginx: fix double slash in example 2024-10-06 03:45:51 +02:00
Sandro
b64b2d25c2
nixos/nginx: remove shortand from defaultText 2024-10-06 03:19:07 +02:00
Peder Bergebakken Sundt
90c1e58d22
zammad: 6.2.0 -> 6.3.1 (#345456) 2024-10-06 03:00:44 +02:00
Nick Cao
5f821de20c
keycloak: 25.0.6 -> 26.0.0 (#346439) 2024-10-05 18:14:45 -04:00
Felix Singer
0f599d1e68 nixos/redmine: Apply initial hardening using the systemd unit 
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.

In my tests, Redmine only bound to an IPv4 address and Unix socket,
which is why I restricted the address families to these both.

The command `systemd-analyze security redmine.service` reports an
overall exposure level of 2.9 with this patch.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
 2024-10-05 22:13:37 +02:00
h7x4
25f2846361
nixos/bind: set type of zones.*.extraConfig to lines (#346424) 2024-10-05 21:07:26 +02:00
h7x4
cc76cf58f8
nixos/uinput: set a static GID for the uinput group (#333762) 2024-10-05 20:59:16 +02:00
Robert Schütz
506df4e38e nodePackages.npm: drop 2024-10-05 11:23:49 -07:00
Will Fancher
9f8eb445fa
nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1 (#346547) 2024-10-05 13:44:39 -04:00
Jared Baur
c39781c558
nixos/activation-script: only setup nix tmpfiles if nix is enabled 
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
 2024-10-05 09:03:19 -07:00
Jared Baur
3d6e7d7b56
nixos/tmpfiles: only setup nix tmpfiles when nix is used 
If nix is not installed on the end system, the tmpfiles settings related
to it do not need to be setup.
 2024-10-05 09:01:55 -07:00
Nick Cao
6069dde181
nixos/keycloak: make initialAdminPassword optional 2024-10-05 08:37:41 -04:00
r-vdp
94532d1530 nixos/syncthing: remove syncthing-resume service 
It was removed upstream in https://github.com/syncthing/syncthing/pull/9611
and the stub generated by nixos now prints an error in the logs due to
it not having a ExecStart line.
 2024-10-05 12:55:39 +02:00
r-vdp
70119aa60f
nixis/uinput: use a fixed GID for the uinput group 2024-10-05 10:21:26 +02:00
r-vdp
469f505813
nixos/{uinput,ids}: format 2024-10-05 10:21:01 +02:00
Nick Cao
937d3964c9
nixos/keycloak: raise memory size in tests to 2047M 2024-10-04 21:43:19 -04:00
Bobby Rong
f594475564
nixos/xfce: Fix ambiguous with (#346528) 2024-10-05 09:03:18 +08:00
Sandro Jäckel
9b996f7396
nixos/xfce: Fix ambiguous with 
Pull request 345352 introduces `pkgs.exo`, don't pick up that package.
 2024-10-05 08:43:24 +08:00
Nick Cao
05caac302f
nixos/keycloak: fixup login test after ui change 2024-10-04 20:39:55 -04:00
Nick Cao
0cdc3e2a0b
nixos/keycloak: drop removed proxy option 
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#proxy-option-removed
 2024-10-04 20:20:46 -04:00
Nick Cao
16cd47369f
nixos/keycloak: KEYCLOAK_ADMIN{,PASSWORD} -> KC_BOOTSTRAP_ADMIN_{USERNAME,PASSWORD} 
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#admin-bootstrapping-and-recovery
 2024-10-04 20:08:06 -04:00
Nick Cao
d2ec2d3c29
nixos/keycloak: link $out/lib to KC_HOME_DIR to fix loading optimized app image 
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#additional-validations-on-the-optimized-startup-option
 2024-10-04 20:06:08 -04:00
Will Fancher
3e90d5a2bc nixos/systemd-stage-1: Don't enable TPM2 on scripted stage 1 2024-10-04 19:50:46 -04:00
jade
f0ce0e71c3
Remove the revCount attribute from the generated flake registry (#316225) 2024-10-04 15:25:55 -07:00
Aaron Andersen
913a23b5e2
nixos/redmine: Allow specifying an IP address Redmine should bind to (#345617) 2024-10-04 18:18:45 -04:00