bb2020
7113eb5574
nixos/minidlna: convert to structural settings
2022-07-01 11:05:38 +03:00
bb2020
449d6ce32b
nixos/minidlna: add more configuration options
2022-07-01 11:05:38 +03:00
stuebinm
c3e03d1199
Merge branch 'master' into nextcloud-secrets
2022-06-30 22:24:44 +02:00
stuebinm
ef75aab612
services/nextcloud: more consistent code
2022-06-30 22:21:43 +02:00
ckie
a8c2879f43
Merge pull request #179425 from McSinyx/phylactery
...
phylactery: init at 0.1.1
2022-06-30 18:29:19 +03:00
Domen Kožar
989565d676
cachix-agent: expose verbose option
2022-06-30 09:56:28 -05:00
wyndon
69e1e00ebb
nixos/lokinet: init
2022-06-30 16:01:50 +02:00
Nguyễn Gia Phong
ce910fca88
nixos/tests: add phlactery
2022-06-30 22:50:08 +09:00
Nguyễn Gia Phong
f5f338c846
nixos/phylactery: init
2022-06-30 22:50:08 +09:00
José Romildo Malaquias
f72be3af76
Merge pull request #179220 from romildo/fix.xfconf
...
nixos/xfconf: init
2022-06-30 07:39:27 -03:00
Florian Klink
f5b87a8203
Merge pull request #179487 from catap/parallels-virt
...
nixos-generate-config: detects parallels virtualization
2022-06-30 10:04:03 +07:00
Domen Kožar
5a14883a5f
Merge pull request #179634 from domenkozar/cachix-agent-avoid-restarts
...
cachix-agent: properly handle not restarting the service
2022-06-29 17:37:00 -05:00
Domen Kožar
c7b135ac8e
cachix-agent: properly handle not restarting the service
2022-06-29 17:17:35 -05:00
Sandro
a59be4f6c8
Merge pull request #175919 from phaer/phaer-healthchecks
...
healthchecks: init at 2.2.1
2022-06-29 23:15:35 +02:00
Izorkin
f169a1af97
nixos/tests: small update nginx-http3 test
2022-06-29 22:39:14 +03:00
Piotr Dobrowolski
348b88545c
nixos/plymouth: fix theme dependency resolution in systemd stage 1
...
Some plymouth themes use assets of others, like is the case with our
default bgrt depending on spinner. Missing assets would cause the
splashscreen to not render at all in stage 1.
Preliminary dependency resolution code seemed to be broken, and this
should fix it.
Only direct dependencies of selected theme are pulled in.
2022-06-29 21:38:34 +02:00
ajs124
15e41e3edf
Merge pull request #179358 from helsinki-systems/upd/jitsi
...
jitsi: update
2022-06-29 21:09:19 +02:00
Kai Wohlfahrt
60d1c1d9ad
openldap: change runtime directory
...
Use `openldap` for consistency between `/var/lib` and `/run`.
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt
334d622ec7
openldap: test starting with empty DB
...
This addresses the original concern behind #92544
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt
8a7193fc0a
openldap: test and fix mutable config
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt
ad5acb9b0e
openldap: use specialisations for tests
...
This speeds up tests a bit. Also, ensure that mutable config works for
manual config dir.
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt
fd7d901133
openldap: run under systemd-defined user/group
...
This improves security, by starting the service as an unprivileged user,
rather than starting as root and relying on the service to drop
privileges. This requires a significant cleanup of pre-init scripts, to
make use of StateDirectory and RuntimeDirectory for permissions.
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt
38ead944ce
openldap: run in foreground
...
Now that we use notify daemon type, this works safely and simplifies
configuration.
2022-06-29 19:59:29 +02:00
Kai Wohlfahrt
d72f89a8fc
openldap: Allow notify outside of main thread
...
This fixes a bug I observed in deployment on a RPi, but not able to
reproduce in tests.
2022-06-29 19:59:28 +02:00
Kai Wohlfahrt
d1f55ce0a4
openldap: change default ldapi directory
...
By default, this is /run/ldapi, which is not compatible with systemd's
runtime directories. Change it to /run/slapd/ldapi (in library and
server). This makes `ldapi:///` work as a default socket again.
2022-06-29 19:59:06 +02:00
Kai Wohlfahrt
6e6f33ad83
openldap: remove deprecated options
2022-06-29 19:59:06 +02:00
Kirill A. Korinsky
08ddd8a5fc
nixos-generate-config: detect parallels virtualization
2022-06-29 16:01:08 +02:00
Jan Tojnar
ce28c99140
Merge pull request #179204 from jtojnar/no-gtk-xdg-use-portal
...
nixos/xdg.portal: deprecate gtkUsePortal option
2022-06-29 14:24:43 +02:00
Lin Jian
d1b90cf540
nixos/caddy: force caddy to reload config in ExecReload
...
This patch follows an upstream commit[1].
Before this patch, if acme module is used, caddy will still use an old
cert even a new one is available. The cause is that without --force
flag, caddy will not reload an unchanged config.
Refer to that commit[1] message for more information.
[1]: 979e498d6d
2022-06-29 10:36:24 +08:00
Aidan Gauland
0cb24e2d32
teensy-udev-rules: init at version 2022-05-15
...
Add udev rules for the Teensy family of microcontrollers so that they can be
flashed as non-root users.
2022-06-29 11:45:50 +12:00
ajs124
a0718341e6
maintainers: remove volth
...
github account deleted
2022-06-29 00:52:12 +02:00
ajs124
729764a32d
nixos/tests/jitsi-meet: remove grep for successfull health check
...
afaict, it doesn't log this anymore after https://github.com/jitsi/jitsi-videobridge/pull/1188
2022-06-29 00:32:53 +02:00
ajs124
aea940da63
nixos/jitsi-meet: move prosodyctl calls into prosody preStart
2022-06-29 00:19:57 +02:00
Alex Wied
4d269d11e3
nixos/doc: Fix typo in activation-script.md
2022-06-28 17:46:16 -04:00
Lin Jian
f7baa65db7
nixos/caddy: improve security about acme certs
...
Before this patch, the caddy process has acme in its supplementary
group because of the SupplementaryGroups in its service config, which
may give it more permission than needed, is inconsistent with the
documentation of services.caddy.virtualHosts.<name>.useACMEHost and is
redundant since we have mkCertOwnershipAssertion in assertions.
This patch fixes these problems by defaulting the group of needed
certs to caddy, which is what other web servers like nginx do and
deleting SupplementaryGroups config.
2022-06-29 05:41:13 +08:00
Artturi
3cff3f75b4
Merge pull request #166340 from max-privatevoid/patch-6
2022-06-28 19:55:10 +03:00
pennae
fe62b1b20f
Merge pull request #179440 from alyssais/ids-typo
...
nixos/ids: fix typo in comment
2022-06-28 15:47:35 +00:00
Alyssa Ross
4684ff771e
nixos/dictd: make dict use local server
...
Seems silly to install this for use with the local server, but to not
configure it to use the local server. Otherwise, out of the box we
just get an error about no server being configured.
2022-06-28 12:22:45 +00:00
Alyssa Ross
0a2337c4da
nixos/ids: fix typo in comment
2022-06-28 11:58:47 +00:00
Sandro
6dce91f57b
Merge pull request #178336 from astro/openwebrx
2022-06-28 11:36:27 +02:00
phaer
12d45dc313
healthchecks: init at 2.2.1
2022-06-28 10:28:46 +02:00
happysalada
b90fa9940b
dgraph: add module
2022-06-28 02:34:54 -04:00
Astro
9123ed5f36
openwebrx: 1.1.0 -> 1.2.0
2022-06-28 00:46:32 +02:00
Philipp Riegger
3624f0bbf0
services.prometheus.exporters.statsd: init service
2022-06-27 23:04:54 +02:00
Robert Hensing
47dd5d15c1
Merge pull request #179351 from hercules-ci/option-docs-improvements
...
Option docs improvements
2022-06-27 22:51:22 +02:00
Pascal Bach
13df7151e1
Merge pull request #178783 from greizgh/fix-syncthing-doc
...
nixos/syncthing: fix services.syncthing.folders description
2022-06-27 22:37:56 +02:00
Robert Hensing
7c81905344
nixos/make-options-doc: Support Nix-provided declaration locations
...
Feature was introduced in https://github.com/NixOS/nixpkgs/pull/174460 ,
but wasn't supported in `mergeJSON.py` yet.
2022-06-27 22:07:20 +02:00
Martin Weinelt
9525331e5a
Merge pull request #179322 from mweinelt/mozilla
2022-06-27 20:52:02 +02:00
Robert Hensing
8bff3fef40
nixos/make-options-doc: Support block quotes
...
Our tooling would trip without the inner <para>, despite the docbook
docs suggesting that <para> occurs in <blockquote> and vice versa.
2022-06-27 17:41:32 +02:00
Robert Hensing
e04aa1bcd9
nixos/make-options-doc: Escape inline code and code blocks
2022-06-27 17:41:32 +02:00
