1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-02 13:59:07 +03:00
Commit graph

38134 commits

Author SHA1 Message Date
Connor Baker
a553bb2f16
[Backport release-25.05] nixos/hardware/nvidia: add prime.offload.offloadCmdMainProgram (#416844) 2025-06-26 14:54:12 -07:00
qubitnano
3a69ec5f15 nixos/bcachefs: include poly1305 and chacha20 kernel modules for kernel < 6.15
Kernel 6.16-rc1 removed the poly1305 algorithm in
ceef731b0e22df80a13d67773ae9afd55a971f9e

bcachefs switched to the kernel libraries for poly1305 and chacha20 in
6.15 in 4bf4b5046de0ef7f9dc50f3a9ef8a6dcda178a6d

(cherry picked from commit f9bd91aa07)
2025-06-27 03:16:55 +05:30
Wolfgang Walther
9c6636ec49
[Backport release-25.05] nixos/systemd-initrd: honor the enable option in contents (#412109) 2025-06-26 20:19:14 +00:00
Wolfgang Walther
877e737d95
[Backport release-25.05] nixos/nvidia-container-toolkit: allow to provide CSV files (#411763) 2025-06-26 20:17:56 +00:00
Wolfgang Walther
2b56e28dd4
[Backport release-25.05] nixos/fish: allow disabling completion generation (#418614) 2025-06-26 18:03:26 +00:00
Sandro
ffdcefdde9
[Backport release-25.05] nixos/waydroid: allow override waydroid, adopt (#419563) 2025-06-25 15:21:44 +02:00
r-vdp
54f759989d nixos/systemd-oomd: use the correct name for the top-level user slice
`user-.slice` does not seem to exist, and the config we generate for it is
rejected by systemd (see `systemctl status user-.slice`).
I suppose that what was really intended here, was to configure
`user.slice`, which is the one that is documented in `man systemd.special`.

Reported-by: Ian Sollars <Ian.Sollars@brussels.msf.org>
(cherry picked from commit c28b3143da)
2025-06-24 21:07:45 +00:00
wxt
39d00bd276 nixos/waydroid: allow override waydroid
(cherry picked from commit ee0937ff0d)
2025-06-24 13:37:31 +00:00
eljamm
b4a3d1df40 nixos/omnom: fix module
(cherry picked from commit 19c1b4250c)
2025-06-23 20:49:10 +02:00
Thomas BESSOU
c1ebdb5dd8 nixos/i3: fix i3lock default enable-ing
Prior to this commit, i3lock was enabled by default in a way that doesn't work as of 317c972e8a (diff-aef862f6fd2c25092a3f17f974d8757285bf7baff6b80822cd142b7de1903ccfR451-R454)
Users attempting to use i3lock with this default setup would get locked out of their system.

This fixes it by enabling i3lock via its `programs` option instead of specifying the package directly.

Discussion over at https://github.com/NixOS/nixpkgs/issues/401891#issuecomment-2963378189

(cherry picked from commit e82c7e5b83)
2025-06-23 13:20:59 +00:00
Wolfgang Walther
e5cb9a5ba4 nixos/immich: fix postgresql.package regression
`config.services.postgresql.package` is now only available when the
PostgreSQL module is actually enabled. If we're not using the local
database, we'll need to fallback to the latest postgresql version, since
we don't know about the remote version.

(cherry picked from commit 62d2b6d593)
2025-06-22 14:43:55 +00:00
Wolfgang Walther
25e4fe68b1 nixos/roundcube: fix postgresql.package regression
`config.services.postgresql.package` is now only available when the
PostgreSQL module is actually enabled. If we're not using the local
database, we'll need to fallback to the latest postgresql version, since
we don't know about the remote version.

(cherry picked from commit e780b064a8)
2025-06-22 14:43:55 +00:00
Wolfgang Walther
ea6f7c1587 nixos/libeufin: fix postgresql.package regression
`config.services.postgresql.package` is now only available when the
PostgreSQL module is actually enabled. If we're not using the local
database, we'll need to fallback to the latest postgresql version, since
we don't know about the remote version.

(cherry picked from commit da3beb2a08)
2025-06-22 14:43:55 +00:00
Jakob Kukla
9478be0f88 nixos/atticd: fix user and group documentation mixup
(cherry picked from commit db7efc1412)
2025-06-21 20:32:57 +00:00
Pratham Patel
d2672b8b54 nixos/cosmic-greeter: initialize COSMIC session properly with autologin
Until now, the `cosmic-session` binary was directly invoked when
autologin was enabled. When a user logs in normally, the COSMIC greeter
performs some initialisation. That is done by the greeter running the
`start-cosmic` script shipping with the `cosmic-session` package.

This `start-cosmic` script is responsible for exporting the environment
variables for the user's graphical session and then it starts a session
of COSMIC.

So, when autologin is enabled, instead of executing the `cosmic-session`
binary, we will run the `start-cosmic` script to match user session
initialisation as closely as possible with a "normal" session.

However, there still are some missing pieces to the puzzle. Most notable
one of them is that the desktop portal keeps crashing with a
"ParserError" in context to the locale. I have not dived into this
puzzle piece yet.

```
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.351100Z  INFO launch_pad: starting process ' WAYLAND_DISPLAY=wayland-1 XDG_SESSION_TYPE=wayland WAYLAND_SOCKET=79 PORTAL_WAYLAND_SOCKET=57 /nix/store/0d2a9m7n8bji1q8vrmabj380mwzlvd35-xdg-desktop-portal-cosmic-1.0.0-alpha.7/libexec/xdg-desktop-portal-cosmic '
May 30 09:32:26 aatman cosmic-session[1221]: starting process ' WAYLAND_DISPLAY=wayland-1 XDG_SESSION_TYPE=wayland WAYLAND_SOCKET=79 PORTAL_WAYLAND_SOCKET=57 /nix/store/0d2a9m7n8bji1q8vrmabj380mwzlvd35-xdg-desktop-portal-cosmic-1.0.0-alpha.7/libexec/xdg-desktop-portal-cosmic '
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.419931Z  WARN xdg-desktop-portal-cosmic: cosmic_session: [2025-05-30T04:02:26Z ERROR i18n_embed::requester] Unable to parse your locale: ParserError(InvalidLanguage)
May 30 09:32:26 aatman cosmic-session[1221]: [2025-05-30T04:02:26Z ERROR cosmic_settings_subscriptions::upower::kbdbacklight] Error listening to KbdBacklight: org.freedesktop.DBus.Error.UnknownMethod: Object does not exist at path “/org/freedesktop/UPower/KbdBacklight”
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.795301Z  WARN cosmic-osd: cosmic_session: [2025-05-30T04:02:26Z ERROR cosmic_settings_subscriptions::upower::kbdbacklight] Error listening to KbdBacklight: org.freedesktop.DBus.Error.UnknownMethod: Object does not exist at path “/org/freedesktop/UPower/KbdBacklight”
May 30 09:32:26 aatman cosmic-session[1221]: Failed to watch theme org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.GeoClue2 was not provided by any .service files
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.807276Z  WARN cosmic-settings-daemon: cosmic_session: Failed to watch theme org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.GeoClue2 was not provided by any .service files
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.818729Z  WARN xdg-desktop-portal-cosmic: cosmic_session:
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.818739Z  WARN xdg-desktop-portal-cosmic: cosmic_session: thread 'main' panicked at src/wayland/mod.rs:243:78:
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.818748Z  WARN xdg-desktop-portal-cosmic: cosmic_session: called `Result::unwrap()` on an `Err` value: NotPresent
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.818792Z  WARN xdg-desktop-portal-cosmic: cosmic_session: stack backtrace:
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.830400Z  WARN xdg-desktop-portal-cosmic: cosmic_session:    0:     0x56531e8a3e40 - <std::sys::backtrace::BacktraceLock::print::DisplayBacktrace as core::fmt::Display>::fmt::h9edbd6e38a8b0805
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.830424Z  WARN xdg-desktop-portal-cosmic: cosmic_session:    1:     0x56531dd73043 - core::fmt::write::h7b1248e5e0c79c78
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.830499Z  WARN xdg-desktop-portal-cosmic: cosmic_session:    2:     0x56531e86c0f3 - std::io::Write::write_fmt::h5e301665499081bf
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.831166Z  WARN xdg-desktop-portal-cosmic: cosmic_session:    3:     0x56531e8a3ce3 - std::sys::backtrace::BacktraceLock::print::h4a386d2ef944f43e
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.831187Z  WARN xdg-desktop-portal-cosmic: cosmic_session:    4:     0x56531e89ea7a - std::panicking::default_hook::{{closure}}::h61b7aa0fc15f236b
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.831825Z  WARN xdg-desktop-portal-cosmic: cosmic_session:    5:     0x56531e89e986 - std::panicking::default_hook::h2d21379b0b23a14f
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.832324Z  WARN xdg-desktop-portal-cosmic: cosmic_session:    6:     0x56531e89ef8f - std::panicking::rust_panic_with_hook::h100726ba9570b85a
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.832346Z  WARN xdg-desktop-portal-cosmic: cosmic_session:    7:     0x56531e8a442a - std::panicking::begin_panic_handler::{{closure}}::h141712493bfacf0c
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.832762Z  WARN xdg-desktop-portal-cosmic: cosmic_session:    8:     0x56531e8a4049 - std::sys::backtrace::__rust_end_short_backtrace::h891003731531c924
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.833229Z  WARN xdg-desktop-portal-cosmic: cosmic_session:    9:     0x56531e89eb1d - rust_begin_unwind
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.834168Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   10:     0x56531dc22850 - core::panicking::panic_fmt::h1df68d570cb2382b
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.834420Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   11:     0x56531dc22f86 - core::result::unwrap_failed::h846e3c141fa2fc46
May 30 09:32:26 aatman cosmic-session[1221]:   12:     0x56531ef28d26 - xdg_desktop_portal_cosmic::wayland::WaylandHelper:🆕:h48f2051b910dbe32
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.835752Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   12:     0x56531ef28d26 - xdg_desktop_portal_cosmic::wayland::WaylandHelper:🆕:h48f2051b910dbe32
May 30 09:32:26 aatman cosmic-session[1221]:   13:     0x56531f156919 - <xdg_desktop_portal_cosmic::app::CosmicPortal as cosmic::app::Application>::init::had2439c596d5d3ad
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.836584Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   13:     0x56531f156919 - <xdg_desktop_portal_cosmic::app::CosmicPortal as cosmic::app::Application>::init::had2439c596d5d3ad
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.836608Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   14:     0x56531f0efc8a - cosmic::app::cosmic::Cosmic<T>::init::h237ea438ab62a4a6
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.837122Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   15:     0x56531f2343fc - <cosmic::executor::single::Executor as iced_futures::executor::Executor>::enter::hb58da647315361c8
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.837736Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   16:     0x56531f27721b - iced_winit::program::run::hf8da91cb177f3cdc
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.837766Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   17:     0x56531ef9367c - iced::program::Program::run_with::h07cb6de026d46c3f
May 30 09:32:26 aatman cosmic-session[1221]:   19:     0x56531f1568af - xdg_desktop_portal_cosmic::app::run::h7170177d90ae0389
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.838448Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   18:     0x56531ef6742e - cosmic::app::run::hd504699db0c811e4
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.838459Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   19:     0x56531f1568af - xdg_desktop_portal_cosmic::app::run::h7170177d90ae0389
May 30 09:32:26 aatman cosmic-session[1221]:   20:     0x56531efd2d97 - xdg_desktop_portal_cosmic::main::{{closure}}::hc5e7222eb3d3d40e
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.839054Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   20:     0x56531efd2d97 - xdg_desktop_portal_cosmic::main::{{closure}}::hc5e7222eb3d3d40e
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.839445Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   21:     0x56531f2f35c8 - tokio::runtime::scheduler::current_thread::Context::enter::hd6c32d98c7a2c763
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.839471Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   22:     0x56531eee89f5 - tokio::runtime::context::scoped::Scoped<T>::set::hbeefc0e3683e97df
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.840043Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   23:     0x56531f2f20d1 - tokio::runtime::scheduler::current_thread::CurrentThread::block_on::h62fe74dc45c2b83b
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.840971Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   24:     0x56531f224371 - tokio::runtime::runtime::Runtime::block_on::hfa5a1859076bed6c
May 30 09:32:26 aatman cosmic-session[1221]:   25:     0x56531efd2a49 - xdg_desktop_portal_cosmic::main::h37b3a492c461a668
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.841689Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   25:     0x56531efd2a49 - xdg_desktop_portal_cosmic::main::h37b3a492c461a668
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.841783Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   26:     0x56531f15e686 - std::sys::backtrace::__rust_begin_short_backtrace::h4a22c4aac199bf89
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.841946Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   27:     0x56531f20de35 - std::rt::lang_start::{{closure}}::hd13242c87ee797d9
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.842593Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   28:     0x56531e87a336 - std::rt::lang_start_internal::he3cad277a2bdfe30
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.843329Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   29:     0x56531efd2ecc - main
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.844213Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   30:     0x7ff514e2a47e - __libc_start_call_main
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.844326Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   31:     0x7ff514e2a539 - __libc_start_main_impl
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.844695Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   32:     0x56531dc9b795 - _start
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.844761Z  WARN xdg-desktop-portal-cosmic: cosmic_session:   33:                0x0 - <unknown>
May 30 09:32:26 aatman cosmic-session[1221]: process ' WAYLAND_DISPLAY=wayland-1 XDG_SESSION_TYPE=wayland WAYLAND_SOCKET=79 PORTAL_WAYLAND_SOCKET=57 /nix/store/0d2a9m7n8bji1q8vrmabj380mwzlvd35-xdg-desktop-portal-cosmic-1.0.0-alpha.7/libexec/xdg-desktop-portal-cosmic ' failed with code 101
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.855339Z ERROR launch_pad: process ' WAYLAND_DISPLAY=wayland-1 XDG_SESSION_TYPE=wayland WAYLAND_SOCKET=79 PORTAL_WAYLAND_SOCKET=57 /nix/store/0d2a9m7n8bji1q8vrmabj380mwzlvd35-xdg-desktop-portal-cosmic-1.0.0-alpha.7/libexec/xdg-desktop-portal-cosmic ' failed with code 101
May 30 09:32:26 aatman cosmic-session[1221]: /nix/store/0d2a9m7n8bji1q8vrmabj380mwzlvd35-xdg-desktop-portal-cosmic-1.0.0-alpha.7/libexec/xdg-desktop-portal-cosmic exited with error 101
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.855496Z ERROR cosmic_session: /nix/store/0d2a9m7n8bji1q8vrmabj380mwzlvd35-xdg-desktop-portal-cosmic-1.0.0-alpha.7/libexec/xdg-desktop-portal-cosmic exited with error 101
May 30 09:32:26 aatman cosmic-session[1221]: sleeping for 3ms before restarting process /nix/store/0d2a9m7n8bji1q8vrmabj380mwzlvd35-xdg-desktop-portal-cosmic-1.0.0-alpha.7/libexec/xdg-desktop-portal-cosmic (restart 0)
May 30 09:32:26 aatman cosmic-session[1221]: 2025-05-30T04:02:26.855749Z  INFO launch_pad: sleeping for 3ms before restarting process /nix/store/0d2a9m7n8bji1q8vrmabj380mwzlvd35-xdg-desktop-portal-cosmic-1.0.0-alpha.7/libexec/xdg-desktop-portal-cosmic (restart 0
```

(cherry picked from commit e3f752e29d)
2025-06-21 12:17:35 +02:00
Sizhe Zhao
b41bf4567a nixos/profiles/minimal: don't generate fish completions
(cherry picked from commit dbf39b7ddb)
2025-06-21 03:51:26 +00:00
Sizhe Zhao
c567580239 nixos/fish: allow disabling completion generation
(cherry picked from commit 3045cecacf)
2025-06-21 03:51:26 +00:00
Kerstin Humm
2f8de667c1 nixos/mastodon: make robust for cases where postgresql isn't enabled on the host
E.g. when a remote PostgreSQL database is used

Apparently you can't access the services.postgresql.package value
anymore if postgresql isn't enabled?

(cherry picked from commit ed0af3bf25)
2025-06-20 19:29:35 +00:00
Adam C. Stephens
bc07d2f145
[Backport release-25.05] nixos/incus: fix AppArmor issue (#417791) 2025-06-20 11:06:44 -04:00
Martin Weinelt
b6f372e59a
[Backport release-25.05] tlsrpt-reporter: init at 0.5.0 (#418442) 2025-06-20 15:41:23 +02:00
Martin Weinelt
335a3bd10b nixos/tlsrpt: init
(cherry picked from commit 863d3a151d)
2025-06-20 15:20:02 +02:00
Martin Weinelt
7dbf3f27ef nixos/postfix-tlspol: init
MTA-STS and DANE/TLSA resolver and TLS policy socketmap server for
Postfix.

(cherry picked from commit 7c0f92f70b)
2025-06-20 15:01:56 +02:00
ActuallyRuben
d643bc40c3 nixos/mongodb: fix initialScript when no initialRootPasswordFile is set
(cherry picked from commit 3400dbdfcd)
2025-06-20 12:09:24 +00:00
cinereal
81e640171d pay-respects: properly end line, fixing error --set: command not found on AI integration
(cherry picked from commit cc345fe2f2)
2025-06-18 13:31:21 +00:00
MakiseKurisu
ff08d75496 nixos/incus: update AppArmor profile for new versions
(cherry picked from commit dd5faa98ae)
2025-06-18 09:51:21 +00:00
Luj
427febc454
[Backport release-25.05] readeck: 0.18.2 -> 0.19.2 (#415897) 2025-06-17 14:53:00 +02:00
Maximilian Bosch
7af24ae020 nixos/postgresql: doc review
Co-authored-by: Wolfgang Walther <walther@technowledgy.de>
(cherry picked from commit 2a6405fb15)
2025-06-17 10:30:31 +00:00
Maximilian Bosch
e3fabc9360 nixos/postgresql: fix docs on default package
Closes #416595

(cherry picked from commit e6cc23ba3f)
2025-06-17 10:30:31 +00:00
taku0
df57a86fe9
[Backport release-25.05] firefox-beta-bin, firefox-devedition-bin: remove (#416894) 2025-06-16 13:49:24 +09:00
Aleksana
b3f237655d
[Backport release-25.05] nixos/qtile: fix 'package' option (#416480) 2025-06-15 19:27:11 +08:00
taku0
9c0693aa2e firefox-beta-bin, firefox-devedition-bin: remove
(cherry picked from commit e048bd23c4)
2025-06-15 07:26:13 +00:00
Peder Bergebakken Sundt
076da97cf1 nixos/hardware/nvidia: add prime.offload.offloadCmdMainProgram
prime-run is the default name on arch linux. This allows me and some others I found on github to slim their config.

(cherry picked from commit 340cd4a445)
2025-06-15 01:56:25 +00:00
Felix Bargfeldt
af54544dfb
[25.05] nixos/kanidm: merge recursively with extraJsonFile, Fix bind paths (#415078) 2025-06-14 20:07:40 +02:00
Toma
00aa46e274
[release-25.05] nekoray: fix TUN functionality (#416172) 2025-06-13 17:51:57 +02:00
misuzu
00cbf506f0 nixos/qtile: fix 'package' option
(cherry picked from commit d06d1cae5a)
2025-06-13 15:40:45 +00:00
rewine
37acbc4b0a nixos/modules: drop yabar
(cherry picked from commit 8376979439)
2025-06-13 10:36:08 +00:00
aleksana
63bf2a80b5 nixos/nekoray: init module 2025-06-12 23:14:45 +08:00
Adrien Faure
22fe709ac0 nixos/documentation: add option to disable redirects
Related to issue #https://github.com/NixOS/nixpkgs/issues/412451

(cherry picked from commit aeedfab1bf)
2025-06-12 15:29:46 +02:00
linsui
d50977688f nixos/readeck: add back MemoryDenyWriteExecute
SQLite driver is reverted to its CGO version so this can be enabled

(cherry picked from commit 17f95268f3)
2025-06-11 17:02:18 +00:00
Defelo
881a31616e nixos/olivetin: use yq-go to merge config files
(cherry picked from commit f71748184c)
2025-06-08 21:42:06 +00:00
Ilan Joselevich
52831b648c
nixos/kanidm: merge recursively with extraJsonFile
Previously, if you set group memberships in both locations, they will
get replaced by the ones in extraJsonFile, which is unexpected as it
kicks users from the group. Now the state files get merged recursively,
including the arrays.

(cherry picked from commit 3b6b50dfad)
2025-06-08 19:48:37 +02:00
Flakebi
481131b7f4
nixos/kanidm: Fix bind paths
1. We bound the directory of certificates, this lead to forced read-only
   binds of these directories, even if they should have been bound
   read-write for other files in there. Looking at the history, there
   seems to be no compelling reason for this, so switch to binding
   the files directly.
2. `/run/kanidmd` is configured as `RuntimeDirectory` so bound
   automatically and we don’t need to specify it explicitly.

(cherry picked from commit c4f052c08a)
2025-06-08 19:39:21 +02:00
oddlama
7ce5e5aa0f
nixos/kanidm: add option and tests for imperative group management
(cherry picked from commit 5f833b1008)
2025-06-08 18:31:00 +02:00
Peter Lehmann
fce8cd453a nixos/pdns-recursor: reload service on config change
(cherry picked from commit c586196e17)
2025-06-07 21:40:26 +00:00
Katalin Rebhan
2f534ed8ea nixos/users-groups: allow changing default home directory
(cherry picked from commit 6f7d7cf76f)
2025-06-07 18:31:59 +00:00
Rory&
297dbf2ae4 nixos/draupnir: init
Co-authored-by: emilylange <git@emilylange.de>
Co-authored-by: Martin Weinelt <hexa@darmstadt.ccc.de>
Co-authored-by: teutat3s <10206665+teutat3s@users.noreply.github.com>

(cherry picked from commit 4b153aad5d)
2025-06-06 21:07:19 +02:00
Jared Baur
d6822a8edf nixos/networkd: update valid KeepConfiguration values
These changed with the release of systemd v257 from "dhcp*" to
"dynamic*".

(cherry picked from commit d8f9c63512)
2025-06-05 23:18:28 +00:00
Maximilian Bosch
4579a816f4 nixos/nginx: fix type of mapHashBucketSize
While the default is indeed 32/64/128, the option accepts any `size`[1]
including values >128, as observed in a customer project.

[1] https://nginx.org/en/docs/http/ngx_http_map_module.html

(cherry picked from commit 4a2a4193f9)
2025-06-05 14:12:30 +00:00
Luj
f10e84cf9c
[Backport release-25.05] nixos/clevis: fix clevis in scripted initrd (#413635) 2025-06-04 15:27:27 +03:00
Pol Dellaiera
0eef838fb4
Revert "[Backport release-25.05] nixos/postfix: add slow domain" 2025-06-04 08:16:14 +02:00