Yaya
4321e48b68
nixos/gitlab: Remove procps from gitaly service
...
From my understanding, procps was added to the gitlay systemd service
path in #58487 to fix gitaly-ruby's internal memory leak detection.
Now that the last ruby remnants have been removed in gitaly 16.0.0,
this should not be necessary anymore.
2023-05-31 22:14:25 +02:00
Yaya
33411f2768
nixos/gitlab: Update redis configuration
...
Configuring Redis via environment variable is not supported anymore
since [1].
[1] 1242965361
2023-05-31 22:14:25 +02:00
Yaya
6fed71cab2
gitaly: Remove ruby dependencies
...
Ruby dependencies in gitaly have been removed in the 16.0.0 release. [1]
See GitLab Epic &2862 [2] for more info.
[1]: 689556e70a
[2]: https://gitlab.com/groups/gitlab-org/-/epics/2862
2023-05-31 22:14:25 +02:00
Kira Bruneau
7e820610e3
Merge pull request #234207 from emilylange/acme-dns
...
acme-dns: init at 1.0; nixos/acme-dns: init; nixos/acme-dns: init
2023-05-31 11:40:35 -04:00
emilylange
d0af39521b
nixos/acme-dns: init
2023-05-31 15:08:37 +02:00
r-vdp
2b63df0a03
modules/sshd: print the offending keys when we detect duplicate sshd keys.
2023-05-31 12:07:06 +02:00
Sam W
6ad72aa37e
nixos/pixelfed: fix broken try_files
...
Add missing $ to try files directive. This fixes pixelfed federation and search, amongst presumably many other things!
2023-05-31 15:19:23 +08:00
Aaron Andersen
d098eec2da
nixos/vmalert: init
2023-05-30 07:41:00 -04:00
Jonas Heinrich
63f73b3295
nixos/maddy: change secrets option to accept a list of paths
2023-05-30 12:41:07 +08:00
3JlOy_PYCCKUI
22c8251d7f
nixos/dk: init
2023-05-29 19:05:55 +00:00
Julien Malka
9631553153
Revert "nixos/ntfy-sh: add defaults, use dynamic user"
...
This reverts commit 3dcca62a5e
.
2023-05-29 11:11:32 -04:00
Weijia Wang
4387329d8f
Merge pull request #234729 from tie/pufferpanel-doc-fhsenv
...
nixos/pufferpanel: buildFHSUserEnv -> buildFHSEnv
2023-05-29 10:56:11 +03:00
Ivan Trubach
0143b16935
nixos/pufferpanel: buildFHSUserEnv -> buildFHSEnv
...
The pufferpanel module (#225274 ) was merged shortly after the tree-wide
rename f63a12f296
(#225748 ), so the use of
deperecated buildFHSUserEnv in the docs slipped through review 😅
2023-05-29 07:08:19 +03:00
happysalada
3dcca62a5e
nixos/ntfy-sh: add defaults, use dynamic user
2023-05-28 21:17:14 -04:00
Lin Jian
0ae9df6c5e
nixos/murmur: make it be after network.target again
...
network.target was changed to network-online.target in this PR[1] to
workaround an issue[2].
The murmur version in Nixpkgs has fixed that issue[2].
[1]: https://github.com/NixOS/nixpkgs/pull/42860
[2]: https://github.com/mumble-voip/mumble/issues/1629
2023-05-28 21:03:40 +08:00
Bobby Rong
838dad5de9
Merge pull request #234231 from bobby285271/add/xdg-desktop-portal-xapp
...
xdg-desktop-portal-xapp: init at 1.0.0
2023-05-28 10:52:30 +08:00
Thomas Gerbet
a24848c470
nixos/etcd: allow to choose the package
2023-05-28 08:04:43 +10:00
Victor Freire
77520d39ce
nixos/legit: init
2023-05-27 16:20:05 +00:00
nicoo
942f0a01fe
nixos/below: Explicitely mark descriptions as using Markdown
2023-05-27 11:52:07 +00:00
nicoo
405e1f1e54
nixos/below: Add service module
2023-05-27 11:52:07 +00:00
Nick Cao
cf58ff13a3
Merge pull request #234254 from kevincox/mautrix-facebook-appservice-id
...
nixos.mautrix-facebook: Fix appservice name
2023-05-26 19:48:00 -06:00
Raito Bezarius
69bb0f94de
nixos/nginx: first-class PROXY protocol support
...
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.
Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.
It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.
An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.
Finally, the tests covers:
- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
(sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;
In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.
For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
2023-05-26 19:48:26 +02:00
Kevin Cox
5242aea64f
nixos.mautrix-facebook: Fix appservice name
...
It appears that newer mautrix-facebook versions default to the appservice name `facebook`. This was breaking our registration and causing mautrix-facebook to fail to start. This changes the name back and makes the registration generated match whatever the setting in the app is.
2023-05-26 12:39:37 -04:00
Bobby Rong
36abd7c9f8
nixos/cinnamon: enable portals by default
2023-05-26 23:53:15 +08:00
Pol Dellaiera
2c95ebadf3
nixos/code-server: add more command line options
2023-05-26 09:51:33 +02:00
Yaya
f63f781063
nixos/sftpgo: init
...
A fully featured and highly configurable SFTP server with optional
HTTP/S, FTP/S and WebDAV support.
https://github.com/drakkan/sftpgo
2023-05-25 22:46:15 +02:00
Sandro
ef2a17c946
Merge pull request #232339 from bl1nk/bl1nk/thelounge-package-option
...
nixos/thelounge: add package option
2023-05-25 22:04:22 +02:00
Sandro
1b40315504
Merge pull request #233092 from midchildan/chore/mirakurun/node18
2023-05-25 14:47:50 +02:00
nyanotech
3aad03a464
nixos/sshd: detect duplicate config keys
2023-05-25 00:01:03 +02:00
midchildan
c3346f87c4
mirakurun: use node 18
...
Relates to #229910 .
2023-05-25 03:44:13 +09:00
Maximilian Bosch
40dcc3375c
Merge pull request #232837 from emilylange/nixos/synapse
...
nixos/synapse: allow omitting `trusted_key_servers[].verify_keys`
2023-05-24 16:28:03 +02:00
Tomas Kala
37c95bc868
nixos/self-deploy: set after to requires, type to
...
... oneshot, remove wantedBy
2023-05-24 14:05:17 +02:00
Ryan Lahfa
078d3ebcaa
Merge pull request #232235 from cyberus-technology/outline-0.69.2
...
outline: 0.68.1 -> 0.69.2
2023-05-23 15:14:18 +02:00
Robert Hensing
983bf78c16
Merge pull request #233397 from Kranzes/hci-module
...
nixos/hercules-ci-agent: sync module with upstream
2023-05-23 14:17:28 +02:00
Alexander Sieg
74bc42615c
outline: 0.68.1 -> 0.69.2
2023-05-23 10:44:02 +02:00
Maximilian Bosch
c0bbecef87
Merge pull request #232276 from LeSuisse/broken-php80-packages
...
grocy, limesurvey: mark as broken due to lack of PHP 8.1 compatibility
2023-05-23 07:19:17 +02:00
Sandro
493c6d8505
Merge pull request #233053 from midchildan/chore/epgstation/node18
...
epgstation: use node18 + other fixes
2023-05-23 01:48:26 +02:00
0x4A6F
afad0c152b
Merge pull request #214428 from mweinelt/frigate-init
...
frigate: init at 0.12.0
2023-05-22 18:29:37 +02:00
Ryan Lahfa
2e1e1f8765
Merge pull request #231502 from SuperSandro2000/portunus-openldap
...
nixos/portunus: use openldap compiled with libxcrypt-legacy
2023-05-22 18:20:52 +02:00
Naïm Favier
7b28ea6783
Merge pull request #233377 from ncfavier/revert-226088
...
Revert "nixos/syncthing: use rfc42 style settings"
2023-05-22 16:35:04 +02:00
Martin Weinelt
f11d33afb7
nixos/frigate: init
2023-05-22 16:29:54 +02:00
Martin Weinelt
958fc81472
Merge pull request #216786 from mweinelt/go2rtc
...
go2rtc: init at 1.5.0
2023-05-22 16:00:54 +02:00
Ilan Joselevich
ebafd551d7
nixos/hercules-ci-agent: sync module with upstream
2023-05-22 15:05:16 +03:00
Naïm Favier
d5e090d2d8
Revert "nixos/syncthing: use rfc42 style settings"
...
This reverts commit 32866f8d58
.
This reverts commit 40a2df0fb0
.
This reverts commit 4762932601
.
2023-05-22 10:29:52 +02:00
Ryan Lahfa
0e662e669a
Merge pull request #227642 from Flakebi/powerdns-admin2
...
powerdns-admin: 0.3.0 -> 0.4.1
2023-05-22 09:30:24 +02:00
Martin Weinelt
eae2018b54
nixos/go2rtc: init
2023-05-22 03:48:47 +02:00
Flakebi
1a13b4c0f9
powerdns-admin: 0.3.0 -> 0.4.1
...
- Fix with flask-migrate 4+
- Update to 0.4.1
- Improve the test to check that using the database works
2023-05-22 00:39:58 +02:00
midchildan
94eb60a7d2
nixos/epgstation: add a new option 'ffmpeg'
...
Closes #187120 .
2023-05-22 05:24:19 +09:00
midchildan
059006b84b
nixos/epgstation: add required directories to tmpfiles.d
2023-05-22 05:24:18 +09:00
Aaron Andersen
9889d76032
Merge pull request #232607 from plumelo/feat/redmine-5
...
redmine: 4.2.10 -> 5.0.5
2023-05-21 14:33:01 -04:00