1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-08 19:45:42 +03:00
Commit graph

38106 commits

Author SHA1 Message Date
Luj
427febc454
[Backport release-25.05] readeck: 0.18.2 -> 0.19.2 (#415897) 2025-06-17 14:53:00 +02:00
Maximilian Bosch
7af24ae020 nixos/postgresql: doc review
Co-authored-by: Wolfgang Walther <walther@technowledgy.de>
(cherry picked from commit 2a6405fb15)
2025-06-17 10:30:31 +00:00
Maximilian Bosch
e3fabc9360 nixos/postgresql: fix docs on default package
Closes #416595

(cherry picked from commit e6cc23ba3f)
2025-06-17 10:30:31 +00:00
taku0
df57a86fe9
[Backport release-25.05] firefox-beta-bin, firefox-devedition-bin: remove (#416894) 2025-06-16 13:49:24 +09:00
Aleksana
b3f237655d
[Backport release-25.05] nixos/qtile: fix 'package' option (#416480) 2025-06-15 19:27:11 +08:00
taku0
9c0693aa2e firefox-beta-bin, firefox-devedition-bin: remove
(cherry picked from commit e048bd23c4)
2025-06-15 07:26:13 +00:00
Felix Bargfeldt
af54544dfb
[25.05] nixos/kanidm: merge recursively with extraJsonFile, Fix bind paths (#415078) 2025-06-14 20:07:40 +02:00
Toma
00aa46e274
[release-25.05] nekoray: fix TUN functionality (#416172) 2025-06-13 17:51:57 +02:00
misuzu
00cbf506f0 nixos/qtile: fix 'package' option
(cherry picked from commit d06d1cae5a)
2025-06-13 15:40:45 +00:00
rewine
37acbc4b0a nixos/modules: drop yabar
(cherry picked from commit 8376979439)
2025-06-13 10:36:08 +00:00
aleksana
63bf2a80b5 nixos/nekoray: init module 2025-06-12 23:14:45 +08:00
Adrien Faure
22fe709ac0 nixos/documentation: add option to disable redirects
Related to issue #https://github.com/NixOS/nixpkgs/issues/412451

(cherry picked from commit aeedfab1bf)
2025-06-12 15:29:46 +02:00
linsui
d50977688f nixos/readeck: add back MemoryDenyWriteExecute
SQLite driver is reverted to its CGO version so this can be enabled

(cherry picked from commit 17f95268f3)
2025-06-11 17:02:18 +00:00
Defelo
881a31616e nixos/olivetin: use yq-go to merge config files
(cherry picked from commit f71748184c)
2025-06-08 21:42:06 +00:00
Ilan Joselevich
52831b648c
nixos/kanidm: merge recursively with extraJsonFile
Previously, if you set group memberships in both locations, they will
get replaced by the ones in extraJsonFile, which is unexpected as it
kicks users from the group. Now the state files get merged recursively,
including the arrays.

(cherry picked from commit 3b6b50dfad)
2025-06-08 19:48:37 +02:00
Flakebi
481131b7f4
nixos/kanidm: Fix bind paths
1. We bound the directory of certificates, this lead to forced read-only
   binds of these directories, even if they should have been bound
   read-write for other files in there. Looking at the history, there
   seems to be no compelling reason for this, so switch to binding
   the files directly.
2. `/run/kanidmd` is configured as `RuntimeDirectory` so bound
   automatically and we don’t need to specify it explicitly.

(cherry picked from commit c4f052c08a)
2025-06-08 19:39:21 +02:00
oddlama
7ce5e5aa0f
nixos/kanidm: add option and tests for imperative group management
(cherry picked from commit 5f833b1008)
2025-06-08 18:31:00 +02:00
Peter Lehmann
fce8cd453a nixos/pdns-recursor: reload service on config change
(cherry picked from commit c586196e17)
2025-06-07 21:40:26 +00:00
Katalin Rebhan
2f534ed8ea nixos/users-groups: allow changing default home directory
(cherry picked from commit 6f7d7cf76f)
2025-06-07 18:31:59 +00:00
Rory&
297dbf2ae4 nixos/draupnir: init
Co-authored-by: emilylange <git@emilylange.de>
Co-authored-by: Martin Weinelt <hexa@darmstadt.ccc.de>
Co-authored-by: teutat3s <10206665+teutat3s@users.noreply.github.com>

(cherry picked from commit 4b153aad5d)
2025-06-06 21:07:19 +02:00
Jared Baur
d6822a8edf nixos/networkd: update valid KeepConfiguration values
These changed with the release of systemd v257 from "dhcp*" to
"dynamic*".

(cherry picked from commit d8f9c63512)
2025-06-05 23:18:28 +00:00
Maximilian Bosch
4579a816f4 nixos/nginx: fix type of mapHashBucketSize
While the default is indeed 32/64/128, the option accepts any `size`[1]
including values >128, as observed in a customer project.

[1] https://nginx.org/en/docs/http/ngx_http_map_module.html

(cherry picked from commit 4a2a4193f9)
2025-06-05 14:12:30 +00:00
Luj
f10e84cf9c
[Backport release-25.05] nixos/clevis: fix clevis in scripted initrd (#413635) 2025-06-04 15:27:27 +03:00
Pol Dellaiera
0eef838fb4
Revert "[Backport release-25.05] nixos/postfix: add slow domain" 2025-06-04 08:16:14 +02:00
Julien Malka
a776cc522e nixos/clevis: fix clevis in scripted initrd
Fixes #389750

(cherry picked from commit 9655143028)
2025-06-03 16:00:46 +00:00
Jörg Thalheim
7c0f154132 systemd-boot: improve error message if no previous systemd boot is found.
(cherry picked from commit b6c1663986)
2025-06-03 15:44:47 +00:00
eV
731f374fc2 nixos/wyoming-satellite: fix override to use dependencies
(cherry picked from commit 7ca9f21361)
2025-06-02 18:27:49 +00:00
eljamm
19ed46dc3c nixos/libeufin: update BASE_URL
which is now required to have a valid protocol.

(cherry picked from commit e04f8bb993)
2025-06-02 11:14:31 +02:00
eljamm
1088ff7609 nixos/taler: add exchangekeyupdate service
whose role is to sync Taler exchanges' information with the merchant.

(cherry picked from commit 276fca3265)
2025-06-02 11:14:31 +02:00
eljamm
3a842aa828 nixos/taler: update exchange settings
adding new and removing deprecated ones.

(cherry picked from commit 58fca01255)
2025-06-02 11:14:31 +02:00
eljamm
9afa3afbb4 nixos/taler: use the same dynamicUser for services
which makes managing the database much simpler.

(cherry picked from commit 85b6430fac)
2025-06-02 11:14:31 +02:00
eljamm
5735c3c3b4 nixos/taler: explicitly specify configFile
else the executables fail to work.

(cherry picked from commit 5db5bd097c)
2025-06-02 11:14:31 +02:00
Peder Bergebakken Sundt
affe59411e
[Backport release-25.05] nixos/stash: fix mutableSettings logic (#412800) 2025-06-02 01:06:49 +02:00
Peder Bergebakken Sundt
c209086813
[Backport release-25.05] nixos/stash: fix empty immutable plugins (#412802) 2025-06-02 00:53:53 +02:00
Diogo Correia
148a482687
nixos/stalwart-mail: fix incorrect config for webadmin and spam-filter
Stalwart 0.11.0 changed the `config.resource.spam-filter` and
`config.resource.webadmin` keys to be `spam-filter.resource` and
`webadmin.resource` respectively. The NixOS has been updated
accordingly, but unfortunately it has mistakenly used
`config.spam-filter.resource` and `config.webadmin.resource`, which are
incorrect and do not do anything.

This commit changes the default configuration to use the correct keys.

Note that due to infinite recursion, the `optionalAttrs` has been
replaced with `mkIf`.

Additionally, some tests were added to catch this regression in the
future.

Fixes #411351

(cherry picked from commit b7ab1fa981)
2025-06-01 17:23:27 +01:00
alyaeanyx
3f72d383d1 maintainers: rename alyaeanyx -> pentane
(cherry picked from commit bdd58823ab)
2025-06-01 10:14:38 +00:00
Wolfgang Walther
0a39ecd8ca
[Backport release-25.05] nixos/glpi-agent: add hardening (#412373) 2025-06-01 08:55:16 +00:00
Wolfgang Walther
6df5cbe24b
[Backport release-25.05] Google Authenticator 2FA support over XRDP (#411826) 2025-06-01 08:51:29 +00:00
Wolfgang Walther
fad373f5c8
[Backport release-25.05] adguardhome: Build from source (#411348) 2025-06-01 08:20:52 +00:00
Wolfgang Walther
9d684e717b
[Backport release-25.05] virtualisation/docker: fix nvidia container wrapper (#411345) 2025-06-01 08:19:00 +00:00
renesat
16c1825c74 nixos/stash: fix empty immutable plugins
(cherry picked from commit cb4459412a)
2025-06-01 01:46:59 +00:00
DoctorDalek1963
1c2dbee288 nixos/stash: fix mutableSettings logic
Fixes services.stash.mutableSettings so that it makes sense. The logic
was previously backwards and the settings would be overriden if
mutableSettings was true.

(cherry picked from commit 7dcad49a30)
2025-06-01 01:39:38 +00:00
liberodark
71c589f8bb nixos/glpi-agent: add hardening
(cherry picked from commit e673eca2be)
2025-05-30 15:10:17 +00:00
liberodark
ffa82b9ad4 oxidized: fix symlink
(cherry picked from commit 99bdbcbd01)
2025-05-30 11:12:11 +00:00
ferres
5ea9b9f743 nixos/zeronsd: fix acl permissions
(cherry picked from commit 41f1eadb73)
2025-05-30 11:23:25 +05:30
Antonio
f0a47fd2a3 nixos/pam: add Google Authenticator 2FA support over XRDP
(cherry picked from commit 8331187976)
2025-05-29 18:58:46 +02:00
Morgan Jones
2870d0deb6 nixos/kubernetes: use util-linux.withPatches
(cherry picked from commit e14de85830)
2025-05-29 05:43:28 +00:00
Marc Fontaine
7c65985b2c nixos/postgrest: fix typo in name of configuration options (#411197)
The config-file key is 'server-unix-socket-mode', not 'service-unix-socket-mode'.

(cherry picked from commit b134f3148f)
2025-05-28 14:43:13 +00:00
Sandro Jäckel
c44d6d705d nixos/mediagoblin: fix initial media reprocessing with gmg
Running `mediagoblin-gmg reprocess initial` before would fail with
missing GST_PLUGIN_PATH and tools in PATH.

(cherry picked from commit 81d2a488e6)
2025-05-28 14:15:09 +00:00
Sandro Jäckel
b7444e5d11 nixos/mediagoblin: fix gmg argument parsing
Before the argument to mediagoblin-gmg would be passed to the actual command
and the rest to sh which is obviously nonsense.

(cherry picked from commit dd63ca898e)
2025-05-28 14:15:09 +00:00