Yuriy Taraday
28ba9e2c27
nixos/acme: Set /var/lib/acme permissions to 755
...
It was being created with the default home permissions of 700, and then
set to 755 at runtime by something either some script or systemd as
part of service startup.
It worked fine without sysusers, but when it's enabed with:
systemd.sysusers.enable = true;
systemd-tmpfiles is resetting permissions on each activation, which
breaks, for example, nginx reload, because it cannot load certificates
anymore, because it doesn't have any access to `/var/lib/acme`.
Fix this by setting `homeMode = "755";` explicitely so that it's set to
the final value from the beginning.
(cherry picked from commit 64a6e8292a
2024-11-27 13:52:09 +00:00
kirillrdy
55d0916a37
[Backport release-24.11] freecad: make customizable ( #358920 )
2024-11-26 06:54:46 +11:00
Emily
146aa39321
[backport 24.11] treewide: remove deprecations up until 24.11 ( #358798 )
2024-11-25 17:31:46 +00:00
Felix Buehler
7388f02319
nixos/manticore: fix mkKeyValueDefault
...
(cherry picked from commit 7882454654
2024-11-25 17:20:52 +00:00
David McFarland
d0fb02003a
dotnet-sdk/runtime/aspnetcore: 6.0 -> 8.0
...
(cherry picked from commit bfaca46529
2024-11-25 16:12:05 +00:00
David McFarland
0baba70113
dotnet: move dotnet_root to $out/share/dotnet
...
(cherry picked from commit 42d69ab59a
2024-11-25 16:12:04 +00:00
David McFarland
987ece3e2b
dotnet: split setup hooks into wrapper for runtime/sdk
...
(cherry picked from commit ddd08e404f
2024-11-25 16:11:58 +00:00
Aleksana
141520d7f3
[Backport release-24.11] torq: drop ( #358770 )
2024-11-25 22:46:48 +08:00
Yury Shvedov
332d86c328
doc: notice freecad customization an changelog
...
Change-Id: If019f12696db1c1661580e51b1920e637c52efec
(cherry picked from commit a7ab6aa51a
2024-11-25 08:34:44 +00:00
Marcin Serwin
11019d736c
libresprite: 1.0 -> 1.1
...
(cherry picked from commit 6fa830fc0d
2024-11-24 23:00:53 +00:00
Gaetan Lepage
b80abb8973
nixos/gdm: automatically enable services.displayManager
...
(cherry picked from commit 0a785f6f42
2024-11-24 22:17:19 +00:00
Wolfgang Walther
5fc8e07918
writeReferencesToFile: remove
...
Had been deprecated and scheduled for removal in 24.11.
2024-11-24 22:42:44 +01:00
Wolfgang Walther
8295035fa8
nixos/archisteamfarm: remove dataDir fallback
...
Scheduled for 24.11.
Added in #272147 .
(cherry picked from commit 4255d7a658
2024-11-24 20:58:28 +01:00
Wolfgang Walther
37337f8fad
nixos/pipewire: remove version reference from warning message
...
This is also true in 24.11 and up, so no need to state the version
number explicitly.
(cherry picked from commit e1e2193dff
2024-11-24 20:58:27 +01:00
Wolfgang Walther
e3d522e540
nixos/screen: remove assertion
...
Scheduled for 24.11.
(cherry picked from commit 8bdfc5eca2
2024-11-24 20:58:27 +01:00
Wolfgang Walther
d239c07beb
nixos/garage: remove assertions
...
Those were scheduled to be removed in 24.11, so let's do that.
Added in #311893 .
(cherry picked from commit 9966353ee7
2024-11-24 20:58:27 +01:00
Wolfgang Walther
496a6b9d47
nixos/zigbee2mqtt: remove renamed-option warning
...
This was planned for 21.11, so let's follow through.
(cherry picked from commit 749a6fe1ad
2024-11-24 20:58:27 +01:00
Wolfgang Walther
aec036a6cd
nixos/lib/make-options-doc: remove optionsDocBook
...
Follow through on #296384 .
(cherry picked from commit de69ff528b
2024-11-24 20:58:27 +01:00
Wolfgang Walther
789e047230
lib/options: remove mdDoc
...
Following through on message itself.
(cherry picked from commit 73df63f8ef
2024-11-24 20:58:26 +01:00
Andreas Zweili
c4dc3a941d
torq: drop
...
(cherry picked from commit ce7cc9146e
2024-11-24 18:18:27 +01:00
Felix Buehler
6f22e5e97b
nixos/haka: fix assert
...
(cherry picked from commit 5c99958613
2024-11-24 15:31:14 +00:00
Weijia Wang
267d58a0e2
[Backport release-24.11] nixos/incus: add incus-user service and socket ( #356398 )
2024-11-24 11:28:39 +01:00
Weijia Wang
2fe68b83ee
[Backport release-24.11] wordpress: 6.6.2 -> 6.7 ( #358428 )
2024-11-24 11:03:50 +01:00
John Titor
cc4d8f6c3e
nixos/scx: cleanup
...
- use utils.escapeSystemdExecArgs in systemd service
- remove StandardError="journal" as it's already default
(cherry picked from commit fc8f58848e
2024-11-24 08:10:57 +00:00
Adam Stephens
bcbd89f9c8
incus: add tpm to container test
...
(cherry picked from commit ed24c80ef6
2024-11-23 22:47:13 +00:00
Adam Stephens
727cd0502b
incus: fix tpm support
...
(cherry picked from commit 0e12722d4b
2024-11-23 22:47:13 +00:00
Nico Felbinger
fa192bdc12
nixos/suricata: add module to modules-list
...
(cherry picked from commit f2de541dfd
2024-11-23 21:32:44 +01:00
Nico Felbinger
5f82bf3982
nixos/suricata: add description fields for configuration
...
(cherry picked from commit 9e608d46a9
2024-11-23 21:32:44 +01:00
Felix Buehler
679f9fdf7c
nixos/mackerel-agent: fix pkgs
...
(cherry picked from commit ae94b60d54
2024-11-23 16:53:35 +00:00
Paul Grandperrin
0f2160901b
nixos-containers: fix enableTun option
...
When using private users, `mknod /dev/net/tun` is run from the guest and therefor needs the `m` modifier.
(cherry picked from commit 853d34898d
2024-11-23 16:19:22 +00:00
Sandro
b390d3c43b
nixos/virtualisation: fix rendering of example in diskSize
...
(cherry picked from commit 12afb73784
2024-11-23 16:07:26 +00:00
Nick Cao
fc139d6c20
[Backport release-24.11] nixos/alertmanager: add additional docs about envsubst ( #357901 )
2024-11-23 09:54:02 -05:00
Nick Cao
0aabe80743
[Backport release-24.11] nixos/postgresql: update docs with extraPlugins to extensions rename ( #358162 )
2024-11-23 09:28:45 -05:00
Viorel-Cătălin Răpițeanu
578009c174
wordpressPackages: package and theme updates
...
1. Make twentytwentyfive theme default
2. Update all packages
(cherry picked from commit d1da56f629
2024-11-23 13:20:20 +00:00
Viorel-Cătălin Răpițeanu
32ad7cbcec
wordpress: 6.6.2 -> 6.7
...
Update the package to the latest version.
(cherry picked from commit 5705ab5bc5
2024-11-23 13:20:20 +00:00
LorenzBischof
b86fd8cca1
nixos/etesync-dav: update default apiurl
...
(cherry picked from commit c5d7865d83
2024-11-23 12:11:36 +00:00
Kerstin
38f6e197be
[Backport release-24.11] canaille: init at 0.0.56, add module ( #358353 )
2024-11-23 11:29:33 +01:00
Kerstin
1fe3fc431e
[Backport release-24.11] open-web-calendar: init at 1.41, add module ( #358355 )
2024-11-23 11:29:00 +01:00
Masum Reza
c17b0c8246
[Backport release-24.11] scx: 1.0.5 -> 1.0.6; build all rust subpackages together ( #358340 )
2024-11-23 15:28:37 +05:30
Kerstin Humm
9a5238a2ff
nixos/open-web-calendar: init module
...
(cherry picked from commit 897954b8ae
2024-11-23 09:04:17 +00:00
Kerstin Humm
02e290b42e
nixos/canaille: init module
...
Co-Authored-By: Janik <80165193+Janik-Haag@users.noreply.github.com>
(cherry picked from commit ff2f00d425
2024-11-23 09:03:40 +00:00
Weijia Wang
0c58267737
[Backport release-24.11] handheld-daemon-ui: init at 3.2.3 ( #357308 )
2024-11-23 09:34:55 +01:00
Weijia Wang
3c7e8a947a
[Backport release-24.11] porn-vault: init at 0.30.0-rc.11 ( #357742 )
2024-11-23 09:32:19 +01:00
Weijia Wang
141c635c73
[Backport release-24.11] nixos/meilisearch: fix disabling analytics ( #357999 )
2024-11-23 09:30:44 +01:00
John Titor
0c640e8114
nixos/scx: remove dead reference to scx.rustland
...
(cherry picked from commit 9480c8be07
2024-11-23 07:54:36 +00:00
Masum Reza
36ba4e09ee
[Backport release-24.11] nixos/scx: init module ( #357622 )
2024-11-23 13:21:54 +05:30
Tomodachi94
8b86f74409
vuze: drop
...
No releases since early 2017:
https://en.wikipedia.org/wiki/Vuze#Development_hiatus_and_fork
Vulnerable to CVE-2018-13417
BiglyBT (`biglybt`) is a maintained fork.
(cherry picked from commit 268ae6a302
2024-11-23 04:46:47 +00:00
Jared Baur
d08c1b677f
nixos/activation: Add pre-switch checks
...
Add an option for shell script fragments that are ran before switching
to a new NixOS system configuration (pre installation of bootloader or
system activation). Also add a new subcommand for
switch-to-configuration called "check" that will cause the program to
always exit after checks are ran.
(cherry picked from commit 6e192c4489
2024-11-23 01:33:43 +00:00
Martin Weinelt
8f1c9f2047
nixos/frigate: allow configuring a libva driver
...
In my testing this helped steer VA-API towards the correct card and also
made it show GPU statistics in performance monitoring.
(cherry picked from commit 1c07d92099
2024-11-23 00:05:46 +00:00
Martin Weinelt
18b4fbf0ae
nixos/frigate: allow GPU use for video acceleration
...
The `render` group is required to acces the graphic cards decoding,
encoding and transcoding capabilities.
It is required for using fancy `ffmpeg.hwaccel-args` values, like
`preset-vaapi`.
(cherry picked from commit 7411b85629
2024-11-23 00:05:46 +00:00
