Commit graph

49502 commits

Author SHA1 Message Date
Robert Hensing
f37ad1a90b
nixos: add simple vm-variant test (#391021) 2025-03-20 12:28:00 +00:00
n
d6b565f277
nixos/yabar: update package option description 2025-03-20 14:39:01 +05:30
K900
b64ec1944e
nixos/fonts: ship fontconfig caches even for cross-compiled hosts (#391305) 2025-03-20 09:06:38 +03:00
Jeremy Fleischman
9c02a1e422
services/cloudflare-dyndns: require that apiTokenFile be an api token
Previously, this option was supposed to be a file of the form
`CLOUDFLARE_API_TOKEN=...`, which has a few problems:

- That's not an api token. It's an env file fit for passing to systemd's
  `EnvironmentFile` option. The user could typo the variable name, or
  intentionally/unintentionally include unrelated environment variables.
- It's not how secret files usually work in NixOS. Secret files are
  usually just the secret, and don't leak details about how the secret
  is passed to the service.
- This increases friction for people switching between cloudflare dyndns
  services, such as `services.cloudflare-dyndns` and
  `services.cfdyndns`, which both have a `apiToken` option, but (before
  this change) with different semantics.
2025-03-19 18:19:29 -05:00
Felix Bühler
30358ab7a7
formats.lua: init; types.luaInline: init (#390120) 2025-03-19 23:18:05 +01:00
Matt Sturgeon
2611d5bd70
formats.lua: init
Add a lua format, based on `lib.generators.toLua`.
2025-03-19 21:18:49 +00:00
Will Fancher
ecbf53f525
nixos/systemd: conditionally leave out some upstream units (#374214) 2025-03-19 16:58:14 -04:00
Will Fancher
b15e9e7d3d
nixos/initrd: add extraFirmwarePaths option (#391166) 2025-03-19 16:51:26 -04:00
Sandro
ddef00d3f0
nixos/zipline: improve systemd hardening (#387119) 2025-03-19 19:01:37 +01:00
Sandro
1289c91409
nixos/echoip: improve systemd hardening (#387466) 2025-03-19 19:00:27 +01:00
Sandro
86f44b004d
nixos/nixos-containers: user options take precedence over module ones (#388409) 2025-03-19 18:59:56 +01:00
Adam C. Stephens
476618066b
nixos/firezone: init module and packages (#374647) 2025-03-19 13:50:47 -04:00
Alexander Foremny
5c28518c4b nixos/modules/image: fix error message
When a module is not found, it did not show the intended error message
`The module ... does not exist`, but rather `path ... does not exist`.
2025-03-19 17:29:28 +00:00
Defelo
ef19fcf725
nixos/zipline: improve systemd hardening 2025-03-19 18:16:01 +01:00
Defelo
0deb1b285f
nixos/tests/zipline: add interactive config 2025-03-19 18:16:00 +01:00
Silvan Mosberger
4f6e508a09
nixos/users-groups: Enforce ASCII usernames and fix repeated doubling of activation script runtime (#385904) 2025-03-19 17:33:49 +01:00
Jared Baur
dad880d6bf
nixos/systemd: conditionally leave out some upstream units
Some upstream systemd units are conditionally installed into the systemd
output, so we must make sure the feature that enables their installation
is enabled on our side prior to trying to use them.
2025-03-19 08:14:48 -07:00
Matthias Beyer
2a725d40de
nixos/mautrix-telegram: switch to using static user for automated registration of appservice (#389679) 2025-03-19 15:38:57 +01:00
Gaétan Lepage
871ff1d88e
grocy: 4.3.0 -> 4.4.2 (#387015) 2025-03-19 14:00:50 +01:00
thefeiter
f375a86fc1 nixos/mautrix-telegram: switch to using static user for automated registration of appservice
Like for matrix-whatsapp use a static user so that the registration file can be automatically shared with synapse.
This also includes the registerToSynapse config option.
2025-03-19 13:59:23 +01:00
Yt
a72f22d0d8
Prefect init module (#386895) 2025-03-19 08:52:19 -04:00
WilliButz
41c7225648
podman: use serviceConfig.ExecStart instead of script (#390731) 2025-03-19 12:06:33 +01:00
WilliButz
6ba10ff228
docker: use serviceConfig.ExecStart instead of script (#390681) 2025-03-19 12:06:26 +01:00
WilliButz
4edfeafac4
initrd: implement panic-on-fail interpreterless (#390698) 2025-03-19 11:37:48 +01:00
Benedikt Ritter
ef2bde5a13
docker: use serviceConfig.ExecStart instead of script 2025-03-19 11:12:59 +01:00
Benedikt Ritter
ccdfb91b48
podman: use serviceConfig.ExecStart instead of script 2025-03-19 11:08:18 +01:00
Benedikt Ritter
deb045e057
initrd: implement panic-on-fail interpreterless 2025-03-19 10:23:46 +01:00
Neyts Zupan
19683d2d61 paretosecurity: 0.0.86 -> 0.0.87 2025-03-19 09:10:27 +00:00
Colin
9435a2b422 nixos/fonts: ship fontconfig caches even for cross-compiled hosts 2025-03-19 07:53:24 +00:00
Jared Baur
ea116654aa
nixos/initrd: add extraFirmwarePaths option
(cherry picked from commit 488d4316b9e1510c9b4a2eeb8d7e2cc66839a1fc)
2025-03-18 20:39:52 -07:00
Shahar "Dawn" Or
48a407177a nixos: add simple vm-variant test 2025-03-18 20:32:43 +00:00
Will Fancher
720efefbc0
Revert "nixos/doc: recommend usage of --use-remote-sudo when switching configurations" (#390935) 2025-03-18 15:54:33 -04:00
Dawid Ciężarkiewicz
07a3793105 nixos/syncthing: make it easier to debug incorrect IDs
In case of an incorrect ID, the behavior of this script
is quite tricky. See:

https://github.com/NixOS/nixpkgs/issues/326704#issuecomment-2730819822

for more info.
2025-03-18 19:10:10 +01:00
Dawid Ciężarkiewicz
a8b8f8f8c7 nixos/syncthing: missing --fail to curl 2025-03-18 19:10:10 +01:00
Nicolas Mémeint
7407020674 authelia: 4.38.19 -> 4.39.1 2025-03-18 18:23:43 +01:00
Preston Pan
437ae0fb4e
nixos/ircd-hybrid: fix bug in which fails to substitute iproute2 (#390833) 2025-03-18 17:46:55 +01:00
Sandro
326cd70480
nixos/movim: improve systemd dependency directives (#388750) 2025-03-18 17:42:52 +01:00
Fernando Rodrigues
c7f394d214
Revert "nixos/doc: recommend usage of --use-remote-sudo when switching configurations" 2025-03-18 11:34:07 +00:00
Neyts Zupan
75773b77be paretosecurity: init at 0.0.86, nixos/paretosecurity: init 2025-03-18 11:09:14 +00:00
K900
dd102fa28d
nixos-generate-config: Fix unspecified root (#390892) 2025-03-18 12:02:33 +03:00
Will Fancher
b82dbaf3ab nixos-generate-config: Fix unspecified root 2025-03-18 04:56:51 -04:00
Martin Weinelt
2855030659
nixos/release-combined: migrate to graphical ISO in tested set 2025-03-18 04:05:53 +01:00
Will Fancher
317736b155
nixos/iso-image: Consolidate ISOs Using Specialisations. (#355893) 2025-03-17 21:22:38 -04:00
programmerlexi
1a830fe9d9 nixos/limine: fix the install script 2025-03-18 01:06:55 +05:30
Rane
2cc1d33489
nixos/limine: cast partition index to string (#390732) 2025-03-18 01:01:15 +05:30
oddlama
6c888f4911
nixos/firezone: init modules 2025-03-17 20:21:00 +01:00
Arne Keller
65d532c9d9
nixos/jackett: fix hardening for custom dataDir (#390609) 2025-03-17 17:19:29 +01:00
John Ericson
9df17ad165
nixos/hydra: fix race condition in hydra-compress-logs (#390685) 2025-03-17 11:38:32 -04:00
Sandro
b96c9e3a68
gokapi: init at 1.9.6 (#372911) 2025-03-17 16:12:38 +01:00
Sandro Jäckel
588f41bef0
nixos/hydra: fix race condition in hydra-compress-logs
Source https://github.com/NixOS/hydra/pull/1450
2025-03-17 15:41:00 +01:00