Commit graph

23591 commits

Author SHA1 Message Date
Florian Klink
3dbcbd1bcd
Merge pull request #140278 from ius/systemd-boot
systemd-boot: add 'graceful' configuration option
2021-10-12 12:51:20 +02:00
Jan Tojnar
e859225ee5
Merge pull request #139144 from NixOS/gnome-41
GNOME: 40 → 41
2021-10-11 22:59:01 +02:00
Michele Guerini Rocco
02fc8c2367
Merge pull request #140723 from rnhmjoj/pr-fontdir-headless
nixos/fontdir: always link the font directory
2021-10-11 19:42:19 +02:00
Maciej Krüger
e4ef597edf
Merge pull request #141255 from mkg20001/lfs 2021-10-11 18:52:03 +02:00
Maciej Krüger
c84b55bbe6
nixos/git: add lfs option to allow enabling and installing lfs easily
Co-authored-by: figsoda <figsoda@pm.me>
2021-10-11 17:56:33 +02:00
Joerie de Gram
7bd84b6685 systemd-boot: add 'graceful' configuration option
On some systems bootctl cannot write the `LoaderSystemToken` EFI variable
during installation, which results in a failure to install the boot
loader. Upstream provides a flag (--graceful) to ignore such write failures -
this change exposes it as a configuration option.

As the exact semantics of this option appear to be somewhat volatile it
should be used only if systemd-boot otherwise fails to install.
2021-10-11 15:14:33 +02:00
Bobby Rong
dd596307b7
Merge pull request #140820 from VergeDX/kippo-remove
kippo: cleanup the corresponding broken module.
2021-10-11 17:19:11 +08:00
Martin Weinelt
f358794824
Merge pull request #136039 from jdreaver/prowlarr 2021-10-10 23:30:57 +02:00
David Reaver
11ce481845 nixos/tests/prowlarr: init 2021-10-10 14:05:33 -07:00
David Reaver
3d79c9250a nixos/prowlarr: init 2021-10-10 14:05:33 -07:00
Michele Guerini Rocco
727fa5a9b1
Merge pull request #141194 from legendofmiracles/wol
Adds a notice that the service.wakeonlan module was moved
2021-10-10 21:24:15 +02:00
legendofmiracles
9aae71379d
nixos/wakeonlan: add note to rename.nix 2021-10-10 10:50:16 -06:00
Luflosi
7938ea67a7
nixos/doc/md-to-db.sh: handle path to nixpkgs with spaces
Without this change, the script will fail if the path to nixpkgs contains a space.
2021-10-10 11:57:51 +02:00
Jan Tojnar
b2ef3e68e7 nixosTests.gnome: fix
GNOME Shell 41 made the Eval command we use for NixOS tests internal
so in order to be still able to use it, we need to run the shell
in an unsafe mode.

https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/1970
https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/1983

Hopefully, the test driver will eventually get better so that
we will not need hacks like this forever.
2021-10-09 21:35:57 +02:00
Jan Tojnar
80ea989ac9 xdg-desktop-portal-gtk: 1.8.0 → 1.10.0
https://github.com/flatpak/xdg-desktop-portal-gtk/releases/tag/1.10.0
2021-10-09 21:35:57 +02:00
Jan Tojnar
ed3b4aa889 nixos/release-notes: Mention GNOME 41 2021-10-09 21:35:56 +02:00
Jan Tojnar
d106b07997 nixos/gnome: use GNOME xdg portal 2021-10-09 21:35:56 +02:00
Maximilian Bosch
80404a23c9
Merge pull request #140775 from Ma27/nextcloud-docs-and-secrets
nixos/nextcloud: manual improvements & pass secrets via the environment to `nextcloud-occ`
2021-10-09 20:01:15 +02:00
Maximilian Bosch
cbfe4a42f6
Merge pull request #140979 from Ma27/matrix-workers
nixos/matrix-synapse: minor improvements to implement worker-support
2021-10-09 15:24:41 +02:00
Michele Guerini Rocco
46b2a2594a
Merge pull request #140779 from legendofmiracles/wol
nixos/wakeonlan: switch to systemd.link and to nixos/networking
2021-10-09 10:34:26 +02:00
Maximilian Bosch
f57bed8832
nixos/nextcloud: drop adminpass/dbpass options entirely 2021-10-08 18:30:57 +02:00
ajs124
ae53e57a7a
Merge pull request #133141 from helsinki-systems/feat/jitsi-meet-websocket
nixos/jitsi-meet: add support for xmpp-websocket
2021-10-08 16:51:00 +02:00
Maximilian Bosch
b0ab15b0a1
nixos/matrix-synapse: expose rendered config file as readOnly option 2021-10-08 14:51:28 +02:00
Emil Karlson
d77c75a98e nixos/nix-daemon: Clarify daemonNiceLevel
The option doesn not currently do what some people expect,
clarify the limitations in documentation.
2021-10-08 13:59:35 +03:00
Robert Hensing
4bed9d16cc
Merge pull request #139325 from illdefined/nix-daemon-nice-level
modules/nix-daemon: Explain nice level limitations
2021-10-08 12:12:36 +02:00
Vanilla
75ec332e6a
kippo: cleanup the corresponding broken module. 2021-10-08 14:10:49 +08:00
Bobby Rong
6a1c868a9d
Merge pull request #133700 from poscat0x04/v2ray-add-package-option
nixos/v2ray: add an option for specifying v2ray package used in the systemd service
2021-10-08 12:38:15 +08:00
Poscat
e4dd32f67e
nixos/v2ray: add an option for specifying v2ray package used in the systemd service 2021-10-08 12:02:10 +08:00
Lassulus
36187264df
Merge pull request #140799 from helsinki-systems/feat/varnish-optional-configcheck
nixos/varnish: add enableConfigCheck
2021-10-08 00:12:11 +02:00
legendofmiracles
31f04fec3c
nixos/wakeonlan: remove 2021-10-07 14:15:26 -06:00
legendofmiracles
bb3ea37eee
nixos/networking: add the wakeonlan option 2021-10-07 14:15:17 -06:00
Eelco Dolstra
16a55282be
Merge pull request #140865 from edolstra/bump-fallback-paths
nix-fallback-paths.nix: Update to 2.3.16
2021-10-07 18:22:35 +02:00
Kim Lindberger
4e97bedf93
Merge pull request #112823 from deviant/nixos-boot-paths
nixos/boot: add /var/lib/nixos to pathsNeededForBoot
2021-10-07 17:38:54 +02:00
Eelco Dolstra
a47875938d
nix-fallback-paths.nix: Update to 2.3.16 2021-10-07 17:33:53 +02:00
Jacek Galowicz
d68f1e43df
Merge pull request #126713 from blaggacao/nixos-test-ref/05-class-ify-test-driver
nixos test ref/05 class ify test driver
2021-10-07 14:37:01 +02:00
Timo Kaufmann
043bc8a984
Merge pull request #139502 from Vodurden/nixos-unstable
Support virtual Nintendo Switch Pro controllers in joycond
2021-10-07 13:54:30 +02:00
Kevin Cox
709b594db4
Merge pull request #137438 from kevincox/mautrix-facebook-module
nixos.mautrix-facebook: init module
2021-10-07 06:36:52 -04:00
Alexandre Iooss
9fea6d4c85 nixos/prometheus: systemd unit hardening of exporters 2021-10-07 10:19:55 +02:00
Michele Guerini Rocco
63d30d18a6
Merge pull request #140753 from Ma27/fix-qemu-net-opts-in-testdriver
nixos/qemu-vm: fix running VM with `QEMU_NET_OPTS`
2021-10-07 08:32:36 +02:00
Maximilian Bosch
f700a92d5c
nixos/qemu-vm: quote QEMU_NET_OPTS
Co-authored-by: Michele Guerini Rocco <rnhmjoj@users.noreply.github.com>
2021-10-06 23:12:53 +02:00
John Ericson
cc3f2432d0 nixos/nix-daemon: Add enable option
Don't worry, it's is true by default. But I think this is important to
have because NixOS indeed shouldn't need Nix at run time when the
installation is not being modified, and now we can verify that.

NixOS images that cannot "self-modify" are a legitamate
use-case that this supports more minimally. One should be able to e.g. do a
sshfs mount and use `nixos-install` to modify them remotely, or just
discard them and build fresh ones if they are run VMs or something.

The next step would be to make generations optional, allowing just
baking `/etc` and friends rather than using activation scripts. But
that's more involved so I'm leaving it out.
2021-10-06 16:43:48 -04:00
Maximilian Bosch
60e731d1ce
nixos/qemu-vm: fix running VM with QEMU_NET_OPTS
I realized quite recently that running a test VM - as documented in the
manual - like

    QEMU_NET_OPTS='hostfwd=tcp::8080-:80'  ./result/bin/nixos-run-vms

doesn't work anymore on `master`. After bisecting I realized that the
introduction of a forward-port option[1] is the problem since it adds a
trailing comma even if no forwarding options are specified via
`virtualisation.forwardPorts`. In that case, the networking options
would look like `-netdev user,id=user.0,,hostfwd=tcp::8080-:80' which
confused QEMU and thus the VM refused to start.

Now, the trailing comma is only added if additional port forwards are
specified declaratively.

[1] b8bfc81d5b
2021-10-06 22:40:30 +02:00
ajs124
e3ac5e1502 nixos/varnish: add enableConfigCheck 2021-10-06 22:05:46 +02:00
Robert Scott
1d5953184a
Merge pull request #139651 from pborzenkov/calibre-web-0.6.13
calibre-web: 0.6.12 -> 0.6.13
2021-10-06 20:36:08 +01:00
Maximilian Bosch
9f37d6aee0
nixos/nextcloud: put secrets into the environment of nextcloud-setup.service
The `$(</path/to/file)`-expansion appears verbatim in the cmdline of
`nextcloud-occ` which means that an unprivileged user could find
sensitive values (i.e. admin password & database password) by monitoring
`/proc/<pid>/cmdline`.

Now, these values don't appear in a command line anymore, but will be
passed as environment variables to `nextcloud-occ`.
2021-10-06 18:18:18 +02:00
Maximilian Bosch
fb40526961
nixos/nextcloud: minor manual improvements
* Linkify documentation about objectstore-feature rather than only
  mentioning it.
* Use `<literal>` where it makes sense.
* Remove unnecessary `Whether to load` from `enableImagemagick` because
  `mkEnableOption` already prepends `Whether to enable` to the given
  description.
2021-10-06 17:33:31 +02:00
Bill Ewanick
cc3b147ed1 nixos/lemmy: init
Co-authored-by: Raphael Megzari <raphael@megzari.com>
2021-10-06 21:02:51 +09:00
Michele Guerini Rocco
66b6bd0072
Merge pull request #139765 from eyJhb/bitlbee-user-group
nixos/bitlbee: added bitlbee to bitlbee group
2021-10-06 08:57:33 +02:00
rnhmjoj
a27dc95e72
nixos/fontdir: always link the font directory
This fixes the fonts directory availability when not running an xserver,
such as headless machines.
2021-10-06 08:52:39 +02:00
Michele Guerini Rocco
e99b3f242c
Merge pull request #140359 from rnhmjoj/setgid-nobody
nixos: make setgid wrappers root-owned
2021-10-06 08:36:35 +02:00