Eric Wolf
7f8b1dd32f
systemd: added groups kvm, render
...
they need to exist according to the README of systemd
2018-08-25 05:18:53 +03:00
xeji
980505dc3b
nixos/libvirtd: add option to run qemu as non-root
...
New option virtualisation.libvirtd.qemuRunAsRoot (default: true).
If false, qemu is run as non-privileged user qemu-libvirtd,
reducing security risk
2018-08-10 13:59:58 +02:00
Thomas Bach
31e11bdd60
cassandra: rewrote service from scratch
...
Adds a replacement for the previously broken
`services.database.cassandra` with tests for a multi-node setup.
2018-08-07 14:48:43 +00:00
Johan Thomsen
7d7c36f8be
nixos/cfssl: init
...
- based on module originally written by @srhb
- complies with available options in cfssl v1.3.2
- uid and gid 299 reserved in ids.nix
- added simple nixos test case
2018-08-03 09:40:32 +02:00
volth
2e979e8ceb
[bot] nixos/*: remove unused arguments in lambdas
2018-07-20 20:56:59 +00:00
Silvan Mosberger
810f91f46d
Merge pull request #43308 from Chiiruno/dev/hydron
...
hydron: init at 2018-07-11
2018-07-18 22:10:11 +02:00
Okina Matara
38f2a3efbf
nixos/hydron: init
2018-07-18 13:16:50 -05:00
Wael M. Nasreddine
fd2448b2e6
aerospike: init at 4.2.0.4
...
Co-authored-by: Volth <volth@webmaster.ms>
2018-07-16 04:21:47 +00:00
Allan Espinosa
0c10b2baa6
nixos/hadoop: add hadoop module (hdfs, yarn)
2018-06-29 23:14:02 -04:00
Okina Matara
14a26f0153
meguca: init at git-2018-05-17
2018-05-26 07:03:49 -05:00
Peter Hoeg
30c3487e04
ids: assing openvpn
2018-05-26 11:11:48 +08:00
Jörg Thalheim
8c3503d6f6
nixos/ids: information when to use static uids/gids
2018-05-20 10:56:55 +01:00
Jaka Hudoklin
3ec4528dcf
Merge pull request #39991 from xeji/remove-fleet
...
fleet, panamax: remove
2018-05-05 08:07:14 +02:00
Uli Baum
c3eefe801a
fleet: remove package, module, test
...
deprecated and unmaintained upstream
2018-05-05 00:28:16 +02:00
Uli Baum
f039bf9abc
panamax: remove packages, module and test
...
was broken and depends on (deprecated) fleet
packages: panamax_api, panamax_ui
2018-05-05 00:27:15 +02:00
Pascal Bach
7f53ee8412
restic-rest-server module: init
2018-05-04 16:55:06 +02:00
Michael Weiss
1b8642dff6
nixos/monetdb: init ( #39812 )
2018-05-01 16:44:12 +02:00
Peter Hoeg
740bafa9a0
Merge pull request #36864 from peterhoeg/f/ddclient
...
nixos ddclient: support multiple domains and run via systemd timer [WIP]
2018-04-19 05:12:29 +00:00
Peter Hoeg
642c8a8d8d
nixos ddclient: support multiple domains and run via systemd timer
...
a) Some providers can update multiple domains - support that.
b) Make "zone" and "script" configurable. Some providers require these.
c) Instead of leaving the ddclient daemon running all the time, use a systemd
timer to kick it off.
d) Don't use a predefined user - run everything via DynamicUser
e) Add documentation
2018-04-15 10:17:46 +08:00
nyanloutre
b3aa9ecdf8
duplicati: create service
2018-04-07 21:23:04 +02:00
Guillaume Maudoux
c948613a65
almir: also remove the corresponding module.
...
The almir package was removed in 30291227f2
at about 2017-08
This module can no more be used without it.
2018-03-25 21:41:19 +01:00
Vladimír Čunát
2069a2a002
Merge #35454 : nixos/pump.io: remove
2018-03-04 10:49:25 +01:00
Vladimír Čunát
a2b8d8fbe2
nixos/pump.io: also comment-out the uid
2018-03-04 10:48:29 +01:00
lejonet
565f22d27a
nixos/ceph: init module ( #35299 )
...
All 5 daemon types can be enabled and configured through the module and the module both creates the ceph.conf required but also creates and enables specific services for each daemon, based on the systemd service files that upstream provides.
2018-03-01 11:47:13 +00:00
Rodney Lorrimar
21dcead5f0
nixos/pump.io: remove
...
This would probably be better maintained in a separate repo as an
external NixOS module which gets imported into user's configuration.
2018-02-27 12:52:51 +00:00
rnhmjoj
5118b86800
nixos/monero: init
2018-02-07 08:04:36 -05:00
Robert Schütz
bacbc48cfe
home-assistant: add NixOS module
2018-01-31 12:30:31 +01:00
Francesco Gazzetta
356eeb0d4f
nixos/mighttpd2: init
2018-01-16 21:04:09 +00:00
Robin Gloster
cfed96ca51
nixos/service.tt-rss: improve pgsql support, do not use static uid/gid
2018-01-05 14:47:54 +01:00
Jaakko Luttinen
13eaae1610
nixos/service.tt-rss: use tt_rss user
...
- Add tt_rss system user.
- Use tt_rss as the user by default.
- Create tt_rss user and group automatically if used.
2018-01-05 14:47:54 +01:00
Jörg Thalheim
f29ecd56c1
Merge pull request #33372 from Mic92/memcache
...
nixos/memcached: make unix sockets usuable
2018-01-04 18:39:48 +01:00
Jörg Thalheim
c9c8a2c5b3
nixos/memcached: make unix sockets usuable
...
before:
- /var/run/memcached is a bad default for a socket path, since its
parent directory must be writeable by memcached.
- Socket directory was not created by the module itself -> this was
left as a burden to the user?
- Having a static uid with a dynamic user name is not very useful.
after:
- Replace services.memcached.socket by a boolean flag. This simplifies
our code, since we do not have to check if the user specifies a
path with a parent directory that should be owned by memcached
(/run/memcached/memcached.sock -> /run/memcached).
- Remove fixed uid/gid allocation. The only file ever owned by the
daemon is the socket that will be recreated on every start.
Therefore user and group ids do not need to be static.
- only create the memcached user, if the user has not specified a
different one. The major use case for changing option is to allow
existing services (such as php-fpm) opening the local unix socket.
If we would unconditionally create a user that option would be
useless.
2018-01-03 12:33:36 +01:00
Jörg Thalheim
453e15ec91
nixos/redis: remove static uid/gid assignment
...
all files are chowned on startup
2018-01-03 11:18:04 +01:00
Robin Gloster
445e3d7390
ghostOne: remove
...
broken and unmaintained
2017-12-29 02:18:35 +01:00
makefu
71767ee3c7
glance: rip
...
part of openstack cleanup
2017-12-15 16:08:10 +01:00
makefu
d3d94992cf
keystone: rip
...
part of openstack cleanup
2017-12-15 16:06:44 +01:00
Thomas Strobel
2128d8ce4e
ixos ids: reserve restya-board
2017-11-22 12:14:24 +01:00
Vaibhav Sagar
eece8755d1
ihaskell: re-enable
2017-11-06 09:58:28 +01:00
Christopher Singley
1a38312dae
plexpy: add user id
2017-11-06 06:15:28 +00:00
Peter Hoeg
279ca5738a
Revert "nixos: kodi user"
...
This reverts commit 1faa5b6b36
.
2017-10-14 14:42:49 +08:00
Peter Hoeg
1faa5b6b36
nixos: kodi user
2017-10-14 14:38:04 +08:00
Peter Hoeg
829730d38f
nixos user: reserve kodi
2017-10-13 10:34:27 +08:00
Peter Hoeg
c640e790d5
pykms: nixos module
2017-10-12 08:51:34 +08:00
Shea Levy
f6858e55c2
Reserve uid/gids for kanboard
2017-10-09 07:44:32 -04:00
Bjørn Forsman
3a58e41e43
nixos/gitolite: use group 'gitolite' instead of 'nogroup'
...
Having files (git repositories) owned by 'nogroup' is a bad idea.
2017-09-23 16:33:52 +02:00
Jörg Thalheim
6f0b538044
nixos/mfi: remove
2017-09-07 10:24:03 +01:00
Peter Hoeg
beec141d84
ddclient: assign group for ddclient
2017-08-13 21:56:48 +08:00
Robin Gloster
79ac09ea06
ripple-rest: remove
...
marked as broken for > 1 yr, development is frozen and author recommends
moving to https://github.com/ripple/ripple-lib
2017-08-12 13:38:32 +02:00
Charles Strahan
c79e0b2ba0
Merge pull request #26907 from volth/vault
...
vault: 0.6.5 -> 0.7.3 with service
2017-07-11 15:02:29 -04:00
Volth
67340baa9b
collectd service: minor refactoring
...
* removed pid-file support, it is needless to run collectd as systemd service
* removed static user id, as all the files reowned on the service start
* added ambient capabilities for ping and smart (hdd health) functions
2017-06-30 00:52:22 +00:00
Volth
4c428b4a6f
vault: run as an unpivileged user
2017-06-27 19:34:12 +00:00
Pascal Bach
aa66c9ad37
minio service: add inital service
...
features:
- change listen port and address
- configure config and data directory
- basic test to check if minio server starts
2017-06-26 04:07:37 +02:00
Kjartan Ovmilk
919b39bb7c
resilio service: replaces btsync service, which is no longer supported upstream.
2017-06-02 21:24:49 +01:00
Michael Raskin
90ce1aa28a
Merge branch 'master' into clickhouse
2017-05-01 07:33:31 +02:00
Kirill
64a7be7f3c
Merge branch 'master' into aria2.service
2017-04-27 17:50:13 +03:00
Kirill
31c4498a47
Fix indentation. Fix openPorts option default to false.
2017-04-27 17:13:27 +03:00
Orivej Desh
8f634a78b9
clickhouse: init at 1.1.54190
2017-04-27 13:25:58 +00:00
Edward Tjörnhammar
45470c65f5
nixos: static ids for jackett, radarr, sonarr
2017-04-25 12:08:21 +02:00
Kirill
7a6738fefc
Implement aria2 service for controlling a daemon via rpc.
2017-04-24 18:50:40 +03:00
Jörg Thalheim
947815f59f
fcron: 3.1.2 -> 3.2.1
...
fixes #23320 #23413
2017-03-05 22:41:11 +01:00
Bjørn Forsman
d4e5bb34b7
nixos/geoip-updater: run as user 'geoip' instead of 'nobody'
...
That way 'nobody' is prevented from messing with the databases.
2017-02-15 23:25:27 +01:00
Graham Christensen
3cec7d10df
kdm: drop service
2017-02-11 13:55:09 -05:00
Nikolay Amiantov
876a6d7f03
rpcbind service: use upstream systemd unit
2017-02-01 02:45:19 +03:00
Vaibhav Sagar
63f609b1a4
ihaskell: remove service configuration. ( #22268 )
...
See #22047 . This change should be reverted after IHaskell has been
updated to support GHC 8.
2017-01-30 08:38:42 +01:00
Vladimír Čunát
278bbe3b33
add kresd service with basic options
...
Still celebrating today's 1.2.0 release!
2017-01-25 18:46:28 +01:00
rnhmjoj
6bcf89f217
pdns-recursor: add service
2017-01-23 17:57:48 +01:00
schneefux
67c4512060
gogs service: init
2017-01-21 13:38:24 +01:00
Tristan Helmich
e5f353d5cd
couchpotato module: init
2017-01-16 12:54:43 +01:00
Antoine Eiche
6c94d6437d
nixos/glance: init at liberty version
...
This commit is based on initial works made by domenkozar.
2016-12-31 09:36:57 +01:00
Tim Digel
81d8a457ed
Fix asterisk & asterisk: 13.6.0 -> 14.1.2 ( #20788 )
...
* fix/asterisk-module: use unix-group for asterisk-files
* fix/asterisk-module: add configOption to use some default config-files
* fix/asterisk-module: correction of skel copy
* fix/asterisk-module: use /etc/asterisk as configDir
* fix/asterisk-module: add reload; do not restart unit
* asterisk: 13.6.0 -> 14.1.2
* fix/asterisk: compile with lua, pjsip, format_mp3
* fix/asterisk: fix indentation
* fix/asterisk: remove broken flag
2016-12-28 23:04:58 +01:00
Antoine Eiche
415c9ff90b
nixos/keystone: init at liberty version
...
This commit introduces a nixos module for the Openstack Keystone
service. It also provides a optional bootstrap step that creates some
basic initial resources (tenants, endpoints,...).
The provided test starts Keystone by enabling bootstrapping and checks
if user creation works well.
This commit is based on initial works made by domenkozar.
2016-12-16 20:53:32 +01:00
Jörg Thalheim
cc864af928
bird: refactor module
...
- syntax check before deploying configuration
- remove static unnessary static uid/gid (configuration is opened as root)
- add service hardening
2016-12-15 11:38:45 +01:00
Joachim Fasting
3dcdc2d2b0
privoxy service: remove static uid
...
The service owns no data, having a static uid serves no purpose.
This frees up uid/gid 32
2016-12-05 13:37:08 +01:00
pngwjpgh
bcc9a6ac75
infinoted service: init
...
Service module for the dedicated gobby server included in libinfinity
2016-11-27 17:23:21 +01:00
Matthew Daiter
68827cd79a
riak-cs: init at 2.1.1
...
riak-cs: added to all-packages
Added Riak CS nix file to pkgs
Added service file for Riak CS
Removed Erlang_basho specific bindings from the Riak CS repo
riak-cs: changed description
riak-cs: added license
riak-cs: added maintainer
riak_cs: chgned indentations
riak-cs: removed overly complex srcs mechanism
riak-cs: added systemd module
riak-cs: changed Erlang module to Basho-specific version
riak-cs: made modular form
riak-cs: Added a default package in service options
riak-cs: Fixed default package in service options
riak-cs: Patched Makefile
riak_cs: added to module-list
riak_cs: changed from string to actual package in modules
riak-cs: changed example
riak-cs: removed default
riak-cs: changed to defaultText
stanchion: changed default option to defaultText
riak-cs: added defaults; changed types to str
2016-11-21 12:30:11 +01:00
Matthew Daiter
f7c097556b
stanchion: init at 2.1.1
2016-11-20 23:17:49 +01:00
Nikolay Amiantov
65f9341370
sane service: add saned support
2016-11-20 19:09:02 +03:00
Maximilian Güntner
7fa157c558
services: Add Interplanetary File System service
...
Signed-off-by: Maximilian Güntner <code@klandest.in>
2016-11-07 22:01:38 +01:00
Joachim Schiele
47d81ed347
leaps: 0.5.1 + add a service + test
2016-11-06 10:34:42 +01:00
Graham Christensen
6c7a605714
hound: init module
2016-10-15 13:54:59 -04:00
Joachim F
1ddc08a3ac
Merge pull request #18452 from bendlas/init-postgrey
...
postgrey: init at 1.36
2016-09-30 15:31:44 +02:00
Franz Pletz
a6d4ea4c2c
treewide: remove executable flags from .nix files
2016-09-27 22:15:00 +02:00
Herwig Hochleitner
5609fe521d
postgrey: init at 1.36 (includes service)
2016-09-27 15:35:02 +02:00
zimbatm
d4c66e2f46
Merge pull request #18694 from bachp/runner-master
...
gitlab-runner: add package and service
2016-09-26 22:45:39 +01:00
Joachim Fasting
66f50a7631
nixos/ids: remove unused connman uid
...
The static connman uid is not referenced anywhere in NixOS.
2016-09-25 16:55:27 +02:00
Pascal Bach
de38c1bca0
gitlab-runner service: initial version
2016-09-23 22:39:12 +02:00
Alexander Ried
e52418fd08
monetdb module: remove since it's not packaged
2016-09-19 23:11:13 +02:00
Joachim F
e06ead81bf
Merge pull request #18630 from joachifm/unbound-improvements
...
Unbound service improvements
2016-09-17 10:56:42 +02:00
Joachim Fasting
bf538515b7
nixos/ids: remove static unbound uid
2016-09-15 15:37:20 +02:00
Jörg Thalheim
8fddcad3f9
telegraf: init at 1.0.0
...
Signed-off-by: Jörg Thalheim <joerg@higgsboson.tk>
2016-09-14 07:19:55 +02:00
Franz Pletz
5a7e5537aa
Merge pull request #18298 from teh/prometheus-service
...
Prometheus service
2016-09-11 23:18:36 +02:00
Domen Kožar
fed3501b07
Remove docker-registry as it's deprecated #18209
2016-09-09 18:50:42 +02:00
Benjamin Staffin
58869cf310
prometheus service: add
...
This is based on @benleys work: https://github.com/NixOS/nixpkgs/pull/8216
I updated changed the user and group ids.
2016-09-04 20:03:32 +01:00
Franz Pletz
7c6d253544
mattermost service: init
2016-08-15 04:15:11 +02:00
Paul Hendry
486b8e7f5c
Add Terraria server service ( #16832 )
2016-08-07 03:58:38 +02:00
Shawn Warren
9886c80daa
Add gocd agent and server service packages ( #16273 )
...
GoCD is an open source continuous delivery server specializing in advanced workflow
modeling and visualization. Update maintainers list to include swarren83. Update
module list to include gocd agent and server module. Update packages list to include
gocd agent and server package. Update version, revision and checksum for GoCD
release 16.5.0.
2016-07-23 00:29:18 +02:00
cransom
4a9b640f37
smokeping: init at 2.6.11 ( #17090 )
...
Includes a module for service setup and a test
to verify functionality of both service and pkg.
2016-07-21 01:07:59 +02:00
Rickard Nilsson
9facb7078b
nixos/elasticsearch: Set a group on the user
...
This fixed a problem I had when running ElasticSearch in an LXC
container, and it doesn't hurt using a dedicated group instead of
nogroup anyway.
2016-07-01 18:21:42 +02:00
Benjamin Saunders
8e47786c0e
coturn: init at 4.5.0.3 ( #16284 )
2016-06-21 12:59:29 +02:00
Joachim Fasting
6fd8e5719b
Merge pull request #16108 from pwetzel/squeezelite
...
Squeezelite package and service init
2016-06-19 20:53:15 +02:00