Samuel Dionne-Riel
ca47cc90c2
Merge pull request #39142 from teto/nm_dispatchers
...
[RDY] networkmanager: enrich dispatcher PATH
2018-09-01 23:26:36 -04:00
Uli Baum
15e6e1ff6f
nixos/nginx: fix type of sslTrustedCertificate option
...
The option was added in 1251b34b5b
with type `types.path` but default `null`, so eval failed with
the default setting. This broke the acme and certmgr tests.
cc: @vincentbernat @fpletz
2018-09-02 01:35:59 +02:00
Graham Christensen
34d2ec7c09
nixos docs: give IDs to things
2018-09-01 16:20:49 -04:00
volth
2413fcdfeb
services.xserver.windowManager.session: handle duplicate names ( #37690 )
2018-09-01 21:27:17 +02:00
Samuel Dionne-Riel
4ff5f304b9
nixos/manual: nixos-help knows about colon-separated BROWSER
...
This is the semantics as understood by `xdg-open`. Using these semantics
on a non-colon-separated variable works because it acts as if it was a
one element long list.
This fixes an issue where it would try to exec
`google-chrome-beta:google-chrome:chromium:firefox` on a system
configured with these semantics in mind.
2018-09-01 13:48:49 -04:00
xeji
ff679f86a2
Merge pull request #30890 from Lassulus/slim-lightdm
...
display-managers: make lightdm the default
2018-09-01 16:11:38 +02:00
Jörg Thalheim
58c29e9e75
Merge pull request #45875 from wizeman/u/fix-transmission-mod2
...
nixos/transmission: fix AppArmor profile to include keyutils
2018-09-01 12:13:22 +01:00
Vladimír Čunát
0473466ba5
Merge #45731 : artwork update (replacing old logo)
2018-09-01 10:43:20 +02:00
lassulus
fc035da4a4
xserver.displayManager: change default
...
Switch from slim to lightdm as the display-manager.
If plasma5 is used as desktop-manager use sdddm.
If gnome3 is used as desktop-manager use gdm.
Based on #12516
2018-08-31 17:57:39 +02:00
Ricardo M. Correia
6376c5df87
nixos/transmission: fix AppArmor profile to include keyutils
2018-08-31 17:19:29 +02:00
Tobias Happ
8f0bafcaff
nixos/gitea: fix pre start script ( #44979 )
...
The gitea path is hardcoded in hooks directory in files of paths like:
repositories/<user>/<repo>.git/hooks/update.d/gitea
2018-08-31 16:39:58 +02:00
John Ericson
2c4a75e9ef
Merge pull request #45820 from obsidiansystems/dont-use-obsolete-platform-aliases
...
treewide: Dont use obsolete platform aliases
2018-08-31 09:56:10 -04:00
チルノ
17564e0ed9
nixos/zeronet: init ( #44842 )
2018-08-31 11:40:23 +01:00
Sarah Brofeldt
bb321a2624
Merge pull request #45811 from Nadrieril/fix-usbguard-auditfile
...
nixos/usbguard: ensure the audit log file can be created
nixos/usbguard: disable debug output
2018-08-31 11:40:13 +02:00
Franz Pletz
1cc916b5b2
Merge pull request #45810 from vincentbernat/fix/nginx-stapling
...
nixos/nginx: ensure TLS OCSP stapling works out of the box with LE
2018-08-31 07:18:40 +00:00
Jan Tojnar
f0136e4bc8
Merge pull request #45638 from aanderse/incron
...
incron: init at 0.5.12
2018-08-31 06:54:58 +01:00
Aaron Andersen
9b12db6928
changed from forking to simple as recommended by @aszlig
2018-08-31 03:03:04 +00:00
Aaron Andersen
d7d7533c18
changes as per requested by @aszlig
2018-08-31 02:52:49 +00:00
Aaron Andersen
7bc2a0dd64
removed quotes when not needed as suggested by @aszlig
2018-08-31 02:17:38 +00:00
John Ericson
2c2f1e37d4
reewide: Purge all uses stdenv.system
and top-level system
...
It is deprecated and will be removed after 18.09.
2018-08-30 17:20:32 -04:00
Nadrieril
9b9ba8405b
nixos/usbguard: ensure the audit log file can be created
...
Since version 0.7.3, usbguard-daemon won't start if the file cannot be opened.
2018-08-30 21:54:22 +01:00
Nadrieril
08148a746a
nixos/usbguard: disable debug output
2018-08-30 21:54:22 +01:00
Vincent Bernat
1251b34b5b
nixos/nginx: ensure TLS OCSP stapling works out of the box with LE
...
The recommended TLS configuration comes with `ssl_stapling on` and
`ssl_stapling_verify on`. However, this last directive also requires
the use of `ssl_trusted_certificate` to verify the received answer.
When using `enableACME` or similar, we can help the user by providing
the correct value for the directive.
The result can be tested with:
openssl s_client -connect web.example.com:443 -status 2> /dev/null
Without OCSP stapling, we get:
OCSP response: no response sent
After this change, we get:
OCSP Response Data:
OCSP Response Status: successful (0x0)
Response Type: Basic OCSP Response
Version: 1 (0x0)
Responder Id: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
Produced At: Aug 30 20:46:00 2018 GMT
2018-08-30 22:47:41 +02:00
Jan Tojnar
8a8056c302
Merge pull request #45058 from michaelpj/imp/freedesktop-modules
...
freedesktop modules: init
2018-08-30 16:14:35 +01:00
Johannes Lötzsch
bb08d1c13f
nixos/zabbix: fix initial database creation ( #45750 )
...
without this fix the database setup fails with „could not connect to database postgres: FATAL: role "root" does not exist“
2018-08-30 08:25:13 +01:00
Nikolay Amiantov
69407cb013
firewall service: respect marks in rpfilter ( #39054 )
...
This allows one to add rules which change a packet's routing table:
iptables -t raw -I PREROUTING 1 -m set --match-set myset src -j MARK --set-mark 2
ip rule add fwmark 2 table 1 priority 1000
ip route add default dev wg0 table 1
to the beginning of raw table PREROUTING chain, and still have rpfilter.
2018-08-29 20:50:53 +02:00
Samuel Dionne-Riel
bc5b26b4ab
Reviews use of old nixos wallpaper to use one with the new logo.
...
The wallpaper used is *structurally compatible* with the other one,
meaning that the logo is at the same location, and not bigger.
It has one drawback: the logo is brighter, which clashes with the grub
usage. This is to be fixed with new options in grub.
2018-08-29 00:04:58 -04:00
Aaron Andersen
d9943e6bba
added option to specify which packages are available to the system incrontab
...
recommendation by @jtojnar and @maurer
2018-08-29 00:43:28 +00:00
Aaron Andersen
3d1091eb5b
added a check to make sure a situation where a defined configuration wouldn't be unused as per recommended by @maurer
2018-08-28 23:50:55 +00:00
Tuomas Tynkkynen
69b4f427b6
nixos/zabbix-agent: Make the Zabbix package user-configurable
2018-08-28 17:43:12 +03:00
Aaron Andersen
b77f38c3cd
added a comment about the PATH variable under which incrontab commands will run
2018-08-27 21:31:55 +00:00
Aaron Andersen
7840d00532
clarified the descriptions of the allow and deny options
2018-08-27 21:15:03 +00:00
Aaron Andersen
fc1f33bc2c
fixed issue with system jobs
2018-08-27 15:23:19 +00:00
Vincent Bernat
bd075eb914
nginx: add more gzipped MIME types
...
The additions are:
- image/svg+xml for SVG images
- application/atom+xml for Atom feeds
These types are also present in mime.types. For better readability,
the list is sorted and formatted with one type per line.
2018-08-26 21:48:55 +02:00
Vincent Bernat
06a5fb2ada
nginx: use a compression level of 5 in recommended configuration
...
While there is little gain of space to use a compression level of 9,
the CPU usage is significant. Many experiments point to use something
between 4 and 6. For example:
- https://mjanja.ch/2015/03/finding-the-nginx-gzip_comp_level-sweet-spot/
- 3bda5b93ed/nginx.conf (L93)
2018-08-26 21:43:34 +02:00
Jörg Thalheim
a78b364ed4
Merge pull request #44890 from dywedir/iwd
...
iwd: 0.4 -> 0.7
2018-08-26 17:25:42 +01:00
Augustin Borsu
4d3ce5ca36
nixos/jupyter: init service
2018-08-26 12:00:54 +02:00
Aaron Andersen
fc03a9f5b7
initial work on incron service
2018-08-25 18:08:24 -04:00
Bas van Dijk
32200033a6
elasticsearch-curator: include the module in the module-list & fix bug
2018-08-25 18:53:10 +02:00
David Smith
2ec33f527b
elasticsearch-curator: don't need to add enable to elasticsearch-curator service
2018-08-25 18:53:10 +02:00
David Smith
3744467589
nixos/curator: init elasticsearch curator
...
https://www.elastic.co/guide/en/elasticsearch/client/curator/5.5/index.html
2018-08-25 18:53:10 +02:00
Bas van Dijk
7d04961c95
Merge pull request #44389 from Mic92/es6
...
elasticsearch: use 6.x as default version, remove unsupported releases
2018-08-25 17:04:07 +02:00
Vladyslav Mykhailichenko
d73fd69952
iwd: 0.4 -> 0.7
2018-08-25 15:26:52 +03:00
adisbladis
dff43f10f6
Merge pull request #45608 from etu/fix-gitea-locale-updates
...
nixos/gitea: Symlink gitea locales to match running gitea version
2018-08-25 15:25:27 +08:00
Elis Hirwing
a098cc98d9
nixos/gitea: Symlink gitea locales to match running gitea version
...
This prevents issues when gitea adds new locales etc. And if they
change locale values in future versions. Or if you rollback to a
previous version of gitea it might be a good idea to use the previous
locale files.
2018-08-25 09:19:53 +02:00
Sarah Brofeldt
8f61e96c1e
nixos/datadog-agent: Fix type of use_dogstatsd ( #45587 )
2018-08-25 00:18:59 +02:00
Bas van Dijk
551fec4467
Merge branch 'master' into es6
2018-08-23 23:41:27 +02:00
Samuel Dionne-Riel
05310e3172
Merge pull request #44919 from Vodurden/init-undervolt
...
undervolt: init at 0.2.8
2018-08-22 10:13:55 -04:00
Sarah Brofeldt
4c6171c173
nixos/dhcpcd: Wait for devices to settle
2018-08-22 00:20:28 +02:00
Sarah Brofeldt
f8306941b7
Merge pull request #45441 from lopsided98/cfssl-user-fix
...
nixos/cfssl: don't create user/group unless service is enabled
2018-08-21 22:42:29 +02:00
Ben Wolsieffer
c6191c8abf
nixos/cfssl: don't create user/group unless service is enabled
2018-08-21 16:24:31 -04:00
Michael Raskin
980cbff93c
Merge pull request #45353 from aanderse/redmine
...
redmine: 2.5.2 -> 3.4.6
2018-08-21 14:04:02 +00:00
Janne Heß
943786eccf
nixos/terraria: Wait for daemon to stop
2018-08-20 21:41:29 +02:00
Jake Woods
4142020e45
nixos/undervolt: adding undervolt module
...
We want to be able to configure persistent undervolting
in the NixOS configuration
2018-08-20 21:01:19 +10:00
Aaron Andersen
c93c0f3ae4
removed some local development stuff
2018-08-19 16:41:49 -04:00
Aaron Andersen
bb7568daf7
reworked the redmine service
...
added some security features like database.passwordFile
2018-08-19 16:29:44 -04:00
Aaron Andersen
5984ed283f
started working on bringing the redmine package back to life using gitlab as an example
2018-08-19 08:09:38 -04:00
Jake Woods
64223a2c1b
nixos/thermald: add manual config file
...
thermald has two modes: zero-config and manual. Sometimes it is useful
to manually configure thermald to achieve better thermal results or to give
thermald a hand when detecting possible cooling options.
2018-08-19 15:54:42 +10:00
Silvan Mosberger
eacaaa2161
Merge pull request #44880 from srghma/build-max-jobs-auto
...
nixos/nix-daemon: build-max-jobs, add support to auto
2018-08-18 16:46:08 +02:00
srghma
37e2ebdfbc
nixos/nix-daemon: build-max-jobs, add support to auto
2018-08-18 14:45:12 +03:00
Michael Peyton Jones
13e2e19158
xdg: add modules for supporting various XDG specs
2018-08-16 21:23:34 +01:00
Silvan Mosberger
be34fdfa89
Merge pull request #45078 from Izorkin/syslog-ng-reload-fix
...
syslog-ng: fix reload service
2018-08-16 18:11:52 +02:00
Izorkin
e4f4589186
syslog-ng: fix reload service
2018-08-16 18:23:58 +03:00
Jan Tojnar
6f8fe25ccf
Merge pull request #45107 from mnacamura/lightdm-accountsservice
...
lightdm: enable the accounts daemon to find dbus interface
2018-08-16 17:15:05 +02:00
Silvan Mosberger
ed2148b5af
Merge pull request #44238 from jfrankenau/samba-conf-override
...
nixos/samba: allow dummy conf file to be overridden
2018-08-16 16:56:24 +02:00
Silvan Mosberger
d3c5a9bf17
Merge pull request #40747 from WhittlesJr/synergy-fix
...
services.synergy: Use graphical target (fixes #9468 )
2018-08-16 16:55:38 +02:00
Jan Tojnar
7bfb3e163e
Merge pull request #45095 from worldofpeace/zeitgeist-service
...
nixos/zeitgeist: init
2018-08-16 15:02:06 +02:00
Alex Whitt
9a63f51454
nixos/synergy: Use graphical target ( fixes #9468 )
2018-08-16 08:53:45 -04:00
Mitsuhiro Nakamura
7fbdd7fcf4
lightdm: enable the accounts daemon to find dbus interface
2018-08-16 21:52:25 +09:00
Mitsuhiro Nakamura
6c84945099
lightdm: fix typos
2018-08-16 21:52:25 +09:00
Mitsuhiro Nakamura
7952b51461
accountsservice: fix a bug
2018-08-16 18:00:58 +09:00
Johannes Frankenau
51169880bd
nixos/samba: allow dummy conf file to be overridden
...
This allows configuring samba clients on systems without a samba server.
2018-08-16 10:24:09 +02:00
Jörg Thalheim
5bf43e47d3
Merge pull request #45098 from Chiiruno/dev/hydron
...
Fix hydron service, update hydron and meguca
2018-08-16 10:10:27 +02:00
Okina Matara
aba87b85ef
nixos/hydron: Various tweaks
...
Make timer persistent
Start timer after hydron
Change interval from hourly to weekly
2018-08-15 22:00:13 -05:00
worldofpeace
48a765e641
nixos/zeitgeist: init
2018-08-15 20:05:00 -04:00
Izorkin
300fe1cc9a
syslog-ng: fix reload service
2018-08-16 00:05:35 +03:00
Samuel Leathers
67b1cbb39d
Merge pull request #40399 from rvl/datadog-agent
...
DataDog Agent v6
2018-08-15 15:53:03 -04:00
Izorkin
c2b24892b0
syslog-ng: enable reload service
2018-08-15 19:46:47 +03:00
Jan Tojnar
fe51bf322c
Merge pull request #44820 from michaelpj/fix/redshift-geoclue-agents
...
redshift/geoclue/localtime: progress in fixing agent confusion
2018-08-14 17:13:09 +02:00
Michael Peyton Jones
80d4fa725b
localtime: simplify module a little
2018-08-14 15:55:05 +01:00
Michael Peyton Jones
316669327c
geoclue2 service: add option to run demo agent
2018-08-14 15:55:04 +01:00
Michael Peyton Jones
a1762065c3
redshift: install desktop files, and use absolute paths in them to avoid confusing geoclue agent
2018-08-14 15:53:39 +01:00
Franz Pletz
0371570807
Merge pull request #44524 from vincentbernat/fix/dhcpcd-systemd
...
dhcpcd service: order before network target
2018-08-13 20:24:22 +00:00
Sarah Brofeldt
b4d15afe02
Merge pull request #44876 from eadwu/display-managers/pulseaudio-rely-on-socket
...
nixos/display-managers: rely on socket to activate pulseaudio
2018-08-12 22:23:45 +02:00
Jan Tojnar
f496d26247
Merge pull request #44651 from jtojnar/gobby
...
gobby5: fix build
2018-08-12 17:25:07 +02:00
Edmund Wu
ced374cf98
display-managers: rely on socket to activate pulseaudio
2018-08-10 12:43:47 -04:00
Silvan Mosberger
1a3b9e1bd2
Merge pull request #44556 from johanot/certmgr-module-init
...
nixos/certmgr: init
2018-08-10 15:11:26 +02:00
Yegor Timoshenko
e0b3d77ccd
Merge pull request #44823 from yegortimoshenko/20180809.194425/youtrack
...
youtrack: 2018.1.41051 -> 2018.2.42284
2018-08-10 13:00:49 +03:00
Franz Pletz
f167e88794
Merge pull request #44658 from dlahoti/patch-2
...
add `extraConfig` section to `networking.wireless`
2018-08-10 09:38:23 +00:00
Johan Thomsen
004e7fb6fd
nixos/certmgr: init
2018-08-10 09:56:25 +02:00
Sarah Brofeldt
ddde09d4f8
Merge pull request #44848 from LnL7/vault-options
...
nixos/vault: make package configurable
2018-08-10 09:48:07 +02:00
Silvan Mosberger
c08244fc1b
Merge pull request #44649 from dlahoti/patch-1
...
add `/share/sddm/themes` to `environment.pathsToLink`
2018-08-09 23:41:47 +02:00
Daiderd Jordan
d113c02563
services-vault: make package configurable and add extraConfig option
2018-08-09 23:22:53 +02:00
Deven Lahoti
8d6128208d
nixos/wireless: add extraConfig
section to networking.wireless
...
This allows the user to add `wpa_supplicant` config options not yet supported by Nix without having to write the entire `wpa_supplicant.conf` file manually.
2018-08-09 15:20:44 -05:00
Deven Lahoti
414e6de41a
nixos/sddm: add /share/sddm/themes
to environment.pathsToLink
...
Without this, there are no SDDM themes available in the directory configured in `sddm.conf`.
2018-08-09 15:17:22 -05:00
Yorick van Pelt
369cc995d1
youtrack: 2018.1.41051 -> 2018.2.44329
2018-08-09 21:46:21 +03:00
Jan Tojnar
69c47a3d91
nixos/metacity: switch to gnome3.metacity
2018-08-09 17:36:47 +02:00
Vincent Ambo
5b748bd8fa
nixos/datadog-agent: Add option to configure datadog integrations
...
Introduces an option `services.datadog-agent.extraIntegrations` that
can be set to include additional Datadog agent integrations from the
integrations-core repository.
Documentation and an example is provided with the change.
Relates to NixOS/nixpkgs#40399
2018-08-09 17:25:23 +02:00
Vincent Ambo
5a07bb2fc7
nixos/datadog-agent: Refactor to allow arbitrary check configs
...
Refactors the datadog-agent (i.e. V6) module to let users configure
arbitrary checks, not just a limited set, without having to resort to
linking the files manually and updating the systemd unit.
Checks are now configured via a `services.datadog-agent.checks` option
which takes an attribute set in which the keys refer directly to
Datadog check names, and the values are attribute sets representing
Datadog's configuration structure.
With this mechanism users can configure arbitrary integrations, for
example for the `ntp`-check, simply by saying:
services.datadog-agent.checks.ntp = {
init_config = null;
# ... other check configuration options as per Datadog
# documentation
};
The previous check-specific configuration options for non-default
checks have been removed. Disk & network check configuration options
have been kept rather than making them a `default`-value of the
`checks`-option because they will be overridden by user-configurations
in that case.
Relates to NixOS/nixpkgs#40399 .
2018-08-09 17:25:23 +02:00
Rodney Lorrimar
b9486e2b50
nixos/datadog-agent: add module
...
This is the new v6 version of datadog-agent.
The old v5 module is kept as dd-agent.
2018-08-09 16:53:31 +02:00