Thomas Strobel
67ce1357fa
nixos: init module: restya-board
2017-11-22 12:14:24 +01:00
Joachim F
1f2b938734
Merge pull request #31850 from herrwiese/evilwm
...
evilwm: implement NixOS WM module
2017-11-21 22:56:22 +00:00
Tim Steinbach
48252b15b9
sshd: Remove ripemd160 MACs
...
They are invalid for our OpenSSH
2017-11-21 09:36:51 -05:00
Tim Steinbach
861fef71f4
Merge pull request #31763 from jeaye/harden-ssh-config
...
Harden ssh config defaults and remove old host key support
2017-11-20 20:13:21 +00:00
Franz Pletz
0ed7d4d0e8
Merge pull request #31812 from eqyiel/matrix-synapse-configurable-home
...
nixos/matrix-synapse: make home directory configurable
2017-11-20 09:35:57 +01:00
Andreas Wiese
f5f601a7f2
nixos/evilwm: allow enabling evilwm through services.xserver.windowManager.evilwm.*
2017-11-20 07:50:28 +01:00
Ruben Maher
50777e5702
nixos/matrix-synapse: remove unused log_file config
2017-11-20 09:29:45 +10:30
Mathijs Kwik
05761e9504
firewall: fix rpfilter blocking dhcp offers when no ip was bound yet
2017-11-19 22:24:56 +01:00
Pierre Chevalier
c46d4dab96
gdm: remove old workaround for conflicts with getty
...
- There used to be a conflict between gdm and getty both trying to
access tty1
- This conflict was fixed by running gdm on tty7 instead
2017-11-19 19:35:37 +01:00
Pierre Chevalier
aed114ecb9
Revert "gdm: don't start getty@tty1 if enabled"
...
This commit isn't needed anymore since we now run gdm on tty7.
This reverts commit 440178d729
.
2017-11-19 19:35:37 +01:00
Ruben Maher
86e161ff47
nixos/matrix-synapse: make home directory configurable
2017-11-19 13:48:29 +10:30
Orivej Desh
89912165e1
Merge pull request #31378 from michaelpj/imp/plymouth-nixos-branding
...
breeze-plymouth: add optional nixos branding, enable for plasma5
2017-11-18 10:37:26 +00:00
Michael Peyton Jones
eec4c31d89
plasma5: enable NixOS branding in plymouth theme
2017-11-18 10:36:23 +00:00
Jan Tojnar
c47ea8ca4e
nixos/services.fwupd: init
2017-11-17 18:54:45 +01:00
Oliver Charles
560400773c
nixos/prometheus: Correct documentation for external_labels
...
As description is literal XML, I need to escape < and > by hand.
2017-11-17 11:06:03 +00:00
Oliver Charles
acb7f43db9
nixos/prometheus: add external_labels option
2017-11-17 10:16:21 +00:00
Oliver Charles
f0334c0336
nixos/prometheus: add scrape_configs.honor_labels
2017-11-17 10:15:37 +00:00
jeaye
2a8bd9e2a1
nixos/ssh: Harden config defaults
2017-11-16 20:25:37 -08:00
jeaye
ec80c92825
nixos/ssh: Remove support for old host keys
2017-11-16 20:25:22 -08:00
Parnell Springmeyer
cb11bf73a5
nixos/nghttpx: add module for the nghttpx proxy server ( #31680 )
...
* nghttpx: Add a new NixOS module for the nghttpx proxy server
This change also adds a global `uid` and `gid` for a `nghttpx` user
and group as well as an integration test.
* nixos/nghttpx: fix building manual
2017-11-16 18:21:02 +00:00
Franz Pletz
903a7e2f94
Merge pull request #31641 from danbst/patch-13
...
mysql module: fix flaky check
2017-11-16 00:07:55 +01:00
Tim Steinbach
c9b8bbd039
Merge pull request #31268 from Ma27/x11-defaults
...
services.xserver: fix defaults of X11
2017-11-15 16:41:52 +00:00
Jan Tojnar
a3509f6c22
gnome3.gnome-online-miners: add missing dleyna dependency
2017-11-15 14:02:37 +01:00
Jan Tojnar
e1b8636181
dleyna-server: init at 0.6.0
2017-11-15 14:02:37 +01:00
Jan Tojnar
abb17136de
gnome3.gnome-photos: add missing dleyna depenency
2017-11-15 14:02:37 +01:00
Jan Tojnar
a04cfdea12
dleyna-renderer: init at 0.6.0
2017-11-15 14:02:37 +01:00
Jan Tojnar
510737cca7
nixos/gnome3: override schemas using env variable
...
For some reason, the GNOME 3.26 update broke the overrides. It turns
out the overrides now need to come before the overriden schemas in the
XDG_DATA_DIRS variable. This is not possible in general due to applications
prefixing the variable (e.g. in wrapGAppsHook).
To fix this, a new environment variable NIX_GSETTINGS_OVERRIDES_DIR
was introduced. It has greater priority than XDG_DATA_DIRS but lower
than GSETTINGS_SCHEMA_DIR. A separate variable was chosen in order not
to block the built-in one for users.
2017-11-15 03:45:25 +01:00
Robin Gloster
9181faac41
dovecot: fix config if mailboxes == []
2017-11-14 16:49:53 +01:00
Franz Pletz
775fb7e127
Merge pull request #31616 from jerith666/smartd-cat
...
smartd: fix 'cat: command not found' error
2017-11-14 12:32:23 +01:00
Franz Pletz
06d0ba1ee9
Merge pull request #31477 from andir/fix-babeld-config
...
Fix babeld config
2017-11-14 12:12:59 +01:00
Danylo Hlynskyi
9f7315caf2
mysql module: fix flaky check
...
Comparing packages via equality will lead to different results when package and module are from different
`nixpkgs` checkouts.
Also, because MariaDB is actually supported, added a note to option description to make this knowledge more discover-able.
2017-11-14 03:08:15 +02:00
Graham Christensen
9a4b2de497
Merge pull request #31630 from Ma27/fix-postgres-quoting
...
services.postgres: fix quoting in the description of `superUser`
2017-11-13 17:01:05 -05:00
Maximilian Bosch
82062f7080
services.postgres: fix quoting in the description of superUser
...
`nixos-option` evals the description and the '`' is used to
define shell commands.
Due to this, the following error appears:
```
$ nixos-option services.postgresql.superUser
Value:
"root"
Default:
"root"
Description:
/run/current-system/sw/bin/nixos-option: line 294: root: command not found
/run/current-system/sw/bin/nixos-option: line 294: postgres: command not found
NixOS traditionally used as superuser, most other distros use .
From 17.09 we also try to follow this standard. Internal since changing this value
would lead to breakage while setting up databases.
```
2017-11-13 22:22:35 +01:00
Tom Smeets
81295c479d
fractalart service: init, Generate wallpapers ( #23231 )
...
* Add a service for generating wallpapers
This service will generate a new wallpaper using the "FractalArt" haskell package.
2017-11-13 19:56:08 +01:00
Matt McHenry
292715ce23
smartd: fix 'cat: command not found' error
2017-11-13 12:52:24 -05:00
Samuel Leathers
e0483a59cc
Merge pull request #31532 from romildo/upd.enlightenment
...
enlightenment: 0.21.10 -> 0.22.0
2017-11-12 21:44:54 -05:00
José Romildo Malaquias
c42a0fbf09
enlightenment: 0.21.10 -> 0.22.0
...
- Update to version 0.22.0
- Switch build tools from autotools to meson
- Change handling of setuid programs
2017-11-13 00:22:01 -02:00
rnhmjoj
2918f6a3f0
nixos/wireless: add manual network configuration
2017-11-11 23:11:46 +01:00
Renaud
1503409aac
Merge pull request #30943 from csingley/nzbget
...
nzbget.service override nzbget.conf broken paths with current derivation
2017-11-11 22:04:29 +01:00
Orivej Desh
30cbba9061
Merge pull request #31390 from Ma27/fix-buildphase-expressions
...
treewide: get rid of invalid `buildPhases` argument
2017-11-11 00:04:37 +00:00
Andreas Rammhold
5feed06535
babeld module: updated example config
...
Previosuly the example config did feature the deprecated `wired`
paramter. Wired can now be configured using the `type` parameter.
2017-11-10 11:54:21 +01:00
Andreas Rammhold
5d9073747a
babeld module: support non-boolean default arguments
...
Previosuly only boolean values would be rendered properly. All other
values would cause an error. Even the example configuration did fail.
2017-11-10 11:54:15 +01:00
Andreas Rammhold
236a7c5452
babeld module: separate default options by space
...
In the previous version multiple default values would generate an
invalid babeld config file since all options would be concatenated
without any separator.
2017-11-10 11:54:08 +01:00
aszlig
0e790b9f66
nixos/atlassian: Fix eval error in jrePackage
...
The error got introduced by 4f3d971ef5
,
which removed the *Text attributes from the option.
This in turn leads to an evaluation error while building the
manual/manpage, because oraclejre8 is marked unfree.
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @jbgi, @orivej, @globin
2017-11-09 20:31:41 +01:00
Jean-Baptiste Giraudeau
4f3d971ef5
Atlassian apps: remove misleading JRE switch logic
...
Only the Oracle JRE is supported by Atlassian appsAtlassian apps
(see https://jira.atlassian.com/browse/JRASERVER-46152 )
Plus Atlassian apps are non free so the switch logic always chose
Oracle JRE anyway.
Option is kept in case someone want to patch apps to support openjdk.
2017-11-09 12:56:11 +01:00
Jean-Baptiste Giraudeau
3c06d9f0b0
Fix atlassian services (optional attr. and systemd)
...
- Properly handle optional configuration.
- Use ExecStart/ExecStop instead of script/stopScript.
2017-11-09 12:56:11 +01:00
Maximilian Bosch
161e80e3fd
treewide: get rid of invalid buildPhases
argument
...
I don't know where this comes from (I accidentally did that as well
once), but some derivations seem to use `buildPhases` rather than
`phases` in their derivations.
This kills all improper usages as the lack of a `phases` argument
didn't break the build, so this can be safely removed.
2017-11-08 21:38:06 +01:00
Jörg Thalheim
999bcd098d
Merge pull request #31296 from ryantm/mattermost43
...
mattermost, nixos/mattermost: update to 4.3.0
2017-11-08 17:45:42 +00:00
Renaud
792dc7a859
Merge pull request #31252 from shaunren/compton
...
compton: change extraOptions type to types.lines
2017-11-07 23:10:41 +01:00
Maximilian Bosch
410f0f0db2
services.xserver: fix apply
of default DM/WM
...
This is needed to pick the first enabled DM/WM
if the default is `none`
2017-11-07 12:18:24 +01:00
Raphael Das Gupta
27c8fd24e5
nixos/mysql: fix typo in description of mysql.bind option
2017-11-07 11:09:40 +01:00
Orivej Desh
4435bb8ba8
Merge pull request #30665 from michaelpj/imp/plymouth-themes
...
plymouth: fix breeze-plymouth (and other themes)
2017-11-06 06:18:38 +00:00
Orivej Desh
30bd994724
Merge pull request #31161 from nocent/master
...
networkmanager: add power saving and mac address randomization options for wifi devices
2017-11-06 06:17:16 +00:00
Ryan Mulligan
e8c8370425
nixos/mattermost: fix for webapp being renamed to client
2017-11-05 13:53:50 -08:00
Markus Mueller
4874862732
babeld module: init
2017-11-05 21:15:23 +01:00
Franz Pletz
711303952e
wireguard module: add device name environment var
...
This makes the interface name available as an environment variable for
the pre/post hooks.
2017-11-05 16:42:25 +01:00
Shaun Ren
eca212741e
compton: change extraOptions type to types.lines
2017-11-05 20:23:44 +09:00
Frederik Rietdijk
dd851a8d75
Merge pull request #31254 from LumiGuide/graphite-python-overrides
...
graphite: override django and django_tagging
2017-11-05 09:40:59 +01:00
Maximilian Bosch
5b70c1855b
Revert "Revert "services.xserver: assert that either desktop- or window manager is not "none"""
...
This reverts commit e64dc25434
.
2017-11-05 07:32:56 +01:00
Herwig Hochleitner
e64dc25434
Revert "services.xserver: assert that either desktop- or window manager is not "none""
...
This reverts commit 93c54acf97
.
This reopens #30517 @nbp @Ma27
Breaking people's config for this is hardly reasonable as is. If it
absolutely cannot be avoided, at the very least, we need to provide
clear instructions on what people need to upgrade in their config. I
actually had to bisect to the commit, to even find out what property I
should change or define, as the error message was useless. It didn't
even mention a property name.
Discussion on the PR seems to be ongoing, so I'm reverting this, so we
don't break people's systems on unstable.
2017-11-05 01:51:13 +01:00
Guillaume Maudoux
7325ad9ab7
graphite: override django and django_tagging
...
instead of depending on specific versions in the django_tagging_0_4_3
and graphite_web derivations.
This should fix: https://github.com/NixOS/nixpkgs/pull/30277#discussion_r145393088
This was joint work of @basvandijk and @layus at NixCon 2017.
2017-11-04 17:53:35 +01:00
Maximilian Bosch
93c54acf97
services.xserver: assert that either desktop- or window manager is not "none"
...
resolves #11064
2017-11-04 15:30:20 +01:00
Benjamin Staffin
600f393bc7
keybase service: Turn off debug logging
...
Keybase is _extremely_ verbose with its debug output when run with -d.
2017-11-03 14:45:08 -04:00
Daiderd Jordan
9a1534496a
Merge pull request #31149 from LumiGuide/pgmanage-10.0.2
...
postage: replaced by pgmanage-10.0.2
2017-11-03 12:32:29 +01:00
Joerg Thalheim
2e6daff704
nixos/unbound: correct indented interface/access lists
2017-11-03 08:37:02 +00:00
Bas van Dijk
c894327215
postage: replaced by pgmanage-10.0.2
...
postage is no longer maintained and has been replaced by the identical pgmanage. See:
https://github.com/workflowproducts/postage#postage-has-been-replaced-with-pgmanage
The following error is raised when a user enables the deprecated `services.postage.enable` option:
Failed assertions:
- services.postage is deprecated in favor of pgmanage. They have the same options so just substitute postage for pgmanage.
2017-11-03 00:14:00 +01:00
nocent
af13b05dda
networkmanager: add power saving and mac address randomization options for wifi devices
2017-11-02 21:57:25 +00:00
Andrew Dunham
7f921735e7
strongswan: allow configuring enabled plugins
2017-11-02 14:39:14 +01:00
José Romildo Malaquias
c07835a11b
Merge branch 'master' into upd.lxqt
2017-11-02 00:29:12 -02:00
José Romildo Malaquias
b6d27b7271
lxqt: remove lxqt-common
2017-11-02 00:14:46 -02:00
Sarah Brofeldt
2ddcdcce26
nixos/postfix: support alternate smtp ports when relaying ( #30685 )
...
* postfix: support alternate smtp ports when relaying
* fix missing ; after merge
2017-11-01 19:06:27 +01:00
Satoshi Shishiku
c75528bd56
prosody service: add extra SSL options
2017-11-01 13:38:01 +01:00
Satoshi Shishiku
57f3dd5a2f
prosody service: add restart trigger
2017-11-01 13:38:01 +01:00
Satoshi Shishiku
2e55e164eb
prosody service: forking
2017-11-01 13:37:58 +01:00
Satoshi Shishiku
1e45a6459e
prosody service: add types
2017-11-01 13:37:57 +01:00
Sander van der Burg
6d1317ab31
Merge pull request #31058 from rnhmjoj/dnschain
...
DNSChain: move expression to new nodePackages
2017-10-31 23:44:02 +01:00
Bas van Dijk
cb4b9b1cc1
owncloud: fix some but not all errors
...
* Don't set timezone when it's null
* Don't create the postgres role because the postgresqsl service
already does that.
* Fix documentation
* Add a test suite
2017-10-31 23:03:33 +01:00
Graham Christensen
2d583f7275
Merge pull request #31039 from LumiGuide/fix-graphite-api
...
graphite: fix the graphiteApi service
2017-10-31 17:53:02 -04:00
Graham Christensen
e5a44f3034
Merge pull request #31044 from LumiGuide/fix-apache-httpd
...
apache-httpd: fix nix evaluation error
2017-10-31 17:50:57 -04:00
Graham Christensen
486c125dc3
Merge pull request #31050 from pbogdan/wordpress-disable-autoupdates
...
apache-httpd/wordpress: disable built-in WordPress autoupdater
2017-10-31 17:50:02 -04:00
rnhmjoj
ea8714ecb1
nixos/dnschain: use nodePackages.dnschain
2017-10-31 22:03:38 +01:00
Piotr Bogdan
3165c56db9
apache-httpd/wordpress: disable built-in WordPress autoupdater
2017-10-31 17:37:11 +00:00
Bas van Dijk
527781ebc4
apache-httpd: fix nix evaluation error
...
This only sets the timezone when it's not null to prevent:
error: cannot coerce null to a string, at
nixpkgs/nixos/modules/services/web-servers/apache-httpd/default.nix:676:7
2017-10-31 17:33:54 +01:00
Bas van Dijk
04b2460eb6
graphite: fix the graphiteApi service
2017-10-31 15:49:59 +01:00
lassulus
440178d729
gdm: don't start getty@tty1 if enabled
2017-10-30 21:43:10 +01:00
Márton Boros
c556c72a2e
nixos/gitlab: fix secret generation
...
This line previously produced an error and an empty secret file.
2017-10-30 12:49:27 +01:00
Márton Boros
00c03e9003
nixos/gitlab: fix preStart script
2017-10-30 12:49:27 +01:00
Márton Boros
29e80bde40
nixos/gitlab: fix hard-coded database name
2017-10-30 12:49:27 +01:00
Christopher Singley
b2c2944998
nzbget.service override nzbget.conf broken paths with current derivation
2017-10-29 19:37:56 -05:00
Christopher Singley
95dc36235c
PlexPy service
2017-10-29 19:29:25 -05:00
Jonas Schwabe
4a180dac60
gdm: fix restart of display-manager after nixos-rebuild
...
- fix restart of display-manager due to a conflict with getty@tty1
- fixes #21439
2017-10-28 15:52:03 +02:00
Joachim F
9ab20a4a04
Merge pull request #30787 from lheckemann/nixos-help-doc
...
Document nixos-help more obviously
2017-10-28 10:41:59 +00:00
zimbatm
74a2d53e0d
buildkite-agent service: add bash to the runtimePackages
...
bash is necessary for nix-shell to work properly
2017-10-26 17:44:44 +01:00
Franz Pletz
a26b6c4290
prometheus-node-exporter service: delete dead code
2017-10-25 20:18:33 +02:00
Franz Pletz
ce301ef21a
prometheus-node-exporter service: add disabledCollectors option
2017-10-25 20:10:20 +02:00
Drew Hess
ad933bb096
postfix: add relayPort option. ( #30520 )
2017-10-25 19:11:55 +02:00
Franz Pletz
63bbada520
prometheus-node-exporter service: run as nobody again
...
Using DynamicUser breaks the systemd and logind collectors.
cc #30535
2017-10-25 17:49:40 +02:00
Linus Heckemann
b2c5075e8a
nixos-manual service: show nixos-help option
...
Part of improving accessibility (#30760 ). Makes the manual easier to
access e.g. on serial consoles.
2017-10-25 10:16:15 +01:00
Franz Pletz
fd9ae9226d
Merge pull request #30319 from peterhoeg/f/dnsmasq
...
dnsmasq nixos: make sure it always runs
2017-10-25 04:07:27 +02:00
Rickard Nilsson
2fd11b762f
nixos/elasticsearch: Do not try to run sysctl if running in container, since it fails
2017-10-24 22:31:06 +02:00
Franz Pletz
de917326a9
atlassian-crowd service: run crowd in foreground
2017-10-24 14:21:05 +02:00
Ryan Hendrickson
c522aaafde
nixos/postfix: allow dollar parameters in lists ( #30612 )
2017-10-23 17:57:20 +02:00
joachim schiele
61089ddcee
opendkim: automated key generation (no manual changes for service initialization required anymore)
2017-10-23 15:53:55 +02:00
Jan Tojnar
3c48a1e06d
nixos/services.nginx: Fix globalRedirect example
...
Virtual host globalRedirect attribute accepts a hostname not a URL
09a9a472ee/nixos/modules/services/web-servers/nginx/default.nix (L167)
2017-10-22 15:38:08 +02:00
Martin Potier
ff562459cc
nixos/libreswan: add missing runtime dependencies
2017-10-22 15:36:26 +02:00
Márton Boros
a89b28f8b7
nixos/gitlab: fix startup script
...
The preStart script used a hardcoded "git" user instead of the cfg value.
2017-10-22 15:23:25 +02:00
Pascal Bach
0f0f0cbc6f
prometheus-node-exporter service: update for new arguments handling
...
The behaviour have changed again. Listed collectors are now enabled in
addition to the default one.
Also run as DynmicUser instead of user nobody as the exporter doesn't need
any state.
2017-10-22 14:45:48 +02:00
Simon Lackerbauer
414720709b
gitlab-module: fix hooks links for older repositories
2017-10-22 14:28:56 +02:00
Michael Peyton Jones
0966f8282a
plasma5: use mkDefault for a few options that users might want to set
2017-10-22 00:18:21 +02:00
Michael Peyton Jones
e6a199b95d
plasma5: set default theme for plymouth
2017-10-21 22:45:48 +01:00
Michael Peyton Jones
2ac89a612c
redshift: allow using geoclue2 loation provider
2017-10-21 22:34:14 +01:00
Michael Peyton Jones
d96b0ac7f7
geoclue2: fix typo
2017-10-21 22:34:14 +01:00
Florian Jacob
43f94ff5a9
nixos/munin: move munin-cron to systemd.tmpfiles
...
to match with munin-node.
2017-10-21 11:27:42 +01:00
Florian Jacob
3338985aab
nixos/munin: Create MUNIN_PLUGSTATE dir to fix munin_stats plugin
2017-10-21 11:27:42 +01:00
zimbatm
96b339fbc9
buildkite-agent: 2.1.13 -> 2.6.6
...
Build the package from source
Re-organise the module a bit to allow custom version of the package
2017-10-21 11:23:30 +01:00
Joachim F
815bebf9e8
Merge pull request #30173 from dmjio/patch-1
...
oauth2_proxy: default address updated
2017-10-20 16:28:40 +00:00
Joachim F
6991438df9
Merge pull request #30486 from rnhmjoj/compton
...
nixos/compton: default to xrender backend
2017-10-20 15:49:40 +00:00
Thomas Tuegel
ae8d9cbf71
Merge pull request #30610 from ttuegel/plasma-wayland
...
Plasma: Experimental Wayland support
2017-10-20 09:47:14 -05:00
Thomas Tuegel
ebcccaf754
plasma-workspace: enable Wayland session support
2017-10-20 09:28:56 -05:00
Joachim F
3c62474d08
Merge pull request #30528 from disassembler/gitea
...
gitea: init at 1.2.1
2017-10-20 14:01:54 +00:00
Joachim F
5f1d6bc5c7
Merge pull request #30563 from michaelpj/imp/tzupdate
...
tzupdate: init at 1.2.0 (+ service)
2017-10-20 13:55:09 +00:00
James Earl Douglas
aae32e15af
nixos/jenkins: add an option for the package
...
This allows NixOS configuration to specify the desired Jenkins package.
2017-10-20 01:16:12 +02:00
Thomas Tuegel
dae260034c
nixos/sddm: delete QML cache
...
Prior to Qt 5.9.2, there is a QML cache invalidation bug which causes SDDM to
segfault when upgrading Plasma.
See also: https://bugreports.qt.io/browse/QTBUG-62302
2017-10-19 07:09:01 -05:00
Michael Peyton Jones
281bf1dded
tzupdate service: init
2017-10-19 05:15:32 +01:00
Samuel Leathers
66201d49bb
gitea: add nixos service module
2017-10-18 12:50:36 -04:00
Peter Simons
757a759005
Merge pull request #30166 from LumiGuide/graphite-1.0.2
...
Fix graphite crash by upgrading from 0.9.15 -> 1.0.2
2017-10-18 12:58:55 +01:00
Jörg Thalheim
9aa6337c3d
Merge pull request #30467 from adisbladis/display-managers-session/sessionvars
...
display-managers: Import DBUS session bus address & Xauthority
2017-10-17 11:32:26 +01:00
adisbladis
40f402cf65
display-managers: Import DBUS session bus address & Xauthority in systemd user session
2017-10-17 10:06:05 +08:00
rnhmjoj
3918385f29
nixos/compton: use xrender by default
2017-10-17 00:50:34 +02:00
rnhmjoj
36bbc3cfda
nixos/compton: improve options type-checking
2017-10-17 00:50:34 +02:00
Bjørn Forsman
497108b456
nixos/atd: remove "batch" from setuid wrappers
...
"batch" is a shell script so invoking it via setuid wrapper never worked
anyway. (The kernel drops perms on executables with shebang.) A previous
nixpkgs commit made "batch" invoke the NixOS setuid "at" wrapper to gain
needed privileges.
Thanks to @yesbox for noticing.
2017-10-16 19:08:19 +02:00
Markus Mueller
60b0db0e08
gitlab: link tmp/ directory to writable path
2017-10-16 14:58:02 +02:00
Markus Mueller
f250015ea3
nixos/gitlab: fix uploades directory permissions
2017-10-16 14:58:02 +02:00
Peter Hoeg
07bc859e9a
Revert "ssh: deprecate use of old DSA keys"
...
This reverts commit 65b73d71cb
.
2017-10-14 14:42:49 +08:00
Peter Hoeg
bdbba026f3
Revert "dnsmasq nixos: make sure it always runs"
...
This reverts commit 1917e69b54
.
2017-10-14 14:42:49 +08:00
Peter Hoeg
e01bb0c0d0
Revert "smartd: set drive timeout"
...
This reverts commit 41306ca505
.
2017-10-14 14:42:49 +08:00
Peter Hoeg
2cd4ebfe93
Revert "display-manager: systemd-udev-settle serves no purpose"
...
This reverts commit 3571163858
.
2017-10-14 14:42:49 +08:00
Peter Hoeg
3211098632
Revert "sshguard: make it run"
...
This reverts commit 69d8b81b4b
.
2017-10-14 14:42:49 +08:00
Peter Hoeg
2b5aab4b0f
Revert "sensu: nixos module"
...
This reverts commit 707c3ac435
.
2017-10-14 14:42:49 +08:00
Peter Hoeg
8df1c9ac17
Revert "firewalld: init at 0.4.4.4"
...
This reverts commit 178a96f99b
.
2017-10-14 14:42:48 +08:00
Peter Hoeg
ff3fd1027c
Revert "networkmanager: dns and extraConfig"
...
This reverts commit 0dd25e585f
.
2017-10-14 14:42:48 +08:00
Peter Hoeg
f359096210
Revert "sddm: silence error about missing wayland directory"
...
This reverts commit 46a92333e9
.
2017-10-14 14:42:48 +08:00
Peter Hoeg
46a92333e9
sddm: silence error about missing wayland directory
2017-10-14 14:38:04 +08:00
Peter Hoeg
0dd25e585f
networkmanager: dns and extraConfig
2017-10-14 14:38:04 +08:00
Peter Hoeg
178a96f99b
firewalld: init at 0.4.4.4
...
Includes systemd module.
2017-10-14 14:38:04 +08:00
Peter Hoeg
707c3ac435
sensu: nixos module
2017-10-14 14:38:04 +08:00
Peter Hoeg
69d8b81b4b
sshguard: make it run
2017-10-14 14:38:04 +08:00
Peter Hoeg
3571163858
display-manager: systemd-udev-settle serves no purpose
2017-10-14 14:38:04 +08:00
Peter Hoeg
41306ca505
smartd: set drive timeout
2017-10-14 14:38:04 +08:00
Peter Hoeg
1917e69b54
dnsmasq nixos: make sure it always runs
...
By default we only restart if the dnsmasq daemon fails but we introduce an
option to always keep it running.
2017-10-14 14:38:04 +08:00