cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2
304727 commits 1 branch 0 tags 3.7 GiB
Commit graph

11037 commits

Author SHA1 Message Date
Guillaume Girol
407ef1dc6f
Merge pull request #121530 from symphorien/wifireg 
nixos: add option to load wireless regulatory database as firmware
 2021-07-27 16:43:57 +00:00
Ben Siraphob
b63a54f81c
Merge pull request #110742 from siraben/deprecate-fold 2021-07-27 15:13:31 +07:00
Elis Hirwing
a9d29a1d0d
nixos/syncoid: Drop ~[at]sync from the systemcallfilter to avoid coredumps 2021-07-26 11:05:45 +02:00
Elis Hirwing
ea9d5876a0
nixos/sanoid: Reformat file with nixpkgs-fmt 2021-07-26 11:05:37 +02:00
Elis Hirwing
fa58d89b24
nixos/syncoid: Reformat file with nixpkgs-fmt 2021-07-26 11:04:28 +02:00
Elis Hirwing
b9f98165ab
nixos/sanoid: Use a function to build allow/unallow commands 2021-07-26 11:03:35 +02:00
Elis Hirwing
ecd32b8104
nixos/syncoid: Build unallow commands as a post job to drop permissions 2021-07-26 11:02:13 +02:00
Elis Hirwing
bb35e7c404
nixos/sanoid: Extract datasets rather than pools 
When making new snapshots we only need to delegate permissions to the
specific dataset rather than the entire pool.
 2021-07-25 10:13:17 +02:00
Elis Hirwing
70862830f0
nixos/syncoid: Extract datasets rather than pools 
When sending or receiving datasets with the old implementation it
wouldn't matter which dataset we were sending or receiving, we would
always delegate permissions to the entire pool.
 2021-07-25 10:12:32 +02:00
Aaron Andersen
8813af6821
Merge pull request #128724 from fortuneteller2k/nixos/iwd 
nixos/iwd: add settings option
 2021-07-24 23:06:42 -04:00
Elis Hirwing
6984e68c51
Merge pull request #98455 from ju1m/syncoid-split 
nixos/syncoid: split in multiple systemd services and harden them
 2021-07-24 22:08:42 +02:00
Yuka
7d24d06c71
nixos/postgresql: use postgres 13 for 21.11 (#131018) 
Co-authored-by: Kim Lindberger <kim.lindberger@gmail.com>
 2021-07-24 19:12:08 +02:00
Julien Moutinho
d05a1ab1e4 nixos/syncoid: split in multiple systemd services 2021-07-24 11:26:28 +02:00
Bernardo Meurer
f7e77f65ee
Merge pull request #131173 from zhaofengli/klipper-cfg-list 
nixos/klipper: Allow lists as values for gcode_macro
 2021-07-23 08:57:12 -07:00
fortuneteller2k
6ea6734f71 nixos/iwd: add settings option 2021-07-23 23:06:15 +08:00
Maximilian Bosch
ccd348f846
Merge pull request #129732 from nivadis/patch-2 
nextcloud: remove expires header
 2021-07-23 12:29:52 +02:00
Zhaofeng Li
34d2b83291 nixos/klipper: Allow lists as values for gcode_macro 2021-07-22 22:01:44 -07:00
Florian Klink
013e089000
Merge pull request #130503 from flokli/nss-fix-ordering 
nixos/systemd: fix NSS database ordering
 2021-07-23 02:28:32 +02:00
Martin Weinelt
b09661d41f
Merge pull request #129644 from NixOS/home-assistant 2021-07-23 01:16:55 +02:00
Martin Weinelt
a284c01d2a nixos/home-assistant: allow serial access for the zwave component 2021-07-23 00:27:16 +02:00
Martin Weinelt
70774da509
Merge pull request #130853 from mweinelt/pppd 2021-07-22 20:00:00 +02:00
Maximilian Bosch
65d60ae78b
Merge pull request #130062 from nh2/plausible-fix-shell-scripting-errors 
nixos/plausible: Fix shell scripting errors, runtime fixes
 2021-07-22 00:27:56 +02:00
Pavol Rusnak
f4860dc785
Merge pull request #130945 from mdlayher/mdl-corerad-docs 
nixos/corerad: update link to reference configuration file
 2021-07-21 23:12:47 +02:00
Andreas Rammhold
ef9be9288b
Merge pull request #124799 from rissson/nixos-unbound-fix-124780 
nixos/unbound: fix define-tag option
 2021-07-21 22:08:44 +02:00
Martin Weinelt
ee26807e35
nixos/pppd: allow AF_NETLINK 
The pppd daemon starting with version 2.4.9 uses rtnetlink to configure
the ipv6 peer address on the ppp interface. It therefore requires
allowing AF_NETLINK sockets.
 2021-07-21 16:38:51 +02:00
Matt Layher
5c17e35a31
nixos/corerad: update link to reference configuration file 
Signed-off-by: Matt Layher <mdlayher@gmail.com>
 2021-07-21 10:35:48 -04:00
Martin Weinelt
8abcc6ba09
nixos/pppd: replace CAP_SYS_ADMIN with CAP_BPF 
The kernel before version 5.7 required CAP_SYS_ADMIN to conduct BPF
operations. After that a separate capability CAP_BPF was created, which
should be sufficient in this scenario and will further tighten the
sandbox around our pppd service.

Tested on my personal DSL line.
 2021-07-21 15:20:47 +02:00
Gürkan Gür
d3c568e16a nixos/clipcat: add user service module 2021-07-20 21:40:58 +02:00
Graham Christensen
da9f3c0598
Merge pull request #130291 from DeterminateSystems/buildkite-agent-metrics 
buildkite-agent-metrics: init at 5.2.1, nixos/prometheus-buildkite-agent-exporter: init
 2021-07-20 12:22:45 -04:00
Sandro
bf93d660cc
Merge pull request #130288 from ju1m/sanoid 
nixos/sanoid: fix submodule aliases
 2021-07-20 10:21:51 +02:00
Pierre Bourdon
cbe99c7fac nixos/agetty: allow overriding the login program 2021-07-19 16:02:46 -07:00
Bernardo Meurer
eb5076a68e
Merge pull request #130616 from zhaofengli/klipper-tweaks 
nixos/klipper: Tweaks
 2021-07-19 14:46:30 -07:00
Cole Helbling
88fb6d25d8 nixos/prometheus-buildkite-agent-exporter: init 2021-07-19 08:35:58 -07:00
zimbatm
efbd199ffb
nixos/k3s: add configPath option 
This is useful when the whole k3s config is generated on boot. The
server address or token might be dynamically injected using user-data.
 2021-07-19 13:40:58 +02:00
Zhaofeng Li
0c83078825 nixos/klipper: Allow configuring --input-tty and --api-server 
This also makes it easy for other modules to get the correct
path to the virtual printer.
 2021-07-19 02:30:25 -07:00
Zhaofeng Li
11313bc65d nixos/klipper: Allow overriding the Klipper package 2021-07-19 02:30:25 -07:00
Zhaofeng Li
94536fd6e3 nixos/klipper: Allow specifying arbitrary user/group 
This paves the way for alternative integrations such as
Moonraker.
 2021-07-19 02:30:25 -07:00
Elis Hirwing
bfef28861d
Merge pull request #130528 from etu/init-hockeypuck 
hockeypuck: init at 2.1.0
 2021-07-19 07:54:11 +02:00
Elis Hirwing
09a49354b6
nixos/hockeypuck: Add service for hockeypuck 2021-07-19 07:33:01 +02:00
Sandro
d5bd34ebf2
treewide: convert phases that contain ":" to dont* = true (#130500) 2021-07-18 23:42:48 +02:00
Jörg Thalheim
c24fa221ab nixos/telegraf: improve documentation 2021-07-18 09:40:42 +02:00
Jörg Thalheim
cc56dc078d nixos/telegraf: don't run as nogroup 2021-07-18 08:54:45 +02:00
Jörg Thalheim
0839cf1d45
Merge pull request #106721 from Mic92/nix-serve 
nixos/nix-serve: don't run as nogroup
 2021-07-18 07:53:32 +01:00
Jörg Thalheim
ac7b8724b5 nixos/nix-serve: don't run as nogroup 
nogroup is insecure if shared
 2021-07-18 08:51:17 +02:00
Martin Weinelt
d9a3a54b73
Merge pull request #129980 from mweinelt/nixos/kea 2021-07-18 00:26:35 +02:00
Florian Klink
c1536f5c78 nixos/systemd: fix NSS database ordering 
- The order of NSS (host) modules has been brought in line with upstream
  recommendations:

  - The `myhostname` module is placed before the `resolve` (optional) and `dns`
    entries, but after `file` (to allow overriding via `/etc/hosts` /
    `networking.extraHosts`, and prevent ISPs with catchall-DNS resolvers from
    hijacking `.localhost` domains)
  - The `mymachines` module, which provides hostname resolution for local
    containers (registered with `systemd-machined`) is placed to the front, to
    make sure its mappings are preferred over other resolvers.
  - If systemd-networkd is enabled, the `resolve` module is placed before
    `files` and `myhostname`, as it provides the same logic internally, with
    caching.
  - The `mdns(_minimal)` module has been updated to the new priorities.

  If you use your own NSS host modules, make sure to update your priorities
  according to these rules:

  - NSS modules which should be queried before `resolved` DNS resolution should
    use mkBefore.
  - NSS modules which should be queried after `resolved`, `files` and
    `myhostname`, but before `dns` should use the default priority
  - NSS modules which should come after `dns` should use mkAfter.
 2021-07-17 23:55:35 +02:00
Leo
bb568917b2
nixos/bind: add directory config option (#129188) 2021-07-17 08:03:20 +02:00
Jean-Philippe Braun
d4eca42de4 nixos/wordpress: nginx support 2021-07-16 08:51:08 +02:00
Julien Moutinho
6c72f80b41 nixos/sanoid: fix submodule aliases 
Use `mkDefault` into `mkAliasDefitinions`.
This avoids conflicting definitions when using `process_children_only`.
 2021-07-15 18:28:27 +02:00
Kim Lindberger
4dcf295417
Merge pull request #129464 from talyz/discourse-plugins 
discourse: Updates and fixes
 2021-07-15 14:50:28 +02:00