Eelco Dolstra
4e0d6a5ff8
Don't create /nix/var/nix/{gcroots,per-user}/per-user with 1777 permission
...
In fact, don't create them at all because Nix does that automatically.
Also remove modules/programs/shell.nix because everything it did is
now done automatically by Nix.
2019-10-10 16:24:33 +02:00
Eelco Dolstra
3ab3614e2b
nix: 2.3 -> 2.3.1
2019-10-10 16:23:33 +02:00
worldofpeace
1169336cd9
Merge pull request #70448 from worldofpeace/lightdm-improve-systemd
...
nixos/lightdm: improve systemd service
2019-10-09 21:22:19 +00:00
wodim
c5daa2cb3b
Fix typo
2019-10-09 20:42:36 +02:00
worldofpeace
f853bb4369
rl-1909: brief package version changes
2019-10-09 13:51:44 -04:00
Robin Gloster
0bf7300375
Merge pull request #70850 from yoohaemin/patch-1
...
Fix documentation typo
2019-10-09 17:35:41 +02:00
Robin Gloster
8e1fdad7c6
Merge pull request #70858 from manveru/nginx-map-hash-sizes
...
nginx: add map_hash_*_size options
2019-10-09 17:32:40 +02:00
Christoph Hrdinka
65be608330
Merge pull request #70371 from dminuoso/dovecot-fix-type
...
dovecot: fix wrong type in configFile option
2019-10-09 17:25:12 +02:00
talyz
dc29a45fc9
nixos/gitlab: Don't print sensitive data to log on startup
...
gitlab:db:configure prints the root user's password to stdout on
successful setup, which means it will be logged to the
journal. Silence this informational output. Errors are printed to
stderr and will thus still be let through.
2019-10-09 16:59:18 +02:00
Franz Pletz
f024e7b769
Merge pull request #67890 from mguentner/mxisd_ma1sd
...
mxisd: 1.4.5 -> 1.4.6 ☺ ma1sd: init at 2.1.1
2019-10-09 14:36:56 +00:00
Milan Pässler
ff0148d868
nixos/nginx: use mailcap mime.types
...
The mime type definitions included with nginx are very incomplete, so
we use a list of mime types from the mailcap package, which is also
used by most other Linux distributions by default.
2019-10-09 14:20:40 +00:00
Michael Fellinger
2d0b34aa1c
nginx: add map_hash_*_size options
2019-10-09 15:59:03 +02:00
Konrad Borowski
7e1e138606
nixos/caddy: add tests ( #70778 )
2019-10-09 11:32:03 +00:00
Haemin Yoo
8fc5984e83
Fix documentation typo
2019-10-09 19:43:12 +09:00
José Romildo Malaquias
f251c29484
Merge pull request #70035 from mkf/cwm-windowManager
...
nixos/cwm: init. Added windowManager cwm, basing on the module for dwm.
2019-10-09 07:04:39 -03:00
Andreas Rammhold
633baf4273
Merge pull request #70843 from B4dM4n/systemd-tmpfiles
...
nixos/systemd: fix broken tmpfiles.d symlinks
2019-10-09 11:44:19 +02:00
Fabian Möller
996d846726
nixos/systemd: fix broken tmpfiles.d symlinks
2019-10-09 10:53:01 +02:00
Robin Gloster
b5449e65b5
Merge pull request #69344 from talyz/gitlab-create-database
...
nixos/gitlab: Fix databaseCreateLocally evaluation and operation
2019-10-09 00:28:21 +02:00
Robin Gloster
b648a710af
Merge pull request #68721 from talyz/gitlab-fix
...
nixos/gitlab: Fix state directory permissions, clean up initializers directory
2019-10-09 00:27:12 +02:00
Eelco Dolstra
b407822b85
locate.nix: Don't create /var/cache
...
Fixes
setting up tmpfiles
[/etc/tmpfiles.d/var.conf:19] Duplicate line for path "/var/cache", ignoring.
2019-10-08 21:45:42 +02:00
Michał Krzysztof Feiler
00633a3e13
nixos/window-managers: add cwm to imports
...
as per request from @romildo under #70035 https://github.com/NixOS/nixpkgs/pull/70035#pullrequestreview-298166798
2019-10-08 17:48:09 +00:00
Linus Heckemann
a3a441cd87
nixos/tests/{ferm,networking}: fix eval with networkd
...
The networking.virtual test does not work with networkd yet, for
multiple reasons:
- network-online.target is not reached, because tun0 and tap0 are
considered as required for online but _not_ brought up or assigned
the configured addresses
- the commands later in the test rely on some units from the scripted
network setup
cc @fpletz networkd exper
cc @globin we looked at this together
2019-10-08 17:14:26 +02:00
Thomas Tuegel
22b4014900
Merge pull request #69357 from mtetreault/plymouth-custom-logo
...
breeze-plymouth: allow usage of custom logo
2019-10-08 05:32:07 -05:00
Jörg Thalheim
692656daf8
nixos/zfs: avoid script derivation for trim service
...
Since we only have a single pipe we can save the overhead of building a derivation
when creating the zfs trim service file when building the system.
2019-10-08 11:11:06 +01:00
Frederik Rietdijk
a0c34f54cc
Merge master into staging-next
2019-10-08 11:56:52 +02:00
Jan Tojnar
316d4faba4
nixos-rebuild: Fix target-host using fish
...
I have `users.defaultUserShell = pkgs.fish;` set on my server and when I ran `nixos-rebuild switch --target-host …`, the command failed with the following error:
fish: Unsupported use of '='. To run 'nix-store' with a modified environment, please use 'env PATH=… nix-store…'
That is because fish requires env to set environment variables for a program. It should also work on other shells.
2019-10-08 11:43:05 +02:00
Vladimír Čunát
f760f0ef48
Revert "Merge #67232 : machinectl compliant NixOS installation"
...
This reverts commit 66967ec752
, reversing
changes made to fb6595eafd
.
Fixes #70442 ; discussion: https://github.com/NixOS/nixpkgs/pull/70027
2019-10-07 20:56:59 +02:00
Eelco Dolstra
37c22b9d30
Revive systemd.coredump.enable
2019-10-07 20:28:13 +02:00
Maximilian Güntner
176b1aeb4e
nixos/mxisd: add support for ma1sd
...
both servers only differ slighly so the module
can be reused
2019-10-07 18:57:15 +02:00
Eelco Dolstra
39c0e489d3
Revert "make-disk-image: replace nixos-install by nix-env calls"
...
This reverts commit e9bf955fd6
. We use
nixos-install to ensure that make-disk-image produces the same result
as a regular installation (9802da517f
)
and to reduce code duplication. If there is something broken in
nixos-install, it should be fixed there.
2019-10-07 17:21:28 +02:00
Linus Heckemann
25a36477c8
19.09 notes: document timesyncd issue
...
See #64922 .
2019-10-07 10:47:36 -04:00
Samuel Leathers
4d25ec0caf
nixos/manual: update 19.03 -> 19.09 in upgrading section
2019-10-07 10:38:14 -04:00
Mathieu A.-Tetreault
001b42db7f
breeze-plymouth: allow usage of custom logo
2019-10-07 09:43:23 -04:00
Jörg Thalheim
a412d90e10
nixos/zfs: only enable trim if zfs is enabled
...
Also don't fail the service if there are no pools yet.
This might happen on installation ISOs.
2019-10-07 10:44:56 +01:00
Linus Heckemann
0b754fbe54
Merge pull request #69302 from mayflower/networkd-disallow-dhcp
...
networkd: disallow useDHCP
2019-10-07 11:29:04 +02:00
markuskowa
11e0b8465c
Merge pull request #70027 from ck3d/fix-ova
...
make-disk-image: replace nixos-install by nix-env calls
2019-10-07 10:16:50 +02:00
Symphorien Gibol
d9cac95878
nixos/xfce4-14: add xfce4-volumed-pulse when not using the desktop
...
xfce4-volumed-pulse is not abandoned, but is superseded by a panel
plugin which is not available when not using the desktop.
Fixes: volume up/down keys support
2019-10-06 21:22:44 +02:00
worldofpeace
67ac11e072
nixos/lightdm: improve systemd service
...
These improvements come from shopping around
at what other downstreams have done with their
systemd units and recent changes like [0] to gdm.
Note there's no requries or after on dbus.socket because
settings BusName will set this up automaticallly and
give it a type of dbus.
[0]: 2d57f45962
2019-10-06 10:23:21 -04:00
Joachim F
103180155d
Merge pull request #70447 from joachifm/feat/containers-private-networking-lockKernelModules-compat
...
nixos/containers: explicitly load kernel modules for networking
2019-10-06 11:00:36 +00:00
geistesk
7f9767954b
nixos/go-shadowsocks2: init
2019-10-06 11:18:20 +02:00
Matthieu Coudron
2a25b5c3cb
Merge pull request #70503 from joachifm/feat/remove-blcr
...
Remove blcr package & nixos module
2019-10-06 17:23:12 +09:00
Joachim Fasting
923c449e9b
nixos/blcr: remove
2019-10-06 08:10:23 +02:00
(cdep)illabout
1137ac7785
nixos/steam-hardware: add uinput to boot.kernelModules
...
uinput needs to be added to boot.kernelModules in order for the udev
rules defined by steam to be run and set permissions correctly on
/dev/uinput.
See https://github.com/NixOS/nixpkgs/issues/70471 .
2019-10-06 11:34:54 +09:00
Albert Safin
0eaf29433e
nixos/doc: fix manpage format
...
Spaces inside <refname> cause stray double underscore in generated manual pages.
Fixes #70468
2019-10-05 15:55:49 +00:00
worldofpeace
60ddfac0c6
Merge pull request #70465 from worldofpeace/pam-home
...
nixos/system-environment: use pam syntax for home variable
2019-10-05 15:04:31 +00:00
worldofpeace
57481b7a1c
nixos/system-environment: use pam syntax for home variable
2019-10-05 09:43:47 -04:00
worldofpeace
789fcebdab
Merge pull request #46997 from worldofpeace/installer-autorun
...
installer: autorun xserver in graphical media
2019-10-05 11:34:27 +00:00
Maximilian Bosch
d72f4e2ae0
Merge pull request #70422 from elseym/documize-writable-home
...
documize: introduce state directory
2019-10-05 13:20:58 +02:00
worldofpeace
99df63be0a
nixos/pantheon: add elementary-default-settings for services
...
This is needed for the AccountsService interfaces (in systemPackages).
2019-10-05 06:43:38 -04:00
Joachim Fasting
fe3da83b7e
nixos/containers: explicitly load kernel modules for networking
...
List all modules that *may* be required depending on individual container
configurations; don't expect that further modules can be loaded after boot.
Fixes https://github.com/NixOS/nixpkgs/issues/38676
2019-10-05 12:25:12 +02:00
Bas van Dijk
82259b5d54
thanos: 0.6.1 -> 0.7.0
2019-10-05 10:35:52 +02:00
Tor Hedin Brønner
9be5321097
nixos/gdm: follow upstream's service config
2019-10-05 05:15:29 +02:00
Tor Hedin Brønner
1efac91ca4
nixos/gdm: make config dir for gnome-initial-setup
...
Observed failure to lauch gdm in a VM due to missing /run/gdm.config.
2019-10-05 05:15:29 +02:00
worldofpeace
1f91fd0a03
Merge pull request #70362 from worldofpeace/gnome-shell-overides
...
nixos/gnome3: copy gnome-shell override
2019-10-05 02:53:52 +00:00
elseym
93fa16f939
documize: introduce state directory
2019-10-05 00:40:44 +02:00
lassulus
9d04a64a8f
iso-image: add loopback.cfg support to boot iso from grub
2019-10-04 23:24:52 +02:00
Linus Heckemann
141b7210cb
Merge pull request #70256 from Ma27/drop-nodejs-11_x
...
nodejs-11_x: remove
2019-10-04 18:14:15 +02:00
Jörg Thalheim
bf3360cdcf
nixos/zeronet: Improved config, dynamic user, remove static UI… ( #70305 )
...
nixos/zeronet: Improved config, dynamic user, remove static UID and GID
2019-10-04 10:23:13 +01:00
Victor Nawothnig
187c0b3aef
Specify correct option type
2019-10-04 09:57:06 +02:00
worldofpeace
eb14b000e5
nixos/gnome3: copy gnome-shell override
...
Without this these default settings overrides to gnome-shell
don't appear to be used completely.
2019-10-03 22:27:04 -04:00
Aaron Andersen
2448733001
Merge pull request #69371 from dasJ/memcached-sysuser
...
nixos/memcached: Switch to a system user
2019-10-03 18:11:00 -04:00
Okinan
5c18c08da9
nixos/zeronet: improved config, dynamic user
2019-10-03 17:03:32 -05:00
talyz
c6efa9fd2d
nixos/gitlab: Clean up the initializers on start
...
The initializers directory is populated with files from the gitlab
distribution on start, but old files will be left in the state folder
even if they're removed from the distribution, which can lead to
startup failures. Fix this by always purging the directory on start
before populating it.
2019-10-03 14:38:54 +02:00
Maximilian Bosch
334641d112
nodejs-11_x: remove
...
Package is EOLed by upstream: https://github.com/nodejs/Release
Fixes #69008
2019-10-03 14:33:34 +02:00
talyz
0f8133d633
nixos/gitlab: Fix state directory permissions
...
Since the preStart script is no longer running in privileged mode, we
reassign the files in the state directory and its config subdirectory
to the user we're running as. This is done by splitting the preStart
script into a privileged and an unprivileged part where the privileged
part does the reassignment.
Also, delete the database.yml symlink if it exists, since we want to
create a real file in its place.
Fixes #68696 .
2019-10-03 09:02:00 +02:00
Okinan
f2fc1b0046
nixos/zeronet: remove static uid and gid
2019-10-03 01:25:08 -05:00
worldofpeace
7e89933127
Merge pull request #70296 from worldofpeace/targets-want-gsd
...
nixos/gnome-settings-daemon: move systemd config here
2019-10-03 03:19:46 +00:00
worldofpeace
fb7b158dda
nixos/gnome-settings-daemon: move systemd config here
...
As I've decided that it doesn't make sense for the module to be shared [0]
we can move this config here.
[0]: 68ab37aa44
2019-10-02 22:51:11 -04:00
worldofpeace
159b12bee7
rl-2003: graphical image autoruns X
2019-10-02 22:11:40 -04:00
worldofpeace
489548310f
nixos/iso-image: add menu entry to disable display-manager
2019-10-02 22:10:18 -04:00
worldofpeace
f6f5151d57
installer: autorun xserver in graphical media
2019-10-02 22:10:18 -04:00
Elias Probst
86dea5559f
nixos/networkmanager: allow iwd as Wi-Fi backend
...
This introduces an option wifi.backend to the networkmanager module.
Co-authored-by: Cole Mickens <cole.mickens@gmail.com>
Co-authored-by: worldofpeace <worldofpeace@protonmail.ch>
2019-10-02 21:52:58 -04:00
worldofpeace
5edb20533d
Merge pull request #70041 from worldofpeace/desktopmanager-compat
...
Fix certain desktop managers building together
2019-10-03 01:32:12 +00:00
Jan Tojnar
b3fcd9375d
Merge branch 'master' into staging-next
2019-10-03 01:47:08 +02:00
worldofpeace
355425b7cb
Merge pull request #70293 from schmittlauch/cawbird2
...
corebird: move deprecation warning to aliases and release notes
2019-10-02 23:08:14 +00:00
Trolli Schmittlauch
45a9542a37
corebird: move deprecation warning to aliases and release notes
2019-10-03 00:41:33 +02:00
Jan Tojnar
4655669483
Gnome 3.34 ( #68608 )
...
Gnome 3.34
2019-10-03 00:38:54 +02:00
worldofpeace
dd86155fe4
nixos/gnome3: use sessionVariables
...
Without this GNOME_SESSION_DEBUG
likely won't be set in the systemd user environment.
2019-10-03 00:09:18 +02:00
worldofpeace
38147b9215
nixos/gnome-initial-setup: prevent run on existing systems
...
GNOME initial setup's run is conditioned on whether
the gnome-initial-setup-done file exists in XDG_CONFIG_HOME
Because of this, every existing user will have initial setup
running because they never ran it before.
To prevent this we create the file if the users stateVersion
is older than 20.03 (the release we added this module).
Also drop uneeded manual conflicts as systemd.packages
does handle this.
2019-10-03 00:09:12 +02:00
worldofpeace
f462b376bb
nixos/gdm: prevent g-i-s from running
2019-10-03 00:09:12 +02:00
worldofpeace
f9b44934bc
nixos/gnome-initial-setup: init
...
It tries to start during the GDM session even
with the conflicts.
2019-10-03 00:09:12 +02:00
Silvan Mosberger
899937e1ca
Merge pull request #69868 from Infinisil/config-check-warning
...
nixos/nix-daemon: Prevent network warning when checking config
2019-10-02 23:15:13 +02:00
Silvan Mosberger
643a329a4c
do-agent: init at 3.5.6 ( #69186 )
...
do-agent: init at 3.5.6
2019-10-02 22:34:26 +02:00
Peter Simons
8cd5aa8a82
Merge pull request #69194 from danbst/pg11-nixos
...
nixos/postgresql: switch default 9.6 -> 11
2019-10-02 20:02:25 +02:00
yvt
00a54207e0
nixos/do-agent: Depend on network-online.target
2019-10-03 02:44:33 +09:00
yvt
e3c1ecf111
nixos/do-agent: Use DynamicUser
2019-10-03 01:30:41 +09:00
Tim Steinbach
25295972d4
kafka: Add 2.3
2019-10-02 07:37:44 -04:00
Frank Doepper
3065d00d74
nixos module zfs: provide /etc/zfs/zpool.d
...
The scripts for zpool iostat -c and zpool status -c are located in
/etc/zfs/zpool.d
2019-10-02 12:34:09 +02:00
worldofpeace
49bc1bf44a
Merge pull request #70137 from michaelpj/fix-pam-variable-subst
...
nixos/system-environment: fix variable substitution
2019-10-02 01:20:28 +00:00
Michael Peyton Jones
d8b9742deb
nixos/system-environment: fix syntax for environment variables
...
`@` synax is for `PAM_ITEM`s, `HOME` needs to use `$`.
2019-10-01 21:19:04 -04:00
Michael Peyton Jones
9d61ddaf82
nixos/system-environment: replace env vars in values of variables too
...
We were only replacing them in the profiles. We also need to do this in
the values of variables, including both the session-relative variables
and the non-session-relative variables.
2019-10-01 21:18:54 -04:00
worldofpeace
4b7cac98a1
Merge pull request #70166 from kcalvinalvin/plasma-cmt-fix
...
nixos/cmt: Update error message for cmt
2019-10-01 12:42:08 +00:00
Calvin Kim
a96a5f37d2
nixos/cmt: Update error message for cmt
...
Added clearer error message for the failed assertion with libinput
2019-10-01 19:43:27 +09:00
worldofpeace
db96124d3d
Merge pull request #68995 from worldofpeace/bump/libfprint
...
fprintd: 0.8.1 -> 0.9.0, libfprint: 0.99 -> 1.0
2019-10-01 05:38:33 +00:00
AmineChikhaoui
6ce605e18d
sdImage: add option to enable bzip2 compression
...
also make SD image compression the default setup.
Fixes issues with output size such as: https://hydra.nixos.org/build/102163603
2019-09-30 15:42:13 -04:00
Tor Hedin Brønner
d27212d466
nixos/gnome3: enable systemd session
...
- register gnome-session and gnome-settings-daemon services.
- gnome-shell is already registered due to having a xdg portal
- manually specify that gsd is wanted by gnome-session
(systemd.packages doesn't pick the .wants directories for some reason)
2019-09-30 19:39:50 +02:00
Tor Hedin Brønner
fc43be57f0
nixos/gdm: start after getty@tty1
...
GDM is now killed if tty1 is started after gdm is launched. This follows
upstream's gdm service config.
This might cause problems with nixos-rebuild switch though. See the reasoning
and work that led to not following upstream on this:
https://github.com/NixOS/nixpkgs/issues/21439
4a180da
c46d4da
2019-09-30 19:39:49 +02:00
Silvan Mosberger
c75a18fea6
mkRemovedOptionModule: assert on removed options ( #69419 )
...
mkRemovedOptionModule: assert on removed options
2019-09-30 16:39:40 +02:00
Robin Gloster
b08b0bcbbe
mkRemovedOptionModule: assert on removed options
...
We don't want to ignore config that can mess up machines. In general
this should always fail evaluation, as you think you are changing
behaviour and don't, which can easily create run-time errors we can
catch early.
2019-09-30 12:07:13 +02:00
worldofpeace
9bc8169695
nixos/networkmanager: remove basePackages option
...
This option in now completely useless.
All the default configs for these packages
already have GNOME features default,
2019-09-29 20:36:49 -04:00
worldofpeace
68ab37aa44
nixos/gnome-settings-daemon: drop package option
...
After some thought, it doesn't make sense for this module to be shared.
2019-09-29 20:36:49 -04:00
Michał Krzysztof Feiler
d9a7c51016
nixos/cwm: init
...
Added windowManager cwm, basing on the module for dwm.
2019-09-29 23:26:08 +02:00
Christian Kögler
e9bf955fd6
make-disk-image: replace nixos-install by nix-env calls
...
nixos-install can only be called from a machine
2019-09-29 19:57:19 +02:00
Martin Weinelt
1fb3818440
nixos/tests/ferm: wait for DAD timeout before testing
...
The test has recently been failing due to the IPv6 address
on the server still being in the tentative state, when the
client sends its first request. The server will not start
using the IPv6 address until DAD has completed.
Scripted networking seems not to wait for DAD completion
before completing network-online.target, so let's switch
to networkd instead, which does.
2019-09-29 15:25:11 +02:00
Frederik Rietdijk
503081fa5b
Merge staging into staging-next
2019-09-29 11:05:22 +02:00
worldofpeace
1d1ff2cc50
Merge pull request #67305 from adisbladis/iso-image-defaults
...
Change ISO image defaults
2019-09-28 18:09:08 -04:00
Maximilian Bosch
beb59b76cf
prometheus-wireguard-exporter: 3.1.0 -> 3.1.1
...
https://github.com/MindFlavor/prometheus_wireguard_exporter/releases/tag/3.1.1
This release adds a flag `-l` which takes an address where the exporter
is available. The default is `0.0.0.0` (previously, `0.0.0.0` was used
by default).
Please note that there are no dependency changes in Cargo and therefore
the cargo hash didn't change.
2019-09-28 20:55:57 +02:00
Vladimír Čunát
4c07c0fdf0
nixos network-interfaces.nix: fixup after the last change
...
TL;DR: ipv6 tests were broken (probably the privacy-extension stuff)
https://github.com/NixOS/nixpkgs/pull/68227#issuecomment-536159177
2019-09-28 19:33:44 +02:00
Silvan Mosberger
e463c7cd75
nixos/nix-daemon: Prevent network warning when checking config
...
Since version 2.3 (https://github.com/NixOS/nix/pull/2949 which was
cherry-picked to master) Nix issues a warning when --no-net wasn't
passed and there is no network interface. This commit adds the --no-net
flag to the nix.conf check such that no warning is issued.
2019-09-28 17:00:47 +02:00
Jörg Thalheim
5a73cd4f68
nixos/zfs: Enable trim by default ( #69672 )
...
nixos/zfs: Enable trim by default
2019-09-28 10:07:12 +01:00
Jörg Thalheim
3ed9892552
Merge pull request #69489 from Mic92/sysctl
...
nixos/sysctl: reduce prio of "kernel.kptr_restrict" to mkDefault
2019-09-28 10:06:54 +01:00
Vladimír Čunát
fda4a08d4a
Merge branch 'staging-next'
...
There are several security fixes - again, as it consists mainly of the
previously reverted staging-next merge.
2019-09-28 07:43:04 +02:00
worldofpeace
07ca91187c
Merge pull request #69706 from worldofpeace/gdm-isnt-unstable
...
nixos/gdm: update description
2019-09-27 18:40:18 -04:00
worldofpeace
e4cce87fba
nixos/gdm: update description
...
GDM isn't dangerous anymore in NixOS.
2019-09-27 17:42:39 -04:00
Vladimír Čunát
217cf982c7
Merge branch 'master' into staging-next
2019-09-27 22:13:02 +02:00
Samuel Dionne-Riel
95005c1039
Merge pull request #68265 from tkerber/rpi4
...
Various: Add support for raspberry pi 4.
2019-09-27 14:35:17 -04:00
Svein Ove Aas
e4f975765f
nixos/zfs: Enable trim by default
2019-09-27 18:35:03 +01:00
Joachim F
ad773d31e2
Merge pull request #69345 from joachifm/feat/split-version
...
Replace uses of splitString for splitting version strings
2019-09-27 06:19:18 +00:00
worldofpeace
985697bff7
Merge pull request #66652 from craigem/clarify_wireless_examples
...
nixos/doc: Clarify wireless examples
2019-09-26 22:56:20 -04:00
Craige McWhirter
cce7486deb
nixos/doc: Clarify wireless examples
...
This commits makes it clearer to a novice reader how to configure several
diferent types of SSID connections that were otherwise obscurely documented
Resolves #66650
2019-09-26 22:52:21 -04:00
Joachim Fasting
bad07dfac5
tree-wide: replace uses of splitString "." with lib.versions
...
Quoting from the splitString docstring:
NOTE: this function is not performant and should never be used.
This replaces trivial uses of splitString for splitting version
strings with the (potentially builtin) splitVersion.
2019-09-26 17:42:49 +02:00
Linus Heckemann
f0f3bd8d96
Merge pull request #68227 from volth/patch-362
...
network-interfaces.nix: escape '.' in interface names passed to sysctl
2019-09-26 12:16:24 +02:00
Jörg Thalheim
46dfb2d090
nixos/sysctl: reduce prio of "kernel.kptr_restrict" to mkDefault
...
Users should be able to override this value without having to use mkForce.
2019-09-26 10:09:31 +01:00
Peter Hoeg
8cc9d24fe1
Merge pull request #69387 from peterhoeg/f/optimise
...
nixos/nix-optimise: be smarter about when we run the store optimiser
2019-09-26 13:10:39 +08:00
Dmitry Kalinkin
b3472597b7
Merge branch 'staging-next' into staging
...
Fixes eval on darwin after #69072
Tested using maintainers/scripts/eval-release.sh before and after to see
that the fix works
2019-09-25 19:31:32 -04:00
Dmitry Kalinkin
c455adcc42
Merge branch 'master' into staging-next
...
Fixes eval on darwin after #69072
Resolved conflict in pkgs/tools/security/thc-hydra/default.nix
Basically had to revert a1c0e10564
which
adapts #69210 to master that doesn't yet have
329a88efa7
Tested using maintainers/scripts/eval-release.sh before and after to see
that the fix works
2019-09-25 19:21:46 -04:00
Daniel KT
4590a2380e
nixos/nextcloud: add Strict-Transport-Security
...
This commit adds a Strict-Transport-Security header to
the nginx config file generated by the nextcloud module.
The Strict-Transport-Security header is recommended in
official guide for hardening Nextcloud installations:
https://docs.nextcloud.com/server/16/admin_manual/installation/harden_server.html
Further, if it is not set, we see a warning in the security scan results
in the Nextcloud admin panel:
```
The "Strict-Transport-Security" HTTP header is not set to at least "15552000" seconds. For enhanced security, it is recommended to enable HSTS as described in the security tips
```
2019-09-25 16:56:53 -04:00
Marek Mahut
a28f136bdb
Merge pull request #69297 from aanderse/zabbix
...
nixos/zabbixServer: move pid file from default (/tmp) to /run/zabbix …
2019-09-25 20:35:50 +02:00
edef
429644bf4c
nixos/rabbitmq: use an attrset for example configItems
2019-09-25 17:38:00 +00:00
markuskowa
389c287b90
Merge pull request #69398 from Evils-Devils/fancontrol
...
nixos/fancontrol: init
2019-09-25 18:34:16 +02:00
Arian van Putten
7058b0ad12
nixos/systemd: Make machinectl work with NixOS
...
Images generated with nixos-install will be supported by machinectl
problem is that systemd-nspawn's private usersns feature clashes
with DynamicUser and RuntimeDirectory features, which causes NixOS
images to not boot. There is an upstream issue for this
https://github.com/systemd/systemd/issues/13622
2019-09-25 18:27:19 +02:00
Evils-Devils
6765f049f2
Update nixos/modules/services/hardware/fancontrol.nix
...
Co-Authored-By: markuskowa <markus.kowalewski@gmail.com>
2019-09-25 17:31:20 +02:00
Evils-Devils
44e2ff26b8
Update nixos/modules/services/hardware/fancontrol.nix
...
Co-Authored-By: markuskowa <markus.kowalewski@gmail.com>
2019-09-25 17:24:49 +02:00
Evils
401b0b0c7b
fancontrol: load config from configuration.nix
2019-09-25 17:05:09 +02:00
Evils-Devils
5fe72ee446
Update nixos/modules/services/hardware/fancontrol.nix
...
Co-Authored-By: markuskowa <markus.kowalewski@gmail.com>
2019-09-25 14:49:28 +02:00
Evils
baa642e8b3
fancontrol: more cleanup
2019-09-25 14:42:22 +02:00
Markus Kowalewski
7ced973114
nixos/orangefs: add test
2019-09-25 14:17:11 +02:00
Markus Kowalewski
8b4ce06e63
nixos/orangefs: add modules for server and client
2019-09-25 14:17:08 +02:00
Evils
30f8bc974c
update cfg to match section change
2019-09-25 13:43:06 +02:00
Evils-Devils
6c19673fef
Update nixos/modules/services/hardware/fancontrol.nix
...
Co-Authored-By: markuskowa <markus.kowalewski@gmail.com>
2019-09-25 13:28:16 +02:00
Franz Pletz
66967ec752
Merge pull request #67232 from ck3d/container-useHostResolvConf
...
machinectl compliant NixOS installation
2019-09-25 09:34:17 +00:00
Robin Gloster
68b42a84fd
Merge branch 'master' into networkd-disallow-dhcp
2019-09-25 11:28:20 +02:00
Evils
81b6dec3c8
fancontrol service init
2019-09-25 05:05:32 +02:00
Peter Hoeg
81cd220c67
nixos/pymks: log to journal
2019-09-25 06:33:34 +08:00
Peter Hoeg
4b34dd3120
Merge pull request #69300 from peterhoeg/f/ha2
...
nixos/home-assistant: set bluetooth perms
2019-09-25 04:49:31 +08:00
Janne Heß
aa27c1c664
nixos/memcached: Switch to a system user
2019-09-24 20:10:19 +02:00
talyz
58a7502421
nixos/gitlab: Only create the database when databaseHost is unset
...
Make sure that we don't create a database if we're not going to
connect to it. Also, fix the assertion that usernames be equal to only
trig when peer authentication is used (databaseHost == "").
2019-09-24 15:04:20 +02:00
talyz
ec958d46ac
nixos/gitlab: Fix evaluation failure when postgresql is disabled
...
config.services.postgresql.package is only defined when the postgresql
service is activated, which means we fail to evaluate when
databaseCreateLocally == false. Fix this by using the default
postgresql package when the postgresql service is disabled.
2019-09-24 15:04:19 +02:00
Robin Gloster
6b87fb6df2
Merge pull request #69346 from rvolosatovs/fix/systemd-dhcp
...
nixos/network: replace deprecated DHCP=both by DHCP=yes
2019-09-24 14:14:30 +02:00
Florian Klink
e813eb2b65
nixos/gitlab: Update release notes and documentation ( #69313 )
...
nixos/gitlab: Update release notes and documentation
2019-09-24 13:00:35 +02:00
Robin Gloster
5ee383ea8c
nixos-generate-config: add useDHCP per interface
...
This sets networking.useDHCP to false and for all interfaces found the
per-interface useDHCP to true. This replicates the current default
behaviour and prepares for the switch to networkd.
2019-09-24 11:44:01 +02:00
Roman Volosatovs
a0a3675bdf
nixos/network: replace deprecated DHCP=both by DHCP=yes
2019-09-24 11:33:36 +02:00
Robin Gloster
e862dd6373
networking.useDHCP: add release notes and docs
2019-09-24 10:20:17 +02:00
Robin Gloster
c26c6241ea
networking.useDHCP: disallow for networkd
...
This setting will be removed with the switch to systemd-networkd. The
use of per interface config is encouraged instead.
2019-09-24 10:20:16 +02:00
Vladimír Čunát
192fb9d11b
Merge branch 'staging-next' into staging
2019-09-24 08:15:01 +02:00
Vladimír Čunát
eab41878ac
Merge branch 'master' into staging-next
2019-09-24 08:14:34 +02:00
Jörg Thalheim
bfed455de3
Merge pull request #68946 from volth/escape
...
treewide: fix string escapes
2019-09-24 04:19:12 +01:00
Jörg Thalheim
c5bc77d151
Merge pull request #67748 from typetetris/yubico-local-auth
...
Yubico local auth
2019-09-24 03:31:39 +01:00
Notkea
981177e4dd
nixos/postgresql-wal-receiver: remove restart limit ( #67857 )
...
useful in case of network disruption
2019-09-23 22:51:26 +03:00
talyz
dfc43f7d0a
nixos/gitlab: Document the restriction introduced on statePath
...
The state path now, since the transition from initialization in
preStart to using systemd-tmpfiles, has the following restriction: no
parent directory can be owned by any other user than root or the user
specified in services.gitlab.user. This is a potentially breaking
change and the cause of the error isn't immediately obvious, so
document it both in the release notes and statePath description.
2019-09-23 17:55:58 +02:00
talyz
7e325c2251
nixos/gitlab: Mention secret option transition in release notes
...
Document the breaking secret option transition from literal secrets to
file-based ones.
2019-09-23 17:55:58 +02:00
Peter Hoeg
e537a0a11e
home-assistant: set capabilities for bluetooth
2019-09-23 21:54:16 +08:00
Robin Gloster
30591314e5
Merge pull request #68970 from teto/rngd
...
qemu-guest: allow to override security.rngd
2019-09-23 15:53:38 +02:00
Aaron Andersen
32a38d50bb
nixos/zabbixServer: move pid file from default (/tmp) to /run/zabbix to avoid issues with PrivateTmp=true
2019-09-23 09:35:51 -04:00
Franz Pletz
0dc4fe0a44
nixos/systemd: pick more upstream tmpfiles confs
...
In #68792 it was discovered that /dev/fuse doesn't have
wordl-read-writeable permissions anymore. The cause of this is that the
tmpfiles examples in systemd were reorganized and split into more files.
We thus lost some of the configuration we were depending on.
In this commit some of the new tmpfiles configuration that are
applicable to us are added which also makes wtmp/lastlog in the pam
module not necessary anymore.
Rationale for the new tmpfile configs:
- `journal-nowcow.conf`: Contains chattr +C for journald logs which
makes sense on copy-on-write filesystems like Btrfs. Other filesystems
shouldn't do anything funny when that flag is set.
- `static-nodes-permissions.conf`: Contains some permission overrides
for some device nodes like audio, loop, tun, fuse and kvm.
- `systemd-nspawn.conf`: Makes sure `/var/lib/machines` exists and old
snapshots are properly removed.
- `systemd-tmp.conf`: Removes systemd services related private tmp
folders and temporary coredump files.
- `var.conf`: Creates some useful directories in `/var` which we would
create anyway at some point. Also includes
`/var/log/{wtmp,btmp,lastlog}`.
Fixes #68792 .
2019-09-23 15:23:31 +02:00
Florian Klink
6262e83f5f
nixos/gitlab: Add gnutar and gzip to gitlab-sidekiq's path ( #68908 )
...
nixos/gitlab: Add gnutar and gzip to gitlab-sidekiq's path
2019-09-23 06:40:52 +02:00
Peter Hoeg
55509279a9
Merge pull request #69260 from volth/patch-369
...
nixos/mailcatcher: add bind capabilities
2019-09-23 11:27:32 +08:00
Peter Hoeg
423eb16913
Merge pull request #15560 from peterhoeg/nm_dnsdhcp
...
nixos/networkmanager: tiny cleanups
2019-09-23 10:16:32 +08:00
volth
6c038cd409
nixos/mailcatcher: add bind capabilities
2019-09-22 19:49:26 +00:00
Minijackson
367cd2c7f8
nixos/shiori: init with test
2019-09-22 18:48:07 +02:00
Jan Tojnar
f2b9f5baa5
Merge branch 'staging-next' into staging
2019-09-22 16:39:56 +02:00
Jan Tojnar
11c2b06dd2
Merge branch 'master' into staging-next
2019-09-22 16:39:12 +02:00
Martin Milata
2adb03fdae
nixos/wordpress: generate secrets locally
...
Use /dev/urandom to generate keys and salts instead of downloading them
from https://api.wordpress.org/secret-key/1.1/salt/
2019-09-22 14:33:08 +02:00
Peter Simons
a486f0178d
Merge pull request #68950 from peti/t/nixos-doc-fix
...
nixos: improve the example that shows how to include nvidia_x11 in boot.extraModulePackages
2019-09-22 11:53:52 +02:00
danbst
e557ad74ac
move from 19.09 to 20.03
2019-09-22 12:27:39 +03:00
Jörg Thalheim
8c7667c325
Enable work variant firewall with iptables-compat ( #66953 )
...
Enable work variant firewall with iptables-compat
2019-09-22 09:28:16 +01:00
Jörg Thalheim
ffa80e75b7
nixos/firewall: rename iptables-compat to iptables-nftables-compat
2019-09-22 09:09:43 +01:00
Vladimír Čunát
6c567ed797
Merge branch 'staging-next' into staging
2019-09-22 10:06:45 +02:00
Vladimír Čunát
22a216849b
Re-Revert "Merge branch 'staging-next'"
...
This reverts commit f8a8fc6c7c
.
2019-09-22 09:38:09 +02:00
Peter Hoeg
1c7aaf227c
nixos/networkmanager: tiny cleanups
...
These are the leftovers of an older PR.
a. Send messages to auditd if auditing is enabled.
b. Add missing dbus configuration if dnsmasq is used for DNS
2019-09-22 13:33:43 +08:00
Mario Rodas
54433c443b
nixos/spotifyd: update spotifyd flags
2019-09-21 17:10:00 -05:00
Vladimír Čunát
f8a8fc6c7c
Revert "Merge branch 'staging-next'"
...
This reverts commit 41af38f372
, reversing
changes made to f0fec244ca
.
Let's delay this. We have some serious regressions.
2019-09-21 20:05:09 +02:00
Sascha Grunert
2c3dcbb9d0
Add cri-o service to modules ( #68153 )
...
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2019-09-21 14:18:42 +00:00
Vladimír Čunát
41af38f372
Merge branch 'staging-next'
2019-09-21 13:14:09 +02:00
Elis Hirwing
89b0ef6589
Merge pull request #69195 from c0deaddict/fix/gitea-dump
...
nixos/gitea: fix dump
2019-09-21 10:02:41 +02:00
Jos van Bakel
86b83f37b8
nixos/gitea: fix dump
2019-09-21 09:28:53 +02:00
danbst
fb863fceea
nixos/postgresql: switch default 9.6 -> 11
...
This is designed for 19.09 release.
2019-09-21 10:18:56 +03:00
yvt
832ede6514
nixos/do-agent: init
2019-09-21 13:16:25 +09:00
Matthew Bauer
d8b7b95ac6
Merge remote-tracking branch 'origin/master' into staging
2019-09-20 23:25:24 -04:00
Silvan Mosberger
f47ef8fcf7
sdImage: use findmnt to get root device when resizing ( #58059 )
...
sdImage: use findmnt to get root device when resizing
2019-09-20 23:28:01 +02:00
worldofpeace
1e6f4fb2bc
Merge pull request #68983 from worldofpeace/xfce-cleanup
...
Touchups for nixos/xfce4-14 for 19.09
2019-09-19 13:25:03 -04:00
Eelco Dolstra
b0ccd6dd16
Revert "nixos/doc: re-format"
...
This reverts commit ea6e8775bd
. The new
format is not an improvement.
2019-09-19 19:17:30 +02:00
worldofpeace
db3d31b903
Merge pull request #69093 from alexarice/xterm-default
...
nixos/xterm: Set default to xserver.enable
2019-09-19 13:05:49 -04:00
Frederik Rietdijk
f81d43b94c
Merge staging-next into staging
2019-09-19 17:00:07 +02:00
Frederik Rietdijk
0b12d44c06
Merge master into staging-next
2019-09-19 16:59:42 +02:00
Eelco Dolstra
387a2f27ec
Merge pull request #68906 from edolstra/revert-interface-version
...
Revert systemd interface version to 2
2019-09-19 14:09:18 +02:00
Alex Rice
cf56cefd95
xterm: Set default to xserver.enable
2019-09-19 12:27:05 +01:00
Marek Mahut
0358bc174b
nixos/jormungandr: moving to a new section topics_of_interest
2019-09-19 10:51:59 +02:00
worldofpeace
58f090cc7b
Merge pull request #69031 from worldofpeace/xcursor-update
...
nixos/xdg/icons: match XCURSOR_PATH spec
2019-09-18 17:42:20 -04:00
Jan Tojnar
0902f08e0d
Merge branch 'staging-next' into staging
2019-09-18 22:40:42 +02:00
Jan Tojnar
105abdd52c
Merge branch 'master' into staging-next
2019-09-18 22:40:03 +02:00
Jan Tojnar
c28659e2fb
doc: Disable wrapping source ( #68181 )
...
doc: Disable wrapping source
2019-09-18 22:33:56 +02:00
Jan Tojnar
ea6e8775bd
nixos/doc: re-format
2019-09-18 22:13:35 +02:00
Maximilian Bosch
713fda2eb5
nixos/sway: install swaybg by default
2019-09-18 21:50:18 +02:00
Jan Tojnar
641f6356d3
doc: Disable wrapping source
...
Even a simple typo fix can result in a reflow of a whole paragraph, leading to illegible diffs. The majority of text editors supports wrapping the source code to a comfortable width so it makes sense to me to sacrifice the few that do not rather than the unfortunately line-oriented diff tools.
2019-09-18 21:17:52 +02:00
Jan Tojnar
f5ef80b46d
Merge branch 'staging-next' into staging
2019-09-18 21:16:01 +02:00
Jan Tojnar
62791c3743
Merge branch 'master' into staging-next
2019-09-18 21:15:35 +02:00
worldofpeace
b3f4ce351e
nixos/xdg/icons: match XCURSOR_PATH spec
2019-09-18 13:03:14 -04:00
worldofpeace
760b677c19
Merge pull request #68729 from worldofpeace/elementary-greeter/master
...
nixos/pantheon: use Pantheon's greeter
2019-09-18 11:16:21 -04:00
worldofpeace
ee29fbd9a2
Merge pull request #68492 from worldofpeace/pam-sessionvariables
...
Introduce environment.profileRelativeSessionVariables
2019-09-18 11:15:26 -04:00
worldofpeace
6663a795a3
nixos/environment: set GTK_EXE_PREFIX
2019-09-18 11:13:43 -04:00
worldofpeace
cc125810cb
nixos/environment: set GTK_DATA_PREFIX
...
Many desktop environment modules are already setting
this so it already makes sense to just do this globally.
2019-09-18 11:13:43 -04:00
worldofpeace
5669b06235
lightdm-mini-greeter: put xgreeters in passthru
2019-09-18 11:13:43 -04:00
worldofpeace
b558eb8329
nixos/lightdm-gtk-greeter: don't wrap in module
2019-09-18 11:13:43 -04:00
worldofpeace
7814a2f566
nixos/enso-os: don't wrap in module
2019-09-18 11:13:42 -04:00
worldofpeace
feab607ae5
nixos/sddm: don't set XDG_DATA_DIRS
...
environment.profileRelativeSessionVariables should make this unneeded.
2019-09-18 11:13:42 -04:00
worldofpeace
453036c8a7
nixos/gdm: don't set XCURSOR_PATH
2019-09-18 11:13:42 -04:00
worldofpeace
df56adac53
nixos/xdg/icons: use profileRelativeSessionVariables
2019-09-18 11:13:42 -04:00
worldofpeace
671404509b
nixos/terminfo: use profileRelativeSessionVariables
2019-09-18 11:13:42 -04:00
Robert Helgesson
866cc3e792
nixos/system-environment: introduce environment.profileRelativeSessionVariables
...
There is a need for having sessionVariables set relative to the Nix Profiles.
Such as in #68383 .
2019-09-18 11:09:43 -04:00
Joachim Fasting
eb59755f70
tests/hardened: fix build
...
Bug introduced by 4ead3d2ec3
For ZHF https://github.com/NixOS/nixpkgs/issues/68361
2019-09-18 15:38:43 +02:00
worldofpeace
e2644036f6
fprintd: 0.8.1 -> 0.9.0
...
Resolves issues with StateDirectory not being set in
systemd unit.
https://gitlab.freedesktop.org/libfprint/fprintd/-/tags/V_0_9_0
2019-09-17 20:15:57 -04:00
worldofpeace
0b73294d60
fixup! nixos/xfce4-14: cleanup defaults slightly
2019-09-17 19:49:18 -04:00
Robin Gloster
9566ec034b
hardware.brightnessctl: add brightnessctl to env
2019-09-18 00:06:11 +02:00
worldofpeace
6bd2a8f08c
Merge pull request #68987 from worldofpeace/closures
...
nixos/release: add gnome3 closure
2019-09-17 17:53:32 -04:00
worldofpeace
fb45993a62
nixos/release: add gnome3 closure
2019-09-17 17:48:40 -04:00
worldofpeace
f6398d8ba2
nixos/xfce4-14: cleanup defaults slightly
...
We added
- parole
- pavucontrol
- xfce4-taskmanager
- xfwm4-themes
to the default packages.
2019-09-17 17:05:39 -04:00
worldofpeace
f85e126f8c
nixos/xfce4-14: add gnome-themes-extra
2019-09-17 17:05:39 -04:00
worldofpeace
5bcec7642f
nixos/xfce4-14: remove gtk-xfce-engine
...
Xfce 4.14 deprecated this.
It had many gtk2 themes that don't work that confused users #68977 .
2019-09-17 17:05:39 -04:00
Alex Whitt
f01224374d
nixos/jenkins: Copy plugins as .jpi to fix initialization errors
2019-09-17 19:54:57 +02:00
Antoine R. Dumont (@ardumont)
35fe50352f
nixos/minidlna: Allow more configuration options
...
This commits allows the user to configure:
- more minidlna options
- the ones not yet disclosed in nix (extending the existing minimal subset)
2019-09-17 19:51:33 +02:00
Matthieu Coudron
c27360ae47
qemu-guest: allow to override security.rngd
...
... otherwise enabling it causes a merge conflict.
Enabling it was necessary to give enough entropy for the sshd daemon in
my libvirt/nixops VM to generate keys see
https://github.com/NixOS/nixops/issues/1199 .
2019-09-18 00:35:04 +09:00
talyz
aceac9d531
nixos/gitlab: Add gnutar and gzip to gitlab-sidekiq's path
...
Tar and gzip are needed when importing GitLab project exports.
2019-09-17 09:27:16 +02:00
Peter Simons
be3dae2e3a
nixos: improve the example that shows how to include nvidia_x11 in boot.extraModulePackages
...
Fixes https://github.com/NixOS/nixpkgs/issues/68931 .
2019-09-17 08:37:56 +02:00
Elis Hirwing
c45bf10e9f
Merge pull request #68891 from aanderse/moodle
...
nixos/moodle: add extraConfig option
2019-09-17 07:20:07 +02:00
Thomas Kerber
cc5baf2d86
Various: Add support for raspberry pi 4.
2019-09-17 04:05:16 +01:00
volth
48086fbd70
nixos/matomo: fix escape
2019-09-17 00:27:13 +00:00
volth
432a2d73be
nixos/tt-rss: fix string escape
2019-09-17 00:23:51 +00:00
volth
4641b683f6
nixos/restya-board: fix string escape
2019-09-17 00:22:56 +00:00
volth
08195254aa
nixos/matomo: fix string escape
2019-09-17 00:22:11 +00:00
volth
b384420f2c
nixos/prosody: fix escape
2019-09-17 00:20:05 +00:00
volth
fbd2b55715
nixos/graphite: fix escape
2019-09-17 00:19:28 +00:00
volth
1aadcee68a
nixos/less: fix escape
2019-09-17 00:18:14 +00:00
volth
602a39c318
nixos/rspamd: fix fancy unicode quote
2019-09-16 23:40:32 +00:00
Léo Gaspard
ffaf2661fb
Merge branch 'master' into os-prober-test
2019-09-16 23:21:15 +02:00
Vladimír Čunát
268872d996
Merge branch 'staging-next' into staging
2019-09-16 19:25:54 +02:00
Vladimír Čunát
fa4a3af5a7
Merge branch 'master' into staging-next
2019-09-16 19:24:52 +02:00
Eelco Dolstra
b20a0e49c8
Revert systemd interface version to 2
...
The new systemd in 19.09 gives an "Access Denied" error when doing
"systemctl daemon-reexec" on an 19.03 system. The fix is to use the
previous systemctl to signal the daemon to re-exec itself. This
ensures that users don't have to reboot when upgrading from NixOS
19.03 to 19.09.
2019-09-16 16:51:19 +02:00
Eelco Dolstra
b9ed9c7fed
Typo
2019-09-16 16:50:39 +02:00
Eelco Dolstra
054f01ee1b
man-nixos-rebuild.xml: Improve layout
2019-09-16 14:42:59 +02:00