aboutsummaryrefslogtreecommitdiff
path: root/nixos/modules (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | | | | | | | | | | | | Merge pull request #104268 from mvnetbiz/ha-allowpathsMartin Weinelt2020-11-291-1/+5
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | home-assistant: add allowlist_external_dirs to systemd unit ReadWritePaths
| * | | | | | | | | | | | | | | home-assistant: add allowlist_external_dirs to systemd unit ReadWritePathsMatt Votava2020-11-191-1/+5
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | nixos/disnix: reorder startup to take MongoDB and InfluxDB into account, add ↵Sander van der Burg2020-11-281-1/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | option to add Disnix profile to the system PATH
* | | | | | | | | | | | | | | | nixos/dysnomia: add InfluxDB configuration options, add option to use legacy ↵Sander van der Burg2020-11-281-23/+63
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | modules, eliminate import from derivation hack
* | | | | | | | | | | | | | | | Merge pull request #86225 from sorki/proxychainsSilvan Mosberger2020-11-282-0/+166
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|/ / / / / / / / / / / / / |/| | | | | | | | | | | | | | | nixos/proxychains: init
| * | | | | | | | | | | | | | | nixos/proxychains: initRichard Marko2020-09-092-0/+166
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | Merge pull request #85133 from snicket2100/mosquitto-service-sandboxingSandro2020-11-271-0/+10
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / / / / / / / / |/| | | | | | | | | | | | | | | mosquitto: systemd service sandboxing
| * | | | | | | | | | | | | | | mosquitto: systemd service sandboxingsnicket21002020-04-131-0/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | running the service in a sandbox. read-only root file system, with tmpfs mounted in /tmp, hidden /root and /home, temporary /dev. the only writeable path is the data directory, which according to my experiments is enough for the service to work correctly.
* | | | | | | | | | | | | | | | Merge pull request #104553 from jansol/pipewireJan Tojnar2020-11-261-11/+8
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | pipewire: 0.3.15 -> 0.3.16
| * | | | | | | | | | | | | | | | pipewire: 0.3.15 -> 0.3.16Jan Solanti2020-11-231-11/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release replaces the libpulseaudio shim with a pipewire module that acts as a fake pulseaudio server along with a systemd service that loads that module on demand.
* | | | | | | | | | | | | | | | | nixos/zram: add zramSwap.memoryMax optionLuke Granger-Brown2020-11-251-1/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This allows capping the total amount of memory that will be used for zram-swap, in addition to the percentage-based calculation, which is useful when blanket-applying a configuration to many machines. This is based off the strategy used by Fedora for their rollout of zram-swap-by-default in Fedora 33 (https://fedoraproject.org/wiki/Changes/SwapOnZRAM), which caps the maximum amount of memory used for zram at 4GiB. In future it might be good to port this to the systemd zram-generator, instead of using this separate infrastructure.
* | | | | | | | | | | | | | | | | nixos auto-upgrade: remove flag when flakeFrederik Rietdijk2020-11-251-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The `--no-build-output` flag that is added by default is only valid for the old cli, which is not used when flakes are used. Follow-up to c9daa81eff922d9f77d136cfcff0ea05d40024e0.
* | | | | | | | | | | | | | | | | Merge pull request #102938 from cruegge/dev-symlinksFlorian Klink2020-11-251-0/+3
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nixos/stage-1: create /dev/std{in,out,err} symlinks
| * | | | | | | | | | | | | | | | | Create /dev/std{in,out,err} symlinks in stage-1Christoph Ruegge2020-11-051-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This used to be done by udev, but that was removed in systemd/systemd@6b2229c. The links are created by systemd at the end of stage-2, but activation scripts might need them earlier.
* | | | | | | | | | | | | | | | | | nixos/factorio: Don't open firewall ports by defaultStijn DW2020-11-241-1/+1
| | | | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | | | nixos/factorio: add openFirewall optionStijn DW2020-11-241-3/+8
| | | | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | | | Merge pull request #104776 from grahamc/utillinuxGraham Christensen2020-11-2450-70/+71
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|_|_|_|_|_|_|_|/ / / / / |/| | | | | | | | | | | | | | | | | utillinux: rename to util-linux
| * | | | | | | | | | | | | | | | | utillinux: rename to util-linuxGraham Christensen2020-11-2450-70/+71
| | | | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | | | Merge pull request #81661 from adisbladis/ssh-pam-sudo-keysadisbladis2020-11-242-2/+2
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / / / / / / / |/| | | | | | | | | | | | | | | | | pam_ssh_agent_auth: Honour services.openssh.authorizedKeysFiles
| * | | | | | | | | | | | | | | | | pam_ssh_agent_auth: Honour services.openssh.authorizedKeysFilesadisbladis2020-11-242-2/+2
| | |_|_|_|_|_|_|_|_|_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If a system administrator has explicitly configured key locations this should be taken into account by `sudo`.
* | | | | | | | | | | | | | | | | mullvad-vpn: add iproute2Artturin2020-11-241-0/+3
| | | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | | Merge pull request #104734 from ju1m/fix-udevRyan Mulligan2020-11-241-1/+1
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nixos/network-interfaces: fix typo in udev rule syntax
| * | | | | | | | | | | | | | | | | nixos/network-interfaces: fix typo in udev rule syntaxJulien Moutinho2020-11-241-1/+1
| | | | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | | | Merge pull request #104721 from vkleen/postfix-smtp-fixPeter Simons2020-11-241-6/+6
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|/ / / / / / / / / / / / / / / / |/| | | | | | | | | | | | | | | | | nixos.postfix: make postfix.enableSmtp work again
| * | | | | | | | | | | | | | | | | nixos/postfix: make postfix.enableSmtp work againViktor Kleen2020-11-231-6/+6
| | |_|_|_|_|_|_|_|_|/ / / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes issue #104715.
* | | | | | | | | | | | | | | | | Merge pull request #104520 from Izorkin/wsddFlorian Klink2020-11-232-0/+125
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|_|_|_|_|_|/ / / / / / |/| | | | | | | | | | | | | | | | wsdd: init at 0.6.2
| * | | | | | | | | | | | | | | | nixos/samba-wsdd: init service samba-wsddIzorkin2020-11-232-0/+125
| | |_|_|/ / / / / / / / / / / / | |/| | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | nixos/*: fix indentationzowoq2020-11-2311-50/+52
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | Merge pull request #104456 from endgame/refresh-instance-metadata-on-bootGraham Christensen2020-11-222-29/+25
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refresh instance metadata on boot
| * | | | | | | | | | | | | | | | {ec2,openstack}-metadata-fetcher: unconditionally fetch metadataJack Kelly2020-11-222-30/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The metadata fetcher scripts run each time an instance starts, and it is not safe to assume that responses from the instance metadata service (IMDS) will be as they were on first boot. Example: an EC2 instance can have its user data changed while the instance is stopped. When the instance is restarted, we want to see the new user data applied.
| * | | | | | | | | | | | | | | | {ec2,openstack}-metadata-fetcher: introduce wget_imds functionJack Kelly2020-11-222-8/+16
| | | | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | | | openstack-metadata-fetcher: stop lying in log messageJack Kelly2020-11-221-1/+1
| |/ / / / / / / / / / / / / / /
* | | | | | | | | | | | | | | | Merge pull request #99116 from jslight90/gitlab-13.4.0Florian Klink2020-11-221-4/+11
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / / / / / |/| | | | | | | | | | | | | | | GitLab 13.0.14 -> 13.6.0
| * | | | | | | | | | | | | | | nixos/gitlab: start gitaly after gitlabMilan Pässler2020-11-211-2/+3
| | | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | | nixos/gitlab: add changes for gitlab 13.4.xJeff Slight2020-11-201-2/+8
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | nixos/openldap: Fix sssd-ldap testKai Wohlfahrt2020-11-211-26/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use this as a test of the migration warnings/functionality.
* | | | | | | | | | | | | | | | nixos/openldap: use mkRenamedOptionModuleKai Wohlfahrt2020-11-211-182/+69
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This offers less helpful warnings, but makes the implementation considerably more straightforward.
* | | | | | | | | | | | | | | | nixos/openldap: fix path + base64 value typesKai Wohlfahrt2020-11-211-25/+8
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | nixos/openldap: Fix indentationKai Wohlfahrt2020-11-211-15/+15
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | nixos/openldap: Remove extraConfig optionsKai Wohlfahrt2020-11-211-119/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of deprecating, as per PR feedback
* | | | | | | | | | | | | | | | nixos/openldap: Mention schemas in migration hintKai Wohlfahrt2020-11-211-2/+4
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | nixos/openldap: Add release-notes for OLC configKai Wohlfahrt2020-11-211-7/+1
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | nixos/openldap: Add support for base64 valuesKai Wohlfahrt2020-11-211-12/+32
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | nixos/openldap: Pick some PR nitsKai Wohlfahrt2020-11-211-16/+16
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | nixos/openldap: Allow declarativeContents for multiple databasesKai Wohlfahrt2020-11-211-18/+34
| | | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | | nixos/openldap: Add delcarativeConfig by suffixKai Wohlfahrt2020-11-211-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adding by index could be an issue if the user wanted the data to be added to a DB other than the first.
* | | | | | | | | | | | | | | | nixos/openldap: switch to slapd.d configurationKai Wohlfahrt2020-11-212-81/+292
| |_|/ / / / / / / / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The old slapd.conf is deprecated. Replace with slapd.d, and use this opportunity to write some structured settings. Incidentally, this fixes the fact that openldap is reported up before any checks have completed, by using forking mode.
* | | | | | | | | | | | | | | Merge pull request #104052 from TredwellGit/nixos/mallocJoachim F2020-11-211-1/+1
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|_|_|_|/ / / / / / |/| | | | | | | | | | | | | | nixos/malloc: fix Scudo
| * | | | | | | | | | | | | | nixos/malloc: fix ScudoTredwellGit2020-11-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes segmentation faults. https://github.com/NixOS/nixpkgs/issues/100799
* | | | | | | | | | | | | | | Merge master into staging-nextFrederik Rietdijk2020-11-212-14/+12
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | | |/ / / / / / / / / / / / / | |/| | | | | | | | | | | | |