summary refs log tree commit diff
path: root/nixos/modules
Commit message (Collapse)AuthorAge
* nixos/chrony: fix misplaced ConditionCapability= directiveAustin Seipp2018-12-02
| | | | Signed-off-by: Austin Seipp <aseipp@pobox.com>
* Merge pull request #51316 from primeos/swayMichael Weiss2018-12-02
|\ | | | | nixos/sway-beta: Improve the wrapper
| * nixos/sway-beta: Improve the wrapperMichael Weiss2018-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to the dbus-launch documentation [0] "--exit-with-session" shouldn't be used: "This option is not recommended, since it will consume input from the terminal where it was started; it is mainly provided for backwards compatibility." And it also states: "To start a D-Bus session within a text-mode session, do not use dbus-launch. Instead, see dbus-run-session(1)." The new wrapper also avoids starting an additional D-Bus session if DBUS_SESSION_BUS_ADDRESS is already set. Fix #51303. [0]: https://dbus.freedesktop.org/doc/dbus-launch.1.html [1]: https://dbus.freedesktop.org/doc/dbus-run-session.1.html
* | Merge pull request #48423 from charles-dyfis-net/beesSilvan Mosberger2018-12-02
|\ \ | | | | | | bees: init at 0.6.1; nixos/modules: services.bees init
| * | nixos/modules: services.bees initCharles Duffy2018-11-29
| | |
* | | Revert "nixos/luksroot: Check whether the device already exists"Jörg Thalheim2018-12-02
| | | | | | | | | | | | | | | | | | This reverts commit 9cd4ce98bfc11292fbebc6b85d14bb386e82c9a8. This might be broken for some people: https://github.com/NixOS/nixpkgs/pull/50281#issuecomment-443516289
* | | Merge pull request #51329 from c0bw3b/cleanup/gnu-httpsmarkuskowa2018-12-02
|\ \ \ | | | | | | | | Favor HTTPS URLs - the GNU edition
| * | | Treewide: use HTTPS on GNU domainsc0bw3b2018-12-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | HTTP -> HTTPS for : - http://gnu.org/ - http://www.gnu.org/ - http://elpa.gnu.org/ - http://lists.gnu.org/ - http://gcc.gnu.org/ - http://ftp.gnu.org/ (except in fetchurl mirrors) - http://bugs.gnu.org/
* | | | Merge pull request #51225 from LumiGuide/elk-6.5.1Bas van Dijk2018-12-02
|\ \ \ \ | | | | | | | | | | elk: 6.3.2 -> 6.5.1
| * | | | elk: 6.3.2 -> 6.5.1Bas van Dijk2018-12-01
| | | | |
* | | | | Merge pull request #51379 from Gerschtli/add/programs-nm-appletJörg Thalheim2018-12-02
|\ \ \ \ \ | | | | | | | | | | | | nixos/nm-applet: add nm-applet program
| * | | | | nixos/nm-applet: make the module smallerJörg Thalheim2018-12-02
| | | | | | | | | | | | | | | | | | | | | | | | more readable imho
| * | | | | nixos/nm-applet: add nm-applet programTobias Happ2018-12-02
| | |_|_|/ | |/| | |
* | | | | nixos/cockroachdb: create new serviceJohn Boehr2018-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This also includes a full end-to-end CockroachDB clustering test to ensure everything basically works. However, this test is not currently enabled by default, though it can be run manually. See the included comments in the test for more information. Closes #51306. Closes #38665. Co-authored-by: Austin Seipp <aseipp@pobox.com> Signed-off-by: Austin Seipp <aseipp@pobox.com>
* | | | | nixos/luksroot: Check whether the device already existsJanne Heß2018-12-01
| |_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | The new reuse behaviour is cool and really useful but it breaks one of my use cases. When using kexec, I have a script which will unlock the disks in my initrd. However, do_open_passphrase will fail if the disk is already unlocked.
* | | | Merge pull request #51199 from samueldr/fix/iso-image-fat32Renaud2018-12-01
|\ \ \ \ | |/ / / |/| | | iso-image: Verifies the FAT partition at build.
| * | | iso-image: Do not use batch operations for `mcopy`.Samuel Dionne-Riel2018-11-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ``` b Batch mode. Optimized for huge recursive copies, but less secure if a crash happens during the copy. ``` It seems the "less secure if a crash happens" does not need a crash to happen. With batch mode: ``` /[...]/. Start (0) does not point to parent (___) ``` For pretty much everything copied in. Without batch mode, everything passes `fsck`. See #51150
| * | | iso-image: Verifies the FAT partition at build.Samuel Dionne-Riel2018-11-28
| | | | | | | | | | | | | | | | This is done to ensure `mtools`-based operations leave a clean FS.
* | | | nixos/dhcpcd: (try to) restart chrony in the exitHookAustin Seipp2018-11-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As the comment notes, restarts/exits of dhcpcd generally require restarting the NTP service since, if name resolution fails for a pool of servers, the service might break itself. To be on the safe side, try restarting Chrony in these instances, too. Signed-off-by: Austin Seipp <aseipp@pobox.com>
* | | | nixos/chrony: don't emit initstepslew when servers is emptyAustin Seipp2018-11-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Setting the server list to be empty is useful e.g. for hardware-only or virtualized reference clocks that are passed through to the system directly. In this case, initstepslew has no effect, so don't emit it. Signed-off-by: Austin Seipp <aseipp@pobox.com>
* | | | nixos/borgbackup: allow paths to be empty or relative (#51275)Robert Schütz2018-11-30
| | | | | | | | | | | | | | | | This former necessary in order to exclusively use `--pattern` or `--patterns-from`. Fixes #51267.
* | | | Merge pull request #48049 from Vskilet/roundcube-moduleFlorian Klink2018-11-30
|\ \ \ \ | | | | | | | | | | nixos/roundcube: add roundcube module
| * | | | roundcube: apply code review suggestionsRobin Gloster2018-11-28
| | | | |
| * | | | roundcube: clean-up and add testRobin Gloster2018-11-28
| | | | |
| * | | | roundcube: IPv6 by defaultVictor SENE2018-11-28
| | | | |
| * | | | nixos/roundcube: add to module-listVictor SENE2018-11-28
| | | | |
| * | | | nixos/roundcube: add roundcube module and default configurationVictor SENE2018-11-28
| | | | |
* | | | | Merge pull request #49385 from krav/gitlab-shell-authorized-keysFlorian Klink2018-11-29
|\ \ \ \ \ | | | | | | | | | | | | gitlab-shell: 8.3.3->8.4.1, fix hardcoded paths
| * | | | | gitlab: stop regenerating the authorized_keys fileFlorian Klink2018-11-28
| | | | | |
* | | | | | Merge pull request #36424 from jfrankenau/i18n-extra-localeMaximilian Bosch2018-11-29
|\ \ \ \ \ \ | | | | | | | | | | | | | | nixos/i18n: add option for extra locale settings
| * | | | | | nixos/i18n: add option for extra locale settingsJohannes Frankenau2018-03-07
| | | | | | |
* | | | | | | Merge pull request #51090 from grahamc/revert-disable-zfsGraham Christensen2018-11-29
|\ \ \ \ \ \ \ | |_|_|_|/ / / |/| | | | | | Revert "zfs cannot be distributed. Disabling it in the isos."
| * | | | | | Revert "zfs cannot be distributed. Disabling it in the isos."Graham Christensen2018-11-26
| | |_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ZFS's popularity is growing, and not including it by default is a bit frustrating. On top of that, the base iso includes ZFS _anyway_ due to other packages depending upon it. I think we're in the clear to do this on the basis that Oracle probably doesn't care, it is probably fine (the SFLC agrees) and we're a small fish. If a copyright holder asks us to, we can definitely revert it again. This reverts commit 33d07c7ea9f0d05d47dd4b41ded3b261380acfac.
* | | | | | sd-image: Do not use batch operation for `mcopy`.Samuel Dionne-Riel2018-11-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ``` b Batch mode. Optimized for huge recursive copies, but less secure if a crash happens during the copy. ``` It seems the "less secure if a crash happens" does not need a crash to happen. With batch mode: ``` /[...]/. Start (0) does not point to parent (___) ``` For pretty much everything copied in. Without batch mode, everything passes `fsck`. See #51150
* | | | | | sd-image: Verifies the FAT partition before copying it.Samuel Dionne-Riel2018-11-29
| |_|/ / / |/| | | | | | | | | | | | | | This is to ensure `mtools`-based operations don't wreck the FS.
* | | | | Merge branch 'pr-51043'Léo Gaspard2018-11-29
|\ \ \ \ \ | |_|_|/ / |/| | | | | | | | | | | | | | * pr-51043: nixos/urxvtd: remove socket activation
| * | | | nixos/urxvtd: remove socket activationfishyfriend2018-11-25
| | | | | | | | | | | | | | | | | | | | This fixes #23193. urxvtd is not presently compatible with socket activation.
* | | | | nixos/ntp: use upstream default restrictions to avoid DDoS (#50762)Brandon Black2018-11-28
| | | | | | | | | | | | | | | | | | | | Fixes #50732
* | | | | Merge pull request #51065 from bbigras/swaySilvan Mosberger2018-11-27
|\ \ \ \ \ | | | | | | | | | | | | nixos/sway-beta: pass arguments from wrapper to sway
| * | | | | nixos/sway-beta: pass arguments from wrapper to swayBruno Bigras2018-11-26
| | | | | |
* | | | | | Merge pull request #51085 from erikarvstedt/container-configSilvan Mosberger2018-11-27
|\ \ \ \ \ \ | | | | | | | | | | | | | | containers: simplify env var definition
| * | | | | | nixos/containers: simplify env var definitionErik Arvstedt2018-11-26
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | Also clear up the misleading comment: This env var isn't root-specific, it's needed for all users.
* | | / / / postgresql: Enable systemd integration for 9.6+Domen Kožar2018-11-27
| |_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This allows, finally, proper detection when postgresql is ready to accept connections. Until now, it was possible that services depending on postgresql would fail in a race condition trying to connect to postgresql.
* | | | | nixos/nspawn: Fix small typo (#51077)Arian van Putten2018-11-26
|/ / / / | | | | | | | | This has slipped through review in my previous PR it seems
* | | | nixos/kubernetes: allow to disable clusterCidrJean-Philippe Braun2018-11-26
| | | | | | | | | | | | | | | | | | | | Fix option type and set --allocate-node-cidr to false if no clusterCidr is defined.
* | | | google-compute-image: make it a module and the size tuneable (#49854)Ding Xiang Fei2018-11-26
| | | | | | | | | | | | | | | | | | | | * move GCE system configuration to `google-compute-config.nix` * remove `fetch-ssh-keys` service (disabled in comment)
* | | | Merge branch 'master' of https://github.com/nixos/nixpkgs into ↵Ding Xiang Fei2018-11-26
|\ \ \ \ | | | | | | | | | | | | | | | tarball-closureinfo
| * \ \ \ Merge pull request #51012 from griff/rspamd-proxy-typeSilvan Mosberger2018-11-25
| |\ \ \ \ | | |/ / / | |/| | | nixos/rspamd: Allow worker type to be proxy again
| | * | | nixos/rspamd: Allow worker type to be proxy againBrian Olsen2018-11-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When reworking the rspamd workers I disallowed `proxy` as a type and instead used `rspamd_proxy` which is the correct name for that worker type. That change breaks peoples existing config and so I have made this commit which allows `proxy` as a worker type again but makes it behave as `rspamd_proxy` and prints a warning if you use it.
| * | | | Merge pull request #51001 from c0bw3b/cleanup/more-httpsRenaud2018-11-25
| |\ \ \ \ | | | | | | | | | | | | Treewide: use more HTTPS-enabled sources