summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* Merge pull request #82411 from adisbladis/ntpd-extraconfigadisbladis2020-03-12
|\ | | | | services.ntpd: Add extraConfig parameter
| * services.ntpd: Add extraConfig parameteradisbladis2020-03-12
| |
* | Merge pull request #81945 from Infinisil/hostFilesSilvan Mosberger2020-03-12
|\ \ | |/ |/| Introduce `networking.hostFiles` option
| * nixos/cjdns: Fix connectTo example renderingSilvan Mosberger2020-03-07
| |
| * nixos/cjdns: Don't use IFD for extra hostsSilvan Mosberger2020-03-07
| |
| * nixos/networking: Add hostFiles optionSilvan Mosberger2020-03-07
| | | | | | | | | | | | | | | | | | When blocklists are built with a derivation, using extraHosts would require IFD, since the result of the derivation needs to be converted to a string again. By introducing this option no IFD is needed for such use-cases, since the fetched files can be assigned directly.
* | Merge pull request #82185 from matt-snider/masterLéo Gaspard2020-03-12
|\ \ | | | | | | ankisyncd, nixos/ankisyncd: init at 2.1.0
| * | nixos/ankisyncd: init at 2.1.0Matt Snider2020-03-10
| | |
* | | Merge pull request #81214 from buckley310/updateDelaylewo2020-03-12
|\ \ \ | | | | | | | | NixOS/auto-upgrade: Add optional randomized delay
| * | | NixOS/auto-upgrade: refine option descriptionSean Buckley2020-03-03
| | | |
| * | | NixOS/auto-upgrade: fix wordingSean Buckley2020-02-28
| | | | | | | | | | | | Co-Authored-By: Pascal Hertleif <killercup@gmail.com>
| * | | NixOS/auto-upgrade: Add optional randomized delaySean Buckley2020-02-27
| | | |
* | | | Merge pull request #82148 from devhell/tests_signal-desktopFlorian Klink2020-03-11
|\ \ \ \ | | | | | | | | | | tests: Fix signal-desktop
| * | | | tests: Fix signal-desktopdevhell2020-03-09
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | This test fails due to OOM on the VM. Setting the memory of the VM to 1024 lets the test succeed. Cc: @flokli
* | | | Merge pull request #81402 from mmilata/firejail-exampleGraham Christensen2020-03-11
|\ \ \ \ | | | | | | | | | | nixos/firejail: add example for wrappedBinaries
| * | | | nixos/firejail: add example for wrappedBinariesMartin Milata2020-02-29
| | | | |
* | | | | Merge pull request #82340 from nyanloutre/vsftpd_pam_fixJörg Thalheim2020-03-11
|\ \ \ \ \ | | | | | | | | | | | | nixos/vsftpd: fix missing default pam_service_name
| * | | | | nixos/vsftpd: fix missing default pam_service_namenyanloutre2020-03-11
| | | | | | | | | | | | | | | | | | | | | | | | 9458ec4 removed the ftp pam service which was used by default by vsftpd
* | | | | | Merge pull request #80904 from talyz/haproxy-fixesJörg Thalheim2020-03-11
|\ \ \ \ \ \ | | | | | | | | | | | | | | nixos/haproxy: Revive the haproxy user and group
| * | | | | | nixos/haproxy: Revive the haproxy user and grouptalyz2020-03-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Running haproxy with "DynamicUser = true" doesn't really work, since it prohibits specifying a TLS certificate bundle with limited permissions. This revives the haproxy user and group, but makes them dynamically allocated by NixOS, rather than statically allocated. It also adds options to specify which user and group haproxy runs as.
* | | | | | | treewide: remove myself from a few packages I don't use anymoreMaximilian Bosch2020-03-11
| | | | | | |
* | | | | | | php: 7.3.15 -> 7.4.3Elis Hirwing2020-03-11
| | | | | | |
* | | | | | | Merge pull request #82326 from mmilata/rename-fix-module-pathSilvan Mosberger2020-03-11
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nixos: fix module paths in rename.nix
| * | | | | | | nixos: fix module paths in rename.nixMartin Milata2020-03-11
| | | | | | | |
* | | | | | | | nixos/lightdm-tiny-greeter: init moduleEdward Tjörnhammar2020-03-11
| | | | | | | |
* | | | | | | | Merge pull request #81941 from volth/patch-390Sarah Brofeldt2020-03-11
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | tests/kubernetes: remove unreferenced variable and import from inexisting file
| * | | | | | | | tests/kubernetes: remove unreferenced variable and import from inexsisting filevolth2020-03-07
| | |_|_|_|_|_|/ | |/| | | | | |
* | | | | | | | Merge pull request #81431 from jtojnar/malcontent-0.6Jan Tojnar2020-03-11
|\ \ \ \ \ \ \ \ | |_|/ / / / / / |/| | | | | | | malcontent: 0.4.0 → 0.6.0
| * | | | | | | nixos/malcontent: initJan Tojnar2020-03-10
| | |_|/ / / / | |/| | | | |
* | | | | | | nixos/mysql: add settings and configFile optionsAaron Andersen2020-03-10
| | | | | | |
* | | | | | | Merge pull request #82252 from mayflower/radius-http2Linus Heckemann2020-03-10
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | FreeRADIUS improvements
| * | | | | | | nixos/freeradius: depend on network.target, not onlineLinus Heckemann2020-03-10
| | | | | | | |
| * | | | | | | freeradius: make debug logging optionalLinus Heckemann2020-03-10
| |/ / / / / /
* | | | | | | Merge pull request #82139 from adisbladis/switch-to-configuration-manualadisbladis2020-03-10
|\ \ \ \ \ \ \ | |_|_|_|_|/ / |/| | | | | | switch-to-configuration: Add new option X-OnlyManualStart
| * | | | | | switch-to-configuration: Add new option X-OnlyManualStartadisbladis2020-03-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is to facilitate units that should _only_ be manually started and not activated when a configuration is switched to. More specifically this is to be used by the new Nixops deploy-* targets created in https://github.com/NixOS/nixops/pull/1245 that are triggered by Nixops before/after switch-to-configuration is called.
* | | | | | | environment.etc: fix typozimbatm2020-03-09
|/ / / / / /
* | | | | | nixos/cage: move ConditionPathExists to service configFlorian Klink2020-03-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It doesn't belong into [Service]: > Unknown key name 'ConditionPathExists' in section 'Service', ignoring.
* | | | | | Merge pull request #80921 from hercules-ci/buildLayeredImage-allow-empty-storeDomen Kožar2020-03-08
|\ \ \ \ \ \ | | | | | | | | | | | | | | buildLayeredImage: Allow empty store, no paths to add
| * | | | | | buildLayeredImage: Allow empty store, no paths to addRobert Hensing2020-02-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is useful when buildLayeredImage is called in a generic way that should allow simple (base) images to be built, which may not reference any store paths.
* | | | | | | Merge pull request #79488 from danielfullmer/zoneminder-1.34.2Dmitry Kalinkin2020-03-07
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | zoneminder: 1.32.3 -> 1.34.3
| * | | | | | | nixos/zoneminder: update on startup if neededDaniel Fullmer2020-03-07
| | | | | | | |
* | | | | | | | Merge pull request #81369 from mweinelt/pr/acme-chmodSilvan Mosberger2020-03-07
|\ \ \ \ \ \ \ \ | |_|_|_|/ / / / |/| | | | | | | nixos/acme: apply chmod and ownership unconditionally
| * | | | | | | nixos/acme: apply chmod and ownership unconditionallyMartin Weinelt2020-02-29
| | |_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also separate directory and file permissions so the certificate files don't end up with the executable bit. Fixes #81335
* | | | | | | Merge pull request #81907 from atlaua/lr/wg-typoLancelot SIX2020-03-06
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nixos/wireguard: Fix typo in error message
| * | | | | | | nixos/wireguard: Fix typo in error messageLuis Ressel2020-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | generatePrivateKey -> generatePrivateKeyFile
* | | | | | | | Merge pull request #81891 from emilazy/nginx-use-mozilla-tls-configJörg Thalheim2020-03-06
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | nixos/nginx: use Mozilla Intermediate TLS configuration
| * | | | | | | nixos/nginx: use Mozilla Intermediate TLS configurationEmily2020-03-06
| | |_|_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The configuration at https://ssl-config.mozilla.org/#server=nginx&config=intermediate is reliably kept up-to-date in terms of security and compatible with a wide range of clients. They've probably had more care and thought put into them than our defaults, and will be easier to keep updated in the future. The only removed (rather than changed) configuration option here is ssl_ecdh_curve, per https://github.com/mozilla/server-side-tls/issues/189. Resolves #80952.
* | | | | | | Merge pull request #81752 from alexbakker/fix-55221Jörg Thalheim2020-03-06
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | uwsgi: use pyhome instead of pythonpath for uwsgi vassals
| * | | | | | | uwsgi: use pyhome instead of pythonpath for uwsgi vassalsAlexander Bakker2020-03-04
| | | | | | | |
* | | | | | | | Merge pull request #81774 from ju1m/shorewall_fix_RestartTriggersSilvan Mosberger2020-03-06
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | shorewall: fix RestartTriggers