about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* Merge pull request #234254 from kevincox/mautrix-facebook-appservice-idNick Cao2023-05-26
|\ | | | | nixos.mautrix-facebook: Fix appservice name
| * nixos.mautrix-facebook: Fix appservice nameKevin Cox2023-05-26
| | | | | | | | It appears that newer mautrix-facebook versions default to the appservice name `facebook`. This was breaking our registration and causing mautrix-facebook to fail to start. This changes the name back and makes the registration generated match whatever the setting in the app is.
* | nixos/nginx: first-class PROXY protocol supportRaito Bezarius2023-05-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PROXY protocol is a convenient way to carry information about the originating address/port of a TCP connection across multiple layers of proxies/NAT, etc. Currently, it is possible to make use of it in NGINX's NixOS module, but is painful when we want to enable it "globally". Technically, this is achieved by reworking the defaultListen options and the objective is to have a coherent way to specify default listeners in the current API design. See `mkDefaultListenVhost` and `defaultListen` for the details. It adds a safeguard against running a NGINX with no HTTP listeners (e.g. only PROXY listeners) while asking for ACME certificates over HTTP-01. An interesting usecase of PROXY protocol is to enable seamless IPv4 to IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is demonstrated how to achieve this in the tests, using sniproxy. Finally, the tests covers: - NGINX `defaultListen` mechanisms are not broken by these changes; - NGINX PROXY protocol listeners are working in a final usecase (sniproxy); - uses snakeoil TLS certs from ACME setup with wildcard certificates; In the future, it is desirable to spoof-attack NGINX in this scenario to ascertain that `set_real_ip_from` and all the layers are working as intended and preventing any user from setting their origin IP address to any arbitrary, opening up the NixOS module to bad™ vulnerabilities. For now, it is quite hard to achieve while being minimalistic about the tests dependencies.
* | Merge pull request #233350 from GrahamDennis/grahamdennis/testing-networksRyan Lahfa2023-05-26
|\ \ | | | | | | nixos/qemu-vm: add option for named network interfaces
| * | nixos/qemu-vm: quoted string reformatGraham Dennis2023-05-24
| | |
| * | nixos/qemu-vm: add option for named network interfacesGraham Dennis2023-05-24
| | | | | | | | | | | | | | | Adds a new option to the virtualisation modules that enables specifying explicitly named network interfaces in QEMU VMs. The existing `virtualisation.vlans` option is still supported for cases where the name of the network interface is irrelevant.
* | | Merge pull request #234116 from chkno/nar-serve-fixWeijia Wang2023-05-26
|\ \ \ | | | | | | | | nixos/tests/nar-serve: Fix
| * | | nixos/tests/nar-serve: FixScott Worley2023-05-25
| | |/ | |/|
* | | nixos/virtualisation/google-compute-config: minor refactoringlucasew2023-05-26
| | | | | | | | | | | | Signed-off-by: lucasew <lucas59356@gmail.com>
* | | nixos/doc: add release note for sftpgoYaya2023-05-25
| | |
* | | nixos/tests/sftpgo: initYaya2023-05-25
| | |
* | | nixos/sftpgo: initYaya2023-05-25
| | | | | | | | | | | | | | | | | | | | | A fully featured and highly configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support. https://github.com/drakkan/sftpgo
* | | nixos/pam_mount: fix mounts without options (#234026)Jenny2023-05-25
| | | | | | | | | | | | | | | | | | This commit adds a comma in front of the given options, which makes the mounts still succeed even if no options are given. Fixes #233946
* | | Merge pull request #233517 from illustris/pve-fixSandro2023-05-25
|\ \ \ | | | | | | | | nixos/proxmox-image: fix qemu build failure
| * | | nixos/proxmox-image: fix qemu build failureillustris2023-05-25
| | | |
* | | | Merge pull request #232339 from bl1nk/bl1nk/thelounge-package-optionSandro2023-05-25
|\ \ \ \ | | | | | | | | | | nixos/thelounge: add package option
| * | | | nixos/thelounge: add package optionMarkus Cisler2023-05-17
| | | | | | | | | | | | | | | | | | | | Adds a package option to the thelounge NixOS module.
* | | | | Merge pull request #231630 from OPNA2608/fix/mir_keyboard_missingSandro2023-05-25
|\ \ \ \ \ | | | | | | | | | | | | mir: Pull patch to fix evdev device misses
| * | | | | mir: Pull patch to fix evdev device missesOPNA26082023-05-15
| | | | | |
* | | | | | Merge pull request #229767 from mberndt123/mberndt123/stratis-rootfsWill Fancher2023-05-25
|\ \ \ \ \ \ | | | | | | | | | | | | | | nixos/stratis: initrd support for stratis root volumes
| * | | | | | remove unneeded importMatthias Berndt2023-05-23
| | | | | | |
| * | | | | | minor refactoringMatthias Berndt2023-05-19
| | | | | | |
| * | | | | | Merge remote-tracking branch 'upstream/master' into mberndt123/stratis-rootfsMatthias Berndt2023-05-17
| |\ \ \ \ \ \
| * | | | | | | improve stratis initrd supportMatthias Berndt2023-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | it is now possible to supply a stratis pool uuid for every filesystem, and if that filesystem is required for boot, the relevant pool will be started in the initramfs.
| * | | | | | | make nixos-generate-config generate stratis pool UUIDsMatthias Berndt2023-05-15
| | | | | | | |
| * | | | | | | address code review issuesMatthias Berndt2023-05-08
| | | | | | | |
| * | | | | | | add installer test for stratis root fsMatthias Berndt2023-05-07
| | | | | | | |
| * | | | | | | address review commentsMatthias Berndt2023-05-07
| | | | | | | |
| * | | | | | | nixos/stratis: enable booting from stratis volumeMatthias Berndt2023-05-07
| | | | | | | |
* | | | | | | | Merge pull request #233092 from midchildan/chore/mirakurun/node18Sandro2023-05-25
|\ \ \ \ \ \ \ \
| * | | | | | | | mirakurun: use node 18midchildan2023-05-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Relates to #229910.
* | | | | | | | | foundationdb: default to foundationdb71Weijia Wang2023-05-25
| | | | | | | | |
* | | | | | | | | Merge pull request #229321 from kira-bruneau/cloneheroWeijia Wang2023-05-25
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | clonehero: 0.23.2.2 -> 1.0.0.4080
| * | | | | | | | | clonehero: 0.23.2.2 -> 1.0.0.4080Syboxez Blank2023-05-24
| | |_|_|_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | Co-authored-by: Kira Bruneau <kira.bruneau@pm.me>
* | | | | | | | | nixos/sshd: detect duplicate config keysnyanotech2023-05-25
| | | | | | | | |
* | | | | | | | | Merge pull request #231996 from ↵Artturi2023-05-25
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | amjoseph-nixpkgs/pr/release-notes/powerpc64le-linux
| * | | | | | | | | release-notes: note ability to build powerpc64le-linux NixOS ISOsAdam Joseph2023-05-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit adds a mention to the release notes of the fact that NixOS 23.05 can build installer ISOs for a new platform.
* | | | | | | | | | Merge pull request #232001 from ↵Artturi2023-05-25
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | amjoseph-nixpkgs/pr/release-notes/powerpc-ieee-long-double
| * | | | | | | | | | release-notes: mention that powerpc64 now uses IEEE-standard floatsAdam Joseph2023-05-15
| |/ / / / / / / / /
* | | | | | | | | | Merge pull request #232837 from emilylange/nixos/synapseMaximilian Bosch2023-05-24
|\ \ \ \ \ \ \ \ \ \ | |_|/ / / / / / / / |/| | | | | | | | | nixos/synapse: allow omitting `trusted_key_servers[].verify_keys`
| * | | | | | | | | nixos/synapse: allow omitting `trusted_key_servers[].verify_keys`IndeedNotJames2023-05-19
| | |_|_|/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Synapse does not require the `verify_keys` attr/object to be set. It made sense back in the day, when federation traffic used to use self-signed certificates. But this is no longer the case. The previous `types.nullOr` didn't actually allow omitting `verify_keys` because Synapse's config parser is unable to parse that. Not a breaking change. Upstream docs: https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html?highlight=verify_keys#trusted_key_servers
* | | | | | | | | nixosTests.etcd-cluster: update namezowoq2023-05-24
| | | | | | | | |
* | | | | | | | | nixosTests.etcd-cluster: fix testzowoq2023-05-24
| |_|_|_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | match changes in 25f3323d60271ac9b668757322c47f96aa7ca726
* | | | | | | | Merge pull request #233518 from tie/bios-bootable-x86Ryan Lahfa2023-05-23
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | nixos/iso-image: enable BIOS boot by default if possible
| * | | | | | | | nixos/iso-image: enable BIOS boot by default if possibleIvan Trubach2023-05-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The change introduced in commit e5b072eca165430efc4d7a179011a42aab4470a2 breaks backwards compatibility for some users, see https://github.com/NixOS/nixpkgs/commit/e5b072eca165430efc4d7a179011a42aab4470a2#commitcomment-113775008 https://github.com/NixOS/nixpkgs/pull/219351#discussion_r1139773448 This change updates the implementation to enable BIOS boot if possible for the build and host platforms, and also assert that BIOS boot is not enabled for non-x86 host platforms.
* | | | | | | | | Merge pull request #232235 from cyberus-technology/outline-0.69.2Ryan Lahfa2023-05-23
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | outline: 0.68.1 -> 0.69.2
| * | | | | | | | | outline: add nixos testAlexander Sieg2023-05-23
| | | | | | | | | |
| * | | | | | | | | outline: 0.68.1 -> 0.69.2Alexander Sieg2023-05-23
| | | | | | | | | |
* | | | | | | | | | Merge pull request #233397 from Kranzes/hci-moduleRobert Hensing2023-05-23
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / |/| | | | | | | | | nixos/hercules-ci-agent: sync module with upstream
| * | | | | | | | | nixos/hercules-ci-agent: sync module with upstreamIlan Joselevich2023-05-22
| | |_|_|_|_|_|_|/ | |/| | | | | | |
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-08-01 08:57:07 +0000