about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* nullmailer: add `remotesFile` optionMarius Bergmann2017-09-28
| | | | | | | | | | The current `remotes` option is a string option containing nullmailer remote definitions. However, those definitions may contain secret credentials and should therefore not be put world-readable in the nix store. I added a `remotesFile` option, which allows to specify a path to the remotes definition file instead. This way, the definitions can be kept outside of the nix store with more secure file permissions.
* nullmailer: use proper description for `remotes` optionMarius Bergmann2017-09-28
|
* nullmailer: fix relative -> absolute path in preStart scriptMarius Bergmann2017-09-28
|
* network-interfaces: device routes for default gatewayFranz Pletz2017-09-28
| | | | Iff interface is set, it makes sense to add device route by default.
* Merge pull request #29881 from volth/patch-67Jörg Thalheim2017-09-28
|\ | | | | nixos/tinc: add "restartTriggers" back
| * nixos/tinc: add "restartTriggers" backvolth2017-09-27
| | | | | | | | Add "restartTriggers" back to restart the Tinc daemon when its peer is removed. Reverted #27660
* | nixos/monit: install monit as system package, use default config file pathRyan Mulligan2017-09-28
|/
* mesos test: fix python handlingRobin Gloster2017-09-28
| | | | | | Still does not succeed but advances further (cherry picked from commit 30d09f717aa94a78105bff22da548b904887b394)
* nixos/iso-image.nix: add top-level /version.txt fileBjørn Forsman2017-09-28
| | | | | This makes it easy to identify which NixOS version is written to an USB stick without actually booting it.
* consul service: Restart on failure.Niklas Hambüchen2017-09-28
| | | | | Consul is a service you typically want to have running all the time; it's not supposed to quit by itself.
* Merge pull request #29697 from zimbatm/gdm-on-nvidiaFranz Pletz2017-09-28
|\ | | | | GDM fixes
| * nixos/xserver,gdm: let GDM handle X server verbosity.Rostislav Beneš2017-09-28
| |
| * nixos/gdm,nvidia: new options to enable GDM on Wayland and disabling it for ↵Rostislav Beneš2017-09-28
| | | | | | | | nvidia drivers.
| * nixos/nvidia: populating /dev with nvidia devices at bootRostislav Beneš2017-09-28
| |
* | Merge pull request #29874 from mbrgm/znc-fixJörg Thalheim2017-09-27
|\ \ | |/ |/| znc: fix openFirewall option
| * znc: fix openFirewall optionMarius Bergmann2017-09-27
| | | | | | | | | | | | | | | | | | | | | | The current version is broken: - there's no `openFirewall` attribute directly in the `cfg` set - the `port` option is an attribute of the `confOptions` set I used the proper attribute for the firewall port and moved the `openFirewall` option directly up to the `services.znc` set, as it's rather a general option for the whole service than a znc-specific option (which are located inside the `confOptions` set).
* | nixos/release-notes: notable changes to the dnscrypt-proxy serviceJoachim Fasting2017-09-27
| |
* | kbd service: systemd-vconsole-setup is triggered by udevFranz Pletz2017-09-27
| | | | | | | | cc #22470
* | wpa_supplicant service: restart instead of stop & startFranz Pletz2017-09-27
| | | | | | | | | | | | | | | | | | We now wait for dhcpcd to acquire a lease but dhcpcd is restarted on system activation. As wpa_supplicant is stopped while dhcpcd is restarting a significant delay is introduced on systems with wireless network connections only. This changes the wpa_supplicant service to also be restarted together with dhcpcd in case both services were changed.
* | Revert "kbd service: use /dev/tty1 for systemd-vconsole-setup"Alexander Ried2017-09-27
| | | | | | | | | | | | | | This reverts commit 0c81594a29d99d9ee9c9c88c680340d56823cfb2. It's no longer needed since systemd-vconsole-setup enumerates all ttys until it finds a suitable one since systemd v234.
* | nixos: skip restarting systemd-logind to not break x11Joerg Thalheim2017-09-27
|/
* 17.09 release notes: redis cluster mass-restart neededRobin Gloster2017-09-27
| | | | see #29516
* manuals: fixup steam note, as the change is in 17.09Vladimír Čunát2017-09-27
| | | | | I didn't notice the cherry-pick, but Globin found out immediately. /cc #29180.
* manuals: document removal of newStdcpp from steamVladimír Čunát2017-09-27
| | | | /cc #29180.
* nixos/release-notes: MySQL backup service breaking changesRodney Lorrimar2017-09-27
|
* mysqlBackup service: let it work with default settingsRodney Lorrimar2017-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Grants enough privileges to the configured user so that it can run mysqldump. * Adds a nixos test. * Use systemd timers instead of a cronjob (by @fadenb). * Creates a new user for backups by default, instead of using mysql user. * Ensures that backup user has write permissions on backup location. * Write backup to a temporary file before renaming so that a failed backup won't overwrite the previous backup, and so that the backup location will never contain a partial backup. Breaking changes: * Renamed period to calendar to reflect the change in how to configure the backup time. * A failed backup will no longer result in cron sending an e-mail -- users' monitoring systems must be updated. Resolves #24728
* nixos/tinc: remove useless script argumentJoerg Thalheim2017-09-27
| | | | ExecStart is sufficient and more transparent to the user.
* nixos/tinc: do not add Device= by defaultJoerg Thalheim2017-09-27
| | | | | tinc can figure this out based on DeviceType. I also got `/dev/net/tun FD in bad state` after a particular upgrade.
* nix-daemon: Bump the default number of build usersEelco Dolstra2017-09-27
| | | | | While it's annoying to pollute the user database with a lot of nixbld* users, 10 users is really too low for many modern systems.
* nixos(spamassassin): fix trailing whitespacePeter Simons2017-09-27
|
* nixos(spamassassin): provide /etc/spamassassin to fix sa-learn et alPeter Simons2017-09-27
| | | | | | | | | | | Spamassassin expects its system-wide configuration at /etc/spamassassin, and some user tools (like sa-learn) need to read those configuration files. Therefore, we provide a symlink from /etc/spamassassin to the appropriate Nix store path to make sure those tools work without the user having to pass an elaborate --siteconfig path that, potentially, changes every time the system updates. Fixes https://github.com/NixOS/nixpkgs/issues/29414.
* 17.09 release notes: fix typoRobin Gloster2017-09-26
|
* Merge pull request #28777 from copumpkin/installer-chrootDaniel Peebles2017-09-26
|\ | | | | nixos-install: re-enable --chroot option
| * nixos-install: re-enable --chroot optionDan Peebles2017-09-26
| | | | | | I forgot to implement it the first time around. Whoops!
* | Merge pull request #29426 from Mic92/zfsUnstableJörg Thalheim2017-09-26
|\ \ | | | | | | nixos/zfs: import encrypted datasets by default for zfsUnstable
| * | nixos/zfs: import encrypted datasets by default for zfsUnstableJörg Thalheim2017-09-26
| | |
* | | Merge pull request #29762 from samueldr/pr/update-mediawikiJörg Thalheim2017-09-26
|\ \ \ | |/ / |/| | mediawiki: 1.27.3 -> 1.29.1
| * | mediawiki: 1.27.3 -> 1.29.1Samuel Dionne-Riel2017-09-24
| | |
* | | 17.09 release notes: add module changesRobin Gloster2017-09-26
| | |
* | | nixos/release-notes: MySQL declarative users/databasesRodney Lorrimar2017-09-26
| | | | | | | | | | | | Documents a possible migration step required to use the new options.
* | | Merge pull request #28856 from jtojnar/at-spi2-coreJörg Thalheim2017-09-26
|\ \ \ | | | | | | | | gnome3.at-spi2-core: fix service not found error
| * | | gnome3.at-spi2-core: fix service not found errorJan Tojnar2017-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The service was not registered as a systemd service resulting in errors in the system journal every time a GNOME application was launched. See: #16327
* | | | nixos/gitolite: add enableGitAnnex optionPavel Goran2017-09-25
| | | |
* | | | wireguard: fix function for adding routesJoerg Thalheim2017-09-25
| | | |
* | | | Merge pull request #29753 from andir/wireguard-allowed-ips-as-route-optionalJörg Thalheim2017-09-25
|\ \ \ \ | | | | | | | | | | networking.wireguard: added `allowedIpsAsRoutes` boolean to control p…
| * | | | networking.wireguard: added `allowedIpsAsRoutes` boolean to control peer routesAndreas Rammhold2017-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Sometimes (especially in the default route case) it is required to NOT add routes for all allowed IP ranges. One might run it's own custom routing on-top of wireguard and only use the wireguard addresses to exchange prefixes with the remote host.
* | | | | Merge pull request #28503 from phile314/fusion-inventoryJoachim F2017-09-25
|\ \ \ \ \ | | | | | | | | | | | | Fusion inventory: Init at 2.3.18
| * | | | | FusionInventory: Code cleanupPhilipp Hausmann2017-09-25
| | | | | |
| * | | | | FusionInventory: Add NixOS module.Philipp Hausmann2017-09-25
| | |_|/ / | |/| | |
* | | | | nixos/network-interfaces: ensure slave interfaces are upFranz Pletz2017-09-25
| | | | | | | | | | | | | | | | | | | | Fixes #28620.