Commit Graph
100 Commits
Author SHA1 Message Date
Janne Heß 1027c0635d asterisk: Bump all packages 2020-11-19 17:13:38 +01:00
Janne Heß e5e9887e38 nixos/dbus: Add AppArmor support 2020-11-18 10:10:36 +01:00
Janne Heß 060d20de24 dbus: Enable AppArmor mediation support 2020-11-18 10:10:25 +01:00
Janne Heß 9979ec11e3 atlassian-confluence: 7.8.1 -> 7.9.0 2020-11-10 11:53:23 +01:00
Janne Heß 576a928794 vim: Get rid of Python 2 dependency 2020-11-09 13:02:04 +01:00
Janne Heß 523debafc4 asterisk: Bump all packages 2020-11-09 12:36:03 +01:00
Janne Heß 59239feacb nixos/plasma5: Fix when running without aliases 2020-11-09 11:09:06 +01:00
Janne Heß 54217cac69 nixos/promtail: Add a promtail module 2020-11-03 14:36:56 +01:00
Janne Heß 6404b25714 dnsdist: Replace myself with SuperSandro2000 2020-11-02 01:35:47 +01:00
Janne Heß 02390ed725 openssh: 8.3p1 -> 8.4p1
Fixes CVE-2020-15778, CVE-2020-14145
2020-10-29 18:58:04 +01:00
Janne Heß 038793bd1e asterisk_18: Init at 18.0.0
I hope I bumped all attributes correctly.
2020-10-26 14:10:29 +01:00
Janne Heß 722c94310c asterisk: Bump all packages 2020-10-26 13:58:41 +01:00
Janne Heß 1829a89f84 raspberrypifw: 1.20200902 -> 1.20201022 2020-10-26 11:30:36 +01:00
Janne Heß cdabe1007c raspberrypi-eeprom: Init at 2020-10-05 2020-10-20 15:45:58 +02:00
Janne Heß 7ef527cff8 iperf3: 3.8.1 -> 3.9 (#100744)
changelog http://software.es.net/iperf/news.html#iperf-3-9-released
2020-10-19 12:24:49 +02:00
Janne Heß 1c0f102220 pyocr: Use tesseract without alias 2020-10-15 20:53:57 +02:00
Janne Heß e2da1219d4 nixos/icingaweb2: Fix php packages 2020-10-15 16:16:33 +02:00
Janne Heß ba003ec930 pkgs/mariadb: Fix when running without aliases
DataDumper is an alias to `null` in top-level/perl-packages.nix since
it's included as part of perl.
2020-10-13 15:18:31 +02:00
Janne Heß 3f69715b63 sogo: 5.0.0 -> 5.0.1 2020-10-07 23:11:45 +02:00
Janne Heß e23a4535e2 sope: 5.0.0 -> 5.0.1 2020-10-07 20:44:50 +02:00
Janne Heß c5e8dbc4f1 asterisk: Bump all packages
All packages were outdated.
Asterisk 15 is not supported anymore, but there is 17 now.

All versions bumped pjproject to 2.10 which requires overriding the
prefix.

Since Asterisk 17, `make install-headers` seems to be needed.
2020-10-07 18:02:37 +02:00
Janne Heß 28b60c1d06 atlassian-confluence: 7.7.4 -> 7.8.0 2020-10-07 14:59:50 +02:00
Janne Heß 9a966e84b6 raspberrypifw: 1.20200601 -> 1.20200902
Also disable the fixup phase since it only throws errors and remove the
platforms since these are only static files.
2020-10-07 00:41:15 +02:00
Janne Heß 9f33ab62d9 nixos/testing: Add support for specialArgs
Since using flakes disallows the usage of <unstable> (which I use in
some tests), this adds an alternative. By setting specialArgs, all VMs
can get the `unstable` flake input as an arg. This is not possible with
extraConfigurations, as that would lead to infinite recursions.
2020-09-14 00:10:21 +02:00
Janne Heß 8cf4ec8b97 nixos/systemd: Don't use apply for $PATH
When not using apply, other modules can use $PATH as a list instead of
getting a colon-separated list to each /bin directory.
2020-09-03 20:27:55 +02:00
Janne Heß df58a632ca left4gore: Init at 2.3 2020-09-02 22:15:08 +02:00
Janne Heß d85f50b71f nixos/gitlab: Support pages
Fixes #84525
2020-09-01 12:08:36 +02:00
Janne Heß ead6de5d3d tests/postgresql-wal-receiver: Port to Python
... and remove some weirdnesses.

- Port to Python
- Drop the extra pkgs, config, system args
- Drop all `with`
- Don't override the standard PostgreSQL directory
- Use pkgs and lib from the test runner

Tested with:
- postgresql_12
- postgresql_11
- postgresql_10
- postgresql_9_6
- postgresql_9_5

Closes #96347
cc @flokli
2020-08-26 16:37:24 +02:00
Janne Heß 8f729e53bc xdragon: Init at 1.1.1
The package is renamed from `dragon` to prevent name conflicts with the
existing package as recommended in [1].

1: https://github.com/mwh/dragon/issues/17
2020-08-25 22:54:28 +02:00
Janne Heß 3acc2a638a xcowsay: Init at 1.4 2020-08-25 22:08:39 +02:00
Janne Heß a059f0785e asterisk-module-sccp: Init at 4.3.2-epsilon 2020-08-21 22:14:32 +02:00
Janne Heß 5ac88239e0 tt-rss-theme-feedly: 2.3.1 -> 2.5.0 2020-08-21 22:11:36 +02:00
Janne Heß 540c033507 nixos/hardened: Port test to Python and fix it
Related to #72828
Replaces and closes #76708

Looks like `nix ping-store` does not output anything anymore but still
fails when the connection does not work.
2020-08-21 21:35:07 +02:00
Janne Heß ff03800d3b nixos/testing: Fix fail() function
The docs say this behaves as succeed(), but it does not return stdout as
succeed() does. This fixes that behaviour
2020-08-21 21:28:24 +02:00
Janne Heß ae1dada42f nixos/gitlab: Support incoming mail
When incoming mails are enabled, an extra service is needed.
Closes #36125.
2020-08-21 18:56:20 +02:00
Janne Heß f459122ea3 nixos/gitlab: Support extra config for shell 2020-07-18 16:46:33 +02:00
Janne Heß e9bf4ca80f nixos/gitlab: Make redis URL configurable
We run Redis via Unix socket
2020-07-18 16:28:59 +02:00
Janne Heß 026b4eb3ae nixos/gitlab: Drop sidekiq PID file
> WARNING: PID file creation will be removed in Sidekiq 6.0, see #4045.
Please use a proper process supervisor to start and manage your
services

Since NixOS uses a proper process supervisor AND does not use the PID
file anywhere, we can just drop it to be upwards compatible and fix that
warning.
2020-07-18 16:00:04 +02:00
Janne Heß a44b2cdd3a nixos/systemd: Implement a packages option for tmpfiles
Also drop the `portables` tmpfiles because the file is missing in the
systemd derivation.
2020-07-18 00:03:47 +02:00
Janne Heß 25bad1f9b8 nixos/gitlab: Fix extra-gitlab.rb
Line 794 removes the entire directory, rendering the tmpfiles rule
useless.

cc @bgamari @talyz
2020-07-17 19:34:49 +02:00
Janne Heß 86d311660a freeswitch: Add support for mod_opusfile
Also switch to callPackage, add the webm module (untested), and
fix the av module.
2020-06-05 21:54:40 +02:00
Janne Heß 644f9e74e7 nixos/freeswitch: Unit improvements and add fs_cli
This switches the unit to Restart=on-failure and switches the CPU policy
to fifo (the daemon tries to do that itself, but is denied permission).

Also add the package to $PATH to be able to use fs_cli easily.
2020-06-05 20:16:43 +02:00
Janne Heß eab71dfe5b freeswitch: Disable advertisement banners
These are banners about a conference nobody cares about. They just spam
the journal without being interesting to anyone.
2020-06-05 18:39:51 +02:00
Janne Heß 466fb98bcd terraria-server: 1.3.5.3 -> 1.4.0.3
Also use autoPatchelfHook and nixfmt it
2020-05-21 19:35:57 +02:00
Janne Heß edddc7c82a nixos/sss: Move nsswitch config into the module 2020-04-28 17:02:46 +02:00
Janne Heß bc2a4b341a nixos/nsswitch: Make databases more configurable
Instead of hardcoding all nss modules that are added into nsswitch,
there are now options exposed.
This allows users to add own nss modules (I had this issue with
winbindd, for example).
Also, nss modules could be moved to their NixOS modules which would
make the nsswitch module slimmer.

As the lists are now handled by the modules system, we can use mkOrder
to ensure a proper order as well as mkForce to override one specific
database type instead of the entire file.
2020-04-26 03:16:57 +02:00
Janne Heß a3bfbbf8a0 samba: Switch back to builtin Heimdal Kerberos
When not building with the experimental (!!) system MIT Kerberos, Samba
will use the builtin Heimdal Kerberos. For this reason, enableKerberos =
true will still include a krb5 implementation, built right into Samba.

There is no benefit in using MIT krb5, however it has some downsides
like not being able to assign computer GPOs [1].

The ArchWiki [2] also mentions this in their installation section.

[1]: https://lists.samba.org/archive/samba/2018-July/216779.html
[2]: https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller
2020-04-16 12:18:08 +02:00
Janne Heß cfe8e0e1ad pkgs/bazel*: Fix path to update-srcDeps.py
Otherwise, the -small channel fails on the tarball output.

(cherry picked from commit 0723bf3b72)
2020-03-25 11:27:15 -04:00
Janne Heß ecc01102d5 libksi: Bump openssl dependency for rsyslogd 2020-03-13 04:11:08 +00:00
Janne Heß 0723bf3b72 pkgs/bazel*: Fix path to update-srcDeps.py
Otherwise, the -small channel fails on the tarball output.
2020-03-02 13:11:14 +01:00
Janne Heß 7dadbc7a98 confluence: Add support for MySQL driver
If Confluence should be connected to a MySQL database, the JDBC driver
is required.
Also switch to stdenvNoCC, because we don't really use cc.
2020-02-01 19:32:15 +01:00
Janne Heß f1221507f3 wimboot: Init at 2.6.0 2020-02-01 17:57:17 +01:00
Janne Heß d4149412ce wine: Look for root certs at $NIX_SSL_CERT_FILE
Closes #78365
2020-01-24 12:22:45 +01:00
Janne HeßandSilvan Mosberger 790cd012d0 nixos/lib: Inherit type for doRename options
Co-authored-by: Silvan Mosberger <contact@infinisil.com>
2020-01-20 22:06:20 +01:00
Janne Heß 35f7d38a3b nixos/systemd: Use a proper type for unit paths 2019-12-11 15:43:17 +01:00
Janne Heß 9e710b29fd riot-web: Run install hooks 2019-12-10 15:54:05 +01:00
Janne Heß d21f5cf36f nixos/nextcloud: Do not run sudo if not needed
Only use sudo if we are currently not running as the nextcloud user.
This is problematic when occ is called from a systemd service with
NoNewPrivileges=true
2019-12-07 21:10:34 +01:00
Janne Heß 5b20f660f6 phpPackages.maxminddb: Init at 1.5.0 2019-12-07 15:19:36 +01:00
Janne Heß e42036ee0e nixos/gitea: Sandbox the systemd service 2019-12-01 10:18:48 +01:00
Janne Heß 576a82d6c2 rainloop-standard: Fix pname and license (#73963)
- Switched to pname
- Fixed the double dash in pname
- Changed license to unfree (they don't allow redistribution)

Fixes #73956
2019-11-23 15:36:28 +01:00
Janne Heß f7f1724ee9 displaylink: Disable free space check
The check fails if you have too much free disk space
2019-11-19 19:51:30 +01:00
Janne Heß f06ca051e2 geoipupdate: Init at 4.1.5 2019-11-19 08:01:19 -08:00
Janne Heß 08b9cac6d5 matomo: Fix consistency check
This is done by recalculating sizes and md5 hashes and inserting them
into the manifest.
2019-11-18 14:52:47 +01:00
Janne Heß 2abe2b2cda nixos/stunnel: Add maintainers 2019-10-25 16:19:57 +02:00
Janne Heß 4a32dbd1e1 nixos/stunnel: Fix CA files 2019-10-25 16:19:57 +02:00
Janne Heß d6c08776ba treewide: Switch to system users 2019-10-12 22:25:28 +02:00
Janne Heß aa27c1c664 nixos/memcached: Switch to a system user 2019-09-24 20:10:19 +02:00
Janne Heß c8e863e25e nixos/systemd: Add suspend-then-hibernate units
Pretty useful for laptops. I use them with:

```
services.logind.lidSwitch = "suspend-then-hibernate";
environment.etc."systemd/sleep.conf".text = "HibernateDelaySec=8h";
```
2019-08-26 11:04:10 +02:00
Janne Heß cabab90ad2 nixos/memcached: Remove PrivateUsers
Seems to break systems using the hardened profile.
Ref #62936
cc @Izorkin
2019-08-25 16:34:06 +02:00
Janne Heß 9c167efffd rainloop-standard: Update as well 2019-08-25 13:31:04 +02:00
Janne Heß cd5376cb4b evdi: Unbreak on Linux 5.2 and lower
The changelog mentions 5.2 support:
https://github.com/DisplayLink/evdi/releases/tag/v1.6.2
2019-08-22 17:35:34 +02:00
Janne Heß f110d2f308 pythonPackages.pyTelegramBotAPI: Init at 3.6.6 2019-07-30 18:21:24 +02:00
Janne Heß ae608faa85 nixos/xfs: Add xfs_repair to the initrd
Closes #8820
2019-07-30 09:28:34 +02:00
Janne Heß 1808b1eb67 mumsi: Init at git-2019-02-10 2019-07-16 16:18:14 +02:00
Janne Heß 1e23007dcd nixos/gitea: Support SMTP without pw in the store 2019-07-14 22:48:10 +02:00
Janne Heß 9e2a8f5023 nixos/icingaweb: Fix module path; Add test 2019-07-07 03:03:59 +02:00
Janne Heß 8c3dd6f5e7 nixos/gitea: Generate a JWT secret for git LFS 2019-06-27 03:29:02 +02:00
Janne Heß c0e5acb16d nixos/memcached: Isolate the service
memcached is (as the name suggests) an in-memory database so FS access
is not required.
2019-06-10 09:50:04 +02:00
Janne Heß 672495d596 nixos/bird: Fix reload
When calling reload, bird attempts to reload the file that was given in
the command line. As the change of ${configFile} is never picked up,
bird will just reload the old file.
This way, the configuration is placed at a known location and updated.
2019-05-31 01:21:18 +02:00
Janne Heß 5fbf306760 nixos/icingaweb2: Fix environment.etc assignment 2019-04-23 14:04:40 +02:00
Janne Heß b0daedd371 nixos/icingaweb2: Replace most options with toINI 2019-03-15 20:35:29 +01:00
Janne Heß 531171e1c9 tt-rss-theme-feedly: Package additional themes 2019-03-14 19:01:32 +01:00
Janne Heß b2a6183f75 exim: Fix build with LDAP (#56058)
The lber library is now required, see also:
https://bugs.archlinux.org/task/27509
2019-03-12 15:28:53 -04:00
Janne Heß 2a6f518b90 nixos/openldap: Fix quoting of log level 2019-03-07 14:19:50 +01:00
Janne Heß 3de5726e9b nixos/nginx: Support additional listen parameters (#56835) 2019-03-06 11:42:46 +02:00
Janne Heß 8a94a49886 icingaweb2Modules: Init all themes I could find 2019-02-17 20:42:42 +01:00
Janne Heß 1caa886f6c nixos/icingaweb2: Init the module
The module is indeed very large but allows configuring every aspect of
icingaweb2. The built-in monitoring module is in an own file because
there are actually more (third-party) modules and this structure means
every module can get an own file.
2019-02-17 19:08:47 +01:00
Janne Heß b1cfee198e tt-rss-theme-feedly: 1.4.0 -> 2.0.0
The old version doesn't work anymore since #54896 was merged.
2019-02-17 14:45:37 +01:00
Janne Heß e79b7dbcf3 tt-rss-plugin-tumblr-gdpr: 1.2 -> 2.1
The old version doesn't work anymore since #54896 was merged.
2019-02-17 11:12:20 +01:00
Janne Heß b9f3570c1c icingaweb2: Init at 2.6.2 2019-02-13 16:04:50 +01:00
Janne Heß 37469c3038 tt-rss-plugin-auth-ldap: Use the correct license
The repo now has a license file which contains the Apache 2 license.
2019-02-10 17:22:16 +01:00
Janne Heß 9a1b53304a nixos/mysql: Support bootstrapping a Galera cluster
The default galera_new_cluster script tries to set this environment
variable using systemctl set-environment which doesn't work if the
variable is not being used in the unit file ;)
2019-01-24 17:39:19 +01:00
Janne Heß 36d65c59fe tt-rss-plugin-ff-instagram: Init at git-2019-01-10 2019-01-10 17:56:47 +01:00
Janne Heß 3c54d6b2f8 nixos/openldap: Support configuring the log level 2018-12-13 15:14:59 +01:00
Janne Heß 9cd4ce98bf nixos/luksroot: Check whether the device already exists
The new reuse behaviour is cool and really useful but it breaks one of
my use cases. When using kexec, I have a script which will unlock the
disks in my initrd. However, do_open_passphrase will fail if the disk is
already unlocked.
2018-12-01 23:42:51 +01:00
Janne Heß c7f5457aa6 nixos/mysql: Explicitly set datadir in my.cnf
While this seems silly at first (it's already given as start parameter
to mysqld), it seems like xtrabackup needs that sometimes.
Without it, a Galera cluster cannot be run using the xtrabackup
replication method.
2018-11-06 18:38:28 +01:00
Janne Heß 7748c3da1b nixos/nixos-install: Unset system
The system variable is used from the (possibly polluted) shell
environment.
This causes nixos-install to fail in a nix-shell because the system
shell variable is automatically set to the current system (e.g.
x86_64-linux).
2018-10-14 20:12:08 +02:00
Janne Heß 9ef77854f7 treewide: Use http/https for homepages 2018-09-08 18:30:00 +02:00
Janne Heß bda4992564 treewide: Fix variables in homepages 2018-09-08 18:14:53 +02:00
Janne Heß 32a2d08b23 nixos/nullidentdmod: Init 2018-09-06 16:31:20 +02:00