Commit graph

61,728 commits

Author SHA1 Message Date
Nick Cao
588963db83
nixos/mptcpd: generate config declaratively (#395893) 2026-07-06 21:58:52 +00:00
qbisi
8f80c31bc3 nixos/mptcpd: generate config declaratively 2026-07-07 03:58:04 +08:00
Nick Cao
e4331e5996
nixos/fcitx5: update quick phrase format (#538851) 2026-07-06 19:11:23 +00:00
Gaétan Lepage
36c0ecd764
cosmic: sort and refactor package attrs, fix libcosmicAppHook wrapping (#534694) 2026-07-06 13:01:33 +00:00
Florian Klink
8bb61a40df
nixos/yggdrasil: Fix stray 0-byte /private-key file (#538065) 2026-07-06 12:19:39 +00:00
Kajus Naujokaitis
bdc1db11dd
cosmic-app-library: fix naming to cosmic-app-library
Signed-off-by: Kajus Naujokaitis <kajusn@gmail.com>
2026-07-06 10:28:59 +03:00
linsui
2462790fcf nixos/fcitx5: update quick phrase format 2026-07-06 10:59:39 +08:00
Martin Weinelt
567b1e61ae
postfix-tlspol: 1.10.0 -> 1.11.0 (#538782) 2026-07-05 21:10:42 +00:00
Martin Weinelt
f547405d88
nixos/postfix-tlspol: migrate to socket activation
Allows further confining the service. Socket activation is not supported
for the metrics-address.
2026-07-05 23:05:34 +02:00
Fernando Rodrigues
9fc0d99003
nixos/fish: programs.fish.generateCompletions fix spaces in filenames (#538723) 2026-07-05 20:57:19 +00:00
Yohann Boniface
c27a1c00a6
treewide: largely remove danth from maintainers (#538448) 2026-07-05 20:49:07 +00:00
Jeremy Fleischman
69b2e5e0b2
nixos/fish: programs.fish.generateCompletions fix spaces in filenames
`linux-manual` has this fun filename in it:

```console
$ find -L $(nix-build -A linux-manual) -name 'station table - introduction.9.gz'
/nix/store/q45mzaksp2ll04c363mxpyi252j6anrq-linux-manual-7.1.3/share/man/man9/station table - introduction.9.gz
```

Our `find ... | xargs ...` didn't handle this nicely, and would vomit in the
following way:

`repro.nix`:

```nix
$ cat repro.nix
let
  pkgs = import ./. { };
  nixosConfig = pkgs.nixos (
    { config, pkgs, ... }: {
      system.stateVersion = config.system.nixos.release;

      programs.fish.enable = true;
      programs.fish.generateCompletions = true;

      environment.systemPackages = [ pkgs.linux-manual ];
    }
  );
in
nixosConfig.config.environment.etc."fish/generated_completions".source
```

The crash:

```console
$ nix-build repro.nix
these 2 derivations will be built:
  /nix/store/qs213n0r723w59jdvfz5w87azd3wh405-linux-manual-7.1.3_fish-completions.drv
  /nix/store/1pwps30drz71icj5v4rdiaarmh37xcn8-system_fish-completions.drv
building '/nix/store/qs213n0r723w59jdvfz5w87azd3wh405-linux-manual-7.1.3_fish-completions.drv'...
usage: create_manpage_completions.py [-h] [-c CLEANUP_IN] [-d DIRECTORY] [-k]
                                     [-m] [-p] [-s] [-v {0,1,2}] [-z]
                                     [file_paths ...]
create_manpage_completions.py: error: unrecognized arguments: -introduction.9.gz /nix/store/q45mzaksp2ll04c363mxpyi252j6anrq-linux-manual-7.1.3/share/man/man9/DRBD State macros.9.gz /nix/store/q45mzaksp2ll04c363mxpyi252j6anrq-linux-manual-7.1.3/share/man/man9/DRM Client usage stats.9.gz /nix/store/q45mzaksp2ll04c363mxpyi252j6anrq-linux-manual-7.1.3/share/man/man9/DRM RAS Node Management.9.gz /nix/store/q45mzaksp2ll04c363mxpyi252j6anrq-linux-manual-7.1.3/share/man/man9/DRM_ACCEL_FOPS.9.gz
```

This fix is simple, use the `find -print0 ... | xargs -0 ...` pattern.
2026-07-05 09:38:35 -07:00
K900
23706216c3
lasuite-meet: 1.21.0 -> 1.22.0 (#538178) 2026-07-05 15:46:05 +00:00
dotlambda
196091c9fa
immich: 2.7.5 -> 3.0.1 (#538371) 2026-07-05 14:52:33 +00:00
Arne Keller
b2f2b0c72c
nixos/cloudlog: fix QSL images, SSTV scans, and awards JSON files (#399257) 2026-07-05 11:20:13 +00:00
isabel
f76955e386
immich: 2.7.5 -> 3.0.1 2026-07-05 09:53:31 +01:00
K900
21af0e8e78 nixos/lasuite-meet: add cronjobs for cleanup tasks 2026-07-05 10:07:10 +03:00
K900
96ec540b85 nixos/lasuite-meet: refactor systemd units 2026-07-05 10:03:56 +03:00
Gavin John
b76bf041c7
nixos/immersed: openPorts -> openFirewall
The PR that added this is only a few hours old (https://github.com/NixOS/nixpkgs/pull/399766) and hasn't had the chance to enter an unstable released, which is why I haven't added a rename flag.
2026-07-05 01:13:47 -04:00
Ryan Hendrickson
6edbf1a6a0
immersed: add option to open firewall ports and libraries for hardware encoding support (#399766) 2026-07-04 21:29:37 -04:00
nixpkgs-ci[bot]
7aba08e308
Merge master into staging-nixos 2026-07-05 00:39:09 +00:00
Sefa Eyeoglu
232dbaecf9
unbound: add DNS-over-QUIC support (#538304) 2026-07-04 22:46:27 +00:00
Lucas Savva
d1110c70d0
nixos-containers: fix dummyConfig localMacAddress default (#516513) 2026-07-04 19:40:51 +00:00
Johannes Kirschbauer
b2373737aa
docs/readme: reword 'devmode' -> Live preview (#532945) 2026-07-04 19:16:20 +00:00
Leon Schuermann
aa19ec5231 nixos-containers: fix dummyConfig localMacAddress default
In a13b423085 ("nixos-containers: allow hard-coding container veth MAC address &
add IPv6 SLAAC test case (#462775)") I had a typo in the `localMacAddress`
setting used for the dummy container config to generate the systemd service
template. I don't think this actually causes any breakage, but it's good to fix
for consistency's sake nonetheless.
2026-07-04 15:10:21 -04:00
nixpkgs-ci[bot]
310e8d19be
Merge master into staging-nixos 2026-07-04 18:23:29 +00:00
Daniel Thwaites
3bc78b00e8
treewide: largely remove danth from maintainers
I have not used most of these in a while, so have no interest in
maintaining them any more.
2026-07-04 18:56:47 +01:00
Adam C. Stephens
a403b3f7ea
nixos/incus: add storage.truenas.enable option (#527154) 2026-07-04 17:14:33 +00:00
Johannes Kirschbauer
3314b11056
doc/manual: reword 'nixpkgs reference manual' to just 'nixpkgs' manual (#537491) 2026-07-04 16:30:21 +00:00
Masum Reza
f93bc49d77
scx.rustscheds: 1.1.1 -> 1.1.2 (#538359) 2026-07-04 12:53:01 +00:00
nixpkgs-ci[bot]
58203ceb74
Merge master into staging-nixos 2026-07-04 12:14:15 +00:00
Gliczy
22ded46682
nixosTests.scx: add missing rustscheds
`scx_layered` and `scx_mitosis` are excluded as they both require a
config to be run.
2026-07-04 14:11:26 +02:00
Gliczy
9bb5c308eb
nixosTests.scx: remove cscheds
They are pretty much unmaintained, and only serves as examples, it makes
little sense to test them.
2026-07-04 12:37:17 +02:00
Maximilian Bosch
2c09e754df
nixos/matrix-authentication-service: fix extra config file loading (#537261) 2026-07-04 10:30:57 +00:00
Maximilian Bosch
309b10bfca
nixos/nginx: Always symlink nginx configuration to /etc/nginx/nginx.conf (#164100) 2026-07-04 10:25:07 +00:00
Maximilian Bosch
084023c72a
nixos/matrix-authentication-service: fix formatting of description
Be more explicit in the first sentence. And use code-blocks to make sure
the code-example is rendered correctly.
2026-07-04 12:23:03 +02:00
Maximilian Bosch
0d214bd808
nixos/matrix-authentication-service: escape CREDENTIALS_DIRECTORY correctly
The `''` is needed to make Nix not interpret it as variable. However, it
would now render in the manual as `${CREDENTIALS_DIRECTORY}`. If
somebody would copy that, he'd get an error because that's a variable
substitution then.

Adding another backslash such that the code rendered in the manual is
correct.
2026-07-04 12:23:03 +02:00
Maximilian Bosch
24f95988be
nixos/matrix-authentication-service: test credentials behavior in VM-test 2026-07-04 12:23:02 +02:00
eymeric
0ab75569e6
nixos/matrix-authentication-service: add option credentials 2026-07-04 12:23:02 +02:00
pinpox
fa01843a3b
nixos/yggdrasil: read private key from credentials dir
The module bind-mounted the LoadCredential-provided key onto a
/private-key target at the filesystem. systemd must create that target
inode before overlaying the credential; the mount lives in the unit's
namespace but the inode write hits the host filesystem, so a 0-byte
/private-key file leaks onto the host and persists after the unit stops.

Point PrivateKeyPath directly at the credential
(/run/credentials/yggdrasil.service/private-key) and drop
BindReadOnlyPaths. The DynamicUser can read the credentials dir, so the
bind was never needed.

Resolves #531972

Assisted-by: Oh My Pi (claude-opus-4-8)
2026-07-04 09:48:38 +02:00
nixpkgs-ci[bot]
7668d1321c
Merge master into staging-nixos 2026-07-04 07:03:05 +00:00
Maximilian Bosch
0be9f9b2fa
captive-browser: 0-unstable-2021-08-01 -> 0-unstable-2025-11-05 (#538118) 2026-07-04 06:32:09 +00:00
Moraxyc
ed374affd1
nixosTests.unbound: support doq 2026-07-04 13:03:08 +08:00
nixpkgs-ci[bot]
0548ab8a98
Merge master into staging-nixos 2026-07-03 18:30:08 +00:00
Maximilian Bosch
8ef5dd7568
nixos/nginx/gitweb: move into gitweb module (#538174) 2026-07-03 17:58:54 +00:00
Maximilian Bosch
d8f802c855
nixos/nginx/gitweb: move into gitweb module
I don't see how this was ever considered a good idea, but that's part of
a service-module and is not the responsibility of the nginx maintainers.
2026-07-03 19:39:04 +02:00
Artturin
4f0be9c89e
nixos/comma: init (#426405) 2026-07-03 17:32:00 +00:00
Maximilian Bosch
6b6b3a6cd8
nixos/captive-browser: update default arguments passed to Chromium
Closes #533452

Taken from 9f75ef3/config_examples/captive-browser-linux-networkmanager.toml
2026-07-03 19:18:51 +02:00
Arne Keller
d99d163cac
nixos/adguardhome: fix shellcheck error in pre-start script (#526430) 2026-07-03 16:37:14 +00:00
eymeric
658c5fefa7
nixos/matrix-authentication-services: fix extraConfigFiles param permission issue 2026-07-03 23:23:59 +07:00