27,891 commits

Author	SHA1	Message	Date
Silvan Mosberger	b513ab8192	Reapply "ci: module maintainer review requests; nixos/modules: init meta.teams" ... This reverts commit 2cc2e0225f.	2026-03-13 16:53:28 +01:00
Pol Dellaiera	fda6d7e7d7	nixos/netbird: fix netbird wrapper (#499273)	2026-03-13 08:06:52 +00:00
Sizhe Zhao	7c95195664	devpi-web: init at 5.0.1 (#495637)	2026-03-12 15:22:52 +00:00
Pol Dellaiera	0c6d5e0b33	nixos/netbird: fix netbird wrapper	2026-03-12 15:13:30 +01:00
K900	c74d93996d	nixos/plasma6: only install skanpage ... skanlite is extremely minimal and duplicates functionality. Users that want it can explicitly opt out of skanpage and install skanlite instead.	2026-03-12 15:00:06 +03:00
K900	7800817f37	nixos/qbittorrent: use a file again, just be smarter about it ... This avoids a massive warning splat about escape sequences if there's any in the config, and also a massive tmpfiles config and a massive restartTriggers, while keeping the core of the fix intact.	2026-03-12 13:27:59 +03:00
Nick Cao	8355d6abd9	nixos/swanctl: fix the cert and cacert options (#496812)	2026-03-12 00:38:52 +00:00
Kerstin	dfb8027c0c	canaille: 0.0.74 -> 0.2.1 (#456442)	2026-03-12 00:31:35 +00:00
Sandro	9ea99fbb00	nixos/restic: prevent start when rebuilding system (#456963)	2026-03-12 00:00:57 +00:00
liberodark	a58190c92d	nixos/restic: prevent start when rebuilding system	2026-03-12 00:55:41 +01:00
Sandro	7f629f7649	nixos/qbittorrent: copy config instead of symlinking to nix store (#482534)	2026-03-11 23:33:53 +00:00
Marcus Ramberg	37b41937f2	maintainers: add superherointj as maintainer (#497656)	2026-03-11 21:43:29 +00:00
Martin Weinelt	6abd2cbc2f	nixos/frigate: don't assume grep is on path (#499036)	2026-03-11 21:32:50 +00:00
Martin Weinelt	f37b8622ce	nixos/frigate: don't assume grep is on path	2026-03-11 22:26:11 +01:00
Janne Heß	b3faef430c	Inventree: init pkgs, modules (#478011)	2026-03-11 13:21:14 +00:00
kurogeek	9b846c3563	inventree: 1.1.10	2026-03-11 10:43:43 +07:00
confus	015e2eca70	nixos/devpi-server: add extraPackages option	2026-03-10 18:41:09 +01:00
Arnout Engelen	fd3ad86c7b	nixos/autossh-ng: init: autossh without autossh (#490769)	2026-03-10 17:23:25 +00:00
Arnout Engelen	3fca4cf191	nixos/autossh-ng: init: autossh without autossh ... When wrapped in a NixOS module, systemd basically takes over the functionality traditionally offered by autossh, so it is simpler to just invoke ssh directly. Fixes #462550	2026-03-10 15:52:36 +01:00
Marcus Ramberg	62dc67aa6a	nixos/pocket-id: add delay between restarts (#497937)	2026-03-10 06:05:22 +00:00
Sandro	1d74c186d4	nixos/nginx: allow using security.dhparams via sslDhparam = true (#452972)	2026-03-09 23:27:39 +00:00
Kerstin	70b7278e2c	nixos/weblate: fix NixOS test (#491275)	2026-03-09 15:00:46 +00:00
Kerstin Humm	1a2eb6cfbf	nixos/weblate: remove /media serving for CVE-2026-21889 ... See also https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.15.2	2026-03-09 14:42:07 +01:00
Bobby Rong	ae98b8d865	Budgie updates 2026-03-08 (#497820)	2026-03-09 12:55:29 +00:00
kurogeek	1d300413e8	inventree: init ... Co-authored-by: DavHau <hsngrmpf+github@gmail.com>	2026-03-09 14:23:16 +07:00
@mjones	3766236ef7	turborepo-remote-cache: init at 2.6.1, nixos/turborepo-remote-cache: init (#405218)	2026-03-09 07:07:36 +00:00
Sandro	bca938be22	stirling-pdf: 2.4.5 -> 2.6.0; nixos/stirling-pdf: add timhae as maintainer (#496929)	2026-03-08 20:48:54 +00:00
Sandro	49eb059788	karakeep: changing cache dir location away from nix store (#416531)	2026-03-08 19:49:25 +00:00
Maximilian Bosch	b8893e2c6b	nixos/grafana: update instructions on secret rotation (#497976)	2026-03-08 19:10:14 +00:00
Doron Behar	a9732f7487	nixos/taskchampion-sync-server: use DynamicUser after 26.05 (#494338)	2026-03-08 18:25:26 +00:00
Anton Tetov	ce751b2e38	karakeep: changing cache dir location away from nix store	2026-03-08 19:13:09 +01:00
Maximilian Bosch	ec7dc46bfc	nixos/grafana: update instructions on secret rotation ... Closes #495278 Turns out that the documentation about secrets[1] is actually a little misleading and I let myself fool by it: the rotation is about moving to envelope-based encryption, i.e. a way where a key is generated and stored in the DB that is encrypted with `secret_key` and used to decrypt actual secrets. In fact, there's no official way to rotate this on a running instance. The reason this wasn't noticed so far is because I'd expect most people to * use provisioning to set up their datasources (or) * talk to a local Prometheus (or else) API that is exposed on the machine only and thus no authentication is needed if you trust that machine enough. On top, the encryption is unauthenticated so only changing secret_key appears to work, but uses gibberish as password for authentication against data-sources. So effectively there are two ways to migrate (short of a fresh setup): * keep the old secret and call it a day. IMHO this is fine if the setup is e.g. a single-node machine where both the secret and the DB are on the same file-system, in the same data-dir and protected by the same permissions. * use a 3rd-party rotation tool[2]. I ensured by hand on a test-instance that following the instructions works and you end up with a freshly generated secret_key that you need to deploy. With that key deployed, the credentials still decrypt to the same plaintext. [1] https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-database-encryption/#envelope-encryption [2] d9dc788902	2026-03-08 19:00:21 +01:00
Gutyina Gergő	f2b49d77d8	nixos/pocket-id: add delay between restarts	2026-03-08 16:30:57 +01:00
Sizhe Zhao	ce37db40bc	nixos/mihomo: add an option for processes info (#436367)	2026-03-08 13:03:09 +00:00
Tim Häring	bdc25af993	nixos/stirling-pdf: add timhae as maintainer	2026-03-08 12:42:18 +01:00
Bobby Rong	f27ef67ba5	nixos/budgie: Add bluejay ... https://buddiesofbudgie.org/blog/budgie-10-10-released#budgie-control-center	2026-03-08 14:03:29 +08:00
Bobby Rong	0477e31ea0	nixos/budgie: Add eglinfo ... 892794b234	2026-03-08 14:03:29 +08:00
Sandro	2ddefc1bc7	nixos/prosody: add muc_notifications module support (#434574)	2026-03-08 02:42:55 +00:00
Sandro	a2a979ae2f	nixos/nextcloud-notify_push: assert that not the sqlite db backend is… (#478869)	2026-03-08 02:10:00 +00:00
Sandro	7cbe72324d	zammad: 6.5.2 -> 7.0.0 (#497156)	2026-03-08 01:59:07 +00:00
Martin Weinelt	23577c842f	nixos/tlsrpt: reuse sender address as envelope sender (#497587)	2026-03-08 01:01:03 +00:00
Michael Daniels	91458b5177	hound: vendor check-config patch, fix check being a no-op (#488407)	2026-03-08 00:31:16 +00:00
Michael Daniels	e1e3e457a1	nixos/suricata: update default rule sources; add rule updater timer (#396934)	2026-03-08 00:17:18 +00:00
Michael Daniels	73476c774b	nixos/castopod: fix database.passwordFile in castopod-setup-start script (#374140)	2026-03-08 00:16:50 +00:00
Shaun Ren	82f035f077	tinyauth: init at 5.0.1	2026-03-07 16:57:44 -05:00
superherointj	5a650db9ff	nixos/etcd: add missing maintainers reference for NixOS module	2026-03-07 15:02:54 -03:00
Martin Weinelt	77bf0b01d0	nixos/tlsrpt: reuse sender address as envelope sender ... This prevents leaking the local user and hostname into the envelope, which could prevent DKIM signing due to lack of keys for the MX hostname.	2026-03-07 16:11:59 +01:00
Samuel Meenzen	3bbdf0ae96	nixos/zammad: add meenzen as maintainer	2026-03-07 03:10:43 +01:00
Samuel Meenzen	2026cc1614	nixos/zammad: add proxy_http_version ... According to 3790ddc89e/BREAKING_CHANGES.md (nginx-configuration-update) this is required for Zammad 7.0.	2026-03-07 03:10:43 +01:00
Colin	d0a37ae396	nixos/kiwix-serve: init module (#496047)	2026-03-06 19:13:00 +00:00