c4patino/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-07-06 17:13:24 -05:00
Code Issues Projects Releases Packages Wiki Activity
972,950 commits 420 branches 81 tags 30 GiB
Commit graph

8,315 commits

Author SHA1 Message Date
Will Fancher
f8ed5f30c0 nixos/filesystems: Remove default = "auto" from fsType 
NixOS has traditionally enabled the `ext` family of file systems by
default. Originally, when switching to systemd initrd, we wanted to
transition to making this explicit so that initrds could be made
without `ext`. The problem is that anyone with `fsType = "auto";` for
an `ext` file system in initrd will fail to boot, which is not really
an acceptable regression as we switch to systemd initrd by default.

By removing `default = "auto"` from `fsType`, we rule out the vast
majority of these regressions as eval errors, since most users of
`fsType = "auto"` for ext file systems are using it because of the
default value.

In hindsight, this is probably what #225352 was really about.
 2026-04-05 19:06:28 -04:00
Kevin Cox
7b908702ec
 		jellyseerr: rename jellyseerr to seerr (#500782) 2026-03-27 18:08:31 +00:00
Jacek Galowicz
d95261b435 nixos-test-driver: Make overridable 2026-03-26 13:58:05 +01:00
Marie
3576d07e30
 		nixos/tdarr: init module (#495417) 2026-03-25 13:23:05 +00:00
Jo
b52dc66ec3
 		nixos-{rebuild,install}: use system.nix (#493229) 2026-03-25 10:14:48 +00:00
Nicolas Dumazet
9554143746 nixos/seerr: change default path to match new naming 
- Only change paths on major version change.
- Add breaking change note to release notes.

Signed-off-by: Nicolas Dumazet <nicdumz.commits@gmail.com>
 2026-03-25 11:11:10 +01:00
Ludovic Ortega
849bac24f8 nixos/jellyseerr: rename jellyseerr module to seerr 
Paths are purposedly not changing for now.

Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
Signed-off-by: Nicolas Dumazet <nicdumz.commits@gmail.com>
 2026-03-25 11:11:10 +01:00
Kryštof Baksa
6b0a7478c2
 		nixos/profiles: Add NixOS Hardening link to release notes 2026-03-24 09:49:05 +01:00
dram
ebebb7072e
 		opengfw: remove (#500273) 2026-03-24 07:29:05 +00:00
zowoq
1f69b214e8
 		nixos/profiles: remove hardened (#501199) 2026-03-22 23:21:16 +00:00
Franz Pletz
fa020b792e
 		nixos/acme: default to dynamic renewal days (#479209) 2026-03-22 11:36:48 +00:00
rnhmjoj
fadc273dd0
 		nixos/release-notes: explain the new system.nix file 2026-03-21 18:44:36 +01:00
Vladimír Čunát
d6acf1b543
 		Revert "nixos/initrd: refactor secrets option into secretPaths and extraSecretsHook" 2026-03-21 15:58:52 +01:00
Nico Felbinger
18a45284a2 nixos/profiles: remove hardened 
- It lacks a consistent and transparent baseline or standard,
- It may introduce unexpected breakage or degrade performance without clear benefit,
- It is difficult to manage user expectations, especially since the implications of enabling it are not always obvious,
- and as multiple contributors have noted, it is often more of a “grab bag” of settings than a cohesive security policy.
 2026-03-21 09:25:12 +10:00
Florian Klink
b10e145984
 		Improve systemd creds support for radicle (#475836) 2026-03-20 09:45:53 +00:00
Elias Vasylenko
914bb2e6db nixos/radicle: Update radicle to support systemd creds more completely via ImportCredential 
By default it will look for the cred names supported by the upstream package, but alternate cred names can be chosen to produce a rename on the ImportCredential.
 2026-03-19 22:09:23 +00:00
nixpkgs-ci[bot]
2e41989fc7
 		Merge master into staging-next 2026-03-19 12:12:47 +00:00
Kierán Meinhardt
4e91a4a0f3 nixos/doc: document systemd-nspawn test containers 2026-03-19 12:14:51 +01:00
Mistyttm
e2f3c26865
 		nixos/tdarr: init module 2026-03-19 15:57:00 +10:00
phanirithvij
c70e3c4402
 		nixos/goupile: init 
Signed-off-by: phanirithvij <phanirithvij2000@gmail.com>
Co-authored-by: Sizhe Zhao <prc.zhao@outlook.com>
 2026-03-18 20:11:09 +05:30
MCSeekeri
9fc6d21730
 		opengfw: remove 
The upstream GitHub repository has been deleted and the website is now offline.

https://web.archive.org/web/20260201085302/https://github.com/apernet/OpenGFW/
 2026-03-16 15:48:37 +08:00
nixpkgs-ci[bot]
0c576d310e
 		Merge master into staging-next 2026-03-14 18:08:06 +00:00
dotlambda
9f47853926
 		postgresqlPackages.pgvecto-rs: drop (#499611) 2026-03-14 14:59:48 +00:00
K900
1da88f870c Merge remote-tracking branch 'origin/master' into staging-next 2026-03-14 15:45:30 +03:00
Diogo Correia
c17119d4cb
 		nixos/immich: drop pgvecto-rs support 2026-03-14 00:54:21 +00:00
isabel
25df79bb83
 		nixos/tabbyapi: init module (#498281) 2026-03-14 00:52:28 +00:00
nixpkgs-ci[bot]
20fc1a16e1
 		Merge master into staging-next 2026-03-11 18:18:55 +00:00
Florian Klink
7ddf2675a9
 		nixos/network-interfaces: Add iplvan support (#493244) 2026-03-11 14:14:32 +02:00
BatteredBunny
7bb012784d nixos/tabbyapi: init module 2026-03-10 17:25:45 +02:00
Martin Weinelt
633ede5af6
 		nixos/acme: default to dynamic renewal days 
With Lego since 4.25.0 instead of --days we can pass --dynamic to pick
the renewal date based on a fraction of its total validity duration.

This provides a reasonable default that accomodates varying certificate
validy durations we're going to be seeing through the profile option and
LE's plans to reduce the default validity duration in multiple steps down
to 45 days in 2028.

This changes changes the default valid duration to null to enable dynamic
renewal calculation. To that end the expiration skip function gained the
ability to calculate the total and remaining duration and to apply the
correct remainder based on the certificates total duration.
 2026-03-09 23:47:12 +01:00
nixpkgs-ci[bot]
28a1816c41
 		Merge master into staging-next 2026-03-09 18:17:25 +00:00
Johannes Kirschbauer
a151446e0d
 		nixos/doc: fix snippet with path to manual (#497900) 2026-03-09 15:36:59 +00:00
nixpkgs-ci[bot]
433eba7b77
 		Merge master into staging-next 2026-03-09 12:12:20 +00:00
@mjones
3766236ef7
 		turborepo-remote-cache: init at 2.6.1, nixos/turborepo-remote-cache: init (#405218) 2026-03-09 07:07:36 +00:00
nixpkgs-ci[bot]
f0495fc1fc
 		Merge master into staging-next 2026-03-09 00:23:05 +00:00
Maximilian Bosch
ec7dc46bfc
 		nixos/grafana: update instructions on secret rotation 
Closes #495278

Turns out that the documentation about secrets[1] is actually a little
misleading and I let myself fool by it: the rotation is about moving
to envelope-based encryption, i.e. a way where a key is generated and
stored in the DB that is encrypted with `secret_key` and used to
decrypt actual secrets.

In fact, there's no official way to rotate this on a running instance.
The reason this wasn't noticed so far is because I'd expect most people
to

* use provisioning to set up their datasources (or)
* talk to a local Prometheus (or else) API that is exposed on the
  machine only and thus no authentication is needed if you trust that
  machine enough.

On top, the encryption is unauthenticated so only changing secret_key
appears to work, but uses gibberish as password for authentication
against data-sources.

So effectively there are two ways to migrate (short of a fresh setup):

* keep the old secret and call it a day. IMHO this is fine if the setup
  is e.g. a single-node machine where both the secret and the DB are on
  the same file-system, in the same data-dir and protected by the same
  permissions.

* use a 3rd-party rotation tool[2]. I ensured by hand on a test-instance
  that following the instructions works and you end up with a freshly
  generated secret_key that you need to deploy. With that key deployed,
  the credentials still decrypt to the same plaintext.

[1] https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-database-encryption/#envelope-encryption
[2] d9dc788902
 2026-03-08 19:00:21 +01:00
ibizaman
3258bc706f nixos/doc: fix snippet with path to manual 2026-03-08 13:58:59 +01:00
nixpkgs-ci[bot]
ddc8a2b7c9
 		Merge master into staging-next 2026-03-08 09:58:20 +00:00
nixpkgs-ci[bot]
8c88a4ee45
 		Merge master into staging-nixos 2026-03-08 00:24:03 +00:00
nixpkgs-ci[bot]
16f8d9ecb6
 		Merge master into staging-next 2026-03-08 00:22:55 +00:00
Shaun Ren
82f035f077 tinyauth: init at 5.0.1 2026-03-07 16:57:44 -05:00
nixpkgs-ci[bot]
3d83292d39
 		Merge master into staging-nixos 2026-03-07 00:23:17 +00:00
nixpkgs-ci[bot]
657503a35e
 		Merge staging-next into staging 2026-03-07 00:22:41 +00:00
Gaétan Lepage
63527c2871
 		lunarvim: remove (#487308) 2026-03-06 23:09:23 +00:00
Christian Ravn
7cd7d7e116
 		mdbook-linkcheck: drop 
As the package is unmaintained upstream and incompatible with the
version 0.5+ of mdbook it has been dropped
 2026-03-06 13:45:01 -08:00
Eduwardo Horibe
298175ffa3 lunarvim: remove 
The last stable version was released on 2024-05-15 and relies on `neovim` 0.9.5 (released on 2023-04-7) to work properly
 2026-03-06 20:34:14 +00:00
Colin
d0a37ae396
 		nixos/kiwix-serve: init module (#496047) 2026-03-06 19:13:00 +00:00
Adam Thompson-Sharpe
8c6fb9a752
 		nixos/kiwix-serve: init module 
Adds a NixOS service module for kiwix-serve, which was requested quite a
while ago. kiwix-serve allows one to host ZIM files (such as for
archives of Wikipedia) over HTTP.

A NixOS VM test that generates and serves a basic ZIM file has also been
added. The ZIM file is generated as part of the test, since the output
file is relatively large (~60 KB) relative to the source content (~100
bytes).

See: <https://wiki.kiwix.org/wiki/Kiwix-serve>
 2026-03-05 23:49:58 -05:00
nixpkgs-ci[bot]
d5c3bd02c9
 		Merge staging-next into staging 2026-03-06 00:27:57 +00:00
Yt
8d709f66c3
 		nixos/invoiceplane: Don't force http with Caddy (#371205) 2026-03-05 22:25:25 +00:00