summaryrefslogtreecommitdiffstats
path: root/nixos
diff options
context:
space:
mode:
Diffstat (limited to 'nixos')
-rw-r--r--nixos/doc/manual/development/building-nixos.xml6
-rw-r--r--nixos/doc/manual/development/meta-attributes.xml2
-rw-r--r--nixos/doc/manual/man-nixos-rebuild.xml7
-rw-r--r--nixos/doc/manual/release-notes/rl-2009.xml83
-rw-r--r--nixos/doc/manual/release-notes/rl-2103.xml51
-rw-r--r--nixos/modules/config/fonts/fontdir.nix47
-rw-r--r--nixos/modules/config/fonts/fonts.nix12
-rw-r--r--nixos/modules/config/system-path.nix1
-rw-r--r--nixos/modules/hardware/video/nvidia.nix2
-rw-r--r--nixos/modules/i18n/input-method/default.nix3
-rw-r--r--nixos/modules/i18n/input-method/default.xml25
-rw-r--r--nixos/modules/i18n/input-method/hime.nix14
-rw-r--r--nixos/modules/installer/tools/nixos-generate-config.pl2
-rw-r--r--nixos/modules/installer/tools/nixos-install.sh2
-rw-r--r--nixos/modules/installer/tools/nixos-rebuild.sh2
-rw-r--r--nixos/modules/installer/tools/tools.nix1
-rw-r--r--nixos/modules/misc/ids.nix2
-rw-r--r--nixos/modules/module-list.nix6
-rw-r--r--nixos/modules/profiles/hardened.nix2
-rw-r--r--nixos/modules/programs/chromium.nix2
-rw-r--r--nixos/modules/programs/neovim.nix165
-rw-r--r--nixos/modules/programs/sway.nix5
-rw-r--r--nixos/modules/programs/vim.nix14
-rw-r--r--nixos/modules/programs/xwayland.nix45
-rw-r--r--nixos/modules/security/acme.nix19
-rw-r--r--nixos/modules/security/apparmor.nix6
-rw-r--r--nixos/modules/security/pam.nix20
-rw-r--r--nixos/modules/security/sudo.nix13
-rw-r--r--nixos/modules/security/systemd-confinement.nix2
-rw-r--r--nixos/modules/security/wrappers/default.nix7
-rw-r--r--nixos/modules/services/databases/cassandra.nix15
-rw-r--r--nixos/modules/services/development/blackfire.nix65
-rw-r--r--nixos/modules/services/development/blackfire.xml45
-rw-r--r--nixos/modules/services/mail/dovecot.nix8
-rw-r--r--nixos/modules/services/mail/sympa.nix4
-rw-r--r--nixos/modules/services/misc/domoticz.nix51
-rw-r--r--nixos/modules/services/misc/gitlab.nix38
-rw-r--r--nixos/modules/services/misc/klipper.nix59
-rw-r--r--nixos/modules/services/misc/matrix-synapse.nix7
-rw-r--r--nixos/modules/services/misc/mediatomb.nix237
-rw-r--r--nixos/modules/services/misc/snapper.nix10
-rw-r--r--nixos/modules/services/misc/ssm-agent.nix23
-rw-r--r--nixos/modules/services/monitoring/prometheus/exporters.nix8
-rw-r--r--nixos/modules/services/monitoring/prometheus/exporters/openvpn.nix39
-rw-r--r--nixos/modules/services/monitoring/prometheus/exporters/postfix.nix25
-rw-r--r--nixos/modules/services/network-filesystems/rsyncd.nix134
-rw-r--r--nixos/modules/services/network-filesystems/samba.nix14
-rw-r--r--nixos/modules/services/networking/avahi-daemon.nix2
-rw-r--r--nixos/modules/services/networking/dnscrypt-proxy2.nix44
-rw-r--r--nixos/modules/services/networking/dnsdist.nix23
-rw-r--r--nixos/modules/services/networking/murmur.nix46
-rw-r--r--nixos/modules/services/networking/nftables.nix2
-rw-r--r--nixos/modules/services/networking/pdns-recursor.nix44
-rw-r--r--nixos/modules/services/system/dbus.nix16
-rw-r--r--nixos/modules/services/web-apps/icingaweb2/icingaweb2.nix2
-rw-r--r--nixos/modules/services/web-apps/moodle.nix2
-rw-r--r--nixos/modules/services/web-apps/nextcloud.nix77
-rw-r--r--nixos/modules/services/web-servers/apache-httpd/default.nix3
-rw-r--r--nixos/modules/services/web-servers/caddy.nix23
-rw-r--r--nixos/modules/services/web-servers/molly-brown.nix21
-rw-r--r--nixos/modules/services/web-servers/nginx/default.nix1
-rw-r--r--nixos/modules/services/web-servers/phpfpm/default.nix7
-rw-r--r--nixos/modules/services/x11/desktop-managers/gnome3.nix98
-rw-r--r--nixos/modules/services/x11/desktop-managers/plasma5.nix3
-rw-r--r--nixos/modules/services/x11/display-managers/default.nix7
-rw-r--r--nixos/modules/services/x11/window-managers/xmonad.nix65
-rw-r--r--nixos/modules/services/x11/xserver.nix21
-rw-r--r--nixos/modules/system/boot/grow-partition.nix2
-rw-r--r--nixos/modules/system/boot/loader/systemd-boot/systemd-boot-builder.py4
-rw-r--r--nixos/modules/tasks/network-interfaces.nix17
-rw-r--r--nixos/tests/acme.nix41
-rw-r--r--nixos/tests/agda.nix2
-rw-r--r--nixos/tests/all-tests.nix3
-rw-r--r--nixos/tests/avahi.nix13
-rw-r--r--nixos/tests/cagebreak.nix93
-rw-r--r--nixos/tests/cloud-init.nix56
-rw-r--r--nixos/tests/common/acme/server/default.nix2
-rw-r--r--nixos/tests/common/ec2.nix4
-rw-r--r--nixos/tests/ft2-clone.nix35
-rw-r--r--nixos/tests/hardened.nix5
-rw-r--r--nixos/tests/mediatomb.nix81
-rw-r--r--nixos/tests/mumble.nix22
-rw-r--r--nixos/tests/prometheus-exporters.nix27
-rw-r--r--nixos/tests/rsyncd.nix25
-rw-r--r--nixos/tests/systemd-networkd-vrf.nix4
-rw-r--r--nixos/tests/xmonad.nix18
86 files changed, 1804 insertions, 507 deletions
diff --git a/nixos/doc/manual/development/building-nixos.xml b/nixos/doc/manual/development/building-nixos.xml
index 56a596baed00..d58b6354d1d3 100644
--- a/nixos/doc/manual/development/building-nixos.xml
+++ b/nixos/doc/manual/development/building-nixos.xml
@@ -24,4 +24,10 @@
<screen>
<prompt># </prompt>mount -o loop -t iso9660 ./result/iso/cd.iso /mnt/iso</screen>
</para>
+ <para>
+ If you want to customize your NixOS CD in more detail, or generate other kinds
+ of images, you might want to check out <link
+ xlink:href="https://github.com/nix-community/nixos-generators">nixos-generators</link>. This can also be a good starting point when you want to use Nix to build a
+ 'minimal' image that doesn't include a NixOS installation.
+ </para>
</chapter>
diff --git a/nixos/doc/manual/development/meta-attributes.xml b/nixos/doc/manual/development/meta-attributes.xml
index c626ef30e9d5..c40be0a50c36 100644
--- a/nixos/doc/manual/development/meta-attributes.xml
+++ b/nixos/doc/manual/development/meta-attributes.xml
@@ -57,7 +57,7 @@
linkend="ch-configuration"/>. Changes to a module documentation
have to be checked to not break building the NixOS manual:
</para>
-<screen><prompt>$ </prompt>nix-build nixos/release.nix -A manual</screen>
+<screen><prompt>$ </prompt>nix-build nixos/release.nix -A manual.x86_64-linux</screen>
</callout>
</calloutlist>
</section>
diff --git a/nixos/doc/manual/man-nixos-rebuild.xml b/nixos/doc/manual/man-nixos-rebuild.xml
index 1fd3a1c56648..d0ff81c1dbb3 100644
--- a/nixos/doc/manual/man-nixos-rebuild.xml
+++ b/nixos/doc/manual/man-nixos-rebuild.xml
@@ -120,6 +120,11 @@
</arg>
<arg>
<group choice='req'>
+ <arg choice='plain'><option>--impure</option></arg>
+ </group>
+ </arg>
+ <arg>
+ <group choice='req'>
<arg choice='plain'><option>--max-jobs</option></arg>
<arg choice='plain'><option>-j</option></arg>
</group>
@@ -564,7 +569,7 @@
In addition, <command>nixos-rebuild</command> accepts various Nix-related
flags, including <option>--max-jobs</option> / <option>-j</option>,
<option>--show-trace</option>, <option>--keep-failed</option>,
- <option>--keep-going</option> and <option>--verbose</option> /
+ <option>--keep-going</option>, <option>--impure</option>, and <option>--verbose</option> /
<option>-v</option>. See the Nix manual for details.
</para>
</refsection>
diff --git a/nixos/doc/manual/release-notes/rl-2009.xml b/nixos/doc/manual/release-notes/rl-2009.xml
index 511276bcaab3..d9ff51ae3df0 100644
--- a/nixos/doc/manual/release-notes/rl-2009.xml
+++ b/nixos/doc/manual/release-notes/rl-2009.xml
@@ -66,6 +66,12 @@
</listitem>
<listitem>
<para>
+ Python 3.5 has reached its upstream EOL at the end of September 2020: it
+ has been removed from the list of available packages.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
Two new options, <link linkend="opt-services.openssh.authorizedKeysCommand">authorizedKeysCommand</link>
and <link linkend="opt-services.openssh.authorizedKeysCommandUser">authorizedKeysCommandUser</link>, have
been added to the <literal>openssh</literal> module. If you have <literal>AuthorizedKeysCommand</literal>
@@ -270,6 +276,11 @@ GRANT ALL PRIVILEGES ON *.* TO 'mysql'@'localhost' WITH GRANT OPTION;
<itemizedlist>
<listitem>
<para>
+ The <link linkend="opt-services.matrix-synapse.enable">matrix-synapse</link> module no longer includes optional dependencies by default, they have to be added through the <link linkend="opt-services.matrix-synapse.plugins">plugins</link> option.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
<literal>buildGoModule</literal> now internally creates a vendor directory
in the source tree for downloaded modules instead of using go's <link
xlink:href="https://golang.org/cmd/go/#hdr-Module_proxy_protocol">module
@@ -578,8 +589,8 @@ systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/var/www" ];
<listitem>
<para>
In addition to the hostname, the fully qualified domain name (FQDN),
- which consists of <literal>${cfg.hostName}</literal> and
- <literal>${cfg.domain}</literal> is now added to
+ which consists of <literal>${networking.hostName}</literal> and
+ <literal>${networking.domain}</literal> is now added to
<literal>/etc/hosts</literal>, to allow local FQDN resolution, as used by the
<literal>hostname --fqdn</literal> command and other applications that
try to determine the FQDN. These new entries take precedence over entries
@@ -594,11 +605,15 @@ systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/var/www" ];
<listitem>
<para>
The hostname (<literal>networking.hostName</literal>) must now be a valid
- DNS label (see RFC 1035) and as such must not contain the domain part.
- This means that the hostname must start with a letter, end with a letter
+ DNS label (see RFC 1035, RFC 1123) and as such must not contain the domain part.
+ This means that the hostname must start with a letter or digit, end with a letter
or digit, and have as interior characters only letters, digits, and
hyphen. The maximum length is 63 characters. Additionally it is
recommended to only use lower-case characters.
+ If (e.g. for legacy reasons) a FQDN is required as the Linux kernel network node hostname
+ (<literal>uname --nodename</literal>) the option
+ <literal>boot.kernel.sysctl."kernel.hostname"</literal>
+ can be used as a workaround (but be aware of the 64 character limit).
</para>
</listitem>
<listitem>
@@ -834,6 +849,45 @@ CREATE ROLE postgres LOGIN SUPERUSER;
functionally redundent.
</para>
</listitem>
+ <listitem>
+ <para>
+ The <literal>hardware.nvidia.optimus_prime.enable</literal> service has been renamed to
+ <literal>hardware.nvidia.prime.sync.enable</literal> and has many new enhancements.
+ Related nvidia prime settings may have also changed.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ The package <package>nextcloud17</package> has been removed and <package>nextcloud18</package> was marked as insecure
+ since both of them will <link xlink:href="https://docs.nextcloud.com/server/19/admin_manual/release_schedule.html">
+ will be EOL (end of life) within the lifetime of 20.09</link>.
+ </para>
+ <para>
+ It's necessary to upgrade to <package>nextcloud19</package>:
+ <itemizedlist>
+ <listitem>
+ <para>
+ From <package>nextcloud17</package>, you have to upgrade to <package>nextcloud18</package> first as
+ Nextcloud doesn't allow going multiple major revisions forward in a single upgrade. This is possible
+ by setting <xref linkend="opt-services.nextcloud.package" /> to <package>nextcloud18</package>.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ From <package>nextcloud18</package>, it's possible to directly upgrade to <package>nextcloud19</package>
+ by setting <xref linkend="opt-services.nextcloud.package" /> to <package>nextcloud19</package>.
+ </para>
+ </listitem>
+ </itemizedlist>
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ The GNOME desktop manager no longer default installs <package>gnome3.epiphany</package>.
+ It was chosen to do this as it has a usability breaking issue (see issue <link xlink:href="https://github.com/NixOS/nixpkgs/issues/98819">#98819</link>)
+ that makes it unsuitable to be a default app.
+ </para>
+ </listitem>
</itemizedlist>
</section>
@@ -1063,8 +1117,10 @@ services.transmission.settings.rpc-bind-address = "0.0.0.0";
</listitem>
<listitem>
<para>
- The <literal>fontconfig</literal> module stopped generating fontconfig 2.10.x config and cache.
- Fontconfig 2.10.x was removed from Nixpkgs - it hasn't been used in any nixpkgs package anymore.
+ The <literal>fontconfig</literal> module stopped generating config and cache files for fontconfig 2.10.x, the <filename>/etc/fonts/fonts.conf</filename> now belongs to the latest fontconfig, just like on other Linux distributions, and we will <link xlink:href="https://github.com/NixOS/nixpkgs/pull/95358">no longer</link> be versioning the config directories.
+ </para>
+ <para>
+ Fontconfig 2.10.x was removed from Nixpkgs since it hasn’t been used in any Nixpkgs package for years now.
</para>
</listitem>
<listitem>
@@ -1154,5 +1210,20 @@ services.transmission.settings.rpc-bind-address = "0.0.0.0";
</para>
</listitem>
</itemizedlist>
+ <itemizedlist>
+ <listitem>
+ <para>
+ For AMD GPUs, Vulkan can now be used by adding <literal>amdvlk</literal>
+ to <literal>hardware.opengl.extraPackages</literal>.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Similarly, still for AMD GPUs, the ROCm OpenCL stack can now be used by adding
+ <literal>rocm-opencl-icd</literal> to
+ <literal>hardware.opengl.extraPackages</literal>.
+ </para>
+ </listitem>
+ </itemizedlist>
</section>
</section>
diff --git a/nixos/doc/manual/release-notes/rl-2103.xml b/nixos/doc/manual/release-notes/rl-2103.xml
index eccf2b69dad9..c160ab5783d3 100644
--- a/