| Age | Commit message (Collapse) | Author |
|---|
|
It's very surprising that services.tor.client.enable would set
services.privoxy.enable. This violates the principle of least
astonishment, because it's Privoxy that can integrate with Tor, rather
than the other way around.
So this patch moves the Privoxy Tor integration to the Privoxy module,
and it also disables it by default. This change is documented in the
release notes.
Reported-by: V <v@anomalous.eu>
|
|
dnscrypt-proxy2: base settings on example config
|
|
nixos/wireless: fix failure with no interfaces
|
|
nixos/tinc: rfc42 and tests
|
|
nixos/mailman: make Postfix support optional (provided you configure the MTA yourself)
|
|
yourself)
Mailman can now work with MTAs other than Postfix. You'll have to configure
it yourself using the options in `services.mailman.settings.mta`.
This addition is reflected in the release notes for 21.03.
|
|
|
|
nixos/prometheus-exporters/py-air-control: invoke exporter command
|
|
Package `py-air-control exporter` v0.1.5 comes with a new CLI. This change uses the new CLI (which simplifies the exporter's systemd service setup).
|
|
nixos/mpd: conditionally provision required directories with StateDirectory
|
|
nixos/sd-image: explicit reference to the gawk package
|
|
|
|
The `awk` command is not installed in the standard env. So this command fails if the `awk` command is not installed by some external module.
|
|
config.users.ldap: do not include nss module if turned off
|
|
mailman: run non-minutely jobs
|
|
Dnscrypt-proxy needs some options to be set before it can do anything useful.
Currently, we only apply what the user configured which, by default, is nothing.
This leads to the dnscrypt-proxy2 service failing to start when you only set
`enable = true;` which is not a great user experience.
This patch makes the module take the example config from the upstream repo as a
base on top of which the user-specified settings are applied (it contains sane
defaults).
An option has been added to restore the old behaviour.
|
|
|
|
|
|
nixos/ldap: restart nslcd when configuration changes
|
|
nixos/locate: Fix sshfs exclusion
|
|
Fixes: b478e0043c53964c99cc9a145c155a673af3c7d8
("nixos/mailman: refactor")
|
|
|
|
nixos/postfix: fix masterCf type
|
|
frab: remove package
|
|
broken since 2018
|
|
The "fuse" and "sshfs" entries already present are not keeping this find
invocation out of sshfs mounts, which present as fstype "fuse.sshfs"
|
|
nixos/nginx: improve documentation for `config`
|
|
nixos/prometheus-exporters/py-air-control: init
|
|
|
|
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
|
|
nixos/nextcloud: improve error message for invalid `dbpassFile`
|
|
`file_exists` also returns `FALSE` if the file is in a directory that
can't be read by the user. This e.g. happens if permissions for
`nixops(1)`-deployment keys aren't configured correctly.
This patch improves the error message for invalid files to avoid
confusion[1].
[1] https://discourse.nixos.org/t/nixops-deploy-secrets-to-nextcloud/10414/4
|
|
This patch:
* Removes an invalid/useless classpath element;
* Removes an unnecessary environment variable;
* Creates the required '/version-2' data subdirectory;
* Redirects audit logging to the "console" (systemd) by default.
|
|
Unbound throws the following error:
--8<---------------cut here---------------start------------->8---
error: failed to list interfaces: getifaddrs: Address family not supported by protocol
fatal error: could not open ports
--8<---------------cut here---------------end--------------->8---
The solution is pulled from upstream:
https://github.com/NLnetLabs/unbound/pull/351
|
|
|
|
Unfortunately, I had a use-case where `services.nginx.config` was
necessary quite recently. While working on that config I had to look up
the module's code to understand which options can be used and which
don't.
To slightly improve the situation, I changed the documentation like
this:
* Added `types.str` as type since `config` is not mergeable on purpose.
It must be a string as it's rendered verbatim into `nginx.conf` and if
the type is `unspecified`, it can be confused with RFC42-like options.
* Mention which config options that don't generate config in
`nginx.conf` are NOT mutually exclusive.
|
|
|
|
|
|
nixos/grub: allow multiple "nodev" devices for mirroredBoots
|
|
nixos/firejail: allow to pass options to firejail
|
|
|
|
The output of the man-db command used to generate the caches is
irrelevant and can confuse users, let's hide it.
|
|
pipewire: 0.3.16 -> 0.3.17
|
|
|
|
There was some issues with the fallback to passive mode on 2.3, but on
2.4 adaptive mode is always enabled upstream and thermald will fallback
to passive if necessary.
https://github.com/intel/thermal_daemon/blob/a6e68a65b53a3d7a023c9b45db31ceffbd7e5dfb/data/thermald.service.in#L9
|
|
|
|
|
|
|
|
Set DynamicUser=true for hoogle
|
|
nixos/vector: add module
|
