| Age | Commit message (Collapse) | Author |
|---|
|
nixos/systemd.tmpfiles.packages: fix an edge case
|
|
nixos/wrappers: make mount have the +s bit.
|
|
|
|
symlinkJoin can break (silently) when the passed paths contain symlinks
to directories. This should work now.
Down-side: when lib/tmpfiles.d doesn't exist for some passed package,
the error message is a little less explicit, because we never get
to the postBuild phase (and symlinkJoin doesn't provide a better way):
/nix/store/HASH-NAME/lib/tmpfiles.d: No such file or directory
Also, it seemed pointless to create symlinks for whole package trees
and using only a part of the result (usually very small part).
|
|
For #95444
Co-authored-by: Florian Klink <flokli@flokli.de>
|
|
See
https://discourse.nixos.org/t/how-to-make-a-derivations-executables-have-the-s-permission/8555
and:
https://www.linuxquestions.org/questions/slackware-14/must-be-superuser-to-use-mount-fstab-is-correct-however-144932/
|
|
nixos/gitlab: Fix extra-gitlab.rb
|
|
Freeform modules
|
|
ZFS: Request credentials only for selected pools
|
|
Co-Authored-By: Robert Hensing <robert@roberthensing.nl>
|
|
nixos/pinnwand: init; steck: init at 0.5.0; nixos/tests/pinnwand: init
|
|
nixos/tests: add test for firejail
|
|
dokuwiki: 2018-04-22b -> 2020-07-29
|
|
nixos/manual: add a section about enabling OpenCL for Intel GPUs
|
|
nixos/manual: add a section about common GPU acceleration issues
|
|
nixos/mysql: run postStart as an unprivileged user
|
|
|
|
|
|
nixos: remove StandardOutput=syslog, StandardError=syslog lines
|
|
Turns out lot of software (including Chromium) use bundled fontconfig
so we either need to wrap every one of those, or re-introduce the global unversioned config.
The latter is easier but weakens hermetic configs. But perhaps those are not really worth the effort.
|
|
|
|
Since systemd 243, docs were already steering users towards using
`journal`:
https://github.com/systemd/systemd/commit/eedaf7f322a850c5d9f49346d43420423fc6f593
systemd 246 will go one step further, it shows warnings for these units
during bootup, and will [automatically convert these occurences to
`journal`](https://github.com/systemd/systemd/commit/f3dc6af20f410702beb8e45ddf77e92289fc90c7):
> [ 6.955976] systemd[1]: /nix/store/hwyfgbwg804vmr92fxc1vkmqfq2k9s17-unit-display-manager.service/display-manager.service:27: Standard output type syslog is obsolete, automatically updating to journal. Please update│······················
your unit file, and consider removing the setting altogether.
So there's no point of keeping `syslog` here, and it's probably a better
idea to just not set it, due to:
> This setting defaults to the value set with DefaultStandardOutput= in
> systemd-system.conf(5), which defaults to journal.
|
|
|
|
postfix: add useDane config option
|
|
|
|
nixos/ipfs: Allow QUIC connections to socket activate too
|
|
nixos/gollum: replace toFile with writeText
|
|
|
|
nixos/nginx: move configuration testing script into reload command
|
|
This breaks the Nextcloud vhost declaration when adding e.g. another
vhost as the `services.nginx.virtualHosts` option has `{ nextcloud =
...; }` as *default* value which will be replaced by another
`virtualHosts`-declaration with a higher (e.g. the default) priority.
The following cases are now supported & covered by the module:
* `nginx` is enabled with `nextcloud` enabled and other vhosts can be
added / other options can be declared without having to care
about the declaration's priority.
* Settings in the `nextcloud`-vhost in `nginx` have to be altered using
`mkForce` as this is the only way how we officially support `nginx`
for `nextcloud` and customizations have to be done explicitly using
`mkForce`.
* `nginx` will be completely omitted if a user enables nextcloud
and disables nginx using `services.nginx.enable = false;`. (because
nginx will be enabled by this module using `mkDefault`).
This reverts commit 128dbb31cca3ba479396c6b65946e2e6503c0f8d.
Closes #95259
|
|
nginx -t not only verifies configuration, but also creates (and chowns)
files. When the `nginx-config-reload` service is used, this can cause
directories to be chowned to `root`, causing nginx to fail.
This moves the nginx -t command into a second ExecReload command, which
runs as nginx's user. While fixing above issue, this will also cause the
configuration to be verified when running `systemctl reload nginx`, not
only when restarting the dummy `nginx-config-reload` unit. The latter is
mostly a workaround for missing features in our activation script
anyways.
|
|
openafs: 1.6.23 -> 1.6.24, mark broken due to EOL
|
|
Last old stable release. Enforce switch to openafs_1_8 by marking broken while
leaving a reasonable short-term alternative.
Ref #90927
|
|
removal
|
|
This fontconfig version isn't used anywhere inside nixpkgs anymore.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Well, via the underlying UDP. QUIC-level socket activation we'll get
someday.
|
|
This works exactly analogously to the existing `listenStreams`.
|
|
nixos/usbguard: rework
|
|
mirakurun: init at 3.3.0
|
|
|
|
|
|
|
|
|
|
|
