Commit graph

3031 commits

Author SHA1 Message Date
Eelco Dolstra 94bb48be78 firewall.nix: Don't make missing rpfilter support a fatal error
This makes upgrading from Linux 3.2 to 3.4 a bit nicer.
2013-09-10 15:17:52 +02:00
Bjørn Forsman 8a01d244b1 Add services.samba.nsswins option
This option allows for seamless WINS/NetBIOS name lookup, using
nsswitch.
2013-09-07 15:09:44 +02:00
Eelco Dolstra 40342e975d types.list -> types.listOf 2013-09-04 15:12:07 +02:00
Eelco Dolstra 25bd880472 Get firmware from lib/firmware 2013-09-04 14:22:52 +02:00
Eelco Dolstra 17457297cb Update all legacy-style modules
I.e., modules that use "require = [options]".  Nowadays that should be
written as

  {
    options = { ... };
    config = { ... };
  };

Also, use "imports" instead of "require" in places where we actually
import another module.
2013-09-04 13:05:09 +02:00
Jack Cummings f2523c08e4 fixiup zfs binaries in initrd
Previously, the zfs binaries were put in $out/sbin where the stage-1
patchelf wouldn't fix them up. This would fail the allowedReferences
test.

Move the zfs binaries to $out/bin.
2013-09-02 13:53:28 +03:00
Antono Vasiljev 16c0a24cad Openbox 2013-09-01 21:18:48 +03:00
Mathijs Kwik 388f1d48fb do not activate hybrid-sleep during config switches 2013-08-31 12:05:50 +02:00
Domen Kožar e45e62e078 merge 2013-08-30 18:05:08 +02:00
Moritz Ulrich f8d1aac7d8 minidlna: Start after networking.target.
Signed-off-by: Moritz Ulrich <moritz@tarn-vedra.de>
2013-08-27 20:51:34 +02:00
Jaka Hudoklin c613ae7b82 Add elasticsearch, a powerful open source search and analytics engine 2013-08-27 20:42:59 +02:00
Mathijs Kwik 2dd8b19eac Fix description for PowerManagement units. 2013-08-27 08:06:53 +02:00
Evgeny Egorochkin 7021b07a8d Move the compose-cache code from kde4 to xsession since it is supposedly useful for all X-based stuff. 2013-08-26 17:06:05 +03:00
Rickard Nilsson b0b5e08e86 Add some more missing uids/gids 2013-08-26 15:20:25 +02:00
Eelco Dolstra 3395e4398f Build 32-bit VirtualBox image
Issue #200.
2013-08-26 14:06:00 +02:00
Eelco Dolstra 40c6f6252e Fix spelling
Also, it's not necessary to order a unit after "sysinit.target" since
that's implied.
2013-08-26 12:18:26 +02:00
Eelco Dolstra 8bfbe7ef84 Don't try to guess the location of the NixOS config file
The NixOS config need not be $NIXOS_CONFIG, it can also be set through
-I nixos-config=... or not exist in a separate file at all (e.g. in a
NixOps deployment).

Issue #212.
2013-08-26 12:14:14 +02:00
Bjørn Forsman c3931d2e42 Add programs.ssh.extraConfig option 2013-08-25 21:54:21 +02:00
Mathijs Kwik d860f9f78e power management: provide a post-resume target and unify
suspend/hibernate/hybrid-sleep handling
2013-08-25 13:58:09 +02:00
Mathijs Kwik 651686626f convert bbswitch job to systemd unit
dramatically speeds up my boot time because it was the last
service (for me) that depended on udev-settle.service

udev-settle isn't needed for modern system initialization but some
oldschool services (mdadm/lvm/cryptsetup) depend on it so they can
just enumerate devices instead of having to react to changes
dynamically. In NixOS these things are usually already taken care of
during stage 1 (early ramdisk) if you use them.
2013-08-25 13:58:09 +02:00
Lluís Batlle i Rossell 48cdd60e02 Fixing handling of parameters with spaces in torsocks/torify 2013-08-24 23:23:48 +02:00
Eelco Dolstra 9771f0c96c sshd: Support multiple host keys
The option services.openssh.hostKeys now allows specifying multiple
host keys.  The default value enables both a DSA and ECDSA key.
(Clients by default will use the ECDSA key, unless known_hosts already
has a DSA key for that host.)  To use only an ECDSA key, you can say:

  services.openssh.hostKeys =
    [ { path = "/etc/ssh/ssh_host_ecdsa_key";
        type = "ecdsa";
        bits = 521;
      }
    ];
2013-08-24 01:01:10 +02:00
Evgeny Egorochkin f8a6fa774e SSH daemon: change default key size for RSA, add alert for weak keys. 2013-08-23 14:50:14 +03:00
Rickard Nilsson f420726936 Add several missing uids and gids to modules/misc/ids.nix 2013-08-23 11:37:17 +02:00
Evgeny Egorochkin bfc75e73ae Update zip to zipAttrsWith since zip is obsolete. 2013-08-22 10:40:50 +03:00
Jaka Hudoklin 5894f26c81 Add statsd, simple daemon for easy stats aggregation 2013-08-21 11:52:25 +02:00
Eelco Dolstra eefe0786f9 nixos-help: Use xdg-open if available 2013-08-20 17:11:47 +02:00
Rickard Nilsson 1ff7584a30 networkmanager: Add option for appending DNS settings
If the option is enabled, the DNS servers from networking.nameservers
will be inserted in /etc/resolv.conf after the DNS servers that
NetworkManager receieves by DHCP, or that is configured manually
in the connection settings.
2013-08-20 13:36:01 +02:00
Rob Vermaas 71a21704dc Fix typoe in graphite module (cabon -> carbon). 2013-08-19 10:21:31 +02:00
Domen Kožar 6004b28af8 merge 2013-08-19 09:06:31 +02:00
Jaka Hudoklin 4628fd8434 graphite: Refactor options, serve with waitress 2013-08-19 04:22:46 +02:00
Bjørn Forsman d17d1636b1 Revert "Add /etc/ssl/certs/ca-certificates.crt symlink for Ubuntu compatibility"
This reverts commit 10133f0b5b.

See discussion at https://github.com/NixOS/nixos/pull/224
2013-08-18 17:46:07 +02:00
Bjørn Forsman 10133f0b5b Add /etc/ssl/certs/ca-certificates.crt symlink for Ubuntu compatibility
NixOS and Fedora uses .../ca-bundle.crt. Ubuntu uses
.../ca-certificates.crt. Add .../ca-certificates.crt symlink to be
compatible with Ubuntu.

Example use case: Bob has a ~/.msmtprc file that he brings over from
Ubuntu. It also works on NixOS.
2013-08-17 13:13:02 +02:00
Bjørn Forsman 7e7a153cd6 libvirtd-service: document that users in "libvirtd" group have access 2013-08-16 21:25:00 +02:00
Rickard Nilsson d1095e1bd4 Add libvirtd gid 2013-08-16 00:47:21 +02:00
Rickard Nilsson e36e979d38 networkmanager: Add option for overriding DNS settings
If the option is enabled, the DNS servers from networking.nameservers
will be inserted in /etc/resolv.con and override any DNS servers that
NetworkManager receieves by DHCP, or that is configured manually
in the connection settings.
2013-08-16 00:35:57 +02:00
Bjørn Forsman f7d11af98a libvirtd-service: give access to users in the "libvirtd" group
Currently only root has access. But with this patch all users in
"libvirtd" group will have access. This is similar to how it's done on
Ubuntu.

Also, add virtualisation.libvirtd.extraConfig option for further
customization of libvirtd.conf.
2013-08-15 21:50:16 +02:00
Eelco Dolstra 2dca8421f9 xfce: Add tango-icon-theme
The Rodent icon theme depends on ("inherits") Tango.
2013-08-15 18:02:55 +02:00
Eelco Dolstra e6fa5cd8f2 Fix mousepad 2013-08-15 16:37:53 +02:00
Eelco Dolstra 35e2bac069 Remove $mountPoint
I just don't see the reason for setting this globally, given that /mnt
is the default.
2013-08-15 13:22:41 +02:00
Eelco Dolstra b22e735d2b "with pkgs.lib.types; X" -> types.X 2013-08-15 13:21:49 +02:00
Marc Weber 2fcd1195e6 bash: change shell script option types from string to lines
installation-cd-base: export mountPoint=/mnt. This doesn't change the default behavior, but an explicit
mount point specification is cleaner.
2013-08-15 09:28:44 +03:00
Marc Weber d97ea69a81 systemd: check service.name.Type and service.name.Restart 2013-08-15 09:19:51 +03:00
aszlig 93923296a9
i3: Allow to pass a configuration file.
With this it's now possible to directly embed a configuration file
using `services.xserver.windowManager.i3.configFile = path`, which then
will be used instead of the one in the users home directory.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2013-08-14 17:33:06 +02:00
Eelco Dolstra 047b65dd68 Typo 2013-08-14 03:34:40 +02:00
Eelco Dolstra 5060160634 not-detected.nix: Enable all firmware
Note that since the configuration produced by nixos-hardware-scan
includes not-detected.nix, you get all firmware when following the
regular installation procedure.

Issue #87.
2013-08-14 03:32:28 +02:00
Eelco Dolstra 8db22f747d Enable the Debian firmware package on the installation CD
It's unfree but we already had such firmware on the CD so we're not
worse off.

Issue #87.
2013-08-14 03:29:16 +02:00
Eelco Dolstra 4bc73f3ece Use the Debian firmware package in more places 2013-08-14 03:27:02 +02:00
Eelco Dolstra 14315b81b1 Add /media and /run to the filesystems ignored by updatedb 2013-08-14 03:07:36 +02:00
Eelco Dolstra ce866184c6 Update the locate database using a systemd service
This makes it easier to update the database manually ("systemctl start
update-locatedb").

Also, use modern module syntax.
2013-08-14 02:58:55 +02:00