1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs synced 2024-10-19 03:47:13 -04:00
Commit graph

222991 commits

Author SHA1 Message Date
Félix Baylac-Jacqué f5b1e6bc21
nixos/prosody: add NixOS manual entry
We add a Prosody entry to the NixOS manual showing how to setup a
basic XEP-0423 compliant Prosody service. This example also showcase
how to generate the associated ACME certificates.

Note: The <programlisting> body might look poorly indented, but trust
me, it's necessary. If we try to increase their indentation level, the
HTML output will end up containing a lot of unecesseray heading spaces
breaking the formatting...
2020-05-01 19:57:33 +02:00
Félix Baylac-Jacqué 353a8b58e6
nixos/prosody: leverage systemd sandbox features to harden service
We are leveraging the systemd sandboxing features to prevent the
service accessing locations it shouldn't do. Most notably, we are here
preventing the prosody service from accessing /home and providing it
with a private /dev and /tmp.

Please consult man systemd.exec for further informations.
2020-04-30 20:40:00 +02:00
Félix Baylac-Jacqué 8aea528872
nixos/prosody: make defaults comply with XEP-0423
Setting up a XMPP chat server is a pretty deep rabbit whole to jump in
when you're not familiar with this whole universe. Your experience
with this environment will greatly depends on whether or not your
server implements the right set of XEPs.

To tackle this problem, the XMPP community came with the idea of
creating a meta-XEP in charge of listing the desirable XEPs to comply
with. This meta-XMP is issued every year under an new XEP number. The
2020 one being XEP-0423[1].

This prosody nixos module refactoring makes complying with XEP-0423
easier. All the necessary extensions are enabled by default. For some
extensions (MUC and HTTP_UPLOAD), we need some input from the user and
cannot provide a sensible default nixpkgs-wide. For those, we guide
the user using a couple of assertions explaining the remaining manual
steps to perform.

We took advantage of this substential refactoring to refresh the
associated nixos test.

Changelog:
- Update the prosody package to provide the necessary community
  modules in order to comply with XEP-0423. This is a tradeoff, as
  depending on their configuration, the user might end up not using them
  and wasting some disk space. That being said, adding those will
  allow the XEP-0423 users, which I expect to be the majority of
  users, to leverage a bit more the binary cache.
- Add a muc submodule populated with the prosody muc defaults.
- Add a http_upload submodule in charge of setting up a basic http
  server handling the user uploads. This submodule is in is
  spinning up an HTTP(s) server in charge of receiving and serving the
  user's attachments.
- Advertise both the MUCs and the http_upload endpoints using mod disco.
- Use the slixmpp library in place of the now defunct sleekxmpp for
  the prosody NixOS test.
- Update the nixos test to setup and test the MUC and http upload
  features.
- Add a couple of assertions triggered if the setup is not xep-0423
  compliant.

[1] https://xmpp.org/extensions/xep-0423.html
2020-04-30 20:39:54 +02:00
Maxine Aubrey 5e4abf76c7
yaru-theme: 20.04.1 -> 20.04.6 (#86019) 2020-04-26 12:13:22 +00:00
davidak 579e56fb9e
Update commit policy for stable release branches (#86026)
only very few people followed the strict policy in the last 5 years. the 
maintainers accept backports without reason when it's obvious, so i 
updated the policy to reflect that
2020-04-26 12:12:55 +00:00
Nikolay Korotkiy 73f3469c76
azpainter: 2.1.5 -> 2.1.6 (#86028) 2020-04-26 12:11:09 +00:00
Nikolay Korotkiy f56459f7ec
gpxsee: 7.28 -> 7.29 (#86050) 2020-04-26 11:53:44 +00:00
Doron Behar 35812875a4
docs/python: document builders using doInstallCheck and not doCheck (#86051) 2020-04-26 11:53:06 +00:00
Jaakko Luttinen 9d7f94a3f0
rofi-file-browser: init at 1.1.1 (#86052)
Co-authored-by: zimbatm <zimbatm@zimbatm.com>
2020-04-26 11:51:34 +00:00
José Romildo Malaquias 47cc163dfc
Merge pull request #85671 from romildo/upd.yaru-theme
yaru-theme: 20.04.1 -> 20.04.6, unmark as broken
2020-04-26 07:29:07 -03:00
Jörg Thalheim ef959a1d9b
Merge pull request #85984 from Mic92/wireguard 2020-04-26 11:28:55 +01:00
Vladyslav M 2cd8c35c1f
Merge pull request #86031 from marsam/update-bat 2020-04-26 11:48:54 +03:00
Colin 3e0aa4af2d
Get rid of go 1.13 (#86036)
Kubernetes builds with go1.14.
Terraform has an upstream patch which fixes the macos mojave issues -
it's a bug in terraform, not go.
2020-04-26 08:37:59 +00:00
rizary 7c399a4ee0 nixpkgs-fmt: 0.7.0 -> 0.8.0 2020-04-25 22:57:02 -07:00
Dmitry Kalinkin f0da3b5e94
Merge pull request #85952 from LnL7/darwin-lapack
lapack: fix darwin library identifiers
2020-04-26 00:39:26 -04:00
Jan Tojnar 4bcf123f61
Merge pull request #85690 from LouisTakePILLz/obs-v4l2sink 2020-04-26 04:11:18 +02:00
Aaron Andersen 16ab83760f
Merge pull request #85043 from aanderse/httpd-2020
nixos/httpd: modernize module standards
2020-04-25 20:04:05 -04:00
Benjamin Hipple a96dc47dd8
Merge pull request #86016 from marsam/update-cloud-nuke
cloud-nuke: 0.1.7 -> 0.1.18
2020-04-25 19:59:42 -04:00
Benjamin Hipple e005a48799
Merge pull request #86014 from marsam/update-awsweeper
awsweeper: 0.6.0 -> 0.7.0
2020-04-25 19:57:46 -04:00
Michael Weiss 4f17832abf
msmtp: 1.8.8 -> 1.8.10 (#86027)
This update contains the full fix for the unfortunate and very annoying
msmtpq regression [0]. #YAY
This successfully reduces the amount of spam my setup generates :)
(Note: SCNR)

Relevant patches:
- c78f24347e
- dfb39595a5

[0]: https://marlam.de/msmtp/news/
2020-04-26 01:08:31 +02:00
peelz f2211de99e obs-v4l2sink: fix v4l2device_close segfault 2020-04-25 18:35:18 -04:00
peelz a576482e4c obs-v4l2sink: add 32-bit support
The rev was downgraded to the latest released version (0.1.0) because the
the changes on master are mostly related to localization and README
stuff. The only code-related change is insignificant.
2020-04-25 18:35:18 -04:00
Graham Christensen a2e9965d74
Merge pull request #82414 from AmineChikhaoui/update-ec2-amis-19-09
ec2 amis: update 19.09 AMIs
2020-04-25 18:15:41 -04:00
Florian Klink 02b57e72bb
Merge pull request #86010 from flokli/nscd-disable
nixos/nscd: be more specific in the nscd.enable description on what breaks
2020-04-26 00:05:25 +02:00
Daniel Fullmer d13a19cfba
snes9x-gtk: 1.57 -> 1.60 (#85910) 2020-04-25 16:10:38 -04:00
Michael Weiss c5e8985fd7
androidStudioPackages.beta: 4.0.0.13 -> 4.0.0.14 2020-04-25 21:38:54 +02:00
Michael Weiss 170c2b1954
androidStudioPackages.{dev,canary}: 4.1.0.6 -> 4.1.0.7 2020-04-25 21:38:53 +02:00
Benjamin Hipple ef4a5456a4
Merge pull request #85981 from renatoGarcia/asttokens
asttokens: 1.1.13 -> 2.0.4
2020-04-25 15:35:08 -04:00
Benjamin Hipple d761d9ce47
Merge pull request #85988 from bbigras/httplz
httplz: 1.8.0 -> 1.9.2
2020-04-25 15:34:52 -04:00
Benjamin Hipple 2dd156b75a
Merge pull request #86018 from marsam/update-tflint
tflint: 0.15.4 -> 0.15.5
2020-04-25 15:28:26 -04:00
Benjamin Hipple 86283d9da7
Merge pull request #85977 from bhipple/cleanup/aspell
aspell, tla: use pname
2020-04-25 15:24:56 -04:00
Maximilian Bosch a4347f2b92
wireguard: reference missing nixosTests.wireguard 2020-04-25 20:22:14 +02:00
Mario Rodas 2933063455
tflint: 0.15.4 -> 0.15.5 2020-04-25 12:52:00 -05:00
Peter Simons 6a627c416f haskell-policeman: jailbreak to fix the build with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons 4bff4d692d haskell-xmobar: jailbreak to fix the build with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons ea37fe1f1c haskell-singletons: use latest versions when building with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons d3ae5625ff haskell-dbus: apply patch to fix the build
Taken from https://github.com/rblaze/haskell-dbus/pull/48.
2020-04-25 19:45:08 +02:00
Peter Simons d28e92d5aa haskell-weeder: jailbreak to fix the build with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons 53865f5f71 haskell-hlint: fix build with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons ceab66bf6e haskell-lens: use latest version when building with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons daf3b0868a configuration-ghc-8.10.x.nix: cosmetic 2020-04-25 19:45:08 +02:00
chkno 3f472552c4
gnucash: 3.9 -> 3.10 (#85978) 2020-04-25 12:54:07 -04:00
Jörg Thalheim 083ea0abbe
Merge pull request #85220 from Mic92/home-assistant 2020-04-25 17:45:38 +01:00
Peter Simons 21a354b6dd haskell-cabal-install-parsers: re-factor overrides to fix build with ghc-8.10.1 2020-04-25 18:22:55 +02:00
Peter Simons 7b7764287c haskell-cabal-plan: apply patch to fix the build with ghc-8.10.1 2020-04-25 18:16:57 +02:00
Florian Klink 2ececf1ed9 nixos/nscd: be more specific in the nscd.enable description on what breaks 2020-04-25 18:11:10 +02:00
Peter Simons 6a6d0174ed haskell-pandoc: jailbreak out of haddock-library 1.8.x constraint 2020-04-25 18:06:43 +02:00
Peter Simons 125ada17b0 haskell-dhall: use the latest version when building with ghc-8.10.x 2020-04-25 18:06:42 +02:00
Peter Simons b24d2a90dd configuration-ghc-8.10.x.nix: cosmetic 2020-04-25 18:06:42 +02:00
Peter Simons f2aa6b44d4 haskell-system-fileio: jailbreak out of dependency on chell 0.4.x 2020-04-25 18:06:42 +02:00