Wael M. Nasreddine
7c68f69154
users: create/chown the home only when it is different than /var/empty
2019-02-24 22:06:45 +01:00
Wael M. Nasreddine
303c5fbb00
users: create the home-directory for a new user
2019-02-24 22:06:37 +01:00
Daiderd Jordan
6c6c8f2164
users.users: only extend profiles if packages are defined
2019-02-23 12:00:39 +01:00
Daiderd Jordan
ece03c592e
Merge pull request #127 from kalbasit/nix-darwin_user-packages
...
users: install user packages via users.users.<name?>.packages
2019-02-23 11:45:40 +01:00
Daiderd Jordan
c48c4c701a
Merge pull request #121 from thefloweringash/channel-version-info
...
system-version: get version information from channels
2019-02-23 11:35:52 +01:00
Wael M. Nasreddine
5e6570c07c
order the environment
2019-02-21 15:57:51 -08:00
Daiderd Jordan
1a3a9d91b4
nix-daemon: make default values overridable without mkForce
2019-02-22 00:02:10 +01:00
Daiderd Jordan
132a7f0a09
users: increase default nixbld users to 32 and set knownUsers by default
...
Since the users.nix.configureBuildUsers target nixbld users, don't require
them to be added to knownUsers explicitly.
2019-02-21 23:15:09 +01:00
Wael M. Nasreddine
4ffabd184a
users: install user packages via users.users.<name?>.packages
2019-02-20 08:20:32 -08:00
Daiderd Jordan
94d2d20a5f
nix-daemon: enable forking workaround by default
...
This should be relatively safe and there's still no real solution for
it.
2019-02-18 23:06:50 +01:00
Daiderd Jordan
4d892e7774
fonts: rewrite activation
...
The new implementation is a bit smarter and only updates fonts that
changed. But more importantly /run/current-system isn't used anymore
which breaks initial activation and installs the previous set of fonts
instead of the one in the new system.
Fixes #115
2019-02-17 11:31:40 +01:00
Daiderd Jordan
0a8785c61b
lnl: start tmux panes in a sandbox by default
2019-02-16 21:33:17 +01:00
Daiderd Jordan
58a2956870
tmux: add defaultCommand option
2019-02-16 21:05:32 +01:00
Daiderd Jordan
1464d9efd3
lnl: sandbox fetch-nixpkgs-updates service
2019-02-16 17:47:29 +01:00
Daiderd Jordan
1e67f6a2bc
sandbox: add module for sandbox profiles
...
This could be used outside of nix-darwin, but this is mainly useful for
services since all of the inputs are known there.
{
# $ /usr/bin/sandbox-exec -f $profile $coreutils/bin/ls /
# ls: cannot access '/': Operation not permitted
security.sandbox.profiles.example.closure = [ pkgs.coreutils ];
}
2019-02-16 16:55:07 +01:00
Daiderd Jordan
10c34f1277
lnl: add tmp and var/tmp to sandbox paths
2019-02-12 23:23:04 +01:00
Daiderd Jordan
e61dcc1024
lnl: (re)enable sandboxing with extra-sandbox-paths
...
There are still some problems with frameworks, this opens up the sandbox
enough by default to work around that and make it work like expected in
most cases.
2019-02-12 20:25:29 +01:00
Andrew Childs
349a4837cf
system-version: get version information from channels
2019-01-19 15:02:55 +09:00
Daiderd Jordan
629fa53498
nix-daemon: use system NIX_SSL_CERT_FILE
...
Otherwise the daemon wouldn't honor extra certificates from the
security.pki options.
2019-01-16 22:47:19 +01:00
Daiderd Jordan
655b66975f
lnl: disable cachix
2019-01-16 22:38:54 +01:00
Daiderd Jordan
2e525a93da
security.pki: add module to configure ca certificates
...
This makes NIX_SSL_CERT_FILE configurable and makes
/etc/ssl/certs/ca-certificates.crt available like nixos.
2019-01-15 21:55:08 +01:00
Daiderd Jordan
61e30229cc
lnl: cleanup and configure nixbld users
2019-01-07 20:18:03 +01:00
Kirill Elagin
644d6acb7a
zsh: Add vendor-completions to fpath
2019-01-04 15:50:48 +03:00
Daiderd Jordan
458d09882e
checks: actually fix gc condition
...
Introduced in 28710738a3
2019-01-04 00:40:10 +01:00
Daiderd Jordan
aedd304983
nix-gc: fix evaluation
2019-01-03 20:59:23 +01:00
Daiderd Jordan
28710738a3
checks: fix gc condition
...
Don't fail if the user is configured properly.
2019-01-03 19:29:49 +01:00
Daiderd Jordan
8a6c783616
checks: generalize and make them more configurable
...
All the checks are now aggregated in system.checks.text making it easy
to allow certain checks to be disabled as well as disabling them
alltogether if desired. eg.
# Disable all checks.
system.checks.text = mkForce "";
Fixes #117
2019-01-02 21:13:45 +01:00
Daiderd Jordan
72b3648fa0
nix-gc: add check for nix.gc.automatic
...
This hopefully avoids problems for people that try to enable the service
with a single-user install.
Fixes #118
2019-01-02 20:46:39 +01:00
Daiderd Jordan
f5116b0f4d
nix-gc: add user option
...
This configures the user that runs the garbage collector, particularly
useful for single-user installs. Otherwise it runs as root resulting in
permission issues afterwards.
2019-01-02 20:24:00 +01:00
Daiderd Jordan
0a8741be9c
Merge pull request #97 from peel/patch-1
...
[services.emacs] use `fg-daemon` flag for service
2019-01-02 20:02:27 +01:00
Daiderd Jordan
7f4a9ecb4d
lnl: add nix-daemon objc workaround
2018-12-18 23:32:18 +01:00
Daiderd Jordan
5f7c0b6f56
lnl: fix reexec aliases
2018-12-18 23:21:21 +01:00
Daiderd Jordan
bd1ad9fd60
lnl: enable gnupg agent
2018-12-18 23:21:20 +01:00
Daiderd Jordan
255da174c8
lnl: add awscli
2018-12-18 23:21:18 +01:00
Andrew Childs
676ef10377
Unify environment configuration and don't run in child shells
...
This should enable `nix run` to work under shells like fish and zsh,
as well as making child shells not needlessly reset any environment
that should be inherited.
Implementation adapted from NixOS.
2018-10-25 01:00:52 +09:00
Mario Rodas
1a786eb088
bash: place bashrc early non-interactive return below system setup
...
Setting PATH and environment setup is required in non-interactive shells
2018-10-16 19:54:07 -05:00
Mario Rodas
dff88ee954
bash: do not evaluate completions on dumb terminals
2018-10-14 10:38:48 -05:00
Mario Rodas
b82bc64a0e
bash: do not evaluate /etc/bashrc on non-interactive shells
2018-10-14 10:38:40 -05:00
Daiderd Jordan
9a04aea8ea
tmux: remove reattach-to-user-namespace
...
It's not been needed anymore for a few macOS releases now.
2018-10-12 21:59:41 +02:00
Daiderd Jordan
9a192471bb
Merge pull request #108 from thefloweringash/dock-show-recents
...
system.defaults.dock: add `show-recents` option
2018-10-11 19:29:04 +02:00
Daiderd Jordan
166560ca76
Merge pull request #102 from peel/f-fonts-module
...
initialise fonts module
2018-10-11 19:10:42 +02:00
Andrew Childs
4cfb4b084e
system.defaults.dock: add show-recents option
2018-10-11 11:58:17 +09:00
Piotr Limanowski
00cd92968e
skip buildEnv and create a package with /share/fonts
2018-10-06 20:38:01 +02:00
Piotr Limanowski
2a53ac278f
fonts: adds enableFontDir flag
...
For NixOS compatibility reasons we're using enableFontDir flag that
in turn enables/disables font management in /Library/Fonts directory.
2018-10-05 22:27:29 +02:00
Piotr Limanowski
da886d015c
fonts: extracts helpers to top-level let expr
2018-10-05 19:17:43 +02:00
Piotr Limanowski
c2d7870587
adds info on automatic removal of manually-added fonts
2018-10-04 20:40:19 +02:00
Piotr Limanowski
397d2637e9
looks for fonts with both otf and ttf extensions
2018-10-04 13:48:57 +02:00
Piotr Limanowski
8fe33a584e
adds recursive font searching
2018-10-04 13:14:45 +02:00
Piotr Limanowski
6d0cf2d842
add tests for fonts
2018-10-02 19:59:23 +02:00
Luigy Leon
a15b59594f
Fix quoting for nixPath check
2018-09-30 10:56:32 -04:00
