Domen Kožar
fb0a1763f5
Add hercules-ci-agent
2019-05-16 15:03:54 +07:00
Daiderd Jordan
3ba909eb2d
version: add default darwinRevision
...
There's no channel for darwin so this can be unavailable if a tarball or
shallow clone is used.
2019-05-04 21:43:47 +02:00
Daiderd Jordan
61d81e7706
doc: fix module references
2019-05-04 21:23:53 +02:00
Daiderd Jordan
ba29af7ae3
version: include darwin metadata in system label
...
This makes it possible to trace back what version of both darwin and
nixpkgs the system was built with.
2019-05-04 21:11:49 +02:00
Daiderd Jordan
3da5c1a322
lnl: open up per-user paths in sandbox
2019-05-04 18:37:21 +02:00
Daiderd Jordan
23d8c6ca3d
documentation: add module for darwin manual
...
Fixes #72
2019-05-04 15:38:17 +02:00
Daiderd Jordan
631fd857aa
modules: add modules-list.nix and baseModules argument
2019-05-04 14:50:22 +02:00
Daiderd Jordan
66495818a3
sandbox: add missing option descriptions
2019-05-04 14:46:24 +02:00
Daiderd Jordan
dc923dbac2
ofborg: fix option descriptions
2019-05-04 14:43:36 +02:00
Daiderd Jordan
58aa5bf185
nix: make nix.nixPath merge by default
...
Since named entries can be overridden now based on ordering now merging
is only a problem for removing one of the default search paths, in which
case a higher priority eg. mkForce can be used.
{
nix.nixPath = [{ darwin-config = "/darwin.nix"; }];
}
Will result in
[ "darwin-config=/darwin.nix" "/nix/var/nix/profiles/per-user/root/channels" "$HOME/.nix-defexpr/channels" ]
Fixes #137
2019-05-01 12:42:31 +02:00
Daiderd Jordan
4d235b800d
nix: allow specifying named NIX_PATH using and attrset
...
This gives the option nicer merge behaviour, otherwise setting a named
entry multiple times would result in duplicates which can't be resolved
without overriding the entire list.
2019-05-01 12:30:00 +02:00
Daiderd Jordan
51ecc4151f
Merge pull request #135 from marsam/feature/postgresql-plugins
...
postgresql: Add support for extraPlugins
2019-03-30 10:30:58 +01:00
Mario Rodas
6a6d512d40
postgresql: Use core ln from coreutils
...
Otherwise it fallbacks to /bin/ln which is outdated and might not work.
2019-03-29 07:22:01 -05:00
Mario Rodas
8ee2585c0d
postgresql: Add support for extraPlugins
2019-03-25 14:28:40 -05:00
Daiderd Jordan
2430e72100
Merge pull request #132 from ben-z/add-defaults-configs
...
Add defaults configs
2019-03-22 20:52:34 +01:00
Daiderd Jordan
b68f77b404
launchd: ensure user LaunchAgents exist
...
Apparently this doesn't exist by default, so make sure it's created
first.
Fixes #134
2019-03-22 20:48:58 +01:00
Daiderd Jordan
13f2480374
lnl: update reexec aliases
2019-03-20 20:51:35 +01:00
Ben Zhang
f17fb87fab
Add NSGlobalDomain configs
2019-03-02 21:51:13 -08:00
Ben Zhang
a08546158d
add trackpad configs: ActuationStrength, FirstClickThreshold, SecondClickThreshold
2019-03-02 21:50:48 -08:00
Daiderd Jordan
d00d00998e
darwin: replace usages of nix-instantiate --eval with --find-file
2019-02-24 22:27:41 +01:00
Wael M. Nasreddine
41a00f14b4
users: gate the creation with an option, false by default and use createhomedir
2019-02-24 22:13:45 +01:00
Wael M. Nasreddine
7c68f69154
users: create/chown the home only when it is different than /var/empty
2019-02-24 22:06:45 +01:00
Wael M. Nasreddine
303c5fbb00
users: create the home-directory for a new user
2019-02-24 22:06:37 +01:00
Daiderd Jordan
6c6c8f2164
users.users: only extend profiles if packages are defined
2019-02-23 12:00:39 +01:00
Daiderd Jordan
ece03c592e
Merge pull request #127 from kalbasit/nix-darwin_user-packages
...
users: install user packages via users.users.<name?>.packages
2019-02-23 11:45:40 +01:00
Daiderd Jordan
c48c4c701a
Merge pull request #121 from thefloweringash/channel-version-info
...
system-version: get version information from channels
2019-02-23 11:35:52 +01:00
Wael M. Nasreddine
5e6570c07c
order the environment
2019-02-21 15:57:51 -08:00
Daiderd Jordan
1a3a9d91b4
nix-daemon: make default values overridable without mkForce
2019-02-22 00:02:10 +01:00
Daiderd Jordan
132a7f0a09
users: increase default nixbld users to 32 and set knownUsers by default
...
Since the users.nix.configureBuildUsers target nixbld users, don't require
them to be added to knownUsers explicitly.
2019-02-21 23:15:09 +01:00
Wael M. Nasreddine
4ffabd184a
users: install user packages via users.users.<name?>.packages
2019-02-20 08:20:32 -08:00
Daiderd Jordan
94d2d20a5f
nix-daemon: enable forking workaround by default
...
This should be relatively safe and there's still no real solution for
it.
2019-02-18 23:06:50 +01:00
Daiderd Jordan
4d892e7774
fonts: rewrite activation
...
The new implementation is a bit smarter and only updates fonts that
changed. But more importantly /run/current-system isn't used anymore
which breaks initial activation and installs the previous set of fonts
instead of the one in the new system.
Fixes #115
2019-02-17 11:31:40 +01:00
Daiderd Jordan
0a8785c61b
lnl: start tmux panes in a sandbox by default
2019-02-16 21:33:17 +01:00
Daiderd Jordan
58a2956870
tmux: add defaultCommand option
2019-02-16 21:05:32 +01:00
Daiderd Jordan
1464d9efd3
lnl: sandbox fetch-nixpkgs-updates service
2019-02-16 17:47:29 +01:00
Daiderd Jordan
1e67f6a2bc
sandbox: add module for sandbox profiles
...
This could be used outside of nix-darwin, but this is mainly useful for
services since all of the inputs are known there.
{
# $ /usr/bin/sandbox-exec -f $profile $coreutils/bin/ls /
# ls: cannot access '/': Operation not permitted
security.sandbox.profiles.example.closure = [ pkgs.coreutils ];
}
2019-02-16 16:55:07 +01:00
Daiderd Jordan
10c34f1277
lnl: add tmp and var/tmp to sandbox paths
2019-02-12 23:23:04 +01:00
Daiderd Jordan
e61dcc1024
lnl: (re)enable sandboxing with extra-sandbox-paths
...
There are still some problems with frameworks, this opens up the sandbox
enough by default to work around that and make it work like expected in
most cases.
2019-02-12 20:25:29 +01:00
Andrew Childs
349a4837cf
system-version: get version information from channels
2019-01-19 15:02:55 +09:00
Daiderd Jordan
629fa53498
nix-daemon: use system NIX_SSL_CERT_FILE
...
Otherwise the daemon wouldn't honor extra certificates from the
security.pki options.
2019-01-16 22:47:19 +01:00
Daiderd Jordan
655b66975f
lnl: disable cachix
2019-01-16 22:38:54 +01:00
Daiderd Jordan
2e525a93da
security.pki: add module to configure ca certificates
...
This makes NIX_SSL_CERT_FILE configurable and makes
/etc/ssl/certs/ca-certificates.crt available like nixos.
2019-01-15 21:55:08 +01:00
Daiderd Jordan
61e30229cc
lnl: cleanup and configure nixbld users
2019-01-07 20:18:03 +01:00
Kirill Elagin
644d6acb7a
zsh: Add vendor-completions to fpath
2019-01-04 15:50:48 +03:00
Daiderd Jordan
458d09882e
checks: actually fix gc condition
...
Introduced in 28710738a3
2019-01-04 00:40:10 +01:00
Daiderd Jordan
aedd304983
nix-gc: fix evaluation
2019-01-03 20:59:23 +01:00
Daiderd Jordan
28710738a3
checks: fix gc condition
...
Don't fail if the user is configured properly.
2019-01-03 19:29:49 +01:00
Daiderd Jordan
8a6c783616
checks: generalize and make them more configurable
...
All the checks are now aggregated in system.checks.text making it easy
to allow certain checks to be disabled as well as disabling them
alltogether if desired. eg.
# Disable all checks.
system.checks.text = mkForce "";
Fixes #117
2019-01-02 21:13:45 +01:00
Daiderd Jordan
72b3648fa0
nix-gc: add check for nix.gc.automatic
...
This hopefully avoids problems for people that try to enable the service
with a single-user install.
Fixes #118
2019-01-02 20:46:39 +01:00
Daiderd Jordan
f5116b0f4d
nix-gc: add user option
...
This configures the user that runs the garbage collector, particularly
useful for single-user installs. Otherwise it runs as root resulting in
permission issues afterwards.
2019-01-02 20:24:00 +01:00
