commit 80661f912feef10e59638c7ce6b710110edac933 · pyrox.dev/nixpkgs

doc/release-notes/rl-2511.section.md

···

       62
        
       

     

       63
        
       - NixOS display manager modules now strictly use tty1, where many of them previously used tty7. Options to configure display managers' VT have been dropped. A configuration with a display manager enabled will not start `getty@tty1.service`, even if the system is forced to boot into `multi-user.target` instead of `graphical.target`.

     

       64
        
       

     

       0
        
       
     

       0
        
       
     

       65
        
       ## Other Notable Changes {#sec-nixpkgs-release-25.11-notable-changes}

     

       66
        
       

     

       67
        
       <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

···

       62
        
       

     

       63
        
       - NixOS display manager modules now strictly use tty1, where many of them previously used tty7. Options to configure display managers' VT have been dropped. A configuration with a display manager enabled will not start `getty@tty1.service`, even if the system is forced to boot into `multi-user.target` instead of `graphical.target`.

     

       64
        
       

     

       65
       +
       - [private-gpt](https://github.com/zylon-ai/private-gpt) service has been removed by lack of maintenance upstream.

     

       66
       +
       

     

       67
        
       ## Other Notable Changes {#sec-nixpkgs-release-25.11-notable-changes}

     

       68
        
       

     

       69
        
       <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

+1 -1

nixos/doc/manual/release-notes/rl-2405.section.md

···

       158
        
       

     

       159
        
       - [pretalx](https://github.com/pretalx/pretalx), a conference planning tool. Available as [services.pretalx](#opt-services.pretalx.enable).

     

       160
        
       

     

       161
       -
       - [private-gpt](https://github.com/zylon-ai/private-gpt), a service to interact with your documents using the power of LLMs, 100% privately, no data leaks. Available as [services.private-gpt](#opt-services.private-gpt.enable).

     

       162
        
       

     

       163
        
       - [Prometheus DNSSEC Exporter](https://github.com/chrj/prometheus-dnssec-exporter): check for validity and expiration in DNSSEC signatures and expose metrics for Prometheus. Available as [services.prometheus.exporters.dnssec](#opt-services.prometheus.exporters.dnssec.enable).

     

       164

···

       158
        
       

     

       159
        
       - [pretalx](https://github.com/pretalx/pretalx), a conference planning tool. Available as [services.pretalx](#opt-services.pretalx.enable).

     

       160
        
       

     

       161
       +
       - [private-gpt](https://github.com/zylon-ai/private-gpt), a service to interact with your documents using the power of LLMs, 100% privately, no data leaks.

     

       162
        
       

     

       163
        
       - [Prometheus DNSSEC Exporter](https://github.com/chrj/prometheus-dnssec-exporter): check for validity and expiration in DNSSEC signatures and expose metrics for Prometheus. Available as [services.prometheus.exporters.dnssec](#opt-services.prometheus.exporters.dnssec.enable).

     

       164

nixos/doc/manual/release-notes/rl-2511.section.md

···

       131
        
       

     

       132
        
       - The `wstunnel` module was converted to RFC42-style settings, you will need to update your NixOS config if you make use of this module.

     

       133
        
       

     

       0
        
       
     

       0
        
       
     

       134
        
       ## Other Notable Changes {#sec-release-25.11-notable-changes}

     

       135
        
       

     

       136
        
       <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

···

       131
        
       

     

       132
        
       - The `wstunnel` module was converted to RFC42-style settings, you will need to update your NixOS config if you make use of this module.

     

       133
        
       

     

       134
       +
       - [private-gpt](https://github.com/zylon-ai/private-gpt) service has been removed by lack of maintenance upstream.

     

       135
       +
       

     

       136
        
       ## Other Notable Changes {#sec-release-25.11-notable-changes}

     

       137
        
       

     

       138
        
       <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

-1

nixos/modules/module-list.nix

···

       897
        
         ./services/misc/polaris.nix

     

       898
        
         ./services/misc/portunus.nix

     

       899
        
         ./services/misc/preload.nix

     

       900
       -
         ./services/misc/private-gpt.nix

     

       901
        
         ./services/misc/pufferpanel.nix

     

       902
        
         ./services/misc/pykms.nix

     

       903
        
         ./services/misc/radicle.nix

···

       897
        
         ./services/misc/polaris.nix

     

       898
        
         ./services/misc/portunus.nix

     

       899
        
         ./services/misc/preload.nix

     

       0
        
       
     

       900
        
         ./services/misc/pufferpanel.nix

     

       901
        
         ./services/misc/pykms.nix

     

       902
        
         ./services/misc/radicle.nix

+3 -1

nixos/modules/rename.nix

···

       348
        
             The signald project is unmaintained and has long been incompatible with the

     

       349
        
             official Signal servers.

     

       350
        
           '')

     

       351
       -
       

     

       0
        
       
     

       0
        
       
     

       352
        
           # Do NOT add any option renames here, see top of the file

     

       353
        
         ];

     

       354
        
       }

···

       348
        
             The signald project is unmaintained and has long been incompatible with the

     

       349
        
             official Signal servers.

     

       350
        
           '')

     

       351
       +
           (mkRemovedOptionModule [ "services" "private-gpt" ] ''

     

       352
       +
             The private-gpt package and the corresponding module have been removed due to being broken and unmaintained.

     

       353
       +
           '')

     

       354
        
           # Do NOT add any option renames here, see top of the file

     

       355
        
         ];

     

       356
        
       }

-122

nixos/modules/services/misc/private-gpt.nix

···

       1
       -
       {

     

       2
       -
         config,

     

       3
       -
         lib,

     

       4
       -
         pkgs,

     

       5
       -
         ...

     

       6
       -
       }:

     

       7
       -
       let

     

       8
       -
         inherit (lib) types;

     

       9
       -
       

     

       10
       -
         format = pkgs.formats.yaml { };

     

       11
       -
         cfg = config.services.private-gpt;

     

       12
       -
       in

     

       13
       -
       {

     

       14
       -
         options = {

     

       15
       -
           services.private-gpt = {

     

       16
       -
             enable = lib.mkEnableOption "private-gpt for local large language models";

     

       17
       -
             package = lib.mkPackageOption pkgs "private-gpt" { };

     

       18
       -
       

     

       19
       -
             stateDir = lib.mkOption {

     

       20
       -
               type = types.path;

     

       21
       -
               default = "/var/lib/private-gpt";

     

       22
       -
               description = "State directory of private-gpt.";

     

       23
       -
             };

     

       24
       -
       

     

       25
       -
             settings = lib.mkOption {

     

       26
       -
               type = format.type;

     

       27
       -
               default = {

     

       28
       -
                 llm = {

     

       29
       -
                   mode = "ollama";

     

       30
       -
                   tokenizer = "";

     

       31
       -
                 };

     

       32
       -
                 embedding = {

     

       33
       -
                   mode = "ollama";

     

       34
       -
                 };

     

       35
       -
                 ollama = {

     

       36
       -
                   llm_model = "llama3";

     

       37
       -
                   embedding_model = "nomic-embed-text";

     

       38
       -
                   api_base = "http://localhost:11434";

     

       39
       -
                   embedding_api_base = "http://localhost:11434";

     

       40
       -
                   keep_alive = "5m";

     

       41
       -
                   tfs_z = 1;

     

       42
       -
                   top_k = 40;

     

       43
       -
                   top_p = 0.9;

     

       44
       -
                   repeat_last_n = 64;

     

       45
       -
                   repeat_penalty = 1.2;

     

       46
       -
                   request_timeout = 120;

     

       47
       -
                 };

     

       48
       -
                 vectorstore = {

     

       49
       -
                   database = "qdrant";

     

       50
       -
                 };

     

       51
       -
                 qdrant = {

     

       52
       -
                   path = "/var/lib/private-gpt/vectorstore/qdrant";

     

       53
       -
                 };

     

       54
       -
                 data = {

     

       55
       -
                   local_data_folder = "/var/lib/private-gpt";

     

       56
       -
                 };

     

       57
       -
                 openai = { };

     

       58
       -
                 azopenai = { };

     

       59
       -
               };

     

       60
       -
               description = ''

     

       61
       -
                 settings-local.yaml for private-gpt

     

       62
       -
               '';

     

       63
       -
             };

     

       64
       -
           };

     

       65
       -
         };

     

       66
       -
       

     

       67
       -
         config = lib.mkIf cfg.enable {

     

       68
       -
           systemd.services.private-gpt = {

     

       69
       -
             description = "Interact with your documents using the power of GPT, 100% privately, no data leaks";

     

       70
       -
             wantedBy = [ "multi-user.target" ];

     

       71
       -
             after = [ "network.target" ];

     

       72
       -
       

     

       73
       -
             preStart =

     

       74
       -
               let

     

       75
       -
                 config = format.generate "settings-local.yaml" (cfg.settings // { server.env_name = "local"; });

     

       76
       -
               in

     

       77
       -
               ''

     

       78
       -
                 mkdir -p ${cfg.stateDir}/{settings,huggingface,matplotlib,tiktoken_cache}

     

       79
       -
                 cp ${cfg.package.cl100k_base.tiktoken} ${cfg.stateDir}/tiktoken_cache/9b5ad71b2ce5302211f9c61530b329a4922fc6a4

     

       80
       -
                 cp ${pkgs.python3Packages.private-gpt}/${pkgs.python3.sitePackages}/private_gpt/settings.yaml ${cfg.stateDir}/settings/settings.yaml

     

       81
       -
                 cp "${config}" "${cfg.stateDir}/settings/settings-local.yaml"

     

       82
       -
                 chmod 600 "${cfg.stateDir}/settings/settings-local.yaml"

     

       83
       -
               '';

     

       84
       -
       

     

       85
       -
             environment = {

     

       86
       -
               PGPT_PROFILES = "local";

     

       87
       -
               PGPT_SETTINGS_FOLDER = "${cfg.stateDir}/settings";

     

       88
       -
               HF_HOME = "${cfg.stateDir}/huggingface";

     

       89
       -
               TRANSFORMERS_OFFLINE = "1";

     

       90
       -
               HF_DATASETS_OFFLINE = "1";

     

       91
       -
               MPLCONFIGDIR = "${cfg.stateDir}/matplotlib";

     

       92
       -
             };

     

       93
       -
       

     

       94
       -
             serviceConfig = {

     

       95
       -
               ExecStart = lib.getExe cfg.package;

     

       96
       -
               WorkingDirectory = cfg.stateDir;

     

       97
       -
               StateDirectory = "private-gpt";

     

       98
       -
               RuntimeDirectory = "private-gpt";

     

       99
       -
               RuntimeDirectoryMode = "0755";

     

       100
       -
               PrivateTmp = true;

     

       101
       -
               DynamicUser = true;

     

       102
       -
               DevicePolicy = "closed";

     

       103
       -
               LockPersonality = true;

     

       104
       -
               MemoryDenyWriteExecute = true;

     

       105
       -
               PrivateUsers = true;

     

       106
       -
               ProtectHome = true;

     

       107
       -
               ProtectHostname = true;

     

       108
       -
               ProtectKernelLogs = true;

     

       109
       -
               ProtectKernelModules = true;

     

       110
       -
               ProtectKernelTunables = true;

     

       111
       -
               ProtectControlGroups = true;

     

       112
       -
               ProcSubset = "pid";

     

       113
       -
               RestrictNamespaces = true;

     

       114
       -
               RestrictRealtime = true;

     

       115
       -
               SystemCallArchitectures = "native";

     

       116
       -
               UMask = "0077";

     

       117
       -
             };

     

       118
       -
           };

     

       119
       -
         };

     

       120
       -
       

     

       121
       -
         meta.maintainers = [ ];

     

       122
       -
       }

-1

nixos/tests/all-tests.nix

···

       1226
        
           _module.args.socket = false;

     

       1227
        
           _module.args.listenTcp = false;

     

       1228
        
         };

     

       1229
       -
         private-gpt = runTest ./private-gpt.nix;

     

       1230
        
         privatebin = runTest ./privatebin.nix;

     

       1231
        
         privoxy = runTest ./privoxy.nix;

     

       1232
        
         prometheus = import ./prometheus { inherit runTest; };

···

       1226
        
           _module.args.socket = false;

     

       1227
        
           _module.args.listenTcp = false;

     

       1228
        
         };

     

       0
        
       
     

       1229
        
         privatebin = runTest ./privatebin.nix;

     

       1230
        
         privoxy = runTest ./privoxy.nix;

     

       1231
        
         prometheus = import ./prometheus { inherit runTest; };

-29

nixos/tests/private-gpt.nix

···

       1
       -
       { pkgs, lib, ... }:

     

       2
       -
       let

     

       3
       -
         mainPort = "8001";

     

       4
       -
       in

     

       5
       -
       {

     

       6
       -
         name = "private-gpt";

     

       7
       -
         meta = with lib.maintainers; {

     

       8
       -
           maintainers = [ ];

     

       9
       -
         };

     

       10
       -
       

     

       11
       -
         nodes = {

     

       12
       -
           machine =

     

       13
       -
             { ... }:

     

       14
       -
             {

     

       15
       -
               services.private-gpt = {

     

       16
       -
                 enable = true;

     

       17
       -
               };

     

       18
       -
             };

     

       19
       -
         };

     

       20
       -
       

     

       21
       -
         testScript = ''

     

       22
       -
           machine.start()

     

       23
       -
       

     

       24
       -
           machine.wait_for_unit("private-gpt.service")

     

       25
       -
           machine.wait_for_open_port(${mainPort})

     

       26
       -
       

     

       27
       -
           machine.succeed("curl http://127.0.0.1:${mainPort}")

     

       28
       -
         '';

     

       29
       -
       }