···

       
21
       
21
       
 
       


     

       
22
       
22
       
 
       
NEWS.html: release-notes.xml

     

       
23
       
23
       
 
       
	$(XSLTPROC) --nonet --xinclude --output $@ $(NEWS_OPTS) \

     

       
24
       
24
       
-
       
	  $(docbookxsl)/html/docbook.xsl release-notes.xml

     

       
24
       
24
       
+
       
	  $(docbookxsl)/xhtml/docbook.xsl release-notes.xml

     

       
25
       
25
       
 
       


     

       
26
       
26
       
 
       
NEWS.txt: release-notes.xml

     

       
27
       
27
       
 
       
	$(XSLTPROC) --nonet --xinclude quote-literals.xsl release-notes.xml | \

     

       
28
       
28
       
 
       
	  $(XSLTPROC) --nonet --output $@.tmp.html $(NEWS_OPTS) \

     

       
29
       
29
       
-
       
	  $(docbookxsl)/html/docbook.xsl -

     

       
29
       
29
       
+
       
	  $(docbookxsl)/xhtml/docbook.xsl -

     

       
30
       
30
       
 
       
	LANG=en_US w3m -dump $@.tmp.html > $@

     

       
31
       
31
       
 
       
	rm $@.tmp.html

     

       
32
       
32
       
 
       


     

       
33
       
33
       
 
       
manual.html: *.xml

     

       
34
       
34
       
 
       
	$(XSLTPROC) --nonet --xinclude --output manual.html \

     

       
35
       
35
       
-
       
	  $(docbookxsl)/html/docbook.xsl manual.xml

     

       
35
       
35
       
+
       
	  $(docbookxsl)/xhtml/docbook.xsl manual.xml

     

       
36
       
36
       
 
       


     

       
37
       
37
       
 
       
manual.pdf: *.xml

     

       
38
       
38
       
 
       
	$(dblatex) \

     

···

       
48
       
48
       
 
       
  iElectric = "Domen Kozar <domen@dev.si>";

     

       
49
       
49
       
 
       
  iyzsong = "Song Wenwu <iyzsong@gmail.com>";

     

       
50
       
50
       
 
       
  jcumming = "Jack Cummings <jack@mudshark.org>";

     

       
51
       
51
       
+
       
  jgeerds = "Jascha Geerds <jg@ekby.de>";

     

       
51
       
52
       
 
       
  joamaki = "Jussi Maki <joamaki@gmail.com>";

     

       
52
       
53
       
 
       
  joelteon = "Joel Taylor <me@joelt.io>";

     

       
53
       
54
       
 
       
  jwiegley = "John Wiegley <johnw@newartisans.com>";

     

···

       
1
       
1
       
 
       
{ config, lib, pkgs, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
with lib;

     

       
4
       
3
       
 
       
with pkgs;

     

       
4
       
4
       
+
       
with lib;

     

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
let

     

       
7
       
7
       
 
       


     

···

       
14
       
14
       
 
       


     

       
15
       
15
       
 
       
  options = {

     

       
16
       
16
       
 
       


     

       
17
       
17
       
-
       
    networking.extraHosts = pkgs.lib.mkOption {

     

       
17
       
17
       
+
       
    networking.extraHosts = lib.mkOption {

     

       
18
       
18
       
 
       
      type = types.lines;

     

       
19
       
19
       
 
       
      default = "";

     

       
20
       
20
       
 
       
      example = "192.168.0.1 lanlocalhost";

     
···

       
23
       
23
       
 
       
      '';

     

       
24
       
24
       
 
       
    };

     

       
25
       
25
       
 
       


     

       
26
       
26
       
-
       
    networking.dnsSingleRequest = pkgs.lib.mkOption {

     

       
26
       
26
       
+
       
    networking.dnsSingleRequest = lib.mkOption {

     

       
27
       
27
       
 
       
      type = types.bool;

     

       
28
       
28
       
 
       
      default = false;

     

       
29
       
29
       
 
       
      description = ''

     

···

       
1
       
1
       
 
       
{ config, lib, pkgs, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
with lib;

     

       
4
       
3
       
 
       
with pkgs;

     

       
4
       
4
       
+
       
with lib;

     

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
let

     

       
7
       
7
       
 
       


     

···

       
1
       
1
       
 
       
{ config, lib, pkgs, utils, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
with lib;

     

       
4
       
3
       
 
       
with utils;

     

       
4
       
4
       
+
       
with lib;

     

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
{

     

       
7
       
7
       
 
       


     

···

       
27
       
27
       
 
       


     

       
28
       
28
       
 
       
    environment.etc."odbcinst.ini".text =

     

       
29
       
29
       
 
       
      let inis = config.environment.unixODBCDrivers;

     

       
30
       
30
       
-
       
      in pkgs.lib.concatStringsSep "\n" inis;

     

       
30
       
30
       
+
       
      in lib.concatStringsSep "\n" inis;

     

       
31
       
31
       
 
       


     

       
32
       
32
       
 
       
  };

     

       
33
       
33
       
 
       


     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, pkgs, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
{

     

       
4
       
4
       
 
       


     
···

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
  options = {

     

       
8
       
8
       
 
       


     

       
9
       
9
       
-
       
    networking.enableIntel2100BGFirmware = pkgs.lib.mkOption {

     

       
9
       
9
       
+
       
    networking.enableIntel2100BGFirmware = lib.mkOption {

     

       
10
       
10
       
 
       
      default = false;

     

       
11
       
11
       
-
       
      type = pkgs.lib.types.bool;

     

       
11
       
11
       
+
       
      type = lib.types.bool;

     

       
12
       
12
       
 
       
      description = ''

     

       
13
       
13
       
 
       
        Turn on this option if you want firmware for the Intel

     

       
14
       
14
       
 
       
        PRO/Wireless 2100BG to be loaded automatically.  This is

     
···

       
21
       
21
       
 
       


     

       
22
       
22
       
 
       
  ###### implementation

     

       
23
       
23
       
 
       


     

       
24
       
24
       
-
       
  config = pkgs.lib.mkIf config.networking.enableIntel2100BGFirmware {

     

       
24
       
24
       
+
       
  config = lib.mkIf config.networking.enableIntel2100BGFirmware {

     

       
25
       
25
       
 
       


     

       
26
       
26
       
 
       
    hardware.enableAllFirmware = true;

     

       
27
       
27
       
 
       


     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, pkgs, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
{

     

       
4
       
4
       
 
       


     
···

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
  options = {

     

       
8
       
8
       
 
       


     

       
9
       
9
       
-
       
    networking.enableIntel2200BGFirmware = pkgs.lib.mkOption {

     

       
9
       
9
       
+
       
    networking.enableIntel2200BGFirmware = lib.mkOption {

     

       
10
       
10
       
 
       
      default = false;

     

       
11
       
11
       
-
       
      type = pkgs.lib.types.bool;

     

       
11
       
11
       
+
       
      type = lib.types.bool;

     

       
12
       
12
       
 
       
      description = ''

     

       
13
       
13
       
 
       
        Turn on this option if you want firmware for the Intel

     

       
14
       
14
       
 
       
        PRO/Wireless 2200BG to be loaded automatically.  This is

     
···

       
21
       
21
       
 
       


     

       
22
       
22
       
 
       
  ###### implementation

     

       
23
       
23
       
 
       


     

       
24
       
24
       
-
       
  config = pkgs.lib.mkIf config.networking.enableIntel2200BGFirmware {

     

       
24
       
24
       
+
       
  config = lib.mkIf config.networking.enableIntel2200BGFirmware {

     

       
25
       
25
       
 
       


     

       
26
       
26
       
 
       
    hardware.enableAllFirmware = true;

     

       
27
       
27
       
 
       


     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, pkgs, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
{

     

       
4
       
4
       
 
       


     
···

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
  options = {

     

       
8
       
8
       
 
       


     

       
9
       
9
       
-
       
    networking.enableIntel3945ABGFirmware = pkgs.lib.mkOption {

     

       
9
       
9
       
+
       
    networking.enableIntel3945ABGFirmware = lib.mkOption {

     

       
10
       
10
       
 
       
      default = false;

     

       
11
       
11
       
-
       
      type = pkgs.lib.types.bool;

     

       
11
       
11
       
+
       
      type = lib.types.bool;

     

       
12
       
12
       
 
       
      description = ''

     

       
13
       
13
       
 
       
        This option enables automatic loading of the firmware for the Intel

     

       
14
       
14
       
 
       
        PRO/Wireless 3945ABG.

     
···

       
20
       
20
       
 
       


     

       
21
       
21
       
 
       
  ###### implementation

     

       
22
       
22
       
 
       


     

       
23
       
23
       
-
       
  config = pkgs.lib.mkIf config.networking.enableIntel3945ABGFirmware {

     

       
23
       
23
       
+
       
  config = lib.mkIf config.networking.enableIntel3945ABGFirmware {

     

       
24
       
24
       
 
       


     

       
25
       
25
       
 
       
    hardware.enableAllFirmware = true;

     

       
26
       
26
       
 
       


     

···

       
1
       
1
       
-
       
{pkgs, config, ...}:

     

       
1
       
1
       
+
       
{pkgs, config, lib, ...}:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
{

     

       
4
       
4
       
 
       


     
···

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
  options = {

     

       
8
       
8
       
 
       


     

       
9
       
9
       
-
       
    networking.enableRalinkFirmware = pkgs.lib.mkOption {

     

       
9
       
9
       
+
       
    networking.enableRalinkFirmware = lib.mkOption {

     

       
10
       
10
       
 
       
      default = false;

     

       
11
       
11
       
-
       
      type = pkgs.lib.types.bool;

     

       
11
       
11
       
+
       
      type = lib.types.bool;

     

       
12
       
12
       
 
       
      description = ''

     

       
13
       
13
       
 
       
        Turn on this option if you want firmware for the RT73 NIC.

     

       
14
       
14
       
 
       
      '';

     
···

       
19
       
19
       
 
       


     

       
20
       
20
       
 
       
  ###### implementation

     

       
21
       
21
       
 
       


     

       
22
       
22
       
-
       
  config = pkgs.lib.mkIf config.networking.enableRalinkFirmware {

     

       
22
       
22
       
+
       
  config = lib.mkIf config.networking.enableRalinkFirmware {

     

       
23
       
23
       
 
       
    hardware.enableAllFirmware = true;

     

       
24
       
24
       
 
       
  };

     

       
25
       
25
       
 
       


     

···

       
1
       
1
       
-
       
{pkgs, config, ...}:

     

       
1
       
1
       
+
       
{pkgs, config, lib, ...}:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
{

     

       
4
       
4
       
 
       


     
···

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
  options = {

     

       
8
       
8
       
 
       


     

       
9
       
9
       
-
       
    networking.enableRTL8192cFirmware = pkgs.lib.mkOption {

     

       
9
       
9
       
+
       
    networking.enableRTL8192cFirmware = lib.mkOption {

     

       
10
       
10
       
 
       
      default = false;

     

       
11
       
11
       
-
       
      type = pkgs.lib.types.bool;

     

       
11
       
11
       
+
       
      type = lib.types.bool;

     

       
12
       
12
       
 
       
      description = ''

     

       
13
       
13
       
 
       
        Turn on this option if you want firmware for the RTL8192c (and related) NICs.

     

       
14
       
14
       
 
       
      '';

     
···

       
19
       
19
       
 
       


     

       
20
       
20
       
 
       
  ###### implementation

     

       
21
       
21
       
 
       


     

       
22
       
22
       
-
       
  config = pkgs.lib.mkIf config.networking.enableRTL8192cFirmware {

     

       
22
       
22
       
+
       
  config = lib.mkIf config.networking.enableRTL8192cFirmware {

     

       
23
       
23
       
 
       
    hardware.enableAllFirmware = true;

     

       
24
       
24
       
 
       
  };

     

       
25
       
25
       
 
       


     

···

       
1
       
1
       
-
       
{pkgs, config, ...}:

     

       
1
       
1
       
+
       
{lib, config, ...}:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
{

     

       
4
       
4
       
 
       
  hardware = {

     

       
5
       
5
       
 
       
    pcmcia = {

     

       
6
       
6
       
-
       
      firmware = [ (pkgs.lib.cleanSource ./firmware) ];

     

       
6
       
6
       
+
       
      firmware = [ (lib.cleanSource ./firmware) ];

     

       
7
       
7
       
 
       
    };

     

       
8
       
8
       
 
       
  };

     

       
9
       
9
       
 
       
}

     

···

       
84
       
84
       
 
       


     

       
85
       
85
       
 
       
  config = mkIf cfg.enable {

     

       
86
       
86
       
 
       


     

       
87
       
87
       
-
       
    assertions = pkgs.lib.singleton {

     

       
87
       
87
       
+
       
    assertions = lib.singleton {

     

       
88
       
88
       
 
       
      assertion = cfg.driSupport32Bit -> pkgs.stdenv.isx86_64;

     

       
89
       
89
       
 
       
      message = "Option driSupport32Bit only makes sense on a 64-bit system.";

     

       
90
       
90
       
 
       
    };

     

···

       
152
       
152
       
 
       
  # default root password is empty.

     

       
153
       
153
       
 
       
  services.openssh.enable = true;

     

       
154
       
154
       
 
       


     

       
155
       
155
       
-
       
  jobs.openssh.startOn = pkgs.lib.mkOverride 50 "";

     

       
155
       
155
       
+
       
  jobs.openssh.startOn = lib.mkOverride 50 "";

     

       
156
       
156
       
 
       


     

       
157
       
157
       
 
       
  boot.loader.grub.enable = false;

     

       
158
       
158
       
 
       
  boot.loader.generationsDir.enable = false;

     

···

       
109
       
109
       
 
       
  # not be started by default on the installation CD because the

     

       
110
       
110
       
 
       
  # default root password is empty.

     

       
111
       
111
       
 
       
  services.openssh.enable = true;

     

       
112
       
112
       
-
       
  jobs.openssh.startOn = pkgs.lib.mkOverride 50 "";

     

       
112
       
112
       
+
       
  jobs.openssh.startOn = lib.mkOverride 50 "";

     

       
113
       
113
       
 
       


     

       
114
       
114
       
 
       
  # To be able to use the systemTarball to catch troubles.

     

       
115
       
115
       
 
       
  boot.crashDump = {

     

···

       
165
       
165
       
 
       
  # not be started by default on the installation CD because the

     

       
166
       
166
       
 
       
  # default root password is empty.

     

       
167
       
167
       
 
       
  services.openssh.enable = true;

     

       
168
       
168
       
-
       
  jobs.openssh.startOn = pkgs.lib.mkOverride 50 "";

     

       
168
       
168
       
+
       
  jobs.openssh.startOn = lib.mkOverride 50 "";

     

       
169
       
169
       
 
       


     

       
170
       
170
       
 
       
  # cpufrequtils fails to build on non-pc

     

       
171
       
171
       
 
       
  powerManagement.enable = false;

     

···

       
1
       
1
       
 
       
# This module generates nixos-install, nixos-rebuild,

     

       
2
       
2
       
 
       
# nixos-generate-config, etc.

     

       
3
       
3
       
 
       


     

       
4
       
4
       
-
       
{ config, pkgs, modulesPath, ... }:

     

       
4
       
4
       
+
       
{ config, pkgs, modulesPath, lib, ... }:

     

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
let

     

       
7
       
7
       
 
       


     
···

       
65
       
65
       
 
       
        test -e "$out/chrome/content/jquery-1.5.2.js" ||

     

       
66
       
66
       
 
       
          cp -f "$jquery" "$out/chrome/content/jquery-1.5.2.js"

     

       
67
       
67
       
 
       
      '';

     

       
68
       
68
       
-
       
      gui = pkgs.lib.cleanSource "${modulesPath}/../gui";

     

       
68
       
68
       
+
       
      gui = lib.cleanSource "${modulesPath}/../gui";

     

       
69
       
69
       
 
       
      jquery = pkgs.fetchurl {

     

       
70
       
70
       
 
       
        url = http://code.jquery.com/jquery-1.5.2.min.js;

     

       
71
       
71
       
 
       
        sha256 = "8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a";

     

···

       
1
       
1
       
 
       
# This module defines the global list of uids and gids.  We keep a

     

       
2
       
2
       
 
       
# central list to prevent id collisions.

     

       
3
       
3
       
 
       


     

       
4
       
4
       
-
       
{ config, pkgs, ... }:

     

       
4
       
4
       
+
       
{ config, pkgs, lib, ... }:

     

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
{

     

       
7
       
7
       
 
       
  options = {

     

       
8
       
8
       
 
       


     

       
9
       
9
       
-
       
    ids.uids = pkgs.lib.mkOption {

     

       
9
       
9
       
+
       
    ids.uids = lib.mkOption {

     

       
10
       
10
       
 
       
      internal = true;

     

       
11
       
11
       
 
       
      description = ''

     

       
12
       
12
       
 
       
        The user IDs used in NixOS.

     

       
13
       
13
       
 
       
      '';

     

       
14
       
14
       
 
       
    };

     

       
15
       
15
       
 
       


     

       
16
       
16
       
-
       
    ids.gids = pkgs.lib.mkOption {

     

       
16
       
16
       
+
       
    ids.gids = lib.mkOption {

     

       
17
       
17
       
 
       
      internal = true;

     

       
18
       
18
       
 
       
      description = ''

     

       
19
       
19
       
 
       
        The group IDs used in NixOS.

     
···

       
135
       
135
       
 
       
      influxdb = 125;

     

       
136
       
136
       
 
       
      nsd = 126;

     

       
137
       
137
       
 
       
      gitolite = 127;

     

       
138
       
138
       
+
       
      znc = 128;

     

       
138
       
139
       
 
       


     

       
139
       
140
       
 
       
      # When adding a uid, make sure it doesn't match an existing gid. And don't use uids above 399!

     

       
140
       
141
       
 
       


     
···

       
243
       
244
       
 
       
      teamspeak = 124;

     

       
244
       
245
       
 
       
      influxdb = 125;

     

       
245
       
246
       
 
       
      nsd = 126;

     

       
247
       
247
       
+
       
      znc = 128;

     

       
246
       
248
       
 
       


     

       
247
       
249
       
 
       
      # When adding a gid, make sure it doesn't match an existing uid. And don't use gids above 399!

     

       
248
       
250
       
 
       


     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
{

     

       
4
       
4
       
 
       
  options = {

     

       
5
       
5
       
-
       
    lib = pkgs.lib.mkOption {

     

       
5
       
5
       
+
       
    lib = lib.mkOption {

     

       
6
       
6
       
 
       
      default = {};

     

       
7
       
7
       
 
       


     

       
8
       
8
       
-
       
      type = pkgs.lib.types.attrsOf pkgs.lib.types.attrs;

     

       
8
       
8
       
+
       
      type = lib.types.attrsOf lib.types.attrs;

     

       
9
       
9
       
 
       


     

       
10
       
10
       
 
       
      description = ''

     

       
11
       
11
       
 
       
        This option allows modules to define helper functions, constants, etc.

     

···

       
1
       
1
       
 
       
# This module allows you to export something from configuration

     

       
2
       
2
       
 
       
# Use case: export kernel source expression for ease of configuring

     

       
3
       
3
       
 
       


     

       
4
       
4
       
-
       
{ config, pkgs, ... }:

     

       
4
       
4
       
+
       
{ config, lib, ... }:

     

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
{

     

       
7
       
7
       
 
       
  options = {

     

       
8
       
8
       
-
       
    passthru = pkgs.lib.mkOption {

     

       
8
       
8
       
+
       
    passthru = lib.mkOption {

     

       
9
       
9
       
 
       
      visible = false;

     

       
10
       
10
       
 
       
      description = ''

     

       
11
       
11
       
 
       
        This attribute set will be exported as a system attribute.

     

···

       
237
       
237
       
 
       
  ./services/networking/wicd.nix

     

       
238
       
238
       
 
       
  ./services/networking/wpa_supplicant.nix

     

       
239
       
239
       
 
       
  ./services/networking/xinetd.nix

     

       
240
       
240
       
+
       
  ./services/networking/znc.nix

     

       
240
       
241
       
 
       
  ./services/printing/cupsd.nix

     

       
241
       
242
       
 
       
  ./services/scheduling/atd.nix

     

       
242
       
243
       
 
       
  ./services/scheduling/cron.nix

     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
let

     

       
4
       
4
       
-
       
  inherit (pkgs.lib) mkOption mkIf;

     

       
4
       
4
       
+
       
  inherit (lib) mkOption mkIf;

     

       
5
       
5
       
 
       
  cfg = config.environment.blcr;

     

       
6
       
6
       
 
       
  blcrPkg = config.boot.kernelPackages.blcr;

     

       
7
       
7
       
 
       
in

     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
let

     

       
4
       
4
       
-
       
  inherit (pkgs.lib) mkOption mkIf types;

     

       
4
       
4
       
+
       
  inherit (lib) mkOption mkIf types;

     

       
5
       
5
       
 
       
  cfg = config.programs.screen;

     

       
6
       
6
       
 
       
in

     

       
7
       
7
       
 
       


     

···

       
40
       
40
       
 
       


     

       
41
       
41
       
 
       
  options = {

     

       
42
       
42
       
 
       


     

       
43
       
43
       
-
       
    users.defaultUserShell = pkgs.lib.mkOption {

     

       
43
       
43
       
+
       
    users.defaultUserShell = lib.mkOption {

     

       
44
       
44
       
 
       
      description = ''

     

       
45
       
45
       
 
       
        This option defines the default shell assigned to user

     

       
46
       
46
       
 
       
        accounts.  This must not be a store path, since the path is

     
···

       
60
       
60
       
 
       
  config = {

     

       
61
       
61
       
 
       


     

       
62
       
62
       
 
       
    environment.systemPackages =

     

       
63
       
63
       
-
       
      pkgs.lib.optional config.users.mutableUsers pkgs.shadow;

     

       
63
       
63
       
+
       
      lib.optional config.users.mutableUsers pkgs.shadow;

     

       
64
       
64
       
 
       


     

       
65
       
65
       
 
       
    environment.etc =

     

       
66
       
66
       
 
       
      [ { # /etc/login.defs: global configuration for pwdutils.  You

     

···

       
14
       
14
       
 
       
  services.udev.extraRules =

     

       
15
       
15
       
 
       
    ''

     

       
16
       
16
       
 
       
      KERNEL=="vboxdrv",    OWNER="root", GROUP="vboxusers", MODE="0660", TAG+="systemd"

     

       
17
       
17
       
+
       
      KERNEL=="vboxdrvu",   OWNER="root", GROUP="root",      MODE="0666", TAG+="systemd"

     

       
17
       
18
       
 
       
      KERNEL=="vboxnetctl", OWNER="root", GROUP="root",      MODE="0600", TAG+="systemd"

     

       
18
       
19
       
 
       
      SUBSYSTEM=="usb_device", ACTION=="add", RUN+="${virtualbox}/libexec/virtualbox/VBoxCreateUSBNode.sh $major $minor $attr{bDeviceClass}"

     

       
19
       
20
       
 
       
      SUBSYSTEM=="usb", ACTION=="add", ENV{DEVTYPE}=="usb_device", RUN+="${virtualbox}/libexec/virtualbox/VBoxCreateUSBNode.sh $major $minor $attr{bDeviceClass}"

     

···

       
1
       
1
       
 
       
{ config, lib, pkgs, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
with lib;

     

       
4
       
3
       
 
       
with pkgs;

     

       
4
       
4
       
+
       
with lib;

     

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
let

     

       
7
       
7
       
 
       


     

···

       
73
       
73
       
 
       
        touch ${stateDir}/sitecopy.secrets

     

       
74
       
74
       
 
       
        chown root ${stateDir}/sitecopy.secrets

     

       
75
       
75
       
 
       


     

       
76
       
76
       
-
       
        ${pkgs.lib.concatStrings (map ( b: ''

     

       
76
       
76
       
+
       
        ${lib.concatStrings (map ( b: ''

     

       
77
       
77
       
 
       
            unset secrets

     

       
78
       
78
       
 
       
            unset secret

     

       
79
       
79
       
 
       
            secrets=`grep '^${b.server}' ${stateDir}/sitecopy.secrets | head -1`

     

···

       
85
       
85
       
 
       
          Defines how users authenticate themselves to the server. By

     

       
86
       
86
       
 
       
          default, "trust" access to local users will always be granted

     

       
87
       
87
       
 
       
          along with any other custom options. If you do not want this,

     

       
88
       
88
       
-
       
          set this option using "pkgs.lib.mkForce" to override this

     

       
88
       
88
       
+
       
          set this option using "lib.mkForce" to override this

     

       
89
       
89
       
 
       
          behaviour.

     

       
90
       
90
       
 
       
        '';

     

       
91
       
91
       
 
       
      };

     

···

       
1
       
1
       
 
       
# GNOME Documents daemon.

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
{ config, pkgs, ... }:

     

       
3
       
3
       
+
       
{ config, pkgs, lib, ... }:

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
with pkgs.lib;

     

       
5
       
5
       
+
       
with lib;

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
let

     

       
8
       
8
       
 
       
  gnome3 = config.environment.gnome3.packageSet;

     

···

       
1
       
1
       
 
       
# GNOME Keyring daemon.

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
{ config, pkgs, ... }:

     

       
3
       
3
       
+
       
{ config, pkgs, lib, ... }:

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
with pkgs.lib;

     

       
5
       
5
       
+
       
with lib;

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
let

     

       
8
       
8
       
 
       
  gnome3 = config.environment.gnome3.packageSet;

     

···

       
1
       
1
       
 
       
# GNOME Online Accounts daemon.

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
{ config, pkgs, ... }:

     

       
3
       
3
       
+
       
{ config, pkgs, lib, ... }:

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
with pkgs.lib;

     

       
5
       
5
       
+
       
with lib;

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
let

     

       
8
       
8
       
 
       
  gnome3 = config.environment.gnome3.packageSet;

     

···

       
1
       
1
       
 
       
# GNOME Online Miners daemon.

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
{ config, pkgs, ... }:

     

       
3
       
3
       
+
       
{ config, pkgs, lib, ... }:

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
with pkgs.lib;

     

       
5
       
5
       
+
       
with lib;

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
let

     

       
8
       
8
       
 
       
  gnome3 = config.environment.gnome3.packageSet;

     

···

       
1
       
1
       
 
       
# GNOME User Share daemon.

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
{ config, pkgs, ... }:

     

       
3
       
3
       
+
       
{ config, pkgs, lib, ... }:

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
with pkgs.lib;

     

       
5
       
5
       
+
       
with lib;

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
let

     

       
8
       
8
       
 
       
  gnome3 = config.environment.gnome3.packageSet;

     

···

       
1
       
1
       
 
       
# gvfs backends

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
{ config, pkgs, ... }:

     

       
3
       
3
       
+
       
{ config, lib, ... }:

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
with pkgs.lib;

     

       
5
       
5
       
+
       
with lib;

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
let

     

       
8
       
8
       
 
       
  gnome3 = config.environment.gnome3.packageSet;

     

···

       
1
       
1
       
 
       
# Seahorse daemon.

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
{ config, pkgs, ... }:

     

       
3
       
3
       
+
       
{ config, pkgs, lib, ... }:

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
with pkgs.lib;

     

       
5
       
5
       
+
       
with lib;

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
let

     

       
8
       
8
       
 
       
  gnome3 = config.environment.gnome3.packageSet;

     

···

       
1
       
1
       
 
       
# Tracker daemon.

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
{ config, pkgs, ... }:

     

       
3
       
3
       
+
       
{ config, pkgs, lib, ... }:

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
with pkgs.lib;

     

       
5
       
5
       
+
       
with lib;

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
let

     

       
8
       
8
       
 
       
  gnome3 = config.environment.gnome3.packageSet;

     

···

       
16
       
16
       
 
       
            echo "event=${event.event}" > $fn

     

       
17
       
17
       
 
       
            echo "action=${pkgs.writeScript "${event.name}.sh" event.action}" >> $fn

     

       
18
       
18
       
 
       
          '';

     

       
19
       
19
       
-
       
        in pkgs.lib.concatMapStrings f events

     

       
19
       
19
       
+
       
        in lib.concatMapStrings f events

     

       
20
       
20
       
 
       
      }

     

       
21
       
21
       
 
       
    '';

     

       
22
       
22
       
 
       


     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, pkgs, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
{

     

       
4
       
4
       
 
       


     
···

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
  options = {

     

       
8
       
8
       
 
       


     

       
9
       
9
       
-
       
    hardware.amdHybridGraphics.disable = pkgs.lib.mkOption {

     

       
9
       
9
       
+
       
    hardware.amdHybridGraphics.disable = lib.mkOption {

     

       
10
       
10
       
 
       
      default = false;

     

       
11
       
11
       
-
       
      type = pkgs.lib.types.bool;

     

       
11
       
11
       
+
       
      type = lib.types.bool;

     

       
12
       
12
       
 
       
      description = ''

     

       
13
       
13
       
 
       
        Completely disable the AMD graphics card and use the

     

       
14
       
14
       
 
       
        integrated graphics processor instead.

     
···

       
20
       
20
       
 
       


     

       
21
       
21
       
 
       
  ###### implementation

     

       
22
       
22
       
 
       


     

       
23
       
23
       
-
       
  config = pkgs.lib.mkIf config.hardware.amdHybridGraphics.disable {

     

       
23
       
23
       
+
       
  config = lib.mkIf config.hardware.amdHybridGraphics.disable {

     

       
24
       
24
       
 
       
    systemd.services."amd-hybrid-graphics" = {

     

       
25
       
25
       
 
       
      path = [ pkgs.bash ];

     

       
26
       
26
       
 
       
      description = "Disable AMD Card";

     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, pkgs, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
let kernel = config.boot.kernelPackages; in

     

       
4
       
4
       
 
       


     
···

       
8
       
8
       
 
       


     

       
9
       
9
       
 
       
  options = {

     

       
10
       
10
       
 
       


     

       
11
       
11
       
-
       
    hardware.nvidiaOptimus.disable = pkgs.lib.mkOption {

     

       
11
       
11
       
+
       
    hardware.nvidiaOptimus.disable = lib.mkOption {

     

       
12
       
12
       
 
       
      default = false;

     

       
13
       
13
       
-
       
      type = pkgs.lib.types.bool;

     

       
13
       
13
       
+
       
      type = lib.types.bool;

     

       
14
       
14
       
 
       
      description = ''

     

       
15
       
15
       
 
       
        Completely disable the NVIDIA graphics card and use the

     

       
16
       
16
       
 
       
        integrated graphics processor instead.

     
···

       
22
       
22
       
 
       


     

       
23
       
23
       
 
       
  ###### implementation

     

       
24
       
24
       
 
       


     

       
25
       
25
       
-
       
  config = pkgs.lib.mkIf config.hardware.nvidiaOptimus.disable {

     

       
25
       
25
       
+
       
  config = lib.mkIf config.hardware.nvidiaOptimus.disable {

     

       
26
       
26
       
 
       
    boot.blacklistedKernelModules = ["nouveau" "nvidia" "nvidiafb"];

     

       
27
       
27
       
 
       
    boot.kernelModules = [ "bbswitch" ];

     

       
28
       
28
       
 
       
    boot.extraModulePackages = [ kernel.bbswitch ];

     

···

       
1
       
1
       
 
       
# Monit system watcher

     

       
2
       
2
       
 
       
# http://mmonit.org/monit/

     

       
3
       
3
       
 
       


     

       
4
       
4
       
-
       
{config, pkgs, ...}:

     

       
4
       
4
       
+
       
{config, pkgs, lib, ...}:

     

       
5
       
5
       
 
       


     

       
6
       
6
       
-
       
let inherit (pkgs.lib) mkOption mkIf;

     

       
6
       
6
       
+
       
let inherit (lib) mkOption mkIf;

     

       
7
       
7
       
 
       
in

     

       
8
       
8
       
 
       


     

       
9
       
9
       
 
       
{

     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, pkgs, lib, ... }:

     

       
2
       
2
       
 
       
let

     

       
3
       
3
       
-
       
  inherit (pkgs.lib) mkOption mkEnableOption mkIf mkMerge types optionalAttrs optional;

     

       
3
       
3
       
+
       
  inherit (lib) mkOption mkEnableOption mkIf mkMerge types optionalAttrs optional;

     

       
4
       
4
       
 
       


     

       
5
       
5
       
 
       
  cfg = config.services.uptime;

     

       
6
       
6
       
 
       


     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, pkgs, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
let

     

       
4
       
4
       
-
       
  inherit (pkgs.lib) mkOption mkIf;

     

       
4
       
4
       
+
       
  inherit (lib) mkOption mkIf;

     

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
  cfg = config.services.openafsClient;

     

       
7
       
7
       
 
       


     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, pkgs, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
with pkgs.lib;

     

       
3
       
3
       
+
       
with lib;

     

       
4
       
4
       
 
       


     

       
5
       
5
       
 
       
let

     

       
6
       
6
       
 
       


     
···

       
136
       
136
       
 
       


     

       
137
       
137
       
 
       
    networking.firewall.allowedTCPPorts = [ cfg.port ];

     

       
138
       
138
       
 
       
  };

     

       
139
       
139
       
-
       
}
     

       
139
       
139
       
+
       
}

     

···

       
1
       
1
       
 
       
{ config, lib, pkgs, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
with lib;

     

       
4
       
3
       
 
       
with pkgs;

     

       
4
       
4
       
+
       
with lib;

     

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
let

     

       
7
       
7
       
 
       
  cfg = config.networking.connman;

     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, pkgs, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
let

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
  inherit (pkgs.lib) mkOption mkIf singleton;

     

       
5
       
5
       
+
       
  inherit (lib) mkOption mkIf singleton;

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
  inherit (pkgs) ddclient;

     

       
8
       
8
       
 
       


     

···

       
18
       
18
       
 
       


     

       
19
       
19
       
 
       
      ${cfg.extraConfig}

     

       
20
       
20
       
 
       


     

       
21
       
21
       
-
       
      ${pkgs.lib.concatMapStrings

     

       
21
       
21
       
+
       
      ${lib.concatMapStrings

     

       
22
       
22
       
 
       
          (machine: ''

     

       
23
       
23
       
 
       
            host ${machine.hostName} {

     

       
24
       
24
       
 
       
              hardware ethernet ${machine.ethernetAddress};

     

···

       
1
       
1
       
 
       
# GNU Virtual Private Ethernet

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
{config, pkgs, ...}:

     

       
3
       
3
       
+
       
{config, pkgs, lib, ...}:

     

       
4
       
4
       
 
       


     

       
5
       
5
       
 
       
let

     

       
6
       
6
       
-
       
  inherit (pkgs.lib) mkOption mkIf;

     

       
6
       
6
       
+
       
  inherit (lib) mkOption mkIf;

     

       
7
       
7
       
 
       


     

       
8
       
8
       
 
       
  cfg = config.services.gvpe;

     

       
9
       
9
       
 
       


     

···

       
1
       
1
       
 
       
{ config, lib, pkgs, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
with lib;

     

       
4
       
3
       
 
       
with pkgs;

     

       
4
       
4
       
+
       
with lib;

     

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
let

     

       
7
       
7
       
 
       
  cfg = config.networking.networkmanager;

     
···

       
151
       
151
       
 
       
      { source = "${networkmanager_pptp}/etc/NetworkManager/VPN/nm-pptp-service.name";

     

       
152
       
152
       
 
       
        target = "NetworkManager/VPN/nm-pptp-service.name";

     

       
153
       
153
       
 
       
      }

     

       
154
       
154
       
-
       
    ] ++ pkgs.lib.optional (cfg.appendNameservers == [] || cfg.insertNameservers == [])

     

       
154
       
154
       
+
       
    ] ++ optional (cfg.appendNameservers == [] || cfg.insertNameservers == [])

     

       
155
       
155
       
 
       
           { source = overrideNameserversScript;

     

       
156
       
156
       
 
       
             target = "NetworkManager/dispatcher.d/02overridedns";

     

       
157
       
157
       
 
       
           };

     

···

       
1
       
1
       
 
       
{ config, lib, pkgs, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
with pkgs.lib;

     

       
3
       
3
       
+
       
with lib;

     

       
4
       
4
       
 
       
let

     

       
5
       
5
       
 
       
  cfg = config.services.notbit;

     

       
6
       
6
       
 
       
  varDir = "/var/lib/notbit";

     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, pkgs, lib, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
with pkgs.lib;

     

       
3
       
3
       
+
       
with lib;

     

       
4
       
4
       
 
       


     

       
5
       
5
       
 
       
let

     

       
6
       
6
       
 
       
  cfg = config.services.nsd;

     

···

       
1
       
1
       
-
       
{ config, pkgs, ... }:

     

       
1
       
1
       
+
       
{ config, lib, pkgs, ... }:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
-
       
with pkgs.lib;

     

       
3
       
3
       
+
       
with lib;

     

       
4
       
4
       
 
       


     

       
5
       
5
       
 
       
let

     

       
6
       
6
       
 
       
  ts3 = pkgs.teamspeak_server;

     

···

       
1
       
1
       
+
       
{ config, lib, pkgs, ...}:

     

       
2
       
2
       
+
       


     

       
3
       
3
       
+
       
with lib;

     

       
4
       
4
       
+
       


     

       
5
       
5
       
+
       
let

     

       
6
       
6
       
+
       
  cfg = config.services.znc;

     

       
7
       
7
       
+
       


     

       
8
       
8
       
+
       
  defaultUser = "znc"; # Default user to own process.

     

       
9
       
9
       
+
       


     

       
10
       
10
       
+
       
  # Default user and pass:

     

       
11
       
11
       
+
       
  # un=znc

     

       
12
       
12
       
+
       
  # pw=nixospass

     

       
13
       
13
       
+
       


     

       
14
       
14
       
+
       
  defaultUserName = "znc";

     

       
15
       
15
       
+
       
  defaultPassBlock = "

     

       
16
       
16
       
+
       
        <Pass password>

     

       
17
       
17
       
+
       
                Method = sha256

     

       
18
       
18
       
+
       
                Hash = e2ce303c7ea75c571d80d8540a8699b46535be6a085be3414947d638e48d9e93

     

       
19
       
19
       
+
       
                Salt = l5Xryew4g*!oa(ECfX2o

     

       
20
       
20
       
+
       
        </Pass>

     

       
21
       
21
       
+
       
  ";

     

       
22
       
22
       
+
       


     

       
23
       
23
       
+
       
  confOptions = { ... }: {

     

       
24
       
24
       
+
       
    options = {

     

       
25
       
25
       
+
       
      modules = mkOption {

     

       
26
       
26
       
+
       
        type = types.listOf types.string;

     

       
27
       
27
       
+
       
        default = [ "partyline" "webadmin" "adminlog" "log" ];

     

       
28
       
28
       
+
       
        example = [ "partyline" "webadmin" "adminlog" "log" ];

     

       
29
       
29
       
+
       
        description = ''

     

       
30
       
30
       
+
       
          A list of modules to include in the `znc.conf` file.

     

       
31
       
31
       
+
       
        '';

     

       
32
       
32
       
+
       
      };

     

       
33
       
33
       
+
       


     

       
34
       
34
       
+
       
      userName = mkOption {

     

       
35
       
35
       
+
       
        default = defaultUserName;

     

       
36
       
36
       
+
       
        example = "johntron";

     

       
37
       
37
       
+
       
        type = types.string;

     

       
38
       
38
       
+
       
        description = ''

     

       
39
       
39
       
+
       
          The user name to use when generating the `znc.conf` file.

     

       
40
       
40
       
+
       
          This is the user name used by the user logging into the ZNC web admin. 

     

       
41
       
41
       
+
       
        '';

     

       
42
       
42
       
+
       
      };

     

       
43
       
43
       
+
       


     

       
44
       
44
       
+
       
      nick = mkOption {

     

       
45
       
45
       
+
       
        default = "znc-user";

     

       
46
       
46
       
+
       
        example = "john";

     

       
47
       
47
       
+
       
        type = types.string;

     

       
48
       
48
       
+
       
        description = ''

     

       
49
       
49
       
+
       
          The IRC nick to use when generating the `znc.conf` file.

     

       
50
       
50
       
+
       
        '';

     

       
51
       
51
       
+
       
      };

     

       
52
       
52
       
+
       


     

       
53
       
53
       
+
       
      passBlock = mkOption {

     

       
54
       
54
       
+
       
        default = defaultPassBlock;

     

       
55
       
55
       
+
       
        example = "Must be the block generated by the `znc --makepass` command.";

     

       
56
       
56
       
+
       
        type = types.string;

     

       
57
       
57
       
+
       
        description = ''

     

       
58
       
58
       
+
       
          The pass block to use when generating the `znc.conf` file.

     

       
59
       
59
       
+
       
          This is the password used by the user logging into the ZNC web admin.

     

       
60
       
60
       
+
       
          This is the block generated by the `znc --makepass` command.

     

       
61
       
61
       
+
       
          !!! If not specified, please change this after starting the service. !!!

     

       
62
       
62
       
+
       
        '';

     

       
63
       
63
       
+
       
      };

     

       
64
       
64
       
+
       


     

       
65
       
65
       
+
       
      port = mkOption {

     

       
66
       
66
       
+
       
        default = "5000";

     

       
67
       
67
       
+
       
        example = "5000";

     

       
68
       
68
       
+
       
        type = types.string;

     

       
69
       
69
       
+
       
        description = ''

     

       
70
       
70
       
+
       
          Specifies the port on which to listen.

     

       
71
       
71
       
+
       
        '';

     

       
72
       
72
       
+
       
      };

     

       
73
       
73
       
+
       
 

     

       
74
       
74
       
+
       
      useSSL = mkOption {

     

       
75
       
75
       
+
       
        default = true;

     

       
76
       
76
       
+
       
        example = true;

     

       
77
       
77
       
+
       
        type = types.bool;

     

       
78
       
78
       
+
       
        description = ''

     

       
79
       
79
       
+
       
          Indicates whether the ZNC server should use SSL when listening on the specified port.

     

       
80
       
80
       
+
       
        '';

     

       
81
       
81
       
+
       
      };

     

       
82
       
82
       
+
       


     

       
83
       
83
       
+
       
    };

     

       
84
       
84
       
+
       
  };

     

       
85
       
85
       
+
       


     

       
86
       
86
       
+
       
  # Keep znc.conf in nix store, then symlink or copy into `dataDir`, depending on `mutable`.

     

       
87
       
87
       
+
       
  mkZncConf = confOpts: ''

     

       
88
       
88
       
+
       
    // Also check http://en.znc.in/wiki/Configuration

     

       
89
       
89
       
+
       
    

     

       
90
       
90
       
+
       
    AnonIPLimit = 10

     

       
91
       
91
       
+
       
    ConnectDelay = 5

     

       
92
       
92
       
+
       
    # Add `LoadModule = x` for each module...

     

       
93
       
93
       
+
       
    ${concatMapStrings (n: "LoadModule = ${n}\n") confOpts.modules}

     

       
94
       
94
       
+
       
    MaxBufferSize = 500

     

       
95
       
95
       
+
       
    ProtectWebSessions = true

     

       
96
       
96
       
+
       
    SSLCertFile = ${cfg.dataDir}/znc.pem

     

       
97
       
97
       
+
       
    ServerThrottle = 30

     

       
98
       
98
       
+
       
    Skin = dark-clouds

     

       
99
       
99
       
+
       
    StatusPrefix = *

     

       
100
       
100
       
+
       
    Version = 1.2

     

       
101
       
101
       
+
       


     

       
102
       
102
       
+
       
    <Listener listener0>

     

       
103
       
103
       
+
       
            AllowIRC = true

     

       
104
       
104
       
+
       
            AllowWeb = true

     

       
105
       
105
       
+
       
            IPv4 = true

     

       
106
       
106
       
+
       
            IPv6 = false

     

       
107
       
107
       
+
       
            Port = ${if confOpts.useSSL then "+" else ""}${confOpts.port}

     

       
108
       
108
       
+
       
            SSL = ${if confOpts.useSSL then "true" else "false"}

     

       
109
       
109
       
+
       
    </Listener>

     

       
110
       
110
       
+
       
    

     

       
111
       
111
       
+
       
    <User ${confOpts.userName}>

     

       
112
       
112
       
+
       
            Admin = true

     

       
113
       
113
       
+
       
            Allow = *

     

       
114
       
114
       
+
       
            AltNick = ${confOpts.nick}_

     

       
115
       
115
       
+
       
            AppendTimestamp = false

     

       
116
       
116
       
+
       
            AutoClearChanBuffer = false

     

       
117
       
117
       
+
       
            Buffer = 150

     

       
118
       
118
       
+
       
            ChanModes = +stn

     

       
119
       
119
       
+
       
            DenyLoadMod = false

     

       
120
       
120
       
+
       
            DenySetBindHost = false

     

       
121
       
121
       
+
       
            Ident = ident

     

       
122
       
122
       
+
       
            JoinTries = 10

     

       
123
       
123
       
+
       
            MaxJoins = 0

     

       
124
       
124
       
+
       
            MaxNetworks = 1

     

       
125
       
125
       
+
       
            MultiClients = true

     

       
126
       
126
       
+
       
            Nick = ${confOpts.nick}

     

       
127
       
127
       
+
       
            PrependTimestamp = true

     

       
128
       
128
       
+
       
            QuitMsg = Quit

     

       
129
       
129
       
+
       
            RealName = ${confOpts.nick}

     

       
130
       
130
       
+
       
            TimestampFormat = [%H:%M:%S]

     

       
131
       
131
       
+
       
            

     

       
132
       
132
       
+
       
            ${confOpts.passBlock}

     

       
133
       
133
       
+
       
    </User>

     

       
134
       
134
       
+
       
  '';

     

       
135
       
135
       
+
       


     

       
136
       
136
       
+
       
  zncConfFile = pkgs.writeTextFile {

     

       
137
       
137
       
+
       
    name = "znc.conf";

     

       
138
       
138
       
+
       
    text = if cfg.zncConf != ""

     

       
139
       
139
       
+
       
      then cfg.zncConf

     

       
140
       
140
       
+
       
      else mkZncConf cfg.confOptions;

     

       
141
       
141
       
+
       
  };

     

       
142
       
142
       
+
       


     

       
143
       
143
       
+
       
in

     

       
144
       
144
       
+
       


     

       
145
       
145
       
+
       
{

     

       
146
       
146
       
+
       


     

       
147
       
147
       
+
       
  ###### Interface

     

       
148
       
148
       
+
       


     

       
149
       
149
       
+
       
  options = {

     

       
150
       
150
       
+
       
    services.znc = {

     

       
151
       
151
       
+
       
      enable = mkOption {

     

       
152
       
152
       
+
       
        default = false;

     

       
153
       
153
       
+
       
        example = true;

     

       
154
       
154
       
+
       
        type = types.bool;

     

       
155
       
155
       
+
       
        description = ''

     

       
156
       
156
       
+
       
          Enable a ZNC service for a user.

     

       
157
       
157
       
+
       
        '';

     

       
158
       
158
       
+
       
      };

     

       
159
       
159
       
+
       


     

       
160
       
160
       
+
       
      user = mkOption {

     

       
161
       
161
       
+
       
        default = "znc";

     

       
162
       
162
       
+
       
        example = "john";

     

       
163
       
163
       
+
       
        type = types.string;

     

       
164
       
164
       
+
       
        description = ''

     

       
165
       
165
       
+
       
          The name of an existing user account to use to own the ZNC server process.

     

       
166
       
166
       
+
       
          If not specified, a default user will be created to own the process.

     

       
167
       
167
       
+
       
        '';

     

       
168
       
168
       
+
       
      };

     

       
169
       
169
       
+
       


     

       
170
       
170
       
+
       
      dataDir = mkOption {

     

       
171
       
171
       
+
       
        default = "/home/${cfg.user}/.znc";

     

       
172
       
172
       
+
       
        example = "/home/john/.znc";

     

       
173
       
173
       
+
       
        type = types.string; 

     

       
174
       
174
       
+
       
        description = ''

     

       
175
       
175
       
+
       
          The data directory. Used for configuration files and modules.

     

       
176
       
176
       
+
       
        '';

     

       
177
       
177
       
+
       
      };

     

       
178
       
178
       
+
       


     

       
179
       
179
       
+
       
      zncConf = mkOption {

     

       
180
       
180
       
+
       
        default = "";

     

       
181
       
181
       
+
       
        example = "See: http://wiki.znc.in/Configuration";

     

       
182
       
182
       
+
       
        type = types.string;

     

       
183
       
183
       
+
       
        description = ''

     

       
184
       
184
       
+
       
          The contents of the `znc.conf` file to use when creating it.

     

       
185
       
185
       
+
       
          If specified, `confOptions` will be ignored, and this value, as-is, will be used.

     

       
186
       
186
       
+
       
          If left empty, a conf file with default values will be used.

     

       
187
       
187
       
+
       
          Recommended to generate with `znc --makeconf` command.

     

       
188
       
188
       
+
       
        '';

     

       
189
       
189
       
+
       
      };

     

       
190
       
190
       
+
       


     

       
191
       
191
       
+
       
      confOptions = mkOption {

     

       
192
       
192
       
+
       
        default = {};

     

       
193
       
193
       
+
       
        example = {

     

       
194
       
194
       
+
       
          modules = [ "log" ];

     

       
195
       
195
       
+
       
          userName = "john";

     

       
196
       
196
       
+
       
          nick = "johntron";

     

       
197
       
197
       
+
       
        };

     

       
198
       
198
       
+
       
        type = types.optionSet;

     

       
199
       
199
       
+
       
        description = ''

     

       
200
       
200
       
+
       
          Values to use when creating a `znc.conf` file.

     

       
201
       
201
       
+
       
        '';

     

       
202
       
202
       
+
       
        options = confOptions; 

     

       
203
       
203
       
+
       
      };

     

       
204
       
204
       
+
       
 

     

       
205
       
205
       
+
       
      mutable = mkOption {

     

       
206
       
206
       
+
       
        default = false;

     

       
207
       
207
       
+
       
        example = true;

     

       
208
       
208
       
+
       
        type = types.bool;

     

       
209
       
209
       
+
       
        description = ''

     

       
210
       
210
       
+
       
          Indicates whether to allow the contents of the `dataDir` directory to be changed

     

       
211
       
211
       
+
       
          by the user at run-time.

     

       
212
       
212
       
+
       
          If true, modifications to the ZNC configuration after its initial creation are not 

     

       
213
       
213
       
+
       
            overwritten by a NixOS system rebuild.

     

       
214
       
214
       
+
       
          If false, the ZNC configuration is rebuilt by every system rebuild.

     

       
215
       
215
       
+
       
          If the user wants to manage the ZNC service using the web admin interface, this value

     

       
216
       
216
       
+
       
            should be set to true.

     

       
217
       
217
       
+
       
        '';

     

       
218
       
218
       
+
       
      };

     

       
219
       
219
       
+
       
 

     

       
220
       
220
       
+
       
      extraFlags = mkOption {

     

       
221
       
221
       
+
       
        default = "";

     

       
222
       
222
       
+
       
        example = "--debug";

     

       
223
       
223
       
+
       
        type = types.string;

     

       
224
       
224
       
+
       
        description = ''

     

       
225
       
225
       
+
       
          Extra flags to use when executing znc command.

     

       
226
       
226
       
+
       
        '';

     

       
227
       
227
       
+
       
      };

     

       
228
       
228
       
+
       
    };

     

       
229
       
229
       
+
       
  };

     

       
230
       
230
       
+
       


     

       
231
       
231
       
+
       


     

       
232
       
232
       
+
       
  ###### Implementation

     

       
233
       
233
       
+
       


     

       
234
       
234
       
+
       
  config = mkIf cfg.enable {

     

       
235
       
235
       
+
       


     

       
236
       
236
       
+
       
    systemd.services."znc-${cfg.user}" = {

     

       
237
       
237
       
+
       
      description = "ZNC Server of ${cfg.user}.";

     

       
238
       
238
       
+
       
      wantedBy = [ "multi-user.target" ];

     

       
239
       
239
       
+
       
      after = [ "network.service" ];

     

       
240
       
240
       
+
       
      path = [ pkgs.znc ];

     

       
241
       
241
       
+
       
      serviceConfig = {

     

       
242
       
242
       
+
       
        User = "${cfg.user}";

     

       
243
       
243
       
+
       
        Restart = "always";

     

       
244
       
244
       
+
       
        ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";

     

       
245
       
245
       
+
       
        ExecStop   = "${pkgs.coreutils}/bin/kill -INT $MAINPID";

     

       
246
       
246
       
+
       
      };

     

       
247
       
247
       
+
       
      preStart = ''

     

       
248
       
248
       
+
       
        ${pkgs.coreutils}/bin/mkdir -p ${cfg.dataDir}

     

       
249
       
249
       
+
       
        ${pkgs.coreutils}/bin/chown ${cfg.user} ${cfg.dataDir} -R

     

       
250
       
250
       
+
       
        ${pkgs.coreutils}/bin/mkdir -p ${cfg.dataDir}/configs

     

       
251
       
251
       
+
       


     

       
252
       
252
       
+
       
        # If mutable, regenerate conf file every time.

     

       
253
       
253
       
+
       
        ${optionalString (!cfg.mutable) ''

     

       
254
       
254
       
+
       
          ${pkgs.coreutils}/echo "znc-${cfg.user} is set to be system-managed. Now deleting old znc.conf file to be regenerated."

     

       
255
       
255
       
+
       
          ${pkgs.coreutils}/rm -f ${cfg.dataDir}/configs/znc.conf

     

       
256
       
256
       
+
       
        ''}

     

       
257
       
257
       
+
       


     

       
258
       
258
       
+
       
        # Ensure essential files exist.

     

       
259
       
259
       
+
       
        if [[ ! -f ${cfg.dataDir}/configs/znc.conf ]]; then

     

       
260
       
260
       
+
       
          ${pkgs.coreutils}/bin/echo "No znc.conf file found in ${cfg.dataDir}. Creating one now."

     

       
261
       
261
       
+
       
          ${if (!cfg.mutable)

     

       
262
       
262
       
+
       
            then "${pkgs.coreutils}/bin/ln --force -s ${zncConfFile} ${cfg.dataDir}/configs/znc.conf"

     

       
263
       
263
       
+
       
            else ''

     

       
264
       
264
       
+
       
              ${pkgs.coreutils}/bin/cp --no-clobber ${zncConfFile} ${cfg.dataDir}/configs/znc.conf

     

       
265
       
265
       
+
       
              ${pkgs.coreutils}/bin/chmod u+rw ${cfg.dataDir}/configs/znc.conf

     

       
266
       
266
       
+
       
              ${pkgs.coreutils}/bin/chown ${cfg.user} ${cfg.dataDir}/configs/znc.conf

     

       
267
       
267
       
+
       
            ''}

     

       
268
       
268
       
+
       
        fi

     

       
269
       
269
       
+
       


     

       
270
       
270
       
+
       
        if [[ ! -f ${cfg.dataDir}/znc.pem ]]; then

     

       
271
       
271
       
+
       
          ${pkgs.coreutils}/bin/echo "No znc.pem file found in ${cfg.dataDir}. Creating one now."

     

       
272
       
272
       
+
       
          ${pkgs.znc}/bin/znc --makepem

     

       
273
       
273
       
+
       
        fi

     

       
274
       
274
       
+
       
      '';

     

       
275
       
275
       
+
       
      script = "${pkgs.znc}/bin/znc --foreground --datadir ${cfg.dataDir} ${cfg.extraFlags}";

     

       
276
       
276
       
+
       
    };

     

       
277
       
277
       
+
       


     

       
278
       
278
       
+
       
    users.extraUsers = optional (cfg.user == defaultUser)

     

       
279
       
279
       
+
       
      { name = defaultUser;

     

       
280
       
280
       
+
       
        description = "ZNC server daemon owner";

     

       
281
       
281
       
+
       
        group = defaultUser;

     

       
282
       
282
       
+
       
        uid = config.ids.uids.znc;

     

       
283
       
283
       
+
       
        createHome = true;

     

       
284
       
284
       
+
       
        createUser = true;

     

       
285
       
285
       
+
       
      };

     

       
286
       
286
       
+
       
 

     

       
287
       
287
       
+
       
    users.extraGroups = optional (cfg.user == defaultUser)

     

       
288
       
288
       
+
       
      { name = defaultUser;

     

       
289
       
289
       
+
       
        gid = config.ids.gids.znc;

     

       
290
       
290
       
+
       
        members = [ defaultUser ];

     

       
291
       
291
       
+
       
      };

     

       
292
       
292
       
+
       


     

       
293
       
293
       
+
       
  };

     

       
294
       
294
       
+
       
}

     

···

       
15
       
15
       
 
       
        MAILTO="${config.services.cron.mailto}"

     

       
16
       
16
       
 
       
      ''}

     

       
17
       
17
       
 
       
      NIX_CONF_DIR=/etc/nix

     

       
18
       
18
       
-
       
      ${pkgs.lib.concatStrings (map (job: job + "\n") config.services.cron.systemCronJobs)}

     

       
18
       
18
       
+
       
      ${lib.concatStrings (map (job: job + "\n") config.services.cron.systemCronJobs)}

     

       
19
       
19
       
 
       
    '';

     

       
20
       
20
       
 
       


     

       
21
       
21
       
 
       
  # Vixie cron requires build-time configuration for the sendmail path.

     

···

       
17
       
17
       
 
       
        MAILTO="${config.services.cron.mailto}"

     

       
18
       
18
       
 
       
      ''}

     

       
19
       
19
       
 
       
      NIX_CONF_DIR=/etc/nix

     

       
20
       
20
       
-
       
      ${pkgs.lib.concatStrings (map (job: job + "\n") config.services.cron.systemCronJobs)}

     

       
20
       
20
       
+
       
      ${lib.concatStrings (map (job: job + "\n") config.services.cron.systemCronJobs)}

     

       
21
       
21
       
 
       
    '';

     

       
22
       
22
       
 
       


     

       
23
       
23
       
 
       
  allowdeny = target: users:

     

···

       
1
       
1
       
-
       
{pkgs, config, ...}:

     

       
1
       
1
       
+
       
{lib, config, ...}:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
let kernel = config.boot.kernelPackages;

     

       
4
       
4
       
 
       
in

     
···

       
9
       
9
       
 
       


     

       
10
       
10
       
 
       
  options = {

     

       
11
       
11
       
 
       


     

       
12
       
12
       
-
       
    services.frandom.enable = pkgs.lib.mkOption {

     

       
12
       
12
       
+
       
    services.frandom.enable = lib.mkOption {

     

       
13
       
13
       
 
       
      default = false;

     

       
14
       
14
       
-
       
      type = pkgs.lib.types.bool;

     

       
14
       
14
       
+
       
      type = lib.types.bool;

     

       
15
       
15
       
 
       
      description = ''

     

       
16
       
16
       
 
       
        enable the /dev/frandom device (a very fast random number generator)

     

       
17
       
17
       
 
       
      '';

     
···

       
22
       
22
       
 
       


     

       
23
       
23
       
 
       
  ###### implementation

     

       
24
       
24
       
 
       


     

       
25
       
25
       
-
       
  config = pkgs.lib.mkIf config.services.frandom.enable {

     

       
25
       
25
       
+
       
  config = lib.mkIf config.services.frandom.enable {

     

       
26
       
26
       
 
       
    boot.kernelModules = [ "frandom" ];

     

       
27
       
27
       
 
       
    boot.extraModulePackages = [ kernel.frandom ];

     

       
28
       
28
       
 
       
    services.udev.packages = [ kernel.frandom ];

     

···

       
1
       
1
       
-
       
{pkgs, config, ...}:

     

       
1
       
1
       
+
       
{pkgs, config, lib, ...}:

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
let

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
  inherit (pkgs.lib) mkOption mkIf singleton;

     

       
5
       
5
       
+
       
  inherit (lib) mkOption mkIf singleton;

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
  inherit (pkgs) heimdal;

     

       
8
       
8
       
 
       


     
···

       
36
       
36
       
 
       
    environment.systemPackages = [ heimdal ];

     

       
37
       
37
       
 
       


     

       
38
       
38
       
 
       
    services.xinetd.enable = true;

     

       
39
       
39
       
-
       
    services.xinetd.services = pkgs.lib.singleton

     

       
39
       
39
       
+
       
    services.xinetd.services = lib.singleton

     

       
40
       
40
       
 
       
      { name = "kerberos-adm";

     

       
41
       
41
       
 
       
        flags = "REUSE NAMEINARGS";

     

       
42
       
42
       
 
       
        protocol = "tcp";