···668 to use wildcards in the <literal>source</literal> argument.
669 </para>
670 </listitem>
00000671 <listitem>
672 <para>
673 The <literal>openrazer</literal> and
···701 configures the address and port the web UI is listening, it
702 defaults to <literal>:9001</literal>. To be able to access the
703 web UI this port needs to be opened in the firewall.
0000000704 </para>
705 </listitem>
706 </itemizedlist>
···668 to use wildcards in the <literal>source</literal> argument.
669 </para>
670 </listitem>
671+ </itemizedlist>
672+ <para>
673+ <<<<<<< HEAD
674+ </para>
675+ <itemizedlist>
676 <listitem>
677 <para>
678 The <literal>openrazer</literal> and
···706 configures the address and port the web UI is listening, it
707 defaults to <literal>:9001</literal>. To be able to access the
708 web UI this port needs to be opened in the firewall.
709+ </para>
710+ </listitem>
711+ <listitem>
712+ <para>
713+ The <literal>varnish</literal> package was upgraded from 6.3.x
714+ to 6.5.x. <literal>varnish60</literal> for the last LTS
715+ release is also still available.
716 </para>
717 </listitem>
718 </itemizedlist>
+3
nixos/doc/manual/release-notes/rl-2111.section.md
···171172- `programs.neovim.runtime` switched to a `linkFarm` internally, making it impossible to use wildcards in the `source` argument.
1730174- The `openrazer` and `openrazer-daemon` packages as well as the `hardware.openrazer` module now require users to be members of the `openrazer` group instead of `plugdev`. With this change, users no longer need be granted the entire set of `plugdev` group permissions, which can include permissions other than those required by `openrazer`. This is desirable from a security point of view. The setting [`harware.openrazer.users`](options.html#opt-services.hardware.openrazer.users) can be used to add users to the `openrazer` group.
175176- The `yambar` package has been split into `yambar` and `yambar-wayland`, corresponding to the xorg and wayland backend respectively. Please switch to `yambar-wayland` if you are on wayland.
···178- The `services.minio` module gained an additional option `consoleAddress`, that
179configures the address and port the web UI is listening, it defaults to `:9001`.
180To be able to access the web UI this port needs to be opened in the firewall.
00181182## Other Notable Changes {#sec-release-21.11-notable-changes}
183
···171172- `programs.neovim.runtime` switched to a `linkFarm` internally, making it impossible to use wildcards in the `source` argument.
173174+<<<<<<< HEAD
175- The `openrazer` and `openrazer-daemon` packages as well as the `hardware.openrazer` module now require users to be members of the `openrazer` group instead of `plugdev`. With this change, users no longer need be granted the entire set of `plugdev` group permissions, which can include permissions other than those required by `openrazer`. This is desirable from a security point of view. The setting [`harware.openrazer.users`](options.html#opt-services.hardware.openrazer.users) can be used to add users to the `openrazer` group.
176177- The `yambar` package has been split into `yambar` and `yambar-wayland`, corresponding to the xorg and wayland backend respectively. Please switch to `yambar-wayland` if you are on wayland.
···179- The `services.minio` module gained an additional option `consoleAddress`, that
180configures the address and port the web UI is listening, it defaults to `:9001`.
181To be able to access the web UI this port needs to be opened in the firewall.
182+183+- The `varnish` package was upgraded from 6.3.x to 6.5.x. `varnish60` for the last LTS release is also still available.
184185## Other Notable Changes {#sec-release-21.11-notable-changes}
186
···43 IPv6 addresses must be enclosed in square brackets.
44 Note: this option overrides <literal>addSSL</literal>
45 and <literal>onlySSL</literal>.
00046 '';
0000000000000047 };
4849 enableACME = mkOption {
···43 IPv6 addresses must be enclosed in square brackets.
44 Note: this option overrides <literal>addSSL</literal>
45 and <literal>onlySSL</literal>.
46+47+ If you only want to set the addresses manually and not
48+ the ports, take a look at <literal>listenAddresses</literal>
49 '';
50+ };
51+52+ listenAddresses = mkOption {
53+ type = with types; listOf str;
54+55+ description = ''
56+ Listen addresses for this virtual host.
57+ Compared to <literal>listen</literal> this only sets the addreses
58+ and the ports are choosen automatically.
59+60+ Note: This option overrides <literal>enableIPv6</literal>
61+ '';
62+ default = [];
63+ example = [ "127.0.0.1" "::1" ];
64 };
6566 enableACME = mkOption {
···164 systemd.packages = with pkgs.gnome; [ gdm gnome-session gnome-shell ];
165 environment.systemPackages = [ pkgs.gnome.adwaita-icon-theme ];
166167+ # We dont use the upstream gdm service
168+ # it has to be disabled since the gdm package has it
169+ # https://github.com/NixOS/nixpkgs/issues/108672
170+ systemd.services.gdm.enable = false;
171+172 systemd.services.display-manager.wants = [
173 # Because sd_login_monitor_new requires /run/systemd/machines
174 "systemd-machined.service"
···78 'su - test7 -c "SSH_AUTH_SOCK=HOLEY doas env"'
79 ):
80 raise Exception("failed to exclude SSH_AUTH_SOCK")
81+82+ # Test that the doas setuid wrapper precedes the unwrapped version in PATH after
83+ # calling doas.
84+ # The PATH set by doas is defined in
85+ # ../../pkgs/tools/security/doas/0001-add-NixOS-specific-dirs-to-safe-PATH.patch
86+ with subtest("recursive calls to doas from subprocesses should succeed"):
87+ machine.succeed('doas -u test0 sh -c "doas -u test0 true"')
88 '';
89 }
90)
···28 else "");
29in stdenv.mkDerivation rec {
30 pname = "signal-desktop";
31- version = "5.12.2"; # Please backport all updates to the stable channel.
32 # All releases have a limited lifetime and "expire" 90 days after the release.
33 # When releases "expire" the application becomes unusable until an update is
34 # applied. The expiration date for the current release can be extracted with:
···3839 src = fetchurl {
40 url = "https://updates.signal.org/desktop/apt/pool/main/s/signal-desktop/signal-desktop_${version}_amd64.deb";
41- sha256 = "0z8nphlm3q9gqri6bqh1iaayx5yy0bhrmjb7l7facdkm1aahmaa7";
42 };
4344 nativeBuildInputs = [
···28 else "");
29in stdenv.mkDerivation rec {
30 pname = "signal-desktop";
31+ version = "5.13.0"; # Please backport all updates to the stable channel.
32 # All releases have a limited lifetime and "expire" 90 days after the release.
33 # When releases "expire" the application becomes unusable until an update is
34 # applied. The expiration date for the current release can be extracted with:
···3839 src = fetchurl {
40 url = "https://updates.signal.org/desktop/apt/pool/main/s/signal-desktop/signal-desktop_${version}_amd64.deb";
41+ sha256 = "10qlavff7q1bdda60q0cia0fzi9y7ysaavrd4y8v0nzbmcz70abr";
42 };
4344 nativeBuildInputs = [
···1+{ lib, wrapFirefox, gpgme, gnupg }:
2+3+browser:
4+args:
5+6+(wrapFirefox browser ({
7+ libName = "thunderbird";
8+} // args))
9+10+.overrideAttrs (old: {
11+ # Thunderbird's native GPG support does not yet support smartcards.
12+ # The official upstream recommendation is to configure fall back to gnupg
13+ # using the Thunderbird config `mail.openpgp.allow_external_gnupg`
14+ # and GPG keys set up; instructions with pictures at:
15+ # https://anweshadas.in/how-to-use-yubikey-or-any-gpg-smartcard-in-thunderbird-78/
16+ # For that to work out of the box, it requires `gnupg` on PATH and
17+ # `gpgme` in `LD_LIBRARY_PATH`; we do this below.
18+ buildCommand = old.buildCommand + ''
19+ wrapProgram $out/bin/thunderbird \
20+ --prefix LD_LIBRARY_PATH ':' "${lib.makeLibraryPath [ gpgme ]}" \
21+ --prefix PATH ':' "${lib.makeBinPath [ gnupg ]}"
22+ '';
23+})
···5 # they fix more, because it even has at least one bugs less than 2.7.4.
6 # 2.8.0 does not start properly on linux
7 # They just starting making that 2.8.0 work on linux.
8- name = "egoboo-2.7.3";
0910 src = fetchurl {
11- url = "mirror://sourceforge/egoboo/${name}.tar.gz";
12 sha256 = "18cjgp9kakrsa90jcb4cl8hhh9k57mi5d1sy5ijjpd3p7zl647hd";
13 };
14···22 # The user will need to have all the files in '.' to run egoboo, with
23 # writeable controls.txt and setup.txt
24 installPhase = ''
25- mkdir -p $out/share/${name}
26- cp -v game/egoboo $out/share/${name}
27 cd ..
28- cp -v -Rd controls.txt setup.txt players modules basicdat $out/share/${name}
29 '';
3031 buildInputs = [ libGLU libGL SDL SDL_mixer SDL_image SDL_ttf ];
···5 # they fix more, because it even has at least one bugs less than 2.7.4.
6 # 2.8.0 does not start properly on linux
7 # They just starting making that 2.8.0 work on linux.
8+ pname = "egoboo";
9+ version = "2.7.3";
1011 src = fetchurl {
12+ url = "mirror://sourceforge/egoboo/egoboo-${version}.tar.gz";
13 sha256 = "18cjgp9kakrsa90jcb4cl8hhh9k57mi5d1sy5ijjpd3p7zl647hd";
14 };
15···23 # The user will need to have all the files in '.' to run egoboo, with
24 # writeable controls.txt and setup.txt
25 installPhase = ''
26+ mkdir -p $out/share/egoboo-${version}
27+ cp -v game/egoboo $out/share/egoboo-${version}
28 cd ..
29+ cp -v -Rd controls.txt setup.txt players modules basicdat $out/share/egoboo-${version}
30 '';
3132 buildInputs = [ libGLU libGL SDL SDL_mixer SDL_image SDL_ttf ];
+2-1
pkgs/games/onscripter-en/default.nix
···456stdenv.mkDerivation {
7- name = "onscripter-en-20110930";
089 src = fetchurl {
10 # The website is not available now.
···456stdenv.mkDerivation {
7+ pname = "onscripter-en";
8+ version = "20110930";
910 src = fetchurl {
11 # The website is not available now.
···1{ lib, stdenv, fetchurl }:
23stdenv.mkDerivation rec {
4- name = "t1utils-1.42";
056 src = fetchurl {
7- url = "https://www.lcdf.org/type/${name}.tar.gz";
8 sha256 = "sha256-YYd5NbGYcETd/0u5CgUgDKcWRnijVeFwv18aVVbMnyk=";
9 };
10···18 resources from a Macintosh font file or create a Macintosh Type 1 font
19 file from a PFA or PFB font.
20 '';
21- homepage = "http://www.lcdf.org/type/";
22 # README from tarball says "BSD-like" and points to non-existing LICENSE
23 # file...
24 license = "Click"; # MIT with extra clause, https://github.com/kohler/t1utils/blob/master/LICENSE
···1{ lib, stdenv, fetchurl }:
23stdenv.mkDerivation rec {
4+ pname = "t1utils";
5+ version = "1.42";
67 src = fetchurl {
8+ url = "https://www.lcdf.org/type/t1utils-${version}.tar.gz";
9 sha256 = "sha256-YYd5NbGYcETd/0u5CgUgDKcWRnijVeFwv18aVVbMnyk=";
10 };
11···19 resources from a Macintosh font file or create a Macintosh Type 1 font
20 file from a PFA or PFB font.
21 '';
22+ homepage = "https://www.lcdf.org/type/";
23 # README from tarball says "BSD-like" and points to non-existing LICENSE
24 # file...
25 license = "Click"; # MIT with extra clause, https://github.com/kohler/t1utils/blob/master/LICENSE
···894 v8_3_16_14 = throw "v8_3_16_14 was removed in 2019-11-01: no longer referenced by other packages";
895 valadoc = throw "valadoc was deprecated on 2019-10-10: valadoc was merged into vala 0.38";
896 vamp = { vampSDK = vamp-plugin-sdk; }; # added 2020-03-26
00897 venus = throw "venus has been removed from nixpkgs, as it's unmaintained"; # added 2021-02-05
898 vdirsyncerStable = vdirsyncer; # added 2020-11-08, see https://github.com/NixOS/nixpkgs/issues/103026#issuecomment-723428168
899 vimbWrapper = vimb; # added 2015-01
···894 v8_3_16_14 = throw "v8_3_16_14 was removed in 2019-11-01: no longer referenced by other packages";
895 valadoc = throw "valadoc was deprecated on 2019-10-10: valadoc was merged into vala 0.38";
896 vamp = { vampSDK = vamp-plugin-sdk; }; # added 2020-03-26
897+ varnish62 = throw "varnish62 was removed from nixpkgs, because it is unmaintained upstream. Please switch to a different release."; # 2021-07-26
898+ varnish63 = throw "varnish63 was removed from nixpkgs, because it is unmaintained upstream. Please switch to a different release."; # 2021-07-26
899 venus = throw "venus has been removed from nixpkgs, as it's unmaintained"; # added 2021-02-05
900 vdirsyncerStable = vdirsyncer; # added 2020-11-08, see https://github.com/NixOS/nixpkgs/issues/103026#issuecomment-723428168
901 vimbWrapper = vimb; # added 2015-01