···695695 The previous native backends remain available but are now minimally maintained. Refer to [upstream documentation](https://doc.qt.io/qt-6/qtmultimedia-index.html#ffmpeg-as-the-default-backend) for further details about each platform.
696696697697- `services.btrbk` now automatically selects and provides required compression
698698- program depending on the configured `stream_compress` option. Since this
699699- replaces the need for the `extraPackages` option, this option will be
700700- deprecated in future releases.
698698+ program depending on the configured `stream_compress` option.
701699702700- `services.github-runner` module has been removed. To configure a single GitHub Actions Runner refer to `services.github-runners.*`. Note that this will trigger a new runner registration.
703701
+2
nixos/doc/manual/release-notes/rl-2411.section.md
···30303131- [Envision](https://gitlab.com/gabmus/envision), a UI for building, configuring and running Monado, the open source OpenXR runtime. Available as [programs.envision](#opt-programs.envision.enable).
32323333+- [Localsend](https://localsend.org/), an open source cross-platform alternative to AirDrop. Available as [programs.localsend](#opt-programs.localsend.enable).
3434+3335- [realm](https://github.com/zhboner/realm), a simple, high performance relay server written in rust. Available as [services.realm.enable](#opt-services.realm.enable).
34363537- [Playerctld](https://github.com/altdesktop/playerctl), a daemon to track media player activity. Available as [services.playerctld](option.html#opt-services.playerctld).
···3939 qtmir # not having its desktop file for Xwayland available causes any X11 application to crash the session
4040 suru-icon-theme
4141 telephony-service
4242+ teleports
4243 ]);
4344 variables = {
4445 # To override the keyboard layouts in Lomiri
···8181 Only log messages with the given severity or above.
8282 '';
8383 };
8484+8585+ environmentFile = mkOption {
8686+ type = types.nullOr types.path;
8787+ default = null;
8888+ example = "/root/prometheus-snmp-exporter.env";
8989+ description = ''
9090+ EnvironmentFile as defined in {manpage}`systemd.exec(5)`.
9191+9292+ Secrets may be passed to the service without adding them to the
9393+ world-readable Nix store, by specifying placeholder variables as
9494+ the option value in Nix and setting these variables accordingly in the
9595+ environment file.
9696+9797+ Environment variables from this file will be interpolated into the
9898+ config file using envsubst with this syntax:
9999+ `$ENVIRONMENT ''${VARIABLE}`
100100+101101+ For variables to use see [Prometheus Configuration](https://github.com/prometheus/snmp_exporter#prometheus-configuration).
102102+103103+ If the file path is set to this option, the parameter
104104+ `--config.expand-environment-variables` is implicitly added to
105105+ `ExecStart`.
106106+107107+ Note that this file needs to be available on the host on which
108108+ this exporter is running.
109109+ '';
110110+ };
84111 };
85112 serviceOpts = let
86113 uncheckedConfigFile = if cfg.configurationPath != null
···92119 uncheckedConfigFile;
93120 in {
94121 serviceConfig = {
122122+ EnvironmentFile = lib.mkIf (cfg.environmentFile != null) [ cfg.environmentFile ];
95123 ExecStart = ''
96124 ${pkgs.prometheus-snmp-exporter}/bin/snmp_exporter \
97125 --config.file=${escapeShellArg configFile} \
126126+ ${lib.optionalString (cfg.environmentFile != null)
127127+ "--config.expand-environment-variables"} \
98128 --log.format=${escapeShellArg cfg.logFormat} \
99129 --log.level=${cfg.logLevel} \
100130 --web.listen-address=${cfg.listenAddress}:${toString cfg.port} \
+5-15
nixos/modules/services/networking/spiped.nix
···6262 keyfile = mkOption {
6363 type = types.path;
6464 description = ''
6565- Name of a file containing the spiped key. As the
6666- daemon runs as the `spiped` user, the
6767- key file must be somewhere owned by that user. By
6868- default, we recommend putting the keys for any spipe
6969- services in `/var/lib/spiped`.
6565+ Name of a file containing the spiped key.
6666+ As the daemon runs as the `spiped` user,
6767+ the key file must be readable by that user.
6868+ To securely manage the file within your configuration
6969+ consider a tool such as agenix or sops-nix.
7070 '';
7171 };
7272···185185 serviceConfig = {
186186 Restart = "always";
187187 User = "spiped";
188188- PermissionsStartOnly = true;
189188 };
190189191191- preStart = ''
192192- cd /var/lib/spiped
193193- chmod -R 0660 *
194194- chown -R spiped:spiped *
195195- '';
196190 scriptArgs = "%i";
197191 script = "exec ${pkgs.spiped}/bin/spiped -F `cat /etc/spiped/$1.spec`";
198192 };
199199-200200- systemd.tmpfiles.rules = lib.mkIf (cfg.config != { }) [
201201- "d /var/lib/spiped -"
202202- ];
203193204194 # Setup spiped config files
205195 environment.etc = mapAttrs' (name: cfg: nameValuePair "spiped/${name}.spec"
···88 owner = "aquasecurity";
99 repo = pname;
1010 rev = "v${version}";
1111- sha256 = "sha256-oOz7Dt+j2EmBL/aJUjqRST90wYpXkyREnKCcmNBQX18=";
1111+ hash = "sha256-oOz7Dt+j2EmBL/aJUjqRST90wYpXkyREnKCcmNBQX18=";
1212 # populate values that require us to use git. By doing this in postFetch we
1313 # can delete .git afterwards and maintain better reproducibility of the src.
1414 leaveDotGit = true;
···3131 # if a release is tagged (which sometimes does not happen), it will
3232 # be in the format below.
3333 rev = "Release-${lib.replaceStrings ["."] ["-"] version}";
3434- sha256 = "sha256-5JZgI5lnfX4JlBSEAL7Wv6uao/57GBaMqwgslJt9Bjk=";
3434+ hash = "sha256-5JZgI5lnfX4JlBSEAL7Wv6uao/57GBaMqwgslJt9Bjk=";
35353636 # the repository's .gitattributes file contains the lines "/Tst/
3737 # export-ignore" and "/doc/ export-ignore" so some directories are
···5050 owner = "nesbox";
5151 repo = "TIC-80";
5252 rev = "v" + version;
5353- sha256 = "sha256-p7OyuD/4KxAzylQDlXW681TvEZwKYDD4zq2KDRkcv48=";
5353+ hash = "sha256-p7OyuD/4KxAzylQDlXW681TvEZwKYDD4zq2KDRkcv48=";
5454 # TIC-80 vendors its dependencies as submodules, so to use its current build system,
5555 # we need to fetch them. Managing the dependencies ourselves would require a lot of
5656 # changes in the build system, which doesn't seem worth it right now. In future versions,
···88 owner = "mgechev";
99 repo = pname;
1010 rev = "v${version}";
1111- sha256 = "sha256-Z5areIRlCyjUbusAdfL49mm5+J0UryWrS5/9Ttw16Po=";
1111+ hash = "sha256-Z5areIRlCyjUbusAdfL49mm5+J0UryWrS5/9Ttw16Po=";
1212 # populate values that require us to use git. By doing this in postFetch we
1313 # can delete .git afterwards and maintain better reproducibility of the src.
1414 leaveDotGit = true;
+1-1
pkgs/development/tools/rtags/default.nix
···1212 owner = "andersbakken";
1313 repo = "rtags";
1414 rev = "v${version}";
1515- sha256 = "sha256-EJ5pC53S36Uu7lM6KuLvLN6MAyrQW/Yk5kPqZNS5m8c=";
1515+ hash = "sha256-EJ5pC53S36Uu7lM6KuLvLN6MAyrQW/Yk5kPqZNS5m8c=";
1616 fetchSubmodules = true;
1717 # unicode file names lead to different checksums on HFS+ vs. other
1818 # filesystems because of unicode normalisation
···99 owner = "annaaurora";
1010 repo = "kabeljau";
1111 rev = "v${version}";
1212- sha256 = "sha256-RedVItgfr6vgqXHA3bOiHXDpfGuHI+sX4jCHL9G5jYk=";
1212+ hash = "sha256-RedVItgfr6vgqXHA3bOiHXDpfGuHI+sX4jCHL9G5jYk=";
1313 };
14141515 # Inkscape is needed in a just recipe where it is used to export the SVG icon to several different sized PNGs.
···4040 src = fetchgit {
4141 url = "git://git.ao2.it/kinect-audio-setup.git";
4242 rev = "v${version}";
4343- sha256 = "sha256-bFwmWh822KvFwP/0Gu097nF5K2uCwCLMB1RtP7k+Zt0=";
4343+ hash = "sha256-bFwmWh822KvFwP/0Gu097nF5K2uCwCLMB1RtP7k+Zt0=";
4444 };
45454646 # These patches are not upstream because the project has seen no
···3939 homepage = "https://github.com/timescale/timescaledb-toolkit";
4040 maintainers = with maintainers; [ typetetris ];
4141 platforms = postgresql.meta.platforms;
4242- license = licenses.asl20;
4242+ license = licenses.tsl;
43434444 # as it needs to be used with timescaledb, simply use the condition from there
4545 broken = stdenv.isDarwin;
···1212 owner = "kubernetes-sigs";
1313 repo = pname;
1414 rev = "v${version}";
1515- sha256 = "sha256-nYzBaFtOJhqO0O6MJsxTw/mxsIOa+cnU27nOFRe2/uI=";
1515+ hash = "sha256-nYzBaFtOJhqO0O6MJsxTw/mxsIOa+cnU27nOFRe2/uI=";
1616 # populate values that require us to use git. By doing this in postFetch we
1717 # can delete .git afterwards and maintain better reproducibility of the src.
1818 leaveDotGit = true;
···88 owner = "sigstore";
99 repo = pname;
1010 rev = "v${version}";
1111- sha256 = "sha256-QBkb0pwNrzPCA7G+bmAjbBXQDooDDvJZuDMAlD2Gv44=";
1111+ hash = "sha256-QBkb0pwNrzPCA7G+bmAjbBXQDooDDvJZuDMAlD2Gv44=";
1212 # populate values that require us to use git. By doing this in postFetch we
1313 # can delete .git afterwards and maintain better reproducibility of the src.
1414 leaveDotGit = true;
···1313 owner = "quarkslab";
1414 repo = pname;
1515 rev = "v${version}";
1616- sha256 = "sha256-hpLhtTENtOBQjm+CZRAcx1BG9831JUFIsLL57wZIrso=";
1616+ hash = "sha256-hpLhtTENtOBQjm+CZRAcx1BG9831JUFIsLL57wZIrso=";
1717 # populate values that require us to use git. By doing this in postFetch we
1818 # can delete .git afterwards and maintain better reproducibility of the src.
1919 leaveDotGit = true;
···1212 owner = "chainguard-dev";
1313 repo = "vex";
1414 rev = "v${version}";
1515- sha256 = "sha256-f5UVX6x4DwjlcgMAv0GuKBH9UUzFhQ8pW8l+9pc7RQ4=";
1515+ hash = "sha256-f5UVX6x4DwjlcgMAv0GuKBH9UUzFhQ8pW8l+9pc7RQ4=";
1616 # populate values that require us to use git. By doing this in postFetch we
1717 # can delete .git afterwards and maintain better reproducibility of the src.
1818 leaveDotGit = true;
···9494 aether = throw "aether has been removed from nixpkgs; upstream unmaintained, security issues"; # Added 2023-10-03
9595 afl = throw "afl has been removed as the upstream project was archived. Consider using 'aflplusplus'"; # Added 2024-04-21
9696 agda-pkg = throw "agda-pkg has been removed due to being unmaintained"; # Added 2024-09-10"
9797+ agebox = throw "agebox has been removed due to lack of upstream maintenance"; # Added 2024-07-13
9798 airfield = throw "airfield has been removed due to being unmaintained"; # Added 2023-05-19
9899 alertmanager-bot = throw "alertmanager-bot is broken and has been archived by upstream"; # Added 2023-07-28
99100 alsa-project = throw "alsa-project was removed and its sub-attributes were promoted to top-level."; # Added 2023-11-12
···12111212 redocly-cli = redocly; # Added 2024-04-14
12121213 redpanda = redpanda-client; # Added 2023-10-14
12131214 redpanda-server = throw "'redpanda-server' has been removed because it was broken for a long time"; # Added 2024-06-10
12151215+ restinio_0_6 = throw "restinio_0_6 has been removed from nixpkgs as it's not needed by downstream packages"; # Added 2024-07-04
12141216 restya-board = throw "'restya-board' has been removed from nixpkgs, as it was broken and unmaintained"; # Added 2024-01-22
12151217 retdec-full = throw "'retdec-full' is no longer needed, please use 'retdec'"; # Added 2024-02-05
12161218 retroshare06 = retroshare;