Commit Graph

12 Commits

Author SHA1 Message Date
Martin Weinelt
f0cd25ba33 nixos/netbox: harden systemd units
Limits what the netbox services can do down to a reasonable scope.
2026-07-07 17:43:39 +02:00
Martin Weinelt
b50a65023c nixos/netbox: add opt-in nginx support
This is part of making way for simpler onboarding, because it stops
requiring users to guess where to point the static directory to.
2026-07-07 17:43:39 +02:00
Martin Weinelt
4d576c4839 nixos/tests/netbox: use wait_for_file helper 2026-07-07 17:43:38 +02:00
Martin Weinelt
37220b42c4 nixos/netbox: refactor settings and make config introspectable
Configuring a module from withing config is bad style. This makes what
gets configured not introspectable. Worse, it requires special care to
handle priorities correctly, so things will correctly overwrite or merge.

The `GIT_PATH` setting was removed, when Netbox migrated Git operations
to dulwhich. b9cac97b73

Furthermore, this reduces LDAP to just a single option, because once an
LDAP configuration is set, we can already make assumptions.
2026-07-07 17:43:37 +02:00
Martin Weinelt
43bccced47 nixos/tests/netbox*: use unittest asserts
These provide much richer detail, when assertions fail.
2026-07-07 17:43:37 +02:00
Martin Weinelt
c36fc51c38 nixos/tests/netbox: run in nspawn
Faster and cheaper.
2026-07-07 17:43:37 +02:00
Martin Weinelt
5c355dedbf nixos/netbox: merge bind options into one
They are all passed to gunicorn's --bind flag, so let the user pass
whatever they want.
2026-07-07 16:58:06 +02:00
Martin Weinelt
46c6aaeac7 nixos/netbox: improve secret management
With this change secrets will be automatically generated if left at their
individual option defaults.

We now also allow configuration of multiple peppers, to allow proper
rotation as intended by upstream.

Finally, we now we prevent secrets from leaking into the store.
2026-07-07 16:58:05 +02:00
transcaffeine
0b17b78d01 netbox_4_5: init at 4.5.5
Release notes:
- https://github.com/netbox-community/netbox/releases/tag/v4.5.0
- https://github.com/netbox-community/netbox/releases/tag/v4.5.1
- https://github.com/netbox-community/netbox/releases/tag/v4.5.2
- https://github.com/netbox-community/netbox/releases/tag/v4.5.3
- https://github.com/netbox-community/netbox/releases/tag/v4.5.4
- https://github.com/netbox-community/netbox/releases/tag/v4.5.5

Full changelog: https://github.com/netbox-community/netbox/compare/v4.4.9...v4.5.5
2026-03-18 18:03:30 +01:00
Justin !
127761a032 treewide: fix broken-string-escape
Lix is going to warn, and in the future, error on broken string escape.
After a flaker run, the following escape were flagged as broken, so this
commit fix them to make sure Lix is still able to build nixpkgs once the
patch deprecating the broken escapes land.
2025-12-28 13:10:31 -05:00
transcaffeine
5518f1e35f netbox_4_4: init at 4.4.2
Release notes: https://github.com/netbox-community/netbox/releases/tag/v4.4.2
Full changelog: https://github.com/netbox-community/netbox/compare/v4.3.7...v4.4.2
2025-10-09 22:32:50 +02:00
transcaffeine
42c621ba72 nixos/tests/netbox: Adjust tests for 4.2.0+, drop test for 3.6
This changes the previously used `site_id` in the tests'
REST-API usage to `scope_type`+`scope_id`.

Netbox 3.6 is deprecated and no longer available, the test for it
has been removed.
2025-04-01 17:02:20 +02:00