Florian Klink
0bfc763df2
nixos/modemmanager: enableFccUnlock -> enableBundledFccUnlockScripts
...
PR #155414 introduced an option to support enabling the FCC unlock
scripts that ModemManager provides, but since 1.18.4 doesn't execute
anymore.
However, this option is specifically only about the unlock scripts
provided with ModemManager so far. Rename the option to make this more
obvious.
2023-09-12 16:55:15 +02:00
Florian Klink
5626174a09
nixos/networkmanager: nixpkgs-fmt
2023-09-12 16:55:15 +02:00
Maximilian Bosch
863598fdfc
Merge pull request #253427 from Yarny0/sshd-requiredrsasize
...
nixos/sshd: don't validate mock host key, permit `RequiredRSASize`
2023-09-11 17:40:23 +02:00
Yorick
df123af8b8
Merge pull request #248502 from kurnevsky/wstunnel
...
wstunnel: correct listen option
2023-09-09 18:45:45 +02:00
Weijia Wang
cfb61436d7
Merge pull request #252978 from oluceps/dae-upup
...
dae,nixos/dae: 0.2.4 -> 0.3.0
2023-09-05 23:57:14 +02:00
Yarny0
bbefd70784
nixos/sshd: avoid mock host key, permit RequiredRSASize
...
With this commit, the validation of `sshd_config`
is performed with `sshd -G` instead of `sshd -t`.
The former does not require a valid host key.
Checking the host key was never useful for us:
We just generated a dummy host key to
make the validation mechanism happy.
With this change the dummy key is no longer needed.
This change not only saves some CPU cycles
(avoid the generation of an RSA key),
but it also permits to set `RequiredRSASize` to a value
larger than the current rsa key default size (3072).
2023-09-05 11:34:09 +02:00
Maciej Krüger
ca6ed1cc8d
Merge pull request #241680 from 4z3/networking.nftables.checkRulesetRedirects
2023-09-04 22:07:50 +02:00
rnhmjoj
355a9fa040
nixos/jool: allow to manage multiple instances
2023-09-04 18:38:25 +02:00
oluceps
ec0755d5f7
nixos/dae: add example link
...
Co-authored-by: Mathias Zhang <me@zzzsy.top>
2023-09-03 11:54:36 +08:00
zzzsyyy
8f070876da
nixos/dae: add confgFile option
...
Co-authored-by: oluceps <nixos@oluceps.uk>
2023-09-03 02:48:27 +08:00
oluceps
173ff5d2dd
nixos/dae: add more config options
2023-09-03 02:48:24 +08:00
Atemu
c54f4fdf8c
Merge pull request #248669 from Atemu/dnscrypt-proxy-update-alias
...
dnscrypt-proxy: rename from dnscrypt-proxy2
2023-09-01 14:37:13 +02:00
name_snrl
9345e48bb4
privoxy: fix types.string -> types.str
2023-08-30 23:08:13 +05:00
Emery Hemingway
55c8f51af5
nixos/nncp: add caller and daemon services
2023-08-29 21:31:19 +01:00
Maciej Krüger
369e18f1c7
networking/nftables: ensure deletions
2023-08-28 00:44:16 +02:00
Maciej Krüger
6658b3fcf1
networking/nftables: make ruleset+rulesetFile non-exclusive
2023-08-28 00:40:22 +02:00
Maciej Krüger
a1dd69d761
networking/nftables: enable flushRuleset by default if rulset{,File} used
2023-08-28 00:40:21 +02:00
Maciej Krüger
55213b54f0
nixos/nftables: save deletions to file and run them afterwards
...
Co-authored-by: duament
2023-08-28 00:40:20 +02:00
Maciej Krüger
5f300ad70c
networking/nftables: only delete our tables if flushRuleset is set to false
2023-08-28 00:40:19 +02:00
Maciej Krüger
d5a0826686
networking/nftables: remove no longer relevant conflict warnings
2023-08-28 00:40:18 +02:00
Maciej Krüger
cd3af25932
networking/nftables: enable flushing ruleset for older versions
...
Co-authored-by: Naïm Favier <n@monade.li>
2023-08-28 00:35:39 +02:00
Maciej Krüger
311d2fa994
*: migrate to using nftables.tables instead of ruleset directly
2023-08-28 00:30:29 +02:00
Maciej Krüger
048ef0d455
networking/nftables: add .tables property and disable ruleset flushing by default
...
This allows for other unmanaged tables to co-exist peacefully on the os,
by having the nixos-managed tables be re-created atomically and the other
tables will simply be left untouched.
2023-08-28 00:30:28 +02:00
Ilan Joselevich
49f76fea56
Merge pull request #251032 from Kranzes/twingate-resolved
...
nixos/twingate: avoid conflicts with resolved
2023-08-24 01:39:27 +03:00
Ilan Joselevich
e739ef8066
nixos/twingate: avoid conflicts with resolved
2023-08-23 23:01:47 +03:00
Muhammad Falak R Wani
3f141be99c
tailscale: add mfrw as maintainer
...
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-08-23 08:32:33 +05:30
Martin Weinelt
7c75694db9
Merge pull request #240982 from rnhmjoj/pr-jool
...
nixos/jool: add service for setting up SIIT/NAT64
2023-08-19 23:32:05 +02:00
K900
200eeb9ebe
Merge pull request #249101 from motiejus/headscale-oidc
...
headscale.oidc: client_secret_path is a string
2023-08-16 17:23:56 +03:00
Pol Dellaiera
11f3cbc0c3
Merge pull request #246181 from jvanbruegge/haproxy-package
...
nixos/haproxy: allow to specify haproxy package
2023-08-15 19:46:13 +02:00
Jan van Brügge
90da2c1223
nixos/haproxy: allow to specify haproxy package
2023-08-15 12:24:55 +01:00
Motiejus Jakštys
28cf78b857
headscale.oidc: client_secret_path is a string
...
It can be include an environment-variable, like
`${CREDENTIALS_DIRECTORY}/some-path`, failing validation for
`types.path`.
2023-08-14 13:03:06 +03:00
Atemu
7706f570a7
dnscrypt-proxy: rename from dnscrypt-proxy2
...
An alias is added for dnscrypt-proxy2
2023-08-13 16:03:31 +02:00
Nick Cao
722e1e2313
Merge pull request #247899 from DavHau/zerotier-docs
...
nixos/zerotierone: document networks never left automatically
2023-08-13 00:00:35 -06:00
oddlama
bbac87a2dd
nixos/hostapd: add missing stringification of path in INI format
2023-08-11 22:44:08 +02:00
Evgeny Kurnevsky
5110d348b2
wstunnel: correct listen option
2023-08-11 11:58:40 +03:00
CnTeng
24f2116a7a
nixos/dae: use network-online
2023-08-10 20:23:46 +08:00
Franz Pletz
c13c1412bf
nixos/chrony: add enableMemoryLocking option
...
Fixes #222629 .
2023-08-10 03:03:53 +02:00
DavHau
74c574a8db
nixos/zerotierone: document networks never left automatically
...
Removing a network from the joinNetworks list does not make the machine leave the network which is confusing.
This behavior is now clarified via the options description
2023-08-08 11:31:33 +02:00
Michele Guerini Rocco
ccc33bd3d7
Merge pull request #245852 from rnhmjoj/pr-fix-dnscrypt
...
dnscrypt-wrapper fixes
2023-08-08 10:34:27 +02:00
pokon548
dcf5ae3d0b
nixos/dae: init
2023-08-07 14:32:32 +08:00
Emery Hemingway
b6c5112152
nixos/ntopng: seperate interface config with newlines
2023-08-05 10:02:48 +01:00
ajs124
bf4d2e6c1e
Merge pull request #242538 from tnias/fix/apparmor
...
apparmor: add some policies and improve abstractions and utils
2023-08-04 13:05:52 +02:00
Martin Weinelt
667c4f2dc6
Merge pull request #224635 from helsinki-systems/drop/dhcpd
...
dhcpd: remove
2023-08-03 15:12:06 +02:00
Yureka
31d4a4af19
nixos/bird: fix checkConfig with cross-compilation
2023-07-31 13:48:55 +02:00
Pol Dellaiera
80d8a945dd
Merge pull request #245570 from jwygoda/tailscaled-autoconnect-options
...
nixos/tailscale: add extraUpFlags option
2023-07-29 06:12:26 +02:00
Jarosław Wygoda
2dbda3314f
nixos/tailscale: add extraUpFlags option
2023-07-28 22:44:37 +02:00
Ryan Lahfa
2a0aaa7e8f
Merge pull request #245413 from oddlama/fix-hostapd-mac-allow
2023-07-28 19:19:02 +02:00
ajs124
413d9d3864
nixos/dhcp(46): remove
...
package reached its EOL on 2022-10-04
see https://www.isc.org/blogs/isc-dhcp-eol/ for details
2023-07-28 16:35:40 +02:00
pennae
e2a43fbfb3
Merge pull request #244356 from datafoo/mosquitto-systemd-credentials
...
nixos/mosquitto: leverage systemd credentials
2023-07-26 18:23:06 +02:00
Florian Klink
7539b8f2d7
Merge pull request #244841 from flokli/networkmanager-fix-ppp-plugin
...
nixos/networkmanager: create pppd lock directory
2023-07-26 17:44:35 +02:00