DCsunset
2f0c3c88cb
nixos/murmur: support setting custom state directory
2024-10-30 08:21:48 +00:00
Aleksana
dbe33f99b7
nixos/soju: use message-store instead of deprecated log in config ( #338650 )
2024-10-29 17:37:21 +08:00
Aleksana
5fd2f5aac6
tailscaled: Add option to disable Taildrop ( #346957 )
2024-10-29 17:19:31 +08:00
Nico Felbinger
32d516c84d
nixos/radicale: fix links to documentation
2024-10-28 19:56:12 +01:00
Felix Bühler
3f8d6caed2
nixos/xl2tpd: prefer 'install' over 'chmod/chown' ( #302388 )
2024-10-27 19:21:21 +01:00
Martin Weinelt
5e10c1522b
nixos/avahi-daemon: set up sandboxing ( #348406 )
2024-10-26 16:22:04 +02:00
Martin Weinelt
ca4f13857c
nixos/coturn: set up sandboxing ( #348396 )
2024-10-26 16:21:46 +02:00
Michele Guerini Rocco
9a415c28ae
dhcpcd: fix more permissions errors ( #351225 )
2024-10-26 02:00:23 +02:00
rnhmjoj
483e44684d
dhcpcd: fix permissions error with secondary IPv4 addresses
...
If dhcpcd receives a secondary IPv4 address from the DHCP server it
tries to enable automatic promotion from secondary to primary by writing
`1` to /proc/sys/net/ipv4/conf/%s/promote_secondaries.
2024-10-25 21:33:30 +02:00
Felix Bühler
29cdb4373e
pptpd: prefer 'install' over 'chmod/chown' ( #308085 )
2024-10-25 20:48:22 +02:00
Sefa Eyeoglu
15aad9d3a1
nixos/ntpd: cleanup; add tests ( #349633 )
2024-10-24 15:21:01 +02:00
Martin Weinelt
8a2439f1c2
nixos/avahi-daemon: set up sandboxing
2024-10-24 15:04:14 +02:00
rcerc
42d887adbf
nixos/supplicant: Always provide a first configuration file argument
...
`wpa_supplicant` refuses to start when `configFile.path == null` because this
omits the `-c` (‘Configuration file’) option, which it requires even if the
`-I` (‘additional configuration file’) option is provided. If `configFile.path
== null`, pass `extraConfFile` with `-c` instead of `-I` to prevent this.
2024-10-24 08:25:02 +02:00
Kerstin Humm
b12bcabd24
maintainers: remove erictapen from packages that I don't really maintain anymore
2024-10-22 12:32:29 +02:00
K900
099cde3a92
Revert "nixos/ssh: disable authorizedKeysInHomedir by default"
2024-10-20 21:32:29 +03:00
nicoo
06929a6fb0
nixos/ssh: disable authorizedKeysInHomedir by default ( #309025 )
2024-10-20 16:19:25 +00:00
Tomo
8d642257fb
nodePackages.shout: drop ( #349715 )
2024-10-19 18:46:30 -07:00
Pyrox
4e632e9c3f
nixos/ntpd: Add hardening
2024-10-19 14:26:17 -04:00
Pyrox
53bc9450bc
nixos/ntpd: Use StateDirectory instead of a preStart script
2024-10-19 14:26:00 -04:00
Tomo
76c7c2dd88
nodePackages.shout: drop
...
shout has been deprecated since 2016:
90a62c56af#229475
2024-10-19 17:53:20 +00:00
Nick Cao
f8b17f235e
nixos/sing-box: generate config file into RuntimeDirectory ( #338457 )
2024-10-19 10:11:00 -04:00
Pyrox
297f21e357
nixos/ntpd: format with nixfmt-rfc-style
2024-10-19 04:39:16 -04:00
Peder Bergebakken Sundt
03d8f52dc6
nixos/tailscale: document tailscale-autoconnect ( #347881 )
2024-10-19 07:01:26 +02:00
Peder Bergebakken Sundt
465201822e
nixos/mihomo: fix option type and test ( #345891 )
2024-10-19 06:58:41 +02:00
Sandro
f0bc4f6bbf
nixos-firewall-tool: add nftables support ( #324615 )
2024-10-18 23:57:39 +02:00
nicoo
6c62fbf539
nixos/sshd: warn if no authorized keys, and no authentication method other than pubkeys, were configured
2024-10-18 20:23:02 +00:00
nicoo
1f08575e3a
nixos/sshd: Disable authorizedKeysInHomedir if stateVersion >= 24.11
...
Co-authored-by: Valentin Gagarin <valentin@gagarin.work>
2024-10-18 20:21:12 +00:00
Stanisław Pitucha
87c458e3ce
nixos/go-camo: fix shellcheck findings with enableStrictShellChecks enabled ( #349557 )
2024-10-19 06:22:18 +11:00
jmir1
858b5c6762
nixos/ddclient: Fix ip command with usev4 and usev6
2024-10-18 20:32:16 +02:00
Gary Guo
cabbab19e2
nixos-firewall-tool: add nftables support
...
Co-authored-by: Rvfg <i@rvf6.com>
2024-10-18 20:16:27 +02:00
Vladimír Čunát
a8f84a9dff
nixos/kresd: add link to upstream doc ( #311915 )
2024-10-18 10:22:18 +02:00
David McFarland
cd286b21e4
resolvconf: use correct output files when used with dnsmasq ( #349320 )
2024-10-17 16:44:18 -03:00
David McFarland
403604ca66
resolvconf: use correct output files when used with dnsmasq
2024-10-17 14:20:57 -03:00
Adam Stephens
bece21421b
nixos/atticd: wants network-online.target
...
fixes:
trace: evaluation warning: atticd.service is ordered after 'network-online.target' but doesn't depend on it
2024-10-16 12:36:19 -04:00
K900
70cc7b62f2
nixos/murmur: Set UMask to 027 ( #348652 )
2024-10-16 05:16:09 +03:00
Robert Schütz
fb2d897809
nixos/headscale: don't set deprecated options in config ( #347991 )
2024-10-15 16:22:18 -07:00
Azat Bahawi
e2337957df
nixos/zapret: init ( #347805 )
2024-10-15 20:37:40 +00:00
Dmitry Voronin
5a5c04d1ea
nixos/zapret: init
2024-10-15 21:51:53 +03:00
Peder Bergebakken Sundt
13bf1d6259
nixos/resilio: add package option ( #346427 )
2024-10-15 20:38:41 +02:00
Martin Weinelt
72dd22a02d
nixos/coturn: reindent, unclutter
...
Make the module slightly easier to browse.
2024-10-15 18:31:52 +02:00
Martin Weinelt
6d9089c67d
nixos/coturn: set up sandboxing
2024-10-15 18:31:52 +02:00
Felix Singer
13f6e2d85f
nixos/murmur: Set UMask to 027
...
Group only needs limited access, while other users don't need access at
all. So set the UMask to 027.
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-15 02:43:42 +02:00
Sandro Jäckel
db12279890
nixos/go-camo: fix shellcheck findings with enableStrictShellChecks enabled
2024-10-14 18:21:30 +02:00
Michele Guerini Rocco
35618d0b14
nixos/dhcpcd: fix race between namespace setup and resolvconf ( #348305 )
2024-10-14 15:44:32 +02:00
Adam C. Stephens
86420f4ee8
nixos/atticd: init module ( #347749 )
2024-10-14 09:33:35 -04:00
Vladimír Čunát
46954f61c6
nixos/knotd: extend SystemCallFilter
...
It was breaking knot-dns.tests.knot
New knotd uses fchown to cover cases where user changes during startup.
In typical Linux cases the user is kept the same and there are
capabilities instead, but the syscall still happens and got caught here.
2024-10-14 10:26:46 +02:00
rnhmjoj
52e2e7027d
dhcpcd: fix race between namespace setup and resolvconf
...
systemd requires paths in `ReadWritePaths=` to exist before setting up
the service sandbox, so dhcpcd should be ordered after resolvconf.
Making resolvconf a oneshot service ensure `After=resolvconf.service`
works correctly.
2024-10-14 08:02:46 +02:00
Adam Stephens
8d4f3f2b3e
nixos/atticd: init module
...
Copied from 1b29816235/nixos/atticd.nix
2024-10-13 08:23:34 -04:00
Robert Schütz
cc4d29d353
nixos/headscale: assert that dns.base_domain is set when using MagicDNS
2024-10-12 18:28:17 -07:00
Robert Schütz
0673e98248
nixos/headscale: update option descriptions
2024-10-11 20:17:15 -07:00
