Commit Graph

1305 Commits

Author SHA1 Message Date
Martin Weinelt
06f0af1f0a
firefox-esr-115-unwrapped: init at 115.0esr
The next major version of the Firefox Extended Support Release.

https://www.mozilla.org/en-US/firefox/115.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-22/

Fixes: CVE-2023-3482, CVE-2023-37201, CVE-2023-37202, CVE-2023-37203
       CVE-2023-37204, CVE-2023-37205, CVE-2023-37206, CVE-2023-37207,
       CVE-2023-37208, CVE-2023-37209, CVE-2023-37210, CVE-2023-37211,
       CVE-2023-37211, CVE-2023-37212
2023-07-04 16:07:25 +02:00
Ryan Lahfa
7672c1e9ae
Merge pull request #201907 from Tom-Hubrecht/fail2ban 2023-07-02 13:57:47 +02:00
Mac Chaffee
61cb4170fd
nixos/static-web-server: create module which uses upstream systemd units
This commit creates a nixos module for static-web-server.
The module uses upstream systemd units to start static-web-server.
It also includes options for configuring static-web-server.
2023-07-01 12:51:13 -04:00
Tom Hubrecht
208ee8b2e2 nixos/fail2ban: use attrsets for settings instead of strings 2023-06-30 22:27:40 +02:00
Arthur Gautier
9338511350 nixosTest: provide a test for lib.extend in nixosTests & runNixOSTest 2023-06-29 09:14:58 -07:00
Gaël Reyrol
3a4e234b07
services/calibre-server: Add new http & auth options (#216497)
nixos/doc: add calibre-server new options
2023-06-28 14:06:47 +02:00
Lily Foster
73710c4a5b
Merge pull request #238848 from nikstur/qemu-vm-volatile-root
nixos/tests/qemu-vm-volatile-root: init
2023-06-27 16:00:41 -04:00
Janik
946c3f8c51
Merge pull request #214063 from michaelshmitty/anuko-timetracker 2023-06-27 13:19:44 +02:00
Michael Smith
7532dbaa32 nixos/anuko-time-tracker: init 2023-06-27 12:30:33 +02:00
Nick Cao
e3d52286b1
nixos/sing-box: add basic test 2023-06-27 13:58:02 +08:00
Pol Dellaiera
5f85fe1e8a
php83: init at 8.3.0alpha2 (#239151)
* php83: init at 8.3.0alpha2

* phpExtensions.blackfire: disable for php 8.3

* phpExtensions.apcu: patch for 8.3 only
2023-06-26 20:51:23 +02:00
Gaël Reyrol
c7bb191426
scaphandre: init at 0.5.0 (#238462)
* scaphandre: init at 0.5.0

* Update pkgs/servers/scaphandre/default.nix

---------

Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com>
2023-06-26 19:41:28 +02:00
pennae
50a780ce5c
Merge pull request #237824 from drupol/add-guacamole-server-and-client
{guacamole-server,guacamole-client}: init at 1.5.2
2023-06-23 15:41:50 +02:00
Pol Dellaiera
6cc1b175d3
nixos/guacamole-server: init 2023-06-21 22:11:44 +02:00
Thomas Gerbet
84c0cb1471 php: drop PHP 8.0
Closes #224505
2023-06-21 22:09:16 +02:00
Pol Dellaiera
a950888024
nixos/guacamole-client: init 2023-06-21 20:47:31 +02:00
Sandro
7e38f9e981
Merge pull request #236104 from Luflosi/apfs-test-module-based-runner
nixos/tests/apfs: clean up code
2023-06-21 19:19:36 +02:00
Domen Kožar
b37c9b89a4
Merge pull request #221169 from bouk/bouk/mainpr
opentelemetry-collector: add NixOS module
2023-06-21 13:07:50 +01:00
Tyler Langlois
80dcb8f6bb nixos/opentelemetry-collector: add nixosTest
(cherry picked from commit a45a1a51e57eff974922b19d80b77ff0c23771f0)
Signed-off-by: Domen Kožar <domen@dev.si>
2023-06-21 13:07:16 +01:00
nikstur
cc3a3c40a2 nixos/tests/qemu-vm-volatile-root: init 2023-06-21 01:38:27 +02:00
rnhmjoj
623d7d2124 nixos/tests/fakeroute: init 2023-06-20 01:12:04 +00:00
Patrizio Bekerle
fd800d851f
qownnotes: add tests 2023-06-16 08:20:32 +02:00
Sandro
60d31a2a46
Merge pull request #207646 from Enzime/vsce/test-remote-ssh 2023-06-14 17:05:32 +02:00
Sandro
9183a72d11
Merge pull request #232862 from misuzu/gotosocial-init 2023-06-13 11:36:46 +02:00
zi3m5f
f86645566d nixos/tests/systemd-nspawn-configfile: init
Test for presence of all specified options in the generated .nspawn
config file.
Additionally test for absence of misspelled and fixed option MachineID.
2023-06-12 12:08:39 +02:00
Michael Hoang
b2ff7ceff2 nixos/tests: Test that Remote SSH can patch Node 2023-06-09 18:21:41 +10:00
Luflosi
7573c269a8
nixos/tests/apfs: clean up code
- Use `runTest` instead of `handleTest`, which simplifies the code a little
- Use `lib.maintainers` instead of `pkgs.lib.maintainers`
- Remove unused function argument `pkgs`
- Change test name in the kernel module from `test` to `apfs`, since that seems to be a common pattern for the name
2023-06-05 16:39:09 +02:00
misuzu
45ffb33514 nixos/gotosocial: init
Co-authored-by: Peder Bergebakken Sundt <pbsds@hotmail.com>
2023-06-05 09:07:34 +03:00
Marko Mušnjak
aafe0f4314
apache_datasketches: init at 1.6.0
PostgreSQL extension providing approximate algorithms for
distinct item counts, quantile estimation and frequent items detection.
2023-06-02 21:03:19 +02:00
Pol Dellaiera
3090855141
Merge pull request #232360 from drupol/nixos/refactor-code-server
nixos/code-server: add tests and more command line options
2023-06-01 13:56:01 +02:00
emilylange
fa21828be5
nixosTests.acme-dns: init 2023-05-31 15:08:39 +02:00
Victor Freire
fca068a558 nixos/tests/legit: init 2023-05-27 16:20:05 +00:00
Raito Bezarius
69bb0f94de nixos/nginx: first-class PROXY protocol support
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.

Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.

It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.

An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.

Finally, the tests covers:

- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
  (sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;

In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.

For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
2023-05-26 19:48:26 +02:00
Pol Dellaiera
371b4c3eb7
nixos/code-server: init tests 2023-05-26 09:51:33 +02:00
Yaya
931a1b97f7 nixos/tests/sftpgo: init 2023-05-25 22:46:15 +02:00
Alexander Sieg
5ade08168a
outline: add nixos test 2023-05-23 12:03:39 +02:00
0x4A6F
afad0c152b
Merge pull request #214428 from mweinelt/frigate-init
frigate: init at 0.12.0
2023-05-22 18:29:37 +02:00
Ryan Lahfa
2e1e1f8765
Merge pull request #231502 from SuperSandro2000/portunus-openldap
nixos/portunus: use openldap compiled with libxcrypt-legacy
2023-05-22 18:20:52 +02:00
Martin Weinelt
c7ad6560b0
nixos/tests/frigate: init
Starts a frigate instance with a dummy video stream provided by ffmpeg.

Co-Authored-By: fleaz <mail@felixbreidenstein.de>
2023-05-22 16:29:55 +02:00
Sandro Jäckel
00000006e9
nixos/tests: init portunus 2023-05-21 23:56:02 +02:00
Thomas Gerbet
16c6122a88 varnish73: init at 7.3.0
https://varnish-cache.org/releases/rel7.3.0.html
2023-05-20 13:49:24 +02:00
Alyssa Ross
aedc462e8b nixosTests.mailman: init 2023-05-19 12:03:41 +02:00
Sandro
efb55108b3
Merge pull request #231435 from drupol/openvscode-server/systemd-service 2023-05-16 14:14:29 +02:00
Pol Dellaiera
cce7cdd293
nixosTests.openvscode-server: init 2023-05-15 21:48:08 +02:00
nikstur
46dfed6010 nixos/tests/rshim: init 2023-05-15 14:09:28 +02:00
Nicola Squartini
56e894b0b1 nixos/pam: add test for ZFS home dataset unlocking 2023-05-15 09:22:42 +02:00
Ryan Lahfa
e3bd7faa18
Merge pull request #226830 from Janik-Haag/birdwatcher
birdwatcher: init at 2.2.4, alice-lg: init at 6.0.0, nixos/birdwatcher: init, nixos/alice-lg: init
2023-05-15 08:42:10 +02:00
Janik H
40136a1f7f nixos/birdwatcher: init 2023-05-15 02:52:06 +02:00
Janik H
8ed86700a2 nixos/alice-lg: init 2023-05-15 02:52:06 +02:00
Ryan Lahfa
285330f081
Merge pull request #230153 from mklca/swap-encrypt-enhancement
nixos/config/swap: improve randomEncrytion
2023-05-14 19:01:56 +02:00