Commit Graph

5 Commits

Author SHA1 Message Date
Dominique Martinet
7c448e8d44 nixos/cryptpad: harden service
cryptpad is not directly exposed to the network, but has plenty that can
be hardened more properly, so fix that.
2024-07-24 16:17:32 +09:00
Dominique Martinet
b846e8762f nixos/cryptpad: init
This is a full rewrite independent of the previously removed cryptpad
module, managing cryptpad's config in RFC0042 along with a shiny test.

Upstream cryptpad provides two nginx configs, with many optimizations
and complex settings; this uses the easier variant for now but
improvements (e.g. serving blocks and js files directly through nginx)
should be possible with a bit of work and care about http headers.

the /checkup page of cryptpad passes all tests except HSTS, we don't
seem to have any nginx config with HSTS enabled in nixpkgs so leave this
as is for now.

Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com>
Co-authored-by: Michael Smith <shmitty@protonmail.com>
2024-07-24 16:17:26 +09:00
ajs124
1c0cc017b5 nixos/cryptpad: remove 2022-07-04 15:33:59 +02:00
rnhmjoj
5803706662
nixos/tests: fix type mismatch in wait_for_open_port
Fix some fallout from de3e423 (PR #171280).
2022-06-11 14:22:53 +02:00
DavHau
df0f76b39f cryptpad: add test for nixos module 2021-08-11 11:04:39 +09:00