Zhaofeng Li
a4bcad541e
unifi5: Follow new mitigation guidelines
...
Simply disabling lookups isn't enough, and the JndiLookup class must be
removed:
https://web.archive.org/web/20211217085954/https://logging.apache.org/log4j/2.x/security.html
2021-12-17 15:55:13 -08:00
pennae
64bbe28843
nixos/unifi: rename openPorts to openFirewall
...
openFirewall is the much more common name for an option with this
effect. since the default was `true` all along, renaming it doesn't hurt
much and only improves consistency with other modules.
2021-12-17 21:30:52 +01:00
pennae
2000a1edcd
nixos/unifi: add deprecation warning for openPorts
...
modules are discouraged from opening ports in the firewall unless
explicitly told to do so. add a deprecation notice for this in unifi.
2021-12-17 21:30:52 +01:00
Zhaofeng Li
e992604bf0
nixos/unifi: Apply log4j2 mitigation
2021-12-12 01:48:58 -08:00
Pascal Bach
0f60c45e9c
nixos/unifi: refactor mountpoints
...
Use service internal bind mounts instead of global ones.
This also moves the logs to /var/log/unifi on the host
and the run directory to /run/unifi.
Closes #61424
2021-11-05 12:20:40 +01:00
pennae
62813808ff
nixos/unifi, unifi: add pennae to maintainers
2021-10-15 17:14:33 +02:00
pennae
300226261f
nixos/unifi: fix unifi ExecStop= being incompatible with systemd
...
unifi does not shut down properly when stopped via systemd (it always exits with
SIGTERM exit status) because systemd wants stop commands to not exit before the
main command is gone and unifi does not comply. the easiest way around this is
to have systemd send an ignored signal after the stop command has exited.
unifi may still throw exceptions during shutdown, but it *does* exit cleanly as
far as systemd is concerned now.
2021-10-14 13:26:14 +02:00
Naïm Favier
2ddc335e6f
nixos/doc: clean up defaults and examples
2021-10-04 12:47:20 +02:00
Guillaume Girol
88b4ba2169
nixos/unifi: define group, fix after #133166
2021-09-18 14:42:08 +02:00
Pascal Bach
f552bd52b5
nixos/unifi: harden service
...
Co-authored-by: Vincent Haupert <mail@vincent-haupert.de>
2021-05-30 15:14:00 +02:00
Pascal Bach
3e7d650bcc
nixos/unifi: restart service on package update
...
Currently the service doesn't detect if on of the packages is updated
and doesn't restart.
By manually adding a trigger we make sure the service restarts if any of
the involved packages update.
2020-07-03 22:34:29 +02:00
Nathan Hawkins
b0208cb80f
nixos/unifi: use systemd tmpfiles instead of preStart
2020-01-24 10:06:29 -05:00
Marek Mahut
81fe072a8f
nixos/unifi: restarting on failure ( #67456 )
2019-08-25 18:22:03 -06:00
WilliButz
d6a4902662
nixos/unifi: create data directory with correct permissions
2019-08-05 15:09:16 +02:00
Aaron Andersen
0b7305e783
nixos/unifi: replace deprecated usage of PermissionsStartOnly
...
see https://github.com/NixOS/nixpkgs/issues/53852
2019-05-26 07:20:54 -04:00
Lily Ballard
b0e79359bd
nixos/unifi: Update TCP ports
...
Fixes #55377
2019-02-07 13:18:57 -08:00
Justin Humm
38f23046a3
unifi, nixos/unifi: add erictapen as maintainer
2019-01-27 17:28:15 +01:00
Florian Klink
fff5923686
nixos/modules: users.(extraUsers|extraGroup->users|group)
2018-06-30 03:02:58 +02:00
Badi Abdul-Wahid
df3566c956
unifi, nixos/unifi: support LTS (5.6.36) and release (5.7.20)
...
Ubiquiti has both a LTS and current version of their Unifi controller software.
The latter adds new features, but may drop support for some devices.
This adds the capability to use either for the unifi module but defaults
to the LTS version, which was the previous behavior.
2018-04-28 00:27:33 +02:00
Simon Lackerbauer
1075919413
unifi: add options to control JVM heap size
...
Our controller was acting very sluggish at times and increasing
available RAM for the JVM fixes this.
2017-08-04 02:12:31 +02:00
Svein Ove Aas
102472b8de
unifi: Open required ports by default.
...
The controller does not work at all if they aren't, with the exception
of special configurations involving L3 or custom ports.
2016-08-16 21:01:49 +01:00
Svein Ove Aas
e3f0a09b6d
unifi: chown the data dir as well.
...
It needs to be writeable.
2016-08-16 21:01:49 +01:00
Eric Litak
032f3e721c
unifi: relocatable data dir
2016-04-22 22:43:55 -07:00
Eric Litak
08546d3a20
unifi: fix for closure-size changes
2016-04-22 22:39:28 -07:00
Eric Litak
fc8a16f4ed
unifi: LD_LIBRARY_PATH hack for embedded libsnappyjava.so, fixes #12897
2016-02-11 09:06:33 -08:00
William A. Kennington III
6532863ac4
unifi: 3.2.10 -> 4.6.3
2015-06-23 10:09:44 -07:00
Eelco Dolstra
c738b309ee
types.uniq types.bool -> types.bool
2015-06-15 18:10:26 +02:00
William A. Kennington III
8627110091
icedtea: Make major version nonspecific attrs
2015-01-02 00:24:49 -08:00
William A. Kennington III
159af942d5
nixos/unifi: Ensure stateDir is mounted before proceeding
2014-12-05 12:12:17 -08:00
William A. Kennington III
f83aa6c0ea
nixos/unifi: Properly depend on mountpoints
2014-11-24 12:40:07 -08:00
William A. Kennington III
8309aa04b2
unifi: Actually remove webapps at shutdown
2014-11-24 02:30:04 -08:00
William A. Kennington III
8f0d65e2df
unifi: Clean all of webapps at start and stop
2014-11-24 00:22:24 -08:00
William A. Kennington III
3f7b2bc70d
unifi: Fix typo
2014-11-24 00:06:42 -08:00
William A. Kennington III
826f5468ab
nixos/unifi: Remove old ROOT.war links before relinking
2014-11-14 11:45:38 -08:00
William A. Kennington III
377454ff0e
nixos/unifi: Explain and simplify the bind mount configuration
2014-08-05 23:15:49 -05:00
William A. Kennington III
12ad29226c
nixos/unifi: Fix ordering of mount rules
2014-08-05 22:09:15 -05:00
William A. Kennington III
dfb596b49b
nixos/unifi: Add service module
2014-08-05 21:40:47 -05:00
