Commit Graph

10 Commits

Author SHA1 Message Date
Luflosi
f2be3ae30d
nixos/kubo: restrict access to the API to users in a group by default 2023-04-15 15:25:20 +02:00
Luflosi
7ceebbb35b
nixos/kubo: allow multiple API and Gateway addresses
The daemon allows specifying an array of multiaddrs for Addresses.API and Addresses.Gateway, so the NixOS module should allow that as well.
2023-04-15 15:25:06 +02:00
Luflosi
929a00bd84
nixos/kubo: give normal users access to the daemon by default
Fixes https://github.com/NixOS/nixpkgs/issues/223289.

This doesn't reduce the security in any way since it was already possible for normal users to do what I do here and create such a fake repo for themselves and set their $IPFS_PATH variable to it. It was and still is also possible to just use the --api CLI option.
This change just removes the manual setup that would otherwise be required.

We wouldn't need this workaround if https://github.com/ipfs/kubo/pull/9366 was merged but the fix seems to have been ignored upstream. Patching it ourselves seems like a bad idea since the patch has security implications.
2023-04-15 15:24:58 +02:00
Luflosi
409df93c01
nixos/tests/kubo: use subtests instead of comments
Specify the intent of parts of the tests by using `with subtest("...")` instead of a comment for more clarity.
2023-04-15 15:24:49 +02:00
Luflosi
bf97703f0e
nixos/tests/kubo: clean up code
- Use `runTest` instead of `handleTest`, which simplifies the code a little
- Use `lib.maintainers` instead of `pkgs.lib.maintainers`
- Use `ipfs add --quieter` instead of `ipfs add | awk '{ print $2 }'`
- Whitespace and comment changes
2023-04-15 15:24:43 +02:00
Luflosi
62bff9ab15
nixos/tests/kubo: add Luflosi as maintainer 2023-04-15 15:24:37 +02:00
Karmanyaah Malhotra
5fb09c9e3a nixos/kubo: Test Kubo restart after a crash
Move strip() to definition

Co-authored-by: Luflosi <Luflosi@users.noreply.github.com>
2023-04-13 03:14:59 -05:00
Karmanyaah Malhotra
28949db47e nixos/kubo: reenable FUSE test with workaround
Update comment notice on broken fuse

Co-authored-by: Luflosi <Luflosi@users.noreply.github.com>
2023-04-13 03:14:59 -05:00
Luflosi
a255c43f44
nixos/kubo: convert to RFC42-style settings 2022-10-21 20:54:00 +02:00
Luflosi
eefaaf41d6
kubo: rename from ipfs
Go-IPFS was renamed to Kubo in version 0.14.0, see https://github.com/ipfs/kubo/issues/8959.
2022-10-02 16:00:22 +02:00