Commit Graph

1459 Commits

Author SHA1 Message Date
Naïm Favier
dc644c312f
Merge pull request #206061 from ncfavier/nginx-duplicate-modules 2022-12-16 10:09:19 +01:00
Naïm Favier
6c61c436cf
nginx: detect duplicate modules
Nginx breaks at runtime when duplicate modules are added. To detect
this, add a `name` key to all modules.

Also remove the outdated modsecurity v2 module and unify `modsecurity`
and `modsecurity-nginx`.
2022-12-16 01:57:14 +01:00
Franz Pletz
533ee91117
nginxMainline: 1.23.2 -> 1.23.3 2022-12-14 12:55:03 +01:00
Luke Granger-Brown
b3a05353f8
Merge pull request #201539 from r-ryantm/auto-update/pomerium
pomerium: 0.19.1 -> 0.20.0
2022-12-11 21:17:21 +00:00
Raphael Robatsch
985c8dbe14 treewide: use mbedtls 3 where possible
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-12-07 19:58:55 +00:00
Monson Shao
f9badabc3c
dufs: skip may-fail tests 2022-12-06 18:35:52 +08:00
Andreas Wiese
49ec58bd1c gatling: fix undefined reference to 'crypt'
ff30c899d8 made libcrypt support optional (and off-by-default) in
glibc, which requires all packages still using it to depend on
libxcrypt.

See also https://github.com/NixOS/nixpkgs/pull/181764
2022-11-30 01:03:34 +01:00
Alexander Bantyev
df85dda331
Merge pull request #198314 from Izorkin/update-nginx-cache
nixos/nginx: add proxyCache options
2022-11-27 18:51:09 +04:00
R. Ryantm
e5673f9025 pomerium: 0.19.1 -> 0.20.0 2022-11-16 19:09:01 +00:00
Aaron Jheng
b70d4b9009
gatling: mark as broken 2022-11-16 02:50:07 +00:00
R. Ryantm
ab44b8890a dufs: 0.30.0 -> 0.31.0 2022-11-14 09:47:00 +00:00
Henri Menke
9ab02e1ec6
nginxModules.njs: init at 0.7.8 2022-11-05 21:40:57 +01:00
Thomas Gerbet
7f29a5746a tomcat: 9.0.53 -> 9.0.68, 10.0.11 -> 10.0.27
Fixes CVE-2021-42340, CVE-2021-43980, CVE-2022-23181, CVE-2022-29885, CVE-2022-34305 and CVE-2022-42252.

https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.68_(markt)
https://tomcat.apache.org/tomcat-10.0-doc/changelog.html#Tomcat_10.0.27_(markt)
2022-11-05 17:22:30 +01:00
Stanisław Pitucha
08fbb5de2d
Merge pull request #190325 from fgaz/merecat/init
merecat: init at 2.31
2022-10-31 21:23:03 +11:00
Francesco Gazzetta
b43605fb03 nixos/merecat: init 2022-10-31 09:24:28 +01:00
Francesco Gazzetta
ada312b3c4 merecat: add version test 2022-10-31 09:24:26 +01:00
Francesco Gazzetta
9f50ee94a5 merecat: init at 2.31 2022-10-31 09:24:02 +01:00
R. Ryantm
54cf191a16 tengine: 2.3.3 -> 2.3.4 2022-10-31 11:23:44 +08:00
Izorkin
544c526393
nginx: change temp path location
Parameters `http-log-path`, `http-client-body-temp-path`, `http-proxy-temp-path`,
`http-fastcgi-temp-path`, `http-uwsgi-temp-path` and `http-scgi-temp-path`
point to location of nginx temporary files, not cache files.
To change specify location of cache files needed use other parameters
in nginx.conf configuration file.
2022-10-28 19:01:23 +03:00
github-actions[bot]
3c2db12b37
Merge master into staging-next 2022-10-22 06:05:55 +00:00
R. Ryantm
7cee3545cc unit: 1.27.0 -> 1.28.0 2022-10-22 11:33:11 +08:00
Martin Weinelt
80fc469031 Merge remote-tracking branch 'origin/master' into staging-next 2022-10-21 22:33:42 +02:00
Izorkin
9d676cb01d
nginxQuic: 3550b00d9dc8 -> 3be953161026 2022-10-20 22:10:09 +03:00
Izorkin
a9cbc65ad0
nginxMainline: 1.23.1 -> 1.23.2 2022-10-20 22:07:08 +03:00
Izorkin
2392241c0b
nginxStable: 1.22.0 -> 1.22.1 2022-10-20 22:05:06 +03:00
github-actions[bot]
6e9b36d7a0
Merge master into staging-next 2022-10-20 06:05:55 +00:00
R. Ryantm
6a1a5b4b3a jetty: 11.0.8 -> 11.0.12 2022-10-20 08:49:34 +08:00
Martin Weinelt
829f89581a
Merge pull request #181764 from mweinelt/glibc-without-libcrypt 2022-10-09 21:07:26 +02:00
Martin Weinelt
3f4de6d4ca
thttpd: fix build with libxcrypt 2022-10-09 18:14:33 +02:00
Franz Pletz
e33af60685
bozohttpd: fix build with libxcrypt 2022-10-09 18:10:42 +02:00
Martin Weinelt
167544c2df
tengine: fix build with libxcrypt 2022-10-09 18:10:35 +02:00
Franz Pletz
c82e7ee61b
hiawatha: fix build with libxcrypt 2022-10-09 18:10:34 +02:00
Franz Pletz
3028beca39
apacheHttpd: fix build with libxcrypt 2022-10-09 18:09:42 +02:00
Yorick van Pelt
cc1dbce261
yaws: 2.0.6 -> 2.1.1 2022-10-09 11:12:01 +02:00
Jörg Thalheim
d93a5e66a7
Merge pull request #194043 from LeSuisse/modperl-2.0.12
apacheHttpdPackages.mod_perl: 2.0.11 -> 2.0.12
2022-10-02 17:36:24 +02:00
Thomas Gerbet
573ee6b58c darkhttpd: 1.13 -> 1.14
https://github.com/emikulic/darkhttpd/releases/tag/v1.14

Fixes CVE-2020-25691.
2022-10-02 12:19:48 +02:00
Thomas Gerbet
cbc685e754 apacheHttpdPackages.mod_perl: 2.0.11 -> 2.0.12
https://svn.apache.org/repos/asf/perl/modperl/tags/2_0_12/Changes
2022-10-02 12:06:39 +02:00
R. Ryantm
01e49f21bc go-camo: 2.4.0 -> 2.4.1 2022-09-29 14:22:43 +00:00
Sandro
6867c18a9e
Merge pull request #192840 from SuperSandro2000/nginx-vts 2022-09-29 11:42:51 +02:00
Monson Shao
664cfba168
dufs: init at 0.30.0 2022-09-28 15:33:55 +08:00
Sandro Jäckel
f240b7026c
nginxModules.vts: 0.2.0 -> 0.2.1 2022-09-25 01:36:21 +02:00
R. Ryantm
c4bb5315d3 lighttpd: 1.4.66 -> 1.4.67 2022-09-21 17:55:05 +02:00
Luke Granger-Brown
95aa8ad7fa
Merge pull request #191022 from r-ryantm/auto-update/pomerium
pomerium: 0.19.0 -> 0.19.1
2022-09-15 01:11:44 +01:00
Robert Scott
b79b08f09d apacheHttpdPackages.mod_wsgi: enable on darwin 2022-09-14 00:34:19 +01:00
R. Ryantm
22a7681dd7 pomerium: 0.19.0 -> 0.19.1 2022-09-13 07:39:15 +00:00
R. Ryantm
8efd0a822e apacheHttpdPackages.mod_wsgi: 4.9.3 -> 4.9.4 2022-09-13 03:13:03 +00:00
Sandro
cba9a57562
Merge pull request #190021 from SuperSandro2000/nginx-vts 2022-09-12 11:31:37 +02:00
Luke Granger-Brown
f9544df645
Merge pull request #190742 from lukegb/envoy
envoy: remove remaining nix store references from deps
2022-09-11 22:28:05 +01:00
Robert Scott
618883d37c trafficserver: 9.1.2 -> 9.1.3 2022-09-11 13:06:06 +01:00
Luke Granger-Brown
0a087095ac envoy: remove remaining nix store references from deps
To do this, this commit does several things:

* Move the set-interpreter patching to outside the fixed-output
  derivation
* Patch base_pip3/BUILD.bazel, which ends up getting Python's full path
* Drop local_jdk, which contains symlinks to our jdk input
* Drop bazel_gazelle_go_repository_tools, which contains built artifacts
  using our go

...and updates the FOD hash to match. Checked that this appears to
remove the currently obvious FOD problems by checking out an older
nixpkgs commit and applying this on top, and verifying that the FOD hash
doesn't change between that older glibc and the current tip-of-tree.

This also disables tcmalloc on ARM because I couldn't get this to build
properly otherwise.
2022-09-11 04:58:53 +01:00