Aaron Andersen
1b4bdf523a
Merge pull request #146795 from Madouura/dev/tetrd
...
tetrd: init at 1.0.4
2022-01-02 11:53:03 -05:00
Sandro
46056f6c36
Merge pull request #122460 from ju1m/croc
2022-01-02 15:56:58 +01:00
Bobby Rong
b38cf64f82
Merge pull request #152140 from yesbox/i2pd
...
nixos/i2pd: add module package option
2022-01-02 09:00:35 +08:00
Madoura
e16074e889
nixos/tetrd: init
2022-01-01 17:43:37 -06:00
Jesper Geertsen Jonsson
9268da6b04
nixos/i2pd: add module package option
2022-01-01 23:16:40 +01:00
Robert Schütz
f8b4cf08fe
syncserver, nixos/syncserver: remove
...
They have been broken for multiple releases.
2022-01-01 02:09:10 +01:00
Vladimír Čunát
0e5dab9db7
Revert "nixos/dhcpd: switch to DynamicUser"
2021-12-30 14:22:08 +01:00
Martin Weinelt
eb51af35ad
Merge pull request #152311 from arachnist/kea-fixes
2021-12-27 22:01:32 +01:00
Michele Guerini Rocco
3a7d97bff2
Merge pull request #139873 from rnhmjoj/dhcpd
...
nixos/dhcpd: switch to DynamicUser
2021-12-27 18:07:16 +01:00
Robert Gerus
6faa7ad3fc
nixos/kea: fixes for the systemd units
...
Fix a typo in the kea-dhcp-ddns-server unit definition, and add a
KEA_LOCKFILE_DIR environment variable without which kea daemons try to
access a lockfile under /var/run/kea path, which is prevented by
systemd's ProtectSystem (or one of the other Protect*) mechanism.
kea-dhcp-ddns-server doesn't react to updates from dhcp4 server at all
without it.
2021-12-27 04:41:20 +01:00
Lucas Savva
8d01b0862d
nixos/acme: Update documentation
...
- Added defaultText for all inheritable options.
- Add docs on using new defaults option to configure
DNS validation for all domains.
- Update DNS docs to show using a service to configure
rfc2136 instead of manual steps.
2021-12-26 16:49:55 +00:00
Emery Hemingway
02cb654a4d
nixos/stubby: reduce to a settings-style configuration
...
Extract the example configuration from the package to provide a
working example.
Remove pkgs.stubby from `environment.systemPackages`.
2021-12-25 12:07:06 +01:00
Franz Pletz
d5b0e12d9b
Merge pull request #147516 from pennae/dhcpcd
...
dhcpcd: 8.1.4 -> 9.4.1, module updates, enable privsep
2021-12-20 14:44:58 +01:00
pennae
971adf24eb
nixos/dhcpcd: set RuntimeDirectory
2021-12-20 10:53:13 +01:00
Zhaofeng Li
a4bcad541e
unifi5: Follow new mitigation guidelines
...
Simply disabling lookups isn't enough, and the JndiLookup class must be
removed:
https://web.archive.org/web/20211217085954/https://logging.apache.org/log4j/2.x/security.html
2021-12-17 15:55:13 -08:00
pennae
64bbe28843
nixos/unifi: rename openPorts to openFirewall
...
openFirewall is the much more common name for an option with this
effect. since the default was `true` all along, renaming it doesn't hurt
much and only improves consistency with other modules.
2021-12-17 21:30:52 +01:00
pennae
2000a1edcd
nixos/unifi: add deprecation warning for openPorts
...
modules are discouraged from opening ports in the firewall unless
explicitly told to do so. add a deprecation notice for this in unifi.
2021-12-17 21:30:52 +01:00
Franz Pletz
0cb8669638
dhcpcd: use dhcpcd as privsep user
2021-12-17 19:23:00 +01:00
Graham Christensen
06edb74413
Merge pull request #148785 from pennae/more-option-doc-staticizing
...
treewide: more defaultText for options
2021-12-17 11:14:08 -05:00
Martin Weinelt
37527494b6
Merge pull request #150329 from zhaofengli/unifi-6.5.54
2021-12-12 14:10:10 +01:00
Zhaofeng Li
e992604bf0
nixos/unifi: Apply log4j2 mitigation
2021-12-12 01:48:58 -08:00
Pascal Bach
51e80b4ded
Merge pull request #149723 from pingiun/patch-5
...
eternal-terminal: remove syslog.target from service
2021-12-11 22:45:22 +01:00
Pascal Bach
98a81a3152
Merge pull request #149733 from lunik1/adguard-syslog
...
nixos/adguardhome: remove syslog.target from service
2021-12-11 22:45:08 +01:00
Ryan Mulligan
c84ba61d73
Merge pull request #149860 from 1000teslas/xrdp-conf
...
nixos/xrdp: add confDir option
2021-12-11 10:45:53 -08:00
Lara
c2b79874a7
nixos/jitsi-videobridge: Mitigate CVE-2021-44228 ( #150021 )
...
This commit mitigates a remote code execution vulnerability in the log4j
library.
2021-12-10 11:16:20 +01:00
Kevin Tran
1906561f8d
Update nixos/modules/services/networking/xrdp.nix
...
Co-authored-by: Ryan Mulligan <ryan@ryantm.com>
2021-12-10 09:08:45 +11:00
1000teslas
9c478c1995
nixos/xrdp: add confDir option
2021-12-10 00:56:21 +11:00
pennae
e67a646a92
treewide: add defaultText to remaining options
...
these are mostly options that use alias bindings, bindings to constants,
or bindings to calculated values.
2021-12-09 01:42:24 +01:00
pennae
2d564521c0
treewide: add literalDocBook text to options with complex defaults
...
some options have default that are best described in prose, such as
defaults that depend on the system stateVersion, defaults that are
derivations specific to the surrounding context, or those where the
expression is much longer and harder to understand than a simple text
snippet.
2021-12-09 01:38:24 +01:00
pennae
b9950385e5
treewide: make option examples constant
...
escape interpolations in examples, or replace them where they are not
useful.
2021-12-09 01:38:24 +01:00
pennae
e72435e612
treewide: make option descriptions constants
...
escape interpolations in descriptions where possible, replace them with
sufficiently descriptive text elsewhere. also expand cfg.* paths in
descriptions.
2021-12-09 01:21:04 +01:00
pennae
ed673a69db
treewide: add defaultText for options with simple cfg.* expression defaults
...
adds defaultText for options with defaults that use only literals, full config.*
paths, and the cfg shortcut binding.
2021-12-09 01:14:16 +01:00
pennae
e24a8775a8
treewide: set defaultText for options using simple path defaults
...
adds defaultText for all options that set their default to a path expression
using the ubiquitous `cfg` shortcut bindings.
2021-12-09 01:12:13 +01:00
lunik1
1f0bbdb6fc
nixos/adguardhome: remove syslog.target from service
2021-12-08 22:18:25 +00:00
Jelle Besseling
f226901f7f
eternal-terminal: remove syslog.target from service
2021-12-08 22:48:20 +01:00
Bjørn Forsman
8eb814e964
Revert "nixos/ddclient: fix permission for ddclient.conf ( #148179 )"
...
This reverts commit 6af3d13bec
.
Reported by @arcnmx
(https://github.com/NixOS/nixpkgs/pull/148179#issuecomment-987197656 ):
Does this not completely break the service? It doesn't change the
owner to the same as the ddclient server (which is somewhat difficult
due to it being a DynamicUser), so this now makes the service
completely unusable because the config is only readable by its owner,
root:
ddclient[871397]: WARNING: file /run/ddclient/ddclient.conf: Cannot open file '/run/ddclient/ddclient.conf'. (Permission denied)
Given that the RuntimeDirectory was only readable by the ddclient
service, the warning this PR fixes was spurious and not indicative of
an actual information leak. I'm not sure of what a quick fix would be
due to DynamicUser, but would at least request a revert of this so the
service can work again?
2021-12-07 19:44:20 +01:00
Janne Heß
fd6a2f3279
Merge pull request #149280 from netixx/fix-freeradius
...
freeradius: fix radius user
2021-12-07 19:35:38 +01:00
Finn Behrens
673ad7eb36
nixos/pleroma: create cookie if not existing ( #149368 )
2021-12-07 17:32:55 +01:00
Netix (Espinet François)
9d7ce57da5
freeradius: fix radius user
...
We now must choose either system or normal user when creating a user
2021-12-07 08:51:57 +01:00
Robert Hensing
862d167f17
Merge pull request #147441 from pennae/option-doc-staticizing
...
nixos/*: add trivial defaultText to options where applicable
2021-12-06 01:35:38 +01:00
Martin Weinelt
d94cec6ead
Merge pull request #148543 from mweinelt/knot-hardening
2021-12-05 02:44:28 +01:00
Sean Heath
6af3d13bec
nixos/ddclient: fix permission for ddclient.conf ( #148179 )
2021-12-05 02:07:42 +01:00
Martin Weinelt
67f102d8d8
nixos/knot: update systemd hardening
2021-12-04 16:53:31 +01:00
Felix Schröter
d6a4500f88
nixos/ddclient: support all special characters in password
2021-12-04 16:28:31 +01:00
Niklas Hambüchen
6c9f46d063
Merge pull request #148389 from GTrunSec/consul
...
nixos/consul: update deprecated setting
2021-12-03 21:53:10 +01:00
Jörg Thalheim
99c916dd8e
Merge pull request #148201 from Artturin/nixservesecret
...
nix-serve: fix NIX_SECRET_KEY_FILE
2021-12-03 17:50:27 +00:00
GTrunSec
8e92c6c510
nixos/consul: update deprecated webUi
2021-12-03 09:46:24 -08:00
Maciej Krüger
aac7065c8d
Merge pull request #148108 from mkg20001/lxdimageserver
2021-12-03 16:06:21 +01:00
kyren
c23851c47e
Fix shairport-sync module to create and set an explicit group
2021-12-03 03:16:03 -05:00
pennae
2512455639
nixos/*: add trivial defaultText for options with simple defaults
2021-12-02 22:35:04 +01:00