nixpkgs/nixos/modules/services/web-apps
Felix Singer 3d30811d4e nixos/gerrit: Apply initial hardening using the systemd unit
These options are a good start for sandboxing the service. It's planned
to set `ProtectSystem` to `strict` instead of `full`, but that requires
specific directories to be configured as writable. It's also planned to
filter system calls. However, that requires more testing but it
shouldn't prevent us from applying these options for now and add others
later.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-10 07:12:28 +02:00
..
atlassian nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
icingaweb2 nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
kasmweb kasmweb: 1.12.0 -> 1.15.0 (#246777) 2024-08-29 13:03:51 +02:00
akkoma.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
akkoma.nix nixos/akkoma: unpin ffmpeg_5 2024-07-14 08:34:23 +01:00
alps.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
anuko-time-tracker.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
artalk.nix nixos/artalk: init module 2024-05-18 02:15:33 +08:00
audiobookshelf.nix treewide: fix mkEnableOption usage 2024-06-14 02:41:42 -04:00
bluemap.nix nixos/bluemap: move to web-apps 2024-09-29 21:40:39 +02:00
bookstack.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
c2fmzq-server.md treewide: Mark Nix blocks in markdown as Nix 2024-03-28 09:28:12 +01:00
c2fmzq-server.nix nixos: fix remaining services for network-online dep fix 2024-01-19 00:11:34 -08:00
calibre-web.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
castopod.md nixos/castopod: fix startup, displaying images, uploads up to 500 MiB 2024-04-01 19:16:25 +02:00
castopod.nix castopod: remove misuzu from maintainers 2024-04-22 19:19:48 +03:00
changedetection-io.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
chatgpt-retrieval-plugin.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
cloudlog.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
code-server.nix treewide: replace mkPackageOptionMD with mkPackageOption 2024-06-26 23:05:42 -04:00
coder.nix nixos/coder: sync maintainers to coder package 2024-04-29 21:11:23 -04:00
collabora-online.nix nixos/collabora-online: init 2024-09-14 21:24:30 +00:00
commafeed.nix nixos/commafeed: init module 2024-04-26 17:19:33 +02:00
convos.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
crabfit.nix nixos/crabfit: init 2024-04-13 18:51:02 +02:00
cryptpad.nix nixos/cryptpad: harden service 2024-07-24 16:17:32 +09:00
davis.md nixos/davis: init 2024-04-01 12:55:29 +02:00
davis.nix nixos/davis: fix nginx conf's well-known redirect 2024-09-19 12:03:51 +02:00
dependency-track.nix nixos/dependency-track: init module 2024-09-22 16:38:45 +02:00
dex.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
discourse.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
discourse.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
documize.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
dokuwiki.nix nixos/dokuwiki: factor out toPhpString 2024-09-07 15:30:54 +01:00
dolibarr.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
eintopf.nix nixos/eintopf: init 2024-07-05 13:12:35 +02:00
engelsystem.nix nixos/engelsystem: refactor option setup 2024-08-22 19:50:17 +02:00
ethercalc.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
filesender.md nixos/filesender: init module 2024-05-22 08:37:48 +03:00
filesender.nix nixos/filesender: init module 2024-05-22 08:37:48 +03:00
firefly-iii-data-importer.nix nixos/firefly-iii-data-importer: init 2024-08-28 08:29:32 +02:00
firefly-iii.nix nixos/firefly-iii: enhance provisioning service 2024-06-20 12:16:48 +02:00
flarum.nix flarum: fix installation and migration logic 2024-09-12 16:14:41 +08:00
fluidd.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
freshrss.nix nixos/freshrss: improve description for virtualHost 2024-08-28 10:25:10 +02:00
galene.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
gancio.nix nixos/gancio: set default value for settings.baseurl 2024-09-10 13:13:32 +02:00
gerrit.nix nixos/gerrit: Apply initial hardening using the systemd unit 2024-10-10 07:12:28 +02:00
glance.md nixos/glance: init module 2024-07-08 13:14:09 +02:00
glance.nix nixos/glance: init module 2024-07-08 13:14:09 +02:00
goatcounter.nix nixos/goatcounter: init 2024-07-24 10:17:44 +05:30
gotify-server.nix nixos/gotify-server: add environment and environmentFiles options 2024-07-30 17:38:00 -04:00
gotosocial.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
gotosocial.nix gotosocial: remove misuzu from maintainers 2024-04-22 19:19:01 +03:00
grocy.md treewide: Mark Nix blocks in markdown as Nix 2024-03-28 09:28:12 +01:00
grocy.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
guacamole-client.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
guacamole-server.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
hatsu.md nixos/hatsu: init module 2024-10-01 00:33:38 +08:00
hatsu.nix nixos/hatsu: init module 2024-10-01 00:33:38 +08:00
healthchecks.nix nixos/healthchecks: add settingsFile option 2024-06-03 08:56:52 -05:00
hedgedoc.nix hedgedoc: correct typo in deprecation notice 2024-09-19 11:05:05 -07:00
hledger-web.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
homebox.nix homebox: update URLs in documentation 2024-09-06 19:34:15 +02:00
honk.md nixos/modules/honk: init 2023-08-27 23:43:40 +02:00
honk.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
ifm.nix ifm-web: init at 4.0.2 2024-08-20 10:42:02 +02:00
immich.nix nixos/immich: add option database.port (#345094) 2024-09-28 18:01:08 +02:00
invidious.nix nixos/invidious: add options for configuring inv-sig-helper 2024-09-12 09:08:02 +02:00
invoiceplane.nix nixos/invoiceplane: Ensure patching index.php 2024-06-17 20:48:21 +02:00
isso.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
jirafeau.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
jitsi-meet.md jitsi-meet: Add option to disable Prosody services not used by Jitsi Meet 2024-09-30 18:19:34 +02:00
jitsi-meet.nix jitsi-meet: Add option to disable Prosody services not used by Jitsi Meet 2024-09-30 18:19:34 +02:00
kavita.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
keycloak.md nixos/keycloak: update options for release 25.0.0 2024-06-22 10:23:09 -04:00
keycloak.nix nixos/keycloak: make initialAdminPassword optional 2024-10-05 08:37:41 -04:00
komga.nix nixos/komga: use lib.getExe 2024-03-02 13:56:20 +13:00
lanraragi.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
lemmy.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
lemmy.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
limesurvey.nix nixos/limesurvey: drop default encryption key and nonce 2024-06-28 00:34:00 +02:00
mainsail.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
mastodon.nix nixos/mastodon: use correct postgresql package 2024-08-19 11:06:57 +02:00
matomo.md
matomo.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
mattermost.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
mealie.nix fix: replace relative paths in sources with nix store paths 2024-08-10 16:23:27 +02:00
mediawiki.nix nixos/mediawiki: add resetUserEmail script 2024-08-04 22:03:59 +02:00
meme-bingo-web.nix nixos/meme-bingo-web: fixed documentation, service description and did further hardening 2024-08-06 03:14:22 +02:00
microbin.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
miniflux.nix nixos/miniflux: make admin provisioning optional 2024-08-13 18:56:16 -04:00
misskey.nix nixos/misskey: init 2024-08-06 12:24:15 +02:00
mobilizon.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
monica.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
moodle.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
movim.nix movim service: updates for 0.26 2024-07-31 14:12:14 +07:00
netbox.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
nextcloud-notify_push.nix nixos/nextcloud-notify_push: use Type=notify 2024-06-02 23:19:07 +02:00
nextcloud.md nextcloud30: init at 30.0.0 2024-10-01 12:48:45 +02:00
nextcloud.nix treewide: \xc2\xa0 -> 2024-10-02 15:33:06 +02:00
nextjs-ollama-llm-ui.nix nixos/nextjs-ollama-llm-ui: fix for respecting ollamaUrl config option 2024-06-12 21:24:29 -06:00
nexus.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
nifi.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
node-red.nix nodePackages.npm: drop (#346536) 2024-10-09 12:01:42 -07:00
ocis.md nixos/ocis: init at 5.0.0 2024-04-03 00:53:24 +05:30
ocis.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
onlyoffice.nix onlyoffice: Remove top-level with lib; 2024-07-10 10:42:29 +02:00
openvscode-server.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
openwebrx.nix openwebrx: s/alsaUtils/alsa-utils/ 2024-10-03 23:53:56 +02:00
outline.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
peering-manager.nix nixos/peering-manager: add oidc support 2024-06-26 07:45:18 +02:00
peertube.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
pgpkeyserver-lite.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
photoprism.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
phylactery.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
pict-rs.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
pict-rs.nix pict-rs_0_3: drop 2024-08-22 01:54:09 +01:00
pingvin-share.md nixos/pingvin-share: init at 0.29.0 2024-08-04 01:18:03 +02:00
pingvin-share.nix nixos/pingvin-share: init at 0.29.0 2024-08-04 01:18:03 +02:00
pixelfed.nix treewide: \xc2\xa0 -> 2024-10-02 15:33:06 +02:00
plantuml-server.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
plausible.md treewide: Mark Nix blocks in markdown as Nix 2024-03-28 09:28:12 +01:00
plausible.nix nixos/outline: add cyberus team as maintainer 2024-07-30 12:37:45 +02:00
powerdns-admin.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
pretalx.nix nixos/pretalx: enable log rotation 2024-09-23 16:58:52 +02:00
pretix.nix nixos/pretix: enable log rotation 2024-09-23 16:57:31 +02:00
privatebin.nix nixos/privatebin: init 2024-09-29 23:02:19 +05:30
prosody-filer.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
rimgo.nix rimgo: add module 2023-09-29 08:59:59 +02:00
rss-bridge.nix rss-bridge: Remove pkg patch, adapt nixos service 2024-10-04 14:58:15 +02:00
rutorrent.nix fix exposeInsecureRPC2mount rtorrent group 2024-07-22 01:11:07 +02:00
screego.nix nixos/screego: init module 2024-08-01 10:51:38 +02:00
selfoss.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
sftpgo.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
shiori.nix nixos/shiori: fix databaseUrl example 2024-06-30 13:41:38 +02:00
silverbullet.nix treewide: replace mkPackageOptionMD with mkPackageOption 2024-06-26 23:05:42 -04:00
simplesamlphp.nix nixos/simplesamlphp: init module 2024-05-21 11:47:39 +03:00
slskd.nix treewide: replace mkPackageOptionMD with mkPackageOption 2024-06-26 23:05:42 -04:00
snipe-it.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
sogo.nix nixos/sogo: prefer 'install' over 'chmod'/'chown' 2024-07-08 22:41:47 +02:00
stirling-pdf.nix nixos/stirling-pdf: add missing dependency ghostscript 2024-09-25 01:01:33 +00:00
suwayomi-server.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
suwayomi-server.nix treewide: replace mkPackageOptionMD with mkPackageOption 2024-06-26 23:05:42 -04:00
trilium.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
tt-rss.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
vikunja.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
wakapi.nix nixos/wakapi: init module 2024-08-19 17:16:01 +01:00
weblate.nix nixos/weblate: add borgbackup to path 2024-09-04 12:54:31 +02:00
whitebophir.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
wiki-js.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
windmill.nix nixos/windmill: add database.url option and defaults 2024-09-14 00:36:55 +03:00
wordpress.nix wordpressPackages: update packages, add ru_RU lang, make twentytwentyfour default 2024-09-29 23:09:33 +03:00
writefreely.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
your_spotify.nix nixos/your_spotify: init 2024-05-13 22:10:13 +02:00
youtrack.md nixos/youtrack: rebuild module for 2023.x support 2024-02-01 13:36:13 +01:00
youtrack.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
zabbix.nix nixos/zabbixWeb: format 2024-07-17 22:33:47 +02:00
zitadel.nix nixos/zitadel: Drop Sorixelle as maintainer 2024-06-21 16:11:10 +02:00