nixpkgs/nixos/modules/services
Niklas Hambüchen 65a471717c plausible, nixos/plausible: Add listenAddress option.
This changes

* the plausible HTTP web server

to be listening on localhost only, explicitly.

This makes Plausible have an explicit safe default configuration,
like all other networked services in NixOS.

For background discussion, see: https://github.com/NixOS/nixpkgs/issues/130244

As per my upstream Plausible contribution
(https://github.com/plausible/analytics/pull/1190)
Plausible >= 1.5 also defaults to listening to localhost only;
nevertheless, this default should be stated explicitly in nixpkgs
for easier review and independence from upstream changes, and
a NixOS user must be able to configure the
`listenAddress`, as there are valid use cases for that.

Also, disable

* the Erlang Beam VM inter-node RPC port
* the Erlang EPMD port

because Plausible does not use them (see added comment).
This is done by setting `RELEASE_DISTRIBUTION=none`.

Thus, this commit also removes the NixOS setting `releaseCookiePath`,
because it now has no effect.
2023-11-14 10:51:16 +01:00
..
admin
amqp
audio nixos/wyoming/openwakeword: fix typo in attribute name 2023-10-31 00:42:04 +01:00
backup postgresql_11: remove 2023-10-30 10:41:16 +01:00
blockchain/ethereum erigon: add package option to override default version 2023-10-29 18:27:13 +00:00
cluster hadoop, nixos/hadoop: remove untarDir 2023-09-22 16:34:07 +05:30
computing
continuous-integration nixos/woodpecker-server: fix environmentFile example 2023-11-02 18:14:46 +01:00
databases postgresql_11: remove 2023-10-30 10:41:16 +01:00
desktops firefox: start killing all the per-extension options 2023-10-22 17:13:42 +03:00
development livebook: add systemd user service, test, and docs 2023-10-31 07:31:18 +00:00
display-managers
editors
finance odoo: 15.20230317 -> 16.20230722 2023-08-26 10:22:57 +02:00
games nixos/asf: update hardening options to match upstream 2023-10-21 13:50:05 +02:00
hardware Merge pull request #264582 from FliegendeWurst/throttled-modprobe 2023-11-04 12:27:38 +01:00
home-automation home-assistant: 2023.10.5 -> 2023.11.0 2023-11-01 22:28:12 +01:00
logging syslogng: clean up build 2023-10-18 17:51:04 +02:00
mail Merge pull request #263203 from nikstur/replace-activation 2023-10-28 10:17:15 +02:00
matrix nixos/matrix-synapse: remove opentracing options 2023-10-22 14:15:39 +02:00
misc Merge pull request #261867 from matrss/set-paperless-secret-key 2023-11-01 12:33:23 +01:00
monitoring Merge pull request #263558 from Ma27/fix-image-renderer-callback 2023-11-02 15:49:23 +01:00
network-filesystems nixos: fix bad mkEnableOption descriptions 2023-10-20 16:22:40 +01:00
networking Merge pull request #259765 from 70m6/bugfix/bitcoind-enable 2023-10-31 17:35:10 +03:00
printing
scheduling
search nixos/typesense: disable MemoryDenyWriteExecute which is needed since 0.25.1 2023-09-23 16:37:23 +02:00
security privacyidea: remove 2023-10-31 14:17:48 +01:00
system Merge pull request #263203 from nikstur/replace-activation 2023-10-28 10:17:15 +02:00
torrent nixos: fix bad mkEnableOption descriptions 2023-10-20 16:22:40 +01:00
tracing
ttys
video nixos: fix bad mkEnableOption descriptions 2023-10-20 16:22:40 +01:00
wayland
web-apps plausible, nixos/plausible: Add listenAddress option. 2023-11-14 10:51:16 +01:00
web-servers Merge pull request #263203 from nikstur/replace-activation 2023-10-28 10:17:15 +02:00
x11 nixos/x11: move extraLayouts into xkb attrset 2023-11-01 11:55:25 +01:00