Maciej Krüger
3f062397a5
x2goserver: fix rename whole module
2021-06-11 09:07:23 +02:00
Maciej Krüger
6dbeea0b40
nixos/x2goserver: put into networking, like xrdp
2021-06-11 08:13:49 +02:00
Maciej Krüger
03071fd5e3
nixos/xrdp: add openFirewall option
2021-06-11 08:13:48 +02:00
Milan Pässler
55cd291bbd
pleroma-otp: remove
2021-06-10 22:53:00 +02:00
rnhmjoj
336130a90f
nixos/gale: remove
...
This should have been removed along the package in 3f7d959
.
2021-06-10 02:33:10 +02:00
Kevin Cox
af51d70857
nixos/networkmanager: Add connectionConfig. ( #118308 )
...
Adds the `networking.networkmanager.connectionConfig` option which allows setting arbitrary settings inside the `[connection]` section.
This also reworked the underlying representation significantly to be less string-pasting and more semantic. In a future step it probably makes sense to provide raw access to other sections to users rather than replying on `extraConfig`. However I decided to defer this primarily because ordering of sections can matter. (Although IIUC this is only true for different `[connection]` sections). I think in the future we could expose an object where users can define/edit all sections and map the current configuration onto those. For now however only `[connection]` is exposed and the rest are just used internally.
2021-06-08 11:13:59 -04:00
rnhmjoj
be01320a6c
nixos/wireless: only warn for no interfaces
...
A hard failure breaks the NixOS installer, which can't possibly
know the interface names in advance.
2021-06-08 07:42:34 +02:00
rnhmjoj
eba5f5c1e5
Revert "nixos/wireless: make wireless.interfaces mandatory"
...
This reverts commit 030a521adc
.
2021-06-07 15:55:58 +02:00
Michele Guerini Rocco
78d9a75d9e
Merge pull request #125288 from rnhmjoj/wpa-race-fix
...
nixos/wireless: make wireless.interfaces mandatory
2021-06-06 10:35:15 +02:00
Maximilian Bosch
951e6988ac
Merge pull request #104543 from chkno/sftpServerExecutable
...
nixos/sshd: Option to set the sftp server executable
2021-06-04 10:16:20 +02:00
rnhmjoj
030a521adc
nixos/wireless: make wireless.interfaces mandatory
...
This is the only way to solve issue #101963 , for now.
2021-06-01 23:19:40 +02:00
Niklas Hambüchen
d344dccf3d
nixos/wireguard: Remove .path systemd unit for privkey. Fixes #123203
...
As per `man systemd.path`:
> When a service unit triggered by a path unit terminates
> (regardless whether it exited successfully or failed),
> monitored paths are checked immediately again,
> **and the service accordingly restarted instantly**.
Thus the existence of the path unit made it impossible to stop the
wireguard service using e.g.
systemctl stop wireguard-wg0.service
Systemd path units are not intended for program inputs such
as private key files.
This commit simply removes this usage; the private key is still
generated by the `generateKeyServiceUnit`.
2021-05-28 17:44:19 -07:00
Martin Weinelt
fcd6d0bc14
Merge pull request #124263 from Lassulus/solanum3
...
solanum: remove obsolete BANDB settings/patches
2021-05-25 20:51:32 +02:00
Sandro Jäckel
140828ce38
nixos/kresd: tell resolveconf to use local resolver
2021-05-25 16:37:00 +02:00
Niklas Hambüchen
83a8acc392
Merge pull request #121331 from nh2/wireguard-dynamicEndpointRefreshSeconds
...
nixos/wireguard: Add `dynamicEndpointRefreshSeconds` option
2021-05-24 21:49:05 +02:00
lassulus
8eb5701aaf
solanum: remove obsolete BANDB settings/patches
2021-05-24 15:49:57 +02:00
Martin Weinelt
71fb79ee6b
Merge pull request #123828 from Lassulus/solanum2
...
nixos/solanum: init
2021-05-21 23:23:01 +02:00
lassulus
48c16e48aa
nixos/solanum: init
2021-05-21 23:06:38 +02:00
eyJhb
6000f420e8
nixos/znc: fixed chown not working after hardening ( #123883 )
2021-05-21 19:07:53 +02:00
ajs124
c455f3ccaf
Merge pull request #123084 from Yarny0/hylafax
...
hylafaxplus & nixos/hylafax: small improvements
2021-05-21 14:20:57 +02:00
Jonas Chevalier
30c021fa15
Merge pull request #123744 from hercules-ci/init-ghostunnel
...
ghostunnel: init
2021-05-20 20:58:41 +02:00
Robert Hensing
dc9cb63de4
nixos/ghostunnel: init
2021-05-20 10:41:52 +02:00
Paul Schyska
69202853ea
nixos/nsd: make nsd-checkconf work when configuration contains keys
2021-05-19 18:21:10 +02:00
Michele Guerini Rocco
376eabdac3
Merge pull request #123254 from rnhmjoj/ipsec
...
libreswan: 3.2 -> 4.4
2021-05-19 13:36:04 +02:00
Maciej Krüger
7458dcd956
Merge pull request #75242 from mkg20001/cjdns-fix
...
services.cjdns: add missing, optional login & peerName attribute
2021-05-18 18:22:29 +02:00
Robert Schütz
d189df235a
Merge pull request #122241 from dotlambda/znc-harden
...
nixos/znc: harden systemd unit
2021-05-18 17:44:14 +02:00
Maciej Krüger
7409f9bab3
services.cjdns: add missing, optional login & peerName attribute
2021-05-18 17:39:04 +02:00
rnhmjoj
1a4db01c84
nixos/libreswan: update for version 4.x
...
- Use upstream unit files
- Remove deprecated config options
- Add option to disable redirects
- Add option to configure policies
2021-05-18 08:13:36 +02:00
Jörg Thalheim
b900661f6e
Merge pull request #122825 from Izorkin/update-duplicates-systemcallfilters
...
treewide: remove duplicates SystemCallFilters
2021-05-17 12:06:06 +01:00
Sandro
700942d2a5
Merge pull request #121119 from SuperSandro2000/remove-gnidorah
...
treewide: remove gnidorah
2021-05-17 02:42:24 +02:00
Niklas Hambüchen
357cf46c8d
wireguard module: Add dynamicEndpointRefreshSeconds
option.
...
See for an intro:
https://wiki.archlinux.org/index.php/WireGuard#Endpoint_with_changing_IP
2021-05-16 20:11:51 +02:00
Yarny0
c2af1ff281
nixos/hylafax: enable ProtectKernelLogs
for most services
...
Also document that `ProtectClock` blocks access to serial line.
I couldn't found out why this is the case,
but faxgetty complains about the device file
not being accessible with `ProtectClock=true`.
2021-05-14 22:55:50 +02:00
Robert Schütz
e611d663f4
Merge pull request #120440 from dotlambda/radicale-settings
...
nixos/radicale: add settings option
2021-05-14 15:37:26 +02:00
Yarny0
4415846d5c
nixos/hylafax: use runtimeShell
where possible
...
According to
https://github.com/NixOS/nixpkgs/pull/84556
this effort helps with cross-compilation.
This commit also renames a substituted variable `hylafax`
to `hylafaxplus` to permit substitution with `inherit`.
2021-05-14 05:42:18 +02:00
Yarny0
89df33f882
nixos/hylafax: replace a nested expression with lib.pipe
...
This avoids a tripple-nested function call,
and it looks slightly simpler (at least to me).
2021-05-14 05:42:18 +02:00
Yarny0
449647daf5
nixos/hylafax: use lib.types.ints.positive
...
I haven't realized earlier that there is
already an option type for postive integers.
2021-05-14 05:42:17 +02:00
Izorkin
feebe402f5
treewide: remove duplicates SystemCallFilters
2021-05-13 15:44:56 +03:00
Sandro
f0bb4f066a
Merge pull request #95050 from paumr/bind-fmt
2021-05-10 19:06:00 +02:00
Michele Guerini Rocco
d0cbcce8d4
Merge pull request #121395 from bjornfor/nixos-wpa-supplicant
...
nixos/wpa_supplicant: prefer 'install' over 'touch/chmod/mkdir/chgrp'
2021-05-10 08:16:39 +02:00
paumr
5390d4b946
nixos/bind: formatted with nixpkgs-fmt
2021-05-08 23:13:58 +02:00
Robert Schütz
314a64a026
nixos/znc: fix example
2021-05-08 22:54:19 +02:00
Robert Schütz
5986f233a6
nixos/znc: remove trailing slash from dataDir
2021-05-08 22:54:19 +02:00
Robert Schütz
4400ee83ec
nixos/znc: harden systemd unit
2021-05-08 22:54:15 +02:00
Robert Hensing
4433ba90aa
Merge pull request #121927 from rissson/nixos-unbound-fix-top-level-include
...
nixos/unbound: allow list of strings in top-level settings option type
2021-05-08 22:00:57 +02:00
Marc 'risson' Schmitt
0340cd2abe
nixos/unbound: allow list of strings in top-level settings option type
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2021-05-08 19:55:17 +02:00
Aaron Andersen
9254b82706
Merge pull request #121746 from j0hax/monero-options
...
nixos/monero: add dataDir option
2021-05-08 11:43:49 -04:00
Gemini Lasswell
28f51d7757
nixos/yggdrasil: set directory permissions before writing keys
...
Remove the opportunity for someone to read the keys in between when
they are written and when the chmod is done. Addresses #121293 .
2021-05-08 09:49:19 +02:00
Johannes Arnold
c0853b6e2c
nixos/monero: use isSystemUser = true
2021-05-08 02:13:25 +02:00
Maximilian Bosch
a50b9e6c23
Merge pull request #113716 from Ma27/wpa_multiple
...
wpa_supplicant: allow both imperative and declarative networks
2021-05-06 11:01:35 +02:00
Johannes Arnold
ff65166f44
nixos/monero: fix typo
2021-05-04 21:57:21 +00:00