Lucas Savva
514a0b6d8a
nixos/acme: Fix bash issue, enable debug
...
I found a logical error in the bash script, but during
debugging I enabled command echoing and realised it
would be a good idea to have it enabled all the time for
ease of bug reporting.
2021-01-12 19:11:52 +00:00
Lucas Savva
5b4f9c4244
nixos/acme: Set up webroot as non-root user
2021-01-09 19:37:03 +00:00
Lucas Savva
a01df7dc46
nixos/acme: Incorporate review suggestions
2021-01-09 19:15:03 +00:00
Lucas Savva
92a3a37153
nixos/acme: Remove all systemd-tmpfiles usage
...
- Added an ExecPostStart to acme-$cert.service when webroot is defined to create the acme-challenge
directory and fix required permissions. Lego always tries to create .well-known and acme-challenge,
thus if any permissions in that tree are wrong it will crash and break cert renewal.
- acme-fixperms now configured with acme User and Group, however the script still runs as root. This
ensures the StateDirectories are owned by the acme user.
- Switched to list syntax for systemd options where multiple values are specified.
2020-12-29 15:01:08 +00:00
Lucas Savva
bfe07e2179
nixos/acme: fix test config
2020-12-28 00:35:46 +00:00
Lucas Savva
e5913db0c9
nixos/acme: update documentation and release notes
...
The instructions on recreating the cert were missing --what=state.
Also added a note on ensuring the group of manual certs is correct.
2020-12-28 00:35:45 +00:00
Lucas Savva
f670e1dc23
nixos/acme: change service umask to 0023
...
Closes #106603
Some webservers (lighttpd) require that the
files they are serving are world readable. We
do our own chmods in the scripts anyway, and
lego has sensible permissions on its output
files, so this change is safe enough.
2020-12-28 00:35:20 +00:00
Lucas Savva
351065f970
nixos/acme: reduce dependency on tmpfiles
...
systemd-tmpfiles is no longer required for
most of the critical paths in the module. The
only one that remains is the webroot
acme-challenge directory since there's no
other good place for this to live and forcing
users to do the right thing alone will only
create more issues.
2020-12-28 00:35:20 +00:00
Lucas Savva
85769a8cd8
nixos/acme: prevent mass account creation
...
Closes #106565
When generating multiple certificates which all
share the same server + email, lego will attempt
to create an account multiple times. By adding an
account creation target certificates which share
an account will wait for one service (chosen at
config build time) to complete first.
2020-12-28 00:35:18 +00:00
Maximilian Bosch
e5e7c9b0f9
nixos/tests/loki: satisfy linter
...
Apparently, the linter used for python test-scripts just decided that
a reformat of the testscript is now necessary.
2020-12-28 00:37:13 +01:00
Maximilian Bosch
fbbe4ad559
Merge pull request #107554 from happysalada/grafana-loki-update
...
grafana-loki: 2.0.0 -> 2.1.0
2020-12-28 00:36:20 +01:00
Sandro
6c1c442040
Merge pull request #101428 from djanatyn/pkg/zalgo
...
zalgo: init at 6aa1f66
2020-12-28 00:18:39 +01:00
Maximilian Bosch
c4f4f74f89
Merge pull request #107762 from WilliButz/update/hedgedoc/1.7.1
...
hedgedoc: 1.7.0 -> 1.7.1 (fixes CVE-2020-26286 and CVE-2020-26287)
2020-12-28 00:14:20 +01:00
Sandro
cdfbfec2da
Merge pull request #98006 from OPNA2608/package-sc68
...
sc68: init at unstable-2020-05-18
2020-12-28 00:03:33 +01:00
Maximilian Bosch
ec4a68725f
Merge pull request #107763 from asbachb/update/roundcube
...
roundcube: 1.4.9 -> 1.4.10
2020-12-28 00:00:50 +01:00
Peter Hoeg
83cbd45c1e
neochat: clean up
2020-12-28 06:36:58 +08:00
Peter Hoeg
94a116156a
kquickimageedit: 0.1 -> 0.1.2 and fix up casing
2020-12-28 06:36:58 +08:00
Peter Hoeg
df6ecfc46e
spectral: drop it in favour of neochat
2020-12-28 06:36:58 +08:00
Sandro
a1e8f892a6
Merge pull request #101431 from djanatyn/pkg/rtss
...
rtss: init at 0.6.1
2020-12-27 23:31:57 +01:00
Doron Behar
7c304d037f
Merge pull request #104848 from hjones2199/kstars-up
...
kstars: 3.4.3 -> 3.5.0
2020-12-28 00:16:21 +02:00
Doron Behar
5520049b39
Merge pull request #94300 from r-ryantm/auto-update/qtstyleplugin-kvantum-qt4
...
qtstyleplugin-kvantum-qt4: 0.15.3 -> 0.16.0
2020-12-28 00:09:45 +02:00
Doron Behar
ee0a3c3daf
Merge pull request #99130 from tbenst/opencv_master
...
opencv: allow other blas/lapack
2020-12-28 00:06:43 +02:00
WilliButz
484d851cb9
hedgedoc: 1.7.0 -> 1.7.1 (fixes CVE-2020-26286 and CVE-2020-26287)
...
https://github.com/hedgedoc/hedgedoc/releases/tag/1.7.1
https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-wcr3-xhv7-8gxc
https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-g6w6-7xf9-m95p
2020-12-27 23:06:21 +01:00
Benjamin Asbach
def9669336
roundcube: 1.4.9 -> 1.4.10
2020-12-27 23:04:29 +01:00
Doron Behar
6f8710ae1e
Merge pull request #107545 from wucke13/mission-planner
...
mission-planner: init at version 1.3.74
2020-12-28 00:02:53 +02:00
Doron Behar
b65196ce11
Merge pull request #105419 from IvarWithoutBones/oatpp-init-1.2.0
...
oatpp: init at 1.2.0
2020-12-27 23:56:07 +02:00
Doron Behar
a56f793ccc
Merge pull request #100980 from devhell/patch-mp3gain-cve-2019-18359
...
mp3gain: Fix vulnerabilities
2020-12-27 23:54:10 +02:00
Florian Klink
b19ae92d50
Merge pull request #107294 from flokli/displaylink-simplify
...
displaylink: manually activate dlm.service
2020-12-27 22:30:34 +01:00
Hunter Jones
7d42517d83
kstars: 3.4.3 -> 3.5.0
2020-12-27 14:00:39 -06:00
Hunter Jones
17646687c6
stellarsolver: init at 1.5
2020-12-27 14:00:39 -06:00
Sandro
05140d25dc
Merge pull request #105462 from ruuda/mypy-mypyc
...
python3Packages.mypy: compile with mypyc
2020-12-27 20:34:30 +01:00
Pavol Rusnak
b0121fcb03
trezord: TREZOR -> Trezor
2020-12-27 19:48:09 +01:00
Sandro
0ff6bc488d
Merge pull request #107735 from divanorama/ledger-live-desktop-2.19.0
...
ledger-live-desktop: 2.18.0 -> 2.19.0
2020-12-27 19:46:05 +01:00
Christoph Neidahl
b8f2c6fe42
palemoon: 28.16.0 -> 28.17.0 ( #107329 )
2020-12-27 19:07:57 +01:00
Florian Klink
dcbe3b4779
Merge pull request #107637 from drewrisinger/dr-pr-update-raspberrypi
...
raspberrypi: update firmware, linux, tools to latest (~2020-12-01)
2020-12-27 18:54:20 +01:00
Pavol Rusnak
4f716a4f3a
Merge pull request #107739 from freezeboy/update-clac
...
clac: 0.0.0.20170503 -> 0.3.3
2020-12-27 18:52:40 +01:00
Pavol Rusnak
e3d6218437
Merge pull request #107722 from freezeboy/update-banner
...
banner: 1.3.4 -> 1.3.5
2020-12-27 18:50:22 +01:00
Pavol Rusnak
877e89cbc2
Merge pull request #107719 from freezeboy/update-barman
...
barman: 2.11 -> 2.12
2020-12-27 18:48:56 +01:00
Pavol Rusnak
3babbb4000
Merge pull request #107737 from fabaff/gau
...
gau: init at 1.1.0
2020-12-27 18:46:01 +01:00
freezeboy
e33b84db0c
clac: 0.0.0.20170503 -> 0.3.3
2020-12-27 18:40:08 +01:00
Pavol Rusnak
74854fa3b9
Merge pull request #107164 from prusnak/electrum
...
electrum: 4.0.7 -> 4.0.9
2020-12-27 18:31:32 +01:00
Sandro
4ec809a7f0
Merge pull request #107731 from freezeboy/update-bcal
2020-12-27 18:10:03 +01:00
Fabian Affolter
ccffd3af9d
gau: init at 1.1.0
2020-12-27 18:02:28 +01:00
freezeboy
3c89e637e8
bcal: 1.9 -> 2.2
2020-12-27 17:52:28 +01:00
Dmitry Ivankov
d68dcf97d7
ledger-live-desktop: 2.18.0 -> 2.19.0
...
https://github.com/LedgerHQ/ledger-live-desktop/releases/tag/v2.19.0
2020-12-27 17:48:36 +01:00
Sandro
534a3330a6
Merge pull request #107729 from freezeboy/update-beep
...
beep: 1.3 -> 1.4.9
2020-12-27 17:11:04 +01:00
Sandro
4c7b05e26d
Merge pull request #105733 from arnarg/tmux-jump
...
tmuxPlugins.jump: fix ruby dependency
2020-12-27 17:02:03 +01:00
Florian Klink
5deb8afdd1
rpiboot-unstable: enable build on x86_64-linux
...
This tool can run perfectly fine on a x86_64-linux workstation - it's
primarily meant to boot Raspberry Pi CM/CM3/Zero devices, not to run on
them.
2020-12-27 17:01:03 +01:00
Drew Risinger
4fe8a8b633
rpi-eeprom: unstable-2020-10-05 -> 2020-12-11
2020-12-27 17:01:02 +01:00
Drew Risinger
2e83f19be2
rpi-eeprom: raspberrypi-tools -> libraspberrypi
2020-12-27 17:01:02 +01:00