3
0
Fork 0
forked from mirrors/nixpkgs
Commit graph

260013 commits

Author SHA1 Message Date
Lucas Savva 514a0b6d8a nixos/acme: Fix bash issue, enable debug
I found a logical error in the bash script, but during
debugging I enabled command echoing and realised it
would be a good idea to have it enabled all the time for
ease of bug reporting.
2021-01-12 19:11:52 +00:00
Lucas Savva 5b4f9c4244 nixos/acme: Set up webroot as non-root user 2021-01-09 19:37:03 +00:00
Lucas Savva a01df7dc46 nixos/acme: Incorporate review suggestions 2021-01-09 19:15:03 +00:00
Lucas Savva 92a3a37153 nixos/acme: Remove all systemd-tmpfiles usage
- Added an ExecPostStart to acme-$cert.service when webroot is defined to create the acme-challenge
directory and fix required permissions. Lego always tries to create .well-known and acme-challenge,
thus if any permissions in that tree are wrong it will crash and break cert renewal.
- acme-fixperms now configured with acme User and Group, however the script still runs as root. This
ensures the StateDirectories are owned by the acme user.
- Switched to list syntax for systemd options where multiple values are specified.
2020-12-29 15:01:08 +00:00
Lucas Savva bfe07e2179 nixos/acme: fix test config 2020-12-28 00:35:46 +00:00
Lucas Savva e5913db0c9 nixos/acme: update documentation and release notes
The instructions on recreating the cert were missing --what=state.
Also added a note on ensuring the group of manual certs is correct.
2020-12-28 00:35:45 +00:00
Lucas Savva f670e1dc23 nixos/acme: change service umask to 0023
Closes #106603
Some webservers (lighttpd) require that the
files they are serving are world readable. We
do our own chmods in the scripts anyway, and
lego has sensible permissions on its output
files, so this change is safe enough.
2020-12-28 00:35:20 +00:00
Lucas Savva 351065f970 nixos/acme: reduce dependency on tmpfiles
systemd-tmpfiles is no longer required for
most of the critical paths in the module. The
only one that remains is the webroot
acme-challenge directory since there's no
other good place for this to live and forcing
users to do the right thing alone will only
create more issues.
2020-12-28 00:35:20 +00:00
Lucas Savva 85769a8cd8 nixos/acme: prevent mass account creation
Closes #106565
When generating multiple certificates which all
share the same server + email, lego will attempt
to create an account multiple times. By adding an
account creation target certificates which share
an account will wait for one service (chosen at
config build time) to complete first.
2020-12-28 00:35:18 +00:00
Maximilian Bosch e5e7c9b0f9
nixos/tests/loki: satisfy linter
Apparently, the linter used for python test-scripts just decided that
a reformat of the testscript is now necessary.
2020-12-28 00:37:13 +01:00
Maximilian Bosch fbbe4ad559
Merge pull request #107554 from happysalada/grafana-loki-update
grafana-loki: 2.0.0 -> 2.1.0
2020-12-28 00:36:20 +01:00
Sandro 6c1c442040
Merge pull request #101428 from djanatyn/pkg/zalgo
zalgo: init at 6aa1f66
2020-12-28 00:18:39 +01:00
Maximilian Bosch c4f4f74f89
Merge pull request #107762 from WilliButz/update/hedgedoc/1.7.1
hedgedoc: 1.7.0 -> 1.7.1 (fixes CVE-2020-26286 and CVE-2020-26287)
2020-12-28 00:14:20 +01:00
Sandro cdfbfec2da
Merge pull request #98006 from OPNA2608/package-sc68
sc68: init at unstable-2020-05-18
2020-12-28 00:03:33 +01:00
Maximilian Bosch ec4a68725f
Merge pull request #107763 from asbachb/update/roundcube
roundcube: 1.4.9 -> 1.4.10
2020-12-28 00:00:50 +01:00
Peter Hoeg 83cbd45c1e neochat: clean up 2020-12-28 06:36:58 +08:00
Peter Hoeg 94a116156a kquickimageedit: 0.1 -> 0.1.2 and fix up casing 2020-12-28 06:36:58 +08:00
Peter Hoeg df6ecfc46e spectral: drop it in favour of neochat 2020-12-28 06:36:58 +08:00
Sandro a1e8f892a6
Merge pull request #101431 from djanatyn/pkg/rtss
rtss: init at 0.6.1
2020-12-27 23:31:57 +01:00
Doron Behar 7c304d037f
Merge pull request #104848 from hjones2199/kstars-up
kstars: 3.4.3 -> 3.5.0
2020-12-28 00:16:21 +02:00
Doron Behar 5520049b39
Merge pull request #94300 from r-ryantm/auto-update/qtstyleplugin-kvantum-qt4
qtstyleplugin-kvantum-qt4: 0.15.3 -> 0.16.0
2020-12-28 00:09:45 +02:00
Doron Behar ee0a3c3daf
Merge pull request #99130 from tbenst/opencv_master
opencv: allow other blas/lapack
2020-12-28 00:06:43 +02:00
WilliButz 484d851cb9
hedgedoc: 1.7.0 -> 1.7.1 (fixes CVE-2020-26286 and CVE-2020-26287)
https://github.com/hedgedoc/hedgedoc/releases/tag/1.7.1
https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-wcr3-xhv7-8gxc
https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-g6w6-7xf9-m95p
2020-12-27 23:06:21 +01:00
Benjamin Asbach def9669336 roundcube: 1.4.9 -> 1.4.10 2020-12-27 23:04:29 +01:00
Doron Behar 6f8710ae1e
Merge pull request #107545 from wucke13/mission-planner
mission-planner: init at version 1.3.74
2020-12-28 00:02:53 +02:00
Doron Behar b65196ce11
Merge pull request #105419 from IvarWithoutBones/oatpp-init-1.2.0
oatpp: init at 1.2.0
2020-12-27 23:56:07 +02:00
Doron Behar a56f793ccc
Merge pull request #100980 from devhell/patch-mp3gain-cve-2019-18359
mp3gain: Fix vulnerabilities
2020-12-27 23:54:10 +02:00
Florian Klink b19ae92d50
Merge pull request #107294 from flokli/displaylink-simplify
displaylink: manually activate dlm.service
2020-12-27 22:30:34 +01:00
Hunter Jones 7d42517d83 kstars: 3.4.3 -> 3.5.0 2020-12-27 14:00:39 -06:00
Hunter Jones 17646687c6 stellarsolver: init at 1.5 2020-12-27 14:00:39 -06:00
Sandro 05140d25dc
Merge pull request #105462 from ruuda/mypy-mypyc
python3Packages.mypy: compile with mypyc
2020-12-27 20:34:30 +01:00
Pavol Rusnak b0121fcb03 trezord: TREZOR -> Trezor 2020-12-27 19:48:09 +01:00
Sandro 0ff6bc488d
Merge pull request #107735 from divanorama/ledger-live-desktop-2.19.0
ledger-live-desktop: 2.18.0 -> 2.19.0
2020-12-27 19:46:05 +01:00
Christoph Neidahl b8f2c6fe42
palemoon: 28.16.0 -> 28.17.0 (#107329) 2020-12-27 19:07:57 +01:00
Florian Klink dcbe3b4779
Merge pull request #107637 from drewrisinger/dr-pr-update-raspberrypi
raspberrypi: update firmware, linux, tools to latest (~2020-12-01)
2020-12-27 18:54:20 +01:00
Pavol Rusnak 4f716a4f3a
Merge pull request #107739 from freezeboy/update-clac
clac: 0.0.0.20170503 -> 0.3.3
2020-12-27 18:52:40 +01:00
Pavol Rusnak e3d6218437
Merge pull request #107722 from freezeboy/update-banner
banner: 1.3.4 -> 1.3.5
2020-12-27 18:50:22 +01:00
Pavol Rusnak 877e89cbc2
Merge pull request #107719 from freezeboy/update-barman
barman: 2.11 -> 2.12
2020-12-27 18:48:56 +01:00
Pavol Rusnak 3babbb4000
Merge pull request #107737 from fabaff/gau
gau: init at 1.1.0
2020-12-27 18:46:01 +01:00
freezeboy e33b84db0c clac: 0.0.0.20170503 -> 0.3.3 2020-12-27 18:40:08 +01:00
Pavol Rusnak 74854fa3b9
Merge pull request #107164 from prusnak/electrum
electrum: 4.0.7 -> 4.0.9
2020-12-27 18:31:32 +01:00
Sandro 4ec809a7f0
Merge pull request #107731 from freezeboy/update-bcal 2020-12-27 18:10:03 +01:00
Fabian Affolter ccffd3af9d gau: init at 1.1.0 2020-12-27 18:02:28 +01:00
freezeboy 3c89e637e8 bcal: 1.9 -> 2.2 2020-12-27 17:52:28 +01:00
Dmitry Ivankov d68dcf97d7 ledger-live-desktop: 2.18.0 -> 2.19.0
https://github.com/LedgerHQ/ledger-live-desktop/releases/tag/v2.19.0
2020-12-27 17:48:36 +01:00
Sandro 534a3330a6
Merge pull request #107729 from freezeboy/update-beep
beep: 1.3 -> 1.4.9
2020-12-27 17:11:04 +01:00
Sandro 4c7b05e26d
Merge pull request #105733 from arnarg/tmux-jump
tmuxPlugins.jump: fix ruby dependency
2020-12-27 17:02:03 +01:00
Florian Klink 5deb8afdd1 rpiboot-unstable: enable build on x86_64-linux
This tool can run perfectly fine on a x86_64-linux workstation - it's
primarily meant to boot Raspberry Pi CM/CM3/Zero devices, not to run on
them.
2020-12-27 17:01:03 +01:00
Drew Risinger 4fe8a8b633 rpi-eeprom: unstable-2020-10-05 -> 2020-12-11 2020-12-27 17:01:02 +01:00
Drew Risinger 2e83f19be2 rpi-eeprom: raspberrypi-tools -> libraspberrypi 2020-12-27 17:01:02 +01:00