3
0
Fork 0
forked from mirrors/nixpkgs
Commit graph

341727 commits

Author SHA1 Message Date
Silvan Mosberger 2dcc3daadf
nixos/acme: Clean up default handling 2021-12-26 16:49:58 +00:00
Lucas Savva 41fb8d71ab
nixos/acme: Add useRoot option 2021-12-26 16:49:57 +00:00
Lucas Savva 8d01b0862d
nixos/acme: Update documentation
- Added defaultText for all inheritable options.
- Add docs on using new defaults option to configure
  DNS validation for all domains.
- Update DNS docs to show using a service to configure
  rfc2136 instead of manual steps.
2021-12-26 16:49:55 +00:00
Lucas Savva 07c1583309
nixos/acme: Update release notes 2021-12-26 16:49:52 +00:00
davidak fcb125441f
Merge pull request #152105 from r-ryantm/auto-update/ocenaudio
ocenaudio: 3.11.1 -> 3.11.2
2021-12-26 17:49:03 +01:00
Bernardo Meurer 795469df58
roon-server: explicitly set dontConfigure/Build 2021-12-26 13:46:30 -03:00
Lucas Savva 377c6bcefc
nixos/acme: Add defaults and inheritDefaults option
Allows configuring many default settings for certificates,
all of which can still be overridden on a per-cert basis.
Some options have been moved into .defaults from security.acme,
namely email, server, validMinDays and renewInterval. These
changes will not break existing configurations thanks to
mkChangedOptionModule.

With this, it is also now possible to configure DNS-01 with
web servers whose virtualHosts utilise enableACME. The only
requirement is you set `acmeRoot = null` for each vhost.

The test suite has been revamped to cover these additions
and also to generally make it easier to maintain. Test config
for apache and nginx has been fully standardised, and it
is now much easier to add a new web server if it follows
the same configuration patterns as those two. I have also
optimised the use of switch-to-configuration which should
speed up testing.
2021-12-26 16:44:10 +00:00
Lucas Savva a7f0001328
nixos/acme: Check for revoked certificates
Closes #129838

It is possible for the CA to revoke a cert that has not yet
expired. We must run lego to validate this before expiration,
but we must still ignore failures on unexpired certs to retain
compatibility with #85794

Also changed domainHash logic such that a renewal will only
be attempted at all if domains are unchanged, and do a full
run otherwises. Resolves #147540 but will be partially
reverted when go-acme/lego#1532 is resolved + available.
2021-12-26 16:44:09 +00:00
Lucas Savva 87403a0b07
nixos/acme: Add a human readable error on run failure
Closes NixOS/nixpkgs#108237

When a user first adds an ACME cert to their configuration,
it's likely to fail to renew due to DNS misconfig. This is
non-fatal for other services since selfsigned certs are
(usually) put in place to let dependant services start.
Tell the user about this in the logs, and exit 2 for
differentiation purposes.
2021-12-26 16:44:08 +00:00
Lucas Savva a88d846b91
nixos/acme: Remove selfsignedDeps from finished targets
selfsignedDeps is already appended to the after and wants
of a cert's renewal service, making these redundant.

You can see this if you run the following command:
systemctl list-dependencies --all --reverse acme-selfsigned-mydomain.com.service
2021-12-26 16:44:07 +00:00
Bernardo Meurer 2d18e3a33d
roon-server: 1.8-850 -> 1.8-880 2021-12-26 13:39:41 -03:00
Bernardo Meurer 52c1d49b71
Merge pull request #152058 from r-ryantm/auto-update/klipper
klipper: unstable-2021-12-02 -> unstable-2021-12-24
2021-12-26 16:31:26 +00:00
Mario Rodas 42aefef238
Merge pull request #151787 from r-ryantm/auto-update/shadowsocks-rust
shadowsocks-rust: 1.12.4 -> 1.12.5
2021-12-26 11:28:26 -05:00
Mario Rodas c2dc374df0
Merge pull request #152215 from r-ryantm/auto-update/tflint
tflint: 0.34.0 -> 0.34.1
2021-12-26 11:28:04 -05:00
Bernardo Meurer 60b29ec731
Merge pull request #151139 from TredwellGit/firmwareLinuxNonfree
firmwareLinuxNonfree: 20211027 -> 20211216
2021-12-26 16:22:25 +00:00
R. Ryantm 5df2206a4d sof-firmware: 1.9.3 -> 2.0 2021-12-26 15:07:19 +00:00
Bobby Rong fa5e153653
Merge pull request #152231 from bobby285271/vala-lint
vala-lint: unstable-2021-02-17 -> unstable-2021-11-18
2021-12-26 23:02:23 +08:00
Pavol Rusnak 3f50bcc917
Merge pull request #149912 from prusnak/python3-trezor
python3Packages.trezor: 0.12.4 -> 0.13.0
2021-12-26 15:39:53 +01:00
Philipp 806797df24
gitty: 0.3.0 -> 0.5.0 2021-12-26 15:31:50 +01:00
Pavol Rusnak 9591b406c4
Merge pull request #152224 from TredwellGit/electron
Update Electron
2021-12-26 15:28:28 +01:00
Jan Tojnar e6c3e3d394 gimp: 2.10.28 → 2.10.30
https://www.gimp.org/news/2021/12/21/gimp-2-10-30-released/
2021-12-26 15:21:20 +01:00
Jan Tojnar b072f7ec19 gegl: 0.4.32 → 0.4.34
https://gitlab.gnome.org/GNOME/gegl/-/compare/GEGL_0_4_32...GEGL_0_4_34
2021-12-26 15:16:59 +01:00
ajs124 d398a58def
Merge pull request #151661 from r-ryantm/auto-update/wrk
wrk: 4.1.0 -> 4.2.0
2021-12-26 15:09:44 +01:00
Vincent Laporte ac7bba60a2
flow: 0.166.1 → 0.168.0 2021-12-26 15:08:12 +01:00
ajs124 648f7f2a63
Merge pull request #151581 from symphorien/xapian-update-3
dovecot_fts_xapian: 1.4.14 -> 1.5.2
2021-12-26 15:06:38 +01:00
ajs124 89ab1a6425
Merge pull request #151754 from r-ryantm/auto-update/sope
sope: 5.3.0 -> 5.4.0
2021-12-26 15:00:21 +01:00
Bobby Rong 729053d2e8
vala-lint: unstable-2021-02-17 -> unstable-2021-11-18 2021-12-26 21:59:46 +08:00
sternenseemann f9b337d15e haskellPackages.minio-hs: disable ordering dependent test case 2021-12-26 14:46:00 +01:00
sternenseemann a808b2d932 haskellPackages.sdp: disable library profiling breaking the build 2021-12-26 14:12:56 +01:00
sternenseemann b07e9851b7 haskellPackages.memory-cd: work around compilation failure in tests 2021-12-26 14:12:56 +01:00
sternenseemann 803aea3d3c haskellPackages.polysemy-{resume,conc,mocks}: downgrade to unbreak
These packages are not in Stackage LTS, but depend on package in
Stackage LTS, so we need to downgrade them to keep them working.
2021-12-26 14:12:56 +01:00
sternenseemann bcf8a276d5 haskellPackages.polysemy-plugin: unbreak
polysemy-plugin has reentered Stackage LTS, so the old workaround is no
longer necessary. We do need to jailbreak it, ironically, since Stackage
LTS ignores tests (?) and polysemy-plugin's bound on doctest is too
strict.
2021-12-26 14:12:56 +01:00
sternenseemann 73d9158d70 haskellPackages.hpack-dhall: disable tests due to outdated test data 2021-12-26 14:12:55 +01:00
sternenseemann f4b07c3549 haskellPackages.aeson-quick: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann 64a14527a9 haskellPackages.xmlbf: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann b51b7162b1 haskellPackages.hschema-aeson: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann ecb3268d04 haskellPackages.dropbox: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann 2725f26574 haskellPackages.morpheus-graphql-core: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann 71e3d4dbb1 haskellPackages.aeson-deriving: disable ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann 4821b61a70 haskellPackages.json-to-haskell: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann 755fb7d17e haskellPackages.haskell-postgis: skip ordering dependent test case 2021-12-26 14:12:55 +01:00
sternenseemann 630ac9b73c haskellPackages.ema: reflect maintainer configuration update 2021-12-26 14:12:54 +01:00
Fabian Affolter 886a19da65
Merge pull request #152202 from fabaff/bump-checkov
checkov: 2.0.690 -> 2.0.692
2021-12-26 14:12:44 +01:00
ajs124 cfcbe0d16d sogo: 5.3.0 -> 5.4.0 2021-12-26 13:51:06 +01:00
TredwellGit f3a39a335f electron_16: 16.0.4 -> 16.0.5
https://github.com/electron/electron/releases/tag/v16.0.5
2021-12-26 12:29:06 +00:00
TredwellGit 760cec731e electron_15: 15.3.3 -> 15.3.4
https://github.com/electron/electron/releases/tag/v15.3.4
2021-12-26 12:28:34 +00:00
TredwellGit 6c011c17a0 electron_14: 14.2.2 -> 14.2.3
https://github.com/electron/electron/releases/tag/v14.2.3
2021-12-26 12:28:14 +00:00
Vladimír Čunát c3131d5c32
qemu: disable debug info on aarch64-linux
This is basically a partial revert of a0262a0802.
2021-12-26 12:45:05 +01:00
7c6f434c ea7b03bf80
Merge pull request #152208 from 7c6f434c/monotone-pin-boost-170
monotone: ping boost_170 to fix build
2021-12-26 11:44:08 +00:00
Bobby Rong f5dd11f444
Merge pull request #150357 from r-ryantm/auto-update/acpid
acpid: 2.0.32 -> 2.0.33
2021-12-26 19:31:20 +08:00