Vladimír Čunát
3e387c3e00
Merge branch 'staging'
...
Darwin isn't in a perfect state, in particular its bootstrap tools won't
build which will block nixpkgs channel. But on the whole it seems
acceptable.
2016-05-13 10:14:53 +02:00
Данило Глинський (Danylo Hlynskyi)
bc2fe9f2cd
typo in authorizedKeysFiles
2016-05-12 18:01:17 +03:00
Joachim Fasting
639dcffa0b
Merge pull request #15403 from Shados/maintain-teamspeak-server
...
teamspeak-server package & module maintenance
2016-05-12 13:01:38 +02:00
Alexei Robyn
11b0972544
teamspeak-server module: Create data directory by
...
leveraging users.users.<user>.createHome instead of a preStart script.
preStart script is still required to ensure proper creation of logging
directory.
2016-05-12 20:49:17 +10:00
Domen Kožar
25e3c091a0
Revert "nixos/nat: Allow nat without an externalInterface"
...
This reverts commit 431a98b12bhttp://hydra.nixos.org/build/35538207
2016-05-12 11:04:06 +01:00
Vladimír Čunát
6c2fbfbd77
Merge branch 'master' into staging
2016-05-12 04:53:38 +02:00
Franz Pletz
431a98b12b
nixos/nat: Allow nat without an externalInterface
2016-05-12 01:52:13 +02:00
Joachim Fasting
a0e8d542c7
Merge pull request #15377 from womfoo/sniproxy
...
sniproxy: init at 0.4.0 with dependency udns: init at 0.4
2016-05-11 15:14:33 +02:00
Kranium Gikos Mendoza
356f1bdac8
sniproxy service: init
2016-05-11 13:27:28 +08:00
Joachim Fasting
e38e3dcdb6
dnscrypt-proxy service: allow user to specify their own resolver list
2016-05-10 07:08:37 +02:00
Joachim Fasting
bd448b7139
dnscrypt-proxy service: use up-to-date dnscrypt-resolvers list
...
The list of public proxies is updated now and again and it's probably a
good idea to always work from the most recent list, rather than the one
that is shipped with the release. This can be crucial in case of
resolvers that are revealed to have gone rogue or otherwise have been
compromised.
2016-05-10 07:07:58 +02:00
Vladimír Čunát
65a9fa8cdc
Merge branch 'master' into staging
2016-05-08 21:24:48 +02:00
Joachim Fasting
1d2fcde841
dnscrypt-proxy service: fix libcap output reference
...
After 7382afac40
2016-05-07 20:18:27 +02:00
Nikolay Amiantov
f7c02f8670
ejabberd service: add image thumbnailing support
2016-05-07 14:31:16 +03:00
Tuomas Tynkkynen
aadaa91379
Merge remote-tracking branch 'upstream/master' into staging
...
Conflicts:
pkgs/applications/networking/browsers/vivaldi/default.nix
pkgs/misc/emulators/wine/base.nix
2016-05-03 23:12:48 +03:00
Tobias Geerinckx-Rice
5508687ec2
Remove now useless proprietary Copy.com client and service
...
<https://techlib.barracuda.com/Copy/FAQ >
SaaS.
2016-05-01 14:38:08 +02:00
Thomas Tuegel
2875293615
nixos/networkmanager: fix syntax error
2016-04-30 12:20:06 -05:00
Tuomas Tynkkynen
4ff8f377af
Merge remote-tracking branch 'upstream/master' into staging
2016-04-28 00:13:53 +03:00
Nikolay Amiantov
e6e7c1e914
logmein-hamachi: init at 2.1.0.139, add nixos service
2016-04-27 16:15:01 +03:00
Nikolay Amiantov
7ac1ef05fa
networkmanager service: fixup
2016-04-27 13:51:43 +03:00
Thomas Tuegel
c25907d072
network-manager: multiple outputs
2016-04-25 19:04:24 -05:00
Tuomas Tynkkynen
1d4b21ef42
treewide: Use correct output of config.nix.package in non-string contexts
2016-04-25 16:44:38 +02:00
Théophane Hufschmitt
201590fd97
zerobin service : init
2016-04-25 13:18:58 +02:00
Eric Litak
032f3e721c
unifi: relocatable data dir
2016-04-22 22:43:55 -07:00
Eric Litak
86357de0c8
mfi: relocatable data dir
2016-04-22 22:43:45 -07:00
Eric Litak
08546d3a20
unifi: fix for closure-size changes
2016-04-22 22:39:28 -07:00
Evgeny Egorochkin
a05ba7375d
quassel: use qt4 version of the daemon because as of now qt5 version fails to use proxies(connection refused)
2016-04-22 12:59:26 +03:00
Joachim Fasting
83aae072f8
dnscrypt-proxy service: fix references to libcap & attr
2016-04-15 17:44:10 +02:00
Nikolay Amiantov
cb0b0190cb
syncthing service: fix mkEnableOption call
2016-04-14 17:44:02 +03:00
Nikolay Amiantov
c9f2753c7b
syncthing service: fix invalid conflict resolution
2016-04-14 17:38:25 +03:00
Peter Hoeg
32bc5cfa24
syncthing service: support running from systemd --user instance
2016-04-14 21:22:31 +08:00
Tuomas Tynkkynen
897e0d1224
treewide: Mass replace 'openssl}/bin' to refer to the correct outputs
2016-04-14 08:32:20 +03:00
Vladimír Čunát
39ebb01d6e
Merge branch 'staging', containing closure-size #7701
2016-04-13 09:25:28 +02:00
Valérian Galliat
26dc7e503d
Shout: fix infinite loop in service configuration
...
Fixes #14594 .
2016-04-11 09:58:52 -04:00
joachifm
9c484f29ce
Merge pull request #14564 from valeriangalliat/shout/config
...
Shout: configure with attrs
2016-04-11 09:56:10 +02:00
Valérian Galliat
b0d1eb4579
Shout: configure with attrs
2016-04-10 10:49:32 -04:00
Vladimír Čunát
30f14243c3
Merge branch 'master' into closure-size
...
Comparison to master evaluations on Hydra:
- 1255515 for nixos
- 1255502
2016-04-10 11:17:52 +02:00
Alexander Ried
72cd570421
minidlna: use journalctl for logging, systemd for runtimedir
2016-04-08 23:04:12 +02:00
Alexander Ried
4d87926795
minidlna: use hostname in DLNA friendly name
2016-04-08 23:04:12 +02:00
joachifm
6d2df6d578
Merge pull request #14222 from Pleune/fix/iodined-client-mode
...
iodine service: add client mode implimentation
2016-04-08 02:19:32 +02:00
Eric Litak
0de2d2fbcd
mfi: init at 2.1.11
...
This package has some outdated dependencies, so old versions of mongodb
and v8 had to be re-added as well.
2016-04-01 02:45:11 -07:00
Vladimír Čunát
ab15a62c68
Merge branch 'master' into closure-size
...
Beware that stdenv doesn't build. It seems something more will be needed
than just resolution of merge conflicts.
2016-04-01 10:06:01 +02:00
rnhmjoj
a98a918b10
syncthing: run daemon with dedicated user as default
2016-04-01 01:26:52 +02:00
Franz Pletz
dcae10ebda
wpa_supplicant service: Depend on interfaces being present
2016-03-28 21:52:23 +00:00
Mitchell Pleune
879778091a
iodine service: add clients implimentation
...
- services.iodined moved to services.iodine
- configuration file backwards compatable
- old iodine server configuration moved to services.iodine.server
- attribute set services.iodine.clients added to specify any number
of iodine clients
- example:
iodine.clients.home = { server = "iodinesubdomain.yourserver.com"; ... };
- client services names iodine-name where name would be home
2016-03-26 21:16:29 -04:00
Joachim Fasting
1ca4610577
dnscrypt-proxy service: change default upstream resolver
...
Previously, the cisco resolver was used on the theory that it would
provide the best user experience regardless of location. The downsides
of cisco are 1) logging; 2) missing supoprt for DNS security extensions.
The new upstream resolver is located in Holland, supports DNS security,
and *claims* to not log activity. For users outside of Europe, this will
mean reduced performance, but I believe it's a worthy tradeoff.
2016-03-24 17:14:22 +01:00
Joachim Fasting
9bf6e64860
dnscrypt-proxy service: use dynamic uid/gid
...
The daemon doesn't have any portable data, reserving a
UID/GID for it is redundant.
This frees up UID/GID 151.
2016-03-24 17:14:22 +01:00
Joachim Fasting
03bdf8f03c
dnscrypt-proxy service: additional hardening
...
Run the daemon with private /home and /run/user to
prevent it from enumerating users on the system.
2016-03-24 17:14:22 +01:00
Joachim Fasting
4001917359
dnscrypt-proxy service: cosmetic enhancements
2016-03-24 17:14:22 +01:00
Mitchell Pleune
927aaecbcb
iodined service: wantedBy ip-up.target
...
When iodined tries to start before any interface other than loopback has an ip, iodined fails.
Wait for ip-up.target
The above is because of the following:
in iodined's code: src/common.c line 157
the flag AI_ADDRCONFIG is passed as a flag to getaddrinfo.
Iodine uses the function
get_addr(char *host,
int port,
int addr_family,
int flags,
struct sockaddr_storage *out);
to get address information via getaddrinfo().
Within get_addr, the flag AI_ADDRCONFIG is forced.
What this flag does, is cause getaddrinfo to return
"Name or service not known" as an error explicitly if no ip
has been assigned to the computer.
see getaddrinfo(3)
Wait for an ip before starting iodined.
2016-03-22 23:40:49 -04:00
