1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-12-02 18:42:15 +00:00
Commit graph

9265 commits

Author SHA1 Message Date
Danylo Hlynskyi 329102c47b
Merge #80328: postgresql: minor updates (security)
Forward-picked from merge 036c524a2e in staging to master,
as upstream claims it fixes CVE-2020-1720.
https://www.postgresql.org/about/news/2011/
2020-02-18 10:48:39 +01:00
Franz Pletz f9a34082e6
dovecot: 2.3.9.2 -> 2.3.9.3
Fixes CVE-2020-7046 & CVE-2020-7957:

  https://dovecot.org/pipermail/dovecot-news/2020-February/000429.html
2020-02-17 15:14:29 +01:00
Franz Pletz 71cc7796e1
tang: init at 7 2020-02-17 15:14:28 +01:00
Maximilian Bosch 52981cedfd
mautrix-whatsapp: 2020-01-12 -> 2020-02-09 2020-02-17 07:47:14 +01:00
Franz Pletz 7695e9e1fa
Merge pull request #80284 from elseym/plex
plex: 1.18.4.2171 -> 1.18.6.2368
2020-02-16 19:27:13 +00:00
Mario Rodas 3ab13fce6d
Merge pull request #80085 from r-ryantm/auto-update/rspamd
rspamd: 2.2 -> 2.3
2020-02-16 14:26:13 -05:00
elseym 3e8e6bacd5
plex: 1.18.4.2171 -> 1.18.6.2368 2020-02-16 19:44:25 +01:00
R. RyanTM e7f3e3e2d8 clickhouse: 19.13.6.51 -> 19.17.8.54 2020-02-16 09:13:34 +01:00
tbenst a35a2806db mlflow-server: init at 1.4.0 2020-02-15 22:11:25 -08:00
Jörg Thalheim 466c1df3e2
Merge pull request #79266 from Mic92/knot
nixos/knot: add keyFiles option
2020-02-15 11:15:03 +00:00
Sergey Lukjanov c2dc35e6fe
prometheus: 2.15.2 -> 2.16.0 (#80105) 2020-02-14 14:45:21 -05:00
Danylo Hlynskyi 5443eee47c
nixos/postgresql: support 0750 for data directory (#65245)
* nixos/postgresql: support 0750 for data directory

This is rework of part of https://github.com/NixOS/nixpkgs/pull/46670.
My usecase was to be able to inspect PG datadir as wheel user.

PG11 now allows starting server with 0750 mask for data dir.
`groupAccess = true` now does this automatically. The only thing you have to do
is to set group ownership.

For PG10 and below, I've described a hack how this can be done. Before this PR
hack was impossible. The hack isn't ideal, because there is short
period of time when dir mode is 0700, so I didn't want to make it official.

Test/example is present too.

* postgresql: allow changing initidb arguments via module system

Closes https://github.com/NixOS/nixpkgs/issues/18829

+ some cleanups

* addressed review comments and some fixes

* whoops

* change groupAccess to tristate, to not force `chmod` on dataDir.

Making mask either 0700 or 0750 is too restrictive..

* WIP

* let's not support group mode for versions pre-11.

The only fix is to change mode to 0700 before start, because otherwise postgresql
doesn't start, and error is non-obvious.
2020-02-14 20:51:20 +02:00
danbst 2c77c53487 Merge branch 'master' into postgresql_group 2020-02-14 19:00:52 +02:00
Ivan Kozik 0be376a8e2
postgresqlPackages.periods: init at 1.1 (#79255) 2020-02-14 18:43:31 +02:00
Léo Gaspard da4d9241fc
Merge pull request #79971 from r-ryantm/auto-update/opensmtpd
opensmtpd: 6.6.2p1 -> 6.6.3p1
2020-02-14 12:08:05 +01:00
Benjamin Hipple eb11feaa0b treewide: change fetchCargoTarball default to opt-out
Changes the default fetcher in the Rust Platform to be the newer
`fetchCargoTarball`, and changes every application using the current default to
instead opt out.

This commit does not change any hashes or cause any rebuilds. Once integrated,
we will start deleting the opt-outs and recomputing hashes.

See #79975 for details.
2020-02-13 22:41:37 -08:00
R. RyanTM 6ef1edbeaa rspamd: 2.2 -> 2.3 2020-02-14 03:38:53 +00:00
Michele Guerini Rocco f8c3e15771
Merge pull request #75163 from rnhmjoj/gohu
gohufont: generate opentype files
2020-02-14 00:46:05 +01:00
edef 2f1dacceab
Merge pull request #79859 from alyssais/pounce
pounce: 1.0p1 -> 1.1
2020-02-13 11:52:41 +00:00
Jonathan Ringer 6730bc5144 python3Packages.mailman-web: prevent error from crashing eval 2020-02-12 22:27:24 -08:00
Ryan Mulligan 5a358eade8
Merge pull request #69125 from jslight90/mattermost-5.15
mattermost: 5.9.0 -> 5.15.0
2020-02-12 20:56:00 -08:00
R. RyanTM 77da4954da opensmtpd: 6.6.2p1 -> 6.6.3p1 2020-02-13 02:50:37 +00:00
Jörg Thalheim 6adc09ed30
knot: put runtime paths outside the nix store
Otherwise knot tries to write to non-writable directories.
This for example breaks dnssec signing.
While it's possible to overwrite these path in the configuration,
having a sane defaults is nicer.
2020-02-12 16:27:38 +00:00
Frederik Rietdijk 424697d512 Merge master into staging-next 2020-02-12 09:55:31 +01:00
Alyssa Ross 88e4258df4
pounce: 1.0p1 -> 1.1 2020-02-11 20:04:58 +00:00
Marek Mahut ab1a14d581 trezord-go: 2.0.27 -> 2.0.28 2020-02-11 20:34:46 +01:00
Robert Djubek 68cff3a69c matomo: 3.13.1 -> 3.13.2
Updated both matomo and matomo-beta to the latest version
2020-02-11 19:16:13 +01:00
worldofpeace c6fa3c201c
Merge pull request #75166 from nyanloutre/radarr_2_0_1450
radarr: 0.2.0.1358 -> 0.2.0.1450
2020-02-11 08:22:46 -05:00
Frederik Rietdijk 1a6c3cb06b Merge staging into staging-next 2020-02-11 07:59:53 +01:00
Ryan Mulligan e96c3f05b6
Merge pull request #79742 from r-ryantm/auto-update/unit
unit: 1.14.0 -> 1.15.0
2020-02-10 11:47:50 -08:00
zimbatm bcdc90a3a7 ruby_2_4: remove
According to https://endoflife.software/programming-languages/server-side-scripting/ruby
ruby 2.4 will go end-of-life in march, where the new release of nixpkgs
will be cut. We won't be able to support it for security updates.

Remove all references to ruby_2_4 and add ruby_2_7 instead where
missing.

Mark packages that depend on ruby 2.4 as broken:
* chefdk
* sonic-pi
2020-02-10 13:23:35 -05:00
R. RyanTM e5f681e592 tautulli: 2.1.42 -> 2.1.44 2020-02-10 18:10:18 +01:00
R. RyanTM 6884a53089 postfix: 3.4.8 -> 3.4.9 2020-02-10 18:02:13 +01:00
Frederik Rietdijk 079622ef2d
Merge pull request #79628 from NixOS/staging-next
Staging next
2020-02-10 17:53:25 +01:00
R. RyanTM 3815de80c0 unit: 1.14.0 -> 1.15.0 2020-02-10 14:47:35 +00:00
R. RyanTM 0f71a3d22c memcached: 1.5.21 -> 1.5.22 2020-02-10 13:22:37 +01:00
Frederik Rietdijk ec3edaf7b5 Merge master into staging-next 2020-02-10 12:55:47 +01:00
Andrew Childs 085683c613 memcached: fix darwin build 2020-02-10 02:31:07 -05:00
Silvan Mosberger b9d7f1fe24 Merge pull request #65397 from mmilata/sympa
sympa: init at 6.2.52 + NixOS module
2020-02-10 01:23:45 +01:00
Robin Gloster 2fc3322f32 Merge pull request #79611 from ciil/jira-update
atlassian-jira: 8.6.0 -> 8.7.0
2020-02-09 23:25:43 +01:00
Maximilian Bosch c2f2366f5c Merge pull request #79485 from Ma27/grocy
grocy: init at 2.6.0
2020-02-09 23:11:46 +01:00
Frederik Rietdijk cffec212dc Merge staging into staging-next 2020-02-09 16:38:32 +01:00
Simon Lackerbauer ba1862b69c atlassian-jira: 8.6.0 -> 8.7.0 2020-02-09 11:45:07 +01:00
Frederik Rietdijk 531a48ebdb Merge master into staging-next 2020-02-09 11:00:29 +01:00
R. RyanTM 82e7ef2c16 postgresql11Packages.pg_partman: 4.2.2 -> 4.3.0 2020-02-09 03:15:19 -06:00
R. RyanTM f1eed44161 metabase: 0.34.1 -> 0.34.2 2020-02-09 03:13:41 -06:00
R. RyanTM f91dc24a3e sickgear: 0.20.0 -> 0.21.5 2020-02-09 09:51:16 +01:00
Frederik Rietdijk 8847d57763 Merge staging-next into staging 2020-02-09 09:18:17 +01:00
Frederik Rietdijk 03755ed59a Merge master into staging-next 2020-02-09 09:17:51 +01:00
Lancelot SIX 2711c7477d pythonPackages.django: django_1_11 -> django_lts 2020-02-09 09:17:31 +01:00