Michael Raskin
4c9c7f6ba4
Add an option to change vsftpd anonymos write umask.
2014-02-11 01:34:19 +04:00
Domen Kožar
b17edbac57
ModemManager: 0.5.4.0 -> 0.7.991
2014-02-08 20:17:00 +01:00
Eelco Dolstra
9e7fe29e41
ntpd: Don't answer status queries
...
Workaround for CVE-2013-5211:
http://support.ntp.org/bin/view/Main/SecurityNotice#DRDoS_Amplification_Attack_using
2014-02-03 23:44:11 +01:00
Eelco Dolstra
559f5be07d
dhcpcd: Update to 6.2.1
...
Dhcpcd now has integration with udev, so it should no longer be a
problem if udev renames an interface while dhcpcd is running.
2014-02-02 11:28:45 +01:00
Arvin Moezzi
0602ef22de
git-daemon service: fix typo in option ( close #1659 )
2014-02-01 11:56:56 +01:00
Thomas Tuegel
7b743fcaab
networkmanager: load modules required for PPTP
2014-01-24 09:22:59 -06:00
Thomas Bereknyei
57e3feda74
Adds kippo SSH honeypot
2014-01-14 10:32:26 +00:00
Rok Garbas
e1f363350a
connman-vpn and connman-vpn dbus servise should start after connman service
2014-01-11 21:17:17 +01:00
Matej Cotman
7d4d3536f7
connman: new packages ConnMan v1.20 and connman-ui
2014-01-11 20:22:53 +01:00
Thomas Tuegel
6f768bf47c
networkmanager: register PPTP service
2014-01-02 11:02:29 -06:00
William A. Kennington III
38bc05158d
network-interfaces: Add the ability to create bond devices
...
This patch adds support for the creations of new bond devices, aggregate
pipes of physical devices for extra throughput or failover.
Additionally, add better correction at the startup of a bridge
of vlan interface (delete old, stale interfaces).
2013-12-31 09:28:52 -06:00
Peter Simons
6bc4007e60
nixos: don't white-list port 8200 in the firewall when minidlna is enabled
...
If you want minidla to accept connections from the rest of the world, please
add
networking.firewall.allowedTCPPorts = [ 8200 ];
networking.firewall.allowedUDPPorts = [ 1900 ];
to /etc/nixos/configuration.nix.
See <http://lists.science.uu.nl/pipermail/nix-dev/2013-November/011997.html >
for the discussion that lead to this.
2013-12-23 21:32:13 +01:00
Michael Raskin
997778c820
Make Ejabberd service work
2013-12-20 18:16:56 +04:00
Michael Raskin
654627fe4c
Merge pull request #1362 from tomberek/ddclient_correction
...
Correct web-skip value to match behavior of checkip.dyndns.com
2013-12-14 22:51:44 -08:00
Thomas Bereknyei
6129be5a7a
Correct web-skip value to match behavior of checkip.dyndns.com
2013-12-11 23:22:43 -05:00
Bjørn Forsman
9474fbae65
nixos: add ntopng service
...
ntopng is a high-speed web-based traffic analysis and flow collection
tool. Enable it by adding this to configuration.nix:
services.ntopng.enable = true;
Open a browser at http://localhost:3000 and login with the default
username/password: admin/admin.
2013-12-09 21:35:01 +01:00
Bjørn Forsman
ca26e75a73
nixos/avahi-service: small documentation update
2013-12-07 12:03:50 +01:00
Eelco Dolstra
2b1f212494
Disable various services when running inside a container
2013-11-26 18:19:45 +01:00
Rickard Nilsson
26d7598d46
networkmanager NixOS service: Make it possible to append or insert name servers in /etc/resolv.conf
2013-11-13 01:52:57 +01:00
Eelco Dolstra
785eaf2cea
Add some primops to lib
2013-11-12 13:48:30 +01:00
Vladimír Čunát
619a1f5614
changes proposed for 13-10 update
...
One feature change: polkit update 8d14c7ba
2013-11-09 18:41:42 +01:00
Vladimír Čunát
8d14c7baa6
polkit: major update 0.105 -> 0.112
...
- It now uses JavaScript for configuration (only),
so I had to "convert" config for NetworkManager.
- I tested suspend/restart/(un)mount on KDE/Xfce,
Phreedom tested NetworkManager config conversion.
2013-11-09 16:29:18 +01:00
Eelco Dolstra
cc65b1015d
vsftpd: Disable seccomp filtering on 64-bit
...
It worked on Linux 3.4 but fails with "500 OOPS: priv_sock_get_cmd"
since we updated the default kernel to 3.10.
http://hydra.nixos.org/build/6715359
https://bugzilla.redhat.com/show_bug.cgi?id=845980
https://bugzilla.novell.com/show_bug.cgi?id=786024
2013-11-07 16:38:57 +01:00
Eelco Dolstra
000962c3fb
vsftpd: Run in the background and log to syslog (i.e. journal)
2013-11-07 16:38:57 +01:00
Eelco Dolstra
10e31f6de7
Clean up the vsftpd module a bit
2013-11-07 16:38:57 +01:00
Eelco Dolstra
444a4fb793
Loosen the type of SSH key files
2013-11-01 00:34:31 +01:00
Eelco Dolstra
c1159edc65
Remove remaining references to Upstart
2013-10-31 13:26:06 +01:00
Eelco Dolstra
244cf195c8
Use the "assertions" option instead of mkAssert
2013-10-30 18:47:44 +01:00
Eelco Dolstra
408b8b5725
Add lots of missing option types
2013-10-30 18:47:43 +01:00
Eelco Dolstra
be5d3a59dd
Clean up some option examples
2013-10-30 18:47:43 +01:00
Eelco Dolstra
70a2c54527
Strictly check the arguments to mkOption
...
And fix various instances of bad arguments.
2013-10-30 15:35:09 +01:00
Eelco Dolstra
862e3dd977
Substitute "types.uniq types.string" -> "types.str"
2013-10-30 14:57:42 +01:00
Eelco Dolstra
1d104c792b
Remove the dhclient module
...
It's no longer used by NixOS (replaced by dhcpcd).
2013-10-29 17:39:32 +01:00
Eelco Dolstra
0695b68c8c
Manual: Render multi-line strings properly
2013-10-29 17:39:31 +01:00
Rok Garbas
562b453b93
nixos: haproxy module
2013-10-29 15:55:25 +01:00
Eelco Dolstra
f0b7b0af12
wpa_supplicant.nix: Add option types
2013-10-29 13:14:30 +01:00
Eelco Dolstra
d5047faede
Remove uses of the "merge" option attribute
...
It's redundant because you can (and should) specify an option type, or
an apply function.
2013-10-28 22:45:56 +01:00
Eelco Dolstra
2cc37c17d9
openvpn.nix: Improve types
2013-10-28 22:45:55 +01:00
Michael Raskin
3022fff7db
Adding Quantum Minigolf game
2013-10-28 00:09:46 +04:00
Eelco Dolstra
a3777ba4f9
Remove dependencies on the Nixpkgs location
2013-10-23 20:08:23 +02:00
Michael Raskin
f88aa22706
Allow non-SSL connections to vsftpd by default to let tests not specify certificate
2013-10-20 21:16:12 +04:00
Michael Raskin
a0bbc3e838
Add apparently missing option to vsftpd configuration
2013-10-20 20:39:37 +04:00
Michael Raskin
9b6f7c14ec
Merge pull request #1060 from MarcWeber/submit/vsftpd
...
small vsftpd improvements
2013-10-20 08:58:21 -07:00
Eelco Dolstra
ae74b0ae58
sshd: Remove the usePAM option
...
Sshd *must* use PAM because we depend on it for proper session
management. The original goal of this option (disabling password
logins) can also be implemented by removing pam_auth authentication
from sshd's PAM service.
2013-10-15 15:05:49 +02:00
Eelco Dolstra
a2c820c678
Turn security.pam.services into an attribute set
...
That is, you can say
security.pam.services.sshd = { options... };
instead of
security.pam.services = [ { name = "sshd"; options... } ];
making it easier to override PAM settings from other modules.
2013-10-15 14:47:51 +02:00
Marc Weber
4683774277
experimental/vsftpd
...
vsftpd improvements:
- intorduce one declarative list of options
- make docummentation strings more understandable and add missing options
such as SSL/TLS support
- Use environment.etc."vsftpd".text because I can't think about any
reason why a shell script should be used.
That code was written in 2009.
2013-10-12 01:05:13 +02:00
Eelco Dolstra
5c1f8cbc70
Move all of NixOS to nixos/ in preparation of the repository merge
2013-10-10 13:28:20 +02:00