1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-09-11 15:08:33 +01:00
nixpkgs/nixos/modules
Maximilian Bosch f3762903d6
nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline
Since `connectionStringFile` reads the file and puts it into the
invocation of the exporter, it's part of the cmdline and thus
effectively world-readable.

Added a new `connectionEnvFile` which is supposed to be an environment
file of the form

  PGBOUNCER_EXPORTER_CONNECTION_STRING=...

that will be added to the systemd service. The exporter will read the
connection string from that value.

(cherry picked from commit 862ecd674f)
2024-09-09 22:54:13 +02:00
..
config nixos/nix-channel.nix: shellcheck and fix the activation check 2024-07-28 11:31:42 +00:00
hardware ipu6: Don't build out-of-tree driver for kernels that have it 2024-08-04 13:12:19 +00:00
i18n/input-method nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
image nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
installer nixos-install: fail if we can't set up bootloader 2024-09-09 13:22:53 +00:00
misc nixos/locate: drop with lib{,.types}, misc cleanup 2024-06-11 13:48:30 +00:00
profiles profiles/qemu_guest: add virtio_gpu to initrd 2024-07-09 15:56:30 +02:00
programs [Backport release-24.05] nixos/tsm-client: Fix multi-value dsm.sys options (#328031) 2024-09-01 18:11:53 +02:00
security nixos/polkit: Add package option 2024-06-26 09:43:05 +00:00
services nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline 2024-09-09 22:54:13 +02:00
system nixos/systemd/initrd: Fix emergencyAccess to work with null. 2024-08-21 22:42:12 +00:00
tasks nixos/clevis: add support for parent encrypted zfs datasets 2024-06-24 18:48:25 +00:00
testing nixos/tests: set non-conflicting priority for logrotate disabling 2024-05-10 16:25:51 +03:00
virtualisation docs: fix Nvidia casing to be consistent across different places 2024-08-22 16:52:05 +00:00
module-list.nix [24.05] backport fcgiwrap instances fix for local privilege escalation issue (#331465) 2024-08-31 16:38:03 +01:00
rename.nix treewide: rename renamed sddm/displayManager settings 2024-04-08 21:56:38 +02:00