Merge pull request #100195 from nh2/redis-listen-loopback-default

redis service: Listen on localhost by default
This commit is contained in:
Niklas Hambüchen 2020-11-08 01:17:19 +01:00 committed by GitHub
commit 01a3fcc659
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 11 additions and 3 deletions

View File

@ -159,6 +159,11 @@
to <package>nextcloud20</package>. to <package>nextcloud20</package>.
</para> </para>
</listitem> </listitem>
<listitem>
<para>
The setting <xref linkend="opt-services.redis.bind" /> defaults to <literal>127.0.0.1</literal> now, making Redis listen on the loopback interface only, and not all public network interfaces.
</para>
</listitem>
<listitem> <listitem>
<para> <para>
NixOS now emits a deprecation warning if systemd's <literal>StartLimitInterval</literal> setting is used in a <literal>serviceConfig</literal> section instead of in a <literal>unitConfig</literal>; that setting is deprecated and now undocumented for the service section by systemd upstream, but still effective and somewhat buggy there, which can be confusing. See <link xlink:href="https://github.com/NixOS/nixpkgs/issues/45785">#45785</link> for details. NixOS now emits a deprecation warning if systemd's <literal>StartLimitInterval</literal> setting is used in a <literal>serviceConfig</literal> section instead of in a <literal>unitConfig</literal>; that setting is deprecated and now undocumented for the service section by systemd upstream, but still effective and somewhat buggy there, which can be confusing. See <link xlink:href="https://github.com/NixOS/nixpkgs/issues/45785">#45785</link> for details.

View File

@ -87,9 +87,12 @@ in
bind = mkOption { bind = mkOption {
type = with types; nullOr str; type = with types; nullOr str;
default = null; # All interfaces default = "127.0.0.1";
description = "The IP interface to bind to."; description = ''
example = "127.0.0.1"; The IP interface to bind to.
<literal>null</literal> means "all interfaces".
'';
example = "192.0.2.1";
}; };
unixSocket = mkOption { unixSocket = mkOption {