From 609c1580d83524d9c4db47c942f1980c56ee454d Mon Sep 17 00:00:00 2001 From: Aaron Andersen Date: Sat, 25 May 2019 10:13:12 -0400 Subject: [PATCH 1/3] nixos/nagios: change group from nogroup to nagios see #55370 --- nixos/modules/services/monitoring/nagios.nix | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/nixos/modules/services/monitoring/nagios.nix b/nixos/modules/services/monitoring/nagios.nix index 7f65236ed3d..a0c7b0c31f8 100644 --- a/nixos/modules/services/monitoring/nagios.nix +++ b/nixos/modules/services/monitoring/nagios.nix @@ -36,7 +36,7 @@ let # Uid/gid that the daemon runs under. nagios_user=nagios - nagios_group=nogroup + nagios_group=nagios # Misc. options. illegal_macro_output_chars=`~$&|'"<> @@ -150,8 +150,11 @@ in uid = config.ids.uids.nagios; home = nagiosState; createHome = true; + group = "nagios"; }; + users.groups.nagios = { }; + # This isn't needed, it's just so that the user can type "nagiostats # -c /etc/nagios.cfg". environment.etc = [ @@ -169,6 +172,7 @@ in serviceConfig = { User = "nagios"; + Group = "nagios"; Restart = "always"; RestartSec = 2; PermissionsStartOnly = true; @@ -176,7 +180,7 @@ in preStart = '' mkdir -m 0755 -p ${nagiosState} ${nagiosLogDir} - chown nagios ${nagiosState} ${nagiosLogDir} + chown -R nagios:nagios ${nagiosState} ${nagiosLogDir} ''; script = '' From c2f8d6334c5bc52060749b9011f44ae98036255c Mon Sep 17 00:00:00 2001 From: Aaron Andersen Date: Sat, 25 May 2019 10:33:58 -0400 Subject: [PATCH 2/3] nixos/nagios: replace deprecated usage of PermissionsStartOnly see #53852 --- nixos/modules/services/monitoring/nagios.nix | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/nixos/modules/services/monitoring/nagios.nix b/nixos/modules/services/monitoring/nagios.nix index a0c7b0c31f8..e18a81def70 100644 --- a/nixos/modules/services/monitoring/nagios.nix +++ b/nixos/modules/services/monitoring/nagios.nix @@ -149,7 +149,6 @@ in description = "Nagios user "; uid = config.ids.uids.nagios; home = nagiosState; - createHome = true; group = "nagios"; }; @@ -175,14 +174,10 @@ in Group = "nagios"; Restart = "always"; RestartSec = 2; - PermissionsStartOnly = true; + LogsDirectory = "nagios"; + StateDirectory = "nagios"; }; - preStart = '' - mkdir -m 0755 -p ${nagiosState} ${nagiosLogDir} - chown -R nagios:nagios ${nagiosState} ${nagiosLogDir} - ''; - script = '' for i in ${toString cfg.plugins}; do export PATH=$i/bin:$i/sbin:$i/libexec:$PATH From 2726c45b0107e29f366660ef8521db79fa9cd0ab Mon Sep 17 00:00:00 2001 From: Aaron Andersen Date: Sat, 25 May 2019 10:38:07 -0400 Subject: [PATCH 3/3] nixos/nagios: update apacheHttpd configuration from 2.2 to 2.4 syntax --- nixos/modules/services/monitoring/nagios.nix | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/nixos/modules/services/monitoring/nagios.nix b/nixos/modules/services/monitoring/nagios.nix index e18a81def70..6a3b9776946 100644 --- a/nixos/modules/services/monitoring/nagios.nix +++ b/nixos/modules/services/monitoring/nagios.nix @@ -58,9 +58,7 @@ let Options ExecCGI - AllowOverride None - Order allow,deny - Allow from all + Require all granted SetEnv NAGIOS_CGI_CONFIG ${cfg.cgiConfigFile} @@ -68,9 +66,7 @@ let Options None - AllowOverride None - Order allow,deny - Allow from all + Require all granted '';