Edward Tjörnhammar
837cfbb9ea
nixos: adding nylon service with uid,gid
2015-01-14 22:08:47 +01:00
Vladimír Čunát
72d2d59cd4
/etc/ssh/ssh_known_hosts: refactor and fix #5612
...
Generating the file was refactored to be completely in nix.
Functionally it should create the same content as before,
only adding the newlines.
CC recent updaters: @aszlig, @rickynils.
2015-01-11 22:14:25 +01:00
Joachim Fasting
97bac259d0
dnscrypt-proxy service: update AppArmor profile
...
This patch fixes the AppArmor profile path clause and adds
(currently ignored) network rules.
The AppArmor profile used to be defined for the path sbin/dnscrypt-proxy,
but the real path is bin/dnscrypt-proxy (due to sbin now being a symlink
to bin), which permitted the service to run unconfined.
Adding the network rules has no effect other than improving correctness,
as the version of AppArmor in the NixOS kernel fails to enforce network
rules.
2015-01-09 15:08:07 +01:00
William A. Kennington III
9a7766e054
nixos/network-interfaces: Add mstpd support for bridges
2015-01-07 14:49:24 -08:00
William A. Kennington III
8627110091
icedtea: Make major version nonspecific attrs
2015-01-02 00:24:49 -08:00
Tobias Geerinckx-Rice
c64257b8e5
Fix user-facing typos (mainly in descriptions)
2014-12-30 03:31:03 +01:00
Domen Kožar
43af22b2de
Merge pull request #5487 from luke-clifton/lc-btsync-group
...
btsync groups
2014-12-28 20:25:13 +01:00
Eelco Dolstra
ea9d391bb5
Fix ntpd
...
Since the 4.2.8 upgrade, ntpd is broken on NixOS:
Dec 28 19:06:54 hagbard ntpd[27723]: giving up resolving host 1.nixos.pool.ntp.org: Servname not supported for ai_socktype (-8)
This appears to be because DNS resolution doesn't work in chroots
anymore (due to /etc being missing). So disable chroots for now. It's
probably better to use systemd's containment facilities anyway.
2014-12-28 19:38:45 +01:00
Vladimír Čunát
61d9f06760
fix a typo from 2627198b0c
2014-12-28 10:44:50 +01:00
Luke Clifton
0c477eb38f
Documentation update
2014-12-28 17:26:59 +08:00
Luke Clifton
61ff1b2b0a
Moved UMask to correct location
2014-12-28 16:44:27 +08:00
Luke Clifton
5fdd6f6a66
Change umask
2014-12-28 16:39:56 +08:00
William A. Kennington III
2627198b0c
nixos/firewall: Add ipset utility
2014-12-28 00:04:49 -08:00
Luke Clifton
5866a9df03
added group
2014-12-28 13:23:10 +08:00
Luke Clifton
fabcc2cf7b
Added btsync group to btsync user
2014-12-28 13:17:37 +08:00
Domen Kožar
ec5fcfa82c
network-manager: specify full path to sytemctl binary
...
(cherry picked from commit af8f76c2568ae9d842716d98673b3639292a920e)
Signed-off-by: Domen Kožar <domen@dev.si>
2014-12-27 11:53:07 +01:00
Igor Pashev
2b91b9b594
Strongswan: updown script uses ip and iptables utilities
2014-12-22 20:20:52 +00:00
lethalman
d0fdad5f36
Merge pull request #5419 from ehmry/tox-bootstrapd
...
tox-bootstrapd
2014-12-22 11:16:44 +01:00
Emery Hemingway
01910e84f9
nixos: tox-bootstrapd service
2014-12-20 18:20:27 -05:00
William A. Kennington III
681ae2fa7f
nixos/consul: Don't timeout if start job has many retries
2014-12-16 15:42:08 -08:00
Nicolas B. Pierron
42c3c205c4
Merge remote-tracking branch 'origin/master' into syncserver
2014-12-14 14:17:56 +01:00
Sebastián Bernardo Galkin
aba0d8a73d
Fix networkmanager resumeCommands
...
Small typo prevented the post resume script to restart network manager
2014-12-14 03:46:54 -08:00
Nicolas B. Pierron
1a1fc17957
Firefox Sync Server: Create the private config file as non-world readable.
2014-12-12 22:14:38 +01:00
Nicolas B. Pierron
a0154145d5
Firefox Sync Server: Fix copy&paste issue.
2014-12-12 22:13:03 +01:00
Nicolas B. Pierron
0570a08b83
Merge remote-tracking branch 'origin/master' into syncserver
2014-12-11 23:49:19 +01:00
Nicolas B. Pierron
01886aef22
Add Firefox Sync server module.
2014-12-11 23:48:15 +01:00
Domen Kožar
0ec12d53e6
tcpcrypt: 2011.07.22 -> 0.3rc1, fix nixos service
2014-12-10 10:23:46 +01:00
William A. Kennington III
c17eb7f0e6
nixos/consul: Make service definition more sane
2014-12-09 02:24:36 -08:00
William A. Kennington III
159af942d5
nixos/unifi: Ensure stateDir is mounted before proceeding
2014-12-05 12:12:17 -08:00
William A. Kennington III
8a94c06595
nixos: Add network-pre.target and adjust firewall start ordering
2014-12-01 17:19:44 -08:00
William A. Kennington III
bcfe7b2200
Merge pull request #5043 from wkennington/master.networkd
...
nixos/networking: Revamp networking configuration and add an experimental networkd option.
2014-11-29 19:59:31 -08:00
aszlig
c37611f3e5
nixos: Use vendor zones instead of N.pool.ntp.org.
...
Closes #4824 , thanks to @abh for processing my stupidity.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-28 19:37:03 +01:00
aszlig
2249474632
nixos/sshd: Fix build if knownHosts is empty.
...
Introduced by 77ff279f2767cf1f28eed03a1f93e5df54c99bf5.
Build failure: https://headcounter.org/hydra/build/583158/nixlog/5/raw
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-27 19:03:41 +01:00
Rickard Nilsson
77ff279f27
nixos/services.openssh: Allow knownHost keys to have multiple lines.
...
Useful for adding several public keys of different types for the same host.
2014-11-27 18:40:21 +01:00
Domen Kožar
91bdca38a0
NetworkManager.service -> network-manager.service
2014-11-27 12:10:20 +01:00
William A. Kennington III
1860ee27b0
nixos/networking: Fixes
2014-11-26 16:29:24 -08:00
William A. Kennington III
c417012c1b
nixos/dhcpcd: Respect per interface dhcp options
2014-11-26 11:22:03 -08:00
William A. Kennington III
2057d9087f
nixos: Support network-online target in addition to ip-up
2014-11-26 11:22:03 -08:00
William A. Kennington III
59f512ef7d
nixos/network-interfaces: Provide a networkd implementation
2014-11-26 11:22:02 -08:00
William A. Kennington III
a332c4eac5
systemd: Enable more network services
2014-11-26 11:22:02 -08:00
Eelco Dolstra
dd2dedafa3
Style fixes
2014-11-25 16:01:27 +01:00
Igor Pashev
4c33004e1f
Added strongSwan service
2014-11-25 15:29:34 +01:00
William A. Kennington III
f83aa6c0ea
nixos/unifi: Properly depend on mountpoints
2014-11-24 12:40:07 -08:00
Arseniy Seroka
fd5566da41
Merge pull request #5080 from joachifm/dnscrypt-refactor
...
dnscrypt-proxy: minor superficial improvements
2014-11-24 15:48:47 +03:00
William A. Kennington III
8309aa04b2
unifi: Actually remove webapps at shutdown
2014-11-24 02:30:04 -08:00
William A. Kennington III
8f0d65e2df
unifi: Clean all of webapps at start and stop
2014-11-24 00:22:24 -08:00
William A. Kennington III
3f7b2bc70d
unifi: Fix typo
2014-11-24 00:06:42 -08:00
Joachim Fasting
119d93e223
dnscrypt-proxy: minor superficial improvements
...
- Use upstream description and explicitly set platforms = all
- Coding conventions fix
2014-11-22 16:19:06 +01:00
William A. Kennington III
826f5468ab
nixos/unifi: Remove old ROOT.war links before relinking
2014-11-14 11:45:38 -08:00
William A. Kennington III
d0e15cc575
Merge pull request #4983 from bosu/fw-stop-fix
...
firewall: clear rpfilter on stop
2014-11-14 00:14:27 -08:00