519673e714
wpa_supplicant: start after wireless interfaces
...
wpa_supplicant fails to start if the wireless interfaces aren't ready yet,
so we need to add a system ordering directive here to start wpa_supplicant
after the interfaces are ready. Note that Requires= is not enough since
it does not imply ordering.
2016-06-16 00:22:08 +02:00
437ea9fd37
Fixes #16181 - using bin output for Go services
2016-06-13 23:32:16 +02:00
28fa4a2f03
Escape all shell arguments uniformly
2016-06-12 18:11:37 +01:00
376ba5f17f
dnscrypt-proxy service: update resolver list
2016-06-09 14:03:40 +02:00
c85f2b20e6
nixos/openvpn: add support for resolvconf
...
The update-resolve-conf script from the update-resolv-conf
package is very useful and should work in most of the common
cases, so this adds an option to enable it. The option is
disabled by default for backwards compatibility.
2016-06-06 20:43:52 +02:00
0c9e904943
toxvpn: restartIfChanged = false & minor cleanups
2016-05-30 14:23:52 +01:00
dd2bb96dbe
syncthing service: respect cfg.package ( #15810 )
2016-05-30 10:14:19 +02:00
d18ba0f50d
toxvpn: init at 20151111
...
(Authored by @cleverca22)
2016-05-30 00:21:22 +01:00
8fbdb40ef0
services.*ntp*: Add time-sync.target to ntp clients ( #15714 )
...
See: https://www.freedesktop.org/software/systemd/man/systemd.special.html#time-sync.target
2016-05-26 16:25:36 +02:00
e27e0b3d75
Merge pull request #15620 from Cornu/mosquitto
...
mosquitto service: init
2016-05-24 13:56:06 +02:00
77f2c305b6
mosquitto service: init
...
Initial Mosquitto MQTT Broker service file.
2016-05-24 10:49:03 +02:00
0f384e5cf2
dnscrypt-proxy service: update resolver list
2016-05-23 16:44:20 +02:00
bf0e745597
unbound service: do not initialize root cert
...
When enableRootTrustAnchor is set to false, there is really no point in
initializing the root key before starting unbound.
Fixes #15605 .
2016-05-21 22:27:27 +02:00
c7db50e24f
Revert "network-manager: multiple outputs"
...
This reverts commit c25907d072
2016-05-21 13:12:44 +02:00
167272f01d
Revert "networkmanager service: fixup"
...
This reverts commit 7ac1ef05fa
2016-05-21 13:12:44 +02:00
d1463ac750
Revert "nixos/networkmanager: fix syntax error"
...
This reverts commit 2875293615
2016-05-21 13:12:44 +02:00
b740e046ab
dnscrypt-proxy service: robust lib references in apparmor profile
...
Use getLib to avoid future problems caused by re-ordering outputs.
2016-05-15 11:55:17 +02:00
0561e14c3b
bind: Split into multiple outputs
...
A patch is needed to make bind not print its configure flags on
'named -V'.
2016-05-14 22:12:59 +03:00
3e387c3e00
Merge branch 'staging'
...
Darwin isn't in a perfect state, in particular its bootstrap tools won't
build which will block nixpkgs channel. But on the whole it seems
acceptable.
2016-05-13 10:14:53 +02:00
bc2fe9f2cd
typo in authorizedKeysFiles
2016-05-12 18:01:17 +03:00
639dcffa0b
Merge pull request #15403 from Shados/maintain-teamspeak-server
...
teamspeak-server package & module maintenance
2016-05-12 13:01:38 +02:00
11b0972544
teamspeak-server module: Create data directory by
...
leveraging users.users.<user>.createHome instead of a preStart script.
preStart script is still required to ensure proper creation of logging
directory.
2016-05-12 20:49:17 +10:00
25e3c091a0
Revert "nixos/nat: Allow nat without an externalInterface"
...
This reverts commit 431a98b12bhttp://hydra.nixos.org/build/35538207
2016-05-12 11:04:06 +01:00
6c2fbfbd77
Merge branch 'master' into staging
2016-05-12 04:53:38 +02:00
431a98b12b
nixos/nat: Allow nat without an externalInterface
2016-05-12 01:52:13 +02:00
a0e8d542c7
Merge pull request #15377 from womfoo/sniproxy
...
sniproxy: init at 0.4.0 with dependency udns: init at 0.4
2016-05-11 15:14:33 +02:00
356f1bdac8
sniproxy service: init
2016-05-11 13:27:28 +08:00
e38e3dcdb6
dnscrypt-proxy service: allow user to specify their own resolver list
2016-05-10 07:08:37 +02:00
bd448b7139
dnscrypt-proxy service: use up-to-date dnscrypt-resolvers list
...
The list of public proxies is updated now and again and it's probably a
good idea to always work from the most recent list, rather than the one
that is shipped with the release. This can be crucial in case of
resolvers that are revealed to have gone rogue or otherwise have been
compromised.
2016-05-10 07:07:58 +02:00
65a9fa8cdc
Merge branch 'master' into staging
2016-05-08 21:24:48 +02:00
1d2fcde841
dnscrypt-proxy service: fix libcap output reference
...
After 7382afac40
2016-05-07 20:18:27 +02:00
f7c02f8670
ejabberd service: add image thumbnailing support
2016-05-07 14:31:16 +03:00
aadaa91379
Merge remote-tracking branch 'upstream/master' into staging
...
Conflicts:
pkgs/applications/networking/browsers/vivaldi/default.nix
pkgs/misc/emulators/wine/base.nix
2016-05-03 23:12:48 +03:00
5508687ec2
Remove now useless proprietary Copy.com client and service
...
<https://techlib.barracuda.com/Copy/FAQ >
SaaS.
2016-05-01 14:38:08 +02:00
2875293615
nixos/networkmanager: fix syntax error
2016-04-30 12:20:06 -05:00
4ff8f377af
Merge remote-tracking branch 'upstream/master' into staging
2016-04-28 00:13:53 +03:00
e6e7c1e914
logmein-hamachi: init at 2.1.0.139, add nixos service
2016-04-27 16:15:01 +03:00
7ac1ef05fa
networkmanager service: fixup
2016-04-27 13:51:43 +03:00
c25907d072
network-manager: multiple outputs
2016-04-25 19:04:24 -05:00
1d4b21ef42
treewide: Use correct output of config.nix.package in non-string contexts
2016-04-25 16:44:38 +02:00
201590fd97
zerobin service : init
2016-04-25 13:18:58 +02:00
032f3e721c
unifi: relocatable data dir
2016-04-22 22:43:55 -07:00
86357de0c8
mfi: relocatable data dir
2016-04-22 22:43:45 -07:00
08546d3a20
unifi: fix for closure-size changes
2016-04-22 22:39:28 -07:00
a05ba7375d
quassel: use qt4 version of the daemon because as of now qt5 version fails to use proxies(connection refused)
2016-04-22 12:59:26 +03:00
83aae072f8
dnscrypt-proxy service: fix references to libcap & attr
2016-04-15 17:44:10 +02:00
cb0b0190cb
syncthing service: fix mkEnableOption call
2016-04-14 17:44:02 +03:00
c9f2753c7b
syncthing service: fix invalid conflict resolution
2016-04-14 17:38:25 +03:00
32bc5cfa24
syncthing service: support running from systemd --user instance
2016-04-14 21:22:31 +08:00
897e0d1224
treewide: Mass replace 'openssl}/bin' to refer to the correct outputs
2016-04-14 08:32:20 +03:00
39ebb01d6e
Merge branch 'staging', containing closure-size #7701
2016-04-13 09:25:28 +02:00
26dc7e503d
Shout: fix infinite loop in service configuration
...
Fixes #14594 .
2016-04-11 09:58:52 -04:00
9c484f29ce
Merge pull request #14564 from valeriangalliat/shout/config
...
Shout: configure with attrs
2016-04-11 09:56:10 +02:00
b0d1eb4579
Shout: configure with attrs
2016-04-10 10:49:32 -04:00
30f14243c3
Merge branch 'master' into closure-size
...
Comparison to master evaluations on Hydra:
- 1255515 for nixos
- 1255502 for nixpkgs
2016-04-10 11:17:52 +02:00
72cd570421
minidlna: use journalctl for logging, systemd for runtimedir
2016-04-08 23:04:12 +02:00
4d87926795
minidlna: use hostname in DLNA friendly name
2016-04-08 23:04:12 +02:00
6d2df6d578
Merge pull request #14222 from Pleune/fix/iodined-client-mode
...
iodine service: add client mode implimentation
2016-04-08 02:19:32 +02:00
0de2d2fbcd
mfi: init at 2.1.11
...
This package has some outdated dependencies, so old versions of mongodb
and v8 had to be re-added as well.
2016-04-01 02:45:11 -07:00
ab15a62c68
Merge branch 'master' into closure-size
...
Beware that stdenv doesn't build. It seems something more will be needed
than just resolution of merge conflicts.
2016-04-01 10:06:01 +02:00
a98a918b10
syncthing: run daemon with dedicated user as default
2016-04-01 01:26:52 +02:00
dcae10ebda
wpa_supplicant service: Depend on interfaces being present
2016-03-28 21:52:23 +00:00
879778091a
iodine service: add clients implimentation
...
- services.iodined moved to services.iodine
- configuration file backwards compatable
- old iodine server configuration moved to services.iodine.server
- attribute set services.iodine.clients added to specify any number
of iodine clients
- example:
iodine.clients.home = { server = "iodinesubdomain.yourserver.com"; ... };
- client services names iodine-name where name would be home
2016-03-26 21:16:29 -04:00
1ca4610577
dnscrypt-proxy service: change default upstream resolver
...
Previously, the cisco resolver was used on the theory that it would
provide the best user experience regardless of location. The downsides
of cisco are 1) logging; 2) missing supoprt for DNS security extensions.
The new upstream resolver is located in Holland, supports DNS security,
and *claims* to not log activity. For users outside of Europe, this will
mean reduced performance, but I believe it's a worthy tradeoff.
2016-03-24 17:14:22 +01:00
9bf6e64860
dnscrypt-proxy service: use dynamic uid/gid
...
The daemon doesn't have any portable data, reserving a
UID/GID for it is redundant.
This frees up UID/GID 151.
2016-03-24 17:14:22 +01:00
03bdf8f03c
dnscrypt-proxy service: additional hardening
...
Run the daemon with private /home and /run/user to
prevent it from enumerating users on the system.
2016-03-24 17:14:22 +01:00
4001917359
dnscrypt-proxy service: cosmetic enhancements
2016-03-24 17:14:22 +01:00
927aaecbcb
iodined service: wantedBy ip-up.target
...
When iodined tries to start before any interface other than loopback has an ip, iodined fails.
Wait for ip-up.target
The above is because of the following:
in iodined's code: src/common.c line 157
the flag AI_ADDRCONFIG is passed as a flag to getaddrinfo.
Iodine uses the function
get_addr(char *host,
int port,
int addr_family,
int flags,
struct sockaddr_storage *out);
to get address information via getaddrinfo().
Within get_addr, the flag AI_ADDRCONFIG is forced.
What this flag does, is cause getaddrinfo to return
"Name or service not known" as an error explicitly if no ip
has been assigned to the computer.
see getaddrinfo(3)
Wait for an ip before starting iodined.
2016-03-22 23:40:49 -04:00
a491b75523
radicale service: run with dedicated user
...
This is done in the context of #11908 .
2016-03-20 15:50:14 +01:00
a0ab4587b7
Set networking.firewall.allowPing = true by default.
...
This patch fixes https://github.com/NixOS/nixpkgs/issues/12927 .
It would be great to configure good rate-limiting defaults for this via
/proc/sys/net/ipv4/icmp_ratelimit and /proc/sys/net/ipv6/icmp/ratelimit,
too, but I didn't since I don't know what a "good default" would be.
2016-03-17 19:40:13 +01:00
12877098cb
dnscrypt-proxy service: expose option to use ephemeral keys
...
Some users may wish to improve their privacy by using per-query
key pairs, which makes it more difficult for upstream resolvers to
track users across IP addresses.
2016-03-17 15:02:33 +01:00
a0663e3709
dnscrypt-proxy service: documentation fixes
...
- fix `enable` option description
using `mkEnableOption longDescription` is incorrect; override
`description` instead
- additional details for proper usage of the service, including
an example of the recommended configuration
- clarify `localAddress` option description
- clarify `localPort` option description
- clarify `customResolver` option description
2016-03-17 14:18:30 +01:00
363f024864
Merge pull request #13861 from abbradar/mjpg-streamer
...
mjpg-streamer: update and add NixOS service
2016-03-14 15:19:03 +03:00
c65026bfa5
nixos: i2pd, change to yes/no config entries and explicitly enable client endpoints
2016-03-13 21:36:30 +01:00
83ff545bfd
mjpg-streamer service: init
2016-03-12 18:53:02 +03:00
e7cfccbcc2
dnscrypt-proxy service: fix apparmor profile
...
The daemon additionally requires libcap, liblz4, and libattr.
2016-03-09 04:13:19 +01:00
b27de68c4e
Merge pull request #13777 from eqyiel/upstream
...
vsftpd: Add possibility to specify path to RSA key file
2016-03-09 03:02:29 +00:00
e3ae435aad
dnscrypt-proxy service: fix default resolver name
...
The "opendns" resolver has changed name to "cisco", causing the default
dnscrypt-proxy configuration to fail.
2016-03-09 02:59:30 +01:00
973219c973
vsftpd.nix: Add possibility to add RSA key file
2016-03-09 01:32:44 +00:00
09af15654f
Merge master into closure-size
...
The kde-5 stuff still didn't merge well.
I hand-fixed what I saw, but there may be more problems.
2016-03-08 09:58:19 +01:00
453686a24a
Merge pull request #13705 from aneeshusa/use-bin-instead-of-sbin-for-openssh
...
openssh: use bin instead of sbin folder
2016-03-07 12:03:37 +00:00
8cff02206b
Merge pull request #13725 from nathan7/bird-user
...
bird module: run as user/group `bird`, not `ircd`
2016-03-07 11:34:06 +00:00
67e93e984c
Merge pull request #13723 from Profpatsch/wheter
...
wheter -> whether
2016-03-07 10:51:43 +01:00
7f44b58609
wheter → whether
...
Nice weather today, isn’t it?
2016-03-07 03:06:54 +01:00
0360e410b7
bird module: run as user/group `bird`, not `ircd`
2016-03-07 02:02:58 +01:00
7135553cf1
unbound: drop sbin directory
2016-03-06 12:50:41 +00:00
bb39304ce6
openssh: use bin instead of sbin folder
...
References #11939 .
2016-03-05 23:56:32 -05:00
6048f0fbd6
Merge pull request #11738 from grwlf/syncthing
...
Support SOCKS5 proxy for the Syncthing service
2016-03-04 01:18:40 +00:00
6cf6c3fbc9
nixos: Fix build of manual
...
Broken by 17389e256f
2016-03-03 21:35:31 +01:00
6bd0c3fe9d
ifplugd: Remove
...
This package hasn't been updated in 11 years, and isn't really useful
anymore in a modern Linux system.
2016-03-03 19:43:11 +01:00
aa819b8d39
Merge pull request #13591 from mayflower/services/nntp-proxy
...
nntp-proxy service: init
2016-03-03 18:57:25 +01:00
bcdd81d9e1
networkmanager: Enable ipv6 privacy extensions by default
2016-03-03 12:01:01 -05:00
17389e256f
nntp-proxy service: init
2016-03-03 14:14:19 +01:00
23dd97ee88
Merge commit 'refs/pull/13412/head' of git://github.com/NixOS/nixpkgs
2016-03-02 18:56:24 +03:00
69d8cb4a6b
libreswan: add package and service to nixos
2016-03-02 09:44:30 -05:00
2d6696fc0a
nixos-modules: Fixes related to "literalExample" and "defaultText".
2016-02-29 01:47:12 +01:00
fd46f18cf6
nsd service: add build time config validation
2016-02-28 09:18:39 +01:00
c4c9019105
nsd service: make use of literalExample
2016-02-28 09:18:11 +01:00
6a096504cc
nsd service: add missing options
2016-02-28 09:18:11 +01:00
8442a7d12c
nsd service: code cleanup
...
Puts everything in alphanumeric order and removes unnecessary spaces to better
match NixOS coding style.
2016-02-28 09:18:11 +01:00
04422bb3ca
Merge pull request #8630 from lihop/nixos/fix-formatting
...
nixos: fix formatting of option examples
2016-02-27 10:08:37 +00:00
3cf9cd8bc3
Merge #12796 : nixos docs: show references to packages
...
(version 2) A better implementation of #10039 , after #12357 .
This time I did more thorough checking.
See commit messages for details.
2016-02-27 10:48:12 +01:00
f6f892e2d6
nsd service: fix formatting of example
2016-02-27 22:25:39 +13:00
70c02402c8
networkmanager: fix link-local ip addresses
...
NetworkManager needs an additional avahi-user to use link-local
IPv4 (and probably IPv6) addresses. avahi-autoipd also needs to be
patched to the right path.
2016-02-26 03:28:56 +01:00
d9d6a92d5e
sshd.nix: Ensure global config goes before user Match blocks
...
Hopefully fixes #13393 .
2016-02-23 18:03:33 +01:00
5d6d841d58
Merge pull request #13373 from tomberek/revert_kippo_twisted
...
kippo: revert twisted dependency
2016-02-22 23:50:17 +01:00
e31c8922e0
kippo: revert twisted dependency
2016-02-22 13:57:24 -05:00
686c09dd38
wpa_supplicant module: after network-interfaces.target
...
fixes #13136
2016-02-20 17:41:02 +00:00
cbb06df02f
Merge pull request #13142 from zimbatm/zerotierone-1.1.4
...
Zerotierone 1.1.4
2016-02-20 17:09:59 +03:00
433f979cee
zerotierone: adopt systemd unit from upstream
...
See
5db538d85e/ext/installfiles/linux/systemd/zerotier-one.service
2016-02-19 22:56:19 +00:00
de787adb90
tlsdated: add missing default value for extraOptions
2016-02-18 05:29:12 +01:00
7bdcfb33f4
nixos: Provide a defaultText for type = package
...
We don't want to build all those things along with the manual, so that's
what the defaultText attribute is for.
Unfortunately a few of them were missing, so let's add them.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-02-17 21:12:24 +01:00
e9520e81b3
Merge branch 'master' into staging
2016-02-17 10:06:31 +01:00
1c8a21dfad
Merge branch 'pdnsd-service' of https://github.com/nfjinjing/nixpkgs
...
Closes #12932
2016-02-16 20:35:01 +03:00
483e78d0f0
unbound service: add fetching root anchor for DNSSEC
2016-02-15 03:59:42 +01:00
9ba533ee4a
unbound service: add types to options
2016-02-15 03:59:35 +01:00
fe4b0a4801
unbound service: retab
2016-02-15 03:59:15 +01:00
d039c87984
Merge branch 'master' into closure-size
2016-02-14 08:33:51 +01:00
9c249a3adf
nixos: i2pd, make config options adhere to version 2.4.0
2016-02-13 15:22:31 +01:00
73b9a9662d
pdnsd service: init
2016-02-12 19:53:41 +08:00
fc8a16f4ed
unifi: LD_LIBRARY_PATH hack for embedded libsnappyjava.so, fixes #12897
2016-02-11 09:06:33 -08:00
5c19830b77
tinc: chroot option
2016-02-10 17:29:36 +01:00
c768172919
tinc: enable chroot
2016-02-10 01:49:41 +01:00
9e986c161b
wpa_supplicant module: add an option for accepting raw PSKs
...
fix #12892
2016-02-09 17:20:35 +01:00
5a13e9500c
nixos/nix-serve: use bzip2.bin output
2016-02-07 18:38:00 -06:00
a115bff08c
Merge branch 'master' into staging
2016-02-07 13:52:42 +01:00
ae74c356d9
Merge recent 'staging' into closure-size
...
Let's get rid of those merge conflicts.
2016-02-03 16:57:19 +01:00
4fede53c09
nixos manuals: bring back package references
...
This reverts most of 89e983786aFixes #10039 , at least most of it.
The `sane` case wasn't fixed, as it calls a *function* in pkgs to get
the default value.
2016-02-03 14:47:14 +01:00
9f358f809d
Configure a default trust store for openssl
2016-02-03 12:42:01 +01:00
889351af8b
Revert "Merge #12357 : nixos docs: show references to packages"
...
The PR wasn't good enough yet.
This reverts commit b2a37ceeea7fa9a1abce
2016-02-03 12:16:33 +01:00
b2a37ceeea
Merge #12357 : nixos docs: show references to packages
2016-02-03 10:07:27 +01:00
ecefd2167a
nixos/connman: Fix assertion for networkmanager
...
Regression introduced by 5184aaa1ea
2016-02-01 19:33:50 +01:00
5184aaa1ea
Use booleans properly
2016-02-01 18:19:23 +01:00
a7b7ac8bfb
openssh: Enable DSA host/client keys
...
This applies a patch from Fedora to make HostKeyAlgorithms do the
right thing, fixing the issue described in
401782cb67
2016-02-01 16:31:43 +01:00
bfebc7342e
Fix some references to deprecated /etc/ssl/certs/ca-bundle.crt
2016-01-29 02:32:05 +01:00
a4d977e01f
syncthing: support SOCKS5 proxying for relays
2016-01-27 22:47:09 +03:00
e395cb0214
Merge pull request #12601 from tomberek/gateone_update
...
Gateone: fix cacerts dependency
2016-01-25 23:14:53 +03:00
80d38d12b4
Gateone: fix cacerts dependency
2016-01-24 16:52:06 -05:00
f8c3130e0f
softether: Fixed problems with using systemd services
2016-01-20 03:47:33 +01:00
1c393cbb3c
gale service: fix permissions configuration, fixes #12457
2016-01-20 02:09:40 +01:00
716aac2519
Merge branch 'staging' into closure-size
2016-01-19 09:55:31 +01:00
a04a7272aa
Add missing 'type', 'defaultText' and 'literalExample' in module definitions
...
- add missing types in module definitions
- add missing 'defaultText' in module definitions
- wrap example with 'literalExample' where necessary in module definitions
2016-01-17 19:41:23 +01:00
e7ba7fba01
gale: init at 1.1happy
2016-01-13 12:00:50 -08:00
3bcf8ae879
nixos manuals: bring back package references
...
This reverts most of 89e983786aFixes #10039 , at least most of it.
The `sane` case wasn't fixed, as it calls a *function* in pkgs to get
the default value.
2016-01-13 12:04:31 +01:00
23772ef0a2
ejabberd: make config parameter nullable, so that the default bundled config can be used if none is given
2016-01-12 17:12:47 +00:00
8b8f864e48
Merge pull request #12103 from rick68/ostinato
...
Ostinato
2016-01-11 00:09:32 +01:00
d0510febe1
nixos/ejabberd: update service
2016-01-10 21:28:27 +03:00
8cb22c0a63
consul service: add package option
2016-01-08 01:44:28 +01:00
4a511911bb
Merge branch 'rm-notbit' of git://github.com/jgillich/nixpkgs
2016-01-07 14:34:40 -05:00
57cb5ab17a
Merge pull request #12198 from mayflower/remove-upstart-layer
...
Remove upstart layer
2016-01-07 13:47:39 -05:00
a68450e509
Merge pull request #12009 from mayflower/tinc-module
...
tinc module: Ed25519PrivateKeyFile, BindToAddress
2016-01-07 12:48:35 +01:00
4dc7cab40e
nixos: btsync - switch to using systemd user services
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2016-01-07 03:33:38 -06:00
1a0d004cc2
tinc module: Ed25519PrivateKeyFile, listenAddress
2016-01-07 09:13:28 +00:00
88292fdf09
jobs -> systemd.services
2016-01-07 06:39:06 +00:00
d89454bb79
nixos: btsync - add directoryRoot option
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2016-01-07 00:09:20 -06:00
57d6dfe932
notbit: removed dead package
...
The Bitmessage protocol v3 became mandatory on 16 Nov 2014 and notbit does not support it, nor has there been any activity in the project repository since then.
2016-01-07 04:39:51 +01:00
246f0e91cd
wpa_supplicant service: Warn about plaintext keys in docs
2016-01-06 03:58:39 +00:00
609457458e
wpa_supplicant module: remove preStart hack
...
If the config file is managed imperatively we shouldn't touch it.
2016-01-06 03:58:39 +00:00
d03b35f881
wpa_supplicant module: add networks option
2016-01-06 03:58:39 +00:00
3a5f488445
wpa_supplicant module: refactor
2016-01-06 03:58:39 +00:00
7d973a56d0
wpa_supplicant module: remove obsolete option
...
networking.WLANInterface has been obsolete for years
2016-01-06 03:58:39 +00:00
49d18bdfcb
Revert "Basic Declaritive Network Configuration in wpa_supplicant Service"
2016-01-05 19:32:41 +01:00
d807b057ed
Merge pull request #11920 from bjornfor/rename-host-to-listen-address
...
Rename NixOS option names: 'host' to 'listenAddress'
2016-01-05 12:54:15 +01:00
94e6323de0
Merge pull request #12015 from mayflower/wpa_supplicant-service
...
Basic Declaritive Network Configuration in wpa_supplicant Service
2016-01-05 10:53:13 +01:00
bd035405f4
ostinato: add ostinato in NixOS services
2016-01-04 14:29:02 +08:00
f9f6f41bff
Merge branch 'master' into closure-size
...
TODO: there was more significant refactoring of qtbase and plasma 5.5
on master, and I'm deferring pointing to correct outputs to later.
2015-12-31 09:53:02 +01:00
f41603d8a6
Merge pull request #11940 from jgillich/dnsmasq-leases
...
dnsmasq: create state dir for dhcp leases file
2015-12-30 16:50:14 +01:00
4bf7afc78e
wpa_supplicant module: remove preStart hack
...
If the config file is managed imperatively we shouldn't touch it.
2015-12-29 18:49:39 +00:00
56a53ff458
wpa_supplicant module: add networks option
2015-12-29 18:49:39 +00:00
9dceabc95d
wpa_supplicant module: refactor
2015-12-29 18:49:39 +00:00
57210ce1c1
wpa_supplicant module: remove obsolete option
...
networking.WLANInterface has been obsolete for years
2015-12-29 18:49:38 +00:00
fe9a7c6d5b
Merge pull request #11956 from zimbatm/nm-openvpn-uid-gid
...
networkmanager: set uid/gid for the networkmanager openvpn agent
2015-12-27 11:02:55 +01:00
ae4a7f9351
hostapd: rename extraCfg -> extraConfig, added asserts
2015-12-26 11:37:00 +01:00
a193ea3700
dnsmasq: create state dir for dhcp leases file
...
ref #11718
2015-12-24 22:36:19 +01:00
46924e77a2
nixos/sslh: rename 'host' to 'listenAddress'
...
More descriptive option name.
2015-12-24 00:23:51 +01:00
6c2fc3a5ac
nixos/shout: rename 'host' to 'listenAddress'
...
More descriptive option name.
2015-12-24 00:22:47 +01:00
3acf8132c3
murmur: sslCa and extraConfig options, fixes #11419
2015-12-22 01:28:39 +01:00
cdd7310a50
nixos avahi-daemon: add new option declarations
...
Add new option declarations to control what information is published
by the avahi daemon. The default values are chosen to respect the
privacy of the user over the connectivity of the system.
2015-12-21 18:20:35 +01:00
0f1de2ea9f
miniupnpd: firewall config
2015-12-13 16:44:58 +01:00
6734127545
shairport-sync service: add module
...
Adds a new service module for shairport-sync. Tested with a local
and remote pulseaudio server. Needs to be run as a user in the pulse group
to access pulseaudio.
2015-12-12 20:30:47 +01:00
5b0352a6a4
Merge branch 'master' into closure-size
2015-12-11 18:31:00 +01:00
bc8d08a511
Merge pull request #11548 from jgillich/upnpd
...
miniupnpd: add service
2015-12-10 23:32:51 +03:00
29871ee2dd
miniupnpd: add service
2015-12-09 00:28:41 +01:00
c515be4651
networkmanager: set uid/gid for the networkmanager openvpn agent
...
Fixes #11317
2015-12-08 16:47:56 +00:00
80720501cb
ddclient: fix ssl option
2015-12-08 11:11:14 +01:00
9a350d5f1e
cntlm: refactor to systemd service, fixes #11339
2015-12-07 15:40:43 +01:00
6c9931c556
shout: fix preStart, fixes #11516
...
preStart must be a string
2015-12-07 15:24:29 +01:00
214a9537c8
hostapd service: improve option descriptions
2015-12-05 23:42:56 +01:00
e2720bfb70
nsd service: use mkEnableOption
2015-12-04 16:13:02 +01:00
db43a79f10
strongswan service: use config.system.sbin.modprobe instead of kmod
...
Fixes : #8343
2015-11-30 01:50:57 +01:00
920b1d3591
Merge branch 'master' into closure-size
2015-11-29 16:50:26 +01:00
072aa5000f
Merge pull request #11329 from ctheune/submit/pkg-syncthing-update-0.12.4
...
syncthing: 0.11 -> 0.12
2015-11-29 15:51:00 +01:00
f6627a9402
syncthing: 0.11 -> 0.12
...
Also, keep 0.11 around (in an updated version) and make the
pkg an option to the service module.
2015-11-28 20:17:49 +01:00
cc63832981
Merge pull request #8758 from fpletz/package/chrony
...
chrony: 2.1.1 -> 2.2 & service improvements
2015-11-26 13:22:33 +01:00
a412927924
Merge remote-tracking branch 'origin/master' into closure-size
2015-11-25 21:37:30 +01:00
bfcde5cc38
i2pd: patch to enable tunnelcfg usage
...
nixos: i2pd service, use tunnelscfg to pass nix tunnel specifications
2015-11-22 20:35:59 +01:00
333d69a5f0
Merge staging into closure-size
...
The most complex problems were from dealing with switches reverted in
the meantime (gcc5, gmp6, ncurses6).
It's likely that darwin is (still) broken nontrivially.
2015-11-20 14:32:58 +01:00
6602f49495
Revert "Revert "Merge pull request #9543 from NixOS/staging.post-15.06""
...
This reverts commit 741bf840da
2015-11-14 12:32:51 -08:00
9579c9ec7f
Merge commit 'cb21b77' into master.upstream
...
This is a partial merge of staging for builds which are working
2015-11-13 15:53:10 -08:00
c75d1e761a
Change argument --port to --listen in nix-serve.nix
2015-11-13 21:25:50 +08:00
14ecf0c7fb
services.tlsdated: use google.com as default host
...
www.ptb.de returns incorrect dates.
2015-11-11 12:07:08 +01:00
6681c66db8
networkmanager service: add unmanaged option
2015-11-10 12:20:55 +01:00
91fe21c854
quassel service: Support multiple listen addresses, fixes #10924
2015-11-10 11:10:21 +01:00
a26c8e9b83
Merge branch 'master.upstream' into staging.upstream
2015-11-07 15:51:51 -08:00
07405ee187
Merge pull request #9463 from khumba/nm-connection-sharing
...
Fix NetworkManager connection sharing
2015-11-06 11:16:50 +01:00
e695b245a9
Merge pull request #9805 from Mathnerd314/quassel-fix
...
quassel: Start after its databases
2015-11-06 11:14:54 +01:00
d89f269b26
chrony service: Members of group chrony can use chronyc
2015-11-03 15:07:18 +01:00
c459e269eb
chrony service: Integration with other ntp daemons
2015-11-03 15:07:18 +01:00
4591e72917
Fixed wrong documentation for Wake-On-LAN feature
2015-10-31 12:55:34 +01:00
dd2de66d61
Merge branch 'master.upstream' into staging.upstream
2015-10-30 17:16:07 -07:00
01b0355140
nm-openvpn: add user/group, closes #10689
...
(cherry picked from commit 551dad3ffd055d5df5de6878a74432d85ecbd114)
Signed-off-by: Domen Kožar <domen@dev.si>
2015-10-29 09:59:08 +01:00
84903a4846
nixos: use "example.net" host name in autossh documentation
2015-10-28 20:04:36 +01:00
b8dd60aaa6
nixos: remove redundant services.autossh.enable option
...
The service is enabled automatically when 'session' is non-empty.
2015-10-28 19:50:06 +01:00
be1fa3c9da
Merge pull request #10650 from grwlf/autossh-nixos
...
autossh.nix: AutoSSH service as a NixOS module
2015-10-28 11:31:51 +01:00
d355ed81cb
autossh.nix: add the module, which run autossh sessions as systemd services
2015-10-28 00:23:13 +03:00
6fb7b9b664
networkmanager: don't check if subject is active (false in my X session)
...
(cherry picked from commit 4c2bbb248cf22ad3c3541ba7d38bbc3abb40c706)
Signed-off-by: Domen Kožar <domen@dev.si>
2015-10-23 20:16:49 +02:00
4917a4f8b3
Merge master into staging
2015-10-23 01:57:14 +02:00
de9e05153d
service.asterisk: fix dir creation
2015-10-19 19:05:23 +02:00
8a44a36ca4
Merge branch 'master.upstream' into staging.upstream
2015-10-15 10:22:28 -07:00
a65cf63f55
copy-com service: order after network-online.target
...
I doubt that ordering non-sysvinit services after network.target ever
makes sense. In this case, CopyConsole requires DNS lookups and fails
if these are not yet possible.
2015-10-13 21:02:01 +02:00
12487536d2
libgpgerror: split dev and info outputs
2015-10-13 20:19:00 +02:00
99e4371526
curl: split into multiple outputs
...
Also use pkgconfig to be safer and fix (some) referrers.
2015-10-13 20:18:48 +02:00
c6b2365e9a
supplicant module: extended module for wpa_supplicant
...
Add new configuration options for wpa_supplicant and allow to
configure and start one wpa_supplicant per device.
2015-10-06 20:12:40 +02:00
741bf840da
Revert "Merge pull request #9543 from NixOS/staging.post-15.06"
...
This reverts commit f61176c539a27ca029ee
2015-10-06 15:24:20 +02:00
f361938b21
Merge staging into closure-size
...
This makes gcc5 the default builder, etc.
2015-10-03 15:23:13 +02:00
5227fb1dd5
Merge commit staging+systemd into closure-size
...
Many non-conflict problems weren't (fully) resolved in this commit yet.
2015-10-03 13:33:37 +02:00
0474cb3c6d
Merge pull request #10078 from nmikhailov/nm_service
...
Enable setting extended NetworkManager hooks
2015-10-02 11:45:28 +02:00
4578784820
nixos: add services.bind.extraConfig option
...
This option allows users to add arbitrary configuration statements into
the generated named.conf file.
2015-09-29 11:51:40 +02:00
6d5a742c2e
Merge pull request #10000 from ts468/upstream.vswitch
...
nixos networking: add vswitch option
2015-09-29 00:52:58 +02:00
89b306a7ff
Enable setting extended NetworkManager hooks
2015-09-26 23:59:31 +06:00
ee7e17c6a7
Merge pull request #9984 from grwlf/syncthing
...
syncthing: update systemd service config according to upstream example
2015-09-26 18:38:20 +02:00
59bc47c9ed
nixos networking: add vswitch option
...
Add a configuration option for Open vSwitch that is
similar to the option for the Linux kernel ethernet
bridge.
2015-09-25 11:55:27 +02:00
89e983786a
Manual: Remove store path references
2015-09-24 11:50:58 +02:00
9f191abad1
syncthing: update systemd service config according to upstream example
...
The example service config were taken from the syncthing repo:
https://github.com/syncthing/syncthing/blob/master/etc/linux-systemd/system/syncthing@.service
2015-09-21 21:17:38 +00:00
d6fd3c4270
Merge pull request #9317 from dfoxfranke/oidentd-ipv6
...
oidentd: listen on IPv6
2015-09-18 15:20:02 +02:00
095bf185ec
connman: improved configuration support
2015-09-12 23:31:50 +09:00
91e6a8e5a2
quassel: Start after its databases
2015-09-11 15:42:35 -06:00
684cd17ff5
dnschain nixos module: init
2015-09-10 18:11:40 +02:00
8db7c14e56
namecoind nixos module: security enhancements
2015-09-10 18:11:40 +02:00
f4b7be4f04
nixos ntpd: allow passing extra flags
2015-09-10 10:58:13 +02:00
64eb5527ba
nixos: remove the obsolete 'services.openvpn.enable' option
...
OpenVPN is enabled implicitly when configuring 'services.openvpn.servers', so the
"enable" option is meaningless since b2910df04ehttps://github.com/NixOS/nixpkgs/issues/9764 .
2015-09-10 10:38:38 +02:00
90a7bb69d0
Merge pull request #9711 from anderspapitto/bitlbee
...
plugin support for bitlbee, and facebook plugin
2015-09-09 03:03:53 +03:00
78f7a09e3a
bitlbee service: enable plugins
2015-09-08 14:24:50 -07:00
cb4bea5f97
namecoind nixos module: fix environment variable
2015-09-08 22:37:10 +02:00
b6fb760484
namecoind nixos module: init
2015-09-08 20:17:52 +02:00
5e21271af0
dnsmasq nixos module: fix path in systemd service
2015-09-08 19:33:01 +02:00
f4de446573
NetworkManager: fix dnsmasq interaction for ad-hoc networks
...
Fixes #7593 (NM can't find the dnsmasq binary); the NM expression is missing
dnsmasq in its buildInputs, so configure can't find it.
Also creates /var/lib/misc which dnsmasq expects to exist, because it puts
dnsmasq.leases there.
2015-09-07 14:04:32 -07:00
44788bb2ce
fixed syncthing service to work as expected
2015-09-02 18:14:21 +02:00
14321ae243
Rename users.extraUsers -> users.users, users.extraGroup -> users.groups
...
The "extra" part hasn't made sense for years.
2015-09-02 17:34:23 +02:00
fc96dbb1a2
oidentd: listen on IPv6
2015-08-30 10:53:08 -04:00
287c08d8a3
Rename services.openssh.knownHosts -> programs.ssh.knownHosts
...
This option configures the SSH client, not the server.
2015-08-27 15:32:46 +02:00
a45a0911d4
Merge pull request #9376 from rick68/softether
...
softether: support SoftEther VPN 4.18
2015-08-26 10:45:46 +02:00
648973d641
nixos: rename service 'ubuntu-fan' as 'fan'
2015-08-22 14:05:35 -04:00
efd34824eb
softether: support SoftEther VPN 4.18
2015-08-21 13:59:00 +08:00
401782cb67
Revert "openssh: 6.9p1 -> 7.0p1"
...
This reverts commit a8eb2a6a81
2015-08-20 14:08:18 +02:00
40582b68f4
Merge pull request #9354 from offlinehacker/nixos/skydns/fixdns
...
skydns service: fix skydns nameservers env option
2015-08-20 02:26:33 +02:00
ed356eefa6
skydns service: fix skydns nameservers env option
2015-08-19 23:54:54 +02:00
c171cfabed
nixos/racoon: create /var/racoon upon start
2015-08-19 23:38:44 +02:00
1f2eef5ae9
openssh: Re-enable DSA client keys
...
This was broken by a8eb2a6a81
2015-08-18 13:11:45 +02:00
c1ee8fefd4
nixos: add support for Ubuntu Fan Networking
...
This provides support for Ubuntu Fan Networking [1].
This includes:
* The fanctl package, and a corresponding NixOS service.
* iproute patches.
* kernel patches.
closes #9188
1: https://wiki.ubuntu.com/FanNetworking
2015-08-13 14:27:14 -04:00
2c5775b141
i2p service: use mkEnableOption
2015-08-09 02:29:35 +02:00
076e90c67a
Merge pull request #9150 from tomberek/gateone_setup
...
gateone: Fix startup
2015-08-08 15:35:08 +02:00
6b280b648f
kippo: fix check for pidPath
2015-08-07 01:01:22 -04:00
825b8403a2
Check for pidDir and create
2015-08-07 00:43:29 -04:00
4f7819b89c
dnsmasq restarts if /etc/hosts file is changed by nixos-rebuild
2015-08-05 03:36:19 -07:00
cb6dc71599
GateOne: init at 1.2
2015-08-03 11:01:05 -04:00
ad4c957163
shout service: New module.
2015-08-01 03:36:45 -07:00
e5a93ab201
Revert "nixos/quassel: Temporarily switch back to qt4 since qt5 tls in quassel is broken"
...
This reverts commit c61d048427
2015-07-30 21:24:11 -05:00
a5b83c3573
sshd: Use RSA and ED25519 host keys
...
Closes #7939 .
2015-07-27 20:30:10 +02:00
abc7c1b013
nixos/firewall: Add the ability to specify additional packages for extraCommands
2015-07-26 16:33:03 -07:00
f64589b2ef
firewall: Don't depend on ipset
...
NixOS doesn't use it, so no reason to include it.
2015-07-26 22:45:39 +02:00
078ee4ac55
copy-com: 1.47.0410 -> 3.2.01.0481 + several fixes
...
The graphical UI (the largest part of this package) never worked; fixed.
Added myself as a maintainer.
2015-07-25 04:39:02 +02:00
636f9ac0ed
Merge pull request #8799 from ryantm/master
...
heyefi service: init
2015-07-24 10:11:26 +02:00
1306c11b94
bitlbee service: fix typo
2015-07-16 02:43:27 +02:00
9d485d9433
heyefi service: make uploadDir path more generic and a string
2015-07-14 06:56:30 -07:00
d11edff860
heyefi service: use mkEnableOption
2015-07-14 06:54:51 -07:00
d6cee31b04
heyefi service: init
2015-07-14 06:42:02 -07:00
7b38cb699d
services.openssh.knownHosts.*.publicKey: Update description and add example
...
Note that it's no longer allowed to have multiple public keys
separated by a newline.
2015-07-13 16:21:57 +02:00
baab714b2e
charybdis service: fix preStart script
2015-07-13 15:11:18 +02:00
2e49828d9c
firefox sync-server service: make path to paster executable absolute
...
The systemd service was ignoring ExecStart because the path to the
paster executable was not absolute. Because ExecStart was ignored, the
service would not start.
2015-07-12 20:43:52 +12:00
a456168e5b
Merge pull request #6702 from joachifm/dnscrypt-proxy
...
nixos: some improvements for dnscrypt-proxy
2015-07-12 00:17:46 -07:00
1e4483b1ec
nixos/bitlbee: fixed protocols option
2015-07-08 19:30:20 +02:00
c0de3b306b
nixos/bitlbee: add hostname, config dir and protocols options
2015-07-08 19:14:36 +02:00
7e7371fe3c
Merge pull request #8639 from sjmackenzie/zerotierone
...
zerotier-one: service add
2015-07-08 02:15:14 +03:00
5297371b95
zerotier-one: service add
2015-07-07 07:11:44 +08:00
c61d048427
nixos/quassel: Temporarily switch back to qt4 since qt5 tls in quassel is broken
2015-07-05 16:53:42 -07:00
093a8994f9
Merge pull request #8624 from ambrop72/minidlna-update
...
minidlna 1.1.4
2015-07-04 13:59:32 +03:00
2fd9d56f51
nixos/skydns: fixed reference to skydns
2015-07-04 09:43:28 +02:00
42a5ad5c5e
minidlna: 1.0.25 -> 1.1.4
...
Changes:
- gettext is needed to build
- Switched to using non-legacy ffmpeg.
- Removed ffmpeg stuff from include path since it causes build errors related to
a time.h header.
- Removed unneeded patch.
- Adjusted NixOS service due to the binary being renamed.
2015-07-04 09:16:28 +02:00
9dab1a840c
tvheadend: init at 4.0.4
2015-06-24 13:22:09 +00:00
6532863ac4
unifi: 3.2.10 -> 4.6.3
2015-06-23 10:09:44 -07:00
cf44a27fc4
fix argument in mkEnableOption
2015-06-21 18:21:21 +03:00
295846a254
nixos/nix-serve: Run as a separate user and add a signing key parameter
2015-06-17 19:10:39 -07:00
6e6a96d42c
Some more type cleanup
2015-06-15 18:18:46 +02:00
19ffa212af
types.uniq types.int -> types.int
...
types.int already implies uniqueness.
2015-06-15 18:11:32 +02:00
c738b309ee
types.uniq types.bool -> types.bool
2015-06-15 18:10:26 +02:00
9366af1b94
"types.uniq types.string" -> "types.str"
2015-06-15 18:08:49 +02:00
ffc6275e55
dnscrypt-proxy service: support custom providers
...
The primary use-case is private DNSCrypt providers.
Also rename the `port` option to differentiate it from the
`customResolver.port` option.
2015-06-12 15:12:33 +02:00
8131065b63
dnscrypt-proxy service: use mkEnableOption
2015-06-12 15:12:33 +02:00
2e8bc2bd5c
nixos: cosmetic improvements to dnscrypt-proxy service module
...
Remove superflous whitespace & comments
2015-06-12 15:12:33 +02:00
a88a6bc676
nixos: additional hardening for dnscrypt-proxy
...
- Run as unprivileged user/group via systemd, obviating the need to
specify capabilities, etc.
- Run with private tmp and minimal device name space
2015-06-12 15:12:33 +02:00
823bb5dd4d
nixos: implement socket-activation for dnscrypt-proxy
...
The socket definition is derived from upstream with the
exception that it does not depend on network.target, as
this creates a cycle between basic.target and sockets.target.
The apparmor profile has been updated to account for additional
runtime dependencies introduced by enabling systemd support.
2015-06-12 15:12:33 +02:00
dfe20de782
nixos: permit dnscrypt-proxy service to read basic user/group info
...
If nscd is not running, dnscrypt-proxy crashes without read access
to /etc/{password,group,nsswitch.conf}.
2015-06-12 15:12:30 +02:00
b79a5e812a
nixos/quassel: Use qt5 instead of qt4
...
This really speeds up building quassel daemon since qt5 can be built in
parallel while qt4 cannot.
2015-06-08 15:37:34 -07:00
c9da002a07
nixos/consul: fix consul alerts enable
2015-06-08 13:41:43 +02:00
23504e5bf2
Add skydns module
2015-06-08 13:36:05 +02:00
714377f8dc
bittorrentsync: fix storage_path.
...
If this path is a symlink, btsync won't be able to read it if it's not ending with "/".
As seen in f02d4ec9ed0539ed4771
2015-06-05 18:39:01 +03:00
1113efec5e
Merge pull request #7559 from offlinehacker/openvswitch/ipsec
...
openvswitch: ipsec support
2015-05-26 11:26:02 +01:00
a35e1ddfb2
Merge pull request #7566 from offlinehacker/nixos/node-docker-registry/module
...
nixos: add node docker registry server
2015-05-26 11:07:22 +01:00
aff1c293ef
Merge pull request #7998 from dezgeg/pr-ddclient-ssl
...
ddclient: Set SSL_CERT_FILE environment variable
2015-05-26 10:25:47 +02:00
2966068968
ddclient: Set SSL_CERT_FILE environment variable
...
Otherwise connection to SSL hosts fails like this:
May 26 06:44:05 kbuilder ddclient[17084]: WARNING: cannot connect to dynamicdns.park-your-domain.com:443 socket:
IO::Socket::IP configuration failed SSL connect attempt failed with unknown error
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
2015-05-26 06:45:25 +03:00
50fa9d8eea
Merge pull request #7941 from peti/allow-custom-ssh-moduli-file
...
nixos: add config.services.openssh.moduliFile option so that users can replace the default file from OpenSSH
2015-05-22 20:51:42 +02:00
86d299bc6e
nixos: add config.services.openssh.moduliFile option so that users can replace the default file from OpenSSH
...
The man page for ssh-keygen(1) has a section "MODULI GENERATION" that describes
how to generate your own moduli file. The following script might also be helpful:
| #! /usr/bin/env bash
|
| moduliFiles=()
|
| generateModuli()
| {
| ssh-keygen -G "moduli-$1.candidates" -b "$1"
| ssh-keygen -T "moduli-$1" -f "moduli-$1.candidates"
| rm "moduli-$1.candidates"
| }
|
| for (( i=0 ; i <= 16 ; ++i )); do
| let bitSize="2048 + i * 128"
| generateModuli "$bitSize" &
| moduliFiles+=( "moduli-$bitSize" )
| done
| wait
|
| echo >moduli "# Time Type Tests Tries Size Generator Modulus"
| cat >>moduli "${moduliFiles[@]}"
| rm "${moduliFiles[@]}"
Note that generating moduli takes a long time, i.e. several hours on a fast
machine!
This patch resolves https://github.com/NixOS/nixpkgs/pull/5870 .
2015-05-22 16:28:45 +02:00
31a273cb14
nixos/tinc: users are system users
2015-05-21 20:11:13 -07:00
4ed8cdc3d4
nixos/bird: Fix doc compilation
2015-05-20 18:53:54 -07:00
9d07c54fa1
nixos: add bird module
...
patch bird to look in /var/run for birc.ctl
2015-05-19 15:42:24 +02:00
946e7dca61
Merge pull request #7842 from dezgeg/pr-nix-serve
...
nix-serve: Add nixos module
2015-05-14 22:44:43 +03:00
fd8cb1ff2d
nix-serve: Add nixos module
...
This allows sharing the Nix store of the machine as a binary cache
simply by setting 'services.nix-serve.enable = true'.
2015-05-14 12:27:28 +03:00
fc8011ad8d
Ensure that nscd, sshd are created as system users
...
c0f70b4694http://hydra.nixos.org/build/22182588
2015-05-13 16:23:36 +02:00
2806491cc4
nixos/consul: Add shell for health checks
2015-05-11 17:44:07 -07:00
b6e26aa8df
nixos/consul: Support a config directory for health checks
2015-05-11 16:45:04 -07:00
1938dc9b54
nixos/consul: Remove the joinNodes and joinRetries options as they are now built in consul options
2015-05-11 16:27:53 -07:00
c0727fb751
Merge pull request #7788 from Lassulus/charybdis
...
add charybdis nixos module
2015-05-11 12:57:58 +03:00
304cab2b46
add charybdis nixos module
2015-05-11 11:38:53 +02:00
074c4a7f78
Merge remote-tracking branch 'upstream/master' into staging
2015-05-07 01:44:49 -07:00
3b9ef2c71b
fix "libc}/lib" and similar references
...
Done mostly without any verification.
I didn't bother with libc}/include, as the path is still correct.
2015-05-05 11:52:08 +02:00
a6ebccfbb8
Sane default configuration for sabnzbd module
...
Added option to set user. Use unpriviledged user by default. Add sane
default for configuration location.
2015-05-05 00:18:22 -04:00
30f31c9afc
Merge 'master' into staging
...
(relatively simple conflicts)
2015-04-26 22:52:08 +02:00
ff095f5002
nixos: add node docker registry server
2015-04-25 16:16:34 +02:00
34f1c39fe0
nixos: fix cjdns json config
...
filter extraneous attributes from config modules
2015-04-25 09:40:44 -04:00
b5114de4ac
nixos: add racoon ipsec IKE deamon
2015-04-25 15:31:27 +02:00
db3b86560f
GNOME 3.16.1, closes #7357
2015-04-25 12:02:33 +02:00
4ea47155af
Merge pull request #7498 from k0ral/sslh
...
sslh: argument to -F can no longer be separated from the option by a space
2015-04-23 21:35:46 +02:00
a498b28322
wait for filesystem before starting btsync; bump to latest package version
2015-04-23 13:09:34 +00:00
88ce17b6e1
sslh: argument to -F can no longer be separated from the option by a space
2015-04-21 16:29:25 +00:00
7585d42d2b
Fix #7354 - Accept _module attributes added to every submodule.
2015-04-20 23:58:32 +02:00
0f5d5f9d12
lambdabot: add named pipe for incoming commands
2015-04-20 18:56:48 +03:00
c0f70b4694
Remove fixed uids for nscd, sshd
...
These services don't create files on disk, let alone on a network
filesystem, so they don't really need a fixed uid. And this also gets
rid of a warning coming from <= 14.12 systems.
2015-04-19 22:06:45 +02:00
1f513c21f9
Merge pull request #7461 from dezgeg/pr-ddclient-unit-type
...
ddclient: Fix capitalization of systemd unit keys
2015-04-19 15:27:21 +02:00
e7843efe12
ddclient: Fix incorrectly capitalized systemd unit key
...
This avoids the following warning:
Apr 19 10:53:48 xen systemd[1]: [/nix/store/...-unit-ddclient.service/ddclient.service:19] Unknown lvalue 'type' in section 'Service'
As `Type=simple` is the default in systemd, the assignment to the
service type can be simply dropped.
2015-04-19 15:58:34 +03:00
cdb174c18d
Added NixOS module for Asterisk server
2015-04-16 17:41:37 -06:00
a0f69df10e
dnsmasq: Add some types
2015-04-16 19:13:26 +02:00
1d6723c085
lambdabot: add nixos service
2015-04-16 13:33:40 +03:00
5b075eb400
i2p: add nixos service
2015-04-15 12:52:06 +02:00
3eef61a6eb
NixOS Manual: Do not use unfree packages as default value.
2015-04-08 23:14:19 +02:00
e52e160190
Merge pull request #7215 from cwoac/btsync2
...
Add support for btsync 2.x branch
2015-04-06 18:50:05 +03:00
0539ed4771
Add support for btsync 2.x branch
2015-04-06 15:31:40 +00:00
b3c423757e
nixos/rdnssd: Major refactoring
...
This updates rdnssd to the following:
* Using the systemd interfaces directly
* Using the rdnssd user instead of the root user
* Integrating with resolvconf instead of writing directly to /etc/resolv.conf
2015-04-04 21:20:07 -07:00
16f047a60f
nixos/networkmanager: support l2tp
2015-03-29 13:09:02 +03:00
5c6d86540b
nixos: use types.enum instead of ad-hoc check in sshd service
2015-03-26 12:43:42 +00:00
ff22e19fc4
Merge pull request #6893 from hrdinka/nsd-config-options
...
nsd: Fix automatic config options
2015-03-23 13:19:29 +03:00
664592561d
nixos: added aiccu service
2015-03-20 22:01:35 +01:00
d3a2edb8ce
nsd: Fix automatic config options
2015-03-19 12:10:55 +01:00
6db8155e37
nsd: Update from 4.1.0 -> 4.1.1
2015-03-18 21:01:35 +01:00
359bc60ec8
Merge pull request #6448 from eduarrrd/ddclient
...
ddclient module: fix module
2015-03-17 12:38:12 +01:00
fe79bf34a5
Merge pull request #6512 from bjornfor/nixos-haproxy-cleanup
...
nixos/haproxy: remove broken default 'config'
2015-03-11 16:29:06 +01:00
d31202fba2
sshd: Enable seccomp sandboxing
2015-03-09 11:27:19 +01:00
579159c72b
Add dispatcher configuration options to NetworkManager module
2015-03-08 20:24:53 +01:00
9ce0c1cb71
nixos/consul: Fix timeout bugs and json formatting
2015-02-25 15:42:43 -08:00
f27fa79aa9
nixos/dnsmasq: Fix service name typo
2015-02-25 09:22:16 -08:00
4bf66ba89c
ddclient module: fix module
...
* rewrite to systemd.services
* disable forking to give systemd better control
* verifiably run as ddclient user
* expose ssl option
* unset default value for dyndns server
* rename option "web" to "use" to be consistent with ddclient docs
* add descriptions
* add types to options
* clean up formatting
2015-02-23 22:37:20 -05:00
b70bd0879b
sshd: Generate a ed25519 host key
2015-02-23 17:00:07 +01:00
ffb4797dd3
nixos/haproxy: remove broken default 'config'
...
HAProxy fails to start with the default 'config'. Better disable it and
assert that the user provides a suitable 'config'. (AFAICS, there cannot
really be a default config file for HAProxy.)
2015-02-22 12:30:14 +01:00
419a4166a7
nixos/haproxy: small cleanup
...
* Add option types
* Rewrite option descriptions
* /var/run/haproxy.pid => /run/haproxy.pid (canonical location)
2015-02-22 12:29:34 +01:00
030895f075
nixos/dhcpcd: Only run resume commands if enabled.
...
The networkd implementation sets systemd.services.dhcpcd.enable to
false in nixos/modules/tasks/network-interfaces-systemd.nix. So we need
to respect that in the dhcpcd module.
If we don't, the resumeCommand is set nevertheless, which causes the
post-resume.service to fail after resuming:
Failed to reload dhcpcd.service: Unit dhcpcd.service is masked.
post-resume.service: main process exited, code=exited, status=1/FAILURE
Failed to start Post-Resume Actions.
Dependency failed for Post-Resume Actions.
Unit post-resume.service entered failed state.
post-resume.service failed.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2015-02-22 08:09:04 +01:00
f8dbd6f9ae
Merge pull request #6427 from grwlf/vsftpd-port
...
vsftpd.nix: add 'portPromiscuous' option
2015-02-18 19:18:34 +08:00
ac65a757f0
vsftpd.nix: add 'portPromiscuous' option
2015-02-18 11:51:43 +03:00
2fe44b95d0
nixos/wpa_supplicant: fix conflicting documentation
...
fixes #6298
2015-02-17 22:16:20 +01:00
33550b6efe
Merge pull request #5665 from joachifm/dnscrypt-proxy-apparmor-updates
...
dnscrypt-proxy service: update AppArmor profile
2015-02-14 22:02:31 -08:00
51a7277fac
Merge pull request #6312 from k0ral/sslh
...
sslh: added libwrap support + improved nixos module.
2015-02-13 10:03:48 +01:00
a17f5c8c9b
nixos/consul: add consul-alerts service
2015-02-12 19:16:50 +01:00
cb153cfca3
sslh: added libwrap support + improved nixos module.
2015-02-12 13:21:36 +01:00
93ebaafabe
Merge pull request #6170 from k0ral/sslh
...
New sslh module
2015-02-10 11:17:56 +01:00
9792b12e53
nixos/openntpd: Don't start until we have networking
...
This attempts to fix an issues where ntp is unable to resolve hostnames
because it came up before local nameservers or networking.
2015-02-06 14:45:47 -08:00
3e280f2089
nixos/tinc: Fix key generation behavior and use tinc 1.1 by default
2015-02-05 23:37:20 -08:00
1439e72147
New sslh module.
2015-02-05 13:30:39 +01:00
83925c33f6
i2pd: 0.6.0 -> 0.7.0
...
nixos: i2pd.service, fix string escaping
2015-02-05 12:09:59 +01:00
9ddb6c9cc9
nixos/tinc: Add daemon configuration
2015-02-04 18:19:04 -08:00
bae5faa82d
nixos/dhcpd: Also try restarting openntpd as it suffers the same dns resolution problem
2015-02-04 17:33:14 -08:00
43d8b1ef3c
openntpd: Fixes
2015-02-04 17:30:22 -08:00
a9f1329d2d
nixos/openntpd: Add openntpd to the environment for ntpctl
2015-02-04 17:27:03 -08:00
49b67bb9cb
Merge pull request #6078 from boothead/sabnzbd
...
sabnzbd Change service to systemd
2015-02-03 13:32:59 +01:00
c45372f038
Merge commit 'cfb29ab882323d379aba20a95020c7c24f883eae'
...
Partial staging merge, including cc-wrapper fixes
Conflicts:
pkgs/applications/audio/spotify/default.nix
pkgs/build-support/cc-wrapper/default.nix
pkgs/development/compilers/cryptol/1.8.x.nix
2015-02-02 21:14:28 -05:00
ee52a61e3a
nixos/tftpd: add option types and fixup descriptions
...
The first description is a (incorrect) copy/paste from the 'vsftpd'
module, and the second option lacks a 'dot' at the end.
2015-02-01 15:57:28 +01:00
52d4b9d982
Merge branch 'tlsdate' of git://github.com/4z3/nixpkgs
2015-01-30 01:07:59 -05:00
b61d4ac6a5
ntpd: Fork into the background
...
With -n, ntpd will write log messages to both syslog and stderr, which
is ugly.
2015-01-28 15:34:42 +01:00
11a0344e13
Merge pull request #5918 from robberer/openntpd
...
openntpd: add extraConfig and extraOptions
2015-01-23 16:43:15 +01:00
4fa5d1f626
openntpd: add extraConfig and extraOptions
2015-01-23 16:15:20 +01:00
3fdd925063
nixos: Add tlsdated service
2015-01-21 05:09:47 +01:00
7023e03d77
firewall service: fix pingLimit example value
...
The example uses single dashes, whereas iptables requires double dashes.
2015-01-20 08:47:11 +01:00
ec6b82a0c2
Merge branch 'master' into staging.
2015-01-19 18:41:17 +01:00
130f66b683
nixos/sync-server: Respect the enable option
2015-01-18 14:21:40 -08:00
3b174a4024
Merge pull request #5301 from nbp/syncserver
...
Add Firefox Sync service
2015-01-18 17:47:51 +01:00
8196727fad
Improve the documentation of the syncserver module.
2015-01-18 12:21:23 +01:00
0d13ea0131
Change default syncserver listen.port to a safer one.
2015-01-18 12:20:44 +01:00
88eae46455
rename occurrences of gcc.gcc to gcc.cc
2015-01-14 20:47:49 -08:00
837cfbb9ea
nixos: adding nylon service with uid,gid
2015-01-14 22:08:47 +01:00
72d2d59cd4
/etc/ssh/ssh_known_hosts: refactor and fix #5612
...
Generating the file was refactored to be completely in nix.
Functionally it should create the same content as before,
only adding the newlines.
CC recent updaters: @aszlig, @rickynils.
2015-01-11 22:14:25 +01:00
97bac259d0
dnscrypt-proxy service: update AppArmor profile
...
This patch fixes the AppArmor profile path clause and adds
(currently ignored) network rules.
The AppArmor profile used to be defined for the path sbin/dnscrypt-proxy,
but the real path is bin/dnscrypt-proxy (due to sbin now being a symlink
to bin), which permitted the service to run unconfined.
Adding the network rules has no effect other than improving correctness,
as the version of AppArmor in the NixOS kernel fails to enforce network
rules.
2015-01-09 15:08:07 +01:00
9a7766e054
nixos/network-interfaces: Add mstpd support for bridges
2015-01-07 14:49:24 -08:00
8627110091
icedtea: Make major version nonspecific attrs
2015-01-02 00:24:49 -08:00
c64257b8e5
Fix user-facing typos (mainly in descriptions)
2014-12-30 03:31:03 +01:00
43af22b2de
Merge pull request #5487 from luke-clifton/lc-btsync-group
...
btsync groups
2014-12-28 20:25:13 +01:00
ea9d391bb5
Fix ntpd
...
Since the 4.2.8 upgrade, ntpd is broken on NixOS:
Dec 28 19:06:54 hagbard ntpd[27723]: giving up resolving host 1.nixos.pool.ntp.org: Servname not supported for ai_socktype (-8)
This appears to be because DNS resolution doesn't work in chroots
anymore (due to /etc being missing). So disable chroots for now. It's
probably better to use systemd's containment facilities anyway.
2014-12-28 19:38:45 +01:00
61d9f06760
fix a typo from 2627198b0c
2014-12-28 10:44:50 +01:00
0c477eb38f
Documentation update
2014-12-28 17:26:59 +08:00
61ff1b2b0a
Moved UMask to correct location
2014-12-28 16:44:27 +08:00
5fdd6f6a66
Change umask
2014-12-28 16:39:56 +08:00
2627198b0c
nixos/firewall: Add ipset utility
2014-12-28 00:04:49 -08:00
5866a9df03
added group
2014-12-28 13:23:10 +08:00
fabcc2cf7b
Added btsync group to btsync user
2014-12-28 13:17:37 +08:00
ec5fcfa82c
network-manager: specify full path to sytemctl binary
...
(cherry picked from commit af8f76c2568ae9d842716d98673b3639292a920e)
Signed-off-by: Domen Kožar <domen@dev.si>
2014-12-27 11:53:07 +01:00
2b91b9b594
Strongswan: updown script uses ip and iptables utilities
2014-12-22 20:20:52 +00:00
d0fdad5f36
Merge pull request #5419 from ehmry/tox-bootstrapd
...
tox-bootstrapd
2014-12-22 11:16:44 +01:00
01910e84f9
nixos: tox-bootstrapd service
2014-12-20 18:20:27 -05:00
681ae2fa7f
nixos/consul: Don't timeout if start job has many retries
2014-12-16 15:42:08 -08:00
42c3c205c4
Merge remote-tracking branch 'origin/master' into syncserver
2014-12-14 14:17:56 +01:00
aba0d8a73d
Fix networkmanager resumeCommands
...
Small typo prevented the post resume script to restart network manager
2014-12-14 03:46:54 -08:00
1a1fc17957
Firefox Sync Server: Create the private config file as non-world readable.
2014-12-12 22:14:38 +01:00
a0154145d5
Firefox Sync Server: Fix copy&paste issue.
2014-12-12 22:13:03 +01:00
0570a08b83
Merge remote-tracking branch 'origin/master' into syncserver
2014-12-11 23:49:19 +01:00
01886aef22
Add Firefox Sync server module.
2014-12-11 23:48:15 +01:00
0ec12d53e6
tcpcrypt: 2011.07.22 -> 0.3rc1, fix nixos service
2014-12-10 10:23:46 +01:00
c17eb7f0e6
nixos/consul: Make service definition more sane
2014-12-09 02:24:36 -08:00
159af942d5
nixos/unifi: Ensure stateDir is mounted before proceeding
2014-12-05 12:12:17 -08:00
8a94c06595
nixos: Add network-pre.target and adjust firewall start ordering
2014-12-01 17:19:44 -08:00
bcfe7b2200
Merge pull request #5043 from wkennington/master.networkd
...
nixos/networking: Revamp networking configuration and add an experimental networkd option.
2014-11-29 19:59:31 -08:00
c37611f3e5
nixos: Use vendor zones instead of N.pool.ntp.org.
...
Closes #4824 , thanks to @abh for processing my stupidity.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-28 19:37:03 +01:00
2249474632
nixos/sshd: Fix build if knownHosts is empty.
...
Introduced by 77ff279f27https://headcounter.org/hydra/build/583158/nixlog/5/raw
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-27 19:03:41 +01:00
77ff279f27
nixos/services.openssh: Allow knownHost keys to have multiple lines.
...
Useful for adding several public keys of different types for the same host.
2014-11-27 18:40:21 +01:00
91bdca38a0
NetworkManager.service -> network-manager.service
2014-11-27 12:10:20 +01:00
1860ee27b0
nixos/networking: Fixes
2014-11-26 16:29:24 -08:00
c417012c1b
nixos/dhcpcd: Respect per interface dhcp options
2014-11-26 11:22:03 -08:00
2057d9087f
nixos: Support network-online target in addition to ip-up
2014-11-26 11:22:03 -08:00
59f512ef7d
nixos/network-interfaces: Provide a networkd implementation
2014-11-26 11:22:02 -08:00
a332c4eac5
systemd: Enable more network services
2014-11-26 11:22:02 -08:00
dd2dedafa3
Style fixes
2014-11-25 16:01:27 +01:00
4c33004e1f
Added strongSwan service
2014-11-25 15:29:34 +01:00
f83aa6c0ea
nixos/unifi: Properly depend on mountpoints
2014-11-24 12:40:07 -08:00
fd5566da41
Merge pull request #5080 from joachifm/dnscrypt-refactor
...
dnscrypt-proxy: minor superficial improvements
2014-11-24 15:48:47 +03:00
8309aa04b2
unifi: Actually remove webapps at shutdown
2014-11-24 02:30:04 -08:00
8f0d65e2df
unifi: Clean all of webapps at start and stop
2014-11-24 00:22:24 -08:00
3f7b2bc70d
unifi: Fix typo
2014-11-24 00:06:42 -08:00
119d93e223
dnscrypt-proxy: minor superficial improvements
...
- Use upstream description and explicitly set platforms = all
- Coding conventions fix
2014-11-22 16:19:06 +01:00
826f5468ab
nixos/unifi: Remove old ROOT.war links before relinking
2014-11-14 11:45:38 -08:00
d0e15cc575
Merge pull request #4983 from bosu/fw-stop-fix
...
firewall: clear rpfilter on stop
2014-11-14 00:14:27 -08:00
53b24d0c95
firewall: clear rpfilter on stop
2014-11-14 09:07:18 +02:00
e884dc32c5
Add local-fs.target to minidlna.
...
Minidlna fails to start if it wants to access a filesystem which isn't
mounted (yet).
2014-11-12 23:20:47 +01:00
52f0553209
Add dnscrypt-proxy service
...
The dnscrypt-proxy service relays regular DNS queries to
a DNSCrypt enabled upstream resolver.
The traffic between the client and the upstream resolver is
encrypted and authenticated, which may mitigate the risk of
MITM attacks and third-party snooping (assuming a trustworthy
upstream).
Though dnscrypt-proxy can run as a standalone DNS client,
the recommended setup is to use it as a forwarder for a
caching DNS client.
To use dnscrypt-proxy as a forwarder for dnsmasq, do
```nix
{
# ...
networking.nameservers = [ "127.0.0.1" ];
networking.dhcpcd.extraConfig = "nohook resolv.conf";
services.dnscrypt-proxy.enable = true;
services.dnscrypt-proxy.localAddress = "127.0.0.1";
services.dnscrypt-proxy.port = 40;
services.dnsmasq.enable = true;
services.dnsmasq.extraConfig = ''
no-resolv
server=127.0.0.1#40
listen-address=127.0.0.1
'';
# ...
}
```
2014-11-11 22:47:19 +01:00
c329e5bbd9
i2pd: added package, service
2014-11-09 09:55:35 +01:00
67a2a58314
cjdns: service tweaks, new NixOS test
2014-11-08 23:39:02 +01:00
8b50383c45
Merge pull request #4859 from abbradar/git-daemon
...
nixos/git-daemon: fix a bug and add 'user' and 'group' options
2014-11-08 19:33:24 +01:00
cf4a976ced
quassel: make a proper systemd unit (also properly works in containers now)
2014-11-08 14:59:25 +01:00
46b866cf63
nixos/git-daemon: fix 'exportAll' option
2014-11-07 15:50:01 +03:00
af1d09879b
nixos/git-daemon: add 'user' and 'group' options
2014-11-07 15:49:45 +03:00
4b2e43865a
nixos/git-daemon: add types
2014-11-07 15:49:03 +03:00
ba53392bce
nixos/nat: Fix override so that sysctls are properly preserved
2014-10-31 16:50:25 -07:00
3b133beb7a
Merge pull request #4553 from ehmry/polipo
...
drop permission prestart from polipo service module
2014-10-23 12:51:36 +02:00
a3338abcfe
cjdns: add peer hostnames to extraHosts, option for external config
2014-10-21 13:16:04 -04:00
32d6ae7ed9
drop permission prestart from polipo service module
...
chowning the cache directory can timeout the service, permissions
on this directory should never change without user intervention
2014-10-16 10:57:16 -04:00
13298fcbb9
Merge pull request #4535 from flosse/lua-bitop
...
lua-packages: added lua-bitop to add websocket support for prosody
2014-10-15 09:41:32 +02:00
5308d3284b
prosody: added websocket support
2014-10-15 03:57:00 +02:00
561d3b3860
seeks: nixos module
2014-10-13 13:10:49 +02:00
d86c2c30c5
prosody: packaged as a service
...
Conflicts:
nixos/modules/misc/ids.nix
2014-10-11 18:53:43 +02:00
f5aaefbb6c
More pkgs.lib -> lib fixes
2014-09-29 09:45:59 -04:00
ff8f23ab26
Merge pull request #4280 from wkennington/master.consul
...
nixos/consul: Add module
2014-09-27 07:00:39 +02:00
36f9b9c284
nixos/consul: Add module
2014-09-26 03:25:14 -07:00
5e18182a30
mailpile: add module
2014-09-26 10:49:09 +02:00
61f0d9b251
cjdns: update from 20140919 20140922
...
package installs to .../bin
fix service module to look in .../bin
Closes #4240
2014-09-23 22:30:53 +01:00
06818c5cb2
Change service to systemd
2014-09-22 12:09:53 +01:00
2247f3a8d3
Merge pull request #4168 from lostdj/ltp/master/btsyncfix
...
bittorrentsync: fix storage_path
2014-09-20 10:53:57 +02:00
f02d4ec9ed
bittorrentsync: fix storage_path.
...
If this path is a symlink, btsync won't be able to read it if it's not ending with "/".
2014-09-19 18:19:04 +04:00
ae195727b7
nixos/nat: Don't flush tables, create subchains for autogenerated rules
2014-09-18 11:28:58 -07:00
ec9c4143a7
nixos/firewall: Cleanup in case reload fails
2014-09-16 15:51:57 -07:00
1321fd175d
nixos/nat: Leverage firewall module
2014-09-15 21:31:27 -07:00
6a43d51291
nixos/firewall: Support extraStopCommands
2014-09-15 21:31:26 -07:00
fd7b9b4291
nixos/firewall: Don't allow traffic during reload
2014-09-15 20:40:16 -07:00
f7ba3d833f
nixos/znc: fix module, createUser option does not exist anymore
2014-09-13 02:20:32 +02:00
bab5efd237
nixos/ssh: Allow user to configure the package that provides ssh/sshd
2014-09-11 22:07:39 -07:00
c3fe942a57
start dhcpcd after network-interfaces
2014-09-06 13:52:09 +02:00
e8c4fde22d
nixos/nsd: Improve support for journald/systemd.
...
Don't fork into the background and just log to stderr.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-09-05 02:54:39 +02:00
6386df1645
nixos/nsd: Fix indentation/coding style.
...
For Nix, we indent using two spaces, but in this module somehow 4 spaces
were snuck in. Other than that, remoteControl and ratelimit are just
nested attribute sets, so we don't need to make another submodule type
for no particular reason.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-09-05 02:54:39 +02:00
2ba523df24
nixos nat: add description to forwardPorts
2014-09-04 11:33:08 +02:00
e6ab680cbf
nixos nat: add type for sourcePort and destination of forwardPorts
2014-09-04 10:26:33 +02:00
4155121069
Merge pull request #3926 from lethalman/fwdports
...
nixos/nat: add forwardPorts for external->internal DNAT
2014-09-03 21:54:37 +04:00
3e841ef642
Fixing comment case
2014-09-03 20:03:15 +04:00
d1ae15b680
Merge pull request #3804 from ehmry/unbound
...
unbound: run in chroot
2014-09-03 11:45:20 +04:00
33a3f76ee4
Copy.com: client #3617
2014-09-03 11:31:51 +04:00
9659d0f4fb
nixos/dnsmasq: Fix regressions during the systemd update
2014-09-02 17:23:55 -07:00
13bbce96c3
sshd: Fix typo in assetion.
2014-09-02 10:06:04 +02:00
a2394f09c7
sshd: Add note about listening on port 22 to listenAddresses.
2014-09-01 22:56:35 +02:00
ac39d839c3
sshd: Add note about firewall and listenAddresses.
2014-09-01 22:56:35 +02:00
e12337156c
sshd: Allow to specify ListenAddress.
2014-09-01 22:56:35 +02:00
a6dfb4dc28
Merge pull request #3241 from ehmry/cjdns
...
cjdns declarative configuration
2014-09-02 00:53:18 +04:00
b21ac60290
nixos/nat: add forwardPorts for external->internal DNAT
2014-09-01 22:31:56 +02:00
31b7cae018
nixos/znc: fix immutable config.
...
Fix references to coreutils echo and rm.
Make config writable even if immutable because of
https://github.com/znc/znc/blob/master/src/znc.cpp#L964 .
2014-09-01 16:21:12 +02:00
29f4642284
nixos: Add new service for OpenNTPd.
...
This conflicts with the existing reference NTP daemon, so we're using
services.ntp.enable = mkForce false here to make sure both services
aren't enabled in par.
I was already trying to merge the module with services.ntp, but it would
have been quite a mess with a bunch of conditions on the package name.
They both have a bit in common if it comes to the configuration files,
but differ in handling of the state dir (for example, OpenNTPd doesn't
allow it to be owned by anything other than root).
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-09-01 16:07:28 +02:00
9e3d1b1a8f
Merge pull request #3908 from wkennington/master.ip
...
Reapply the multi-ip code
2014-09-01 10:28:54 +04:00
8c9b6d932a
nixos: add dhcpcd.persistent option
2014-09-01 10:33:48 +04:00
99243a5c51
nixos: add atftpd service
2014-09-01 10:33:48 +04:00
Benno Fünfstück
Kamil Chmielewski
zimbatm
Joachim Fasting
obadz
anderspapitto
Alexander Ried
Joachim Fasting
Hans-Harro Horn
Arnold Krille
Bjørn Forsman
Tuomas Tynkkynen
Vladimír Čunát
Данило Глинський (Danylo Hlynskyi)
Alexei Robyn
Domen Kožar
Franz Pletz
Kranium Gikos Mendoza
Nikolay Amiantov
Tuomas Tynkkynen
Tobias Geerinckx-Rice
Thomas Tuegel
Théophane Hufschmitt
Eric Litak
Evgeny Egorochkin
Peter Hoeg
Valérian Galliat
rnhmjoj
Mitchell Pleune
Pascal Wittmann
Peter Simons
Edward Tjörnhammar
Michael Raskin
Mango Chutney
Christoph Hrdinka
Profpatsch
Nathan Zadoks
Marius Bakke
Aneesh Agrawal
aszlig
Eelco Dolstra
Shea Levy
Tristan Helmich
Alex Franchuk
Thomas Strobel
Leroy Hopson
Pascal Wittmann
Thomas Bereknyei
Robin Gloster
Arseniy Seroka
tg(x)
Jinjing Wang
Guillaume Maudoux
Sergey Mironov
Rick Yang
Mark Laws
Sander van der Burg
goibhniu
Daniel Peebles
Austin Seipp
Jakob Gillich
Kevin Cox
Luca Bruno
Markus Wotringer
Tobias Geerinckx-Rice
Bas van Dijk
lethalman
Christian Theune
William A. Kennington III
Robbin C
Tomasz Kontusz
Tim Jäger
Hajo Möller
ts468
Nikita Mikhailov
Matej Cotman
Eric Sagnes
Mathnerd314
Bryan Gardiner
Enrico Fasoli
Daniel Fox Franke
Charles Strahan
Jaka Hudoklin
Benjamin Staffin
tv
Ryan Mulligan
James Cook
Stewart Mackenzie
Ambroz Bizjak
Simon Vandel Sillesen
Arseniy Seroka
Timofey Lagutin
Mateusz Kowalczyk
lassulus
Stephen Weinberg
Emery Hemingway
Oliver Matthews
koral
Nicolas B. Pierron
Jonathan Glines
Joel Moberg
Jan Malakhovski
Eduard Bachmakov
Sou Bunnbu
Sergey Mironov
Mathijs Kwik
Longrin Wischnewski
Eric Seidel
Luke Clifton
Igor Pashev
Sebastián Bernardo Galkin
Rickard Nilsson
Boris Sukholitko
Moritz Ulrich
Aristid Breitkreuz
Joachim Schiele
Markus Kohlhase
Ben Ford
Nathan Bijnens
Vladimir Still