Maximilian Bosch cd5e01edd9 ocserv: init at 0.12.1 (#42871)
`ocserv` is a VPN server which follows the openconnect protocol
(https://github.com/openconnect/protocol). The packaging is slightly
inspired by the AUR version
(https://aur.archlinux.org/packages/ocserv/).

This patch initializes the package written in C, the man pages and a
module for a simple systemd unit to run the VPN server. The package
supports the following authentication methods for the server:

* `plain` (mostly username/password)
* `pam`

The third method (`radius`) is currently not supported since `nixpkgs`
misses a packaged client.

The module can be used like this:

``` nix
{
  services.ocserv = {
    enable = true;
    config = ''
      ...
    '';
  };
}
```

The option `services.ocserv.config` is required on purpose to
ensure that nobody just enables the service and experiences unexpected
side-effects on the system. For a full reference, please refer to the
man pages, the online docs or the example value.

The docs recommend to simply use `nobody` as user, so no extra user has
been added to the internal user list. Instead a configuration like
this can be used:

```
run-as-user = nobody
run-as-group = nogroup
```

/cc @tenten8401
Fixes #42594
2018-08-01 21:39:09 +02:00
..
2018-04-26 13:57:11 +03:00
2018-05-02 10:30:30 -04:00
2016-11-23 15:23:10 +01:00
2017-09-09 00:29:46 +02:00
2018-07-20 18:48:37 +00:00
2018-07-01 10:59:35 +01:00
2017-05-18 15:57:26 +02:00
2018-07-20 18:48:37 +00:00
2018-05-05 00:33:20 -05:00
2018-02-20 10:14:55 +00:00
2018-08-01 21:39:09 +02:00
2016-12-05 13:37:08 +01:00
2017-02-09 18:01:14 +01:00
2018-04-13 13:39:21 +03:00
2018-01-21 11:23:07 +00:00
2018-07-20 18:48:37 +00:00