William A. Kennington III
a9f1329d2d
nixos/openntpd: Add openntpd to the environment for ntpctl
2015-02-04 17:27:03 -08:00
lethalman
49b67bb9cb
Merge pull request #6078 from boothead/sabnzbd
...
sabnzbd Change service to systemd
2015-02-03 13:32:59 +01:00
Shea Levy
c45372f038
Merge commit 'cfb29ab882323d379aba20a95020c7c24f883eae'
...
Partial staging merge, including cc-wrapper fixes
Conflicts:
pkgs/applications/audio/spotify/default.nix
pkgs/build-support/cc-wrapper/default.nix
pkgs/development/compilers/cryptol/1.8.x.nix
2015-02-02 21:14:28 -05:00
Bjørn Forsman
ee52a61e3a
nixos/tftpd: add option types and fixup descriptions
...
The first description is a (incorrect) copy/paste from the 'vsftpd'
module, and the second option lacks a 'dot' at the end.
2015-02-01 15:57:28 +01:00
Shea Levy
52d4b9d982
Merge branch 'tlsdate' of git://github.com/4z3/nixpkgs
2015-01-30 01:07:59 -05:00
Eelco Dolstra
b61d4ac6a5
ntpd: Fork into the background
...
With -n, ntpd will write log messages to both syslog and stderr, which
is ugly.
2015-01-28 15:34:42 +01:00
Eelco Dolstra
11a0344e13
Merge pull request #5918 from robberer/openntpd
...
openntpd: add extraConfig and extraOptions
2015-01-23 16:43:15 +01:00
Longrin Wischnewski
4fa5d1f626
openntpd: add extraConfig and extraOptions
2015-01-23 16:15:20 +01:00
tv
3fdd925063
nixos: Add tlsdated service
2015-01-21 05:09:47 +01:00
Joachim Fasting
7023e03d77
firewall service: fix pingLimit example value
...
The example uses single dashes, whereas iptables requires double dashes.
2015-01-20 08:47:11 +01:00
Peter Simons
ec6b82a0c2
Merge branch 'master' into staging.
2015-01-19 18:41:17 +01:00
William A. Kennington III
130f66b683
nixos/sync-server: Respect the enable option
2015-01-18 14:21:40 -08:00
Domen Kožar
3b174a4024
Merge pull request #5301 from nbp/syncserver
...
Add Firefox Sync service
2015-01-18 17:47:51 +01:00
Nicolas B. Pierron
8196727fad
Improve the documentation of the syncserver module.
2015-01-18 12:21:23 +01:00
Nicolas B. Pierron
0d13ea0131
Change default syncserver listen.port to a safer one.
2015-01-18 12:20:44 +01:00
Eric Seidel
88eae46455
rename occurrences of gcc.gcc to gcc.cc
2015-01-14 20:47:49 -08:00
Edward Tjörnhammar
837cfbb9ea
nixos: adding nylon service with uid,gid
2015-01-14 22:08:47 +01:00
Vladimír Čunát
72d2d59cd4
/etc/ssh/ssh_known_hosts: refactor and fix #5612
...
Generating the file was refactored to be completely in nix.
Functionally it should create the same content as before,
only adding the newlines.
CC recent updaters: @aszlig, @rickynils.
2015-01-11 22:14:25 +01:00
Joachim Fasting
97bac259d0
dnscrypt-proxy service: update AppArmor profile
...
This patch fixes the AppArmor profile path clause and adds
(currently ignored) network rules.
The AppArmor profile used to be defined for the path sbin/dnscrypt-proxy,
but the real path is bin/dnscrypt-proxy (due to sbin now being a symlink
to bin), which permitted the service to run unconfined.
Adding the network rules has no effect other than improving correctness,
as the version of AppArmor in the NixOS kernel fails to enforce network
rules.
2015-01-09 15:08:07 +01:00
William A. Kennington III
9a7766e054
nixos/network-interfaces: Add mstpd support for bridges
2015-01-07 14:49:24 -08:00
William A. Kennington III
8627110091
icedtea: Make major version nonspecific attrs
2015-01-02 00:24:49 -08:00
Tobias Geerinckx-Rice
c64257b8e5
Fix user-facing typos (mainly in descriptions)
2014-12-30 03:31:03 +01:00
Domen Kožar
43af22b2de
Merge pull request #5487 from luke-clifton/lc-btsync-group
...
btsync groups
2014-12-28 20:25:13 +01:00
Eelco Dolstra
ea9d391bb5
Fix ntpd
...
Since the 4.2.8 upgrade, ntpd is broken on NixOS:
Dec 28 19:06:54 hagbard ntpd[27723]: giving up resolving host 1.nixos.pool.ntp.org: Servname not supported for ai_socktype (-8)
This appears to be because DNS resolution doesn't work in chroots
anymore (due to /etc being missing). So disable chroots for now. It's
probably better to use systemd's containment facilities anyway.
2014-12-28 19:38:45 +01:00
Vladimír Čunát
61d9f06760
fix a typo from 2627198b0c
2014-12-28 10:44:50 +01:00
Luke Clifton
0c477eb38f
Documentation update
2014-12-28 17:26:59 +08:00
Luke Clifton
61ff1b2b0a
Moved UMask to correct location
2014-12-28 16:44:27 +08:00
Luke Clifton
5fdd6f6a66
Change umask
2014-12-28 16:39:56 +08:00
William A. Kennington III
2627198b0c
nixos/firewall: Add ipset utility
2014-12-28 00:04:49 -08:00
Luke Clifton
5866a9df03
added group
2014-12-28 13:23:10 +08:00
Luke Clifton
fabcc2cf7b
Added btsync group to btsync user
2014-12-28 13:17:37 +08:00
Domen Kožar
ec5fcfa82c
network-manager: specify full path to sytemctl binary
...
(cherry picked from commit af8f76c2568ae9d842716d98673b3639292a920e)
Signed-off-by: Domen Kožar <domen@dev.si>
2014-12-27 11:53:07 +01:00
Igor Pashev
2b91b9b594
Strongswan: updown script uses ip and iptables utilities
2014-12-22 20:20:52 +00:00
lethalman
d0fdad5f36
Merge pull request #5419 from ehmry/tox-bootstrapd
...
tox-bootstrapd
2014-12-22 11:16:44 +01:00
Emery Hemingway
01910e84f9
nixos: tox-bootstrapd service
2014-12-20 18:20:27 -05:00
William A. Kennington III
681ae2fa7f
nixos/consul: Don't timeout if start job has many retries
2014-12-16 15:42:08 -08:00
Nicolas B. Pierron
42c3c205c4
Merge remote-tracking branch 'origin/master' into syncserver
2014-12-14 14:17:56 +01:00
Sebastián Bernardo Galkin
aba0d8a73d
Fix networkmanager resumeCommands
...
Small typo prevented the post resume script to restart network manager
2014-12-14 03:46:54 -08:00
Nicolas B. Pierron
1a1fc17957
Firefox Sync Server: Create the private config file as non-world readable.
2014-12-12 22:14:38 +01:00
Nicolas B. Pierron
a0154145d5
Firefox Sync Server: Fix copy&paste issue.
2014-12-12 22:13:03 +01:00
Nicolas B. Pierron
0570a08b83
Merge remote-tracking branch 'origin/master' into syncserver
2014-12-11 23:49:19 +01:00
Nicolas B. Pierron
01886aef22
Add Firefox Sync server module.
2014-12-11 23:48:15 +01:00
Domen Kožar
0ec12d53e6
tcpcrypt: 2011.07.22 -> 0.3rc1, fix nixos service
2014-12-10 10:23:46 +01:00
William A. Kennington III
c17eb7f0e6
nixos/consul: Make service definition more sane
2014-12-09 02:24:36 -08:00
William A. Kennington III
159af942d5
nixos/unifi: Ensure stateDir is mounted before proceeding
2014-12-05 12:12:17 -08:00
William A. Kennington III
8a94c06595
nixos: Add network-pre.target and adjust firewall start ordering
2014-12-01 17:19:44 -08:00
William A. Kennington III
bcfe7b2200
Merge pull request #5043 from wkennington/master.networkd
...
nixos/networking: Revamp networking configuration and add an experimental networkd option.
2014-11-29 19:59:31 -08:00
aszlig
c37611f3e5
nixos: Use vendor zones instead of N.pool.ntp.org.
...
Closes #4824 , thanks to @abh for processing my stupidity.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-28 19:37:03 +01:00
aszlig
2249474632
nixos/sshd: Fix build if knownHosts is empty.
...
Introduced by 77ff279f27
.
Build failure: https://headcounter.org/hydra/build/583158/nixlog/5/raw
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-27 19:03:41 +01:00
Rickard Nilsson
77ff279f27
nixos/services.openssh: Allow knownHost keys to have multiple lines.
...
Useful for adding several public keys of different types for the same host.
2014-11-27 18:40:21 +01:00
Domen Kožar
91bdca38a0
NetworkManager.service -> network-manager.service
2014-11-27 12:10:20 +01:00
William A. Kennington III
1860ee27b0
nixos/networking: Fixes
2014-11-26 16:29:24 -08:00
William A. Kennington III
c417012c1b
nixos/dhcpcd: Respect per interface dhcp options
2014-11-26 11:22:03 -08:00
William A. Kennington III
2057d9087f
nixos: Support network-online target in addition to ip-up
2014-11-26 11:22:03 -08:00
William A. Kennington III
59f512ef7d
nixos/network-interfaces: Provide a networkd implementation
2014-11-26 11:22:02 -08:00
William A. Kennington III
a332c4eac5
systemd: Enable more network services
2014-11-26 11:22:02 -08:00
Eelco Dolstra
dd2dedafa3
Style fixes
2014-11-25 16:01:27 +01:00
Igor Pashev
4c33004e1f
Added strongSwan service
2014-11-25 15:29:34 +01:00
William A. Kennington III
f83aa6c0ea
nixos/unifi: Properly depend on mountpoints
2014-11-24 12:40:07 -08:00
Arseniy Seroka
fd5566da41
Merge pull request #5080 from joachifm/dnscrypt-refactor
...
dnscrypt-proxy: minor superficial improvements
2014-11-24 15:48:47 +03:00
William A. Kennington III
8309aa04b2
unifi: Actually remove webapps at shutdown
2014-11-24 02:30:04 -08:00
William A. Kennington III
8f0d65e2df
unifi: Clean all of webapps at start and stop
2014-11-24 00:22:24 -08:00
William A. Kennington III
3f7b2bc70d
unifi: Fix typo
2014-11-24 00:06:42 -08:00
Joachim Fasting
119d93e223
dnscrypt-proxy: minor superficial improvements
...
- Use upstream description and explicitly set platforms = all
- Coding conventions fix
2014-11-22 16:19:06 +01:00
William A. Kennington III
826f5468ab
nixos/unifi: Remove old ROOT.war links before relinking
2014-11-14 11:45:38 -08:00
William A. Kennington III
d0e15cc575
Merge pull request #4983 from bosu/fw-stop-fix
...
firewall: clear rpfilter on stop
2014-11-14 00:14:27 -08:00
Boris Sukholitko
53b24d0c95
firewall: clear rpfilter on stop
2014-11-14 09:07:18 +02:00
Moritz Ulrich
e884dc32c5
Add local-fs.target to minidlna.
...
Minidlna fails to start if it wants to access a filesystem which isn't
mounted (yet).
2014-11-12 23:20:47 +01:00
Joachim Fasting
52f0553209
Add dnscrypt-proxy service
...
The dnscrypt-proxy service relays regular DNS queries to
a DNSCrypt enabled upstream resolver.
The traffic between the client and the upstream resolver is
encrypted and authenticated, which may mitigate the risk of
MITM attacks and third-party snooping (assuming a trustworthy
upstream).
Though dnscrypt-proxy can run as a standalone DNS client,
the recommended setup is to use it as a forwarder for a
caching DNS client.
To use dnscrypt-proxy as a forwarder for dnsmasq, do
```nix
{
# ...
networking.nameservers = [ "127.0.0.1" ];
networking.dhcpcd.extraConfig = "nohook resolv.conf";
services.dnscrypt-proxy.enable = true;
services.dnscrypt-proxy.localAddress = "127.0.0.1";
services.dnscrypt-proxy.port = 40;
services.dnsmasq.enable = true;
services.dnsmasq.extraConfig = ''
no-resolv
server=127.0.0.1#40
listen-address=127.0.0.1
'';
# ...
}
```
2014-11-11 22:47:19 +01:00
Edward Tjörnhammar
c329e5bbd9
i2pd: added package, service
2014-11-09 09:55:35 +01:00
Emery Hemingway
67a2a58314
cjdns: service tweaks, new NixOS test
2014-11-08 23:39:02 +01:00
Aristid Breitkreuz
8b50383c45
Merge pull request #4859 from abbradar/git-daemon
...
nixos/git-daemon: fix a bug and add 'user' and 'group' options
2014-11-08 19:33:24 +01:00
Aristid Breitkreuz
cf4a976ced
quassel: make a proper systemd unit (also properly works in containers now)
2014-11-08 14:59:25 +01:00
Nikolay Amiantov
46b866cf63
nixos/git-daemon: fix 'exportAll' option
2014-11-07 15:50:01 +03:00
Nikolay Amiantov
af1d09879b
nixos/git-daemon: add 'user' and 'group' options
2014-11-07 15:49:45 +03:00
Nikolay Amiantov
4b2e43865a
nixos/git-daemon: add types
2014-11-07 15:49:03 +03:00
William A. Kennington III
ba53392bce
nixos/nat: Fix override so that sysctls are properly preserved
2014-10-31 16:50:25 -07:00
Domen Kožar
3b133beb7a
Merge pull request #4553 from ehmry/polipo
...
drop permission prestart from polipo service module
2014-10-23 12:51:36 +02:00
Emery Hemingway
a3338abcfe
cjdns: add peer hostnames to extraHosts, option for external config
2014-10-21 13:16:04 -04:00
Emery Hemingway
32d6ae7ed9
drop permission prestart from polipo service module
...
chowning the cache directory can timeout the service, permissions
on this directory should never change without user intervention
2014-10-16 10:57:16 -04:00
Joachim Schiele
13298fcbb9
Merge pull request #4535 from flosse/lua-bitop
...
lua-packages: added lua-bitop to add websocket support for prosody
2014-10-15 09:41:32 +02:00
Markus Kohlhase
5308d3284b
prosody: added websocket support
2014-10-15 03:57:00 +02:00
Matej Cotman
561d3b3860
seeks: nixos module
2014-10-13 13:10:49 +02:00
Markus Kohlhase
d86c2c30c5
prosody: packaged as a service
...
Conflicts:
nixos/modules/misc/ids.nix
2014-10-11 18:53:43 +02:00
Shea Levy
f5aaefbb6c
More pkgs.lib -> lib fixes
2014-09-29 09:45:59 -04:00
Jaka Hudoklin
ff8f23ab26
Merge pull request #4280 from wkennington/master.consul
...
nixos/consul: Add module
2014-09-27 07:00:39 +02:00
William A. Kennington III
36f9b9c284
nixos/consul: Add module
2014-09-26 03:25:14 -07:00
Matej Cotman
5e18182a30
mailpile: add module
2014-09-26 10:49:09 +02:00
Emery Hemingway
61f0d9b251
cjdns: update from 20140919 20140922
...
package installs to .../bin
fix service module to look in .../bin
Closes #4240
2014-09-23 22:30:53 +01:00
Ben Ford
06818c5cb2
Change service to systemd
2014-09-22 12:09:53 +01:00
Domen Kožar
2247f3a8d3
Merge pull request #4168 from lostdj/ltp/master/btsyncfix
...
bittorrentsync: fix storage_path
2014-09-20 10:53:57 +02:00
lostdj
f02d4ec9ed
bittorrentsync: fix storage_path.
...
If this path is a symlink, btsync won't be able to read it if it's not ending with "/".
2014-09-19 18:19:04 +04:00
William A. Kennington III
ae195727b7
nixos/nat: Don't flush tables, create subchains for autogenerated rules
2014-09-18 11:28:58 -07:00
William A. Kennington III
ec9c4143a7
nixos/firewall: Cleanup in case reload fails
2014-09-16 15:51:57 -07:00
William A. Kennington III
1321fd175d
nixos/nat: Leverage firewall module
2014-09-15 21:31:27 -07:00
William A. Kennington III
6a43d51291
nixos/firewall: Support extraStopCommands
2014-09-15 21:31:26 -07:00
William A. Kennington III
fd7b9b4291
nixos/firewall: Don't allow traffic during reload
2014-09-15 20:40:16 -07:00
Jaka Hudoklin
f7ba3d833f
nixos/znc: fix module, createUser option does not exist anymore
2014-09-13 02:20:32 +02:00
William A. Kennington III
bab5efd237
nixos/ssh: Allow user to configure the package that provides ssh/sshd
2014-09-11 22:07:39 -07:00
Aristid Breitkreuz
c3fe942a57
start dhcpcd after network-interfaces
2014-09-06 13:52:09 +02:00