nixpkgs/nixos/modules/services/networking
baroncharlus 380cdd8dd7 Add stubby resolver daemon service module (#38667)
* networking/stubby.nix: implementing systemd service module for stubby

This change implements stubby, the DNS-over-TLS stub resolver daemon.
The motivation for this change was the desire to use stubby's
DNS-over-TLS funcitonality in tandem with unbound, which requires
passing certain configuration parameters. This module implements those
config parameters by exposing them for use in configuration.nix.

* networking/stubby.nix: merging back module list

re-merging the module list to remove unecessary changes.

* networking/stubby.nix: removing unecessary capabilities flag

This change removes the unecessary flag for toggling the capabilities
which allows the daemon to bind to low ports.

* networking/stubby.nix: adding debug level logging bool

Adding the option to turn on debug logging.

* networking/stubby.nix: clarifying idleTimeout and adding systemd target

Improving docs to note that idleTimeout is expressed in ms. Adding the
nss-lookup `before' target to the systemd service definition.

* networking/stubby.nix: Restrict options with types.enum

This change restricts fallbackProtocol and authenticationMode to accept
only valid options instead of any list or str types (respectively). This
change also fixes typo in the CapabilityBoundingSet systemd setting.

* networking/stubby.nix: cleaning up documentation

Cleaning up docs, adding literal tags to settings, and removing
whitespace.

* networking/stubby.nix: fixing missing linebreak in comments

* networking/stubby.nix: cleaning errant comments
2018-05-16 15:16:30 +02:00
..
firefox
ircd-hybrid
keepalived nixos/keepalived: Implemented vrrp-instance tracking scripts and interfaces. 2018-05-08 11:25:53 +02:00
nghttpx
ssh nixos/sshd: add options for kexAlgorithms, ciphers and MACs 2018-04-20 19:05:19 +02:00
strongswan-swanctl strongswan-swanctl: actually removed the strongswan parameter files 2018-03-26 17:18:08 +02:00
amuled.nix
aria2.nix
asterisk.nix
atftpd.nix
autossh.nix
avahi-daemon.nix
babeld.nix
bind.nix
bird.nix
bitlbee.nix
btsync.nix
charybdis.nix
chrony.nix
cjdns.nix
cntlm.nix
connman.nix
consul.nix
coturn.nix
dante.nix dante service: default for logoutput 2018-04-26 13:57:11 +03:00
ddclient.nix nixos ddclient: support multiple domains and run via systemd timer 2018-04-15 10:17:46 +08:00
dhcpcd.nix
dhcpd.nix nixos/dhcp: fix permissions of statedir 2018-04-04 16:26:25 +02:00
dnscache.nix dnscache service: cleanup and add forwardOnly 2018-04-13 15:38:13 +03:00
dnschain.nix
dnscrypt-proxy.nix
dnscrypt-proxy.xml Added cross-references to NixOS manual 2018-04-12 09:39:14 +10:00
dnscrypt-wrapper.nix
dnsmasq.nix
ejabberd.nix
fakeroute.nix
ferm.nix
fireqos.nix
firewall.nix firewall service: run stop commands in reload 2018-04-17 12:41:36 +03:00
flannel.nix
flashpolicyd.nix
freenet.nix
freeradius.nix
gale.nix
gateone.nix
gdomap.nix
git-daemon.nix
gnunet.nix nixos/gnunet: create switch for package. 2018-05-11 13:54:00 +02:00
gogoclient.nix
gvpe.nix
hans.nix nixos/hans, nixos/iodine: fix passwordFile attribute 2018-04-23 23:40:47 +03:00
haproxy.nix
heyefi.nix
hostapd.nix hostapd: remove assertion (allow 5GHz channels) 2018-05-11 13:56:18 +03:00
htpdate.nix
i2p.nix
i2pd.nix
iodine.nix nixos/hans, nixos/iodine: fix passwordFile attribute 2018-04-23 23:40:47 +03:00
iwd.nix
keybase.nix
kippo.nix
kresd.nix
lambdabot.nix
libreswan.nix
lldpd.nix
logmein-hamachi.nix
mailpile.nix
matterbridge.nix matterbridge module: add configPath option as a workaround, waiting for nix encryption 2018-04-25 01:37:37 +02:00
minidlna.nix minidlna nixos module: add loglevel config 2018-04-09 00:16:06 +01:00
miniupnpd.nix
miredo.nix
mjpg-streamer.nix
monero.nix
mosquitto.nix
mstpd.nix
murmur.nix murmur: fix /tmp usage 2018-04-10 20:27:59 +02:00
namecoind.nix
nat.nix
ndppd.nix ndppd module: init (#35533) 2018-05-05 00:33:20 -05:00
networkmanager.nix NetworkManager: add noDns option 2018-05-08 13:42:39 +02:00
nftables.nix
ngircd.nix
nix-serve.nix
nixops-dns.nix
nntp-proxy.nix
nsd.nix nixos/nsd: Allow to configure root zone 2018-05-07 04:05:41 +02:00
ntopng.nix
ntpd.nix
nylon.nix
oidentd.nix
openfire.nix
openntpd.nix
openvpn.nix openvpn: remove redundant timestamps from log output 2018-04-21 14:17:22 +02:00
ostinato.nix
pdns-recursor.nix
pdnsd.nix
polipo.nix
powerdns.nix
pptpd.nix
prayer.nix
privoxy.nix
prosody.nix nixos/prosody: fix pidfile path 2018-04-13 11:38:52 +02:00
quagga.nix quagga service: fix service and re-enable test 2018-03-25 21:26:45 +02:00
quassel.nix
racoon.nix
radicale.nix nixos: rename system.{stateVersion,defaultChannel} -> system.nixos.\1 2018-05-12 19:27:09 +00:00
radvd.nix
rdnssd.nix
redsocks.nix
resilio.nix
rpcbind.nix
rxe.nix
sabnzbd.nix
searx.nix
seeks.nix
shadowsocks.nix shadowsocks service: init 2018-04-13 13:39:21 +03:00
shairport-sync.nix
shout.nix
skydns.nix
smokeping.nix
sniproxy.nix
softether.nix
spiped.nix
squid.nix
sslh.nix
strongswan.nix
stubby.nix Add stubby resolver daemon service module (#38667) 2018-05-16 15:16:30 +02:00
stunnel.nix
supplicant.nix
supybot.nix
syncthing.nix
tcpcrypt.nix nixos: tcpcrypt: /var/run -> /run, don't drop files out of rundir 2018-03-30 06:56:38 +00:00
teamspeak3.nix
tftpd.nix
tinc.nix
tinydns.nix
tox-bootstrapd.nix
toxvpn.nix
tvheadend.nix
unbound.nix nixos/unbound: don't fail on root trust anchor updates 2018-04-01 23:56:42 +02:00
unifi.nix unifi, nixos/unifi: support LTS (5.6.36) and release (5.7.20) 2018-04-28 00:27:33 +02:00
vsftpd.nix
wakeonlan.nix
websockify.nix
wicd.nix
wireguard.nix wireguard service: use scripts instead of ExecStarts/Stops 2018-04-22 13:33:11 -05:00
wpa_supplicant.nix
xinetd.nix
xl2tpd.nix
xrdp.nix
zerobin.nix
zerotierone.nix zerotier module: add option to join networks and open port 2018-03-28 22:18:25 +01:00
znc.nix