diff options
| author | rnhmjoj <rnhmjoj@inventati.org> | 2023-11-29 10:12:00 +0100 |
|---|---|---|
| committer | rnhmjoj <rnhmjoj@inventati.org> | 2024-01-25 18:28:41 +0100 |
| commit | f522af717445843162d808c00f8106bdc7d78d31 (patch) | |
| tree | 327a06240928251937f0fc380dc1a8ecdd471fbd /nixos/doc/manual | |
| parent | a41bd09059230be65d4eb767084b87192501f3fe (diff) | |
| download | nixlib-f522af717445843162d808c00f8106bdc7d78d31.tar nixlib-f522af717445843162d808c00f8106bdc7d78d31.tar.gz nixlib-f522af717445843162d808c00f8106bdc7d78d31.tar.bz2 nixlib-f522af717445843162d808c00f8106bdc7d78d31.tar.lz nixlib-f522af717445843162d808c00f8106bdc7d78d31.tar.xz nixlib-f522af717445843162d808c00f8106bdc7d78d31.tar.zst nixlib-f522af717445843162d808c00f8106bdc7d78d31.zip | |
nixos/release-notes: mention dnsdist DNSCrypt options
Diffstat (limited to 'nixos/doc/manual')
| -rw-r--r-- | nixos/doc/manual/release-notes/rl-2405.section.md | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2405.section.md b/nixos/doc/manual/release-notes/rl-2405.section.md index 263a1b4437e9..8ffa56fe620c 100644 --- a/nixos/doc/manual/release-notes/rl-2405.section.md +++ b/nixos/doc/manual/release-notes/rl-2405.section.md @@ -235,6 +235,9 @@ The pre-existing [services.ankisyncd](#opt-services.ankisyncd.enable) has been m - `stdenv`: The `--replace` flag in `substitute`, `substituteInPlace`, `substituteAll`, `substituteAllStream`, and `substituteStream` is now deprecated if favor of the new `--replace-fail`, `--replace-warn` and `--replace-quiet`. The deprecated `--replace` equates to `--replace-warn`. +- New options were added to the dnsdist module to enable and configure a DNSCrypt endpoint (see `services.dnsdist.dnscrypt.enable`, etc.). + The module can generate the DNSCrypt provider key pair, certificates and also performs their rotation automatically with no downtime. + - The Yama LSM is now enabled by default in the kernel, which prevents ptracing non-child processes. This means you will not be able to attach gdb to an existing process, but will need to start that process from gdb (so it is a |