summary refs log tree commit diff
path: root/nixos/modules/services/networking
Commit message (Collapse)AuthorAge
* consul: 0.9.3 -> 1.3.0.Niklas Hambüchen2018-11-03
| | | | | | | | | | | | | | | | | Removes the old UI build tooling; it is no longer necessary because as of 1.2.0 it's bundled into the server binary. It doesn't even need to have JS built, because it's bundled into the release commit's source tree (see #48714). The UI is enabled by default, so the NixOS service is updated to directly use `ui = webUi;` now. Fixes #48714. Fixes #44192. Fixes #41243. Fixes #35602. Signed-off-by: Niklas Hambüchen <mail@nh2.me>
* nixos: fix #48917 by setting SYSTEMD_TIMEDATED_NTP_SERVICESAustin Seipp2018-11-02
| | | | | | | | | Setting this variable in the environment of systemd-timedated allows 'timedatectl' to tell if an NTP service is running. Closes #48917. Signed-off-by: Austin Seipp <aseipp@pobox.com>
* Merge pull request #47526 from rnhmjoj/syncthingJoachim F2018-11-02
|\ | | | | nixos/syncthing: move configuration to condigDir
| * nixos/syncthing: move configuration to condigDirrnhmjoj2018-10-15
| | | | | | | | | | fixes #47513 following the upstream recommended settings: https://github.com/syncthing/syncthing/issues/3434#issuecomment-235401876
* | nixos/zerotier: binds to network-online.target to avoid the 1m30s timeout ↵obadz2018-11-01
| | | | | | | | before kill on shutdown
* | redsocks module: add self as maintainerLéo Gaspard2018-10-31
| |
* | nixos/bitlbee: use purple-2 as purple_plugin_path (#49440)Lassulus2018-10-30
| |
* | Merge pull request #49197 from LumiGuide/strongswan-swanctl-5.7.1Bas van Dijk2018-10-27
|\ \ | | | | | | strongswan-swanctl: adapt options to strongswan-5.7.1
| * | strongswan-swanctl: adapt options to strongswan-5.7.1Bas van Dijk2018-10-26
| | | | | | | | | | | | | | | | | | | | | The changes were found by executing the following in the strongswan repo (https://github.com/strongswan/strongswan): git diff 5.6.3..5.7.1 src/swanctl/swanctl.opt
* | | Merge pull request #48844 from c0bw3b/svc/ddclientSilvan Mosberger2018-10-27
|\ \ \ | |/ / |/| | nixos/ddclient: make RuntimeDirectory and configFile private
| * | nixos/ddclient: make configFile privateRenaud2018-10-23
| | | | | | | | | /run/ddclient/ddclient.conf should be installed in mode 660 (readable and writeable only by ddclient.service user and group)
| * | nixos/ddclient: make RuntimeDirectory privateRenaud2018-10-22
| | | | | | | | | ddclient will raise a warning if /run/ddclient/ is world-readable
* | | Merge pull request #48728 from qolii/eternal-terminal-moduleMaximilian Bosch2018-10-25
|\ \ \ | |/ / |/| | nixos/eternal-terminal: init new module.
| * | Address more review feedback.qolii2018-10-24
| | |
| * | Address review feedback.qolii2018-10-20
| | |
| * | nixos/eternal-terminal: init new module.qolii2018-10-20
| | |
* | | nixos/znc: Fix confOptions.uriPrefix not being appliedSilvan Mosberger2018-10-20
| | | | | | | | | | | | | | | | | | This was overlooked on a rebase of mine on master, when I didn't realize that in the time of me writing the znc changes this new option got introduced.
* | | nixos/znc: Fix confOptions.extraZncConf being applied to wrong sectionSilvan Mosberger2018-10-20
|/ / | | | | | | This bug was introduced in https://github.com/NixOS/nixpkgs/pull/41467
* | tinc: remove unnecessary networking.interfacesJörg Thalheim2018-10-18
| | | | | | | | | | | | | | | | | | This breaks with networking backends enabled and also creates large delays on boot when some services depends on the network target. It is also not really required because tinc does create those interfaces itself. fixes #27070
* | Fix hostapd's place in systemd dependency tree. (#45464)clefru2018-10-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * nat/bind/dhcp.service: Remove. Those services have nothing to do with a link-level service. * sys-subsystem-net-devices-${if}.device: Add as BindsTo dependency as this will make hostapd stop when the device is unplugged. * network-link-${if}.service: Add hostapd as dependency for this service via requiredBy clause, so that the network link is only considered to be established only after hostapd has started. * network.target: Remove this from wantedBy clause as this is already implied from dependencies stacked above hostapd. And if it's not implied than starting hostapd is not required for this particular network configuration.
* | Merge pull request #45470 from Infinisil/znc-configSilvan Mosberger2018-10-17
|\ \ | |/ |/| nixos/znc: More flexible module, cleanups
| * nixos/znc: add config optionSilvan Mosberger2018-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This option represents the ZNC configuration as a Nix value. It will be converted to a syntactically valid file. This provides: - Flexibility: Any ZNC option can be used - Modularity: These values can be set from any NixOS module and will be merged correctly - Overridability: Default values can be overridden Also done: Remove unused/unneeded options, mkRemovedOptionModule unfortunately doesn't work inside submodules (yet). The options userName and modulePackages were never used to begin with
| * nixos/znc: move to own folderSilvan Mosberger2018-10-13
| | | | | | | | Move legacy options to separate file
* | Merge pull request #48119 from mrVanDalo/update_syncthingPeter Hoeg2018-10-14
|\ \ | |/ |/| nixos/modules: services.syncthing add guiAddress parameter
| * nixos/modules: services.syncthing use types.str instead of types.stringIngolf Wagner2018-10-14
| | | | | | | | As Infinisil mentioned in https://github.com/NixOS/nixpkgs/pull/48119#discussion_r224974201
| * nixos/modules: services.syncthing add guiAddress parameterIngolf Wagner2018-10-14
| |
* | Merge pull request #47902 from pvgoran/correct-mkEnableOption-usesSilvan Mosberger2018-10-11
|\ \ | |/ |/| nixos: correct improper uses of mkEnableOption, clarify service descr…
| * nixos: correct improper uses of mkEnableOption, clarify service descriptionsPavel Goran2018-10-05
| | | | | | | | | | | | | | | | | | Several service definitions used `mkEnableOption` with text starting with "Whether to", which produced funny option descriptions like "Whether to enable Whether to run the rspamd daemon..". This commit corrects this, and adds short descriptions of services to affected service definitions.
* | Merge pull request #48039 from lheckemann/murmur-mention-mumbleTimo Kaufmann2018-10-08
|\ \ | | | | | | murmur: mention mumble in description
| * | nixos/murmur: mention mumble in descriptionLinus Heckemann2018-10-08
| |/ | | | | | | | | This makes the option easier to find with the options search or in the manpage.
* | charybdis service: bin/charybdis-ircd -> bin/charybdislassulus2018-10-07
| |
* | Merge pull request #46443 from bobvanderlinden/pr-test-upnpMatthew Bauer2018-10-05
|\ \ | |/ |/| Miniupnpd and bittorrent improvements
| * nixos: miniupnpd: use iptables scriptsBob van der Linden2018-09-15
| |
* | nixos/bitlbee: option to use pamJörg Thalheim2018-10-01
| |
* | docs: formatGraham Christensen2018-09-29
| |
* | shairport-sync: fix pulseaudio support & default argumentsFranz Pletz2018-09-26
| |
* | nixos/chrony: clean up, rework to be a little closer to upstreamAustin Seipp2018-09-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Most importantly, this sets PrivateTmp, ProtectHome, and ProtectSystem so that Chrony flaws are mitigated, should they occur. Moving to ProtectSystem=full however, requires moving the chrony key files under /var/lib/chrony -- which should be fine, anyway. This also ensures ConditionCapability=CAP_SYS_TIME is set, ensuring that chronyd will only be launched in an environment where such a capability can be granted. Signed-off-by: Austin Seipp <aseipp@pobox.com>
* | Merge pull request #45161 from Gerschtli/update/ts3Sarah Brofeldt2018-09-23
|\ \ | | | | | | teamspeak_server: 3.0.13.6 -> 3.3.0
| * | teamspeak_server: 3.0.13.6 -> 3.3.0Tobias Happ2018-08-17
| | |
* | | iwd: 0.7 -> 0.8Vladyslav Mykhailichenko2018-09-23
| | |
* | | Merge pull request #43812 from binarin/epmd-systemd-prPeter Hoeg2018-09-17
|\ \ \ | | | | | | | | epmd: Introduce erlang port mapper daemon service
| * | | epmd: Introduce erlang port mapper daemon serviceAlexey Lebedeff2018-07-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Having socket-activated epmd means that there always be only a single instance managed centrally. Because Erlang also starts it automatically if not available, and in worst case scenario 'epmd' can be started by some Erlang application running under systemd. And then restarting this application unit will cause complete loss of names in 'epmd' (if other Erlang system are also installed on this host). E.g. see at which lengths RabbitMQ goes to recover from such situations: https://github.com/rabbitmq/rabbitmq-server/blame/7741b37b1efa97ac9b17685cc626bd35ee52ca16/src/rabbit_epmd_monitor.erl#L36 Having the only one socket-activated epmd completely solves this problem.
* | | | Merge pull request #46144 from dasJ/nullidentdmod-moduleJörg Thalheim2018-09-16
|\ \ \ \ | |_|_|/ |/| | | nixos/nullidentdmod: Init
| * | | nixos/nullidentdmod: InitJanne Heß2018-09-06
| | | |
* | | | Merge pull request #46381 from Chiiruno/dev/zeronetJoachim F2018-09-11
|\ \ \ \ | | | | | | | | | | nixos/zeronet: Fix TOR permissions, add torAlways option
| * | | | nixos/zeronet: Fix TOR permissions, add torAlways optionOkina Matara2018-09-08
| | | | |
* | | | | Merge pull request #44496 from Yarny0/hylafaxplusJörg Thalheim2018-09-11
|\ \ \ \ \ | | | | | | | | | | | | Hylafaxplus
| * | | | | nixos/hylafax: show correct option in warning message.Jörg Thalheim2018-09-11
| | | | | |
| * | | | | modules: HylaFAX server configurationYarny02018-09-08
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit adds the following * the uucp user * options for HylaFAX server to control startup and modems * systemd services for HylaFAX server processes including faxgettys for modems * systemd services to maintain the HylaFAX spool area, including cleanup with faxcron and faxqclean * default configuration for all server processes for a minimal working configuration Some notes: * HylaFAX configuration cannot be initialized with faxsetup (as it would be common on other Linux distributions). The hylafaxplus package contains a template spool area. * Modems are controlled by faxgetty. Send-only configuration (modems controlled by faxq) is not supported by this configuration setup. * To enable the service, one or more modems must be defined with config.services.hylafax.modems . * Sending mail *should* work: HylaFAX will use whatever is in config.services.mail.sendmailSetuidWrapper.program unless overridden with the sendmailPath option. * The admin has to create a hosts.hfaxd file somewhere (e.g. in /etc) before enabling HylaFAX. This file controls access to the server (see hosts.hfaxd(5) ). Sadly, HylaFAX does not permit account-based access control as is accepts connections via TCP only. * Active fax polling should work; I can't test it. * Passive fax polling is not supported by HylaFAX. * Pager transmissions (with sendpage) are disabled by default. I have never tested or used these. * Incoming data/voice/"extern"al calls won't be handled by default. I have never tested or used these.
* / / / / nixos/i2pd: Update options to encompass recent additions to the daemonEdward Tjörnhammar2018-09-09
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | Also: * switch to flat sysdir * remove nixos default reseeds, rely on program defaults * refactor config expressions