summary refs log tree commit diff
path: root/nixos/modules/services/networking
Commit message (Collapse)AuthorAge
* consul service: Restart on failure.Niklas Hambüchen2017-09-28
| | | | | Consul is a service you typically want to have running all the time; it's not supposed to quit by itself.
* Merge pull request #29874 from mbrgm/znc-fixJörg Thalheim2017-09-27
|\ | | | | znc: fix openFirewall option
| * znc: fix openFirewall optionMarius Bergmann2017-09-27
| | | | | | | | | | | | | | | | | | | | | | The current version is broken: - there's no `openFirewall` attribute directly in the `cfg` set - the `port` option is an attribute of the `confOptions` set I used the proper attribute for the firewall port and moved the `openFirewall` option directly up to the `services.znc` set, as it's rather a general option for the whole service than a znc-specific option (which are located inside the `confOptions` set).
* | wpa_supplicant service: restart instead of stop & startFranz Pletz2017-09-27
|/ | | | | | | | | We now wait for dhcpcd to acquire a lease but dhcpcd is restarted on system activation. As wpa_supplicant is stopped while dhcpcd is restarting a significant delay is introduced on systems with wireless network connections only. This changes the wpa_supplicant service to also be restarted together with dhcpcd in case both services were changed.
* nixos/tinc: remove useless script argumentJoerg Thalheim2017-09-27
| | | | ExecStart is sufficient and more transparent to the user.
* nixos/tinc: do not add Device= by defaultJoerg Thalheim2017-09-27
| | | | | tinc can figure this out based on DeviceType. I also got `/dev/net/tun FD in bad state` after a particular upgrade.
* wireguard: fix function for adding routesJoerg Thalheim2017-09-25
|
* Merge pull request #29753 from andir/wireguard-allowed-ips-as-route-optionalJörg Thalheim2017-09-25
|\ | | | | networking.wireguard: added `allowedIpsAsRoutes` boolean to control p…
| * networking.wireguard: added `allowedIpsAsRoutes` boolean to control peer routesAndreas Rammhold2017-09-25
| | | | | | | | | | | | | | Sometimes (especially in the default route case) it is required to NOT add routes for all allowed IP ranges. One might run it's own custom routing on-top of wireguard and only use the wireguard addresses to exchange prefixes with the remote host.
* | nixos/radicale: fix default version (#29743)Silvan Mosberger2017-09-25
| |
* | Merge pull request #29450 from jerith666/djb-1709Jörg Thalheim2017-09-24
|\ \ | | | | | | Add modules for tinydns and dnscache from djbdns
| * | nixos/tinydns: default data to empty stringJoerg Thalheim2017-09-24
| | | | | | | | | | | | (not strictly required to start the service)
| * | nixos/dnscache: add moduleMatt McHenry2017-09-19
| | | | | | | | | | | | with improvements suggested by Jörg Thalheim <joerg@thalheim.io>
| * | nixos/tinydns: add moduleMatt McHenry2017-09-19
| |/ | | | | | | with improvements suggested by Jörg Thalheim <joerg@thalheim.io>
* | fanctl, fan module: removeRobin Gloster2017-09-23
| | | | | | | | | | | | | | | | | | This has been broken nearly all the time due to the patches needed to iproute2 not being compatible with the newer versions we have been shipping. As long as Ubuntu does not manage to upstream these changes so they are maintained with iproute2 and we don't have a maintainer updating these patches to new iproute2 versions it is not feasible to have this available.
* | Revert "nixos: add option for bind to not resolve local queries (#29503)"Peter Simons2017-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 670b4e29adc16e0a29aa5b4c126703dcca56aeb6. The change added in this commit was controversial when it was originally suggested in https://github.com/NixOS/nixpkgs/pull/29205. Then that PR was closed and a new one opened, https://github.com/NixOS/nixpkgs/pull/29503, effectively circumventing the review process. I don't agree with this modification. Adding an option 'resolveLocalQueries' to tell the locally running name server that it should resolve local DNS queries feels outright nuts. I agree that the current state is unsatisfactory and that it should be improved, but this is not the right way. (cherry picked from commit 23a021d12e8f939cd0bfddb1c7adeb125028c1e3)
* | Merge pull request #29521 from aneeshusa/ease-radicale-upgradeFranz Pletz2017-09-18
|\ \ | | | | | | Ease radicale upgrade
| * | radicale: Add extraArgs option to assist in data migrationAneesh Agrawal2017-09-18
| | |
* | | nixos: add option for bind to not resolve local queries (#29503)gwitmond2017-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When the user specifies the networking.nameservers setting in the configuration file, it must take precedence over automatically derived settings. The culprit was services.bind that made the resolver set to 127.0.0.1 and ignore the nameserver setting. This patch adds a flag to services.bind to override the nameserver to localhost. It defaults to true. Setting this to false prevents the service.bind and dnsmasq.resolveLocalQueries settings from overriding the users' settings. Also, when the user specifies a domain to search, it must be set in the resolver configuration, even if the user does not specify any nameservers. (cherry picked from commit 670b4e29adc16e0a29aa5b4c126703dcca56aeb6) This commit was accidentally merged to 17.09 but was intended for master. This is the cherry-pick to master.
* | | ssh service: add sftpFlags optionFranz Pletz2017-09-18
| | |
* | | coturn service: Fix coturn to properly come up (#29415)Robert Klotzner2017-09-18
| | | | | | | | | | | | | | | | | | properly also in case dhcpcd being used. Without network-online.target, coturn will fail to listen on addresses that come up with dhcpcd.
* | | nixos/networking: network is online if default gw setFranz Pletz2017-09-18
|/ / | | | | | | | | | | | | | | | | | | Previously services depending on network-online.target would wait until dhcpcd times out if it was enabled and a static network address configuration was used. Setting the default gateway statically is enough for the networking to be considered online. This also adjusts the relevant networking tests to wait for network-online.target instead of just network.target.
* | Merge pull request #27256 from bachp/squid-serviceFranz Pletz2017-09-17
|\ \ | | | | | | squid service: initial service based on default config
| * | squid service: intial service based on default configPascal Bach2017-09-09
| | |
* | | nixos/tinc: Fix tinc cli wrapper for tinc 1.0.Florian Jacob2017-09-17
| | | | | | | | | | | | | | | tinc prior to 1.1 doesn't have the `tinc` executable, and `tincd` isn't of any use while the daemon already runs.
* | | Merge pull request #28892 from ryantm/matterbridge2Joachim F2017-09-16
|\ \ \ | | | | | | | | matterbridge, modules/matterbridge: init at 1.1.0
| * | | matterbridge, modules/matterbridge: init at 1.1.0Ryan Mulligan2017-09-10
| | | |
* | | | namecoin service: fix typoSilvan Mosberger2017-09-15
| | | |
* | | | nixos/wpa_supplicant: use literalExampleBjørn Forsman2017-09-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For various reasons, big Nix attrsets look ugly in the generated manual page[1]. Use literalExample to fix it. [1] Quotes around attribute names are lost, newlines inside multi-line strings are shown as '\n' and attrs written on multiple lines are joined into one.
* | | | Merge pull request #29125 from geistesk/firehol-3.1.4Jörg Thalheim2017-09-13
|\ \ \ \ | | | | | | | | | | firehol: init at 3.1.4, iprange: init at 1.0.3
| * | | | nixos/fireqos: add servicegeistesk2017-09-09
| | |/ / | |/| |
* | | | nixos, i2pd: nat option, default trueEdward Tjörnhammar2017-09-12
| |/ / |/| |
* | | Merge pull request #29171 from vaibhavsagar/znc-open-firewallJörg Thalheim2017-09-10
|\ \ \ | | | | | | | | znc: open firewall with configured port
| * | | znc: add openFirewall configuration optionVaibhav Sagar2017-09-10
| | | |
| * | | znc: open firewall with configured portVaibhav Sagar2017-09-10
| |/ / | | | | | | | | | | | | The configuration doesn't currently open the configured port, which is less convenient than opening it.
* / / znc: fix network example configurationVaibhav Sagar2017-09-10
|/ / | | | | | | s/ssl/useSSL/
* | nixos/mfi: removeJörg Thalheim2017-09-07
| |
* | dnscrypt-wrapper module: fix permissions and optionsmakefu2017-09-06
|/ | | | | | | | | When keys get refreshed a folder with the permissions of the root user get created in the home directory of the user dnscrypt-wrapper. This prevents the service from restarting. In addition to that the parameters of dnscrypt-wrapper have changed in upstream and in the newly packaged software.
* networkmanager_iodine: init at 1.2.0Symphorien Gibol2017-08-30
|
* Merge pull request #27826 from Infinisil/radicaleFranz Pletz2017-08-30
|\ | | | | radicale: update to version 2
| * radicale: 1.1.4 -> 2.1.2Silvan Mosberger2017-08-13
| | | | | | | | | | | | | | | | | | | | | | | | | | This commit readds and updates the 1.x package from 1.1.4 to 1.1.6 which also includes the needed command for migrating to 2.x The module is adjusted to the version change, defaulting to radicale2 if stateVersion >= 17.09 and radicale1 otherwise. It also now uses ExecStart instead of the script service attribute. Some missing dots at the end of sentences were also added. I added a paragraph in the release notes on how to update to a newer version.
* | lldpd: 0.9.7 -> 0.9.8Franz Pletz2017-08-27
| | | | | | | | Now uses the upstream systemd unit which adds lots of hardening flags.
* | Merge pull request #28562 from oxij/nixos/i2pdJoachim F2017-08-26
|\ \ | | | | | | nixos: i2pd: bits and pieces
| * | nixos: i2pd: fix indentJan Malakhovski2017-08-25
| | |
| * | nixos: i2pd: tiny fix in a descriptionJan Malakhovski2017-08-25
| | |
| * | nixos: i2pd: enable ElGamal precomputation by defaultSLNOS2017-08-25
| | |
| * | nixos: i2pd: add logLevelSLNOS2017-08-25
| | |
| * | nixos: i2pd: one fork less, one process lessSLNOS2017-08-25
| | |
| * | nixos: i2pd: rename extIp -> address to harmonize with torSLNOS2017-08-25
| | |
| * | nixos: i2pd: change httpproxy port to its default valueSLNOS2017-08-25
| |/