summary refs log tree commit diff
path: root/nixos/modules/services/web-servers
Commit message (Collapse)AuthorAge
* nixos/tomcat: add purifyOnStart optionPavel Goran2018-10-29
| | | | | | | | With this option enabled, before creating file/directories/symlinks in baseDir according to configuration, old occurences of them are removed. This prevents remainders of an old configuration (libraries, webapps, you name it) from persisting after activating a new configuration.
* nginx: add custom optionsIzorkin2018-10-23
|
* Merge pull request #47224 from pvgoran/tomcat-virtualhost-aliasesMichael Raskin2018-10-21
|\ | | | | nixos/tomcat: add aliases sub-option for virtual hosts
| * nixos/tomcat: add aliases sub-option for virtual hostsPavel Goran2018-09-23
| |
* | nixos/nextcloud: initFranz Pletz2018-10-01
|/ | | | | | | Co-authored-by: Franz Pletz <fpletz@fnordicwalking.de> Co-authored-by: Robin Gloster <mail@glob.in> Co-authored-by: Janne Heß <janne@hess.ooo> Co-authored-by: Florian Klink <flokli@flokli.de>
* nixos/nginx: fix type of sslTrustedCertificate optionUli Baum2018-09-02
| | | | | | | | The option was added in 1251b34b5bbcd11a7a2974df7bada5d6d47b985d with type `types.path` but default `null`, so eval failed with the default setting. This broke the acme and certmgr tests. cc: @vincentbernat @fpletz
* nixos/nginx: ensure TLS OCSP stapling works out of the box with LEVincent Bernat2018-08-30
| | | | | | | | | | | | | | | | | | | | | | | | | The recommended TLS configuration comes with `ssl_stapling on` and `ssl_stapling_verify on`. However, this last directive also requires the use of `ssl_trusted_certificate` to verify the received answer. When using `enableACME` or similar, we can help the user by providing the correct value for the directive. The result can be tested with: openssl s_client -connect web.example.com:443 -status 2> /dev/null Without OCSP stapling, we get: OCSP response: no response sent After this change, we get: OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 Produced At: Aug 30 20:46:00 2018 GMT
* nginx: add more gzipped MIME typesVincent Bernat2018-08-26
| | | | | | | | | | The additions are: - image/svg+xml for SVG images - application/atom+xml for Atom feeds These types are also present in mime.types. For better readability, the list is sorted and formatted with one type per line.
* nginx: use a compression level of 5 in recommended configurationVincent Bernat2018-08-26
| | | | | | | | | While there is little gain of space to use a compression level of 9, the CPU usage is significant. Many experiments point to use something between 4 and 6. For example: - https://mjanja.ch/2015/03/finding-the-nginx-gzip_comp_level-sweet-spot/ - https://github.com/h5bp/server-configs-nginx/blob/3bda5b93edba147d51760e900c2079828a7dc274/nginx.conf#L93
* nixos/hydron: Various tweaksOkina Matara2018-08-15
| | | | | | Make timer persistent Start timer after hydron Change interval from hourly to weekly
* nixos/meguca: Various fixesOkina Matara2018-08-03
|
* nixos/hydron: Various fixes, create db_conf.json and link to itOkina Matara2018-08-03
|
* Merge pull request #44371 from pvgoran/tomcat-webapps-listOfPathsSilvan Mosberger2018-08-02
|\ | | | | nixos/tomcat: allow non-package paths in services.tomcat.webapps
| * nixos/tomcat: allow non-package paths in services.tomcat.webappsPavel Goran2018-08-02
| | | | | | | | Resolves #44370.
* | nixos/tomcat: correct type specification for virtualHostsPavel Goran2018-08-02
|/ | | | | | The wrong specification was introduced as part of commit 472f16d. Fixes #44361.
* Revert "nixos: rename system.{stateVersion,defaultChannel} -> system.nixos.\1"Tuomas Tynkkynen2018-07-28
| | | | | | | | | | | This reverts commit 095fe5b43def40279a243e663c662b02caac5318. Pointless renames considered harmful. All they do is force people to spend extra work updating their configs for no benefit, and hindering the ability to switch between unstable and stable versions of NixOS. Like, what was the value of having the "nixos." there? I mean, by definition anything in a NixOS module has something to do with NixOS...
* [bot] nixos/*: remove unused arguments in lambdasvolth2018-07-20
|
* Merge pull request #43857 from volth/unusedFrederik Rietdijk2018-07-20
|\ | | | | [bot] treewide: remove unreferenced code
| * [bot]: remove unreferenced codevolth2018-07-20
| |
* | inginious: removeMaximilian Bosch2018-07-19
|/ | | | | | | | | | Fallout of 9db7f15ea3ce57eee25458daf87cce7a04ea98b2 which removed simpleldap. @layus suggests to remove: * https://github.com/NixOS/nixpkgs/pull/43782#issuecomment-406186881 * https://github.com/NixOS/nixpkgs/pull/31975#issuecomment-346647857
* Merge pull request #43308 from Chiiruno/dev/hydronSilvan Mosberger2018-07-18
|\ | | | | hydron: init at 2018-07-11
| * nixos/hydron: initOkina Matara2018-07-18
| |
* | httpd: Fix typoSilvan Mosberger2018-07-13
|/
* Merge pull request #41823 from Chiiruno/dev/megucaJörg Thalheim2018-07-02
|\ | | | | meguca: 2018-05-26 -> 2018-06-11
| * meguca: 2018-05-26 -> 2018-06-10Okina Matara2018-06-29
| |
* | nixos/modules: users.(extraUsers|extraGroup->users|group)Florian Klink2018-06-30
|/
* Merge pull request #41799 from pacien/patch-4Matthew Bauer2018-06-28
|\ | | | | cgit: Parametrise cgit subdirectory
| * cgit: parametrise subdirectoryNotkea2018-06-13
| | | | | | | | | | This proposal enables the user to choose the sub-directory in which to serve cgit. The previous default behaviour isn't altered.
* | nixos/uwsgi: use python.withPackagesAneesh Agrawal2018-06-13
| |
* | nixos/tomcat: fix eval error introduced by #40657Uli Baum2018-06-11
| |
* | tomcat service: fix webapps default option (#40657)Tristan Helmich2018-06-10
|/ | | The old package tomcat.webapps does not exist
* minio: Output server logs & startup in json formatHamish Mackenzie2018-06-08
| | | | | | | | | | | | | | | | | | | Currently minio logs with enhanced tty data and journalctl does not include anything useful as a result: ``` Jun 08 11:03:28 alpha minio[17813]: [78B blob data] Jun 08 11:03:28 alpha minio[17813]: [49B blob data] Jun 08 11:03:28 alpha minio[17813]: [19B blob data] Jun 08 11:03:28 alpha minio[17813]: [88B blob data] Jun 08 11:03:28 alpha minio[17813]: [45B blob data] Jun 08 11:03:28 alpha minio[17813]: [44B blob data] Jun 08 11:03:28 alpha minio[17813]: [57B blob data] ``` Indicating that it detected some binary output. With the `--json` flag it logs: ``` Jun 08 11:14:58 alpha minio[18573]: {"level":"FATAL","time":"2018-06-07T23:14:58.770637778Z","error":{"message":"--address input is invalid: address 127.0.0.1: missing port in address","source":["/build/go/src/github.com/minio/minio/cmd/server-main.go:121:cmd.serverHandleCmdArgs()"]}} ```
* meguca: git-2018-05-17 -> git-2018-05-20Okina Matara2018-05-26
|
* meguca: init at git-2018-05-17Okina Matara2018-05-26
|
* nixos/nginx: emphasize that useACMEHost does not create certsJan Tojnar2018-05-17
| | | | It was not entirely clean that `services.nginx.virtualHosts.<name>.useACMEHost` does not create certificates, see https://github.com/NixOS/nixpkgs/issues/40593
* nixos: rename system.{stateVersion,defaultChannel} -> system.nixos.\1Jan Malakhovski2018-05-12
|
* nginx module: add upstream extraConfigNikolay Amiantov2018-05-08
|
* hitch: init at 1.4.8 + service + test (#39358)Julien Langlois2018-05-01
| | | | Add the Hitch TLS reverse proxy as an option for TLS termination.
* nixos/caddy: fix ca api endpoint, now uses v2Franz Pletz2018-04-27
|
* nginx: allow basic auth passwords to be specified in a fileBen Wolsieffer2018-04-25
|
* nixos/gitweb: add gitwebTheme optiongnidorah2018-04-17
|
* Merge pull request #38362 from orbekk/acme-pathJörg Thalheim2018-04-09
|\ | | | | fix: nixos/nginx certificate location
| * fix: nixos/nginx certificate locationKjetil Ørbekk2018-04-02
| | | | | | | | Fix issue when using a cert location other than the default.
* | nixos/nginx: fix gitweb submodulegnidorah2018-04-06
| |
* | Merge pull request #37921 from gnidorah/gitwebWout Mertens2018-03-30
|\ \ | | | | | | nixos/nginx: add gitweb sub-service
| * | git: add more deps to gitwebgnidorah2018-03-29
| | |
| * | gitweb: use common optionsgnidorah2018-03-29
| | |
| * | nixos/nginx: add gitweb sub-servicegnidorah2018-03-29
| |/
* / apache-httpd: fix typo in config servedFilesJustin Humm2018-03-28
|/
* varnish4: init at 4.1.9; varnish6: init at 6.0.0volth2018-03-20
|