summary refs log tree commit diff
path: root/nixos/modules
Commit message (Collapse)AuthorAge
* gitlab: 8.11.2 -> 8.12.1Franz Pletz2016-09-27
|
* Merge pull request #18989 from grahamc/wordpressGraham Christensen2016-09-26
|\ | | | | wordpress: 4.3.1 -> 4.6.1 + add a test
| * wordpress: 4.3.1 -> 4.6.1 + add a testGraham Christensen2016-09-26
| |
* | nsd: 4.1.9 -> 4.1.12Christoph Hrdinka2016-09-27
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 4.1.12 ====== Bugfixes -------- Fix malformed edns query assertion failure, reported by Michal Kepien (NASK). 4.1.11 ====== Features -------- * When tcp is more than half full, use short timeout for tcp session. * Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori. * Fix #790: size-limit-xfr can stop NSD from downloading infinite zone transfer data size, from Toshifumi Sakaguchi. Fixes CVE-2016-6173 JVN#63359718 JPCERT#91251865. Bugfixes -------- * Fix build without IPv6, patch from Zdenek Kaspar. * Fix #783: Trying to run a root server without having configured it silently gives wrong answers. * Fix #782: Serve DS record but parent zone has no NS record. * Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut. 4.1.10 ====== Features -------- * ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option for Linux, binds to interfaces and addresses that are down. * NSD includes AAAA before A for queries over IPV6 (in delegations). And TC is set if no glue can be provided with a delegation because of packet size. * print notice that nsd is starting before taking off. Bugfixes -------- * Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl. * Fix #751: NSD fails to occlude names below a DNAME. * If set without nsd.db print "" as the default in the man pages. * Fix #755: NSD spins after a zone update and a lot of TCP queries. * Fix for NSEC3 with zone signed without exact match for empty nonterminals, the answer for that domain gets closest encloser. * #772 Document that recvmmsg has IPv6 problems on some linux kernels. 4.1.9 ===== Bugfixes -------- * Change the nsd.db file version because of nanosecond precision fix.
* Merge pull request #18694 from bachp/runner-masterzimbatm2016-09-26
|\ | | | | gitlab-runner: add package and service
| * gitlab-runner service: initial versionPascal Bach2016-09-23
| |
* | Merge pull request #18935 from rycee/pullout/radicaleFrederik Rietdijk2016-09-26
|\ \ | | | | | | radicale: break into own package
| * | radicale: break into own packageRobert Helgesson2016-09-25
| | | | | | | | | | | | | | | Since this is an application it is not suitable for pythonPackages, which is more appropriate for Python modules.
* | | nixos/offlineimap: Move to services/mailaszlig2016-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The services/networking directory is already quite polluted and the first point where I was looking for the offlineimap module was in services/mail and didn't find it there. Offlineimap already has IMAP in its name and clearly belongs to the "mail" category so let's move it there. Tested by evaluating a configuration with services.offlineimap enabled. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Cc: @DamienCassou
* | | nixos/offlineimap: Don't build the package on evalaszlig2016-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Coercing the derivation to string causes the package to be built during evaluation rather than during actual realization which is completely unnecessary because we don't need additional Nix expression information for the package (nor do we need it for the service). Signed-off-by: aszlig <aszlig@redmoonstudios.org> Cc: @DamienCassou Cc: @Profpatsch (stumbled on this because of him)
* | | Merge pull request #18961 from wlhlm/nginx-eventszimbatm2016-09-26
|\ \ \ | | | | | | | | Allow configuration of events{} block in nginx module
| * | | nginx module: Add option to configure events blockWilhelm Schuster2016-09-26
| | | |
* | | | Merge pull request #18953 from joachifm/remove-connman-uidEelco Dolstra2016-09-26
|\ \ \ \ | | | | | | | | | | nixos/ids: remove unused connman uid
| * | | | nixos/ids: remove unused connman uidJoachim Fasting2016-09-25
| | | | | | | | | | | | | | | | | | | | The static connman uid is not referenced anywhere in NixOS.
* | | | | nixos/activation: Rename "tmpfs" to "specialfs"aszlig2016-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using "tmpfs" as a script part for system.activationScripts is a bit misleading since 6efcfe03ae4ef426b77a6827243433b5296613a4. We no longer solely mount tmpfs within this script, so using "specialfs" fits more nicely in terms of naming. Tested against the "simple" NixOS installer test. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | | nixos/activation: Avoid remounting non-existing FSaszlig2016-09-26
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Regression introduced by 79d4636d506094eae3c5c7575a0bef817cba9bda. The mentioned commit moves /run/keys from stage 2 to boot.specialFileSystems, the latter being remounted during system activation. Unfortunately, the specialMount function in the activation script does this unconditionally and thus will fail if it can't be remounted because the mount point simply doesn't exist. We now check the mount point for existance and only remount if it exists but mkdir + mount it if it doesn't. Tested against the "simple" NixOS installer test. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | connman: disable connman-vpn by default (#18323)Michele Guerini Rocco2016-09-25
| | | |
* | | | grub: Do not check for duplicated devices in mirroredBoots on UEFI (#18625)jokogr2016-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When Grub is to be used with UEFI, it is not going to write to any MBR of any disk. As such, it is safe to use multiple "nodev" device entries when mirroring the ESP partition to multiple disks. E.g.: ``` boot.loader.grub = { enable = true; version = 2; zfsSupport = true; efiSupport = true; mirroredBoots = [ { devices = [ "nodev" ]; path = "/boot1"; efiSysMountPoint = "/boot1"; } { devices = [ "nodev" ]; path = "/boot2"; efiSysMountPoint = "/boot2"; } { devices = [ "nodev" ]; path = "/boot3"; efiSysMountPoint = "/boot3"; } ]; }; boot.loader.efi.canTouchEfiVariables = true; ``` Fixes #18584
* | | | Merge pull request #18833 from DamienCassou/rsnapshot-module-configArseniy Seroka2016-09-25
|\ \ \ \ | |_|/ / |/| | | rsnapshot: add default options to module config
| * | | rsnapshot: add default options to module configDamien Cassou2016-09-22
| | | |
* | | | nixos opengl: use mesa_drivers.outVladimír Čunát2016-09-24
| | | | | | | | | | | | | | | | | | | | | | | | ...instead of mesa_noglu.out. Closures of systems remain unchanged, as both are in (and the .out output is very small anyway). This is to make sure that we use lib*GL* that aren't slowed down by grsecurity.
* | | | Merge pull request #18915 from Mic92/containerJoachim F2016-09-24
|\ \ \ \ | | | | | | | | | | containers: fix dynamic hash lookup
| * | | | containers: fix dynamic hash lookupJörg Thalheim2016-09-24
| | | | | | | | | | | | | | | | | | | | | | | | | we want the content of attribute as a key: b9df84cd4f6b70bdfa395a91dbf3d712adc7e18d broke this
* | | | | Merge pull request #18463 from regnat/selfossJoachim F2016-09-24
|\ \ \ \ \ | | | | | | | | | | | | Selfoss : add package and module
| * | | | | selfoss service: initThéophane Hufschmitt2016-09-14
| | | | | |
* | | | | | stage-1 module: remove check that swap device has a labelNikolay Amiantov2016-09-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | All swap device option sets "have" a label, it's just that sometimes it's undefined. Because we set a `device` attribute when we have a label anyway it's ok to just check device prefix. Fixes #18891.
* | | | | | Merge pull request #18691 from abbradar/keys-fsNikolay Amiantov2016-09-24
|\ \ \ \ \ \ | | | | | | | | | | | | | | stage-2 init: move /run/keys mount to boot.specialFileSystems
| * | | | | | stage-2 init: move /run/keys mount to boot.specialFileSystemsNikolay Amiantov2016-09-17
| | | | | | |
* | | | | | | nixos/input-methods: use `gtk2` attribute for GTK 2Thomas Tuegel2016-09-23
| |_|_|_|_|/ |/| | | | |
* | | | | | murmur service: welcome -> welcometextWei-Ming Yang2016-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fixed incorrect option name `welcome` to `welcometext`. joachifm added a rename for backwards compat. Closes https://github.com/NixOS/nixpkgs/pull/18570
* | | | | | nix-optimise service: initMatt McHenry2016-09-23
| | | | | | | | | | | | | | | | | | | | | | | | Closes https://github.com/NixOS/nixpkgs/pull/18378
* | | | | | Merge pull request #18818 from Jookia/RFC_htpdateJoachim F2016-09-23
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | Rfc htpdate
| * | | | | nixos: add htpdate moduleJookia2016-09-23
| | | | | |
* | | | | | Merge pull request #18853 from kvz/patch-2Charles Strahan2016-09-22
|\ \ \ \ \ \ | | | | | | | | | | | | | | Run riak with its `dataDir` as `HOME` so Erlang cookie can be written
| * | | | | | Run riak with its `dataDir` as `HOME` so Erlang cookie can be writtenKevin van Zonneveld2016-09-22
| | |_|_|_|/ | |/| | | | | | | | | | See https://github.com/NixOS/nixpkgs/issues/18852
* | | | | | Merge pull request #18806 from kvz/patch-1Daiderd Jordan2016-09-23
|\ \ \ \ \ \ | |/ / / / / |/| | | | | riak: update service example
| * | | | | Remove reference to `riak2`Kevin van Zonneveld2016-09-21
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As mentioned by LnL in IRC, we > used to have riak and riak2 But this seems no longer the case, hence the example should be updated.
* / / / / nixos-container: Syntax fixesEelco Dolstra2016-09-22
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Get rid of the "or null" stuff. Also change 'cfg . "foo"' to 'cfg.foo'. Also fixed what appears to be an actual bug: in postStartScript, cfg.attribute (where attribute is a function argument) should be cfg.${attribute}.
* | | | Merge pull request #18574 from ericsagnes/feat/mongodbDomen Kožar2016-09-21
|\ \ \ \ | | | | | | | | | | MongoDB service: switch configuration format to YAML
| * | | | mongodb service: switch configuration format to YAMLEric Sagnes2016-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | Configuration format has changed from MongoDB 2.6 to YAML and MongoDB 2.4 is EOL since March 2016.
* | | | | /var/empty: silently ignore errors (if on tmpfs) #18781Domen Kožar2016-09-21
| |_|_|/ |/| | |
* | | | Merge pull request #18770 from mayflower/prometheus-alertmanagerBenjamin Staffin2016-09-20
|\ \ \ \ | | | | | | | | | | Prometheus alertmanager module
| * | | | prometheus: add options for alertmanager0ida2016-09-20
| | | | |
| * | | | prometheus alertmanager module: init0ida2016-09-20
| | | | |
* | | | | gitlab module: enable postgres pg_trgm extensionRobin Gloster2016-09-20
| | | | |
* | | | | nixos/networking: Use type lines for localCommandsaszlig2016-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using types.str doesn't work if you want to mkBefore/mkAfter across different module definitions, because it only allows for one definition for the same priority. This is especially useful if you deploy Hetzner machines via NixOps, because the physical specification already defines localCommands. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | | initrd-ssh service: check that authorized keys are addedNikolay Amiantov2016-09-20
| | | | |
* | | | | Merge pull request #18718 from Mic92/powerdnsAlexey Shmalko2016-09-20
|\ \ \ \ \ | | | | | | | | | | | | powerdns: init at 4.0.1
| * | | | | powerdns: init at 4.0.1Jörg Thalheim2016-09-18
| | | | | | | | | | | | | | | | | | | | | | | | fixes #18703
* | | | | | Merge pull request #18693 from Mic92/awesomeAlexey Shmalko2016-09-20
|\ \ \ \ \ \ | | | | | | | | | | | | | | awesome: fix LUA_PATH for luaModules