about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
...
| * | | | | | | offlineimap's module: change UI to syslogDamien Cassou2016-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The 'syslog' UI "allows better integration with systemd": http://www.offlineimap.org/doc/Changelog.html#offlineimap-v660-rc2-2015-10-15
* | | | | | | | Merge pull request #17425 from joachifm/grsec-efiJoachim F2016-08-03
|\ \ \ \ \ \ \ \ | |_|_|_|/ / / / |/| | | | | | | grsecurity module: disable EFI runtime services by default
| * | | | | | | grsecurity module: disable EFI runtime services by defaultJoachim Fasting2016-08-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Enabling EFI runtime services provides a venue for injecting code into the kernel. When grsecurity is enabled, we close this by default by disabling access to EFI runtime services. The upshot of this is that /sys/firmware/efi/efivars will be unavailable by default (and attempts to mount it will fail). This is not strictly a grsecurity related option, it could be made into a general option, but it seems to be of particular interest to grsecurity users (for non-grsecurity users, there are other, more immediate kernel injection attack dangers to contend with anyway).
* | | | | | | | nixos manual: add Emacs section (fixes #13217)Rodney Lorrimar2016-08-02
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In light of Emacs packaging improvements such as those mentioned in #11503, and with the addition of a systemd service (#15807 and #16356), and considering that the wiki page is completely out of date (#13217), it seems that some documentation is in order.
* | | | | | | dnscrypt-proxy service: update resolver listJoachim Fasting2016-08-02
| | | | | | |
* | | | | | | nginx module: fix evaluation of root location optionFranz Pletz2016-08-01
| | | | | | |
* | | | | | | grsecurity module: correct internal noteJoachim Fasting2016-08-01
| | | | | | |
* | | | | | | Merge pull request #15862 from mayflower/nginx-moduleRok Garbas2016-08-01
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Declarative nginx module with ACME support
| * | | | | | | nginx module: improve statusPage generated codeRobin Gloster2016-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds ::1 as allowed host and turns of access_log for the status page.
| * | | | | | | nginx module: httpConfig backward compatibilityRobin Gloster2016-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Revert httpConfig its old behaviour and make it mutually exclusive to the new structured configuration. Adds appendHttpConfig to have the ability to write custom config in the generated http block.
| * | | | | | | nginx module: make client_max_body_size configurableRobin Gloster2016-07-28
| | | | | | | |
| * | | | | | | nginx: fixed duplicate http declarationTristan Helmich2016-07-28
| | | | | | | |
| * | | | | | | nginx module: add statusPage optionRobin Gloster2016-07-28
| | | | | | | |
| * | | | | | | nginx module: make recommended settings optionalRobin Gloster2016-07-28
| | | | | | | |
| * | | | | | | nginx module: make httpConfig backward compatibleRobin Gloster2016-07-28
| | | | | | | |
| * | | | | | | nginx module: improve documentationRobin Gloster2016-07-28
| | | | | | | |
| * | | | | | | nginx module: Enable http2Franz Pletz2016-07-28
| | | | | | | |
| * | | | | | | nginx module: Add default proxy headers for tomcatFranz Pletz2016-07-28
| | | | | | | |
| * | | | | | | nginx module: add option to make vhost defaultRobin Gloster2016-07-28
| | | | | | | |
| * | | | | | | nginx module: implement basic authRobin Gloster2016-07-28
| | | | | | | |
| * | | | | | | nginx module: redirect to same protocolRobin Gloster2016-07-28
| | | | | | | |
| * | | | | | | nginx module: turn off basic auth on acme locationsRobin Gloster2016-07-28
| | | | | | | |
| * | | | | | | nginx module: Add acmeFallbackHost vhost optionFranz Pletz2016-07-28
| | | | | | | |
| * | | | | | | nginx module: Add extraConfig for locationsFranz Pletz2016-07-28
| | | | | | | |
| * | | | | | | nginx module: Don't create acme certs if acme is not enabledFranz Pletz2016-07-28
| | | | | | | |
| * | | | | | | nginx module: Add dhParams optionTristan Helmich2016-07-28
| | | | | | | |
| * | | | | | | nginx module: Add sslCiphers optionTristan Helmich2016-07-28
| | | | | | | |
| * | | | | | | nginx module: Add sslProtocols optionTristan Helmich2016-07-28
| | | | | | | |
| * | | | | | | nginx module: Fix ACME extraDomains, fix challenge url to not redirect to ↵Tristan Helmich2016-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | allow renewals
| * | | | | | | nginx module: Add ACME support for ssl sitesTristan Helmich2016-07-28
| | | | | | | |
| * | | | | | | nginx module: declarative configRobin Gloster2016-07-28
| | | | | | | |
* | | | | | | | dnscrypt-proxy module: types.string should be types.strJoachim Fasting2016-08-01
| | | | | | | |
* | | | | | | | version module: refactor with fileContentsEric Sagnes2016-08-01
| | | | | | | |
* | | | | | | | release.nix: refactor with fileContentsEric Sagnes2016-08-01
| | | | | | | |
* | | | | | | | Fix epub generationEelco Dolstra2016-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Hydra doesn't like spaces in filenames. * The zip file contained nix/store/.../OEBPS rather than OEBPS at top-level, causing some programs (like okular) to barf. * Remove the redundant $dst/epub directory.
* | | | | | | | Remove the PDF manualEelco Dolstra2016-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PDF is very 20th century and nobody reads technical documentation this way anymore.
* | | | | | | | Manual: Only include the release number (e.g. 16.03)Eelco Dolstra2016-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This prevents gratuitous rebuilds of the manual every time the Git revision changes. Should help a bit with #17261.
* | | | | | | | Remove $NIXOS_LABEL and $NIXOS_VERSIONEelco Dolstra2016-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Relying on environment variables to override configuration options is ugly, and there is no reason for them.
* | | | | | | | Merge pull request #17387 from cko/redisGabriel Ebner2016-08-01
|\ \ \ \ \ \ \ \ | |_|/ / / / / / |/| | | | | | | redis: 3.0.7 -> 3.2.2
| * | | | | | | Redis: add entry to release notesChristine Koppelt2016-07-31
| | | | | | | |
* | | | | | | | Merge pull request #15496 from kampfschlaefer/containers_more_veth_interfacesFranz Pletz2016-07-31
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | Declarative containers: more veth interfaces
| * | | | | | | | containers: add myself to the maintainers of the testsArnold Krille2016-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Seems like the right thing to do.
| * | | | | | | | declarative containers: additional vethsArnold Krille2016-07-28
| | |_|_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With these changes, a container can have more then one veth-pair. This allows for example to have LAN and DMZ as bridges on the host and add dedicated containers for proxies, ipv4-firewall and ipv6-firewall. Or to have a bridge for normal WAN, one bridge for administration and one bridge for customer-internal communication. So that web-server containers can be reached from outside per http, from the management via ssh and can talk to their database via the customer network. The scripts to set up the containers are now rendered several times instead of just one template. The scripts now contain per-container code to configure the extra veth interfaces. The default template without support for extra-veths is still rendered for the imperative containers. Also a test is there to see if extra veths can be placed into host-bridges or can be reached via routing.
* | | | | | | | mopidy service: add default value for configuration (#17385)Langston Barrett2016-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Mopidy will start if the configuration is empty. Fixes #17381.
* | | | | | | | nixos/firewall: Refactor rpfilter, allow DHCPv4 (#17325)Franz Pletz2016-07-31
| |_|_|_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds a new chain in the raw table for reverse path filtering and optional logging. A rule to allow serving DHCPv4 was also added as it is commonly needed and poses no security risk even when no DHCPv4 server is running. Fixes #10101.
* | | | | | | nixos/pulseaudio: increase service restart timeProfpatsch2016-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Pulseaudio doesn’t like being restarted too quickly.
* | | | | | | nixos/pulseaudio: tcp streaming & zeroconfProfpatsch2016-07-30
| |/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds options for tcp streaming and avahi zeroconf support (so that the server can be easily found by clients). There is also an option to allow anonymous clients to stream to the server (by default pulseaudio uses a cookie mechanism, see manpage).
* | | | | | kde5: rename extra-cmake-modules variantsThomas Tuegel2016-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of one package `extra-cmake-modules`, there is now `ecm` and `ecmNoHooks`. The latter is used when one does not want to incur a Qt 5 dependency; it is also available as a top-level package `extra-cmake-modules`.
* | | | | | nixos/x11: remove unneccessary special casesGabriel Ebner2016-07-30
| | | | | |
* | | | | | xorg.xorgserver: enable glamor supportGabriel Ebner2016-07-30
| |_|_|_|/ |/| | | |
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-08-01 05:07:58 +0000