about summary refs log tree commit diff
path: root/nixpkgs/nixos
Commit message (Collapse)AuthorAge
* modules/agetty: escape all argumentsAlyssa Ross2021-01-06
|
* nixos/mailman: add services.mailman.serveAlyssa Ross2021-01-06
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: add mailman-web userAlyssa Ross2021-01-06
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/uwsgi: add extraArgs optionAlyssa Ross2021-01-06
| | | | I need this to be able to make my uwsgi socket group-readable.
* nixos/mailman: add mta.configurationAlyssa Ross2021-01-06
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/fcgiwrap: don't run as rootAlyssa Ross2021-01-02
| | | | | | | | | | | | Previously, fcgiwrap was run as root by default. This was bad because it meant every CGI script was run as root. Changed to set DynamicUser, so instead of having access to everything, CGI scripts will now by default only have access to things that are world-readable. This will probably break things for users, but since we can't know what they want to allow their CGI scripts access to they'll have to fix that themselves, because it would be irresponsible to leave this defaulting to root.
* nixos/nginx: allow overriding fastcgi paramsAlyssa Ross2021-01-02
| | | | | | | | | | | | | | | | | | | | | | By default in Nginx, if you want to override a single fastcgi_param, you have to override all of them. This is less of a big deal if you're editing the Nginx configuration directly, but when you're generating the Nginx configuration with Nix it can be very annoying to bloat your configuration repeating the default values of FastCGI parameters every time. This patch adds a fastcgiParams option to Nginx locations. If any parameters are set through this, all the default values will be included as well, so only the ones that are changing need to be supplied. There's no way to use fastcgiParams to actually override all parameters if that's what you want, but I think that's a niche use case and it's still possible using extraConfig, which up until now was the only option Nginx allows the fastcgi_param directive in http and server scopes as well as location, but here I only support location. It would be possible to support the others, but I don't think it's worth it. It would be a possible future enhancement if somebody has a need for it.
* nixos/mailman: refactor Hyperkitty's periodic jobsAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: quote some variablesAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: only make hyperkitty service when onAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: add mailman groupAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: fix example formattingAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: make mailman log to /var/logAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: better mailman-web-setup descriptionAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: rename mailman-web.serviceAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: one big systemd.services attrsetAlyssa Ross2020-12-11
| | | | | | | | | Adapted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream. The conditional was added for the case where the directory did not yet exist, and quotes were changed to the more robust escapeShellArg.
* nixos/mailman: one big systemd.services attrsetAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: make mailman-web log to journalAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* nixos/mailman: remove webRoot optionAlyssa Ross2020-12-11
| | | | | | Extracted from b478e0043c53964c99cc9a145c155a673af3c7d8 ("nixos/mailman: refactor"), to bring myself closer to current upstream.
* gcc.arch: refactor, move tables under lib/volth2020-11-27
| | | | (cherry picked from commit cf7b63df5b9efdef4e8e1b3261d7040199f7e671)
* nixos/users-groups: handle password hashes with special meaningrnhmjoj2020-07-13
| | | | (cherry picked from commit c37347af7eaa0177e3a374dd94158ff546f20fdb)
* nixos/users-groups: do not check validity of empty hashesrnhmjoj2020-07-13
| | | | (cherry picked from commit 751c2ed6e4af9e525fe57b7c0f0ee8a611eab9fa)
* nixos/users-groups: remove ancient security.initialRootPassword optionrnhmjoj2020-07-13
| | | | | | | | | This option has been deprecated for a long time because is redundant (users.users.root.initialHashedPassword exists). Moreover, being of type string, it required to handle the special value "!" separately, instead of using just `null`. (cherry picked from commit a6ed7d4845f1142f36b2c461d5a721bc68eb7d48)
* small treewide: his -> theirs/itsProfpatsch2020-07-13
| | | | | | | SJW brigade represent. ;) Co-authored-by: Jan Tojnar <jtojnar@gmail.com> (cherry picked from commit 517be841352ec3e6b236e7cdfb1fbd8e26bf49cb)
* Merge commit '9480bae337095fd24f61380bce3174fdfe926a00'Alyssa Ross2020-07-13
| | | | | | This is the last nixos-unstable release before 13b2903169f, which I'm a bit nervous about. So I want the update including that one to be as small as possible, hence going to this one first.
* Merge commit '467ce5a9f45aaf96110b41eb863a56866e1c2c3c'Alyssa Ross2020-06-04
|
* nixos/acme: fix chown hackAlyssa Ross2020-06-04
|
* Merge commit 'b47873026c7e356a340d0e1de7789d4e8428ac66'Alyssa Ross2020-05-18
|
* Merge commit '683c68232e91f76386db979c461d8fbe2a018782'Alyssa Ross2020-05-12
|
* nixos/public-inbox: correctly merge configAlyssa Ross2020-05-09
| | | | | | | | | | | | | | | | | | | | | This needs to be defined as an attribute set two layers deep so that multiple settings in the same namespace, declared in two different modules, will be merged together. For example, the following previously wouldn't be merged properly: { ... }: { imports = [ ( { ... }: { services.public-inbox.config.publicinbox.listid = "foo.example.com; } ) ]; services.public-inbox.config.publicinbox.css = "https://example.com/pi.css"; }
* nixos/acme: hack to fix permissions issueAlyssa Ross2020-05-09
| | | | | | | A *good* fix for this problem looks to be a long way off. But I need my certificates to not expire until that happens. Fixes: https://github.com/NixOS/nixpkgs/issues/48845
* Merge commit '22a3bf9fb9edad917fb6cd1066d58b5e426ee975'Alyssa Ross2020-04-27
|
* modules/systemd: don't install home.conf exampleAlyssa Ross2020-04-16
| | | | | | | | | | | We don't want /srv on NixOS, and /home is already created by users-groups.nix. Furthermore, systemd tmpfiles are set up post-activation, and so there's absolutely no way for a user to override them. They can't even set their own rules in systemd.tmpfiles, because "home.conf" comes before "nixos.conf" lexicographically, and so systemd always picks the "home.conf" ones.
* nixos/rss2email: globally install rss2emailAlyssa Ross2020-04-15
| | | | For man pages.
* nixos/rss2email: move from /var to /var/libAlyssa Ross2020-04-15
| | | | This way, we can use StateDirectory instead of a tmpfile rule.
* nixos/public-inbox: add mda.args optionAlyssa Ross2020-04-07
|
* Merge commit 'ae6bdcc53584aaf20211ce1814bea97ece08a248'Alyssa Ross2020-04-06
| | | | | | # Conflicts: # nixpkgs/pkgs/build-support/rust/default.nix # nixpkgs/pkgs/development/go-modules/generic/default.nix
* Merge commit 'a2e06fc3423c4be53181b15c28dfbe0bcf67dd73'Alyssa Ross2020-04-01
|
* nixos/public-inbox: support multiple mountsAlyssa Ross2020-01-27
|
* nixos/bitlbee: don't assign list to users.groupsAlyssa Ross2020-01-27
| | | | Warns about loaOf deprecation warning.
* Merge commit '3d085a399c436a41d875801619e8f976b8519196'Alyssa Ross2020-01-26
|
* Merge commit '90441b4b47fc7280de6a5bd1a228017caaa0f97f'Alyssa Ross2020-01-22
|
* Merge commit '100012e55bc2a82fc680cba31a426ad38ead6fab'Alyssa Ross2020-01-14
|
* nixos/spamassassin: fix misplaced quoteAlyssa Ross2020-01-13
| | | | | This caused the service to fail because it couldn't find its gpghomedir.
* Merge commit 'e4134747f5666bcab8680aff67fa3b63384f9a0f'Alyssa Ross2020-01-11
|
* nixos/public-inbox: initAlyssa Ross2020-01-11
| | | | | | | | | This module encapsulates pretty much all of public-inbox's functionality. While there are a lot of options, they're only exposed for things that either I think have a high chance of being something a large proportion of users need to set, or if the module needs to do some special setup to accomodate them. All other public-inbox configuration can be set through the `config' options.
* nixos/mailman: make mailman package configurableAlyssa Ross2020-01-10
| | | | | This will allow users to provide other archiver plugins than the default mailman-hyperkitty.
* nixos/mailman: move mailman.cfg to /etc/mailman3Alyssa Ross2020-01-10
| | | | | | Mailman will read its config file from either location, but mailman-web will only read its config from /etc/mailman3/settings.py. So, use /etc/mailman3 for mailman.cfg as well, for symmetry.
* nixos/mailman: restart services when config changedAlyssa Ross2020-01-10
|
* mailman-web: use upstream, improve NixOS moduleAlyssa Ross2020-01-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | Previously, some files were copied into the Nixpkgs tree, which meant we wouldn't easily be able to update them, and was also just messy. The reason it was done that way before was so that a few NixOS options could be substituted in. Some problems with doing it this way were that the _package_ changed depending on the values of the settings, which is pretty strange, and also that it only allowed those few settings to be set. In the new model, mailman-web is a usable package without needing to override, and I've implemented the NixOS options in a much more flexible way. NixOS' mailman-web config file first reads the mailman-web settings to use as defaults, but then it loads another configuration file generated from the new services.mailman.webSettings option, so _any_ mailman-web Django setting can be customised by the user, rather than just the three that were supported before. I've kept the old options, but there might not really be any good reason to keep them. It also meant that one hard-coded SECRET_KEY was included in the Nix store, AND SHARED BETWEEN ALL NIXOS USERS! As part of this change, the secret key will now be generated along with the Hyperkitty API key the first time the service is run, and it will never be stored in the Nix store.
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-20 23:10:51 +0000