Frederik Rietdijk
e67b979ab5
Merge remote-tracking branch 'upstream/master' into HEAD
2017-03-18 15:32:43 +01:00
Joachim Schiele
6022a79cbc
nixos/release.nix: added tests.wordpress
2017-03-18 11:10:49 +01:00
Vladimír Čunát
742b120ddc
Merge branch 'master' into staging
...
Nontrivial rebuilds from master, again :-/
2017-03-18 11:00:31 +01:00
Will Dietz
63f1a14ae5
neo4j service: increase file limit, per warning emitted at startup ( #23961 )
2017-03-18 01:03:09 +01:00
Joachim F
9a976c09ba
Merge pull request #23963 from dtzWill/feature/irkerd
...
irker: init at 2017-02-12
2017-03-18 00:35:32 +01:00
Franz Pletz
9536169074
nixos/treewide: remove boolean examples for options
...
They contain no useful information and increase the length of the
autogenerated options documentation.
See discussion in #18816 .
2017-03-17 23:36:19 +01:00
Joachim F
01f8e2161c
Merge pull request #23962 from oxij/nixos/tor-sec
...
nixos: tor: usability and security fixes
2017-03-17 16:14:41 +01:00
Pascal Bach
3728143cbc
prometheus-unifi-exporter: init at 0.4.0
2017-03-17 15:41:22 +01:00
Will Dietz
2807d75dca
irkerd service: init
2017-03-17 09:16:32 -05:00
Michael Raskin
f9fb38fcae
Merge pull request #23924 from 7c6f434c/improve-firefox-test
...
nixos: tests: firefox: make more comprehensive
2017-03-17 13:00:18 +01:00
Léo Gaspard
66e54f25a1
dhparams module: condition on enable option ( #23661 )
...
Hence, the init/cleanup service only runs when the dhparams module is enabled.
2017-03-17 01:56:13 +01:00
Jan Malakhovski
a04782581a
nixos: torify: disable by default, add some documentation as of why
...
This `tsocks` wrapper leaks DNS requests to clearnet, meanwhile Tor comes with
`torsocks` which doesn't.
Previous commits to this file state that all of this still useful somehow.
Assuming that it's true, at least let's not confuse users with two different tools
and don't clash with the `tsocks` binary from nixpkgs by disabling this by default.
2017-03-16 21:06:12 +00:00
Jan Malakhovski
6d25f77a64
nixos: tor: add enableGeoIP
2017-03-16 21:06:12 +00:00
Daiderd Jordan
00ed0f792e
Merge pull request #22897 from timor/couchdb-2.0.0
...
couchdb: add support for version 2.0.0
2017-03-16 22:03:32 +01:00
Profpatsch
6da60bb101
modules/mlmmj: fix a typo in listaddress folder
2017-03-16 18:47:11 +01:00
Graham Christensen
e4c0613470
Merge pull request #23674 from c0bw3b/sec/jboss7
...
JBoss AS: list known vulnerability
2017-03-15 17:33:27 -04:00
Vladimír Čunát
e99bc64552
Merge branch 'master' into staging
...
More larger rebuilds from master, unfortunately.
2017-03-15 19:09:56 +01:00
Michael Raskin
14a3412048
nixos: tests: firefox: make more comprehensive
...
Run Firefox inside an XTerm, it doesn't crash mysteriously this way.
Also try opening developer tools and checking that Firefox doesn't
crash in the process.
2017-03-15 17:25:57 +01:00
Pascal Bach
a8cca7037e
prometheus-fritzbox-exporter: init at 1.0
2017-03-15 17:22:36 +01:00
Volth
bcc4c261be
lxc: ensure directory /var/lib/lxc/rootfs
2017-03-15 12:42:27 +01:00
Bart Brouns
bb3ef8a95c
physlock: fix issue 21935
2017-03-15 11:47:02 +01:00
Benjamin Staffin
98e4c5dd45
Merge pull request #23861 from benley/nixos-manual-launcher
...
nixos: Add a menu launcher for the NixOS manual
2017-03-15 04:37:16 -04:00
Joachim Fasting
f122f0147b
nixos/dnscrypt-proxy: log resolver list verification failure
...
Otherwise, the service unit just fails for no discernable
reason. Verifcation failure is bad so it ought to be easily
discoverable.
2017-03-15 01:13:08 +01:00
Joachim Fasting
de15e7894b
nixos/dnscrypt-proxy: get resolver list from github
...
The list has disappeared from its ordinary location at
download.dnscrypt.org.
2017-03-15 01:12:46 +01:00
Joachim Fasting
472002f216
nixos/dnscrypt-proxy: remove the resolverList option
...
This option was initially added to make it easier to use an
up-to-date list, but now that we always use an up-to-date list
from upstream, there's no point to the option.
From now on, you can either use a resolver listed by dnscrypt
upstream or a custom resolver.
2017-03-15 01:12:43 +01:00
Joachim Fasting
540740598e
nixos/dnscrypt-proxy: add example of how to use the cache plugin
2017-03-15 01:12:39 +01:00
Joachim Fasting
719813caf6
nixos/dnscrypt-proxy: replace unimportant options with extraArgs
...
Removes tcpOnly and ephemeralKeys: reifying them as nixos
options adds little beyond improved discoverability. Until
17.09 we'll automatically translate these options into extraArgs
for convenience.
Unless reifying an option is necessary for conditional
computation or greatly simplifies configuration/reduces risk of
misconfiguration, it should go into extraArgs instead.
2017-03-15 01:12:37 +01:00
Joachim Fasting
9325c3a616
nixos/dnscrypt-proxy: simplify module logic related to apparmor
2017-03-15 01:12:35 +01:00
Joachim Fasting
83052ef9db
nixos/dnscrypt-proxy: support reload
2017-03-15 01:12:29 +01:00
Franz Pletz
91744f31b0
Merge pull request #23623 from mayflower/fix/users-create-home
...
nixos/users-groups: chown home on createHome
2017-03-14 23:07:57 +01:00
Bas van Dijk
308c09d41f
wordpress: security upgrade: 4.7.2 -> 4.7.3 & other improvements ( #23837 )
...
* Moved the wordpress sources derivation to the attribute pkgs.wordpress. This
makes it easier to override.
* Also introduce the `package` option for the wordpress virtual host config which
defaults to pkgs.wordpress.
* Also fixed the test in nixos/tests/wordpress.nix.
2017-03-14 16:11:51 +01:00
Benjamin Staffin
638e1b8243
nixos: Add a menu launcher for the NixOS manual
2017-03-14 06:04:43 -04:00
Peter Hoeg
80750f459c
Merge pull request #17303 from peterhoeg/iio
...
iio-sensor-proxy: init at 2.2 and nixos module
2017-03-14 11:16:09 +08:00
Tuomas Tynkkynen
aba0b45b86
Merge remote-tracking branch 'upstream/master' into staging
...
Conflicts:
pkgs/development/libraries/qt-5/5.7/qtbase/default.nix
2017-03-14 00:49:22 +02:00
Graham Christensen
b806e25d65
nixos: build for aarch64-linux
2017-03-13 17:34:33 -04:00
Renaud
72619a86c9
JBoss AS: list known vulnerability
...
CVE-2015-7501
Warning in JBoss module
2017-03-13 18:45:19 +01:00
Jörg Thalheim
9e6fe2e4f2
Merge pull request #23765 from benley/ykpers-duplicate
...
ykpers: consolidate into yubikey-personalization
2017-03-12 22:26:32 +01:00
Vladimír Čunát
50fadc8b18
cups: split the $lib output
...
This saves > 10 MB from most closures.
Printing test succeeds on x86_64-linux.
2017-03-12 18:36:30 +01:00
Jörg Thalheim
41625dcab6
pump.io: fix tests
...
fixes #23568
2017-03-12 16:01:07 +01:00
Rodney Lorrimar
f488b1811b
pumpio service: don't keep secrets in nix store
...
Added extra config options to allow reading passwords from file rather
than the world-readable nix store.
The full config.json file is created at service startup.
Relevant to #18881
2017-03-12 16:01:02 +01:00
Rodney Lorrimar
f1a1490135
pumpio service: adjust upload directory config for 3.0.0
...
These changes are backwards compatible.
2017-03-12 16:00:57 +01:00
zetok
4ca17dd6c0
gresecurity docs: fix incorrect option ( #23789 )
2017-03-12 15:05:14 +01:00
Benjamin Staffin
f474f82860
ykpers: consolidate into yubikey-personalization
...
Looks like this accidentally got packaged twice.
2017-03-11 16:23:00 -05:00
Franz Pletz
323d0fdd5a
phpfpm module: set correct nixos sendmail path
2017-03-11 09:39:12 +01:00
Daiderd Jordan
b52af49d36
virtualisation-xen: fix defaultText interpolation
2017-03-11 00:09:22 +01:00
Joachim Fasting
bb6361b81a
nixos/dnscrypt-proxy: grant daemon access to load plugins
2017-03-10 18:54:54 +01:00
Joachim Fasting
5279ec111f
nixos/dnscrypt-proxy docs: reword section on forwarding
...
Newer versions of DNSCrypt proxy *can* cache lookups (via
plugin); make the wording more neutral wrt. why one might want
to run the proxy in a forwarding setup.
2017-03-10 18:54:52 +01:00
Joachim Fasting
c0a8a9205b
nixos/dnscrypt-proxy: inline option renamings
...
In an effort to make the module more self-contained.
2017-03-10 18:54:51 +01:00
Joachim Fasting
563c8e1496
nixos/dnscrypt-proxy: inline top-level binding (cleanup)
2017-03-10 18:54:50 +01:00
Joachim Fasting
c6da2c7c2b
nixos/dnscrypt-proxy: use example.com in example values
...
It is the canonical example domain after all.
2017-03-10 18:54:44 +01:00