nixpkgs/nixos/modules/security
Lucas Savva 377c6bcefc
nixos/acme: Add defaults and inheritDefaults option
Allows configuring many default settings for certificates,
all of which can still be overridden on a per-cert basis.
Some options have been moved into .defaults from security.acme,
namely email, server, validMinDays and renewInterval. These
changes will not break existing configurations thanks to
mkChangedOptionModule.

With this, it is also now possible to configure DNS-01 with
web servers whose virtualHosts utilise enableACME. The only
requirement is you set `acmeRoot = null` for each vhost.

The test suite has been revamped to cover these additions
and also to generally make it easier to maintain. Test config
for apache and nginx has been fully standardised, and it
is now much easier to add a new web server if it follows
the same configuration patterns as those two. I have also
optimised the use of switch-to-configuration which should
speed up testing.
2021-12-26 16:44:10 +00:00
..
apparmor apparmor: Fix cups-client typo 2021-08-23 00:50:15 -07:00
wrappers nixos/doc: clean up defaults and examples 2021-10-04 12:47:20 +02:00
acme.nix nixos/acme: Add defaults and inheritDefaults option 2021-12-26 16:44:10 +00:00
acme.xml nixos/acme: fix typo in docs 2021-11-30 21:31:50 +08:00
apparmor.nix nixos/security/apparmor: utillinux -> util-linux 2021-05-17 17:14:08 +02:00
audit.nix nixos: Move uses of stdenv.shell to runtimeShell. 2018-03-01 14:38:53 -05:00
auditd.nix auditd service: make more useful 2019-06-10 18:55:11 +03:00
ca.nix nixos/ca: use cacert package build for options and p11-kit output 2021-10-08 01:21:57 +00:00
chromium-suid-sandbox.nix nixos: explicitely set security.wrappers ownership 2021-09-13 13:48:13 +02:00
dhparams.nix treewide: set defaultText for options using simple path defaults 2021-12-09 01:12:13 +01:00
doas.nix nixos/terminfo: inherit TERMINFO* env vars also for doas 2021-11-08 14:05:24 -08:00
duosec.nix nixos: explicitely set security.wrappers ownership 2021-09-13 13:48:13 +02:00
google_oslogin.nix nixos/google-oslogin: add to system.nssDatabases.group too 2020-05-11 16:14:50 +02:00
lock-kernel-modules.nix nixos/lock-kernel-modules: reorder before/after 2021-09-19 12:06:00 +02:00
misc.nix nixos/apparmor: improve code readability 2021-04-23 07:20:19 +02:00
oath.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
pam_mount.nix nixos/doc: clean up defaults and examples 2021-10-04 12:47:20 +02:00
pam_usb.nix nixos: explicitely set security.wrappers ownership 2021-09-13 13:48:13 +02:00
pam.nix nixos/pam: Type all limit options 2021-12-09 12:48:02 +01:00
polkit.nix nixos: explicitely set security.wrappers ownership 2021-09-13 13:48:13 +02:00
rngd.nix nixos/rngd: Remove module entirely, leave an explaination 2021-02-21 01:32:50 +01:00
rtkit.nix nixos: define the primary group of users where needed 2021-09-12 14:59:30 +02:00
sudo.nix nixos/doc: clean up defaults and examples 2021-10-04 12:47:20 +02:00
systemd-confinement.nix Move systemd-lib.nix and systemd-unit-options.nix into utils 2021-11-20 17:52:29 -05:00
tpm2.nix nixos/doc: clean up defaults and examples 2021-10-04 12:47:20 +02:00