Joachim F
90accc093e
Merge pull request #32216 from LumiGuide/networkmanager-strongswan
...
networkmanager_strongswan: fix package
2017-12-11 23:26:21 +00:00
Andreas Rammhold
104de603cb
networkmanager: remove restart after suspend from resume
...
In commit ec9dc73#24401 could be related to this. Since I am not using KDE/plasma5
I can only guess…
2017-12-10 00:19:15 +01:00
Orivej Desh
40950f6a2d
Merge pull request #31006 from florianjacob/prosody
...
Improvements for Prosody
2017-12-09 09:19:24 +00:00
zimbatm
3807408c38
Merge pull request #32212 from ryantrinkle/nat-port-forwarding-ranges
...
Nat port forwarding ranges
2017-12-04 12:05:05 +00:00
Ryan Trinkle
4f8a65a163
nixos/nat: add dmzHost option ( #32257 )
2017-12-04 09:21:58 +00:00
Ryan Trinkle
a8f1ebf52c
nat: support port ranges in networking.nat.forwardPorts
2017-12-02 13:28:01 -05:00
John Boehr
67c3f7f65f
nixos/i2pd: tunnel config fixes
...
Tunnel configuration has no member named "host" - i2pd does but it's called "address" in the options. As a result, no tunnel configuration is generated.
* Fix attribute check in inTunnels
* Fix integer to string coercion in inTunnels
* Add destinationPort option for outTunnels
2017-11-30 17:13:42 -08:00
Bas van Dijk
460a4b0832
networkmanager_strongswan: fix package
...
Added the boolean option:
networking.networkmanager.enableStrongSwan
which enables the networkmanager_strongswan plugin and adds
strongswanNM to the dbus packages.
This was contributed by @wucke13, @eqyiel and @globin.
Fixes : #29873
2017-11-30 23:03:32 +01:00
Franz Pletz
a59864c3c5
Merge pull request #31839 from bluescreen303/fix-rpfilter
...
firewall: fix rpfilter blocking dhcp offers when no ip was bound yet
2017-11-24 09:39:05 +01:00
Tim Steinbach
48252b15b9
sshd: Remove ripemd160 MACs
...
They are invalid for our OpenSSH
2017-11-21 09:36:51 -05:00
Mathijs Kwik
05761e9504
firewall: fix rpfilter blocking dhcp offers when no ip was bound yet
2017-11-19 22:24:56 +01:00
jeaye
2a8bd9e2a1
nixos/ssh: Harden config defaults
2017-11-16 20:25:37 -08:00
jeaye
ec80c92825
nixos/ssh: Remove support for old host keys
2017-11-16 20:25:22 -08:00
Parnell Springmeyer
cb11bf73a5
nixos/nghttpx: add module for the nghttpx proxy server ( #31680 )
...
* nghttpx: Add a new NixOS module for the nghttpx proxy server
This change also adds a global `uid` and `gid` for a `nghttpx` user
and group as well as an integration test.
* nixos/nghttpx: fix building manual
2017-11-16 18:21:02 +00:00
Franz Pletz
06d0ba1ee9
Merge pull request #31477 from andir/fix-babeld-config
...
Fix babeld config
2017-11-14 12:12:59 +01:00
rnhmjoj
2918f6a3f0
nixos/wireless: add manual network configuration
2017-11-11 23:11:46 +01:00
Andreas Rammhold
5feed06535
babeld module: updated example config
...
Previosuly the example config did feature the deprecated `wired`
paramter. Wired can now be configured using the `type` parameter.
2017-11-10 11:54:21 +01:00
Andreas Rammhold
5d9073747a
babeld module: support non-boolean default arguments
...
Previosuly only boolean values would be rendered properly. All other
values would cause an error. Even the example configuration did fail.
2017-11-10 11:54:15 +01:00
Andreas Rammhold
236a7c5452
babeld module: separate default options by space
...
In the previous version multiple default values would generate an
invalid babeld config file since all options would be concatenated
without any separator.
2017-11-10 11:54:08 +01:00
Orivej Desh
30bd994724
Merge pull request #31161 from nocent/master
...
networkmanager: add power saving and mac address randomization options for wifi devices
2017-11-06 06:17:16 +00:00
Markus Mueller
4874862732
babeld module: init
2017-11-05 21:15:23 +01:00
Franz Pletz
711303952e
wireguard module: add device name environment var
...
This makes the interface name available as an environment variable for
the pre/post hooks.
2017-11-05 16:42:25 +01:00
Benjamin Staffin
600f393bc7
keybase service: Turn off debug logging
...
Keybase is _extremely_ verbose with its debug output when run with -d.
2017-11-03 14:45:08 -04:00
Joerg Thalheim
2e6daff704
nixos/unbound: correct indented interface/access lists
2017-11-03 08:37:02 +00:00
nocent
af13b05dda
networkmanager: add power saving and mac address randomization options for wifi devices
2017-11-02 21:57:25 +00:00
Andrew Dunham
7f921735e7
strongswan: allow configuring enabled plugins
2017-11-02 14:39:14 +01:00
Satoshi Shishiku
c75528bd56
prosody service: add extra SSL options
2017-11-01 13:38:01 +01:00
Satoshi Shishiku
57f3dd5a2f
prosody service: add restart trigger
2017-11-01 13:38:01 +01:00
Satoshi Shishiku
2e55e164eb
prosody service: forking
2017-11-01 13:37:58 +01:00
Satoshi Shishiku
1e45a6459e
prosody service: add types
2017-11-01 13:37:57 +01:00
rnhmjoj
ea8714ecb1
nixos/dnschain: use nodePackages.dnschain
2017-10-31 22:03:38 +01:00
Franz Pletz
fd9ae9226d
Merge pull request #30319 from peterhoeg/f/dnsmasq
...
dnsmasq nixos: make sure it always runs
2017-10-25 04:07:27 +02:00
Martin Potier
ff562459cc
nixos/libreswan: add missing runtime dependencies
2017-10-22 15:36:26 +02:00
Peter Hoeg
07bc859e9a
Revert "ssh: deprecate use of old DSA keys"
...
This reverts commit 65b73d71cb
2017-10-14 14:42:49 +08:00
Peter Hoeg
bdbba026f3
Revert "dnsmasq nixos: make sure it always runs"
...
This reverts commit 1917e69b54
2017-10-14 14:42:49 +08:00
Peter Hoeg
8df1c9ac17
Revert "firewalld: init at 0.4.4.4"
...
This reverts commit 178a96f99b
2017-10-14 14:42:48 +08:00
Peter Hoeg
ff3fd1027c
Revert "networkmanager: dns and extraConfig"
...
This reverts commit 0dd25e585f
2017-10-14 14:42:48 +08:00
Peter Hoeg
0dd25e585f
networkmanager: dns and extraConfig
2017-10-14 14:38:04 +08:00
Peter Hoeg
178a96f99b
firewalld: init at 0.4.4.4
...
Includes systemd module.
2017-10-14 14:38:04 +08:00
Peter Hoeg
1917e69b54
dnsmasq nixos: make sure it always runs
...
By default we only restart if the dnsmasq daemon fails but we introduce an
option to always keep it running.
2017-10-14 14:38:04 +08:00
Peter Hoeg
65b73d71cb
ssh: deprecate use of old DSA keys
...
They are not safe and shouldn't be used.
2017-10-14 14:38:04 +08:00
Jörg Thalheim
b90f50862f
Merge pull request #30324 from florianjacob/firewall-clarify-logging
...
nixos/firewall: Rename misleading rejected to refused in logging
2017-10-13 20:25:21 +01:00
Yegor Timoshenko
22505d8df4
connman: do not restart after suspend
2017-10-13 13:05:02 +02:00
Matt McHenry
bbec429f7a
djbdns: fix root server list at build time
...
as suggested by @peterhoeg in
1b7e5eaa79 (commitcomment-24560631)fixes #30379
2017-10-13 10:29:12 +01:00
Peter Hoeg
0034f9e52c
dnsmasq nixos: make sure it always runs
...
By default we only restart if the dnsmasq daemon fails but we introduce an
option to always keep it running.
2017-10-12 12:55:12 +08:00
Florian Jacob
847beb558f
nixos/firewall: Rename misleading rejected to refused in logging
...
as that's used as general term for rejected or dropped packets
in the rest of the config.
2017-10-11 20:12:58 +02:00
Yegor Timoshenko
274c9b7587
unbound: fix typo in systemd Before
2017-10-10 20:08:36 +00:00
Guillaume Maudoux
15b7e102b6
Safer defaults for immutable znc config ( #30155 )
...
* Safer defaults for immutable znc config
I just lost all the options I configured in ZNC, because the mutable config was overwritten.
I accept any suggestions on the way to implement this, but overwriting a mutable config by default seems weird. If we want to do this, we should ensure that ZNC does not allow to edit the config via the webmin when cfg.mutable is false.
* Do not backup old config files.
There seems to be little need for backups if mutable becomes a voluntary opt-out.
* fixup
2017-10-07 16:38:14 +01:00
Tim Steinbach
8840eaf223
keybase: Fix modules
2017-10-06 18:49:58 -04:00
Wei-Ming Yang
7e4e2667ae
softether: 4.18 -> 4.20
2017-10-03 01:35:20 +08:00
