Nikolay Amiantov
820b4cd067
firewall service: allow DHCPv6 client traffic
2017-01-15 19:38:54 +03:00
Nikolay Amiantov
1158eda66a
dhcpd service: add DHCPv6 support
2017-01-15 19:38:53 +03:00
Svein Ove Aas
a4fca56897
ddclient: Write /etc/ddclient.conf when requested
...
Fixes #20101
From PR #21417
2017-01-09 06:29:15 +01:00
Valentin Shirokov
e138d3afdf
Added option networking.wireless.networks.*.priority
...
It is literal 'priority' option of wpa_supplicant.conf
2017-01-07 20:23:12 +08:00
Franz Pletz
e6708cea37
bind: fix collision of binaries in outputs
...
Using outputsToInstall the intended behaviour of including host and dnsutils
when bind is installed can be implemented instead of using symlinks to fix
installing all outputs individually with nix-env.
Fixes #19761 .
2017-01-07 02:44:54 +01:00
Franz Pletz
cdbffaa86e
Merge pull request #21625 from mayflower/smokeping
...
smokeping: Allow customization of cgiurl and imgurl
2017-01-04 21:56:12 +01:00
Joachim F
9e0dc9fa7c
Merge pull request #21592 from joachifm/cjdns-optional-extraHosts
...
cjdns service: optional extraHosts
2017-01-04 18:54:09 +01:00
Tristan Helmich
f808502aba
smokeping: cleanup (option ordering)
2017-01-03 23:10:59 +01:00
Tristan Helmich
b5703eaa80
smokeping: Allow full override of imgurl + cgiurl
2017-01-03 23:10:54 +01:00
volth
c737809465
miredo-fix-kill-path
2017-01-03 10:10:34 +00:00
Tomas Hlavaty
bdb9cd1e17
cjdns service: optionally add cjdns hosts to networking.extraHosts
...
Enabling this incurs a heavy eval-time cost, but it's a nice usability
enhancement; satisfy both concerns by making it optional (default
false).
2017-01-02 19:31:37 +01:00
Joachim Fasting
237af1853a
Revert "nixos/cjdns: do not ammend /etc/hosts"
...
This reverts commit 60ded3f363
.
We want to make this optional instead.
2017-01-02 19:31:11 +01:00
volth
06b372f24f
miredo: init at 1.2.6
2016-12-31 21:03:27 +01:00
Joachim Fasting
d8659f24e6
dnscrypt-proxy service: order before nss-lookup.target
2016-12-30 20:27:05 +01:00
Alexey Lebedeff
59361a2a81
i2pd module: fix typo ( #21525 )
2016-12-30 15:14:05 +01:00
Graham Christensen
8ed4c8b73b
openssh: 7.4p1 no longer backgrounds when systemd is starting it.
2016-12-29 17:04:46 -05:00
Tim Digel
81d8a457ed
Fix asterisk & asterisk: 13.6.0 -> 14.1.2 ( #20788 )
...
* fix/asterisk-module: use unix-group for asterisk-files
* fix/asterisk-module: add configOption to use some default config-files
* fix/asterisk-module: correction of skel copy
* fix/asterisk-module: use /etc/asterisk as configDir
* fix/asterisk-module: add reload; do not restart unit
* asterisk: 13.6.0 -> 14.1.2
* fix/asterisk: compile with lua, pjsip, format_mp3
* fix/asterisk: fix indentation
* fix/asterisk: remove broken flag
2016-12-28 23:04:58 +01:00
Franz Pletz
7ae2d221cd
bird service: add bird to systemPackages
...
For the tool birdc to monitor and configure bird.
2016-12-28 06:35:31 +01:00
Jörg Thalheim
1590461887
ntp: make timesyncd the new default
...
- most nixos user only require time synchronisation,
while ntpd implements a battery-included ntp server (1,215 LOCs of C-Code vs 64,302)
- timesyncd support ntp server per interface (if configured through dhcp for instance)
- timesyncd is already included in the systemd package, switching to it would
save a little disk space (1,5M)
2016-12-17 00:00:45 +01:00
michael bishop
e5cefadef7
fix indentation in several nixos option descriptions
2016-12-16 18:29:25 +01:00
Jörg Thalheim
cc864af928
bird: refactor module
...
- syntax check before deploying configuration
- remove static unnessary static uid/gid (configuration is opened as root)
- add service hardening
2016-12-15 11:38:45 +01:00
Jörg Thalheim
ebd85b632a
ferm: reload rules on updates instead of restart
2016-12-14 16:09:11 +01:00
Joachim Fasting
4697f83984
openfire service: more informative assertion failure message
...
Explain why the assertion fails; the user already knows that it *has*
failed.
2016-12-10 20:35:43 +01:00
Joachim Fasting
2a4902dd80
dante service: fix config option type
...
The type was simply str but the default is null, thus resulting in a
conversion error if the user fails to declare a value.
2016-12-10 20:35:41 +01:00
Joachim Fasting
3dcdc2d2b0
privoxy service: remove static uid
...
The service owns no data, having a static uid serves no purpose.
This frees up uid/gid 32
2016-12-05 13:37:08 +01:00
Joachim Fasting
ad88f1040e
privoxy service: additional isolation
2016-12-05 13:21:31 +01:00
lbonn
288e75c5f9
wireguard: remove dependency on ip-up.target
...
It was deprecated and removed from all modules in the tree by #18319 .
The wireguard module PR (#17933 ) was still in the review at the time and
the deprecated usage managed to slip inside.
2016-12-01 00:11:16 +01:00
Sophie Taylor
016fa06c71
cjdns: Improving systemd unit description
2016-11-27 22:07:51 -05:00
Franz Pletz
e394c305a8
Merge pull request #20620 from rnhmjoj/fakeroute
...
fakeroute: init at 0.3
2016-11-28 03:01:15 +01:00
rnhmjoj
7eb9a03221
fakeroute: add service
2016-11-23 15:23:10 +01:00
Franz Pletz
d94e93ccdf
Merge pull request #19588 from Shados/add-dante
...
Add dante package & accompanying service module
2016-11-22 15:10:46 +01:00
Alexei Robyn
49d679d7a8
dante service: init
2016-11-22 21:33:54 +11:00
Joachim Fasting
f9f354faad
nixos/modules: use defaultText where applicable
...
Primarily to fix rendering of these default values in the manual but
it's also nice to avoid having to eval these things just to build the
manual.
2016-11-21 16:35:15 +01:00
Eelco Dolstra
d69dce080d
Fix setting programs.ssh.setXAuthLocation
...
The configuration { services.openssh.enable = true;
services.openssh.forwardX11 = false; } caused
programs.ssh.setXAuthLocation to be set to false, which was not the
intent. The intent is that programs.ssh.setXAuthLocation should be
automatically enabled if needed or if xauth is already available.
2016-11-21 16:19:51 +01:00
Emery Hemingway
60ded3f363
nixos/cjdns: do not ammend /etc/hosts
...
Generating IPv6 addresses at eval time required building cjdns.
Fix #20422
2016-11-18 18:41:50 +01:00
Eric Sagnes
15d25df698
nsd module: use enum
2016-11-16 22:37:14 +09:00
Eric Sagnes
5259fb2181
nntp-proxy module: use enum
2016-11-16 22:36:53 +09:00
Eric Sagnes
fb26d561ed
hostapd module: use enum
2016-11-16 22:36:26 +09:00
Pascal Bach
c1dca9e40b
etcd: make all service using etc go to 127.0.0.1:2379 by default
...
The old etcd port 4001 is no longer enabled by default in etcd 3.
The new port is 2379 and is officially assigned by IANA.
There were still some services left that expect etcd on port 4001 by default.
This changes the default to 2379 everywhere.
It should not cause problems for users as the etcd by nix does listen on the new port only by default anyway.
2016-11-11 23:11:54 +01:00
Gregor Kleen
54199414e3
nsd service: fix typo
...
Closes #20343 .
2016-11-11 14:06:07 +01:00
Edward Tjörnhammar
4009dbe543
nixos: i2pd, update config options
2016-11-06 08:13:04 +01:00
Joachim F
32715b8314
Merge pull request #17445 from joachifm/dnscrypt-proxy-update-list
...
dnscrypt-proxy service: auto-updated resolver list
2016-11-05 18:23:48 +01:00
Joachim Fasting
2f912bf0a3
dnscrypt-proxy service: auto-update upstream resolver list
...
By default, we use the list of public DNSCrypt resolvers provided by
dnscrypt-proxy upstream. The list is updated at regular intervals.
2016-11-05 17:44:51 +01:00
Joachim F
2c567dbd4d
Merge pull request #20144 from ericsagnes/feat/module-enums
...
modules: use enum when relevant
2016-11-05 12:18:04 +01:00
Sophie Taylor
20e81f7c0d
nixos/cjdns: tightened permissions via systemd, added caps
2016-11-04 17:00:23 +01:00
uwap
d9134ddb5d
Add a package option for quassel ( #20159 )
2016-11-04 16:33:47 +01:00
Joachim Fasting
222cfd3233
cjdns module: fix typo
2016-11-04 13:44:48 +01:00
Eric Sagnes
8f8184ece1
tinc module: use enum
2016-11-04 13:04:17 +09:00
Eric Sagnes
5a3c2e3db0
bitlbee module: use enum
2016-11-04 13:03:53 +09:00
Marius Bergmann
51652ac3aa
smokeping service: Use setuid-wrapped fping binary
...
The current default probe config uses the unwrapped fping binary, which
leads to an error because fping must be executed with elevated
permissions.
I fixed this by changing the path to the default binary to the
setuid-wrapped version.
2016-11-03 09:44:21 +01:00