Aaron Andersen
8c48c55c2d
nixos/minio: replace deprecated usage of PermissionsStartOnly
...
see https://github.com/NixOS/nixpkgs/issues/53852
2019-04-13 07:00:56 -04:00
Florian Klink
2457510db4
Merge pull request #51918 from bobvanderlinden/var-run
...
tree-wide: nixos: /var/run -> /run
2019-04-07 20:09:46 +02:00
Léo Gaspard
07fdcb348f
Merge pull request #59056 from aanderse/mod_php-sendmail
...
nixos/httpd: replace ssmtp with system-sendmail
2019-04-06 20:57:58 +02:00
Aaron Andersen
9c9a6f380e
nixos/httpd: replace ssmtp with system-sendmail
2019-04-06 06:34:46 -04:00
Jörg Thalheim
6dd7483ce1
Merge pull request #57979 from 4z3/writeNginxConfig
...
nixos/nginx: use nginxfmt and gixy
2019-04-04 20:23:58 +01:00
Bob van der Linden
65710d1df5
nixos/mighttpd2: /var/run -> /run
2019-03-24 21:15:33 +01:00
tv
59fac1a6d7
nixos/nginx: use writeNginxConfig
2019-03-23 11:16:14 +01:00
Okina Matara
40d7079f79
nixos/meguca: Add videoPaths, set postgresql version to 11
2019-03-23 01:19:29 -05:00
Dmitry Kalinkin
0e57b98b2c
Merge pull request #57596 from artemist/nginx-return
...
nixos/nginx: add return option to location
2019-03-22 14:08:33 -04:00
Samuel Leathers
cafd07a54e
Merge pull request #56423 from Izorkin/nginx-unit
...
unit: add service unit and update package
2019-03-20 13:08:05 -04:00
Izorkin
42a99b1be2
nixos/unit: init service unit
2019-03-16 19:54:21 +03:00
Silvan Mosberger
f8de52a2fe
Revert "nixos/nginx: support h2c"
2019-03-15 14:31:11 +01:00
Artemis Tosini
fee854ed01
nixos/nginx: add return option to location
2019-03-13 17:31:01 +00:00
Jordan Johnson-Doyle
04425c6223
nixos/nginx: support h2c
2019-03-08 17:50:46 +00:00
Janne Heß
3de5726e9b
nixos/nginx: Support additional listen parameters ( #56835 )
2019-03-06 11:42:46 +02:00
Andreas Rammhold
768336a74b
Merge pull request #56233 from jtojnar/nginx-tlsv13
...
nixos/nginx: Enable TLS 1.3 support
2019-03-03 14:19:38 +01:00
Jan Tojnar
f93ff28c62
nixos/nginx: Enable TLS 1.3 support
2019-02-25 16:47:19 +01:00
Izorkin
569248b3c2
nginx: fix formating the config file
2019-02-24 19:50:58 +03:00
Izorkin
0394b177c7
nginx: formating the config file
2019-02-24 10:17:11 +03:00
Symphorien Gibol
a915b33315
nixos: add preferLocalBuild=true; on derivations for config files
2019-02-22 20:11:27 +01:00
aanderse
a9358c4356
nixos/httpd: update documentation to reflect changes from https://github.com/NixOS/nixpkgs/pull/54529 ( #56079 )
2019-02-20 14:43:25 +02:00
Silvan Mosberger
a3f85f0dc0
Merge pull request #55410 from aanderse/apache-defaults
...
nixos/httpd: improve security in configuration file
2019-02-18 03:27:18 +01:00
Aaron Andersen
5eef3590ae
nixos/phpfpm: allow configuring php.ini files per-pool
2019-02-13 19:58:02 -05:00
Aaron Andersen
1bec75301b
nixos/httpd: don't advertise php
2019-02-07 14:25:55 -05:00
Aaron Andersen
70be5b6bb2
nixos/httpd: disable HTTP TRACE method by default
2019-02-07 14:13:45 -05:00
Aaron Andersen
dd610ce84f
nixos/httpd: disable TLSv1 by default for better security
2019-02-07 14:05:44 -05:00
aanderse
c6cd07707b
nixos/httpd: rename apache log files to have a .log file extension ( #54529 )
...
nixos/httpd: rename apache log files to have a .log file extension
2019-01-31 04:04:58 +02:00
John Wiegley
0305c55888
Merge pull request #53702 from aanderse/apache-ssl-opt
...
nixos/httpd: add options sslCiphers & sslProtocols
2019-01-23 19:27:17 -08:00
Wout Mertens
e445eabbe8
Merge pull request #41440 from wmertens/php-per-pool
...
phpfpm: allow configuring PHP package per-pool
2019-01-21 08:35:49 +01:00
Aaron Andersen
fd5a88687c
nixos/httpd: add options sslCiphers & sslProtocols
2019-01-09 11:30:19 -05:00
Bas van Dijk
6ac10cd764
Merge pull request #53399 from LumiGuide/feat-wordpress-copy-plugins
...
apache-httpd/wordpress: copy plugins and themes instead of symlinking
2019-01-07 13:41:29 +01:00
Falco Peijnenburg
9d2c9157d7
nixos/apache-httpd/wordpress: copy plugins and themes instead of symlinking
...
Symlinking works for most plugins and themes, but Avada, for instance, fails to
understand the symlink, causing its file path stripping to fail. This results in
requests that look like:
https://example.com/wp-content//nix/store/...plugin/path/some-file.js
Since hard linking directories is not allowed, copying is the next best thing.
2019-01-06 17:51:31 +01:00
volth
fed7914539
Merge branch 'staging' into make-perl-pathd
2018-12-18 17:13:27 +00:00
Florian Klink
91c65721f7
owncloud: remove server
...
pkgs.owncloud still pointed to owncloud 7.0.15 (from May 13 2016)
Last owncloud server update in nixpkgs was in Jun 2016.
At the same time Nextcloud forked away from it, indicating users
switched over to that.
cc @matej (original maintainer)
2018-12-16 15:05:53 +01:00
Florian Klink
50500219af
apache-httpd/limesurvey.nix: fix copypasta from owncloud
2018-12-16 15:05:53 +01:00
volth
bb9557eb7c
lib.makePerlPath -> perlPackages.makePerlPath
2018-12-15 03:50:31 +00:00
Jappie Klooster
e576c3b385
doc: Fix insecure nginx docs ( #51840 )
2018-12-11 11:02:56 +00:00
Red Davies
4173b845ca
mediawiki: 1.29.1 -> 1.31.1
...
1.29.1 is out of support and has security vulnerabilities. 1.31.1 is current LTS.
2018-12-03 21:04:08 +00:00
c0bw3b
5e4ceba7bf
nixos/mediawiki: fetch over https
2018-11-24 23:18:26 +01:00
Pavel Goran
a57bbf4e63
nixos/tomcat: add purifyOnStart option
...
With this option enabled, before creating file/directories/symlinks in baseDir
according to configuration, old occurences of them are removed.
This prevents remainders of an old configuration (libraries, webapps, you name
it) from persisting after activating a new configuration.
2018-10-29 18:26:22 +07:00
Wout Mertens
69936b5655
phpfpm: allow configuring PHP package per-pool
...
props to @4levels
2018-10-26 16:11:07 +01:00
Izorkin
af8ae49395
nginx: add custom options
2018-10-23 21:04:07 +03:00
Michael Raskin
3491dd06a1
Merge pull request #47224 from pvgoran/tomcat-virtualhost-aliases
...
nixos/tomcat: add aliases sub-option for virtual hosts
2018-10-21 07:54:52 +00:00
Franz Pletz
ebd38185c8
nixos/nextcloud: init
...
Co-authored-by: Franz Pletz <fpletz@fnordicwalking.de>
Co-authored-by: Robin Gloster <mail@glob.in>
Co-authored-by: Janne Heß <janne@hess.ooo>
Co-authored-by: Florian Klink <flokli@flokli.de>
2018-10-01 02:07:43 +09:30
Pavel Goran
5e16e671ea
nixos/tomcat: add aliases sub-option for virtual hosts
2018-09-23 21:49:17 +07:00
Uli Baum
15e6e1ff6f
nixos/nginx: fix type of sslTrustedCertificate option
...
The option was added in 1251b34b5b
with type `types.path` but default `null`, so eval failed with
the default setting. This broke the acme and certmgr tests.
cc: @vincentbernat @fpletz
2018-09-02 01:35:59 +02:00
Vincent Bernat
1251b34b5b
nixos/nginx: ensure TLS OCSP stapling works out of the box with LE
...
The recommended TLS configuration comes with `ssl_stapling on` and
`ssl_stapling_verify on`. However, this last directive also requires
the use of `ssl_trusted_certificate` to verify the received answer.
When using `enableACME` or similar, we can help the user by providing
the correct value for the directive.
The result can be tested with:
openssl s_client -connect web.example.com:443 -status 2> /dev/null
Without OCSP stapling, we get:
OCSP response: no response sent
After this change, we get:
OCSP Response Data:
OCSP Response Status: successful (0x0)
Response Type: Basic OCSP Response
Version: 1 (0x0)
Responder Id: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
Produced At: Aug 30 20:46:00 2018 GMT
2018-08-30 22:47:41 +02:00
Vincent Bernat
bd075eb914
nginx: add more gzipped MIME types
...
The additions are:
- image/svg+xml for SVG images
- application/atom+xml for Atom feeds
These types are also present in mime.types. For better readability,
the list is sorted and formatted with one type per line.
2018-08-26 21:48:55 +02:00
Vincent Bernat
06a5fb2ada
nginx: use a compression level of 5 in recommended configuration
...
While there is little gain of space to use a compression level of 9,
the CPU usage is significant. Many experiments point to use something
between 4 and 6. For example:
- https://mjanja.ch/2015/03/finding-the-nginx-gzip_comp_level-sweet-spot/
- 3bda5b93ed/nginx.conf (L93)
2018-08-26 21:43:34 +02:00
Okina Matara
aba87b85ef
nixos/hydron: Various tweaks
...
Make timer persistent
Start timer after hydron
Change interval from hourly to weekly
2018-08-15 22:00:13 -05:00