JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
fb46df8a9a
nixpkgs/nixos/modules/services/networking
History
aszlig fb46df8a9a
nixos: Fix ordering of firewall.service 
Follow-up to the following commits:

  abdc5961c3: Fix starting the firewall
  e090701e2d: Order before sysinit

Solely use sysinit.target here instead of multi-user.target because we
want to make sure that the iptables rules are applied *before* any
socket units are started.

The reason I've dropped the wantedBy on multi-user.target is that
sysinit.target is already a part of the dependency chain of
multi-user.target.

To make sure that this holds true, I've added a small test case to
ensure that during switch of the configuration the firewall.service is
considered as well.

Tested using the firewall NixOS test.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @edolstra
2016-09-07 15:11:24 +02:00
..
firefox firefox sync-server service: make path to paster executable absolute 2015-07-12 20:43:52 +12:00
ircd-hybrid Revert "stdenv: introduce baseHash() to replace stripHash()" 2016-06-25 14:25:58 +01:00
ssh Fix infinite recursion introduced by f3c32cb2c1 2016-09-05 18:17:22 +02:00
aiccu.nix nixos: added aiccu service 2015-03-20 22:01:35 +01:00
amuled.nix jobs -> systemd.services 2016-01-07 06:39:06 +00:00
asterisk.nix service.asterisk: fix dir creation 2015-10-19 19:05:23 +02:00
atftpd.nix types.uniq types.bool -> types.bool 2015-06-15 18:10:26 +02:00
autossh.nix nixos: use "example.net" host name in autossh documentation 2015-10-28 20:04:36 +01:00
avahi-daemon.nix avahi-daemon: remove default browse-domains 2016-09-07 13:58:21 +02:00
bind.nix bind: Split into multiple outputs 2016-05-14 22:12:59 +03:00
bird.nix bird module: run as user/group bird, not ircd 2016-03-07 02:02:58 +01:00
bitlbee.nix bitlbee service: enable plugins 2015-09-08 14:24:50 -07:00
btsync.nix nixos: btsync - switch to using systemd user services 2016-01-07 03:33:38 -06:00
charybdis.nix charybdis service: fix preStart script 2015-07-13 15:11:18 +02:00
chrony.nix services.*ntp*: Add time-sync.target to ntp clients (#15714) 2016-05-26 16:25:36 +02:00
cjdns-hosts.sh
cjdns.nix cjdns: fix assertion. 2016-08-25 08:57:18 +02:00
cntlm.nix cntlm: refactor to systemd service, fixes #11339 2015-12-07 15:40:43 +01:00
connman.nix nixos/connman: Fix assertion for networkmanager 2016-02-01 19:33:50 +01:00
consul.nix Fixes #16181 - using bin output for Go services 2016-06-13 23:32:16 +02:00
coturn.nix coturn: init at 4.5.0.3 (#16284) 2016-06-21 12:59:29 +02:00
ddclient.nix nixos/ddclient: add warning about password being world readable 2016-07-19 16:51:42 +02:00
dhcpcd.nix nixos networking: add vswitch option 2015-09-25 11:55:27 +02:00
dhcpd.nix
dnschain.nix dnschain nixos module: init 2015-09-10 18:11:40 +02:00
dnscrypt-proxy.nix dnscrypt-proxy module: move detailed info to module documentation 2016-08-29 23:48:12 +02:00
dnscrypt-proxy.xml dnscrypt-proxy module: move detailed info to module documentation 2016-08-29 23:48:12 +02:00
dnsmasq.nix dnsmasq: create state dir for dhcp leases file 2015-12-24 22:36:19 +01:00
docker-registry-server.nix fix argument in mkEnableOption 2015-06-21 18:21:21 +03:00
ejabberd.nix ejabberd service: move service to foreground 2016-08-14 22:37:06 +03:00
fan.nix modprobe service: drop kmod wrapper 2016-08-19 17:56:49 +03:00
ferm.nix ferm: init at 2.3 2016-08-25 21:37:19 +02:00
firewall.nix nixos: Fix ordering of firewall.service 2016-09-07 15:11:24 +02:00
flashpolicyd.nix
freenet.nix types.uniq types.int -> types.int 2015-06-15 18:11:32 +02:00
gale.nix gale service: fix permissions configuration, fixes #12457 2016-01-20 02:09:40 +01:00
gateone.nix Gateone: fix cacerts dependency 2016-01-24 16:52:06 -05:00
gdomap.nix gnustep: fix gdomap service 2016-08-16 21:11:06 +00:00
git-daemon.nix jobs -> systemd.services 2016-01-07 06:39:06 +00:00
gnunet.nix
gogoclient.nix
gvpe.nix jobs -> systemd.services 2016-01-07 06:39:06 +00:00
haproxy.nix nixos/haproxy: remove broken default 'config' 2015-02-22 12:30:14 +01:00
heyefi.nix heyefi service: make uploadDir path more generic and a string 2015-07-14 06:56:30 -07:00
hostapd.nix hostapd: rename extraCfg -> extraConfig, added asserts 2015-12-26 11:37:00 +01:00
i2p.nix i2p service: use mkEnableOption 2015-08-09 02:29:35 +02:00
i2pd.nix Merge branch 'master' into closure-size 2016-04-01 10:06:01 +02:00
iodine.nix iodine service: add clients implimentation 2016-03-26 21:16:29 -04:00
kippo.nix kippo: revert twisted dependency 2016-02-22 13:57:24 -05:00
lambdabot.nix Add missing 'type', 'defaultText' and 'literalExample' in module definitions 2016-01-17 19:41:23 +01:00
libreswan.nix libreswan: add package and service to nixos 2016-03-02 09:44:30 -05:00
logmein-hamachi.nix logmein-hamachi: init at 2.1.0.139, add nixos service 2016-04-27 16:15:01 +03:00
mailpile.nix
mfi.nix mfi: relocatable data dir 2016-04-22 22:43:45 -07:00
minidlna.nix minidlna: use journalctl for logging, systemd for runtimedir 2016-04-08 23:04:12 +02:00
miniupnpd.nix miniupnpd: firewall config 2015-12-13 16:44:58 +01:00
mjpg-streamer.nix mjpg-streamer service: restart on failure 2016-09-02 11:44:16 +03:00
mosquitto.nix mosquitto service: init 2016-05-24 10:49:03 +02:00
mstpd.nix nixos/network-interfaces: Add mstpd support for bridges 2015-01-07 14:49:24 -08:00
murmur.nix murmur: sslCa and extraConfig options, fixes #11419 2015-12-22 01:28:39 +01:00
namecoind.nix namecoind nixos module: security enhancements 2015-09-10 18:11:40 +02:00
nat.nix Revert "nixos/nat: Allow nat without an externalInterface" 2016-05-12 11:04:06 +01:00
networkmanager.nix networkmanager service: make wanted by network.target, drop networkmanager-init 2016-08-14 22:38:58 +03:00
ngircd.nix Add missing 'type', 'defaultText' and 'literalExample' in module definitions 2016-01-17 19:41:23 +01:00
nix-serve.nix treewide: Use correct output of config.nix.package in non-string contexts 2016-04-25 16:44:38 +02:00
nntp-proxy.nix treewide: Mass replace 'openssl}/bin' to refer to the correct outputs 2016-04-14 08:32:20 +03:00
nsd.nix wheter → whether 2016-03-07 03:06:54 +01:00
ntopng.nix types.uniq types.int -> types.int 2015-06-15 18:11:32 +02:00
ntpd.nix services.*ntp*: Add time-sync.target to ntp clients (#15714) 2016-05-26 16:25:36 +02:00
nylon.nix nixos: adding nylon service with uid,gid 2015-01-14 22:08:47 +01:00
offlineimap.nix offlineimap's module: change UI to syslog 2016-08-01 09:37:53 +02:00
oidentd.nix jobs -> systemd.services 2016-01-07 06:39:06 +00:00
openfire.nix jobs -> systemd.services 2016-01-07 06:39:06 +00:00
openntpd.nix services.*ntp*: Add time-sync.target to ntp clients (#15714) 2016-05-26 16:25:36 +02:00
openvpn.nix nixos/openvpn: add support for resolvconf 2016-06-06 20:43:52 +02:00
ostinato.nix ostinato: add ostinato in NixOS services 2016-01-04 14:29:02 +08:00
pdnsd.nix pdnsd service: init 2016-02-12 19:53:41 +08:00
polipo.nix Some more type cleanup 2015-06-15 18:18:46 +02:00
pptpd.nix xl2tpd: add nixos module for service 2016-06-20 21:41:59 +01:00
prayer.nix jobs -> systemd.services 2016-01-07 06:39:06 +00:00
privoxy.nix
prosody.nix
quagga.nix quagga service: New NixOS module. 2016-09-02 13:59:51 +03:00
quassel.nix quassel: use qt4 version of the daemon because as of now qt5 version fails to use proxies(connection refused) 2016-04-22 12:59:26 +03:00
racoon.nix nixos/racoon: create /var/racoon upon start 2015-08-19 23:38:44 +02:00
radicale.nix radicale service: run with dedicated user 2016-03-20 15:50:14 +01:00
radvd.nix
rdnssd.nix nixos/rdnssd: Major refactoring 2015-04-04 21:20:07 -07:00
rpcbind.nix
sabnzbd.nix Sane default configuration for sabnzbd module 2015-05-05 00:18:22 -04:00
searx.nix
seeks.nix Manual: Remove store path references 2015-09-24 11:50:58 +02:00
shairport-sync.nix nixos: fix avahi connectivity for shairport-sync module 2016-07-08 16:22:51 +02:00
shout.nix Shout: fix infinite loop in service configuration 2016-04-11 09:58:52 -04:00
skydns.nix Fixes #16181 - using bin output for Go services 2016-06-13 23:32:16 +02:00
smokeping.nix smokeping: init at 2.6.11 (#17090) 2016-07-21 01:07:59 +02:00
sniproxy.nix sniproxy service: init 2016-05-11 13:27:28 +08:00
softether.nix softether: Fixed problems with using systemd services 2016-01-20 03:47:33 +01:00
spiped.nix
sslh.nix nixos/sslh: rename 'host' to 'listenAddress' 2015-12-24 00:23:51 +01:00
strongswan.nix modprobe service: drop kmod wrapper 2016-08-19 17:56:49 +03:00
supplicant.nix Add missing 'type', 'defaultText' and 'literalExample' in module definitions 2016-01-17 19:41:23 +01:00
supybot.nix
syncthing.nix syncthing service: add syncthing-inotify (#17320) 2016-08-06 17:20:18 +02:00
tcpcrypt.nix jobs -> systemd.services 2016-01-07 06:39:06 +00:00
teamspeak3.nix modules: move meta at top level 2016-08-11 00:29:48 +09:00
tftpd.nix nixos/tftpd: add option types and fixup descriptions 2015-02-01 15:57:28 +01:00
tinc.nix tinc: add Restart in systemd service config 2016-07-27 10:38:57 +02:00
tlsdated.nix tlsdated: add missing default value for extraOptions 2016-02-18 05:29:12 +01:00
tox-bootstrapd.nix
toxvpn.nix toxvpn: restartIfChanged = false & minor cleanups 2016-05-30 14:23:52 +01:00
tvheadend.nix tvheadend: init at 4.0.4 2015-06-24 13:22:09 +00:00
unbound.nix unbound service: whitespace fixes 2016-09-01 14:51:33 +02:00
unifi.nix unifi: Open required ports by default. 2016-08-16 21:01:49 +01:00
vsftpd.nix vsftpd.nix: Add possibility to add RSA key file 2016-03-09 01:32:44 +00:00
wakeonlan.nix Fixed wrong documentation for Wake-On-LAN feature 2015-10-31 12:55:34 +01:00
websockify.nix
wicd.nix jobs -> systemd.services 2016-01-07 06:39:06 +00:00
wpa_supplicant.nix modules: move meta at top level 2016-08-11 00:29:48 +09:00
xinetd.nix jobs -> systemd.services 2016-01-07 06:39:06 +00:00
xl2tpd.nix xl2tpd: add nixos module for service 2016-06-20 21:41:59 +01:00
zerobin.nix zerobin service : init 2016-04-25 13:18:58 +02:00
zerotierone.nix zerotierone: make package configurable 2016-08-31 12:39:55 +02:00
znc.nix Some more type cleanup 2015-06-15 18:18:46 +02:00