Commit Graph

1088 Commits

Author SHA1 Message Date
Leona Maroni
c068347f63 Fixes and housekeeping for the varnish module (#373747) 2025-01-21 19:38:51 +01:00
Artemis Tosini
4a75ef3d71 nixos/garage: add user-given path to ReadWritePaths (#373114) 2025-01-20 21:54:54 +00:00
K900
17f38bc01d nixos/acme: disable rate limiting to fix the test
Sometimes the nginx reload service fires too fast so systemd kills it.
2025-01-19 12:19:00 +03:00
Christian Theune
0640622eb1 nixos/varnish: fix stateDir to allow direct use of varnishadm 2025-01-16 18:47:16 +01:00
Christian Theune
ba79b6d68b nixos/varnish: reduce overusage of lib (#208242) 2025-01-16 18:47:14 +01:00
cy
97f2724929 nixos/garage: add cything as maintainer 2025-01-15 01:03:50 -05:00
cy
0fe4739556 nixos/garage: add user-given path to ReadWritePaths
If the user has specified a custom data_dir or meta_dir, this results in
garage service failing with read-only filesystem error since the service
runs with DynamicUser by default.
2025-01-15 01:01:44 -05:00
github-actions[bot]
3fc2c8a91f Merge master into staging-next 2025-01-10 06:05:08 +00:00
Lukas Werling
ff07c07608 nixos/caddy: Fix default log file for http:// hostnames
Caddy hostnames can begin with http:// to disable automatic HTTPS.
The default value for services.caddy.<host>.logFormat puts the hostname
in the log filename, resulting in a broken path. Similarly, multiple
space-separated host names would not work before.

Since version 2.9.0 (commit 7c52e7a), caddy fails to start if it cannot
open the log file. This caused NixOS test failures (e.g.,
nixosTests.dokuwiki).
2025-01-07 23:22:04 +01:00
Wolfgang Walther
cf127c9dc3 treewide: load structured attributes in all bash builders consistently
It's hard to put the sourcing of ./.attrs.sh into all builder
consistently - mistakes will happen. Thus, load structured attrs once in
make-derivation and then source the remaining builder on top.

This should fix quite a few builders with structured attributes in
principle. Most importantly it helps substitute / substituteAll, which
are required for bootstrap on some platforms.
2024-12-29 18:36:47 +01:00
Sandro Jäckel
a810945475 nixos/nginx: default resolver.ipv6 to networking.enableIPv6 2024-12-25 03:58:32 +01:00
Arne Keller
abeecc9b02 nixos/minio: add TLS certificates option (#340441) 2024-12-12 10:22:07 +01:00
Silvan Mosberger
4f0dadbf38 treewide: format all inactive Nix files
After final improvements to the official formatter implementation,
this commit now performs the first treewide reformat of Nix files using it.
This is part of the implementation of RFC 166.

Only "inactive" files are reformatted, meaning only files that
aren't being touched by any PR with activity in the past 2 months.
This is to avoid conflicts for PRs that might soon be merged.
Later we can do a full treewide reformat to get the rest,
which should not cause as many conflicts.

A CI check has already been running for some time to ensure that new and
already-formatted files are formatted, so the files being reformatted here
should also stay formatted.

This commit was automatically created and can be verified using

    nix-build a08b3a4d19.tar.gz \
      --argstr baseRev b32a094368
    result/bin/apply-formatting $NIXPKGS_PATH
2024-12-10 20:26:33 +01:00
cy
248081c472 nixos/caddy: add environmentFile option (#363694) 2024-12-09 18:50:58 -05:00
Anders Johan Jamtli
e5624846c3 nixos/minio: add certificatesDir option 2024-12-09 16:30:47 +01:00
Sandro Jäckel
996f9e4f28 nixos/nginx: don't disable IPC
This also disables the memfd_create syscall which is required for
certain regex's when using pcre2.

see https://github.com/NixOS/nixpkgs/pull/355989#issuecomment-2506841275
2024-11-29 00:41:46 +01:00
Wolfgang Walther
9966353ee7 nixos/garage: remove assertions
Those were scheduled to be removed in 24.11, so let's do that.

Added in #311893.
2024-11-22 18:30:12 +01:00
K900
0453fe2395 {apache,caddy,nginx}: not "before" ACME certs using DNS validation (#336412) 2024-11-08 18:50:28 +03:00
ThinkChaos
3c2e82337d nixos/web-servers: assert ACME cert access via service user and groups
Allows giving access using SupplementaryGroups.
2024-11-07 20:19:12 -05:00
ThinkChaos
03122b43c8 nixos/nginx: not "before" ACME certs using DNS validation
Relax dependency with certs that are validated via DNS challenge since
we know the HTTP server is not required for that validation.
This allows marking the server's service as depending on the cert.
2024-11-07 20:19:12 -05:00
ThinkChaos
26d6294deb nixos/caddy: not "before" ACME certs using DNS validation
Relax dependency with certs that are validated via DNS challenge since
we know the HTTP server is not required for that validation.
This allows marking the server's service as depending on the cert.
2024-11-07 20:19:12 -05:00
ThinkChaos
b99d3a4f8b nixos/apache: not "before" ACME certs using DNS validation
Relax dependency with certs that are validated via DNS challenge since
we know the HTTP server is not required for that validation.
This allows marking the server's service as depending on the cert.
2024-11-07 20:18:20 -05:00
Ramses
3a1e2ab284 nginx: Create cryptographically secure htpasswd file (#347266) 2024-11-01 09:09:50 +01:00
Tristan Ross
c47159b10e nixos/nginx: use list for logrotate files attribute (#345537) 2024-10-28 19:47:12 -07:00
Rafael Kraut
ef92d48263 nixos/nginx: use list for logrotate files attribute
This allows for easier extensibility.
2024-10-28 15:19:36 +01:00
Moraxyc
c9086d8837 nixos/send: init 2024-10-28 00:23:07 +08:00
Maximilian Bosch
e7d631432f Merge: nixos/nginx: create 127.0.0.1 alias for status page (#349536) 2024-10-24 12:49:10 +02:00
Ryan Horiguchi
449a963b0e nixos/nginx: create 127.0.0.1 alias for status page 2024-10-23 22:41:00 +02:00
Izorkin
b93bbf6406 nixos/nginx: remove rejectSSL assertion 2024-10-21 14:49:53 +03:00
Sandro Jäckel
a155c718d3 nixos/nginx: expand proxyResolveWhileRunning's description 2024-10-08 13:36:13 +02:00
Victor Engmark
7d3b47a0fa nginx: Create cryptographically secure htpasswd file
Requires the `htpasswd` command available from `pkgs.apacheHttpd`.
2024-10-08 23:14:26 +13:00
Victor Engmark
fef047eba5 nginx: Use placeholders which play nicely with Bash
`<` and `>` are redirection operators.
2024-10-08 23:09:47 +13:00
Maximilian Bosch
5ee80e8120 Merge: nixos/nginx: remove shortand from defaultText (#346767) 2024-10-06 17:13:51 +02:00
Sandro
00461d0fcb nixos/nginx: fix double slash in example (#346774) 2024-10-06 13:58:54 +02:00
Sandro Jäckel
dd7ef21afc nixos/nginx: fix double slash in example 2024-10-06 03:45:51 +02:00
Sandro
b64b2d25c2 nixos/nginx: remove shortand from defaultText 2024-10-06 03:19:07 +02:00
Bjørn Forsman
48908e5b86 nixos: improve systemd slice names
Following
https://www.freedesktop.org/software/systemd/man/latest/systemd.unit.html#Description=,
update slice names to be short, descriptive and capitalized.
2024-10-02 20:24:13 +02:00
h7x4
ed45f4b166 nixos/phpfpm: phpfpm.slice -> system-phpfpm.slice 2024-10-01 20:03:08 +02:00
h7x4
11f77694ac nixos/bluemap: move to web-apps (#345353) 2024-09-30 17:53:27 +02:00
Florian Klink
9ff2ff44f8 nixos/garage: fix StateDirectory check to work with multiple data_dirs (#342903) 2024-09-30 12:27:06 +02:00
h7x4
c25213a9bd nixos/bluemap: move to web-apps 2024-09-29 21:40:39 +02:00
h7x4
8b62732138 bluemap: 3.21 -> 5.4 (#332245) 2024-09-29 14:05:29 +02:00
Franz Pletz
e1635a35b9 nixos/nginx: add option typesHashMaxSize (#341072) 2024-09-26 14:42:26 +02:00
Izorkin
d856c0374d nixos/nginx: add option typesHashMaxSize 2024-09-25 20:57:13 +03:00
h7x4
32f34d13c2 bluemap: 3.21 -> 5.3 2024-09-21 14:47:04 +02:00
Daniel Nagy
84b8922e82 nixos/darkhttpd: remove with lib; 2024-09-21 09:00:00 +02:00
Matt Moriarity
4d3d3e46fe nixos/garage: fix StateDirectory check to work with multiple data_dirs 2024-09-18 17:18:36 -06:00
Matt Moriarity
cb905a5649 nixos/garage: add mjm as maintainer 2024-09-18 17:06:56 -06:00
Matt Moriarity
e4fc65e079 nixos/garage: reformat 2024-09-18 17:05:09 -06:00
Peder Bergebakken Sundt
b7bb0f2190 nixos/ttyd: reduce inherit (lib) 2024-09-08 19:00:53 +02:00