Commit graph

1088 commits

Author SHA1 Message Date
Leona Maroni c068347f63
Fixes and housekeeping for the varnish module (#373747) 2025-01-21 19:38:51 +01:00
Artemis Tosini 4a75ef3d71
nixos/garage: add user-given path to ReadWritePaths (#373114) 2025-01-20 21:54:54 +00:00
K900 17f38bc01d nixos/acme: disable rate limiting to fix the test
Sometimes the nginx reload service fires too fast so systemd kills it.
2025-01-19 12:19:00 +03:00
Christian Theune 0640622eb1 nixos/varnish: fix stateDir to allow direct use of varnishadm 2025-01-16 18:47:16 +01:00
Christian Theune ba79b6d68b nixos/varnish: reduce overusage of lib (#208242) 2025-01-16 18:47:14 +01:00
cy 97f2724929 nixos/garage: add cything as maintainer 2025-01-15 01:03:50 -05:00
cy 0fe4739556 nixos/garage: add user-given path to ReadWritePaths
If the user has specified a custom data_dir or meta_dir, this results in
garage service failing with read-only filesystem error since the service
runs with DynamicUser by default.
2025-01-15 01:01:44 -05:00
github-actions[bot] 3fc2c8a91f
Merge master into staging-next 2025-01-10 06:05:08 +00:00
Lukas Werling ff07c07608 nixos/caddy: Fix default log file for http:// hostnames
Caddy hostnames can begin with http:// to disable automatic HTTPS.
The default value for services.caddy.<host>.logFormat puts the hostname
in the log filename, resulting in a broken path. Similarly, multiple
space-separated host names would not work before.

Since version 2.9.0 (commit 7c52e7a), caddy fails to start if it cannot
open the log file. This caused NixOS test failures (e.g.,
nixosTests.dokuwiki).
2025-01-07 23:22:04 +01:00
Wolfgang Walther cf127c9dc3
treewide: load structured attributes in all bash builders consistently
It's hard to put the sourcing of ./.attrs.sh into all builder
consistently - mistakes will happen. Thus, load structured attrs once in
make-derivation and then source the remaining builder on top.

This should fix quite a few builders with structured attributes in
principle. Most importantly it helps substitute / substituteAll, which
are required for bootstrap on some platforms.
2024-12-29 18:36:47 +01:00
Sandro Jäckel a810945475
nixos/nginx: default resolver.ipv6 to networking.enableIPv6 2024-12-25 03:58:32 +01:00
Arne Keller abeecc9b02
nixos/minio: add TLS certificates option (#340441) 2024-12-12 10:22:07 +01:00
Silvan Mosberger 4f0dadbf38 treewide: format all inactive Nix files
After final improvements to the official formatter implementation,
this commit now performs the first treewide reformat of Nix files using it.
This is part of the implementation of RFC 166.

Only "inactive" files are reformatted, meaning only files that
aren't being touched by any PR with activity in the past 2 months.
This is to avoid conflicts for PRs that might soon be merged.
Later we can do a full treewide reformat to get the rest,
which should not cause as many conflicts.

A CI check has already been running for some time to ensure that new and
already-formatted files are formatted, so the files being reformatted here
should also stay formatted.

This commit was automatically created and can be verified using

    nix-build a08b3a4d19.tar.gz \
      --argstr baseRev b32a094368
    result/bin/apply-formatting $NIXPKGS_PATH
2024-12-10 20:26:33 +01:00
cy 248081c472
nixos/caddy: add environmentFile option (#363694) 2024-12-09 18:50:58 -05:00
Anders Johan Jamtli e5624846c3 nixos/minio: add certificatesDir option 2024-12-09 16:30:47 +01:00
Sandro Jäckel 996f9e4f28
nixos/nginx: don't disable IPC
This also disables the memfd_create syscall which is required for
certain regex's when using pcre2.

see https://github.com/NixOS/nixpkgs/pull/355989#issuecomment-2506841275
2024-11-29 00:41:46 +01:00
Wolfgang Walther 9966353ee7
nixos/garage: remove assertions
Those were scheduled to be removed in 24.11, so let's do that.

Added in #311893.
2024-11-22 18:30:12 +01:00
K900 0453fe2395
{apache,caddy,nginx}: not "before" ACME certs using DNS validation (#336412) 2024-11-08 18:50:28 +03:00
ThinkChaos 3c2e82337d
nixos/web-servers: assert ACME cert access via service user and groups
Allows giving access using SupplementaryGroups.
2024-11-07 20:19:12 -05:00
ThinkChaos 03122b43c8
nixos/nginx: not "before" ACME certs using DNS validation
Relax dependency with certs that are validated via DNS challenge since
we know the HTTP server is not required for that validation.
This allows marking the server's service as depending on the cert.
2024-11-07 20:19:12 -05:00
ThinkChaos 26d6294deb
nixos/caddy: not "before" ACME certs using DNS validation
Relax dependency with certs that are validated via DNS challenge since
we know the HTTP server is not required for that validation.
This allows marking the server's service as depending on the cert.
2024-11-07 20:19:12 -05:00
ThinkChaos b99d3a4f8b
nixos/apache: not "before" ACME certs using DNS validation
Relax dependency with certs that are validated via DNS challenge since
we know the HTTP server is not required for that validation.
This allows marking the server's service as depending on the cert.
2024-11-07 20:18:20 -05:00
Ramses 3a1e2ab284
nginx: Create cryptographically secure htpasswd file (#347266) 2024-11-01 09:09:50 +01:00
Tristan Ross c47159b10e
nixos/nginx: use list for logrotate files attribute (#345537) 2024-10-28 19:47:12 -07:00
Rafael Kraut ef92d48263
nixos/nginx: use list for logrotate files attribute
This allows for easier extensibility.
2024-10-28 15:19:36 +01:00
Moraxyc c9086d8837
nixos/send: init 2024-10-28 00:23:07 +08:00
Maximilian Bosch e7d631432f
Merge: nixos/nginx: create 127.0.0.1 alias for status page (#349536) 2024-10-24 12:49:10 +02:00
Ryan Horiguchi 449a963b0e nixos/nginx: create 127.0.0.1 alias for status page 2024-10-23 22:41:00 +02:00
Izorkin b93bbf6406
nixos/nginx: remove rejectSSL assertion 2024-10-21 14:49:53 +03:00
Sandro Jäckel a155c718d3
nixos/nginx: expand proxyResolveWhileRunning's description 2024-10-08 13:36:13 +02:00
Victor Engmark 7d3b47a0fa
nginx: Create cryptographically secure htpasswd file
Requires the `htpasswd` command available from `pkgs.apacheHttpd`.
2024-10-08 23:14:26 +13:00
Victor Engmark fef047eba5
nginx: Use placeholders which play nicely with Bash
`<` and `>` are redirection operators.
2024-10-08 23:09:47 +13:00
Maximilian Bosch 5ee80e8120
Merge: nixos/nginx: remove shortand from defaultText (#346767) 2024-10-06 17:13:51 +02:00
Sandro 00461d0fcb
nixos/nginx: fix double slash in example (#346774) 2024-10-06 13:58:54 +02:00
Sandro Jäckel dd7ef21afc
nixos/nginx: fix double slash in example 2024-10-06 03:45:51 +02:00
Sandro b64b2d25c2
nixos/nginx: remove shortand from defaultText 2024-10-06 03:19:07 +02:00
Bjørn Forsman 48908e5b86 nixos: improve systemd slice names
Following
https://www.freedesktop.org/software/systemd/man/latest/systemd.unit.html#Description=,
update slice names to be short, descriptive and capitalized.
2024-10-02 20:24:13 +02:00
h7x4 ed45f4b166 nixos/phpfpm: phpfpm.slice -> system-phpfpm.slice 2024-10-01 20:03:08 +02:00
h7x4 11f77694ac
nixos/bluemap: move to web-apps (#345353) 2024-09-30 17:53:27 +02:00
Florian Klink 9ff2ff44f8
nixos/garage: fix StateDirectory check to work with multiple data_dirs (#342903) 2024-09-30 12:27:06 +02:00
h7x4 c25213a9bd
nixos/bluemap: move to web-apps 2024-09-29 21:40:39 +02:00
h7x4 8b62732138
bluemap: 3.21 -> 5.4 (#332245) 2024-09-29 14:05:29 +02:00
Franz Pletz e1635a35b9
nixos/nginx: add option typesHashMaxSize (#341072) 2024-09-26 14:42:26 +02:00
Izorkin d856c0374d
nixos/nginx: add option typesHashMaxSize 2024-09-25 20:57:13 +03:00
h7x4 32f34d13c2
bluemap: 3.21 -> 5.3 2024-09-21 14:47:04 +02:00
Daniel Nagy 84b8922e82
nixos/darkhttpd: remove with lib; 2024-09-21 09:00:00 +02:00
Matt Moriarity 4d3d3e46fe nixos/garage: fix StateDirectory check to work with multiple data_dirs 2024-09-18 17:18:36 -06:00
Matt Moriarity cb905a5649 nixos/garage: add mjm as maintainer 2024-09-18 17:06:56 -06:00
Matt Moriarity e4fc65e079 nixos/garage: reformat 2024-09-18 17:05:09 -06:00
Peder Bergebakken Sundt b7bb0f2190 nixos/ttyd: reduce inherit (lib) 2024-09-08 19:00:53 +02:00