| Commit message (Collapse) | Author | Age |
|---|
| |\
| |
| | |
nixos/zeitgeist: init
|
| | | |
|
| |\ \
| |/
|/| |
DataDog Agent v6
|
| | |
| |
| |
| |
| |
| | |
This is the new v6 version of datadog-agent.
The old v5 module is kept as dd-agent.
|
| |\ \
| |/
|/| |
nixos/certmgr: init
|
| | | |
|
| |/
|
|
|
| |
Adds a replacement for the previously broken
`services.database.cassandra` with tests for a multi-node setup.
|
| |\
| |
| | |
nixos/cfssl: Add new module for cfssl
|
| | |
| |
| |
| |
| |
| |
| | |
- based on module originally written by @srhb
- complies with available options in cfssl v1.3.2
- uid and gid 299 reserved in ids.nix
- added simple nixos test case
|
| | |
| |
| |
| | |
This was somehow never added and was thus never available. It works.
|
| | | |
|
| |/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
`ocserv` is a VPN server which follows the openconnect protocol
(https://github.com/openconnect/protocol). The packaging is slightly
inspired by the AUR version
(https://aur.archlinux.org/packages/ocserv/).
This patch initializes the package written in C, the man pages and a
module for a simple systemd unit to run the VPN server. The package
supports the following authentication methods for the server:
* `plain` (mostly username/password)
* `pam`
The third method (`radius`) is currently not supported since `nixpkgs`
misses a packaged client.
The module can be used like this:
``` nix
{
services.ocserv = {
enable = true;
config = ''
...
'';
};
}
```
The option `services.ocserv.config` is required on purpose to
ensure that nobody just enables the service and experiences unexpected
side-effects on the system. For a full reference, please refer to the
man pages, the online docs or the example value.
The docs recommend to simply use `nobody` as user, so no extra user has
been added to the internal user list. Instead a configuration like
this can be used:
```
run-as-user = nobody
run-as-group = nogroup
```
/cc @tenten8401
Fixes #42594
|
| |
|
|
|
|
|
|
|
|
| |
Fallout of 9db7f15ea3ce57eee25458daf87cce7a04ea98b2 which removed
simpleldap.
@layus suggests to remove:
* https://github.com/NixOS/nixpkgs/pull/43782#issuecomment-406186881
* https://github.com/NixOS/nixpkgs/pull/31975#issuecomment-346647857
|
| |\
| |
| | |
hydron: init at 2018-07-11
|
| | | |
|
| | |
| |
| |
| | |
Co-authored-by: Volth <volth@webmaster.ms>
|
| | |
| |
| |
| | |
add a clipmenud daemon user service
|
| |\ \
| | |
| | | |
firejail: add nixos module
|
| | |/
| |
| |
| | |
Also add support for wrapping binaries with firejail.
|
| |/ |
|
| |\
| |
| | |
oauth2_proxy: add nginx vhost module
|
| | | |
|
| |\ \
| | |
| | | |
nixos/hadoop: add hadoop module (hdfs, yarn)
|
| | |/ |
|
| |\ \
| | |
| | | |
freeradius : added service to module-list
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The freeradius service was merged with #34587
but the module was not added to module-list.
This commit fixes that and enables the use of
services.freeradius in nixos configuration.
|
| |\ \ \
| |_|/
|/| | |
Bloop: Init 1.0.0-M11
|
| | |/ |
|
| |/ |
|
| |\
| |
| | |
[RDY] Owamp : Get one way (network) latencies between synchronized computers
|
| | |
| |
| |
| |
| | |
You can retrieve the one way latency between your client and the remote
host via owping.
|
| | |
| |
| |
| |
| |
| | |
* brightnessctl: init at 0.3.2
* Revised PR
|
| |\ \
| | |
| | | |
nixos/uvcvideo.dynctrl: Init
|
| | | | |
|
| |\ \ \
| | | |
| | | | |
nixos/dnsdist: init module
|
| | | | | |
|
| | |/ /
|/| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The `zsh-autosuggestions` package provides several configuration options
such as a different highlight style (like `fg=cyan` which is easier to
read).
With `rename.nix` the old `programs.zsh.enableAutosuggestions` is still
functional, but yields the following warning like this during evaluation:
```
trace: warning: The option `programs.zsh.enableAutosuggestions' defined in `<unknown-file>' has been renamed to `programs.zsh.autosuggestions.enable'.
```
The module provides the most common `zsh-autosuggestions` (highlight
style and strategy) as options that will be written into the interactive
shell init (`/etc/zshrc` by default). Further configuration options can
be declared using the `extraConfig` attr set:
```
{
programs.zsh.autosuggestions.extraConfig = {
"ZSH_AUTOSUGGEST_BUFFER_MAX_SIZE" = "buffer_size";
};
}
```
A full list of available configuration options for `zsh-autosuggestions`
can be viewed here: https://github.com/zsh-users/zsh-autosuggestions/blob/v0.4.3/README.md
|
| |\ \ \
| | | |
| | | |
| | | | |
It's only half-rebuilt on Hydra, but it brings a security fix.
|
| | | | | |
|
| |\ \ \ \
| |/ / /
|/| | | |
morty: init -> 0.2.0
|
| | | |/
| |/| |
|
| |/ / |
|
| | | |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
`xsslock` (which was originally packaged in 6cb1d1aaaf02a72329bedf9c6960e54fea6f5c6e)
is a simple screensaver which connects a given screen locker (e.g.
`i3lock`) with `logind`. Whenever `loginctl lock-sessions` is invoked
the locker will be used to lock the screen. This works with its power
management features (e.g. `lid switch`) as well, so the PC can be locked
automatically when the lid is closed.
The module can be used like this:
```
{
services.xserver.enable = true;
programs.xss-lock.enable = true;
programs.xss-lock.lockerCommand = "i3lock";
}
```
|
| | | |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* networking/stubby.nix: implementing systemd service module for stubby
This change implements stubby, the DNS-over-TLS stub resolver daemon.
The motivation for this change was the desire to use stubby's
DNS-over-TLS funcitonality in tandem with unbound, which requires
passing certain configuration parameters. This module implements those
config parameters by exposing them for use in configuration.nix.
* networking/stubby.nix: merging back module list
re-merging the module list to remove unecessary changes.
* networking/stubby.nix: removing unecessary capabilities flag
This change removes the unecessary flag for toggling the capabilities
which allows the daemon to bind to low ports.
* networking/stubby.nix: adding debug level logging bool
Adding the option to turn on debug logging.
* networking/stubby.nix: clarifying idleTimeout and adding systemd target
Improving docs to note that idleTimeout is expressed in ms. Adding the
nss-lookup `before' target to the systemd service definition.
* networking/stubby.nix: Restrict options with types.enum
This change restricts fallbackProtocol and authenticationMode to accept
only valid options instead of any list or str types (respectively). This
change also fixes typo in the CapabilityBoundingSet systemd setting.
* networking/stubby.nix: cleaning up documentation
Cleaning up docs, adding literal tags to settings, and removing
whitespace.
* networking/stubby.nix: fixing missing linebreak in comments
* networking/stubby.nix: cleaning errant comments
|
| |\ \
| | |
| | | |
sedutil: init at 1.15.1 and corresponding nixos module
|
| | | | |
|
| |\ \ \
| | | |
| | | | |
[RDY] iproute: copy files in /etc
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
When doing source routing/multihoming, it's practical to give names to routing
tables. The absence of the rt_table file in /etc make this impossible.
This patch recreates these files on rebuild so that they can be modified
by the user see NixOS#38638.
iproute2 is modified to look into config.networking.iproute2.confDir instead of
/etc/iproute2.
|