summary refs log tree commit diff
path: root/nixos/modules/services/databases
Commit message (Collapse)AuthorAge
...
* | | nixos/openldap: Add release-notes for OLC configKai Wohlfahrt2020-11-21
| | |
* | | nixos/openldap: Add support for base64 valuesKai Wohlfahrt2020-11-21
| | |
* | | nixos/openldap: Pick some PR nitsKai Wohlfahrt2020-11-21
| | |
* | | nixos/openldap: Allow declarativeContents for multiple databasesKai Wohlfahrt2020-11-21
| | |
* | | nixos/openldap: Add delcarativeConfig by suffixKai Wohlfahrt2020-11-21
| | | | | | | | | | | | | | | Adding by index could be an issue if the user wanted the data to be added to a DB other than the first.
* | | nixos/openldap: switch to slapd.d configurationKai Wohlfahrt2020-11-21
| | | | | | | | | | | | | | | | | | | | | | | | The old slapd.conf is deprecated. Replace with slapd.d, and use this opportunity to write some structured settings. Incidentally, this fixes the fact that openldap is reported up before any checks have completed, by using forking mode.
* | | redis service: Listen on localhost by default. Fixes #100192.Niklas Hambüchen2020-11-08
| | | | | | | | | | | | All other database servers in NixOS also use this safe-by-default setting.
* | | Merge pull request #100495 from DianaOlympos/riak-cs-deleteKevin Cox2020-11-03
|\ \ \ | | | | | | | | riak-cs: delete
| * | | riak-cs: deleteThomas Depierre2020-10-28
| | | |
* | | | nixos/modules: fix systemd start rate-limitslf-2020-10-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These were broken since 2016: https://github.com/systemd/systemd/commit/f0367da7d1a61ad698a55d17b5c28ddce0dc265a since StartLimitIntervalSec got moved into [Unit] from [Service]. StartLimitBurst has also been moved accordingly, so let's fix that one too. NixOS systems have been producing logs such as: /nix/store/wf98r55aszi1bkmln1lvdbp7znsfr70i-unit-caddy.service/caddy.service:31: Unknown key name 'StartLimitIntervalSec' in section 'Service', ignoring. I have also removed some unnecessary duplication in units disabling rate limiting since setting either interval or burst to zero disables it (https://github.com/systemd/systemd/blob/ad16158c10dfc3258831a9ff2f1a988214f51653/src/basic/ratelimit.c#L16)
* | | | nixos/postgresql: fix inaccurate docs for authentication (#97622)Jade2020-10-31
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * nixos/postgresql: fix inaccurate docs for authentication We actually use peer authentication, then md5 based authentication. trust is not used. * Use a link for mkForce docs Co-authored-by: aszlig <aszlig@redmoonstudios.org> Co-authored-by: lf- <lf-@users.noreply.github.com> Co-authored-by: aszlig <aszlig@redmoonstudios.org>
* | / nixos/cassandra: Add cfg.extraEnvShRobert Hensing2020-09-16
| |/ |/|
* | Merge pull request #97758 from yorickvP/patch-3Silvan Mosberger2020-09-11
|\ \ | | | | | | nixos/victoriametrics: escape newlines in ExecStart
| * | nixos/victoriametrics: escape newlines in ExecStartYorick2020-09-11
| | | | | | | | | Fixes #96206
* | | couchdb: add support for version 3.1.0Will Young2020-09-11
|/ /
* | nixos/postgresql: replace extraConfig option with settings optionAaron Andersen2020-08-26
| |
* | Merge pull request #95294 from aanderse/postgresql-rootlessAaron Andersen2020-08-20
|\ \ | | | | | | nixos/postgresql: run ExecStartPost as an unprivileged user
| * | nixos/postgresql: move ExecStartPost into postStartAaron Andersen2020-08-15
| | |
| * | nixos/postgresql: run ExecStartPost as an unprivileged userAaron Andersen2020-08-15
| | |
* | | Merge pull request #95231 from aanderse/mysql-cleanupAaron Andersen2020-08-13
|\ \ \ | |/ / |/| | nixos/mysql: run postStart as an unprivileged user
| * | nixos/mysql: move ExecStartPost into postStartAaron Andersen2020-08-13
| | |
| * | nixos/mysql: run ExecStartPost as an unprivileged userAaron Andersen2020-08-12
| | |
| * | nixos/mysql: cleanup some descriptionsAaron Andersen2020-08-12
| | |
| * | nixos/mysql: loosen mariadb checkAaron Andersen2020-08-12
| | |
| * | nixos/mysql: add group optionAaron Andersen2020-08-12
| | |
| * | nixos/mysql: remove variable with confusing nameAaron Andersen2020-08-11
| | |
* | | nixos/modules: remove trailing whitespaceJörg Thalheim2020-08-07
|/ / | | | | | | | | This leads to ci failure otherwise if the file gets changed. git-blame can ignore whitespace changes.
* | nixos/postgresql: fix setup scriptPascal Bach2020-08-06
| | | | | | | | | | | | | | The missing () caused parts of the escripts to be added to the ExecStartPost line instead of inside the script. This caused postgresql start to fail under certain conditions.
* | nixos/postgresql: replace deprecated usage of PermissionsStartOnlyAaron Andersen2020-08-05
| |
* | nixos/postgresql: conditionally provision data directory with StateDirectoryAaron Andersen2020-08-05
| |
* | nixos/postgresql: use a standard default value for dataDirAaron Andersen2020-08-05
| |
* | nixos/openldap: add option for configuring OpenLDAP package to useVincent Ambo2020-07-01
|/ | | | | | | | | | In certain cases, for example when custom OpenLDAP modules are compiled into the binary, users may want to override the package used for OpenLDAP. This is especially common in setups where LDAP is the primary authentication source, as good password hashing mechanisms need to be enabled as extra modules.
* nixos/openldap: fix evalJan Tojnar2020-06-18
| | | | | | Fixes error: The option value `meta.maintainers' in `nixos/modules/services/databases/openldap.nix' is not of type `list of maintainers'.
* Merge pull request #87833 from Izorkin/sandbox-mysqlJörg Thalheim2020-06-16
|\
| * nixos/mysql: fix init databases on first start in sandbox modeIzorkin2020-06-10
| |
| * nixos/mysql: update tmpfiles rulesIzorkin2020-06-10
| |
| * nixos/mysql: enable sandbox modeIzorkin2020-06-10
| |
* | nixos/redis: add redis groupJörg Thalheim2020-06-10
|/
* Merge pull request #89044 from joachimschmidt557/rethinkdb-enable-optionMichele Guerini Rocco2020-05-28
|\ | | | | nixos/rethinkdb: refactor enable option
| * nixos/rethinkdb: refactor enable optionjoachimschmidt5572020-05-27
| |
* | Merge pull request #87812 from joachimschmidt557/mysql-enable-optionMichele Guerini Rocco2020-05-28
|\ \ | |/ |/| nixos/mysql: refactor enable option
| * nixos/mysql: refactor enable optionjoachimschmidt5572020-05-14
| |
* | redis: handle changes to systemd supportJamie McClymont2020-05-17
| | | | | | | | | | | | | | | | | | | | | | | | The 6.0 changelog notes that systemd support was rewritten. The effects of that seem to be twofold: * Redis will silently fail to sd_notify if not built with libsystemd, breaking our unit configuration. * It also appears to misbehave if told to daemonize when running under systemd -- note that upstream's sample unit configuration does not daemonize: https://github.com/antirez/redis/blob/unstable/utils/systemd-redis_server.service
* | postgresql: Use runuser instead of sudoEelco Dolstra2020-05-15
| | | | | | | | | | | | Currently, sudo doesn't work in a NixOS container running inside a Nix build, because Nix's seccomp filter doesn't allow setuid programs. In any case, runuser is a bit lower-overhead than sudo.
* | nixos/mysql-replication: ignore system databases in binary logIzorkin2020-05-14
| |
* | nixos/mysql: disable load pluginx auth_socket in mariadbIzorkin2020-05-14
|/
* Merge pull request #87219 from serokell/kirelagin/postgres-no-timeLinus Heckemann2020-05-14
|\ | | | | postgres: Do not log timestamp
| * postgresql: Fix formatting in option descriptionKirill Elagin2020-05-13
| | | | | | Co-authored-by: Mario Rodas <marsam@users.noreply.github.com>
| * postgres: Do not log timestampKirill Elagin2020-05-08
| | | | | | | | | | | | | | | | | | | | By default, postgres prefixes each log line with a timestamp. On NixOS logs are written to journal anyway, so they include an external timestamp, so the timestamp ends up being printed twice, which clutters the log. * Add a module option to change the log prefix. * Set it to upstream default sans timestamp.
* | nixos/postgresql: refactor enable optionjoachimschmidt5572020-05-07
| | | | | | | | More consistency with other modules (mkEnableOption)