summary refs log tree commit diff
path: root/nixos/modules/services/misc/geoipupdate.nix
Commit message (Collapse)AuthorAge
* treewide: convert fake octal ints to stringsYorick van Pelt2022-10-28
| | | | | These were being cast to strings later and then reinterpreted as octal.
* nixos/geoipupdate: set proper SystemCallFilterMidAutumnMoon2022-10-25
|
* nixos/*: automatically convert option descriptionspennae2022-08-31
| | | | | | | | | | | | conversions were done using https://github.com/pennae/nix-doc-munge using (probably) rev f34e145 running nix-doc-munge nixos/**/*.nix nix-doc-munge --import nixos/**/*.nix the tool ensures that only changes that could affect the generated manual *but don't* are committed, other changes require manual review and are discarded.
* nixos/*: automatically convert option docspennae2022-08-19
|
* nixos/*: remove <productname>pennae2022-08-19
| | | | | no change to the rendered output, and we can't properly represent this in markdown anyway.
* nixos/*: automatically convert option docspennae2022-08-06
|
* nixos/*: normalize manpage references to single-line formpennae2022-08-05
| | | | | | | now nix-doc-munge will not introduce whitespace changes when it replaces manpage references with the MD equivalent. no change to the manpage, changes to the HTML manual are whitespace only.
* nixos/*: normalize link formatpennae2022-08-03
| | | | | | | | | make (almost) all links appear on only a single line, with no unnecessary whitespace, using double quotes for attributes. this lets us automatically convert them to markdown easily. the few remaining links are extremely long link in a gnome module, we'll come back to those at a later date.
* treewide: automatically md-convert option descriptionspennae2022-07-30
| | | | | | | | | | | | | | | | | | | | | | the conversion procedure is simple: - find all things that look like options, ie calls to either `mkOption` or `lib.mkOption` that take an attrset. remember the attrset as the option - for all options, find a `description` attribute who's value is not a call to `mdDoc` or `lib.mdDoc` - textually convert the entire value of the attribute to MD with a few simple regexes (the set from mdize-module.sh) - if the change produced a change in the manual output, discard - if the change kept the manual unchanged, add some text to the description to make sure we've actually found an option. if the manual changes this time, keep the converted description this procedure converts 80% of nixos options to markdown. around 2000 options remain to be inspected, but most of those fail the "does not change the manual output check": currently the MD conversion process does not faithfully convert docbook tags like <code> and <package>, so any option using such tags will not be converted at all.
* nixos/geoipupdate: Improve secret handlingtalyz2022-06-15
| | | | | | | | | | | Make secret replacement more robust and futureproof: - Allow any attribute in `services.geoipupdate.settings` to be a secret if set to `{ _secret = "/path/to/secret"; }`. - Hash the license key path before using it as a placeholder in the config file to minimize the risk of conflicting file paths being replaced instead.
* nixos/geoipupdate: Add error handling to scriptstalyz2022-06-15
|
* nixos/geoipupdate: Add stricter service securitytalyz2021-06-07
|
* nixos/geoipupdate: Run the service right away one timetalyz2021-06-07
| | | | | | | We don't want to have to wait for the timer to expire for the updater to make its first run. This adds a timer unit which triggers the geoipupdate.service unit immediately, but only runs if the configured DatabaseDirectory doesn't exist yet.
* nixos/geoipupdate: Create database directory in a separate unittalyz2021-06-07
| | | | | | | The database directory needs to be created before the geoipupdate.service unit is activated; otherwise, systemd will not be able to set up the mount namespacing to grant the service read-write access.
* nixos/geoipupdate: Add myself to maintainerstalyz2021-06-07
|
* nixos/geoipupdate: Fix config filename copy-paste failtalyz2021-06-07
|
* nixos/geoipupdate: Replace the old `geoip-updater` moduletalyz2021-06-03
Our old bespoke GeoIP updater doesn't seem to be working anymore. Instead of trying to fix it, replace it with the official updater from MaxMind.