summary refs log tree commit diff
path: root/nixos/modules/services/networking
Commit message (Collapse)AuthorAge
* nixos/lxd-image-server: initMaciej Krüger2021-11-03
| | | | Co-authored-by: Aaron Andersen <aaron@fosslib.net>
* Merge pull request #143705 from felschr/ddclient-password-fileAaron Andersen2021-11-02
|\ | | | | nixos/ddclient: replace password with passwordFile option
| * nixos/ddclient: replace password with passwordFile optionFelix Tenley2021-10-30
| |
* | Merge master into staging-nextgithub-actions[bot]2021-11-02
|\ \
| * | nixos/smokeping: Add nh2 to maintainersNiklas Hambüchen2021-11-01
| | |
| * | nixos/smokeping: Don't listen on all interfaces by default.Niklas Hambüchen2021-11-01
| | | | | | | | | | | | | | | In general, NixOS services are configured such that by default they are not exposed to the Internet for security, see #100192.
| * | nixos/smokeping: Use requiredBy instead of wantedBy.Niklas Hambüchen2021-11-01
| | | | | | | | | | | | | | | This makes switch-configuration fail if something is wrong with it, which is desired especially for NixOps deployments.
| * | nixos/smokeping: Remove partOf to ensure restarts work.Niklas Hambüchen2021-11-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Details on https://github.com/NixOS/nixops/issues/1063#issuecomment-453253666. `partOf` makes that if `smokeping.service` is stopped, `thttpd.service` will be stopped as well. (But not that `thttpd` will be started when `smokeping` is started). Once `thttpd.service` is stopped that way, `Restart = always` will not apply. When the smokeping config options are changed, NixOS's `switch-configuration.pl` will stop `smokeping` (whit shuts down thttpd due to `partOf`), and then restart smokeping; but this does not start thttpd. As a result, thttpd will be off after changing the config, which isn't desired. This commit fixes it by removing the `partOf`, which makes `Restart` work as expected.
| * | nixos/smokeping: Make default imgUrl relative.Niklas Hambüchen2021-11-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This avoids a common problem: Until now, port forwarding to multiple hosts running smokeping did not work; they all show the data of the first smokeping instance. That ws because the image URLs generated by smokeping are absolute (`imgurl` setting). Consequently, if you ran ssh node-1 -L 8081:localhost:8081 ssh node-2 -L 8081:localhost:8082 ssh node-3 -L 8081:localhost:8083 and try to open http://localhost:8081, http://localhost:8082 and http://localhost:8083, they all would show the images of node-1! Using a relative `imgurl` fixes that. As per smokeping docs on `imgurl`: > Either an absolute URL to the `imgcache` directory or one relative to the > directory where you keep the SmokePing cgi.
| * | nixos/smokeping: Add host option.Niklas Hambüchen2021-11-01
| | | | | | | | | | | | Allows setting smokeping to not listen on the public Internet.
| * | nixos/smokeping: Remove bash wrapper, refactor.Niklas Hambüchen2021-11-01
| |/ | | | | | | | | The bash wrapper process served no purpose, and systemd directly controlling the processes is more reliable / more responsive to systemctl commands.
* | Merge master into staging-nextgithub-actions[bot]2021-10-26
|\|
| * Merge pull request #119719 from greizgh/seafileSandro2021-10-26
| |\
| | * nixos/seafile: init serviceGreizgh2021-10-23
| | |
* | | Merge master into staging-nextgithub-actions[bot]2021-10-26
|\| |
| * | nixos/jibri: add nixos testCleeyv2021-10-25
| | |
| * | nixos/jibri: fix & docs for enable not via meetCleeyv2021-10-25
| | |
| * | nixos/jibri: add finalize script optionCleeyv2021-10-25
| | |
| * | nixos/jibri: init at 8.0-93-g51fe7a2Cleeyv2021-10-25
| | | | | | | | | | | | | | | | | | This module was written by @puckipedia for nixcon-video-infra 2020. Minor changes made by @cleeyv for compat with existing jibri package. Co-authored-by: Puck Meerburg <puck@puck.moe>
| * | nixos/jitsi-meet: add jibri.enableCleeyv2021-10-25
| |/ | | | | | | | | | | | | This option enables a jibri service on the same host that is running jitsi-meet. It was written, along with the jibri module, by @puckipedia for nixcon-video-infra 2020. Co-authored-by: Puck Meerburg <puck@puck.moe>
* | Merge master into staging-nextgithub-actions[bot]2021-10-23
|\|
| * nixos/mosquitto: rewrite the modulepennae2021-10-22
| | | | | | | | | | | | | | | | | | | | | | mosquitto needs a lot of attention concerning its config because it doesn't parse it very well, often ignoring trailing parts of lines, duplicated config keys, or just looking back way further in the file to associated config keys with previously defined items than might be expected. this replaces the mosquitto module completely. we now have a hierarchical config that flattens out to the mosquitto format (hopefully) without introducing spooky action at a distance.
* | Merge remote-tracking branch 'origin/master' into staging-nextMartin Weinelt2021-10-15
|\|
| * nixos/unifi, unifi: add pennae to maintainerspennae2021-10-15
| |
* | Merge remote-tracking branch 'origin/staging' into staging-nextMartin Weinelt2021-10-15
|\ \ | |/ |/|
| * Merge staging-next into staginggithub-actions[bot]2021-10-13
| |\
| * \ Merge staging-next into staginggithub-actions[bot]2021-10-11
| |\ \
| * \ \ Merge staging-next into staginggithub-actions[bot]2021-10-09
| |\ \ \
| * \ \ \ Merge staging-next into staginggithub-actions[bot]2021-10-08
| |\ \ \ \
| * \ \ \ \ Merge staging-next into staginggithub-actions[bot]2021-10-06
| |\ \ \ \ \
| * \ \ \ \ \ Merge staging-next into staginggithub-actions[bot]2021-10-05
| |\ \ \ \ \ \
| * \ \ \ \ \ \ Merge pull request #137233 from maxeaubrey/modemmanager_1.18.0maxine [they]2021-10-03
| |\ \ \ \ \ \ \
| | * | | | | | | nixos/networkmanager: drop modemmanager overridesMaxine Aubrey2021-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | as of 1.18.0, modemmanager defaults to strict when no other options are passed, so we can just use the upstream unit as is
* | | | | | | | | nixos/unifi: fix unifi ExecStop= being incompatible with systemdpennae2021-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | unifi does not shut down properly when stopped via systemd (it always exits with SIGTERM exit status) because systemd wants stop commands to not exit before the main command is gone and unifi does not comply. the easiest way around this is to have systemd send an ignored signal after the stop command has exited. unifi may still throw exceptions during shutdown, but it *does* exit cleanly as far as systemd is concerned now.
* | | | | | | | | Merge pull request #139833 from flox/multipathGraham Christensen2021-10-13
|\ \ \ \ \ \ \ \ \ | |_|_|_|_|_|_|_|/ |/| | | | | | | | | | | | | | | | | nixos/multipath: add module for multipath-tools package
| * | | | | | | | nixos/multipath: add multipath moduleMichael Brantley2021-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The multipath-tools package had existed in Nixpkgs for some time but without a nixos module to configure/drive it. This module provides attributes to drive the majority of multipath configuration options and is being successfully used in stage-1 and stage-2 boot to mount /nix from a multipath-serviced iSCSI volume. Credit goes to @grahamc for early contributions to the module and authoring the NixOS module test.
| * | | | | | | | iscsi root initiator: allow specifying arbitrary iscsi commands tooGraham Christensen2021-10-08
| | |_|_|_|/ / / | |/| | | | | |
* | | | | | | | Merge pull request #141258 from waldheinz/broken-host-keysSandro2021-10-12
|\ \ \ \ \ \ \ \ | |_|_|_|_|_|_|/ |/| | | | | | |
| * | | | | | | nixos/ssh: take care not to accept empty host key filesMatthias Treydte2021-10-12
| | |_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In case of a power loss shortly after first boot, the host keys gernerated by ssh-keygen could exist in the file system but have zero size, preventing sshd from starting up. This commit changes the behaviour to generate host keys if the file either does not exist or has zero size, fixing the problem on the next boot. Thanks to @SuperSandro2000 for figuring this out.
* | | | | | | Merge pull request #140820 from VergeDX/kippo-removeBobby Rong2021-10-11
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | kippo: cleanup the corresponding broken module.
| * | | | | | kippo: cleanup the corresponding broken module.Vanilla2021-10-08
| | |_|_|_|/ | |/| | | |
* | | | | | Merge pull request #140779 from legendofmiracles/wolMichele Guerini Rocco2021-10-09
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | nixos/wakeonlan: switch to systemd.link and to nixos/networking
| * | | | | nixos/wakeonlan: removelegendofmiracles2021-10-07
| | |/ / / | |/| | |
* | | | | Merge pull request #133700 from poscat0x04/v2ray-add-package-optionBobby Rong2021-10-08
|\ \ \ \ \ | |_|/ / / |/| | | | nixos/v2ray: add an option for specifying v2ray package used in the systemd service
| * | | | nixos/v2ray: add an option for specifying v2ray package used in the systemd ↵Poscat2021-10-08
| | | | | | | | | | | | | | | | | | | | service
* | | | | Merge pull request #139765 from eyJhb/bitlbee-user-groupMichele Guerini Rocco2021-10-06
|\ \ \ \ \ | |_|_|_|/ |/| | | | nixos/bitlbee: added bitlbee to bitlbee group
| * | | | nixos/bitlbee: switched to systemd DynamicUsereyjhb2021-10-05
| | | | |
* | | | | nixos/doc: clean up defaults and examplesNaïm Favier2021-10-04
| |_|/ / |/| | |
* | | | Merge pull request #134618 from rnhmjoj/wpa-safeMichele Guerini Rocco2021-09-29
|\ \ \ \ | |/ / / |/| | | nixos/wpa_supplicant: add safe secret handling
| * | | nixos/wpa_supplicant: add safe secret handlingrnhmjoj2021-09-29
| | | |