movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 13:40:28 +03:00
Code Activity

nixos/stargazer: harden systemd service

Browse source
This commit is contained in:
gaykitty 2024-03-10 15:22:32 -04:00
parent 77430d388d
commit be1336d8b8
3 changed files with 44 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
nixos/doc/manual/release-notes/rl-2411.section.md
View file

@ -235,6 +235,12 @@
for `stateVersion` ≥ 24.11. (It was previously using SQLite for structured
data and the filesystem for blobs).
- The `stargazer` service has been hardened to improve security, but these
changes make break certain setups, particularly around traditional CGI.
- The `stargazer.allowCgiUser` option has been added, enabling
Stargazer's `cgi-user` option to work, which was previously broken.
- The `shiori` service now requires an HTTP secret value `SHIORI_HTTP_SECRET_KEY` to be provided via environment variable. The nixos module therefore, now provides an environmentFile option:
```