1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-06-24 02:00:41 +03:00
Commit graph

1105 commits

Author SHA1 Message Date
Maximilian Bosch
303bd80713
Merge: nixos/nginx: add locations."name".uwsgiPass option and use it (#346776) 2025-03-01 12:34:20 +01:00
โทสฺตัล
b3f93d7292 nixos/h2o: TLS recommendations
From Mozilla’s ssl-config-generator project
2025-02-26 12:26:12 +07:00
โทสฺตัล
106d33952f nixos/h2o: virtual host settings default to empty 2025-02-26 10:49:06 +07:00
โทสฺตัล
093d5cfaea nixos/step-ca: add H2O test 2025-02-24 15:06:34 +07:00
โทสฺตัล
40f58bffcb nixos/h2o: basic ACME support 2025-02-24 15:06:34 +07:00
โทสฺตัล
1deab8b466 nixos/h2o: remove mode option as a potential footgun 2025-02-24 15:06:34 +07:00
โทสฺตัล
e7e5ea5cee nixos/h2o: show package override that isn’t the default
The default was changed earlier this week
2025-02-24 15:06:34 +07:00
โทสฺตัล
c554171c27 nixos/h2o: service name matches project 2025-02-24 15:06:34 +07:00
โทสฺตัล
14a33566d7 nixos/h2o: add virtual host serverAliases 2025-02-24 15:06:33 +07:00
โทสฺตัล
60287f0793 nixos/h2o: add missing Group to systemd 2025-02-24 15:06:33 +07:00
โทสฺตัล
760102b995 nixos/h2o: use { } for settings default 2025-02-24 15:06:33 +07:00
โทสฺตัล
e7cf87f304 nixos/h2o: redo identity type to just list 2025-02-24 15:06:33 +07:00
Maximilian Bosch
2ad694fff9
nixos/nginx: remove custom HTTP_ header from recommendedUwsgiSettings
`uwsgi_pass` uses the uwsgi protocol instead of the HTTP protocol
(that's what `proxy_pass` is for). Also, the source IP is already
derived from the REMOTE_ADDR param that's specified by the uwsgi
defaults from nginx, similarily to how it's done for fcgi.

Hence, removing that since it seems not necessary (and perhaps even
wrong).
2025-02-21 13:48:07 +01:00
โทสฺตัล
2c1a09f1fe nixos/h2o: init module
Co-Authored-By: adisbladis <adis@blad.is>
2025-02-18 17:06:15 +07:00
dish
4851d05999 nixos/lighttpd/cgit: fix documentation link formatting 2025-02-12 21:03:21 +01:00
Peder Bergebakken Sundt
953f72e76e nixos/*: tag manpage references 2025-01-27 02:47:01 +01:00
Leona Maroni
c068347f63
Fixes and housekeeping for the varnish module (#373747) 2025-01-21 19:38:51 +01:00
Artemis Tosini
4a75ef3d71
nixos/garage: add user-given path to ReadWritePaths (#373114) 2025-01-20 21:54:54 +00:00
K900
17f38bc01d nixos/acme: disable rate limiting to fix the test
Sometimes the nginx reload service fires too fast so systemd kills it.
2025-01-19 12:19:00 +03:00
Christian Theune
0640622eb1 nixos/varnish: fix stateDir to allow direct use of varnishadm 2025-01-16 18:47:16 +01:00
Christian Theune
ba79b6d68b nixos/varnish: reduce overusage of lib (#208242) 2025-01-16 18:47:14 +01:00
cy
97f2724929 nixos/garage: add cything as maintainer 2025-01-15 01:03:50 -05:00
cy
0fe4739556 nixos/garage: add user-given path to ReadWritePaths
If the user has specified a custom data_dir or meta_dir, this results in
garage service failing with read-only filesystem error since the service
runs with DynamicUser by default.
2025-01-15 01:01:44 -05:00
github-actions[bot]
3fc2c8a91f
Merge master into staging-next 2025-01-10 06:05:08 +00:00
Lukas Werling
ff07c07608 nixos/caddy: Fix default log file for http:// hostnames
Caddy hostnames can begin with http:// to disable automatic HTTPS.
The default value for services.caddy.<host>.logFormat puts the hostname
in the log filename, resulting in a broken path. Similarly, multiple
space-separated host names would not work before.

Since version 2.9.0 (commit 7c52e7a), caddy fails to start if it cannot
open the log file. This caused NixOS test failures (e.g.,
nixosTests.dokuwiki).
2025-01-07 23:22:04 +01:00
Wolfgang Walther
cf127c9dc3
treewide: load structured attributes in all bash builders consistently
It's hard to put the sourcing of ./.attrs.sh into all builder
consistently - mistakes will happen. Thus, load structured attrs once in
make-derivation and then source the remaining builder on top.

This should fix quite a few builders with structured attributes in
principle. Most importantly it helps substitute / substituteAll, which
are required for bootstrap on some platforms.
2024-12-29 18:36:47 +01:00
Sandro Jäckel
a810945475
nixos/nginx: default resolver.ipv6 to networking.enableIPv6 2024-12-25 03:58:32 +01:00
Arne Keller
abeecc9b02
nixos/minio: add TLS certificates option (#340441) 2024-12-12 10:22:07 +01:00
Sandro Jäckel
d1a28bbdb4
nixos/nginx: add locations."name".uwsgiPass and related options and use it 2024-12-11 01:07:02 +01:00
Silvan Mosberger
4f0dadbf38 treewide: format all inactive Nix files
After final improvements to the official formatter implementation,
this commit now performs the first treewide reformat of Nix files using it.
This is part of the implementation of RFC 166.

Only "inactive" files are reformatted, meaning only files that
aren't being touched by any PR with activity in the past 2 months.
This is to avoid conflicts for PRs that might soon be merged.
Later we can do a full treewide reformat to get the rest,
which should not cause as many conflicts.

A CI check has already been running for some time to ensure that new and
already-formatted files are formatted, so the files being reformatted here
should also stay formatted.

This commit was automatically created and can be verified using

    nix-build https://github.com/infinisil/treewide-nixpkgs-reformat-script/archive/a08b3a4d199c6124ac5b36a889d9099b4383463f.tar.gz \
      --argstr baseRev b32a094368
    result/bin/apply-formatting $NIXPKGS_PATH
2024-12-10 20:26:33 +01:00
cy
248081c472
nixos/caddy: add environmentFile option (#363694) 2024-12-09 18:50:58 -05:00
Anders Johan Jamtli
e5624846c3 nixos/minio: add certificatesDir option 2024-12-09 16:30:47 +01:00
Sandro Jäckel
996f9e4f28
nixos/nginx: don't disable IPC
This also disables the memfd_create syscall which is required for
certain regex's when using pcre2.

see https://github.com/NixOS/nixpkgs/pull/355989#issuecomment-2506841275
2024-11-29 00:41:46 +01:00
Wolfgang Walther
9966353ee7
nixos/garage: remove assertions
Those were scheduled to be removed in 24.11, so let's do that.

Added in #311893.
2024-11-22 18:30:12 +01:00
K900
0453fe2395
{apache,caddy,nginx}: not "before" ACME certs using DNS validation (#336412) 2024-11-08 18:50:28 +03:00
ThinkChaos
3c2e82337d
nixos/web-servers: assert ACME cert access via service user and groups
Allows giving access using SupplementaryGroups.
2024-11-07 20:19:12 -05:00
ThinkChaos
03122b43c8
nixos/nginx: not "before" ACME certs using DNS validation
Relax dependency with certs that are validated via DNS challenge since
we know the HTTP server is not required for that validation.
This allows marking the server's service as depending on the cert.
2024-11-07 20:19:12 -05:00
ThinkChaos
26d6294deb
nixos/caddy: not "before" ACME certs using DNS validation
Relax dependency with certs that are validated via DNS challenge since
we know the HTTP server is not required for that validation.
This allows marking the server's service as depending on the cert.
2024-11-07 20:19:12 -05:00
ThinkChaos
b99d3a4f8b
nixos/apache: not "before" ACME certs using DNS validation
Relax dependency with certs that are validated via DNS challenge since
we know the HTTP server is not required for that validation.
This allows marking the server's service as depending on the cert.
2024-11-07 20:18:20 -05:00
Ramses
3a1e2ab284
nginx: Create cryptographically secure htpasswd file (#347266) 2024-11-01 09:09:50 +01:00
Tristan Ross
c47159b10e
nixos/nginx: use list for logrotate files attribute (#345537) 2024-10-28 19:47:12 -07:00
Rafael Kraut
ef92d48263
nixos/nginx: use list for logrotate files attribute
This allows for easier extensibility.
2024-10-28 15:19:36 +01:00
Moraxyc
c9086d8837
nixos/send: init 2024-10-28 00:23:07 +08:00
Maximilian Bosch
e7d631432f
Merge: nixos/nginx: create 127.0.0.1 alias for status page (#349536) 2024-10-24 12:49:10 +02:00
Ryan Horiguchi
449a963b0e nixos/nginx: create 127.0.0.1 alias for status page 2024-10-23 22:41:00 +02:00
Izorkin
b93bbf6406
nixos/nginx: remove rejectSSL assertion 2024-10-21 14:49:53 +03:00
Sandro Jäckel
a155c718d3
nixos/nginx: expand proxyResolveWhileRunning's description 2024-10-08 13:36:13 +02:00
Victor Engmark
7d3b47a0fa
nginx: Create cryptographically secure htpasswd file
Requires the `htpasswd` command available from `pkgs.apacheHttpd`.
2024-10-08 23:14:26 +13:00
Victor Engmark
fef047eba5
nginx: Use placeholders which play nicely with Bash
`<` and `>` are redirection operators.
2024-10-08 23:09:47 +13:00
Maximilian Bosch
5ee80e8120
Merge: nixos/nginx: remove shortand from defaultText (#346767) 2024-10-06 17:13:51 +02:00