5 commits

Author	SHA1	Message	Date
Dominique Martinet	7c448e8d44	nixos/cryptpad: harden service ... cryptpad is not directly exposed to the network, but has plenty that can be hardened more properly, so fix that.	2024-07-24 16:17:32 +09:00
Dominique Martinet	b846e8762f	nixos/cryptpad: init ... This is a full rewrite independent of the previously removed cryptpad module, managing cryptpad's config in RFC0042 along with a shiny test. Upstream cryptpad provides two nginx configs, with many optimizations and complex settings; this uses the easier variant for now but improvements (e.g. serving blocks and js files directly through nginx) should be possible with a bit of work and care about http headers. the /checkup page of cryptpad passes all tests except HSTS, we don't seem to have any nginx config with HSTS enabled in nixpkgs so leave this as is for now. Co-authored-by: Pol Dellaiera <pol.dellaiera@protonmail.com> Co-authored-by: Michael Smith <shmitty@protonmail.com>	2024-07-24 16:17:26 +09:00
ajs124	1c0cc017b5	nixos/cryptpad: remove	2022-07-04 15:33:59 +02:00
Naïm Favier	2ddc335e6f	nixos/doc: clean up defaults and examples	2021-10-04 12:47:20 +02:00
zimbatm	18ae1ecf03	nixos/cryptpad: add module	2019-06-07 13:02:51 +02:00