shelvacu 1a4575f9db nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244) ... Previously some modules used `config.environment.etc."ssl/certs/ca-certificates.crt".source`, some used `"/etc/ssl/certs/ca-certificates.crt"`, and some used `"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"`. These were all bad in one way or another: - `config.environment.etc."ssl/certs/ca-certificates.crt".source` relies on `source` being set; if `text` is set instead this breaks, introducing a weird undocumented requirement - `"/etc/ssl/certs/ca-certificates.crt"` is probably okay but very un-nix. It's a magic string, and the path doesn't change when the file changes (and so you can't trigger service reloads, for example, when the contents change in a new system activation) - `"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"` silently doesn't include the options from `security.pki` Co-authored-by: Shelvacu <git@shelvacu.com>		2025-03-08 08:41:08 +00:00
..
guix	nixos/guix: set proxy env vars for guix-daemon	2025-01-15 15:17:02 +08:00
servarr	nixos/servarr: organize files	2025-02-24 18:50:09 +01:00
sourcehut	nixos/sourcehut: fix documentation link formatting	2025-02-12 21:03:21 +01:00
taskserver	treewide: replace substituteAll with replaceVars	2025-02-10 22:51:56 +01:00
airsonic.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
amazon-ssm-agent.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
ananicy.nix	nixos: Don't set !allowSubstitutes (#314664)	2024-12-12 18:26:24 +00:00
anki-sync-server.md	nixos/anki-sync-server: add setting	2024-09-26 22:13:28 +02:00
anki-sync-server.nix	nixos/anki-sync-server: do not use unqualified 'cat' in execStart script (#280720)	2024-12-13 10:34:27 +01:00
apache-kafka.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
atuin.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
autobrr.nix	nixos/autobrr: update serivce default port value to be a number	2025-02-15 19:01:41 +10:00
autofs.nix	nixos/autofs: fix manpage link	2025-01-27 02:47:16 +01:00
autorandr.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
autosuspend.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
bazarr.nix	nixos/bazarr: set systemd config KillSignal to SIGINT to fix timeout (#334675)	2024-10-27 20:13:25 +01:00
bcg.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
beanstalkd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
bees.nix	nixos/services.bees: Fix evaluation	2024-09-02 19:23:52 +08:00
bepasty.nix	nixos/bepasty: fix documentation link formatting	2025-02-12 21:03:21 +01:00
blenderfarm.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
calibre-server.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
canto-daemon.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
cfdyndns.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
cgminer.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
clipcat.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
clipmenu.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
confd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
cpuminer-cryptonight.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
db-rest.nix	nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244)	2025-03-08 08:41:08 +00:00
devmon.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
devpi-server.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
dictd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
disnix.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
docker-registry.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
domoticz.nix	nixos/services.domoticz: remove with lib;	2024-08-30 23:00:17 +02:00
duckdns.nix	nixos/duckdns: init module	2024-11-09 22:27:14 +01:00
duckling.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
dwm-status.nix	nixos/dwm-status: don't disable upower	2024-09-25 08:59:38 +02:00
dysnomia.nix	nixos/dysnomia: fix documentation link formatting	2025-02-12 21:03:21 +01:00
errbot.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
etebase-server.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
etesync-dav.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
evdevremapkeys.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
evremap.nix	nixos/evremap: add option phys	2024-12-10 00:50:07 +01:00
felix.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
flaresolverr.nix	nixos/flaresolverr: initial commit	2024-07-19 20:55:21 +03:00
forgejo.md	treewide: Fix all Nix ASTs in all markdown files	2024-03-28 09:28:12 +01:00
forgejo.nix	nixos/forgejo,forgejo: Add pyrox0 as a maintainer	2024-12-12 21:11:32 +01:00
freeswitch.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
fstrim.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
gammu-smsd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
geoipupdate.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
gitea.nix	nixos/gitea: add CAPTCHA support	2025-02-18 21:24:46 +01:00
gitlab.md	treewide: Fix all Nix ASTs in all markdown files	2024-03-28 09:28:12 +01:00
gitlab.nix	nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244)	2025-03-08 08:41:08 +00:00
gitolite.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
gitweb.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
gollum.nix	nixos/services.gollum: remove with lib;	2024-08-30 23:00:49 +02:00
gotenberg.nix	nixos/gotenberg: fix service config for chromium	2024-10-05 11:50:55 +02:00
gpsd.nix	nixos/*: tag manpage references	2025-01-27 02:47:01 +01:00
graphical-desktop.nix	nixos/graphical-desktop: enable Pipewire audio by default	2024-09-04 13:56:42 +03:00
greenclip.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
headphones.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
heisenbridge.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
homepage-dashboard.nix	nixos/homepage-dashboard: fix documentation link formatting	2025-02-12 21:03:21 +01:00
ihaskell.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
input-remapper.nix	nixos/input-remapper: fix documentation link formatting	2025-02-12 21:03:21 +01:00
invidious-router.nix	nixos/invidious-router: fix documentation link formatting	2025-02-12 21:03:21 +01:00
irkerd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
jackett.nix	nixos/jackett: add Systemd sandboxing configuration (#211096)	2024-12-21 15:49:19 +01:00
jellyfin.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
jellyseerr.nix	nixos/jellyseerr: add configDir option	2024-12-25 18:53:53 -06:00
kafka.md
klipper.nix	nixos/klipper: restart when config changes	2025-01-12 13:58:51 +04:00
languagetool.nix	nixos/languagetool: fix documentation link formatting	2025-02-12 21:03:21 +01:00
leaps.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
lifecycled.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
llama-cpp.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
logkeys.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
mame.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
mbpfan.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
mediatomb.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
metabase.nix	nixos/metabase: add package option (#334804)	2025-02-12 09:00:39 +01:00
mollysocket.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
moonraker.nix	nixos/moonraker: allow configuring analysis	2025-02-19 11:11:31 +03:00
mqtt2influxdb.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
n8n.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
nitter.nix	nixos/nitter: fix documentation link formatting	2025-02-12 21:03:21 +01:00
nix-gc.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
nix-optimise.nix	nixos/nix-optimise: add randomizedDelaySec and persistent options	2024-12-06 10:59:25 +01:00
nix-ssh-serve.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
novacomd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
ntfy-sh.nix	nixos/services.ntfy-sh: remove with lib;	2024-08-30 23:00:54 +02:00
nzbget.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
nzbhydra2.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
octoprint.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
ollama.nix	nixos/ollama: fix documentation link formatting	2025-02-12 21:03:21 +01:00
ombi.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
omnom.nix	nixos/omnom: init module (#357830)	2024-11-29 18:34:24 +01:00
open-webui.nix	nixos/open-webui: fix documentation link formatting	2025-02-12 21:03:21 +01:00
osrm.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
owncast.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
packagekit.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
paperless.nix	nixos/paperless: move paperless-manage to proper systemPackage	2025-02-27 21:47:35 +01:00
parsoid.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
persistent-evdev.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
pghero.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
pinnwand.nix	nixos/pinnwand: fix documentation link formatting	2025-02-12 21:03:21 +01:00
plex.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
plikd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
podgrab.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
polaris.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
portunus.nix	nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244)	2025-03-08 08:41:08 +00:00
preload.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
private-gpt.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
pufferpanel.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
pykms.nix	nixos/pykms: suggest dual stack binding	2025-01-02 18:16:00 +01:00
radicle.nix	nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244)	2025-03-08 08:41:08 +00:00
realmd.nix	nixos/realmd: init	2025-01-16 14:35:45 +01:00
rebuilderd.nix	nixos/rebuilderd: init	2025-02-27 21:18:46 +01:00
recyclarr.nix	Remove lib.mdDoc and add missing backticks	2025-02-07 14:13:38 +01:00
redlib.nix	fixup! nixos/redlib: use upstream systemd service file	2024-11-22 15:24:46 +08:00
redmine.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
renovate.nix	nixos/renovate: Fix ShellCheck issue	2025-01-12 14:47:39 +01:00
rkvm.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
rmfakecloud.nix	maintainers: rename pacien -> euxane, update details	2024-12-21 21:20:22 +01:00
rshim.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
safeeyes.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
sdrplay.nix	nixos/services.sdrplayApi: remove with lib;	2024-11-28 19:08:32 +01:00
serviio.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
sickbeard.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
signald.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
siproxd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
snapper.nix	treewide: Fix incorrect string escapes	2025-01-07 19:49:28 +01:00
soft-serve.nix	nixos/soft-serve: restart trigger added (#384829)	2025-03-05 12:54:04 -05:00
spice-autorandr.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
spice-vdagentd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
spice-webdavd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
sssd.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
subsonic.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
sundtek.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
svnserve.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
synergy.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
sysprof.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
tabby.nix	nixos/tabby: fix invalid mkRemovedOptionModule import	2025-01-07 19:09:18 +09:00
tandoor-recipes.nix	nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244)	2025-03-08 08:41:08 +00:00
taskchampion-sync-server.nix	nixos/taskchampion-sync-server: support specifiying --allow-client-id	2025-02-05 12:28:49 +08:00
tautulli.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
tiddlywiki.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
tp-auto-kbbl.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
transfer-sh.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
turn-rs.nix	nixos/turn-rs: init	2024-09-19 07:33:51 +08:00
tuxclocker.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
tzupdate.nix	nixos/tzupdate: report timezone being set in journal	2025-02-08 22:50:13 +02:00
uhub.nix	nixos/uhub: fix documentation link formatting	2025-02-12 21:03:21 +01:00
wastebin.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
weechat.md	treewide: Mark Nix blocks in markdown as Nix	2024-03-28 09:28:12 +01:00
weechat.nix	nixos/weechat: Allow switching between TUI and headless mode	2025-02-05 02:49:21 +01:00
workout-tracker.nix	nixos/workout-tracker: init	2024-03-28 20:08:28 +05:30
xmrig.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
ytdl-sub.nix	nixos/ytdl-sub: init module	2025-01-01 16:46:45 +01:00
zoneminder.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00
zookeeper.nix	treewide: format all inactive Nix files	2024-12-10 20:26:33 +01:00