nixpkgs/nixos/modules/services/web-apps
Maximilian Bosch 39dcdc5c9b
nixos/nextcloud: check if ownership of config is correct
Follow-up on #169733

For `data`, Nextcloud checks on its own if everything is readable.
However, for `config` it's crucial that the ownership is actually
correct: otherwise, systemd-tmpfiles will refuse any operations inside
because of unsafe path transitions.

This can result in a subtly broken setup by the `override.config.php`
not being updated, but also not part of the system closure anymore
(another override.config.php is referenced now) which means it'll be
GCed eventually even though Nextcloud relies on it.

If this precondition is not met, the following error will be printed:

    nextcloud-setup-start[972]: /var/lib/nextcloud/config is not owned by user 'nextcloud'!
    nextcloud-setup-start[972]: Please check the logs via 'journalctl -u systemd-tmpfiles-setup'
    nextcloud-setup-start[972]: and make sure there are no unsafe path transitions.
    nextcloud-setup-start[972]: (https://nixos.org/manual/nixos/stable/#module-services-nextcloud-pitfalls-during-upgrade)
2025-04-02 09:30:17 +02:00
..
icingaweb2 icingaweb2: pin php version to 8.3 2025-03-29 19:25:44 +01:00
kasmweb various: replace substituteAll with replaceVarsWith 2024-12-15 13:35:30 +01:00
porn-vault nixos/porn-vault: init module 2024-11-19 21:11:40 -03:00
actual.nix nixos/actual: init module and tests 2024-12-20 15:06:04 +01:00
agorakit.nix agorakit: pin php version to 8.2 2025-03-29 19:44:20 +01:00
akkoma.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
akkoma.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
alps.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
anuko-time-tracker.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
archtika.nix nixos/archtika: init module 2025-02-07 04:39:59 +01:00
artalk.nix nixos/artalk: init module 2024-05-18 02:15:33 +08:00
audiobookshelf.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
bluemap.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
bookstack.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
c2fmzq-server.md treewide: Mark Nix blocks in markdown as Nix 2024-03-28 09:28:12 +01:00
c2fmzq-server.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
calibre-web.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
castopod.md nixos/castopod: fix startup, displaying images, uploads up to 500 MiB 2024-04-01 19:16:25 +02:00
castopod.nix treewide: Fix incorrect string escapes 2025-01-07 19:49:28 +01:00
changedetection-io.nix nixos/changedetection-io: fix typo (#383539) 2025-03-15 10:59:05 +01:00
chatgpt-retrieval-plugin.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
cloudlog.nix nixos/*: tag manpage references 2025-01-27 02:47:01 +01:00
code-server.nix nixos/code-server: recommend libargon2 over npx argon2-cli 2025-03-26 23:09:55 +01:00
coder.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
collabora-online.nix nixos/collabora-online: init 2024-09-14 21:24:30 +00:00
commafeed.nix nixos/commafeed: init module 2024-04-26 17:19:33 +02:00
convos.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
crabfit.nix nixos/crabfit: init 2024-04-13 18:51:02 +02:00
cryptpad.nix nixos/cryptpad: fix service with nodejs 22.11 (for real) 2025-03-25 13:37:25 +00:00
dashy.nix nixos/dashy: init module 2024-11-10 00:04:25 +00:00
davis.md nixos/davis: init 2024-04-01 12:55:29 +02:00
davis.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
dependency-track.nix dependency-track: don't bundle frontend in jar 2025-03-02 16:50:01 +01:00
dex.nix nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244) 2025-03-08 08:41:08 +00:00
discourse.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
discourse.nix nixos/discourse: fix documentation link formatting 2025-02-12 21:03:21 +01:00
documize.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
dokuwiki.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
dolibarr.nix nixos/dolibarr: pin php version (to 8.3) 2025-03-29 13:32:10 +01:00
echoip.nix nixos/echoip: improve systemd hardening 2025-03-06 02:01:23 +01:00
eintopf.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
engelsystem.nix nixos/engelsystem: fix documentation link formatting 2025-02-12 21:03:21 +01:00
ethercalc.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
fider.nix nixos/fider: init 2025-01-19 12:03:41 +01:00
filesender.md filesender: FIX: missing format definition. 2024-06-03 15:37:37 +02:00
filesender.nix nixos/filesender: init module 2024-05-22 08:37:48 +03:00
firefly-iii-data-importer.nix treewide: Fix incorrect string escapes 2025-01-07 19:49:28 +01:00
firefly-iii.nix treewide: Fix incorrect string escapes 2025-01-07 19:49:28 +01:00
flarum.nix nixos/flarum: restart on package update 2025-03-13 17:16:34 +08:00
fluidd.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
freshrss.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
froide-govplan.nix nixos/froide-govplan: init 2025-03-23 18:05:54 +01:00
galene.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
gancio.nix nixos/gancio: fix documentation link formatting 2025-02-12 21:03:21 +01:00
gerrit.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
glance.md nixos/glance: init module 2024-07-08 13:14:09 +02:00
glance.nix nixos/glance: init module 2024-07-08 13:14:09 +02:00
glitchtip.nix nixos/glitchtip: init module 2025-03-05 00:24:50 +01:00
goatcounter.nix nixos/goatcounter: init 2024-07-24 10:17:44 +05:30
gotify-server.nix nixos/gotify-server: fix documentation link formatting 2025-02-12 21:03:21 +01:00
gotosocial.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
gotosocial.nix nixos/*: tag manpage references 2025-01-27 02:47:01 +01:00
grav.nix nixos/grav: clean up PHP extensions 2025-03-24 10:09:27 +01:00
grocy.md treewide: Mark Nix blocks in markdown as Nix 2024-03-28 09:28:12 +01:00
grocy.nix Remove n0emis as direct maintainer 2024-12-13 22:10:53 +01:00
guacamole-client.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
guacamole-server.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
hatsu.md nixos/hatsu: init module 2024-10-01 00:33:38 +08:00
hatsu.nix nixos/hatsu: init module 2024-10-01 00:33:38 +08:00
healthchecks.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
hedgedoc.nix nixos/hedgedoc: add fchown to SystemCallFilter to fix filesystem backend 2025-02-21 01:01:10 +01:00
hledger-web.nix treewide: add documentation for nixos systemd units 2025-03-12 18:00:38 +01:00
homebox.nix nixos/homebox: fix 'settings' default description 2025-02-05 12:14:02 +00:00
homer.nix nixos/homer: init 2025-01-30 21:58:24 +01:00
honk.md nixos/modules/honk: init 2023-08-27 23:43:40 +02:00
honk.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
ifm.nix ifm-web: init at 4.0.2 2024-08-20 10:42:02 +02:00
immich-public-proxy.nix nixos/immich-public-proxy: init module 2024-12-29 19:42:47 -08:00
immich.nix nixos/immich: Add accelerationDevices configuration option 2025-02-03 08:03:49 +01:00
invidious.nix nixos/invidious: fix documentation link formatting 2025-02-12 21:03:21 +01:00
invoiceplane.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
isso.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
jirafeau.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
jitsi-meet.md jitsi-meet: Add option to disable Prosody services not used by Jitsi Meet 2024-09-30 18:19:34 +02:00
jitsi-meet.nix Added Allowners muc module to prosody and jitsi-meet 2025-03-25 23:17:58 +01:00
kanboard.nix kanboard: init at 1.2.42 (#357229) 2024-12-08 20:17:10 -05:00
kavita.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
keycloak.md nixos/keycloak: update options for release 25.0.0 2024-06-22 10:23:09 -04:00
keycloak.nix nixos/keycloak: add realmFiles option 2025-03-20 12:07:38 +01:00
kimai.nix nixos/kimai: ensure that our local.yaml is valid on init time (#371919) 2025-03-23 20:23:59 +01:00
komga.nix nixos/komga: fix settings option and default 2025-01-12 10:03:33 -05:00
lanraragi.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
lemmy.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
lemmy.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
limesurvey.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
mainsail.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
mastodon.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
matomo.md nixos/matomo: fix typo 2023-05-09 18:02:17 +04:00
matomo.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
mattermost.nix nixos/mattermost: fix documentation link formatting 2025-02-12 21:03:21 +01:00
mealie.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
mediagoblin.nix poppler-utils: rename from poppler_utils 2025-02-27 16:56:01 +08:00
mediawiki.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
meme-bingo-web.nix nixos/meme-bingo-web: harden 2025-02-23 17:47:56 +01:00
microbin.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
miniflux.nix nixos/*: tag manpage references 2025-01-27 02:47:01 +01:00
misskey.nix nixos/misskey: init 2024-08-06 12:24:15 +02:00
mobilizon.nix nixos/mobilizon: create sitemap directory 2025-03-19 22:52:48 +01:00
monica.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
moodle.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
movim.nix nixos/movim: Fix accidental append to module system property 2025-03-31 12:24:22 +02:00
netbox.nix netbox_4_2: init (#376100) 2025-03-07 20:31:48 +01:00
nextcloud-notify_push.nix nixos/nextcloud-notify_push: add nextcloud-setup 2025-03-23 00:27:09 +01:00
nextcloud-whiteboard-server.nix nixos/nextcloud-whiteboard-server: init 2024-10-21 15:49:23 +00:00
nextcloud.md nixos/nextcloud: clarify support status of apps in the manual 2025-03-25 12:41:30 +00:00
nextcloud.nix nixos/nextcloud: check if ownership of config is correct 2025-04-02 09:30:17 +02:00
nextjs-ollama-llm-ui.nix nixos/nextjs-ollama-llm-ui: fix documentation link formatting 2025-02-12 21:03:21 +01:00
nexus.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
nifi.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
node-red.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
nostr-rs-relay.nix nixos/nostr-rs-relay: init (#365038) 2024-12-14 12:27:20 +02:00
ocis.md nixos/ocis: init at 5.0.0 2024-04-03 00:53:24 +05:30
ocis.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
onlyoffice.nix treewide: Fix incorrect string escapes 2025-01-07 19:49:28 +01:00
open-web-calendar.nix nixos/open-web-calendar: init module 2024-11-21 16:34:39 +01:00
openvscode-server.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
openwebrx.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
outline.nix nixos/outline: remove non-existent systemd option 2025-03-11 15:26:30 +11:00
part-db.nix nixos/part-db: init module 2025-03-05 12:56:25 +01:00
pds.nix nixos/pds: init module 2025-01-23 10:26:12 -07:00
peering-manager.nix nixos/peering-manager: fix documentation link formatting 2025-02-12 21:03:21 +01:00
peertube.nix nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244) 2025-03-08 08:41:08 +00:00
pgpkeyserver-lite.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
photoprism.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
phylactery.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
pict-rs.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
pict-rs.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
pingvin-share.md treewide: fix typos 2025-02-22 02:02:07 +01:00
pingvin-share.nix nixos/pingvin-share: update env variable name 2024-11-07 00:23:28 +01:00
pixelfed.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
plantuml-server.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
plausible.md plausible: 2.0.0 -> 2.1.4 2024-11-22 13:52:18 +01:00
plausible.nix nixos/plausible: fix documentation link formatting 2025-02-12 21:03:21 +01:00
powerdns-admin.nix nixos/powerdns-admin: adapt for newer flask-session 2024-12-14 23:14:47 +01:00
pretalx.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
pretix.nix pretix: 2024.11.0 -> 2025.1.0 2025-02-02 14:22:22 +01:00
privatebin.nix nixos/privatebin: fix defaultText 2025-02-03 00:00:30 +01:00
prosody-filer.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
readeck.nix nixos/readeck: init 2025-01-20 22:17:30 +01:00
rimgo.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
rss-bridge.nix nixos/rss-bridge: add webserver option 2025-02-11 23:57:16 +01:00
rutorrent.nix rutorrent: pin php version to 8.2 2025-03-29 20:00:27 +01:00
screego.nix nixos/screego: fix documentation link formatting 2025-02-12 21:03:21 +01:00
selfoss.nix nixos/selfoss: pin to php83 2025-03-28 22:46:39 +01:00
sftpgo.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
shiori.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
silverbullet.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
simplesamlphp.nix nixos/simplesamlphp: don't configure empty options 2025-01-04 04:08:22 +01:00
slskd.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
snipe-it.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
sogo.nix nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244) 2025-03-08 08:41:08 +00:00
stash.nix nixos/stash: init 2025-01-24 10:50:55 -08:00
stirling-pdf.nix poppler-utils: rename from poppler_utils 2025-02-27 16:56:01 +08:00
strfry.md nixos/strfry: init 2025-04-01 23:20:15 +02:00
strfry.nix nixos/strfry: init 2025-04-01 23:20:15 +02:00
suwayomi-server.md treewide: Fix all Nix ASTs in all markdown files 2024-03-28 09:28:12 +01:00
suwayomi-server.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
trilium.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
tt-rss.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
vikunja.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
wakapi.nix nixos/wakapi: harden systemd service 2025-03-13 15:30:32 +00:00
weblate.nix nixos/weblate: improve smtp setup; make local postgresql optional; fix ssh 2025-02-15 14:52:22 +01:00
whitebophir.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
wiki-js.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
windmill.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
wordpress.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
writefreely.nix treewide: Format all Nix files 2025-04-01 20:10:43 +02:00
your_spotify.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00
youtrack.md nixos/youtrack: rebuild module for 2023.x support 2024-02-01 13:36:13 +01:00
youtrack.nix nixos/youtrack: fix documentation link formatting 2025-02-12 21:03:21 +01:00
zabbix.nix treewide: Fix incorrect string escapes 2025-01-07 19:49:28 +01:00
zipline.nix nixos/zipline: improve systemd hardening 2025-03-19 18:16:01 +01:00
zitadel.nix nixos/zitadel: fix documentation link formatting 2025-02-12 21:03:21 +01:00