Robert Hensing
25f227fc67
Merge pull request #231316 from hercules-ci/nixos-system.checks
...
NixOS: add `system.checks`
2023-05-15 23:16:29 +02:00
Nick Cao
1de301aef3
Merge pull request #231954 from mac-chaffee/acme-ipv6
...
nixos/security/acme: Fix listenHTTP bug with IPv6 addresses
2023-05-15 07:30:57 -06:00
Raito Bezarius
3f446bfbd3
nixos/pam: fix ZFS support assertion
...
It was always complaining even if you didn't enable PAM ZFS.
2023-05-15 12:06:04 +02:00
Nicola Squartini
87cbaf7ce3
nixos/pam: assert ZFS support for PAM module
2023-05-15 09:22:42 +02:00
Nicola Squartini
5466f76755
nixos/pam: improve documentation of ZFS module
2023-05-15 09:22:39 +02:00
Nicola Squartini
09f4bf7f16
nixos/pam: enable unlocking ZFS home dataset
2023-05-15 09:20:40 +02:00
Mac Chaffee
33b15fdce0
security/acme: Fix listenHTTP bug with IPv6 addresses
2023-05-14 20:27:52 -04:00
Robert Hensing
2e2f0d28ea
nixos: Use checks instead of extraDependencies
...
... as appropriate.
This drops a few unnecessary store paths from the system closure.
2023-05-11 21:18:38 +02:00
Ryan Lahfa
fe7b996d66
Merge pull request #230857 from s1341/bugfix_pam_sssd
...
nixos/pam: Allow password changing via sssd
2023-05-10 16:56:47 +02:00
fetsorn
5e77899001
nixos/tpm2: fix typo
...
"acess" -> "access"
2023-05-09 18:02:17 +04:00
fetsorn
ac5f6d9100
nixos/apparmor: fix typo
...
"usualy" -> "usually"
2023-05-09 18:02:17 +04:00
s1341
e2d538fead
pam: remove unused try_first_pass
2023-05-09 13:45:15 +03:00
s1341
765ae4d581
nixos/pam: allow changing password using sssd
2023-05-09 13:43:06 +03:00
Nick Cao
3e3d82f42c
Merge pull request #227232 from datafoo/nixos-acme-fix-options-type
...
nixos/acme: fix options type
2023-04-24 10:01:04 +08:00
Artturi
b83db86a9e
Merge pull request #222080 from Stunkymonkey/nixos-optionalString
2023-04-20 16:07:30 +03:00
datafoo
2890af5e4b
nixos/acme: fix options type
...
null is a possible default so the type must reflect that.
2023-04-20 11:52:57 +02:00
Felix Buehler
327b0cff7a
treewide: use more lib.optionalString
2023-04-07 13:38:33 +02:00
Benjamin Staffin
ff296a777e
Merge pull request #207115 from s1341/init_freeipa
...
freeipa: init at 4.10.1
2023-03-30 13:15:18 -04:00
github-actions[bot]
d761f69867
Merge master into staging-next
2023-03-17 17:57:00 +00:00
Savyasachee Jha
4177ddcfd6
doas: refactor config generation
...
According to Ted Unangst, since doas evaluates rules in a last
matched manner, it is prudent to have the "permit root to do everything
without a password at the end of the file.
Source: https://flak.tedunangst.com/post/doas-mastery
2023-03-17 09:05:08 -07:00
github-actions[bot]
455127ad5e
Merge master into staging-next
2023-03-16 18:01:20 +00:00
s1341
6d299334b0
nixos/freeipa: init
2023-03-16 08:40:13 +02:00
Martin Weinelt
4472cf44eb
treewide: Make yescrypt the default algorithm for pam_unix.so
...
This ensures `passwd` will default to yescrypt for newly generated
passwords.
2023-03-13 07:54:27 +01:00
Felix Buehler
d10e69c86b
treewide: deprecate isNull
...
https://nixos.org/manual/nix/stable/language/builtins.html#builtins-isNull
2023-03-06 22:40:04 +01:00
Winter
ee6517a915
Revert "nixos/polkit: guard static gid for polkituser behind state version"
...
This reverts commit 2265160fc0
and
e56db577a1
.
Ideally, we shouldn't cause friction for users that bump `stateVersion`,
and I'd consider having to switch and/or manually hardcode a UID/GID
to supress the warning friction. I think it'd be more beneficial to, in
this rare case of an ID being missed, just let it be until more
discussion happens surrounding this overall issue.
See https://github.com/NixOS/nixpkgs/pull/217785 for more context.
2023-02-25 22:32:16 -05:00
Nick Cao
2265160fc0
nixos/polkit: guard static gid for polkituser behind state version
2023-02-23 17:07:49 +08:00
1sixth
e56db577a1
nixos/polkit: set static gid for polkituser
...
polkituser needs a group since https://github.com/NixOS/nixpkgs/pull/130522 .
2023-02-22 08:46:55 +08:00
pennae
bf4c0c1900
nixos/*: remove trailing period in mkEnableOptions
...
those are added by mkEnableOption, and .. is replaced to … by markdown
processing.
2023-02-08 15:23:34 +01:00
pennae
0a6e6cf7e6
nixos/manual: render module chapters with nixos-render-docs
...
this converts meta.doc into an md pointer, not an xml pointer. since we
no longer need xml for manual chapters we can also remove support for
manual chapters from md-to-db.sh
since pandoc converts smart quotes to docbook quote elements and our
nixos-render-docs does not we lose this distinction in the rendered
output. that's probably not that bad, our stylesheet didn't make use of
this anyway (and pre-23.05 versions of the chapters didn't use quote
elements either).
also updates the nixpkgs manual to clarify that option docs support all
extensions (although it doesn't support headings at all, so heading
anchors don't work by extension).
2023-01-27 20:07:34 +01:00
Nick Cao
831ce5cb71
Merge pull request #211830 from sorpaas/patch-11
...
nixos/systemd-confinement: remove unused rootName
2023-01-22 16:25:44 +08:00
Naïm Favier
363158603a
nixos: fix backticks in Markdown descriptions
2023-01-21 18:08:38 +01:00
Wei Tang
ec8d74d58a
nixos/systemd-confinement: remove unused rootName
2023-01-20 22:39:16 +01:00
github-actions[bot]
49722fd14a
Merge master into staging-next
2023-01-13 18:01:34 +00:00
pennae
53fc887582
nixos/manual: move "edit the MD file" comments to generated XML
2023-01-10 12:34:37 +01:00
pennae
bf92eaebe4
nixos/manual: generate module chapters with md-to-db.sh
2023-01-10 10:32:00 +01:00
pennae
23ea73b416
nixos/manual: enable smart quotes for all MD chapters
2023-01-10 10:31:59 +01:00
pennae
53935b445f
nixos/acme: convert manual chapter to MD
2023-01-10 10:31:54 +01:00
pennae
6930425922
nixos/manual: normalize <literal><link> -> <link><literal>
...
MD can only do the latter, so change them all over now to keeps diffs reviewable.
this also includes <literal><xref> -> <xref> where options are referenced since
the reference will implicitly add an inner literal tag.
2023-01-10 10:31:52 +01:00
pennae
80a78f2e1e
nixos/manual: remove links from program listings
...
markdown cannot represent those links. remove them all now instead of in
each chapter conversion to keep the diff for each chapter small and more
understandable.
2023-01-10 10:31:52 +01:00
Florian Klink
6b1a896570
Merge pull request #205121 from alaviss/homed
...
nixos: systemd-homed support
2022-12-23 13:09:17 +01:00
figsoda
6bb0dbf91f
nixos: fix typos
2022-12-17 19:31:14 -05:00
Markus Napierkowski
192ae663cc
nixos/pam: allow backing the motd with a file
2022-12-15 11:54:26 +01:00
Leorize
05420f34cf
nixos: add systemd-homed support
...
As a start, it's not very configurable, but works pretty well.
2022-12-09 12:10:51 -06:00
Franz Pletz
69f8e94c46
Merge pull request #199587 from lorenz/fscrypt
...
nixos/pam: support fscrypt login protectors
2022-11-14 09:42:35 +01:00
Lorenz Brun
f046cc0923
nixos/pam: support fscrypt login protectors
...
fscrypt can automatically unlock directories with the user's login
password. To do this it ships a PAM module which reads the user's
password and loads the respective keys into the user's kernel keyring.
Significant inspiration was taken from the ecryptfs implementation.
2022-11-11 15:37:39 +01:00
Bobby Rong
03e68946a0
Merge pull request #186628 from ocfox/pam_faildelay
...
nixos/pam: add option failDelay
2022-11-07 19:54:57 +08:00
ocfox
ab0ae8f5e1
nixos/pam: add option failDelay
...
Co-authored-by: Bobby Rong <rjl931189261@126.com>
2022-11-07 19:16:35 +08:00
Naïm Favier
814628a45d
Merge pull request #174951 from dpausp/fix-pam-tty-audit
2022-11-01 23:50:58 +01:00
Yorick van Pelt
af4a43e36a
treewide: convert fake octal ints to strings
...
These were being cast to strings later and then reinterpreted as
octal.
2022-10-28 17:23:44 +02:00
Sandro
6c10d52d0d
Merge pull request #194036 from gloaming/polkit-debug-logs
2022-10-26 22:23:45 +02:00