about summary refs log tree commit diff
path: root/nixos/modules/services/networking
AgeCommit message (Collapse)AuthorFilesLines
2023-09-11Merge pull request #253427 from Yarny0/sshd-requiredrsasizeMaximilian Bosch1-2/+1
nixos/sshd: don't validate mock host key, permit `RequiredRSASize`
2023-09-09Merge pull request #248502 from kurnevsky/wstunnelYorick1-2/+2
wstunnel: correct listen option
2023-09-05Merge pull request #252978 from oluceps/dae-upupWeijia Wang1-25/+145
dae,nixos/dae: 0.2.4 -> 0.3.0
2023-09-05nixos/sshd: avoid mock host key, permit `RequiredRSASize`Yarny01-2/+1
With this commit, the validation of `sshd_config` is performed with `sshd -G` instead of `sshd -t`. The former does not require a valid host key. Checking the host key was never useful for us: We just generated a dummy host key to make the validation mechanism happy. With this change the dummy key is no longer needed. This change not only saves some CPU cycles (avoid the generation of an RSA key), but it also permits to set `RequiredRSASize` to a value larger than the current rsa key default size (3072).
2023-09-04Merge pull request #241680 from 4z3/networking.nftables.checkRulesetRedirectsMaciej Krüger1-1/+21
2023-09-04nixos/jool: allow to manage multiple instancesrnhmjoj1-127/+186
2023-09-03nixos/dae: add example linkoluceps1-1/+3
Co-authored-by: Mathias Zhang <me@zzzsy.top>
2023-09-03nixos/dae: add confgFile optionzzzsyyy1-0/+8
Co-authored-by: oluceps <nixos@oluceps.uk>
2023-09-03nixos/dae: add more config optionsoluceps1-25/+135
2023-09-01Merge pull request #248669 from Atemu/dnscrypt-proxy-update-aliasAtemu1-3/+3
dnscrypt-proxy: rename from dnscrypt-proxy2
2023-08-30privoxy: fix types.string -> types.strname_snrl1-1/+1
2023-08-29nixos/nncp: add caller and daemon servicesEmery Hemingway1-0/+131
2023-08-28networking/nftables: ensure deletionsMaciej Krüger1-1/+1
2023-08-28networking/nftables: make ruleset+rulesetFile non-exclusiveMaciej Krüger1-2/+3
2023-08-28networking/nftables: enable flushRuleset by default if rulset{,File} usedMaciej Krüger1-1/+2
2023-08-28nixos/nftables: save deletions to file and run them afterwardsMaciej Krüger1-10/+50
Co-authored-by: duament
2023-08-28networking/nftables: only delete our tables if flushRuleset is set to falseMaciej Krüger1-1/+5
2023-08-28networking/nftables: remove no longer relevant conflict warningsMaciej Krüger1-2/+0
2023-08-28networking/nftables: enable flushing ruleset for older versionsMaciej Krüger1-0/+4
Co-authored-by: Naïm Favier <n@monade.li>
2023-08-28*: migrate to using nftables.tables instead of ruleset directlyMaciej Krüger2-25/+20
2023-08-28networking/nftables: add .tables property and disable ruleset flushing by ↵Maciej Krüger1-1/+93
default This allows for other unmanaged tables to co-exist peacefully on the os, by having the nixos-managed tables be re-created atomically and the other tables will simply be left untouched.
2023-08-24Merge pull request #251032 from Kranzes/twingate-resolvedIlan Joselevich1-1/+1
nixos/twingate: avoid conflicts with resolved
2023-08-23nixos/twingate: avoid conflicts with resolvedIlan Joselevich1-1/+1
2023-08-23tailscale: add mfrw as maintainerMuhammad Falak R Wani1-1/+1
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-08-19Merge pull request #240982 from rnhmjoj/pr-joolMartin Weinelt1-0/+222
nixos/jool: add service for setting up SIIT/NAT64
2023-08-16Merge pull request #249101 from motiejus/headscale-oidcK9001-1/+1
headscale.oidc: client_secret_path is a string
2023-08-15Merge pull request #246181 from jvanbruegge/haproxy-packagePol Dellaiera1-11/+6
nixos/haproxy: allow to specify haproxy package
2023-08-15nixos/haproxy: allow to specify haproxy packageJan van Brügge1-11/+6
2023-08-14headscale.oidc: client_secret_path is a stringMotiejus Jakštys1-1/+1
It can be include an environment-variable, like `${CREDENTIALS_DIRECTORY}/some-path`, failing validation for `types.path`.
2023-08-13dnscrypt-proxy: rename from dnscrypt-proxy2Atemu1-3/+3
An alias is added for dnscrypt-proxy2
2023-08-13Merge pull request #247899 from DavHau/zerotier-docsNick Cao1-1/+3
nixos/zerotierone: document networks never left automatically
2023-08-11nixos/hostapd: add missing stringification of path in INI formatoddlama1-1/+1
2023-08-11wstunnel: correct listen optionEvgeny Kurnevsky1-2/+2
2023-08-10nixos/dae: use network-onlineCnTeng1-2/+2
2023-08-10nixos/chrony: add enableMemoryLocking optionFranz Pletz1-1/+13
Fixes #222629.
2023-08-08nixos/zerotierone: document networks never left automaticallyDavHau1-1/+3
Removing a network from the joinNetworks list does not make the machine leave the network which is confusing. This behavior is now clarified via the options description
2023-08-08Merge pull request #245852 from rnhmjoj/pr-fix-dnscryptMichele Guerini Rocco1-16/+5
dnscrypt-wrapper fixes
2023-08-07nixos/dae: initpokon5481-0/+41
2023-08-05nixos/ntopng: seperate interface config with newlinesEmery Hemingway1-1/+1
2023-08-04Merge pull request #242538 from tnias/fix/apparmorajs1241-0/+32
apparmor: add some policies and improve abstractions and utils
2023-08-03Merge pull request #224635 from helsinki-systems/drop/dhcpdMartin Weinelt1-230/+0
dhcpd: remove
2023-07-31nixos/bird: fix checkConfig with cross-compilationYureka1-1/+1
2023-07-29Merge pull request #245570 from jwygoda/tailscaled-autoconnect-optionsPol Dellaiera1-8/+10
nixos/tailscale: add extraUpFlags option
2023-07-28nixos/tailscale: add extraUpFlags optionJarosław Wygoda1-8/+10
2023-07-28Merge pull request #245413 from oddlama/fix-hostapd-mac-allowRyan Lahfa1-5/+2
2023-07-28nixos/dhcp(46): removeajs1241-230/+0
package reached its EOL on 2022-10-04 see https://www.isc.org/blogs/isc-dhcp-eol/ for details
2023-07-26Merge pull request #244356 from datafoo/mosquitto-systemd-credentialspennae1-9/+56
nixos/mosquitto: leverage systemd credentials
2023-07-26Merge pull request #244841 from flokli/networkmanager-fix-ppp-pluginFlorian Klink1-0/+2
nixos/networkmanager: create pppd lock directory
2023-07-25nixos/hostapd: fix regression after refactoring to RFC42.oddlama1-5/+2
Switching from submodule notation from ({name, ...}: {}) to (submob: {}) seems to require a different accessing scheme.
2023-07-25nixos/fonts: rename fonts.enableDefaultFonts to fonts.enableDefaultPackagesSandro Jäckel1-1/+1
to better fit the renamed fonts.packages
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-10-23 15:39:50 +0000