about summary refs log tree commit diff
path: root/nixos/modules/services/security
AgeCommit message (Collapse)AuthorFilesLines
2018-03-01nixos: Move uses of stdenv.shell to runtimeShell.Shea Levy2-2/+2
2018-02-27nixos/usbguard: Do not check permissions on rules file (using undocumented ↵Nadrieril1-1/+1
-P flag)
2018-02-17nixos/modules: rename IP addresses/routes optionsrnhmjoj1-4/+3
2018-02-10Merge pull request #34524 from Infinisil/physlock-allowAnyUserJörg Thalheim1-21/+43
nixos/physlock: add allowAnyUser option
2018-02-08nixos/tor: add hiddenServices.<name>.authorizeClientRobert Schütz1-0/+30
2018-02-02physlock: add allowAnyUser optionSilvan Mosberger1-21/+43
2018-01-06nixos/clamav: replace mkIf [] with optionalLéo Gaspard1-2/+2
2017-12-29usbguard service: `rules` option should be of type 'lines'Nadrieril1-1/+1
2017-12-03Merge pull request #28939 from xtruder/nixos/tor/trans_proxyJaka Hudoklin1-2/+81
tor module: add support for transparent proxy and dns
2017-11-28clamav module: make services.clamav.daemon.enable actually workLéo Gaspard1-4/+5
2017-10-20Merge pull request #30173 from dmjio/patch-1Joachim F1-1/+1
oauth2_proxy: default address updated
2017-10-14Revert "sshguard: make it run"Peter Hoeg1-32/+36
This reverts commit 69d8b81b4ba613dbf59850b8f32e2d7ddeb133be.
2017-10-14sshguard: make it runPeter Hoeg1-37/+33
2017-10-13Revert "Simple proof of concept for how to do other types of services"Dan Peebles1-11/+3
This reverts commit 7c3253e519a572f90a907fc56bb6407da004b24c. I included this in another push by accident and never intended for it to be in mainline. See https://github.com/NixOS/nixpkgs/pull/26075 if you want more.
2017-10-06oauth2_proxy: default address updatedDavid Johnson1-1/+1
Go will fail to parse this otherwise. https://github.com/golang/go/issues/19297
2017-09-23nixos/tor: add support for transparent proxy and dnsJaka Hudoklin1-2/+81
2017-09-20Make sure dummy kernel module is loaded for hologram-agent.Rob Vermaas1-0/+2
(cherry picked from commit eb873f6c78e1c5306956b4c9fd651b25a6b9c40c)
2017-09-13tor: skip ControlPort in torrc, if not set.Jörg Thalheim1-1/+1
2017-09-10physlock: 0.5 -> 11-devtimor1-0/+2
Update physlock to a more current version which supports PAM and systemd-logind. Amongst others, this should work now with the slim login manager without any additional configuration, because it does not rely on the utmp mechanism anymore.
2017-08-29frandom: RemoveTim Steinbach1-31/+0
2017-08-25nixos/usbguard: create package and module (#28363)Phil1-0/+200
* nixos/usbguard: create package and module No usbguard module or package existed for NixOS previously. USBGuard will protect you from BadUSB attacks. (assuming configuration is done correctly) * nixos/usbguard: remove extra packages Users can override this by themselves. * nixos/usbguard: add maintainer and fix style
2017-08-24Merge pull request #28338 from oxij/nixos/better-torJoachim F1-135/+299
nixos: better tor config
2017-08-22nixos: tor: rename portSpec -> port, type all "port"s properlySLNOS1-19/+19
2017-08-22nixos: tor: better submodule for hidden servicesSLNOS1-73/+121
Rebased onto master with a different implementation. Originally: "add support for serving hidden services".
2017-08-22nixos: tor: more options, no unexpected consequences for default relay operatorsSLNOS1-58/+174
Before this commit default relay configuration could produce unexpected real life consequences. This patch makes those choices explicit and documents them extensively.
2017-08-22sks and pgpkeyserver-lite modules: init (#27515)Christian Albrecht1-0/+82
* modules sks and pgpkeyserver-lite: runs the sks keyserver with optional nginx proxy for webgui. * Add calbrecht to maintainers * module sks: fix default hkpAddress value * module pgpkeyserver-lite: make hkpAddress a string type option and use (builtins.head services.sks.hkpAddress) as default value * module sks: remove leftover service dependencies
2017-08-11nixos/tor: add tor hidden service options (#28081)Phil1-12/+92
* nixos/tor: add hiddenServices option This change allows to configure hidden services more conveniently. * nixos/tor: fix default/example mixup * nixos/tor: use docbook in documentation Also use more elegant optionalString for optional strings. * tor: seperate hidden service port by newline * tor: better example for hidden service path a path below /var/lib/tor is usually used for hidden services
2017-07-21nixos/oauth2_proxy: actually pass provider-specific optionsRhys1-5/+4
Syntax errors prevented important parameters from being passed to oauth2_proxy, which could have permitted unauthorised access to services behind the proxy.
2017-07-03vault: do not restart the service on "nixos-rebuild switch"Volth1-0/+2
2017-06-29vault: services.vault.storagePath for the file backendVolth1-22/+23
2017-06-28removed generation of self-signed certificateVolth1-20/+12
2017-06-28vault: add unitConfig.RequiresMountsFor to systemd configVolth1-13/+17
2017-06-28vault: start after consul if consul is used as storage backendVolth1-1/+2
2017-06-27create directory only for "file" storageVolth1-6/+17
2017-06-27vault: run as an unpivileged userVolth1-172/+97
2017-06-27delete linesKatyucha1-1/+0
2017-06-27Vault: 0.6.5 -> 0.7.2 with servicesKatyucha1-0/+208
2017-05-26Simple proof of concept for how to do other types of servicesDan Peebles1-3/+11
2017-05-16shibboleth: Add Myself as a Maintainer (#25817)J M1-0/+2
2017-05-02shibboleth-sp module: Set Config File Path for FastCGI Unitsjammerful1-0/+2
Without this environment variable both shibauthorizer and shibresponder default to ${pkgs.shibboleth-sp}etc/shibboleth/shibboleth2.xml
2017-05-02Add Shibboleth Service Provider Modulejammerful1-0/+71
2017-04-30Merge pull request #23697 from sargon/masterMichael Raskin1-0/+140
sshguard + service: init at 2.0.0
2017-04-11treewide: use boolToString functionFranz Pletz1-10/+7
2017-03-26sshguard: new packageDaniel Ehlers1-0/+140
2017-03-22nixos/tor: add missing option typeJoachim Fasting1-0/+1
2017-03-17nixos/treewide: remove boolean examples for optionsFranz Pletz1-1/+0
They contain no useful information and increase the length of the autogenerated options documentation. See discussion in #18816.
2017-03-16nixos: torify: disable by default, add some documentation as of whyJan Malakhovski1-4/+12
This `tsocks` wrapper leaks DNS requests to clearnet, meanwhile Tor comes with `torsocks` which doesn't. Previous commits to this file state that all of this still useful somehow. Assuming that it's true, at least let's not confuse users with two different tools and don't clash with the `tsocks` binary from nixpkgs by disabling this by default.
2017-03-16nixos: tor: add enableGeoIPJan Malakhovski1-0/+16
2017-03-15physlock: fix issue 21935Bart Brouns1-12/+2
2017-02-02hologram: 8d86e3f -> d20d1c3Fernando J Pando2-0/+57
- Updates dependencies - Adds configuration module - Tested on Nixos Unstable