about summary refs log tree commit diff
path: root/nixos/tests/unbound.nix
AgeCommit message (Collapse)AuthorFilesLines
2023-11-13nixos/unbound: Fix deprecation warningsAshish SHUKLA1-8/+8
2023-05-19nixos/tests: fix typosfigsoda1-2/+2
2021-09-12nixos: define the primary group of users where neededGuillaume Girol1-1/+10
2021-08-15treewide: runCommandNoCC -> runCommandRobert Hensing1-1/+1
This has been synonymous for ~5y.
2021-05-09nixos/tests/unbound: Remove unused 'json' importaszlig1-1/+0
Signed-off-by: aszlig <aszlig@nix.build>
2021-05-03nixos/unbound: deprecate extraConfig in favor of settingsMarc 'risson' Schmitt1-28/+40
Follow RFC 42 by having a settings option that is then converted into an unbound configuration file instead of having an extraConfig option. Existing options have been renamed or kept if possible. An enableRemoteAccess has been added. It sets remote-control setting to true in unbound.conf which in turn enables the new wrapping of unbound-control to access the server locally. Also includes options 'remoteAccessInterfaces' and 'remoteAccessPort' for remote access. Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2021-04-14nixos/users: require one of users.users.name.{isSystemUser,isNormalUser}Symphorien Gibol1-4/+7
As the only consequence of isSystemUser is that if the uid is null then it's allocated below 500, if a user has uid = something below 500 then we don't require isSystemUser to be set. Motivation: https://github.com/NixOS/nixpkgs/issues/112647
2021-02-25nixos/test/unbound: add tests for DNS over HTTPSDaniel Nagy1-1/+15
2021-01-10treewide: simplify pkgs.stdenv.lib -> pkgs.libDominik Xaver Hörl1-1/+1
The library does not depend on stdenv, that `stdenv` exposes `lib` is an artifact of the ancient origins of nixpkgs.
2020-11-03nixos/unbound: add option to configure the local control socket pathAndreas Rammhold1-15/+35
This option allows users to specify a local UNIX control socket to "remote control" the daemon. System users, that should be permitted to access the daemon, must be in the `unbound` group in order to access the socket. When a socket path is configured we are also creating the required group. Currently this only supports the UNIX socket mode while unbound actually supports more advanced types. Users are still able to configure more complex scenarios via the `extraConfig` attribute. When this option is set to `null` (the default) it doesn't affect the system configuration at all. The unbound defaults for control sockets apply and no additional groups are created.
2020-11-03nixos/tests/unbound: add test to verify control sockets workAndreas Rammhold1-0/+11
2020-11-03nixos/tests/unbound: initAndreas Rammhold1-0/+247