Commit graph

341731 commits

Author SHA1 Message Date
Vladimír Čunát
ac169ec637
Merge : qemu: disable debug info on aarch64-linux 2021-12-26 18:43:05 +01:00
Gunnar Nitsche
7e9eb10b79 maintainers: add broke 2021-12-26 18:03:20 +01:00
André-Patrick Bubel
a456d83ee7
prusa-slicer: 2.3.3 -> 2.4.0 2021-12-26 18:01:47 +01:00
Lucas Savva
65f1b8c6ae
nixos/acme: Add test for lego's built-in web server
In the process I also found that the CapabilityBoundingSet
was restricting the service from listening on port 80, and
the AmbientCapabilities was ineffective. Fixed appropriately.
2021-12-26 16:49:59 +00:00
Silvan Mosberger
2dcc3daadf
nixos/acme: Clean up default handling 2021-12-26 16:49:58 +00:00
Lucas Savva
41fb8d71ab
nixos/acme: Add useRoot option 2021-12-26 16:49:57 +00:00
Lucas Savva
8d01b0862d
nixos/acme: Update documentation
- Added defaultText for all inheritable options.
- Add docs on using new defaults option to configure
  DNS validation for all domains.
- Update DNS docs to show using a service to configure
  rfc2136 instead of manual steps.
2021-12-26 16:49:55 +00:00
Lucas Savva
07c1583309
nixos/acme: Update release notes 2021-12-26 16:49:52 +00:00
davidak
fcb125441f
Merge pull request from r-ryantm/auto-update/ocenaudio
ocenaudio: 3.11.1 -> 3.11.2
2021-12-26 17:49:03 +01:00
Bernardo Meurer
795469df58
roon-server: explicitly set dontConfigure/Build 2021-12-26 13:46:30 -03:00
Lucas Savva
377c6bcefc
nixos/acme: Add defaults and inheritDefaults option
Allows configuring many default settings for certificates,
all of which can still be overridden on a per-cert basis.
Some options have been moved into .defaults from security.acme,
namely email, server, validMinDays and renewInterval. These
changes will not break existing configurations thanks to
mkChangedOptionModule.

With this, it is also now possible to configure DNS-01 with
web servers whose virtualHosts utilise enableACME. The only
requirement is you set `acmeRoot = null` for each vhost.

The test suite has been revamped to cover these additions
and also to generally make it easier to maintain. Test config
for apache and nginx has been fully standardised, and it
is now much easier to add a new web server if it follows
the same configuration patterns as those two. I have also
optimised the use of switch-to-configuration which should
speed up testing.
2021-12-26 16:44:10 +00:00
Lucas Savva
a7f0001328
nixos/acme: Check for revoked certificates
Closes 

It is possible for the CA to revoke a cert that has not yet
expired. We must run lego to validate this before expiration,
but we must still ignore failures on unexpired certs to retain
compatibility with 

Also changed domainHash logic such that a renewal will only
be attempted at all if domains are unchanged, and do a full
run otherwises. Resolves  but will be partially
reverted when  is resolved + available.
2021-12-26 16:44:09 +00:00
Lucas Savva
87403a0b07
nixos/acme: Add a human readable error on run failure
Closes 

When a user first adds an ACME cert to their configuration,
it's likely to fail to renew due to DNS misconfig. This is
non-fatal for other services since selfsigned certs are
(usually) put in place to let dependant services start.
Tell the user about this in the logs, and exit 2 for
differentiation purposes.
2021-12-26 16:44:08 +00:00
Lucas Savva
a88d846b91
nixos/acme: Remove selfsignedDeps from finished targets
selfsignedDeps is already appended to the after and wants
of a cert's renewal service, making these redundant.

You can see this if you run the following command:
systemctl list-dependencies --all --reverse acme-selfsigned-mydomain.com.service
2021-12-26 16:44:07 +00:00
Bernardo Meurer
2d18e3a33d
roon-server: 1.8-850 -> 1.8-880 2021-12-26 13:39:41 -03:00
Bernardo Meurer
52c1d49b71
Merge pull request from r-ryantm/auto-update/klipper
klipper: unstable-2021-12-02 -> unstable-2021-12-24
2021-12-26 16:31:26 +00:00
Mario Rodas
42aefef238
Merge pull request from r-ryantm/auto-update/shadowsocks-rust
shadowsocks-rust: 1.12.4 -> 1.12.5
2021-12-26 11:28:26 -05:00
Mario Rodas
c2dc374df0
Merge pull request from r-ryantm/auto-update/tflint
tflint: 0.34.0 -> 0.34.1
2021-12-26 11:28:04 -05:00
Bernardo Meurer
60b29ec731
Merge pull request from TredwellGit/firmwareLinuxNonfree
firmwareLinuxNonfree: 20211027 -> 20211216
2021-12-26 16:22:25 +00:00
R. Ryantm
5df2206a4d sof-firmware: 1.9.3 -> 2.0 2021-12-26 15:07:19 +00:00
Bobby Rong
fa5e153653
Merge pull request from bobby285271/vala-lint
vala-lint: unstable-2021-02-17 -> unstable-2021-11-18
2021-12-26 23:02:23 +08:00
Pavol Rusnak
3f50bcc917
Merge pull request from prusnak/python3-trezor
python3Packages.trezor: 0.12.4 -> 0.13.0
2021-12-26 15:39:53 +01:00
Philipp
806797df24
gitty: 0.3.0 -> 0.5.0 2021-12-26 15:31:50 +01:00
Pavol Rusnak
9591b406c4
Merge pull request from TredwellGit/electron
Update Electron
2021-12-26 15:28:28 +01:00
Jan Tojnar
e6c3e3d394 gimp: 2.10.28 → 2.10.30
https://www.gimp.org/news/2021/12/21/gimp-2-10-30-released/
2021-12-26 15:21:20 +01:00
Jan Tojnar
b072f7ec19 gegl: 0.4.32 → 0.4.34
https://gitlab.gnome.org/GNOME/gegl/-/compare/GEGL_0_4_32...GEGL_0_4_34
2021-12-26 15:16:59 +01:00
ajs124
d398a58def
Merge pull request from r-ryantm/auto-update/wrk
wrk: 4.1.0 -> 4.2.0
2021-12-26 15:09:44 +01:00
Vincent Laporte
ac7bba60a2
flow: 0.166.1 → 0.168.0 2021-12-26 15:08:12 +01:00
ajs124
648f7f2a63
Merge pull request from symphorien/xapian-update-3
dovecot_fts_xapian: 1.4.14 -> 1.5.2
2021-12-26 15:06:38 +01:00
ajs124
89ab1a6425
Merge pull request from r-ryantm/auto-update/sope
sope: 5.3.0 -> 5.4.0
2021-12-26 15:00:21 +01:00
Bobby Rong
729053d2e8
vala-lint: unstable-2021-02-17 -> unstable-2021-11-18 2021-12-26 21:59:46 +08:00
sternenseemann
f9b337d15e haskellPackages.minio-hs: disable ordering dependent test case 2021-12-26 14:46:00 +01:00
sternenseemann
a808b2d932 haskellPackages.sdp: disable library profiling breaking the build 2021-12-26 14:12:56 +01:00
sternenseemann
b07e9851b7 haskellPackages.memory-cd: work around compilation failure in tests 2021-12-26 14:12:56 +01:00
sternenseemann
803aea3d3c haskellPackages.polysemy-{resume,conc,mocks}: downgrade to unbreak
These packages are not in Stackage LTS, but depend on package in
Stackage LTS, so we need to downgrade them to keep them working.
2021-12-26 14:12:56 +01:00
sternenseemann
bcf8a276d5 haskellPackages.polysemy-plugin: unbreak
polysemy-plugin has reentered Stackage LTS, so the old workaround is no
longer necessary. We do need to jailbreak it, ironically, since Stackage
LTS ignores tests (?) and polysemy-plugin's bound on doctest is too
strict.
2021-12-26 14:12:56 +01:00
sternenseemann
73d9158d70 haskellPackages.hpack-dhall: disable tests due to outdated test data 2021-12-26 14:12:55 +01:00
sternenseemann
f4b07c3549 haskellPackages.aeson-quick: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann
64a14527a9 haskellPackages.xmlbf: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann
b51b7162b1 haskellPackages.hschema-aeson: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann
ecb3268d04 haskellPackages.dropbox: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann
2725f26574 haskellPackages.morpheus-graphql-core: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann
71e3d4dbb1 haskellPackages.aeson-deriving: disable ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann
4821b61a70 haskellPackages.json-to-haskell: skip ordering dependent tests 2021-12-26 14:12:55 +01:00
sternenseemann
755fb7d17e haskellPackages.haskell-postgis: skip ordering dependent test case 2021-12-26 14:12:55 +01:00
sternenseemann
630ac9b73c haskellPackages.ema: reflect maintainer configuration update 2021-12-26 14:12:54 +01:00
Fabian Affolter
886a19da65
Merge pull request from fabaff/bump-checkov
checkov: 2.0.690 -> 2.0.692
2021-12-26 14:12:44 +01:00
ajs124
cfcbe0d16d sogo: 5.3.0 -> 5.4.0 2021-12-26 13:51:06 +01:00
TredwellGit
f3a39a335f electron_16: 16.0.4 -> 16.0.5
https://github.com/electron/electron/releases/tag/v16.0.5
2021-12-26 12:29:06 +00:00
TredwellGit
760cec731e electron_15: 15.3.3 -> 15.3.4
https://github.com/electron/electron/releases/tag/v15.3.4
2021-12-26 12:28:34 +00:00