nixpkgs-suyu/nixos/modules/security
Nikolay Amiantov 4fc0b4edca acme service: generate a CA for self-signed certificate
This is needed because simp_le expects two certificates in fullchain.pem, leading to error:

> Not enough PEM encoded messages were found in fullchain.pem; at least 2 were expected, found 1.

We now create a CA and sign the key with it instead, providing correct fullchain.pem.

Also cleanup service a bit -- use PATH and a private temporary directory (which
is more suitable).
2018-04-17 12:53:29 +03:00
..
wrappers wrapper.c: fixup includes to work w/musl 2018-03-25 18:06:02 -05:00
acme.nix acme service: generate a CA for self-signed certificate 2018-04-17 12:53:29 +03:00
acme.xml
apparmor-suid.nix
apparmor.nix
audit.nix nixos: Move uses of stdenv.shell to runtimeShell. 2018-03-01 14:38:53 -05:00
auditd.nix
ca.nix
chromium-suid-sandbox.nix
dhparams.nix
duosec.nix duosec: use root uid as sshd uid has been retired (#33597) 2018-03-21 18:46:35 -05:00
hidepid.nix
hidepid.xml
lock-kernel-modules.nix
oath.nix
pam.nix lxc: enable pam_cgfs and fix module 2018-04-09 08:15:00 +01:00
pam_mount.nix
pam_usb.nix
polkit.nix
prey.nix
rngd.nix
rtkit.nix
sudo.nix nixos/security: fix description of sudo.wheelNeedsPassword 2018-03-16 21:50:46 +00:00