Commit Graph

558 Commits

Author SHA1 Message Date
Eelco Dolstra
64d871c0d9 * Enable FTP connection tracking in the firewall.
svn path=/nixos/trunk/; revision=26275
2011-03-11 13:34:17 +00:00
Eelco Dolstra
005ca15f64 * Firewall: add an option to allow extra firewall rules to be added.
* Firewall: change the policy of the INPUT chain back to ACCEPT to
  prevent a lockup when the Nix store is mounted over the network
  (i.e. in our VM tests).  This is because as soon as the policy is
  set to DROP, the iptables modules that enable access to the network
  filesystem cannot be acccessed anymore.

svn path=/nixos/trunk/; revision=26274
2011-03-11 13:04:17 +00:00
Eelco Dolstra
ab0ce6734b * firewall.nix: Only flush/delete the chains created by us.
svn path=/nixos/trunk/; revision=26271
2011-03-11 11:53:18 +00:00
Eelco Dolstra
f672aa71bf * RFC 4890 says that local nodes should not filter pretty much any
ICMPv6 messages (including echo requests), so don't do that.

svn path=/nixos/trunk/; revision=26270
2011-03-11 11:08:16 +00:00
Eelco Dolstra
0ea9f6611a * Add some more rules to allow ICMPv6 router/neighbour advertisements
in.  Maybe we're better off accepting all ICMPv6 messages *except*
  echo requests.

svn path=/nixos/trunk/; revision=26260
2011-03-10 16:25:08 +00:00
Eelco Dolstra
53bc6d3efa * NAT module: support active FTP.
svn path=/nixos/trunk/; revision=26247
2011-03-10 13:03:47 +00:00
Eelco Dolstra
9bf4ac079e * Add a module for doing Network Address Translation.
svn path=/nixos/trunk/; revision=26246
2011-03-10 12:08:39 +00:00
Eelco Dolstra
d6424efbfb * Cleanup.
svn path=/nixos/trunk/; revision=26244
2011-03-10 09:39:17 +00:00
Eelco Dolstra
e884cbed7d * Add an option for opening UDP ports.
* Accept packets destined for link-local addresses (fe80::/10).

svn path=/nixos/trunk/; revision=26236
2011-03-09 16:37:16 +00:00
Eelco Dolstra
12161f3183 * Add a firewall option to allow pings. (Maybe this should
be enabled by default.)

svn path=/nixos/trunk/; revision=26233
2011-03-09 15:28:47 +00:00
Eelco Dolstra
e4051e105c * Use a separate chain for logging and rejecting.
svn path=/nixos/trunk/; revision=26232
2011-03-09 15:11:01 +00:00
Eelco Dolstra
66716f9dd5 * Firewall: support IPv6.
svn path=/nixos/trunk/; revision=26231
2011-03-09 14:41:48 +00:00
Eelco Dolstra
843e1f6c1e * Cleanup.
svn path=/nixos/trunk/; revision=26228
2011-03-09 12:28:44 +00:00
Eelco Dolstra
908a025b22 * Die tabs die.
svn path=/nixos/trunk/; revision=26184
2011-03-07 08:21:39 +00:00
Eelco Dolstra
10e8a801b6 * Refactor: extraChrootPaths -> chrootDirs. This allows disabling the
default chroot paths using mkOverride.

svn path=/nixos/trunk/; revision=26183
2011-03-07 08:20:24 +00:00
Michael Raskin
00f3a816a9 Adding a possibility to add more paths to chroots used by nix-daemons. The use-case is building the latest version from repository with very large checkouts. That way you do not get extra copy in store every time you rebuild, and you can implement a saner version checking than checksumming all the data
svn path=/nixos/trunk/; revision=26174
2011-03-06 15:39:05 +00:00
Eelco Dolstra
c31c4290cc * Style fix.
svn path=/nixos/trunk/; revision=26140
2011-03-03 12:00:54 +00:00
Eelco Dolstra
e740badcc6 * Revert unintended commit.
svn path=/nixos/trunk/; revision=26082
2011-02-23 19:06:59 +00:00
Eelco Dolstra
9fca36bfa3 * Add the Intel 5000/6000 firmwares to the installation media.
svn path=/nixos/trunk/; revision=26081
2011-02-23 19:06:14 +00:00
Karn Kallio
0ea15a8f76 Strigi has moved out of kde4
svn path=/nixos/trunk/; revision=26061
2011-02-22 16:39:40 +00:00
Eelco Dolstra
b61c632006 * Add a module for radvd.
svn path=/nixos/trunk/; revision=26035
2011-02-19 19:19:55 +00:00
Eelco Dolstra
9f755eb3a4 * Enable IPv6 support by default. (Note that most NixOS systems
already had the ipv6 kernel module loaded, because dhclient needs
  it.)

svn path=/nixos/trunk/; revision=26034
2011-02-19 17:21:29 +00:00
Eelco Dolstra
8f5f70b292 * We don't really need a display manager on the installation CD. Just
log in as root automatically.

svn path=/nixos/trunk/; revision=26014
2011-02-17 14:38:02 +00:00
Yury G. Kudryashov
559834437a ejabberd: tabs->spaces, remove trailing whitespace
svn path=/nixos/trunk/; revision=25996
2011-02-16 21:03:14 +00:00
Ludovic Courtès
ebb8f55a10 Mingetty: Default to `ttyS0' for ARM devices.
svn path=/nixos/trunk/; revision=25717
2011-01-29 23:06:57 +00:00
Ludovic Courtès
7edc419f65 lshd: Streamline first use.
svn path=/nixos/trunk/; revision=25716
2011-01-29 23:06:52 +00:00
Sander van der Burg
66ead80026 Disnix now also waits for the services it supports before it starts the Disnix daemon itself
svn path=/nixos/trunk/; revision=25626
2011-01-19 12:59:32 +00:00
Ludovic Courtès
a634fd84bf mingetty: Show the kernel name.
svn path=/nixos/trunk/; revision=25581
2011-01-15 21:52:10 +00:00
Rob Vermaas
f2a0929116 typo
svn path=/nixos/trunk/; revision=25438
2011-01-06 10:21:38 +00:00
Eelco Dolstra
0829a9977d * Fix the infinite recursion in fcron while evaluating the manual.
svn path=/nixos/trunk/; revision=25418
2011-01-05 10:42:39 +00:00
Lluís Batlle i Rossell
efa2dccf44 Fixing the systab in fcron.
svn path=/nixos/trunk/; revision=25368
2011-01-03 18:36:31 +00:00
Michael Raskin
23f98ee250 Applying patch by chaoflow to get create services.postfix.extraConfig
svn path=/nixos/trunk/; revision=25345
2011-01-02 18:49:11 +00:00
Sander van der Burg
6ba45109a1 Integers must be converted to strings, of course
svn path=/nixos/trunk/; revision=25274
2010-12-24 16:34:18 +00:00
Eelco Dolstra
c65c03099f * Use "initctl restart".
svn path=/nixos/trunk/; revision=25249
2010-12-23 11:00:20 +00:00
Sander van der Burg
70402c9397 Adapted Disnix module to publish the svnBaseDir and to support the postgresql and subversion types
svn path=/nixos/trunk/; revision=25236
2010-12-22 13:32:51 +00:00
Sander van der Burg
edcf526c32 Added svnserve module, to serve Subversion repositories through the SVN protocol
svn path=/nixos/trunk/; revision=25235
2010-12-22 13:32:16 +00:00
Rob Vermaas
e1c4b6a1f5 hydra-mirror.nix: forgot description for user
svn path=/nixos/trunk/; revision=25212
2010-12-20 14:17:30 +00:00
Rob Vermaas
5d7b524bd3 updated hydra mirror module
svn path=/nixos/trunk/; revision=25211
2010-12-20 14:14:29 +00:00
Evgeny Egorochkin
3b28efd00d Git daemon: packaged.
svn path=/nixos/trunk/; revision=25163
2010-12-17 07:33:20 +00:00
Evgeny Egorochkin
5055c6dc29 Ghost One: add a check for language property values.
svn path=/nixos/trunk/; revision=25162
2010-12-17 07:33:03 +00:00
Yury G. Kudryashov
aaf3247e80 Add cups_pdf_filter to default drivers list
svn path=/nixos/trunk/; revision=25153
2010-12-15 22:36:54 +00:00
Yury G. Kudryashov
bedc715ecd Be more verbose
svn path=/nixos/trunk/; revision=25152
2010-12-15 22:36:39 +00:00
Eelco Dolstra
ec16a59845 * Support file uploads in MediaWiki.
svn path=/nixos/trunk/; revision=25145
2010-12-15 13:21:21 +00:00
Eelco Dolstra
0887471e4e * Mediawiki 1.15.5.
svn path=/nixos/trunk/; revision=25144
2010-12-15 12:53:44 +00:00
Evgeny Egorochkin
652a22f0da Ghost One: packaged.
svn path=/nixos/trunk/; revision=25136
2010-12-15 02:19:44 +00:00
Sander van der Burg
281f3b0776 Fixed the avahi service and do some better formatting of the key=value pairs
svn path=/nixos/trunk/; revision=25060
2010-12-10 23:58:57 +00:00
Sander van der Burg
e51fcac73c - deployment.targetHost is now defined as an option
- developed services.disnix.infrastructure option, which contains properties for the Disnix infrastructure model (these properties can be either used by Disnix itself or the Avahi publisher)


svn path=/nixos/trunk/; revision=25052
2010-12-10 14:22:00 +00:00
Lluís Batlle i Rossell
d5fb41795f Adding a wake on lan module.
svn path=/nixos/trunk/; revision=24958
2010-12-02 20:23:45 +00:00
Eelco Dolstra
29813b418c * Don't run dhclient on Xen's vif* and tap* interfaces.
svn path=/nixos/trunk/; revision=24948
2010-12-01 16:14:44 +00:00
Eelco Dolstra
1b8dd6cf27 * "systemConfig" doesn't exist anymore.
svn path=/nixos/trunk/; revision=24947
2010-12-01 12:36:19 +00:00