nixpkgs/pkgs/tools/networking
Maximilian Bosch cd5e01edd9 ocserv: init at 0.12.1 (#42871)
`ocserv` is a VPN server which follows the openconnect protocol
(https://github.com/openconnect/protocol). The packaging is slightly
inspired by the AUR version
(https://aur.archlinux.org/packages/ocserv/).

This patch initializes the package written in C, the man pages and a
module for a simple systemd unit to run the VPN server. The package
supports the following authentication methods for the server:

* `plain` (mostly username/password)
* `pam`

The third method (`radius`) is currently not supported since `nixpkgs`
misses a packaged client.

The module can be used like this:

``` nix
{
  services.ocserv = {
    enable = true;
    config = ''
      ...
    '';
  };
}
```

The option `services.ocserv.config` is required on purpose to
ensure that nobody just enables the service and experiences unexpected
side-effects on the system. For a full reference, please refer to the
man pages, the online docs or the example value.

The docs recommend to simply use `nobody` as user, so no extra user has
been added to the internal user list. Instead a configuration like
this can be used:

```
run-as-user = nobody
run-as-group = nogroup
```

/cc @tenten8401
Fixes #42594
2018-08-01 21:39:09 +02:00
..
acme-client
ahcpd
aircrack-ng Take me (viric) out of most maintenance 2018-07-22 21:50:19 +02:00
airfield pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
altermime
argus pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
argus-clients
aria2 aria2: 1.33.1 -> 1.34.0 2018-06-09 09:57:25 +03:00
arping
arpoison
assh pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
asynk
atftp tree-wide: disable doCheck and doInstallCheck where it fails (the trivial part) 2018-04-25 04:18:46 +00:00
autossh
axel axel: add license 2018-07-22 17:33:09 +02:00
babeld babeld: 1.8.1 -> 1.8.2 2018-05-17 12:49:56 -07:00
badvpn
bgpdump
biosdevname
bsd-finger
bud
bukubrow bukubrow: init at 2.4.0 2018-07-30 23:02:19 +02:00
bully
burpsuite
bwm-ng treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
cadaver
carddav-util
ccnet ccnet: 6.1.7 -> 6.1.8 (#40495) 2018-05-14 17:21:22 +02:00
chrony pps-tools: init at 1.0.2, enable for chrony, gpsd, ntp (#42889) 2018-07-04 11:28:07 +00:00
cjdns cjdns: 20.1 -> 20.2 2018-05-02 17:29:18 +03:00
cksfv
cmst pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
cntlm cntlm: add support for darwin 2018-07-25 11:35:02 +10:00
connect connect: works on darwin (#42172) 2018-06-18 22:22:31 +02:00
connman pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
corkscrew
curl curl: Get rid of crossAttrs 2018-07-24 18:36:59 -04:00
curl-unix-socket
cutter
darkstat
davix
dd-agent pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
ddclient nixos ddclient: support multiple domains and run via systemd timer 2018-04-15 10:17:46 +08:00
dhcp treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
dhcpcd dhcpcd: fix /bin/sh impurity 2018-03-30 18:18:19 +02:00
dhcpdump treewide: http -> https 2018-07-19 18:12:04 -07:00
dhcping treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
dibbler
dirb
djbdns
dnscrypt-proxy dnscrypt-proxy2: meta.description nit 2018-07-10 19:45:34 +02:00
dnscrypt-wrapper
dnsmasq pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
dnsperf dnsperf: fixup build 2018-06-30 09:57:58 +02:00
dnstop
dnstracer treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
driftnet
dropbear treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
easyrsa treewide: http to https 2018-04-30 21:39:20 -07:00
eggdrop
email
envoy
eternal-terminal
fakeroute
fastd
fdm
ferm
filegive treewide: remove platform assertions 2018-05-03 13:09:20 -05:00
flannel pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
flvstreamer
fping treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
gandi-cli
getmail getmail: 5.5 -> 5.6 2018-04-07 10:51:17 -07:00
gftp treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
gmrender-resurrect gmrender-resurrect: init 2018-04-06 08:30:49 +02:00
gmvault
gnirehtet gnirehtet: init at 2.2.1 2018-06-22 19:21:23 +02:00
goklp
gupnp-tools gupnp-tools: 0.8.13 → 0.8.14 2018-04-25 02:04:33 +02:00
gvpe treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
hans treewide: http -> https 2018-06-23 04:34:55 -07:00
haproxy haproxy: fix build on darwin 2018-06-08 23:17:44 +02:00
horst
hping
hss
htpdate htpdate: mark linux only 2018-04-05 20:05:24 +02:00
http-prompt http-prompt: 0.11.1 -> 0.11.2 2018-07-08 00:26:48 -07:00
httperf httperf: init at 0.9.1 2018-07-29 09:41:15 -07:00
httpie
httping
httplab
httpstat
httptunnel
hue-cli
hyenae
i2p i2p: 0.9.34 -> 0.9.35 2018-07-14 14:24:35 +02:00
i2pd pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
ifstat-legacy
iftop
imapproxy
imapsync
inadyn Take me (viric) out of most maintenance 2018-07-22 21:50:19 +02:00
inetutils inetutils: cleanup 2018-04-30 22:30:37 -05:00
infiniband-diags
iodine treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
iouyap
ip2location treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
ipcalc
iperf iperf: 3.5 -> 3.6 (#43002) 2018-07-04 14:40:35 +00:00
ipgrep ipgrep: init at 1.0 (#43887) 2018-08-01 15:40:57 +02:00
ipv6calc pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
isync Take me (viric) out of most maintenance 2018-07-22 21:50:19 +02:00
jnettop
jwhois jwhois: supports darwin 2018-04-30 23:15:33 -05:00
kail kail: init at 0.6.0 2018-07-11 11:49:41 +02:00
kea kea: 1.3.0 -> 1.4.0 2018-07-15 21:41:46 +02:00
keepalived
lftp treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
libreswan
linkchecker
lldpd lldpd: 0.9.9 -> 1.0.1 2018-04-10 21:08:54 -07:00
logmein-hamachi logmein-hamachi: 2.1.0.174 -> 2.1.0.198 2018-07-10 21:20:47 +00:00
lsh
maildrop tree-wide: disable doCheck and doInstallCheck where it fails (the trivial part) 2018-04-25 04:18:46 +00:00
mailsend
mailutils tree-wide: platforms = platforms.gnu; -> platforms = gnu ++ linux 2018-04-30 18:08:48 -05:00
maphosts
maxscale pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
mcrcon
megatools
memtier-benchmark
minidlna
minio-client minio-client: 2018-04-28T00-08-20Z -> 2018-07-31T02-28-53Z 2018-08-01 00:36:44 +02:00
minissdpd
miniupnpc miniupnpc_2: 2.0.20171212 -> 2.0.20180203 2018-07-29 22:57:45 -04:00
miniupnpd miniupnpd: 2.1 -> 2.1.20180706 (#43186) 2018-07-11 11:52:10 +02:00
miredo treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
mitmproxy treewide: disable some darwin checks 2018-06-10 20:31:06 -04:00
modem-manager treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
mosh nixos/programs.mosh: refactor 2018-06-08 20:57:16 +02:00
mpack mpack: fix up broken paths 2018-05-16 21:16:04 +08:00
mtr
mu
nat-traverse
nbd nbd: 3.14 -> 3.17 2018-06-23 22:32:15 +02:00
ncftp
ndisc6 treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
ndjbdns
netalyzr
netboot
netcat netcat-gnu: move to pkgs/tools/networking/netcat 2018-04-27 19:32:19 -05:00
nethogs
netkit/tftp treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
netmask
netrw treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
netselect
netsniff-ng
network-manager networkmanager-vpnc: 1.2.4 -> 1.2.6 2018-07-23 22:44:34 +02:00
nfdump
ngrep
ngrok-1 pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
ngrok-2 ngrok: enable darwin build 2018-04-04 15:45:19 +02:00
noip treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
nss-mdns nss-mdns: fix build w/musl 2018-04-30 18:45:22 -05:00
nss-pam-ldapd
ntopng
ntp pps-tools: init at 1.0.2, enable for chrony, gpsd, ntp (#42889) 2018-07-04 11:28:07 +00:00
nuttcp Take me (viric) out of most maintenance 2018-07-22 21:50:19 +02:00
nylon Take me (viric) out of most maintenance 2018-07-22 21:50:19 +02:00
nyx nyx: init at 2.0.4 (#43139) 2018-07-07 17:03:20 +02:00
nzbget nzbget: 19.1 -> 20.0 2018-06-09 21:21:52 +02:00
ocproxy
ocserv ocserv: init at 0.12.1 (#42871) 2018-08-01 21:39:09 +02:00
offlineimap treewide: remove aliases in nixpkgs 2018-07-18 23:25:20 -04:00
olsrd
openconnect
openfortivpn openfortivpn: 1.7.0 -> 1.7.1 2018-06-19 16:20:01 +00:00
openntpd
openresolv
opensm
openssh pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
openvpn treewide: http to https 2018-04-30 21:39:20 -07:00
p2p bittornado: init at unstable-2018-02-09 (#43770) 2018-07-31 14:23:15 +02:00
packetdrill
pacparser pacparser: fix build after #28029 2018-05-29 15:10:00 +00:00
par2cmdline
pcapc
pcapfix
pdnsd
pdsh
philter
phodav phodav: init at 2.2 2018-05-29 19:26:59 +03:00
pingtcp
pirate-get pirate-get: add missing dependency 2018-06-22 13:09:47 +02:00
pixiewps
polygraph
polysh
ppp ppp: fix build with newer kernel headers 2018-03-28 23:50:42 +01:00
pptp
pptpd
privoxy
proxychains
pssh pssh: add explicit references to openssh and rsync 2018-04-27 01:12:08 +02:00
pwnat
pykms
quicktun
radsecproxy
radvd
ratools
reaver-wps
reaver-wps-t6x
redir
redsocks redsocks: add self as maintainer 2018-07-29 15:58:50 +09:00
ripmime
rp-pppoe treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
s3cmd s3cmd: 2.0.1 -> 2.0.2 2018-07-18 07:46:21 -07:00
s3gof3r pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
s4cmd s4cmd: init at 2.0.1 2018-07-12 23:08:36 -04:00
s6-dns s6-dns: 2.2.0.1 -> 2.3.0.0 2018-07-27 17:48:32 +02:00
s6-networking s6-networking: add ssl support (libressl by default) 2018-07-27 17:48:32 +02:00
samplicator
shadowfox shadowfox: init at 1.5.2 (#42313) 2018-06-27 23:57:14 +02:00
shadowsocks-libev pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
shncpd
siege
simpleproxy
sipcalc
sipsak
skydive pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
slimrat
smbldaptools treewide: fix build with disallowed aliases (#43872) 2018-07-21 22:03:24 -04:00
smokeping treewide: fix build with disallowed aliases (#43872) 2018-07-21 22:03:24 -04:00
snabb
socat
speedtest-cli speedtest-cli: 2.0.1 -> 2.0.2 2018-06-13 20:50:05 -07:00
spiped treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
spoofer [bot] treewide: remove unused 'inherit' in let blocks 2018-07-20 19:38:19 +00:00
srelay pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
ssh-ident
sshpass
ssldump treewide: fix derivation names 2018-05-28 05:59:57 -07:00
ssmtp treewide: remove platform assertions 2018-05-03 13:09:20 -05:00
sstp
strongswan treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
stubby stubby: 0.2.2 -> 0.2.3 (#40465) 2018-05-16 15:08:23 +02:00
stun
stunnel stunnel: 5.45 -> 5.46 2018-05-30 09:23:17 -05:00
subfinder subfinder: remove from its own deps 2018-07-16 00:04:43 +02:00
surfraw
swagger-codegen
swaks treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
swec
tcpdump pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
tcpflow
tcpreplay
tcptraceroute pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
telepresence telepresence: 0.67 -> 0.85 (#43116) 2018-07-06 19:23:43 +02:00
tftp-hpa pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
tgt
tinc pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
tlspool tlspool: 20170123 -> 20180227 and fix 2018-03-30 21:21:47 +02:00
toxvpn toxvpn: 2017-06-25 -> 2018-04-17 2018-04-30 07:55:07 +08:00
tracebox
traceroute
trickle treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
ua pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
ucspi-tcp treewide: http -> https sources (#42676) 2018-06-28 20:43:35 +02:00
udptunnel
uget
uget-integrator uget-integrator: init at 1.0.0 2018-04-30 09:07:03 -03:00
unbound python27Packages.pyunbound: 1.6.0 -> 1.7.3 (#42952) 2018-07-04 16:28:02 +02:00
uqmi
urlwatch urlwatch: 2.11 -> 2.13 2018-06-07 22:40:06 -07:00
uwimap
vde2
vlan
vpnc
vtun
wakelan
wavemon
wbox
webalizer
weighttp
wget wget: 1.19.4 -> 1.19.5 for CVE-2018-0494 2018-05-07 03:00:22 +02:00
whois whois: 5.3.1 -> 5.3.2 2018-07-16 21:33:00 -05:00
wicd pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
wireguard-go wireguard{,-go,-tools}: 0.0.20180531 -> 0.0.20180613 2018-06-14 19:45:15 +00:00
wireguard-tools wireguard: 0.0.20180625 -> 0.0.20180708 (#43318) 2018-07-11 10:33:41 +02:00
wol
wolfebin
wrk
wrk2
wuzz
x11-ssh-askpass
xl2tpd xl2tpd: 1.3.10.1 -> 1.3.12 2018-07-03 07:10:39 -07:00
xnbd
yrd yrd: init at 0.5.3 2018-05-16 15:12:19 +03:00
zap pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
zerotierone zerotierone: 1.2.8 -> 1.2.10 2018-06-18 18:17:57 -07:00
zssh