commit 7d102d113abd84dd29bed71cd589f1c68a7f7f3d · pyrox.dev/nixpkgs

+2 -2

nixos/modules/services/databases/cockroachdb.nix

···

       68
        
                 like datacenter.  The tiers and order must be the same on all nodes.

     

       69
        
                 Including more tiers is better than including fewer. For example:

     

       70
        
       

     

       71
       -
                 <literal>

     

       72
        
                     country=us,region=us-west,datacenter=us-west-1b,rack=12

     

       73
        
                     country=ca,region=ca-east,datacenter=ca-east-2,rack=4

     

       74
        
       

     

       75
        
                     planet=earth,province=manitoba,colo=secondary,power=3

     

       76
       -
                 </literal>

     

       77
        
               '';

     

       78
        
             };

     

       79

···

       68
        
                 like datacenter.  The tiers and order must be the same on all nodes.

     

       69
        
                 Including more tiers is better than including fewer. For example:

     

       70
        
       

     

       71
       +
                 <programlisting>

     

       72
        
                     country=us,region=us-west,datacenter=us-west-1b,rack=12

     

       73
        
                     country=ca,region=ca-east,datacenter=ca-east-2,rack=4

     

       74
        
       

     

       75
        
                     planet=earth,province=manitoba,colo=secondary,power=3

     

       76
       +
                 </programlisting>

     

       77
        
               '';

     

       78
        
             };

     

       79

+2 -2

nixos/modules/services/hardware/lcd.nix

···

       72
        
                   values, you can run the <command>lsusb</command> command. Example

     

       73
        
                   output:

     

       74
        
       

     

       75
       -
                   <literal>

     

       76
        
                   Bus 005 Device 002: ID 0403:c630 Future Technology Devices International, Ltd lcd2usb interface

     

       77
       -
                   </literal>

     

       78
        
       

     

       79
        
                   In this case the vendor id is 0403 and the product id is c630.

     

       80
        
                 '';

···

       72
        
                   values, you can run the <command>lsusb</command> command. Example

     

       73
        
                   output:

     

       74
        
       

     

       75
       +
                   <programlisting>

     

       76
        
                   Bus 005 Device 002: ID 0403:c630 Future Technology Devices International, Ltd lcd2usb interface

     

       77
       +
                   </programlisting>

     

       78
        
       

     

       79
        
                   In this case the vendor id is 0403 and the product id is c630.

     

       80
        
                 '';

+4 -4

nixos/modules/services/logging/awstats.nix

···

       29
        
                 The log file to be scanned.

     

       30
        
       

     

       31
        
                 For mail, set this to

     

       32
       -
                 <literal>

     

       33
        
                 journalctl $OLD_CURSOR -u postfix.service | ''${pkgs.perl}/bin/perl ''${pkgs.awstats.out}/share/awstats/tools/maillogconvert.pl standard |

     

       34
       -
                 </literal>

     

       35
        
               '';

     

       36
        
             };

     

       37
        
       

     
···

       42
        
                 The log format being used.

     

       43
        
       

     

       44
        
                 For mail, set this to

     

       45
       -
                 <literal>

     

       46
        
                 %time2 %email %email_r %host %host_r %method %url %code %bytesd

     

       47
       -
                 </literal>

     

       48
        
               '';

     

       49
        
             };

     

       50

···

       29
        
                 The log file to be scanned.

     

       30
        
       

     

       31
        
                 For mail, set this to

     

       32
       +
                 <programlisting>

     

       33
        
                 journalctl $OLD_CURSOR -u postfix.service | ''${pkgs.perl}/bin/perl ''${pkgs.awstats.out}/share/awstats/tools/maillogconvert.pl standard |

     

       34
       +
                 </programlisting>

     

       35
        
               '';

     

       36
        
             };

     

       37
        
       

     
···

       42
        
                 The log format being used.

     

       43
        
       

     

       44
        
                 For mail, set this to

     

       45
       +
                 <programlisting>

     

       46
        
                 %time2 %email %email_r %host %host_r %method %url %code %bytesd

     

       47
       +
                 </programlisting>

     

       48
        
               '';

     

       49
        
             };

     

       50

+6 -6

nixos/modules/services/networking/3proxy.nix

···

       23
        
       

     

       24
        
               Example users file with plain-text passwords:

     

       25
        
       

     

       26
       -
               <literal>

     

       27
        
                 test1:CL:password1

     

       28
        
                 test2:CL:password2

     

       29
       -
               </literal>

     

       30
        
       

     

       31
        
               Example users file with md5-crypted passwords:

     

       32
        
       

     

       33
       -
               <literal>

     

       34
        
                 test1:CR:$1$tFkisVd2$1GA8JXkRmTXdLDytM/i3a1

     

       35
        
                 test2:CR:$1$rkpibm5J$Aq1.9VtYAn0JrqZ8M.1ME.

     

       36
       -
               </literal>

     

       37
        
       

     

       38
        
               You can generate md5-crypted passwords via https://unix4lyfe.org/crypt/

     

       39
        
               Note that htpasswd tool generates incompatible md5-crypted passwords.

     
···

       130
        
       

     

       131
        
                     Double authentication is possible, e.g.

     

       132
        
       

     

       133
       -
                     <literal>

     

       134
        
                       {

     

       135
        
                         auth = [ "iponly" "strong" ];

     

       136
        
                         acl = [

     
···

       144
        
                           }

     

       145
        
                         ];

     

       146
        
                       }

     

       147
       -
                     </literal>

     

       148
        
                     In this example strong username authentication is not required to access 192.168.0.0/16.

     

       149
        
                   '';

     

       150
        
                 };

···

       23
        
       

     

       24
        
               Example users file with plain-text passwords:

     

       25
        
       

     

       26
       +
               <programlisting>

     

       27
        
                 test1:CL:password1

     

       28
        
                 test2:CL:password2

     

       29
       +
               </programlisting>

     

       30
        
       

     

       31
        
               Example users file with md5-crypted passwords:

     

       32
        
       

     

       33
       +
               <programlisting>

     

       34
        
                 test1:CR:$1$tFkisVd2$1GA8JXkRmTXdLDytM/i3a1

     

       35
        
                 test2:CR:$1$rkpibm5J$Aq1.9VtYAn0JrqZ8M.1ME.

     

       36
       +
               </programlisting>

     

       37
        
       

     

       38
        
               You can generate md5-crypted passwords via https://unix4lyfe.org/crypt/

     

       39
        
               Note that htpasswd tool generates incompatible md5-crypted passwords.

     
···

       130
        
       

     

       131
        
                     Double authentication is possible, e.g.

     

       132
        
       

     

       133
       +
                     <programlisting>

     

       134
        
                       {

     

       135
        
                         auth = [ "iponly" "strong" ];

     

       136
        
                         acl = [

     
···

       144
        
                           }

     

       145
        
                         ];

     

       146
        
                       }

     

       147
       +
                     </programlisting>

     

       148
        
                     In this example strong username authentication is not required to access 192.168.0.0/16.

     

       149
        
                   '';

     

       150
        
                 };

+2 -2

nixos/modules/services/networking/hylafax/options.nix

···

       180
        
               readable only by the <literal>uucp</literal> user.

     

       181
        
               See hosts.hfaxd(5) for details.

     

       182
        
               This configuration permits access for all users:

     

       183
       -
               <literal>

     

       184
        
                 environment.etc."hosts.hfaxd" = {

     

       185
        
                   mode = "0600";

     

       186
        
                   user = "uucp";

     

       187
        
                   text = ".*";

     

       188
        
                 };

     

       189
       -
               </literal>

     

       190
        
               Note that host-based access can be controlled with

     

       191
        
               <option>config.systemd.sockets.hylafax-hfaxd.listenStreams</option>;

     

       192
        
               by default, only 127.0.0.1 is permitted to connect.

···

       180
        
               readable only by the <literal>uucp</literal> user.

     

       181
        
               See hosts.hfaxd(5) for details.

     

       182
        
               This configuration permits access for all users:

     

       183
       +
               <programlisting>

     

       184
        
                 environment.etc."hosts.hfaxd" = {

     

       185
        
                   mode = "0600";

     

       186
        
                   user = "uucp";

     

       187
        
                   text = ".*";

     

       188
        
                 };

     

       189
       +
               </programlisting>

     

       190
        
               Note that host-based access can be controlled with

     

       191
        
               <option>config.systemd.sockets.hylafax-hfaxd.listenStreams</option>;

     

       192
        
               by default, only 127.0.0.1 is permitted to connect.

+2 -2

nixos/modules/services/security/hockeypuck.nix

···

       49
        
               the database yourself.

     

       50
        
       

     

       51
        
               Example:

     

       52
       -
               <literal>

     

       53
        
                 services.postgresql = {

     

       54
        
                   enable = true;

     

       55
        
                   ensureDatabases = [ "hockeypuck" ];

     
···

       58
        
                     ensurePermissions."DATABASE hockeypuck" = "ALL PRIVILEGES";

     

       59
        
                   }];

     

       60
        
                 };

     

       61
       -
               </literal>

     

       62
        
             '';

     

       63
        
           };

     

       64
        
         };

···

       49
        
               the database yourself.

     

       50
        
       

     

       51
        
               Example:

     

       52
       +
               <programlisting>

     

       53
        
                 services.postgresql = {

     

       54
        
                   enable = true;

     

       55
        
                   ensureDatabases = [ "hockeypuck" ];

     
···

       58
        
                     ensurePermissions."DATABASE hockeypuck" = "ALL PRIVILEGES";

     

       59
        
                   }];

     

       60
        
                 };

     

       61
       +
               </programlisting>

     

       62
        
             '';

     

       63
        
           };

     

       64
        
         };

+3 -3

nixos/modules/virtualisation/lxcfs.nix

···

       19
        
                 This enables LXCFS, a FUSE filesystem for LXC.

     

       20
        
                 To use lxcfs in include the following configuration in your

     

       21
        
                 container configuration:

     

       22
       -
                 <code>

     

       23
       -
                   virtualisation.lxc.defaultConfig = "lxc.include = ''${pkgs.lxcfs}/share/lxc/config/common.conf.d/00-lxcfs.conf";

     

       24
       -
                 </code>

     

       25
        
               '';

     

       26
        
             };

     

       27
        
         };

···

       19
        
                 This enables LXCFS, a FUSE filesystem for LXC.

     

       20
        
                 To use lxcfs in include the following configuration in your

     

       21
        
                 container configuration:

     

       22
       +
                 <programlisting>

     

       23
       +
                 virtualisation.lxc.defaultConfig = "lxc.include = ''${pkgs.lxcfs}/share/lxc/config/common.conf.d/00-lxcfs.conf";

     

       24
       +
                 </programlisting>

     

       25
        
               '';

     

       26
        
             };

     

       27
        
         };

+3 -3

nixos/modules/virtualisation/lxd.nix

···

       26
        
       

     

       27
        
                 Most of the time, you'll also want to start lxcfs, so

     

       28
        
                 that containers can "see" the limits:

     

       29
       -
                 <code>

     

       30
       -
                   virtualisation.lxc.lxcfs.enable = true;

     

       31
       -
                 </code>

     

       32
        
               '';

     

       33
        
             };

     

       34

···

       26
        
       

     

       27
        
                 Most of the time, you'll also want to start lxcfs, so

     

       28
        
                 that containers can "see" the limits:

     

       29
       +
                 <programlisting>

     

       30
       +
                 virtualisation.lxc.lxcfs.enable = true;

     

       31
       +
                 </programlisting>

     

       32
        
               '';

     

       33
        
             };

     

       34