nixpkgs/nixos/modules/services
Martin Weinelt 79e675444c
nixos/matrix-synapse: protect created files
Enforce UMask on the systemd unit to restrict the permissions of files
created. Especially the homeserver signing key should not be world
readable, and media is served through synapse itself, so no other user
needs access to these files.

Use a prestart chmod to fixup the permissions on the signing key.
2021-05-22 20:30:49 +02:00
..
admin
amqp
audio nixos/mpd: Use replace-secret to avoid leaking secrets 2021-05-19 09:32:22 +02:00
backup Merge pull request #120622 from symphorien/duplicity-master 2021-05-20 19:00:59 +00:00
blockchain/ethereum nixos/geth: initial service 2021-02-23 19:28:51 +01:00
cluster Fix description for services.kubernetes.addonManager.enable (#71448) 2021-05-19 13:49:27 -07:00
computing nixos/services/foldingathome: Add an option to set the "nice level" (#122864) 2021-05-18 18:44:52 +02:00
continuous-integration treewide: remove nand0p as maintainer 2021-05-17 01:50:49 +02:00
databases clickhouse: 20.11.4.13-stable -> 21.3.11.5-lts 2021-05-19 14:08:46 -07:00
desktops nixos/flatpak: Remove guiPackages internal option 2021-05-18 14:06:23 +02:00
development python3Packages.scikitlearn: rename to scikit-learn 2021-05-17 17:41:36 +07:00
display-managers nixos/greetd: Add greetd module (#118294) 2021-04-06 19:35:32 +00:00
editors
games nixos/terraria: open ports in the firewall 2021-05-20 12:11:08 -07:00
hardware nixos/fancontrol: back to running as root 2021-05-17 00:00:01 -07:00
logging nixos/promtail: Set TimeoutStopSec=10 2021-04-28 21:02:11 +02:00
mail nixos/mailman: fix documentation option links 2021-05-14 18:33:24 +02:00
misc nixos/matrix-synapse: protect created files 2021-05-22 20:30:49 +02:00
monitoring Merge pull request #122833 from helsinki-systems/feat/prometheus-metric-relabel 2021-05-21 23:13:41 +02:00
network-filesystems nixos: convert netatalk to settings-style configuration 2021-05-20 17:39:28 +02:00
networking Merge pull request #123828 from Lassulus/solanum2 2021-05-21 23:23:01 +02:00
printing nixos/printing: simplify filterGutenprint function 2021-03-14 11:59:00 +01:00
scheduling nixos/atd: prefer 'install' over 'mkdir/chmod/chown' 2021-05-01 15:16:19 +02:00
search
security treewide: remove nand0p as maintainer 2021-05-17 01:50:49 +02:00
system nixos/self-deploy: init (#120940) 2021-05-18 08:29:37 -07:00
torrent nixos/services/torrent/transmission.nix: add a missing apparmor rule 2021-05-05 22:47:52 +02:00
ttys nixos/getty: add services.getty.extraArgs 2021-02-26 13:17:04 +01:00
video nixos/mirakurun: add polkit rule for smart card access (#122066) 2021-05-12 13:57:49 -04:00
wayland cage: drop maintainership (#121174) 2021-04-29 18:07:13 +02:00
web-apps Merge pull request #121778 from talyz/keycloak-security 2021-05-21 16:55:26 +02:00
web-servers Merge pull request #122825 from Izorkin/update-duplicates-systemcallfilters 2021-05-17 12:06:06 +01:00
x11 Merge pull request #123507 from jtojnar/no-flatpak-guipkgs 2021-05-19 16:33:56 +02:00