public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
216,168 Commits 1 Branch 0 Tags
a2437c37af33dabdc4e8588905ba2dd6292b94de
Commit Graph
93 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Emily 4ed98d69ed nixos/nginx: use Mozilla Intermediate TLS configuration 
The configuration at https://ssl-config.mozilla.org/#server=nginx&config=intermediate
is reliably kept up-to-date in terms of security and compatible with a
wide range of clients. They've probably had more care and thought put
into them than our defaults, and will be easier to keep updated in
the future.

The only removed (rather than changed) configuration option here is
ssl_ecdh_curve, per https://github.com/mozilla/server-side-tls/issues/189.

Resolves #80952.
 2020-03-06 13:08:56 +00:00
Emily ffb7b984b2 nixos/acme: add extraLegoRenewFlags option 2020-02-29 16:44:04 +00:00
Emily b522aeda5a nixos/acme: add ocspMustStaple option 2020-02-29 16:44:04 +00:00
Emily 7b14bbd734 nixos/acme: adjust renewal timer options 
The current weekly setting causes every NixOS server to try to renew
its certificate at midnight on the dot on Monday. This contributes to
the general problem of periodic load spikes for Let's Encrypt; NixOS
is probably not a major contributor to that problem, but we can lead by
example by picking good defaults here.

The values here were chosen after consulting with @yuriks, an SRE at
Let's Encrypt:

* Randomize the time certificates are renewed within a 24 hour period.

* Check for renewal every 24 hours, to ensure the certificate is always
  renewed before an expiry notice is sent out.

* Increase the AccuracySec (thus lowering the accuracy(!)), so that
  systemd can coalesce the renewal with other timers being run.

  (You might be worried that this would defeat the purpose of the time
  skewing, but systemd is documented as avoiding this by picking a
  random time.)
 2020-02-29 14:03:36 +00:00
Emily 6eb45bf38a source-han-{sans,serif,mono}: {update,refactor,init} 
* source-han-sans: 1.004R -> 2.001
* source-han-serif: switch to Super OTC
* source-han-mono: init at 1.002

The Source Han fonts now use shared package infrastructure, and the
Super OTC distributions, which unify the various scripts into a single
bundle file, improving automatic font selection and reducing overall
disk space usage. This also means that the Traditional
Chinese—Hong Kong language variant is now included.

The old package names including language are aliased to the Super OTC
bundle packages.
 2020-02-29 14:57:27 +03:00
Emily cf792da835 noto-fonts-cjk: 1.004 -> 2.001 2020-02-29 14:43:02 +03:00
Emily fe690a84eb noto-fonts{,-extra}: 2018-11-30 -> 2020-01-23 2020-02-29 14:09:23 +03:00
Emily 05a9b7fe2a fonts/gdouros: correct license to unfree 2020-02-29 03:54:48 +03:00
Emily 6d3fc35620 pypy{,3}: use openssl_1_1 
"We now support building PyPy with OpenSSL 1.1 in our built-in _ssl
module, as well as maintaining support for previous versions."
-- https://pypy.readthedocs.io/en/latest/release-pypy2.7-v5.6.0.html
 2020-02-28 16:06:20 +00:00
Emily 8ecbd97f82 nixos/acme: move the crt to fullchain.pem 
lego already bundles the chain with the certificate,[1] so the current
code, designed for simp_le, was resulting in duplicate certificate
chains, manifesting as "Chain issues: Incorrect order, Extra certs" on
the Qualys SSL Server Test.

cert.pem stays around as a symlink for backwards compatibility.

[1] https://github.com/go-acme/lego/blob/5cdc0002e9abb2463fffc962dadc3479f72d7486/acme/api/certificate.go#L40-L44
 2020-02-23 04:10:34 +00:00
Emily 2cb5084088 weechatScripts.weechat-autosort: 3.4 -> 3.8 2020-02-22 00:29:20 +00:00
Emily 3d3ba53897 gomuks: 2019-06-28 -> 2020-02-19 2020-02-19 12:44:58 +00:00
Emily 3388643b8e flashrom: switch to Meson build and update deps 2020-02-16 20:19:09 +00:00
Emily 7f1ab0505c merriweather-sans: init at 1.008 2020-02-11 20:40:12 +00:00
Emily 21ea3ddf60 merriweather: init at 2.005 2020-02-11 20:40:12 +00:00
Emily 6957e476f4 weechatScripts.weechat-matrix: unstable-2019-11-10 -> unstable-2020-01-21 2020-02-10 19:57:23 +01:00
Emily ab0b90ec50 python3Packages.matrix-nio: 0.6 -> 0.7.1 2020-02-10 19:57:23 +01:00
Emily 9d45292208 babelstone-han: 12.1.7 -> 13.0.3 2020-02-10 12:55:39 +00:00
Emily fec5ada328 tinyprog: 1.0.24.dev99+ga77f828 -> 1.0.24.dev114+g0zbrvvb 2020-02-08 23:00:07 -06:00
Emily d6640aac70 glasgow: unstable-2019-10-16 -> unstable-2020-02-08 2020-02-08 23:00:07 -06:00
Emily 867b31d5e1 libfx2: unstable-2019-09-23 -> unstable-2020-01-25 2020-02-08 23:00:07 -06:00
Emily b514cc33aa python3Packages.nmigen-soc: init at unstable-2020-02-08 2020-02-08 23:00:07 -06:00
Emily 62d2267a9f python3Packages.nmigen-boards: unstable-2019-10-13 -> unstable-2020-02-06 
Also correct license to BSD2.
 2020-02-08 23:00:07 -06:00
Emily d5dad43699 python3Packages.nmigen: unstable-2019-10-17 -> unstable-2019-02-08 
Also correct license to BSD2.
 2020-02-08 23:00:07 -06:00
Emily bcf081719b pythonPackages.pyvcd: 0.1.6 -> 0.1.7 2020-02-08 23:00:07 -06:00
Emily ff819cdd12 nextpnr: 2019.10.13 -> 2020.02.04 2020-02-08 23:00:07 -06:00
Emily f43d9bf5ed trellis: 2019.10.13 -> 2020.02.04 
This also fixes the package to actually install the databases required
for nextpnr, oops...
 2020-02-08 23:00:07 -06:00
Emily c2fd1a9418 icestorm: use passthru attribute 2020-02-08 23:00:07 -06:00
Emily a14a32fd75 symbiyosys: 2019.10.11 -> 2020.02.08 2020-02-08 23:00:07 -06:00
Emily 397c4cdd75 yosys: 2020.02.01 -> 2020.02.07 2020-02-08 23:00:07 -06:00
Emily 6d046e1079 openresty: rebase on top of nginx package 
The primary motivation of this change was to allow third-party modules
to be used with OpenResty, but it also results in a significant
reduction of code duplication.
 2020-02-04 19:30:40 -06:00
Emily db3182a65d nginxModules.brotli: v0.1.2 -> unstable 
The fork was merged back upstream but has yet to see a formal release.
 2020-02-04 19:30:40 -06:00
Emily 9fb77128ee imageworsener: init at 1.3.3 2020-01-15 00:28:00 +00:00
Emily 05c0695c6b tor-browser-bundle-bin: 9.0.3 -> 9.0.4 2020-01-10 18:57:02 +00:00
Emily 31ef3b8ec5 stm32loader: 0.5.0 -> 0.5.1 2020-01-01 10:54:31 +01:00
Emily ea0b2370fa whipper: 0.9.0 -> 0.9.1.dev7+g9e95f06 2019-12-16 17:11:18 +01:00
Emily 85dce63fa9 whipper: 0.7.3 -> 0.9.0 2019-12-14 03:21:44 +00:00
Emily 1314521936 pythonPackages.pycdio: fix for Python 3 2019-12-14 03:21:34 +00:00
Emily d6bc2d982a git-revise: 0.5.0 -> 0.5.1 2019-11-13 12:43:12 +00:00
Emily ce60639c25 python3Packages.nmigen-boards: unstable-2019-09-23 -> unstable-2019-10-13 2019-10-19 12:26:49 -05:00
Emily c64015d5ce glasgow: unstable-2019-09-28 -> unstable-2019-10-16 2019-10-19 12:26:49 -05:00
Emily bf8ebc03b9 python3Packages.nmigen: unstable-2019-09-28 -> unstable-2019-10-17 2019-10-19 12:26:49 -05:00
Emily fecfbe18bd symbiyosys: 2019.08.13 -> 2019.10.11 2019-10-19 12:26:49 -05:00
Emily 94fc232b72 nextpnr: 2019.09.28 -> 2019.10.13 2019-10-19 12:26:49 -05:00
Emily b97a11643a trellis: 2019.09.27 -> 2019.10.13 2019-10-19 12:26:49 -05:00
Emily 0d026cf62f yosys: 2019.09.27 -> 2019.10.18 2019-10-19 12:26:49 -05:00
Emily 2c2d9f347d haskellPackages.clash-{ghc,lib,prelude}: mark unbroken 2019-10-18 22:50:37 +02:00
Emily 04f71c2f8f git-revise: 0.4.2 -> 0.5.0 2019-10-05 00:33:47 +01:00
Emily 67393f6441 glasgow: enable tests 2019-09-28 16:55:21 -05:00
Emily abcd56bd77 glasgow: unstable-2019-08-31 -> unstable-2019-09-28 2019-09-28 16:55:21 -05:00
Emily 32c6c0ef30 libfx2: unstable-2019-08-27 -> unstable-2019-09-23 2019-09-28 16:55:21 -05:00
Emily 32c4e9e722 python3Packages.nmigen-boards: unstable-2019-08-30 -> unstable-2019-09-23 2019-09-28 16:55:21 -05:00
Emily f68ec22dcc python3Packages.nmigen: unstable-2019-08-31 -> unstable-2019-09-28 2019-09-28 16:55:21 -05:00
Emily 97ca1528a0 nextpnr: enable tests 2019-09-28 16:55:21 -05:00
Emily 9f7165de66 nextpnr: 2019.08.31 -> 2019.09.28 2019-09-28 16:55:21 -05:00
Emily ee96061946 trellis: 2019.09.01 -> 2019.09.27 2019-09-28 16:55:21 -05:00
Emily 391ce62306 icestorm: 2019.08.31 -> 2019.09.13 2019-09-28 16:55:21 -05:00
Emily 26d26f77a6 yosys: enable tests 2019-09-28 16:55:21 -05:00
Emily b819ce615d yosys: 2019.09.01 -> 2019.09.27 2019-09-28 16:55:21 -05:00
Emily b2c482b700 verilog: extend platforms 2019-09-28 16:55:21 -05:00
Emily 12ae04518b nextpnr: (hopefully) fix build on Darwin 
Fixes #67898, hopefully.
 2019-09-02 16:11:17 -05:00
Emily d13e64641d icestorm: use libftdi1 rather than libftdi 2019-09-02 16:11:17 -05:00
Emily c9625fa9ac icestorm: 2019.08.15 -> 2019.08.31 2019-09-02 16:11:17 -05:00
Emily f9333358e1 sdcc: extend platforms 2019-09-01 14:22:49 -05:00
Emily 2450e41497 trellis: 2019.08.09 -> 2019.09.01 2019-09-01 14:22:49 -05:00
Emily 5eb237659c pythonPackages.gcutil: remove per TODO 
Pretty sure 19.03 has been branched off by now.
 2019-09-01 14:22:49 -05:00
Emily cb5b674b58 {glasgow,libfx2}: init at 2018-{09-01,08-27} 2019-09-01 14:22:49 -05:00
Emily 321efae699 python3Packages.nmigen{,-boards}: init at unstable-2019-08-{31,30} 2019-09-01 14:22:49 -05:00
Emily cd4cba3e88 nextpnr: 2019.08.21 -> 2019.08.31 2019-09-01 14:22:49 -05:00
Emily d1dfaa79e3 symbiyosys: fix path to bash (again) 
/usr/bin/env works on NixOS normally, but previously sby would fail if
used from inside the Nix sandbox.
 2019-09-01 14:22:49 -05:00
Emily 89ff2c7b9d yosys: 2019.08.22 -> 2019.09.01 2019-09-01 14:22:49 -05:00
Emily 6dba65eeba libftdi: extend platforms and fix on Darwin 2019-08-23 02:14:40 -05:00
Emily 05c54717f8 symbiyosys: extend platforms 2019-08-23 02:14:40 -05:00
Emily 771b93817d yosys: update Makefile patches 2019-08-23 02:14:40 -05:00
Emily cec8795379 yosys: 2019.08.13 -> 2019.08.22 2019-08-23 02:14:40 -05:00
Emily c1620c4635 nextpnr: fix GUI 2019-08-23 02:14:40 -05:00
Emily 35994c61d6 nextpnr: remove obsolete trellis hack 2019-08-23 02:14:40 -05:00
Emily a5ac052dd3 nextpnr: 2018.08.10 -> 2018.08.21 
Note: the previous sha256 was incorrect.
 2019-08-23 02:14:40 -05:00
Emily 0c1c67f257 trellis: extend platforms 2019-08-23 02:14:40 -05:00
Emily 39bf5d5ec7 icestorm: 2019.08.08 -> 2019.08.15 2019-08-23 02:14:40 -05:00
Emily 6aa1b0acaf tinyprog: init at 1.0.24.dev99+ga77f828 2019-08-14 21:10:05 -05:00
Emily 527684b1e2 pythonPackages.jsonmerge: init at 1.6.1 2019-08-14 21:10:05 -05:00
Emily a51e3987ad symbiyosys: 2019.04.18 -> 2019.08.13 2019-08-14 00:14:22 -07:00
Emily 830801805d yosys: 2019.04.23 -> 2019.08.13 2019-08-14 00:14:22 -07:00
Emily a0824ccff7 nextpnr: 2019.04.19 -> 2019.08.10 2019-08-14 00:14:22 -07:00
Emily 86ed03ae4c trellis: 2019.04.22 -> 2019.08.09 2019-08-14 00:14:22 -07:00
Emily 6f4f493891 icestorm: 2019.04.16 -> 2019.08.08 2019-08-14 00:14:22 -07:00
Emily d792c84f35 blackmagic: 1.6.1 -> unstable-2019-08-13 2019-08-13 17:10:02 -07:00
Emily ec07b882b3 pypy{2,27,3,35 -> 36}: 7.0.0 -> 7.1.1 2019-08-13 16:49:27 -07:00
Emily 5638dd55e3 pythonInterpreters.pypy{27,35 -> 36}_prebuilt: 6.0.0 -> 7.1.1 2019-08-13 16:49:27 -07:00
Emily a010a7b665 git-revise: init at 0.4.2 
A flexible and fast alternative to `git commit --amend`/`git rebase`.

See also:

* https://mystor.github.io/git-revise.html
* https://lobste.rs/s/5gdnrt/introducing_git_revise
* https://git-revise.readthedocs.io/en/latest/
 2019-08-11 22:58:39 -07:00
Emily 42e55dbe9a stm32loader: init at 0.5.0 2019-08-11 18:46:33 -07:00
Emily 51bfd931ed maintainers: add emily 2019-08-11 18:26:46 -07:00