Commit Graph

2474 Commits

Author SHA1 Message Date
Jan van Brügge
0d894d40bb nginxModules.njs: fix build 2025-03-06 16:51:03 +00:00
Leona Maroni
3770c96104 nginxModules.modsecurity: v1.0.3 -> 0b4f0cf (unstable)
Update to get compatability to modsecurity 3.0.14.
2025-03-05 22:38:34 +01:00
K900
b157c03c40 nixos/tests/acme: Refactor test suite (#378705) 2025-02-26 10:29:20 +03:00
Lucas Savva
229640ed3a nixos/tests/acme: Refactor test suite
Split tests up based on certain use cases:

- http01-builtin: Tests most functionality of the core module, such
 as the systemd and hashing components, whilst utilising lego's built
 in http01 resolution mechanis.
- dns01: Tests only that DNS01 renewal works as expected.
- nginx: Tests nginx compatability
- httpd: Tests httpd compatability
- caddy: Tests caddy compatability
2025-02-22 23:58:29 +00:00
R. Ryantm
6dd52fd086 tomcat9: 9.0.98 -> 9.0.100 2025-02-17 17:11:30 +00:00
Franz Pletz
534fd4b9c1 nginxModules.zstd: 0.1.1 -> 2024-04-22 (#381037) 2025-02-13 09:11:19 +01:00
Franz Pletz
b2415c5645 nginxModules.zstd: 0.1.1 -> 2024-04-22
Fixes ordering issue that breaks SSI.
2025-02-13 09:06:12 +01:00
Franz Pletz
0317f91517 nginx: add fixed zlib-ng patch 2025-02-11 02:53:58 +01:00
Raito Bezarius
9490b4e085 nginxStable: 1.26.2 -> 1.26.3
Due to https://www.openwall.com/lists/oss-security/2025/02/05/8.

Fix CVE-2025-23419.

Change-Id: I2a341a55467ee67f77f0b133a8e9d3e6243249eb
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2025-02-11 02:53:54 +01:00
Raito Bezarius
ce39f53682 nginxMainline: 1.27.3 -> 1.27.4
Due to https://www.openwall.com/lists/oss-security/2025/02/05/8.

Fix CVE-2025-23419.

Change-Id: Iaac69b5071f02f608cb895338f42f15f7ac25831
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2025-02-11 02:53:31 +01:00
misuzu
1e13e5b37d nginx: Fix cross-OS build (#371960) 2025-02-10 20:17:39 +02:00
Martin Weinelt
909803a20e Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/by-name/au/automatic-timezoned/package.nix
- pkgs/by-name/da/darklua/package.nix
- pkgs/by-name/ki/kittycad-kcl-lsp/package.nix
- pkgs/by-name/li/limbo/package.nix
- pkgs/by-name/mi/minijinja/package.nix
- pkgs/by-name/pa/pay-respects/package.nix
- pkgs/by-name/ri/river-bsp-layout/package.nix
- pkgs/by-name/sv/svgbob/package.nix
- pkgs/by-name/tu/tui-journal/package.nix
- pkgs/by-name/wa/waypipe/package.nix
- pkgs/development/python-modules/zxcvbn-rs-py/default.nix
2025-01-29 16:08:53 +01:00
Wolfgang Walther
1c6126f709 various: replace substituteAll with replaceVars
A few more interesting cases, separated from the big treewide for better
visibility and testing.
2025-01-26 17:18:59 +01:00
Wolfgang Walther
546ece569b libpq: init at 17.2
Resolves #61580
2025-01-19 12:49:21 +01:00
Artemis Tosini
65580eea00 nginx: Fix cross-OS build
nginx uses uname to find the target platform by default.
This works fine when building locally or when building on the same OS
for most architectures, but breaks when building e.g. Linux to BSD.

Explicitly tell the target to the configure script instead.
2025-01-08 00:23:11 +00:00
R. Ryantm
42c0aeb9b7 apacheHttpdPackages.mod_python: 3.5.0.2 -> 3.5.0.4 2025-01-07 09:21:58 +00:00
Peder Bergebakken Sundt
0cd04d3036 treewide: migrate fetchgit rev = "refs/tags/..." to tag 2025-01-04 00:19:17 +01:00
Izorkin
c225f5e642 angie: 1.8.0 -> 1.8.1 2024-12-28 20:00:21 +03:00
Franz Pletz
3caa204810 angie: 1.7.0 -> 1.8.0 (#366780) 2024-12-22 17:10:09 +01:00
Leona Maroni
19123f4015 tomcat9: 9.0.97 -> 9.0.98, tomcat10: 10.1.33 -> 10.1.34 (#366253) 2024-12-20 20:39:02 +01:00
Leona Maroni
774c5c70ab tomcat: 11.0.0 -> 11.0.2 (#366176) 2024-12-20 20:30:10 +01:00
Izorkin
1bea45e135 angie: 1.7.0 -> 1.8.0 2024-12-20 14:50:52 +03:00
Thiago Kenji Okada
82299b86c7 nginxModules.njs: 0.8.4 -> 0.8.7 (#358923) 2024-12-19 11:28:06 +00:00
Weijia Wang
087408a407 couchdb3: 3.4.1 -> 3.4.2 (#361961) 2024-12-19 01:08:55 +01:00
Thomas Gerbet
a15441672e tomcat10: 10.1.33 -> 10.1.34
Fixes CVE-2024-50379.

Changelog:
https://tomcat.apache.org/tomcat-10.1-doc/changelog.html#Tomcat_10.1.34_(schultz)
2024-12-18 19:49:53 +01:00
Thomas Gerbet
998dfeb467 tomcat9: 9.0.97 -> 9.0.98
Fixes CVE-2024-50379.

Changelog:
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.98_(remm)
2024-12-18 19:47:13 +01:00
Arne Keller
8d2c1621eb apache-modules.mod_dnssd: fix path link (#350409) 2024-12-18 17:08:59 +01:00
R. Ryantm
0f294077bb tomcat: 11.0.0 -> 11.0.2 2024-12-18 14:23:37 +00:00
Further
77b9339c6c apache-modules.mod_dnssd: fix path link 2024-12-17 00:58:22 +08:00
misuzu
5319145368 apacheHttpdPackages.mod_dnssd: fix cross compilation (#362066) 2024-12-14 14:14:33 +02:00
ifurther
07087e708f apache-modules.mod_dnssd: update path file link 2024-12-13 23:52:49 +08:00
Silvan Mosberger
4f0dadbf38 treewide: format all inactive Nix files
After final improvements to the official formatter implementation,
this commit now performs the first treewide reformat of Nix files using it.
This is part of the implementation of RFC 166.

Only "inactive" files are reformatted, meaning only files that
aren't being touched by any PR with activity in the past 2 months.
This is to avoid conflicts for PRs that might soon be merged.
Later we can do a full treewide reformat to get the rest,
which should not cause as many conflicts.

A CI check has already been running for some time to ensure that new and
already-formatted files are formatted, so the files being reformatted here
should also stay formatted.

This commit was automatically created and can be verified using

    nix-build a08b3a4d19.tar.gz \
      --argstr baseRev b32a094368
    result/bin/apply-formatting $NIXPKGS_PATH
2024-12-10 20:26:33 +01:00
Sandro
52cca64c3c nginxMainline: 1.27.2 -> 1.27.3 (#360056) 2024-12-09 22:42:18 +01:00
Franz Pletz
b356fafe02 nixos/nginx: don't disable IPC (#360008) 2024-12-09 11:47:44 +01:00
R. Ryantm
16444b18b9 apacheHttpdPackages.mod_wsgi3: 5.0.1 -> 5.0.2 2024-12-08 04:20:42 +00:00
misuzu
719cdf08a5 openresty: make postgres module optional (#362426) 2024-12-06 20:19:21 +02:00
Christoph Heiss
b3eca67865 nixos/openresty: fix build with nginx modules (#362348)
When adding modules to openresty, by either

- using `.override { modules = [ ..]; }` directly
- adding them to `services.nginx.additionalModules` or
- enabling e.g. something like `services.nginx.recommendedZstdSettings`

the build will then fail, as the actual `nginx` binary lands in
`nginx/bin/nginx` for openresty, and is only symlinked to `bin/nginx`
(and `bin/openresty`, for that matter).

This breaks the post-install script for nginx when removing references
to the aforementioned modules, since `remove-references-to` skips
symlinks. Thus, just read the symlink before in this case.

`readlink -fn` will read the symlink if it is one, otherwise just
returns the path itself.

The phase is also moved after the package-specific postInstall phase, at
that might move binaries around or create symlinks - as is the case for
openresty.

Can be easily reproduced using e.g.:

$ nix build --impure -E 'with import ./. {}; openresty.override { modules = [ nginxModules.zstd ]; }' -L

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-12-06 20:15:26 +02:00
Christoph Heiss
cb29290646 openresty: make postgres module optional
Enables users who don't need it to easily disable it. Defaults to on to
not regress any users.

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-12-06 15:00:24 +01:00
Colin
8352beba67 apacheHttpdPackages.mod_dnssd: fix cross compilation 2024-12-05 12:40:42 +00:00
Colin
0d6139a4bb apacheHttpd: fix shebangs in cross-compiled apxs output
apxs is a tool run at build time (hence why it's in the .dev output),
so perl needs to be in nativeBuildInputs for patchShebangs to give the
right shebang.
2024-12-05 12:40:42 +00:00
R. Ryantm
1c1cc8c0c0 couchdb3: 3.4.1 -> 3.4.2 2024-12-05 04:55:40 +00:00
Thomas Gerbet
b5dea63a56 apacheHttpd: remove support for mod_tls
It has been removed upstream and is now managed independently.

988f449632
2024-11-30 15:20:40 +01:00
Sergei Trofimovich
44636db274 nginxMainline: 1.27.2 -> 1.27.3
Changes: https://nginx.org/en/CHANGES
2024-11-29 06:15:12 +00:00
toastal
6832176666 nginxModules.subsFilter: 2022-01-24 (#359905)
Fixes issues with newer PCRE
2024-11-29 06:45:48 +01:00
poscat
23ea20a03f nginxModules.njs: 0.8.4 -> 0.8.7
also switches from hg to github since nginx
seems to be transitioning to github
2024-11-29 11:26:29 +08:00
Sandro Jäckel
996f9e4f28 nixos/nginx: don't disable IPC
This also disables the memfd_create syscall which is required for
certain regex's when using pcre2.

see https://github.com/NixOS/nixpkgs/pull/355989#issuecomment-2506841275
2024-11-29 00:41:46 +01:00
Franz Pletz
352dc5c800 nginx: fix compatibility with zlib-ng (#358812) 2024-11-27 14:34:52 +01:00
Tristan Ross
7818372094 nginx: fix building with clang on linux (#358999) 2024-11-26 20:39:01 -08:00
Franz Pletz
5ae0b27ab9 nginx: fix compatibility with zlib-ng
Fix #357522.
2024-11-26 20:35:28 +01:00
Philipp Bartsch
8571045ea9 nginx: fix building with clang on linux
Building pkgsLLVM.nginx got the same errors as the ones previously
disabled for darwin.
2024-11-25 14:29:14 +01:00