nixos/modules/services/security/

nixos/modules/services/ · 57 packages and modules · 76 open pull requests

Busy below

vaultwarden 2 · cfssl 1 · crowdsec 1 · howdy 1 · spire 1

Packages and modules 57

nixos/crowdsec 3 8

nixos/kanidm 5 2

nixos/tor 5 2

nixos/usbguardno maintainer 7 0

nixos/authelia 4 0

nixos/crowdsec-firewall-bouncer 3 1

nixos/fprintdno maintainer 4 0

nixos/step-cano maintainer 4 0

nixos/clamavno maintainer 2 1

nixos/fail2banno maintainer 3 0

nixos/sshguardno maintainer 2 1

nixos/aesmdno maintainer 2 0

nixos/howdyno maintainer 1 1

nixos/intune 2 0

nixos/pocket-id 1 1

nixos/timekpr 2 0

nixos/vault-agent 2 0

nixos/vaultwarden 2 0

nixos/bitwarden-directory-connector-cli 1 0

nixos/certmgrno maintainer 1 0

nixos/cfsslno maintainer 1 0

nixos/e-imzo 1 0

nixos/oauth2-proxy-nginxno maintainer 1 0

nixos/paretosecurityno maintainer 1 0

nixos/pass-secret-service 1 0

nixos/physlockno maintainer 1 0

nixos/rosec 1 0

nixos/sks 1 0

nixos/spire 1 0

nixos/torsocksno maintainer 1 0

nixos/vaultno maintainer 0 1

nixos/yubikey-agent 0 1

nixos/canaille 0 0

nixos/endlessh 0 0

nixos/endlessh-gono maintainer 0 0

nixos/esdm 0 0

nixos/havegedno maintainer 0 0

nixos/hockeypuck 0 0

nixos/hologram-agentno maintainer 0 0

nixos/hologram-serverno maintainer 0 0

nixos/infnoiseno maintainer 0 0

nixos/jitterentropy-rngd 0 0

nixos/mungeno maintainer 0 0

nixos/nginx-ssono maintainer 0 0

nixos/oauth2-proxyno maintainer 0 0

nixos/openbaono maintainer 0 0

nixos/opensnitch 0 0

nixos/reaction 0 0

nixos/shibboleth-spno maintainer 0 0

nixos/ssh-agent-switcher 0 0

nixos/sslmate-agentno maintainer 0 0

nixos/tang 0 0

nixos/tinyauth 0 0

nixos/torifyno maintainer 0 0

nixos/tsidp 0 0

nixos/warpgate 0 0

Pull requests 76

nixos/dbus: stop listing the system profile as an explicit D-Bus service dir

#573943 by r-vdp · opened 2d ago · checks pass

nixos/vaultwarden: handle backup errors and empty attachment globs

#573075 by archandanime · opened 4d ago

nixos/kanidm: remove assertions about known entities

#571187 by c2fc2f · opened 9d ago · checks pass

nixos/dbus: register D-Bus service packages in services.dbus.packages

#571158 by ccicnce113424 · opened 9d ago

[WIP] nixos/acme-proxy: init module draft

#570035 by ser · opened 12d ago · checks fail

Add `actions` and `filters` options to `services.fail2ban`

#565770 by Deric-W · opened 3w ago

nixos/intune: enable daemon socket and agent timer

#561698 by kahlstrm · opened 5w ago

nixos/vault-agent: do not stop the agent across a switch

#557332 by KiaraGrouwstra · opened 7w ago

nixos/step-agent init draft

#555971 by Srylax · opened 7w ago · checks fail

nixos/crowdsec: always attempt to restart these services

#555066 by nagisa · opened 8w ago

nixos/step-ca: add user, group options

#550511 by epicrazzmatazz · opened 2mo ago

nixos/tetragon: init module

#550029 by RoGreat · opened 2mo ago

nixos/step-ca: set a default address, add step-cli to system path

#544962 by SuperSandro2000 · opened 2mo ago

e-imzo: add disable-startup option

#541835 by orzklv · opened 3mo ago

nixos/vouch-proxy: init

#536095 by boogiewoogit · opened 3mo ago

nixos/clamav: warn that TCPSocket/TCPAddr are ignored under socket activation

#535489 by RobinAngele · opened 3mo ago

nixos/crowdsec: refactor sprint

#535319 by TornaxO7 · opened 3mo ago · checks pass

nixos/fprintd: Add separate enablePam option to fprintd service

#533026 by Skyb0rg007 · opened 4mo ago

duo-desktop: init on version 4.5.0

#519284 by n0rad · opened 5mo ago

nixos/spire: add http_challenge attestation

#516120 by arianvp · opened 5mo ago

nixos/step-ca: add flag to enable debug logging

#515081 by daemonfire300 · opened 5mo ago

nixos/rauthy: init module draft

#513768 by ungeskriptet · opened 5mo ago

nixos/usbguard: packages, audit options

#512952 by CertainLach · opened 5mo ago · checks fail

Vault agent fixes

#507512 by Prunkles · opened 6mo ago

nixos/intune: add package options for intune-portal and microsoft-identity-broker

#506208 by codgician · opened 6mo ago

fail2ban-ui: init at 1.4.9, add module

#504161 by matthiasbeyer · opened 6mo ago · checks fail

nixos/nvd-sync: init

#503255 by MasterofNull · opened 6mo ago

tree-wide: make sudo wrappers compatible with nspawn containers

#501951 by KiaraGrouwstra · opened 6mo ago

crowdsec-firewall-bouncer: fix "error while reading yaml file"

#500515 by bcyran · opened 7mo ago

nixos/usbguard: audit, packages options

#499067 by CertainLach · opened 7mo ago · checks fail

nixos/usbguard: add ruleFolder option

#490182 by hc3rf · opened 8mo ago · checks pass

nixos/authelia: add minimal working example for settings

#488274 by gerandios · opened 8mo ago · checks pass

nixos/timekpr: use dynamic GID instead of hardcoded 2000

#486209 by johbo · opened 8mo ago · checks pass

crowdsec-blocklist-import: init at 3.7.1

#486054 by gaelj · opened 8mo ago · checks pass

nixos/polkit: add `packages` option

#481862 by h7x4 · opened 8mo ago

nixos/ssh-tpm-agent: init

#479909 by AkechiShiro · opened 9mo ago · checks fail

nixos/tor: use systemd cache directory

#474615 by AndrewKvalheim · opened 9mo ago · checks pass

nixos/fail2ban: load xt_multiport kernel module

#470784 by minijackson · opened 10mo ago · checks pass

nixos/clamav: fix regression when used with TCP sockets

#464614 by nbdd0121 · opened 10mo ago · checks pass

tor: add PortForwarding settings

#460220 by agowa · opened 11mo ago

kloak: init at 0.5.6-1 + module init

#456709 by hydrafog · opened 11mo ago · checks fail

nixos/authentik: init module, nixosTests/authentik: init tests

#456491 by jvanbruegge · opened 11mo ago

nixos/sshguard: fix, various improvements, add nixos tests

#453278 by h7x4 · opened 12mo ago

nixos/tor: respect services.tor.settings.SOCKSPort even if client.enable = false (#445350) draft

#445448 by lesbiannix · opened 12mo ago · checks pass

various: lib usage improvements draft

#445357 by h7x4 · opened 12mo ago · checks pass

Update asfp dependences

#440630 by Boom-Hacker · opened 13mo ago · checks pass

fail2ban-dashboard: init at 0.6.5, add service module draft

#429780 by matthiasbeyer · opened 14mo ago · checks fail

lib/types.nix: implement getSubOptions for either

#422272 by lilyball · opened 15mo ago · checks fail

nixos/kanidm: move provisioning to separate systemd service draft

#421902 by ners · opened 15mo ago

nixos/authelia: add options for SMTP secrets

#416242 by stackptr · opened 16mo ago · checks pass

nixos/gowitness: init module

#398196 by codexlynx · opened 18mo ago · checks pass

sshguard: adding options for subnet bans

#394373 by sjau · opened 18mo ago · checks pass

nixos/kanidm: add option to automatically generate self-signed cert

#381636 by shelvacu · opened 20mo ago

Certmgr fixes

#379688 by thatsmydoing · opened 20mo ago · checks pass

soarca: init at 1.1.0-beta-1-unstable-2024-12-19

#367485 by 13621 · opened 22mo ago · checks pass

nixos/fprintd: add elanmoc2 support

#363609 by sandptel · opened 22mo ago · checks pass

nixos/kanidm: rename options to match upstream nomenclature draft

#359870 by oddlama · opened 22mo ago

Add NixOS containers (or other `loc`) to crucial warning context

#345975 by roberth · opened 2y ago

nixos/pam: option to disable fprint if laptop lid is closed

#342676 by heywoodlh · opened 2y ago · checks pass

Qubes packages (Its alive!) draft

#341215 by CertainLach · opened 2y ago · checks pass

certmonger: init at 0.79.19 draft

#290729 by patryk4815 · opened 2y ago

nixos/usbguard - add usbguard-notifier option and service

#284979 by rsniezek · opened 2y ago · checks pass

nixos: fix some remaining consequences of network-online.target dep fix

#282795 by lf- · opened 2y ago

config.services.fwknopd: new service

#281877 by deepfire · opened 2y ago

nixos/vaultwarden: fix backupDir assertion and clarify message

#278948 by drgif · opened 2y ago · checks pass

`filterAttrsRecursive` improvements, `filterAttrsRecursiveTopDown` and `filterAttrsRecursiveBottomUp`

#275753 by infinisil · opened 2y ago

nixos/aide: init module

#269375 by happysalada · opened 2y ago

[RFC/WiP] Init keylime and its services

#255540 by arkivm · opened 3y ago

nwaku: init at 0.16.0 draft

#193679 by jakubgs · opened 4y ago

nixos/aesmd: add qcnl config

#181347 by rvolosatovs · opened 4y ago

Physlock switch branch

#170948 by TilCreator · opened 4y ago

nixos/fail2ban: add option to enable sending mail

#157364 by PhilippWoelfel · opened 4y ago

nixos/tor: honor services.tor.torsocks.server

#107349 by bbjubjub2494 · opened 5y ago

nixos/fprintd: option to inhibit PAM rule creation draft

#107320 by kneitinger · opened 5y ago

nixos/cfssl: module improvements draft

#68834 by offlinehacker · opened 7y ago

WIP nixos/sks: init script: build from .{gpg=>pgp} files draft

#68238 by wldhx · opened 7y ago

Closed or merged in the synced window 22

nixos/kanidm: add entry management

#568179 by c2fc2f · merged 2w ago

[Backport release-26.05] warpgate: 0.26.1 -> 0.29.0

#566232 by alemonmk · merged 2w ago

openbao: 2.6.2 -> 2.7.0, openbaoPlugins: init, nixos/openbao: add plugins option

#562994 by Kranzes · merged 3w ago

nixos/vanguards: init module

#560578 by EnovaMaker · closed 5w ago

[Backport release-26.05] hockeypuck: add NGI team

#560474 by nixpkgs-ci · merged 5w ago

[Backport release-26.05] nixos/step-ca: add extraArgs option for additional step-ca CLI flags

#559537 by nixpkgs-ci · merged 5w ago

nixos/openbao-agent: init

#557353 by KiaraGrouwstra · merged 11d ago

nixos/vault-agent: make the start limit overridable

#557337 by KiaraGrouwstra · closed 6w ago

nixos/{fail2ban,prometheus-exporter/fail2ban}: use group for socket permissions + various fixes

#556710 by h7x4 · merged 5w ago

nixos: pkgs.systemd -> config.systemd.package

#556418 by Kranzes · merged 7w ago

warpgate: 0.26.1 -> 0.28.4

#555116 by alemonmk · merged 4w ago

fail2ban: use systemd socket activation

#554816 by Deric-W · merged 7w ago

nixos/step-ca: add extraArgs option for additional step-ca CLI flags

#541493 by dustins · merged 6w ago

nixos/crowdsec: allow `systemd reload`ing the service

#541058 by nagisa · merged 8w ago

canaille: 0.2.7 -> 0.3.6

#534234 by erictapen · merged 4w ago

rosec: init at 0.0.28

#519494 by Mikilio · merged 7w ago

nixos/tinyauth: add enableUnixSocket option

#516128 by ungeskriptet · merged 8w ago

[Backport release-25.11] nixos/crowdsec-firewall-bouncer: Fix missing systemd dependencies to firewall services

#507322 by nixpkgs-ci · closed 3mo ago

[Backport release-25.11] crowdsec-firewall-bouncer: use cscli from the nix store instead of /run/current-system/sw/bin

#495379 by nixpkgs-ci · closed 3mo ago

hockeypuck: add NGI team

#485003 by eljamm · merged 2mo ago

(Part 3) various: replace `systemd.services.<name>.{script,preStart}` with `ExecStart{,Pre}`

#481639 by h7x4 · merged 2mo ago

guile: Clean up derivations, make a generic guile builder

#447898 by RossSmyth · closed 11mo ago

Issues 19

nixos/kanidm: assertion is too restrictive (especially since `entryManagement.migrations`) 6.topic: nixos

#570809 by c2fc2f · opened 10d ago · 6 comments

nixos/clamav: clamdscan.service: Main process exited, code=exited, status=2/INVALIDARGUMENT when scanning Not supported file type 6.topic: nixos

#560149 by BlastboomStrice · opened 5w ago · 0 comments

nixos/crowdsec-firewall-bouncer: no longer autoregisters with lapi after 26.05 upgrade 6.topic: nixos

#526506 by jeantil · opened 4mo ago · 2 comments

nixos/crowdsec: ExecStartPre hub update fails in hermetic VMs, cascades to permanent EACCES via bouncer-register StateDirectory

#520206 by SMC17 · opened 5mo ago · 2 comments

PhotoPrism module could expose EnvironmentFile= option

#516145 by j0hax · opened 5mo ago · 1 comments

nixos/crowdsec: journalctl datasources stop immediately when PrivateUsers=true hides the systemd-journal group

#509038 by alirezamirsepassi · opened 6mo ago · 16 comments

nixos/howdy: incompatible with polkit-127 6.topic: nixos

#483867 by HHR2020 · opened 8mo ago · 7 comments

nixos/sshguard: depends on iptables even when nftables is used 6.topic: nixos 2.status: stale

#471173 by Necoro · opened 10mo ago · 0 comments

nixos/crowdsec: cscli: no config file 6.topic: nixos 2.status: stale

#469519 by Peronia · opened 10mo ago · 6 comments

nixos/services.crowdsec: Cannot enable local api 6.topic: nixos

#459224 by AmethystNightshade · opened 11mo ago · 7 comments

nixos/crowdsec: notifications don't work due to missing binaries 6.topic: nixos 2.status: stale

#458213 by gradientvera · opened 11mo ago · 3 comments

nixos/crowdsec: old notification config files aren't removed 6.topic: nixos 2.status: stale

#458206 by gradientvera · opened 11mo ago · 5 comments

nixos/tor: `settings.SOCKSPort = []` ignored without `client.enable = true` 6.topic: nixos 2.status: stale

#445350 by S0AndS0 · opened 12mo ago · 0 comments

nixos/crowdsec: Use sensible defaults so that the module does not fail when simply enabling it 6.topic: nixos 2.status: stale

#445342 by nicomem · opened 12mo ago · 21 comments

nixos/crowdsec: fatal error when using `cscli explain` 6.topic: nixos 2.status: stale

#445337 by nicomem · opened 12mo ago · 1 comments

nixos/kanidm: Don't request CAP_NET_BIND_SERVICE unconditonally 6.topic: nixos 2.status: stale

#413756 by mweinelt · opened 16mo ago · 1 comments

Add a system service for ssh-tpm-agent 2.status: stale

#353096 by arunoruto · opened 23mo ago · 7 comments

Incorrect assertion for vault storagePath 6.topic: nixos 2.status: stale

#125581 by rushmorem · opened 5y ago · 1 comments

nixos/tor: services.tor.torsocks.server not honored 6.topic: nixos 2.status: stale

#94236 by bbjubjub2494 · opened 6y ago · 4 comments

Closed or merged in the synced window 1

nixos/crowdsec: enrolling into the console doesn't work 6.topic: nixos

#446764 by SebastianStork · closed 12mo ago · 8 comments