nixpkgs/nixos/modules/services
David Anderson 089da1c14d nixos/sshguard: create ipsets before starting, and clean up after stopping.
The fix for #62874 introduced a race condition on startup: the postStart
commands that configure the firewall run concurrently with sshguard's
creation of the ipsets that the rules depend on. Unfortunately iptables
fails hard when referencing an ipset that doesn't exist, so this causes
non-deterministic crashlooping until sshguard wins the race.

This change fixes that race condition by always creating the ipset and
reconfiguring the firewall before starting sshguard, so that the order
of operations is always deterministic.

This change also cleans up the ipsets on sshguard shutdown, so that
removing sshguard from a running system doesn't leave state behind.

Fixes #65985.
2019-08-04 16:23:22 -07:00
..
admin cleanup redundant text in modules utilizing mkEnableOption 2019-04-20 14:44:02 +02:00
amqp nixos/rabbitmq: replace deprecated usage of PermissionsStartOnly 2019-04-13 07:00:57 -04:00
audio nixos/spotifyd: init 2019-07-21 00:58:20 +02:00
backup nixos/zfs: add autoReplication functionality 2019-08-02 08:04:21 -07:00
cluster treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
computing nixos/boinc: replace deprecated usage of PermissionsStartOnly 2019-05-26 07:20:56 -04:00
continuous-integration treewide: Remove usage of isNull 2019-04-29 14:05:50 +02:00
databases postgresql: update docs 2019-07-23 14:17:14 +03:00
desktops nixos/flatpak: require xdg.portal to be enabled 2019-07-26 22:35:50 -04:00
development bloop: allow specifying extra cli options 2019-07-25 09:28:13 +02:00
editors manual: mention jmacs as emacs imitation 2019-07-13 11:01:17 +02:00
games Merge pull request #60406 from JohnAZoidberg/remove-isnull 2019-05-18 09:36:24 +00:00
hardware treewide: use dontConfigure 2019-07-01 04:23:51 -04:00
logging Merge pull request #64463 from Ma27/graylog-test 2019-07-21 20:53:39 +00:00
mail nixos: add 'localRecipients' config option for Postfix 2019-07-15 17:36:20 +02:00
misc nixos/gitolite: dataDir group-readable 2019-08-04 18:47:02 +09:00
monitoring nixos/prometheus-exporters: update documentation 2019-08-02 18:50:01 +02:00
network-filesystems Merge pull request #30712 from peterhoeg/f/service 2019-08-02 11:58:27 +08:00
networking Merge pull request #30712 from peterhoeg/f/service 2019-08-02 11:58:27 +08:00
printing Merge pull request #59076 from Yarny0/cups-path-fix 2019-05-30 10:52:28 -04:00
scheduling Merge pull request #51918 from bobvanderlinden/var-run 2019-04-07 20:09:46 +02:00
search treewide: Remove usage of isNull 2019-04-29 14:05:50 +02:00
security nixos/sshguard: create ipsets before starting, and clean up after stopping. 2019-08-04 16:23:22 -07:00
system nixos/nscd: document why it is configured this way 2019-07-12 12:07:45 -07:00
torrent nixos/deluge: Add extractor dependencies. 2019-07-02 22:26:38 +01:00
ttys nixos: add preferLocalBuild=true; on derivations for config files 2019-02-22 20:11:27 +01:00
web-apps Merge pull request #62748 from aanderse/mediawiki 2019-07-31 22:12:23 -04:00
web-servers nixos/mediawiki: init service to replace httpd subservice 2019-07-23 22:02:33 -04:00
x11 Merge master into staging-next 2019-08-01 09:42:54 +02:00