nixpkgs/nixos/modules
Vincent Bernat 632c8e1d54
nixos/acme: don't use --reuse-key
Reusing the same private/public key on renewal has two issues:

 - some providers don't accept to sign the same public key
   again (Buypass Go SSL)

 - keeping the same private key forever partly defeats the purpose of
   renewing the certificate often

Therefore, let's remove this option. People wanting to keep the same
key can set extraLegoRenewFlags to `[ --reuse-key ]` to keep the
previous behavior. Alternatively, we could put this as an option whose
default value is true.
2021-06-01 00:43:45 +02:00
..
config Merge pull request #101071 from ju1m/apparmor 2021-04-24 11:24:26 +00:00
hardware maintainers: rename metadark -> kira-bruneau (#124035) 2021-05-22 16:47:40 +02:00
i18n/input-method input methods: add kime 2021-04-19 03:05:07 +09:00
installer iso-image: Improve disk detection 2021-05-22 20:04:05 -07:00
misc nixos/monero: use isSystemUser = true 2021-05-08 02:13:25 +02:00
profiles Merge pull request #85073 from hyperfekt/systemd-pstore 2021-05-17 00:00:52 +02:00
programs Merge pull request #123926 from pschyska/master 2021-05-23 18:08:46 +00:00
security nixos/acme: don't use --reuse-key 2021-06-01 00:43:45 +02:00
services Merge pull request #124181 from pmenke-de/sdrplay 2021-05-29 22:21:10 +02:00
system nixos/luksroot: add bypassWorkqueues (#118114) 2021-05-26 09:43:38 -04:00
tasks nixos/filesystems: condition mount-pstore.service on unmounted /sys/fs/pstore 2021-05-21 17:49:23 +02:00
testing treewide: use perl.withPackages when possible 2021-03-31 21:35:37 +02:00
virtualisation nixos/podman-network-socket-ghostunnel: init 2021-05-30 11:23:24 +02:00
module-list.nix nixos/podman-network-socket-ghostunnel: init 2021-05-30 11:23:24 +02:00
rename.nix quagga: remove 2021-04-22 12:48:48 +02:00