nixpkgs/nixos/modules/security
Arian van Putten 5c1c642939 Revert "nixos/acme: Fix allowKeysForGroup not applying immediately"
This reverts commit 5532065d06.

As far as I can tell setting RemainAfterExit=true here completely breaks
certificate renewal, which is really bad!

the sytemd timer will activate the service unit every OnCalendar=,
however with RemainAfterExit=true the service is already active! So the
timer doesn't rerun the service!

The commit also broke the actual tests, (As it broke activation too)
but this was fixed later in https://github.com/NixOS/nixpkgs/pull/76052
I wrongly assumed that PR fixed renewal too, which it didn't!

testing renewals is hard, as we need to sleep in tests.
2020-04-16 10:37:04 +02:00
..
wrappers
acme.nix Revert "nixos/acme: Fix allowKeysForGroup not applying immediately" 2020-04-16 10:37:04 +02:00
acme.xml
apparmor-suid.nix
apparmor.nix
audit.nix
auditd.nix
ca.nix
chromium-suid-sandbox.nix
dhparams.nix
duosec.nix nixos/duosec: rename ikey option to integrationKey 2020-03-22 20:25:11 -04:00
google_oslogin.nix nixos/sshd: add authorizedKeysCommand and authorizedKeysCommandUser options 2020-03-12 21:00:12 -04:00
hidepid.nix
hidepid.xml
lock-kernel-modules.nix
misc.nix
oath.nix
pam.nix
pam_mount.nix
pam_usb.nix
polkit.nix
prey.nix
rngd.nix nixos/rngd: fix clean shutdown 2020-02-23 18:53:52 -05:00
rtkit.nix
sudo.nix nixos/sudo: Fix extraRules example rendering 2020-02-10 01:37:07 +01:00
systemd-confinement.nix
tpm2.nix nixos/tpm2: init 2020-03-15 12:16:32 +01:00