nix-bitcoin/modules
Erik Arvstedt 5f3f362451
lnd: add strict hardening
Add ProtectSystem=strict, remove PermissionStartOnly.

Extract the section of postStart that needs secrets dir write
access into a separate script with full privileges.

Simplify preStart and fix dataDir quoting.
2020-05-22 16:13:58 +00:00
..
deployment extract module 'deployment/nixops.nix', add option 'deployment.secretsDir' 2020-03-24 21:43:21 +00:00
presets lnd: only enable bitcoind zmqpub if lnd.enable 2020-05-22 14:53:33 +00:00
secrets Merge #136: Change the nix-bitcoin deployment from forking this repo to importing the module 2020-04-08 15:03:08 +00:00
banlist.cli.txt banlist: simplify script, remove package 2019-11-12 19:42:33 +01:00
bitcoind.nix All modules: ProtectSystem = strict 2020-05-22 15:47:01 +00:00
clightning.nix All modules: ProtectSystem = strict 2020-05-22 15:47:01 +00:00
default.nix rename nix-bitcoin.nix -> presets/secure-node.nix 2020-04-08 17:35:12 +02:00
electrs.nix All modules: ProtectSystem = strict 2020-05-22 15:47:01 +00:00
hardware-wallets.nix move systemPackages definitions to services 2020-04-08 17:35:14 +02:00
lightning-charge.nix All modules: ProtectSystem = strict 2020-05-22 15:47:01 +00:00
liquid.nix All modules: ProtectSystem = strict 2020-05-22 15:47:01 +00:00
lnd.nix lnd: add strict hardening 2020-05-22 16:13:58 +00:00
modules.nix lnd: add strict hardening 2020-05-22 16:13:58 +00:00
nanopos.nix All modules: Give service config precedence over defaultHardening 2020-05-22 08:08:27 +00:00
nix-bitcoin-services.nix lnd: add strict hardening 2020-05-22 16:13:58 +00:00
nix-bitcoin-webindex.nix All modules: ProtectSystem = strict 2020-05-22 15:47:01 +00:00
nix-bitcoin.nix fix syntax error 2020-05-06 12:13:32 +02:00
nodeinfo.nix nodeinfo: Convert to module and allow alternative operator username 2020-05-19 11:13:24 +00:00
onion-chef.nix All modules: ProtectSystem = strict 2020-05-22 15:47:01 +00:00
recurring-donations.nix All modules: Give service config precedence over defaultHardening 2020-05-22 08:08:27 +00:00
spark-wallet.nix All modules: ProtectSystem = strict 2020-05-22 15:47:01 +00:00