greg/nix-bitcoin
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
6ba5880b2c
nix-bitcoin/modules
History
Erik Arvstedt 08fe9ba84a
services: add finer-grained address family restrictions 
Due to a possible NixOS bug, this commit has no effect on NixOS 20.09
where `RestrictAddressFamilies` is a no-op.
It's only relevant for NixOS unstable with cgroups v2.

bitcoind+zmq: instead of allowing all address families, only add the required
AF_NETLINK family.

lnd: lnd only runs a zmq client, not a server, therefore it requires
no additional address families.

lightning-pool, clightning-plugin-zmq: add AF_NETLINK.
2021-03-22 14:35:29 +01:00
..
clightning-plugins services: add finer-grained address family restrictions 2021-03-22 14:35:29 +01:00
deployment examples: add krops deployment method 2021-03-15 18:53:07 +01:00
presets Remove nixops examples and documentation 2021-03-15 12:42:47 +00:00
secrets secrets: make configuration more robust 2021-03-15 12:42:52 +00:00
backups.nix lnd, joinmarket: don't write to secrets dir 2021-03-15 18:50:15 +01:00
banlist.cli.txt banlist: update to newest version 2020-06-11 09:23:26 +00:00
bitcoind-rpc-public-whitelist.nix treewide: fix formatting 2021-02-07 22:40:10 +01:00
bitcoind.nix services: add finer-grained address family restrictions 2021-03-22 14:35:29 +01:00
btcpayserver.nix services: add helper fn setAllowedIPAddresses 2021-03-22 13:20:45 +01:00
clightning.nix services: add helper fn setAllowedIPAddresses 2021-03-22 13:20:45 +01:00
default.nix remove webindex 2021-01-14 13:25:10 +01:00
electrs.nix services: add helper fn setAllowedIPAddresses 2021-03-22 13:20:45 +01:00
hardware-wallets.nix services: use consistent layout 2021-02-07 22:42:23 +01:00
joinmarket-ob-watcher.nix services: use consistent layout 2021-02-07 22:42:23 +01:00
joinmarket.nix lnd, joinmarket: don't write to secrets dir 2021-03-15 18:50:15 +01:00
lightning-loop.nix services: add helper fn setAllowedIPAddresses 2021-03-22 13:20:45 +01:00
lightning-pool.nix services: add finer-grained address family restrictions 2021-03-22 14:35:29 +01:00
liquid.nix services: add helper fn setAllowedIPAddresses 2021-03-22 13:20:45 +01:00
lnd-rest-onion-service.nix modules: use user & group options 2021-02-17 11:50:25 +00:00
lnd.nix services: add finer-grained address family restrictions 2021-03-22 14:35:29 +01:00
modules.nix pool: add pkg, module & tests 2021-03-01 10:59:35 +01:00
netns-isolation.nix pool: add pkg, module & tests 2021-03-01 10:59:35 +01:00
nix-bitcoin.nix fix syntax error 2020-05-06 12:13:32 +02:00
nodeinfo.nix Merge #290: JoinMarket Orderbook Watcher 2021-01-17 20:00:13 +00:00
obsolete-options.nix secrets: add option 'generateSecrets' 2021-03-15 12:42:52 +00:00
onion-addresses.nix onion-addresses: mirror nix-bitcoin.onionAddresses.access behavior 2021-02-17 11:50:47 +00:00
onion-services.nix onion-addresses: mirror nix-bitcoin.onionAddresses.access behavior 2021-02-17 11:50:47 +00:00
operator.nix services: use doas if enabled 2021-02-09 12:44:04 +00:00
recurring-donations.nix services: add helper fn setAllowedIPAddresses 2021-03-22 13:20:45 +01:00
security.nix security: don't restrict process info by default for module users 2020-08-20 13:12:07 +02:00
spark-wallet.nix services: add helper fn setAllowedIPAddresses 2021-03-22 13:20:45 +01:00
versioning.nix lnd, joinmarket: don't write to secrets dir 2021-03-15 18:50:15 +01:00