My personal project and infrastructure archive

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Martin Weinelt f4d6d51a09 nixos/wordpress: regenerate secret keys if misspelled key name is found ... A secret key generated by the nixos module was misspelled, which could possibly impact the security of session cookies. To recover from this situation we will wipe all security keys that were previously generated by the NixOS module, when the misspelled one is found. This will result in all session cookies being invalidated. This is confirmed by the wordpress documentation: > You can change these at any point in time to invalidate all existing > cookies. This does mean that all users will have to login again. https://wordpress.org/support/article/editing-wp-config-php/#security-keys Meanwhile this issue shouldn't be too grave, since the salting function of wordpress will rely on the concatenation of both the user-provided and automatically generated values, that are stored in the database. > Secret keys are located in two places: in the database and in the > wp-config.php file. The secret key in the database is randomly > generated and will be appended to the secret keys in wp-config.php. https://developer.wordpress.org/reference/functions/wp_salt/ Fixes: 2adb03fdae ("nixos/wordpress: generate secrets locally") Reported-by: Moritz Hedtke <Moritz.Hedtke@t-online.de> (cherry picked from commit 724ed08df0)		3 years ago
..
atlassian	treewide: remove redundant quotes	5 years ago
icingaweb2	nixos/icingaweb2: Fix php packages	4 years ago
ihatemoney	nixos/ihatemoney: run uwsgi emperor as normal user	3 years ago
bookstack.nix	nixos/bookstack: use umask before echoing & clear cache before starting	3 years ago
calibre-web.nix	nixos/calibre-web: init module	3 years ago
convos.nix	nixos/convos: init	4 years ago
cryptpad.nix	nixos/cryptpad: add module	5 years ago
discourse.nix	nixos/discourse: Assert deployed PostgreSQL version	3 years ago
discourse.xml	nixos/discourse: Add NixOS manual entry	3 years ago
documize.nix	treewide: Per RFC45, remove all unquoted URLs	4 years ago
dokuwiki.nix	Merge pull request #115228 from siraben/unzip-buildInputs	3 years ago
engelsystem.nix	doc: improve 20.09 release notes	4 years ago
galene.nix	galene: 0.2 -> 0.3 and bugfix of the associated module	3 years ago
gerrit.nix	utillinux: rename to util-linux	4 years ago
gotify-server.nix	nixos/gotify: init module and test	5 years ago
grocy.nix	grocy: 2.7.1 -> 3.0.0	3 years ago
grocy.xml	nixos/grocy: init module	4 years ago
hedgedoc.nix	treewide: update 21.03 to 21.05	3 years ago
hledger-web.nix	nixos/hledger-web: set capabilites as boolean	3 years ago
jirafeau.nix	nixos/jirefeau: add `services.jirafeau` module	4 years ago
jitsi-meet.nix	nixos/jitsi-meet: add docs	4 years ago
jitsi-meet.xml	nixos/jitsi-meet: add docs	4 years ago
keycloak.nix	nixos/keycloak: Split certificatePrivateKeyBundle into two options	3 years ago
keycloak.xml	nixos/keycloak: Split certificatePrivateKeyBundle into two options	3 years ago
limesurvey.nix	nixos/httpd: code cleanup	4 years ago
mastodon.nix	nixos/mastodon: use rails command instead of rake	3 years ago
matomo-doc.xml	matomo: Fix consistency check	5 years ago
matomo.nix	nixos/treewide: Move rename.nix imports to their respective modules	5 years ago
mattermost.nix	nixos/*: use $out instead of $bin with buildGoPackage	4 years ago
mediawiki.nix	nixos/mediawiki: add name type	3 years ago
miniflux.nix	Merge pull request #111030 from cript0nauta/miniflux-sudo	3 years ago
moinmoin.nix	nixos/moinmoin: fix module by switching to eventlet worker	3 years ago
moodle.nix	treewide: fix double quoted strings in meta.description	3 years ago
nextcloud.nix	nixos/nextcloud: Rename services.nextcloud.nginx.disableImagemagick to services.nextcloud.nginx.enableImagemagick	3 years ago
nextcloud.xml	nextcloud21: init at 21.0.0, set as default version	3 years ago
nexus.nix	nexus: 3.18.1-01 -> 3.19.1-01	5 years ago
pgpkeyserver-lite.nix	nixos/modules: remove trailing whitespace	4 years ago
plantuml-server.nix	plantuml-server: init at 1.2020.14	4 years ago
restya-board.nix	restya-board: fix configuration option and switch to file based password provisioning	4 years ago
rss-bridge.nix	nixos/rss-bridge: init	4 years ago
selfoss.nix	treewide: remove redundant quotes	5 years ago
shiori.nix	treewide: remove duplicates SystemCallFilters	3 years ago
sogo.nix	sogo: remove SOGoZipPath	4 years ago
trac.nix	nixos/trac: service init	5 years ago
trilium.nix	treewide: remove kampka as maintainer (#109813)	3 years ago
tt-rss.nix	nixos: remove StandardOutput=syslog, StandardError=syslog lines	4 years ago
virtlyst.nix	treewide: Switch to system users	5 years ago
whitebophir.nix	nixos/whitebophir: expose new option provided by whitebophir 1.8.0	3 years ago
wiki-js.nix	wiki-js: init at 2.5.191	3 years ago
wordpress.nix	nixos/wordpress: regenerate secret keys if misspelled key name is found	3 years ago
youtrack.nix	nixos/treewide: Fix incorrectly rendered examples	4 years ago
zabbix.nix	nixos/zabbixWeb: include DOUBLE_IEEE754 directive	3 years ago