aboutsummaryrefslogtreecommitdiff
path: root/gnu/services/security.scm
Commit message (Collapse)AuthorAge
* services: replace bare serializers with (serializer ...)Bruno Victal2023-04-02
| | | | | | | | | | | | | | | | | | | * gnu/home/services/shells.scm (home-zsh-configuration)[environment-variables]: Use (serializer ...). (home-bash-configuration)[aliases, environment-variables]: Likewise. (home-fish-configuration)[abbreviations, aliases] [environment-variables]: Likewise. * gnu/services/audio.scm (mpd-configuration)[music-dir, playlist-dir] [endpoints, address, inputs, archive-plugins, input-cache-size] [decoders, filters, playlist-plugins]: Likewise. * gnu/services/linux.scm (fstrim-configuration)[extra-arguments]: Likewise. * gnu/services/security.scm (fail2ban-jail-configuration)[backend] [log-encoding, extra-content]: Likewise. * tests/services/configuration.scm: Update tests. ("serialize-configuration [deprecated]"): New test. Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu: services: Fix fail2ban configuration serialization.muradm2023-01-10
| | | | | | | | | | | | This fixes a regression from 543d971ed2a1d9eb934af1f51930741d7cc4e7ef whereby match-lambda due to configuration field reordering. * gnu/services/security.scm: [serialize-fail2ban-ignore-cache-configuration]: Switch to match-record. [serialize-fail2ban-jail-filter-configuration]: Switch to match-record. [serialize-fail2ban-jail-action-configuration]: Switch to match-record. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
* services: fail2ban: Start server in the foreground.Ludovic Courtès2022-12-06
| | | | | | | | | | | | | | | Previously, we were passing '-b', thereby starting the server in the background. Consequently the 'start' method could complete before the server was ready to accept connections on its socket, leading to non-deterministic test failures. Reported by Mathieu Othacehe <othacehe@gnu.org>. * gnu/services/security.scm (fail2ban-shepherd-service): Change FAIL2BAN-ACTION to invoke 'fail2ban-client'. Change 'start' method to use 'make-forkexec-constructor'; start the server in the foreground with '-f' and pass '-x' to force execution of the server, as done upstream in 'fail2ban.service.in'.
* services: fail2ban: Remove unnecessary Shepherd 'modules' field.Ludovic Courtès2022-12-06
| | | | | * gnu/services/security.scm (fail2ban-shepherd-service): Remove unnecessary 'modules' field.
* services: fail2ban: 'stop' returns #f when the dameon is stopped.Ludovic Courtès2022-12-06
| | | | | | | * gnu/services/security.scm (fail2ban-shepherd-service): Change FAIL2BAN-ACTION to return an 'invoke' gexp. Adjust the shepherd 'start' and 'stop' fields accordingly. Have 'stop' return #f on success.
* gnu: fail2ban-service-type: Improve extra-content fields.muradm2022-09-14
| | | | | | | | | | * gnu/services/security.scm (fail2ban-jail-configuration)[extra-content]: Change to text-config. (fail2ban-configuration)[extra-content]: Change to text-config. * gnu/doc/guix.texi: Update type of extra-content fields. Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
* gnu: fail2ban-service-type: Fix documentation typos.muradm2022-09-01
| | | | Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
* gnu: fail2ban-service-type: Improve jail configuration serialization.muradm2022-09-01
| | | | | | | * gnu/services/security.scm (fail2ban-jail-configuration) [name]: Should use empty-serializer. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
* gnu: fail2ban-service-type: Fix field name serialization.muradm2022-09-01
| | | | | | | * gnu/services/security.scm: Wrong condition in string-filter function in fail2ban-jail-configuration-serialize-field-name. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
* gnu: security: Add fail2ban-service-type.muradm2022-08-28
* gnu/services/security.scm: New module. * gnu/tests/security.scm: New module. * gnu/local.mk: Add new security module and tests. * doc/guix.text: Add fail2ban-service-type documentation. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>