tvl-depot/ops/modules
Florian Klink b58f6f1d61 feat(ops/modules/open_eid): add support for Web eID extension
Most likely due to bad UX in browsers for hardware-backed TLS client
cert auth, most websites have switched from client-side TLS to the "Web
eID" extension.

Once installed, the extension uses [Native Messaging] to talk to a
`web-eid-app` application, which handles the communication with the
smart card itself.

This can be tested on https://web-eid.eu/ .

The commit needs nixpkgs to be bumped past
https://github.com/NixOS/nixpkgs/pull/227354 .

[Native Messaging]: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Native_messaging

Change-Id: Iffe6d81ecf7cee25406fa39a983ff52cf669c373
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8490
Reviewed-by: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
2023-04-28 13:14:24 +00:00
..
tvl-slapd chore(3p/sources): Bump channels & overlays 2022-08-13 14:43:05 +00:00
www fix(ops/www): allow all indexing on cl.tvl.fyi 2023-03-29 12:17:56 +00:00
.skip-subtree refactor(ops): Split //ops/nixos into different locations 2021-04-11 22:18:22 +00:00
atward.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
auto-deploy.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
automatic-gc.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
cgit.nix refactor(ops/cgit): make user configurable 2022-07-12 08:49:55 +00:00
clbot.nix chore(3p/sources): Bump channels & overlays 2022-09-28 08:02:31 +00:00
default-imports.nix feat(ops/auto-deploy): Support auto-deploy 2021-12-26 14:55:42 +00:00
default.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
depot-inbox.nix feat(ops/modules): enable mail address obfuscation in public web UI 2022-12-29 20:11:24 +00:00
depot-replica.nix fix(depot-replica): make the depot replica world readable 2022-07-12 08:49:55 +00:00
gerrit-queue.nix feat(3p/agenix): update to 2022-05-16 and add to niv 2022-05-25 15:00:37 +00:00
irccat.nix feat(3p/agenix): update to 2022-05-16 and add to niv 2022-05-25 15:00:37 +00:00
josh.nix fix(views/kit): communicate :unsign in the tvl-kit URL directly 2023-03-31 08:46:01 +00:00
journaldriver.nix refactor(ops/modules): Move journaldriver configuration into module 2022-02-18 11:38:34 +00:00
known-hosts.nix fix(ops/modules): adapt for changed ssh.knownHosts 2022-05-26 10:05:54 +00:00
monorepo-gerrit.nix chore(3p/sources): Bump channels & overlays 2022-09-28 08:02:31 +00:00
nixery.nix refactor(nixery): Modernise structure of binaries 2022-05-23 15:04:56 +00:00
oauth2_proxy.nix chore(3p/sources): Bump channels & overlays 2022-09-28 08:02:31 +00:00
open_eid.nix feat(ops/modules/open_eid): add support for Web eID extension 2023-04-28 13:14:24 +00:00
owothia.nix feat(3p/agenix): update to 2022-05-16 and add to niv 2022-05-25 15:00:37 +00:00
panettone.nix fix(ops/modules): regularly restart panettone for b/225 2022-12-05 09:40:38 +00:00
paroxysm.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
prometheus-fail2ban-exporter.nix refactor(ops): Break out prometheus-fail2ban-exporter module 2021-06-12 15:51:49 +00:00
quassel.nix fix(modules/quassel): Open firewall port automatically 2022-03-11 21:38:40 +00:00
README.md refactor(ops): Split //ops/nixos into different locations 2021-04-11 22:18:22 +00:00
restic.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
smtprelay.nix feat(3p/agenix): update to 2022-05-16 and add to niv 2022-05-25 15:00:37 +00:00
sourcegraph.nix chore(ops/sourcegraph): Bump to 3.40.0 2022-05-28 11:58:34 +00:00
tvl-buildkite.nix chore(3p/sources): Bump channels & overlays 2022-09-28 08:02:31 +00:00
tvl-cache.nix fix: reflect renames of Nix configuration options 2022-08-25 16:34:39 +00:00
tvl-users.nix chore(3p/sources): Bump channels & overlays 2023-04-07 09:20:33 +00:00
v4l2loopback.nix refactor(ops): Split //ops/nixos into different locations 2021-04-11 22:18:22 +00:00

NixOS modules

This folder contains various NixOS modules shared by our NixOS configurations.

It is not read by readTree.