Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nixos/roundcube: more options #55706

Closed
wants to merge 1 commit into from
Closed

Conversation

Vskilet
Copy link
Contributor

@Vskilet Vskilet commented Feb 13, 2019

Motivation for this change

Add some options that allow to not known the PHP configuration of Roundcube. Default options are more secure than before.

I can see that @Ma27 worked too on the module. How can I merge our work without break the master ? :)

PS : I'm searching how to use a passwordFile option also and don't stock password on store.

Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
  • Built on platform(s)
    • NixOS
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Assured whether relevant documentation is up to date
  • Fits CONTRIBUTING.md.

@Ma27
Copy link
Member

Ma27 commented Feb 13, 2019

I can see that @Ma27 worked too on the module. How can I merge our work without break the master ? :)

You should go back to your first commit (4c4f068c1496ba50d516402aca27486fde43dd2c) and then run something like git rebase master.

I didn't go through the changes (yet) so I don't know if there will be any conflicts. If you need assistance with resolving those, feelf ree to ping me.

PS : I'm searching how to use a passwordFile option also and don't stock password on store.

You could read it with file_get_contents:

{
  environment.etc."roundcube/config.inc.php".text = ''
    <?php
    $config['smtp_pass'] = file_get_contents('${cfg.smtpPasswordFile}');
  '';
}

Please keep in mind that file_get_contents returns false and only yields a warning and this needs some better error handling.

@Ma27
Copy link
Member

Ma27 commented Apr 2, 2019

Admittedly I'm not sure anymore if we actually want to merge this. There's the NixOS RFC 42 which proposes to simplify the complexity of modules by using a simple config attribute rather than multiple options and add several library helpers to render the config attr set in any given configuration language (or PHP in this case).

@Vskilet
Copy link
Contributor Author

Vskilet commented Apr 2, 2019

OK. So I can close this and do another pull request for password stuff

@Ma27
Copy link
Member

Ma27 commented Apr 2, 2019

I'd wait for now. I'd recommend to use extraConfig for this kind of stuff for now and wait how the RFC develops :)

@Ma27
Copy link
Member

Ma27 commented Apr 2, 2019

Ah and I've just seen that you force-pushed after my comment. IIRC I didn't get a notification for this (not sure how GitHub handles this), so feel free to ping the reviewer the next time (or at least leave a comment under the review when fixing stuff).

@Vskilet
Copy link
Contributor Author

Vskilet commented Feb 27, 2020

Not really relevant now I think

@Vskilet Vskilet closed this Feb 27, 2020
@Vskilet Vskilet deleted the roundcube-config branch February 27, 2020 12:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants