Nixpkgs patches many libraries to read certificate bundle mentioned in
NIX_SSL_CERT_FILE, and /nix/store is already present in the sandbox.
Related to https://github.com/NixOS/nixpkgs/issues/409848
use libvips as last resort due to risk of OOM; example:
libvips defers to imagemagick for animated avif, and imagemagick
probably does an identify, iterating through each frame, itself
consuming 100+ MiB RAM, which libvips amplifies to 7+ GiB
similar behavior is observed with `identify a.mkv` in a shell
only expand environment-variables of the form ${ENV}
by default, crash on startup if the old $ENV syntax is found,
explaning that the old syntax can be enabled with an option
can check if the current version has a known vulnerability, with the option to panic and exit if so, and otherwise show a warning in the controlpanel for admins
---------
Co-authored-by: ed <s@ocv.me>
I found it slightly cumbersome to write a config when the only feedback OpenRC gives is `crashed`, so I added a small QOL function to run copyparty with the `--exit cfg` flag directly from the service.
Signed-off-by: charel <charel@lotsaspaghetti.com>
* nixos: use mkPackageOption instead of mkOption for the package option
This gets rid of a warning when trying to build a system with
documentation.nixos.includeAllModules enabled
* nixos: don't include package path in option descriptions
See https://github.com/9001/copyparty/pull/1193, this actually fixes the issue
* nixos: fix formatting of services.copyparty.volumes.<name>.access
List will now show up properly on the nixos manual!
* nixos: add or improve inline code blocks in option descriptions