summaryrefslogtreecommitdiffstats
path: root/nixos/doc/manual/release-notes/rl-2103.xml
diff options
context:
space:
mode:
Diffstat (limited to 'nixos/doc/manual/release-notes/rl-2103.xml')
-rw-r--r--nixos/doc/manual/release-notes/rl-2103.xml44
1 files changed, 44 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2103.xml b/nixos/doc/manual/release-notes/rl-2103.xml
index 498ee0fa00ae..38262b508994 100644
--- a/nixos/doc/manual/release-notes/rl-2103.xml
+++ b/nixos/doc/manual/release-notes/rl-2103.xml
@@ -265,6 +265,36 @@
located in <literal>/run/rspamd</literal> instead of <literal>/run</literal>.
</para>
</listitem>
+ <listitem>
+ <para>
+ Enabling the Tor client no longer silently also enables and
+ configures Privoxy, and the
+ <varname>services.tor.client.privoxy.enable</varname> option has
+ been removed. To enable Privoxy, and to configure it to use
+ Tor's faster port, use the following configuration:
+ </para>
+ <programlisting>
+ <xref linkend="opt-services.privoxy.enable" /> = true;
+ <xref linkend="opt-services.privoxy.enableTor" /> = true;
+ </programlisting>
+ </listitem>
+ <listitem>
+ <para>
+ The options <literal>services.slurm.dbdserver.storagePass</literal>
+ and <literal>services.slurm.dbdserver.configFile</literal> have been removed.
+ Use <literal>services.slurm.dbdserver.storagePassFile</literal> instead to provide the database password.
+ Extra config options can be given via the option <literal>services.slurm.dbdserver.extraConfig</literal>. The actual configuration file is created on the fly on startup of the service.
+ This avoids that the password gets exposed in the nix store.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Starting with version 1.7.0, the project formerly named <literal>CodiMD</literal>
+ is now named <literal>HedgeDoc</literal>.
+ New installations will no longer use the old name for users, state directories and such, this needs to be considered when moving state to a more recent NixOS installation.
+ Based on <xref linkend="opt-system.stateVersion" />, existing installations will continue to work.
+ </para>
+ </listitem>
</itemizedlist>
</section>
@@ -372,6 +402,13 @@
</listitem>
<listitem>
<para>
+ The <literal>services.dnscrypt-proxy2</literal> module now takes the upstream's example configuration and updates it with the user's settings.
+
+ An option has been added to restore the old behaviour if you prefer to declare the configuration from scratch.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
NixOS now defaults to the unified cgroup hierarchy (cgroupsv2).
See the <link xlink:href="https://www.redhat.com/sysadmin/fedora-31-control-group-v2">Fedora Article for 31</link>
for details on why this is desirable, and how it impacts containers.
@@ -402,6 +439,13 @@
been dropped from upstream releases.
</para>
</listitem>
+ <listitem>
+ <para>
+ <xref linkend="opt-users.users._name_.createHome" /> now always ensures home directory permissions to be <literal>0700</literal>.
+ Permissions had previously been ignored for already existing home directories, possibly leaving them readable by others.
+ The option's description was incorrect regarding ownership management and has been simplified greatly.
+ </para>
+ </listitem>
</itemizedlist>
</section>
</section>