jiebi/CodeConvo huggingface dataset:
Code change:
I would like to use to encrypt my home directory. is already packaged (as , for some reason) What's missing is the PAM setup (). Given that exists for EcryptFS, I would like to request support for via the option, or something similar. I am aware that EcryptFS is available, to achieve the same goals, however it seems to be considered deprecated by other distributions (, ) and has some which I am not comfortable with.
This is just to say hi and to share that I too am interested in this feature
I marked this as stale due to inactivity. &rarr;

Related discussion:
text: <ins> import ./make-test-python.nix ({ ... }: { name = "fscrypt"; nodes.machine = { pkgs, ... }: { imports = [ ./common/user-account.nix ]; security.pam.enableFscrypt = true; }; testScript = '' def login_as_alice(): machine.wait_until_tty_matches("1", "login: ") machine.send_chars("alicen") machine.wait_until_tty_matches("1", "Password: ") machine.send_chars("foobarn") machine.wait_until_tty_matches("1", "alice@machine") def logout(): machine.send_chars("logoutn") machine.wait_until_tty_matches("1", "login: ") machine.wait_for_unit("default.target") with subtest("Enable fscrypt on filesystem"): machine.succeed("tune2fs -O encrypt /dev/vda") machine.succeed("fscrypt setup --quiet --force --time=1ms") with subtest("Set up alice with an fscrypt-enabled home directory"): machine.succeed("(echo foobar; echo foobar) | passwd alice") machine.succeed("chown -R alice.users ~alice") machine.succeed("echo foobar | fscrypt encrypt --skip-unlock --source=pam_passphrase --user=alice /home/alice") with subtest("Create file as alice"): login_as_alice() machine.succeed("echo hello > /home/alice/world") logout() # Wait for logout to be processed machine.sleep(1) with subtest("File should not be readable without being logged in as alice"): machine.fail("cat /home/alice/world") with subtest("File should be readable again as alice"): login_as_alice() machine.succeed("cat /home/alice/world") logout() ''; }) </ins>
Code change:
Project description homepage URL: https://xd- source URL: license: mit platforms: linux
I marked this as stale due to inactivity. &rarr;

Related discussion:
text: githubId = 16385648; name = "Niko Pavlinek"; }; <ins> nixbitcoin = { email = "nixbitcoin@i2pmail.org"; github = "nixbitcoin"; githubId = 45737139; name = "nixbitcoindev"; keys = [{ longkeyid = "rsa4096/0xDD11F9AD5308B3BA"; fingerprint = "577A 3452 7F3E 2A85 E80F  E164 DD11 F9AD 5308 B3BA"; }]; }; </ins> nixinator = { email = "33lockdown33@protonmail.com"; github = "nixinator";
Code change:
Project description homepage URL: https://xd- source URL: license: mit platforms: linux
I marked this as stale due to inactivity. &rarr;

Related discussion:
text: <ins> { pkgs, buildGoModule, fetchFromGitHub, lib, perl }: buildGoModule rec { pname = "XD"; version = "0.4.0"; src = fetchFromGitHub { owner = "majestrate"; repo = "XD"; rev = "v${version}"; sha256 = "sha256-fXENoqhR04TYS/kAJUqsqa0+j+KyzdsMlXIZ2GMPMhc="; }; vendorSha256 = "1wg3cym2rwrhjsqlgd38l8mdq5alccz808465117n3vyga9m35lq"; checkInputs = [ perl ]; postInstall = '' ln -s $out/bin/XD $out/bin/XD-CLI ''; meta = with lib; { description = "i2p bittorrent client"; homepage = "https://xd-torrent.github.io"; maintainers = with maintainers; [ nixbitcoin ]; license = licenses.mit; platforms = platforms.linux; }; } </ins>
Code change:
Project description homepage URL: https://xd- source URL: license: mit platforms: linux
I marked this as stale due to inactivity. &rarr;

Related discussion:
text: picom = callPackage ../applications/window-managers/picom {}; <ins> xd = callPackage ../applications/networking/p2p/xd {}; </ins> xdaliclock = callPackage ../tools/misc/xdaliclock {}; xdg-dbus-proxy = callPackage ../development/libraries/xdg-dbus-proxy { };
Code change:
Describe the bug arrow-cpp cannot be installed on Darwin To Reproduce Steps to reproduce the behavior: -env -i arrow-cpp Expected behavior Successful installation Additional context nix-build -A arrow-cpp from nixpkgs master fails with this error: Notify maintainers Metadata Please run and paste the result. system: host os: multi-user?: sandbox: version: channels(lclaude): nixpkgs: Maintainer information:

Related discussion:
text: sha256 = "1nl4y1rwdl0gn67v7l05ibc4lwkn6x7fhwbmslmm08cqmwfjsx3y"; stripLen = 1; }) <ins> # fix build for "ZSTD_SOURCE=SYSTEM" (fetchpatch { url = "https://github.com/apache/arrow/commit/13cb3dbded1928d2e96574895bebaf9098a4796d.diff"; sha256 = "12z3ys47qp2x8f63lggiyj4xs2kmg804ri4xqysw5krbjz2hr6rb"; stripLen = 1; }) </ins> ] ++ lib.optionals (!enableShared) [ # The shared jemalloc lib is unused and breaks in static mode due to missing -fpic. ./jemalloc-disable-shared.patch
Code change:
Describe the bug arrow-cpp cannot be installed on Darwin To Reproduce Steps to reproduce the behavior: -env -i arrow-cpp Expected behavior Successful installation Additional context nix-build -A arrow-cpp from nixpkgs master fails with this error: Notify maintainers Metadata Please run and paste the result. system: host os: multi-user?: sandbox: version: channels(lclaude): nixpkgs: Maintainer information:

Related discussion:
text: "-DARROW_WITH_SNAPPY=ON" "-DARROW_WITH_ZLIB=ON" "-DARROW_WITH_ZSTD=ON" <ins> "-DARROW_ZSTD_USE_SHARED=OFF" # TODO use shared zstd once #91984 hits the master </ins> # Parquet options: "-DARROW_PARQUET=ON" "-DPARQUET_BUILD_EXECUTABLES=ON"
Code change:
Describe the bug arrow-cpp cannot be installed on Darwin To Reproduce Steps to reproduce the behavior: -env -i arrow-cpp Expected behavior Successful installation Additional context nix-build -A arrow-cpp from nixpkgs master fails with this error: Notify maintainers Metadata Please run and paste the result. system: host os: multi-user?: sandbox: version: channels(lclaude): nixpkgs: Maintainer information:

Related discussion:
text: arrayfire = callPackage ../development/libraries/arrayfire {}; arrow-cpp = callPackage ../development/libraries/arrow-cpp ({ <ins> # Workaround until #91984 is in, this will need to be removed later. zstd = zstd.override { enableShared = false; }; </ins> } // stdenv.lib.optionalAttrs (stdenv.hostPlatform.isi686 && stdenv.cc.isGNU) { stdenv = overrideCC stdenv buildPackages.gcc6; # hidden symbol `__divmoddi4' });
Code change:
Describe the bug Putting a valid certificate name in will cause nixos-rebuild to fail. To Reproduce Steps to reproduce the behavior: this line in . This command will fail. Expected behavior finishes sucessfully. Additional context This error message is related to : I guess this error is caused by switching to python 3. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Metadata Please run and paste the result. Maintainer information:
isn't compatible with Python 3, it seems. We'll need to update or carry a patch.
MRTC:

Related discussion:
text: { stdenv, fetchurl, nss, python3 , blacklist ? [] <del> , includeEmail ? false </del> <ins> # Used for tests only , runCommand , cacert , openssl </ins> }: with stdenv.lib;
Code change:
Describe the bug Putting a valid certificate name in will cause nixos-rebuild to fail. To Reproduce Steps to reproduce the behavior: this line in . This command will fail. Expected behavior finishes sucessfully. Additional context This error message is related to : I guess this error is caused by switching to python 3. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Metadata Please run and paste the result. Maintainer information:
isn't compatible with Python 3, it seems. We'll need to update or carry a patch.
MRTC:

Related discussion:
text: EOF cat ${certdata2pem} > certdata2pem.py <del> patch -p1 < ${./fix-unicode-ca-names.patch} ${optionalString includeEmail '' # Disable CAs used for mail signing substituteInPlace certdata2pem.py --replace ['CKA_TRUST_EMAIL_PROTECTION'] ''' ''} </del> ''; buildPhase = ''
Code change:
Describe the bug Putting a valid certificate name in will cause nixos-rebuild to fail. To Reproduce Steps to reproduce the behavior: this line in . This command will fail. Expected behavior finishes sucessfully. Additional context This error message is related to : I guess this error is caused by switching to python 3. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Metadata Please run and paste the result. Maintainer information:
isn't compatible with Python 3, it seems. We'll need to update or carry a patch.
MRTC:

Related discussion:
text: setupHook = ./setup-hook.sh; passthru.updateScript = ./update.sh; <ins> passthru.tests = { # Test that building this derivation with a blacklist works, and that UTF-8 is supported. blacklist-utf8 = let blacklistCAToFingerprint = { # "blacklist" uses the CA name from the NSS bundle, but we check for presence using the SHA256 fingerprint. "CFCA EV ROOT" = "5C:C3:D7:8E:4E:1D:5E:45:54:7A:04:E6:87:3E:64:F9:0C:F9:53:6D:1C:CC:2E:F8:00:F3:55:C4:C5:FD:70:FD"; "NetLock Arany (Class Gold) Főtanúsítvány" = "6C:61:DA:C3:A2:DE:F0:31:50:6B:E0:36:D2:A6:FE:40:19:94:FB:D1:3D:F9:C8:D4:66:59:92:74:C4:46:EC:98"; }; mapBlacklist = f: concatStringsSep "n" (mapAttrsToList f blacklistCAToFingerprint); in runCommand "verify-the-cacert-filter-output" { cacert = cacert.unbundled; cacertWithExcludes = (cacert.override { blacklist = builtins.attrNames blacklistCAToFingerprint; }).unbundled; nativeBuildInputs = [ openssl ]; } '' isPresent() { # isPresent <unbundled-dir> <ca name> <ca sha256 fingerprint> for f in $1/etc/ssl/certs/*.crt; do fingerprint="$(openssl x509 -in "$f" -noout -fingerprint -sha256 | cut -f2 -d=)" if [[ "x$fingerprint" == "x$3" ]]; then return 0 fi done return 1 } # Ensure that each certificate is in the main "cacert". ${mapBlacklist (caName: caFingerprint: '' isPresent "$cacert" "${caName}" "${caFingerprint}" || ({ echo "CA fingerprint ${caFingerprint} (${caName}) is missing from the CA bundle. Consider picking a different CA for the blacklist test." >&2 exit 1 }) '')} # Ensure that each certificate is NOT in the "cacertWithExcludes". ${mapBlacklist (caName: caFingerprint: '' isPresent "$cacertWithExcludes" "${caName}" "${caFingerprint}" && ({ echo "CA fingerprint ${caFingerprint} (${caName}) is present in the cacertWithExcludes bundle." >&2 exit 1 }) '')} touch $out ''; }; </ins> meta = { homepage = "https://curl.haxx.se/docs/caextract.html"; description = "A bundle of X.509 certificates of public Certificate Authorities (CA)"; platforms = platforms.all; <del> maintainers = with maintainers; [ fpletz ]; </del> <ins> maintainers = with maintainers; [ andir fpletz lukegb ]; </ins> license = licenses.mpl20; }; }
Code change:
Describe the bug Putting a valid certificate name in will cause nixos-rebuild to fail. To Reproduce Steps to reproduce the behavior: this line in . This command will fail. Expected behavior finishes sucessfully. Additional context This error message is related to : I guess this error is caused by switching to python 3. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Metadata Please run and paste the result. Maintainer information:
isn't compatible with Python 3, it seems. We'll need to update or carry a patch.
MRTC:

Related discussion:
text: <del> --- a/certdata2pem.py	2017-08-01 23:10:00.000000000 +0300 +++ b/certdata2pem.py	2017-08-01 23:08:21.131297636 +0300 @@ -88,7 +88,7 @@ # Read blacklist. blacklist = [] if os.path.exists('blacklist.txt'): -    for line in open('blacklist.txt', 'r'): +    for line in io.open('blacklist.txt', 'r', encoding='utf-8'): line = line.strip() if line.startswith('#') or len(line) == 0: continue @@ -101,7 +101,7 @@ if obj['CKA_CLASS'] != 'CKO_NSS_TRUST': continue if obj['CKA_LABEL'] in blacklist: -        print("Certificate %s blacklisted, ignoring." % obj['CKA_LABEL']) +        print("Certificate %s blacklisted, ignoring." % unicode(obj['CKA_LABEL']).encode('utf-8')) elif obj['CKA_TRUST_SERVER_AUTH'] == 'CKT_NSS_TRUSTED_DELEGATOR': trust[obj['CKA_LABEL']] = True elif obj['CKA_TRUST_EMAIL_PROTECTION'] == 'CKT_NSS_TRUSTED_DELEGATOR': </del>
Code change:
Describe the bug doesn't run on Darwin, due to some Perl / shebang errors. To Reproduce Steps to reproduce the behavior: Darwin, run the only produced binary , ie. following output is produced: Expected behavior The executable should output its help text when run without arguments: Additional context I managed to get it running using a wrapper script that runs . Notify maintainers Metadata Maintainer information:

Related discussion:
text: <del> { lib, file, fetchFromGitLab, buildPerlPackage, ArchiveZip, ArchiveCpio }: </del> <ins> { stdenv, file, fetchFromGitLab, buildPerlPackage, ArchiveZip, ArchiveCpio, shortenPerlShebang }: </ins> buildPerlPackage rec { pname = "strip-nondeterminism";
Code change:
Describe the bug doesn't run on Darwin, due to some Perl / shebang errors. To Reproduce Steps to reproduce the behavior: Darwin, run the only produced binary , ie. following output is produced: Expected behavior The executable should output its help text when run without arguments: Additional context I managed to get it running using a wrapper script that runs . Notify maintainers Metadata Maintainer information:

Related discussion:
text: # stray test failure doCheck = false; <ins> nativeBuildInputs = stdenv.lib.optionals stdenv.isDarwin [ shortenPerlShebang ]; </ins> buildInputs = [ ArchiveZip ArchiveCpio file ]; perlPostHook = ''
Code change:
Describe the bug doesn't run on Darwin, due to some Perl / shebang errors. To Reproduce Steps to reproduce the behavior: Darwin, run the only produced binary , ie. following output is produced: Expected behavior The executable should output its help text when run without arguments: Additional context I managed to get it running using a wrapper script that runs . Notify maintainers Metadata Maintainer information:

Related discussion:
text: rm $out/share/man/man1/dh_strip_nondeterminism.1.gz ''; <del> meta = with lib; { </del> <ins> postInstall = stdenv.lib.optionalString stdenv.isDarwin '' shortenPerlShebang $out/bin/strip-nondeterminism ''; meta = with stdenv.lib; { </ins> description = "A Perl module for stripping bits of non-deterministic information"; homepage = "https://reproducible-builds.org/"; license = licenses.gpl3;
Code change:
Describe the bug Bisect indicates as the likely point of breakage. cc To Reproduce
I can't reproduce the error hydra has, it fails earlier for me on current master:
We've had a staging-next merge in the meantime; this symlink problem was fixed by .
Local build works with my changes in . Should this be tested via ofborg? If so how do I do this (can I even do this)?

Related discussion:
text: services.dhcpd4 = { enable = true; interfaces = map (n: "eth${toString n}") vlanIfs; <del> extraConfig = '' '' + flip concatMapStrings vlanIfs (n: '' </del> <ins> extraConfig = flip concatMapStrings vlanIfs (n: '' </ins> subnet 192.168.${toString n}.0 netmask 255.255.255.0 { option routers 192.168.${toString n}.1; <ins> range 192.168.${toString n}.2 192.168.${toString n}.254; </ins> } '') ; <del> machines = lib.flip map vlanIfs (vlan: </del> <ins> machines = flip map vlanIfs (vlan: </ins> { hostName = "client${toString vlan}"; ethernetAddress = qemu-flags.qemuNicMac vlan 1;
Code change:
, CVSSv3=7.5 (nixos-20.03) CVSSv3=7.5 (nixos-20.03) Scanned versions: nixos-20.03: . May contain false positives. Cc Cc Cc
Backporting update that resolves these ().
Fixed in 20.03 and master.

Related discussion:
text: {stdenv , removeReferencesTo , lib <del> , fetchFromGitHub </del> <ins> , fetchurl </ins> , utillinux <ins> , gpgme </ins> , openssl <ins> , libuuid </ins> , coreutils , go , which , makeWrapper <ins> , cryptsetup </ins> , squashfsTools , buildGoPackage}:
Code change:
, CVSSv3=7.5 (nixos-20.03) CVSSv3=7.5 (nixos-20.03) Scanned versions: nixos-20.03: . May contain false positives. Cc Cc Cc
Backporting update that resolves these ().
Fixed in 20.03 and master.

Related discussion:
text: buildGoPackage rec { pname = "singularity"; <del> version = "3.2.1"; </del> <ins> version = "3.6.1"; </ins> <del> src = fetchFromGitHub { owner = "sylabs"; repo = "singularity"; rev = "v${version}"; sha256 = "14lhxwy21s7q081x7kbnvkjsbxgsg2f181qlzmlxcn6n7gfav3kj"; </del> <ins> src = fetchurl { url = "https://github.com/hpcng/singularity/releases/download/v${version}/singularity-${version}.tar.gz"; sha256 = "070jj6kbiw23sd2p4xhvmyb8gd83imwgisdf18ahkwp7dq85db3c"; </ins> }; goPackagePath = "github.com/sylabs/singularity"; goDeps = ./deps.nix; <del> buildInputs = [ openssl ]; nativeBuildInputs = [ removeReferencesTo utillinux which makeWrapper ]; </del> <ins> buildInputs = [ gpgme openssl libuuid ]; nativeBuildInputs = [ removeReferencesTo utillinux which makeWrapper cryptsetup ]; </ins> propagatedBuildInputs = [ coreutils squashfsTools ]; <del> prePatch = '' substituteInPlace internal/pkg/build/copy/copy.go  </del> <ins> postPatch = '' substituteInPlace internal/pkg/build/files/copy.go  </ins> --replace /bin/cp ${coreutils}/bin/cp '';
Code change:
, CVSSv3=7.5 (nixos-20.03) CVSSv3=7.5 (nixos-20.03) Scanned versions: nixos-20.03: . May contain false positives. Cc Cc Cc
Backporting update that resolves these ().
Fixed in 20.03 and master.

Related discussion:
text: # Don't install SUID binaries sed -i 's/-m 4755/-m 755/g' builddir/Makefile ''; buildPhase = '' <ins> runHook preBuild </ins> make -C builddir <ins> runHook postBuild </ins> ''; installPhase = '' <ins> runHook preInstall </ins> make -C builddir install LOCALSTATEDIR=$bin/var chmod 755 $bin/libexec/singularity/bin/starter-suid <del> wrapProgram $bin/bin/singularity --prefix PATH : ${stdenv.lib.makeBinPath propagatedBuildInputs} </del> <ins> # Explicitly configure paths in the config file sed -i 's|^# mksquashfs path =.*$|mksquashfs path = ${stdenv.lib.makeBinPath [squashfsTools]}/mksquashfs|' $bin/etc/singularity/singularity.conf sed -i 's|^# cryptsetup path =.*$|cryptsetup path = ${stdenv.lib.makeBinPath [cryptsetup]}/cryptsetup|' $bin/etc/singularity/singularity.conf runHook postInstall </ins> ''; postFixup = '' <del> find $bin/ -type f -executable -exec remove-references-to -t ${go} '{}' + || true # These etc scripts shouldn't have their paths patched cp etc/actions/* $bin/etc/singularity/actions/ </del> <ins> find $bin/libexec/ -type f -executable -exec remove-references-to -t ${go} '{}' + || true </ins> ''; meta = with stdenv.lib; { <del> homepage = http://www.sylabs.io/; </del> <ins> homepage = "http://www.sylabs.io/"; </ins> description = "Application containers for linux"; license = licenses.bsd3; platforms = platforms.linux;
Code change:
, CVSSv3=7.5 (nixos-20.03) CVSSv3=7.5 (nixos-20.03) Scanned versions: nixos-20.03: . May contain false positives. Cc Cc Cc
Backporting update that resolves these ().
Fixed in 20.03 and master.

Related discussion:
text: cd .. mkdir -p /var/singularity/mnt/{container,final,overlay,session,source} echo "root:x:0:0:System administrator:/root:/bin/sh" > /etc/passwd <ins> echo > /etc/resolv.conf </ins> TMPDIR=$(pwd -P) singularity build $out ./img '');
Code change:
Describe the bug xscreensaver-demo is both a way to preview individual screensavers and the frontend for configuring xscreensaver. It should be installed alongside all the other xscreensaver binaries; however, it isn't, although its man page is. To Reproduce Steps to reproduce the behavior: Expected behavior is available in . Notify maintainers (raskin) Metadata system: host os: multi-user?: sandbox: version: channels(root): nixpkgs: Maintainer information:

Related discussion:
text: { stdenv, fetchurl, pkgconfig, bc, perl, perlPackages, pam, libXext, libXScrnSaver, libX11 , libXrandr, libXmu, libXxf86vm, libXrender, libXxf86misc, libjpeg, libGLU, libGL, gtk2 <del> , libxml2, libglade, intltool, xorg, makeWrapper, gle </del> <ins> , libxml2, libglade, intltool, xorg, makeWrapper, gle, gdk-pixbuf, gdk-pixbuf-xlib </ins> , forceInstallAllHacks ? false }:
Code change:
Describe the bug xscreensaver-demo is both a way to preview individual screensavers and the frontend for configuring xscreensaver. It should be installed alongside all the other xscreensaver binaries; however, it isn't, although its man page is. To Reproduce Steps to reproduce the behavior: Expected behavior is available in . Notify maintainers (raskin) Metadata system: host os: multi-user?: sandbox: version: channels(root): nixpkgs: Maintainer information:

Related discussion:
text: buildInputs = [ pkgconfig bc perl libjpeg libGLU libGL gtk2 libxml2 libglade pam libXext libXScrnSaver libX11 libXrandr libXmu libXxf86vm libXrender <del> libXxf86misc intltool xorg.appres makeWrapper gle </del> <ins> libXxf86misc intltool xorg.appres makeWrapper gle gdk-pixbuf gdk-pixbuf-xlib </ins> ]; preConfigure =
Code change:
Dokuwiki login page does not work (timeout) when https is not enabled in the webserver. Steps to reproduce the behavior: Add some user using the usersFile option and disable and options. Click on "Log In" in the top right, fill in form, and click the login button. The page now redirects to a non-existing https url. Disabling these options should allow Dokuwiki to work on a non-HTTPS enabled webserver. Currently when trying to login, the page will time out as the wiki redirects the user to a https version of the url. While the default https enabled webserver is good for security, it is not always needed or wanted. For example, when you have the wiki on an internal trusted network with no access from the internet such as a wireguard VPN of a few personal devices. In that situation, the SSL adds no value and makes it harder to use, as you would need to distribute self signed certificates to all your devices.

Related discussion:
text: enable = true; virtualHosts = mapAttrs (hostName: cfg:  mkMerge [ cfg.nginx { root = mkForce "${pkg hostName cfg}/share/dokuwiki"; <del> extraConfig = "fastcgi_param HTTPS on;"; </del> <ins> extraConfig = lib.optionalString (cfg.nginx.addSSL || cfg.nginx.forceSSL || cfg.nginx.onlySSL || cfg.nginx.enableACME) "fastcgi_param HTTPS on;"; </ins> locations."~ /(conf/|bin/|inc/|install.php)" = { extraConfig = "deny all;";
Code change:
Dokuwiki login page does not work (timeout) when https is not enabled in the webserver. Steps to reproduce the behavior: Add some user using the usersFile option and disable and options. Click on "Log In" in the top right, fill in form, and click the login button. The page now redirects to a non-existing https url. Disabling these options should allow Dokuwiki to work on a non-HTTPS enabled webserver. Currently when trying to login, the page will time out as the wiki redirects the user to a https version of the url. While the default https enabled webserver is good for security, it is not always needed or wanted. For example, when you have the wiki on an internal trusted network with no access from the internet such as a wireguard VPN of a few personal devices. In that situation, the SSL adds no value and makes it harder to use, as you would need to distribute self signed certificates to all your devices.

Related discussion:
text: fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param REDIRECT_STATUS 200; fastcgi_pass unix:${config.services.phpfpm.pools."dokuwiki-${hostName}".socket}; <del> fastcgi_param HTTPS on; </del> <ins> ${lib.optionalString (cfg.nginx.addSSL || cfg.nginx.forceSSL || cfg.nginx.onlySSL || cfg.nginx.enableACME) "fastcgi_param HTTPS on;"} </ins> ''; }; }]) eachSite;