zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

nginx: 1.30.1 security fix via overlay
Check Flake / check-flake (push) Has been cancelled
Details

Browse Source 
nixos-unstable (the channel branch this flake tracks) does not yet
contain nginx 1.30.1. Pull the fix forward from nixpkgs master
(PR #519893, merged 2026-05-14) with a scoped nginxStable overlay
override. Remove once nixos-unstable advances past 2026-05-14.
This commit is contained in:
Zuckerberg
2026-05-15 15:34:51 -07:00
parent 36a2a424c5
commit 78852c6b0a
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
overlays/default.nix
+13
View File
@@ -32,6 +32,19 @@ in
]; ];
}); });
# nginx 1.30.0 -> 1.30.1: critical security fix. Pulled forward from
# nixpkgs master (PR #519893, merged 2026-05-14) because the
# nixos-unstable channel branch we track does not have it yet.
# Remove once nixos-unstable advances past 2026-05-14.
nginxStable = prev.nginxStable.overrideAttrs (old: rec {
version = "1.30.1";
src = prev.fetchurl {
url = "https://nginx.org/download/nginx-${version}.tar.gz";
hash = "sha256-mXZQANl0iWsxyliC2MJ5zj/n729cb58Kln7X/TQH+cw=";
};
});
nginx = final.nginxStable;
# Plasma Bigscreen: TV-optimized KDE shell (not yet packaged in nixpkgs) # Plasma Bigscreen: TV-optimized KDE shell (not yet packaged in nixpkgs)
plasma-bigscreen = import ./plasma-bigscreen.nix { plasma-bigscreen = import ./plasma-bigscreen.nix {
inherit (prev.kdePackages) inherit (prev.kdePackages)