Unverified Commit 0f58ce3b authored by Weijia Wang's avatar Weijia Wang Committed by GitHub
Browse files

Merge pull request #300487 from davidkna/kavita-token 

nixos/kavita: document new `tokenKeyFile` requirements
parents 06746203 2bde9aa8

nixos/doc/manual/release-notes/rl-2405.section.md

+2 −1
Original line number Diff line number Diff line
@@ -506,7 +506,8 @@ The pre-existing [services.ankisyncd](#opt-services.ankisyncd.enable) has been m 


- `services.kavita` now uses the freeform option `services.kavita.settings` for the application settings file.

  The options `services.kavita.ipAdresses` and `services.kavita.port` now exist at `services.kavita.settings.IpAddresses`

  and `services.kavita.settings.IpAddresses`.

  and `services.kavita.settings.IpAddresses`. The file at `services.kavita.tokenKeyFile` now needs to contain a secret with

  512+ bits instead of 128+ bits.



- The `krb5` module has been rewritten and moved to `security.krb5`, moving all options but `security.krb5.enable` and `security.krb5.package` into `security.krb5.settings`.

nixos/modules/services/web-apps/kavita.nix

+2 −2
Original line number Diff line number Diff line
@@ -34,8 +34,8 @@ in 
    tokenKeyFile = lib.mkOption {

      type = lib.types.path;

      description = lib.mdDoc ''

        A file containing the TokenKey, a secret with at 128+ bits.

        It can be generated with `head -c 32 /dev/urandom | base64`.

        A file containing the TokenKey, a secret with at 512+ bits.

        It can be generated with `head -c 64 /dev/urandom | base64 --wrap=0`.

      '';

    };