Skip to content

Commit

Permalink
nixos/darkhttpd: change listening address default to ::1
Browse files Browse the repository at this point in the history
We unconditionally pass --ipv6 to the binary. In older versions, setting
both --addr 127.0.0.1 and --ipv6 resulted in listening on [::],
a potential security issue. On the other hand, the binary started.

With the current version however, --ipv6 implies an IPv6 address in
--addr resulting in a crash with: "darkhttpd: malformed --addr argument"

While this commit is technically a BC-break, it should be harmless as
existing users either do not explicitly set the address and the server
refuses the start (making this change rather a fix) or they set the
address and are therefore unaffected.
  • Loading branch information
vojta001 committed Nov 3, 2024
1 parent 650fe87 commit abdadde
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion nixos/modules/services/web-servers/darkhttpd.nix
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ in {
};

address = mkOption {
default = "127.0.0.1";
default = "::1";
type = str;
description = ''
Address to listen on.
Expand Down

0 comments on commit abdadde

Please sign in to comment.