guix/gnu/services/web.scm, branch master

gnu: services: Export nginx-server-configuration-try-files.

2026-08-03T01:27:04+00:00

* gnu/services/web.scm: Export nginx-server-configuration-try-files.

Change-Id: Ia6132547b32c887fb6353c2eeb3104bd82d07acf

services: Eliminate tab-based indentations.

2026-07-27T02:53:41+00:00

* gnu/services/admin.scm: Replace tabs with 8 spaces.
* gnu/services/dbus.scm: Likewise.
* gnu/services/power.scm: Likewise.
* gnu/services/ssh.scm: Likewise.
* gnu/services/virtualization.scm: Likewise.
* gnu/services/web.scm: Likewise.
* gnu/services/xorg.scm: Likewise.
* gnu/services/networking.scm: Reindent lines with tabs.

services: nginx: Use a fixed location for the nginx configuration file.

2026-06-03T04:52:35+00:00

The motivation is twofold:

 1. We can ensure the presence of the nginx default configuration fragments in
    the configuration file directory;
 2. 'herd reload nginx' can now be used to reload an updated configuration
    file.

Before this change, 'include fastcgi_params;', for example, would fail with
error:

  nginx: [emerg] open() "/gnu/store/fastcgi_params" failed
  (2: No such file or directory) in /gnu/store/...-nginx.conf:50

* gnu/services/web.scm (%nginx-configuration-file): New variable.
(nginx-activation): Delay configuration file check to...
(nginx-shepherd-service): ... a new one-shot 'nginx-init' service.  Adjust to
use the %nginx-configuration-file variable for the configuration file.
: Add a new 'configuration' action.
(nginx-conf-files, nginx-etc-directory): New procedures.
(nginx-service-type): Extend etc-service-type with nginx-service-type.
* gnu/tests/web.scm (%nginx-servers): Add an include directive to test config
to ensure it now works.

Merges: !8811
Change-Id: I26882ab01288ec4dd374e9f282e95ffa33dfa3cc

services: mumi: Make rsync and index timer event configurable.

2026-05-29T08:48:26+00:00

* gnu/services/web.scm ()[rsync-and-index-event]: New
field.
* gnu/services/web.scm (mumi-shepherd-services): Use it.
* doc/guix.texi (Web Services)[Mumi]: Document it.

Change-Id: I5910c4a93106b44eaf3900d6a72fb501c01b8773

services: gunicorn: Allow configuration of control-socket.

2026-05-26T16:43:22+00:00

Since gunicorn is run in its own Linux namespace, where $HOME is
read-only, creating that control-socket fails and prevents gunicorn
from starting by default.  Therefore, this patch disables it by
default but allows supplying a custom path via a newly added
configuration field.

* gnu/services/web.scm (gunicorn-app): Add gunicorn-app-control-socket.
(gunicorn-shepherd-services): Respect gunicorn-app-control-socket.
* doc/guix.texi (gunicorn-app): Document it.

Change-Id: I648079b630293a47801713425728a4d602c8088c

services: gunicorn: Fix usage with non-uri listening addresses.

2026-05-26T16:43:16+00:00

If the provided unix-socket? parameter is not an URI uri->string returns
to be raised.  For example, on inputs such as "0.0.0.0:8080".  This is
fixed in this commit by first checking if the input parameter is a valid
URI, before calling uri-scheme.

* gnu/tests/web.scm (unix-socket?): Check URI before calling uri-scheme.

Change-Id: Icd9cb1e215a09b1f5dcbec4630e7df3256cde4aa

services: nginx: Add nginx to the system profile.

2026-05-25T04:58:07+00:00

* gnu/services/web.scm (nginx-service-type): Extend the profile-service-type
with the nginx package.

Change-Id: I72b592c603a971bf9fbb64fe5ce02420010ac363

services: nginx: Adjust indentation.

2026-05-25T04:58:07+00:00

* gnu/services/web.scm (nginx-service-type): Adjust indentation.

Change-Id: I86696b13f7b6209bb3da7970ad4252e8de17305b

services: gunicorn: Allow configuration of socket user/group/mode

2026-05-17T15:59:35+00:00

Without this change, the mode is not at all configurable meaning
that—depending on the umask(1)—it may allow access to others.  Further,
in many scenarios the owner/group of the Unix domain socket should
differ from the owner/group of the gunicorn process.  For example,
we might want to grant the nginx group access to the socket but not
use that as the GID for the gunicorn process.

* gnu/services/web.scm (): Add socket-user, socket-group
and socket-mode.
* gnu/services/web.scm (gunicorn-activation): Respect
gunicorn-app-socket-user, gunicorn-socket-app-group, and
gunicorn-app-socket-mode.
* doc/guix.texi (Guix Services): Document new record fields.

Change-Id: I1fe5b77deb791c38c1642753a52098d304124049

services: go-webdav: Don't run service as root.

2026-05-01T05:46:47+00:00

Instead, run it as the created go-webdav user. Since go-webdav doesn't
drop privileges by itself this requires explicitly passing the users and
group via make-forkexec-constructor, which was overlooked here.

Without this patch, the account created by go-webdav-account-service
is just not used at all, which is not what was intended here.

* gnu/services/web.scm (go-webdav-shepherd-service): Pass #:user as well
as #:group to make-forkexec-constructor.

Change-Id: Ib48aa7884aca84c488133a035a76a7edfaaf0aab
Signed-off-by: Liliana Marie Prikler