···45 even though <literal>HDMI-0</literal> is the first head in the list.
46 </para>
47 </listitem>
00000000000000000000000000048</itemizedlist>
4950<para>The following new services were added since the last release:</para>
···62<itemizedlist>
63 <listitem>
64 <para>
65- <literal>aiccu</literal> package was removed. This is due to SixXS
66 <link xlink:href="https://www.sixxs.net/main/"> sunsetting</link> its IPv6 tunnel.
000000067 </para>
68 </listitem>
69 <listitem>
···202 <command>gpgv</command>, etc.
203 </para>
204 </listitem>
205-206 <listitem>
207 <para>
208 <literal>services.mysql</literal> now has declarative
···238-- Optionally, delete the password-authenticated user:
239-- DROP USER 'root'@'localhost';
240</programlisting>
241-000000000000000242 </para>
243 </listitem>
244</itemizedlist>
···296 </listitem>
297 <listitem>
298 <para>
299- <literal>sha256</literal> argument value of
300- <literal>dockerTools.pullImage</literal> expression must be
301- updated since the mechanism to download the image has been
302- changed. Skopeo is now used to pull the image instead of the
303- Docker daemon.
304 </para>
305 </listitem>
306-0000000000000000000000000000000000000307</itemizedlist>
308309</section>
···45 even though <literal>HDMI-0</literal> is the first head in the list.
46 </para>
47 </listitem>
48+ <listitem>
49+ <para>
50+ The handling of SSL in the nginx module has been cleaned up, renaming
51+ the misnomed <literal>enableSSL</literal> to <literal>onlySSL</literal>
52+ which reflects its original intention. This is not to be used with the
53+ already existing <literal>forceSSL</literal> which creates a second
54+ non-SSL virtual host redirecting to the SSL virtual host. This by
55+ chance had worked earlier due to specific implementation details. In
56+ case you had specified both please remove the <literal>enableSSL</literal>
57+ option to keep the previous behaviour.
58+ </para>
59+ <para>
60+ Another <literal>addSSL</literal> option has been introduced to configure
61+ both a non-SSL virtual host and an SSL virtual host.
62+ </para>
63+ <para>
64+ Options to configure <literal>resolver</literal>s and
65+ <literal>upstream</literal>s have been introduced. See their information
66+ for further details.
67+ </para>
68+ <para>
69+ The <literal>port</literal> option has been replaced by a more generic
70+ <literal>listen</literal> option which makes it possible to specify
71+ multiple addresses, ports and SSL configs dependant on the new SSL
72+ handling mentioned above.
73+ </para>
74+ </listitem>
75</itemizedlist>
7677<para>The following new services were added since the last release:</para>
···89<itemizedlist>
90 <listitem>
91 <para>
92+ The <literal>aiccu</literal> package was removed. This is due to SixXS
93 <link xlink:href="https://www.sixxs.net/main/"> sunsetting</link> its IPv6 tunnel.
94+ </para>
95+ </listitem>
96+ <listitem>
97+ <para>
98+ The <literal>fanctl</literal> package and <literal>fan</literal> module
99+ have been removed due to the developers not upstreaming their iproute2
100+ patches and lagging with compatibility to recent iproute2 versions.
101 </para>
102 </listitem>
103 <listitem>
···236 <command>gpgv</command>, etc.
237 </para>
238 </listitem>
0239 <listitem>
240 <para>
241 <literal>services.mysql</literal> now has declarative
···271-- Optionally, delete the password-authenticated user:
272-- DROP USER 'root'@'localhost';
273</programlisting>
274+ </para>
275+ </listitem>
276+ <listitem>
277+ <para>
278+ <literal>sha256</literal> argument value of
279+ <literal>dockerTools.pullImage</literal> expression must be
280+ updated since the mechanism to download the image has been
281+ changed. Skopeo is now used to pull the image instead of the
282+ Docker daemon.
283+ </para>
284+ </listitem>
285+ <listitem>
286+ <para>
287+ Templated systemd services e.g <literal>container@name</literal> are
288+ now handled currectly when switching to a new configuration, resulting
289+ in them being reloaded.
290 </para>
291 </listitem>
292</itemizedlist>
···344 </listitem>
345 <listitem>
346 <para>
347+ Definitions for <filename>/etc/hosts</filename> can now be sped
348+ declaratively with <literal>networking.hosts</literal>.
000349 </para>
350 </listitem>
351+ <listitem>
352+ <para>
353+ Two new options have been added to the installer loader, in addition
354+ to the default having changed. The kernel log verbosity has been lowered
355+ to the upstream default for the default options, in order to not spam
356+ the console when e.g. joining a network.
357+ </para>
358+ <para>
359+ This therefore leads to adding a new <literal>debug</literal> option
360+ to set the log level to the previous verbose mode, to make debugging
361+ easier, but still accessible easily.
362+ </para>
363+ <para>
364+ Additionally a <literal>copytoram</literal> option has been added,
365+ which makes it possible to remove the install medium after booting.
366+ This allows tethering from your phone after booting from it.
367+ </para>
368+ <para>
369+ <literal>services.gitlab-runner.configOptions</literal> has been added
370+ to specify the configuration of gitlab-runners declaratively.
371+ </para>
372+ <para>
373+ <literal>services.jenkins.plugins</literal> has been added
374+ to install plugins easily, this can be generated with jenkinsPlugins2nix.
375+ </para>
376+ <para>
377+ <literal>services.postfix.config</literal> has been added
378+ to specify the main.cf with NixOS options. Additionally other options
379+ have been added to the postfix module and has been improved further.
380+ </para>
381+ <para>
382+ The GitLab package and module have been updated to the latest 9.5 release.
383+ </para>
384+ <para>
385+ The <literal>systemd-boot</literal> boot loader now lists the NixOS
386+ version, kernel version and build date of all bootable generations.
387+ </para>
388+ </listitem>
389</itemizedlist>
390391</section>