nixpkgs/pkgs/servers/traefik/default.nix
Sefa Eyeoglu 78dc108938
traefik: 3.1.2 -> 3.1.4
This fixes CVE-2024-45410[0] (GHSA-62c8-mh53-4cqv[1]).

[0]: https://nvd.nist.gov/vuln/detail/CVE-2024-45410
[1]: https://github.com/traefik/traefik/security/advisories/GHSA-62c8-mh53-4cqv

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-09-24 09:34:18 +02:00

42 lines
1.2 KiB
Nix

{ lib, fetchzip, buildGo123Module, nixosTests }:
buildGo123Module rec {
pname = "traefik";
version = "3.1.4";
# Archive with static assets for webui
src = fetchzip {
url = "https://github.com/traefik/traefik/releases/download/v${version}/traefik-v${version}.src.tar.gz";
hash = "sha256-e77PCMeN6Ck6hQ3Rx7MU4EL+f/1kpA2E+gVcISoUnf4=";
stripRoot = false;
};
vendorHash = "sha256-iYwA/y9AuHomyEckOyl4845lkQkeBAFDsGiZWESylqs=";
subPackages = [ "cmd/traefik" ];
preBuild = ''
GOOS= GOARCH= CGO_ENABLED=0 go generate
CODENAME=$(grep -Po "CODENAME \?=\s\K.+$" Makefile)
ldflags="-s"
ldflags+=" -w"
ldflags+=" -X github.com/traefik/traefik/v${lib.versions.major version}/pkg/version.Version=${version}"
ldflags+=" -X github.com/traefik/traefik/v${lib.versions.major version}/pkg/version.Codename=$CODENAME"
'';
doCheck = false;
passthru.tests = { inherit (nixosTests) traefik; };
meta = with lib; {
homepage = "https://traefik.io";
description = "Modern reverse proxy";
changelog = "https://github.com/traefik/traefik/raw/v${version}/CHANGELOG.md";
license = licenses.mit;
maintainers = with maintainers; [ vdemeester ];
mainProgram = "traefik";
};
}