7e39bf3ba2
bicep/matrix/ooye: add rsync pull target for principal backups
2026-02-13 18:26:55 +09:00
c455c5a7e3
bicep/matrix/livekit: fix matrix domain in livekit, allow dan's server as well
2026-02-11 22:58:19 +01:00
91de031896
treewide: limit rsync pull target access to principal
2026-01-31 11:14:18 +09:00
cec69d89a8
bicep/{postgres,mysql}: fix old backup deletion (again)
2026-01-30 13:26:10 +09:00
af0bf7b254
bicep/{postgres,mysql}: fix old backup deletion
2026-01-29 14:57:46 +09:00
bcf8b1607f
bicep/{postgres,mysql}: use hardlink for latest backup file
2026-01-29 14:53:07 +09:00
1d46fd1ec6
bicep/{postgres,mysql}: keep multiple backups, point at latest with symlink
2026-01-29 14:16:34 +09:00
bac53be707
bicep/{postgres,mysql}: use zstd for backup compression
2026-01-29 13:50:35 +09:00
f08bd96b74
bicep/{postgres,mysql}: move backups to /data
2026-01-29 13:41:06 +09:00
8774c81d23
bicep/{postgres,mysql}: custom backup units
2026-01-29 13:32:28 +09:00
d6eca5c4e3
bicep/{postgres,mysql}: split config into several files
2026-01-29 13:18:25 +09:00
49d1122ee5
bicep/mysql: enable slow query logs
2026-01-28 14:55:52 +09:00
31bbf4b25f
bicep/synapse: enable auto-compressor timer
2026-01-28 14:50:57 +09:00
2f7e1439d0
bicep/mysql: pin version, upgrade from 11.4 -> 11.8
2026-01-28 14:01:14 +09:00
fa31a84bd2
bicep/postgres: upgrade from 15 -> 18
2026-01-28 14:00:25 +09:00
949661113e
bicep/mysql: move backup dir
2026-01-27 20:47:40 +09:00
f442c4d65f
bicep/minecraft-heatmap: gate remaining config behind cfg.enable
2026-01-27 20:44:20 +09:00
690aee634b
bicep/postgres: gate remaining config behind cfg.enable
2026-01-27 20:44:20 +09:00
2ed1c83858
bicep/{postgres,mysql}: add rsync pull targets for backups
2026-01-27 20:39:12 +09:00
65d095feb1
bekkalokk/mediawiki, bicep/matrix/synapse: add keys for rsync targets
2026-01-27 18:55:03 +09:00
8a84069dcf
bicep/mysql: use BindPaths to access dataDir
2026-01-27 17:23:38 +09:00
79a46ce3f6
bicep/element: set default country code
2026-01-27 04:11:40 +09:00
a149f97ac0
bicep: bump stateVersion from 22.11 -> 25.11
2026-01-27 03:59:40 +09:00
73456de527
bekkalokk/mediawiki, bicep/matrix/synapse: leave principal rsync target stubs
2026-01-27 00:26:42 +09:00
c3c98392ad
bicep/hookshot: add passkey to sops
2026-01-26 21:52:58 +09:00
1d47409d96
base: configure sops
2026-01-22 16:48:59 +09:00
5f94345a91
hosts/various: enable qemu guest agent, disable smartd for vms by default
2026-01-22 16:05:36 +09:00
28baf322ce
hosts/various: formatting, add consistent warnings to stateVersion
2026-01-22 15:57:12 +09:00
12477aeb34
flake.nix: set default hostname for most nixos hosts
2026-01-22 15:49:50 +09:00
89ea5b321a
hosts/various: use systemd-boot as default bootloader
2026-01-22 15:49:50 +09:00
9eb5cd869a
bicep/element: fetch correct well-known file
2026-01-21 14:34:35 +09:00
833a74a6fb
bicep/matrix: remove some whitespace lol
2026-01-21 13:14:41 +09:00
93cf6f4a63
bicep/sshguard: disable
...
sshguard doesn't actually work as it currently stands, also the builtin
PerSourcePenalty functionality in SSH is more aggressive than sshguard
is able to catch anyway. It might've been reasonable if we were using it
for anything other than SSH, but it doesn't seem like we are.
2026-01-21 11:13:27 +09:00
0f11cca8ec
bicep/matrix: use sops templates to render structured files
2026-01-21 11:08:26 +09:00
d892acb331
bicep/matrix: have element-web source well-known from config
2026-01-21 10:49:09 +09:00
aa07687a94
bicep/matrix: add synapse config to help with livekit
2026-01-21 10:48:37 +09:00
e5dd5b6325
bicep/matrix: attempt to set up livekit
2026-01-21 10:14:08 +09:00
75c52f63cc
bicep/matrix: add module for adding stuff to well-known
2026-01-21 10:14:07 +09:00
felixalb
14e2ed7e32
Fix the heccin quotes
2026-01-19 21:09:41 +01:00
005d987ead
bicep/git-mirrors: fix cgit config
2026-01-16 11:50:31 +09:00
16891ff521
misc/metrics-exporters: move to base
2025-12-30 00:32:25 +09:00
167c889e11
various: set sops restartUnits
2025-12-22 15:48:13 +09:00
b0a49f87d5
bicep/postgres: bindmount datadir
2025-12-22 13:38:21 +09:00
a238540e04
bicep/minecraft-heatmap: re-enable
2025-12-22 11:14:41 +09:00
88ea686b59
bicep/matrix-synapse: replace hardcoded ip space with ones from values
2025-12-22 10:32:17 +09:00
1d08131076
bicep/coturn: replace hardcoded ip with one fr
...
om `values`
2025-12-22 10:23:39 +09:00
ad137081c7
bicep/mysql: allow connections from ildkule
2025-12-22 10:23:39 +09:00
f04596b752
bicep/postgres: allow connections from ildkule
2025-12-22 10:23:39 +09:00
252f5a6f94
bicep/matrix-smtp-auth: fix python packaging
2025-12-05 02:24:20 +09:00
30472c478b
bicep: enable more services
2025-12-02 01:53:58 +01:00
h7x4
felixalb