c357448c94
WIP: Move krb5 realm to pvv.local, make sane ldap structure
2026-05-25 12:24:31 +09:00
5d6f21c450
WIP: set up heimdal-openldap-sasl stack
2026-05-25 12:24:31 +09:00
b91f6016f5
hosts/dagali: init
2026-05-25 12:24:30 +09:00
0319858cad
Merge branch 'gluttony-bluemap'
2026-05-25 03:32:15 +02:00
efd50868e0
bekkalokk: add back config added through bluemap module
2026-05-25 03:28:49 +02:00
7a23cf7f25
bekkalokk: remove bluemap
2026-05-25 03:28:30 +02:00
57963fadd7
gluttony: add private key and set public key for bekkalokk
2026-05-25 03:22:13 +02:00
792f111a5d
bekkalokk: pull rendered map from gluttony
2026-05-25 03:22:13 +02:00
b27859c0fa
gluttony: export rendered bluemap to bekkalokk
2026-05-25 03:22:09 +02:00
c59c00f3fc
gluttony: setup bluemap
2026-05-25 03:20:21 +02:00
09163b77da
Revert "bicep/matrix/livekit: open the rtc ports"
...
This reverts commit 4a67eddf52
2026-05-23 23:23:41 +02:00
6cca1db3b3
bekkalokk: fix permissions for mediawiki secrets
2026-05-22 20:21:24 +02:00
bfd83c4c64
uptime-kuma: wants to use /var/lib/private for state
2026-05-22 17:58:00 +02:00
9a6fdecb03
kommode/gitea/dump: only keep a single dump at a time
2026-05-22 18:27:57 +09:00
82ab97fb45
bekkalokk/roundcube: restart service on changed sops secrets
2026-05-22 18:10:44 +09:00
543fd19f8d
bekkalokk/vaultwarden: restart service on changed sops secrets
2026-05-22 18:10:40 +09:00
6f99fa575d
bekkalokk/vaultwarden: render environment_file as sops template
2026-05-22 18:02:13 +09:00
3141b1f76b
bekkalokk/vaultwarden: remove redundant hardening
...
This has already been upstreamed
2026-05-22 17:51:03 +09:00
475f6a8c9b
bekkalokk/vaultwarden: add rsa key to sops
2026-05-22 17:49:31 +09:00
9c1687f8f2
bekkalokk/vaultwarden: use envvar keys
...
It seems like the nixpkgs module is compensating for previous config
that might've ended up in a file, which are now being turned into
screaming snake case environment variables. Let's just name them as they
are supposed to be named instead of having the upstream module translate
them.
2026-05-22 17:08:31 +09:00
0f53bcd731
bekkalokk/roundcube: add des_key to sops
2026-05-22 17:08:31 +09:00
5745648f87
bicep/postgres/repack: use local unix socket
2026-05-22 15:59:59 +09:00
2c34a93abf
bicep/postgres/repack: don't kill connections on timeout
2026-05-22 15:57:57 +09:00
9ebc947eab
ustetind: bai bai 👋
2026-05-22 15:41:28 +09:00
5d6c153007
kommode/gitea: fix dump command
2026-05-21 17:54:54 +09:00
8b483a92f8
ildkule: set fsType for bindmounts
2026-05-21 17:52:47 +09:00
0d7f05e56d
bicep/postgres: add cleanup timers
2026-05-21 04:14:34 +09:00
4a67eddf52
bicep/matrix/livekit: open the rtc ports
2026-05-20 20:04:33 +02:00
9c227f3022
update gluttony IPs and boot device
2026-05-20 06:07:41 +02:00
69fdf709d7
grr: fix the heccin quotes
2026-05-19 16:38:34 +02:00
30ec70fa5f
fix: ildkule grub duplicated devices, format nix files
2026-05-19 16:26:36 +02:00
1024b428ac
feat: ildkule disco config
2026-05-19 12:16:39 +02:00
1e6b692fbf
fix: updated ildkule config and ips to match trd1 new setup
2026-05-19 11:37:05 +02:00
33297b0436
treewide: lib.cli.toGNUCommandLineShell -> lib.cli.toCommandLineShellGNU
2026-05-11 23:09:50 +09:00
be33c95c83
bekkalokk/website: more logging, specify timeouts, ban spooky funcs, fake sendmail
2026-05-11 21:14:08 +09:00
9c142fd56f
kommode/gitea: remove deprecated config options
2026-05-11 16:00:51 +09:00
b98e8679e6
temmie/userweb: set same phpOptions for env and apache
2026-05-11 14:54:56 +09:00
ea092ec0b3
temmie/userweb: pass userdir user to sendmail through custom envvar
2026-05-11 14:26:47 +09:00
5e50b617fb
temmie/userweb: switch from postfix to nullmailer
2026-05-11 13:52:58 +09:00
258c5a7b25
temmie/userweb: set up sendmail wrapper
2026-05-11 12:26:39 +09:00
b9eda3dc56
temmie/userweb: reduce package list
2026-05-11 10:17:09 +09:00
b009da31af
temmie/userweb: deny a bunch of spooky directories by default
...
It should still be possible for the user to re-enable these with
`.htaccess`
2026-05-10 03:33:43 +09:00
e9a267e2a3
temmie/userweb: ignore collisions in fhs env
2026-05-10 03:02:27 +09:00
338c2f2531
temmie/userweb: adjust perl and php env
...
This adds and removes a few packages to make the environments closer to
how they are on tom
2026-05-10 03:02:26 +09:00
felixalb
8db3034baf
Run shellcheck
2026-05-08 09:31:35 +02:00
0d41326d9f
bakke: rest of the owl
2026-05-08 03:06:06 +02:00
felixalb
7baf3ffcb4
bakke: uninit
2026-05-08 03:06:06 +02:00
ebd8b871f4
skrott: yeetus deletus
2026-05-08 01:08:48 +02:00
eee7e9ad7b
lupine/gitea-runner: register docker images for alpine v3.23 and ubuntu 26.04
2026-04-23 21:05:23 +09:00
23355317d6
lupine-3: update hardware config
2026-04-19 01:26:25 +09:00
Felix Albrigtsen
felixalb