 h7x4
|
0fd41c214a
|
flake.{nix,lock}: bump deps
|
2026-05-13 01:19:35 +09:00 |
|
|
h7x4
|
5c1ee958ea
|
flake.{nix,lock}: bump roowho2
|
2026-05-12 00:25:55 +09:00 |
|
|
h7x4
|
d8e97715c9
|
flake.lock: bump pvv-nettsiden
|
2026-05-12 00:24:56 +09:00 |
|
|
h7x4
|
33297b0436
|
treewide: lib.cli.toGNUCommandLineShell -> lib.cli.toCommandLineShellGNU
|
2026-05-11 23:09:50 +09:00 |
|
|
h7x4
|
be33c95c83
|
bekkalokk/website: more logging, specify timeouts, ban spooky funcs, fake sendmail
|
2026-05-11 21:14:08 +09:00 |
|
|
h7x4
|
2abf36a9af
|
packages/simplesamlphp: 2.4.3 -> 2.5.0
|
2026-05-11 16:12:15 +09:00 |
|
|
h7x4
|
a60be532ce
|
packages/mediawiki-extensions: bump all
|
2026-05-11 16:11:10 +09:00 |
|
|
h7x4
|
9c142fd56f
|
kommode/gitea: remove deprecated config options
|
2026-05-11 16:00:51 +09:00 |
|
 oysteiktandh7x4
|
b98e8679e6
|
temmie/userweb: set same phpOptions for env and apache
|
2026-05-11 14:54:56 +09:00 |
|
|
h7x4
|
ea092ec0b3
|
temmie/userweb: pass userdir user to sendmail through custom envvar
|
2026-05-11 14:26:47 +09:00 |
|
|
h7x4
|
5e50b617fb
|
temmie/userweb: switch from postfix to nullmailer
|
2026-05-11 13:52:58 +09:00 |
|
|
h7x4
|
258c5a7b25
|
temmie/userweb: set up sendmail wrapper
|
2026-05-11 12:26:39 +09:00 |
|
|
h7x4
|
b9eda3dc56
|
temmie/userweb: reduce package list
|
2026-05-11 10:17:09 +09:00 |
|
|
h7x4
|
b009da31af
|
temmie/userweb: deny a bunch of spooky directories by default
It should still be possible for the user to re-enable these with
`.htaccess`
|
2026-05-10 03:33:43 +09:00 |
|
|
h7x4
|
e9a267e2a3
|
temmie/userweb: ignore collisions in fhs env
|
2026-05-10 03:02:27 +09:00 |
|
|
h7x4
|
338c2f2531
|
temmie/userweb: adjust perl and php env
This adds and removes a few packages to make the environments closer to
how they are on tom
|
2026-05-10 03:02:26 +09:00 |
|
|
h7x4
|
f64f9c944e
|
topology: hook skrot up to the switch at the office
|
2026-05-08 16:27:01 +09:00 |
|
|
h7x4
|
baeb1e5e60
|
base/hardening: move hardening options from base/default
|
2026-05-08 16:23:17 +09:00 |
|
|
h7x4
|
86ca8dcdc3
|
base/hardening: ban a bunch more unimportant kernel modules
|
2026-05-08 16:23:17 +09:00 |
|
|
h7x4
|
f2752ee9a6
|
.gitea/workflows/*: remove redundant config
All of the extra config is now being included by default with the github
action
|
2026-05-06 23:34:22 +09:00 |
|
|
h7x4
|
bb20f32df8
|
.gitea/workflows: simplify some steps
|
2026-04-29 08:34:38 +09:00 |
|
|
h7x4
|
f83ae6de37
|
flake.lock: bump roowho2
|
2026-04-29 08:29:02 +09:00 |
|
|
h7x4
|
f490e64516
|
flake.nix: bump greg-ng and gergle
Also follow unstable nixpkgs in order to use bleeding edge flutter
|
2026-04-25 07:09:41 +09:00 |
|
|
h7x4
|
eee7e9ad7b
|
lupine/gitea-runner: register docker images for alpine v3.23 and ubuntu 26.04
|
2026-04-23 21:05:23 +09:00 |
|
|
h7x4
|
3160d64167
|
packages/bluemap: 5.15 -> 5.20
|
2026-04-19 05:31:15 +09:00 |
|
|
h7x4
|
23355317d6
|
lupine-3: update hardware config
|
2026-04-19 01:26:25 +09:00 |
|
|
h7x4
|
683e4b2dbc
|
lupine-3: update sops key
|
2026-04-19 01:26:12 +09:00 |
|
|
h7x4
|
f52cf697cc
|
lupine-5: update hardware config
|
2026-04-19 00:38:32 +09:00 |
|
|
h7x4
|
8a9e92c706
|
lupine-5: update sops key
|
2026-04-19 00:38:24 +09:00 |
|
|
h7x4
|
6dce8bac0e
|
lupine-4: re-enable gitea runner
|
2026-04-19 00:22:30 +09:00 |
|
|
h7x4
|
e2abbf224b
|
lupine-{1,2,4}: update hardware config
|
2026-04-18 23:58:53 +09:00 |
|
|
h7x4
|
a399f23785
|
lupine-{1,2,4}: update sops keys
|
2026-04-18 23:58:43 +09:00 |
|
|
h7x4
|
69a22e2ba0
|
flake.lock: bump
|
2026-04-02 13:06:30 +09:00 |
|
|
h7x4
|
6be23feeca
|
packages/ooye: 3.3-unstable-2026-01-21 -> 3.5.1
|
2026-04-02 12:44:43 +09:00 |
|
|
h7x4
|
6ef02bd485
|
kommode/gitea: allow me to go fork myself
|
2026-03-10 14:50:56 +09:00 |
|
|
h7x4
|
0d40c7d7a7
|
base/acme: use different email alias for account
|
2026-02-13 19:45:45 +09:00 |
|
|
h7x4
|
b327582236
|
kommode/gitea: use redis for sessions and queue
|
2026-02-13 18:55:42 +09:00 |
|
|
h7x4
|
7e39bf3ba2
|
bicep/matrix/ooye: add rsync pull target for principal backups
|
2026-02-13 18:26:55 +09:00 |
|
|
h7x4
|
5bb0cd0465
|
kommode/gitea: set default theme
|
2026-02-13 14:32:36 +09:00 |
|
|
h7x4
|
9efda802cb
|
kommode/gitea: move ui configuration to customization
|
2026-02-13 14:23:48 +09:00 |
|
|
h7x4
|
3c08be3d73
|
kommode/gitea: configure redis cache
|
2026-02-13 03:50:21 +09:00 |
|
|
oysteiktandh7x4
|
b1a2836b5d
|
kommode/gitea: custom emoji
|
2026-02-13 03:38:45 +09:00 |
|
|
h7x4
|
ba1f30f737
|
kommode/gitea: configure more meta fields
|
2026-02-13 03:13:49 +09:00 |
|
|
h7x4
|
210f74dc59
|
secrets: sops updatekeys
|
2026-02-08 05:19:26 +09:00 |
|
|
h7x4
|
daa4b9e271
|
bekkalokk/mediawiki: adjust umask
|
2026-02-07 01:46:55 +09:00 |
|
|
h7x4
|
12eb0b3f53
|
bekkalokk/mediawiki: allow uploading more filetypes
|
2026-02-07 00:56:38 +09:00 |
|
|
h7x4
|
02bdb8d45b
|
kommode/gitea/web: use default login shell
|
2026-02-05 13:25:06 +09:00 |
|
|
h7x4
|
a5143c0aaa
|
bekkalokk/nettsiden: fix gallery rsync target
|
2026-02-05 13:19:29 +09:00 |
|
|
h7x4
|
304304185c
|
base: add lsof to list of default installed packages
|
2026-02-02 23:59:35 +09:00 |
|
|
h7x4
|
b712f3cda3
|
temmie/userweb: add a few more packages
|
2026-01-31 21:53:12 +09:00 |
|
|
h7x4
|
cc272a724c
|
temmie/userweb: add directory index search path
|
2026-01-31 21:30:23 +09:00 |
|
|
h7x4
|
fcaa97884e
|
temmie/userweb: add a bunch more normal packages
|
2026-01-31 21:20:26 +09:00 |
|
|
h7x4
|
11f2cf504f
|
temmie/userweb: add a bunch more perl packages
|
2026-01-31 20:31:03 +09:00 |
|
|
h7x4
|
7ab16bc949
|
temmie/userweb: restrict log access
|
2026-01-31 19:08:02 +09:00 |
|
|
h7x4
|
c4d5cfde56
|
temmie/userweb: add legacy-cgi to the python package set
|
2026-01-31 18:53:44 +09:00 |
|
|
h7x4
|
100d09f6b7
|
temmie/userweb: get first iteration working
|
2026-01-31 18:41:17 +09:00 |
|
|
h7x4
|
3b0742bfac
|
temmie: combine homedirs in overlayfs
|
2026-01-31 18:41:17 +09:00 |
|
|
h7x4
|
3ba1ea2e4f
|
flake.lock: bump
|
2026-01-31 13:44:39 +09:00 |
|
|
h7x4
|
91de031896
|
treewide: limit rsync pull target access to principal
|
2026-01-31 11:14:18 +09:00 |
|
|
h7x4
|
c3ce6a40ea
|
ildkule/grafana: update a bunch of dashboards
|
2026-01-31 01:07:26 +09:00 |
|
|
h7x4
|
beee0ddc75
|
ildkule/grafana: remove dashboard for gogs
|
2026-01-31 00:58:34 +09:00 |
|
|
h7x4
|
359f599655
|
bekkalokk/snappymail: add rsync pull target for principal
|
2026-01-31 00:19:09 +09:00 |
|
|
h7x4
|
5b1c6f16d1
|
bekkalokk/vaultwarden: add rsync pull target for principal
|
2026-01-31 00:18:57 +09:00 |
|
|
h7x4
|
cec69d89a8
|
bicep/{postgres,mysql}: fix old backup deletion (again)
|
2026-01-30 13:26:10 +09:00 |
|
|
h7x4
|
af0bf7b254
|
bicep/{postgres,mysql}: fix old backup deletion
|
2026-01-29 14:57:46 +09:00 |
|
|
h7x4
|
bcf8b1607f
|
bicep/{postgres,mysql}: use hardlink for latest backup file
|
2026-01-29 14:53:07 +09:00 |
|
|
h7x4
|
1d46fd1ec6
|
bicep/{postgres,mysql}: keep multiple backups, point at latest with symlink
|
2026-01-29 14:16:34 +09:00 |
|
|
h7x4
|
bac53be707
|
bicep/{postgres,mysql}: use zstd for backup compression
|
2026-01-29 13:50:35 +09:00 |
|
|
h7x4
|
f08bd96b74
|
bicep/{postgres,mysql}: move backups to /data
|
2026-01-29 13:41:06 +09:00 |
|
|
h7x4
|
25f2a13391
|
packages/mediawiki-extensions: bump all
|
2026-01-29 13:34:42 +09:00 |
|
|
h7x4
|
8774c81d23
|
bicep/{postgres,mysql}: custom backup units
|
2026-01-29 13:32:28 +09:00 |
|
|
h7x4
|
d6eca5c4e3
|
bicep/{postgres,mysql}: split config into several files
|
2026-01-29 13:18:25 +09:00 |
|
|
h7x4
|
49d1122ee5
|
bicep/mysql: enable slow query logs
|
2026-01-28 14:55:52 +09:00 |
|
|
h7x4
|
31bbf4b25f
|
bicep/synapse: enable auto-compressor timer
|
2026-01-28 14:50:57 +09:00 |
|
|
h7x4
|
2f7e1439d0
|
bicep/mysql: pin version, upgrade from 11.4 -> 11.8
|
2026-01-28 14:01:14 +09:00 |
|
|
h7x4
|
fa31a84bd2
|
bicep/postgres: upgrade from 15 -> 18
|
2026-01-28 14:00:25 +09:00 |
|
|
h7x4
|
b77c8eb5c0
|
modules/rsync-pull-targets: fix multiple pull targets with same user
|
2026-01-27 21:10:17 +09:00 |
|
|
h7x4
|
949661113e
|
bicep/mysql: move backup dir
|
2026-01-27 20:47:40 +09:00 |
|
|
h7x4
|
f442c4d65f
|
bicep/minecraft-heatmap: gate remaining config behind cfg.enable
|
2026-01-27 20:44:20 +09:00 |
|
|
h7x4
|
690aee634b
|
bicep/postgres: gate remaining config behind cfg.enable
|
2026-01-27 20:44:20 +09:00 |
|
|
h7x4
|
2ed1c83858
|
bicep/{postgres,mysql}: add rsync pull targets for backups
|
2026-01-27 20:39:12 +09:00 |
|
|
h7x4
|
d43de08a3b
|
flake.lock: bump
|
2026-01-27 19:44:45 +09:00 |
|
|
h7x4
|
e8c7f177e8
|
kommode: use disko to configure disks
|
2026-01-27 19:00:12 +09:00 |
|
|
h7x4
|
fb59a242fb
|
kommode/gitea: add rsync pull target for gitea dump dir
|
2026-01-27 18:55:25 +09:00 |
|
|
h7x4
|
65d095feb1
|
bekkalokk/mediawiki, bicep/matrix/synapse: add keys for rsync targets
|
2026-01-27 18:55:03 +09:00 |
|
|
h7x4
|
8273d98788
|
flake.nix: add disko to default devshell
|
2026-01-27 18:35:18 +09:00 |
|
|
h7x4
|
8a84069dcf
|
bicep/mysql: use BindPaths to access dataDir
|
2026-01-27 17:23:38 +09:00 |
|
|
h7x4
|
cda84be5b0
|
bekkalokk/well-known: add note about bug bounty program to security.txt
|
2026-01-27 17:11:07 +09:00 |
|
|
h7x4
|
79a46ce3f6
|
bicep/element: set default country code
|
2026-01-27 04:11:40 +09:00 |
|
|
h7x4
|
19e45be83a
|
.mailmap: further dedup
|
2026-01-27 04:07:25 +09:00 |
|
|
h7x4
|
a8892e2fb2
|
hosts/various: bump stateVersion
|
2026-01-27 04:00:48 +09:00 |
|
|
h7x4
|
a149f97ac0
|
bicep: bump stateVersion from 22.11 -> 25.11
|
2026-01-27 03:59:40 +09:00 |
|
|
h7x4
|
e76c656378
|
bekkalokk: bump stateVersion from 22.11 -> 25.11
|
2026-01-27 03:52:34 +09:00 |
|
|
h7x4
|
5877ef60b1
|
modules/rsync-pull-targets: leave TODO about assertion
|
2026-01-27 00:27:00 +09:00 |
|
|
h7x4
|
73456de527
|
bekkalokk/mediawiki, bicep/matrix/synapse: leave principal rsync target stubs
|
2026-01-27 00:26:42 +09:00 |
|
|
h7x4
|
2f8e9ea190
|
modules/rsync-pull-targets: init, migrate bekkalokk/website/fetch-gallery
|
2026-01-26 23:57:20 +09:00 |
|
|
h7x4
|
c3c98392ad
|
bicep/hookshot: add passkey to sops
|
2026-01-26 21:52:58 +09:00 |
|
|
h7x4
|
e01fd902eb
|
bekkalokk/mediawiki: move secret.key to sops
|
2026-01-26 17:55:55 +09:00 |
|
|
h7x4
|
ce8d759f79
|
skrott: yeet 700MB worth of firmware, leave raspberry-specific firmware be
|
2026-01-26 17:09:18 +09:00 |
|
|
h7x4
|
ea6296f47a
|
base/vm: disable graphics for vms by default
|
2026-01-26 17:08:35 +09:00 |
|