h7x4
2c819776f8
treewide/nginx: enable kTLS for a bunch more virtualHosts
2026-05-27 23:36:18 +09:00
h7x4
c2d6989350
base/scrutiny-collector: init
2026-05-27 23:35:32 +09:00
h7x4
2b4817b75a
ildkule/scrutiny: init
2026-05-27 23:33:45 +09:00
h7x4
0e2a8ed3ed
base/polkit: let wheel users use AUTH_KEEP_SELF for systemd actions
2026-05-27 14:13:36 +09:00
h7x4
3372712e26
modules/ooye: move StartLimit* options to correct section
2026-05-26 15:03:27 +09:00
h7x4
7e586e082e
flake.lock: bump pvv-calendar-bot
2026-05-26 14:55:58 +09:00
h7x4
47a744f68f
ildkule/uptime-kuma: set up rsync pull target for principal
2026-05-26 13:37:29 +09:00
h7x4
18ab1ef982
temmie/userweb: set -i and -t in sendmail wrapper
2026-05-25 18:49:57 +09:00
h7x4
5023edeb13
temmie/userweb: install mod_perl with custom env
2026-05-25 18:24:23 +09:00
h7x4
0d8c26c548
temmie/userweb: send propagatedBuildInputs through perl env wrapper
2026-05-25 17:05:02 +09:00
h7x4
bd244e7797
temmie/userweb: add www2 server alias
2026-05-25 16:24:35 +09:00
h7x4
e9220bb31e
temmie/userweb: use www-datas UID + GID for backwards compat
2026-05-25 15:25:26 +09:00
h7x4
6beb9c62c3
temmie/userweb: use bro to proxy sendmail requests out of sandbox
2026-05-25 15:02:40 +09:00
h7x4
7429b334ca
README: add temmie to machine overview
2026-05-25 11:59:17 +09:00
h7x4
1595f67c55
flake.nix: allow nvidia-kernel-modules for wenche
2026-05-25 11:35:25 +09:00
h7x4
3f5eadcb87
base/resolved: use RFC42 format
2026-05-25 10:40:04 +09:00
h7x4
70c0ad8724
base: use RFC42 format for systemd.sleep
2026-05-25 10:40:04 +09:00
h7x4
61ea0181a1
packages/mediawiki-extensions: REL1_44 -> REL1_45
2026-05-25 10:40:04 +09:00
h7x4
3e22c1a47e
nixpkgs 26.05 🎉
2026-05-25 10:40:02 +09:00
h7x4
53670b4d05
flake.nix/inputs/disko: v1.11.0 -> v1.13.0
2026-05-24 23:05:48 +09:00
h7x4
d92a5f13ad
base/journald-upload: fix target url
2026-05-24 16:41:54 +09:00
h7x4
16d3251ee2
shells/cuda: fix deprecated package attr warnings
2026-05-24 15:23:33 +09:00
h7x4
9a6fdecb03
kommode/gitea/dump: only keep a single dump at a time
2026-05-22 18:27:57 +09:00
h7x4
82ab97fb45
bekkalokk/roundcube: restart service on changed sops secrets
2026-05-22 18:10:44 +09:00
h7x4
543fd19f8d
bekkalokk/vaultwarden: restart service on changed sops secrets
2026-05-22 18:10:40 +09:00
h7x4
6f99fa575d
bekkalokk/vaultwarden: render environment_file as sops template
2026-05-22 18:02:13 +09:00
h7x4
3141b1f76b
bekkalokk/vaultwarden: remove redundant hardening
...
This has already been upstreamed
2026-05-22 17:51:03 +09:00
h7x4
475f6a8c9b
bekkalokk/vaultwarden: add rsa key to sops
2026-05-22 17:49:31 +09:00
h7x4
9c1687f8f2
bekkalokk/vaultwarden: use envvar keys
...
It seems like the nixpkgs module is compensating for previous config
that might've ended up in a file, which are now being turned into
screaming snake case environment variables. Let's just name them as they
are supposed to be named instead of having the upstream module translate
them.
2026-05-22 17:08:31 +09:00
h7x4
0f53bcd731
bekkalokk/roundcube: add des_key to sops
2026-05-22 17:08:31 +09:00
h7x4
5745648f87
bicep/postgres/repack: use local unix socket
2026-05-22 15:59:59 +09:00
h7x4
2c34a93abf
bicep/postgres/repack: don't kill connections on timeout
2026-05-22 15:57:57 +09:00
h7x4
9ebc947eab
ustetind: bai bai 👋
2026-05-22 15:41:28 +09:00
h7x4
6fcc19f0a2
base/fluentbit: init
2026-05-22 15:32:13 +09:00
h7x4
9224f04bd1
base/promtail: remove
2026-05-22 15:32:13 +09:00
h7x4
5d6c153007
kommode/gitea: fix dump command
2026-05-21 17:54:54 +09:00
h7x4
8b483a92f8
ildkule: set fsType for bindmounts
2026-05-21 17:52:47 +09:00
h7x4
0d7f05e56d
bicep/postgres: add cleanup timers
2026-05-21 04:14:34 +09:00
h7x4
08a23bd380
base/hardening: ban a few more modules
2026-05-20 23:15:25 +09:00
h7x4
28b67c3578
base/mitigations: blacklist modules for copyfail and pintheft
2026-05-20 23:15:25 +09:00
h7x4
0fd41c214a
flake.{nix,lock}: bump deps
2026-05-13 01:19:35 +09:00
h7x4
5c1ee958ea
flake.{nix,lock}: bump roowho2
2026-05-12 00:25:55 +09:00
h7x4
d8e97715c9
flake.lock: bump pvv-nettsiden
2026-05-12 00:24:56 +09:00
h7x4
33297b0436
treewide: lib.cli.toGNUCommandLineShell -> lib.cli.toCommandLineShellGNU
2026-05-11 23:09:50 +09:00
h7x4
be33c95c83
bekkalokk/website: more logging, specify timeouts, ban spooky funcs, fake sendmail
2026-05-11 21:14:08 +09:00
h7x4
2abf36a9af
packages/simplesamlphp: 2.4.3 -> 2.5.0
2026-05-11 16:12:15 +09:00
h7x4
a60be532ce
packages/mediawiki-extensions: bump all
2026-05-11 16:11:10 +09:00
h7x4
9c142fd56f
kommode/gitea: remove deprecated config options
2026-05-11 16:00:51 +09:00
oysteikt and h7x4
b98e8679e6
temmie/userweb: set same phpOptions for env and apache
2026-05-11 14:54:56 +09:00
h7x4
ea092ec0b3
temmie/userweb: pass userdir user to sendmail through custom envvar
2026-05-11 14:26:47 +09:00
h7x4
5e50b617fb
temmie/userweb: switch from postfix to nullmailer
2026-05-11 13:52:58 +09:00
h7x4
258c5a7b25
temmie/userweb: set up sendmail wrapper
2026-05-11 12:26:39 +09:00
h7x4
b9eda3dc56
temmie/userweb: reduce package list
2026-05-11 10:17:09 +09:00
h7x4
b009da31af
temmie/userweb: deny a bunch of spooky directories by default
...
It should still be possible for the user to re-enable these with
`.htaccess`
2026-05-10 03:33:43 +09:00
h7x4
e9a267e2a3
temmie/userweb: ignore collisions in fhs env
2026-05-10 03:02:27 +09:00
h7x4
338c2f2531
temmie/userweb: adjust perl and php env
...
This adds and removes a few packages to make the environments closer to
how they are on tom
2026-05-10 03:02:26 +09:00
h7x4
f64f9c944e
topology: hook skrot up to the switch at the office
2026-05-08 16:27:01 +09:00
h7x4
baeb1e5e60
base/hardening: move hardening options from base/default
2026-05-08 16:23:17 +09:00
h7x4
86ca8dcdc3
base/hardening: ban a bunch more unimportant kernel modules
2026-05-08 16:23:17 +09:00
h7x4
f2752ee9a6
.gitea/workflows/*: remove redundant config
...
All of the extra config is now being included by default with the github
action
2026-05-06 23:34:22 +09:00
h7x4
bb20f32df8
.gitea/workflows: simplify some steps
2026-04-29 08:34:38 +09:00
h7x4
f83ae6de37
flake.lock: bump roowho2
2026-04-29 08:29:02 +09:00
h7x4
f490e64516
flake.nix: bump greg-ng and gergle
...
Also follow unstable nixpkgs in order to use bleeding edge flutter
2026-04-25 07:09:41 +09:00
h7x4
eee7e9ad7b
lupine/gitea-runner: register docker images for alpine v3.23 and ubuntu 26.04
2026-04-23 21:05:23 +09:00
h7x4
3160d64167
packages/bluemap: 5.15 -> 5.20
2026-04-19 05:31:15 +09:00
h7x4
23355317d6
lupine-3: update hardware config
2026-04-19 01:26:25 +09:00
h7x4
683e4b2dbc
lupine-3: update sops key
2026-04-19 01:26:12 +09:00
h7x4
f52cf697cc
lupine-5: update hardware config
2026-04-19 00:38:32 +09:00
h7x4
8a9e92c706
lupine-5: update sops key
2026-04-19 00:38:24 +09:00
h7x4
6dce8bac0e
lupine-4: re-enable gitea runner
2026-04-19 00:22:30 +09:00
h7x4
e2abbf224b
lupine-{1,2,4}: update hardware config
2026-04-18 23:58:53 +09:00
h7x4
a399f23785
lupine-{1,2,4}: update sops keys
2026-04-18 23:58:43 +09:00
h7x4
69a22e2ba0
flake.lock: bump
2026-04-02 13:06:30 +09:00
h7x4
6be23feeca
packages/ooye: 3.3-unstable-2026-01-21 -> 3.5.1
2026-04-02 12:44:43 +09:00
h7x4
6ef02bd485
kommode/gitea: allow me to go fork myself
2026-03-10 14:50:56 +09:00
h7x4
0d40c7d7a7
base/acme: use different email alias for account
2026-02-13 19:45:45 +09:00
h7x4
b327582236
kommode/gitea: use redis for sessions and queue
2026-02-13 18:55:42 +09:00
h7x4
7e39bf3ba2
bicep/matrix/ooye: add rsync pull target for principal backups
2026-02-13 18:26:55 +09:00
h7x4
5bb0cd0465
kommode/gitea: set default theme
2026-02-13 14:32:36 +09:00
h7x4
9efda802cb
kommode/gitea: move ui configuration to customization
2026-02-13 14:23:48 +09:00
h7x4
3c08be3d73
kommode/gitea: configure redis cache
2026-02-13 03:50:21 +09:00
oysteikt and h7x4
b1a2836b5d
kommode/gitea: custom emoji
2026-02-13 03:38:45 +09:00
h7x4
ba1f30f737
kommode/gitea: configure more meta fields
2026-02-13 03:13:49 +09:00
h7x4
210f74dc59
secrets: sops updatekeys
2026-02-08 05:19:26 +09:00
h7x4
daa4b9e271
bekkalokk/mediawiki: adjust umask
2026-02-07 01:46:55 +09:00
h7x4
12eb0b3f53
bekkalokk/mediawiki: allow uploading more filetypes
2026-02-07 00:56:38 +09:00
h7x4
02bdb8d45b
kommode/gitea/web: use default login shell
2026-02-05 13:25:06 +09:00
h7x4
a5143c0aaa
bekkalokk/nettsiden: fix gallery rsync target
2026-02-05 13:19:29 +09:00
h7x4
304304185c
base: add lsof to list of default installed packages
2026-02-02 23:59:35 +09:00
h7x4
b712f3cda3
temmie/userweb: add a few more packages
2026-01-31 21:53:12 +09:00
h7x4
cc272a724c
temmie/userweb: add directory index search path
2026-01-31 21:30:23 +09:00
h7x4
fcaa97884e
temmie/userweb: add a bunch more normal packages
2026-01-31 21:20:26 +09:00
h7x4
11f2cf504f
temmie/userweb: add a bunch more perl packages
2026-01-31 20:31:03 +09:00
h7x4
7ab16bc949
temmie/userweb: restrict log access
2026-01-31 19:08:02 +09:00
h7x4
c4d5cfde56
temmie/userweb: add legacy-cgi to the python package set
2026-01-31 18:53:44 +09:00
h7x4
100d09f6b7
temmie/userweb: get first iteration working
2026-01-31 18:41:17 +09:00
h7x4
3b0742bfac
temmie: combine homedirs in overlayfs
2026-01-31 18:41:17 +09:00
h7x4
3ba1ea2e4f
flake.lock: bump
2026-01-31 13:44:39 +09:00
h7x4
91de031896
treewide: limit rsync pull target access to principal
2026-01-31 11:14:18 +09:00
h7x4
c3ce6a40ea
ildkule/grafana: update a bunch of dashboards
2026-01-31 01:07:26 +09:00
h7x4
oysteiktandh7x4