h7x4
2faff6340c
flake.lock: bump pvv-nettsiden
2026-05-28 02:39:32 +09:00
h7x4
532e8b0eee
bekkalokk/mediawiki: install PdfHandler extension
2026-05-28 01:22:13 +09:00
h7x4
eef3f8fe8b
bekkalokk/mediawiki: cleanup executable path config
2026-05-28 01:22:13 +09:00
h7x4
e17025aca6
packages/mediawiki-extensions: add PdfHandler, bump all
2026-05-28 00:55:20 +09:00
h7x4
e062a849f3
base/scrutiny-collector: disable if machine is qemu guest
2026-05-27 23:45:30 +09:00
h7x4
b0f81c9379
lupine/smartd: reenable
2026-05-27 23:41:54 +09:00
h7x4
2c819776f8
treewide/nginx: enable kTLS for a bunch more virtualHosts
2026-05-27 23:36:18 +09:00
h7x4
c2d6989350
base/scrutiny-collector: init
2026-05-27 23:35:32 +09:00
h7x4
2b4817b75a
ildkule/scrutiny: init
2026-05-27 23:33:45 +09:00
h7x4
0e2a8ed3ed
base/polkit: let wheel users use AUTH_KEEP_SELF for systemd actions
2026-05-27 14:13:36 +09:00
h7x4
3372712e26
modules/ooye: move StartLimit* options to correct section
2026-05-26 15:03:27 +09:00
h7x4
7e586e082e
flake.lock: bump pvv-calendar-bot
2026-05-26 14:55:58 +09:00
h7x4
47a744f68f
ildkule/uptime-kuma: set up rsync pull target for principal
2026-05-26 13:37:29 +09:00
Vegard Bieker Matthey
da505d4fe2
kommode: sign merge commits and sign crud actions
2026-05-25 20:21:23 +02:00
h7x4
18ab1ef982
temmie/userweb: set -i and -t in sendmail wrapper
2026-05-25 18:49:57 +09:00
h7x4
5023edeb13
temmie/userweb: install mod_perl with custom env
2026-05-25 18:24:23 +09:00
h7x4
0d8c26c548
temmie/userweb: send propagatedBuildInputs through perl env wrapper
2026-05-25 17:05:02 +09:00
h7x4
bd244e7797
temmie/userweb: add www2 server alias
2026-05-25 16:24:35 +09:00
h7x4
e9220bb31e
temmie/userweb: use www-datas UID + GID for backwards compat
2026-05-25 15:25:26 +09:00
h7x4
6beb9c62c3
temmie/userweb: use bro to proxy sendmail requests out of sandbox
2026-05-25 15:02:40 +09:00
h7x4
7429b334ca
README: add temmie to machine overview
2026-05-25 11:59:17 +09:00
h7x4
1595f67c55
flake.nix: allow nvidia-kernel-modules for wenche
2026-05-25 11:35:25 +09:00
h7x4
3f5eadcb87
base/resolved: use RFC42 format
2026-05-25 10:40:04 +09:00
h7x4
70c0ad8724
base: use RFC42 format for systemd.sleep
2026-05-25 10:40:04 +09:00
h7x4
61ea0181a1
packages/mediawiki-extensions: REL1_44 -> REL1_45
2026-05-25 10:40:04 +09:00
h7x4
3e22c1a47e
nixpkgs 26.05 🎉
2026-05-25 10:40:02 +09:00
Vegard Bieker Matthey
0319858cad
Merge branch 'gluttony-bluemap'
2026-05-25 03:32:15 +02:00
Vegard Bieker Matthey
efd50868e0
bekkalokk: add back config added through bluemap module
2026-05-25 03:28:49 +02:00
Vegard Bieker Matthey
7a23cf7f25
bekkalokk: remove bluemap
2026-05-25 03:28:30 +02:00
Vegard Bieker Matthey
57963fadd7
gluttony: add private key and set public key for bekkalokk
2026-05-25 03:22:13 +02:00
Vegard Bieker Matthey
792f111a5d
bekkalokk: pull rendered map from gluttony
2026-05-25 03:22:13 +02:00
Vegard Bieker Matthey
b27859c0fa
gluttony: export rendered bluemap to bekkalokk
2026-05-25 03:22:09 +02:00
Vegard Bieker Matthey
eb0eb6d93b
add bekkalokk to known_hosts
2026-05-25 03:20:25 +02:00
Vegard Bieker Matthey
6a943dd7b0
bluemap: set group to nginx only if nginx is enabled
2026-05-25 03:20:25 +02:00
Vegard Bieker Matthey
c59c00f3fc
gluttony: setup bluemap
2026-05-25 03:20:21 +02:00
h7x4
53670b4d05
flake.nix/inputs/disko: v1.11.0 -> v1.13.0
2026-05-24 23:05:48 +09:00
h7x4
d92a5f13ad
base/journald-upload: fix target url
2026-05-24 16:41:54 +09:00
h7x4
16d3251ee2
shells/cuda: fix deprecated package attr warnings
2026-05-24 15:23:33 +09:00
Daniel Olsen
09163b77da
Revert "bicep/matrix/livekit: open the rtc ports"
...
This reverts commit 4a67eddf52 .
2026-05-23 23:23:41 +02:00
Vegard Bieker Matthey
6cca1db3b3
bekkalokk: fix permissions for mediawiki secrets
2026-05-22 20:21:24 +02:00
Vegard Bieker Matthey
bfd83c4c64
uptime-kuma: wants to use /var/lib/private for state
2026-05-22 17:58:00 +02:00
h7x4
9a6fdecb03
kommode/gitea/dump: only keep a single dump at a time
2026-05-22 18:27:57 +09:00
h7x4
82ab97fb45
bekkalokk/roundcube: restart service on changed sops secrets
2026-05-22 18:10:44 +09:00
h7x4
543fd19f8d
bekkalokk/vaultwarden: restart service on changed sops secrets
2026-05-22 18:10:40 +09:00
h7x4
6f99fa575d
bekkalokk/vaultwarden: render environment_file as sops template
2026-05-22 18:02:13 +09:00
h7x4
3141b1f76b
bekkalokk/vaultwarden: remove redundant hardening
...
This has already been upstreamed
2026-05-22 17:51:03 +09:00
h7x4
475f6a8c9b
bekkalokk/vaultwarden: add rsa key to sops
2026-05-22 17:49:31 +09:00
h7x4
9c1687f8f2
bekkalokk/vaultwarden: use envvar keys
...
It seems like the nixpkgs module is compensating for previous config
that might've ended up in a file, which are now being turned into
screaming snake case environment variables. Let's just name them as they
are supposed to be named instead of having the upstream module translate
them.
2026-05-22 17:08:31 +09:00
h7x4
0f53bcd731
bekkalokk/roundcube: add des_key to sops
2026-05-22 17:08:31 +09:00
Felix Albrigtsen
f433ae1e15
ustetind: remove from sops
...
rg -. to the rescue
2026-05-22 10:01:15 +02:00