h7x4
3940f52760
hosts/various: remove empty environment.systemPackages lists
2026-01-22 15:45:43 +09:00
h7x4
e2f3c81ecd
base: move package list to separate file
2026-01-22 15:35:18 +09:00
h7x4
a4c3aaa402
base: provide reasoning for packages, add a few new ones
2026-01-22 15:31:48 +09:00
h7x4
5714efc668
modules/grzegorz: override base certificate config
2026-01-22 15:10:50 +09:00
h7x4
d5199779a6
base: disable fontconfig by default
2026-01-22 14:57:00 +09:00
h7x4
ae3c7019ef
base: disable hibernation and sleep
2026-01-22 14:54:35 +09:00
h7x4
73dc9306f1
base: no mutable users by default
2026-01-22 14:51:24 +09:00
h7x4
09d72305e2
base/nginx: return 444 on fqdn virtualHost by default
2026-01-21 23:17:47 +09:00
h7x4
2ace7b649f
nix-topology: remove postgresql icon override
2026-01-21 14:56:41 +09:00
h7x4
7703a94b19
flake.lock: bump
2026-01-21 14:49:00 +09:00
h7x4
ebd40fc2d7
bekkalokk/well-known: reply to well-known for all domains
2026-01-21 14:47:31 +09:00
h7x4
9eb5cd869a
bicep/element: fetch correct well-known file
2026-01-21 14:34:35 +09:00
h7x4
fa37f34028
packages/ooye: bump
2026-01-21 13:46:06 +09:00
h7x4
7111d00df8
modules/ooye: calm yo ass (set restart timer + counter)
2026-01-21 13:17:28 +09:00
h7x4
833a74a6fb
bicep/matrix: remove some whitespace lol
2026-01-21 13:14:41 +09:00
h7x4
d82cc2e605
update and fix `packages.out-of-your-element
2026-01-21 12:49:13 +09:00
h7x4
93cf6f4a63
bicep/sshguard: disable
...
sshguard doesn't actually work as it currently stands, also the builtin
PerSourcePenalty functionality in SSH is more aggressive than sshguard
is able to catch anyway. It might've been reasonable if we were using it
for anything other than SSH, but it doesn't seem like we are.
2026-01-21 11:13:27 +09:00
h7x4
0f11cca8ec
bicep/matrix: use sops templates to render structured files
2026-01-21 11:08:26 +09:00
h7x4
d892acb331
bicep/matrix: have element-web source well-known from config
2026-01-21 10:49:09 +09:00
h7x4
aa07687a94
bicep/matrix: add synapse config to help with livekit
2026-01-21 10:48:37 +09:00
h7x4
e5dd5b6325
bicep/matrix: attempt to set up livekit
2026-01-21 10:14:08 +09:00
h7x4
75c52f63cc
bicep/matrix: add module for adding stuff to well-known
2026-01-21 10:14:07 +09:00
h7x4
633efc1a7d
ildkule: unbreak eval
2026-01-20 17:12:25 +09:00
h7x4
5e5a7f1969
flake.lock: bump minecraft-kartverket
2026-01-19 00:18:06 +09:00
h7x4
60b6cd137f
flake.lock: bump pvv-nettsiden
2026-01-17 16:55:20 +09:00
h7x4
3a0ea9c338
base/polkit: default to username if in group wheel
2026-01-17 03:59:55 +09:00
h7x4
d66aab1e61
flake.lock: bump minecraft-kartverket
2026-01-17 03:59:29 +09:00
h7x4
a9b1e11eea
flake.lock: bump
2026-01-16 23:25:15 +09:00
h7x4
1fc3eb24cf
flake.lock: bump minecraft-kartverket
2026-01-16 19:50:51 +09:00
h7x4
9984af36f4
modules/gickup: fix linktree config eval
2026-01-16 15:38:34 +09:00
h7x4 and oysteikt
1080589aef
secrets/*/*: update keys
2026-01-16 07:36:43 +01:00
h7x4
586a7c3ee5
flake.lock: bump
2026-01-16 11:51:31 +09:00
h7x4
8ff879d830
modules/gickup: run linktree after gickup fetches are done
2026-01-16 11:51:01 +09:00
h7x4
005d987ead
bicep/git-mirrors: fix cgit config
2026-01-16 11:50:31 +09:00
h7x4
e72fb76fff
ildkule/journald-remote: move LoadCredential to correct unit
2026-01-15 18:37:44 +09:00
h7x4
1c021cd789
base/packages: add net-tools
2026-01-15 17:49:42 +09:00
h7x4
d93bdd8493
journald-upload: use ipv4 temporarily, restrict firewall to ildkule
2026-01-15 17:38:27 +09:00
h7x4
024dae4226
journald-{remote,upload}: init
2026-01-15 15:50:49 +09:00
h7x4
5d0b2c6e0a
temmie: mount nfs shares from microbel
2026-01-15 00:47:53 +09:00
oysteikt
edeed67528
hosts/temmie: init
2026-01-14 16:43:29 +01:00
h7x4
9e19d9a9bb
bekkalokk/bluemap: include markers with concatenation
2026-01-14 17:40:47 +09:00
h7x4
46d7220479
Move deployment section from dev docs to README, add warning
2026-01-13 22:54:51 +09:00
h7x4
cd6f35a42d
base/auto-upgrade: display build logs in journalctl
2026-01-13 19:59:43 +09:00
h7x4
643dcb091f
kommode/gitea: add developer experience label
2026-01-13 19:59:43 +09:00
h7x4
06d6a08938
flake.nix: bump pvv-nettsiden
2026-01-13 19:59:43 +09:00
h7x4
f67a24648a
skrott: dont allow quitting
2026-01-12 02:32:21 +09:00
h7x4
5e18855c7c
skrott: register sops with dibbler db url
2026-01-12 02:32:21 +09:00
h7x4
21d28f44e2
flake.nix: system -> stdenv.hostPlatform.system
2026-01-09 06:17:57 +09:00
h7x4
ea5850c18b
skrott: use stable kernel
2026-01-09 06:17:57 +09:00
h7x4
b4a43128fb
flake.lock: bump
2026-01-09 06:17:57 +09:00
h7x4
e1482ce795
docs/development: fix warning blocks
2026-01-07 22:51:24 +09:00
h7x4
0c66cff9f2
hosts/skrott: move here from the dibbler repo
2026-01-06 17:40:10 +09:00
h7x4
893de326af
flake.nix: allow disabling defaults for nixosConfig func
2026-01-06 17:11:15 +09:00
h7x4
4abe86dc07
base/roowho2: traffic filter to PVV IP-space
2026-01-06 12:23:39 +09:00
h7x4
25c8171e3d
base/roowho2: init
2026-01-06 12:23:39 +09:00
h7x4
7cff6b197c
topology: extend some more
2025-12-31 03:42:26 +09:00
h7x4
843f8d6a02
bekkalokk/alps: init
2025-12-30 22:40:56 +09:00
h7x4
c0000a1eb6
flake.lock: bump
2025-12-30 16:39:12 +09:00
h7x4
243b665eae
topology: extend some more
2025-12-30 14:23:09 +09:00
h7x4
ab5be48b1c
.gitea/workflows/build-topology-graph: init
2025-12-30 13:09:59 +09:00
h7x4
f671db8a12
topology: extend
2025-12-30 13:00:52 +09:00
h7x4
ad61336a20
topology: add a bunch of non-nixos machines
2025-12-30 02:53:39 +09:00
h7x4
197433a4c3
topology: localize nixos module, add custom extractor, fix misc
2025-12-30 02:02:12 +09:00
h7x4
67445dd9d4
flake.lock: bump
2025-12-30 00:33:11 +09:00
h7x4
101d40f62f
flake.nix: pin git ref for all inputs
2025-12-30 00:33:03 +09:00
h7x4
16891ff521
misc/metrics-exporters: move to base
2025-12-30 00:32:25 +09:00
h7x4
1430af8dfd
misc/rust-motd: drop
2025-12-30 00:23:25 +09:00
h7x4
9491a5d200
wenche: flatten builder config
2025-12-30 00:22:57 +09:00
h7x4
33b7af4e62
flake.nix: add pkgs as an output for ease of why-depends
2025-12-30 00:14:08 +09:00
h7x4
ba36db33b8
docs/{development, development-misc}: init, README: clean
2025-12-29 23:36:23 +09:00
h7x4
5158b39ec8
README: lowercase filename extension
2025-12-29 20:34:53 +09:00
h7x4
48aa9c0e7e
README: add links to new docs
2025-12-29 20:34:53 +09:00
h7x4
34c5e58580
docs/secret-management.md: init
2025-12-29 20:34:53 +09:00
h7x4
8b10cac63a
docs/users.md: init
2025-12-29 20:34:53 +09:00
h7x4
b90a983de0
mediawiki-extensions: bump
2025-12-24 14:27:47 +09:00
h7x4
aa6f7e3038
base/nginx: enable extra listen paramenters by default
2025-12-24 13:44:58 +09:00
h7x4
7356364983
bekkalokk/bluemap: enable kTLS, HTTP3 and QUIC for nginx
2025-12-24 13:44:58 +09:00
h7x4
0c505e9c01
bekkalokk/bluemap: rewrite prestart as StateDirectory + ExecStartPre
2025-12-24 12:26:01 +09:00
h7x4
98473ef3c6
modules/bluemap: expand script
2025-12-24 12:11:51 +09:00
h7x4
9fd4df58b1
modules/bluemap: set CPUSchedulingPolicy=batch
2025-12-24 12:03:20 +09:00
h7x4
18c8490fe4
modules/bluemap: declare render-mask option
2025-12-24 11:27:35 +09:00
h7x4
a098eda1b1
modules/bluemap: remove max-y, bekkalokk/bluemap: fix
2025-12-24 11:22:00 +09:00
h7x4
f159fbf690
bekkalokk/bluemap: fix start-pos in map configs
2025-12-24 11:15:34 +09:00
h7x4
bd1cbd730a
bekkalokk/bluemap: set world names
2025-12-24 11:10:25 +09:00
h7x4
0412ed2bc7
modules/bluemap: update map config defaults
2025-12-24 11:09:14 +09:00
h7x4
1991f5a290
modules/bluemap: declare 'name' option
2025-12-24 11:01:56 +09:00
h7x4
b567a85446
bluemap: move module and package, expose through flake, bekkalokk/bluemap: use correct package version
2025-12-24 10:52:07 +09:00
h7x4
eeedcf738a
bluemap: update module to reflect upstream better
2025-12-24 10:45:03 +09:00
h7x4
e6950681d5
bluemap: bump from 5.2 -> 5.15
2025-12-24 10:17:05 +09:00
h7x4
2ab25ecd45
bekkalokk/bluemap: update config
2025-12-24 10:10:28 +09:00
h7x4
167c889e11
various: set sops restartUnits
2025-12-22 15:48:13 +09:00
h7x4
6c5e8efea9
kommode/gitea: fix sops restarts and systemd ordering
2025-12-22 15:39:36 +09:00
h7x4
cedaf2a517
kommode/gitea: declarative pubkey
2025-12-22 15:35:54 +09:00
h7x4
4f24217bef
kommode/gitea: add restartUnits for some sops secrets
2025-12-22 15:20:56 +09:00
h7x4
9b22b53e95
secrets/bakke: update keys
2025-12-22 15:10:22 +09:00
h7x4
0a6e50e04c
secrets/kommode: update gitea signing key
2025-12-22 15:08:53 +09:00
h7x4
c66e04dd26
.sops.yaml: remove remains of jokum
2025-12-22 15:08:39 +09:00
h7x4
5df01ee6d5
bekkalokk/mediawiki: add dark mode support
2025-12-22 14:10:56 +09:00
h7x4
b0a49f87d5
bicep/postgres: bindmount datadir
2025-12-22 13:38:21 +09:00
h7x4
a619125dcb
bekkalokk/nettsiden: remove old handling of alternative domains
2025-12-22 13:07:02 +09:00
h7x4
