eb0eb6d93b
add bekkalokk to known_hosts
2026-05-25 03:20:25 +02:00
6a943dd7b0
bluemap: set group to nginx only if nginx is enabled
2026-05-25 03:20:25 +02:00
c59c00f3fc
gluttony: setup bluemap
2026-05-25 03:20:21 +02:00
53670b4d05
flake.nix/inputs/disko: v1.11.0 -> v1.13.0
2026-05-24 23:05:48 +09:00
d92a5f13ad
base/journald-upload: fix target url
2026-05-24 16:41:54 +09:00
16d3251ee2
shells/cuda: fix deprecated package attr warnings
2026-05-24 15:23:33 +09:00
09163b77da
Revert "bicep/matrix/livekit: open the rtc ports"
...
This reverts commit 4a67eddf52
2026-05-23 23:23:41 +02:00
6cca1db3b3
bekkalokk: fix permissions for mediawiki secrets
2026-05-22 20:21:24 +02:00
bfd83c4c64
uptime-kuma: wants to use /var/lib/private for state
2026-05-22 17:58:00 +02:00
9a6fdecb03
kommode/gitea/dump: only keep a single dump at a time
2026-05-22 18:27:57 +09:00
82ab97fb45
bekkalokk/roundcube: restart service on changed sops secrets
2026-05-22 18:10:44 +09:00
543fd19f8d
bekkalokk/vaultwarden: restart service on changed sops secrets
2026-05-22 18:10:40 +09:00
6f99fa575d
bekkalokk/vaultwarden: render environment_file as sops template
2026-05-22 18:02:13 +09:00
3141b1f76b
bekkalokk/vaultwarden: remove redundant hardening
...
This has already been upstreamed
2026-05-22 17:51:03 +09:00
475f6a8c9b
bekkalokk/vaultwarden: add rsa key to sops
2026-05-22 17:49:31 +09:00
9c1687f8f2
bekkalokk/vaultwarden: use envvar keys
...
It seems like the nixpkgs module is compensating for previous config
that might've ended up in a file, which are now being turned into
screaming snake case environment variables. Let's just name them as they
are supposed to be named instead of having the upstream module translate
them.
2026-05-22 17:08:31 +09:00
0f53bcd731
bekkalokk/roundcube: add des_key to sops
2026-05-22 17:08:31 +09:00
f433ae1e15
ustetind: remove from sops
...
rg -. to the rescue
2026-05-22 10:01:15 +02:00
5745648f87
bicep/postgres/repack: use local unix socket
2026-05-22 15:59:59 +09:00
2c34a93abf
bicep/postgres/repack: don't kill connections on timeout
2026-05-22 15:57:57 +09:00
9ebc947eab
ustetind: bai bai 👋
2026-05-22 15:41:28 +09:00
6fcc19f0a2
base/fluentbit: init
2026-05-22 15:32:13 +09:00
9224f04bd1
base/promtail: remove
2026-05-22 15:32:13 +09:00
9c93f15569
change agekey for ildkule and update keys
...
update keys
2026-05-21 17:27:11 +02:00
5d6c153007
kommode/gitea: fix dump command
2026-05-21 17:54:54 +09:00
8b483a92f8
ildkule: set fsType for bindmounts
2026-05-21 17:52:47 +09:00
0d7f05e56d
bicep/postgres: add cleanup timers
2026-05-21 04:14:34 +09:00
4a67eddf52
bicep/matrix/livekit: open the rtc ports
2026-05-20 20:04:33 +02:00
08a23bd380
base/hardening: ban a few more modules
2026-05-20 23:15:25 +09:00
28b67c3578
base/mitigations: blacklist modules for copyfail and pintheft
2026-05-20 23:15:25 +09:00
e5804c043a
README: add gluttony
2026-05-20 06:24:26 +02:00
9c227f3022
update gluttony IPs and boot device
2026-05-20 06:07:41 +02:00
69fdf709d7
grr: fix the heccin quotes
2026-05-19 16:38:34 +02:00
30ec70fa5f
fix: ildkule grub duplicated devices, format nix files
2026-05-19 16:26:36 +02:00
1024b428ac
feat: ildkule disco config
2026-05-19 12:16:39 +02:00
1e6b692fbf
fix: updated ildkule config and ips to match trd1 new setup
2026-05-19 11:37:05 +02:00
beac6e91dd
flake.lock: bump pvv-nettsiden
2026-05-17 16:58:04 +02:00
0fd41c214a
flake.{nix,lock}: bump deps
2026-05-13 01:19:35 +09:00
5c1ee958ea
flake.{nix,lock}: bump roowho2
2026-05-12 00:25:55 +09:00
d8e97715c9
flake.lock: bump pvv-nettsiden
2026-05-12 00:24:56 +09:00
33297b0436
treewide: lib.cli.toGNUCommandLineShell -> lib.cli.toCommandLineShellGNU
2026-05-11 23:09:50 +09:00
be33c95c83
bekkalokk/website: more logging, specify timeouts, ban spooky funcs, fake sendmail
2026-05-11 21:14:08 +09:00
2abf36a9af
packages/simplesamlphp: 2.4.3 -> 2.5.0
2026-05-11 16:12:15 +09:00
a60be532ce
packages/mediawiki-extensions: bump all
2026-05-11 16:11:10 +09:00
9c142fd56f
kommode/gitea: remove deprecated config options
2026-05-11 16:00:51 +09:00
b98e8679e6
temmie/userweb: set same phpOptions for env and apache
2026-05-11 14:54:56 +09:00
ea092ec0b3
temmie/userweb: pass userdir user to sendmail through custom envvar
2026-05-11 14:26:47 +09:00
5e50b617fb
temmie/userweb: switch from postfix to nullmailer
2026-05-11 13:52:58 +09:00
258c5a7b25
temmie/userweb: set up sendmail wrapper
2026-05-11 12:26:39 +09:00
b9eda3dc56
temmie/userweb: reduce package list
2026-05-11 10:17:09 +09:00
Vegard Bieker Matthey