165 Commits

Author	SHA1	Message	Date
Vegard Bieker Matthey	57963fadd7	gluttony: add private key and set public key for bekkalokk	2026-05-25 03:22:13 +02:00
Vegard Bieker Matthey	792f111a5d	bekkalokk: pull rendered map from gluttony	2026-05-25 03:22:13 +02:00
Vegard Bieker Matthey	6cca1db3b3	bekkalokk: fix permissions for mediawiki secrets	2026-05-22 20:21:24 +02:00
h7x4	82ab97fb45	bekkalokk/roundcube: restart service on changed sops secrets	2026-05-22 18:10:44 +09:00
h7x4	543fd19f8d	bekkalokk/vaultwarden: restart service on changed sops secrets	2026-05-22 18:10:40 +09:00
h7x4	6f99fa575d	bekkalokk/vaultwarden: render environment_file as sops template	2026-05-22 18:02:13 +09:00
h7x4	3141b1f76b	bekkalokk/vaultwarden: remove redundant hardening ... This has already been upstreamed	2026-05-22 17:51:03 +09:00
h7x4	475f6a8c9b	bekkalokk/vaultwarden: add rsa key to sops	2026-05-22 17:49:31 +09:00
h7x4	9c1687f8f2	bekkalokk/vaultwarden: use envvar keys ... It seems like the nixpkgs module is compensating for previous config that might've ended up in a file, which are now being turned into screaming snake case environment variables. Let's just name them as they are supposed to be named instead of having the upstream module translate them.	2026-05-22 17:08:31 +09:00
h7x4	0f53bcd731	bekkalokk/roundcube: add des_key to sops	2026-05-22 17:08:31 +09:00
h7x4	33297b0436	treewide: lib.cli.toGNUCommandLineShell -> lib.cli.toCommandLineShellGNU	2026-05-11 23:09:50 +09:00
h7x4	be33c95c83	bekkalokk/website: more logging, specify timeouts, ban spooky funcs, fake sendmail	2026-05-11 21:14:08 +09:00
Felix Albrigtsen	8db3034baf	Run shellcheck	2026-05-08 09:31:35 +02:00
h7x4	daa4b9e271	bekkalokk/mediawiki: adjust umask	2026-02-07 01:46:55 +09:00
h7x4	12eb0b3f53	bekkalokk/mediawiki: allow uploading more filetypes	2026-02-07 00:56:38 +09:00
h7x4	a5143c0aaa	bekkalokk/nettsiden: fix gallery rsync target	2026-02-05 13:19:29 +09:00
h7x4	91de031896	treewide: limit rsync pull target access to principal	2026-01-31 11:14:18 +09:00
h7x4	359f599655	bekkalokk/snappymail: add rsync pull target for principal	2026-01-31 00:19:09 +09:00
h7x4	5b1c6f16d1	bekkalokk/vaultwarden: add rsync pull target for principal	2026-01-31 00:18:57 +09:00
h7x4	65d095feb1	bekkalokk/mediawiki, bicep/matrix/synapse: add keys for rsync targets	2026-01-27 18:55:03 +09:00
h7x4	cda84be5b0	bekkalokk/well-known: add note about bug bounty program to security.txt	2026-01-27 17:11:07 +09:00
h7x4	e76c656378	bekkalokk: bump stateVersion from 22.11 -> 25.11	2026-01-27 03:52:34 +09:00
h7x4	73456de527	bekkalokk/mediawiki, bicep/matrix/synapse: leave principal rsync target stubs	2026-01-27 00:26:42 +09:00
h7x4	2f8e9ea190	modules/rsync-pull-targets: init, migrate bekkalokk/website/fetch-gallery	2026-01-26 23:57:20 +09:00
h7x4	e01fd902eb	bekkalokk/mediawiki: move secret.key to sops	2026-01-26 17:55:55 +09:00
h7x4	34fdc9159c	bekkalokk/mediawiki: remove nonused module import	2026-01-26 13:19:48 +09:00
h7x4	1d47409d96	base: configure sops	2026-01-22 16:48:59 +09:00
h7x4	28baf322ce	hosts/various: formatting, add consistent warnings to stateVersion	2026-01-22 15:57:12 +09:00
h7x4	12477aeb34	flake.nix: set default hostname for most nixos hosts	2026-01-22 15:49:50 +09:00
h7x4	89ea5b321a	hosts/various: use systemd-boot as default bootloader	2026-01-22 15:49:50 +09:00
h7x4	ebd40fc2d7	bekkalokk/well-known: reply to well-known for all domains	2026-01-21 14:47:31 +09:00
Felix Albrigtsen	14e2ed7e32	Fix the heccin quotes	2026-01-19 21:09:41 +01:00
fredrik	b933d19f91	bekkalokk/qotd: init	2026-01-17 22:11:37 +01:00
h7x4	9e19d9a9bb	bekkalokk/bluemap: include markers with concatenation	2026-01-14 17:40:47 +09:00
h7x4	843f8d6a02	bekkalokk/alps: init	2025-12-30 22:40:56 +09:00
h7x4	16891ff521	misc/metrics-exporters: move to base	2025-12-30 00:32:25 +09:00
h7x4	7356364983	bekkalokk/bluemap: enable kTLS, HTTP3 and QUIC for nginx	2025-12-24 13:44:58 +09:00
h7x4	0c505e9c01	bekkalokk/bluemap: rewrite prestart as StateDirectory + ExecStartPre	2025-12-24 12:26:01 +09:00
h7x4	a098eda1b1	modules/bluemap: remove max-y, bekkalokk/bluemap: fix	2025-12-24 11:22:00 +09:00
h7x4	f159fbf690	bekkalokk/bluemap: fix start-pos in map configs	2025-12-24 11:15:34 +09:00
h7x4	bd1cbd730a	bekkalokk/bluemap: set world names	2025-12-24 11:10:25 +09:00
h7x4	b567a85446	bluemap: move module and package, expose through flake, bekkalokk/bluemap: use correct package version	2025-12-24 10:52:07 +09:00
h7x4	eeedcf738a	bluemap: update module to reflect upstream better	2025-12-24 10:45:03 +09:00
h7x4	2ab25ecd45	bekkalokk/bluemap: update config	2025-12-24 10:10:28 +09:00
h7x4	5df01ee6d5	bekkalokk/mediawiki: add dark mode support	2025-12-22 14:10:56 +09:00
h7x4	a619125dcb	bekkalokk/nettsiden: remove old handling of alternative domains	2025-12-22 13:07:02 +09:00
h7x4	c9d90203d4	bekkalokk/nettsiden: use SSL cert for redirects	2025-12-22 13:03:14 +09:00
h7x4	bde6ebc6ad	bekkalokk/nettsiden: use redirects for alternative domains	2025-12-22 12:45:58 +09:00
h7x4	f58c935966	bekkalokk/kerberos: remove vendored module	2025-12-22 11:17:58 +09:00
h7x4	86a8d2e2f1	bekkalokk/bluemap: stdenv.hostPlatform.system	2025-12-05 02:25:15 +09:00