1025 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
h7x4	6beb9c62c3	temmie/userweb: use bro to proxy sendmail requests out of sandbox	2026-05-25 15:02:40 +09:00
h7x4	7429b334ca	README: add temmie to machine overview	2026-05-25 11:59:17 +09:00
h7x4	1595f67c55	flake.nix: allow nvidia-kernel-modules for wenche	2026-05-25 11:35:25 +09:00
h7x4	3f5eadcb87	base/resolved: use RFC42 format	2026-05-25 10:40:04 +09:00
h7x4	70c0ad8724	base: use RFC42 format for systemd.sleep	2026-05-25 10:40:04 +09:00
h7x4	61ea0181a1	packages/mediawiki-extensions: REL1_44 -> REL1_45	2026-05-25 10:40:04 +09:00
h7x4	3e22c1a47e	nixpkgs 26.05 🎉	2026-05-25 10:40:02 +09:00
Vegard Bieker Matthey	0319858cad	Merge branch 'gluttony-bluemap'	2026-05-25 03:32:15 +02:00
Vegard Bieker Matthey	efd50868e0	bekkalokk: add back config added through bluemap module	2026-05-25 03:28:49 +02:00
Vegard Bieker Matthey	7a23cf7f25	bekkalokk: remove bluemap	2026-05-25 03:28:30 +02:00
Vegard Bieker Matthey	57963fadd7	gluttony: add private key and set public key for bekkalokk	2026-05-25 03:22:13 +02:00
Vegard Bieker Matthey	792f111a5d	bekkalokk: pull rendered map from gluttony	2026-05-25 03:22:13 +02:00
Vegard Bieker Matthey	b27859c0fa	gluttony: export rendered bluemap to bekkalokk	2026-05-25 03:22:09 +02:00
Vegard Bieker Matthey	eb0eb6d93b	add bekkalokk to known_hosts	2026-05-25 03:20:25 +02:00
Vegard Bieker Matthey	6a943dd7b0	bluemap: set group to nginx only if nginx is enabled	2026-05-25 03:20:25 +02:00
Vegard Bieker Matthey	c59c00f3fc	gluttony: setup bluemap	2026-05-25 03:20:21 +02:00
h7x4	53670b4d05	flake.nix/inputs/disko: v1.11.0 -> v1.13.0	2026-05-24 23:05:48 +09:00
h7x4	d92a5f13ad	base/journald-upload: fix target url	2026-05-24 16:41:54 +09:00
h7x4	16d3251ee2	shells/cuda: fix deprecated package attr warnings	2026-05-24 15:23:33 +09:00
Daniel Olsen	09163b77da	Revert "bicep/matrix/livekit: open the rtc ports" ... This reverts commit 4a67eddf52.	2026-05-23 23:23:41 +02:00
Vegard Bieker Matthey	6cca1db3b3	bekkalokk: fix permissions for mediawiki secrets	2026-05-22 20:21:24 +02:00
Vegard Bieker Matthey	bfd83c4c64	uptime-kuma: wants to use /var/lib/private for state	2026-05-22 17:58:00 +02:00
h7x4	9a6fdecb03	kommode/gitea/dump: only keep a single dump at a time	2026-05-22 18:27:57 +09:00
h7x4	82ab97fb45	bekkalokk/roundcube: restart service on changed sops secrets	2026-05-22 18:10:44 +09:00
h7x4	543fd19f8d	bekkalokk/vaultwarden: restart service on changed sops secrets	2026-05-22 18:10:40 +09:00
h7x4	6f99fa575d	bekkalokk/vaultwarden: render environment_file as sops template	2026-05-22 18:02:13 +09:00
h7x4	3141b1f76b	bekkalokk/vaultwarden: remove redundant hardening ... This has already been upstreamed	2026-05-22 17:51:03 +09:00
h7x4	475f6a8c9b	bekkalokk/vaultwarden: add rsa key to sops	2026-05-22 17:49:31 +09:00
h7x4	9c1687f8f2	bekkalokk/vaultwarden: use envvar keys ... It seems like the nixpkgs module is compensating for previous config that might've ended up in a file, which are now being turned into screaming snake case environment variables. Let's just name them as they are supposed to be named instead of having the upstream module translate them.	2026-05-22 17:08:31 +09:00
h7x4	0f53bcd731	bekkalokk/roundcube: add des_key to sops	2026-05-22 17:08:31 +09:00
Felix Albrigtsen	f433ae1e15	ustetind: remove from sops ... rg -. to the rescue	2026-05-22 10:01:15 +02:00
h7x4	5745648f87	bicep/postgres/repack: use local unix socket	2026-05-22 15:59:59 +09:00
h7x4	2c34a93abf	bicep/postgres/repack: don't kill connections on timeout	2026-05-22 15:57:57 +09:00
h7x4	9ebc947eab	ustetind: bai bai 👋	2026-05-22 15:41:28 +09:00
h7x4	6fcc19f0a2	base/fluentbit: init	2026-05-22 15:32:13 +09:00
h7x4	9224f04bd1	base/promtail: remove	2026-05-22 15:32:13 +09:00
Vegard Bieker Matthey	9c93f15569	change agekey for ildkule and update keys ... update keys	2026-05-21 17:27:11 +02:00
h7x4	5d6c153007	kommode/gitea: fix dump command	2026-05-21 17:54:54 +09:00
h7x4	8b483a92f8	ildkule: set fsType for bindmounts	2026-05-21 17:52:47 +09:00
h7x4	0d7f05e56d	bicep/postgres: add cleanup timers	2026-05-21 04:14:34 +09:00
Daniel Olsen	4a67eddf52	bicep/matrix/livekit: open the rtc ports	2026-05-20 20:04:33 +02:00
h7x4	08a23bd380	base/hardening: ban a few more modules	2026-05-20 23:15:25 +09:00
h7x4	28b67c3578	base/mitigations: blacklist modules for copyfail and pintheft	2026-05-20 23:15:25 +09:00
Vegard Bieker Matthey	e5804c043a	README: add gluttony	2026-05-20 06:24:26 +02:00
Vegard Bieker Matthey	9c227f3022	update gluttony IPs and boot device	2026-05-20 06:07:41 +02:00
Felix Albrigtsen	69fdf709d7	grr: fix the heccin quotes	2026-05-19 16:38:34 +02:00
Adrian G L	30ec70fa5f	fix: ildkule grub duplicated devices, format nix files	2026-05-19 16:26:36 +02:00
Adrian G L	1024b428ac	feat: ildkule disco config	2026-05-19 12:16:39 +02:00
Adrian G L	1e6b692fbf	fix: updated ildkule config and ips to match trd1 new setup	2026-05-19 11:37:05 +02:00
Vegard Bieker Matthey	beac6e91dd	flake.lock: bump pvv-nettsiden	2026-05-17 16:58:04 +02:00