h7x4
8a84069dcf
bicep/mysql: use BindPaths to access dataDir
2026-01-27 17:23:38 +09:00
h7x4
cda84be5b0
bekkalokk/well-known: add note about bug bounty program to security.txt
2026-01-27 17:11:07 +09:00
h7x4
79a46ce3f6
bicep/element: set default country code
2026-01-27 04:11:40 +09:00
h7x4
19e45be83a
.mailmap: further dedup
2026-01-27 04:07:25 +09:00
h7x4
a8892e2fb2
hosts/various: bump stateVersion
2026-01-27 04:00:48 +09:00
h7x4
a149f97ac0
bicep: bump stateVersion from 22.11 -> 25.11
2026-01-27 03:59:40 +09:00
h7x4
e76c656378
bekkalokk: bump stateVersion from 22.11 -> 25.11
2026-01-27 03:52:34 +09:00
h7x4
5877ef60b1
modules/rsync-pull-targets: leave TODO about assertion
2026-01-27 00:27:00 +09:00
h7x4
73456de527
bekkalokk/mediawiki, bicep/matrix/synapse: leave principal rsync target stubs
2026-01-27 00:26:42 +09:00
h7x4
2f8e9ea190
modules/rsync-pull-targets: init, migrate bekkalokk/website/fetch-gallery
2026-01-26 23:57:20 +09:00
h7x4
c3c98392ad
bicep/hookshot: add passkey to sops
2026-01-26 21:52:58 +09:00
h7x4
e01fd902eb
bekkalokk/mediawiki: move secret.key to sops
2026-01-26 17:55:55 +09:00
h7x4
ce8d759f79
skrott: yeet 700MB worth of firmware, leave raspberry-specific firmware be
2026-01-26 17:09:18 +09:00
h7x4
ea6296f47a
base/vm: disable graphics for vms by default
2026-01-26 17:08:35 +09:00
h7x4
c28fc3f229
ildkule/prometheus: add temmie,gluttony, re-enable lupine-2
2026-01-26 17:04:55 +09:00
h7x4
c124183d95
ildkule/prometheus: scrape skrott
2026-01-26 17:04:52 +09:00
h7x4
d7bb316056
skrott: yeetus ncdu
2026-01-26 15:45:10 +09:00
h7x4
c78c29aaa6
skrott: don't pull in nixpkgs/nixpkgs-unstable source tarballs
2026-01-26 15:43:23 +09:00
h7x4
7d451f1db5
base/auto-upgrade: don't install flake-inputs.json when disabled
2026-01-26 15:42:56 +09:00
h7x4
1d57cec04d
base/acme: remove deprecated argument
2026-01-26 15:07:40 +09:00
h7x4
f50372fabd
.sops.yaml: remove yet more remains of jokum
2026-01-26 13:53:30 +09:00
h7x4
0f355046de
.sops.yaml: add skrott
2026-01-26 13:53:16 +09:00
h7x4
285f5b6a84
flake.nix: point skrott-x86_64 at correct nixosConfiguration, add -sd variants
2026-01-26 13:46:15 +09:00
h7x4
20eec03cd4
bakke: fix eval warnings about kernel packages
2026-01-26 13:46:14 +09:00
h7x4
fffdf77d6f
skrott: disable more stuff
2026-01-26 13:46:13 +09:00
h7x4
42bbb1eca1
flake.nix: make native skrott default, misc cleaning
2026-01-26 13:28:42 +09:00
h7x4
34fdc9159c
bekkalokk/mediawiki: remove nonused module import
2026-01-26 13:19:48 +09:00
h7x4
1b6ff9876d
Remove global packages from users, skrott: remove neovim properly
2026-01-26 13:16:06 +09:00
h7x4
0206c159a2
skrott: cross compile and further minimize
2026-01-26 13:15:46 +09:00
h7x4
15004829a8
flake.lock: bump dibbler
2026-01-26 02:30:53 +09:00
h7x4
48ffb3cda1
skrott/dibbler: fix postgres url
2026-01-26 02:27:21 +09:00
h7x4
9bbc64afc8
skrott: disable promtail, documentation
2026-01-26 02:25:12 +09:00
h7x4
1cf956f37b
skrott: disable thermald
2026-01-26 02:04:03 +09:00
h7x4
38a1d38c7f
skrott: disable zfs, udisks2
2026-01-26 01:31:46 +09:00
h7x4
f1a6e47e67
skrott: disable smartd
2026-01-26 00:48:36 +09:00
h7x4
c061c5be0c
base: re-enable mutableUsers (absolute state)
2026-01-26 00:25:20 +09:00
h7x4
08e3e1a287
README: add skrott to machine overview
2026-01-25 23:30:41 +09:00
h7x4
034f6540d9
secrets/skrott: add database password
2026-01-25 23:30:41 +09:00
h7x4
695fe48ba8
skrott: set gateway
2026-01-25 23:30:41 +09:00
h7x4
b37551209a
flake.nix: bump dibbler
2026-01-25 22:54:52 +09:00
h7x4
e336c119a5
skrott: bump stateVersion
2026-01-25 21:08:28 +09:00
h7x4
52ac4ca775
skrott: update dibbler + config
2026-01-25 20:56:33 +09:00
h7x4
689d6582ae
topology: fix ntnu gateway <-> knutsen connection network
2026-01-23 00:56:32 +09:00
h7x4
ccdaeaf4a3
topology: fix gluttony network interface
2026-01-23 00:51:30 +09:00
h7x4
72fdca4998
topology: more connections to powerpuff cluster
2026-01-23 00:50:16 +09:00
h7x4
9ccdeb6ac9
topology: fix new machines
2026-01-23 00:43:20 +09:00
h7x4
8072121b3c
skrott: fix sops file location
2026-01-22 19:44:05 +09:00
h7x4
95f6463171
temmie: set up httpd
2026-01-22 19:41:52 +09:00
h7x4
39d3773a10
skrott: move networking config to values, add ipv6 address
2026-01-22 19:30:04 +09:00
h7x4
0e963f8cf0
gluttony: fix eval
2026-01-22 19:17:28 +09:00
h7x4
ba6c1c8205
temmie/nfs-mounts: generate systemd units ourselves
2026-01-22 19:10:30 +09:00
h7x4
1d47409d96
base: configure sops
2026-01-22 16:48:59 +09:00
h7x4
f7757d697d
base: don't install dynamic loader stub
2026-01-22 16:13:36 +09:00
h7x4
9f43ea887e
base: OOM early on nixos rebuilds
2026-01-22 16:13:20 +09:00
h7x4
5f94345a91
hosts/various: enable qemu guest agent, disable smartd for vms by default
2026-01-22 16:05:36 +09:00
h7x4
28baf322ce
hosts/various: formatting, add consistent warnings to stateVersion
2026-01-22 15:57:12 +09:00
h7x4
12477aeb34
flake.nix: set default hostname for most nixos hosts
2026-01-22 15:49:50 +09:00
h7x4
e2d553af19
bikkje: set hostName
2026-01-22 15:49:50 +09:00
h7x4
89ea5b321a
hosts/various: use systemd-boot as default bootloader
2026-01-22 15:49:50 +09:00
h7x4
3940f52760
hosts/various: remove empty environment.systemPackages lists
2026-01-22 15:45:43 +09:00
h7x4
e2f3c81ecd
base: move package list to separate file
2026-01-22 15:35:18 +09:00
h7x4
a4c3aaa402
base: provide reasoning for packages, add a few new ones
2026-01-22 15:31:48 +09:00
h7x4
5714efc668
modules/grzegorz: override base certificate config
2026-01-22 15:10:50 +09:00
h7x4
d5199779a6
base: disable fontconfig by default
2026-01-22 14:57:00 +09:00
h7x4
ae3c7019ef
base: disable hibernation and sleep
2026-01-22 14:54:35 +09:00
h7x4
73dc9306f1
base: no mutable users by default
2026-01-22 14:51:24 +09:00
h7x4
09d72305e2
base/nginx: return 444 on fqdn virtualHost by default
2026-01-21 23:17:47 +09:00
h7x4
2ace7b649f
nix-topology: remove postgresql icon override
2026-01-21 14:56:41 +09:00
h7x4
7703a94b19
flake.lock: bump
2026-01-21 14:49:00 +09:00
h7x4
ebd40fc2d7
bekkalokk/well-known: reply to well-known for all domains
2026-01-21 14:47:31 +09:00
h7x4
9eb5cd869a
bicep/element: fetch correct well-known file
2026-01-21 14:34:35 +09:00
h7x4
fa37f34028
packages/ooye: bump
2026-01-21 13:46:06 +09:00
h7x4
7111d00df8
modules/ooye: calm yo ass (set restart timer + counter)
2026-01-21 13:17:28 +09:00
h7x4
833a74a6fb
bicep/matrix: remove some whitespace lol
2026-01-21 13:14:41 +09:00
h7x4
d82cc2e605
update and fix `packages.out-of-your-element
2026-01-21 12:49:13 +09:00
h7x4
93cf6f4a63
bicep/sshguard: disable
...
sshguard doesn't actually work as it currently stands, also the builtin
PerSourcePenalty functionality in SSH is more aggressive than sshguard
is able to catch anyway. It might've been reasonable if we were using it
for anything other than SSH, but it doesn't seem like we are.
2026-01-21 11:13:27 +09:00
h7x4
0f11cca8ec
bicep/matrix: use sops templates to render structured files
2026-01-21 11:08:26 +09:00
h7x4
d892acb331
bicep/matrix: have element-web source well-known from config
2026-01-21 10:49:09 +09:00
h7x4
aa07687a94
bicep/matrix: add synapse config to help with livekit
2026-01-21 10:48:37 +09:00
h7x4
e5dd5b6325
bicep/matrix: attempt to set up livekit
2026-01-21 10:14:08 +09:00
h7x4
75c52f63cc
bicep/matrix: add module for adding stuff to well-known
2026-01-21 10:14:07 +09:00
h7x4
633efc1a7d
ildkule: unbreak eval
2026-01-20 17:12:25 +09:00
h7x4
5e5a7f1969
flake.lock: bump minecraft-kartverket
2026-01-19 00:18:06 +09:00
h7x4
60b6cd137f
flake.lock: bump pvv-nettsiden
2026-01-17 16:55:20 +09:00
h7x4
3a0ea9c338
base/polkit: default to username if in group wheel
2026-01-17 03:59:55 +09:00
h7x4
d66aab1e61
flake.lock: bump minecraft-kartverket
2026-01-17 03:59:29 +09:00
h7x4
a9b1e11eea
flake.lock: bump
2026-01-16 23:25:15 +09:00
h7x4
1fc3eb24cf
flake.lock: bump minecraft-kartverket
2026-01-16 19:50:51 +09:00
h7x4
9984af36f4
modules/gickup: fix linktree config eval
2026-01-16 15:38:34 +09:00
h7x4 and oysteikt
1080589aef
secrets/*/*: update keys
2026-01-16 07:36:43 +01:00
h7x4
586a7c3ee5
flake.lock: bump
2026-01-16 11:51:31 +09:00
h7x4
8ff879d830
modules/gickup: run linktree after gickup fetches are done
2026-01-16 11:51:01 +09:00
h7x4
005d987ead
bicep/git-mirrors: fix cgit config
2026-01-16 11:50:31 +09:00
h7x4
e72fb76fff
ildkule/journald-remote: move LoadCredential to correct unit
2026-01-15 18:37:44 +09:00
h7x4
1c021cd789
base/packages: add net-tools
2026-01-15 17:49:42 +09:00
h7x4
d93bdd8493
journald-upload: use ipv4 temporarily, restrict firewall to ildkule
2026-01-15 17:38:27 +09:00
h7x4
024dae4226
journald-{remote,upload}: init
2026-01-15 15:50:49 +09:00
h7x4
5d0b2c6e0a
temmie: mount nfs shares from microbel
2026-01-15 00:47:53 +09:00
oysteikt
edeed67528
hosts/temmie: init
2026-01-14 16:43:29 +01:00
h7x4
9e19d9a9bb
bekkalokk/bluemap: include markers with concatenation
2026-01-14 17:40:47 +09:00
h7x4
