8bb86ef634
modules/hugepages: init
2026-07-21 18:18:06 +09:00
9a837d210d
bicep/postgres: log connections/disconnections
2026-07-21 16:39:25 +09:00
d3c9fabbc2
base/irqbalance: only start on multi-socket machines
2026-07-21 16:38:38 +09:00
950b163869
bicep/postgresql: use scram-sha-256 as default password algorithm
2026-07-21 16:32:49 +09:00
9bd81430a4
topology: remove (now) redundant mysql service extractor
2026-07-20 23:20:02 +09:00
9b38b4b8d3
flake.lock: bump
2026-07-20 22:30:39 +09:00
6abc05dc4d
treewide: have rwhod ignore always logged-in users
2026-07-20 21:51:57 +09:00
2e3ac911cb
skrot: split drumknotty service details into separate file
2026-07-20 21:39:16 +09:00
16b0d05d27
flake.lock: bump roowho2
2026-07-20 21:34:29 +09:00
fe19bb9bdb
ildkule/gatus/minecraft-checker: rewrite to use python-http-handlers module
2026-07-20 19:37:28 +09:00
f4f9836deb
modules/python-http-handlers: init
2026-07-20 19:37:26 +09:00
fb7e350ac7
flake.lock: bump dibbler
2026-07-18 18:44:28 +09:00
3c3bf6b10f
modules/drumknotty: provide state directories for all services
2026-07-18 18:42:26 +09:00
b0e3d90c20
ildkule/gatus/minecraft-checker: init
2026-07-07 16:26:26 +09:00
111c3e21bd
ildkule/gatus: init
2026-07-07 16:26:06 +09:00
decd8b04c1
ildkule/uptime-kuma: remove
2026-07-06 05:31:50 +09:00
4b8be337e0
lupine5/openvpn: additional config, open firewall
2026-07-06 02:37:17 +09:00
fcfcb07e59
lupine5: register knutsen-vpn ip
2026-07-06 02:37:16 +09:00
1e66049c79
lupine5/openvpn: use certs
2026-07-06 02:37:16 +09:00
928ddde344
sops/lupine: add CA + 2 keypairs for OpenVPN
2026-07-06 02:37:16 +09:00
3aa8d0b418
lupine5/openvpn: init
2026-07-05 01:31:15 +09:00
293f28abb1
lupine5: set up bridge and tap netdevs
2026-07-05 01:01:35 +09:00
f4b1f090e4
flake.lock: bump various
2026-06-30 04:15:37 +09:00
7c684e42f0
treewide: fix rsync <-> rrsync communication
2026-06-30 02:41:40 +09:00
90bfda9066
kommode/gitea: bump AVATAR_MAX_ORIGIN_SIZE from 2MB to 4MB
2026-06-24 14:33:20 +09:00
522d8f18cb
flake.{nix,lock}: bump roowho2
2026-06-24 13:38:03 +09:00
5e613a03fc
treewide: set relatime for most root mounts
2026-06-23 01:12:16 +09:00
170fb2a980
bicep/synapse: fix dbname option
2026-06-22 18:55:14 +09:00
3e627472e9
flake.{nix,lock}: bump matrix-next
2026-06-22 18:55:13 +09:00
e05c4ed8ca
feat: add initialdeploy hashed password to root
2026-06-21 18:24:01 +02:00
3fee83ec05
ildkule/loki: restrict incoming connections to pvv + ntnu
2026-06-22 01:23:16 +09:00
a1f02fc39d
{ildkule/loki,base/fluentbit}: send data over https
2026-06-22 01:23:16 +09:00
6e37635aac
ildkule/loki: firewall all endpoints except push API
...
Co-authored-by: Øystein Kristoffer Tveit <oysteikt@pvv.ntnu.no >
2026-06-22 01:23:14 +09:00
cdc3ad488b
bicep/postgres: add script for updating all collations
2026-06-22 01:12:59 +09:00
aa2712005a
temmie/nfs-mounts: create by-uid bindmounts
2026-06-17 13:43:19 +09:00
89921b533b
temmie/userweb: further harden log-processor
2026-06-17 12:31:02 +09:00
75f87ffab8
temmie/userweb: run passwd sync in different unit
2026-06-17 12:15:23 +09:00
b910cf9563
temmie/userweb: suppress erroneous access log for documentRoot
2026-06-17 08:57:55 +09:00
d23adbd4c2
temmie/userweb: deny access to documentRoot
2026-06-17 08:49:44 +09:00
48c0a4e504
temmie/userweb: fix directory denylist enforcement
2026-06-17 08:23:08 +09:00
374d9b1bc7
flake.nix: passthru machine config, pkgs and config.system.build
...
This shortens down the path needed to build both overlayed packages and
all the other machine derivations. Here are some examples:
```
nix build .#machine.etc
nix build '.#machine.units."nginx.service".unit'
nix build .#machine.pkgs.overlayed-package
nix build .#machine.config.services.nginx.package
```
2026-06-17 08:10:17 +09:00
d84cc73819
temmie/userweb: handle more .php\d suffixes
2026-06-16 19:07:58 +09:00
b738f08c09
temmie/userweb: render path denylist into Directory/Files directives
2026-06-16 19:07:57 +09:00
8252bba3ad
temmie/userweb: enable httpd trace on debugMode
2026-06-16 19:07:57 +09:00
a776a5a5fe
temmie/userweb: explicitly override mod_perl and mod_userdir
2026-06-16 19:07:57 +09:00
ed57744ec3
temmie/userweb: add more patterns to denylist
2026-06-16 16:07:32 +09:00
226db1f46e
temmie/userweb: add more DirectoryIndex variants
2026-06-16 16:07:32 +09:00
51e1656177
temmie/userweb: disable ~pvv
2026-06-16 15:53:52 +09:00
47d2dcf9ff
temmie/userweb: add bro server to userweb slice
2026-06-16 03:37:28 +09:00
254b1d9b14
temmie/userweb: split into more modules
2026-06-16 03:33:28 +09:00
h7x4