h7x4
|
ab518714a5
|
bekkalokk/well-known: advertise TLS SMTP in autoconfig/mail
|
2026-07-25 23:24:57 +02:00 |
|
h7x4
|
4f6c731d25
|
flake.lock: bump pvv-nettsiden
|
2026-07-25 20:51:24 +09:00 |
|
h7x4
|
ee718563c8
|
bicep/postgresql: don't open udp 5432 in firewall
|
2026-07-25 07:35:42 +09:00 |
|
h7x4
|
fcc06d47c2
|
base/sshd: accept some useful envvars
|
2026-07-24 16:03:54 +09:00 |
|
h7x4
|
d13df223bf
|
bicep/mysql: add timed jobs for analyze and optimize
|
2026-07-22 15:09:10 +02:00 |
|
h7x4
|
1c4e8e7662
|
base/postfix: remove, base:nullmailer: init
|
2026-07-22 21:12:00 +09:00 |
|
h7x4
|
207bd1975e
|
kommode/gitea: add robots.txt
|
2026-07-22 21:02:22 +09:00 |
|
h7x4
|
28794691bf
|
bicep/{postgres,mysql}: bindmount data storage with noatime
|
2026-07-22 13:01:02 +02:00 |
|
h7x4
|
1ff34d7aab
|
secrets: add passwords for gatus dbms checkers
|
2026-07-21 18:44:51 +09:00 |
|
h7x4
|
3d551fab52
|
ildkule/gatus: add healthcheck for mariadb
|
2026-07-21 18:44:51 +09:00 |
|
h7x4
|
a99a83c0d8
|
ildkule/gatus: add healthcheck for postgresql
|
2026-07-21 18:44:50 +09:00 |
|
h7x4
|
9a837d210d
|
bicep/postgres: log connections/disconnections
|
2026-07-21 16:39:25 +09:00 |
|
h7x4
|
d3c9fabbc2
|
base/irqbalance: only start on multi-socket machines
|
2026-07-21 16:38:38 +09:00 |
|
h7x4
|
950b163869
|
bicep/postgresql: use scram-sha-256 as default password algorithm
|
2026-07-21 16:32:49 +09:00 |
|
h7x4
|
9bd81430a4
|
topology: remove (now) redundant mysql service extractor
|
2026-07-20 23:20:02 +09:00 |
|
h7x4
|
9b38b4b8d3
|
flake.lock: bump
|
2026-07-20 22:30:39 +09:00 |
|
h7x4
|
6abc05dc4d
|
treewide: have rwhod ignore always logged-in users
|
2026-07-20 21:51:57 +09:00 |
|
h7x4
|
2e3ac911cb
|
skrot: split drumknotty service details into separate file
|
2026-07-20 21:39:16 +09:00 |
|
h7x4
|
16b0d05d27
|
flake.lock: bump roowho2
|
2026-07-20 21:34:29 +09:00 |
|
h7x4
|
fe19bb9bdb
|
ildkule/gatus/minecraft-checker: rewrite to use python-http-handlers module
|
2026-07-20 19:37:28 +09:00 |
|
h7x4
|
f4f9836deb
|
modules/python-http-handlers: init
|
2026-07-20 19:37:26 +09:00 |
|
h7x4
|
fb7e350ac7
|
flake.lock: bump dibbler
|
2026-07-18 18:44:28 +09:00 |
|
h7x4
|
3c3bf6b10f
|
modules/drumknotty: provide state directories for all services
|
2026-07-18 18:42:26 +09:00 |
|
h7x4
|
b0e3d90c20
|
ildkule/gatus/minecraft-checker: init
|
2026-07-07 16:26:26 +09:00 |
|
h7x4
|
111c3e21bd
|
ildkule/gatus: init
|
2026-07-07 16:26:06 +09:00 |
|
h7x4
|
decd8b04c1
|
ildkule/uptime-kuma: remove
|
2026-07-06 05:31:50 +09:00 |
|
h7x4
|
4b8be337e0
|
lupine5/openvpn: additional config, open firewall
|
2026-07-06 02:37:17 +09:00 |
|
h7x4
|
fcfcb07e59
|
lupine5: register knutsen-vpn ip
|
2026-07-06 02:37:16 +09:00 |
|
h7x4
|
1e66049c79
|
lupine5/openvpn: use certs
|
2026-07-06 02:37:16 +09:00 |
|
h7x4
|
928ddde344
|
sops/lupine: add CA + 2 keypairs for OpenVPN
|
2026-07-06 02:37:16 +09:00 |
|
h7x4
|
3aa8d0b418
|
lupine5/openvpn: init
|
2026-07-05 01:31:15 +09:00 |
|
h7x4
|
293f28abb1
|
lupine5: set up bridge and tap netdevs
|
2026-07-05 01:01:35 +09:00 |
|
h7x4
|
f4b1f090e4
|
flake.lock: bump various
|
2026-06-30 04:15:37 +09:00 |
|
h7x4
|
7c684e42f0
|
treewide: fix rsync <-> rrsync communication
|
2026-06-30 02:41:40 +09:00 |
|
h7x4
|
90bfda9066
|
kommode/gitea: bump AVATAR_MAX_ORIGIN_SIZE from 2MB to 4MB
|
2026-06-24 14:33:20 +09:00 |
|
h7x4
|
522d8f18cb
|
flake.{nix,lock}: bump roowho2
|
2026-06-24 13:38:03 +09:00 |
|
h7x4
|
5e613a03fc
|
treewide: set relatime for most root mounts
|
2026-06-23 01:12:16 +09:00 |
|
h7x4
|
170fb2a980
|
bicep/synapse: fix dbname option
|
2026-06-22 18:55:14 +09:00 |
|
h7x4
|
3e627472e9
|
flake.{nix,lock}: bump matrix-next
|
2026-06-22 18:55:13 +09:00 |
|
Adrian G L
|
e05c4ed8ca
|
feat: add initialdeploy hashed password to root
|
2026-06-21 18:24:01 +02:00 |
|
h7x4
|
3fee83ec05
|
ildkule/loki: restrict incoming connections to pvv + ntnu
|
2026-06-22 01:23:16 +09:00 |
|
h7x4
|
a1f02fc39d
|
{ildkule/loki,base/fluentbit}: send data over https
|
2026-06-22 01:23:16 +09:00 |
|
Adrian G L
|
6e37635aac
|
ildkule/loki: firewall all endpoints except push API
Co-authored-by: Øystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>
|
2026-06-22 01:23:14 +09:00 |
|
h7x4
|
cdc3ad488b
|
bicep/postgres: add script for updating all collations
|
2026-06-22 01:12:59 +09:00 |
|
h7x4
|
aa2712005a
|
temmie/nfs-mounts: create by-uid bindmounts
|
2026-06-17 13:43:19 +09:00 |
|
h7x4
|
89921b533b
|
temmie/userweb: further harden log-processor
|
2026-06-17 12:31:02 +09:00 |
|
h7x4
|
75f87ffab8
|
temmie/userweb: run passwd sync in different unit
|
2026-06-17 12:15:23 +09:00 |
|
h7x4
|
b910cf9563
|
temmie/userweb: suppress erroneous access log for documentRoot
|
2026-06-17 08:57:55 +09:00 |
|
h7x4
|
d23adbd4c2
|
temmie/userweb: deny access to documentRoot
|
2026-06-17 08:49:44 +09:00 |
|
h7x4
|
48c0a4e504
|
temmie/userweb: fix directory denylist enforcement
|
2026-06-17 08:23:08 +09:00 |
|