c671329b93
temmie/userweb: inject users from passwd into httpd sandbox
2026-06-07 05:28:24 +09:00
2d6b09cb32
bikkje: label ports in firewall port list
2026-06-06 04:08:16 +09:00
88892115b5
base: enable autoScrub for all btrfs machine by default
2026-06-06 04:05:26 +09:00
8a290d30e7
modules/drumknotty: split into several parts
...
This also fixes a few issues, such as enabling `createLocalDatabase` for
multiple programs, and wraps all the screen logic within a screenrc
file. Some assertions were also added to avoid some easy-to-make
mistakes.
2026-06-05 14:21:35 +02:00
009d89f959
set default settings for worblehat and dibbler
2026-06-05 14:09:06 +02:00
7e754ade71
drumknotty: init
2026-06-05 14:08:58 +02:00
966081ebfc
bicep/mysql: enable userstat
2026-06-03 15:31:27 +09:00
39d313579c
bicep/mysql: rotate slow query logs
2026-06-03 15:21:18 +09:00
3386153b8b
ildkule/prometheus/exim: make scheme explicit
2026-06-03 13:35:13 +09:00
56906241f6
bekkalokk/roundcube: temporary fix for webmail redirects
2026-06-01 03:52:09 +09:00
3fe71d21f6
bekkalokk/roundcube: webdir moved to public_html within package
2026-06-01 02:57:43 +09:00
1ce3372683
lupine/binfmt: enable
2026-06-01 01:00:50 +09:00
5f14c15679
feat: add radicale to bekkalokk
2026-06-01 00:59:54 +09:00
64843087be
kommode/gitea: only allow webhooks to external hosts
...
We don't have any servers with intranet IPs, and we want webhooks that
hook back to kommode to pass through its firewall.
2026-05-29 12:58:26 +09:00
0c45345050
bicep/matrix-ooye harden
2026-05-28 16:07:36 +09:00
788f23bf04
bicep/matrix-hookshot: harden
2026-05-28 15:58:04 +09:00
8416014aeb
bicep/mjolnir: harden
2026-05-28 15:58:04 +09:00
5bf0de1d0d
bekkalokk/website/fetch-gallery: use proper shellscript builder
2026-05-28 03:58:08 +09:00
a550bbf1e0
bekkalokk/roundcube: use specialized builder for nginx root dir
2026-05-28 03:46:59 +09:00
6d9bd8256f
kommode/gitea/install-customization: disable networking
2026-05-28 03:15:47 +09:00
5c859d9809
kommode/gitea/install-customization: remove ExecStart bash wrapper
2026-05-28 03:15:06 +09:00
dfbed75cd9
kommode/gitea/gpg: remove ExecStart bash wrapper
2026-05-28 03:06:07 +09:00
6237a0a0e7
bicep/minecraft-heatmap: remove ExecStartPre bash wrapper
2026-05-28 03:03:38 +09:00
bd2263a0a9
kommode/gitea/import-users: remove ExecStartPre bash wrapper
2026-05-28 03:02:59 +09:00
532e8b0eee
bekkalokk/mediawiki: install PdfHandler extension
2026-05-28 01:22:13 +09:00
eef3f8fe8b
bekkalokk/mediawiki: cleanup executable path config
2026-05-28 01:22:13 +09:00
b0f81c9379
lupine/smartd: reenable
2026-05-27 23:41:54 +09:00
2c819776f8
treewide/nginx: enable kTLS for a bunch more virtualHosts
2026-05-27 23:36:18 +09:00
2b4817b75a
ildkule/scrutiny: init
2026-05-27 23:33:45 +09:00
47a744f68f
ildkule/uptime-kuma: set up rsync pull target for principal
2026-05-26 13:37:29 +09:00
da505d4fe2
kommode: sign merge commits and sign crud actions
2026-05-25 20:21:23 +02:00
18ab1ef982
temmie/userweb: set -i and -t in sendmail wrapper
2026-05-25 18:49:57 +09:00
5023edeb13
temmie/userweb: install mod_perl with custom env
2026-05-25 18:24:23 +09:00
0d8c26c548
temmie/userweb: send propagatedBuildInputs through perl env wrapper
2026-05-25 17:05:02 +09:00
bd244e7797
temmie/userweb: add www2 server alias
2026-05-25 16:24:35 +09:00
e9220bb31e
temmie/userweb: use www-datas UID + GID for backwards compat
2026-05-25 15:25:26 +09:00
6beb9c62c3
temmie/userweb: use bro to proxy sendmail requests out of sandbox
2026-05-25 15:02:40 +09:00
0319858cad
Merge branch 'gluttony-bluemap'
2026-05-25 03:32:15 +02:00
efd50868e0
bekkalokk: add back config added through bluemap module
2026-05-25 03:28:49 +02:00
7a23cf7f25
bekkalokk: remove bluemap
2026-05-25 03:28:30 +02:00
57963fadd7
gluttony: add private key and set public key for bekkalokk
2026-05-25 03:22:13 +02:00
792f111a5d
bekkalokk: pull rendered map from gluttony
2026-05-25 03:22:13 +02:00
b27859c0fa
gluttony: export rendered bluemap to bekkalokk
2026-05-25 03:22:09 +02:00
c59c00f3fc
gluttony: setup bluemap
2026-05-25 03:20:21 +02:00
09163b77da
Revert "bicep/matrix/livekit: open the rtc ports"
...
This reverts commit 4a67eddf52
2026-05-23 23:23:41 +02:00
6cca1db3b3
bekkalokk: fix permissions for mediawiki secrets
2026-05-22 20:21:24 +02:00
bfd83c4c64
uptime-kuma: wants to use /var/lib/private for state
2026-05-22 17:58:00 +02:00
9a6fdecb03
kommode/gitea/dump: only keep a single dump at a time
2026-05-22 18:27:57 +09:00
82ab97fb45
bekkalokk/roundcube: restart service on changed sops secrets
2026-05-22 18:10:44 +09:00
543fd19f8d
bekkalokk/vaultwarden: restart service on changed sops secrets
2026-05-22 18:10:40 +09:00
h7x4