 h7x4
|
ee718563c8
|
bicep/postgresql: don't open udp 5432 in firewall
|
2026-07-25 07:35:42 +09:00 |
|
|
h7x4
|
d13df223bf
|
bicep/mysql: add timed jobs for analyze and optimize
|
2026-07-22 15:09:10 +02:00 |
|
|
h7x4
|
1c4e8e7662
|
base/postfix: remove, base:nullmailer: init
|
2026-07-22 21:12:00 +09:00 |
|
|
h7x4
|
207bd1975e
|
kommode/gitea: add robots.txt
|
2026-07-22 21:02:22 +09:00 |
|
|
h7x4
|
28794691bf
|
bicep/{postgres,mysql}: bindmount data storage with noatime
|
2026-07-22 13:01:02 +02:00 |
|
|
h7x4
|
3d551fab52
|
ildkule/gatus: add healthcheck for mariadb
|
2026-07-21 18:44:51 +09:00 |
|
|
h7x4
|
a99a83c0d8
|
ildkule/gatus: add healthcheck for postgresql
|
2026-07-21 18:44:50 +09:00 |
|
|
h7x4
|
9a837d210d
|
bicep/postgres: log connections/disconnections
|
2026-07-21 16:39:25 +09:00 |
|
|
h7x4
|
950b163869
|
bicep/postgresql: use scram-sha-256 as default password algorithm
|
2026-07-21 16:32:49 +09:00 |
|
|
h7x4
|
6abc05dc4d
|
treewide: have rwhod ignore always logged-in users
|
2026-07-20 21:51:57 +09:00 |
|
|
h7x4
|
2e3ac911cb
|
skrot: split drumknotty service details into separate file
|
2026-07-20 21:39:16 +09:00 |
|
|
h7x4
|
fe19bb9bdb
|
ildkule/gatus/minecraft-checker: rewrite to use python-http-handlers module
|
2026-07-20 19:37:28 +09:00 |
|
|
h7x4
|
b0e3d90c20
|
ildkule/gatus/minecraft-checker: init
|
2026-07-07 16:26:26 +09:00 |
|
|
h7x4
|
111c3e21bd
|
ildkule/gatus: init
|
2026-07-07 16:26:06 +09:00 |
|
|
h7x4
|
decd8b04c1
|
ildkule/uptime-kuma: remove
|
2026-07-06 05:31:50 +09:00 |
|
|
h7x4
|
4b8be337e0
|
lupine5/openvpn: additional config, open firewall
|
2026-07-06 02:37:17 +09:00 |
|
|
h7x4
|
fcfcb07e59
|
lupine5: register knutsen-vpn ip
|
2026-07-06 02:37:16 +09:00 |
|
|
h7x4
|
1e66049c79
|
lupine5/openvpn: use certs
|
2026-07-06 02:37:16 +09:00 |
|
|
h7x4
|
3aa8d0b418
|
lupine5/openvpn: init
|
2026-07-05 01:31:15 +09:00 |
|
|
h7x4
|
293f28abb1
|
lupine5: set up bridge and tap netdevs
|
2026-07-05 01:01:35 +09:00 |
|
|
h7x4
|
7c684e42f0
|
treewide: fix rsync <-> rrsync communication
|
2026-06-30 02:41:40 +09:00 |
|
|
h7x4
|
90bfda9066
|
kommode/gitea: bump AVATAR_MAX_ORIGIN_SIZE from 2MB to 4MB
|
2026-06-24 14:33:20 +09:00 |
|
|
h7x4
|
5e613a03fc
|
treewide: set relatime for most root mounts
|
2026-06-23 01:12:16 +09:00 |
|
|
h7x4
|
170fb2a980
|
bicep/synapse: fix dbname option
|
2026-06-22 18:55:14 +09:00 |
|
|
h7x4
|
3fee83ec05
|
ildkule/loki: restrict incoming connections to pvv + ntnu
|
2026-06-22 01:23:16 +09:00 |
|
|
h7x4
|
a1f02fc39d
|
{ildkule/loki,base/fluentbit}: send data over https
|
2026-06-22 01:23:16 +09:00 |
|
|
Adrian G L
|
6e37635aac
|
ildkule/loki: firewall all endpoints except push API
Co-authored-by: Øystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>
|
2026-06-22 01:23:14 +09:00 |
|
|
h7x4
|
cdc3ad488b
|
bicep/postgres: add script for updating all collations
|
2026-06-22 01:12:59 +09:00 |
|
|
h7x4
|
aa2712005a
|
temmie/nfs-mounts: create by-uid bindmounts
|
2026-06-17 13:43:19 +09:00 |
|
|
h7x4
|
89921b533b
|
temmie/userweb: further harden log-processor
|
2026-06-17 12:31:02 +09:00 |
|
|
h7x4
|
75f87ffab8
|
temmie/userweb: run passwd sync in different unit
|
2026-06-17 12:15:23 +09:00 |
|
|
h7x4
|
b910cf9563
|
temmie/userweb: suppress erroneous access log for documentRoot
|
2026-06-17 08:57:55 +09:00 |
|
|
h7x4
|
d23adbd4c2
|
temmie/userweb: deny access to documentRoot
|
2026-06-17 08:49:44 +09:00 |
|
|
h7x4
|
48c0a4e504
|
temmie/userweb: fix directory denylist enforcement
|
2026-06-17 08:23:08 +09:00 |
|
|
h7x4
|
d84cc73819
|
temmie/userweb: handle more .php\d suffixes
|
2026-06-16 19:07:58 +09:00 |
|
|
h7x4
|
b738f08c09
|
temmie/userweb: render path denylist into Directory/Files directives
|
2026-06-16 19:07:57 +09:00 |
|
|
h7x4
|
8252bba3ad
|
temmie/userweb: enable httpd trace on debugMode
|
2026-06-16 19:07:57 +09:00 |
|
|
h7x4
|
a776a5a5fe
|
temmie/userweb: explicitly override mod_perl and mod_userdir
|
2026-06-16 19:07:57 +09:00 |
|
|
h7x4
|
ed57744ec3
|
temmie/userweb: add more patterns to denylist
|
2026-06-16 16:07:32 +09:00 |
|
|
h7x4
|
226db1f46e
|
temmie/userweb: add more DirectoryIndex variants
|
2026-06-16 16:07:32 +09:00 |
|
|
h7x4
|
51e1656177
|
temmie/userweb: disable ~pvv
|
2026-06-16 15:53:52 +09:00 |
|
|
h7x4
|
47d2dcf9ff
|
temmie/userweb: add bro server to userweb slice
|
2026-06-16 03:37:28 +09:00 |
|
|
h7x4
|
254b1d9b14
|
temmie/userweb: split into more modules
|
2026-06-16 03:33:28 +09:00 |
|
|
h7x4
|
2301672a21
|
temmie/userweb: run log processors as separate systemd units
This lets us divide up some of the logic making httpd itself less
brittle, and also reduces the amount of privileges for httpd.
|
2026-06-16 02:56:28 +09:00 |
|
|
h7x4
|
526b55c49a
|
{ildkule/prometheus,base}: send stats over HTTPS through nginx
|
2026-06-13 02:54:28 +09:00 |
|
|
h7x4
|
e80189c6eb
|
temmie/userweb: stop cating passwd on startup
|
2026-06-13 01:41:05 +09:00 |
|
|
h7x4
|
56a51e4c6f
|
temmie/userweb: mount homedirs under /amd
|
2026-06-13 01:39:20 +09:00 |
|
|
h7x4
|
f54109f6f3
|
temmie/userweb: set handlers for php and perl scripts
|
2026-06-13 01:26:27 +09:00 |
|
|
h7x4
|
b848e0f1cc
|
temmie/userweb: add log processor for apache
|
2026-06-07 06:03:18 +09:00 |
|
|
h7x4
|
c671329b93
|
temmie/userweb: inject users from passwd into httpd sandbox
|
2026-06-07 05:28:24 +09:00 |
|