1006 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Vegard Bieker Matthey	eeab3b8fa6	gluttony: setup bluemap	2026-05-24 08:37:25 +02:00
Vegard Bieker Matthey	6cca1db3b3	bekkalokk: fix permissions for mediawiki secrets	2026-05-22 20:21:24 +02:00
Vegard Bieker Matthey	bfd83c4c64	uptime-kuma: wants to use /var/lib/private for state	2026-05-22 17:58:00 +02:00
h7x4	9a6fdecb03	kommode/gitea/dump: only keep a single dump at a time	2026-05-22 18:27:57 +09:00
h7x4	82ab97fb45	bekkalokk/roundcube: restart service on changed sops secrets	2026-05-22 18:10:44 +09:00
h7x4	543fd19f8d	bekkalokk/vaultwarden: restart service on changed sops secrets	2026-05-22 18:10:40 +09:00
h7x4	6f99fa575d	bekkalokk/vaultwarden: render environment_file as sops template	2026-05-22 18:02:13 +09:00
h7x4	3141b1f76b	bekkalokk/vaultwarden: remove redundant hardening ... This has already been upstreamed	2026-05-22 17:51:03 +09:00
h7x4	475f6a8c9b	bekkalokk/vaultwarden: add rsa key to sops	2026-05-22 17:49:31 +09:00
h7x4	9c1687f8f2	bekkalokk/vaultwarden: use envvar keys ... It seems like the nixpkgs module is compensating for previous config that might've ended up in a file, which are now being turned into screaming snake case environment variables. Let's just name them as they are supposed to be named instead of having the upstream module translate them.	2026-05-22 17:08:31 +09:00
h7x4	0f53bcd731	bekkalokk/roundcube: add des_key to sops	2026-05-22 17:08:31 +09:00
Felix Albrigtsen	f433ae1e15	ustetind: remove from sops ... rg -. to the rescue	2026-05-22 10:01:15 +02:00
h7x4	5745648f87	bicep/postgres/repack: use local unix socket	2026-05-22 15:59:59 +09:00
h7x4	2c34a93abf	bicep/postgres/repack: don't kill connections on timeout	2026-05-22 15:57:57 +09:00
h7x4	9ebc947eab	ustetind: bai bai 👋	2026-05-22 15:41:28 +09:00
h7x4	6fcc19f0a2	base/fluentbit: init	2026-05-22 15:32:13 +09:00
h7x4	9224f04bd1	base/promtail: remove	2026-05-22 15:32:13 +09:00
Vegard Bieker Matthey	9c93f15569	change agekey for ildkule and update keys ... update keys	2026-05-21 17:27:11 +02:00
h7x4	5d6c153007	kommode/gitea: fix dump command	2026-05-21 17:54:54 +09:00
h7x4	8b483a92f8	ildkule: set fsType for bindmounts	2026-05-21 17:52:47 +09:00
h7x4	0d7f05e56d	bicep/postgres: add cleanup timers	2026-05-21 04:14:34 +09:00
Daniel Olsen	4a67eddf52	bicep/matrix/livekit: open the rtc ports	2026-05-20 20:04:33 +02:00
h7x4	08a23bd380	base/hardening: ban a few more modules	2026-05-20 23:15:25 +09:00
h7x4	28b67c3578	base/mitigations: blacklist modules for copyfail and pintheft	2026-05-20 23:15:25 +09:00
Vegard Bieker Matthey	e5804c043a	README: add gluttony	2026-05-20 06:24:26 +02:00
Vegard Bieker Matthey	9c227f3022	update gluttony IPs and boot device	2026-05-20 06:07:41 +02:00
Felix Albrigtsen	69fdf709d7	grr: fix the heccin quotes	2026-05-19 16:38:34 +02:00
Adrian G L	30ec70fa5f	fix: ildkule grub duplicated devices, format nix files	2026-05-19 16:26:36 +02:00
Adrian G L	1024b428ac	feat: ildkule disco config	2026-05-19 12:16:39 +02:00
Adrian G L	1e6b692fbf	fix: updated ildkule config and ips to match trd1 new setup	2026-05-19 11:37:05 +02:00
Vegard Bieker Matthey	beac6e91dd	flake.lock: bump pvv-nettsiden	2026-05-17 16:58:04 +02:00
h7x4	0fd41c214a	flake.{nix,lock}: bump deps	2026-05-13 01:19:35 +09:00
h7x4	5c1ee958ea	flake.{nix,lock}: bump roowho2	2026-05-12 00:25:55 +09:00
h7x4	d8e97715c9	flake.lock: bump pvv-nettsiden	2026-05-12 00:24:56 +09:00
h7x4	33297b0436	treewide: lib.cli.toGNUCommandLineShell -> lib.cli.toCommandLineShellGNU	2026-05-11 23:09:50 +09:00
h7x4	be33c95c83	bekkalokk/website: more logging, specify timeouts, ban spooky funcs, fake sendmail	2026-05-11 21:14:08 +09:00
h7x4	2abf36a9af	packages/simplesamlphp: 2.4.3 -> 2.5.0	2026-05-11 16:12:15 +09:00
h7x4	a60be532ce	packages/mediawiki-extensions: bump all	2026-05-11 16:11:10 +09:00
h7x4	9c142fd56f	kommode/gitea: remove deprecated config options	2026-05-11 16:00:51 +09:00
Øystein Tveit	b98e8679e6	temmie/userweb: set same phpOptions for env and apache	2026-05-11 14:54:56 +09:00
h7x4	ea092ec0b3	temmie/userweb: pass userdir user to sendmail through custom envvar	2026-05-11 14:26:47 +09:00
h7x4	5e50b617fb	temmie/userweb: switch from postfix to nullmailer	2026-05-11 13:52:58 +09:00
h7x4	258c5a7b25	temmie/userweb: set up sendmail wrapper	2026-05-11 12:26:39 +09:00
h7x4	b9eda3dc56	temmie/userweb: reduce package list	2026-05-11 10:17:09 +09:00
Vegard Bieker Matthey	2fcaf5893f	fix deprecation warning for mediawiki update script	2026-05-09 20:40:14 +02:00
h7x4	b009da31af	temmie/userweb: deny a bunch of spooky directories by default ... It should still be possible for the user to re-enable these with `.htaccess`	2026-05-10 03:33:43 +09:00
h7x4	e9a267e2a3	temmie/userweb: ignore collisions in fhs env	2026-05-10 03:02:27 +09:00
h7x4	338c2f2531	temmie/userweb: adjust perl and php env ... This adds and removes a few packages to make the environments closer to how they are on tom	2026-05-10 03:02:26 +09:00
Felix Albrigtsen	8db3034baf	Run shellcheck	2026-05-08 09:31:35 +02:00
h7x4	f64f9c944e	topology: hook skrot up to the switch at the office	2026-05-08 16:27:01 +09:00