123 Commits

Author	SHA1	Message	Date
h7x4	91de031896	treewide: limit rsync pull target access to principal	2026-01-31 11:14:18 +09:00
h7x4	cec69d89a8	bicep/{postgres,mysql}: fix old backup deletion (again)	2026-01-30 13:26:10 +09:00
h7x4	af0bf7b254	bicep/{postgres,mysql}: fix old backup deletion	2026-01-29 14:57:46 +09:00
h7x4	bcf8b1607f	bicep/{postgres,mysql}: use hardlink for latest backup file	2026-01-29 14:53:07 +09:00
h7x4	1d46fd1ec6	bicep/{postgres,mysql}: keep multiple backups, point at latest with symlink	2026-01-29 14:16:34 +09:00
h7x4	bac53be707	bicep/{postgres,mysql}: use zstd for backup compression	2026-01-29 13:50:35 +09:00
h7x4	f08bd96b74	bicep/{postgres,mysql}: move backups to /data	2026-01-29 13:41:06 +09:00
h7x4	8774c81d23	bicep/{postgres,mysql}: custom backup units	2026-01-29 13:32:28 +09:00
h7x4	d6eca5c4e3	bicep/{postgres,mysql}: split config into several files	2026-01-29 13:18:25 +09:00
h7x4	49d1122ee5	bicep/mysql: enable slow query logs	2026-01-28 14:55:52 +09:00
h7x4	31bbf4b25f	bicep/synapse: enable auto-compressor timer	2026-01-28 14:50:57 +09:00
h7x4	2f7e1439d0	bicep/mysql: pin version, upgrade from 11.4 -> 11.8	2026-01-28 14:01:14 +09:00
h7x4	fa31a84bd2	bicep/postgres: upgrade from 15 -> 18	2026-01-28 14:00:25 +09:00
h7x4	949661113e	bicep/mysql: move backup dir	2026-01-27 20:47:40 +09:00
h7x4	f442c4d65f	bicep/minecraft-heatmap: gate remaining config behind cfg.enable	2026-01-27 20:44:20 +09:00
h7x4	690aee634b	bicep/postgres: gate remaining config behind cfg.enable	2026-01-27 20:44:20 +09:00
h7x4	2ed1c83858	bicep/{postgres,mysql}: add rsync pull targets for backups	2026-01-27 20:39:12 +09:00
h7x4	65d095feb1	bekkalokk/mediawiki, bicep/matrix/synapse: add keys for rsync targets	2026-01-27 18:55:03 +09:00
h7x4	8a84069dcf	bicep/mysql: use BindPaths to access dataDir	2026-01-27 17:23:38 +09:00
h7x4	79a46ce3f6	bicep/element: set default country code	2026-01-27 04:11:40 +09:00
h7x4	a149f97ac0	bicep: bump stateVersion from 22.11 -> 25.11	2026-01-27 03:59:40 +09:00
h7x4	73456de527	bekkalokk/mediawiki, bicep/matrix/synapse: leave principal rsync target stubs	2026-01-27 00:26:42 +09:00
h7x4	c3c98392ad	bicep/hookshot: add passkey to sops	2026-01-26 21:52:58 +09:00
h7x4	1d47409d96	base: configure sops	2026-01-22 16:48:59 +09:00
h7x4	5f94345a91	hosts/various: enable qemu guest agent, disable smartd for vms by default	2026-01-22 16:05:36 +09:00
h7x4	28baf322ce	hosts/various: formatting, add consistent warnings to stateVersion	2026-01-22 15:57:12 +09:00
h7x4	12477aeb34	flake.nix: set default hostname for most nixos hosts	2026-01-22 15:49:50 +09:00
h7x4	89ea5b321a	hosts/various: use systemd-boot as default bootloader	2026-01-22 15:49:50 +09:00
h7x4	9eb5cd869a	bicep/element: fetch correct well-known file	2026-01-21 14:34:35 +09:00
h7x4	833a74a6fb	bicep/matrix: remove some whitespace lol	2026-01-21 13:14:41 +09:00
h7x4	93cf6f4a63	bicep/sshguard: disable ... sshguard doesn't actually work as it currently stands, also the builtin PerSourcePenalty functionality in SSH is more aggressive than sshguard is able to catch anyway. It might've been reasonable if we were using it for anything other than SSH, but it doesn't seem like we are.	2026-01-21 11:13:27 +09:00
h7x4	0f11cca8ec	bicep/matrix: use sops templates to render structured files	2026-01-21 11:08:26 +09:00
h7x4	d892acb331	bicep/matrix: have element-web source well-known from config	2026-01-21 10:49:09 +09:00
h7x4	aa07687a94	bicep/matrix: add synapse config to help with livekit	2026-01-21 10:48:37 +09:00
h7x4	e5dd5b6325	bicep/matrix: attempt to set up livekit	2026-01-21 10:14:08 +09:00
h7x4	75c52f63cc	bicep/matrix: add module for adding stuff to well-known	2026-01-21 10:14:07 +09:00
Felix Albrigtsen	14e2ed7e32	Fix the heccin quotes	2026-01-19 21:09:41 +01:00
h7x4	005d987ead	bicep/git-mirrors: fix cgit config	2026-01-16 11:50:31 +09:00
h7x4	16891ff521	misc/metrics-exporters: move to base	2025-12-30 00:32:25 +09:00
h7x4	167c889e11	various: set sops restartUnits	2025-12-22 15:48:13 +09:00
h7x4	b0a49f87d5	bicep/postgres: bindmount datadir	2025-12-22 13:38:21 +09:00
h7x4	a238540e04	bicep/minecraft-heatmap: re-enable	2025-12-22 11:14:41 +09:00
h7x4	88ea686b59	bicep/matrix-synapse: replace hardcoded ip space with ones from values	2025-12-22 10:32:17 +09:00
h7x4	1d08131076	bicep/coturn: replace hardcoded ip with one fr ... om `values`	2025-12-22 10:23:39 +09:00
h7x4	ad137081c7	bicep/mysql: allow connections from ildkule	2025-12-22 10:23:39 +09:00
h7x4	f04596b752	bicep/postgres: allow connections from ildkule	2025-12-22 10:23:39 +09:00
h7x4	252f5a6f94	bicep/matrix-smtp-auth: fix python packaging	2025-12-05 02:24:20 +09:00
Daniel Olsen	30472c478b	bicep: enable more services	2025-12-02 01:53:58 +01:00
Adrian Gunnar Lauterer	c5dce0fa0f	Bicep as a vm	2025-12-02 01:47:51 +01:00
Daniel Olsen	0b74907f76	bicep/matrix/hookshot: enable widgets and js transformations	2025-10-13 06:02:33 +02:00