Compare commits

...

4 Commits

Author SHA1 Message Date
h7x4 14623252a1 WIP: bekkalokk/mediawiki: install MediawikiMatrixNotifs 2026-05-31 03:44:23 +09:00
h7x4 ffb2d261ae packages/mediawiki-extensions: add MediawikiMatrixNotifs 2026-05-31 03:43:58 +09:00
h7x4 e05eab4ddf {georg,brzeczyszczykiewicz}: use sane IPv6 addresses 2026-05-29 16:04:52 +09:00
h7x4 64843087be kommode/gitea: only allow webhooks to external hosts
We don't have any servers with intranet IPs, and we want webhooks that
hook back to kommode to pass through its firewall.
2026-05-29 12:58:26 +09:00
4 changed files with 16 additions and 3 deletions
@@ -107,6 +107,7 @@ in {
CodeEditor
CodeMirror
DeleteBatch
MediawikiMatrixNotifs
PdfHandler
PluggableAuth
Popups
+3
View File
@@ -139,6 +139,9 @@ in {
AVATAR_MAX_ORIGIN_SIZE = 1024 * 1024 * 2;
};
actions.ENABLED = true;
webhook.ALLOWED_HOST_LIST = lib.concatStringsSep "," [
"external"
];
};
dump = {
+10 -1
View File
@@ -15,12 +15,13 @@ let
, tracking-branch ? "REL1_45"
, kebab-name ? kebab-case-name name
, fetchgit ? pkgs.fetchgit
, url ? "https://gerrit.wikimedia.org/r/mediawiki/extensions/${name}"
}:
{
${name} = (fetchgit {
name = "mediawiki-${kebab-name}-source";
url = "https://gerrit.wikimedia.org/r/mediawiki/extensions/${name}";
rev = commit;
inherit url;
inherit hash;
}).overrideAttrs (_: {
passthru = { inherit name kebab-name tracking-branch; };
@@ -97,4 +98,12 @@ lib.mergeAttrsList [
commit = "f53000f0499858fe74e4f5008b2f5e467d9d9382";
hash = "sha256-+HTXZEVCwMD8z6c1kCZA3k686HzNd30pJljzRvf+gMg=";
})
(mw-ext {
name = "MediawikiMatrixNotifs";
commit = "52d2a46c03f51af7c16ed4d7b3b07b0cbbffb4df";
hash = "sha256-AADWunm2Rn2cfxeu9xyYBw5txnaIbJNdR3jxLqgzAy8=";
url = "https://git.pvv.ntnu.no/oysteikt/mediawiki-matrix-notifs.git";
tracking-branch = "master";
})
]
+2 -2
View File
@@ -55,11 +55,11 @@ in rec {
};
brzeczyszczykiewicz = {
ipv4 = pvv-ipv4 205;
ipv6 = pvv-ipv6 "1:50"; # Wtf peder why
ipv6 = pvv-ipv6 205;
};
georg = {
ipv4 = pvv-ipv4 204;
ipv6 = pvv-ipv6 "1:4f"; # Wtf øystein og daniel why
ipv6 = pvv-ipv6 204;
};
kommode = {
ipv4 = pvv-ipv4 223;