felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2026-07-21 20:41:25 +02:00
Code Issues Projects Releases Wiki Activity

Commit Graph

  • de1e80cd40 modules/python-http-handlers: better daemon handling python-http-handlers-systemd h7x4 2026-07-21 23:46:00 +09:00
  • 2bb0d725fc modules/drumknotty: wrap services in infinite loops drumknotty-restart-wrapper h7x4 2026-07-21 20:13:21 +09:00
  • 8ed0a7f8c6 bicep/mysql: add timed jobs for analyze and optimize bicep-mysql-timed-jobs h7x4 2026-07-21 21:52:48 +09:00
  • 361a23f4d3 base/postfix: remove, base:nullmailer: init base-bye-postfix-nullmailer-is-my-new-best-friend h7x4 2026-07-21 20:11:28 +09:00
  • 4ed1668ac5 bicep/{postgres,mysql}: bindmount data storage with noatime bicep-dbms-noatime-bindmount h7x4 2026-07-21 21:32:58 +09:00
  • b350554bf3 bicep/mysql: enable hugepages bicep-dbms-hugepages h7x4 2026-07-21 17:52:29 +09:00
  • f41e6c0a74 bicep/postgresql: enable hugepages h7x4 2026-07-21 17:52:15 +09:00
  • 1ff34d7aab secrets: add passwords for gatus dbms checkers ildkule-gatus-db-checks h7x4 2026-07-21 18:41:33 +09:00
  • 3d551fab52 ildkule/gatus: add healthcheck for mariadb h7x4 2026-07-21 16:15:05 +09:00
  • a99a83c0d8 ildkule/gatus: add healthcheck for postgresql h7x4 2026-07-21 16:14:45 +09:00
  • d25d0f8b56 bicep/mysql: split backups into one file per db db-backups-multiple-files h7x4 2026-07-21 16:01:34 +09:00
  • 4525de1d10 bicep/postgres: split backups into one file per db h7x4 2026-07-21 16:01:19 +09:00
  • 8bb86ef634 modules/hugepages: init h7x4 2026-07-21 17:40:29 +09:00
  • 3bcb178ae7 WIP: base/nginx: host well-known content on multiple subdomains wellknown-security-multiple-subdomains h7x4 2026-07-21 17:54:09 +09:00
  • 9a837d210d bicep/postgres: log connections/disconnections main h7x4 2026-07-21 15:34:07 +09:00
  • d3c9fabbc2 base/irqbalance: only start on multi-socket machines h7x4 2026-07-21 15:30:25 +09:00
  • 950b163869 bicep/postgresql: use scram-sha-256 as default password algorithm h7x4 2026-07-21 16:32:49 +09:00
  • 9bd81430a4 topology: remove (now) redundant mysql service extractor h7x4 2026-07-20 23:20:02 +09:00
  • 9b38b4b8d3 flake.lock: bump h7x4 2026-07-20 22:30:39 +09:00
  • 6abc05dc4d treewide: have rwhod ignore always logged-in users h7x4 2026-07-20 21:41:56 +09:00
  • 2e3ac911cb skrot: split drumknotty service details into separate file h7x4 2026-07-20 21:39:16 +09:00
  • 16b0d05d27 flake.lock: bump roowho2 h7x4 2026-07-20 21:34:29 +09:00
  • fe19bb9bdb ildkule/gatus/minecraft-checker: rewrite to use python-http-handlers module h7x4 2026-07-16 17:57:50 +09:00
  • f4f9836deb modules/python-http-handlers: init h7x4 2026-07-16 17:57:25 +09:00
  • fb7e350ac7 flake.lock: bump dibbler h7x4 2026-07-18 18:44:28 +09:00
  • 3c3bf6b10f modules/drumknotty: provide state directories for all services h7x4 2026-07-18 18:42:26 +09:00
  • b0e3d90c20 ildkule/gatus/minecraft-checker: init h7x4 2026-07-07 16:26:26 +09:00
  • 111c3e21bd ildkule/gatus: init h7x4 2026-07-06 05:32:31 +09:00
  • decd8b04c1 ildkule/uptime-kuma: remove h7x4 2026-07-06 05:31:50 +09:00
  • 4b8be337e0 lupine5/openvpn: additional config, open firewall h7x4 2026-07-06 02:37:06 +09:00
  • fcfcb07e59 lupine5: register knutsen-vpn ip h7x4 2026-07-05 02:36:23 +09:00
  • 1e66049c79 lupine5/openvpn: use certs h7x4 2026-07-05 02:28:33 +09:00
  • 928ddde344 sops/lupine: add CA + 2 keypairs for OpenVPN h7x4 2026-07-05 02:14:18 +09:00
  • 3aa8d0b418 lupine5/openvpn: init h7x4 2026-07-05 01:31:15 +09:00
  • 293f28abb1 lupine5: set up bridge and tap netdevs h7x4 2026-07-05 01:01:35 +09:00
  • f4b1f090e4 flake.lock: bump various h7x4 2026-06-30 04:15:37 +09:00
  • 7c684e42f0 treewide: fix rsync <-> rrsync communication h7x4 2026-06-30 02:41:36 +09:00
  • 90bfda9066 kommode/gitea: bump AVATAR_MAX_ORIGIN_SIZE from 2MB to 4MB h7x4 2026-06-24 14:33:16 +09:00
  • 522d8f18cb flake.{nix,lock}: bump roowho2 h7x4 2026-06-24 13:31:58 +09:00
  • 5e613a03fc treewide: set relatime for most root mounts h7x4 2026-06-23 01:11:21 +09:00
  • 170fb2a980 bicep/synapse: fix dbname option h7x4 2026-06-22 18:35:55 +09:00
  • 3e627472e9 flake.{nix,lock}: bump matrix-next h7x4 2026-06-22 18:29:09 +09:00
  • e05c4ed8ca feat: add initialdeploy hashed password to root Adrian G L 2026-05-20 15:31:30 +02:00
  • 3fee83ec05 ildkule/loki: restrict incoming connections to pvv + ntnu h7x4 2026-06-13 03:23:12 +09:00
  • a1f02fc39d {ildkule/loki,base/fluentbit}: send data over https h7x4 2026-06-13 03:22:18 +09:00
  • 6e37635aac ildkule/loki: firewall all endpoints except push API Adrian G L 2026-06-12 13:25:23 +02:00
  • cdc3ad488b bicep/postgres: add script for updating all collations h7x4 2026-06-22 01:12:59 +09:00
  • a2078c590a WIP: temmie/userweb: fcgiwrap temmie-userweb-per-user-fcgiwrap h7x4 2026-06-17 13:58:11 +09:00
  • aa2712005a temmie/nfs-mounts: create by-uid bindmounts h7x4 2026-06-17 13:43:19 +09:00
  • 89921b533b temmie/userweb: further harden log-processor h7x4 2026-06-17 12:31:02 +09:00
  • 75f87ffab8 temmie/userweb: run passwd sync in different unit h7x4 2026-06-17 11:23:36 +09:00
  • b910cf9563 temmie/userweb: suppress erroneous access log for documentRoot h7x4 2026-06-17 08:57:55 +09:00
  • d23adbd4c2 temmie/userweb: deny access to documentRoot h7x4 2026-06-17 08:47:54 +09:00
  • 48c0a4e504 temmie/userweb: fix directory denylist enforcement h7x4 2026-06-17 08:23:08 +09:00
  • 374d9b1bc7 flake.nix: passthru machine config, pkgs and config.system.build h7x4 2026-06-17 08:10:13 +09:00
  • d84cc73819 temmie/userweb: handle more .php\d suffixes h7x4 2026-06-16 19:05:25 +09:00
  • b738f08c09 temmie/userweb: render path denylist into Directory/Files directives h7x4 2026-06-16 18:52:25 +09:00
  • 8252bba3ad temmie/userweb: enable httpd trace on debugMode h7x4 2026-06-16 18:51:02 +09:00
  • a776a5a5fe temmie/userweb: explicitly override mod_perl and mod_userdir h7x4 2026-06-16 18:49:03 +09:00
  • ed57744ec3 temmie/userweb: add more patterns to denylist h7x4 2026-06-16 15:57:07 +09:00
  • 226db1f46e temmie/userweb: add more DirectoryIndex variants h7x4 2026-06-16 15:54:22 +09:00
  • 51e1656177 temmie/userweb: disable ~pvv h7x4 2026-06-16 15:53:52 +09:00
  • 47d2dcf9ff temmie/userweb: add bro server to userweb slice h7x4 2026-06-16 03:37:28 +09:00
  • 254b1d9b14 temmie/userweb: split into more modules h7x4 2026-06-16 03:33:28 +09:00
  • 2301672a21 temmie/userweb: run log processors as separate systemd units h7x4 2026-06-16 00:46:01 +09:00
  • 7145abadf3 flake: update input pvv-nettsiden felixalb 2026-06-13 16:59:50 +02:00
  • b533b09c8f base/various: add to slice system-monitoring h7x4 2026-06-13 04:30:40 +09:00
  • 526b55c49a {ildkule/prometheus,base}: send stats over HTTPS through nginx h7x4 2026-06-13 02:33:41 +09:00
  • e80189c6eb temmie/userweb: stop cating passwd on startup h7x4 2026-06-13 01:41:05 +09:00
  • 56a51e4c6f temmie/userweb: mount homedirs under /amd h7x4 2026-06-13 01:39:20 +09:00
  • f54109f6f3 temmie/userweb: set handlers for php and perl scripts h7x4 2026-06-13 01:09:49 +09:00
  • 5763a76136 user/vegardbm: change shell to zsh and add ssh key Vegard Bieker Matthey 2026-06-08 11:35:44 +02:00
  • be87d98060 prometheus for dibbler dibbler-prometheus Vegard Bieker Matthey 2026-06-07 17:54:41 +02:00
  • b57a935b4c base/rsyslogd: init h7x4 2026-06-08 12:58:37 +09:00
  • b4582a160f skrot/dibbler: rotate database password h7x4 2026-06-07 17:58:33 +09:00
  • ac094d350d base/timesyncd: specify ntp servers h7x4 2026-06-07 17:52:54 +09:00
  • b848e0f1cc temmie/userweb: add log processor for apache h7x4 2026-05-25 23:32:45 +09:00
  • c671329b93 temmie/userweb: inject users from passwd into httpd sandbox h7x4 2026-05-29 23:00:10 +09:00
  • e6a3d43493 modules/drumknotty: use correct screen window name for dibbler Vegard Bieker Matthey 2026-06-05 22:12:20 +02:00
  • cafc95db8f bicep/mjolnir: use nodejs v22 h7x4 2026-06-06 04:43:58 +09:00
  • 2d6b09cb32 bikkje: label ports in firewall port list h7x4 2026-06-06 04:08:16 +09:00
  • ce0af2f6e4 flake.nix: add app for building gitea workflows locally h7x4 2026-06-06 04:02:52 +09:00
  • 88892115b5 base: enable autoScrub for all btrfs machine by default h7x4 2026-06-05 13:21:22 +09:00
  • 8a290d30e7 modules/drumknotty: split into several parts h7x4 2026-03-26 16:46:02 +09:00
  • 3197c6a5e3 attach with dibbler window selected Vegard Bieker Matthey 2026-03-21 14:34:29 +01:00
  • f8dcaddefb use main branch for worblehat after merge Vegard Bieker Matthey 2026-03-19 16:09:24 +01:00
  • 009d89f959 set default settings for worblehat and dibbler Vegard Bieker Matthey 2026-03-18 13:39:47 +01:00
  • 21bba3ec7e add worblehat daemons Vegard Bieker Matthey 2026-03-17 16:51:59 +01:00
  • 9552351776 add database password for worblehat Vegard Bieker Matthey 2026-03-17 16:30:38 +01:00
  • 7e754ade71 drumknotty: init Vegard Bieker Matthey 2026-03-07 20:35:06 +01:00
  • fcd81aed00 packages/ooye: 3.5.1 -> 3.6.0 h7x4 2026-06-04 19:17:29 +09:00
  • 966081ebfc bicep/mysql: enable userstat h7x4 2026-06-03 15:31:27 +09:00
  • 39d313579c bicep/mysql: rotate slow query logs h7x4 2026-06-03 15:21:18 +09:00
  • 3386153b8b ildkule/prometheus/exim: make scheme explicit h7x4 2026-06-03 13:35:13 +09:00
  • 56906241f6 bekkalokk/roundcube: temporary fix for webmail redirects h7x4 2026-06-01 03:01:19 +09:00
  • 3fe71d21f6 bekkalokk/roundcube: webdir moved to public_html within package h7x4 2026-06-01 02:31:54 +09:00
  • 074d240595 base: tag generation as auto if built by auto upgrade service h7x4 2026-06-01 00:45:54 +09:00
  • 1ce3372683 lupine/binfmt: enable h7x4 2026-05-31 19:33:33 +09:00
  • 5f14c15679 feat: add radicale to bekkalokk Adrian G L 2026-05-31 02:04:30 +02:00
  • 14623252a1 WIP: bekkalokk/mediawiki: install MediawikiMatrixNotifs bekkalokk-mediawiki-matrix-notifs h7x4 2026-05-31 03:44:23 +09:00