Commit Graph

  • ffb2d261ae packages/mediawiki-extensions: add MediawikiMatrixNotifs h7x4 2026-05-31 03:43:58 +09:00
  • e05eab4ddf {georg,brzeczyszczykiewicz}: use sane IPv6 addresses h7x4 2026-05-29 16:04:52 +09:00
  • 64843087be kommode/gitea: only allow webhooks to external hosts h7x4 2026-05-29 12:58:12 +09:00
  • 0c45345050 bicep/matrix-ooye harden h7x4 2026-05-28 16:07:36 +09:00
  • 788f23bf04 bicep/matrix-hookshot: harden h7x4 2026-05-28 15:39:47 +09:00
  • 8416014aeb bicep/mjolnir: harden h7x4 2026-05-28 15:18:34 +09:00
  • 654eeb83d8 base: tag generation as dirty if built from uncommitted source code h7x4 2026-05-28 04:39:49 +09:00
  • 5bf0de1d0d bekkalokk/website/fetch-gallery: use proper shellscript builder h7x4 2026-05-28 03:58:08 +09:00
  • a550bbf1e0 bekkalokk/roundcube: use specialized builder for nginx root dir h7x4 2026-05-28 03:46:59 +09:00
  • 6d9bd8256f kommode/gitea/install-customization: disable networking h7x4 2026-05-28 03:15:47 +09:00
  • 5c859d9809 kommode/gitea/install-customization: remove ExecStart bash wrapper h7x4 2026-05-28 03:15:06 +09:00
  • 68481b999b modules/grzegorz: remove ExecStart bash wrapper h7x4 2026-05-28 03:09:38 +09:00
  • dfbed75cd9 kommode/gitea/gpg: remove ExecStart bash wrapper h7x4 2026-05-28 03:06:07 +09:00
  • 6237a0a0e7 bicep/minecraft-heatmap: remove ExecStartPre bash wrapper h7x4 2026-05-28 03:03:38 +09:00
  • bd2263a0a9 kommode/gitea/import-users: remove ExecStartPre bash wrapper h7x4 2026-05-28 02:57:51 +09:00
  • 2faff6340c flake.lock: bump pvv-nettsiden h7x4 2026-05-28 02:39:32 +09:00
  • 532e8b0eee bekkalokk/mediawiki: install PdfHandler extension h7x4 2026-05-28 01:17:48 +09:00
  • eef3f8fe8b bekkalokk/mediawiki: cleanup executable path config h7x4 2026-05-28 01:22:08 +09:00
  • e17025aca6 packages/mediawiki-extensions: add PdfHandler, bump all h7x4 2026-05-28 00:55:20 +09:00
  • e062a849f3 base/scrutiny-collector: disable if machine is qemu guest h7x4 2026-05-27 23:45:30 +09:00
  • b0f81c9379 lupine/smartd: reenable h7x4 2026-05-27 23:41:54 +09:00
  • 2c819776f8 treewide/nginx: enable kTLS for a bunch more virtualHosts h7x4 2026-05-27 23:36:18 +09:00
  • c2d6989350 base/scrutiny-collector: init h7x4 2026-05-27 23:35:32 +09:00
  • 2b4817b75a ildkule/scrutiny: init h7x4 2026-05-27 23:33:45 +09:00
  • 0e2a8ed3ed base/polkit: let wheel users use AUTH_KEEP_SELF for systemd actions h7x4 2026-05-27 14:13:36 +09:00
  • e9bc07d6e9 grr: fix the heccin quotes the-heccin-quotes h7x4 2026-05-26 22:26:36 +09:00
  • 3372712e26 modules/ooye: move StartLimit* options to correct section h7x4 2026-05-26 15:03:27 +09:00
  • 7e586e082e flake.lock: bump pvv-calendar-bot h7x4 2026-05-26 14:55:58 +09:00
  • 47a744f68f ildkule/uptime-kuma: set up rsync pull target for principal h7x4 2026-05-26 13:37:29 +09:00
  • da505d4fe2 kommode: sign merge commits and sign crud actions Vegard Bieker Matthey 2026-05-25 20:14:51 +02:00
  • 18ab1ef982 temmie/userweb: set -i and -t in sendmail wrapper h7x4 2026-05-25 18:49:57 +09:00
  • 5023edeb13 temmie/userweb: install mod_perl with custom env h7x4 2026-05-25 18:24:23 +09:00
  • 0d8c26c548 temmie/userweb: send propagatedBuildInputs through perl env wrapper h7x4 2026-05-25 17:05:02 +09:00
  • bd244e7797 temmie/userweb: add www2 server alias h7x4 2026-05-25 16:24:35 +09:00
  • e9220bb31e temmie/userweb: use www-datas UID + GID for backwards compat h7x4 2026-05-25 15:23:25 +09:00
  • 6beb9c62c3 temmie/userweb: use bro to proxy sendmail requests out of sandbox h7x4 2026-05-25 13:43:26 +09:00
  • 7eb6351471 WIP: grevling/tuba: init setup-openvpn-tunnel h7x4 2023-11-04 21:28:09 +01:00
  • 01abe62d20 WIP bicep-garage-test-deployment h7x4 2026-04-29 21:03:47 +09:00
  • c151e7fded WIP nettsiden-postgresql oysteikt 2025-12-16 17:49:23 +01:00
  • c357448c94 WIP: Move krb5 realm to pvv.local, make sane ldap structure dagali-heimdal-openldap-sasl-stack Felix Albrigtsen 2024-07-07 00:07:59 +02:00
  • 5d6f21c450 WIP: set up heimdal-openldap-sasl stack oysteikt 2024-07-06 13:08:05 +02:00
  • b91f6016f5 hosts/dagali: init oysteikt 2024-07-06 13:06:34 +02:00
  • bc7d598fed kommode/gitea: add robots.txt gitea-robots-txt h7x4 2025-03-15 14:33:13 +01:00
  • 7429b334ca README: add temmie to machine overview h7x4 2026-05-25 11:59:17 +09:00
  • 1595f67c55 flake.nix: allow nvidia-kernel-modules for wenche h7x4 2026-05-25 11:35:25 +09:00
  • 3f5eadcb87 base/resolved: use RFC42 format h7x4 2026-05-22 16:03:55 +09:00
  • 70c0ad8724 base: use RFC42 format for systemd.sleep h7x4 2026-05-22 16:03:33 +09:00
  • 61ea0181a1 packages/mediawiki-extensions: REL1_44 -> REL1_45 h7x4 2026-05-21 17:51:53 +09:00
  • 3e22c1a47e nixpkgs 26.05 🎉 h7x4 2026-05-25 09:35:44 +09:00
  • 0319858cad Merge branch 'gluttony-bluemap' Vegard Bieker Matthey 2026-05-25 03:32:15 +02:00
  • efd50868e0 bekkalokk: add back config added through bluemap module Vegard Bieker Matthey 2026-05-24 09:21:17 +02:00
  • 7a23cf7f25 bekkalokk: remove bluemap Vegard Bieker Matthey 2026-05-24 08:45:24 +02:00
  • 57963fadd7 gluttony: add private key and set public key for bekkalokk Vegard Bieker Matthey 2026-05-24 01:14:48 +02:00
  • 792f111a5d bekkalokk: pull rendered map from gluttony Vegard Bieker Matthey 2026-05-23 23:36:13 +02:00
  • b27859c0fa gluttony: export rendered bluemap to bekkalokk Vegard Bieker Matthey 2026-05-23 22:50:44 +02:00
  • eb0eb6d93b add bekkalokk to known_hosts Vegard Bieker Matthey 2026-05-23 22:15:00 +02:00
  • 6a943dd7b0 bluemap: set group to nginx only if nginx is enabled Vegard Bieker Matthey 2026-05-23 20:38:31 +02:00
  • c59c00f3fc gluttony: setup bluemap Vegard Bieker Matthey 2026-05-23 19:26:13 +02:00
  • 53670b4d05 flake.nix/inputs/disko: v1.11.0 -> v1.13.0 h7x4 2026-05-24 23:05:48 +09:00
  • d92a5f13ad base/journald-upload: fix target url h7x4 2026-05-24 16:41:54 +09:00
  • 16d3251ee2 shells/cuda: fix deprecated package attr warnings h7x4 2026-05-24 15:23:20 +09:00
  • 09163b77da Revert "bicep/matrix/livekit: open the rtc ports" Daniel Olsen 2026-05-23 23:23:41 +02:00
  • 6cca1db3b3 bekkalokk: fix permissions for mediawiki secrets Vegard Bieker Matthey 2026-05-22 20:21:24 +02:00
  • bfd83c4c64 uptime-kuma: wants to use /var/lib/private for state Vegard Bieker Matthey 2026-05-22 17:58:00 +02:00
  • 9a6fdecb03 kommode/gitea/dump: only keep a single dump at a time h7x4 2026-05-22 18:27:54 +09:00
  • 82ab97fb45 bekkalokk/roundcube: restart service on changed sops secrets h7x4 2026-05-22 18:10:30 +09:00
  • 543fd19f8d bekkalokk/vaultwarden: restart service on changed sops secrets h7x4 2026-05-22 18:09:51 +09:00
  • 6f99fa575d bekkalokk/vaultwarden: render environment_file as sops template h7x4 2026-05-22 17:58:46 +09:00
  • 3141b1f76b bekkalokk/vaultwarden: remove redundant hardening h7x4 2026-05-22 17:51:01 +09:00
  • 475f6a8c9b bekkalokk/vaultwarden: add rsa key to sops h7x4 2026-05-22 17:08:18 +09:00
  • 9c1687f8f2 bekkalokk/vaultwarden: use envvar keys h7x4 2026-05-22 16:54:29 +09:00
  • 0f53bcd731 bekkalokk/roundcube: add des_key to sops h7x4 2026-05-22 16:18:42 +09:00
  • f433ae1e15 ustetind: remove from sops Felix Albrigtsen 2026-05-22 10:01:15 +02:00
  • 5745648f87 bicep/postgres/repack: use local unix socket h7x4 2026-05-22 15:59:59 +09:00
  • 2c34a93abf bicep/postgres/repack: don't kill connections on timeout h7x4 2026-05-22 15:57:57 +09:00
  • 9ebc947eab ustetind: bai bai 👋 h7x4 2026-05-22 15:41:28 +09:00
  • 6fcc19f0a2 base/fluentbit: init h7x4 2026-05-22 09:22:23 +09:00
  • 9224f04bd1 base/promtail: remove h7x4 2026-05-22 09:22:00 +09:00
  • 9c93f15569 change agekey for ildkule and update keys Vegard Bieker Matthey 2026-05-20 18:51:02 +02:00
  • 5d6c153007 kommode/gitea: fix dump command h7x4 2026-05-21 17:54:54 +09:00
  • 8b483a92f8 ildkule: set fsType for bindmounts h7x4 2026-05-21 17:52:47 +09:00
  • 0d7f05e56d bicep/postgres: add cleanup timers h7x4 2026-05-21 03:30:45 +09:00
  • 4a67eddf52 bicep/matrix/livekit: open the rtc ports Daniel Olsen 2026-05-20 20:04:33 +02:00
  • 08a23bd380 base/hardening: ban a few more modules h7x4 2026-05-20 16:33:32 +09:00
  • 28b67c3578 base/mitigations: blacklist modules for copyfail and pintheft h7x4 2026-05-20 16:33:07 +09:00
  • e5804c043a README: add gluttony Vegard Bieker Matthey 2026-05-20 06:23:33 +02:00
  • 9c227f3022 update gluttony IPs and boot device Vegard Bieker Matthey 2026-05-20 06:07:41 +02:00
  • 69fdf709d7 grr: fix the heccin quotes Felix Albrigtsen 2026-05-19 16:35:47 +02:00
  • 30ec70fa5f fix: ildkule grub duplicated devices, format nix files Adrian G L 2026-05-19 16:26:36 +02:00
  • 1024b428ac feat: ildkule disco config Adrian G L 2026-05-19 12:16:39 +02:00
  • 1e6b692fbf fix: updated ildkule config and ips to match trd1 new setup Adrian G L 2026-05-19 11:37:05 +02:00
  • beac6e91dd flake.lock: bump pvv-nettsiden Vegard Bieker Matthey 2026-05-17 16:58:04 +02:00
  • 0fd41c214a flake.{nix,lock}: bump deps h7x4 2026-05-13 01:19:35 +09:00
  • 5c1ee958ea flake.{nix,lock}: bump roowho2 h7x4 2026-05-12 00:25:55 +09:00
  • d8e97715c9 flake.lock: bump pvv-nettsiden h7x4 2026-05-12 00:24:56 +09:00
  • 33297b0436 treewide: lib.cli.toGNUCommandLineShell -> lib.cli.toCommandLineShellGNU h7x4 2026-05-11 23:09:50 +09:00
  • be33c95c83 bekkalokk/website: more logging, specify timeouts, ban spooky funcs, fake sendmail h7x4 2026-05-11 21:10:58 +09:00
  • 2abf36a9af packages/simplesamlphp: 2.4.3 -> 2.5.0 h7x4 2026-05-11 16:12:15 +09:00
  • a60be532ce packages/mediawiki-extensions: bump all h7x4 2026-05-11 16:11:10 +09:00
  • 9c142fd56f kommode/gitea: remove deprecated config options h7x4 2026-05-11 16:00:51 +09:00