nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author	Age
*	Feat(system): Add initial mautrix-telegram config mautrix-telegram	sils	2023-07-24
\| \| \| \| \| \| \|	This won't work and isn't supposed to, in fact this commit is designed to be squashed or rebased. The config in system/services/matrix/bridges/mautrix-telegram/default.nix is mainly copy-pasted from nixos-wiki.
*	chore(version): v0.4.0 v0.4.0	sils	2023-07-22
\|
*	Fix(system/services/matrix): Change registration_shared_secret_path to	sils	2023-07-22
\| \| \| \|	age secret
*	Feat(system/secrets): Add matrix-synapse_registration_shared_secret	sils	2023-07-22
\|
*	Fix(system/services/matrix): Add registration_shared_secret to register	sils	2023-07-22
\| \| \| \|	users
*	Fix(system/services/matrix): Move persisting files ctrl to impermanence	Soispha	2023-07-22
\|
*	Fix(system/services/matrix): Fix extra " =" in locations path	Soispha	2023-07-22
\|
*	Feat(system): Add matrix-synapse	sils	2023-07-20
\|\
\| *	Feat(system/services): Add matrix synapse	sils	2023-06-19
\| \|
* \|	Chore(system/secrets): Rekey to support new public key	Soispha	2023-07-19
\| \|
* \|	Merge: Branch 'streamline'	Soispha	2023-07-19
\|\ \
\| * \|	Style(treewide): Format after removing vim lines	Soispha	2023-07-19
\| \| \|
\| * \|	Feat(.editorconfig): Add the configuration for all files	Soispha	2023-07-19
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This sets some formatting option based on the file. In comparison to the vim lines, this should be supported by more editors.
* \| \|	Merge: Branch 'update'	Soispha	2023-07-19
\|\ \ \ \| \|/ / \|/\| \|
\| * \|	Build(flake): Update	Soispha	2023-07-03
\| \| \|
* \| \|	Chore(system/secrets): Add sils' public key	sils	2023-07-19
\| \| \|
* \| \|	chore(version): v0.3.0 v0.3.0	Soispha	2023-07-10
\| \| \|
* \| \|	Fix(system/secrets): Update after redeploy	Soispha	2023-07-08
\| \| \|
* \| \|	Fix(system/secrets): Ensure that ssh host key is available in stage 2	Soispha	2023-07-08
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The `/var/lib/sshd` directory is only mounted _after_ the stage 2 init, thus also after the system activation. Agenix, which runs in the system activation needs the hostkey however to decrypt the secrets needed for some units (as of right now only keycloak). Alas the only way I see to achieve that is to store the ssh hostkey directly on /srv, which is mounted before (it's marked as 'neededForBoot' after all) the stage 2 init. It should be possible to achieve this with impermanence however, as `/var/log` is mounted in the stage 1 init; The problem is that I have no idea _why_ only this is the only directory mounted and nothing else.
* \| \|	Fix(system/services/keycloak): Use agenix to store passwd	Soispha	2023-07-08
\| \| \|
* \| \|	Feat(flake): Add agenix module	Soispha	2023-07-08
\| \| \|
* \| \|	Fix(system/services/nix-sync): Nix build needs access to /proc/stat	Soispha	2023-07-08
\| \| \|
* \| \|	Fix(system/impermanence/m/mail): Add rspamd dir	Soispha	2023-07-08
\| \| \|
* \| \|	Fix(system/impermanence/m/users): Make /home readable	Soispha	2023-07-08
\| \| \|
* \| \|	Docs(notes): Add section about redeployment	Soispha	2023-07-08
\| \| \|
* \| \|	Fix(treewide): Move all persistent dirs to impermanence to set permissions	Soispha	2023-07-08
\| \| \|
* \| \|	Fix(host/server1): Use working path to disk	Soispha	2023-07-08
\| \| \|
* \| \|	Fix(system/disks): Change partitioning scheme to support gpt/bios boot	Soispha	2023-07-08
\| \| \|
* \| \|	Merge branch 'disko'	Soispha	2023-07-07
\|\ \ \
\| * \| \|	Refactor(system/impermanence): Move to own directory	Soispha	2023-07-07
\| \| \| \|
\| * \| \|	Chore(.gitattributes): Remove removed acme path	Soispha	2023-07-07
\| \| \| \|
\| * \| \|	Feat(system/disks): Add disko	Soispha	2023-07-05
\| \| \| \|
* \| \| \|	chore(version): v0.2.0 v0.2.0	Soispha	2023-07-07
\| \| \| \|
* \| \| \|	Refactor(system/impermanence): Move to own directory	Soispha	2023-07-07
\| \| \| \|
* \| \| \|	Chore(.gitattributes): Remove removed acme path	Soispha	2023-07-05
\|/ / /
* \| \|	Style(system/fs_layouts): Merge attrsets	Soispha	2023-07-05
\| \| \|
* \| \|	Fix(system/services/nix-sync): Guard deletion of `repo.path`	Soispha	2023-07-05
\| \| \|
* \| \|	Fix(system/services/nix-sync): Pull before rebuilding	Soispha	2023-07-05
\| \| \|
* \| \|	Fix(system/services/nix-sync): Generate the needed repo paths	Soispha	2023-07-05
\| \| \|
* \| \|	Fix(system/services/nix-sync): Rebuild website on gc	Soispha	2023-07-05
\| \| \|
* \| \|	Fix(system/services/nix-sync): Really remove last reference to git-sync	Soispha	2023-07-05
\| \| \|
* \| \|	Fix(system/services/nix-sync): Small typos in ExecStart	Soispha	2023-07-05
\| \| \|
* \| \|	Fix(system/fs_layout/impermanence): Make sshd dir 755	Soispha	2023-07-05
\| \| \|
* \| \|	Feat(system/services/nix-sync): Split unit into a timer and unit	Soispha	2023-07-04
\| \| \|
* \| \|	Fix(system/services/nginx): Set the correct acme webRoot	Soispha	2023-07-04
\| \| \|
* \| \|	Fix(system/services/nix-sync): Use cache directory	Soispha	2023-07-04
\| \| \|
* \| \|	Docs(system/services/nix-sync): Change last remnant from git-sync	Soispha	2023-07-04
\| \| \|
* \| \|	Fix(system/services/nix-sync): Use correct git urls	Soispha	2023-07-04
\| \| \|
* \| \|	Fix(system/services/nix-sync): Generate root independent of path	Soispha	2023-07-04
\| \| \|
* \| \|	Fix(system/services/openssh): Set correct permissions on ssh dir	Soispha	2023-07-04
\| \| \|