summary refs log tree commit diff stats
Commit message (Collapse)AuthorAge
* fix(modules/back): Remove the `gitPath` from the service nameBenedikt Peetz3 days
| | | | With it, the service names become nearly illegible.
* feat(modules/nginx): Modularise the redirects and migrate them to server2Benedikt Peetz3 days
| | | | | | The redirects always have an implicit dependency on the DNS config of the running host. As such, simply stating them for all host is never a possibility and setting them per host the only viable option.
* fix(modules/nix-sync/internal): Fix syntax errors in shell-scriptBenedikt Peetz3 days
|
* fix(modules/dhcpcd): Also set uid/gid for the `dhcpcd` userBenedikt Peetz3 days
| | | | | Otherwise, this user's/group's owned files/directories could change when a new user is added or removed, as we do not persist `/var/lib/nixos`.
* build(flake.nix): Re-add `ragenix` to the devShellBenedikt Peetz3 days
|
* refactor(hosts): Use a `by-name` structure and construct all host depended ↵Benedikt Peetz3 days
| | | | | | values This allows us to outsource the host-handling from the `flake.nix` file.
* fix(treewide): Add constant uids and gids to each user and groupBenedikt Peetz3 days
| | | | This allows us to avoid persisting `/var/lib/nixos`.
* docs(CONTRIBUTING.md): RemoveBenedikt Peetz3 days
| | | | | | | | The information is currently out-dated, was never really up-to-date and as such will not provide anything useful to new contributors. We should probably try to write it again at some point when our workflow has moved more from cathedral to bazaar.
* refactor(system/services/fail2ban): Migrate to `by-name`Benedikt Peetz3 days
| | | | | | Additionally, I've changed to owner of the `/var/lib/fail2ban` directory to `root:root` as the main `fail2ban` service also runs under `root` and a `fail2ban` user is never created.
* refactor(system/services/rust-motd): Migrate to `by-name`Benedikt Peetz3 days
|
* fix(modules/impermanence): Don't always persist `/var/log` and `/var/lib/nixos`Benedikt Peetz3 days
| | | | | | | | | | Persisting them, without marking the `/srv` containing fs as `neededForBoot` will result in a kernel panic in the init (because `impermanence` tries to mount these directories and fails as `/srv` is still missing.) Thus, each host, that sets `/srv` to `neededForBoot` should add these directories to `vhack.persist.directories`.
* fix(system): Remove out-dated importsBenedikt Peetz3 days
| | | | Both of these modules have been moved to `by-name`
* refactor(system/users): Migrate to `by-name`Benedikt Peetz3 days
|
* fix(modules/git-server): Use `vhack.persist` for data-directoriesBenedikt Peetz3 days
| | | | | This avoids having to create them manually on the server and is, overall just generally a better way to solve this problem.
* fix(modules/back): Use correct source-code environment variableBenedikt Peetz3 days
|
* build(scripts/deploy): InitBenedikt Peetz3 days
| | | | | This documents the commands used for the first deployment (i.e., with a full, disko-driven, disk formatting step).
* build(scripts/mk_network_config): InitBenedikt Peetz3 days
| | | | | | | This has been taken directly from `nixos-infect` (which rather under-maintained, sadly). Currently, it is extremely useful to generate the `networking.nix` config for new hosts.
* refactor(modules/impermanence): Migrate to by-name while distributing modsBenedikt Peetz4 days
|
* fix(modules/back): Set now needed source code URL environment variable backBenedikt Peetz5 days
|
* docs(pkgs/back): Document useful environment variablesBenedikt Peetz5 days
|
* feat(pkgs/back): Add a link to the source codeBenedikt Peetz5 days
| | | | | This is required by the AGPL license and should probably also be done, because we do not have a reason to hide or obfuscate the code.
* feat(hosts/server1): Configure back for the `nixos-server` repoBenedikt Peetz5 days
|
* feat(tests/back): InitBenedikt Peetz5 days
|
* feat(modules/back): InitBenedikt Peetz5 days
|
* build(scripts/test_interactive): Fix typo in variable nameBenedikt Peetz5 days
|
* fix(modules/nix-sync/internal): Use correct command grouping syntaxBenedikt Peetz5 days
| | | | | | Commands in parentheses (i.e., `()`) are _subshells_ and `exit`ting from these will not result in an `exit` of the actually _shell_. Thus, we use want simple command grouping and use the correct syntax for that.
* build(pkgs/back): Apply source filteringBenedikt Peetz5 days
| | | | | This avoids useless rebuilds, just because files like the `README.md` changed.
* docs(pkgs/back): Add note about needed write accessBenedikt Peetz5 days
|
* fix(pkgs/back): Set `meta.mainProgram`Benedikt Peetz5 days
|
* fix(modules/disko): Actually honor `cfg.enable`Benedikt Peetz5 days
|
* test(scripts/lint_missing_tests.sh): RemoveBenedikt Peetz5 days
| | | | | This functionality is now available via the `coImport` feature in the `mkByName` `nixLib` function.
* style(treewide): FormatBenedikt Peetz5 days
|
* build(flake): Use treefmt as nix formatterBenedikt Peetz5 days
| | | | | This allows us to also keep markdown and other documents, that aren't nix, formatted.
* feat(pkgs): Hook up to the flake and add needed infrastructureBenedikt Peetz5 days
|
* feat(pkgs/back): InitBenedikt Peetz5 days
| | | | | Other options, for example `git-bug webui --read-only` is just to bugged to be useful.
* fix(modules/disko): Remove deprecated legacy type and migrate to `by-name` disko/updateBenedikt Peetz7 days
|
* fix(system/services/mastodon): Update char patch to v4.3Benedikt Peetz7 days
|
* fix(modules/redlib): Change subdomain to `redlib` migrate-by-nameBenedikt Peetz8 days
| | | | | | The old `libreddit` subdomain still has redirection to avoid this being a breaking change. But keeping the old subdomain is rather weird considering their new name.
* refactor(system/services/libreddit): Migrate to `by-name`Benedikt Peetz8 days
| | | | This also includes a rename into `redlib` because of upstream changes.
* refactor({modules,test}): Migrate to a `by-name` structureBenedikt Peetz8 days
|
* fix(treewide): Update to nixos release 24.11 update-24.11Benedikt Peetz9 days
|
* build(system/services/taskserver/certs/generate): Convert to `nix-shell`Benedikt Peetz9 days
| | | | Lix does not support the newer `nix shell` shebang.
* fix(system/services/invidious-router): remove_no_ratio = false HEAD mainSilas Schöffel2024-12-06
|
* fix(system/services/libreddit): Use unstable `redlib` versionBenedikt Peetz2024-11-16
| | | | | The current stable version has a bug with regard to parsing the current reddit json responses.
* build(flake.lock): UpdateBenedikt Peetz2024-11-16
|
* docs(system/services/matrix): Fix typos in commentBenedikt Peetz2024-11-03
|
* build(flake): UpdateBenedikt Peetz2024-11-03
|
* feat(taskserver/certs/ca.certs.pem): Regenerate certificate taskdBenedikt Peetz2024-10-05
|
* refactor(taskserver/certs): Format scripts and allow selecting which certs ↵Benedikt Peetz2024-10-05
| | | | to generate
* chore(taskserver/certs/ca.key.pem.gpg): reencrypt with new keys as recipientsSilas Schöffel2024-10-05
|