nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author	Age
...
*	chore(version): v0.20.1 v0.20.1	Soispha	2024-01-17
\|
*	fix(sys/services/restic): Set the system start time to 'daily'	Soispha	2024-01-14
\| \| \| \| \| \|	Considering that the db dump takes longer than an hour, an hourly service start time could lead to multiple dumps happening concurrently. This should reduce this risk
*	fix(sys/services/restic): Include a db dump of PostgreSQL	Soispha	2024-01-14
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Including this dump should remove the risk of a backup with a corrupt PostgreSQL database. Initial test showed that the backup takes around 32 GB and runs in under 3 hours. There is one big oversight not yet included in this commit: All services running a SQLite database are not included in this dump and thus can not be safely recovered. At present these are: - etebase-server (db.sqlite3) - murmur (murmur.sqlite) (This is list was generated with `sudo fd sqlite /srv/`)
*	chore(version): v0.20.0 v0.20.0	sils	2024-01-07
\|
*	fix(system/services): import restic config	sils	2024-01-07
\|
*	feat(system): add restic	sils	2024-01-07
\|
*	feat(system/secrets): rename .tix files to .age	sils	2024-01-06
\|
*	chore(version): v0.19.0 v0.19.0	sils	2024-01-06
\|
*	build(flake): update	sils	2024-01-06
\|
*	feat(system/services/mastodon): define streamingProcesses	sils	2024-01-06
\|
*	feat(system/services/fail2ban): define config in daemonSettings	sils	2024-01-06
\| \| \| \|	This isn't strictly necessary as we define the default config
*	feat(system/services/matrix): use mautrix-whatsapp module provided by	sils	2024-01-06
\| \| \| \|	nixpkgs
*	feat(flake): update to nixos-23.11	sils	2024-01-06
\|
*	chore(merge): branch 'redirect'	sils	2023-12-12
\|\
\| *	fix(system/services/nginx/redirects): Enable ssl for the domains	Soispha	2023-11-03
\| \| \| \| \| \| \| \| \| \| \| \|	Although the page does not actually serve any content, many browsers will still refuse to access it at all, if they have the 'https-only' mode activated.
* \|	refactor(system/services/etebase): explain outcommented static files	sils	2023-11-30
\| \|
* \|	fix(system/services/etebase): don't serve static files	sils	2023-11-27
\| \| \| \| \| \| \| \|	This doesn't work as nginx doesn't have the right permissions.
* \|	fix(system/services/etebase): serve static_root	sils	2023-11-27
\| \|
* \|	fix(system/services/etebase): micellanous changes to make it work	sils	2023-11-27
\| \|
* \|	Merge branch 'main' into etebase_new	sils	2023-11-27
\|\ \
\| * \|	fix(system/services/nix): add nixremote to trusted-users	sils	2023-11-20
\| \| \|
* \| \|	fix(system/impermanence): Remove keycloak mod, as it does not exist	Soispha	2023-11-18
\| \| \|
* \| \|	refactor(system/services/etebase): Use a reference to the port number	Soispha	2023-11-18
\| \| \|
* \| \|	fix(system/services/etebase): Use the correct subdomains	Soispha	2023-11-18
\| \| \| \| \| \| \| \| \| \| \| \|	This is done to comply with the naming scheme employed at `vhack.eu`.
* \| \|	fix(system/services/etebase): Hard-code localhost ip	Soispha	2023-11-18
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Otherwise, etebase might use the ipv6 ip, whilst nginx uses the ipv4 version. This prevents this issue
* \| \|	Fix(system/services/etebase): Add proxy parameters	sils	2023-11-18
\| \| \|
* \| \|	Fix(system/services/etebase): Proxy ipv4	sils	2023-11-18
\| \| \|
* \| \|	Refactor(system/services/etebase): Format	sils	2023-11-18
\| \| \|
* \| \|	Fix(system/impermanence): Add permissions	sils	2023-11-18
\| \| \|
* \| \|	Fix(system/services/etebase-server): Use nginx	sils	2023-11-18
\| \| \|
* \| \|	Fix(system/impermanence): Add etebase-server	sils	2023-11-18
\| \| \|
* \| \|	Feat(system/services): Add etebase-server	sils	2023-11-18
\| \| \|
* \| \|	Feat(system/secrets): Add etebase-server secret	sils	2023-11-18
\|/ /
* \|	docs(system/services/taskserver): Add docs about expectations to runtime	Soispha	2023-11-18
\| \|
* \|	feat(system/users): remove obsolete ss-key for sils	sils	2023-11-18
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	# Please enter the commit message for your changes. Lines starting # with '#' will be ignored, and an empty message aborts the commit. # # On branch main # Your branch is up to date with 'origin/main'. # # Changes to be committed: # modified: system/users/default.nix #
* \|	chore(version): v0.18.0 v0.18.0	Soispha	2023-11-18
\| \|
* \|	build(flake): Update	Soispha	2023-11-18
\| \|
* \|	chore(merge): Branch 'taskd'	Soispha	2023-11-18
\|\ \
\| * \|	fix(system/services/taskserver): Support both ipv4 and ipv6	Soispha	2023-11-18
\| \| \|
* \| \|	fix(system/services/taskserver): Support both ipv4 and ipv6	Soispha	2023-11-18
\| \| \|
* \| \|	fix(system/users): change ssh-keys for sils	sils	2023-11-18
\|/ /
* \|	feat(git-crypt): add new key	sils	2023-11-18
\| \|
* \|	fix(system/users): add ssh-key for sils	sils	2023-11-15
\| \|
* \|	chore(version): v0.17.1 v0.17.1	Soispha	2023-11-07
\| \|
* \|	fix(system/services/taskserver/certs): Move cert generation to script	Soispha	2023-11-07
\|/ \| \| \| \| \|	This fully removes the human-factor and allows it to just run `./generate` to generate all required certificates and keys (with the needed extra keys and certificates)
*	chore(version): v0.17.0 v0.17.0	Soispha	2023-11-03
\|
*	build(flake): Remove language servers from the devshell	Soispha	2023-11-03
\| \| \| \| \|	These should be declared in the developer's editor config, and thus are just useless here.
*	build(flake): Update	Soispha	2023-11-03
\|
*	feat(system/services/taskserver): Add a way to connect users together	Soispha	2023-10-17
\|
*	fix(system/services/taskserver): Disable debug	Soispha	2023-10-17
\|