nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author	Age
*	fix(treewide): Update to nixos release 24.11 update-24.11	Benedikt Peetz	45 hours
\|
*	fix(git-server/cgit): Don't run `cgit` as `root` use `git` instead	Benedikt Peetz	2024-09-06
\| \| \| \| \| \| \| \| \| \| \| \|	This option was newly added, as previously only on `fcgiwrap` instance was run as root. We probably have not been affected by this, as our `fcgiwrap` instance was already running as `git:nginx`. Usage of the new options seems better either way, as they provide a finer grained control over the user _each_ `fcgiwrap`ped service is running at. The security advisory: https://discourse.nixos.org/t/51419
*	docs(nixos/git-server): Improve the comment on the possible git config keys	Benedikt Peetz	2024-08-14
\|
*	fix(nixos/git-server): Use the correct number in the `section-from-path` setting	Benedikt Peetz	2024-08-14
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Take for example a repository name like: `some/organisation/project_a/team_c/repo_b`. Setting the setting to `-1` means that cgit traverses the path from left to right, until it has found 1 element (and `section-from-path` (or n for short)is 0, because n is incremented after each iteration). E.g. : ~ [n=-1] starting point: `some/organisation/project_a/team_c/repo_b` ~ [n=0] after the first iteration: `some/organisation/project_a/team_c/repo_b` Now `some/organisation/project_a/team_c` becomes the section, whilst `repo_b` becomes the repo name.
*	fix(nixos/git-server): Correctly specify the section from path length	Benedikt Peetz	2024-08-13
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Cgit effectively splits the repo path on '/' and then takes `section-from-path` segments, which form the section. A negative value here results in cgit traversing the path from left to right instead of right to left. Beware that cgit only sets the section, if the path contains `section-from-path` or more slashes in it (thus rendering this setting defunct with the previous value of 1000). There seems to be no way to tell cgit to always use all components up-to the second to last for the section name, thus requiring all projects that need a longer than 1 section length to set the `cgit.section` git config variable via gitolite.
*	fix(nixos/git-server): Correctly enable the git config feature of gitolite	Benedikt Peetz	2024-08-13
\| \| \| \| \| \| \| \|	The previously set variable is only used in the gitolite.conf file for the `config` specifications on each repo. We can't use that because we use "wild-repos". Thus we need to add the `user-configs` option to each repo, allow users to change the git settings specified there with a simple `ssh git@git.vhack.eu config <repo> --set cgit.owner <name>`.
*	fix(nixos/git-server): Use correct regex syntax in allowed git config values	Benedikt Peetz	2024-08-13
\|
*	fix(nixos/git-server): Correctly specify cgit's css path	Benedikt Peetz	2024-08-13
\|
*	feat(nixos/git-server): Add nice gitolite features	Benedikt Peetz	2024-08-13
\|
*	fix(nixos/git-server): Tell gitolite to allow changing some `git` settings	Benedikt Peetz	2024-08-13
\|
*	feat(nixos/git-server): Add further cgit settings	Benedikt Peetz	2024-08-13
\| \| \| \| \|	A lot of the added settings here have been tested. They will get get tests to ensure they stay working, in later commits.
*	refactor(nixos/openssh): Migrate from `system/services`	Benedikt Peetz	2024-08-02
\|
*	fix(nixos/git-server): Add the required configuration to support http-clone	Benedikt Peetz	2024-08-02
\|
*	refactor(nixos/{nginx, nix-sync}): Migrate from `system/services`	Benedikt Peetz	2024-08-02
\| \| \| \| \|	Nix-sync was sort-of mixed into the nginx configuration, thus separating it completely seemed reasonable.
*	fix(git-server): set git default-branch to main	Silas Schöffel	2024-07-30
\|
*	fix(peertube): allow sane user creation	Silas Schöffel	2024-06-28
\| \| \| \| \|	This enables reviewed registration, assigns quota to new users and enables manual approval of new videos.
*	fix(peertube): configure https	Silas Schöffel	2024-06-28
\|
*	fix(peertube): Specify admin email (where to send the reports to)	Benedikt Peetz	2024-06-28
\|
*	fix(peertube): Use correct localhost ip	Benedikt Peetz	2024-06-28
\|
*	fix(peertube): Add required listen setting	Benedikt Peetz	2024-06-28
\|
*	fix(peertube): Activate smtp support	Benedikt Peetz	2024-06-28
\|
*	fix(peertube): Ensure that the nginx reverse proxy works	Benedikt Peetz	2024-06-28
\|
*	fix(peertube/secrets): Improve smtp secret	Benedikt Peetz	2024-06-27
\|
*	feat(peertube): Init	Benedikt Peetz	2024-06-27
\|
*	refactor(modules/etesync): Move to a complete module	Benedikt Peetz	2024-06-13
\|
*	refactor(modules): Ensure strict coherence to patterns	Benedikt Peetz	2024-06-13
\|
*	fix(git-server): enable http-clone through cgit	Silas Schöffel	2024-06-11
\|
*	fix(gitolite): change user to git	Silas Schöffel	2024-06-07
\|
*	fix(git-server): enable SSL for cgit	Silas Schöffel	2024-06-05
\|
*	feat(treewide): add git-server module	Silas Schöffel	2024-06-05