summary refs log tree commit diff stats
path: root/system/secrets (unfollow)
Commit message (Collapse)Author
2024-05-25feat(system/services/nginx): Add the trinitrix websiteBenedikt Peetz
2024-05-25feat(system/services/nginx): Add the GPG WKDBenedikt Peetz
2024-05-14build(flake): updateSilas Schöffel
Flake lock file updates: • Updated input 'agenix': 'github:ryantm/agenix/1381a759b205dff7a6818733118d02253340fd5e' (2024-04-02) → 'github:ryantm/agenix/8d37c5bdeade12b6479c85acd133063ab53187a0' (2024-05-09) • Updated input 'crane': 'github:ipetkov/crane/a5eca68a2cf11adb32787fc141cddd29ac8eb79c' (2024-04-24) → 'github:ipetkov/crane/27025ab71bdca30e7ed0a16c88fd74c5970fc7f5' (2024-05-09) • Updated input 'disko': 'github:nix-community/disko/a816daa384dd754b7586f51157fc2e1a44e76073' (2024-04-25) → 'github:nix-community/disko/f236f6df36e7e8077ff33304a1bf5dbc5c6b7122' (2024-05-14) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/4c268f5790f5e697d7e377dfdf21605d3aa123c3' (2024-04-25) → 'github:NixOS/nixpkgs/8a4282c38b6cbea9f0989c0eafc6ce1837a26442' (2024-05-13) • Updated input 'nixpkgs-unstable': 'github:NixOS/nixpkgs/9a4f20210147ecaec0269ec02506be2696635ee7' (2024-04-25) → 'github:NixOS/nixpkgs/21b7c1e62f1856bb793d41198ef4760058c6ebd5' (2024-05-14) • Updated input 'rust-overlay': 'github:oxalica/rust-overlay/9a2a11479b94afaf1ecc46384b27abda0d3d5f9d' (2024-04-25) → 'github:oxalica/rust-overlay/1d8fcbbfcfd3476c2665384a46ee9d07ef2b4dd9' (2024-05-14)
2024-05-14feat(system/users/soispha): Set a new gpg-based ssh keyBenedikt Peetz
2024-04-26feat(system/servies): remove snapperSilas Schöffel
We handle backups with restic
2024-04-25feat(system/services/fail2ban): add postfix jailSilas Schöffel
This bans IP Addresses which fail to login into postfix at least 3 times in 600 seconds.
2024-04-25style(system/services/mastodon): format with alejandraSilas Schöffel
2024-04-25fix(system/impermanence/mods/mail.nix): fix typoSilas Schöffel
2024-04-25build(flake): updateSilas Schöffel
2024-04-25fix(system/services/mastodon): change back to stable packageSilas Schöffel
2024-04-24fix(mail): persist additional state directoriesSilas Schöffel
This preserves mail state to prevent running out of memory and thus makes our mailsetup more reliable.
2024-04-24fix(treewide): move former git-crypted files to correct locationSilas Schöffel
They were accidentally added at the wrong location in dd4b6bcfc16c7c795b697195eb6703966352d9f4
2024-04-02fix(system/services/taskserver): Add required kernel settingsSoispha
These are the defaults, but I think it is better to explicitly state them to ensure that we don't suffer from a mistake, when we think about changing them in the future.
2024-03-29chore(git-crypt): Remove `.git-crypt` directorySoispha
2024-03-29chore(git-crypt): Re-add previously encrypted files in decrypted formSoispha
2024-03-29chore(git-crypt): Remove `git-crypt` and associated encrypted filesSoispha
2024-03-29fix(gitattributes): Remove unused taskserver pathsSoispha
2024-03-29refactor(system/services/taskserver): Move away from git-cryptSoispha
2024-03-29style(system/secrets): Sort `secret.nix` and `default.nix` alphabeticallySoispha
2024-03-28fix(system/services/libreddit): correct binary location in systemd serviceSilas Schöffel
This is a manual fix until we get this merged into nixpkgs Co-authored-by: Benedikt Peetz <benedikt.peetz@b-peetz.de>
2024-03-28feat(system/servics/libreddit): Use the continued redlib packageSoispha
Fixes: #87
2024-03-28build(flake): UpdateSoispha
2024-03-19fix(system/impermanence/mods/users.nix): add /root/.ssh as persistent directorysils
2024-03-10fix(system/services/invidious-router): add new healthcheck configsils
2024-03-10build(flake): updatesils
2024-02-25fix(system/services/invidious-router): remove invidious.vhack.eu from ↵sils
instance list This is necessary because of a bug in our instance which causes search to fail under certain circumstances.
2024-02-21style(system/services/invidious-router): one list entry per linesils
2024-02-21fix(system/services/invidious-router): change allowed_status_codes type to intsils
2024-02-21fix(system/services/invidious-router): bind to 127.0.0.1sils
2024-02-21build(flake): updatesils
2024-02-21fix(flake): override invidious-router-flake nixpkgs with nixpkgs-unstablesils
2024-02-21fix(system/services/invidious-router): correct typosils
2024-02-19feat(system/services/invidious-router): add extraDomainssils
2024-02-19build(flake): updatesils
2024-02-19feat(system/services/invidious-router): add configurationsils
2024-02-19build(flake): update invidious-router-flakesils
2024-02-19style(flake): format with alejandrasils
2024-02-18build(flake): UpdateSoispha
2024-02-15build(flake): updatesils
2024-02-15fix(flake): update invidious-router-flake urlsils
2024-02-15chore(version): v0.23.1 v0.23.1sils
2024-02-15fix: update mastodonsils
This uses the mastodon package from nixos-unstable-small because backporting of a security release failed and we can't afford to wait.
2024-02-15chore(version): v0.23.0 v0.23.0sils
2024-02-11feat: remove keycloaksils
2024-02-11build(flake): updatesils
2024-02-11fix(flake): rename invidious-router to invidious-router-flakesils
2024-02-11build(flake): updatesils
2024-02-11chore(version): v0.22.0 v0.22.0sils
2024-02-10fix(system/services/invidious-router): fix typo in domainsils
2024-02-10feat: add invidious-routersils