| Commit message (Collapse) | Author | ||
|---|---|---|---|
| 2023-08-11 | Fix(system/services/invidious): Force the new script option to be applied | Soispha | |
| 2023-08-11 | Fix(system/service/invidious): Copy their script, to remove shell escape | Soispha | |
| The default ExecStart implementation in the module, escapes all stings. This does not work for us because we need to use the `$CREDENTIALS_DIR` environment variable, for the credentials deployed in den `LoadCredential` option | |||
| 2023-08-11 | Fix(system/services/invidious): Set correct access permissions on hmac | Soispha | |
| 2023-08-11 | Fix(system/services/invidious): Check tables on startup | Soispha | |
| 2023-08-11 | Refactor(system/secrets/invidious): Remove unneeded files and improve names | Soispha | |
| 2023-08-11 | Fix(system/services/invidious): Quote attr names in json config | Soispha | |
| 2023-08-11 | Fix(system/secrets/invidious): Change formatting of invidiousSettings | sils | |
| 2023-08-11 | Fix(system/secrets): make invidious settings readable for invidious | sils | |
| 2023-08-11 | Fix(system): Binary substitution for debugging | sils | |
| 2023-08-11 | Fix(system/services/invidious): Specifiy database host | sils | |
| 2023-08-11 | Feat(system): Add invidious | sils | |
| 2023-08-11 | Refactor(system/secrets/secrets.nix): Remove redundant secretlist | sils | |
| 2023-08-04 | chore(version): v0.7.0 v0.7.0 | sils | |
| 2023-08-04 | Fix(system/users): declare nixremote as normal user | sils | |
| 2023-08-04 | Feat(system/users): Add nixremote | sils | |
| This user is intended to be used for remote-builds | |||
| 2023-08-02 | Feat(system/services/snapper): Add | Soispha | |
| 2023-08-02 | Build(flake): Update | Soispha | |
| 2023-08-02 | Fix(system/services/nix-sync): Remove timeout on build | Soispha | |
| The unit had the potential to fail, if the build took longer than the default timeout. This is obviously not ideal, so the timeout was removed, as all nix builds should be safe enough not to devour resources. | |||
| 2023-08-02 | Fix(system/services/nix-sync): Rebase on pulls, to allow for force pushes | Soispha | |
| As the nix-sync service should _never_ commit new stuff, this rebase should always be a fast-forward, i.e. it works without manual intervention. Without the rebase as argument, this services would break, when the history gets rewritten, for example on a amended commit. | |||
| 2023-08-02 | Fix(system/services/nix-sync): Make the timer relative to the unit start | Soispha | |
| The timer before hand started `repo.interval` after it self was started, i.e., it was a oneshot timer. This change now fixes this by make the point the timer activates relative to the time elapsed, since the associated unit was last started. | |||
| 2023-07-31 | Feat(system/services/nginx/hosts): Add another domain | Soispha | |
| 2023-07-28 | chore(version): v0.6.0 v0.6.0 | Soispha | |
| 2023-07-28 | Fix(treewide): Use correct function argument specification | Soispha | |
| 2023-07-28 | Feat(system/services/mail/users): Add mailusers | Soispha | |
| 2023-07-28 | Refactor(system/services/nginx): Reduce encrypted stuff to a minimum | Soispha | |
| 2023-07-28 | chore(version): v0.5.1 v0.5.1 | sils | |
| 2023-07-28 | Fix(system/services/mail): Update mail users | sils | |
| 2023-07-27 | chore(version): v0.5.0 v0.5.0 | Soispha | |
| 2023-07-27 | Fix(system/services/matrix/bridges/m-wa): Use own database | Soispha | |
| 2023-07-27 | Fix(system/services/matrix/bridges/m-wa): Correct postgresql uri | Soispha | |
| 2023-07-27 | Fix(system/impermanence): Keycloak was actually postgresql | Soispha | |
| 2023-07-27 | Feat(system/services/matrix/bridges): Add mautrix-whatsapp bridge | Soispha | |
| 2023-07-26 | Fix(system/mail): Add User | sils | |
| 2023-07-25 | chore(version): v0.4.1 v0.4.1 | sils | |
| 2023-07-25 | Build(flake): Update | sils | |
| 2023-07-25 | Fix(system/services/mail): Add new user | sils | |
| 2023-07-22 | chore(version): v0.4.0 v0.4.0 | sils | |
| 2023-07-22 | Fix(system/services/matrix): Change registration_shared_secret_path to | sils | |
| age secret | |||
| 2023-07-22 | Feat(system/secrets): Add matrix-synapse_registration_shared_secret | sils | |
| 2023-07-22 | Fix(system/services/matrix): Add registration_shared_secret to register | sils | |
| users | |||
| 2023-07-22 | Fix(system/services/matrix): Move persisting files ctrl to impermanence | Soispha | |
| 2023-07-22 | Fix(system/services/matrix): Fix extra " =" in locations path | Soispha | |
| 2023-07-19 | Chore(system/secrets): Rekey to support new public key | Soispha | |
| 2023-07-19 | Style(treewide): Format after removing vim lines | Soispha | |
| 2023-07-19 | Feat(.editorconfig): Add the configuration for all files | Soispha | |
| This sets some formatting option based on the file. In comparison to the vim lines, this should be supported by more editors. | |||
| 2023-07-19 | Chore(system/secrets): Add sils' public key | sils | |
| 2023-07-10 | chore(version): v0.3.0 v0.3.0 | Soispha | |
| 2023-07-08 | Fix(system/secrets): Update after redeploy | Soispha | |
| 2023-07-08 | Fix(system/secrets): Ensure that ssh host key is available in stage 2 | Soispha | |
| The `/var/lib/sshd` directory is only mounted _after_ the stage 2 init, thus also after the system activation. Agenix, which runs in the system activation needs the hostkey however to decrypt the secrets needed for some units (as of right now only keycloak). Alas the only way I see to achieve that is to store the ssh hostkey directly on /srv, which is mounted before (it's marked as 'neededForBoot' after all) the stage 2 init. It should be possible to achieve this with impermanence however, as `/var/log` is mounted in the stage 1 init; The problem is that I have no idea _why_ only this is the only directory mounted and nothing else. | |||
| 2023-07-08 | Fix(system/services/keycloak): Use agenix to store passwd | Soispha | |
 |
index : nixos-server | |
| nixos-config for vhack.eu servers https://vhack.eu | vhack.eu |
| summary refs log tree commit diff stats |