nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author	Age
*	Fix(system/services/nix-sync): Use correct shell escape for paths	Soispha	2023-07-04
\|
*	Fix(system/services/nginx/hosts): Inherit acmeRoot setting	Soispha	2023-07-04
\|
*	Style(system/services/nginx): Use nested attr set for acme options	Soispha	2023-07-03
\|
*	Fix(system): Import everything	Soispha	2023-07-03
\|
*	Fix(system/services/openssh): Rename to 'openssh' as the 'd' is a typo	Soispha	2023-07-03
\|
*	Fix(system/services/mail): Tell git-crypt new users.nix location	sils	2023-07-03
\|
*	Fix(system/services/nix-sync): Use correct writeScript function	Soispha	2023-07-03
\|
*	Refactor(system/services/mail): Move mail to services as it's one	Soispha	2023-07-03
\|
*	Fix(system): Import everything	Soispha	2023-07-03
\|
*	Fix(system/services/nix-sync): Fully rename to nix-sync	Soispha	2023-07-03
\|
*	Refactor(system/services/nginx): Adapt to new nix-sync module	Soispha	2023-07-03
\|
*	Feat(system/services/nix-sync): Remodel git-sync to make it useful	Soispha	2023-07-03
\|
*	Fix(system/services/acme): Leave certs generation to nixos	Soispha	2023-06-25
\|
*	Fix(system/services/git-sync): Use correct systemd options	Soispha	2023-06-25
\|
*	Fix(system/services/git-sync): Switch to str to avoid impurity	Soispha	2023-06-25
\|
*	Fix(system/services/git-sync): Purge assertion, as we're always on linux	Soispha	2023-06-25
\|
*	Fix(system/services/nginx): Actually enable git-sync	Soispha	2023-06-25
\|
*	Fix(system/services/minecraft): Reduce simulation-distance	sils	2023-06-19
\|
*	Fix(system/services/minecraft): Finetuning	sils	2023-06-19
\|
*	Fix(system/services): Allow minecraft-server, which is sadly unfree	sils	2023-06-19
\|
*	Fix(system/services): Ignore unnecessary inputs	sils	2023-06-19
\|
*	Feat(system/services): Add minecraft server	sils	2023-06-19
\|
*	Refactor(services): Remove dead code	Soispha	2023-06-18
\|
*	Fix(system/services/acme): Add multiple domains	Soispha	2023-06-17
\|
*	Fix(system/services/nginx): Switch to git-sync	Soispha	2023-06-17
\|
*	Feat(system/services/git-sync): Add	Soispha	2023-06-17
\|
*	Fix(system/services/keycloak): Correct path to passwordfile	sils	2023-06-06
\|
*	Fix(system/services/keycloak): Change value of 'passwordFile' to path	sils	2023-06-06
\|
*	Feat(system/services): Enable keycloak	sils	2023-06-06
\|
*	Feat(system/services/keycloak): Add keycloak	sils	2023-06-06
\|
*	Fix(system/services/opensshd): Rename passwordAuthentication to	sils	2023-06-06
\| \| \| \|	settings.PassowrdAuthentication
*	Revert: Remove Conduit	sils	2023-06-06
\| \| \| \| \| \|	It didn't deploy either and we'd probably use synapse anyway This reverts commit fbba7df4b7c9de5b1926612647e1d9d06b7d22cf.
*	Feat(system/matrix/conduit): Add matrix-conduit	Soispha	2023-05-20
\|
*	Style(system): Format	Soispha	2023-05-20
\|
*	Fix(system/services/nginx): Correct path to index.html	sils	2023-04-21
\|
*	Feat(system/services/nginx): Change to declarative websites	Soispha	2023-04-19
\|
*	Fix(system/mail): Allow opening ports in the firewall	ene	2023-04-07
\| \| \| \| \| \| \| \| \| \| \|	As the previous configuration only opened some ports, receiving mail was impossible. This allows NSM to open the required ports directly, ensuring that none was missed. SECURITY: As all other options than SSL are still disabled, this change should not introduce unencrypted mail transfer. This has not been tested.
*	Fix(system/services/rust-motd): Quote ssl-cert names	ene	2023-03-25
\|
*	Feat(system/services/rust-motd): Info about filesystems	ene	2023-03-25
\|
*	Feat(system/services/rust-motd): Show status of ssl-certs	ene	2023-03-25
\|
*	Fix(system/services/rust-motd): Add fail2ban binary	ene	2023-03-25
\|
*	Feat(system/services/fail2ban): Add dovecot jail	ene	2023-03-25
\| \| \| \|	This should reduce the log spam even further.
*	Fix(system/services/fail2ban): Make db persistent	ene	2023-03-25
\|
*	Feat(system/services/fail2ban): Add fail2ban	ene	2023-03-25
\| \| \| \|	This should clear the logs somewhat.
*	Fix(system/services/minecraft): Remove to make compile	ene	2023-03-19
\|
*	Fix(system/mail): Only accept connections on safe ports	ene	2023-03-19
\| \| \| \| \|	It is sort of standard to ignore connections over the unencrypted port 25, thus we are doing the same.
*	Fix(system/users): Remove unneeded root ssh login keys	ene	2023-03-18
\| \| \| \| \|	All users are in the wheel group, thus direct login as root is no longer needed.
*	Refactor: Use better file layout	ene	2023-03-18