nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author	Age
*	Fix(system/services/keycloak): Change value of 'passwordFile' to path	sils	2023-06-06
\|
*	Feat(system/services): Enable keycloak	sils	2023-06-06
\|
*	Feat(system/services/keycloak): Add keycloak	sils	2023-06-06
\|
*	Fix(system/services/opensshd): Rename passwordAuthentication to	sils	2023-06-06
\| \| \| \|	settings.PassowrdAuthentication
*	Revert: Remove Conduit	sils	2023-06-06
\| \| \| \| \| \|	It didn't deploy either and we'd probably use synapse anyway This reverts commit fbba7df4b7c9de5b1926612647e1d9d06b7d22cf.
*	Feat(system/matrix/conduit): Add matrix-conduit	Soispha	2023-05-20
\|
*	Style(system): Format	Soispha	2023-05-20
\|
*	Fix(system/services/nginx): Correct path to index.html	sils	2023-04-21
\|
*	Feat(system/services/nginx): Change to declarative websites	Soispha	2023-04-19
\|
*	Fix(system/mail): Allow opening ports in the firewall	ene	2023-04-07
\| \| \| \| \| \| \| \| \| \| \|	As the previous configuration only opened some ports, receiving mail was impossible. This allows NSM to open the required ports directly, ensuring that none was missed. SECURITY: As all other options than SSL are still disabled, this change should not introduce unencrypted mail transfer. This has not been tested.
*	Fix(system/services/rust-motd): Quote ssl-cert names	ene	2023-03-25
\|
*	Feat(system/services/rust-motd): Info about filesystems	ene	2023-03-25
\|
*	Feat(system/services/rust-motd): Show status of ssl-certs	ene	2023-03-25
\|
*	Fix(system/services/rust-motd): Add fail2ban binary	ene	2023-03-25
\|
*	Feat(system/services/fail2ban): Add dovecot jail	ene	2023-03-25
\| \| \| \|	This should reduce the log spam even further.
*	Fix(system/services/fail2ban): Make db persistent	ene	2023-03-25
\|
*	Feat(system/services/fail2ban): Add fail2ban	ene	2023-03-25
\| \| \| \|	This should clear the logs somewhat.
*	Fix(system/services/minecraft): Remove to make compile	ene	2023-03-19
\|
*	Fix(system/mail): Only accept connections on safe ports	ene	2023-03-19
\| \| \| \| \|	It is sort of standard to ignore connections over the unencrypted port 25, thus we are doing the same.
*	Fix(system/users): Remove unneeded root ssh login keys	ene	2023-03-18
\| \| \| \| \|	All users are in the wheel group, thus direct login as root is no longer needed.
*	Refactor: Use better file layout	ene	2023-03-18