| Commit message (Collapse) | Author | Age | |
|---|---|---|---|
| * | fix(disks): Increase root tmpfs size to 6GB | Benedikt Peetz | 2024-08-14 |
| | | | | | The 2GB are just not enough. | ||
| * | refactor(nixos/openssh): Migrate from `system/services` | Benedikt Peetz | 2024-08-02 |
| | | |||
| * | refactor(nixos/{nginx, nix-sync}): Migrate from `system/services` | Benedikt Peetz | 2024-08-02 |
| | | | | | | Nix-sync was sort-of mixed into the nginx configuration, thus separating it completely seemed reasonable. | ||
| * | fix(nginx): add gallery.s-schoeffel.de | Silas Schöffel | 2024-07-11 |
| | | |||
| * | style(system/services/mastodon): Remove forgotten `pkgs-unstable` | Benedikt Peetz | 2024-06-28 |
| | | |||
| * | fix(peertube): Activate smtp support | Benedikt Peetz | 2024-06-28 |
| | | |||
| * | fix(nix-sync): Change last occurrences of `repo.path` to `repoPath` | Benedikt Peetz | 2024-06-15 |
| | | | | | | | | Using `repo.path` (with the slash on the end) results in operations on the directory, which is the symlink target. Using `repoPath` (without the slash) instead results in the intended operations on the symlink itself. | ||
| * | refactor(modules/etesync): Move to a complete module | Benedikt Peetz | 2024-06-13 |
| | | |||
| * | fix(impermanence): Re-active etesync module | Benedikt Peetz | 2024-06-13 |
| | | |||
| * | fix(libreddit): Remove manual module override | Benedikt Peetz | 2024-06-11 |
| | | | | | The fixes have been up streamed into `nixpkgs` by now. | ||
| * | fix(etesync-server): Re-activate | Benedikt Peetz | 2024-06-11 |
| | | |||
| * | fix(fail2ban): increase max retry number to 7 | Silas Schöffel | 2024-06-05 |
| | | |||
| * | fix(nix-sync): Don't try to exit in a subshell | Benedikt Peetz | 2024-06-05 |
| | | | | | | | | | The `(cmd1 && cmd2)` pattern works, but fails with commands like `exit` as the parentheses start a new subshell, which the `exit` command will then close instead of exiting the main shell. The curly brackets have the intended effect here, as they simply group the commands together. | ||
| * | fix(nix-sync): Ensure that the `target` for `ln` never ends with a `/` | Benedikt Peetz | 2024-06-05 |
| | | | | | Otherwise, `ln` tries to create the symlink _in_ the target directory. | ||
| * | fix(nix-sync): Add code-path to create a repo's path, if absent | Benedikt Peetz | 2024-06-05 |
| | | |||
| * | fix(nix-sync): Ensure that the service can write to all needed paths | Benedikt Peetz | 2024-06-01 |
| | | | | | | | | Previously, the generated service _could_ write to the directory, but wanted to create the directory, if it was absent. Creating this directory, requires to be able to write in the parent directory. This is fixed, by ensuring that the parent directories are included. | ||
| * | fix(treewide): stop using none-existent etebase user and group | Silas Schöffel | 2024-06-01 |
| | | |||
| * | fix(nix-sync): Explicitly set the `network-online.target` dependency | Benedikt Peetz | 2024-06-01 |
| | | |||
| * | fix(disko): explicitely state type of main disk | Silas Schöffel | 2024-06-01 |
| | | |||
| * | feat(etebase)!: disable etebase-server | Silas Schöffel | 2024-06-01 |
| | | | | | | | Sadly, it's author didn't manage to update to a newer version of django before the used version (3.2) reached EOL and was affected by CVE-2024-27351. It's unreasonable to continue using it. | ||
| * | fix(system/services/invidious): set db.user to invidious | Silas Schöffel | 2024-06-01 |
| | | | | | | This also changes the dbname to "invidious" which isn't mentioned in the commit message as it's the default in nixpkgs. | ||
| * | fix(treewide): use invidious-router module provided by nixpkgs | Silas Schöffel | 2024-06-01 |
| | | |||
| * | feat(system/services/nginx)!: Change meaning of `root` key | Benedikt Peetz | 2024-06-01 |
| | | | | | | | | | | | | | The `root` key was rather useless (it was always just the `/etc/.../<domain>` path.). This change gives it a real meaning. See the 'BREAKING CHANGE' section for more information. BREAKING CHANGE: Previously the `root` key denoted the _absolute_ root of a repository. Now it just denotes the root relative (i.e. a path within the built repository) to the repos cloning position. You should just remove the absolute part of the path (that, which is not an output in your built repository) | ||
| * | feat(system/services/nginx): add wkd for sils.li | Silas Schöffel | 2024-05-26 |
| | | |||
| * | feat(system/services/nginx): add wkd for s-schoeffel.de | Silas Schöffel | 2024-05-26 |
| | | |||
| * | fix(system/services/nginx/hosts): Update trinitrix source git path | Benedikt Peetz | 2024-05-26 |
| | | |||
| * | feat(system/services/nginx): Add the trinitrix website | Benedikt Peetz | 2024-05-25 |
| | | |||
| * | feat(system/services/nginx): Add the GPG WKD | Benedikt Peetz | 2024-05-25 |
| | | |||
| * | feat(system/users/soispha): Set a new gpg-based ssh key | Benedikt Peetz | 2024-05-14 |
| | | |||
| * | feat(system/servies): remove snapper | Silas Schöffel | 2024-04-26 |
| | | | | | We handle backups with restic | ||
| * | feat(system/services/fail2ban): add postfix jail | Silas Schöffel | 2024-04-25 |
| | | | | | | This bans IP Addresses which fail to login into postfix at least 3 times in 600 seconds. | ||
| * | style(system/services/mastodon): format with alejandra | Silas Schöffel | 2024-04-25 |
| | | |||
| * | fix(system/impermanence/mods/mail.nix): fix typo | Silas Schöffel | 2024-04-25 |
| | | |||
| * | fix(system/services/mastodon): change back to stable package | Silas Schöffel | 2024-04-25 |
| | | |||
| * | fix(mail): persist additional state directories | Silas Schöffel | 2024-04-24 |
| | | | | | | This preserves mail state to prevent running out of memory and thus makes our mailsetup more reliable. | ||
| * | fix(treewide): move former git-crypted files to correct location | Silas Schöffel | 2024-04-24 |
| | | | | | They were accidentally added at the wrong location in dd4b6bcfc16c7c795b697195eb6703966352d9f4 | ||
| * | fix(system/services/taskserver): Add required kernel settings | Soispha | 2024-04-02 |
| | | | | | | | These are the defaults, but I think it is better to explicitly state them to ensure that we don't suffer from a mistake, when we think about changing them in the future. | ||
| * | chore(git-crypt): Remove `git-crypt` and associated encrypted files | Soispha | 2024-03-29 |
| | | |||
| * | refactor(system/services/taskserver): Move away from git-crypt | Soispha | 2024-03-29 |
| | | |||
| * | style(system/secrets): Sort `secret.nix` and `default.nix` alphabetically | Soispha | 2024-03-29 |
| | | |||
| * | fix(system/services/libreddit): correct binary location in systemd service | Silas Schöffel | 2024-03-28 |
| | | | | | | | This is a manual fix until we get this merged into nixpkgs Co-authored-by: Benedikt Peetz <benedikt.peetz@b-peetz.de> | ||
| * | feat(system/servics/libreddit): Use the continued redlib package | Soispha | 2024-03-28 |
| | | | | | Fixes: #87 | ||
| * | fix(system/impermanence/mods/users.nix): add /root/.ssh as persistent directory | sils | 2024-03-19 |
| | | |||
| * | fix(system/services/invidious-router): add new healthcheck config | sils | 2024-03-10 |
| | | |||
| * | fix(system/services/invidious-router): remove invidious.vhack.eu from ↵ | sils | 2024-02-25 |
| | | | | | | | | instance list This is necessary because of a bug in our instance which causes search to fail under certain circumstances. | ||
| * | style(system/services/invidious-router): one list entry per line | sils | 2024-02-21 |
| | | |||
| * | fix(system/services/invidious-router): change allowed_status_codes type to int | sils | 2024-02-21 |
| | | |||
| * | fix(system/services/invidious-router): bind to 127.0.0.1 | sils | 2024-02-21 |
| | | |||
| * | fix(system/services/invidious-router): correct typo | sils | 2024-02-21 |
| | | |||
| * | feat(system/services/invidious-router): add extraDomains | sils | 2024-02-19 |
| | | |||
 |
index : nixos-server | |
| nixos-config for vhack.eu servers https://vhack.eu | Gitolite user |
| summary refs log tree commit diff stats |