blob: 0c2c077a40f6637be83d1d550993bf4208421184 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
|
# Changelog
All notable changes to this project will be documented in this file. See [conventional commits](https://www.conventionalcommits.org/) for commit guidelines.
- - -
## v0.9.0 - 2023-08-18
#### Bug Fixes
- **(system)** Binary substitution for debugging - (9685791) - sils
- **(system/secrets)** Tell (r)agenix new location of invidious hmac secret - (95b7f9d) - sils
- **(system/secrets)** make invidious settings readable for invidious - (c31ce7f) - sils
- **(system/secrets/invidious)** Change formatting of invidiousSettings - (38c2bb6) - sils
- **(system/service/invidious)** Copy their script, to remove shell escape - (542bb5d) - Soispha
- **(system/services/invidious)** Add interpreter to start script - (08eb773) - Soispha
- **(system/services/invidious)** Force the new script option to be applied - (df87e1d) - Soispha
- **(system/services/invidious)** Set correct access permissions on hmac - (c525e36) - Soispha
- **(system/services/invidious)** Check tables on startup - (b39d800) - Soispha
- **(system/services/invidious)** Quote attr names in json config - (b6d9d96) - Soispha
- **(system/services/invidious)** Specifiy database host - (704232e) - sils
- **(system/services/libreddit)** Don't open firewall - (f0a9852) - Soispha
- **(system/services/libreddit)** Actually proxy services via nginx - (097d566) - Soispha
#### Build system
- **(flake)** Update - (46dfce2) - Soispha
#### Features
- **(system)** Add invidious - (3175754) - sils
- **(system/services/libreddit)** Init - (7428d69) - Soispha
#### Miscellaneous Chores
- **(Changelog)** Delete branch specific changelogs - (112606a) - Soispha
- **(Merge)** Branch 'invidious' - (e33c36f) - Soispha
- **(version)** v0.9.0 - (74e2c16) - sils
- **(version)** v0.8.0 - (03ce680) - Soispha
- **(version)** v0.8.0 - (d9ac400) - Soispha
#### Refactoring
- **(system/secrets/invidious)** Remove unneeded files and improve names - (320cc25) - Soispha
- **(system/secrets/secrets.nix)** Remove redundant secretlist - (e1f0250) - sils
- - -
## v0.9.0 - 2023-08-13
#### Bug Fixes
- **(system)** Binary substitution for debugging - (9685791) - sils
- **(system/secrets)** Tell (r)agenix new location of invidious hmac secret - (95b7f9d) - sils
- **(system/secrets)** make invidious settings readable for invidious - (c31ce7f) - sils
- **(system/secrets/invidious)** Change formatting of invidiousSettings - (38c2bb6) - sils
- **(system/service/invidious)** Copy their script, to remove shell escape - (542bb5d) - Soispha
- **(system/services/invidious)** Add interpreter to start script - (08eb773) - Soispha
- **(system/services/invidious)** Force the new script option to be applied - (df87e1d) - Soispha
- **(system/services/invidious)** Set correct access permissions on hmac - (c525e36) - Soispha
- **(system/services/invidious)** Check tables on startup - (b39d800) - Soispha
- **(system/services/invidious)** Quote attr names in json config - (b6d9d96) - Soispha
- **(system/services/invidious)** Specifiy database host - (704232e) - sils
#### Features
- **(system)** Add invidious - (3175754) - sils
#### Miscellaneous Chores
- **(Merge)** Branch 'invidious' - (e33c36f) - Soispha
- **(version)** v0.8.0 - (03ce680) - Soispha
- **(version)** v0.8.0 - (d9ac400) - Soispha
#### Refactoring
- **(system/secrets/invidious)** Remove unneeded files and improve names - (320cc25) - Soispha
- **(system/secrets/secrets.nix)** Remove redundant secretlist - (e1f0250) - sils
- - -
## v0.8.0 - 2023-08-11
#### Features
- **(system/services/snapper)** Add - (1256cab) - Soispha
- - -
## v0.7.0 - 2023-08-04
#### Bug Fixes
- **(system/services/nix-sync)** Remove timeout on build - (dfb847a) - Soispha
- **(system/services/nix-sync)** Rebase on pulls, to allow for force pushes - (8d9ef95) - Soispha
- **(system/services/nix-sync)** Make the timer relative to the unit start - (18aa0c5) - Soispha
- **(system/users)** declare nixremote as normal user - (e326476) - sils
#### Build system
- **(flake)** Update - (7e153ea) - Soispha
#### Features
- **(system/services/nginx/hosts)** Add another domain - (81bf112) - Soispha
- **(system/users)** Add nixremote - (6e2578e) - sils
- - -
## v0.6.0 - 2023-07-28
#### Bug Fixes
- **(treewide)** Use correct function argument specification - (8350b2e) - Soispha
#### Features
- **(system/services/mail/users)** Add mailusers - (a3eed53) - Soispha
#### Refactoring
- **(system/services/nginx)** Reduce encrypted stuff to a minimum - (2b766df) - Soispha
- - -
## v0.5.1 - 2023-07-28
#### Bug Fixes
- **(system/services/mail)** Update mail users - (fe5da03) - sils
- - -
## v0.5.0 - 2023-07-27
#### Bug Fixes
- **(system/impermanence)** Keycloak was actually postgresql - (595ab5c) - Soispha
- **(system/mail)** Add User - (8423cea) - sils
- **(system/services/matrix/bridges/m-wa)** Use own database - (911c3a1) - Soispha
- **(system/services/matrix/bridges/m-wa)** Correct postgresql uri - (30c0434) - Soispha
#### Features
- **(system/services/matrix/bridges)** Add mautrix-whatsapp bridge - (7fe499e) - Soispha
- - -
## v0.4.1 - 2023-07-25
#### Bug Fixes
- **(system/services/mail)** Add new user - (e03e490) - sils
#### Build system
- **(flake)** Update - (8f86be4) - sils
- - -
## v0.4.0 - 2023-07-22
#### Bug Fixes
- **(system/services/matrix)** Change registration_shared_secret_path to - (14b09a3) - sils
- **(system/services/matrix)** Add registration_shared_secret to register - (2b9502d) - sils
- **(system/services/matrix)** Move persisting files ctrl to impermanence - (3982b3d) - Soispha
- **(system/services/matrix)** Fix extra " =" in locations path - (091af41) - Soispha
#### Build system
- **(flake)** Update - (673a2ec) - Soispha
#### Features
- **(.editorconfig)** Add the configuration for all files - (96aea47) - Soispha
- **(system)** Add matrix-synapse - (b59b25f) - sils
- **(system/secrets)** Add matrix-synapse_registration_shared_secret - (3cf90fc) - sils
- **(system/services)** Add matrix synapse - (50d5091) - sils
#### Miscellaneous Chores
- **(system/secrets)** Rekey to support new public key - (8c8ead4) - Soispha
- **(system/secrets)** Add sils' public key - (e65c5ff) - sils
#### Style
- **(treewide)** Format after removing vim lines - (20a566f) - Soispha
- - -
## v0.3.0 - 2023-07-10
#### Bug Fixes
- **(host/server1)** Use working path to disk - (26b6c91) - Soispha
- **(system/disks)** Change partitioning scheme to support gpt/bios boot - (40458f4) - Soispha
- **(system/impermanence/m/mail)** Add rspamd dir - (a0d04e5) - Soispha
- **(system/impermanence/m/users)** Make /home readable - (8c1dd93) - Soispha
- **(system/secrets)** Update after redeploy - (778f8ad) - Soispha
- **(system/secrets)** Ensure that ssh host key is available in stage 2 - (5bb8cb3) - Soispha
- **(system/services/keycloak)** Use agenix to store passwd - (265eb9d) - Soispha
- **(system/services/nix-sync)** Nix build needs access to /proc/stat - (123a8d9) - Soispha
- **(treewide)** Move all persistent dirs to impermanence to set permissions - (7815ef2) - Soispha
#### Documentation
- **(notes)** Add section about redeployment - (3ea6a58) - Soispha
#### Features
- **(flake)** Add agenix module - (78b566e) - Soispha
- **(system/disks)** Add disko - (d176a33) - Soispha
#### Miscellaneous Chores
- **(.gitattributes)** Remove removed acme path - (81cf12b) - Soispha
#### Refactoring
- **(system/impermanence)** Move to own directory - (2a6b022) - Soispha
- - -
## v0.2.0 - 2023-07-07
#### Bug Fixes
- **(system)** Import everything - (a1758ed) - Soispha
- **(system)** Import everything - (07f1e4a) - Soispha
- **(system/fs-layout)** Remove persistent dir as it's now in /srv - (ce36bb2) - Soispha
- **(system/fs_layout/impermanence)** Make sshd dir 755 - (4fdf20b) - Soispha
- **(system/services)** Move acmeWebRoot back to /var/lib/acme - (532412a) - Soispha
- **(system/services)** Inherit acmeRoot manually - (80e5776) - Soispha
- **(system/services/acme)** Leave certs generation to nixos - (1f6ff65) - Soispha
- **(system/services/git-sync)** Use correct systemd options - (77e512a) - Soispha
- **(system/services/git-sync)** Switch to str to avoid impurity - (a8ffaea) - Soispha
- **(system/services/git-sync)** Purge assertion, as we're always on linux - (74a735b) - Soispha
- **(system/services/mail)** Tell git-crypt new users.nix location - (cdea671) - sils
- **(system/services/nginx)** Set the correct acme webRoot - (252d983) - Soispha
- **(system/services/nginx)** Create nix-sync cache through impermanence - (869d74c) - Soispha
- **(system/services/nginx)** Remove slash from acme webroot - (bec5cf4) - Soispha
- **(system/services/nginx)** Actually enable git-sync - (374c499) - Soispha
- **(system/services/nginx/hosts)** Inherit acmeRoot setting - (990cb3c) - Soispha
- **(system/services/nix-sync)** Guard deletion of `repo.path` - (16da0f2) - Soispha
- **(system/services/nix-sync)** Pull before rebuilding - (3df8d67) - Soispha
- **(system/services/nix-sync)** Generate the needed repo paths - (5bed7c8) - Soispha
- **(system/services/nix-sync)** Rebuild website on gc - (393f0e6) - Soispha
- **(system/services/nix-sync)** Really remove last reference to git-sync - (0b36dbd) - Soispha
- **(system/services/nix-sync)** Small typos in ExecStart - (0ac9885) - Soispha
- **(system/services/nix-sync)** Use cache directory - (6e18fa4) - Soispha
- **(system/services/nix-sync)** Use correct git urls - (9f9a140) - Soispha
- **(system/services/nix-sync)** Generate root independent of path - (a505c18) - Soispha
- **(system/services/nix-sync)** Add the cachePath rw - (dd84945) - Soispha
- **(system/services/nix-sync)** Add '/etc/nginx/websites' to kept dirs - (6a5b874) - Soispha
- **(system/services/nix-sync)** Remove slash from cachePath - (33398b1) - Soispha
- **(system/services/nix-sync)** Add some required paths to unit - (e6b778b) - Soispha
- **(system/services/nix-sync)** Generate user and group if set to default - (39abbf7) - Soispha
- **(system/services/nix-sync)** Rename units to nix-sync-<domain> - (844ff55) - Soispha
- **(system/services/nix-sync)** Use correct shell escape for paths - (3c42c6b) - Soispha
- **(system/services/nix-sync)** Use correct writeScript function - (4ef4b09) - Soispha
- **(system/services/nix-sync)** Fully rename to nix-sync - (c35eeac) - Soispha
- **(system/services/openssh)** Set correct permissions on ssh dir - (f3f8e43) - Soispha
- **(system/services/openssh)** Rename to 'openssh' as the 'd' is a typo - (99d4b3b) - Soispha
#### Build system
- **(cog)** Remove 'prod' from whitelist as it's deprecated - (661a2d4) - Soispha
- **(flake)** Update - (2f10834) - Soispha
#### Documentation
- **(system/services/nix-sync)** Change last remnant from git-sync - (1fe7e31) - Soispha
#### Features
- **(system/file_system_layout)** Add impermanence - (1c4672d) - Soispha
- **(system/services/nix-sync)** Split unit into a timer and unit - (42d44c6) - Soispha
- **(system/services/nix-sync)** Remodel git-sync to make it useful - (3f2fedf) - Soispha
#### Miscellaneous Chores
- **(.gitattributes)** Remove removed acme path - (99ae5c9) - Soispha
#### Refactoring
- **(system/impermanence)** Move to own directory - (2c6c07e) - Soispha
- **(system/services/mail)** Move mail to services as it's one - (32ab086) - Soispha
- **(system/services/nginx)** Adapt to new nix-sync module - (9b88691) - Soispha
- **(system/services/nix-sync)** Consolidate into repoCachePath - (1c93755) - Soispha
#### Style
- **(system/fs_layouts)** Merge attrsets - (d0a8582) - Soispha
- **(system/services/nginx)** Use nested attr set for acme options - (9fc5517) - Soispha
- - -
## v0.1.0 - 2023-06-19
#### Bug Fixes
- **(acme)** Store certs permanently. - (ab3c9aa) - sils
- **(hosts/server1)** Rename boot.cleanTmpDir to boot.tmp.cleanOnBoot - (1412408) - sils
- **(hosts/server1/networking)** Correct ipv6 - (9243e3d) - ene
- **(hosts/server1/networking)** Fix Gateways - (7937ec7) - ene
- **(hosts/server1/networking)** Remove ipv6 route - (8711fb2) - ene
- **(services)** Remove Minecraft - (58e24a9) - ene
- **(system/hardware)** Use actually needed modules and UUID - (7881651) - ene
- **(system/mail)** give certificateScheme string as value - (1ed867d) - sils
- **(system/mail)** Allow opening ports in the firewall - (cb92ffc) - ene
- **(system/mail)** Change placeholder - (ecb274b) - ene
- **(system/mail)** Only accept connections on safe ports - (083a7cb) - ene
- **(system/mail)** Declare the password directly - (414ad16) - ene
- **(system/mail)** Make extraVirtualAliases fairer - (6ba9c14) - ene
- **(system/mail)** Disable protocols with STARTTLS - (f77f884) - ene
- **(system/packages)** Explicitly enable zsh to make Nix Vars available - (9f86401) - sils
- **(system/services)** Allow minecraft-server, which is sadly unfree - (c543776) - sils
- **(system/services)** Ignore unnecessary inputs - (84310c9) - sils
- **(system/services/acme)** Add multiple domains - (b21b38c) - Soispha
- **(system/services/fail2ban)** Make db persistent - (1fc72de) - ene
- **(system/services/keycloak)** Correct path to passwordfile - (85c28d5) - sils
- **(system/services/keycloak)** Change value of 'passwordFile' to path - (816e85b) - sils
- **(system/services/minecraft)** Reduce simulation-distance - (d2a7b0b) - sils
- **(system/services/minecraft)** Finetuning - (e002d4e) - sils
- **(system/services/minecraft)** Remove to make compile - (055f4e0) - ene
- **(system/services/nginx)** Switch to git-sync - (d4b710d) - Soispha
- **(system/services/nginx)** Correct path to index.html - (541a891) - sils
- **(system/services/opensshd)** Rename passwordAuthentication to - (973a461) - sils
- **(system/services/rust-motd)** Quote ssl-cert names - (f21504a) - ene
- **(system/services/rust-motd)** Add fail2ban binary - (64a554d) - ene
- **(system/users)** Remove unneeded root ssh login keys - (dc4334d) - ene
- **(update)** Remove - (02957ce) - Soispha
- Try to fix ipv6 - (c7507b1) - sils
- Add imap and smtp subdomains to cert - (db52be2) - sils
- correct host name and convenience changes - (cb69f4a) - ene
- Made the Minecraft config compile - (e55ac14) - ene
- Resolve merge conflicts - (cf63e41) - ene
- revert changes in configuration.nix - (5a137ce) - sils
- Changed setting names - (977f8c1) - ene
- changed to TOML config - (6ab5e73) - ene
- typo in programs field - (a116678) - ene
- Import pkgs - (f5ab486) - sils
- Import pkgs - (2238e70) - sils
- Import Minecraft Configuration - (69c6e30) - sils
#### Build system
- **(cog)** Add - (556adb7) - sils
- **(flake)** Update - (6c1700e) - Soispha
- **(flake)** Update - (84fcf9e) - sils
- **(flake)** Update - (62f1fef) - Soispha
- **(flake)** Enable direnv integration - (c5755e3) - Soispha
- **(git-crypt)** Add collaborator - (0b75981) - sils
- **(git-crypt)** Add - (eeb9d28) - Soispha
- Add update script - (58e3d0b) - Soispha
#### Documentation
- **(License)** Add - (98d8394) - Soispha
- **(contributing)** Add - (39abe7c) - Soispha
#### Features
- **(system/file_system_layout)** Add bindmount for postgresql - (7348002) - sils
- **(system/mail)** Add other users, so the admin thing works - (f2ab842) - ene
- **(system/mail)** Use '/' to separate mailboxes - (a24dc7d) - ene
- **(system/matrix/conduit)** Add matrix-conduit - (fbba7df) - Soispha
- **(system/packages)** Add git-crypt to standard packages to minimize - (2564aed) - sils
- **(system/services)** Add minecraft server - (08c7fa6) - sils
- **(system/services)** Enable keycloak - (4254157) - sils
- **(system/services/fail2ban)** Add dovecot jail - (dce980d) - ene
- **(system/services/fail2ban)** Add fail2ban - (8d8ad7a) - ene
- **(system/services/git-sync)** Add - (357f78e) - Soispha
- **(system/services/keycloak)** Add keycloak - (97baac0) - sils
- **(system/services/nginx)** Change to declarative websites - (a67e54e) - Soispha
- **(system/services/rust-motd)** Info about filesystems - (f84a9f6) - ene
- **(system/services/rust-motd)** Show status of ssl-certs - (4758e58) - ene
- **(update)** Use update flake - (77dfff2) - Soispha
- Added admin@vhack.eu mail - (9296259) - sils
- Add mailserver - (820efec) - sils
- Add Website - (7b16ff9) - sils
- Use default.nix - (1b73e04) - ene
- Imported the headless profile - (ec7f43a) - ene
- Track last login in motd - (6e0f58c) - ene
- Save passwords in hashed form directly - (19f0808) - ene
- User configuration, with secure passwords - (211ab56) - ene
- Added a nice motd through rust-motd - (b5b56d4) - ene
- Added /boot as persistent subvolume - (128e406) - ene
- Switch to inpersistent temproot. - (b32d3da) - sils
- Separate nix from root - (4f0c0ee) - sils
- Switch root into subvolume - (30e47b3) - sils
- Added support for btrfs - (a96d535) - ene
- Some security for ssh - (78aae0b) - ene
#### Miscellaneous Chores
- **(flake)** Update - (09cea3e) - Soispha
- **(flake)** Update - (a6968f5) - Soispha
- **(flake)** Update - (9d54dad) - Soispha
- **(flake)** Update and add follows for inputs - (1c9c108) - Soispha
- **(flake)** Update - (8ed3979) - sils
- **(flake)** Update - (1cacce0) - ene
#### Refactoring
- **(services)** Remove dead code - (127488e) - Soispha
- **(system/hardware)** Move hardware to host - (0b55d02) - ene
- **(system/mail)** Hide user emails - (bb4af29) - Soispha
- Use better file layout - (5a0cb28) - ene
#### Revert
- Remove Conduit - (9465eb6) - sils
#### Style
- **(system)** Format - (f7110fd) - Soispha
- **(system/mail)** Reorder options - (d6fbe64) - ene
- - -
Changelog generated by [cocogitto](https://github.com/cocogitto/cocogitto).
|