nixos-server/system/impermanence/mods, branch v0.19.0 nixos-config for vhack.eu servers https://vhack.eu http://git.foss-syndicate.org/vhack.eu/nixos-server/atom?h=v0.19.0 2023-11-18T18:32:43+00:00 Fix(system/impermanence): Add permissions 2023-11-18T18:32:43+00:00 sils sils@sils.li 2023-07-26T08:31:04+00:00 urn:sha1:560a0fa9abe10e0ad540e25433d42b3effcb16ae Fix(system/impermanence): Add etebase-server 2023-11-18T18:32:36+00:00 sils sils@sils.li 2023-07-26T08:15:51+00:00 urn:sha1:b43cef9cbb8d9488861a9e06657e192d81e32327 feat(treewide): add mastodon 2023-10-12T18:49:27+00:00 sils sils@sils.li 2023-10-12T18:49:27+00:00 urn:sha1:631e9c0fc66e7c0493ea447dfcfcfca93ce0d72c fix(system/services/murmur): Allow murmur's user to read certs 2023-10-03T16:08:45+00:00 Soispha soispha@vhack.eu 2023-10-03T15:29:00+00:00 urn:sha1:c154fa39a7f68a17713eff260c45c4d23835feb1 feat(system/services/taskserver): Init 2023-10-01T20:07:22+00:00 Soispha soispha@vhack.eu 2023-10-01T20:07:22+00:00 urn:sha1:cd75ff6797386c5924a2f0bbc62eadf1c6e2725d This is the server part used in combination with Taskwarrior to regain control over the unwieldy amount of task, that accumulate over the day. Fix(system/impermanence): Keycloak was actually postgresql 2023-07-27T08:05:04+00:00 Soispha soispha@vhack.eu 2023-07-27T08:05:04+00:00 urn:sha1:595ab5cfd8bf28c41dfe1bc3ae043c1e407e6d4e Feat(system/services/matrix/bridges): Add mautrix-whatsapp bridge 2023-07-27T07:45:30+00:00 Soispha soispha@vhack.eu 2023-07-27T07:45:30+00:00 urn:sha1:7fe499ee1ff7ecd88b4ecfc96b200ed2704468a7 Fix(system/services/matrix): Move persisting files ctrl to impermanence 2023-07-22T15:58:36+00:00 Soispha soispha@vhack.eu 2023-07-22T15:28:02+00:00 urn:sha1:3982b3d5abed368985dd9d325b6b544e86701d7e Fix(system/secrets): Ensure that ssh host key is available in stage 2 2023-07-08T14:58:23+00:00 Soispha soispha@vhack.eu 2023-07-08T14:58:23+00:00 urn:sha1:5bb8cb35c5d084a34cbf80f76502a567c55175ec The `/var/lib/sshd` directory is only mounted _after_ the stage 2 init, thus also after the system activation. Agenix, which runs in the system activation needs the hostkey however to decrypt the secrets needed for some units (as of right now only keycloak). Alas the only way I see to achieve that is to store the ssh hostkey directly on /srv, which is mounted before (it's marked as 'neededForBoot' after all) the stage 2 init. It should be possible to achieve this with impermanence however, as `/var/log` is mounted in the stage 1 init; The problem is that I have no idea _why_ only this is the only directory mounted and nothing else. Fix(system/impermanence/m/mail): Add rspamd dir 2023-07-08T14:01:54+00:00 Soispha soispha@vhack.eu 2023-07-08T12:18:57+00:00 urn:sha1:a0d04e513a7154931b2ed192d91d2207eea1faef