nixos-server/system/services/taskserver/certs, branch jitsi-meet nixos-config for vhack.eu servers https://vhack.eu http://git.foss-syndicate.org/vhack.eu/nixos-server/atom?h=jitsi-meet 2025-01-25T20:43:25+00:00 feat(system): remove 2025-01-25T20:43:25+00:00 Silas Schöffel sils@sils.li 2025-01-25T20:42:22+00:00 urn:sha1:51085ef8f8fd4a8c8ef7fe0890ddcdc22433a94c This only contains unused and unwanted services style(treewide): Format 2024-12-23T17:41:49+00:00 Benedikt Peetz benedikt.peetz@b-peetz.de 2024-12-23T17:40:22+00:00 urn:sha1:9eb900ee6017d19d523f27d780d756cefc2b72fd build(system/services/taskserver/certs/generate): Convert to `nix-shell` 2024-12-19T16:34:46+00:00 Benedikt Peetz benedikt.peetz@b-peetz.de 2024-11-29T15:22:32+00:00 urn:sha1:a0eb6e9ad65cc7040f45d2f8c720882b19e2560e Lix does not support the newer `nix shell` shebang. feat(taskserver/certs/ca.certs.pem): Regenerate certificate 2024-10-05T19:15:23+00:00 Benedikt Peetz benedikt.peetz@b-peetz.de 2024-10-05T19:15:23+00:00 urn:sha1:a846d7b114df198910fc7628b7e78b6be23eeba5 refactor(taskserver/certs): Format scripts and allow selecting which certs to generate 2024-10-05T19:14:23+00:00 Benedikt Peetz benedikt.peetz@b-peetz.de 2024-10-05T19:14:23+00:00 urn:sha1:e160aae0d52b7e7d7403105e110f2e73ebedc5b7 chore(taskserver/certs/ca.key.pem.gpg): reencrypt with new keys as recipients 2024-10-05T18:52:11+00:00 Silas Schöffel sils@sils.li 2024-10-05T18:52:11+00:00 urn:sha1:6816e28ec3d65de81866629c932170bc0145a701 fix(system/services/taskserver/certs): Move cert generation to script 2023-11-07T15:44:08+00:00 Soispha soispha@vhack.eu 2023-11-07T15:44:08+00:00 urn:sha1:961729eed1540a7633f5200c63dcf8650d35c56f This fully removes the human-factor and allows it to just run `./generate` to generate all required certificates and keys (with the needed extra keys and certificates) feat(system/services/taskserver): Integrate Let's Encrypt certificates 2023-10-16T15:20:00+00:00 Soispha soispha@vhack.eu 2023-10-04T18:11:42+00:00 urn:sha1:1dd6f8d3b4d7dc93095e662aaca190d3fe1be264 The current setup now runs the `taskserver.vhack.eu` domain with a Let's Encrypt certificate and additionally uses a self-signed CA certificate to validate clients. The shell scripts used to generate the CA certificate and the derived client certificate (and keys) are taken nearly unmodified from the upstream repository [1]. [1]: https://github.com/GothenburgBitFactory/taskserver/tree/9794cff61e56bdfb193c6aa4cebb57970ac68aef/pki