nixos-config for vhack.eu servers https://vhack.eu http://git.foss-syndicate.org/vhack.eu/nixos-server/atom?h=v0.22.0 2023-11-07T15:44:08+00:00 2023-11-07T15:44:08+00:00 Soispha soispha@vhack.eu 2023-11-07T15:44:08+00:00 urn:sha1:961729eed1540a7633f5200c63dcf8650d35c56f This fully removes the human-factor and allows it to just run `./generate` to generate all required certificates and keys (with the needed extra keys and certificates) 2023-10-16T15:20:00+00:00 Soispha soispha@vhack.eu 2023-10-04T18:11:42+00:00 urn:sha1:1dd6f8d3b4d7dc93095e662aaca190d3fe1be264 The current setup now runs the `taskserver.vhack.eu` domain with a Let's Encrypt certificate and additionally uses a self-signed CA certificate to validate clients. The shell scripts used to generate the CA certificate and the derived client certificate (and keys) are taken nearly unmodified from the upstream repository [1]. [1]: https://github.com/GothenburgBitFactory/taskserver/tree/9794cff61e56bdfb193c6aa4cebb57970ac68aef/pki