nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author	Age
*	modules/stalwart-mail: Set a default value for `principals`	Benedikt Peetz	4 days
\|
*	modules/stalwart-mail: Include full systemd service and set correct dependencies	Benedikt Peetz	4 days
\| \| \| \| \|	This also starts `nginx` so that we can complete http-01 acme challenges.
*	modules/stalwart-mail: Select DKIM keys per-domain	Benedikt Peetz	4 days
\|
*	modules/stalwart-mail: Avoid hardcoding `vhack.eu` email address	Benedikt Peetz	4 days
\|
*	modules/dns: Add service dependencies	Benedikt Peetz	4 days
\|
*	modules/dns: Set a reasonable verbosity level	Benedikt Peetz	4 days
\| \| \| \|	The default is way too quiet.
*	modules/dns: Provide the option to open the required firewall ports	Benedikt Peetz	4 days
\|
*	modules/dns: Remove `lib.debug` calls	Benedikt Peetz	4 days
\|
*	modules/dns/dns/types/records/PTR.nix: Special case for reverse IP lookups	Benedikt Peetz	4 days
\| \| \| \|	This makes implementing a DNS server in tests easier.
*	pkgs/stalwart-mail-free: Also patch to use the platform CA store	Benedikt Peetz	4 days
\| \| \| \| \| \| \| \|	This is needed for the test. The general changes are caused by the requirement to update the `chargoHash`, which currently only works with this counter intuitive attribute overriding.
*	modules/dns/dns/types/records/MTA-STS.nix: Init	Benedikt Peetz	4 days
\|
*	modules/dns/dns/types/records/DMARC.nix: Reference the correct RFC	Benedikt Peetz	4 days
\| \| \| \| \|	RFC 7208 is titled “Sender Policy Framework (SPF) for Authorizing Use of Domains in Email, Version 1”, whilst RFC 7489 is titled “Domain-based Message Authentication, Reporting, and Conformance (DMARC)”
*	.envrc: Add ./scripts to PATH	Benedikt Peetz	4 days
\|
*	scripts/testInteractive: Actually build the interactive test driver	Benedikt Peetz	4 days
\| \| \| \|	Otherwise, the experience is simply worse.
*	modules/stalwart-mail: Move the package to the `pkgs` subtree	Benedikt Peetz	4 days
\|
*	{modules,tests}/dns: Init	Benedikt Peetz	4 days
\| \| \| \|	Most of the dns module was taken from: <https://github.com/nix-community/dns.nix>
*	tests/email: Test the mvp	Benedikt Peetz	4 days
\|
*	module/stalwart-mail: Init initial version	Benedikt Peetz	4 days
\|
*	scripts/test_build.sh: Init	Benedikt Peetz	4 days
\|
*	scripts/test_interactive.sh: Actually fail when `nix build` fails	Benedikt Peetz	4 days
\|
*	pkgs/back/update.sh: Don't worry about incompatible semver changes	Benedikt Peetz	6 days
\| \| \| \| \|	`back` is usually not big enough to be affected by semver incompatible changes. (And if it's affected, fixing it is usually really simple.)
*	pkgs/back/.envrc: Stop fetching when loading the shell	Benedikt Peetz	6 days
\|
*	treewide: Update	Benedikt Peetz	6 days
\|
*	fix(hosts/server2/redirects): Also recognize the old source.vhack.eu redirect	Benedikt Peetz	2025-02-09
\|
*	modules/redlib: Use `nginx`'s module redirect mechanism	Benedikt Peetz	2025-02-09
\|
*	modules/nginx: Keep the `$request_uri` when redirecting	Benedikt Peetz	2025-02-09
\|
*	README.md: Fix typos	Benedikt Peetz	2025-02-09
\|
*	modules/nix-sync: Correctly merge `extraSettings` and the needed vhost config	Benedikt Peetz	2025-02-07
\|
*	hosts/server3/websites: Host nix-sync on server3	Benedikt Peetz	2025-02-07
\|
*	hosts/server2/websites: Correct extraSettings for wkd	Benedikt Peetz	2025-02-04
\| \| \| \| \|	The `/.well-known/openpgpkey/hu/` path does not exist. Thus remove the erroneous `hu/` at the end.
*	hosts/server2/websites: Use the new repository urls	Benedikt Peetz	2025-02-04
\| \| \| \| \| \|	This changes: https://codeberg.org/bpeetz/b-peetz.de.git -> https://git.foss-syndicate.org/bpeetz/b-peetz.de.git https://codeberg.org/vhack.eu/gpg_wkd.git -> https://git.foss-syndicate.org/vhack.eu/pgp-wkd.git
*	modules/nix-sync: Actually enable	Benedikt Peetz	2025-02-04
\| \| \| \| \|	This includes the obvious changes, ensuring that it follows our current best-practices.
*	docs(README.md): Init	Benedikt Peetz	2025-02-03
\|
*	refactor(modules/default.nix): Remove now unneeded arguments to `mkByName`	Benedikt Peetz	2025-02-03
\|
*	feat(secrets.nix): Automatically generate the secrets list for each host	Benedikt Peetz	2025-01-29
\|
*	build(flake): Update to the latest `nixLib` version	Benedikt Peetz	2025-01-29
\|
*	refactor(hosts/{server2,server3}): Move the backup secrets in a directory	Benedikt Peetz	2025-01-29
\|
*	feat(matrix): make secrets configurable	Silas Schöffel	2025-01-25
\|
*	feat(mastodon): make secrets configurable	Silas Schöffel	2025-01-25
\|
*	feat(miniflux): make secrets configurable	Silas Schöffel	2025-01-25
\|
*	feat(peertube): make secrets configurable	Silas Schöffel	2025-01-25
\|
*	feat(secrets.nix): remove server1	Silas Schöffel	2025-01-25
\|
*	feat(system): remove	Silas Schöffel	2025-01-25
\| \| \| \|	This only contains unused and unwanted services
*	feat(hosts)!: remove server1	Silas Schöffel	2025-01-25
\| \| \| \|	This host is unused and therefore unneeded
*	feat(etesync): migrate to server2	Silas Schöffel	2025-01-25
\|
*	fix(modules/etebase): migrate to new vhack.persist option	Silas Schöffel	2025-01-25
\|
*	feat(redlib): move to server2	Silas Schöffel	2025-01-25
\|
*	fix(module/peertube): update emailhost	Silas Schöffel	2025-01-25
\|
*	fix(modules/mastodon): update emailhost	Silas Schöffel	2025-01-25
\|
*	feat(modules/mail): init on server2	Silas Schöffel	2025-01-25
\|