about summary refs log tree commit diff stats
Commit message (Collapse)AuthorAge
* modules/jitsi-meet: Lockdown prosody again jitsi-meetBenedikt Peetz2 days
|
* modules/jitsi-meet: Use unstable prosodyBenedikt Peetz2 days
|
* modules/jitsi-meet: Add missing `cjson` dependency to prosodyBenedikt Peetz2 days
|
* modules/jitsi-meet: Use different port than 8080Benedikt Peetz2 days
|
* modules/jitsi-meet: Generate room namesBenedikt Peetz2 days
| | | | This makes creating new rooms easier.
* modules/jitsi-meet: Don't lockdown prosodyBenedikt Peetz2 days
| | | | This seems to make connecting to a jitsi meeting impossible.
* modules/jitsi-meet: Encode the jitsi-meet user group idBenedikt Peetz2 days
|
* zones/vhack.eu: Add jitsi-meet subdomainBenedikt Peetz2 days
|
* {modules,test}/jitsi-meet: Init HEAD mainBenedikt Peetz3 days
|
* modules/sharkey: Drop pointless dependency on `network-online.target`Benedikt Peetz2025-07-13
| | | | | Sharkey can start without network and therefore does not need this dependency.
* {modules,pkgs}/sharkey: Use the sharkey package and module from nixpkgsBenedikt Peetz2025-07-13
| | | | Sharkey was package in nixpkgs.
* tests/rust-motd: Add a `sleep` to avoid flakinessBenedikt Peetz2025-07-06
|
* modules/users: Apply new formattingBenedikt Peetz2025-07-06
|
* flake.lock: UpdateBenedikt Peetz2025-07-06
|
* tests/rust-motd: InitBenedikt Peetz2025-06-23
|
* modules/rust-motd: Add new `cg_stats` and `load_avg` sectionsBenedikt Peetz2025-06-23
|
* modules/rust-motd: Use correct name for `fail_2_ban` sectionBenedikt Peetz2025-06-23
| | | | This was change in one of the last releases.
* modules/rust-motd: Remove pointless ssl certificate sectionBenedikt Peetz2025-06-23
| | | | | The certificates are auto-renewed. As such, we don't need to know, when they expire.
* modules/rust-motd: Generate the banner ahead of timeBenedikt Peetz2025-06-23
|
* modules/users: change sils sshkeySilas Schöffel2025-06-23
| | | | My nitrokey ceased its cooperation with my setup :(
* zones/vhack.eu: Remove Stalwart from the MX recordBenedikt Peetz2025-06-11
| | | | | | It is not (yet) correctly configured and as such refuses to deal with some emails (e.g., send from apple). This effectively means that the fallback is not tried, and the mail is never delivered.
* pkgs/stalwart-mail-patched/update.sh: Avoid building the outputBenedikt Peetz2025-06-07
| | | | We already have the nixos tests, that will fail, if this does not build.
* pkgs/stalwart-mail-patched: Actually apply overridesBenedikt Peetz2025-06-07
| | | | The previous code silently dropped the overrides.
* tests/email-dns: Reject mail, that fails DKIMBenedikt Peetz2025-06-07
| | | | This test should be very strict.
* tests/common/acme/default.nix: Inline the `acmeScripts`Benedikt Peetz2025-06-07
| | | | | There is just one script, and having it at an accessible entry point is not useful, as the script itself needs to be wrapped.
* pkgs/stalwart-mail-patched/spamfilter: Provide infrastructure to update itBenedikt Peetz2025-06-07
| | | | Otherwise, this package will never be updated.
* pkgs/stalwart-mail-patched: Use different native-ca-roots patchBenedikt Peetz2025-06-07
| | | | | | | | | | | | | | | My patch was no longer working, as it was written against an older version of stalwart. This patch is now sourced directly from a GitHub pr, that was closed at the 21st of may. Upstream says, that they will support that in a future version, but I am honestly just waiting for the rug pull at this point. They are no longer accepting PRs, focusing more and more on new features, whilst the actual software is still very difficult to debug. But, with all this said, their current source code is available under the AGPL, so even if they rug pull (which might be difficult, due to fact, that their CLA is from the FSFE), a base for forking still persists.
* tests/taskchampion-sync: Use correct test function nameBenedikt Peetz2025-06-07
| | | | `wait_until_succeed` is not defined, but `wait_until_succeeds` is.
* tests/{atuin-sync,email-{dns,http},sharkey,taskchampion-sync}: Share acme setupBenedikt Peetz2025-06-07
| | | | | | In the wake of `network-online.target`'s removal from `multi-user.target`, I noticed, that this acme ca setup code is effectively duplicated. This commit now deduplicates it.
* pkgs/sharkey: Remove nixpkgs unstable wrapperBenedikt Peetz2025-06-07
| | | | 25.05 has hit.
* hosts/server2: Enable new `git-back` serviceBenedikt Peetz2025-06-07
|
* flake.nix: Use nixos 25.05 branch of simply mail server instead of masterBenedikt Peetz2025-06-07
|
* modules/redlib: Remove old `libreddit` aliasBenedikt Peetz2025-06-07
|
* flake: Update to nixpkgs 25.05Benedikt Peetz2025-06-07
|
* modules/git-back: Init with the out-of-tree backBenedikt Peetz2025-06-07
|
* pkgs/back: RemoveBenedikt Peetz2025-06-06
| | | | Back has been moved out-of-tree.
* flake.nix: Use the packaged version of `ragenix`Benedikt Peetz2025-06-06
|
* hosts/default.nix: Remove now unneeded `finalizeFunction`Benedikt Peetz2025-06-06
|
* tests/README.md: FormatBenedikt Peetz2025-06-06
|
* pkgs/stalwart-mail: Update to nixos 25.05Benedikt Peetz2025-06-06
| | | | | Now the stalwart-mail package is by default free. As such, we could drop the respective patches.
* hosts/server2: Enable atuin-syncBenedikt Peetz2025-05-05
|
* modules/atuin-sync: InitBenedikt Peetz2025-05-05
|
* modules/matrix: Provide postgresql with a correct sql statementBenedikt Peetz2025-05-04
|
* modules/nextcloud: add calendar, contacts, tasks appsSilas Schöffel2025-05-04
|
* pkgs/taskchampion-sync: Put the sync server behind a ngnix proxyBenedikt Peetz2025-04-28
| | | | | | I realized, that the new taskchampion-sync-server uses a http api (instead of the custom protocol of taskserver). As such, we obviously want to put it behind a ngnix reverse proxy.
* pkgs/sharkey: 2025.2.2 -> 2025.2.3Benedikt Peetz2025-04-28
| | | | There is no change log, as this is a security update.
* modules/sharkey: Add required `@chown` syscall group to allow listBenedikt Peetz2025-04-25
| | | | The `~@priviledged` needed to go, as `@chown` is part of this group.
* tests/sharkey-image: Rename to `sharkey-cpu`Benedikt Peetz2025-04-25
| | | | Image upload still fails, even with this test passing.
* modules/sharkey: Ensure, that it can access the host's CPUsBenedikt Peetz2025-04-24
| | | | This is, for some reason, needed for image uploads to sharkey.
* modules/system-info: Provide a nice warning message, if a port is not yet ↵Benedikt Peetz2025-04-24
| | | | registered