nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author	Age
*	tests/rocie: Wait for open ports before checking starting test	Benedikt Peetz	24 hours
\| \| \| \|	That avoids some flakyness.
*	tests/{sharkey,sharkey-cpu}: Ignore	Benedikt Peetz	24 hours
\| \| \| \|	Sharkey is also in these tests insecure.
*	tests/{rocie,rust-motd}: Don't use deprecated test driver method	Benedikt Peetz	24 hours
\|
*	tests/common/email: Generate needed dkim keys for monitoring tests	Benedikt Peetz	24 hours
\|
*	tests: Remove pointless module imports	Benedikt Peetz	26 hours
\| \| \| \|	The required modules are already imported by the `runTest` function.
*	scripts/build.sh: Support `--show-trace`	Benedikt Peetz	27 hours
\|
*	{hosts/server2,modules/nextcloud}: Remove adminPassFile	Benedikt Peetz	27 hours
\| \| \| \| \|	This is no longer a supported option and admin provisioning should be done via the nextcloud cli now.
*	hosts/server2: Disable sharkey	Benedikt Peetz	27 hours
\| \| \| \|	Sharkey depends on pnpm which is now marked as insecure.
*	zones/b-peetz.de: Init	Benedikt Peetz	27 hours
\|
*	scripts/update_hosts.sh: Make upstream independent	Benedikt Peetz	27 hours
\|
*	secrets.nix: Use correct paths to the email test dkim keys	Benedikt Peetz	27 hours
\|
*	{.envrc,flake.nix}: Switch to plain `agenix`	Benedikt Peetz	27 hours
\| \| \| \| \|	`ragenix` fails with an error stating, that `secret.nix could not be parsed as json`. `agenix` works though.
*	scripts/build.sh: Add gc roots to every build output	Benedikt Peetz	27 hours
\|
*	tests/default: Also provide `lib` to the tests	Benedikt Peetz	27 hours
\|
*	modules/mail: Remove commented out code	Benedikt Peetz	27 hours
\|
*	tests/simple-nixos-mailserver: Init	Benedikt Peetz	27 hours
\| \| \| \| \| \| \|	These two tests kinda cover our email infrastructure. Importantly, all new mail gets classified as spam, which is why the tests do not really cover `rspamd`. As such things like dkim signing, correct DNS records and so on are not actually covered.
*	tests/common/email/dkim: Remove old dkim keys	Benedikt Peetz	27 hours
\|
*	tests/taskchampion-sync: Update to new `runTest` function	Benedikt Peetz	30 hours
\|
*	.gitignore: Also ignore other result symlinks	Benedikt Peetz	30 hours
\|
*	.editorconfig: Add lua section	Benedikt Peetz	30 hours
\|
*	{cog.toml,CHANGELOG.md}: Remove	Benedikt Peetz	30 hours
\|
*	flake: Update	Benedikt Peetz	3 days
\|
*	{hosts/server2,zones/vhack.eu}: Don't host redlib any longer	Benedikt Peetz	8 days
\| \| \| \| \|	It just doesn't work anymore without a lot of hand holding, for which we don't have the time.
*	modules/mail: Allow configuration of pre-generated dkim keys	Benedikt Peetz	2026-10-02
\| \| \| \| \| \| \| \|	That is essential for tests, as we cannot start the server and _then_ manually adjust the DNS settings. But also for general usage, using pre-generated keys is kinda nice, as we don't need to remember to update the DNS settings upon server re-deploy.
*	modules/mail: Move the user config away from the module	Benedikt Peetz	2026-10-02
\| \| \| \| \| \| \| \| \| \| \| \| \|	That change also does two other things: - soispha@vhack.eu now gets all the admin email That is just so, because it avoids adding another `all_admins` option, and we realistically don't get these email either. So I think that is just easier. - The acme creds are now generated via a `nginx.localhost` That means, that something (i.e. nginx) is actually responding, when you perform a GET request against the email domain. That helps for the ACME http challenges. No idea, how these worked before.
*	tests/default: Always import the extra modules and our modules	Benedikt Peetz	2026-10-02
\| \| \| \|	That reduces boilerplate somewhat.
*	tests/default: Also add an option to specify ports to wait for	Benedikt Peetz	2026-10-02
\|
*	tests/default: Allow adding stuff to the default dns config	Benedikt Peetz	2026-10-02
\|
*	tests/default: Document the `runTest` arguments	Benedikt Peetz	2026-10-02
\| \| \| \|	Ideally they would be a module :/.
*	tests/default: Warn, when a name value pair, contains more names	Benedikt Peetz	2026-10-02
\| \| \| \|	Otherwise, this leads to really confusing errors.
*	tests/email/*: Rename to stalwart email tests	Benedikt Peetz	2026-10-02
\| \| \| \|	These tests explicitly test our stalwart email module.
*	pkgs/fetchmail-common-name: Update patch, so that it applies again	Benedikt Peetz	2026-10-02
\|
*	zones/*: Deduplicate `mkSerial` function	Benedikt Peetz	2026-09-28
\|
*	modules/mail: Add `soispha@b-peetz.de` as a separate user	Benedikt Peetz	2026-09-28
\| \| \| \|	Using it via the alias is kinda sketchy, and not well supported.
*	modules/nextcloud: add onlyoffice app	Jaki Schöffel	2026-08-25
\|
*	modules/nextcloud: add mail app	Jaki Schöffel	2026-08-24
\|
*	modules/mail: add jaki.li	Jaki Schöffel	2026-08-24
\|
*	tests/git-server: Format	Benedikt Peetz	2026-08-23
\|
*	flake.{nix,lock}: Update	Benedikt Peetz	2026-08-23
\|
*	tests/monitoring-{basic,federation}: Fix tests	Benedikt Peetz	2026-08-23
\|
*	zones/default.nix: Format	Benedikt Peetz	2026-08-23
\|
*	modules/atuin: Update to newest turtle version	Benedikt Peetz	2026-08-23
\|
*	modules/users: rename user sils to jaki	Jaki Schöffel	2026-08-19
\|
*	scripts/build.sh: Default to using the dirty tree	Benedikt Peetz	2026-08-18
\|
*	scripts/update_hosts.sh: Make shellcheck happy	Benedikt Peetz	2026-08-18
\|
*	scripts/update_hosts.sh: pass user and selected hosts to ping script	Jaki Schöffel	2026-08-18
\|
*	zones/jaki-schoeffel.de: init	Jaki Schöffel	2026-08-18
\|
*	zones/j-schoeffel.de: init	Jaki Schöffel	2026-08-18
\|
*	zones/jaki.li: change SOA namserver to jaki.li	Jaki Schöffel	2026-08-18
\|
*	zones/jaki.li: init	Jaki Schöffel	2026-08-18
\|