|  | Commit message (Collapse) | Author | Age | 
|---|
| | 
| 
| 
| | This doesn't work as nginx doesn't have the right permissions. | 
| | |  | 
| | |  | 
| |\ |  | 
| | | |  | 
| | | |  | 
| | | |  | 
| | | 
| | 
| | 
| | | This is done to comply with the naming scheme employed at `vhack.eu`. | 
| | | 
| | 
| | 
| | 
| | | Otherwise, etebase might use the ipv6 ip, whilst nginx uses the ipv4
version. This prevents this issue | 
| | | |  | 
| | | |  | 
| | | |  | 
| | | |  | 
| | | |  | 
| | | |  | 
| | | |  | 
| |/ |  | 
| | |  | 
| | 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| | # Please enter the commit message for your changes. Lines starting
# with '#' will be ignored, and an empty message aborts the commit.
#
# On branch main
# Your branch is up to date with 'origin/main'.
#
# Changes to be committed:
#	modified:   system/users/default.nix
# | 
| | |  | 
| | |  | 
| |\ |  | 
| | | |  | 
| | | |  | 
| |/ |  | 
| | |  | 
| | |  | 
| | |  | 
| | 
| 
| 
| 
| 
| | This fully removes the human-factor and allows it to just run
`./generate` to generate all required certificates and keys (with the
needed extra keys and certificates) | 
| | |  | 
| | 
| 
| 
| 
| | These should be declared in the developer's editor config, and thus are
just useless here. | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| | The current setup now runs the `taskserver.vhack.eu` domain with a
Let's Encrypt certificate and additionally uses a self-signed CA
certificate to validate clients.
The shell scripts used to generate the CA certificate and the derived
client certificate (and keys) are taken nearly unmodified from the
upstream repository [1].
[1]: https://github.com/GothenburgBitFactory/taskserver/tree/9794cff61e56bdfb193c6aa4cebb57970ac68aef/pki | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | |  |