nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author
9 days	modules/sharkey: Ensure, that it can access the host's CPUs	Benedikt Peetz
	This is, for some reason, needed for image uploads to sharkey.
9 days	modules/system-info: Provide a nice warning message, if a port is not yet ↵	Benedikt Peetz
	registered
9 days	modules/matrix: Use the typed NixOS for user and db creation	Benedikt Peetz
	Note, that I have no way to test if this is actually going to work (no tests for matrix). But, I assume that it is not going to pose problems, as we are not migrating the db and these options won't remove state.
9 days	modules/matrix: Group `vhack` attr keys together	Benedikt Peetz

9 days	modules/mastodon: Group `vhack` keys together	Benedikt Peetz

9 days	flake.nix: Remove gnutls	Benedikt Peetz
	We are not generating taskserver certificates anymore.
10 days	modules/taskchampion: Make its data directory owned by taskchampion user	Benedikt Peetz

10 days	zones/vhack.eu: Actually set the `sharkey.vhack.eu` subdomain	Benedikt Peetz

10 days	modules/stalwart-mail: Add recommended proxy settings for stalwarts-proxy	Benedikt Peetz
	This includes setting things, like setting the `X-Forwarded-For` header.
10 days	modules/constants: Also add a user to each group, so that duplicated gids ↵	Benedikt Peetz
	are avoided
10 days	tests/email-http: Use the factored out DNS server	Benedikt Peetz

10 days	hosts/server2: Use the internal stalwart directory	Benedikt Peetz

10 days	tests/email-http: Test the http self-service availability	Benedikt Peetz

10 days	modules/stalwart-mail: Don't restart the systemd service	Benedikt Peetz
	Restarting might be useful, if stalwart is actually _running_ in prod, but currently the constant restart makes it very difficult to debug (or even stop) the service.
10 days	modules/stalwart-mail: Enable the http self-service interface	Benedikt Peetz

10 days	modules/nginx: Set the "acme" group as group of the "acme" user	Benedikt Peetz
	For some reason, this is not done already. Setting this prevents an assertion being thrown, that the "acme" user does not have a group.
10 days	modules/stalwart-mail: Allow both nginx and stalwart-mail access to the cert	Benedikt Peetz
	This is needed for the http challenge (and for the potential to use nginx as a proxy in the future.)
10 days