about summary refs log tree commit diff stats
path: root/modules/by-name/ng/nginx/module.nix (unfollow)
Commit message (Collapse)Author
2 dayspkgs/stalwart-mail-patched/spamfilter: Provide infrastructure to update itBenedikt Peetz
Otherwise, this package will never be updated.
2 dayspkgs/stalwart-mail-patched: Use different native-ca-roots patchBenedikt Peetz
My patch was no longer working, as it was written against an older version of stalwart. This patch is now sourced directly from a GitHub pr, that was closed at the 21st of may. Upstream says, that they will support that in a future version, but I am honestly just waiting for the rug pull at this point. They are no longer accepting PRs, focusing more and more on new features, whilst the actual software is still very difficult to debug. But, with all this said, their current source code is available under the AGPL, so even if they rug pull (which might be difficult, due to fact, that their CLA is from the FSFE), a base for forking still persists.
2 daystests/taskchampion-sync: Use correct test function nameBenedikt Peetz
`wait_until_succeed` is not defined, but `wait_until_succeeds` is.
2 daystests/{atuin-sync,email-{dns,http},sharkey,taskchampion-sync}: Share acme setupBenedikt Peetz
In the wake of `network-online.target`'s removal from `multi-user.target`, I noticed, that this acme ca setup code is effectively duplicated. This commit now deduplicates it.
2 dayspkgs/sharkey: Remove nixpkgs unstable wrapperBenedikt Peetz
25.05 has hit.
2 dayshosts/server2: Enable new `git-back` serviceBenedikt Peetz
2 daysflake.nix: Use nixos 25.05 branch of simply mail server instead of masterBenedikt Peetz
2 daysmodules/redlib: Remove old `libreddit` aliasBenedikt Peetz
2 daysflake: Update to nixpkgs 25.05Benedikt Peetz
2 daysmodules/git-back: Init with the out-of-tree backBenedikt Peetz
3 dayspkgs/back: RemoveBenedikt Peetz
Back has been moved out-of-tree.
3 daysflake.nix: Use the packaged version of `ragenix`Benedikt Peetz
3 dayshosts/default.nix: Remove now unneeded `finalizeFunction`Benedikt Peetz
3 daystests/README.md: FormatBenedikt Peetz
3 dayspkgs/stalwart-mail: Update to nixos 25.05Benedikt Peetz
Now the stalwart-mail package is by default free. As such, we could drop the respective patches.
2025-05-05hosts/server2: Enable atuin-syncBenedikt Peetz
2025-05-05modules/atuin-sync: InitBenedikt Peetz
2025-05-04modules/matrix: Provide postgresql with a correct sql statementBenedikt Peetz
2025-05-04modules/nextcloud: add calendar, contacts, tasks appsSilas Schöffel
2025-04-28pkgs/taskchampion-sync: Put the sync server behind a ngnix proxyBenedikt Peetz
I realized, that the new taskchampion-sync-server uses a http api (instead of the custom protocol of taskserver). As such, we obviously want to put it behind a ngnix reverse proxy.
2025-04-28pkgs/sharkey: 2025.2.2 -> 2025.2.3Benedikt Peetz
There is no change log, as this is a security update.
2025-04-25modules/sharkey: Add required `@chown` syscall group to allow listBenedikt Peetz
The `~@priviledged` needed to go, as `@chown` is part of this group.
2025-04-25tests/sharkey-image: Rename to `sharkey-cpu`Benedikt Peetz
Image upload still fails, even with this test passing.
2025-04-24modules/sharkey: Ensure, that it can access the host's CPUsBenedikt Peetz
This is, for some reason, needed for image uploads to sharkey.
2025-04-24modules/system-info: Provide a nice warning message, if a port is not yet ↵Benedikt Peetz
registered
2025-04-24modules/matrix: Use the typed NixOS for user and db creationBenedikt Peetz
Note, that I have no way to test if this is actually going to work (no tests for matrix). But, I assume that it is not going to pose problems, as we are not migrating the db and these options won't remove state.
2025-04-24modules/matrix: Group `vhack` attr keys togetherBenedikt Peetz
2025-04-24modules/mastodon: Group `vhack` keys togetherBenedikt Peetz
2025-04-24flake.nix: Remove gnutlsBenedikt Peetz
We are not generating taskserver certificates anymore.
2025-04-23modules/taskchampion: Make its data directory owned by taskchampion userBenedikt Peetz
2025-04-23zones/vhack.eu: Actually set the `sharkey.vhack.eu` subdomainBenedikt Peetz
2025-04-23modules/stalwart-mail: Add recommended proxy settings for stalwarts-proxyBenedikt Peetz
This includes setting things, like setting the `X-Forwarded-For` header.
2025-04-23modules/constants: Also add a user to each group, so that duplicated gids ↵Benedikt Peetz
are avoided
2025-04-23tests/email-http: Use the factored out DNS serverBenedikt Peetz
2025-04-23hosts/server2: Use the internal stalwart directoryBenedikt Peetz
2025-04-23tests/email-http: Test the http self-service availabilityBenedikt Peetz
2025-04-23modules/stalwart-mail: Don't restart the systemd serviceBenedikt Peetz
Restarting might be useful, if stalwart is actually _running_ in prod, but currently the constant restart makes it very difficult to debug (or even stop) the service.
2025-04-23modules/stalwart-mail: Enable the http self-service interfaceBenedikt Peetz
2025-04-23modules/nginx: Set the "acme" group as group of the "acme" userBenedikt Peetz
For some reason, this is not done already. Setting this prevents an assertion being thrown, that the "acme" user does not have a group.
2025-04-23modules/stalwart-mail: Allow both nginx and stalwart-mail access to the certBenedikt Peetz
This is needed for the http challenge (and for the potential to use nginx as a proxy in the future.)
2025-04-23modules/stalwart-mail: Explicitly list out valid password hashesBenedikt Peetz
If a password hash does not match stalwart's know ones, it will just treat it as plaintext. This is obviously very bad, and should be avoided.
2025-04-23modules/stalwart-mail: Make `cfg.principals` nullableBenedikt Peetz
This makes it possible to use the internal storage
2025-04-23