nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author
7 hours	modules/taskchampion: Make its data directory owned by taskchampion user HEAD main	Benedikt Peetz

7 hours	zones/vhack.eu: Actually set the `sharkey.vhack.eu` subdomain	Benedikt Peetz

12 hours	modules/stalwart-mail: Add recommended proxy settings for stalwarts-proxy	Benedikt Peetz
	This includes setting things, like setting the `X-Forwarded-For` header.
12 hours	modules/constants: Also add a user to each group, so that duplicated gids ↵	Benedikt Peetz
	are avoided
12 hours	tests/email-http: Use the factored out DNS server	Benedikt Peetz

12 hours	hosts/server2: Use the internal stalwart directory	Benedikt Peetz

12 hours	tests/email-http: Test the http self-service availability	Benedikt Peetz

12 hours	modules/stalwart-mail: Don't restart the systemd service	Benedikt Peetz
	Restarting might be useful, if stalwart is actually _running_ in prod, but currently the constant restart makes it very difficult to debug (or even stop) the service.
12 hours	modules/stalwart-mail: Enable the http self-service interface	Benedikt Peetz

12 hours	modules/nginx: Set the "acme" group as group of the "acme" user	Benedikt Peetz
	For some reason, this is not done already. Setting this prevents an assertion being thrown, that the "acme" user does not have a group.
12 hours	modules/stalwart-mail: Allow both nginx and stalwart-mail access to the cert	Benedikt Peetz
	This is needed for the http challenge (and for the potential to use nginx as a proxy in the future.)
12 hours	modules/stalwart-mail: Explicitly list out valid password hashes	Benedikt Peetz
	If a password hash does not match stalwart's know ones, it will just treat it as plaintext. This is obviously very bad, and should be avoided.
12 hours	modules/stalwart-mail: Make `cfg.principals` nullable	Benedikt Peetz
	This makes it possible to use the internal storage
12 hours	modules/stalwart-mail: Use correct group name for `redis-stalwart-mail`	Benedikt Peetz

14 hours	pkgs/stalwart-mail-free: Update package hash, as it changed	Benedikt Peetz
	This has to do with the underlying stalwart-mail update.
27 hours	hosts/server2: Setup sharkey	Benedikt Peetz
	Server2 is currently not so much under load, as such it seems better to split the load. # server2 ## Virtual Hosts etebase.vhack.eu: dav.vhack.eu gallery.s-schoeffel.de git.foss-syndicate.org invidious-router.vhack.eu: video.fosswelt.org invidious-router.sils.li issues.foss-syndicate.org libreddit.vhack.eu nextcloud.vhack.eu # <-- This redlib.vhack.eu sharkey.vhack.eu # <--