aboutsummaryrefslogtreecommitdiffstats
path: root/modules/by-name (unfollow)
Commit message (Collapse)Author
2025-03-09modules/dns/dns/types/records/PTR.nix: Special case for reverse IP lookupsBenedikt Peetz
This makes implementing a DNS server in tests easier.
2025-03-09modules/dns/dns/types/records/MTA-STS.nix: InitBenedikt Peetz
2025-03-09modules/dns/dns/types/records/DMARC.nix: Reference the correct RFCBenedikt Peetz
RFC 7208 is titled “Sender Policy Framework (SPF) for Authorizing Use of Domains in Email, Version 1”, whilst RFC 7489 is titled “Domain-based Message Authentication, Reporting, and Conformance (DMARC)”
2025-03-09modules/stalwart-mail: Move the package to the `pkgs` subtreeBenedikt Peetz
2025-03-09{modules,tests}/dns: InitBenedikt Peetz
Most of the dns module was taken from: <https://github.com/nix-community/dns.nix>
2025-03-09module/stalwart-mail: Init initial versionBenedikt Peetz
2025-02-09modules/redlib: Use `nginx`'s module redirect mechanismBenedikt Peetz
2025-02-09modules/nginx: Keep the `$request_uri` when redirectingBenedikt Peetz
2025-02-07modules/nix-sync: Correctly merge `extraSettings` and the needed vhost configBenedikt Peetz
2025-02-04modules/nix-sync: Actually enableBenedikt Peetz
This includes the obvious changes, ensuring that it follows our current best-practices.
2025-01-25feat(matrix): make secrets configurableSilas Schöffel
2025-01-25feat(mastodon): make secrets configurableSilas Schöffel
2025-01-25feat(miniflux): make secrets configurableSilas Schöffel
2025-01-25feat(peertube): make secrets configurableSilas Schöffel
2025-01-25feat(etesync): migrate to server2Silas Schöffel
2025-01-25fix(modules/etebase): migrate to new vhack.persist optionSilas Schöffel
2025-01-25fix(module/peertube): update emailhostSilas Schöffel
2025-01-25fix(modules/mastodon): update emailhostSilas Schöffel
2025-01-25feat(modules/mail): init on server2Silas Schöffel
2025-01-21feat(modules/backup): initSilas Schöffel
2025-01-21fix(modules/peertube): correct email setupSilas Schöffel
2025-01-21feat(modules/matrix): init on server3Silas Schöffel
2025-01-21feat(modules/mastodon): init on server3Silas Schöffel
2025-01-21fix(peertube): migrate to server3Silas Schöffel
2025-01-20feat(modules/murmur): initSilas Schöffel
2025-01-20feat(modules/nixconfig): initSilas Schöffel
2025-01-20feat(modules/invidious-router): initSilas Schöffel
2025-01-20feat(modules/gallery): initSilas Schöffel
2025-01-20feat(miniflux): init module, host on server2Silas Schöffel
2025-01-20feat(treewide): rekey secrets to allow multiple host setupSilas Schöffel
2024-12-28fix(modules/back): add root_url to back configBenedikt Peetz
Co-authored-by: Silas Schöffel <sils@sils.li>
2024-12-26fix(modules/back): Update to the new config file inputBenedikt Peetz
2024-12-25fix(modules/back): Remove the `gitPath` from the service nameBenedikt Peetz
With it, the service names become nearly illegible.
2024-12-25feat(modules/nginx): Modularise the redirects and migrate them to server2Benedikt Peetz
The redirects always have an implicit dependency on the DNS config of the running host. As such, simply stating them for all host is never a possibility and setting them per host the only viable option.
2024-12-25fix(modules/nix-sync/internal): Fix syntax errors in shell-scriptBenedikt Peetz
2024-12-25fix(modules/dhcpcd): Also set uid/gid for the `dhcpcd` userBenedikt Peetz
Otherwise, this user's/group's owned files/directories could change when a new user is added or removed, as we do not persist `/var/lib/nixos`.
2024-12-25fix(treewide): Add constant uids and gids to each user and groupBenedikt Peetz
This allows us to avoid persisting `/var/lib/nixos`.
2024-12-25refactor(system/services/fail2ban): Migrate to `by-name`Benedikt Peetz
Additionally, I've changed to owner of the `/var/lib/fail2ban` directory to `root:root` as the main `fail2ban` service also runs under `root` and a `fail2ban` user is never created.
2024-12-25refactor(system/services/rust-motd): Migrate to `by-name`Benedikt Peetz
2024-12-25fix(modules/impermanence): Don't always persist `/var/log` and `/var/lib/nixos`Benedikt Peetz
Persisting them, without marking the `/srv` containing fs as `neededForBoot` will result in a kernel panic in the init (because `impermanence` tries to mount these directories and fails as `/srv` is still missing.) Thus, each host, that sets `/srv` to `neededForBoot` should add these directories to `vhack.persist.directories`.
2024-12-25refactor(system/users): Migrate to `by-name`Benedikt Peetz
2024-12-25fix(modules/git-server): Use `vhack.persist` for data-directoriesBenedikt Peetz
This avoids having to create them manually on the server and is, overall just generally a better way to solve this problem.
2024-12-25fix(modules/back): Use correct source-code environment variableBenedikt Peetz
2024-12-24refactor(modules/impermanence): Migrate to by-name while distributing modsBenedikt Peetz
2024-12-24fix(modules/back): Set now needed source code URL environment variableBenedikt Peetz
2024-12-24feat(modules/back): InitBenedikt Peetz
2024-12-24fix(modules/nix-sync/internal): Use correct command grouping syntaxBenedikt Peetz
Commands in parentheses (i.e., `()`) are _subshells_ and `exit`ting from these will not result in an `exit` of the actually _shell_. Thus, we use want simple command grouping and use the correct syntax for that.
2024-12-24fix(modules/disko): Actually honor `cfg.enable`Benedikt Peetz
2024-12-23style(treewide): FormatBenedikt Peetz
2024-12-21fix(modules/disko): Remove deprecated legacy type and migrate to `by-name`Benedikt Peetz