| Commit message (Collapse) | Author | ||
|---|---|---|---|
| 3 days | modules/prometheus: Support prometheus servers in agent mode | Benedikt Peetz | |
| 3 days | modules/monitoring/prometheus: Actually configure the systemd_exporter correctly | Benedikt Peetz | |
| 3 days | modules/monitoring/prometheus: Remove pointless fqdn label | Benedikt Peetz | |
| 3 days | modules/nginx: Get rid of the `selfsign` parameter | Benedikt Peetz | |
| Nowadays, all our tests also run with valid CA certificates. | |||
| 3 days | modules/monitoring/grafana/dashboards: Use better dashboards | Benedikt Peetz | |
| 3 days | modules/monitoring/{grafana,loki}: Small code-cleanups | Benedikt Peetz | |
| 3 days | modules/monitoring/prometheus: Actually configure the systemd exporter | Benedikt Peetz | |
| 3 days | modules/monitoring/scrutiny: Disable | Benedikt Peetz | |
| There are just no real smartctl metrics to track on a vps. | |||
| 3 days | modules/monitoring/{scrutiny,prometheus}: Remove netdata | Benedikt Peetz | |
| The metrics generated here are more-or less similar to the node exporter. I don't see why we would need to run both. And netdata is even more pro-“AI” so I would like to not-depend on it. | |||
| 3 days | modules/monitoring/scrutiny: Don't expose web-service | Benedikt Peetz | |
| This just doesn't make sense, when we also have grafana. | |||
| 3 days | modules/nginx: Enable status page for prometheus exporter | Benedikt Peetz | |
| 3 days | modules/monitoring/{prometheus,scrutiny}: Move smartctl exporting to scrutiny | Benedikt Peetz | |
| 3 days | modules/monitoring/: Persist all state directories | Benedikt Peetz | |
| 3 days | modules/monitoring/: Hard-code all the {u,g}ids | Benedikt Peetz | |
| 3 days | modules/monitoring/grafana: Put behind anubis | Benedikt Peetz | |
| 3 days | modules/monitoring/scrutiny: Don't enable if not enabled | Benedikt Peetz | |
| 3 days | {modules,test}/monitoring: Init basic version | Benedikt Peetz | |
| 4 days | {modules,tests}/{git-,}back: Remove/disable | Benedikt Peetz | |
| We are just not using it, and it's effectively not maintained. | |||
| 2026-07-07 | mastodon: Update patch to newer mastodon version | Benedikt Peetz | |
| 2026-06-13 | modules/atuin-sync: Replace `atuin` with `turtle` | Benedikt Peetz | |
| 2026-05-30 | modules/system-info: Add last missing port information | Benedikt Peetz | |
| The current system-info is thus now: ``` # server2 ## Virtual Hosts atuin-sync.vhack.eu etebase.vhack.eu: dav.vhack.eu gallery.s-schoeffel.de git.foss-syndicate.org invidious-router.vhack.eu: video.fosswelt.org invidious-router.sils.li issues.foss-syndicate.org nextcloud.vhack.eu redlib.vhack.eu sharkey.vhack.eu source.foss-syndicate.org source.vhack.eu taskchampion.vhack.eu ## Open ports TCP 22: ssh TCP 25: mail-smtp TCP 53: dns TCP 80: http TCP 443: https TCP 465: mail-smtp-tls TCP 993: mail-imap-tls TCP 995: mail-pop3-tls UDP 53: dns # server3 ## Virtual Hosts b-peetz.de mastodon.vhack.eu matrix.vhack.eu miniflux.foss-syndicate.org: rss.foss-syndicate.org rss.vhack.eu miniflux.vhack.eu openpgpkey.b-peetz.de openpgpkey.s-schoeffel.de openpgpkey.sils.li openpgpkey.vhack.eu peertube.vhack.eu rocie.vhack.eu trinitrix.vhack.eu vhack.eu ## Open ports TCP 22: ssh TCP 53: dns TCP 80: http TCP 443: https TCP 64738: murmur UDP 53: dns UDP 64738: murmur ``` | |||
| 2026-05-30 | modules/taskchampion-sync: Avoid issue with DynamicUser | Benedikt Peetz | |
| 2026-05-30 | modules/mail: Stop persisting now unused directory | Benedikt Peetz | |
| The sieve script directory is now below the `/var/lib/mail/vmail` directory. | |||
| 2026-05-30 | treewide: Replace usages of `pkgsUnstable` with `pkgs` | Benedikt Peetz | |
| With the new nixos release, the stuff that was only in `pkgsUnstable` is now also in `pkgs`. | |||
| 2026-05-30 | modules/mail: Update to nixos-26.05 | Benedikt Peetz | |
| 2026-05-30 | modules/cgit: Switch to plain `cgit` | Benedikt Peetz | |
| `cgit-pink` has been removed, as it's no longer maintained. | |||
| 2026-05-30 | modules/murmur: Switch to new names for tls options | Benedikt Peetz | |
| 2026-05-30 | server3/stalwart: Disable | Benedikt Peetz | |
| There is no, and really no, reason why this service is running. | |||
| 2026-05-30 | server2/nextcloud: Upgrade from nextcloud32 to nextcloud33 | Benedikt Peetz | |
| 2026-03-22 | modules/system-info: Add missing port | Benedikt Peetz | |
| 2026-03-22 | {modules,tests}/rocie: Init | Benedikt Peetz | |
| 2026-02-15 | modules/cgit: Stop exposing all repositories as http clones | Benedikt Peetz | |
| This feature has recently been added to nixpkgs to fix the security vulnerability. | |||
| 2025-12-18 | modules/matrix: Remove failing postgresql post-start code | Benedikt Peetz | |
| This code stops postgrsql from starting. | |||
| 2025-12-18 | modules/anubis: Make sure ngnix is actually enabled | Benedikt Peetz | |
| 2025-12-18 | modules/mail: Apply migrations and set initial stateVersion | Benedikt Peetz | |
| The server is already migrated, as such we should also try to apply this update in the very near future. | |||
| 2025-12-18 | modules/sharkey: Use the up-streamed nixpkgs module | Benedikt Peetz | |
| This works now, as we updated to 25.11. | |||
| 2025-12-18 | modules/rust-motd: Avoid using the deprecated `runCommandNoCCLocal` | Benedikt Peetz | |
| 2025-12-18 | modules/stalwart-mail: Use the nixpkgs' starwart package | Benedikt Peetz | |
| Ours is hopelessly broken and right now also pointless. | |||
| 2025-12-18 | modules/nextcloud: Update to nextcloud 32 | Benedikt Peetz | |
| 2025-12-18 | modules/anubis: Introduce and setup | Benedikt Peetz | |
| This should hopefully reduce the workload applied to our servers. Notably, `cgit` is not yet behind it, as it requires more, considering that it is a fgi application. | |||
| 2025-08-04 | modules/sharky: Add stup option for `services.melisearch.settings` | Benedikt Peetz | |
| We use the unstable module that sets this options (behind a `lib.mkIf false`). They are not needed, but the module system needs them to exist. | |||
| 2025-08-04 | Revert "{modules,test}/jitsi-meet: Init" | Benedikt Peetz | |
| This reverts commit 8040a61b373621e3e8a3684aecbb5cbf66d895c7. Jitsi did not work, and I think that it will need a better approach than this (i.e., updates to the NixOS module). | |||
| 2025-08-03 | modules/grocy: Initgrocy-new | Benedikt Peetz | |
| 2025-07-29 | {modules,test}/jitsi-meet: Init | Benedikt Peetz | |
| 2025-07-13 | modules/sharkey: Drop pointless dependency on `network-online.target` | Benedikt Peetz | |
| Sharkey can start without network and therefore does not need this dependency. | |||
| 2025-07-13 | {modules,pkgs}/sharkey: Use the sharkey package and module from nixpkgs | Benedikt Peetz | |
| Sharkey was package in nixpkgs. | |||
| 2025-07-06 | modules/users: Apply new formatting | Benedikt Peetz | |
| 2025-06-23 | modules/rust-motd: Add new `cg_stats` and `load_avg` sections | Benedikt Peetz | |
| 2025-06-23 | modules/rust-motd: Use correct name for `fail_2_ban` section | Benedikt Peetz | |
| This was change in one of the last releases. | |||
| 2025-06-23 | modules/rust-motd: Remove pointless ssl certificate section | Benedikt Peetz | |
| The certificates are auto-renewed. As such, we don't need to know, when they expire. | |||
 |
index : nixos-server | |
| nixos-config for vhack.eu servers https://vhack.eu | vhack.eu |
| aboutsummaryrefslogtreecommitdiffstats |