| Commit message (Collapse) | Author | ||
|---|---|---|---|
| 14 hours | modules/system-info: Add last missing port information | Benedikt Peetz | |
| The current system-info is thus now: ``` # server2 ## Virtual Hosts atuin-sync.vhack.eu etebase.vhack.eu: dav.vhack.eu gallery.s-schoeffel.de git.foss-syndicate.org invidious-router.vhack.eu: video.fosswelt.org invidious-router.sils.li issues.foss-syndicate.org nextcloud.vhack.eu redlib.vhack.eu sharkey.vhack.eu source.foss-syndicate.org source.vhack.eu taskchampion.vhack.eu ## Open ports TCP 22: ssh TCP 25: mail-smtp TCP 53: dns TCP 80: http TCP 443: https TCP 465: mail-smtp-tls TCP 993: mail-imap-tls TCP 995: mail-pop3-tls UDP 53: dns # server3 ## Virtual Hosts b-peetz.de mastodon.vhack.eu matrix.vhack.eu miniflux.foss-syndicate.org: rss.foss-syndicate.org rss.vhack.eu miniflux.vhack.eu openpgpkey.b-peetz.de openpgpkey.s-schoeffel.de openpgpkey.sils.li openpgpkey.vhack.eu peertube.vhack.eu rocie.vhack.eu trinitrix.vhack.eu vhack.eu ## Open ports TCP 22: ssh TCP 53: dns TCP 80: http TCP 443: https TCP 64738: murmur UDP 53: dns UDP 64738: murmur ``` | |||
| 14 hours | modules/taskchampion-sync: Avoid issue with DynamicUser | Benedikt Peetz | |
| 14 hours | modules/mail: Stop persisting now unused directory | Benedikt Peetz | |
| The sieve script directory is now below the `/var/lib/mail/vmail` directory. | |||
| 14 hours | treewide: Replace usages of `pkgsUnstable` with `pkgs` | Benedikt Peetz | |
| With the new nixos release, the stuff that was only in `pkgsUnstable` is now also in `pkgs`. | |||
| 16 hours | modules/mail: Update to nixos-26.05 | Benedikt Peetz | |
| 16 hours | modules/cgit: Switch to plain `cgit` | Benedikt Peetz | |
| `cgit-pink` has been removed, as it's no longer maintained. | |||
| 16 hours | modules/murmur: Switch to new names for tls options | Benedikt Peetz | |
| 16 hours | server3/stalwart: Disable | Benedikt Peetz | |
| There is no, and really no, reason why this service is running. | |||
| 16 hours | server2/nextcloud: Upgrade from nextcloud32 to nextcloud33 | Benedikt Peetz | |
| 2026-03-22 | modules/system-info: Add missing port | Benedikt Peetz | |
| 2026-03-22 | {modules,tests}/rocie: Init | Benedikt Peetz | |
| 2026-02-15 | modules/cgit: Stop exposing all repositories as http clones | Benedikt Peetz | |
| This feature has recently been added to nixpkgs to fix the security vulnerability. | |||
| 2025-12-18 | modules/matrix: Remove failing postgresql post-start code | Benedikt Peetz | |
| This code stops postgrsql from starting. | |||
| 2025-12-18 | modules/anubis: Make sure ngnix is actually enabled | Benedikt Peetz | |
| 2025-12-18 | modules/mail: Apply migrations and set initial stateVersion | Benedikt Peetz | |
| The server is already migrated, as such we should also try to apply this update in the very near future. | |||
| 2025-12-18 | modules/sharkey: Use the up-streamed nixpkgs module | Benedikt Peetz | |
| This works now, as we updated to 25.11. | |||
| 2025-12-18 | modules/rust-motd: Avoid using the deprecated `runCommandNoCCLocal` | Benedikt Peetz | |
| 2025-12-18 | modules/stalwart-mail: Use the nixpkgs' starwart package | Benedikt Peetz | |
| Ours is hopelessly broken and right now also pointless. | |||
| 2025-12-18 | modules/nextcloud: Update to nextcloud 32 | Benedikt Peetz | |
| 2025-12-18 | modules/anubis: Introduce and setup | Benedikt Peetz | |
| This should hopefully reduce the workload applied to our servers. Notably, `cgit` is not yet behind it, as it requires more, considering that it is a fgi application. | |||
| 2025-08-04 | modules/sharky: Add stup option for `services.melisearch.settings` | Benedikt Peetz | |
| We use the unstable module that sets this options (behind a `lib.mkIf false`). They are not needed, but the module system needs them to exist. | |||
| 2025-08-04 | Revert "{modules,test}/jitsi-meet: Init" | Benedikt Peetz | |
| This reverts commit 8040a61b373621e3e8a3684aecbb5cbf66d895c7. Jitsi did not work, and I think that it will need a better approach than this (i.e., updates to the NixOS module). | |||
| 2025-08-03 | modules/grocy: Initgrocy-new | Benedikt Peetz | |
| 2025-07-29 | {modules,test}/jitsi-meet: Init | Benedikt Peetz | |
| 2025-07-13 | modules/sharkey: Drop pointless dependency on `network-online.target` | Benedikt Peetz | |
| Sharkey can start without network and therefore does not need this dependency. | |||
| 2025-07-13 | {modules,pkgs}/sharkey: Use the sharkey package and module from nixpkgs | Benedikt Peetz | |
| Sharkey was package in nixpkgs. | |||
| 2025-07-06 | modules/users: Apply new formatting | Benedikt Peetz | |
| 2025-06-23 | modules/rust-motd: Add new `cg_stats` and `load_avg` sections | Benedikt Peetz | |
| 2025-06-23 | modules/rust-motd: Use correct name for `fail_2_ban` section | Benedikt Peetz | |
| This was change in one of the last releases. | |||
| 2025-06-23 | modules/rust-motd: Remove pointless ssl certificate section | Benedikt Peetz | |
| The certificates are auto-renewed. As such, we don't need to know, when they expire. | |||
| 2025-06-23 | modules/rust-motd: Generate the banner ahead of time | Benedikt Peetz | |
| 2025-06-23 | modules/users: change sils sshkey | Silas Schöffel | |
| My nitrokey ceased its cooperation with my setup :( | |||
| 2025-06-07 | modules/redlib: Remove old `libreddit` alias | Benedikt Peetz | |
| 2025-06-07 | modules/git-back: Init with the out-of-tree back | Benedikt Peetz | |
| 2025-06-06 | pkgs/stalwart-mail: Update to nixos 25.05 | Benedikt Peetz | |
| Now the stalwart-mail package is by default free. As such, we could drop the respective patches. | |||
| 2025-05-05 | modules/atuin-sync: Init | Benedikt Peetz | |
| 2025-05-04 | modules/matrix: Provide postgresql with a correct sql statement | Benedikt Peetz | |
| 2025-05-04 | modules/nextcloud: add calendar, contacts, tasks apps | Silas Schöffel | |
| 2025-04-28 | pkgs/taskchampion-sync: Put the sync server behind a ngnix proxy | Benedikt Peetz | |
| I realized, that the new taskchampion-sync-server uses a http api (instead of the custom protocol of taskserver). As such, we obviously want to put it behind a ngnix reverse proxy. | |||
| 2025-04-25 | modules/sharkey: Add required `@chown` syscall group to allow list | Benedikt Peetz | |
| The `~@priviledged` needed to go, as `@chown` is part of this group. | |||
| 2025-04-24 | modules/sharkey: Ensure, that it can access the host's CPUs | Benedikt Peetz | |
| This is, for some reason, needed for image uploads to sharkey. | |||
| 2025-04-24 | modules/system-info: Provide a nice warning message, if a port is not yet ↵ | Benedikt Peetz | |
| registered | |||
| 2025-04-24 | modules/matrix: Use the typed NixOS for user and db creation | Benedikt Peetz | |
| Note, that I have no way to test if this is actually going to work (no tests for matrix). But, I assume that it is not going to pose problems, as we are not migrating the db and these options won't remove state. | |||
| 2025-04-24 | modules/matrix: Group `vhack` attr keys together | Benedikt Peetz | |
| 2025-04-24 | modules/mastodon: Group `vhack` keys together | Benedikt Peetz | |
| 2025-04-23 | modules/taskchampion: Make its data directory owned by taskchampion user | Benedikt Peetz | |
| 2025-04-23 | modules/stalwart-mail: Add recommended proxy settings for stalwarts-proxy | Benedikt Peetz | |
| This includes setting things, like setting the `X-Forwarded-For` header. | |||
| 2025-04-23 | modules/constants: Also add a user to each group, so that duplicated gids ↵ | Benedikt Peetz | |
| are avoided | |||
| 2025-04-23 | modules/stalwart-mail: Don't restart the systemd service | Benedikt Peetz | |
| Restarting might be useful, if stalwart is actually _running_ in prod, but currently the constant restart makes it very difficult to debug (or even stop) the service. | |||
| 2025-04-23 | modules/stalwart-mail: Enable the http self-service interface | Benedikt Peetz | |
 |
index : nixos-server | |
| nixos-config for vhack.eu servers https://vhack.eu | vhack.eu |
| aboutsummaryrefslogtreecommitdiffstats |