| Commit message (Collapse) | Author | ||
|---|---|---|---|
| 2025-06-07 | modules/redlib: Remove old `libreddit` alias | Benedikt Peetz | |
| 2025-06-07 | modules/git-back: Init with the out-of-tree back | Benedikt Peetz | |
| 2025-06-06 | pkgs/stalwart-mail: Update to nixos 25.05 | Benedikt Peetz | |
| Now the stalwart-mail package is by default free. As such, we could drop the respective patches. | |||
| 2025-05-05 | modules/atuin-sync: Init | Benedikt Peetz | |
| 2025-05-04 | modules/matrix: Provide postgresql with a correct sql statement | Benedikt Peetz | |
| 2025-05-04 | modules/nextcloud: add calendar, contacts, tasks apps | Silas Schöffel | |
| 2025-04-28 | pkgs/taskchampion-sync: Put the sync server behind a ngnix proxy | Benedikt Peetz | |
| I realized, that the new taskchampion-sync-server uses a http api (instead of the custom protocol of taskserver). As such, we obviously want to put it behind a ngnix reverse proxy. | |||
| 2025-04-25 | modules/sharkey: Add required `@chown` syscall group to allow list | Benedikt Peetz | |
| The `~@priviledged` needed to go, as `@chown` is part of this group. | |||
| 2025-04-24 | modules/sharkey: Ensure, that it can access the host's CPUs | Benedikt Peetz | |
| This is, for some reason, needed for image uploads to sharkey. | |||
| 2025-04-24 | modules/system-info: Provide a nice warning message, if a port is not yet ↵ | Benedikt Peetz | |
| registered | |||
| 2025-04-24 | modules/matrix: Use the typed NixOS for user and db creation | Benedikt Peetz | |
| Note, that I have no way to test if this is actually going to work (no tests for matrix). But, I assume that it is not going to pose problems, as we are not migrating the db and these options won't remove state. | |||
| 2025-04-24 | modules/matrix: Group `vhack` attr keys together | Benedikt Peetz | |
| 2025-04-24 | modules/mastodon: Group `vhack` keys together | Benedikt Peetz | |
| 2025-04-23 | modules/taskchampion: Make its data directory owned by taskchampion user | Benedikt Peetz | |
| 2025-04-23 | modules/stalwart-mail: Add recommended proxy settings for stalwarts-proxy | Benedikt Peetz | |
| This includes setting things, like setting the `X-Forwarded-For` header. | |||
| 2025-04-23 | modules/constants: Also add a user to each group, so that duplicated gids ↵ | Benedikt Peetz | |
| are avoided | |||
| 2025-04-23 | modules/stalwart-mail: Don't restart the systemd service | Benedikt Peetz | |
| Restarting might be useful, if stalwart is actually _running_ in prod, but currently the constant restart makes it very difficult to debug (or even stop) the service. | |||
| 2025-04-23 | modules/stalwart-mail: Enable the http self-service interface | Benedikt Peetz | |
| 2025-04-23 | modules/nginx: Set the "acme" group as group of the "acme" user | Benedikt Peetz | |
| For some reason, this is not done already. Setting this prevents an assertion being thrown, that the "acme" user does not have a group. | |||
| 2025-04-23 | modules/stalwart-mail: Allow both nginx and stalwart-mail access to the cert | Benedikt Peetz | |
| This is needed for the http challenge (and for the potential to use nginx as a proxy in the future.) | |||
| 2025-04-23 | modules/stalwart-mail: Explicitly list out valid password hashes | Benedikt Peetz | |
| If a password hash does not match stalwart's know ones, it will just treat it as plaintext. This is obviously very bad, and should be avoided. | |||
| 2025-04-23 | modules/stalwart-mail: Make `cfg.principals` nullable | Benedikt Peetz | |
| This makes it possible to use the internal storage | |||
| 2025-04-23 | modules/stalwart-mail: Use correct group name for `redis-stalwart-mail` | Benedikt Peetz | |
| 2025-04-22 | modules/sharkey: Init | Benedikt Peetz | |
| 2025-04-11 | modules/system-info: Register taskchampion port | Benedikt Peetz | |
| 2025-04-11 | modules/taskchampion-sync: Persist data directory | Benedikt Peetz | |
| 2025-04-11 | modules/taskchampion-sync: Add {u,g}ids to {group,user} | Benedikt Peetz | |
| 2025-04-11 | {modules,test}/taskchampion-sync: Init | Benedikt Peetz | |
| 2025-04-07 | nextcloud: init on server2 | Silas Schöffel | |
| 2025-03-30 | {hosts/server2,modules/mail}: Re-active the old mail server | Benedikt Peetz | |
| Running two mail-servers on one system is a total /mess/. Both try to bind to the same ports, the old stack consists of **5** different systemd services whilst stalwart-mail's systemd service simply refuses to stop, etc. I'm confident that it can work, but it would probably be best to deploy the new mail-server on server3. | |||
| 2025-03-30 | modules/mail: Avoid changing the `virtualMail` user uid | Benedikt Peetz | |
| We would need to set the `vmailUID` option to this value and even then some parts of SNM would still hardcode the default of 5000. Considering that we are in the process of phasing out SNM, this does not seem to be a worthwhile endeavour. | |||
| 2025-03-30 | modules/mail: Actually set the uid/gid of the virtualMail user | Benedikt Peetz | |
| 2025-03-29 | modules/stalwart-mail: Assign uids and gids to the stalwart users | Benedikt Peetz | |
| 2025-03-29 | modules/constants: Enforce the 0 to 400 limit | Benedikt Peetz | |
| 2025-03-29 | modules/constants: Correctly assign each uid so that none is greater 400 | Benedikt Peetz | |
| The uid ranges from 400 upwards are reserved for things that allocate them dynamic during runtime (like systemd). Our users would than get clobbered, thus we avoid that range. BREAKING CHANGE: Well, we'll need to change all uid of the files owned by the respective users. | |||
| 2025-03-29 | modules/constants: Dry gid definitions by inheriting the uids | Benedikt Peetz | |
| 2025-03-29 | hosts/server2: Setup stalwalt-mail on mail.vhack.eu for soispha@vhack.eu | Benedikt Peetz | |
| We need to actually test stalwart out in the real world, because the test can never actually capture all the weird things people do with their mail setup. Refs: #6ea08aa | |||
| 2025-03-10 | modules/system-info: Include port 53 (dns) in port -> name mappings | Benedikt Peetz | |
| 2025-03-09 | {modules/system-info,scripts/system_info}: Init | Benedikt Peetz | |
| This collects relevant information for each host in an informative markdown file. An example (generated via `./scripts/system_info.sh`): # server2 ## Virtual Hosts etebase.vhack.eu: dav.vhack.eu gallery.s-schoeffel.de git.foss-syndicate.org invidious-router.vhack.eu: video.fosswelt.org invidious-router.sils.li issues.foss-syndicate.org libreddit.vhack.eu redlib.vhack.eu source.foss-syndicate.org source.vhack.eu ## Open ports TCP 22: ssh TCP 25: mail-smtp TCP 80: http TCP 443: https TCP 465: mail-smtp-tls TCP 993: mail-imap-tls TCP 995: mail-pop3-tls # server3 ## Virtual Hosts b-peetz.de mastodon.vhack.eu matrix.vhack.eu miniflux.foss-syndicate.org: rss.foss-syndicate.org rss.vhack.eu miniflux.vhack.eu openpgpkey.b-peetz.de openpgpkey.s-schoeffel.de openpgpkey.sils.li openpgpkey.vhack.eu peertube.vhack.eu trinitrix.vhack.eu vhack.eu ## Open ports TCP 22: ssh TCP 80: http TCP 443: https TCP 64738: ??? UDP 64738: ??? | |||
| 2025-03-09 | {modules,tests}/back: Update to deal with newest back | Benedikt Peetz | |
| 2025-03-09 | modules/stalwart-mail: Remove now unneeded `allowInsecureSmtp` option | Benedikt Peetz | |
| 2025-03-09 | modules/stalwart-mail-free: Remove all `security` dependent checks if it's null | Benedikt Peetz | |
| 2025-03-09 | modules/stalwart-mail: Capitalize default mailboxes | Benedikt Peetz | |
| This seems to be somewhat of a standart. | |||
| 2025-03-09 | modules/stalwart-mail: Also listen on :25 without SSL but with STARTTLS | Benedikt Peetz | |
| This is important, so that other MTA can send us mail. | |||
| 2025-03-09 | modules/stalwart-mail: Set a default value for `principals` | Benedikt Peetz | |
| 2025-03-09 | modules/stalwart-mail: Include full systemd service and set correct dependencies | Benedikt Peetz | |
| This also starts `nginx` so that we can complete http-01 acme challenges. | |||
| 2025-03-09 | modules/stalwart-mail: Select DKIM keys per-domain | Benedikt Peetz | |
| 2025-03-09 | modules/stalwart-mail: Avoid hardcoding `vhack.eu` email address | Benedikt Peetz | |
| 2025-03-09 | modules/dns: Add service dependencies | Benedikt Peetz | |
| 2025-03-09 | modules/dns: Set a reasonable verbosity level | Benedikt Peetz | |
| The default is way too quiet. | |||
 |
index : nixos-server | |
| nixos-config for vhack.eu servers https://vhack.eu | vhack.eu |
| aboutsummaryrefslogtreecommitdiffstats |